@imgly/codesign-mcp 0.1.6 → 0.1.8

package/dist/config.js

@@ -87,7 +87,7 @@ export function loadConfig(env = process.env) {
         cesdkLicense,
         buildId: env.IMGLY_BUILD_ID ?? 'dev',
         port: intEnv(env, 'PORT', 8080),
-        maxEngines: intEnv(env, 'IMGLY_MAX_ENGINES', 8),
+        maxHttpEngines: intEnv(env, 'IMGLY_MAX_HTTP_ENGINES', 8),
         idleTimeoutMs: intEnv(env, 'IMGLY_SESSION_IDLE_TIMEOUT', 900) * 1000,
         logLevel: env.IMGLY_LOG_LEVEL ?? 'info',
         workspace,
@@ -100,6 +100,17 @@ export function loadConfig(env = process.env) {
         cfg.publicBaseUrl = env.IMGLY_PUBLIC_BASE_URL.replace(/\/+$/, '');
     return cfg;
 }
+/**
+ * Machine-wide cap on concurrently booting CE.SDK engines for the LOCAL stdio
+ * transport (CODE-59). Distinct from IMGLY_MAX_HTTP_ENGINES (per HTTP server
+ * process): different scope, different default, and different at-capacity
+ * behavior (stdio fails fast; HTTP evicts/queues). Floored at 1 so a stray 0
+ * cannot brick the server. Read here (not in loadConfig) because the stdio path
+ * never calls loadConfig.
+ */
+export function resolveMaxStdioEngines(env = process.env) {
+    return Math.max(1, Math.floor(intEnv(env, 'IMGLY_MAX_STDIO_ENGINES', 4)));
+}
 /**
  * Local diagnostics file logging is ON by default so evidence exists before a
  * user knows they hit a bug. Disable with IMGLY_DIAGNOSTICS_FILE=false (or 0).
@@ -107,6 +118,14 @@ export function loadConfig(env = process.env) {
 export function diagnosticsFileEnabled(env = process.env) {
     return boolEnv(env, 'IMGLY_DIAGNOSTICS_FILE', true);
 }
+/**
+ * The diagnostics TOOL + served viewer + prompt (CODE-62). On by default;
+ * independent of IMGLY_DIAGNOSTICS_FILE (which governs whether anything is
+ * logged). Disable with IMGLY_DIAGNOSTICS_TOOL=false (or 0).
+ */
+export function diagnosticsToolEnabled(env = process.env) {
+    return boolEnv(env, 'IMGLY_DIAGNOSTICS_TOOL', true);
+}
 /**
  * Where diagnostics NDJSON is written. Explicit IMGLY_DIAGNOSTICS_DIR wins;
  * otherwise <workspaceRoot>/logs, where workspaceRoot mirrors the stdio default

package/dist/config.js.map

@@ -1 +1 @@
-{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,EAAE;AACF,6EAA6E;AAC7E,wEAAwE;AACxE,8EAA8E;AAC9E,6EAA6E;AAC7E,4CAA4C;AAC5C,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,IAAI,QAAQ,EAAE,MAAM,WAAW,CAAC;AAI7C;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAC3B,IAAY,EACZ,MAAW,OAAO,CAAC,GAAG;IAEtB,MAAM,QAAQ,GAAG,GAAG,CAAC,GAAG,IAAI,OAAO,CAAC,CAAC;IACrC,IAAI,QAAQ;QAAE,OAAO,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;IAC3D,OAAO,GAAG,CAAC,IAAI,CAAC,CAAC;AACnB,CAAC;AAqDD,SAAS,UAAU,CAAC,GAAQ,EAAE,IAAY;IACxC,MAAM,CAAC,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC;IACpB,IAAI,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,WAAW,IAAI,cAAc,CAAC,CAAC;IACvD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,MAAM,CAAC,GAAQ,EAAE,IAAY,EAAE,QAAgB;IACtD,MAAM,GAAG,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC;IACtB,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,QAAQ,CAAC;IACvC,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IACtB,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,WAAW,IAAI,mBAAmB,CAAC,CAAC;IAC7E,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,OAAO,CAAC,GAAQ,EAAE,IAAY,EAAE,QAAiB;IACxD,MAAM,GAAG,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC;IACtB,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,QAAQ,CAAC;IACvC,OAAO,GAAG,KAAK,MAAM,IAAI,GAAG,KAAK,GAAG,CAAC;AACvC,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,MAAW,OAAO,CAAC,GAAG;IAC/C,MAAM,YAAY,GAAG,aAAa,CAAC,qBAAqB,EAAE,GAAG,CAAC,CAAC;IAC/D,IAAI,CAAC,YAAY;QAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;IAE9E,MAAM,IAAI,GAAG,CAAC,GAAG,CAAC,oBAAoB,IAAI,QAAQ,CAAkB,CAAC;IACrE,IAAI,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,QAAQ;QAC9D,MAAM,IAAI,KAAK,CACb,oEAAoE,IAAI,IAAI,CAC7E,CAAC;IAEJ,MAAM,IAAI,GAAyB;QACjC,IAAI;QACJ,MAAM,EAAE,GAAG,CAAC,2BAA2B,IAAI,gBAAgB;KAC5D,CAAC;IACF,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;QACtB,IAAI,CAAC,gBAAgB,GAAG,UAAU,CAAC,GAAG,EAAE,oBAAoB,CAAC,CAAC;IAChE,CAAC;IAED,MAAM,OAAO,GAAG,CAAC,GAAG,CAAC,uBAAuB,IAAI,OAAO,CAAqB,CAAC;IAC7E,IAAI,OAAO,KAAK,OAAO,IAAI,OAAO,KAAK,IAAI;QACzC,MAAM,IAAI,KAAK,CACb,0DAA0D,OAAO,IAAI,CACtE,CAAC;IAEJ,IAAI,SAA0B,CAAC;IAC/B,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QACrB,MAAM,EAAE,GAAa;YACnB,MAAM,EAAE,UAAU,CAAC,GAAG,EAAE,2BAA2B,CAAC;YACpD,MAAM,EAAE,GAAG,CAAC,yBAAyB,IAAI,MAAM;SAChD,CAAC;QACF,IAAI,GAAG,CAAC,2BAA2B;YACjC,EAAE,CAAC,QAAQ,GAAG,GAAG,CAAC,2BAA2B,CAAC;QAChD,wEAAwE;QACxE,MAAM,WAAW,GAAG,aAAa,CAAC,kCAAkC,EAAE,GAAG,CAAC,CAAC;QAC3E,MAAM,eAAe,GAAG,aAAa,CACnC,sCAAsC,EACtC,GAAG,CACJ,CAAC;QACF,IAAI,WAAW;YAAE,EAAE,CAAC,WAAW,GAAG,WAAW,CAAC;QAC9C,IAAI,eAAe;YAAE,EAAE,CAAC,eAAe,GAAG,eAAe,CAAC;QAC1D,SAAS,GAAG,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;IAC9B,CAAC;SAAM,CAAC;QACN,SAAS,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,CAAC,mBAAmB,IAAI,OAAO,EAAE,CAAC;IACnE,CAAC;IAED,MAAM,OAAO,GAA4B,EAAE,CAAC;IAC5C,MAAM,UAAU,GAAG,aAAa,CAAC,uBAAuB,EAAE,GAAG,CAAC,CAAC;IAC/D,IAAI,UAAU;QAAE,OAAO,CAAC,MAAM,GAAG,UAAU,CAAC;IAC5C,IAAI,GAAG,CAAC,sBAAsB;QAAE,OAAO,CAAC,OAAO,GAAG,GAAG,CAAC,sBAAsB,CAAC;IAE7E,MAAM,GAAG,GAAiB;QACxB,YAAY;QACZ,OAAO,EAAE,GAAG,CAAC,cAAc,IAAI,KAAK;QACpC,IAAI,EAAE,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC;QAC/B,UAAU,EAAE,MAAM,CAAC,GAAG,EAAE,mBAAmB,EAAE,CAAC,CAAC;QAC/C,aAAa,EAAE,MAAM,CAAC,GAAG,EAAE,4BAA4B,EAAE,GAAG,CAAC,GAAG,IAAI;QACpE,QAAQ,EAAE,GAAG,CAAC,eAAe,IAAI,MAAM;QACvC,SAAS;QACT,IAAI;QACJ,OAAO;KACR,CAAC;IACF,IAAI,GAAG,CAAC,yBAAyB;QAC/B,GAAG,CAAC,iBAAiB,GAAG,GAAG,CAAC,yBAAyB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CACzE,CAAC,CAAC,IAAI,EAAE,CACT,CAAC;IACJ,IAAI,GAAG,CAAC,qBAAqB;QAC3B,GAAG,CAAC,aAAa,GAAG,GAAG,CAAC,qBAAqB,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACpE,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,sBAAsB,CAAC,MAAW,OAAO,CAAC,GAAG;IAC3D,OAAO,OAAO,CAAC,GAAG,EAAE,wBAAwB,EAAE,IAAI,CAAC,CAAC;AACtD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,qBAAqB,CAAC,MAAW,OAAO,CAAC,GAAG;IAC1D,IAAI,GAAG,CAAC,qBAAqB;QAAE,OAAO,GAAG,CAAC,qBAAqB,CAAC;IAChE,MAAM,aAAa,GACjB,GAAG,CAAC,kBAAkB,IAAI,QAAQ,CAAC,OAAO,EAAE,EAAE,WAAW,EAAE,WAAW,CAAC,CAAC;IAC1E,OAAO,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC;AACzC,CAAC","sourcesContent":["// packages/codesign-mcp/src/config.ts\n//\n// The IMGLY_* configuration contract (spec §9.2). One image, switched purely\n// by runtime env. Non-secret knobs are plain env vars; the four secrets\n// (license, gateway key, two S3 keys) also accept the `*_FILE` convention via\n// resolveSecret — the de-facto Docker/K8s secret standard. No secret is ever\n// logged or written; loadConfig only reads.\nimport { readFileSync } from 'node:fs';\nimport { homedir } from 'node:os';\nimport { join as joinPath } from 'node:path';\n\nexport type Env = Record<string, string | undefined>;\n\n/**\n * Resolve a secret: prefer `<NAME>_FILE` (trimmed file contents — secret files\n * end in a newline) and fall back to the plain `<NAME>` env var. A superset of\n * \"just env vars\": production mounts a file, local dev passes the raw value.\n */\nexport function resolveSecret(\n  name: string,\n  env: Env = process.env\n): string | undefined {\n  const filePath = env[`${name}_FILE`];\n  if (filePath) return readFileSync(filePath, 'utf8').trim();\n  return env[name];\n}\n\nexport type WorkspaceMode = 'header' | 'session' | 'single';\nexport type WorkspaceBackend = 'local' | 's3';\n\nexport interface S3Config {\n  bucket: string;\n  endpoint?: string;\n  region: string;\n  accessKeyId?: string;\n  secretAccessKey?: string;\n}\n\nexport interface WorkspaceConfig {\n  backend: WorkspaceBackend;\n  /** local backend only */\n  dir?: string;\n  /** s3 backend only */\n  s3?: S3Config;\n}\n\nexport interface ServerConfig {\n  cesdkLicense: string;\n  /**\n   * Build identity, surfaced as the MCP `serverInfo.version`. Lets a client\n   * (e.g. the deploy smoketest) detect a stale, not-yet-rolled-out container:\n   * the deploy injects the git SHA, the smoketest asserts the running server\n   * reports it. Default `'dev'` for local runs.\n   */\n  buildId: string;\n  port: number;\n  /** Max concurrent engines/sessions — the RAM cap (spec §9.2). */\n  maxEngines: number;\n  idleTimeoutMs: number;\n  logLevel: string;\n  workspace: WorkspaceConfig;\n  auth: {\n    mode: WorkspaceMode;\n    /** header carrying the trusted workspaceId (header mode). */\n    header: string;\n    /** fixed workspaceId (single mode). */\n    fixedWorkspaceId?: string;\n  };\n  gateway: { apiKey?: string; baseUrl?: string };\n  viewerCorsOrigins?: string[];\n  /**\n   * Public origin of this deployment (e.g. the Cloudflare Worker URL),\n   * no trailing slash. Used to build viewer URLs the MCP client's human can\n   * actually open. Absent → loopback URLs (local dev).\n   */\n  publicBaseUrl?: string;\n}\n\nfunction requireEnv(env: Env, name: string): string {\n  const v = env[name];\n  if (!v) throw new Error(`config: ${name} is required`);\n  return v;\n}\n\nfunction intEnv(env: Env, name: string, fallback: number): number {\n  const raw = env[name];\n  if (raw === undefined) return fallback;\n  const n = Number(raw);\n  if (!Number.isFinite(n)) throw new Error(`config: ${name} must be a number`);\n  return n;\n}\n\nfunction boolEnv(env: Env, name: string, fallback: boolean): boolean {\n  const raw = env[name];\n  if (raw === undefined) return fallback;\n  return raw === 'true' || raw === '1';\n}\n\nexport function loadConfig(env: Env = process.env): ServerConfig {\n  const cesdkLicense = resolveSecret('IMGLY_CESDK_LICENSE', env);\n  if (!cesdkLicense) throw new Error('config: IMGLY_CESDK_LICENSE is required');\n\n  const mode = (env.IMGLY_WORKSPACE_MODE ?? 'header') as WorkspaceMode;\n  if (mode !== 'header' && mode !== 'session' && mode !== 'single')\n    throw new Error(\n      `config: IMGLY_WORKSPACE_MODE must be header|session|single (got \"${mode}\")`\n    );\n\n  const auth: ServerConfig['auth'] = {\n    mode,\n    header: env.IMGLY_AUTH_WORKSPACE_HEADER ?? 'X-Workspace-Id'\n  };\n  if (mode === 'single') {\n    auth.fixedWorkspaceId = requireEnv(env, 'IMGLY_WORKSPACE_ID');\n  }\n\n  const backend = (env.IMGLY_WORKSPACE_BACKEND ?? 'local') as WorkspaceBackend;\n  if (backend !== 'local' && backend !== 's3')\n    throw new Error(\n      `config: IMGLY_WORKSPACE_BACKEND must be local|s3 (got \"${backend}\")`\n    );\n\n  let workspace: WorkspaceConfig;\n  if (backend === 's3') {\n    const s3: S3Config = {\n      bucket: requireEnv(env, 'IMGLY_WORKSPACE_S3_BUCKET'),\n      region: env.IMGLY_WORKSPACE_S3_REGION ?? 'auto'\n    };\n    if (env.IMGLY_WORKSPACE_S3_ENDPOINT)\n      s3.endpoint = env.IMGLY_WORKSPACE_S3_ENDPOINT;\n    // Keys are optional: absent -> AWS default credential chain (IAM role).\n    const accessKeyId = resolveSecret('IMGLY_WORKSPACE_S3_ACCESS_KEY_ID', env);\n    const secretAccessKey = resolveSecret(\n      'IMGLY_WORKSPACE_S3_SECRET_ACCESS_KEY',\n      env\n    );\n    if (accessKeyId) s3.accessKeyId = accessKeyId;\n    if (secretAccessKey) s3.secretAccessKey = secretAccessKey;\n    workspace = { backend, s3 };\n  } else {\n    workspace = { backend, dir: env.IMGLY_WORKSPACE_DIR ?? '/data' };\n  }\n\n  const gateway: ServerConfig['gateway'] = {};\n  const gatewayKey = resolveSecret('IMGLY_GATEWAY_API_KEY', env);\n  if (gatewayKey) gateway.apiKey = gatewayKey;\n  if (env.IMGLY_GATEWAY_BASE_URL) gateway.baseUrl = env.IMGLY_GATEWAY_BASE_URL;\n\n  const cfg: ServerConfig = {\n    cesdkLicense,\n    buildId: env.IMGLY_BUILD_ID ?? 'dev',\n    port: intEnv(env, 'PORT', 8080),\n    maxEngines: intEnv(env, 'IMGLY_MAX_ENGINES', 8),\n    idleTimeoutMs: intEnv(env, 'IMGLY_SESSION_IDLE_TIMEOUT', 900) * 1000,\n    logLevel: env.IMGLY_LOG_LEVEL ?? 'info',\n    workspace,\n    auth,\n    gateway\n  };\n  if (env.IMGLY_VIEWER_CORS_ORIGINS)\n    cfg.viewerCorsOrigins = env.IMGLY_VIEWER_CORS_ORIGINS.split(',').map((s) =>\n      s.trim()\n    );\n  if (env.IMGLY_PUBLIC_BASE_URL)\n    cfg.publicBaseUrl = env.IMGLY_PUBLIC_BASE_URL.replace(/\\/+$/, '');\n  return cfg;\n}\n\n/**\n * Local diagnostics file logging is ON by default so evidence exists before a\n * user knows they hit a bug. Disable with IMGLY_DIAGNOSTICS_FILE=false (or 0).\n */\nexport function diagnosticsFileEnabled(env: Env = process.env): boolean {\n  return boolEnv(env, 'IMGLY_DIAGNOSTICS_FILE', true);\n}\n\n/**\n * Where diagnostics NDJSON is written. Explicit IMGLY_DIAGNOSTICS_DIR wins;\n * otherwise <workspaceRoot>/logs, where workspaceRoot mirrors the stdio default\n * ($CODESIGN_WORKSPACE ?? ~/.codesign/workspace).\n */\nexport function resolveDiagnosticsDir(env: Env = process.env): string {\n  if (env.IMGLY_DIAGNOSTICS_DIR) return env.IMGLY_DIAGNOSTICS_DIR;\n  const workspaceRoot =\n    env.CODESIGN_WORKSPACE ?? joinPath(homedir(), '.codesign', 'workspace');\n  return joinPath(workspaceRoot, 'logs');\n}\n"]}
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,EAAE;AACF,6EAA6E;AAC7E,wEAAwE;AACxE,8EAA8E;AAC9E,6EAA6E;AAC7E,4CAA4C;AAC5C,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,IAAI,QAAQ,EAAE,MAAM,WAAW,CAAC;AAI7C;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAC3B,IAAY,EACZ,MAAW,OAAO,CAAC,GAAG;IAEtB,MAAM,QAAQ,GAAG,GAAG,CAAC,GAAG,IAAI,OAAO,CAAC,CAAC;IACrC,IAAI,QAAQ;QAAE,OAAO,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;IAC3D,OAAO,GAAG,CAAC,IAAI,CAAC,CAAC;AACnB,CAAC;AAqDD,SAAS,UAAU,CAAC,GAAQ,EAAE,IAAY;IACxC,MAAM,CAAC,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC;IACpB,IAAI,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,WAAW,IAAI,cAAc,CAAC,CAAC;IACvD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,MAAM,CAAC,GAAQ,EAAE,IAAY,EAAE,QAAgB;IACtD,MAAM,GAAG,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC;IACtB,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,QAAQ,CAAC;IACvC,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IACtB,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,WAAW,IAAI,mBAAmB,CAAC,CAAC;IAC7E,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,OAAO,CAAC,GAAQ,EAAE,IAAY,EAAE,QAAiB;IACxD,MAAM,GAAG,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC;IACtB,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,QAAQ,CAAC;IACvC,OAAO,GAAG,KAAK,MAAM,IAAI,GAAG,KAAK,GAAG,CAAC;AACvC,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,MAAW,OAAO,CAAC,GAAG;IAC/C,MAAM,YAAY,GAAG,aAAa,CAAC,qBAAqB,EAAE,GAAG,CAAC,CAAC;IAC/D,IAAI,CAAC,YAAY;QAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;IAE9E,MAAM,IAAI,GAAG,CAAC,GAAG,CAAC,oBAAoB,IAAI,QAAQ,CAAkB,CAAC;IACrE,IAAI,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,QAAQ;QAC9D,MAAM,IAAI,KAAK,CACb,oEAAoE,IAAI,IAAI,CAC7E,CAAC;IAEJ,MAAM,IAAI,GAAyB;QACjC,IAAI;QACJ,MAAM,EAAE,GAAG,CAAC,2BAA2B,IAAI,gBAAgB;KAC5D,CAAC;IACF,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;QACtB,IAAI,CAAC,gBAAgB,GAAG,UAAU,CAAC,GAAG,EAAE,oBAAoB,CAAC,CAAC;IAChE,CAAC;IAED,MAAM,OAAO,GAAG,CAAC,GAAG,CAAC,uBAAuB,IAAI,OAAO,CAAqB,CAAC;IAC7E,IAAI,OAAO,KAAK,OAAO,IAAI,OAAO,KAAK,IAAI;QACzC,MAAM,IAAI,KAAK,CACb,0DAA0D,OAAO,IAAI,CACtE,CAAC;IAEJ,IAAI,SAA0B,CAAC;IAC/B,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QACrB,MAAM,EAAE,GAAa;YACnB,MAAM,EAAE,UAAU,CAAC,GAAG,EAAE,2BAA2B,CAAC;YACpD,MAAM,EAAE,GAAG,CAAC,yBAAyB,IAAI,MAAM;SAChD,CAAC;QACF,IAAI,GAAG,CAAC,2BAA2B;YACjC,EAAE,CAAC,QAAQ,GAAG,GAAG,CAAC,2BAA2B,CAAC;QAChD,wEAAwE;QACxE,MAAM,WAAW,GAAG,aAAa,CAAC,kCAAkC,EAAE,GAAG,CAAC,CAAC;QAC3E,MAAM,eAAe,GAAG,aAAa,CACnC,sCAAsC,EACtC,GAAG,CACJ,CAAC;QACF,IAAI,WAAW;YAAE,EAAE,CAAC,WAAW,GAAG,WAAW,CAAC;QAC9C,IAAI,eAAe;YAAE,EAAE,CAAC,eAAe,GAAG,eAAe,CAAC;QAC1D,SAAS,GAAG,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;IAC9B,CAAC;SAAM,CAAC;QACN,SAAS,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,CAAC,mBAAmB,IAAI,OAAO,EAAE,CAAC;IACnE,CAAC;IAED,MAAM,OAAO,GAA4B,EAAE,CAAC;IAC5C,MAAM,UAAU,GAAG,aAAa,CAAC,uBAAuB,EAAE,GAAG,CAAC,CAAC;IAC/D,IAAI,UAAU;QAAE,OAAO,CAAC,MAAM,GAAG,UAAU,CAAC;IAC5C,IAAI,GAAG,CAAC,sBAAsB;QAAE,OAAO,CAAC,OAAO,GAAG,GAAG,CAAC,sBAAsB,CAAC;IAE7E,MAAM,GAAG,GAAiB;QACxB,YAAY;QACZ,OAAO,EAAE,GAAG,CAAC,cAAc,IAAI,KAAK;QACpC,IAAI,EAAE,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC;QAC/B,cAAc,EAAE,MAAM,CAAC,GAAG,EAAE,wBAAwB,EAAE,CAAC,CAAC;QACxD,aAAa,EAAE,MAAM,CAAC,GAAG,EAAE,4BAA4B,EAAE,GAAG,CAAC,GAAG,IAAI;QACpE,QAAQ,EAAE,GAAG,CAAC,eAAe,IAAI,MAAM;QACvC,SAAS;QACT,IAAI;QACJ,OAAO;KACR,CAAC;IACF,IAAI,GAAG,CAAC,yBAAyB;QAC/B,GAAG,CAAC,iBAAiB,GAAG,GAAG,CAAC,yBAAyB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CACzE,CAAC,CAAC,IAAI,EAAE,CACT,CAAC;IACJ,IAAI,GAAG,CAAC,qBAAqB;QAC3B,GAAG,CAAC,aAAa,GAAG,GAAG,CAAC,qBAAqB,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACpE,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,sBAAsB,CAAC,MAAW,OAAO,CAAC,GAAG;IAC3D,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,EAAE,yBAAyB,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;AAC5E,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,sBAAsB,CAAC,MAAW,OAAO,CAAC,GAAG;IAC3D,OAAO,OAAO,CAAC,GAAG,EAAE,wBAAwB,EAAE,IAAI,CAAC,CAAC;AACtD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,sBAAsB,CAAC,MAAW,OAAO,CAAC,GAAG;IAC3D,OAAO,OAAO,CAAC,GAAG,EAAE,wBAAwB,EAAE,IAAI,CAAC,CAAC;AACtD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,qBAAqB,CAAC,MAAW,OAAO,CAAC,GAAG;IAC1D,IAAI,GAAG,CAAC,qBAAqB;QAAE,OAAO,GAAG,CAAC,qBAAqB,CAAC;IAChE,MAAM,aAAa,GACjB,GAAG,CAAC,kBAAkB,IAAI,QAAQ,CAAC,OAAO,EAAE,EAAE,WAAW,EAAE,WAAW,CAAC,CAAC;IAC1E,OAAO,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC;AACzC,CAAC","sourcesContent":["// packages/codesign-mcp/src/config.ts\n//\n// The IMGLY_* configuration contract (spec §9.2). One image, switched purely\n// by runtime env. Non-secret knobs are plain env vars; the four secrets\n// (license, gateway key, two S3 keys) also accept the `*_FILE` convention via\n// resolveSecret — the de-facto Docker/K8s secret standard. No secret is ever\n// logged or written; loadConfig only reads.\nimport { readFileSync } from 'node:fs';\nimport { homedir } from 'node:os';\nimport { join as joinPath } from 'node:path';\n\nexport type Env = Record<string, string | undefined>;\n\n/**\n * Resolve a secret: prefer `<NAME>_FILE` (trimmed file contents — secret files\n * end in a newline) and fall back to the plain `<NAME>` env var. A superset of\n * \"just env vars\": production mounts a file, local dev passes the raw value.\n */\nexport function resolveSecret(\n  name: string,\n  env: Env = process.env\n): string | undefined {\n  const filePath = env[`${name}_FILE`];\n  if (filePath) return readFileSync(filePath, 'utf8').trim();\n  return env[name];\n}\n\nexport type WorkspaceMode = 'header' | 'session' | 'single';\nexport type WorkspaceBackend = 'local' | 's3';\n\nexport interface S3Config {\n  bucket: string;\n  endpoint?: string;\n  region: string;\n  accessKeyId?: string;\n  secretAccessKey?: string;\n}\n\nexport interface WorkspaceConfig {\n  backend: WorkspaceBackend;\n  /** local backend only */\n  dir?: string;\n  /** s3 backend only */\n  s3?: S3Config;\n}\n\nexport interface ServerConfig {\n  cesdkLicense: string;\n  /**\n   * Build identity, surfaced as the MCP `serverInfo.version`. Lets a client\n   * (e.g. the deploy smoketest) detect a stale, not-yet-rolled-out container:\n   * the deploy injects the git SHA, the smoketest asserts the running server\n   * reports it. Default `'dev'` for local runs.\n   */\n  buildId: string;\n  port: number;\n  /** Max concurrent engines/sessions per HTTP server process — the RAM cap (spec §9.2). */\n  maxHttpEngines: number;\n  idleTimeoutMs: number;\n  logLevel: string;\n  workspace: WorkspaceConfig;\n  auth: {\n    mode: WorkspaceMode;\n    /** header carrying the trusted workspaceId (header mode). */\n    header: string;\n    /** fixed workspaceId (single mode). */\n    fixedWorkspaceId?: string;\n  };\n  gateway: { apiKey?: string; baseUrl?: string };\n  viewerCorsOrigins?: string[];\n  /**\n   * Public origin of this deployment (e.g. the Cloudflare Worker URL),\n   * no trailing slash. Used to build viewer URLs the MCP client's human can\n   * actually open. Absent → loopback URLs (local dev).\n   */\n  publicBaseUrl?: string;\n}\n\nfunction requireEnv(env: Env, name: string): string {\n  const v = env[name];\n  if (!v) throw new Error(`config: ${name} is required`);\n  return v;\n}\n\nfunction intEnv(env: Env, name: string, fallback: number): number {\n  const raw = env[name];\n  if (raw === undefined) return fallback;\n  const n = Number(raw);\n  if (!Number.isFinite(n)) throw new Error(`config: ${name} must be a number`);\n  return n;\n}\n\nfunction boolEnv(env: Env, name: string, fallback: boolean): boolean {\n  const raw = env[name];\n  if (raw === undefined) return fallback;\n  return raw === 'true' || raw === '1';\n}\n\nexport function loadConfig(env: Env = process.env): ServerConfig {\n  const cesdkLicense = resolveSecret('IMGLY_CESDK_LICENSE', env);\n  if (!cesdkLicense) throw new Error('config: IMGLY_CESDK_LICENSE is required');\n\n  const mode = (env.IMGLY_WORKSPACE_MODE ?? 'header') as WorkspaceMode;\n  if (mode !== 'header' && mode !== 'session' && mode !== 'single')\n    throw new Error(\n      `config: IMGLY_WORKSPACE_MODE must be header|session|single (got \"${mode}\")`\n    );\n\n  const auth: ServerConfig['auth'] = {\n    mode,\n    header: env.IMGLY_AUTH_WORKSPACE_HEADER ?? 'X-Workspace-Id'\n  };\n  if (mode === 'single') {\n    auth.fixedWorkspaceId = requireEnv(env, 'IMGLY_WORKSPACE_ID');\n  }\n\n  const backend = (env.IMGLY_WORKSPACE_BACKEND ?? 'local') as WorkspaceBackend;\n  if (backend !== 'local' && backend !== 's3')\n    throw new Error(\n      `config: IMGLY_WORKSPACE_BACKEND must be local|s3 (got \"${backend}\")`\n    );\n\n  let workspace: WorkspaceConfig;\n  if (backend === 's3') {\n    const s3: S3Config = {\n      bucket: requireEnv(env, 'IMGLY_WORKSPACE_S3_BUCKET'),\n      region: env.IMGLY_WORKSPACE_S3_REGION ?? 'auto'\n    };\n    if (env.IMGLY_WORKSPACE_S3_ENDPOINT)\n      s3.endpoint = env.IMGLY_WORKSPACE_S3_ENDPOINT;\n    // Keys are optional: absent -> AWS default credential chain (IAM role).\n    const accessKeyId = resolveSecret('IMGLY_WORKSPACE_S3_ACCESS_KEY_ID', env);\n    const secretAccessKey = resolveSecret(\n      'IMGLY_WORKSPACE_S3_SECRET_ACCESS_KEY',\n      env\n    );\n    if (accessKeyId) s3.accessKeyId = accessKeyId;\n    if (secretAccessKey) s3.secretAccessKey = secretAccessKey;\n    workspace = { backend, s3 };\n  } else {\n    workspace = { backend, dir: env.IMGLY_WORKSPACE_DIR ?? '/data' };\n  }\n\n  const gateway: ServerConfig['gateway'] = {};\n  const gatewayKey = resolveSecret('IMGLY_GATEWAY_API_KEY', env);\n  if (gatewayKey) gateway.apiKey = gatewayKey;\n  if (env.IMGLY_GATEWAY_BASE_URL) gateway.baseUrl = env.IMGLY_GATEWAY_BASE_URL;\n\n  const cfg: ServerConfig = {\n    cesdkLicense,\n    buildId: env.IMGLY_BUILD_ID ?? 'dev',\n    port: intEnv(env, 'PORT', 8080),\n    maxHttpEngines: intEnv(env, 'IMGLY_MAX_HTTP_ENGINES', 8),\n    idleTimeoutMs: intEnv(env, 'IMGLY_SESSION_IDLE_TIMEOUT', 900) * 1000,\n    logLevel: env.IMGLY_LOG_LEVEL ?? 'info',\n    workspace,\n    auth,\n    gateway\n  };\n  if (env.IMGLY_VIEWER_CORS_ORIGINS)\n    cfg.viewerCorsOrigins = env.IMGLY_VIEWER_CORS_ORIGINS.split(',').map((s) =>\n      s.trim()\n    );\n  if (env.IMGLY_PUBLIC_BASE_URL)\n    cfg.publicBaseUrl = env.IMGLY_PUBLIC_BASE_URL.replace(/\\/+$/, '');\n  return cfg;\n}\n\n/**\n * Machine-wide cap on concurrently booting CE.SDK engines for the LOCAL stdio\n * transport (CODE-59). Distinct from IMGLY_MAX_HTTP_ENGINES (per HTTP server\n * process): different scope, different default, and different at-capacity\n * behavior (stdio fails fast; HTTP evicts/queues). Floored at 1 so a stray 0\n * cannot brick the server. Read here (not in loadConfig) because the stdio path\n * never calls loadConfig.\n */\nexport function resolveMaxStdioEngines(env: Env = process.env): number {\n  return Math.max(1, Math.floor(intEnv(env, 'IMGLY_MAX_STDIO_ENGINES', 4)));\n}\n\n/**\n * Local diagnostics file logging is ON by default so evidence exists before a\n * user knows they hit a bug. Disable with IMGLY_DIAGNOSTICS_FILE=false (or 0).\n */\nexport function diagnosticsFileEnabled(env: Env = process.env): boolean {\n  return boolEnv(env, 'IMGLY_DIAGNOSTICS_FILE', true);\n}\n\n/**\n * The diagnostics TOOL + served viewer + prompt (CODE-62). On by default;\n * independent of IMGLY_DIAGNOSTICS_FILE (which governs whether anything is\n * logged). Disable with IMGLY_DIAGNOSTICS_TOOL=false (or 0).\n */\nexport function diagnosticsToolEnabled(env: Env = process.env): boolean {\n  return boolEnv(env, 'IMGLY_DIAGNOSTICS_TOOL', true);\n}\n\n/**\n * Where diagnostics NDJSON is written. Explicit IMGLY_DIAGNOSTICS_DIR wins;\n * otherwise <workspaceRoot>/logs, where workspaceRoot mirrors the stdio default\n * ($CODESIGN_WORKSPACE ?? ~/.codesign/workspace).\n */\nexport function resolveDiagnosticsDir(env: Env = process.env): string {\n  if (env.IMGLY_DIAGNOSTICS_DIR) return env.IMGLY_DIAGNOSTICS_DIR;\n  const workspaceRoot =\n    env.CODESIGN_WORKSPACE ?? joinPath(homedir(), '.codesign', 'workspace');\n  return joinPath(workspaceRoot, 'logs');\n}\n"]}

package/dist/diagnostics/bundle.d.ts

@@ -4,7 +4,10 @@ export interface BundleFile {
     bytes: Buffer;
 }
 export declare function collectBundleFiles(dir: string, meta: Record<string, unknown>): Promise<BundleFile[]>;
+/** Redact each COMPLETE line; drop an incomplete trailing line (mid-write). */
+export declare function scrubNdjson(raw: string): string;
 export declare function buildBundleMeta(env?: Env): Record<string, unknown>;
 export declare function runDiagnose(env?: Env): Promise<string>;
+export declare function packStoreZip(files: BundleFile[]): Buffer;
 export declare function writeStoreZip(files: BundleFile[], outPath: string): Promise<void>;
 //# sourceMappingURL=bundle.d.ts.map

package/dist/diagnostics/bundle.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"bundle.d.ts","sourceRoot":"","sources":["../../src/diagnostics/bundle.ts"],"names":[],"mappings":"AAYA,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,cAAc,CAAC;AAIxC,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;CACf;AAED,wBAAsB,kBAAkB,CACtC,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC5B,OAAO,CAAC,UAAU,EAAE,CAAC,CAgBvB;AAgBD,wBAAgB,eAAe,CAC7B,GAAG,GAAE,GAAiB,GACrB,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAkBzB;AAED,wBAAsB,WAAW,CAAC,GAAG,GAAE,GAAiB,GAAG,OAAO,CAAC,MAAM,CAAC,CAWzE;AAsBD,wBAAsB,aAAa,CACjC,KAAK,EAAE,UAAU,EAAE,EACnB,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,IAAI,CAAC,CA0Df"}
+{"version":3,"file":"bundle.d.ts","sourceRoot":"","sources":["../../src/diagnostics/bundle.ts"],"names":[],"mappings":"AAYA,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,cAAc,CAAC;AAIxC,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;CACf;AAED,wBAAsB,kBAAkB,CACtC,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC5B,OAAO,CAAC,UAAU,EAAE,CAAC,CAgBvB;AAED,+EAA+E;AAC/E,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAW/C;AAED,wBAAgB,eAAe,CAC7B,GAAG,GAAE,GAAiB,GACrB,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAkBzB;AAED,wBAAsB,WAAW,CAAC,GAAG,GAAE,GAAiB,GAAG,OAAO,CAAC,MAAM,CAAC,CAWzE;AAsBD,wBAAgB,YAAY,CAAC,KAAK,EAAE,UAAU,EAAE,GAAG,MAAM,CA0DxD;AAED,wBAAsB,aAAa,CACjC,KAAK,EAAE,UAAU,EAAE,EACnB,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,IAAI,CAAC,CAEf"}

package/dist/diagnostics/bundle.js

@@ -30,7 +30,7 @@ export async function collectBundleFiles(dir, meta) {
     return files;
 }
 /** Redact each COMPLETE line; drop an incomplete trailing line (mid-write). */
-function scrubNdjson(raw) {
+export function scrubNdjson(raw) {
     if (raw.length === 0)
         return '';
     const endsClean = raw.endsWith('\n');
@@ -91,7 +91,7 @@ function crc32(buf) {
         c = CRC_TABLE[(c ^ buf[i]) & 0xff] ^ (c >>> 8);
     return (c ^ 0xffffffff) >>> 0;
 }
-export async function writeStoreZip(files, outPath) {
+export function packStoreZip(files) {
     const chunks = [];
     const central = [];
     let offset = 0;
@@ -100,42 +100,42 @@ export async function writeStoreZip(files, outPath) {
         const crc = crc32(file.bytes);
         const compressed = deflateRawSync(file.bytes);
         const local = Buffer.alloc(30);
-        local.writeUInt32LE(0x04034b50, 0); // local file header signature
-        local.writeUInt16LE(20, 4); // version needed
-        local.writeUInt16LE(0, 6); // flags
-        local.writeUInt16LE(8, 8); // method: deflate
-        local.writeUInt16LE(0, 10); // mod time
-        local.writeUInt16LE(0, 12); // mod date
+        local.writeUInt32LE(0x04034b50, 0);
+        local.writeUInt16LE(20, 4);
+        local.writeUInt16LE(0, 6);
+        local.writeUInt16LE(8, 8);
+        local.writeUInt16LE(0, 10);
+        local.writeUInt16LE(0, 12);
         local.writeUInt32LE(crc, 14);
         local.writeUInt32LE(compressed.length, 18);
         local.writeUInt32LE(file.bytes.length, 22);
         local.writeUInt16LE(nameBuf.length, 26);
-        local.writeUInt16LE(0, 28); // extra len
+        local.writeUInt16LE(0, 28);
         chunks.push(local, nameBuf, compressed);
         const cd = Buffer.alloc(46);
-        cd.writeUInt32LE(0x02014b50, 0); // central dir header signature
-        cd.writeUInt16LE(20, 4); // version made by
-        cd.writeUInt16LE(20, 6); // version needed
-        cd.writeUInt16LE(0, 8); // flags
-        cd.writeUInt16LE(8, 10); // method
+        cd.writeUInt32LE(0x02014b50, 0);
+        cd.writeUInt16LE(20, 4);
+        cd.writeUInt16LE(20, 6);
+        cd.writeUInt16LE(0, 8);
+        cd.writeUInt16LE(8, 10);
         cd.writeUInt16LE(0, 12);
         cd.writeUInt16LE(0, 14);
         cd.writeUInt32LE(crc, 16);
         cd.writeUInt32LE(compressed.length, 20);
         cd.writeUInt32LE(file.bytes.length, 24);
         cd.writeUInt16LE(nameBuf.length, 28);
-        cd.writeUInt16LE(0, 30); // extra
-        cd.writeUInt16LE(0, 32); // comment
-        cd.writeUInt16LE(0, 34); // disk #
-        cd.writeUInt16LE(0, 36); // internal attrs
-        cd.writeUInt32LE(0, 38); // external attrs
-        cd.writeUInt32LE(offset, 42); // local header offset
+        cd.writeUInt16LE(0, 30);
+        cd.writeUInt16LE(0, 32);
+        cd.writeUInt16LE(0, 34);
+        cd.writeUInt16LE(0, 36);
+        cd.writeUInt32LE(0, 38);
+        cd.writeUInt32LE(offset, 42);
         central.push(cd, nameBuf);
         offset += local.length + nameBuf.length + compressed.length;
     }
     const centralBuf = Buffer.concat(central);
     const end = Buffer.alloc(22);
-    end.writeUInt32LE(0x06054b50, 0); // end of central dir signature
+    end.writeUInt32LE(0x06054b50, 0);
     end.writeUInt16LE(0, 4);
     end.writeUInt16LE(0, 6);
     end.writeUInt16LE(files.length, 8);
@@ -143,6 +143,9 @@ export async function writeStoreZip(files, outPath) {
     end.writeUInt32LE(centralBuf.length, 12);
     end.writeUInt32LE(offset, 16);
     end.writeUInt16LE(0, 20);
-    await writeFile(outPath, Buffer.concat([...chunks, centralBuf, end]));
+    return Buffer.concat([...chunks, centralBuf, end]);
+}
+export async function writeStoreZip(files, outPath) {
+    await writeFile(outPath, packStoreZip(files));
 }
 //# sourceMappingURL=bundle.js.map

package/dist/diagnostics/bundle.js.map

@@ -1 +1 @@
-{"version":3,"file":"bundle.js","sourceRoot":"","sources":["../../src/diagnostics/bundle.ts"],"names":[],"mappings":"AAAA,kDAAkD;AAClD,EAAE;AACF,6EAA6E;AAC7E,+EAA+E;AAC/E,6EAA6E;AAC7E,4EAA4E;AAC5E,0DAA0D;AAC1D,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACvE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACzC,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAE3C,OAAO,EAAE,qBAAqB,EAAE,MAAM,cAAc,CAAC;AACrD,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAOzC,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,GAAW,EACX,IAA6B;IAE7B,MAAM,KAAK,GAAG,CAAC,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAc,CAAC,CAAC;SAC3D,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,+BAA+B,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;SACtD,IAAI,EAAE,CAAC;IACV,MAAM,KAAK,GAAiB,EAAE,CAAC;IAC/B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;QACpE,MAAM,QAAQ,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;QAClC,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC;YACrB,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;IAC/D,CAAC;IACD,KAAK,CAAC,IAAI,CAAC;QACT,IAAI,EAAE,WAAW;QACjB,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC;KACtE,CAAC,CAAC;IACH,OAAO,KAAK,CAAC;AACf,CAAC;AAED,+EAA+E;AAC/E,SAAS,WAAW,CAAC,GAAW;IAC9B,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAChC,MAAM,SAAS,GAAG,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IACrC,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC9B,IAAI,CAAC,SAAS;QAAE,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,wBAAwB;IACrD,OAAO,CACL,KAAK;SACF,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;SAC3B,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;SACzB,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CACrB,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,eAAe,CAC7B,MAAW,OAAO,CAAC,GAAG;IAEtB,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC/C,IAAI,YAAY,GAAG,SAAS,CAAC;IAC7B,IAAI,CAAC;QACH,YAAY,GACV,OAAO,CAAC,4BAA4B,CACrC,CAAC,OAAO,CAAC;IACZ,CAAC;IAAC,MAAM,CAAC;QACP,qEAAqE;IACvE,CAAC;IACD,OAAO;QACL,OAAO,EAAE,GAAG,CAAC,cAAc,IAAI,KAAK;QACpC,EAAE,EAAE,QAAQ,EAAE;QACd,IAAI,EAAE,IAAI,EAAE;QACZ,IAAI,EAAE,OAAO,CAAC,OAAO;QACrB,WAAW,EAAE,YAAY;QACzB,cAAc,EAAE,qBAAqB,CAAC,GAAG,CAAC;KAC3C,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,MAAW,OAAO,CAAC,GAAG;IACtD,MAAM,GAAG,GAAG,qBAAqB,CAAC,GAAG,CAAC,CAAC;IACvC,8EAA8E;IAC9E,6DAA6D;IAC7D,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACtC,MAAM,KAAK,GAAG,MAAM,kBAAkB,CAAC,GAAG,EAAE,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC;IAClE,qFAAqF;IACrF,MAAM,KAAK,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IAC7D,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,eAAe,KAAK,MAAM,CAAC,CAAC;IACtD,MAAM,aAAa,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IACpC,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,gFAAgF;AAChF,+EAA+E;AAC/E,2EAA2E;AAC3E,MAAM,SAAS,GAAG,CAAC,GAAG,EAAE;IACtB,MAAM,CAAC,GAAG,IAAI,WAAW,CAAC,GAAG,CAAC,CAAC;IAC/B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;QAC7B,IAAI,CAAC,GAAG,CAAC,CAAC;QACV,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE;YAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QACzE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACjB,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC,CAAC,EAAE,CAAC;AAEL,SAAS,KAAK,CAAC,GAAW;IACxB,IAAI,CAAC,GAAG,UAAU,CAAC;IACnB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE;QACjC,CAAC,GAAG,SAAS,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;IACjD,OAAO,CAAC,CAAC,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;AAChC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,KAAmB,EACnB,OAAe;IAEf,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,IAAI,MAAM,GAAG,CAAC,CAAC;IAEf,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAC/C,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC9B,MAAM,UAAU,GAAG,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC9C,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC/B,KAAK,CAAC,aAAa,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,CAAC,8BAA8B;QAClE,KAAK,CAAC,aAAa,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,iBAAiB;QAC7C,KAAK,CAAC,aAAa,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ;QACnC,KAAK,CAAC,aAAa,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,kBAAkB;QAC7C,KAAK,CAAC,aAAa,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW;QACvC,KAAK,CAAC,aAAa,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW;QACvC,KAAK,CAAC,aAAa,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QAC7B,KAAK,CAAC,aAAa,CAAC,UAAU,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QAC3C,KAAK,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QAC3C,KAAK,CAAC,aAAa,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QACxC,KAAK,CAAC,aAAa,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY;QACxC,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC;QAExC,MAAM,EAAE,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC5B,EAAE,CAAC,aAAa,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,CAAC,+BAA+B;QAChE,EAAE,CAAC,aAAa,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,kBAAkB;QAC3C,EAAE,CAAC,aAAa,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,iBAAiB;QAC1C,EAAE,CAAC,aAAa,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ;QAChC,EAAE,CAAC,aAAa,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS;QAClC,EAAE,CAAC,aAAa,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACxB,EAAE,CAAC,aAAa,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACxB,EAAE,CAAC,aAAa,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QAC1B,EAAE,CAAC,aAAa,CAAC,UAAU,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QACxC,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QACxC,EAAE,CAAC,aAAa,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QACrC,EAAE,CAAC,aAAa,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ;QACjC,EAAE,CAAC,aAAa,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU;QACnC,EAAE,CAAC,aAAa,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS;QAClC,EAAE,CAAC,aAAa,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,iBAAiB;QAC1C,EAAE,CAAC,aAAa,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,iBAAiB;QAC1C,EAAE,CAAC,aAAa,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,sBAAsB;QACpD,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;QAE1B,MAAM,IAAI,KAAK,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC;IAC9D,CAAC;IAED,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC1C,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAC7B,GAAG,CAAC,aAAa,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,CAAC,+BAA+B;IACjE,GAAG,CAAC,aAAa,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACxB,GAAG,CAAC,aAAa,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACxB,GAAG,CAAC,aAAa,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IACnC,GAAG,CAAC,aAAa,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACpC,GAAG,CAAC,aAAa,CAAC,UAAU,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACzC,GAAG,CAAC,aAAa,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC9B,GAAG,CAAC,aAAa,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAEzB,MAAM,SAAS,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,MAAM,EAAE,UAAU,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;AACxE,CAAC","sourcesContent":["// packages/codesign-mcp/src/diagnostics/bundle.ts\n//\n// Behind `codesign-mcp diagnose`: collect the rotated NDJSON, scrub raw text\n// (belt-and-suspenders over write-time redaction), add a non-secret meta.json,\n// and pack it all into a single zero-dependency STORE zip the user forwards.\n// No network. Works whether or not a server is running (it just reads disk;\n// the active file's incomplete trailing line is skipped).\nimport { mkdir, readdir, readFile, writeFile } from 'node:fs/promises';\nimport { join } from 'node:path';\nimport { arch, platform } from 'node:os';\nimport { createRequire } from 'node:module';\nimport { deflateRawSync } from 'node:zlib';\nimport type { Env } from '../config.js';\nimport { resolveDiagnosticsDir } from '../config.js';\nimport { redactText } from './redact.js';\n\nexport interface BundleFile {\n  name: string;\n  bytes: Buffer;\n}\n\nexport async function collectBundleFiles(\n  dir: string,\n  meta: Record<string, unknown>\n): Promise<BundleFile[]> {\n  const names = (await readdir(dir).catch(() => [] as string[]))\n    .filter((n) => /^diagnostics(\\.\\d+)?\\.ndjson$/.test(n))\n    .sort();\n  const files: BundleFile[] = [];\n  for (const name of names) {\n    const raw = await readFile(join(dir, name), 'utf8').catch(() => '');\n    const scrubbed = scrubNdjson(raw);\n    if (scrubbed.length > 0)\n      files.push({ name, bytes: Buffer.from(scrubbed, 'utf8') });\n  }\n  files.push({\n    name: 'meta.json',\n    bytes: Buffer.from(redactText(JSON.stringify(meta, null, 2)), 'utf8')\n  });\n  return files;\n}\n\n/** Redact each COMPLETE line; drop an incomplete trailing line (mid-write). */\nfunction scrubNdjson(raw: string): string {\n  if (raw.length === 0) return '';\n  const endsClean = raw.endsWith('\\n');\n  const lines = raw.split('\\n');\n  if (!endsClean) lines.pop(); // partial trailing line\n  return (\n    lines\n      .filter((l) => l.length > 0)\n      .map((l) => redactText(l))\n      .join('\\n') + '\\n'\n  );\n}\n\nexport function buildBundleMeta(\n  env: Env = process.env\n): Record<string, unknown> {\n  const require = createRequire(import.meta.url);\n  let cesdkVersion = 'unknown';\n  try {\n    cesdkVersion = (\n      require('@cesdk/engine/package.json') as { version: string }\n    ).version;\n  } catch {\n    // engine package layout may not expose package.json; leave 'unknown'\n  }\n  return {\n    buildId: env.IMGLY_BUILD_ID ?? 'dev',\n    os: platform(),\n    arch: arch(),\n    node: process.version,\n    cesdkEngine: cesdkVersion,\n    diagnosticsDir: resolveDiagnosticsDir(env)\n  };\n}\n\nexport async function runDiagnose(env: Env = process.env): Promise<string> {\n  const dir = resolveDiagnosticsDir(env);\n  // Ensure the dir exists — on a fresh install there may be no logs yet but the\n  // user still expects a zip (it will contain only meta.json).\n  await mkdir(dir, { recursive: true });\n  const files = await collectBundleFiles(dir, buildBundleMeta(env));\n  // Timestamp is injected by the caller of Date.now at runtime — fine in product code.\n  const stamp = new Date().toISOString().replace(/[:.]/g, '-');\n  const outPath = join(dir, `diagnostics-${stamp}.zip`);\n  await writeStoreZip(files, outPath);\n  return outPath;\n}\n\n// --- Minimal ZIP writer (deflate, zero deps) ---------------------------------\n// One local-file-header + data per entry, then a central directory. Enough for\n// any unzip tool to open; we deflate with node:zlib to keep bundles small.\nconst CRC_TABLE = (() => {\n  const t = new Uint32Array(256);\n  for (let n = 0; n < 256; n++) {\n    let c = n;\n    for (let k = 0; k < 8; k++) c = c & 1 ? 0xedb88320 ^ (c >>> 1) : c >>> 1;\n    t[n] = c >>> 0;\n  }\n  return t;\n})();\n\nfunction crc32(buf: Buffer): number {\n  let c = 0xffffffff;\n  for (let i = 0; i < buf.length; i++)\n    c = CRC_TABLE[(c ^ buf[i]) & 0xff] ^ (c >>> 8);\n  return (c ^ 0xffffffff) >>> 0;\n}\n\nexport async function writeStoreZip(\n  files: BundleFile[],\n  outPath: string\n): Promise<void> {\n  const chunks: Buffer[] = [];\n  const central: Buffer[] = [];\n  let offset = 0;\n\n  for (const file of files) {\n    const nameBuf = Buffer.from(file.name, 'utf8');\n    const crc = crc32(file.bytes);\n    const compressed = deflateRawSync(file.bytes);\n    const local = Buffer.alloc(30);\n    local.writeUInt32LE(0x04034b50, 0); // local file header signature\n    local.writeUInt16LE(20, 4); // version needed\n    local.writeUInt16LE(0, 6); // flags\n    local.writeUInt16LE(8, 8); // method: deflate\n    local.writeUInt16LE(0, 10); // mod time\n    local.writeUInt16LE(0, 12); // mod date\n    local.writeUInt32LE(crc, 14);\n    local.writeUInt32LE(compressed.length, 18);\n    local.writeUInt32LE(file.bytes.length, 22);\n    local.writeUInt16LE(nameBuf.length, 26);\n    local.writeUInt16LE(0, 28); // extra len\n    chunks.push(local, nameBuf, compressed);\n\n    const cd = Buffer.alloc(46);\n    cd.writeUInt32LE(0x02014b50, 0); // central dir header signature\n    cd.writeUInt16LE(20, 4); // version made by\n    cd.writeUInt16LE(20, 6); // version needed\n    cd.writeUInt16LE(0, 8); // flags\n    cd.writeUInt16LE(8, 10); // method\n    cd.writeUInt16LE(0, 12);\n    cd.writeUInt16LE(0, 14);\n    cd.writeUInt32LE(crc, 16);\n    cd.writeUInt32LE(compressed.length, 20);\n    cd.writeUInt32LE(file.bytes.length, 24);\n    cd.writeUInt16LE(nameBuf.length, 28);\n    cd.writeUInt16LE(0, 30); // extra\n    cd.writeUInt16LE(0, 32); // comment\n    cd.writeUInt16LE(0, 34); // disk #\n    cd.writeUInt16LE(0, 36); // internal attrs\n    cd.writeUInt32LE(0, 38); // external attrs\n    cd.writeUInt32LE(offset, 42); // local header offset\n    central.push(cd, nameBuf);\n\n    offset += local.length + nameBuf.length + compressed.length;\n  }\n\n  const centralBuf = Buffer.concat(central);\n  const end = Buffer.alloc(22);\n  end.writeUInt32LE(0x06054b50, 0); // end of central dir signature\n  end.writeUInt16LE(0, 4);\n  end.writeUInt16LE(0, 6);\n  end.writeUInt16LE(files.length, 8);\n  end.writeUInt16LE(files.length, 10);\n  end.writeUInt32LE(centralBuf.length, 12);\n  end.writeUInt32LE(offset, 16);\n  end.writeUInt16LE(0, 20);\n\n  await writeFile(outPath, Buffer.concat([...chunks, centralBuf, end]));\n}\n"]}
+{"version":3,"file":"bundle.js","sourceRoot":"","sources":["../../src/diagnostics/bundle.ts"],"names":[],"mappings":"AAAA,kDAAkD;AAClD,EAAE;AACF,6EAA6E;AAC7E,+EAA+E;AAC/E,6EAA6E;AAC7E,4EAA4E;AAC5E,0DAA0D;AAC1D,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACvE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AACzC,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAE3C,OAAO,EAAE,qBAAqB,EAAE,MAAM,cAAc,CAAC;AACrD,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAOzC,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,GAAW,EACX,IAA6B;IAE7B,MAAM,KAAK,GAAG,CAAC,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAc,CAAC,CAAC;SAC3D,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,+BAA+B,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;SACtD,IAAI,EAAE,CAAC;IACV,MAAM,KAAK,GAAiB,EAAE,CAAC;IAC/B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;QACpE,MAAM,QAAQ,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;QAClC,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC;YACrB,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;IAC/D,CAAC;IACD,KAAK,CAAC,IAAI,CAAC;QACT,IAAI,EAAE,WAAW;QACjB,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC;KACtE,CAAC,CAAC;IACH,OAAO,KAAK,CAAC;AACf,CAAC;AAED,+EAA+E;AAC/E,MAAM,UAAU,WAAW,CAAC,GAAW;IACrC,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAChC,MAAM,SAAS,GAAG,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IACrC,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC9B,IAAI,CAAC,SAAS;QAAE,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,wBAAwB;IACrD,OAAO,CACL,KAAK;SACF,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;SAC3B,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;SACzB,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CACrB,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,eAAe,CAC7B,MAAW,OAAO,CAAC,GAAG;IAEtB,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC/C,IAAI,YAAY,GAAG,SAAS,CAAC;IAC7B,IAAI,CAAC;QACH,YAAY,GACV,OAAO,CAAC,4BAA4B,CACrC,CAAC,OAAO,CAAC;IACZ,CAAC;IAAC,MAAM,CAAC;QACP,qEAAqE;IACvE,CAAC;IACD,OAAO;QACL,OAAO,EAAE,GAAG,CAAC,cAAc,IAAI,KAAK;QACpC,EAAE,EAAE,QAAQ,EAAE;QACd,IAAI,EAAE,IAAI,EAAE;QACZ,IAAI,EAAE,OAAO,CAAC,OAAO;QACrB,WAAW,EAAE,YAAY;QACzB,cAAc,EAAE,qBAAqB,CAAC,GAAG,CAAC;KAC3C,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,MAAW,OAAO,CAAC,GAAG;IACtD,MAAM,GAAG,GAAG,qBAAqB,CAAC,GAAG,CAAC,CAAC;IACvC,8EAA8E;IAC9E,6DAA6D;IAC7D,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACtC,MAAM,KAAK,GAAG,MAAM,kBAAkB,CAAC,GAAG,EAAE,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC;IAClE,qFAAqF;IACrF,MAAM,KAAK,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IAC7D,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,eAAe,KAAK,MAAM,CAAC,CAAC;IACtD,MAAM,aAAa,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IACpC,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,gFAAgF;AAChF,+EAA+E;AAC/E,2EAA2E;AAC3E,MAAM,SAAS,GAAG,CAAC,GAAG,EAAE;IACtB,MAAM,CAAC,GAAG,IAAI,WAAW,CAAC,GAAG,CAAC,CAAC;IAC/B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;QAC7B,IAAI,CAAC,GAAG,CAAC,CAAC;QACV,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE;YAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QACzE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACjB,CAAC;IACD,OAAO,CAAC,CAAC;AACX,CAAC,CAAC,EAAE,CAAC;AAEL,SAAS,KAAK,CAAC,GAAW;IACxB,IAAI,CAAC,GAAG,UAAU,CAAC;IACnB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,MAAM,EAAE,CAAC,EAAE;QACjC,CAAC,GAAG,SAAS,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;IACjD,OAAO,CAAC,CAAC,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;AAChC,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,KAAmB;IAC9C,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,IAAI,MAAM,GAAG,CAAC,CAAC;IAEf,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAC/C,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC9B,MAAM,UAAU,GAAG,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC9C,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC/B,KAAK,CAAC,aAAa,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;QACnC,KAAK,CAAC,aAAa,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;QAC3B,KAAK,CAAC,aAAa,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAC1B,KAAK,CAAC,aAAa,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAC1B,KAAK,CAAC,aAAa,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC3B,KAAK,CAAC,aAAa,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC3B,KAAK,CAAC,aAAa,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QAC7B,KAAK,CAAC,aAAa,CAAC,UAAU,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QAC3C,KAAK,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QAC3C,KAAK,CAAC,aAAa,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QACxC,KAAK,CAAC,aAAa,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC3B,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC;QAExC,MAAM,EAAE,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAC5B,EAAE,CAAC,aAAa,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;QAChC,EAAE,CAAC,aAAa,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;QACxB,EAAE,CAAC,aAAa,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;QACxB,EAAE,CAAC,aAAa,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACvB,EAAE,CAAC,aAAa,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACxB,EAAE,CAAC,aAAa,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACxB,EAAE,CAAC,aAAa,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACxB,EAAE,CAAC,aAAa,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QAC1B,EAAE,CAAC,aAAa,CAAC,UAAU,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QACxC,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QACxC,EAAE,CAAC,aAAa,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QACrC,EAAE,CAAC,aAAa,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACxB,EAAE,CAAC,aAAa,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACxB,EAAE,CAAC,aAAa,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACxB,EAAE,CAAC,aAAa,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACxB,EAAE,CAAC,aAAa,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACxB,EAAE,CAAC,aAAa,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QAC7B,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;QAE1B,MAAM,IAAI,KAAK,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC;IAC9D,CAAC;IAED,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC1C,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAC7B,GAAG,CAAC,aAAa,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;IACjC,GAAG,CAAC,aAAa,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACxB,GAAG,CAAC,aAAa,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACxB,GAAG,CAAC,aAAa,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IACnC,GAAG,CAAC,aAAa,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACpC,GAAG,CAAC,aAAa,CAAC,UAAU,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACzC,GAAG,CAAC,aAAa,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC9B,GAAG,CAAC,aAAa,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAEzB,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,MAAM,EAAE,UAAU,EAAE,GAAG,CAAC,CAAC,CAAC;AACrD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,KAAmB,EACnB,OAAe;IAEf,MAAM,SAAS,CAAC,OAAO,EAAE,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC;AAChD,CAAC","sourcesContent":["// packages/codesign-mcp/src/diagnostics/bundle.ts\n//\n// Behind `codesign-mcp diagnose`: collect the rotated NDJSON, scrub raw text\n// (belt-and-suspenders over write-time redaction), add a non-secret meta.json,\n// and pack it all into a single zero-dependency STORE zip the user forwards.\n// No network. Works whether or not a server is running (it just reads disk;\n// the active file's incomplete trailing line is skipped).\nimport { mkdir, readdir, readFile, writeFile } from 'node:fs/promises';\nimport { join } from 'node:path';\nimport { arch, platform } from 'node:os';\nimport { createRequire } from 'node:module';\nimport { deflateRawSync } from 'node:zlib';\nimport type { Env } from '../config.js';\nimport { resolveDiagnosticsDir } from '../config.js';\nimport { redactText } from './redact.js';\n\nexport interface BundleFile {\n  name: string;\n  bytes: Buffer;\n}\n\nexport async function collectBundleFiles(\n  dir: string,\n  meta: Record<string, unknown>\n): Promise<BundleFile[]> {\n  const names = (await readdir(dir).catch(() => [] as string[]))\n    .filter((n) => /^diagnostics(\\.\\d+)?\\.ndjson$/.test(n))\n    .sort();\n  const files: BundleFile[] = [];\n  for (const name of names) {\n    const raw = await readFile(join(dir, name), 'utf8').catch(() => '');\n    const scrubbed = scrubNdjson(raw);\n    if (scrubbed.length > 0)\n      files.push({ name, bytes: Buffer.from(scrubbed, 'utf8') });\n  }\n  files.push({\n    name: 'meta.json',\n    bytes: Buffer.from(redactText(JSON.stringify(meta, null, 2)), 'utf8')\n  });\n  return files;\n}\n\n/** Redact each COMPLETE line; drop an incomplete trailing line (mid-write). */\nexport function scrubNdjson(raw: string): string {\n  if (raw.length === 0) return '';\n  const endsClean = raw.endsWith('\\n');\n  const lines = raw.split('\\n');\n  if (!endsClean) lines.pop(); // partial trailing line\n  return (\n    lines\n      .filter((l) => l.length > 0)\n      .map((l) => redactText(l))\n      .join('\\n') + '\\n'\n  );\n}\n\nexport function buildBundleMeta(\n  env: Env = process.env\n): Record<string, unknown> {\n  const require = createRequire(import.meta.url);\n  let cesdkVersion = 'unknown';\n  try {\n    cesdkVersion = (\n      require('@cesdk/engine/package.json') as { version: string }\n    ).version;\n  } catch {\n    // engine package layout may not expose package.json; leave 'unknown'\n  }\n  return {\n    buildId: env.IMGLY_BUILD_ID ?? 'dev',\n    os: platform(),\n    arch: arch(),\n    node: process.version,\n    cesdkEngine: cesdkVersion,\n    diagnosticsDir: resolveDiagnosticsDir(env)\n  };\n}\n\nexport async function runDiagnose(env: Env = process.env): Promise<string> {\n  const dir = resolveDiagnosticsDir(env);\n  // Ensure the dir exists — on a fresh install there may be no logs yet but the\n  // user still expects a zip (it will contain only meta.json).\n  await mkdir(dir, { recursive: true });\n  const files = await collectBundleFiles(dir, buildBundleMeta(env));\n  // Timestamp is injected by the caller of Date.now at runtime — fine in product code.\n  const stamp = new Date().toISOString().replace(/[:.]/g, '-');\n  const outPath = join(dir, `diagnostics-${stamp}.zip`);\n  await writeStoreZip(files, outPath);\n  return outPath;\n}\n\n// --- Minimal ZIP writer (deflate, zero deps) ---------------------------------\n// One local-file-header + data per entry, then a central directory. Enough for\n// any unzip tool to open; we deflate with node:zlib to keep bundles small.\nconst CRC_TABLE = (() => {\n  const t = new Uint32Array(256);\n  for (let n = 0; n < 256; n++) {\n    let c = n;\n    for (let k = 0; k < 8; k++) c = c & 1 ? 0xedb88320 ^ (c >>> 1) : c >>> 1;\n    t[n] = c >>> 0;\n  }\n  return t;\n})();\n\nfunction crc32(buf: Buffer): number {\n  let c = 0xffffffff;\n  for (let i = 0; i < buf.length; i++)\n    c = CRC_TABLE[(c ^ buf[i]) & 0xff] ^ (c >>> 8);\n  return (c ^ 0xffffffff) >>> 0;\n}\n\nexport function packStoreZip(files: BundleFile[]): Buffer {\n  const chunks: Buffer[] = [];\n  const central: Buffer[] = [];\n  let offset = 0;\n\n  for (const file of files) {\n    const nameBuf = Buffer.from(file.name, 'utf8');\n    const crc = crc32(file.bytes);\n    const compressed = deflateRawSync(file.bytes);\n    const local = Buffer.alloc(30);\n    local.writeUInt32LE(0x04034b50, 0);\n    local.writeUInt16LE(20, 4);\n    local.writeUInt16LE(0, 6);\n    local.writeUInt16LE(8, 8);\n    local.writeUInt16LE(0, 10);\n    local.writeUInt16LE(0, 12);\n    local.writeUInt32LE(crc, 14);\n    local.writeUInt32LE(compressed.length, 18);\n    local.writeUInt32LE(file.bytes.length, 22);\n    local.writeUInt16LE(nameBuf.length, 26);\n    local.writeUInt16LE(0, 28);\n    chunks.push(local, nameBuf, compressed);\n\n    const cd = Buffer.alloc(46);\n    cd.writeUInt32LE(0x02014b50, 0);\n    cd.writeUInt16LE(20, 4);\n    cd.writeUInt16LE(20, 6);\n    cd.writeUInt16LE(0, 8);\n    cd.writeUInt16LE(8, 10);\n    cd.writeUInt16LE(0, 12);\n    cd.writeUInt16LE(0, 14);\n    cd.writeUInt32LE(crc, 16);\n    cd.writeUInt32LE(compressed.length, 20);\n    cd.writeUInt32LE(file.bytes.length, 24);\n    cd.writeUInt16LE(nameBuf.length, 28);\n    cd.writeUInt16LE(0, 30);\n    cd.writeUInt16LE(0, 32);\n    cd.writeUInt16LE(0, 34);\n    cd.writeUInt16LE(0, 36);\n    cd.writeUInt32LE(0, 38);\n    cd.writeUInt32LE(offset, 42);\n    central.push(cd, nameBuf);\n\n    offset += local.length + nameBuf.length + compressed.length;\n  }\n\n  const centralBuf = Buffer.concat(central);\n  const end = Buffer.alloc(22);\n  end.writeUInt32LE(0x06054b50, 0);\n  end.writeUInt16LE(0, 4);\n  end.writeUInt16LE(0, 6);\n  end.writeUInt16LE(files.length, 8);\n  end.writeUInt16LE(files.length, 10);\n  end.writeUInt32LE(centralBuf.length, 12);\n  end.writeUInt32LE(offset, 16);\n  end.writeUInt16LE(0, 20);\n\n  return Buffer.concat([...chunks, centralBuf, end]);\n}\n\nexport async function writeStoreZip(\n  files: BundleFile[],\n  outPath: string\n): Promise<void> {\n  await writeFile(outPath, packStoreZip(files));\n}\n"]}

package/dist/diagnostics/events.d.ts

@@ -28,6 +28,12 @@ export type DiagnosticEvent = {
 };
 export interface DiagnosticsSink {
     emit(event: DiagnosticEvent): void;
+    /**
+     * Await all queued writes. Optional — a sink may write synchronously or drop
+     * events. Call before `process.exit` so a fire-and-forget sink doesn't lose
+     * the last events (e.g. the shutdown breadcrumb).
+     */
+    flush?(): Promise<void>;
 }
 /** The off-switch: a sink that accepts and discards every event. */
 export declare const NOOP_DIAGNOSTICS_SINK: DiagnosticsSink;

package/dist/diagnostics/events.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"events.d.ts","sourceRoot":"","sources":["../../src/diagnostics/events.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,mBAAmB,CAAC;AAE9C,MAAM,WAAW,SAAS;IACxB,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,MAAM,eAAe,GACvB;IACE,IAAI,EAAE,WAAW,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,OAAO,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,IAAI,EAAE,CAAC;IACd,KAAK,CAAC,EAAE,SAAS,CAAC;IAClB,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB,GACD;IACE,IAAI,EAAE,YAAY,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,KAAK,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,OAAO,GAAG,OAAO,CAAC;IAC7D,IAAI,EAAE,MAAM,CAAC;CACd,GACD;IACE,IAAI,EAAE,WAAW,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,SAAS,CAAC;CACnB,CAAC;AAEN,MAAM,WAAW,eAAe;IAC9B,IAAI,CAAC,KAAK,EAAE,eAAe,GAAG,IAAI,CAAC;CACpC;AAED,oEAAoE;AACpE,eAAO,MAAM,qBAAqB,EAAE,eAA+B,CAAC"}
+{"version":3,"file":"events.d.ts","sourceRoot":"","sources":["../../src/diagnostics/events.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,mBAAmB,CAAC;AAE9C,MAAM,WAAW,SAAS;IACxB,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,MAAM,eAAe,GACvB;IACE,IAAI,EAAE,WAAW,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,OAAO,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,IAAI,EAAE,CAAC;IACd,KAAK,CAAC,EAAE,SAAS,CAAC;IAClB,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB,GACD;IACE,IAAI,EAAE,YAAY,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,KAAK,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,OAAO,GAAG,OAAO,CAAC;IAC7D,IAAI,EAAE,MAAM,CAAC;CACd,GACD;IACE,IAAI,EAAE,WAAW,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,SAAS,CAAC;CACnB,CAAC;AAEN,MAAM,WAAW,eAAe;IAC9B,IAAI,CAAC,KAAK,EAAE,eAAe,GAAG,IAAI,CAAC;IACnC;;;;OAIG;IACH,KAAK,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACzB;AAED,oEAAoE;AACpE,eAAO,MAAM,qBAAqB,EAAE,eAA+B,CAAC"}

package/dist/diagnostics/events.js.map

@@ -1 +1 @@
-{"version":3,"file":"events.js","sourceRoot":"","sources":["../../src/diagnostics/events.ts"],"names":[],"mappings":"AA2CA,oEAAoE;AACpE,MAAM,CAAC,MAAM,qBAAqB,GAAoB,EAAE,IAAI,KAAI,CAAC,EAAE,CAAC","sourcesContent":["// packages/codesign-mcp/src/diagnostics/events.ts\n//\n// The single transport shape for the diagnostics stream. Every diagnostic datum\n// — tool call, engine console line, lifecycle breadcrumb — is one DiagnosticEvent,\n// one NDJSON line. Sinks (file today; OTel/in-memory later) consume this union.\nimport type { Span } from '../tools/spans.js';\n\nexport interface ErrorInfo {\n  message: string;\n  stack?: string;\n}\n\nexport type DiagnosticEvent =\n  | {\n      kind: 'tool_call';\n      timestamp: number;\n      tool: string;\n      succeeded: boolean;\n      totalMs: number;\n      spans: Span[];\n      error?: ErrorInfo;\n      args?: unknown;\n      result?: unknown;\n      revision?: string;\n      session?: string;\n    }\n  | {\n      kind: 'engine_log';\n      timestamp: number;\n      level: 'log' | 'info' | 'warn' | 'error' | 'debug' | 'trace';\n      text: string;\n    }\n  | {\n      kind: 'lifecycle';\n      timestamp: number;\n      text: string;\n      error?: ErrorInfo;\n    };\n\nexport interface DiagnosticsSink {\n  emit(event: DiagnosticEvent): void;\n}\n\n/** The off-switch: a sink that accepts and discards every event. */\nexport const NOOP_DIAGNOSTICS_SINK: DiagnosticsSink = { emit() {} };\n"]}
+{"version":3,"file":"events.js","sourceRoot":"","sources":["../../src/diagnostics/events.ts"],"names":[],"mappings":"AAiDA,oEAAoE;AACpE,MAAM,CAAC,MAAM,qBAAqB,GAAoB,EAAE,IAAI,KAAI,CAAC,EAAE,CAAC","sourcesContent":["// packages/codesign-mcp/src/diagnostics/events.ts\n//\n// The single transport shape for the diagnostics stream. Every diagnostic datum\n// — tool call, engine console line, lifecycle breadcrumb — is one DiagnosticEvent,\n// one NDJSON line. Sinks (file today; OTel/in-memory later) consume this union.\nimport type { Span } from '../tools/spans.js';\n\nexport interface ErrorInfo {\n  message: string;\n  stack?: string;\n}\n\nexport type DiagnosticEvent =\n  | {\n      kind: 'tool_call';\n      timestamp: number;\n      tool: string;\n      succeeded: boolean;\n      totalMs: number;\n      spans: Span[];\n      error?: ErrorInfo;\n      args?: unknown;\n      result?: unknown;\n      revision?: string;\n      session?: string;\n    }\n  | {\n      kind: 'engine_log';\n      timestamp: number;\n      level: 'log' | 'info' | 'warn' | 'error' | 'debug' | 'trace';\n      text: string;\n    }\n  | {\n      kind: 'lifecycle';\n      timestamp: number;\n      text: string;\n      error?: ErrorInfo;\n    };\n\nexport interface DiagnosticsSink {\n  emit(event: DiagnosticEvent): void;\n  /**\n   * Await all queued writes. Optional — a sink may write synchronously or drop\n   * events. Call before `process.exit` so a fire-and-forget sink doesn't lose\n   * the last events (e.g. the shutdown breadcrumb).\n   */\n  flush?(): Promise<void>;\n}\n\n/** The off-switch: a sink that accepts and discards every event. */\nexport const NOOP_DIAGNOSTICS_SINK: DiagnosticsSink = { emit() {} };\n"]}

package/dist/diagnostics/prompt.d.ts

@@ -0,0 +1,3 @@
+import type { CodesignMcpPromptRegistration } from '../server.js';
+export declare function createDiagnosticsPrompt(): CodesignMcpPromptRegistration;
+//# sourceMappingURL=prompt.d.ts.map

package/dist/diagnostics/prompt.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"prompt.d.ts","sourceRoot":"","sources":["../../src/diagnostics/prompt.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,cAAc,CAAC;AAElE,wBAAgB,uBAAuB,IAAI,6BAA6B,CAqBvE"}

package/dist/diagnostics/prompt.js

@@ -0,0 +1,21 @@
+export function createDiagnosticsPrompt() {
+    return {
+        name: 'diagnostics',
+        description: 'Show what this codesign MCP server is running and open the local diagnostics viewer.',
+        get: () => ({
+            description: 'Report versions and open the diagnostics viewer.',
+            messages: [
+                {
+                    role: 'user',
+                    content: {
+                        type: 'text',
+                        text: 'Call the `diagnostics` tool with action "status" and report the MCP build id and CE.SDK engine version. ' +
+                            'Then call `diagnostics` with action "open" and give me the clickable viewer URL — it has a Download-ZIP button ' +
+                            'to send diagnostics to IMG.LY.'
+                    }
+                }
+            ]
+        })
+    };
+}
+//# sourceMappingURL=prompt.js.map

package/dist/diagnostics/prompt.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"prompt.js","sourceRoot":"","sources":["../../src/diagnostics/prompt.ts"],"names":[],"mappings":"AAOA,MAAM,UAAU,uBAAuB;IACrC,OAAO;QACL,IAAI,EAAE,aAAa;QACnB,WAAW,EACT,sFAAsF;QACxF,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC;YACV,WAAW,EAAE,kDAAkD;YAC/D,QAAQ,EAAE;gBACR;oBACE,IAAI,EAAE,MAAM;oBACZ,OAAO,EAAE;wBACP,IAAI,EAAE,MAAM;wBACZ,IAAI,EACF,0GAA0G;4BAC1G,iHAAiH;4BACjH,gCAAgC;qBACnC;iBACF;aACF;SACF,CAAC;KACH,CAAC;AACJ,CAAC","sourcesContent":["// packages/codesign-mcp/src/diagnostics/prompt.ts\n//\n// The /codesign-diagnostics slash command (CODE-62). One MCP prompt that tells\n// the agent to self-report versions and hand the human the local viewer link.\n// stdio-only (its payload is \"open the viewer\", which is loopback-local).\nimport type { CodesignMcpPromptRegistration } from '../server.js';\n\nexport function createDiagnosticsPrompt(): CodesignMcpPromptRegistration {\n  return {\n    name: 'diagnostics',\n    description:\n      'Show what this codesign MCP server is running and open the local diagnostics viewer.',\n    get: () => ({\n      description: 'Report versions and open the diagnostics viewer.',\n      messages: [\n        {\n          role: 'user',\n          content: {\n            type: 'text',\n            text:\n              'Call the `diagnostics` tool with action \"status\" and report the MCP build id and CE.SDK engine version. ' +\n              'Then call `diagnostics` with action \"open\" and give me the clickable viewer URL — it has a Download-ZIP button ' +\n              'to send diagnostics to IMG.LY.'\n          }\n        }\n      ]\n    })\n  };\n}\n"]}

package/dist/diagnostics/router.d.ts

@@ -0,0 +1,12 @@
+import { Router } from 'express';
+import type { Env } from '../config.js';
+import type { DiagnosticsSink } from './events.js';
+export interface CreateDiagnosticsRouterOptions {
+    /** The active diagnostics sink — only flush() is used, before reads. */
+    diag: DiagnosticsSink;
+    /** Diagnostics dir (always resolved; may contain no files yet). */
+    dir: string;
+    env: Env;
+}
+export declare function createDiagnosticsRouter(opts: CreateDiagnosticsRouterOptions): Router;
+//# sourceMappingURL=router.d.ts.map

package/dist/diagnostics/router.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"router.d.ts","sourceRoot":"","sources":["../../src/diagnostics/router.ts"],"names":[],"mappings":"AAMA,OAAO,EAIL,MAAM,EACP,MAAM,SAAS,CAAC;AAGjB,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,cAAc,CAAC;AACxC,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AASnD,MAAM,WAAW,8BAA8B;IAC7C,wEAAwE;IACxE,IAAI,EAAE,eAAe,CAAC;IACtB,mEAAmE;IACnE,GAAG,EAAE,MAAM,CAAC;IACZ,GAAG,EAAE,GAAG,CAAC;CACV;AAID,wBAAgB,uBAAuB,CACrC,IAAI,EAAE,8BAA8B,GACnC,MAAM,CAyDR"}

package/dist/diagnostics/router.js

@@ -0,0 +1,64 @@
+// packages/codesign-mcp/src/diagnostics/router.ts
+//
+// Loopback-only routes for the served diagnostics viewer (CODE-62). Mounted on
+// the SAME ephemeral 127.0.0.1 listener as the design viewer (stdio only). Reads
+// the redacted on-disk stream; flushes the sink before every read so the newest
+// events are visible. Never mounted on the hosted HTTP transport.
+import { Router } from 'express';
+import { readdir, readFile } from 'node:fs/promises';
+import { join } from 'node:path';
+import { buildBundleMeta, collectBundleFiles, packStoreZip, scrubNdjson } from './bundle.js';
+import { SPA_ASSETS } from './spa-assets.generated.js';
+const NDJSON_RE = /^diagnostics(\.\d+)?\.ndjson$/;
+export function createDiagnosticsRouter(opts) {
+    const { diag, dir, env } = opts;
+    const router = Router();
+    router.get('/diagnostics', (_req, res) => {
+        // Root-absolute endpoints: on the stdio listener this router is mounted at
+        // root, so `/diagnostics/...` resolves correctly.
+        const inject = `window.__DIAGNOSTICS_STREAM__=${JSON.stringify('/diagnostics/stream.ndjson')};` +
+            `window.__DIAGNOSTICS_BUNDLE__=${JSON.stringify('/diagnostics/bundle.zip')};`;
+        const html = SPA_ASSETS['index.html'].replace('/*__DIAGNOSTICS_INJECT__*/', inject);
+        res.type('html').send(html);
+    });
+    router.get('/diagnostics/stream.ndjson', async (_req, res, next) => {
+        try {
+            await diag.flush?.();
+            const names = (await readdir(dir).catch(() => []))
+                .filter((n) => NDJSON_RE.test(n))
+                .sort();
+            let out = '';
+            for (const name of names) {
+                const raw = await readFile(join(dir, name), 'utf8').catch(() => '');
+                if (raw.length > 0)
+                    out += scrubNdjson(raw);
+            }
+            res.type('application/x-ndjson').send(out);
+        }
+        catch (err) {
+            next(err);
+        }
+    });
+    router.get('/diagnostics/bundle.zip', async (_req, res, next) => {
+        try {
+            await diag.flush?.();
+            const files = await collectBundleFiles(dir, buildBundleMeta(env));
+            res
+                .type('application/zip')
+                .set('Content-Disposition', 'attachment; filename="diagnostics.zip"')
+                .send(packStoreZip(files));
+        }
+        catch (err) {
+            next(err);
+        }
+    });
+    // Sanitising error handler — fs error messages carry absolute paths. MUST be
+    // last and take all four args.
+    router.use((_err, _req, res, _next) => {
+        if (res.headersSent)
+            return;
+        res.status(500).type('text').send('internal error');
+    });
+    return router;
+}
+//# sourceMappingURL=router.js.map

package/dist/diagnostics/router.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"router.js","sourceRoot":"","sources":["../../src/diagnostics/router.ts"],"names":[],"mappings":"AAAA,kDAAkD;AAClD,EAAE;AACF,+EAA+E;AAC/E,iFAAiF;AACjF,gFAAgF;AAChF,kEAAkE;AAClE,OAAO,EAIL,MAAM,EACP,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAGjC,OAAO,EACL,eAAe,EACf,kBAAkB,EAClB,YAAY,EACZ,WAAW,EACZ,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAC;AAUvD,MAAM,SAAS,GAAG,+BAA+B,CAAC;AAElD,MAAM,UAAU,uBAAuB,CACrC,IAAoC;IAEpC,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;IAChC,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC;IAExB,MAAM,CAAC,GAAG,CAAC,cAAc,EAAE,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE;QACvC,2EAA2E;QAC3E,kDAAkD;QAClD,MAAM,MAAM,GACV,iCAAiC,IAAI,CAAC,SAAS,CAAC,4BAA4B,CAAC,GAAG;YAChF,iCAAiC,IAAI,CAAC,SAAS,CAAC,yBAAyB,CAAC,GAAG,CAAC;QAChF,MAAM,IAAI,GAAG,UAAU,CAAC,YAAY,CAAC,CAAC,OAAO,CAC3C,4BAA4B,EAC5B,MAAM,CACP,CAAC;QACF,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC9B,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,GAAG,CAAC,4BAA4B,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QACjE,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,KAAK,EAAE,EAAE,CAAC;YACrB,MAAM,KAAK,GAAG,CAAC,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAc,CAAC,CAAC;iBAC3D,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;iBAChC,IAAI,EAAE,CAAC;YACV,IAAI,GAAG,GAAG,EAAE,CAAC;YACb,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBACzB,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;gBACpE,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC;oBAAE,GAAG,IAAI,WAAW,CAAC,GAAG,CAAC,CAAC;YAC9C,CAAC;YACD,GAAG,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC7C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,GAAG,CAAC,CAAC;QACZ,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,GAAG,CAAC,yBAAyB,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE;QAC9D,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,KAAK,EAAE,EAAE,CAAC;YACrB,MAAM,KAAK,GAAG,MAAM,kBAAkB,CAAC,GAAG,EAAE,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC;YAClE,GAAG;iBACA,IAAI,CAAC,iBAAiB,CAAC;iBACvB,GAAG,CAAC,qBAAqB,EAAE,wCAAwC,CAAC;iBACpE,IAAI,CAAC,YAAY,CAAC,KAAK,CAAC,CAAC,CAAC;QAC/B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,GAAG,CAAC,CAAC;QACZ,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,6EAA6E;IAC7E,+BAA+B;IAC/B,MAAM,CAAC,GAAG,CACR,CAAC,IAAa,EAAE,IAAa,EAAE,GAAa,EAAE,KAAmB,EAAE,EAAE;QACnE,IAAI,GAAG,CAAC,WAAW;YAAE,OAAO;QAC5B,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;IACtD,CAAC,CACF,CAAC;IAEF,OAAO,MAAM,CAAC;AAChB,CAAC","sourcesContent":["// packages/codesign-mcp/src/diagnostics/router.ts\n//\n// Loopback-only routes for the served diagnostics viewer (CODE-62). Mounted on\n// the SAME ephemeral 127.0.0.1 listener as the design viewer (stdio only). Reads\n// the redacted on-disk stream; flushes the sink before every read so the newest\n// events are visible. Never mounted on the hosted HTTP transport.\nimport {\n  type NextFunction,\n  type Request,\n  type Response,\n  Router\n} from 'express';\nimport { readdir, readFile } from 'node:fs/promises';\nimport { join } from 'node:path';\nimport type { Env } from '../config.js';\nimport type { DiagnosticsSink } from './events.js';\nimport {\n  buildBundleMeta,\n  collectBundleFiles,\n  packStoreZip,\n  scrubNdjson\n} from './bundle.js';\nimport { SPA_ASSETS } from './spa-assets.generated.js';\n\nexport interface CreateDiagnosticsRouterOptions {\n  /** The active diagnostics sink — only flush() is used, before reads. */\n  diag: DiagnosticsSink;\n  /** Diagnostics dir (always resolved; may contain no files yet). */\n  dir: string;\n  env: Env;\n}\n\nconst NDJSON_RE = /^diagnostics(\\.\\d+)?\\.ndjson$/;\n\nexport function createDiagnosticsRouter(\n  opts: CreateDiagnosticsRouterOptions\n): Router {\n  const { diag, dir, env } = opts;\n  const router = Router();\n\n  router.get('/diagnostics', (_req, res) => {\n    // Root-absolute endpoints: on the stdio listener this router is mounted at\n    // root, so `/diagnostics/...` resolves correctly.\n    const inject =\n      `window.__DIAGNOSTICS_STREAM__=${JSON.stringify('/diagnostics/stream.ndjson')};` +\n      `window.__DIAGNOSTICS_BUNDLE__=${JSON.stringify('/diagnostics/bundle.zip')};`;\n    const html = SPA_ASSETS['index.html'].replace(\n      '/*__DIAGNOSTICS_INJECT__*/',\n      inject\n    );\n    res.type('html').send(html);\n  });\n\n  router.get('/diagnostics/stream.ndjson', async (_req, res, next) => {\n    try {\n      await diag.flush?.();\n      const names = (await readdir(dir).catch(() => [] as string[]))\n        .filter((n) => NDJSON_RE.test(n))\n        .sort();\n      let out = '';\n      for (const name of names) {\n        const raw = await readFile(join(dir, name), 'utf8').catch(() => '');\n        if (raw.length > 0) out += scrubNdjson(raw);\n      }\n      res.type('application/x-ndjson').send(out);\n    } catch (err) {\n      next(err);\n    }\n  });\n\n  router.get('/diagnostics/bundle.zip', async (_req, res, next) => {\n    try {\n      await diag.flush?.();\n      const files = await collectBundleFiles(dir, buildBundleMeta(env));\n      res\n        .type('application/zip')\n        .set('Content-Disposition', 'attachment; filename=\"diagnostics.zip\"')\n        .send(packStoreZip(files));\n    } catch (err) {\n      next(err);\n    }\n  });\n\n  // Sanitising error handler — fs error messages carry absolute paths. MUST be\n  // last and take all four args.\n  router.use(\n    (_err: unknown, _req: Request, res: Response, _next: NextFunction) => {\n      if (res.headersSent) return;\n      res.status(500).type('text').send('internal error');\n    }\n  );\n\n  return router;\n}\n"]}

package/dist/diagnostics/spa-assets.generated.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"spa-assets.generated.d.ts","sourceRoot":"","sources":["../../src/diagnostics/spa-assets.generated.ts"],"names":[],"mappings":"AACA,eAAO,MAAM,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CA4sC7C,CAAC"}