@imgly/codesign-mcp 0.1.7 → 0.1.8

package/dist/cli/http.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"http.d.ts","sourceRoot":"","sources":["../../src/cli/http.ts"],"names":[],"mappings":"AA6EA,wBAAsB,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAyM5D"}
+{"version":3,"file":"http.d.ts","sourceRoot":"","sources":["../../src/cli/http.ts"],"names":[],"mappings":"AAoFA,wBAAsB,OAAO,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAsN5D"}

package/dist/cli/http.js

@@ -5,7 +5,8 @@
 // PER-SESSION ScopedWorkspaceFS + RevisionStore, wires the workspace resolver,
 // and mounts the viewer: fixed `/viewer` in `single` mode, multi-tenant
 // `/v/<sid>` in `session` mode (disabled in `header` mode — follow-up).
-import { loadConfig } from '../config.js';
+import { diagnosticsFileEnabled, diagnosticsToolEnabled, loadConfig, resolveDiagnosticsDir } from '../config.js';
+import { createDiagnosticsTool } from '../diagnostics/tool.js';
 import { ensureEngineAssetSources } from '../engine/asset-sources.js';
 import { cesdkAdapter } from '../engine/cesdk-adapter.js';
 import { Mutex } from '../engine/mutex.js';
@@ -60,7 +61,7 @@ export async function runHttp(_argv) {
         process.exit(1);
     }
     const { buildDiagnostics } = await import('./stdio.js');
-    const { telemetry } = buildDiagnostics();
+    const { telemetry, diag } = buildDiagnostics();
     const license = cfg.cesdkLicense;
     const { rawFs, s3: s3Backend } = await buildBackend(cfg);
     const broadcaster = new SseBroadcaster();
@@ -136,7 +137,7 @@ export async function runHttp(_argv) {
                 });
                 return new Uint8Array(await blob.arrayBuffer());
             };
-            const tools = buildDesignToolRegistrations({
+            const designTools = buildDesignToolRegistrations({
                 fs: scopedFs,
                 store,
                 session,
@@ -151,6 +152,19 @@ export async function runHttp(_argv) {
                 renderThumbnail: renderThumbnail,
                 telemetry
             });
+            const tools = diagnosticsToolEnabled(process.env)
+                ? [
+                    ...designTools,
+                    createDiagnosticsTool({
+                        env: process.env,
+                        transport: 'http',
+                        dir: resolveDiagnosticsDir(process.env),
+                        fileLogging: diagnosticsFileEnabled(process.env),
+                        flush: () => diag.flush?.() ?? Promise.resolve()
+                        // no viewerUrl on http — `open` returns the not-available note
+                    })
+                ]
+                : designTools;
             return { engine, tools };
         },
         mountExtras: (expressApp) => {

package/dist/cli/http.js.map

@@ -1 +1 @@
-{"version":3,"file":"http.js","sourceRoot":"","sources":["../../src/cli/http.ts"],"names":[],"mappings":"AAAA,wCAAwC;AACxC,EAAE;AACF,yEAAyE;AACzE,mEAAmE;AACnE,+EAA+E;AAC/E,wEAAwE;AACxE,wEAAwE;AACxE,OAAO,EAAE,UAAU,EAAqB,MAAM,cAAc,CAAC;AAC7D,OAAO,EAAE,wBAAwB,EAAE,MAAM,4BAA4B,CAAC;AACtE,OAAO,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAC1D,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,sBAAsB,EAAE,MAAM,8BAA8B,CAAC;AACtE,OAAO,EAAE,4BAA4B,EAAE,MAAM,2BAA2B,CAAC;AACzE,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AACzD,OAAO,EAAE,wBAAwB,EAAE,MAAM,mBAAmB,CAAC;AAC7D,OAAO,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAC;AAClE,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AACtD,OAAO,EACL,qBAAqB,EACrB,oBAAoB,EACrB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,4BAA4B,EAAE,MAAM,mBAAmB,CAAC;AACjE,OAAO,EACL,kBAAkB,EAClB,qBAAqB,EACrB,kBAAkB,EAClB,cAAc,EACd,aAAa,EACd,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,qBAAqB,EAAE,MAAM,uCAAuC,CAAC;AAC9E,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC1D,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACnD,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAC3D,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAGxD,MAAM,IAAI,GAAG,SAAS,CAAC,CAAC,sDAAsD;AAc9E,KAAK,UAAU,YAAY,CAAC,GAAiB;IAC3C,IAAI,GAAG,CAAC,SAAS,CAAC,OAAO,KAAK,IAAI,EAAE,CAAC;QACnC,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,MAAM,CAAC,oBAAoB,CAAC,CAAC;QACxD,MAAM,EAAE,GAAG,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;QAC5B,IAAI,CAAC,EAAE;YACL,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;QACvE,MAAM,MAAM,GAAG,IAAI,QAAQ,CAAC;YAC1B,MAAM,EAAE,EAAE,CAAC,MAAM;YACjB,GAAG,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,EAAE,CAAC,QAAQ,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACvE,GAAG,CAAC,EAAE,CAAC,WAAW,IAAI,EAAE,CAAC,eAAe;gBACtC,CAAC,CAAC;oBACE,WAAW,EAAE;wBACX,WAAW,EAAE,EAAE,CAAC,WAAW;wBAC3B,eAAe,EAAE,EAAE,CAAC,eAAe;qBACpC;iBACF;gBACH,CAAC,CAAC,EAAE,CAAC;SACR,CAAC,CAAC;QACH,OAAO;YACL,KAAK,EAAE,IAAI,aAAa,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC;YACvD,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE;SAClC,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,IAAI,eAAe,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,IAAI,OAAO,CAAC,EAAE,CAAC;AACtE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,KAAe;IAC3C,IAAI,GAAiB,CAAC;IACtB,IAAI,CAAC;QACH,GAAG,GAAG,UAAU,EAAE,CAAC;IACrB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,sBAAsB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAC3E,CAAC;QACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,EAAE,gBAAgB,EAAE,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC,CAAC;IACxD,MAAM,EAAE,SAAS,EAAE,GAAG,gBAAgB,EAAE,CAAC;IAEzC,MAAM,OAAO,GAAG,GAAG,CAAC,YAAY,CAAC;IACjC,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,SAAS,EAAE,GAAG,MAAM,YAAY,CAAC,GAAG,CAAC,CAAC;IACzD,MAAM,WAAW,GAAG,IAAI,cAAc,EAAE,CAAC;IACzC,MAAM,OAAO,GAAG,IAAI,kBAAkB,CAAC;QACrC,MAAM,EAAE,GAAG,CAAC,OAAO,CAAC,MAAM;QAC1B,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,GAAG,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAClE,CAAC,CAAC;IACH,wEAAwE;IACxE,4EAA4E;IAC5E,4EAA4E;IAC5E,yEAAyE;IACzE,0EAA0E;IAC1E,8DAA8D;IAC9D,MAAM,UAAU,GAAG,IAAI,KAAK,EAAE,CAAC;IAC/B,MAAM,kBAAkB,GAAG,qBAAqB,CAAC,GAAG,CAAC,CAAC;IAEtD,MAAM,GAAG,GAAG,MAAM,wBAAwB,CAAC;QACzC,MAAM,EAAE,cAAc,EAAE;QACxB,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,WAAW,EAAE,GAAG,CAAC,cAAc;QAC/B,aAAa,EAAE,GAAG,CAAC,aAAa;QAChC,kBAAkB;QAClB,sBAAsB,EAAE,kBAAkB;QAC1C,GAAG,CAAC,GAAG,CAAC,iBAAiB;YACvB,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,iBAAiB,EAAE,EAAE;YAC7C,CAAC,CAAC,EAAE,CAAC;QACP,aAAa,EAAE,KAAK,EAAE,EAAE,SAAS,EAAE,WAAW,EAAE,EAAE,EAAE;YAClD,MAAM,QAAQ,GAAG,IAAI,iBAAiB,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;YAC3D,MAAM,KAAK,GAAG,IAAI,aAAa,CAAC,QAAQ,CAAC,CAAC;YAC1C,MAAM,MAAM,GAAG,MAAM,oBAAoB,CAAC,OAAO,CAAC,CAAC;YACnD,0GAA0G;YAC1G,MAAM,wBAAwB,CAAC,MAAM,CAAC,CAAC;YACvC,0EAA0E;YAC1E,wEAAwE;YACxE,sBAAsB,CAAC,MAAM,CAAC,CAAC;YAC/B,wEAAwE;YACxE,wEAAwE;YACxE,iCAAiC;YACjC,MAAM,UAAU,GAAG,aAAa,CAAC;gBAC/B,aAAa,EAAE,GAAG,CAAC,aAAa;gBAChC,IAAI,EAAE,GAAG,CAAC,IAAI;gBACd,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,IAAI;gBACnB,SAAS;aACV,CAAC,CAAC;YACH,mEAAmE;YACnE,mEAAmE;YACnE,wEAAwE;YACxE,8DAA8D;YAC9D,iEAAiE;YACjE,MAAM,UAAU,GAAG,SAAS;gBAC1B,CAAC,CAAC,IAAI,qBAAqB,CAAC;oBACxB,IAAI,EAAE,UAAU;oBAChB,MAAM,EAAE,SAAS,CAAC,MAAM;oBACxB,MAAM,EAAE,SAAS,CAAC,MAAM;oBACxB,WAAW;iBACZ,CAAC;gBACJ,CAAC,CAAC,IAAI,qBAAqB,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC;YACpD,2EAA2E;YAC3E,2EAA2E;YAC3E,mEAAmE;YACnE,yDAAyD;YACzD,wEAAwE;YACxE,4BAA4B,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;YACjD,MAAM,OAAO,GAAG,IAAI,aAAa,CAAC;gBAChC,IAAI,EAAE,CAAC;gBACP,OAAO,EAAE,YAAY,CAAC,MAAM,CAAC;aAC9B,CAAC,CAAC;YACH,MAAM,eAAe,GAAG,KAAK,EAAE,EAC7B,MAAM,EAAE,GAAG,EAIZ,EAAE,EAAE;gBACH,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,CAAC;gBAC3C,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;oBAAE,MAAM,IAAI,KAAK,CAAC,UAAU,CAAC,CAAC;gBACpD,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE;oBAC1D,WAAW,EAAE,GAAG;iBACjB,CAAC,CAAC;gBACH,OAAO,IAAI,UAAU,CAAC,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;YAClD,CAAC,CAAC;YACF,MAAM,KAAK,GAAG,4BAA4B,CAAC;gBACzC,EAAE,EAAE,QAAQ;gBACZ,KAAK;gBACL,OAAO;gBACP,UAAU;gBACV,OAAO;gBACP,UAAU;gBACV,YAAY,EAAE,KAAK;gBACnB,aAAa,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC,CAAC;gBAC9C,2EAA2E;gBAC3E,4EAA4E;gBAC5E,6EAA6E;gBAC7E,eAAe,EAAE,eAAwB;gBACzC,SAAS;aACV,CAAC,CAAC;YACH,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;QAC3B,CAAC;QACD,WAAW,EAAE,CAAC,UAAU,EAAE,EAAE;YAC1B,IAAI,GAAG,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;gBAChC,qEAAqE;gBACrE,kBAAkB,CAAC,UAAU,EAAE;oBAC7B,KAAK;oBACL,WAAW;oBACX,YAAY,EAAE,OAAO;iBACtB,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;YACD,IAAI,GAAG,CAAC,IAAI,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBAC/B,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,0CAA0C,GAAG,CAAC,IAAI,CAAC,IAAI,gDAAgD,CACxG,CAAC;gBACF,OAAO;YACT,CAAC;YACD,MAAM,cAAc,GAAG,IAAI,iBAAiB,CAC1C,KAAK,EACL,GAAG,CAAC,IAAI,CAAC,gBAAgB,IAAI,SAAS,CACvC,CAAC;YACF,MAAM,WAAW,GAAG,IAAI,aAAa,CAAC,cAAc,CAAC,CAAC;YACtD,UAAU,CAAC,GAAG,CACZ,SAAS,EACT,kBAAkB,CAAC;gBACjB,KAAK,EAAE,WAAW;gBAClB,EAAE,EAAE,cAAc;gBAClB,WAAW;gBACX,YAAY,EAAE,OAAO;aACtB,CAAC,CACH,CAAC;QACJ,CAAC;KACF,CAAC,CAAC;IAEH,MAAM,UAAU,GAAG,WAAW,CAC5B,GAAG,EAAE,CACH,KAAK,GAAG,CAAC,QAAQ,CAAC,SAAS,EAAE,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7C,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;YACpB,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,8BAA8B,OAAO,CAAC,MAAM,oBAAoB,CACjE,CAAC;IACN,CAAC,CAAC,EACJ,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,aAAa,GAAG,CAAC,CAAC,CACxC,CAAC;IAEF,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE;QAC7C,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,0CAA0C,IAAI,IAAI,GAAG,CAAC,IAAI,MAAM;YAC9D,UAAU,GAAG,CAAC,IAAI,CAAC,IAAI,YAAY,GAAG,CAAC,SAAS,CAAC,OAAO,KAAK,CAChE,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,IAAI,YAAY,GAAG,KAAK,CAAC;IACzB,MAAM,QAAQ,GAAG,KAAK,EAAE,MAAc,EAAE,EAAE;QACxC,IAAI,YAAY,EAAE,CAAC;YACjB,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,sBAAsB,MAAM,0BAA0B,CACvD,CAAC;YACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QACD,YAAY,GAAG,IAAI,CAAC;QACpB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,sBAAsB,MAAM,qBAAqB,CAAC,CAAC;QACxE,MAAM,QAAQ,GAAG,UAAU,CAAC,GAAG,EAAE;YAC/B,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,yDAAyD,CAC1D,CAAC;YACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC,EAAE,IAAI,CAAC,CAAC;QACT,QAAQ,CAAC,KAAK,EAAE,CAAC;QACjB,aAAa,CAAC,UAAU,CAAC,CAAC;QAC1B,MAAM,CAAC,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,mBAAmB,EAAE,CAAC;QAC7B,WAAW,CAAC,QAAQ,EAAE,CAAC;QACvB,MAAM,GAAG,CAAC,QAAQ,EAAE,CAAC;QACrB,iEAAiE;QACjE,uEAAuE;QACvE,4EAA4E;QAC5E,2EAA2E;QAC3E,IAAI,CAAC;YACH,MAAM,qBAAqB,EAAE,CAAC;QAChC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,8CACE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CACjD,IAAI,CACL,CAAC;QACJ,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC;IACF,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,KAAK,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;IACpD,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,KAAK,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC;AACxD,CAAC","sourcesContent":["// packages/codesign-mcp/src/cli/http.ts\n//\n// codesign-mcp http — Streamable HTTP transport. Composition root: loads\n// IMGLY_* config, selects the storage backend (local|s3), builds a\n// PER-SESSION ScopedWorkspaceFS + RevisionStore, wires the workspace resolver,\n// and mounts the viewer: fixed `/viewer` in `single` mode, multi-tenant\n// `/v/<sid>` in `session` mode (disabled in `header` mode — follow-up).\nimport { loadConfig, type ServerConfig } from '../config.js';\nimport { ensureEngineAssetSources } from '../engine/asset-sources.js';\nimport { cesdkAdapter } from '../engine/cesdk-adapter.js';\nimport { Mutex } from '../engine/mutex.js';\nimport { EngineSession } from '../engine/session.js';\nimport { registerUnsplashSource } from '../engine/unsplash-source.js';\nimport { registerWorkspaceUriResolver } from '../engine/uri-resolver.js';\nimport { LocalGatewayClient } from '../gateway/local.js';\nimport { createCodesignHttpServer } from '../http/server.js';\nimport { makeWorkspaceResolver } from '../http/workspace-auth.js';\nimport { RevisionStore } from '../revisions/store.js';\nimport {\n  disposeHeadlessEngine,\n  ensureHeadlessEngine\n} from '../tools/engine.js';\nimport { buildDesignToolRegistrations } from '../tools/index.js';\nimport {\n  createViewerRouter,\n  LocalViewerUrlBuilder,\n  mountSessionViewer,\n  SseBroadcaster,\n  viewerBaseFor\n} from '../viewer/index.js';\nimport { PresignedR2UrlBuilder } from '../viewer/presigned-r2-url-builder.js';\nimport { NodeWorkspaceFS } from '../workspace/node-fs.js';\nimport { S3WorkspaceFS } from '../workspace/s3.js';\nimport { ScopedWorkspaceFS } from '../workspace/scoped.js';\nimport { loadNodeAssets } from '../assets/load-node.js';\nimport type { WorkspaceFS } from '../workspace/types.js';\n\nconst HOST = '0.0.0.0'; // bind all interfaces; TLS/routing is the front's job\n\ninterface S3BackendInfo {\n  /** The real S3Client — used to build per-session presigned download URLs. */\n  client: import('@aws-sdk/client-s3').S3Client;\n  bucket: string;\n}\n\ninterface BackendResult {\n  rawFs: WorkspaceFS;\n  /** Present only when the s3 backend is active. */\n  s3?: S3BackendInfo;\n}\n\nasync function buildBackend(cfg: ServerConfig): Promise<BackendResult> {\n  if (cfg.workspace.backend === 's3') {\n    const { S3Client } = await import('@aws-sdk/client-s3');\n    const s3 = cfg.workspace.s3;\n    if (!s3)\n      throw new Error('config: s3 backend selected but s3 config missing');\n    const client = new S3Client({\n      region: s3.region,\n      ...(s3.endpoint ? { endpoint: s3.endpoint, forcePathStyle: true } : {}),\n      ...(s3.accessKeyId && s3.secretAccessKey\n        ? {\n            credentials: {\n              accessKeyId: s3.accessKeyId,\n              secretAccessKey: s3.secretAccessKey\n            }\n          }\n        : {})\n    });\n    return {\n      rawFs: new S3WorkspaceFS({ client, bucket: s3.bucket }),\n      s3: { client, bucket: s3.bucket }\n    };\n  }\n  return { rawFs: new NodeWorkspaceFS(cfg.workspace.dir ?? '/data') };\n}\n\nexport async function runHttp(_argv: string[]): Promise<void> {\n  let cfg: ServerConfig;\n  try {\n    cfg = loadConfig();\n  } catch (err) {\n    process.stderr.write(\n      `codesign-mcp http: ${err instanceof Error ? err.message : String(err)}\\n`\n    );\n    process.exit(1);\n  }\n\n  const { buildDiagnostics } = await import('./stdio.js');\n  const { telemetry } = buildDiagnostics();\n\n  const license = cfg.cesdkLicense;\n  const { rawFs, s3: s3Backend } = await buildBackend(cfg);\n  const broadcaster = new SseBroadcaster();\n  const gateway = new LocalGatewayClient({\n    apiKey: cfg.gateway.apiKey,\n    ...(cfg.gateway.baseUrl ? { endpoint: cfg.gateway.baseUrl } : {})\n  });\n  // ensureHeadlessEngine is a process singleton, so EVERY session's tools\n  // operate on the same CE.SDK engine. This one lock — created once here, NOT\n  // per session — serializes all engine access across sessions so two clients\n  // editing concurrently can't corrupt each other's scene. When the engine\n  // becomes a per-session/per-workspace pool, this moves to be one lock per\n  // engine (per pool slot) so distinct engines run in parallel.\n  const engineLock = new Mutex();\n  const resolveWorkspaceId = makeWorkspaceResolver(cfg);\n\n  const app = await createCodesignHttpServer({\n    assets: loadNodeAssets(),\n    buildId: cfg.buildId,\n    maxSessions: cfg.maxHttpEngines,\n    idleTimeoutMs: cfg.idleTimeoutMs,\n    resolveWorkspaceId,\n    trustedSessionIdHeader: 'x-mcp-session-id',\n    ...(cfg.viewerCorsOrigins\n      ? { cors: { origin: cfg.viewerCorsOrigins } }\n      : {}),\n    createSession: async ({ sessionId, workspaceId }) => {\n      const scopedFs = new ScopedWorkspaceFS(rawFs, workspaceId);\n      const store = new RevisionStore(scopedFs);\n      const engine = await ensureHeadlessEngine(license);\n      // Idempotent (engine is a process singleton) — only the first successful registration pays the CDN fetch.\n      await ensureEngineAssetSources(engine);\n      // Demo `unsplash` custom source (synchronous, idempotent) so asset_search\n      // has a real remote source alongside the CDN ones. Public IMG.LY proxy.\n      registerUnsplashSource(engine);\n      // Per-session viewer base: session mode lives under /v/<sid> (reachable\n      // through the CF Worker when IMGLY_PUBLIC_BASE_URL is set); single mode\n      // keeps the fixed /viewer mount.\n      const viewerBase = viewerBaseFor({\n        publicBaseUrl: cfg.publicBaseUrl,\n        port: cfg.port,\n        mode: cfg.auth.mode,\n        sessionId\n      });\n      // Build a per-session URL builder. On the S3/R2 backend we use the\n      // PresignedR2UrlBuilder so forDownload returns a presigned GET URL\n      // directly from R2 — the /r/ Express route is not mounted on the hosted\n      // Cloudflare deployment. On the local backend we fall back to\n      // LocalViewerUrlBuilder (forDownload == forResource == /r/ URL).\n      const urlBuilder = s3Backend\n        ? new PresignedR2UrlBuilder({\n            base: viewerBase,\n            client: s3Backend.client,\n            bucket: s3Backend.bucket,\n            workspaceId\n          })\n        : new LocalViewerUrlBuilder({ base: viewerBase });\n      // The engine and its URI resolver are process-global (ensureHeadlessEngine\n      // is a cached singleton). Re-registering here is redundant after the first\n      // session but harmless — the resolver is always the same function.\n      // PresignedR2UrlBuilder inherits forResource (sync) from\n      // LocalViewerUrlBuilder, so the sync URI-resolver callback stays valid.\n      registerWorkspaceUriResolver(engine, urlBuilder);\n      const session = new EngineSession({\n        size: 1,\n        adapter: cesdkAdapter(engine)\n      });\n      const renderThumbnail = async ({\n        engine: eng\n      }: {\n        revision: string;\n        engine: import('@cesdk/engine').default;\n      }) => {\n        const pages = eng.scene.getPages?.() ?? [];\n        if (pages.length === 0) throw new Error('no pages');\n        const blob = await eng.block.export(pages[0], 'image/webp', {\n          targetWidth: 256\n        });\n        return new Uint8Array(await blob.arrayBuffer());\n      };\n      const tools = buildDesignToolRegistrations({\n        fs: scopedFs,\n        store,\n        session,\n        engineLock,\n        gateway,\n        urlBuilder,\n        allowOutPath: false,\n        onLeafWritten: (e) => broadcaster.broadcast(e),\n        // `as never`: buildDesignToolRegistrations is generic over the engine type\n        // (unknown at this composition root); the concrete @cesdk/engine type isn't\n        // threaded up here, so this is the sanctioned boundary cast (see no-as-any).\n        renderThumbnail: renderThumbnail as never,\n        telemetry\n      });\n      return { engine, tools };\n    },\n    mountExtras: (expressApp) => {\n      if (cfg.auth.mode === 'session') {\n        // Multi-tenant viewer: /v/<sid> scopes reads to s/<sid> per request.\n        mountSessionViewer(expressApp, {\n          rawFs,\n          broadcaster,\n          cesdkLicense: license\n        });\n        return;\n      }\n      if (cfg.auth.mode !== 'single') {\n        process.stderr.write(\n          `codesign-mcp http: viewer disabled in \"${cfg.auth.mode}\" mode (multi-tenant viewer is a follow-up).\\n`\n        );\n        return;\n      }\n      const viewerScopedFs = new ScopedWorkspaceFS(\n        rawFs,\n        cfg.auth.fixedWorkspaceId ?? 'default'\n      );\n      const viewerStore = new RevisionStore(viewerScopedFs);\n      expressApp.use(\n        '/viewer',\n        createViewerRouter({\n          store: viewerStore,\n          fs: viewerScopedFs,\n          broadcaster,\n          cesdkLicense: license\n        })\n      );\n    }\n  });\n\n  const evictTimer = setInterval(\n    () =>\n      void app.sessions.evictIdle().then((evicted) => {\n        if (evicted.length > 0)\n          process.stderr.write(\n            `codesign-mcp http: evicted ${evicted.length} idle session(s)\\n`\n          );\n      }),\n    Math.max(10_000, cfg.idleTimeoutMs / 2)\n  );\n\n  const server = app.listen(cfg.port, HOST, () => {\n    process.stderr.write(\n      `codesign-mcp http: listening on http://${HOST}:${cfg.port}/mcp` +\n        ` (mode=${cfg.auth.mode} backend=${cfg.workspace.backend})\\n`\n    );\n  });\n\n  let shuttingDown = false;\n  const shutdown = async (signal: string) => {\n    if (shuttingDown) {\n      process.stderr.write(\n        `codesign-mcp http: ${signal} again — forcing exit.\\n`\n      );\n      process.exit(1);\n    }\n    shuttingDown = true;\n    process.stderr.write(`codesign-mcp http: ${signal} — shutting down.\\n`);\n    const hardExit = setTimeout(() => {\n      process.stderr.write(\n        'codesign-mcp http: shutdown timed out — forcing exit.\\n'\n      );\n      process.exit(1);\n    }, 5000);\n    hardExit.unref();\n    clearInterval(evictTimer);\n    server.close();\n    server.closeAllConnections();\n    broadcaster.closeAll();\n    await app.shutdown();\n    // The engine is a process singleton shared by every session (see\n    // ensureHeadlessEngine), so per-session destroy can't dispose it — the\n    // process exit does. Release it deterministically here. When engines become\n    // a fixed pool, disposal moves to per-slot teardown inside app.shutdown().\n    try {\n      await disposeHeadlessEngine();\n    } catch (err) {\n      process.stderr.write(\n        `codesign-mcp http: engine dispose failed — ${\n          err instanceof Error ? err.message : String(err)\n        }\\n`\n      );\n    }\n    process.exit(0);\n  };\n  process.on('SIGINT', () => void shutdown('SIGINT'));\n  process.on('SIGTERM', () => void shutdown('SIGTERM'));\n}\n"]}
+{"version":3,"file":"http.js","sourceRoot":"","sources":["../../src/cli/http.ts"],"names":[],"mappings":"AAAA,wCAAwC;AACxC,EAAE;AACF,yEAAyE;AACzE,mEAAmE;AACnE,+EAA+E;AAC/E,wEAAwE;AACxE,wEAAwE;AACxE,OAAO,EACL,sBAAsB,EACtB,sBAAsB,EACtB,UAAU,EACV,qBAAqB,EAEtB,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAC/D,OAAO,EAAE,wBAAwB,EAAE,MAAM,4BAA4B,CAAC;AACtE,OAAO,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAC1D,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,sBAAsB,EAAE,MAAM,8BAA8B,CAAC;AACtE,OAAO,EAAE,4BAA4B,EAAE,MAAM,2BAA2B,CAAC;AACzE,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AACzD,OAAO,EAAE,wBAAwB,EAAE,MAAM,mBAAmB,CAAC;AAC7D,OAAO,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAC;AAClE,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AACtD,OAAO,EACL,qBAAqB,EACrB,oBAAoB,EACrB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,4BAA4B,EAAE,MAAM,mBAAmB,CAAC;AACjE,OAAO,EACL,kBAAkB,EAClB,qBAAqB,EACrB,kBAAkB,EAClB,cAAc,EACd,aAAa,EACd,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,qBAAqB,EAAE,MAAM,uCAAuC,CAAC;AAC9E,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC1D,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACnD,OAAO,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAC3D,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAGxD,MAAM,IAAI,GAAG,SAAS,CAAC,CAAC,sDAAsD;AAc9E,KAAK,UAAU,YAAY,CAAC,GAAiB;IAC3C,IAAI,GAAG,CAAC,SAAS,CAAC,OAAO,KAAK,IAAI,EAAE,CAAC;QACnC,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,MAAM,CAAC,oBAAoB,CAAC,CAAC;QACxD,MAAM,EAAE,GAAG,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;QAC5B,IAAI,CAAC,EAAE;YACL,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;QACvE,MAAM,MAAM,GAAG,IAAI,QAAQ,CAAC;YAC1B,MAAM,EAAE,EAAE,CAAC,MAAM;YACjB,GAAG,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,EAAE,CAAC,QAAQ,EAAE,cAAc,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACvE,GAAG,CAAC,EAAE,CAAC,WAAW,IAAI,EAAE,CAAC,eAAe;gBACtC,CAAC,CAAC;oBACE,WAAW,EAAE;wBACX,WAAW,EAAE,EAAE,CAAC,WAAW;wBAC3B,eAAe,EAAE,EAAE,CAAC,eAAe;qBACpC;iBACF;gBACH,CAAC,CAAC,EAAE,CAAC;SACR,CAAC,CAAC;QACH,OAAO;YACL,KAAK,EAAE,IAAI,aAAa,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC;YACvD,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE;SAClC,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,KAAK,EAAE,IAAI,eAAe,CAAC,GAAG,CAAC,SAAS,CAAC,GAAG,IAAI,OAAO,CAAC,EAAE,CAAC;AACtE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,OAAO,CAAC,KAAe;IAC3C,IAAI,GAAiB,CAAC;IACtB,IAAI,CAAC;QACH,GAAG,GAAG,UAAU,EAAE,CAAC;IACrB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,sBAAsB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAC3E,CAAC;QACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,MAAM,EAAE,gBAAgB,EAAE,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC,CAAC;IACxD,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,gBAAgB,EAAE,CAAC;IAE/C,MAAM,OAAO,GAAG,GAAG,CAAC,YAAY,CAAC;IACjC,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,SAAS,EAAE,GAAG,MAAM,YAAY,CAAC,GAAG,CAAC,CAAC;IACzD,MAAM,WAAW,GAAG,IAAI,cAAc,EAAE,CAAC;IACzC,MAAM,OAAO,GAAG,IAAI,kBAAkB,CAAC;QACrC,MAAM,EAAE,GAAG,CAAC,OAAO,CAAC,MAAM;QAC1B,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,GAAG,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAClE,CAAC,CAAC;IACH,wEAAwE;IACxE,4EAA4E;IAC5E,4EAA4E;IAC5E,yEAAyE;IACzE,0EAA0E;IAC1E,8DAA8D;IAC9D,MAAM,UAAU,GAAG,IAAI,KAAK,EAAE,CAAC;IAC/B,MAAM,kBAAkB,GAAG,qBAAqB,CAAC,GAAG,CAAC,CAAC;IAEtD,MAAM,GAAG,GAAG,MAAM,wBAAwB,CAAC;QACzC,MAAM,EAAE,cAAc,EAAE;QACxB,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,WAAW,EAAE,GAAG,CAAC,cAAc;QAC/B,aAAa,EAAE,GAAG,CAAC,aAAa;QAChC,kBAAkB;QAClB,sBAAsB,EAAE,kBAAkB;QAC1C,GAAG,CAAC,GAAG,CAAC,iBAAiB;YACvB,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,iBAAiB,EAAE,EAAE;YAC7C,CAAC,CAAC,EAAE,CAAC;QACP,aAAa,EAAE,KAAK,EAAE,EAAE,SAAS,EAAE,WAAW,EAAE,EAAE,EAAE;YAClD,MAAM,QAAQ,GAAG,IAAI,iBAAiB,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;YAC3D,MAAM,KAAK,GAAG,IAAI,aAAa,CAAC,QAAQ,CAAC,CAAC;YAC1C,MAAM,MAAM,GAAG,MAAM,oBAAoB,CAAC,OAAO,CAAC,CAAC;YACnD,0GAA0G;YAC1G,MAAM,wBAAwB,CAAC,MAAM,CAAC,CAAC;YACvC,0EAA0E;YAC1E,wEAAwE;YACxE,sBAAsB,CAAC,MAAM,CAAC,CAAC;YAC/B,wEAAwE;YACxE,wEAAwE;YACxE,iCAAiC;YACjC,MAAM,UAAU,GAAG,aAAa,CAAC;gBAC/B,aAAa,EAAE,GAAG,CAAC,aAAa;gBAChC,IAAI,EAAE,GAAG,CAAC,IAAI;gBACd,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,IAAI;gBACnB,SAAS;aACV,CAAC,CAAC;YACH,mEAAmE;YACnE,mEAAmE;YACnE,wEAAwE;YACxE,8DAA8D;YAC9D,iEAAiE;YACjE,MAAM,UAAU,GAAG,SAAS;gBAC1B,CAAC,CAAC,IAAI,qBAAqB,CAAC;oBACxB,IAAI,EAAE,UAAU;oBAChB,MAAM,EAAE,SAAS,CAAC,MAAM;oBACxB,MAAM,EAAE,SAAS,CAAC,MAAM;oBACxB,WAAW;iBACZ,CAAC;gBACJ,CAAC,CAAC,IAAI,qBAAqB,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC;YACpD,2EAA2E;YAC3E,2EAA2E;YAC3E,mEAAmE;YACnE,yDAAyD;YACzD,wEAAwE;YACxE,4BAA4B,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;YACjD,MAAM,OAAO,GAAG,IAAI,aAAa,CAAC;gBAChC,IAAI,EAAE,CAAC;gBACP,OAAO,EAAE,YAAY,CAAC,MAAM,CAAC;aAC9B,CAAC,CAAC;YACH,MAAM,eAAe,GAAG,KAAK,EAAE,EAC7B,MAAM,EAAE,GAAG,EAIZ,EAAE,EAAE;gBACH,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,QAAQ,EAAE,EAAE,IAAI,EAAE,CAAC;gBAC3C,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;oBAAE,MAAM,IAAI,KAAK,CAAC,UAAU,CAAC,CAAC;gBACpD,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE;oBAC1D,WAAW,EAAE,GAAG;iBACjB,CAAC,CAAC;gBACH,OAAO,IAAI,UAAU,CAAC,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;YAClD,CAAC,CAAC;YACF,MAAM,WAAW,GAAG,4BAA4B,CAAC;gBAC/C,EAAE,EAAE,QAAQ;gBACZ,KAAK;gBACL,OAAO;gBACP,UAAU;gBACV,OAAO;gBACP,UAAU;gBACV,YAAY,EAAE,KAAK;gBACnB,aAAa,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC,CAAC;gBAC9C,2EAA2E;gBAC3E,4EAA4E;gBAC5E,6EAA6E;gBAC7E,eAAe,EAAE,eAAwB;gBACzC,SAAS;aACV,CAAC,CAAC;YACH,MAAM,KAAK,GAAG,sBAAsB,CAAC,OAAO,CAAC,GAAG,CAAC;gBAC/C,CAAC,CAAC;oBACE,GAAG,WAAW;oBACd,qBAAqB,CAAC;wBACpB,GAAG,EAAE,OAAO,CAAC,GAAG;wBAChB,SAAS,EAAE,MAAM;wBACjB,GAAG,EAAE,qBAAqB,CAAC,OAAO,CAAC,GAAG,CAAC;wBACvC,WAAW,EAAE,sBAAsB,CAAC,OAAO,CAAC,GAAG,CAAC;wBAChD,KAAK,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,IAAI,OAAO,CAAC,OAAO,EAAE;wBAChD,+DAA+D;qBAChE,CAAC;iBACH;gBACH,CAAC,CAAC,WAAW,CAAC;YAChB,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;QAC3B,CAAC;QACD,WAAW,EAAE,CAAC,UAAU,EAAE,EAAE;YAC1B,IAAI,GAAG,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;gBAChC,qEAAqE;gBACrE,kBAAkB,CAAC,UAAU,EAAE;oBAC7B,KAAK;oBACL,WAAW;oBACX,YAAY,EAAE,OAAO;iBACtB,CAAC,CAAC;gBACH,OAAO;YACT,CAAC;YACD,IAAI,GAAG,CAAC,IAAI,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBAC/B,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,0CAA0C,GAAG,CAAC,IAAI,CAAC,IAAI,gDAAgD,CACxG,CAAC;gBACF,OAAO;YACT,CAAC;YACD,MAAM,cAAc,GAAG,IAAI,iBAAiB,CAC1C,KAAK,EACL,GAAG,CAAC,IAAI,CAAC,gBAAgB,IAAI,SAAS,CACvC,CAAC;YACF,MAAM,WAAW,GAAG,IAAI,aAAa,CAAC,cAAc,CAAC,CAAC;YACtD,UAAU,CAAC,GAAG,CACZ,SAAS,EACT,kBAAkB,CAAC;gBACjB,KAAK,EAAE,WAAW;gBAClB,EAAE,EAAE,cAAc;gBAClB,WAAW;gBACX,YAAY,EAAE,OAAO;aACtB,CAAC,CACH,CAAC;QACJ,CAAC;KACF,CAAC,CAAC;IAEH,MAAM,UAAU,GAAG,WAAW,CAC5B,GAAG,EAAE,CACH,KAAK,GAAG,CAAC,QAAQ,CAAC,SAAS,EAAE,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7C,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;YACpB,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,8BAA8B,OAAO,CAAC,MAAM,oBAAoB,CACjE,CAAC;IACN,CAAC,CAAC,EACJ,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,aAAa,GAAG,CAAC,CAAC,CACxC,CAAC;IAEF,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,EAAE;QAC7C,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,0CAA0C,IAAI,IAAI,GAAG,CAAC,IAAI,MAAM;YAC9D,UAAU,GAAG,CAAC,IAAI,CAAC,IAAI,YAAY,GAAG,CAAC,SAAS,CAAC,OAAO,KAAK,CAChE,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,IAAI,YAAY,GAAG,KAAK,CAAC;IACzB,MAAM,QAAQ,GAAG,KAAK,EAAE,MAAc,EAAE,EAAE;QACxC,IAAI,YAAY,EAAE,CAAC;YACjB,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,sBAAsB,MAAM,0BAA0B,CACvD,CAAC;YACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QACD,YAAY,GAAG,IAAI,CAAC;QACpB,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,sBAAsB,MAAM,qBAAqB,CAAC,CAAC;QACxE,MAAM,QAAQ,GAAG,UAAU,CAAC,GAAG,EAAE;YAC/B,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,yDAAyD,CAC1D,CAAC;YACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC,EAAE,IAAI,CAAC,CAAC;QACT,QAAQ,CAAC,KAAK,EAAE,CAAC;QACjB,aAAa,CAAC,UAAU,CAAC,CAAC;QAC1B,MAAM,CAAC,KAAK,EAAE,CAAC;QACf,MAAM,CAAC,mBAAmB,EAAE,CAAC;QAC7B,WAAW,CAAC,QAAQ,EAAE,CAAC;QACvB,MAAM,GAAG,CAAC,QAAQ,EAAE,CAAC;QACrB,iEAAiE;QACjE,uEAAuE;QACvE,4EAA4E;QAC5E,2EAA2E;QAC3E,IAAI,CAAC;YACH,MAAM,qBAAqB,EAAE,CAAC;QAChC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,8CACE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CACjD,IAAI,CACL,CAAC;QACJ,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC;IACF,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,KAAK,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;IACpD,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,KAAK,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC;AACxD,CAAC","sourcesContent":["// packages/codesign-mcp/src/cli/http.ts\n//\n// codesign-mcp http — Streamable HTTP transport. Composition root: loads\n// IMGLY_* config, selects the storage backend (local|s3), builds a\n// PER-SESSION ScopedWorkspaceFS + RevisionStore, wires the workspace resolver,\n// and mounts the viewer: fixed `/viewer` in `single` mode, multi-tenant\n// `/v/<sid>` in `session` mode (disabled in `header` mode — follow-up).\nimport {\n  diagnosticsFileEnabled,\n  diagnosticsToolEnabled,\n  loadConfig,\n  resolveDiagnosticsDir,\n  type ServerConfig\n} from '../config.js';\nimport { createDiagnosticsTool } from '../diagnostics/tool.js';\nimport { ensureEngineAssetSources } from '../engine/asset-sources.js';\nimport { cesdkAdapter } from '../engine/cesdk-adapter.js';\nimport { Mutex } from '../engine/mutex.js';\nimport { EngineSession } from '../engine/session.js';\nimport { registerUnsplashSource } from '../engine/unsplash-source.js';\nimport { registerWorkspaceUriResolver } from '../engine/uri-resolver.js';\nimport { LocalGatewayClient } from '../gateway/local.js';\nimport { createCodesignHttpServer } from '../http/server.js';\nimport { makeWorkspaceResolver } from '../http/workspace-auth.js';\nimport { RevisionStore } from '../revisions/store.js';\nimport {\n  disposeHeadlessEngine,\n  ensureHeadlessEngine\n} from '../tools/engine.js';\nimport { buildDesignToolRegistrations } from '../tools/index.js';\nimport {\n  createViewerRouter,\n  LocalViewerUrlBuilder,\n  mountSessionViewer,\n  SseBroadcaster,\n  viewerBaseFor\n} from '../viewer/index.js';\nimport { PresignedR2UrlBuilder } from '../viewer/presigned-r2-url-builder.js';\nimport { NodeWorkspaceFS } from '../workspace/node-fs.js';\nimport { S3WorkspaceFS } from '../workspace/s3.js';\nimport { ScopedWorkspaceFS } from '../workspace/scoped.js';\nimport { loadNodeAssets } from '../assets/load-node.js';\nimport type { WorkspaceFS } from '../workspace/types.js';\n\nconst HOST = '0.0.0.0'; // bind all interfaces; TLS/routing is the front's job\n\ninterface S3BackendInfo {\n  /** The real S3Client — used to build per-session presigned download URLs. */\n  client: import('@aws-sdk/client-s3').S3Client;\n  bucket: string;\n}\n\ninterface BackendResult {\n  rawFs: WorkspaceFS;\n  /** Present only when the s3 backend is active. */\n  s3?: S3BackendInfo;\n}\n\nasync function buildBackend(cfg: ServerConfig): Promise<BackendResult> {\n  if (cfg.workspace.backend === 's3') {\n    const { S3Client } = await import('@aws-sdk/client-s3');\n    const s3 = cfg.workspace.s3;\n    if (!s3)\n      throw new Error('config: s3 backend selected but s3 config missing');\n    const client = new S3Client({\n      region: s3.region,\n      ...(s3.endpoint ? { endpoint: s3.endpoint, forcePathStyle: true } : {}),\n      ...(s3.accessKeyId && s3.secretAccessKey\n        ? {\n            credentials: {\n              accessKeyId: s3.accessKeyId,\n              secretAccessKey: s3.secretAccessKey\n            }\n          }\n        : {})\n    });\n    return {\n      rawFs: new S3WorkspaceFS({ client, bucket: s3.bucket }),\n      s3: { client, bucket: s3.bucket }\n    };\n  }\n  return { rawFs: new NodeWorkspaceFS(cfg.workspace.dir ?? '/data') };\n}\n\nexport async function runHttp(_argv: string[]): Promise<void> {\n  let cfg: ServerConfig;\n  try {\n    cfg = loadConfig();\n  } catch (err) {\n    process.stderr.write(\n      `codesign-mcp http: ${err instanceof Error ? err.message : String(err)}\\n`\n    );\n    process.exit(1);\n  }\n\n  const { buildDiagnostics } = await import('./stdio.js');\n  const { telemetry, diag } = buildDiagnostics();\n\n  const license = cfg.cesdkLicense;\n  const { rawFs, s3: s3Backend } = await buildBackend(cfg);\n  const broadcaster = new SseBroadcaster();\n  const gateway = new LocalGatewayClient({\n    apiKey: cfg.gateway.apiKey,\n    ...(cfg.gateway.baseUrl ? { endpoint: cfg.gateway.baseUrl } : {})\n  });\n  // ensureHeadlessEngine is a process singleton, so EVERY session's tools\n  // operate on the same CE.SDK engine. This one lock — created once here, NOT\n  // per session — serializes all engine access across sessions so two clients\n  // editing concurrently can't corrupt each other's scene. When the engine\n  // becomes a per-session/per-workspace pool, this moves to be one lock per\n  // engine (per pool slot) so distinct engines run in parallel.\n  const engineLock = new Mutex();\n  const resolveWorkspaceId = makeWorkspaceResolver(cfg);\n\n  const app = await createCodesignHttpServer({\n    assets: loadNodeAssets(),\n    buildId: cfg.buildId,\n    maxSessions: cfg.maxHttpEngines,\n    idleTimeoutMs: cfg.idleTimeoutMs,\n    resolveWorkspaceId,\n    trustedSessionIdHeader: 'x-mcp-session-id',\n    ...(cfg.viewerCorsOrigins\n      ? { cors: { origin: cfg.viewerCorsOrigins } }\n      : {}),\n    createSession: async ({ sessionId, workspaceId }) => {\n      const scopedFs = new ScopedWorkspaceFS(rawFs, workspaceId);\n      const store = new RevisionStore(scopedFs);\n      const engine = await ensureHeadlessEngine(license);\n      // Idempotent (engine is a process singleton) — only the first successful registration pays the CDN fetch.\n      await ensureEngineAssetSources(engine);\n      // Demo `unsplash` custom source (synchronous, idempotent) so asset_search\n      // has a real remote source alongside the CDN ones. Public IMG.LY proxy.\n      registerUnsplashSource(engine);\n      // Per-session viewer base: session mode lives under /v/<sid> (reachable\n      // through the CF Worker when IMGLY_PUBLIC_BASE_URL is set); single mode\n      // keeps the fixed /viewer mount.\n      const viewerBase = viewerBaseFor({\n        publicBaseUrl: cfg.publicBaseUrl,\n        port: cfg.port,\n        mode: cfg.auth.mode,\n        sessionId\n      });\n      // Build a per-session URL builder. On the S3/R2 backend we use the\n      // PresignedR2UrlBuilder so forDownload returns a presigned GET URL\n      // directly from R2 — the /r/ Express route is not mounted on the hosted\n      // Cloudflare deployment. On the local backend we fall back to\n      // LocalViewerUrlBuilder (forDownload == forResource == /r/ URL).\n      const urlBuilder = s3Backend\n        ? new PresignedR2UrlBuilder({\n            base: viewerBase,\n            client: s3Backend.client,\n            bucket: s3Backend.bucket,\n            workspaceId\n          })\n        : new LocalViewerUrlBuilder({ base: viewerBase });\n      // The engine and its URI resolver are process-global (ensureHeadlessEngine\n      // is a cached singleton). Re-registering here is redundant after the first\n      // session but harmless — the resolver is always the same function.\n      // PresignedR2UrlBuilder inherits forResource (sync) from\n      // LocalViewerUrlBuilder, so the sync URI-resolver callback stays valid.\n      registerWorkspaceUriResolver(engine, urlBuilder);\n      const session = new EngineSession({\n        size: 1,\n        adapter: cesdkAdapter(engine)\n      });\n      const renderThumbnail = async ({\n        engine: eng\n      }: {\n        revision: string;\n        engine: import('@cesdk/engine').default;\n      }) => {\n        const pages = eng.scene.getPages?.() ?? [];\n        if (pages.length === 0) throw new Error('no pages');\n        const blob = await eng.block.export(pages[0], 'image/webp', {\n          targetWidth: 256\n        });\n        return new Uint8Array(await blob.arrayBuffer());\n      };\n      const designTools = buildDesignToolRegistrations({\n        fs: scopedFs,\n        store,\n        session,\n        engineLock,\n        gateway,\n        urlBuilder,\n        allowOutPath: false,\n        onLeafWritten: (e) => broadcaster.broadcast(e),\n        // `as never`: buildDesignToolRegistrations is generic over the engine type\n        // (unknown at this composition root); the concrete @cesdk/engine type isn't\n        // threaded up here, so this is the sanctioned boundary cast (see no-as-any).\n        renderThumbnail: renderThumbnail as never,\n        telemetry\n      });\n      const tools = diagnosticsToolEnabled(process.env)\n        ? [\n            ...designTools,\n            createDiagnosticsTool({\n              env: process.env,\n              transport: 'http',\n              dir: resolveDiagnosticsDir(process.env),\n              fileLogging: diagnosticsFileEnabled(process.env),\n              flush: () => diag.flush?.() ?? Promise.resolve()\n              // no viewerUrl on http — `open` returns the not-available note\n            })\n          ]\n        : designTools;\n      return { engine, tools };\n    },\n    mountExtras: (expressApp) => {\n      if (cfg.auth.mode === 'session') {\n        // Multi-tenant viewer: /v/<sid> scopes reads to s/<sid> per request.\n        mountSessionViewer(expressApp, {\n          rawFs,\n          broadcaster,\n          cesdkLicense: license\n        });\n        return;\n      }\n      if (cfg.auth.mode !== 'single') {\n        process.stderr.write(\n          `codesign-mcp http: viewer disabled in \"${cfg.auth.mode}\" mode (multi-tenant viewer is a follow-up).\\n`\n        );\n        return;\n      }\n      const viewerScopedFs = new ScopedWorkspaceFS(\n        rawFs,\n        cfg.auth.fixedWorkspaceId ?? 'default'\n      );\n      const viewerStore = new RevisionStore(viewerScopedFs);\n      expressApp.use(\n        '/viewer',\n        createViewerRouter({\n          store: viewerStore,\n          fs: viewerScopedFs,\n          broadcaster,\n          cesdkLicense: license\n        })\n      );\n    }\n  });\n\n  const evictTimer = setInterval(\n    () =>\n      void app.sessions.evictIdle().then((evicted) => {\n        if (evicted.length > 0)\n          process.stderr.write(\n            `codesign-mcp http: evicted ${evicted.length} idle session(s)\\n`\n          );\n      }),\n    Math.max(10_000, cfg.idleTimeoutMs / 2)\n  );\n\n  const server = app.listen(cfg.port, HOST, () => {\n    process.stderr.write(\n      `codesign-mcp http: listening on http://${HOST}:${cfg.port}/mcp` +\n        ` (mode=${cfg.auth.mode} backend=${cfg.workspace.backend})\\n`\n    );\n  });\n\n  let shuttingDown = false;\n  const shutdown = async (signal: string) => {\n    if (shuttingDown) {\n      process.stderr.write(\n        `codesign-mcp http: ${signal} again — forcing exit.\\n`\n      );\n      process.exit(1);\n    }\n    shuttingDown = true;\n    process.stderr.write(`codesign-mcp http: ${signal} — shutting down.\\n`);\n    const hardExit = setTimeout(() => {\n      process.stderr.write(\n        'codesign-mcp http: shutdown timed out — forcing exit.\\n'\n      );\n      process.exit(1);\n    }, 5000);\n    hardExit.unref();\n    clearInterval(evictTimer);\n    server.close();\n    server.closeAllConnections();\n    broadcaster.closeAll();\n    await app.shutdown();\n    // The engine is a process singleton shared by every session (see\n    // ensureHeadlessEngine), so per-session destroy can't dispose it — the\n    // process exit does. Release it deterministically here. When engines become\n    // a fixed pool, disposal moves to per-slot teardown inside app.shutdown().\n    try {\n      await disposeHeadlessEngine();\n    } catch (err) {\n      process.stderr.write(\n        `codesign-mcp http: engine dispose failed — ${\n          err instanceof Error ? err.message : String(err)\n        }\\n`\n      );\n    }\n    process.exit(0);\n  };\n  process.on('SIGINT', () => void shutdown('SIGINT'));\n  process.on('SIGTERM', () => void shutdown('SIGTERM'));\n}\n"]}

package/dist/cli/stdio.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"stdio.d.ts","sourceRoot":"","sources":["../../src/cli/stdio.ts"],"names":[],"mappings":"AA8BA,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,cAAc,CAAC;AAMxC,OAAO,EAEL,KAAK,eAAe,EACrB,MAAM,0BAA0B,CAAC;AAmBlC,OAAO,EAAuB,KAAK,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAc5E,wBAAgB,gBAAgB,CAAC,GAAG,GAAE,GAAiB,GAAG;IACxD,IAAI,EAAE,eAAe,CAAC;IACtB,SAAS,EAAE,aAAa,CAAC;IACzB,GAAG,EAAE,MAAM,GAAG,SAAS,CAAC;IACxB,OAAO,EAAE,OAAO,CAAC;CAClB,CAYA;AAED,wBAAsB,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC,CAiN9C"}
+{"version":3,"file":"stdio.d.ts","sourceRoot":"","sources":["../../src/cli/stdio.ts"],"names":[],"mappings":"AA8BA,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,cAAc,CAAC;AAOxC,OAAO,EAEL,KAAK,eAAe,EACrB,MAAM,0BAA0B,CAAC;AAsBlC,OAAO,EAAuB,KAAK,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAc5E,wBAAgB,gBAAgB,CAAC,GAAG,GAAE,GAAiB,GAAG;IACxD,IAAI,EAAE,eAAe,CAAC;IACtB,SAAS,EAAE,aAAa,CAAC;IACzB,GAAG,EAAE,MAAM,GAAG,SAAS,CAAC;IACxB,OAAO,EAAE,OAAO,CAAC;CAClB,CAYA;AAED,wBAAsB,QAAQ,IAAI,OAAO,CAAC,IAAI,CAAC,CA4O9C"}

package/dist/cli/stdio.js

@@ -27,10 +27,13 @@ import { homedir } from 'node:os';
 import { join as joinPath } from 'node:path';
 import { StdioServerTransport } from '@modelcontextprotocol/sdk/server/stdio.js';
 import { loadNodeAssets } from '../assets/load-node.js';
-import { diagnosticsFileEnabled, resolveDiagnosticsDir, resolveMaxStdioEngines } from '../config.js';
+import { diagnosticsFileEnabled, diagnosticsToolEnabled, resolveDiagnosticsDir, resolveMaxStdioEngines } from '../config.js';
 import { NOOP_DIAGNOSTICS_SINK } from '../diagnostics/events.js';
 import { FileDiagnosticsSink } from '../diagnostics/file-sink.js';
+import { createDiagnosticsPrompt } from '../diagnostics/prompt.js';
+import { createDiagnosticsRouter } from '../diagnostics/router.js';
 import { toolCallSink } from '../diagnostics/tool-call-adapter.js';
+import { createDiagnosticsTool } from '../diagnostics/tool.js';
 import { ensureEngineAssetSources } from '../engine/asset-sources.js';
 import { cesdkAdapter } from '../engine/cesdk-adapter.js';
 import { wrapEngineCapacity } from '../engine/engine-capacity.js';
@@ -93,6 +96,8 @@ export async function runStdio() {
     // The viewer listener binds an ephemeral localhost port — cheap and local, so
     // it stays on the startup path. urlBuilder must exist before we build the tools
     // and before the engine's workspace:// URI resolver is wired.
+    const diagnosticsOn = diagnosticsToolEnabled(process.env);
+    const diagDir = resolveDiagnosticsDir(process.env);
     const viewerRouter = createViewerRouter({
         store,
         fs,
@@ -100,7 +105,13 @@ export async function runStdio() {
         cesdkLicense: license,
         workspaceRoot
     });
-    const listener = await startViewerListener({ router: viewerRouter });
+    const diagnosticsRouter = diagnosticsOn
+        ? createDiagnosticsRouter({ diag, dir: diagDir, env: process.env })
+        : undefined;
+    const listener = await startViewerListener({
+        router: viewerRouter,
+        ...(diagnosticsRouter ? { extraRouters: [diagnosticsRouter] } : {})
+    });
     process.stderr.write(`codesign-mcp stdio: viewer at ${listener.base}\n`);
     diag.emit({
         kind: 'lifecycle',
@@ -108,6 +119,9 @@ export async function runStdio() {
         text: 'viewer_listening'
     });
     const urlBuilder = new LocalViewerUrlBuilder({ base: listener.base });
+    const diagnosticsViewerUrl = diagnosticsOn
+        ? urlBuilder.forDiagnostics()
+        : undefined;
     // Engine boot is DEFERRED to the first engine-using tool call and gated by a
     // machine-wide slot (CODE-59): idle panes hold no engine (~8-12 MB) and no
     // slot; only real design work boots one, and at most IMGLY_MAX_STDIO_ENGINES
@@ -157,22 +171,37 @@ export async function runStdio() {
         });
         return new Uint8Array(await blob.arrayBuffer());
     };
-    const tools = buildDesignToolRegistrations({
-        fs,
-        store,
-        session,
-        engineLock,
-        gateway,
-        urlBuilder,
-        allowOutPath: true,
-        onLeafWritten: (e) => broadcaster.broadcast(e),
-        renderThumbnail: renderThumbnail, // adapter's E generic is `unknown`; cesdk engine type fits
-        telemetry
-    }).map(wrapEngineCapacity);
+    const tools = [
+        ...buildDesignToolRegistrations({
+            fs,
+            store,
+            session,
+            engineLock,
+            gateway,
+            urlBuilder,
+            allowOutPath: true,
+            onLeafWritten: (e) => broadcaster.broadcast(e),
+            renderThumbnail: renderThumbnail, // adapter's E generic is `unknown`; cesdk engine type fits
+            telemetry
+        }).map(wrapEngineCapacity),
+        ...(diagnosticsOn
+            ? [
+                createDiagnosticsTool({
+                    env: process.env,
+                    transport: 'stdio',
+                    dir: diagDir,
+                    fileLogging: diagnosticsEnabled,
+                    flush: () => diag.flush?.() ?? Promise.resolve(),
+                    ...(diagnosticsViewerUrl ? { viewerUrl: diagnosticsViewerUrl } : {})
+                })
+            ]
+            : [])
+    ];
     const assets = loadNodeAssets();
     const server = createCodesignMcpServer({
         assets,
-        tools
+        tools,
+        ...(diagnosticsOn ? { prompts: [createDiagnosticsPrompt()] } : {})
     });
     const transport = new StdioServerTransport();
     let shuttingDown = false;

package/dist/cli/stdio.js.map

@@ -1 +1 @@
-{"version":3,"file":"stdio.js","sourceRoot":"","sources":["../../src/cli/stdio.ts"],"names":[],"mappings":"AAAA,4CAA4C;AAC5C,yFAAyF;AACzF,uCAAuC;AACvC,6DAA6D;AAC7D,oCAAoC;AACpC,mDAAmD;AACnD,4CAA4C;AAC5C,0CAA0C;AAC1C,EAAE;AACF,yEAAyE;AACzE,sEAAsE;AACtE,EAAE;AACF,8EAA8E;AAC9E,2EAA2E;AAC3E,6EAA6E;AAC7E,8EAA8E;AAC9E,yEAAyE;AACzE,iFAAiF;AACjF,EAAE;AACF,gBAAgB;AAChB,8EAA8E;AAC9E,gEAAgE;AAChE,EAAE;AACF,wEAAwE;AACxE,kDAAkD;AAClD,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,IAAI,QAAQ,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AAEjF,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAExD,OAAO,EACL,sBAAsB,EACtB,qBAAqB,EACrB,sBAAsB,EACvB,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,qBAAqB,EAEtB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AAClE,OAAO,EAAE,YAAY,EAAE,MAAM,qCAAqC,CAAC;AACnE,OAAO,EAAE,wBAAwB,EAAE,MAAM,4BAA4B,CAAC;AACtE,OAAO,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAC1D,OAAO,EAAE,kBAAkB,EAAE,MAAM,8BAA8B,CAAC;AAClE,OAAO,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAC;AAClE,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,sBAAsB,EAAE,MAAM,8BAA8B,CAAC;AACtE,OAAO,EAAE,4BAA4B,EAAE,MAAM,2BAA2B,CAAC;AACzE,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AACzD,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AACtD,OAAO,EAAE,uBAAuB,EAAE,MAAM,cAAc,CAAC;AACvD,OAAO,EACL,qBAAqB,EACrB,oBAAoB,EACrB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,4BAA4B,EAAE,MAAM,mBAAmB,CAAC;AACjE,OAAO,EAAE,mBAAmB,EAAsB,MAAM,mBAAmB,CAAC;AAC5E,OAAO,EACL,kBAAkB,EAClB,qBAAqB,EACrB,cAAc,EACd,mBAAmB,EACpB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC1D,OAAO,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAC;AAChE,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,mBAAmB,EAAE,MAAM,8BAA8B,CAAC;AAEnE,MAAM,iBAAiB,GAAG,QAAQ,CAAC,OAAO,EAAE,EAAE,WAAW,EAAE,WAAW,CAAC,CAAC;AAExE,MAAM,UAAU,gBAAgB,CAAC,MAAW,OAAO,CAAC,GAAG;IAMrD,IAAI,CAAC,sBAAsB,CAAC,GAAG,CAAC,EAAE,CAAC;QACjC,OAAO;YACL,IAAI,EAAE,qBAAqB;YAC3B,SAAS,EAAE,mBAAmB;YAC9B,GAAG,EAAE,SAAS;YACd,OAAO,EAAE,KAAK;SACf,CAAC;IACJ,CAAC;IACD,MAAM,GAAG,GAAG,qBAAqB,CAAC,GAAG,CAAC,CAAC;IACvC,MAAM,IAAI,GAAG,IAAI,mBAAmB,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC;IAC9C,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,YAAY,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAC3E,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,QAAQ;IAC5B,MAAM,EACJ,IAAI,EACJ,SAAS,EACT,GAAG,EAAE,cAAc,EACnB,OAAO,EAAE,kBAAkB,EAC5B,GAAG,gBAAgB,EAAE,CAAC;IACvB,IAAI,kBAAkB,IAAI,cAAc,EAAE,CAAC;QACzC,MAAM,mBAAmB,CAAC,cAAc,CAAC,EAAE,GAAG,EAAE,cAAc,EAAE,CAAC,CAAC;QAClE,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,8CAA8C,cAAc,sEAAsE,CACnI,CAAC;IACJ,CAAC;IACD,oFAAoF;IACpF,uBAAuB,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CACtC,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CACtE,CAAC;IAEF,MAAM,OAAO,GAAG,cAAc,CAAC,OAAO,CAAC,GAAG,EAAE,mBAAmB,CAAC,CAAC;IACjE,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,uJAAuJ,CACxJ,CAAC;QACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,gFAAgF;IAChF,4EAA4E;IAC5E,MAAM,SAAS,GACb,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,EAAE,IAAI,EAAE;QAClC,CAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB,EAAE,IAAI,EAAE,CAAC;IAE3C,MAAM,aAAa,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,iBAAiB,CAAC;IAC1E,MAAM,EAAE,GAAG,IAAI,eAAe,CAAC,aAAa,CAAC,CAAC;IAC9C,MAAM,KAAK,GAAG,IAAI,aAAa,CAAC,EAAE,CAAC,CAAC;IAEpC,0EAA0E;IAC1E,2EAA2E;IAC3E,2BAA2B;IAC3B,MAAM,UAAU,GAAG,IAAI,KAAK,EAAE,CAAC;IAC/B,MAAM,WAAW,GAAG,IAAI,cAAc,EAAE,CAAC;IACzC,MAAM,OAAO,GAAG,IAAI,kBAAkB,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;IAExE,8EAA8E;IAC9E,gFAAgF;IAChF,8DAA8D;IAC9D,MAAM,YAAY,GAAG,kBAAkB,CAAC;QACtC,KAAK;QACL,EAAE;QACF,WAAW;QACX,YAAY,EAAE,OAAO;QACrB,aAAa;KACd,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,MAAM,mBAAmB,CAAC,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC,CAAC;IACrE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,iCAAiC,QAAQ,CAAC,IAAI,IAAI,CAAC,CAAC;IACzE,IAAI,CAAC,IAAI,CAAC;QACR,IAAI,EAAE,WAAW;QACjB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;QACrB,IAAI,EAAE,kBAAkB;KACzB,CAAC,CAAC;IACH,MAAM,UAAU,GAAG,IAAI,qBAAqB,CAAC,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;IAEtE,6EAA6E;IAC7E,2EAA2E;IAC3E,6EAA6E;IAC7E,6EAA6E;IAC7E,yEAAyE;IACzE,0EAA0E;IAC1E,6CAA6C;IAC7C,MAAM,WAAW,GAAG,qBAAqB,CAAiB;QACxD,GAAG,EAAE,sBAAsB,CAAC,OAAO,CAAC,GAAG,CAAC;QACxC,IAAI,EAAE,GAAG,EAAE;YACT,IAAI,CAAC,IAAI,CAAC;gBACR,IAAI,EAAE,WAAW;gBACjB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;gBACrB,IAAI,EAAE,mBAAmB;aAC1B,CAAC,CAAC;YACH,MAAM,CAAC,GAAG,eAAe,CAAC,EAAE,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC,CAAC;YAC9D,0EAA0E;YAC1E,sEAAsE;YACtE,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;gBACnB,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,sDACE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAChE,IAAI,CACL,CAAC;gBACF,IAAI,CAAC,IAAI,CAAC;oBACR,IAAI,EAAE,WAAW;oBACjB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;oBACrB,IAAI,EAAE,oBAAoB;oBAC1B,KAAK,EAAE;wBACL,OAAO,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;wBACzD,GAAG,CAAC,GAAG,YAAY,KAAK,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;qBACnE;iBACF,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;YACH,OAAO,CAAC,CAAC;QACX,CAAC;KACF,CAAC,CAAC;IAEH,+EAA+E;IAC/E,MAAM,OAAO,GAAG,IAAI,aAAa,CAAC;QAChC,IAAI,EAAE,CAAC;QACP,OAAO,EAAE,YAAY,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,CAAC;KAC/C,CAAC,CAAC;IAEH,MAAM,eAAe,GAAG,KAAK,EAAE,EAC7B,MAAM,EAAE,GAAG,EAIZ,EAAuB,EAAE;QACxB,6EAA6E;QAC7E,4EAA4E;QAC5E,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC;QACnC,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,UAAU,CAAC,CAAC;QAC9D,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE;YAC1D,WAAW,EAAE,GAAG;SACjB,CAAC,CAAC;QACH,OAAO,IAAI,UAAU,CAAC,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;IAClD,CAAC,CAAC;IAEF,MAAM,KAAK,GAAG,4BAA4B,CAAC;QACzC,EAAE;QACF,KAAK;QACL,OAAO;QACP,UAAU;QACV,OAAO;QACP,UAAU;QACV,YAAY,EAAE,IAAI;QAClB,aAAa,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC,CAAC;QAC9C,eAAe,EAAE,eAAwB,EAAE,2DAA2D;QACtG,SAAS;KACV,CAAC,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;IAE3B,MAAM,MAAM,GAAG,cAAc,EAAE,CAAC;IAChC,MAAM,MAAM,GAAG,uBAAuB,CAAC;QACrC,MAAM;QACN,KAAK;KACN,CAAC,CAAC;IAEH,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAC;IAE7C,IAAI,YAAY,GAAG,KAAK,CAAC;IACzB,MAAM,QAAQ,GAAG,KAAK,EAAE,MAAc,EAAE,EAAE;QACxC,IAAI,YAAY;YAAE,OAAO,CAAC,yDAAyD;QACnF,YAAY,GAAG,IAAI,CAAC;QACpB,IAAI,CAAC,IAAI,CAAC;YACR,IAAI,EAAE,WAAW;YACjB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;YACrB,IAAI,EAAE,YAAY,MAAM,EAAE;SAC3B,CAAC,CAAC;QACH,wEAAwE;QACxE,6EAA6E;QAC7E,4EAA4E;QAC5E,gCAAgC;QAChC,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,KAAK,EAAE,EAAE,CAAC;QACvB,CAAC;QAAC,MAAM,CAAC;YACP,cAAc;QAChB,CAAC;QACD,IAAI,CAAC;YACH,MAAM,QAAQ,CAAC,KAAK,EAAE,CAAC;QACzB,CAAC;QAAC,MAAM,CAAC;YACP,kCAAkC;QACpC,CAAC;QACD,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;QACvB,CAAC;QAAC,MAAM,CAAC;YACP,cAAc;QAChB,CAAC;QACD,4EAA4E;QAC5E,6EAA6E;QAC7E,wBAAwB;QACxB,IAAI,CAAC;YACH,MAAM,qBAAqB,EAAE,CAAC;QAChC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,+CACE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CACjD,IAAI,CACL,CAAC;QACJ,CAAC;QACD,8EAA8E;QAC9E,8EAA8E;QAC9E,IAAI,CAAC;YACH,MAAM,WAAW,CAAC,OAAO,EAAE,CAAC;QAC9B,CAAC;QAAC,MAAM,CAAC;YACP,qCAAqC;QACvC,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC;IAEF,0EAA0E;IAC1E,8EAA8E;IAC9E,+EAA+E;IAC/E,6EAA6E;IAC7E,6EAA6E;IAC7E,2EAA2E;IAC3E,0EAA0E;IAC1E,kEAAkE;IAClE,MAAM,CAAC,OAAO,GAAG,GAAG,EAAE,CAAC,KAAK,QAAQ,CAAC,cAAc,CAAC,CAAC;IACrD,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,KAAK,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC;IAC1D,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,KAAK,QAAQ,CAAC,aAAa,CAAC,CAAC,CAAC;IAE9D,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAEhC,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,KAAK,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;IACpD,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,KAAK,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC;IACtD,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,KAAK,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;AACtD,CAAC;AAED,yEAAyE;AACzE,6EAA6E;AAC7E,gFAAgF;AAChF,+EAA+E;AAC/E,gFAAgF;AAChF,4DAA4D;AAC5D,KAAK,UAAU,eAAe,CAAC,EAC7B,OAAO,EACP,UAAU,EACV,SAAS,EAMV;IACC,IAAI,MAAwD,CAAC;IAC7D,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,oBAAoB,CAAC,OAAO,CAAC,CAAC;IAC/C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,SAAS,EAAE,CAAC;YACd,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,8IAA8I,CAC/I,CAAC;QACJ,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;IACD,8EAA8E;IAC9E,wDAAwD;IACxD,4BAA4B,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IACjD,yEAAyE;IACzE,uEAAuE;IACvE,MAAM,wBAAwB,CAAC,MAAM,CAAC,CAAC;IACvC,8EAA8E;IAC9E,yEAAyE;IACzE,sBAAsB,CAAC,MAAM,CAAC,CAAC;IAC/B,OAAO,MAAM,CAAC;AAChB,CAAC","sourcesContent":["// MCP server over stdin/stdout. Bootstraps:\n//   - Workspace (NodeWorkspaceFS rooted at $CODESIGN_WORKSPACE or ~/.codesign/workspace)\n//   - RevisionStore over the workspace\n//   - EngineSession (size=1) over the headless CE.SDK engine\n//   - SseBroadcaster for the viewer\n//   - Viewer router + ephemeral localhost listener\n//   - design + workspace tool registrations\n//   - LocalGatewayClient (reads $API_KEY)\n//\n// stdio's single-engine, single-workspace model is the simplest possible\n// wiring; HTTP transport (F2) reuses the same primitives per-session.\n//\n// Startup order matters: everything cheap (workspace, store, viewer listener,\n// tool wiring) runs before `server.connect()` so the MCP handshake replies\n// immediately. The expensive CE.SDK engine init + CDN asset-source fetch are\n// deferred to a background promise (bootstrapEngine) that the first tool call\n// awaits. Doing this work before connect can blow the host's MCP startup\n// timeout on a cold boot — seen as \"fails on add/update, works after Reconnect\".\n//\n// Optional env:\n//   CESDK_LICENSE — overrides the build-time-bundled trial license. Mandatory\n//   at GA / when no trial is baked in (see resolve-license.ts).\n//\n// Logging note: stdout is reserved for MCP protocol traffic. Everything\n// human-facing (errors, progress) goes to stderr.\nimport { homedir } from 'node:os';\nimport { join as joinPath } from 'node:path';\nimport { StdioServerTransport } from '@modelcontextprotocol/sdk/server/stdio.js';\nimport type CreativeEngine from '@cesdk/engine';\nimport { loadNodeAssets } from '../assets/load-node.js';\nimport type { Env } from '../config.js';\nimport {\n  diagnosticsFileEnabled,\n  resolveDiagnosticsDir,\n  resolveMaxStdioEngines\n} from '../config.js';\nimport {\n  NOOP_DIAGNOSTICS_SINK,\n  type DiagnosticsSink\n} from '../diagnostics/events.js';\nimport { FileDiagnosticsSink } from '../diagnostics/file-sink.js';\nimport { toolCallSink } from '../diagnostics/tool-call-adapter.js';\nimport { ensureEngineAssetSources } from '../engine/asset-sources.js';\nimport { cesdkAdapter } from '../engine/cesdk-adapter.js';\nimport { wrapEngineCapacity } from '../engine/engine-capacity.js';\nimport { createSlotGatedEngine } from '../engine/engine-slots.js';\nimport { Mutex } from '../engine/mutex.js';\nimport { EngineSession } from '../engine/session.js';\nimport { registerUnsplashSource } from '../engine/unsplash-source.js';\nimport { registerWorkspaceUriResolver } from '../engine/uri-resolver.js';\nimport { LocalGatewayClient } from '../gateway/local.js';\nimport { RevisionStore } from '../revisions/store.js';\nimport { createCodesignMcpServer } from '../server.js';\nimport {\n  disposeHeadlessEngine,\n  ensureHeadlessEngine\n} from '../tools/engine.js';\nimport { buildDesignToolRegistrations } from '../tools/index.js';\nimport { NOOP_TELEMETRY_SINK, type TelemetrySink } from '../tools/spans.js';\nimport {\n  createViewerRouter,\n  LocalViewerUrlBuilder,\n  SseBroadcaster,\n  startViewerListener\n} from '../viewer/index.js';\nimport { NodeWorkspaceFS } from '../workspace/node-fs.js';\nimport { redirectConsoleToStderr } from './redirect-console.js';\nimport { resolveLicense } from './resolve-license.js';\nimport { TRIAL_CESDK_LICENSE } from './trial-license.generated.js';\n\nconst DEFAULT_WORKSPACE = joinPath(homedir(), '.codesign', 'workspace');\n\nexport function buildDiagnostics(env: Env = process.env): {\n  diag: DiagnosticsSink;\n  telemetry: TelemetrySink;\n  dir: string | undefined;\n  enabled: boolean;\n} {\n  if (!diagnosticsFileEnabled(env)) {\n    return {\n      diag: NOOP_DIAGNOSTICS_SINK,\n      telemetry: NOOP_TELEMETRY_SINK,\n      dir: undefined,\n      enabled: false\n    };\n  }\n  const dir = resolveDiagnosticsDir(env);\n  const sink = new FileDiagnosticsSink({ dir });\n  return { diag: sink, telemetry: toolCallSink(sink), dir, enabled: true };\n}\n\nexport async function runStdio(): Promise<void> {\n  const {\n    diag,\n    telemetry,\n    dir: diagnosticsDir,\n    enabled: diagnosticsEnabled\n  } = buildDiagnostics();\n  if (diagnosticsEnabled && diagnosticsDir) {\n    await FileDiagnosticsSink.pruneOnStartup({ dir: diagnosticsDir });\n    process.stderr.write(\n      `codesign-mcp stdio: diagnostics logging to ${diagnosticsDir} — redacted, local-only; disable with IMGLY_DIAGNOSTICS_FILE=false\\n`\n    );\n  }\n  // stdout is the JSON-RPC channel in stdio mode; keep engine console.* noise off it.\n  redirectConsoleToStderr((level, text) =>\n    diag.emit({ kind: 'engine_log', timestamp: Date.now(), level, text })\n  );\n\n  const license = resolveLicense(process.env, TRIAL_CESDK_LICENSE);\n  if (!license) {\n    process.stderr.write(\n      'codesign-mcp stdio: no CESDK_LICENSE set and no bundled trial license — set CESDK_LICENSE (or IMGLY_CESDK_LICENSE) to a CE.SDK node license string.\\n'\n    );\n    process.exit(1);\n  }\n  // True when the license came from the bundled trial (no explicit env override).\n  // Used only to turn an engine-init rejection into a trial-aware hint below.\n  const usedTrial =\n    !process.env.CESDK_LICENSE?.trim() &&\n    !process.env.IMGLY_CESDK_LICENSE?.trim();\n\n  const workspaceRoot = process.env.CODESIGN_WORKSPACE ?? DEFAULT_WORKSPACE;\n  const fs = new NodeWorkspaceFS(workspaceRoot);\n  const store = new RevisionStore(fs);\n\n  // One engine, one lock. stdio is single-session so there is no contention\n  // today, but the engine tools require the lock and it keeps wiring uniform\n  // with the HTTP transport.\n  const engineLock = new Mutex();\n  const broadcaster = new SseBroadcaster();\n  const gateway = new LocalGatewayClient({ apiKey: process.env.API_KEY });\n\n  // The viewer listener binds an ephemeral localhost port — cheap and local, so\n  // it stays on the startup path. urlBuilder must exist before we build the tools\n  // and before the engine's workspace:// URI resolver is wired.\n  const viewerRouter = createViewerRouter({\n    store,\n    fs,\n    broadcaster,\n    cesdkLicense: license,\n    workspaceRoot\n  });\n  const listener = await startViewerListener({ router: viewerRouter });\n  process.stderr.write(`codesign-mcp stdio: viewer at ${listener.base}\\n`);\n  diag.emit({\n    kind: 'lifecycle',\n    timestamp: Date.now(),\n    text: 'viewer_listening'\n  });\n  const urlBuilder = new LocalViewerUrlBuilder({ base: listener.base });\n\n  // Engine boot is DEFERRED to the first engine-using tool call and gated by a\n  // machine-wide slot (CODE-59): idle panes hold no engine (~8-12 MB) and no\n  // slot; only real design work boots one, and at most IMGLY_MAX_STDIO_ENGINES\n  // engines run across all stdio processes at once. bootstrapEngine still runs\n  // OFF the handshake path — it is just triggered lazily now, not eagerly.\n  // At capacity, get() throws EngineCapacityError, which wrapEngineCapacity\n  // (below) turns into an isError tool result.\n  const gatedEngine = createSlotGatedEngine<CreativeEngine>({\n    max: resolveMaxStdioEngines(process.env),\n    boot: () => {\n      diag.emit({\n        kind: 'lifecycle',\n        timestamp: Date.now(),\n        text: 'engine_init_start'\n      });\n      const p = bootstrapEngine({ license, urlBuilder, usedTrial });\n      // Surface a background init failure on stderr + diagnostics. The awaiting\n      // tool call still sees the real error; this just avoids a silent gap.\n      void p.catch((err) => {\n        process.stderr.write(\n          `codesign-mcp stdio: engine initialization failed — ${\n            err instanceof Error ? (err.stack ?? err.message) : String(err)\n          }\\n`\n        );\n        diag.emit({\n          kind: 'lifecycle',\n          timestamp: Date.now(),\n          text: 'engine_init_failed',\n          error: {\n            message: err instanceof Error ? err.message : String(err),\n            ...(err instanceof Error && err.stack ? { stack: err.stack } : {})\n          }\n        });\n      });\n      return p;\n    }\n  });\n\n  // size=1, single shared engine resolved lazily (and slot-gated) on first edit.\n  const session = new EngineSession({\n    size: 1,\n    adapter: cesdkAdapter(() => gatedEngine.get())\n  });\n\n  const renderThumbnail = async ({\n    engine: eng\n  }: {\n    revision: string;\n    engine: import('@cesdk/engine').default;\n  }): Promise<Uint8Array> => {\n    // Thumbnail = the scene's first page rendered to a 256-px webp. Best-effort.\n    // We use page 0 of the scene; if the scene has no pages, throw → swallowed.\n    const pages = eng.scene.getPages();\n    if (!pages || pages.length === 0) throw new Error('no pages');\n    const blob = await eng.block.export(pages[0], 'image/webp', {\n      targetWidth: 256\n    });\n    return new Uint8Array(await blob.arrayBuffer());\n  };\n\n  const tools = buildDesignToolRegistrations({\n    fs,\n    store,\n    session,\n    engineLock,\n    gateway,\n    urlBuilder,\n    allowOutPath: true,\n    onLeafWritten: (e) => broadcaster.broadcast(e),\n    renderThumbnail: renderThumbnail as never, // adapter's E generic is `unknown`; cesdk engine type fits\n    telemetry\n  }).map(wrapEngineCapacity);\n\n  const assets = loadNodeAssets();\n  const server = createCodesignMcpServer({\n    assets,\n    tools\n  });\n\n  const transport = new StdioServerTransport();\n\n  let shuttingDown = false;\n  const shutdown = async (reason: string) => {\n    if (shuttingDown) return; // idempotent — a signal and the transport close can race\n    shuttingDown = true;\n    diag.emit({\n      kind: 'lifecycle',\n      timestamp: Date.now(),\n      text: `shutdown:${reason}`\n    });\n    // Flush the breadcrumb NOW, before the slower teardown below. emit() is\n    // fire-and-forget, engine dispose can take seconds, and a client may SIGKILL\n    // after a short grace window — landing the event first lets it survive even\n    // if we're killed mid-teardown.\n    try {\n      await diag.flush?.();\n    } catch {\n      // best-effort\n    }\n    try {\n      await listener.close();\n    } catch {\n      // best-effort — keep tearing down\n    }\n    try {\n      await server.close();\n    } catch {\n      // best-effort\n    }\n    // Release the CE.SDK engine (WASM/native runtime) deterministically instead\n    // of leaving it to process teardown. Best-effort: a dispose error must never\n    // block the exit below.\n    try {\n      await disposeHeadlessEngine();\n    } catch (err) {\n      process.stderr.write(\n        `codesign-mcp stdio: engine dispose failed — ${\n          err instanceof Error ? err.message : String(err)\n        }\\n`\n      );\n    }\n    // Release the machine-wide engine slot (CODE-59) so another session can boot.\n    // Clean path; SIGKILL is covered by PID-liveness reaping on the next acquire.\n    try {\n      await gatedEngine.release();\n    } catch {\n      // best-effort — never block the exit\n    }\n    process.exit(0);\n  };\n\n  // A client can disconnect by closing the stdio pipe (stdin EOF) WITHOUT a\n  // signal — e.g. an orphaned/crashed host. `StdioServerTransport` only listens\n  // for stdin `data`/`error`, never EOF, so it never surfaces that disconnect on\n  // its own; the viewer listener's open socket then keeps the event loop alive\n  // and the process lingers with the engine resident. So detect stdin EOF here\n  // and reap. Listeners are attached before connect() (which puts stdin into\n  // flowing mode) so we can't miss the `end`. `server.onclose` additionally\n  // covers a protocol-level close routed through transport.close().\n  server.onclose = () => void shutdown('server-close');\n  process.stdin.on('end', () => void shutdown('stdin-end'));\n  process.stdin.on('close', () => void shutdown('stdin-close'));\n\n  await server.connect(transport);\n\n  process.on('SIGINT', () => void shutdown('SIGINT'));\n  process.on('SIGTERM', () => void shutdown('SIGTERM'));\n  process.on('SIGHUP', () => void shutdown('SIGHUP'));\n}\n\n// Heavy engine bootstrap, run in the background by runStdio (off the MCP\n// handshake path). Resolves to a fully-wired engine: design-unit-patched (by\n// ensureHeadlessEngine), workspace:// URI resolver installed, and — best-effort\n// — the default + demo + unsplash asset sources registered so asset_search has\n// content. The asset-source step hits the CDN; failures log to stderr and leave\n// the engine usable (asset_search just sees fewer sources).\nasync function bootstrapEngine({\n  license,\n  urlBuilder,\n  usedTrial\n}: {\n  license: string;\n  urlBuilder: LocalViewerUrlBuilder;\n  /** License came from the bundled trial — turns an init rejection into a hint. */\n  usedTrial: boolean;\n}): Promise<Awaited<ReturnType<typeof ensureHeadlessEngine>>> {\n  let engine: Awaited<ReturnType<typeof ensureHeadlessEngine>>;\n  try {\n    engine = await ensureHeadlessEngine(license);\n  } catch (err) {\n    if (usedTrial) {\n      process.stderr.write(\n        'codesign-mcp stdio: the bundled trial license was rejected (it may have expired). Set CESDK_LICENSE to a valid CE.SDK node license string.\\n'\n      );\n    }\n    throw err;\n  }\n  // Resolve workspace:// asset URIs to the listener's /r/ route so the headless\n  // engine can fetch generated assets embedded in scenes.\n  registerWorkspaceUriResolver(engine, urlBuilder);\n  // Default + demo asset sources so `asset_search` has content (CDN fetch,\n  // best-effort — a failure logs to stderr and the engine stays usable).\n  await ensureEngineAssetSources(engine);\n  // Demo `unsplash` custom source (synchronous, idempotent) so asset_search has\n  // a real remote source alongside the CDN ones. Public IMG.LY demo proxy.\n  registerUnsplashSource(engine);\n  return engine;\n}\n"]}
+{"version":3,"file":"stdio.js","sourceRoot":"","sources":["../../src/cli/stdio.ts"],"names":[],"mappings":"AAAA,4CAA4C;AAC5C,yFAAyF;AACzF,uCAAuC;AACvC,6DAA6D;AAC7D,oCAAoC;AACpC,mDAAmD;AACnD,4CAA4C;AAC5C,0CAA0C;AAC1C,EAAE;AACF,yEAAyE;AACzE,sEAAsE;AACtE,EAAE;AACF,8EAA8E;AAC9E,2EAA2E;AAC3E,6EAA6E;AAC7E,8EAA8E;AAC9E,yEAAyE;AACzE,iFAAiF;AACjF,EAAE;AACF,gBAAgB;AAChB,8EAA8E;AAC9E,gEAAgE;AAChE,EAAE;AACF,wEAAwE;AACxE,kDAAkD;AAClD,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,IAAI,QAAQ,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AAEjF,OAAO,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAExD,OAAO,EACL,sBAAsB,EACtB,sBAAsB,EACtB,qBAAqB,EACrB,sBAAsB,EACvB,MAAM,cAAc,CAAC;AACtB,OAAO,EACL,qBAAqB,EAEtB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAC;AAClE,OAAO,EAAE,uBAAuB,EAAE,MAAM,0BAA0B,CAAC;AACnE,OAAO,EAAE,uBAAuB,EAAE,MAAM,0BAA0B,CAAC;AACnE,OAAO,EAAE,YAAY,EAAE,MAAM,qCAAqC,CAAC;AACnE,OAAO,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAC/D,OAAO,EAAE,wBAAwB,EAAE,MAAM,4BAA4B,CAAC;AACtE,OAAO,EAAE,YAAY,EAAE,MAAM,4BAA4B,CAAC;AAC1D,OAAO,EAAE,kBAAkB,EAAE,MAAM,8BAA8B,CAAC;AAClE,OAAO,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAC;AAClE,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,aAAa,EAAE,MAAM,sBAAsB,CAAC;AACrD,OAAO,EAAE,sBAAsB,EAAE,MAAM,8BAA8B,CAAC;AACtE,OAAO,EAAE,4BAA4B,EAAE,MAAM,2BAA2B,CAAC;AACzE,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AACzD,OAAO,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AACtD,OAAO,EAAE,uBAAuB,EAAE,MAAM,cAAc,CAAC;AACvD,OAAO,EACL,qBAAqB,EACrB,oBAAoB,EACrB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,4BAA4B,EAAE,MAAM,mBAAmB,CAAC;AACjE,OAAO,EAAE,mBAAmB,EAAsB,MAAM,mBAAmB,CAAC;AAC5E,OAAO,EACL,kBAAkB,EAClB,qBAAqB,EACrB,cAAc,EACd,mBAAmB,EACpB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,eAAe,EAAE,MAAM,yBAAyB,CAAC;AAC1D,OAAO,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAC;AAChE,OAAO,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACtD,OAAO,EAAE,mBAAmB,EAAE,MAAM,8BAA8B,CAAC;AAEnE,MAAM,iBAAiB,GAAG,QAAQ,CAAC,OAAO,EAAE,EAAE,WAAW,EAAE,WAAW,CAAC,CAAC;AAExE,MAAM,UAAU,gBAAgB,CAAC,MAAW,OAAO,CAAC,GAAG;IAMrD,IAAI,CAAC,sBAAsB,CAAC,GAAG,CAAC,EAAE,CAAC;QACjC,OAAO;YACL,IAAI,EAAE,qBAAqB;YAC3B,SAAS,EAAE,mBAAmB;YAC9B,GAAG,EAAE,SAAS;YACd,OAAO,EAAE,KAAK;SACf,CAAC;IACJ,CAAC;IACD,MAAM,GAAG,GAAG,qBAAqB,CAAC,GAAG,CAAC,CAAC;IACvC,MAAM,IAAI,GAAG,IAAI,mBAAmB,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC;IAC9C,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,SAAS,EAAE,YAAY,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;AAC3E,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,QAAQ;IAC5B,MAAM,EACJ,IAAI,EACJ,SAAS,EACT,GAAG,EAAE,cAAc,EACnB,OAAO,EAAE,kBAAkB,EAC5B,GAAG,gBAAgB,EAAE,CAAC;IACvB,IAAI,kBAAkB,IAAI,cAAc,EAAE,CAAC;QACzC,MAAM,mBAAmB,CAAC,cAAc,CAAC,EAAE,GAAG,EAAE,cAAc,EAAE,CAAC,CAAC;QAClE,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,8CAA8C,cAAc,sEAAsE,CACnI,CAAC;IACJ,CAAC;IACD,oFAAoF;IACpF,uBAAuB,CAAC,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CACtC,IAAI,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CACtE,CAAC;IAEF,MAAM,OAAO,GAAG,cAAc,CAAC,OAAO,CAAC,GAAG,EAAE,mBAAmB,CAAC,CAAC;IACjE,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,uJAAuJ,CACxJ,CAAC;QACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,gFAAgF;IAChF,4EAA4E;IAC5E,MAAM,SAAS,GACb,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,EAAE,IAAI,EAAE;QAClC,CAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB,EAAE,IAAI,EAAE,CAAC;IAE3C,MAAM,aAAa,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,iBAAiB,CAAC;IAC1E,MAAM,EAAE,GAAG,IAAI,eAAe,CAAC,aAAa,CAAC,CAAC;IAC9C,MAAM,KAAK,GAAG,IAAI,aAAa,CAAC,EAAE,CAAC,CAAC;IAEpC,0EAA0E;IAC1E,2EAA2E;IAC3E,2BAA2B;IAC3B,MAAM,UAAU,GAAG,IAAI,KAAK,EAAE,CAAC;IAC/B,MAAM,WAAW,GAAG,IAAI,cAAc,EAAE,CAAC;IACzC,MAAM,OAAO,GAAG,IAAI,kBAAkB,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;IAExE,8EAA8E;IAC9E,gFAAgF;IAChF,8DAA8D;IAC9D,MAAM,aAAa,GAAG,sBAAsB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC1D,MAAM,OAAO,GAAG,qBAAqB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAEnD,MAAM,YAAY,GAAG,kBAAkB,CAAC;QACtC,KAAK;QACL,EAAE;QACF,WAAW;QACX,YAAY,EAAE,OAAO;QACrB,aAAa;KACd,CAAC,CAAC;IACH,MAAM,iBAAiB,GAAG,aAAa;QACrC,CAAC,CAAC,uBAAuB,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC;QACnE,CAAC,CAAC,SAAS,CAAC;IACd,MAAM,QAAQ,GAAG,MAAM,mBAAmB,CAAC;QACzC,MAAM,EAAE,YAAY;QACpB,GAAG,CAAC,iBAAiB,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,iBAAiB,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACpE,CAAC,CAAC;IACH,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,iCAAiC,QAAQ,CAAC,IAAI,IAAI,CAAC,CAAC;IACzE,IAAI,CAAC,IAAI,CAAC;QACR,IAAI,EAAE,WAAW;QACjB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;QACrB,IAAI,EAAE,kBAAkB;KACzB,CAAC,CAAC;IACH,MAAM,UAAU,GAAG,IAAI,qBAAqB,CAAC,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;IACtE,MAAM,oBAAoB,GAAG,aAAa;QACxC,CAAC,CAAC,UAAU,CAAC,cAAc,EAAE;QAC7B,CAAC,CAAC,SAAS,CAAC;IAEd,6EAA6E;IAC7E,2EAA2E;IAC3E,6EAA6E;IAC7E,6EAA6E;IAC7E,yEAAyE;IACzE,0EAA0E;IAC1E,6CAA6C;IAC7C,MAAM,WAAW,GAAG,qBAAqB,CAAiB;QACxD,GAAG,EAAE,sBAAsB,CAAC,OAAO,CAAC,GAAG,CAAC;QACxC,IAAI,EAAE,GAAG,EAAE;YACT,IAAI,CAAC,IAAI,CAAC;gBACR,IAAI,EAAE,WAAW;gBACjB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;gBACrB,IAAI,EAAE,mBAAmB;aAC1B,CAAC,CAAC;YACH,MAAM,CAAC,GAAG,eAAe,CAAC,EAAE,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,CAAC,CAAC;YAC9D,0EAA0E;YAC1E,sEAAsE;YACtE,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;gBACnB,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,sDACE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAChE,IAAI,CACL,CAAC;gBACF,IAAI,CAAC,IAAI,CAAC;oBACR,IAAI,EAAE,WAAW;oBACjB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;oBACrB,IAAI,EAAE,oBAAoB;oBAC1B,KAAK,EAAE;wBACL,OAAO,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;wBACzD,GAAG,CAAC,GAAG,YAAY,KAAK,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;qBACnE;iBACF,CAAC,CAAC;YACL,CAAC,CAAC,CAAC;YACH,OAAO,CAAC,CAAC;QACX,CAAC;KACF,CAAC,CAAC;IAEH,+EAA+E;IAC/E,MAAM,OAAO,GAAG,IAAI,aAAa,CAAC;QAChC,IAAI,EAAE,CAAC;QACP,OAAO,EAAE,YAAY,CAAC,GAAG,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,CAAC;KAC/C,CAAC,CAAC;IAEH,MAAM,eAAe,GAAG,KAAK,EAAE,EAC7B,MAAM,EAAE,GAAG,EAIZ,EAAuB,EAAE;QACxB,6EAA6E;QAC7E,4EAA4E;QAC5E,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,QAAQ,EAAE,CAAC;QACnC,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,UAAU,CAAC,CAAC;QAC9D,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE;YAC1D,WAAW,EAAE,GAAG;SACjB,CAAC,CAAC;QACH,OAAO,IAAI,UAAU,CAAC,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;IAClD,CAAC,CAAC;IAEF,MAAM,KAAK,GAAG;QACZ,GAAG,4BAA4B,CAAC;YAC9B,EAAE;YACF,KAAK;YACL,OAAO;YACP,UAAU;YACV,OAAO;YACP,UAAU;YACV,YAAY,EAAE,IAAI;YAClB,aAAa,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC,CAAC;YAC9C,eAAe,EAAE,eAAwB,EAAE,2DAA2D;YACtG,SAAS;SACV,CAAC,CAAC,GAAG,CAAC,kBAAkB,CAAC;QAC1B,GAAG,CAAC,aAAa;YACf,CAAC,CAAC;gBACE,qBAAqB,CAAC;oBACpB,GAAG,EAAE,OAAO,CAAC,GAAG;oBAChB,SAAS,EAAE,OAAO;oBAClB,GAAG,EAAE,OAAO;oBACZ,WAAW,EAAE,kBAAkB;oBAC/B,KAAK,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,IAAI,OAAO,CAAC,OAAO,EAAE;oBAChD,GAAG,CAAC,oBAAoB,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,oBAAoB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBACrE,CAAC;aACH;YACH,CAAC,CAAC,EAAE,CAAC;KACR,CAAC;IAEF,MAAM,MAAM,GAAG,cAAc,EAAE,CAAC;IAChC,MAAM,MAAM,GAAG,uBAAuB,CAAC;QACrC,MAAM;QACN,KAAK;QACL,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,uBAAuB,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACnE,CAAC,CAAC;IAEH,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAC;IAE7C,IAAI,YAAY,GAAG,KAAK,CAAC;IACzB,MAAM,QAAQ,GAAG,KAAK,EAAE,MAAc,EAAE,EAAE;QACxC,IAAI,YAAY;YAAE,OAAO,CAAC,yDAAyD;QACnF,YAAY,GAAG,IAAI,CAAC;QACpB,IAAI,CAAC,IAAI,CAAC;YACR,IAAI,EAAE,WAAW;YACjB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;YACrB,IAAI,EAAE,YAAY,MAAM,EAAE;SAC3B,CAAC,CAAC;QACH,wEAAwE;QACxE,6EAA6E;QAC7E,4EAA4E;QAC5E,gCAAgC;QAChC,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,KAAK,EAAE,EAAE,CAAC;QACvB,CAAC;QAAC,MAAM,CAAC;YACP,cAAc;QAChB,CAAC;QACD,IAAI,CAAC;YACH,MAAM,QAAQ,CAAC,KAAK,EAAE,CAAC;QACzB,CAAC;QAAC,MAAM,CAAC;YACP,kCAAkC;QACpC,CAAC;QACD,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;QACvB,CAAC;QAAC,MAAM,CAAC;YACP,cAAc;QAChB,CAAC;QACD,4EAA4E;QAC5E,6EAA6E;QAC7E,wBAAwB;QACxB,IAAI,CAAC;YACH,MAAM,qBAAqB,EAAE,CAAC;QAChC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,+CACE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CACjD,IAAI,CACL,CAAC;QACJ,CAAC;QACD,8EAA8E;QAC9E,8EAA8E;QAC9E,IAAI,CAAC;YACH,MAAM,WAAW,CAAC,OAAO,EAAE,CAAC;QAC9B,CAAC;QAAC,MAAM,CAAC;YACP,qCAAqC;QACvC,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC,CAAC;IAEF,0EAA0E;IAC1E,8EAA8E;IAC9E,+EAA+E;IAC/E,6EAA6E;IAC7E,6EAA6E;IAC7E,2EAA2E;IAC3E,0EAA0E;IAC1E,kEAAkE;IAClE,MAAM,CAAC,OAAO,GAAG,GAAG,EAAE,CAAC,KAAK,QAAQ,CAAC,cAAc,CAAC,CAAC;IACrD,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC,KAAK,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC;IAC1D,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,KAAK,QAAQ,CAAC,aAAa,CAAC,CAAC,CAAC;IAE9D,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAEhC,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,KAAK,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;IACpD,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,GAAG,EAAE,CAAC,KAAK,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC;IACtD,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,KAAK,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;AACtD,CAAC;AAED,yEAAyE;AACzE,6EAA6E;AAC7E,gFAAgF;AAChF,+EAA+E;AAC/E,gFAAgF;AAChF,4DAA4D;AAC5D,KAAK,UAAU,eAAe,CAAC,EAC7B,OAAO,EACP,UAAU,EACV,SAAS,EAMV;IACC,IAAI,MAAwD,CAAC;IAC7D,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,oBAAoB,CAAC,OAAO,CAAC,CAAC;IAC/C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,SAAS,EAAE,CAAC;YACd,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,8IAA8I,CAC/I,CAAC;QACJ,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;IACD,8EAA8E;IAC9E,wDAAwD;IACxD,4BAA4B,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IACjD,yEAAyE;IACzE,uEAAuE;IACvE,MAAM,wBAAwB,CAAC,MAAM,CAAC,CAAC;IACvC,8EAA8E;IAC9E,yEAAyE;IACzE,sBAAsB,CAAC,MAAM,CAAC,CAAC;IAC/B,OAAO,MAAM,CAAC;AAChB,CAAC","sourcesContent":["// MCP server over stdin/stdout. Bootstraps:\n//   - Workspace (NodeWorkspaceFS rooted at $CODESIGN_WORKSPACE or ~/.codesign/workspace)\n//   - RevisionStore over the workspace\n//   - EngineSession (size=1) over the headless CE.SDK engine\n//   - SseBroadcaster for the viewer\n//   - Viewer router + ephemeral localhost listener\n//   - design + workspace tool registrations\n//   - LocalGatewayClient (reads $API_KEY)\n//\n// stdio's single-engine, single-workspace model is the simplest possible\n// wiring; HTTP transport (F2) reuses the same primitives per-session.\n//\n// Startup order matters: everything cheap (workspace, store, viewer listener,\n// tool wiring) runs before `server.connect()` so the MCP handshake replies\n// immediately. The expensive CE.SDK engine init + CDN asset-source fetch are\n// deferred to a background promise (bootstrapEngine) that the first tool call\n// awaits. Doing this work before connect can blow the host's MCP startup\n// timeout on a cold boot — seen as \"fails on add/update, works after Reconnect\".\n//\n// Optional env:\n//   CESDK_LICENSE — overrides the build-time-bundled trial license. Mandatory\n//   at GA / when no trial is baked in (see resolve-license.ts).\n//\n// Logging note: stdout is reserved for MCP protocol traffic. Everything\n// human-facing (errors, progress) goes to stderr.\nimport { homedir } from 'node:os';\nimport { join as joinPath } from 'node:path';\nimport { StdioServerTransport } from '@modelcontextprotocol/sdk/server/stdio.js';\nimport type CreativeEngine from '@cesdk/engine';\nimport { loadNodeAssets } from '../assets/load-node.js';\nimport type { Env } from '../config.js';\nimport {\n  diagnosticsFileEnabled,\n  diagnosticsToolEnabled,\n  resolveDiagnosticsDir,\n  resolveMaxStdioEngines\n} from '../config.js';\nimport {\n  NOOP_DIAGNOSTICS_SINK,\n  type DiagnosticsSink\n} from '../diagnostics/events.js';\nimport { FileDiagnosticsSink } from '../diagnostics/file-sink.js';\nimport { createDiagnosticsPrompt } from '../diagnostics/prompt.js';\nimport { createDiagnosticsRouter } from '../diagnostics/router.js';\nimport { toolCallSink } from '../diagnostics/tool-call-adapter.js';\nimport { createDiagnosticsTool } from '../diagnostics/tool.js';\nimport { ensureEngineAssetSources } from '../engine/asset-sources.js';\nimport { cesdkAdapter } from '../engine/cesdk-adapter.js';\nimport { wrapEngineCapacity } from '../engine/engine-capacity.js';\nimport { createSlotGatedEngine } from '../engine/engine-slots.js';\nimport { Mutex } from '../engine/mutex.js';\nimport { EngineSession } from '../engine/session.js';\nimport { registerUnsplashSource } from '../engine/unsplash-source.js';\nimport { registerWorkspaceUriResolver } from '../engine/uri-resolver.js';\nimport { LocalGatewayClient } from '../gateway/local.js';\nimport { RevisionStore } from '../revisions/store.js';\nimport { createCodesignMcpServer } from '../server.js';\nimport {\n  disposeHeadlessEngine,\n  ensureHeadlessEngine\n} from '../tools/engine.js';\nimport { buildDesignToolRegistrations } from '../tools/index.js';\nimport { NOOP_TELEMETRY_SINK, type TelemetrySink } from '../tools/spans.js';\nimport {\n  createViewerRouter,\n  LocalViewerUrlBuilder,\n  SseBroadcaster,\n  startViewerListener\n} from '../viewer/index.js';\nimport { NodeWorkspaceFS } from '../workspace/node-fs.js';\nimport { redirectConsoleToStderr } from './redirect-console.js';\nimport { resolveLicense } from './resolve-license.js';\nimport { TRIAL_CESDK_LICENSE } from './trial-license.generated.js';\n\nconst DEFAULT_WORKSPACE = joinPath(homedir(), '.codesign', 'workspace');\n\nexport function buildDiagnostics(env: Env = process.env): {\n  diag: DiagnosticsSink;\n  telemetry: TelemetrySink;\n  dir: string | undefined;\n  enabled: boolean;\n} {\n  if (!diagnosticsFileEnabled(env)) {\n    return {\n      diag: NOOP_DIAGNOSTICS_SINK,\n      telemetry: NOOP_TELEMETRY_SINK,\n      dir: undefined,\n      enabled: false\n    };\n  }\n  const dir = resolveDiagnosticsDir(env);\n  const sink = new FileDiagnosticsSink({ dir });\n  return { diag: sink, telemetry: toolCallSink(sink), dir, enabled: true };\n}\n\nexport async function runStdio(): Promise<void> {\n  const {\n    diag,\n    telemetry,\n    dir: diagnosticsDir,\n    enabled: diagnosticsEnabled\n  } = buildDiagnostics();\n  if (diagnosticsEnabled && diagnosticsDir) {\n    await FileDiagnosticsSink.pruneOnStartup({ dir: diagnosticsDir });\n    process.stderr.write(\n      `codesign-mcp stdio: diagnostics logging to ${diagnosticsDir} — redacted, local-only; disable with IMGLY_DIAGNOSTICS_FILE=false\\n`\n    );\n  }\n  // stdout is the JSON-RPC channel in stdio mode; keep engine console.* noise off it.\n  redirectConsoleToStderr((level, text) =>\n    diag.emit({ kind: 'engine_log', timestamp: Date.now(), level, text })\n  );\n\n  const license = resolveLicense(process.env, TRIAL_CESDK_LICENSE);\n  if (!license) {\n    process.stderr.write(\n      'codesign-mcp stdio: no CESDK_LICENSE set and no bundled trial license — set CESDK_LICENSE (or IMGLY_CESDK_LICENSE) to a CE.SDK node license string.\\n'\n    );\n    process.exit(1);\n  }\n  // True when the license came from the bundled trial (no explicit env override).\n  // Used only to turn an engine-init rejection into a trial-aware hint below.\n  const usedTrial =\n    !process.env.CESDK_LICENSE?.trim() &&\n    !process.env.IMGLY_CESDK_LICENSE?.trim();\n\n  const workspaceRoot = process.env.CODESIGN_WORKSPACE ?? DEFAULT_WORKSPACE;\n  const fs = new NodeWorkspaceFS(workspaceRoot);\n  const store = new RevisionStore(fs);\n\n  // One engine, one lock. stdio is single-session so there is no contention\n  // today, but the engine tools require the lock and it keeps wiring uniform\n  // with the HTTP transport.\n  const engineLock = new Mutex();\n  const broadcaster = new SseBroadcaster();\n  const gateway = new LocalGatewayClient({ apiKey: process.env.API_KEY });\n\n  // The viewer listener binds an ephemeral localhost port — cheap and local, so\n  // it stays on the startup path. urlBuilder must exist before we build the tools\n  // and before the engine's workspace:// URI resolver is wired.\n  const diagnosticsOn = diagnosticsToolEnabled(process.env);\n  const diagDir = resolveDiagnosticsDir(process.env);\n\n  const viewerRouter = createViewerRouter({\n    store,\n    fs,\n    broadcaster,\n    cesdkLicense: license,\n    workspaceRoot\n  });\n  const diagnosticsRouter = diagnosticsOn\n    ? createDiagnosticsRouter({ diag, dir: diagDir, env: process.env })\n    : undefined;\n  const listener = await startViewerListener({\n    router: viewerRouter,\n    ...(diagnosticsRouter ? { extraRouters: [diagnosticsRouter] } : {})\n  });\n  process.stderr.write(`codesign-mcp stdio: viewer at ${listener.base}\\n`);\n  diag.emit({\n    kind: 'lifecycle',\n    timestamp: Date.now(),\n    text: 'viewer_listening'\n  });\n  const urlBuilder = new LocalViewerUrlBuilder({ base: listener.base });\n  const diagnosticsViewerUrl = diagnosticsOn\n    ? urlBuilder.forDiagnostics()\n    : undefined;\n\n  // Engine boot is DEFERRED to the first engine-using tool call and gated by a\n  // machine-wide slot (CODE-59): idle panes hold no engine (~8-12 MB) and no\n  // slot; only real design work boots one, and at most IMGLY_MAX_STDIO_ENGINES\n  // engines run across all stdio processes at once. bootstrapEngine still runs\n  // OFF the handshake path — it is just triggered lazily now, not eagerly.\n  // At capacity, get() throws EngineCapacityError, which wrapEngineCapacity\n  // (below) turns into an isError tool result.\n  const gatedEngine = createSlotGatedEngine<CreativeEngine>({\n    max: resolveMaxStdioEngines(process.env),\n    boot: () => {\n      diag.emit({\n        kind: 'lifecycle',\n        timestamp: Date.now(),\n        text: 'engine_init_start'\n      });\n      const p = bootstrapEngine({ license, urlBuilder, usedTrial });\n      // Surface a background init failure on stderr + diagnostics. The awaiting\n      // tool call still sees the real error; this just avoids a silent gap.\n      void p.catch((err) => {\n        process.stderr.write(\n          `codesign-mcp stdio: engine initialization failed — ${\n            err instanceof Error ? (err.stack ?? err.message) : String(err)\n          }\\n`\n        );\n        diag.emit({\n          kind: 'lifecycle',\n          timestamp: Date.now(),\n          text: 'engine_init_failed',\n          error: {\n            message: err instanceof Error ? err.message : String(err),\n            ...(err instanceof Error && err.stack ? { stack: err.stack } : {})\n          }\n        });\n      });\n      return p;\n    }\n  });\n\n  // size=1, single shared engine resolved lazily (and slot-gated) on first edit.\n  const session = new EngineSession({\n    size: 1,\n    adapter: cesdkAdapter(() => gatedEngine.get())\n  });\n\n  const renderThumbnail = async ({\n    engine: eng\n  }: {\n    revision: string;\n    engine: import('@cesdk/engine').default;\n  }): Promise<Uint8Array> => {\n    // Thumbnail = the scene's first page rendered to a 256-px webp. Best-effort.\n    // We use page 0 of the scene; if the scene has no pages, throw → swallowed.\n    const pages = eng.scene.getPages();\n    if (!pages || pages.length === 0) throw new Error('no pages');\n    const blob = await eng.block.export(pages[0], 'image/webp', {\n      targetWidth: 256\n    });\n    return new Uint8Array(await blob.arrayBuffer());\n  };\n\n  const tools = [\n    ...buildDesignToolRegistrations({\n      fs,\n      store,\n      session,\n      engineLock,\n      gateway,\n      urlBuilder,\n      allowOutPath: true,\n      onLeafWritten: (e) => broadcaster.broadcast(e),\n      renderThumbnail: renderThumbnail as never, // adapter's E generic is `unknown`; cesdk engine type fits\n      telemetry\n    }).map(wrapEngineCapacity),\n    ...(diagnosticsOn\n      ? [\n          createDiagnosticsTool({\n            env: process.env,\n            transport: 'stdio',\n            dir: diagDir,\n            fileLogging: diagnosticsEnabled,\n            flush: () => diag.flush?.() ?? Promise.resolve(),\n            ...(diagnosticsViewerUrl ? { viewerUrl: diagnosticsViewerUrl } : {})\n          })\n        ]\n      : [])\n  ];\n\n  const assets = loadNodeAssets();\n  const server = createCodesignMcpServer({\n    assets,\n    tools,\n    ...(diagnosticsOn ? { prompts: [createDiagnosticsPrompt()] } : {})\n  });\n\n  const transport = new StdioServerTransport();\n\n  let shuttingDown = false;\n  const shutdown = async (reason: string) => {\n    if (shuttingDown) return; // idempotent — a signal and the transport close can race\n    shuttingDown = true;\n    diag.emit({\n      kind: 'lifecycle',\n      timestamp: Date.now(),\n      text: `shutdown:${reason}`\n    });\n    // Flush the breadcrumb NOW, before the slower teardown below. emit() is\n    // fire-and-forget, engine dispose can take seconds, and a client may SIGKILL\n    // after a short grace window — landing the event first lets it survive even\n    // if we're killed mid-teardown.\n    try {\n      await diag.flush?.();\n    } catch {\n      // best-effort\n    }\n    try {\n      await listener.close();\n    } catch {\n      // best-effort — keep tearing down\n    }\n    try {\n      await server.close();\n    } catch {\n      // best-effort\n    }\n    // Release the CE.SDK engine (WASM/native runtime) deterministically instead\n    // of leaving it to process teardown. Best-effort: a dispose error must never\n    // block the exit below.\n    try {\n      await disposeHeadlessEngine();\n    } catch (err) {\n      process.stderr.write(\n        `codesign-mcp stdio: engine dispose failed — ${\n          err instanceof Error ? err.message : String(err)\n        }\\n`\n      );\n    }\n    // Release the machine-wide engine slot (CODE-59) so another session can boot.\n    // Clean path; SIGKILL is covered by PID-liveness reaping on the next acquire.\n    try {\n      await gatedEngine.release();\n    } catch {\n      // best-effort — never block the exit\n    }\n    process.exit(0);\n  };\n\n  // A client can disconnect by closing the stdio pipe (stdin EOF) WITHOUT a\n  // signal — e.g. an orphaned/crashed host. `StdioServerTransport` only listens\n  // for stdin `data`/`error`, never EOF, so it never surfaces that disconnect on\n  // its own; the viewer listener's open socket then keeps the event loop alive\n  // and the process lingers with the engine resident. So detect stdin EOF here\n  // and reap. Listeners are attached before connect() (which puts stdin into\n  // flowing mode) so we can't miss the `end`. `server.onclose` additionally\n  // covers a protocol-level close routed through transport.close().\n  server.onclose = () => void shutdown('server-close');\n  process.stdin.on('end', () => void shutdown('stdin-end'));\n  process.stdin.on('close', () => void shutdown('stdin-close'));\n\n  await server.connect(transport);\n\n  process.on('SIGINT', () => void shutdown('SIGINT'));\n  process.on('SIGTERM', () => void shutdown('SIGTERM'));\n  process.on('SIGHUP', () => void shutdown('SIGHUP'));\n}\n\n// Heavy engine bootstrap, run in the background by runStdio (off the MCP\n// handshake path). Resolves to a fully-wired engine: design-unit-patched (by\n// ensureHeadlessEngine), workspace:// URI resolver installed, and — best-effort\n// — the default + demo + unsplash asset sources registered so asset_search has\n// content. The asset-source step hits the CDN; failures log to stderr and leave\n// the engine usable (asset_search just sees fewer sources).\nasync function bootstrapEngine({\n  license,\n  urlBuilder,\n  usedTrial\n}: {\n  license: string;\n  urlBuilder: LocalViewerUrlBuilder;\n  /** License came from the bundled trial — turns an init rejection into a hint. */\n  usedTrial: boolean;\n}): Promise<Awaited<ReturnType<typeof ensureHeadlessEngine>>> {\n  let engine: Awaited<ReturnType<typeof ensureHeadlessEngine>>;\n  try {\n    engine = await ensureHeadlessEngine(license);\n  } catch (err) {\n    if (usedTrial) {\n      process.stderr.write(\n        'codesign-mcp stdio: the bundled trial license was rejected (it may have expired). Set CESDK_LICENSE to a valid CE.SDK node license string.\\n'\n      );\n    }\n    throw err;\n  }\n  // Resolve workspace:// asset URIs to the listener's /r/ route so the headless\n  // engine can fetch generated assets embedded in scenes.\n  registerWorkspaceUriResolver(engine, urlBuilder);\n  // Default + demo asset sources so `asset_search` has content (CDN fetch,\n  // best-effort — a failure logs to stderr and the engine stays usable).\n  await ensureEngineAssetSources(engine);\n  // Demo `unsplash` custom source (synchronous, idempotent) so asset_search has\n  // a real remote source alongside the CDN ones. Public IMG.LY demo proxy.\n  registerUnsplashSource(engine);\n  return engine;\n}\n"]}

package/dist/cli/trial-license.generated.d.ts

@@ -1,2 +1,2 @@
-export declare const TRIAL_CESDK_LICENSE = "mawrm-8XIiphUrYlw2LHvPo83tRNru6XbSMaQOchm2AN-eb_luPjxhoOB_GJtJCl";
+export declare const TRIAL_CESDK_LICENSE = "oDLXTsxMIGXI_DH1JLGzhQJtI7GJyMp1dpRTyvOtXKMaXpj1w9L6w9fniuq2wRQ9";
 //# sourceMappingURL=trial-license.generated.d.ts.map

package/dist/cli/trial-license.generated.js

@@ -1,4 +1,4 @@
 // AUTO-GENERATED by scripts/generate-trial-license.mjs — do not edit.
 // Empty unless IMGLY_TRIAL_CESDK_LICENSE was set at build/publish time.
-export const TRIAL_CESDK_LICENSE = "mawrm-8XIiphUrYlw2LHvPo83tRNru6XbSMaQOchm2AN-eb_luPjxhoOB_GJtJCl";
+export const TRIAL_CESDK_LICENSE = "oDLXTsxMIGXI_DH1JLGzhQJtI7GJyMp1dpRTyvOtXKMaXpj1w9L6w9fniuq2wRQ9";
 //# sourceMappingURL=trial-license.generated.js.map

package/dist/cli/trial-license.generated.js.map

@@ -1 +1 @@
-{"version":3,"file":"trial-license.generated.js","sourceRoot":"","sources":["../../src/cli/trial-license.generated.ts"],"names":[],"mappings":"AAAA,sEAAsE;AACtE,wEAAwE;AACxE,MAAM,CAAC,MAAM,mBAAmB,GAAG,kEAAkE,CAAC","sourcesContent":["// AUTO-GENERATED by scripts/generate-trial-license.mjs — do not edit.\n// Empty unless IMGLY_TRIAL_CESDK_LICENSE was set at build/publish time.\nexport const TRIAL_CESDK_LICENSE = \"mawrm-8XIiphUrYlw2LHvPo83tRNru6XbSMaQOchm2AN-eb_luPjxhoOB_GJtJCl\";\n"]}
+{"version":3,"file":"trial-license.generated.js","sourceRoot":"","sources":["../../src/cli/trial-license.generated.ts"],"names":[],"mappings":"AAAA,sEAAsE;AACtE,wEAAwE;AACxE,MAAM,CAAC,MAAM,mBAAmB,GAAG,kEAAkE,CAAC","sourcesContent":["// AUTO-GENERATED by scripts/generate-trial-license.mjs — do not edit.\n// Empty unless IMGLY_TRIAL_CESDK_LICENSE was set at build/publish time.\nexport const TRIAL_CESDK_LICENSE = \"oDLXTsxMIGXI_DH1JLGzhQJtI7GJyMp1dpRTyvOtXKMaXpj1w9L6w9fniuq2wRQ9\";\n"]}

package/dist/config.d.ts

@@ -70,6 +70,12 @@ export declare function resolveMaxStdioEngines(env?: Env): number;
  * user knows they hit a bug. Disable with IMGLY_DIAGNOSTICS_FILE=false (or 0).
  */
 export declare function diagnosticsFileEnabled(env?: Env): boolean;
+/**
+ * The diagnostics TOOL + served viewer + prompt (CODE-62). On by default;
+ * independent of IMGLY_DIAGNOSTICS_FILE (which governs whether anything is
+ * logged). Disable with IMGLY_DIAGNOSTICS_TOOL=false (or 0).
+ */
+export declare function diagnosticsToolEnabled(env?: Env): boolean;
 /**
  * Where diagnostics NDJSON is written. Explicit IMGLY_DIAGNOSTICS_DIR wins;
  * otherwise <workspaceRoot>/logs, where workspaceRoot mirrors the stdio default

package/dist/config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAWA,MAAM,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;AAErD;;;;GAIG;AACH,wBAAgB,aAAa,CAC3B,IAAI,EAAE,MAAM,EACZ,GAAG,GAAE,GAAiB,GACrB,MAAM,GAAG,SAAS,CAIpB;AAED,MAAM,MAAM,aAAa,GAAG,QAAQ,GAAG,SAAS,GAAG,QAAQ,CAAC;AAC5D,MAAM,MAAM,gBAAgB,GAAG,OAAO,GAAG,IAAI,CAAC;AAE9C,MAAM,WAAW,QAAQ;IACvB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,gBAAgB,CAAC;IAC1B,yBAAyB;IACzB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,sBAAsB;IACtB,EAAE,CAAC,EAAE,QAAQ,CAAC;CACf;AAED,MAAM,WAAW,YAAY;IAC3B,YAAY,EAAE,MAAM,CAAC;IACrB;;;;;OAKG;IACH,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,yFAAyF;IACzF,cAAc,EAAE,MAAM,CAAC;IACvB,aAAa,EAAE,MAAM,CAAC;IACtB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,eAAe,CAAC;IAC3B,IAAI,EAAE;QACJ,IAAI,EAAE,aAAa,CAAC;QACpB,6DAA6D;QAC7D,MAAM,EAAE,MAAM,CAAC;QACf,uCAAuC;QACvC,gBAAgB,CAAC,EAAE,MAAM,CAAC;KAC3B,CAAC;IACF,OAAO,EAAE;QAAE,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAC/C,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC7B;;;;OAIG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAsBD,wBAAgB,UAAU,CAAC,GAAG,GAAE,GAAiB,GAAG,YAAY,CAoE/D;AAED;;;;;;;GAOG;AACH,wBAAgB,sBAAsB,CAAC,GAAG,GAAE,GAAiB,GAAG,MAAM,CAErE;AAED;;;GAGG;AACH,wBAAgB,sBAAsB,CAAC,GAAG,GAAE,GAAiB,GAAG,OAAO,CAEtE;AAED;;;;GAIG;AACH,wBAAgB,qBAAqB,CAAC,GAAG,GAAE,GAAiB,GAAG,MAAM,CAKpE"}
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAWA,MAAM,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;AAErD;;;;GAIG;AACH,wBAAgB,aAAa,CAC3B,IAAI,EAAE,MAAM,EACZ,GAAG,GAAE,GAAiB,GACrB,MAAM,GAAG,SAAS,CAIpB;AAED,MAAM,MAAM,aAAa,GAAG,QAAQ,GAAG,SAAS,GAAG,QAAQ,CAAC;AAC5D,MAAM,MAAM,gBAAgB,GAAG,OAAO,GAAG,IAAI,CAAC;AAE9C,MAAM,WAAW,QAAQ;IACvB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,gBAAgB,CAAC;IAC1B,yBAAyB;IACzB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,sBAAsB;IACtB,EAAE,CAAC,EAAE,QAAQ,CAAC;CACf;AAED,MAAM,WAAW,YAAY;IAC3B,YAAY,EAAE,MAAM,CAAC;IACrB;;;;;OAKG;IACH,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,yFAAyF;IACzF,cAAc,EAAE,MAAM,CAAC;IACvB,aAAa,EAAE,MAAM,CAAC;IACtB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,eAAe,CAAC;IAC3B,IAAI,EAAE;QACJ,IAAI,EAAE,aAAa,CAAC;QACpB,6DAA6D;QAC7D,MAAM,EAAE,MAAM,CAAC;QACf,uCAAuC;QACvC,gBAAgB,CAAC,EAAE,MAAM,CAAC;KAC3B,CAAC;IACF,OAAO,EAAE;QAAE,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAC/C,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC7B;;;;OAIG;IACH,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAsBD,wBAAgB,UAAU,CAAC,GAAG,GAAE,GAAiB,GAAG,YAAY,CAoE/D;AAED;;;;;;;GAOG;AACH,wBAAgB,sBAAsB,CAAC,GAAG,GAAE,GAAiB,GAAG,MAAM,CAErE;AAED;;;GAGG;AACH,wBAAgB,sBAAsB,CAAC,GAAG,GAAE,GAAiB,GAAG,OAAO,CAEtE;AAED;;;;GAIG;AACH,wBAAgB,sBAAsB,CAAC,GAAG,GAAE,GAAiB,GAAG,OAAO,CAEtE;AAED;;;;GAIG;AACH,wBAAgB,qBAAqB,CAAC,GAAG,GAAE,GAAiB,GAAG,MAAM,CAKpE"}

package/dist/config.js

@@ -118,6 +118,14 @@ export function resolveMaxStdioEngines(env = process.env) {
 export function diagnosticsFileEnabled(env = process.env) {
     return boolEnv(env, 'IMGLY_DIAGNOSTICS_FILE', true);
 }
+/**
+ * The diagnostics TOOL + served viewer + prompt (CODE-62). On by default;
+ * independent of IMGLY_DIAGNOSTICS_FILE (which governs whether anything is
+ * logged). Disable with IMGLY_DIAGNOSTICS_TOOL=false (or 0).
+ */
+export function diagnosticsToolEnabled(env = process.env) {
+    return boolEnv(env, 'IMGLY_DIAGNOSTICS_TOOL', true);
+}
 /**
  * Where diagnostics NDJSON is written. Explicit IMGLY_DIAGNOSTICS_DIR wins;
  * otherwise <workspaceRoot>/logs, where workspaceRoot mirrors the stdio default

package/dist/config.js.map

@@ -1 +1 @@
-{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,EAAE;AACF,6EAA6E;AAC7E,wEAAwE;AACxE,8EAA8E;AAC9E,6EAA6E;AAC7E,4CAA4C;AAC5C,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,IAAI,QAAQ,EAAE,MAAM,WAAW,CAAC;AAI7C;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAC3B,IAAY,EACZ,MAAW,OAAO,CAAC,GAAG;IAEtB,MAAM,QAAQ,GAAG,GAAG,CAAC,GAAG,IAAI,OAAO,CAAC,CAAC;IACrC,IAAI,QAAQ;QAAE,OAAO,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;IAC3D,OAAO,GAAG,CAAC,IAAI,CAAC,CAAC;AACnB,CAAC;AAqDD,SAAS,UAAU,CAAC,GAAQ,EAAE,IAAY;IACxC,MAAM,CAAC,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC;IACpB,IAAI,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,WAAW,IAAI,cAAc,CAAC,CAAC;IACvD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,MAAM,CAAC,GAAQ,EAAE,IAAY,EAAE,QAAgB;IACtD,MAAM,GAAG,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC;IACtB,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,QAAQ,CAAC;IACvC,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IACtB,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,WAAW,IAAI,mBAAmB,CAAC,CAAC;IAC7E,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,OAAO,CAAC,GAAQ,EAAE,IAAY,EAAE,QAAiB;IACxD,MAAM,GAAG,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC;IACtB,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,QAAQ,CAAC;IACvC,OAAO,GAAG,KAAK,MAAM,IAAI,GAAG,KAAK,GAAG,CAAC;AACvC,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,MAAW,OAAO,CAAC,GAAG;IAC/C,MAAM,YAAY,GAAG,aAAa,CAAC,qBAAqB,EAAE,GAAG,CAAC,CAAC;IAC/D,IAAI,CAAC,YAAY;QAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;IAE9E,MAAM,IAAI,GAAG,CAAC,GAAG,CAAC,oBAAoB,IAAI,QAAQ,CAAkB,CAAC;IACrE,IAAI,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,QAAQ;QAC9D,MAAM,IAAI,KAAK,CACb,oEAAoE,IAAI,IAAI,CAC7E,CAAC;IAEJ,MAAM,IAAI,GAAyB;QACjC,IAAI;QACJ,MAAM,EAAE,GAAG,CAAC,2BAA2B,IAAI,gBAAgB;KAC5D,CAAC;IACF,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;QACtB,IAAI,CAAC,gBAAgB,GAAG,UAAU,CAAC,GAAG,EAAE,oBAAoB,CAAC,CAAC;IAChE,CAAC;IAED,MAAM,OAAO,GAAG,CAAC,GAAG,CAAC,uBAAuB,IAAI,OAAO,CAAqB,CAAC;IAC7E,IAAI,OAAO,KAAK,OAAO,IAAI,OAAO,KAAK,IAAI;QACzC,MAAM,IAAI,KAAK,CACb,0DAA0D,OAAO,IAAI,CACtE,CAAC;IAEJ,IAAI,SAA0B,CAAC;IAC/B,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QACrB,MAAM,EAAE,GAAa;YACnB,MAAM,EAAE,UAAU,CAAC,GAAG,EAAE,2BAA2B,CAAC;YACpD,MAAM,EAAE,GAAG,CAAC,yBAAyB,IAAI,MAAM;SAChD,CAAC;QACF,IAAI,GAAG,CAAC,2BAA2B;YACjC,EAAE,CAAC,QAAQ,GAAG,GAAG,CAAC,2BAA2B,CAAC;QAChD,wEAAwE;QACxE,MAAM,WAAW,GAAG,aAAa,CAAC,kCAAkC,EAAE,GAAG,CAAC,CAAC;QAC3E,MAAM,eAAe,GAAG,aAAa,CACnC,sCAAsC,EACtC,GAAG,CACJ,CAAC;QACF,IAAI,WAAW;YAAE,EAAE,CAAC,WAAW,GAAG,WAAW,CAAC;QAC9C,IAAI,eAAe;YAAE,EAAE,CAAC,eAAe,GAAG,eAAe,CAAC;QAC1D,SAAS,GAAG,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;IAC9B,CAAC;SAAM,CAAC;QACN,SAAS,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,CAAC,mBAAmB,IAAI,OAAO,EAAE,CAAC;IACnE,CAAC;IAED,MAAM,OAAO,GAA4B,EAAE,CAAC;IAC5C,MAAM,UAAU,GAAG,aAAa,CAAC,uBAAuB,EAAE,GAAG,CAAC,CAAC;IAC/D,IAAI,UAAU;QAAE,OAAO,CAAC,MAAM,GAAG,UAAU,CAAC;IAC5C,IAAI,GAAG,CAAC,sBAAsB;QAAE,OAAO,CAAC,OAAO,GAAG,GAAG,CAAC,sBAAsB,CAAC;IAE7E,MAAM,GAAG,GAAiB;QACxB,YAAY;QACZ,OAAO,EAAE,GAAG,CAAC,cAAc,IAAI,KAAK;QACpC,IAAI,EAAE,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC;QAC/B,cAAc,EAAE,MAAM,CAAC,GAAG,EAAE,wBAAwB,EAAE,CAAC,CAAC;QACxD,aAAa,EAAE,MAAM,CAAC,GAAG,EAAE,4BAA4B,EAAE,GAAG,CAAC,GAAG,IAAI;QACpE,QAAQ,EAAE,GAAG,CAAC,eAAe,IAAI,MAAM;QACvC,SAAS;QACT,IAAI;QACJ,OAAO;KACR,CAAC;IACF,IAAI,GAAG,CAAC,yBAAyB;QAC/B,GAAG,CAAC,iBAAiB,GAAG,GAAG,CAAC,yBAAyB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CACzE,CAAC,CAAC,IAAI,EAAE,CACT,CAAC;IACJ,IAAI,GAAG,CAAC,qBAAqB;QAC3B,GAAG,CAAC,aAAa,GAAG,GAAG,CAAC,qBAAqB,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACpE,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,sBAAsB,CAAC,MAAW,OAAO,CAAC,GAAG;IAC3D,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,EAAE,yBAAyB,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;AAC5E,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,sBAAsB,CAAC,MAAW,OAAO,CAAC,GAAG;IAC3D,OAAO,OAAO,CAAC,GAAG,EAAE,wBAAwB,EAAE,IAAI,CAAC,CAAC;AACtD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,qBAAqB,CAAC,MAAW,OAAO,CAAC,GAAG;IAC1D,IAAI,GAAG,CAAC,qBAAqB;QAAE,OAAO,GAAG,CAAC,qBAAqB,CAAC;IAChE,MAAM,aAAa,GACjB,GAAG,CAAC,kBAAkB,IAAI,QAAQ,CAAC,OAAO,EAAE,EAAE,WAAW,EAAE,WAAW,CAAC,CAAC;IAC1E,OAAO,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC;AACzC,CAAC","sourcesContent":["// packages/codesign-mcp/src/config.ts\n//\n// The IMGLY_* configuration contract (spec §9.2). One image, switched purely\n// by runtime env. Non-secret knobs are plain env vars; the four secrets\n// (license, gateway key, two S3 keys) also accept the `*_FILE` convention via\n// resolveSecret — the de-facto Docker/K8s secret standard. No secret is ever\n// logged or written; loadConfig only reads.\nimport { readFileSync } from 'node:fs';\nimport { homedir } from 'node:os';\nimport { join as joinPath } from 'node:path';\n\nexport type Env = Record<string, string | undefined>;\n\n/**\n * Resolve a secret: prefer `<NAME>_FILE` (trimmed file contents — secret files\n * end in a newline) and fall back to the plain `<NAME>` env var. A superset of\n * \"just env vars\": production mounts a file, local dev passes the raw value.\n */\nexport function resolveSecret(\n  name: string,\n  env: Env = process.env\n): string | undefined {\n  const filePath = env[`${name}_FILE`];\n  if (filePath) return readFileSync(filePath, 'utf8').trim();\n  return env[name];\n}\n\nexport type WorkspaceMode = 'header' | 'session' | 'single';\nexport type WorkspaceBackend = 'local' | 's3';\n\nexport interface S3Config {\n  bucket: string;\n  endpoint?: string;\n  region: string;\n  accessKeyId?: string;\n  secretAccessKey?: string;\n}\n\nexport interface WorkspaceConfig {\n  backend: WorkspaceBackend;\n  /** local backend only */\n  dir?: string;\n  /** s3 backend only */\n  s3?: S3Config;\n}\n\nexport interface ServerConfig {\n  cesdkLicense: string;\n  /**\n   * Build identity, surfaced as the MCP `serverInfo.version`. Lets a client\n   * (e.g. the deploy smoketest) detect a stale, not-yet-rolled-out container:\n   * the deploy injects the git SHA, the smoketest asserts the running server\n   * reports it. Default `'dev'` for local runs.\n   */\n  buildId: string;\n  port: number;\n  /** Max concurrent engines/sessions per HTTP server process — the RAM cap (spec §9.2). */\n  maxHttpEngines: number;\n  idleTimeoutMs: number;\n  logLevel: string;\n  workspace: WorkspaceConfig;\n  auth: {\n    mode: WorkspaceMode;\n    /** header carrying the trusted workspaceId (header mode). */\n    header: string;\n    /** fixed workspaceId (single mode). */\n    fixedWorkspaceId?: string;\n  };\n  gateway: { apiKey?: string; baseUrl?: string };\n  viewerCorsOrigins?: string[];\n  /**\n   * Public origin of this deployment (e.g. the Cloudflare Worker URL),\n   * no trailing slash. Used to build viewer URLs the MCP client's human can\n   * actually open. Absent → loopback URLs (local dev).\n   */\n  publicBaseUrl?: string;\n}\n\nfunction requireEnv(env: Env, name: string): string {\n  const v = env[name];\n  if (!v) throw new Error(`config: ${name} is required`);\n  return v;\n}\n\nfunction intEnv(env: Env, name: string, fallback: number): number {\n  const raw = env[name];\n  if (raw === undefined) return fallback;\n  const n = Number(raw);\n  if (!Number.isFinite(n)) throw new Error(`config: ${name} must be a number`);\n  return n;\n}\n\nfunction boolEnv(env: Env, name: string, fallback: boolean): boolean {\n  const raw = env[name];\n  if (raw === undefined) return fallback;\n  return raw === 'true' || raw === '1';\n}\n\nexport function loadConfig(env: Env = process.env): ServerConfig {\n  const cesdkLicense = resolveSecret('IMGLY_CESDK_LICENSE', env);\n  if (!cesdkLicense) throw new Error('config: IMGLY_CESDK_LICENSE is required');\n\n  const mode = (env.IMGLY_WORKSPACE_MODE ?? 'header') as WorkspaceMode;\n  if (mode !== 'header' && mode !== 'session' && mode !== 'single')\n    throw new Error(\n      `config: IMGLY_WORKSPACE_MODE must be header|session|single (got \"${mode}\")`\n    );\n\n  const auth: ServerConfig['auth'] = {\n    mode,\n    header: env.IMGLY_AUTH_WORKSPACE_HEADER ?? 'X-Workspace-Id'\n  };\n  if (mode === 'single') {\n    auth.fixedWorkspaceId = requireEnv(env, 'IMGLY_WORKSPACE_ID');\n  }\n\n  const backend = (env.IMGLY_WORKSPACE_BACKEND ?? 'local') as WorkspaceBackend;\n  if (backend !== 'local' && backend !== 's3')\n    throw new Error(\n      `config: IMGLY_WORKSPACE_BACKEND must be local|s3 (got \"${backend}\")`\n    );\n\n  let workspace: WorkspaceConfig;\n  if (backend === 's3') {\n    const s3: S3Config = {\n      bucket: requireEnv(env, 'IMGLY_WORKSPACE_S3_BUCKET'),\n      region: env.IMGLY_WORKSPACE_S3_REGION ?? 'auto'\n    };\n    if (env.IMGLY_WORKSPACE_S3_ENDPOINT)\n      s3.endpoint = env.IMGLY_WORKSPACE_S3_ENDPOINT;\n    // Keys are optional: absent -> AWS default credential chain (IAM role).\n    const accessKeyId = resolveSecret('IMGLY_WORKSPACE_S3_ACCESS_KEY_ID', env);\n    const secretAccessKey = resolveSecret(\n      'IMGLY_WORKSPACE_S3_SECRET_ACCESS_KEY',\n      env\n    );\n    if (accessKeyId) s3.accessKeyId = accessKeyId;\n    if (secretAccessKey) s3.secretAccessKey = secretAccessKey;\n    workspace = { backend, s3 };\n  } else {\n    workspace = { backend, dir: env.IMGLY_WORKSPACE_DIR ?? '/data' };\n  }\n\n  const gateway: ServerConfig['gateway'] = {};\n  const gatewayKey = resolveSecret('IMGLY_GATEWAY_API_KEY', env);\n  if (gatewayKey) gateway.apiKey = gatewayKey;\n  if (env.IMGLY_GATEWAY_BASE_URL) gateway.baseUrl = env.IMGLY_GATEWAY_BASE_URL;\n\n  const cfg: ServerConfig = {\n    cesdkLicense,\n    buildId: env.IMGLY_BUILD_ID ?? 'dev',\n    port: intEnv(env, 'PORT', 8080),\n    maxHttpEngines: intEnv(env, 'IMGLY_MAX_HTTP_ENGINES', 8),\n    idleTimeoutMs: intEnv(env, 'IMGLY_SESSION_IDLE_TIMEOUT', 900) * 1000,\n    logLevel: env.IMGLY_LOG_LEVEL ?? 'info',\n    workspace,\n    auth,\n    gateway\n  };\n  if (env.IMGLY_VIEWER_CORS_ORIGINS)\n    cfg.viewerCorsOrigins = env.IMGLY_VIEWER_CORS_ORIGINS.split(',').map((s) =>\n      s.trim()\n    );\n  if (env.IMGLY_PUBLIC_BASE_URL)\n    cfg.publicBaseUrl = env.IMGLY_PUBLIC_BASE_URL.replace(/\\/+$/, '');\n  return cfg;\n}\n\n/**\n * Machine-wide cap on concurrently booting CE.SDK engines for the LOCAL stdio\n * transport (CODE-59). Distinct from IMGLY_MAX_HTTP_ENGINES (per HTTP server\n * process): different scope, different default, and different at-capacity\n * behavior (stdio fails fast; HTTP evicts/queues). Floored at 1 so a stray 0\n * cannot brick the server. Read here (not in loadConfig) because the stdio path\n * never calls loadConfig.\n */\nexport function resolveMaxStdioEngines(env: Env = process.env): number {\n  return Math.max(1, Math.floor(intEnv(env, 'IMGLY_MAX_STDIO_ENGINES', 4)));\n}\n\n/**\n * Local diagnostics file logging is ON by default so evidence exists before a\n * user knows they hit a bug. Disable with IMGLY_DIAGNOSTICS_FILE=false (or 0).\n */\nexport function diagnosticsFileEnabled(env: Env = process.env): boolean {\n  return boolEnv(env, 'IMGLY_DIAGNOSTICS_FILE', true);\n}\n\n/**\n * Where diagnostics NDJSON is written. Explicit IMGLY_DIAGNOSTICS_DIR wins;\n * otherwise <workspaceRoot>/logs, where workspaceRoot mirrors the stdio default\n * ($CODESIGN_WORKSPACE ?? ~/.codesign/workspace).\n */\nexport function resolveDiagnosticsDir(env: Env = process.env): string {\n  if (env.IMGLY_DIAGNOSTICS_DIR) return env.IMGLY_DIAGNOSTICS_DIR;\n  const workspaceRoot =\n    env.CODESIGN_WORKSPACE ?? joinPath(homedir(), '.codesign', 'workspace');\n  return joinPath(workspaceRoot, 'logs');\n}\n"]}
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,EAAE;AACF,6EAA6E;AAC7E,wEAAwE;AACxE,8EAA8E;AAC9E,6EAA6E;AAC7E,4CAA4C;AAC5C,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,IAAI,QAAQ,EAAE,MAAM,WAAW,CAAC;AAI7C;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAC3B,IAAY,EACZ,MAAW,OAAO,CAAC,GAAG;IAEtB,MAAM,QAAQ,GAAG,GAAG,CAAC,GAAG,IAAI,OAAO,CAAC,CAAC;IACrC,IAAI,QAAQ;QAAE,OAAO,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;IAC3D,OAAO,GAAG,CAAC,IAAI,CAAC,CAAC;AACnB,CAAC;AAqDD,SAAS,UAAU,CAAC,GAAQ,EAAE,IAAY;IACxC,MAAM,CAAC,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC;IACpB,IAAI,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,WAAW,IAAI,cAAc,CAAC,CAAC;IACvD,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,MAAM,CAAC,GAAQ,EAAE,IAAY,EAAE,QAAgB;IACtD,MAAM,GAAG,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC;IACtB,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,QAAQ,CAAC;IACvC,MAAM,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IACtB,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,WAAW,IAAI,mBAAmB,CAAC,CAAC;IAC7E,OAAO,CAAC,CAAC;AACX,CAAC;AAED,SAAS,OAAO,CAAC,GAAQ,EAAE,IAAY,EAAE,QAAiB;IACxD,MAAM,GAAG,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC;IACtB,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,QAAQ,CAAC;IACvC,OAAO,GAAG,KAAK,MAAM,IAAI,GAAG,KAAK,GAAG,CAAC;AACvC,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,MAAW,OAAO,CAAC,GAAG;IAC/C,MAAM,YAAY,GAAG,aAAa,CAAC,qBAAqB,EAAE,GAAG,CAAC,CAAC;IAC/D,IAAI,CAAC,YAAY;QAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;IAE9E,MAAM,IAAI,GAAG,CAAC,GAAG,CAAC,oBAAoB,IAAI,QAAQ,CAAkB,CAAC;IACrE,IAAI,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,QAAQ;QAC9D,MAAM,IAAI,KAAK,CACb,oEAAoE,IAAI,IAAI,CAC7E,CAAC;IAEJ,MAAM,IAAI,GAAyB;QACjC,IAAI;QACJ,MAAM,EAAE,GAAG,CAAC,2BAA2B,IAAI,gBAAgB;KAC5D,CAAC;IACF,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;QACtB,IAAI,CAAC,gBAAgB,GAAG,UAAU,CAAC,GAAG,EAAE,oBAAoB,CAAC,CAAC;IAChE,CAAC;IAED,MAAM,OAAO,GAAG,CAAC,GAAG,CAAC,uBAAuB,IAAI,OAAO,CAAqB,CAAC;IAC7E,IAAI,OAAO,KAAK,OAAO,IAAI,OAAO,KAAK,IAAI;QACzC,MAAM,IAAI,KAAK,CACb,0DAA0D,OAAO,IAAI,CACtE,CAAC;IAEJ,IAAI,SAA0B,CAAC;IAC/B,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;QACrB,MAAM,EAAE,GAAa;YACnB,MAAM,EAAE,UAAU,CAAC,GAAG,EAAE,2BAA2B,CAAC;YACpD,MAAM,EAAE,GAAG,CAAC,yBAAyB,IAAI,MAAM;SAChD,CAAC;QACF,IAAI,GAAG,CAAC,2BAA2B;YACjC,EAAE,CAAC,QAAQ,GAAG,GAAG,CAAC,2BAA2B,CAAC;QAChD,wEAAwE;QACxE,MAAM,WAAW,GAAG,aAAa,CAAC,kCAAkC,EAAE,GAAG,CAAC,CAAC;QAC3E,MAAM,eAAe,GAAG,aAAa,CACnC,sCAAsC,EACtC,GAAG,CACJ,CAAC;QACF,IAAI,WAAW;YAAE,EAAE,CAAC,WAAW,GAAG,WAAW,CAAC;QAC9C,IAAI,eAAe;YAAE,EAAE,CAAC,eAAe,GAAG,eAAe,CAAC;QAC1D,SAAS,GAAG,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;IAC9B,CAAC;SAAM,CAAC;QACN,SAAS,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,CAAC,mBAAmB,IAAI,OAAO,EAAE,CAAC;IACnE,CAAC;IAED,MAAM,OAAO,GAA4B,EAAE,CAAC;IAC5C,MAAM,UAAU,GAAG,aAAa,CAAC,uBAAuB,EAAE,GAAG,CAAC,CAAC;IAC/D,IAAI,UAAU;QAAE,OAAO,CAAC,MAAM,GAAG,UAAU,CAAC;IAC5C,IAAI,GAAG,CAAC,sBAAsB;QAAE,OAAO,CAAC,OAAO,GAAG,GAAG,CAAC,sBAAsB,CAAC;IAE7E,MAAM,GAAG,GAAiB;QACxB,YAAY;QACZ,OAAO,EAAE,GAAG,CAAC,cAAc,IAAI,KAAK;QACpC,IAAI,EAAE,MAAM,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC;QAC/B,cAAc,EAAE,MAAM,CAAC,GAAG,EAAE,wBAAwB,EAAE,CAAC,CAAC;QACxD,aAAa,EAAE,MAAM,CAAC,GAAG,EAAE,4BAA4B,EAAE,GAAG,CAAC,GAAG,IAAI;QACpE,QAAQ,EAAE,GAAG,CAAC,eAAe,IAAI,MAAM;QACvC,SAAS;QACT,IAAI;QACJ,OAAO;KACR,CAAC;IACF,IAAI,GAAG,CAAC,yBAAyB;QAC/B,GAAG,CAAC,iBAAiB,GAAG,GAAG,CAAC,yBAAyB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CACzE,CAAC,CAAC,IAAI,EAAE,CACT,CAAC;IACJ,IAAI,GAAG,CAAC,qBAAqB;QAC3B,GAAG,CAAC,aAAa,GAAG,GAAG,CAAC,qBAAqB,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACpE,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,sBAAsB,CAAC,MAAW,OAAO,CAAC,GAAG;IAC3D,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,EAAE,yBAAyB,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;AAC5E,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,sBAAsB,CAAC,MAAW,OAAO,CAAC,GAAG;IAC3D,OAAO,OAAO,CAAC,GAAG,EAAE,wBAAwB,EAAE,IAAI,CAAC,CAAC;AACtD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,sBAAsB,CAAC,MAAW,OAAO,CAAC,GAAG;IAC3D,OAAO,OAAO,CAAC,GAAG,EAAE,wBAAwB,EAAE,IAAI,CAAC,CAAC;AACtD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,qBAAqB,CAAC,MAAW,OAAO,CAAC,GAAG;IAC1D,IAAI,GAAG,CAAC,qBAAqB;QAAE,OAAO,GAAG,CAAC,qBAAqB,CAAC;IAChE,MAAM,aAAa,GACjB,GAAG,CAAC,kBAAkB,IAAI,QAAQ,CAAC,OAAO,EAAE,EAAE,WAAW,EAAE,WAAW,CAAC,CAAC;IAC1E,OAAO,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC,CAAC;AACzC,CAAC","sourcesContent":["// packages/codesign-mcp/src/config.ts\n//\n// The IMGLY_* configuration contract (spec §9.2). One image, switched purely\n// by runtime env. Non-secret knobs are plain env vars; the four secrets\n// (license, gateway key, two S3 keys) also accept the `*_FILE` convention via\n// resolveSecret — the de-facto Docker/K8s secret standard. No secret is ever\n// logged or written; loadConfig only reads.\nimport { readFileSync } from 'node:fs';\nimport { homedir } from 'node:os';\nimport { join as joinPath } from 'node:path';\n\nexport type Env = Record<string, string | undefined>;\n\n/**\n * Resolve a secret: prefer `<NAME>_FILE` (trimmed file contents — secret files\n * end in a newline) and fall back to the plain `<NAME>` env var. A superset of\n * \"just env vars\": production mounts a file, local dev passes the raw value.\n */\nexport function resolveSecret(\n  name: string,\n  env: Env = process.env\n): string | undefined {\n  const filePath = env[`${name}_FILE`];\n  if (filePath) return readFileSync(filePath, 'utf8').trim();\n  return env[name];\n}\n\nexport type WorkspaceMode = 'header' | 'session' | 'single';\nexport type WorkspaceBackend = 'local' | 's3';\n\nexport interface S3Config {\n  bucket: string;\n  endpoint?: string;\n  region: string;\n  accessKeyId?: string;\n  secretAccessKey?: string;\n}\n\nexport interface WorkspaceConfig {\n  backend: WorkspaceBackend;\n  /** local backend only */\n  dir?: string;\n  /** s3 backend only */\n  s3?: S3Config;\n}\n\nexport interface ServerConfig {\n  cesdkLicense: string;\n  /**\n   * Build identity, surfaced as the MCP `serverInfo.version`. Lets a client\n   * (e.g. the deploy smoketest) detect a stale, not-yet-rolled-out container:\n   * the deploy injects the git SHA, the smoketest asserts the running server\n   * reports it. Default `'dev'` for local runs.\n   */\n  buildId: string;\n  port: number;\n  /** Max concurrent engines/sessions per HTTP server process — the RAM cap (spec §9.2). */\n  maxHttpEngines: number;\n  idleTimeoutMs: number;\n  logLevel: string;\n  workspace: WorkspaceConfig;\n  auth: {\n    mode: WorkspaceMode;\n    /** header carrying the trusted workspaceId (header mode). */\n    header: string;\n    /** fixed workspaceId (single mode). */\n    fixedWorkspaceId?: string;\n  };\n  gateway: { apiKey?: string; baseUrl?: string };\n  viewerCorsOrigins?: string[];\n  /**\n   * Public origin of this deployment (e.g. the Cloudflare Worker URL),\n   * no trailing slash. Used to build viewer URLs the MCP client's human can\n   * actually open. Absent → loopback URLs (local dev).\n   */\n  publicBaseUrl?: string;\n}\n\nfunction requireEnv(env: Env, name: string): string {\n  const v = env[name];\n  if (!v) throw new Error(`config: ${name} is required`);\n  return v;\n}\n\nfunction intEnv(env: Env, name: string, fallback: number): number {\n  const raw = env[name];\n  if (raw === undefined) return fallback;\n  const n = Number(raw);\n  if (!Number.isFinite(n)) throw new Error(`config: ${name} must be a number`);\n  return n;\n}\n\nfunction boolEnv(env: Env, name: string, fallback: boolean): boolean {\n  const raw = env[name];\n  if (raw === undefined) return fallback;\n  return raw === 'true' || raw === '1';\n}\n\nexport function loadConfig(env: Env = process.env): ServerConfig {\n  const cesdkLicense = resolveSecret('IMGLY_CESDK_LICENSE', env);\n  if (!cesdkLicense) throw new Error('config: IMGLY_CESDK_LICENSE is required');\n\n  const mode = (env.IMGLY_WORKSPACE_MODE ?? 'header') as WorkspaceMode;\n  if (mode !== 'header' && mode !== 'session' && mode !== 'single')\n    throw new Error(\n      `config: IMGLY_WORKSPACE_MODE must be header|session|single (got \"${mode}\")`\n    );\n\n  const auth: ServerConfig['auth'] = {\n    mode,\n    header: env.IMGLY_AUTH_WORKSPACE_HEADER ?? 'X-Workspace-Id'\n  };\n  if (mode === 'single') {\n    auth.fixedWorkspaceId = requireEnv(env, 'IMGLY_WORKSPACE_ID');\n  }\n\n  const backend = (env.IMGLY_WORKSPACE_BACKEND ?? 'local') as WorkspaceBackend;\n  if (backend !== 'local' && backend !== 's3')\n    throw new Error(\n      `config: IMGLY_WORKSPACE_BACKEND must be local|s3 (got \"${backend}\")`\n    );\n\n  let workspace: WorkspaceConfig;\n  if (backend === 's3') {\n    const s3: S3Config = {\n      bucket: requireEnv(env, 'IMGLY_WORKSPACE_S3_BUCKET'),\n      region: env.IMGLY_WORKSPACE_S3_REGION ?? 'auto'\n    };\n    if (env.IMGLY_WORKSPACE_S3_ENDPOINT)\n      s3.endpoint = env.IMGLY_WORKSPACE_S3_ENDPOINT;\n    // Keys are optional: absent -> AWS default credential chain (IAM role).\n    const accessKeyId = resolveSecret('IMGLY_WORKSPACE_S3_ACCESS_KEY_ID', env);\n    const secretAccessKey = resolveSecret(\n      'IMGLY_WORKSPACE_S3_SECRET_ACCESS_KEY',\n      env\n    );\n    if (accessKeyId) s3.accessKeyId = accessKeyId;\n    if (secretAccessKey) s3.secretAccessKey = secretAccessKey;\n    workspace = { backend, s3 };\n  } else {\n    workspace = { backend, dir: env.IMGLY_WORKSPACE_DIR ?? '/data' };\n  }\n\n  const gateway: ServerConfig['gateway'] = {};\n  const gatewayKey = resolveSecret('IMGLY_GATEWAY_API_KEY', env);\n  if (gatewayKey) gateway.apiKey = gatewayKey;\n  if (env.IMGLY_GATEWAY_BASE_URL) gateway.baseUrl = env.IMGLY_GATEWAY_BASE_URL;\n\n  const cfg: ServerConfig = {\n    cesdkLicense,\n    buildId: env.IMGLY_BUILD_ID ?? 'dev',\n    port: intEnv(env, 'PORT', 8080),\n    maxHttpEngines: intEnv(env, 'IMGLY_MAX_HTTP_ENGINES', 8),\n    idleTimeoutMs: intEnv(env, 'IMGLY_SESSION_IDLE_TIMEOUT', 900) * 1000,\n    logLevel: env.IMGLY_LOG_LEVEL ?? 'info',\n    workspace,\n    auth,\n    gateway\n  };\n  if (env.IMGLY_VIEWER_CORS_ORIGINS)\n    cfg.viewerCorsOrigins = env.IMGLY_VIEWER_CORS_ORIGINS.split(',').map((s) =>\n      s.trim()\n    );\n  if (env.IMGLY_PUBLIC_BASE_URL)\n    cfg.publicBaseUrl = env.IMGLY_PUBLIC_BASE_URL.replace(/\\/+$/, '');\n  return cfg;\n}\n\n/**\n * Machine-wide cap on concurrently booting CE.SDK engines for the LOCAL stdio\n * transport (CODE-59). Distinct from IMGLY_MAX_HTTP_ENGINES (per HTTP server\n * process): different scope, different default, and different at-capacity\n * behavior (stdio fails fast; HTTP evicts/queues). Floored at 1 so a stray 0\n * cannot brick the server. Read here (not in loadConfig) because the stdio path\n * never calls loadConfig.\n */\nexport function resolveMaxStdioEngines(env: Env = process.env): number {\n  return Math.max(1, Math.floor(intEnv(env, 'IMGLY_MAX_STDIO_ENGINES', 4)));\n}\n\n/**\n * Local diagnostics file logging is ON by default so evidence exists before a\n * user knows they hit a bug. Disable with IMGLY_DIAGNOSTICS_FILE=false (or 0).\n */\nexport function diagnosticsFileEnabled(env: Env = process.env): boolean {\n  return boolEnv(env, 'IMGLY_DIAGNOSTICS_FILE', true);\n}\n\n/**\n * The diagnostics TOOL + served viewer + prompt (CODE-62). On by default;\n * independent of IMGLY_DIAGNOSTICS_FILE (which governs whether anything is\n * logged). Disable with IMGLY_DIAGNOSTICS_TOOL=false (or 0).\n */\nexport function diagnosticsToolEnabled(env: Env = process.env): boolean {\n  return boolEnv(env, 'IMGLY_DIAGNOSTICS_TOOL', true);\n}\n\n/**\n * Where diagnostics NDJSON is written. Explicit IMGLY_DIAGNOSTICS_DIR wins;\n * otherwise <workspaceRoot>/logs, where workspaceRoot mirrors the stdio default\n * ($CODESIGN_WORKSPACE ?? ~/.codesign/workspace).\n */\nexport function resolveDiagnosticsDir(env: Env = process.env): string {\n  if (env.IMGLY_DIAGNOSTICS_DIR) return env.IMGLY_DIAGNOSTICS_DIR;\n  const workspaceRoot =\n    env.CODESIGN_WORKSPACE ?? joinPath(homedir(), '.codesign', 'workspace');\n  return joinPath(workspaceRoot, 'logs');\n}\n"]}

package/dist/diagnostics/bundle.d.ts

@@ -4,7 +4,10 @@ export interface BundleFile {
     bytes: Buffer;
 }
 export declare function collectBundleFiles(dir: string, meta: Record<string, unknown>): Promise<BundleFile[]>;
+/** Redact each COMPLETE line; drop an incomplete trailing line (mid-write). */
+export declare function scrubNdjson(raw: string): string;
 export declare function buildBundleMeta(env?: Env): Record<string, unknown>;
 export declare function runDiagnose(env?: Env): Promise<string>;
+export declare function packStoreZip(files: BundleFile[]): Buffer;
 export declare function writeStoreZip(files: BundleFile[], outPath: string): Promise<void>;
 //# sourceMappingURL=bundle.d.ts.map

package/dist/diagnostics/bundle.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"bundle.d.ts","sourceRoot":"","sources":["../../src/diagnostics/bundle.ts"],"names":[],"mappings":"AAYA,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,cAAc,CAAC;AAIxC,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;CACf;AAED,wBAAsB,kBAAkB,CACtC,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC5B,OAAO,CAAC,UAAU,EAAE,CAAC,CAgBvB;AAgBD,wBAAgB,eAAe,CAC7B,GAAG,GAAE,GAAiB,GACrB,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAkBzB;AAED,wBAAsB,WAAW,CAAC,GAAG,GAAE,GAAiB,GAAG,OAAO,CAAC,MAAM,CAAC,CAWzE;AAsBD,wBAAsB,aAAa,CACjC,KAAK,EAAE,UAAU,EAAE,EACnB,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,IAAI,CAAC,CA0Df"}
+{"version":3,"file":"bundle.d.ts","sourceRoot":"","sources":["../../src/diagnostics/bundle.ts"],"names":[],"mappings":"AAYA,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,cAAc,CAAC;AAIxC,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;CACf;AAED,wBAAsB,kBAAkB,CACtC,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC5B,OAAO,CAAC,UAAU,EAAE,CAAC,CAgBvB;AAED,+EAA+E;AAC/E,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAW/C;AAED,wBAAgB,eAAe,CAC7B,GAAG,GAAE,GAAiB,GACrB,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAkBzB;AAED,wBAAsB,WAAW,CAAC,GAAG,GAAE,GAAiB,GAAG,OAAO,CAAC,MAAM,CAAC,CAWzE;AAsBD,wBAAgB,YAAY,CAAC,KAAK,EAAE,UAAU,EAAE,GAAG,MAAM,CA0DxD;AAED,wBAAsB,aAAa,CACjC,KAAK,EAAE,UAAU,EAAE,EACnB,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,IAAI,CAAC,CAEf"}

package/dist/diagnostics/bundle.js

@@ -30,7 +30,7 @@ export async function collectBundleFiles(dir, meta) {
     return files;
 }
 /** Redact each COMPLETE line; drop an incomplete trailing line (mid-write). */
-function scrubNdjson(raw) {
+export function scrubNdjson(raw) {
     if (raw.length === 0)
         return '';
     const endsClean = raw.endsWith('\n');
@@ -91,7 +91,7 @@ function crc32(buf) {
         c = CRC_TABLE[(c ^ buf[i]) & 0xff] ^ (c >>> 8);
     return (c ^ 0xffffffff) >>> 0;
 }
-export async function writeStoreZip(files, outPath) {
+export function packStoreZip(files) {
     const chunks = [];
     const central = [];
     let offset = 0;
@@ -100,42 +100,42 @@ export async function writeStoreZip(files, outPath) {
         const crc = crc32(file.bytes);
         const compressed = deflateRawSync(file.bytes);
         const local = Buffer.alloc(30);
-        local.writeUInt32LE(0x04034b50, 0); // local file header signature
-        local.writeUInt16LE(20, 4); // version needed
-        local.writeUInt16LE(0, 6); // flags
-        local.writeUInt16LE(8, 8); // method: deflate
-        local.writeUInt16LE(0, 10); // mod time
-        local.writeUInt16LE(0, 12); // mod date
+        local.writeUInt32LE(0x04034b50, 0);
+        local.writeUInt16LE(20, 4);
+        local.writeUInt16LE(0, 6);
+        local.writeUInt16LE(8, 8);
+        local.writeUInt16LE(0, 10);
+        local.writeUInt16LE(0, 12);
         local.writeUInt32LE(crc, 14);
         local.writeUInt32LE(compressed.length, 18);
         local.writeUInt32LE(file.bytes.length, 22);
         local.writeUInt16LE(nameBuf.length, 26);
-        local.writeUInt16LE(0, 28); // extra len
+        local.writeUInt16LE(0, 28);
         chunks.push(local, nameBuf, compressed);
         const cd = Buffer.alloc(46);
-        cd.writeUInt32LE(0x02014b50, 0); // central dir header signature
-        cd.writeUInt16LE(20, 4); // version made by
-        cd.writeUInt16LE(20, 6); // version needed
-        cd.writeUInt16LE(0, 8); // flags
-        cd.writeUInt16LE(8, 10); // method
+        cd.writeUInt32LE(0x02014b50, 0);
+        cd.writeUInt16LE(20, 4);
+        cd.writeUInt16LE(20, 6);
+        cd.writeUInt16LE(0, 8);
+        cd.writeUInt16LE(8, 10);
         cd.writeUInt16LE(0, 12);
         cd.writeUInt16LE(0, 14);
         cd.writeUInt32LE(crc, 16);
         cd.writeUInt32LE(compressed.length, 20);
         cd.writeUInt32LE(file.bytes.length, 24);
         cd.writeUInt16LE(nameBuf.length, 28);
-        cd.writeUInt16LE(0, 30); // extra
-        cd.writeUInt16LE(0, 32); // comment
-        cd.writeUInt16LE(0, 34); // disk #
-        cd.writeUInt16LE(0, 36); // internal attrs
-        cd.writeUInt32LE(0, 38); // external attrs
-        cd.writeUInt32LE(offset, 42); // local header offset
+        cd.writeUInt16LE(0, 30);
+        cd.writeUInt16LE(0, 32);
+        cd.writeUInt16LE(0, 34);
+        cd.writeUInt16LE(0, 36);
+        cd.writeUInt32LE(0, 38);
+        cd.writeUInt32LE(offset, 42);
         central.push(cd, nameBuf);
         offset += local.length + nameBuf.length + compressed.length;
     }
     const centralBuf = Buffer.concat(central);
     const end = Buffer.alloc(22);
-    end.writeUInt32LE(0x06054b50, 0); // end of central dir signature
+    end.writeUInt32LE(0x06054b50, 0);
     end.writeUInt16LE(0, 4);
     end.writeUInt16LE(0, 6);
     end.writeUInt16LE(files.length, 8);
@@ -143,6 +143,9 @@ export async function writeStoreZip(files, outPath) {
     end.writeUInt32LE(centralBuf.length, 12);
     end.writeUInt32LE(offset, 16);
     end.writeUInt16LE(0, 20);
-    await writeFile(outPath, Buffer.concat([...chunks, centralBuf, end]));
+    return Buffer.concat([...chunks, centralBuf, end]);
+}
+export async function writeStoreZip(files, outPath) {
+    await writeFile(outPath, packStoreZip(files));
 }
 //# sourceMappingURL=bundle.js.map