@launchsecure/launch-kit 0.0.27 → 0.0.29

package/dist/server/orbit-entry.js

@@ -923,6 +923,18 @@ function detectPmFromLock(worktreePath) {
   if ((0, import_node_fs7.existsSync)((0, import_node_path5.join)(worktreePath, "bun.lockb"))) return "bun";
   return "npm";
 }
+function combineOutput(stdout, stderr) {
+  const out = (stdout ?? "").trimEnd();
+  const err2 = (stderr ?? "").trimEnd();
+  if (!out && !err2) return "";
+  if (!err2) return out + "\n";
+  if (!out) return err2 + "\n";
+  return `${out}
+
+---STDERR---
+${err2}
+`;
+}
 function saveLog(slug, label, content) {
   const ts = (/* @__PURE__ */ new Date()).toISOString().replace(/[:.]/g, "-");
   const path = (0, import_node_path5.join)(LOG_DIR, `${ts}_${slug}_${label}.log`);
@@ -1007,12 +1019,31 @@ var init_build_lint = __esm({
               env: spawnEnv
             });
             if (installRes.status !== 0) {
-              const log = saveLog(ctx.entry.slug, "install", installRes.stderr ?? installRes.stdout ?? "");
+              const log = saveLog(ctx.entry.slug, "install", combineOutput(installRes.stdout, installRes.stderr));
               blockers.push("dependency install failed in ephemeral worktree");
               artifacts.install_log = log;
               return finalize(checkPath, ctx, blockers, artifacts);
             }
           }
+          if ((0, import_node_fs7.existsSync)((0, import_node_path5.join)(checkPath, "prisma", "schema.prisma"))) {
+            const prismaCmd = "npx prisma generate";
+            ctx.logger.step(`[build-lint] ${prismaCmd}`);
+            const prismaRes = (0, import_node_child_process5.spawnSync)("bash", ["-c", `cd ${shellQuote2(checkPath)} && ${prismaCmd}`], {
+              stdio: ["ignore", "pipe", "pipe"],
+              encoding: "utf-8",
+              env: spawnEnv
+            });
+            if (prismaRes.status !== 0) {
+              const log = saveLog(
+                ctx.entry.slug,
+                "prisma-generate",
+                combineOutput(prismaRes.stdout, prismaRes.stderr)
+              );
+              blockers.push(`prisma generate failed (exit ${prismaRes.status}) \u2014 tsc will not be reliable`);
+              artifacts["prisma-generate_log"] = log;
+              return finalize(checkPath, ctx, blockers, artifacts);
+            }
+          }
           const tscMode = config.tsc ?? true;
           if (tscMode !== false) {
             const tscCmd = typeof tscMode === "string" ? tscMode : "npx tsc --noEmit";
@@ -1023,7 +1054,7 @@ var init_build_lint = __esm({
               env: spawnEnv
             });
             if (tscRes.status !== 0) {
-              const log = saveLog(ctx.entry.slug, "tsc", tscRes.stdout ?? tscRes.stderr ?? "");
+              const log = saveLog(ctx.entry.slug, "tsc", combineOutput(tscRes.stdout, tscRes.stderr));
               blockers.push(`tsc reported errors (exit ${tscRes.status})`);
               artifacts.tsc_log = log;
             }
@@ -1039,7 +1070,7 @@ var init_build_lint = __esm({
                 env: spawnEnv
               });
               if (lintRes.status !== 0) {
-                const log = saveLog(ctx.entry.slug, "lint", lintRes.stdout ?? lintRes.stderr ?? "");
+                const log = saveLog(ctx.entry.slug, "lint", combineOutput(lintRes.stdout, lintRes.stderr));
                 blockers.push(`lint reported errors (exit ${lintRes.status})`);
                 artifacts.lint_log = log;
               }
@@ -1058,7 +1089,7 @@ var init_build_lint = __esm({
                 env: spawnEnv
               });
               if (buildRes.status !== 0) {
-                const log = saveLog(ctx.entry.slug, "build", buildRes.stdout ?? buildRes.stderr ?? "");
+                const log = saveLog(ctx.entry.slug, "build", combineOutput(buildRes.stdout, buildRes.stderr));
                 blockers.push(`build reported errors (exit ${buildRes.status})`);
                 artifacts.build_log = log;
               }
@@ -1234,11 +1265,32 @@ var init_gate_registry = __esm({
 });
 
 // src/server/orbit/gate-runner.ts
-async function runMergeGates(manifest, ctx) {
+async function runMergeGates(manifest, ctx, options = {}) {
   const refs = manifest.gates?.merge ?? DEFAULT_GATES;
+  const skip = new Set(options.skipGates ?? []);
+  if (skip.size > 0) {
+    const declared = new Set(refs.map((r) => r.adapter));
+    for (const id of skip) {
+      if (!declared.has(id)) {
+        ctx.logger.warn(
+          `--skip-gate "${id}" does not match any declared gate (declared: ${[...declared].join(", ")})`
+        );
+      }
+    }
+    const blockedRequired = refs.filter((r) => r.required && skip.has(r.adapter)).map((r) => r.adapter);
+    if (blockedRequired.length > 0) {
+      throw new Error(
+        `cannot skip required gate(s): ${blockedRequired.join(", ")}. Remove "required": true from orbit.json if you really need to bypass.`
+      );
+    }
+  }
   const start = Date.now();
   const results = [];
   for (const ref of refs) {
+    if (skip.has(ref.adapter)) {
+      ctx.logger.info(`[gate] skip ${ref.adapter} (--skip-gate)`);
+      continue;
+    }
     const gate = getMergeGate(ref.adapter);
     const detect = await gate.detect(ctx);
     if (!detect.ok) {
@@ -1288,7 +1340,7 @@ var init_gate_runner = __esm({
   "src/server/orbit/gate-runner.ts"() {
     "use strict";
     init_gate_registry();
-    DEFAULT_GATES = [{ adapter: "builtin/mergeability" }];
+    DEFAULT_GATES = [{ adapter: "builtin/mergeability", required: true }];
   }
 });
 
@@ -1321,14 +1373,50 @@ function validateManifest(raw, sourcePath) {
   const worktree = validateWorktreeRef(raw.worktree, sourcePath);
   const resources = validateResourcesArray(raw.resources, sourcePath);
   const gates = validateGates(raw.gates, sourcePath);
+  const profiles = validateProfiles(raw.profiles, resources, sourcePath);
   return {
     version: 1,
     ...envFile !== void 0 ? { envFile } : {},
     worktree,
     resources,
-    ...gates !== void 0 ? { gates } : {}
+    ...gates !== void 0 ? { gates } : {},
+    ...profiles !== void 0 ? { profiles } : {}
   };
 }
+function validateProfiles(raw, resources, sourcePath) {
+  if (raw === void 0) return void 0;
+  if (!isRecord(raw)) throw err("profiles must be an object if present", sourcePath);
+  const known = new Set(resources.map((r) => r.name));
+  const out = {};
+  for (const [name, value] of Object.entries(raw)) {
+    if (!name) throw err("profiles keys must be non-empty strings", sourcePath);
+    if (!isRecord(value)) throw err(`profiles.${name} must be an object`, sourcePath);
+    if (!Array.isArray(value.resources)) {
+      throw err(`profiles.${name}.resources must be an array of resource names`, sourcePath);
+    }
+    const list2 = [];
+    const seen = /* @__PURE__ */ new Set();
+    for (let i = 0; i < value.resources.length; i++) {
+      const r = value.resources[i];
+      if (typeof r !== "string" || !r) {
+        throw err(`profiles.${name}.resources[${i}] must be a non-empty string`, sourcePath);
+      }
+      if (!known.has(r)) {
+        throw err(
+          `profiles.${name}.resources[${i}] "${r}" does not match any resource name (known: ${[...known].join(", ") || "(none)"})`,
+          sourcePath
+        );
+      }
+      if (seen.has(r)) {
+        throw err(`profiles.${name}.resources[${i}] "${r}" duplicated`, sourcePath);
+      }
+      seen.add(r);
+      list2.push(r);
+    }
+    out[name] = { resources: list2 };
+  }
+  return Object.keys(out).length > 0 ? out : void 0;
+}
 function validateGates(raw, sourcePath) {
   if (raw === void 0) return void 0;
   if (!isRecord(raw)) throw err("gates must be an object if present", sourcePath);
@@ -1351,7 +1439,15 @@ function validateGates(raw, sourcePath) {
       if (config !== void 0 && !isRecord(config)) {
         throw err(`gates.merge[${i}].config must be an object if present`, sourcePath);
       }
-      list2.push({ adapter: g.adapter, config });
+      const required = g.required;
+      if (required !== void 0 && typeof required !== "boolean") {
+        throw err(`gates.merge[${i}].required must be a boolean if present`, sourcePath);
+      }
+      list2.push({
+        adapter: g.adapter,
+        config,
+        ...required ? { required: true } : {}
+      });
     }
     out.merge = list2;
   }
@@ -1453,6 +1549,12 @@ async function create(opts) {
   if (lookupWorktree(slug)) {
     throw new Error(`worktree "${slug}" already registered. Run \`launch-orbit drop ${slug}\` first.`);
   }
+  const effectiveResources = resolveProfile(manifest, opts.profile);
+  if (opts.profile) {
+    opts.logger.info(
+      `profile "${opts.profile}" \u2192 resources: ${effectiveResources.map((r) => r.name).join(", ") || "(none)"}`
+    );
+  }
   const worktreeAdapter = getWorktreeAdapter(manifest.worktree.adapter);
   const wtDetect = await worktreeAdapter.detect(ctx);
   if (!wtDetect.ok) throw new Error(`worktree adapter "${worktreeAdapter.id}" unavailable: ${wtDetect.reason}`);
@@ -1474,7 +1576,7 @@ async function create(opts) {
   const resourceStates = {};
   const rewriteFns = {};
   try {
-    for (const ref of manifest.resources) {
+    for (const ref of effectiveResources) {
       const adapter = getResourceAdapter(ref.adapter);
       const detect = await adapter.detect(ctx);
       if (!detect.ok) throw new Error(`resource adapter "${adapter.id}" unavailable: ${detect.reason}`);
@@ -1622,7 +1724,7 @@ async function checkMergeable(opts) {
     logger: opts.logger
   };
   opts.logger.step(`running merge gates against target "${opts.target}"`);
-  const agg = await runMergeGates(manifest, gateCtx);
+  const agg = await runMergeGates(manifest, gateCtx, { skipGates: opts.skipGates });
   opts.logger.info(formatGateResults(agg.results));
   return {
     slug,
@@ -1639,6 +1741,7 @@ async function merge(opts) {
   const check = await checkMergeable({
     branch: opts.branch,
     target: opts.target,
+    skipGates: opts.skipGates,
     projectRoot: opts.projectRoot,
     logger: opts.logger
   });
@@ -1750,6 +1853,22 @@ function findWorktreeFor(projectRoot, branch) {
     return null;
   }
 }
+function resolveProfile(manifest, profile) {
+  if (!profile) return manifest.resources;
+  const ref = manifest.profiles?.[profile];
+  if (!ref) {
+    const known = Object.keys(manifest.profiles ?? {});
+    throw new Error(
+      `profile "${profile}" not declared in orbit.json. Available: ${known.length > 0 ? known.join(", ") : "(none \u2014 add a `profiles` block to orbit.json)"}`
+    );
+  }
+  const byName = new Map(manifest.resources.map((r) => [r.name, r]));
+  return ref.resources.map((name) => {
+    const r = byName.get(name);
+    if (!r) throw new Error(`profile "${profile}" references unknown resource "${name}"`);
+    return r;
+  });
+}
 function loadManifestOrThrow(projectRoot) {
   if (!manifestExists(projectRoot)) {
     throw new Error(
@@ -1832,8 +1951,9 @@ async function handleTool(name, args) {
     case "orbit.create": {
       const branch = String(args.branch ?? "");
       const baseRef = args.baseRef;
+      const profile = args.profile;
       if (!branch) return text({ error: "branch is required" });
-      const result = await create({ branch, baseRef, projectRoot, logger });
+      const result = await create({ branch, baseRef, profile, projectRoot, logger });
       return text(result);
     }
     case "orbit.list": {
@@ -1865,7 +1985,9 @@ async function handleTool(name, args) {
       const target = String(args.target ?? "");
       if (!branch) return text({ error: "branch is required" });
       if (!target) return text({ error: "target is required" });
-      const result = await checkMergeable({ branch, target, projectRoot, logger });
+      const skipGates = parseSkipGates(args.skipGates);
+      if (skipGates instanceof Error) return text({ error: skipGates.message });
+      const result = await checkMergeable({ branch, target, skipGates, projectRoot, logger });
       return text(result);
     }
     case "orbit.merge": {
@@ -1878,13 +2000,25 @@ async function handleTool(name, args) {
       if (cleanup === void 0) {
         return text({ error: `cleanup must be "full" or "none" (got ${JSON.stringify(cleanupArg)})` });
       }
-      const result = await merge({ branch, target, cleanup, projectRoot, logger });
+      const skipGates = parseSkipGates(args.skipGates);
+      if (skipGates instanceof Error) return text({ error: skipGates.message });
+      const result = await merge({ branch, target, cleanup, skipGates, projectRoot, logger });
       return text(result);
     }
     default:
       return text({ error: `unknown tool: ${name}` });
   }
 }
+function parseSkipGates(raw) {
+  if (raw === void 0 || raw === null) return void 0;
+  if (!Array.isArray(raw)) return new Error("skipGates must be an array of adapter ids");
+  const out = [];
+  for (const v of raw) {
+    if (typeof v !== "string" || !v) return new Error("skipGates entries must be non-empty strings");
+    out.push(v);
+  }
+  return out.length > 0 ? out : void 0;
+}
 function text(payload) {
   const t = typeof payload === "string" ? payload : JSON.stringify(payload, null, 2);
   return { content: [{ type: "text", text: t }] };
@@ -1973,12 +2107,16 @@ var init_orbit_mcp = __esm({
     TOOLS = [
       {
         name: "orbit.create",
-        description: "Create an isolated worktree environment for a branch. Forks the resources declared in orbit.json (database, ports, etc.) so the new worktree is fully independent from the main one.\n\nReturns: { slug, branch, path, envFile, durationMs, resources, nextAction }. The `path` is the absolute worktree directory \u2014 the caller should `cd` into it for subsequent commands. `nextAction` contains the exact shell command to do so.",
+        description: "Create an isolated worktree environment for a branch. Forks the resources declared in orbit.json (database, ports, etc.) so the new worktree is fully independent from the main one.\n\nPass `profile` to fork only a named subset of resources from orbit.json's `profiles` block \u2014 e.g. a frontend-only task can use a `fe` profile that skips the DB clone. Without `profile`, all manifest resources are forked.\n\nReturns: { slug, branch, path, envFile, durationMs, resources, nextAction }. The `path` is the absolute worktree directory \u2014 the caller should `cd` into it for subsequent commands. `nextAction` contains the exact shell command to do so.",
         inputSchema: {
           type: "object",
           properties: {
             branch: { type: "string", description: "Git branch name to create (also the slug source)." },
-            baseRef: { type: "string", description: "Optional ref to branch from (default: current HEAD)." }
+            baseRef: { type: "string", description: "Optional ref to branch from (default: current HEAD)." },
+            profile: {
+              type: "string",
+              description: "Optional profile name from orbit.json's `profiles`. Scopes which resources are forked. Omit to fork all resources."
+            }
           },
           required: ["branch"]
         }
@@ -2018,19 +2156,24 @@ var init_orbit_mcp = __esm({
       },
       {
         name: "orbit.check_mergeable",
-        description: "Run all configured pre-merge gates against an orbit + target branch WITHOUT actually merging. Used by agents to verify before calling orbit.merge. Default gates: builtin/mergeability (textual conflict check) and any others declared in orbit.json's `gates.merge`.\n\nReturns: { slug, branch, target, passed, gates: [{ gateId, ok, blockers, artifacts }], durationMs }. If `passed` is false, `gates` contains per-gate detail including human-readable blocker lines and paths to artifact logs (tsc output, lint output, etc.).",
+        description: 'Run all configured pre-merge gates against an orbit + target branch WITHOUT actually merging. Used by agents to verify before calling orbit.merge. Default gates: builtin/mergeability (textual conflict check) and any others declared in orbit.json\'s `gates.merge`.\n\nPass `skipGates: ["builtin/build-lint"]` to bypass specific gates by adapter id. Gates marked `required: true` in orbit.json reject skipping and throw \u2014 typically used on the textual conflict check.\n\nReturns: { slug, branch, target, passed, gates: [{ gateId, ok, blockers, artifacts }], durationMs }. If `passed` is false, `gates` contains per-gate detail including human-readable blocker lines and paths to artifact logs (tsc output, lint output, etc.).',
         inputSchema: {
           type: "object",
           properties: {
             branch: { type: "string", description: "The orbit's branch (slug-able)." },
-            target: { type: "string", description: "Branch we'd merge INTO." }
+            target: { type: "string", description: "Branch we'd merge INTO." },
+            skipGates: {
+              type: "array",
+              items: { type: "string" },
+              description: 'Adapter ids to skip (e.g. ["builtin/build-lint"]). Throws if any id has `required: true` in orbit.json. Warns on unknown ids without failing.'
+            }
           },
           required: ["branch", "target"]
         }
       },
       {
         name: "orbit.merge",
-        description: 'Run gates, and if all pass, perform the merge into the target branch. Default cleanup behavior is `full` \u2014 after a successful merge, the orbit is dropped (DB pg_dump\'d, then DROP DATABASE; worktree removed; branch deleted). Use cleanup="none" to keep the orbit around post-merge.\n\nReturns: { slug, branch, target, merged, mergeSha, gates, cleanedUp, backupPath, durationMs, blockedBy }. If merged is false, blockedBy lists what stopped the merge (gate failures or git errors).',
+        description: 'Run gates, and if all pass, perform the merge into the target branch. Default cleanup behavior is `full` \u2014 after a successful merge, the orbit is dropped (DB pg_dump\'d, then DROP DATABASE; worktree removed; branch deleted). Use cleanup="none" to keep the orbit around post-merge.\n\nPass `skipGates: ["builtin/build-lint"]` to bypass specific gates by adapter id. Gates marked `required: true` in orbit.json reject skipping and throw.\n\nReturns: { slug, branch, target, merged, mergeSha, gates, cleanedUp, backupPath, durationMs, blockedBy }. If merged is false, blockedBy lists what stopped the merge (gate failures or git errors).',
         inputSchema: {
           type: "object",
           properties: {
@@ -2040,6 +2183,11 @@ var init_orbit_mcp = __esm({
               type: "string",
               enum: ["full", "none"],
               description: "Post-merge action. `full` drops the orbit; `none` leaves it intact."
+            },
+            skipGates: {
+              type: "array",
+              items: { type: "string" },
+              description: 'Adapter ids to skip (e.g. ["builtin/build-lint"]). Throws if any id has `required: true` in orbit.json. Warns on unknown ids without failing.'
             }
           },
           required: ["branch", "target"]
@@ -2056,13 +2204,18 @@ init_orchestrator();
 init_logger();
 function parseFlags(argv) {
   const positional = [];
-  const flags = { emitCd: false, noBackup: false };
+  const flags = { emitCd: false, noBackup: false, skipGates: [] };
   for (let i = 0; i < argv.length; i++) {
     const a = argv[i];
     if (a === "--emit-cd") flags.emitCd = true;
     else if (a === "--no-backup") flags.noBackup = true;
     else if (a === "--base-ref") flags.baseRef = argv[++i];
-    else if (a === "--cleanup") {
+    else if (a === "--profile") flags.profile = argv[++i];
+    else if (a === "--skip-gate") {
+      const id = argv[++i];
+      if (!id) die("--skip-gate requires an adapter id (e.g. --skip-gate builtin/build-lint)");
+      flags.skipGates.push(id);
+    } else if (a === "--cleanup") {
       const v = argv[++i];
       if (v !== "full" && v !== "none") {
         process.stderr.write(`[launch-orbit] --cleanup must be "full" or "none" (got "${v}")
@@ -2097,10 +2250,11 @@ async function main() {
       }
       case "create": {
         const branch = positional[0];
-        if (!branch) die("usage: launch-orbit create <branch> [--base-ref <ref>] [--emit-cd]");
+        if (!branch) die("usage: launch-orbit create <branch> [--base-ref <ref>] [--profile <name>] [--emit-cd]");
         const result = await create({
           branch,
           baseRef: flags.baseRef,
+          profile: flags.profile,
           projectRoot,
           logger
         });
@@ -2169,11 +2323,12 @@ ${JSON.stringify(result, null, 2)}
         const branch = positional[0];
         const target = positional[1];
         if (!branch || !target) {
-          die("usage: launch-orbit check-merge <branch> <target>");
+          die("usage: launch-orbit check-merge <branch> <target> [--skip-gate <id> ...]");
         }
         const result = await checkMergeable({
           branch,
           target,
+          skipGates: flags.skipGates.length > 0 ? flags.skipGates : void 0,
           projectRoot,
           logger
         });
@@ -2187,12 +2342,13 @@ ${JSON.stringify(result, null, 2)}
         const branch = positional[0];
         const target = positional[1];
         if (!branch || !target) {
-          die("usage: launch-orbit merge <branch> <target> [--cleanup full|none]");
+          die("usage: launch-orbit merge <branch> <target> [--cleanup full|none] [--skip-gate <id> ...]");
         }
         const result = await merge({
           branch,
           target,
           cleanup: flags.cleanup ?? "full",
+          skipGates: flags.skipGates.length > 0 ? flags.skipGates : void 0,
           projectRoot,
           logger
         });
@@ -2255,9 +2411,16 @@ function runInit(projectRoot) {
     gates: {
       merge: [
         { adapter: "builtin/clean-tree" },
-        { adapter: "builtin/mergeability" },
+        // `required: true` blocks --skip-gate on this one — silently merging a
+        // textual conflict is the obvious footgun. Drop the flag if you really
+        // need to bypass.
+        { adapter: "builtin/mergeability", required: true },
         { adapter: "builtin/build-lint" }
       ]
+    },
+    profiles: {
+      fe: { resources: ["ports"] },
+      full: { resources: ["db", "ports"] }
     }
   };
   (0, import_node_fs11.writeFileSync)(path, JSON.stringify(starter, null, 2) + "\n", "utf-8");

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@launchsecure/launch-kit",
-  "version": "0.0.27",
+  "version": "0.0.29",
   "description": "LaunchSecure toolkit — launch-pod (pipeline), launch-chart (project graph MCP), launch-deck (visual playground MCP), launch-kit-beacon (feedback Web Component), launch-recall (file-watcher backup).",
   "license": "MIT",
   "author": "LaunchSecure - AutomateWithUs",
@@ -52,7 +52,9 @@
     "launch-chart": "./dist/server/graph-mcp-entry.js",
     "launch-deck": "./dist/server/deck-mcp-entry.js",
     "launch-recall": "./dist/server/recall-entry.js",
-    "launch-orbit": "./dist/server/orbit-entry.js"
+    "launch-orbit": "./dist/server/orbit-entry.js",
+    "launch-course": "./dist/server/course-entry.js",
+    "launch-beacon": "./dist/server/beacon-monitor-entry.js"
   },
   "scripts": {
     "build": "pnpm build:client && pnpm build:chart-client && pnpm build:deck-client && pnpm build:council-client && pnpm build:beacon && pnpm build:server",
@@ -64,7 +66,7 @@
     "build:council-client": "vite build --config vite.council.config.ts",
     "build:client": "vite build",
     "build:chart-client": "vite build --config vite.chart.config.ts",
-    "build:server": "esbuild src/server/cli.ts src/server/fb-wizard.ts src/server/graph-mcp-entry.ts src/server/chart-serve.ts src/server/deck-mcp-entry.ts src/server/deck-serve.ts src/server/council-entry.ts src/server/council-serve.ts src/server/recall-entry.ts src/server/init-entry.ts src/server/orbit-entry.ts src/server/parse-worker-entry.ts --bundle --platform=node --target=node18 --outdir=dist/server --external:node-pty --external:ws --external:typescript --external:web-tree-sitter --external:tree-sitter-typescript --external:cloudflared --external:pg --external:pg-native && rm -rf dist/server/public && cp -r ../claude-code-web/src/public dist/server/public && rm -rf dist/server/graph/queries && mkdir -p dist/server/graph && cp -r src/server/graph/queries dist/server/graph/queries",
+    "build:server": "esbuild src/server/cli.ts src/server/fb-wizard.ts src/server/graph-mcp-entry.ts src/server/chart-serve.ts src/server/deck-mcp-entry.ts src/server/deck-serve.ts src/server/council-entry.ts src/server/council-serve.ts src/server/recall-entry.ts src/server/init-entry.ts src/server/orbit-entry.ts src/server/course-entry.ts src/server/beacon-monitor-entry.ts src/server/parse-worker-entry.ts --bundle --platform=node --target=node18 --outdir=dist/server --external:node-pty --external:ws --external:typescript --external:web-tree-sitter --external:tree-sitter-typescript --external:cloudflared --external:pg --external:pg-native && rm -rf dist/server/public && cp -r ../claude-code-web/src/public dist/server/public && rm -rf dist/server/graph/queries && mkdir -p dist/server/graph && cp -r src/server/graph/queries dist/server/graph/queries",
     "dev:client": "vite",
     "dev:chart": "pnpm build:server && pnpm build:chart-client && node dist/server/graph-mcp-entry.js serve",
     "dev:server": "pnpm build:server && node dist/server/cli.js",

package/scaffolds/ls-marketplace/.claude-plugin/marketplace.json

@@ -0,0 +1,15 @@
+{
+  "name": "launch-secure",
+  "description": "LaunchSecure plugins for Claude Code — in-app feedback widget activation, and future LS-namespaced workflows. Distributed locally via launch-kit init today; the same catalog will move to github.com/launchsecure/claude-plugins for centralized updates.",
+  "owner": {
+    "name": "LaunchSecure — AutomateWithUs",
+    "email": "hello@automatewith.us"
+  },
+  "plugins": [
+    {
+      "name": "kit",
+      "source": "./plugins/kit",
+      "description": "Kit-namespaced slash commands. Exposes /kit:activate-beacon to wire the launch-kit-beacon in-app feedback widget into the current project."
+    }
+  ]
+}

package/scaffolds/ls-marketplace/plugins/kit/.claude-plugin/plugin.json

@@ -0,0 +1,19 @@
+{
+  "name": "kit",
+  "version": "0.1.0",
+  "description": "LaunchSecure commands for Claude Code — in-app feedback widget activation, daily standups posted to the Comm Hub, and future LS-namespaced workflows.",
+  "author": {
+    "name": "LaunchSecure — AutomateWithUs",
+    "url": "https://automatewith.us"
+  },
+  "repository": "https://github.com/launchsecure/launchsecure-v2",
+  "license": "MIT",
+  "keywords": [
+    "launchsecure",
+    "launch-kit",
+    "launch-kit-beacon",
+    "feedback",
+    "standup",
+    "daily-update"
+  ]
+}