@launchsecure/launch-kit 0.0.40 → 0.0.41

package/dist/server/graph-mcp-entry.js

@@ -8174,13 +8174,209 @@ var init_snippet = __esm({
   }
 });
 
+// src/server/graph/core/context/snippet-registry.ts
+function parseStringArray(src, key) {
+  const m = src.match(new RegExp(`${key}\\s*:\\s*\\[([^\\]]*)\\]`));
+  if (!m) return [];
+  return [...m[1].matchAll(/['"]([^'"]+)['"]/g)].map((x) => x[1]);
+}
+function parseSnippetFile(content, file) {
+  const idM = content.match(/\bid\s*:\s*['"]([^'"]+)['"]/);
+  if (!idM) return null;
+  const exportM = content.match(/export\s+const\s+(\w+)/);
+  return {
+    id: idM[1],
+    exportName: exportM ? exportM[1] : "default",
+    file,
+    requires: parseStringArray(content, "requires"),
+    produces: parseStringArray(content, "produces"),
+    params: parseStringArray(content, "params")
+  };
+}
+function loadSnippetIndex(rootDir, snippetsDir = DEFAULT_SNIPPETS_DIR) {
+  const dir = (0, import_node_path32.join)(rootDir, snippetsDir);
+  const index = /* @__PURE__ */ new Map();
+  if (!(0, import_node_fs25.existsSync)(dir)) return index;
+  for (const f of (0, import_node_fs25.readdirSync)(dir)) {
+    if (!f.endsWith(".ts") && !f.endsWith(".tsx")) continue;
+    const full = (0, import_node_path32.join)(dir, f);
+    try {
+      if (!(0, import_node_fs25.statSync)(full).isFile()) continue;
+      const entry = parseSnippetFile((0, import_node_fs25.readFileSync)(full, "utf-8"), (0, import_node_path32.join)(snippetsDir, f));
+      if (entry) index.set(entry.id, entry);
+    } catch {
+    }
+  }
+  return index;
+}
+var import_node_fs25, import_node_path32, DEFAULT_SNIPPETS_DIR;
+var init_snippet_registry = __esm({
+  "src/server/graph/core/context/snippet-registry.ts"() {
+    "use strict";
+    import_node_fs25 = require("node:fs");
+    import_node_path32 = require("node:path");
+    DEFAULT_SNIPPETS_DIR = "tests/snippets";
+  }
+});
+
+// src/server/graph/core/context/test-plan.ts
+function buildTestPlan(graph, targetId, snippets) {
+  const nodesById = /* @__PURE__ */ new Map();
+  for (const n of graph.nodes) nodesById.set(n.id, n);
+  const requiresOf = /* @__PURE__ */ new Map();
+  const producesOf = /* @__PURE__ */ new Map();
+  const producersOf = /* @__PURE__ */ new Map();
+  for (const e of graph.edges) {
+    if (e.type === "requires") {
+      (requiresOf.get(e.source) ?? requiresOf.set(e.source, /* @__PURE__ */ new Set()).get(e.source)).add(e.target);
+    } else if (e.type === "produces") {
+      (producesOf.get(e.source) ?? producesOf.set(e.source, /* @__PURE__ */ new Set()).get(e.source)).add(e.target);
+      (producersOf.get(e.target) ?? producersOf.set(e.target, /* @__PURE__ */ new Set()).get(e.target)).add(e.source);
+    }
+  }
+  const pickProducer = (producers) => {
+    const withSnippet = producers.filter((p) => snippets.has(p)).sort();
+    return withSnippet.length ? withSnippet[0] : [...producers].sort()[0];
+  };
+  const order = [];
+  const done = /* @__PURE__ */ new Set();
+  const visiting = /* @__PURE__ */ new Set();
+  const gaps = [];
+  const allRequired = /* @__PURE__ */ new Set();
+  const visit = (actionId2) => {
+    if (done.has(actionId2)) return;
+    if (visiting.has(actionId2)) {
+      gaps.push({ type: "cycle", action: actionId2, detail: `dependency cycle through ${actionId2}` });
+      return;
+    }
+    visiting.add(actionId2);
+    for (const state of requiresOf.get(actionId2) ?? []) {
+      allRequired.add(state);
+      const producers = [...producersOf.get(state) ?? []];
+      if (producers.length === 0) {
+        gaps.push({
+          type: "no_producer",
+          state: stripState(state),
+          action: actionId2,
+          detail: `${actionId2} requires "${stripState(state)}" but no action produces it`
+        });
+        continue;
+      }
+      visit(pickProducer(producers));
+    }
+    visiting.delete(actionId2);
+    done.add(actionId2);
+    order.push(actionId2);
+  };
+  visit(targetId);
+  const steps = order.map((actionId2) => {
+    const node = nodesById.get(actionId2);
+    const entry = snippets.get(actionId2) ?? null;
+    if (!entry) {
+      gaps.push({
+        type: "no_snippet",
+        action: actionId2,
+        detail: `no snippet bound to ${actionId2} \u2014 scaffold one with scaffold_snippet`
+      });
+    }
+    const satisfies = [...producesOf.get(actionId2) ?? []].filter((s) => allRequired.has(s)).map(stripState).sort();
+    return {
+      action: actionId2,
+      name: String(node?.name ?? actionId2),
+      satisfies,
+      snippet: entry ? { id: entry.id, exportName: entry.exportName, file: entry.file, params: entry.params } : null
+    };
+  });
+  return { target: targetId, steps, gaps, runnable: gaps.length === 0 };
+}
+var stripState;
+var init_test_plan = __esm({
+  "src/server/graph/core/context/test-plan.ts"() {
+    "use strict";
+    stripState = (s) => s.replace(/^state:/, "");
+  }
+});
+
+// src/server/graph/core/context/spec-gen.ts
+function toEnvRef(name) {
+  return `process.env.${name.replace(/([a-z0-9])([A-Z])/g, "$1_$2").toUpperCase()}`;
+}
+function classify(name) {
+  const n = name.toLowerCase();
+  if (/pass|secret|token|credential|apikey|api_key|_key$|^key$/.test(n)) return { kind: "secret" };
+  if (/email|slug|(^|_)id$|uuid|userid|orgid|projectid/.test(n)) return { kind: "real" };
+  if (/desc|summary|body|message|content|note/.test(n)) return { kind: "faker", faker: "faker.lorem.sentence()" };
+  if (/colou?r/.test(n)) return { kind: "faker", faker: "faker.color.rgb({ format: 'hex' })" };
+  if (/icon/.test(n)) return { kind: "faker", faker: "faker.helpers.arrayElement(['rocket','bug','star','flag','zap','heart'])" };
+  if (/name|title|label/.test(n)) return { kind: "faker", faker: "faker.word.noun()" };
+  if (/url|link|href/.test(n)) return { kind: "faker", faker: "faker.internet.url()" };
+  if (/count|qty|quantity|amount|number|price/.test(n)) return { kind: "faker", faker: "String(faker.number.int({ min: 1, max: 100 }))" };
+  return { kind: "faker", faker: "faker.lorem.word()" };
+}
+function relImport(specDir, file) {
+  let r = (0, import_node_path33.relative)(specDir, file).replace(/\.tsx?$/, "");
+  if (!r.startsWith(".")) r = `./${r}`;
+  return r;
+}
+function generateSpec(plan, opts = {}) {
+  const specDir = opts.specDir ?? "tests/generated";
+  const fixtures = opts.fixtures ?? {};
+  const missing = /* @__PURE__ */ new Set();
+  let usesFaker = false;
+  const bound = plan.steps.filter((s) => s.snippet);
+  const unbound = plan.steps.filter((s) => !s.snippet);
+  const importLines = /* @__PURE__ */ new Set();
+  for (const s of bound) {
+    importLines.add(`import { ${s.snippet.exportName} } from '${relImport(specDir, s.snippet.file)}';`);
+  }
+  const callLines = bound.map((s) => {
+    const params = s.snippet.params.map((p) => {
+      if (Object.prototype.hasOwnProperty.call(fixtures, p)) {
+        return `    ${p}: ${JSON.stringify(fixtures[p])},`;
+      }
+      const c = classify(p);
+      if (c.kind === "secret") return `    ${p}: ${toEnvRef(p)},`;
+      if (c.kind === "faker") {
+        usesFaker = true;
+        return `    ${p}: ${c.faker},`;
+      }
+      missing.add(p);
+      return `    ${p}: undefined, // TODO: real value (seeded ${p})`;
+    });
+    const block = params.length ? `{
+${params.join("\n")}
+  }` : "{}";
+    return `  await ${s.snippet.exportName}.run(page, ${block});`;
+  });
+  const warnings = unbound.map(
+    (s) => `  // \u26A0 GAP: no snippet for ${s.action} \u2014 scaffold_snippet then re-plan.`
+  );
+  const header = [`import { test } from '@playwright/test';`];
+  if (usesFaker) header.push(`import { faker } from '@faker-js/faker';`);
+  const code = `${header.join("\n")}
+${[...importLines].join("\n")}
+
+test(${JSON.stringify(opts.title ?? `plan: ${plan.target}`)}, async ({ page }) => {
+${[...warnings, ...callLines].join("\n")}
+});
+`;
+  return { code, missingFixtures: [...missing], complete: plan.runnable && missing.size === 0 };
+}
+var import_node_path33;
+var init_spec_gen = __esm({
+  "src/server/graph/core/context/spec-gen.ts"() {
+    "use strict";
+    import_node_path33 = require("node:path");
+  }
+});
+
 // src/server/graph/core/language-detection.ts
 function walkForExtensions(dir, extCounts, depth = 0) {
   if (depth > 10) return;
-  if (!(0, import_node_fs25.existsSync)(dir)) return;
+  if (!(0, import_node_fs26.existsSync)(dir)) return;
   let entries;
   try {
-    entries = (0, import_node_fs25.readdirSync)(dir, { withFileTypes: true });
+    entries = (0, import_node_fs26.readdirSync)(dir, { withFileTypes: true });
   } catch {
     return;
   }
@@ -8188,9 +8384,9 @@ function walkForExtensions(dir, extCounts, depth = 0) {
     if (entry.name.startsWith(".") && entry.isDirectory()) continue;
     if (entry.isDirectory()) {
       if (IGNORE_DIRS.has(entry.name)) continue;
-      walkForExtensions((0, import_node_path32.join)(dir, entry.name), extCounts, depth + 1);
+      walkForExtensions((0, import_node_path34.join)(dir, entry.name), extCounts, depth + 1);
     } else {
-      const ext = (0, import_node_path32.extname)(entry.name).toLowerCase();
+      const ext = (0, import_node_path34.extname)(entry.name).toLowerCase();
       if (ext && EXTENSION_TO_LANGUAGE[ext]) {
         extCounts.set(ext, (extCounts.get(ext) ?? 0) + 1);
       }
@@ -8229,12 +8425,12 @@ function detectLanguages(rootDir, supportedLanguages) {
   });
   return results;
 }
-var import_node_fs25, import_node_path32, EXTENSION_TO_LANGUAGE, IGNORE_DIRS, AUXILIARY_LANGUAGES;
+var import_node_fs26, import_node_path34, EXTENSION_TO_LANGUAGE, IGNORE_DIRS, AUXILIARY_LANGUAGES;
 var init_language_detection = __esm({
   "src/server/graph/core/language-detection.ts"() {
     "use strict";
-    import_node_fs25 = require("node:fs");
-    import_node_path32 = require("node:path");
+    import_node_fs26 = require("node:fs");
+    import_node_path34 = require("node:path");
     init_launch_kit_paths();
     EXTENSION_TO_LANGUAGE = {
       // Web / Frontend
@@ -8356,7 +8552,7 @@ __export(watcher_exports, {
 function isIgnoredPath(rel) {
   if (rel.startsWith(GRAPHS_RELATIVE)) return true;
   if (rel.endsWith(".lock") || rel.endsWith(".log")) return true;
-  for (const part of rel.split(import_node_path33.sep)) {
+  for (const part of rel.split(import_node_path35.sep)) {
     if (IGNORE_SEGMENTS.has(part)) return true;
   }
   return false;
@@ -8398,7 +8594,7 @@ function startGraphWatcher(rootDir, opts = {}) {
       regenerating = false;
     }
   }
-  const watcher = (0, import_node_fs26.watch)(rootDir, { recursive: true }, (event, filename) => {
+  const watcher = (0, import_node_fs27.watch)(rootDir, { recursive: true }, (event, filename) => {
     if (!filename) return;
     const rel = filename.toString();
     if (process.env.LAUNCH_CHART_WATCH_TRACE === "1") {
@@ -8431,12 +8627,12 @@ function startGraphWatcher(rootDir, opts = {}) {
     freshness: () => getFreshnessTracker(rootDir).get()
   };
 }
-var import_node_fs26, import_node_path33, IGNORE_SEGMENTS, TRIGGER_EXTENSIONS, GRAPHS_RELATIVE;
+var import_node_fs27, import_node_path35, IGNORE_SEGMENTS, TRIGGER_EXTENSIONS, GRAPHS_RELATIVE;
 var init_watcher = __esm({
   "src/server/graph/core/watcher.ts"() {
     "use strict";
-    import_node_fs26 = require("node:fs");
-    import_node_path33 = require("node:path");
+    import_node_fs27 = require("node:fs");
+    import_node_path35 = require("node:path");
     init_launch_kit_paths();
     init_graph();
     init_freshness();
@@ -8465,7 +8661,7 @@ var init_watcher = __esm({
       ".prisma",
       ".sql"
     ]);
-    GRAPHS_RELATIVE = (0, import_node_path33.join)(LAUNCHSECURE_DIR, "graphs");
+    GRAPHS_RELATIVE = (0, import_node_path35.join)(LAUNCHSECURE_DIR, "graphs");
   }
 });
 
@@ -9198,12 +9394,12 @@ function handleReadGraph(args) {
   return okJson(result);
 }
 function nodeToFilePath(rootDir, layer, nodeId) {
-  if (layer === "ui" || layer === "api") return (0, import_node_path34.join)(rootDir, "src", nodeId);
-  if (layer === "db") return (0, import_node_path34.join)(rootDir, "prisma", "schema.prisma");
-  const withSrc = (0, import_node_path34.join)(rootDir, "src", nodeId);
-  if ((0, import_node_fs27.existsSync)(withSrc)) return withSrc;
-  const direct = (0, import_node_path34.join)(rootDir, nodeId);
-  if ((0, import_node_fs27.existsSync)(direct)) return direct;
+  if (layer === "ui" || layer === "api") return (0, import_node_path36.join)(rootDir, "src", nodeId);
+  if (layer === "db") return (0, import_node_path36.join)(rootDir, "prisma", "schema.prisma");
+  const withSrc = (0, import_node_path36.join)(rootDir, "src", nodeId);
+  if ((0, import_node_fs28.existsSync)(withSrc)) return withSrc;
+  const direct = (0, import_node_path36.join)(rootDir, nodeId);
+  if ((0, import_node_fs28.existsSync)(direct)) return direct;
   return null;
 }
 function handleInspectNode(args) {
@@ -9471,11 +9667,11 @@ function handleGrepNodes(args) {
   let filesSearched = 0;
   let truncated = false;
   for (const [filePath, nodeId] of filePaths) {
-    if (!(0, import_node_fs27.existsSync)(filePath)) continue;
+    if (!(0, import_node_fs28.existsSync)(filePath)) continue;
     filesSearched++;
     let content;
     try {
-      content = (0, import_node_fs27.readFileSync)(filePath, "utf-8");
+      content = (0, import_node_fs28.readFileSync)(filePath, "utf-8");
     } catch {
       continue;
     }
@@ -9694,11 +9890,11 @@ function handleStartChartServer(args) {
     });
   }
   const entryPath = process.argv[1];
-  const logDir = (0, import_node_path34.join)((0, import_node_os4.homedir)(), LAUNCHSECURE_DIR);
-  (0, import_node_fs27.mkdirSync)(logDir, { recursive: true });
-  const logPath = (0, import_node_path34.join)(logDir, "launch-chart.log");
-  const out = (0, import_node_fs27.openSync)(logPath, "a");
-  const err2 = (0, import_node_fs27.openSync)(logPath, "a");
+  const logDir = (0, import_node_path36.join)((0, import_node_os4.homedir)(), LAUNCHSECURE_DIR);
+  (0, import_node_fs28.mkdirSync)(logDir, { recursive: true });
+  const logPath = (0, import_node_path36.join)(logDir, "launch-chart.log");
+  const out = (0, import_node_fs28.openSync)(logPath, "a");
+  const err2 = (0, import_node_fs28.openSync)(logPath, "a");
   const portArgs = args.port ? ["--port", String(args.port)] : [];
   const child = (0, import_node_child_process2.spawn)(process.execPath, [entryPath, "serve", ...portArgs], {
     detached: true,
@@ -9876,6 +10072,60 @@ function handleDriftReport(args) {
     items: page
   });
 }
+function handleGenerateSpec(args) {
+  const __resolved = resolveOrErr(args);
+  if ("content" in __resolved) return __resolved;
+  const { rootDir } = __resolved;
+  const target = typeof args.target === "string" ? args.target.trim() : "";
+  if (!target) return err("target is required (a context action node id).");
+  const snippetsDir = typeof args.snippets_dir === "string" && args.snippets_dir.trim() ? args.snippets_dir.trim() : DEFAULT_SNIPPETS_DIR;
+  const specDir = typeof args.spec_dir === "string" && args.spec_dir.trim() ? args.spec_dir.trim() : "tests/generated";
+  const fixtures = args.fixtures && typeof args.fixtures === "object" ? args.fixtures : {};
+  const title = typeof args.title === "string" ? args.title : void 0;
+  const g = readGraph(rootDir, "context");
+  if (!g) return err("No `context` layer found. Run generate_graph first to build context.json.");
+  let node = g.nodes.find((n) => n.id === target);
+  if (!node && !target.startsWith("action:") && !target.startsWith("state:")) {
+    node = g.nodes.find((n) => n.id === `action:${target}`) ?? g.nodes.find((n) => n.id === `state:${target}`);
+  }
+  if (!node) return err(`No context node matching "${target}". Use read_graph layer:context to list nodes.`);
+  const snippets = loadSnippetIndex(rootDir, snippetsDir);
+  const plan = buildTestPlan(g, node.id, snippets);
+  const spec = generateSpec(plan, { title: title ?? String(node.name), specDir, fixtures });
+  return okJson({
+    target: node.id,
+    spec_dir: specDir,
+    suggested_path: `${specDir}/${String(node.name).replace(/[^A-Za-z0-9]+/g, "-").replace(/^-|-$/g, "") || "spec"}.spec.ts`,
+    complete: spec.complete,
+    missing_fixtures: spec.missingFixtures,
+    plan_gaps: plan.gaps,
+    code: spec.code,
+    next: spec.complete ? "Write `code` to suggested_path and run `playwright test` (needs @faker-js/faker installed + the secret env vars set)." : "Supply `fixtures` for missing_fixtures (real seeded values), then regenerate."
+  });
+}
+function handleTestPlan(args) {
+  const __resolved = resolveOrErr(args);
+  if ("content" in __resolved) return __resolved;
+  const { rootDir } = __resolved;
+  const target = typeof args.target === "string" ? args.target.trim() : "";
+  if (!target) return err("target is required (a context action node id).");
+  const snippetsDir = typeof args.snippets_dir === "string" && args.snippets_dir.trim() ? args.snippets_dir.trim() : DEFAULT_SNIPPETS_DIR;
+  const g = readGraph(rootDir, "context");
+  if (!g) return err("No `context` layer found. Run generate_graph first to build context.json.");
+  let node = g.nodes.find((n) => n.id === target);
+  if (!node && !target.startsWith("action:") && !target.startsWith("state:")) {
+    node = g.nodes.find((n) => n.id === `action:${target}`) ?? g.nodes.find((n) => n.id === `state:${target}`);
+  }
+  if (!node) return err(`No context node matching "${target}". Use read_graph layer:context to list nodes.`);
+  const snippets = loadSnippetIndex(rootDir, snippetsDir);
+  const plan = buildTestPlan(g, node.id, snippets);
+  return okJson({
+    ...plan,
+    snippets_dir: snippetsDir,
+    snippets_found: snippets.size,
+    next: plan.runnable ? "Runnable: execute the snippets in `steps` order, threading produced state forward." : "Not yet runnable \u2014 resolve `gaps` (scaffold_snippet for missing bindings; add a producer for unmet states)."
+  });
+}
 function handleScaffoldSnippet(args) {
   const __resolved = resolveOrErr(args);
   if ("content" in __resolved) return __resolved;
@@ -10157,20 +10407,20 @@ function handleDetectProjectStack() {
       if (ref.type === "references_api") stats.references_api++;
     }
   }
-  const srcDir = (0, import_node_path34.join)(rootDir, "src");
-  if ((0, import_node_fs27.existsSync)(srcDir)) {
+  const srcDir = (0, import_node_path36.join)(rootDir, "src");
+  if ((0, import_node_fs28.existsSync)(srcDir)) {
     const scanDir = (dir) => {
-      if (!(0, import_node_fs27.existsSync)(dir)) return;
-      for (const entry of (0, import_node_fs27.readdirSync)(dir, { withFileTypes: true })) {
+      if (!(0, import_node_fs28.existsSync)(dir)) return;
+      for (const entry of (0, import_node_fs28.readdirSync)(dir, { withFileTypes: true })) {
         if (entry.name.startsWith(".") || entry.name === "node_modules") continue;
-        const full = (0, import_node_path34.join)(dir, entry.name);
+        const full = (0, import_node_path36.join)(dir, entry.name);
         if (entry.isDirectory()) {
           scanDir(full);
           continue;
         }
-        if (![".ts", ".tsx"].includes((0, import_node_path34.extname)(entry.name))) continue;
+        if (![".ts", ".tsx"].includes((0, import_node_path36.extname)(entry.name))) continue;
         try {
-          const content = (0, import_node_fs27.readFileSync)(full, "utf-8");
+          const content = (0, import_node_fs28.readFileSync)(full, "utf-8");
           const matches = content.match(/@api\s+(GET|POST|PUT|DELETE|PATCH)\s+\/\S+/g);
           if (matches) stats.annotations += matches.length;
         } catch {
@@ -10189,7 +10439,7 @@ function handleDetectProjectStack() {
     name: p.name,
     root: p.root,
     absolute_root: p.absoluteRoot,
-    has_graph: (0, import_node_fs27.existsSync)((0, import_node_path34.join)(p.absoluteRoot, LAUNCHSECURE_DIR, "graphs"))
+    has_graph: (0, import_node_fs28.existsSync)((0, import_node_path36.join)(p.absoluteRoot, LAUNCHSECURE_DIR, "graphs"))
   }));
   return okJson({
     languages,
@@ -10323,6 +10573,14 @@ async function handleMessage(msg) {
       respond(id ?? null, withFreshnessMeta(handleScaffoldSnippet(args), args));
       return;
     }
+    if (toolName === "test_plan") {
+      respond(id ?? null, withFreshnessMeta(handleTestPlan(args), args));
+      return;
+    }
+    if (toolName === "generate_spec") {
+      respond(id ?? null, withFreshnessMeta(handleGenerateSpec(args), args));
+      return;
+    }
     if (toolName === "trace_path") {
       respond(id ?? null, withFreshnessMeta(handleTracePath(args), args));
       return;
@@ -10391,17 +10649,20 @@ function startGraphMcpServer() {
   process.stderr.write(`[launchsecure-graph] MCP server started (cwd: ${process.cwd()})
 `);
 }
-var import_node_fs27, import_node_path34, import_node_child_process2, import_node_os4, SERVER_INFO, TOOLS, MINIMAL_STRIP_FIELDS, COMPACT_SCHEMA, COMPACT_NODE_KNOWN_KEYS, DEEP_FIELDS, NOTE_KIND_CATEGORY, EST_CHARS_PER_NODE_FULL, EST_CHARS_PER_NODE_MIN, EST_CHARS_PER_EDGE, DEFAULT_EST_NODE_FULL, DEFAULT_EST_NODE_MIN, DEFAULT_EST_EDGE, NEIGHBORHOOD_BUDGET_CHARS, MAX_FILTER_EDGES, BATCH_BUDGET_CHARS, watcherHandle;
+var import_node_fs28, import_node_path36, import_node_child_process2, import_node_os4, SERVER_INFO, TOOLS, MINIMAL_STRIP_FIELDS, COMPACT_SCHEMA, COMPACT_NODE_KNOWN_KEYS, DEEP_FIELDS, NOTE_KIND_CATEGORY, EST_CHARS_PER_NODE_FULL, EST_CHARS_PER_NODE_MIN, EST_CHARS_PER_EDGE, DEFAULT_EST_NODE_FULL, DEFAULT_EST_NODE_MIN, DEFAULT_EST_EDGE, NEIGHBORHOOD_BUDGET_CHARS, MAX_FILTER_EDGES, BATCH_BUDGET_CHARS, watcherHandle;
 var init_graph_mcp = __esm({
   "src/server/graph-mcp.ts"() {
     "use strict";
-    import_node_fs27 = require("node:fs");
-    import_node_path34 = require("node:path");
+    import_node_fs28 = require("node:fs");
+    import_node_path36 = require("node:path");
     import_node_child_process2 = require("node:child_process");
     import_node_os4 = require("node:os");
     init_launch_kit_paths();
     init_graph();
     init_snippet();
+    init_snippet_registry();
+    init_test_plan();
+    init_spec_gen();
     init_lockfile();
     init_config();
     init_parser_registry();
@@ -10800,6 +11061,39 @@ USE THIS FOR: "are there unsafe migrations on this branch", "audit the migration
           required: ["target"]
         }
       },
+      {
+        name: "test_plan",
+        description: 'Assemble the ordered snippet chain needed to exercise a target action. Walks the context graph\'s requires/produces backward from the target (prerequisites first, target last), binds each step to its snippet (from tests/snippets/), and flags gaps \u2014 a required state nothing produces, an action with no snippet, or a cycle.\n\nUSE THIS FOR: "what\'s the test plan for creating a tag", "what setup does action X need". Returns { target, steps[], gaps[], runnable }. Requires the `context` layer (run generate_graph first). When runnable is false, the gaps tell you which snippets to scaffold next.',
+        inputSchema: {
+          type: "object",
+          properties: {
+            target: { type: "string", description: 'Context action node id (e.g. "action:app/api/orgs/[orgSlug]/tags/route.ts") or the bare key.' },
+            snippets_dir: { type: "string", description: `Snippets directory relative to project root. Default "${DEFAULT_SNIPPETS_DIR}".` },
+            project: { type: "string", description: PROJECT_PARAM_DESCRIPTION },
+            worktree: { type: "string", description: WORKTREE_PARAM_DESCRIPTION2 },
+            project_root: { type: "string", description: PROJECT_ROOT_PARAM_DESCRIPTION2 }
+          },
+          required: ["target"]
+        }
+      },
+      {
+        name: "generate_spec",
+        description: 'Generate a runnable Playwright .spec.ts from a target action: builds the test_plan, then emits imports + ordered `await snippet.run(page, {...})` calls. Params are auto-classified \u2014 secrets \u2192 process.env, free-form (name/color/icon/description) \u2192 faker.*, and state-bound (email/slug/id) \u2192 TODO + returned in missingFixtures. Supply those via `fixtures`.\n\nUSE THIS FOR: "generate the test for creating a tag". Returns { code, missingFixtures, complete }. complete:true means every state-bound param had a fixture (secrets via env + faker auto). Requires the `context` layer + snippets.',
+        inputSchema: {
+          type: "object",
+          properties: {
+            target: { type: "string", description: "Context action node id (or bare key)." },
+            fixtures: { type: "object", description: 'param name -> value for state-bound params (e.g. {"email":"...","orgSlug":"..."}). Overrides classification.', additionalProperties: true },
+            title: { type: "string", description: "Test title. Defaults to the target." },
+            spec_dir: { type: "string", description: 'Where the spec will live (for import paths). Default "tests/generated".' },
+            snippets_dir: { type: "string", description: `Snippets directory. Default "${DEFAULT_SNIPPETS_DIR}".` },
+            project: { type: "string", description: PROJECT_PARAM_DESCRIPTION },
+            worktree: { type: "string", description: WORKTREE_PARAM_DESCRIPTION2 },
+            project_root: { type: "string", description: PROJECT_ROOT_PARAM_DESCRIPTION2 }
+          },
+          required: ["target"]
+        }
+      },
       {
         name: "auth_coverage_report",
         description: 'Aggregate every API endpoint by its auth[] wrapper(s) \u2014 surfaces endpoints with empty auth, groups by module, shows which auth strategies dominate. Computed from api.json endpoint auth field (100% populated).\n\nUSE THIS FOR: "are there unauthenticated endpoints", "which auth wrappers are in use", "audit auth strategy consistency across modules". Paginated. Returns { total, by_strategy: {strategy: count}, unauthenticated: [endpoint_ids], by_module: {module: {total, by_strategy}} } plus the paginated endpoint list.',

package/dist/server/init-entry.js

@@ -1643,6 +1643,7 @@ var PRESETS = {
 };
 var LAUNCH_KIT_PKG = "@launchsecure/launch-kit";
 var LAUNCH_KIT_PKG_LATEST = `${LAUNCH_KIT_PKG}@latest`;
+var LAUNCH_KIT_NPX_ENV = { npm_config_prefer_online: "true" };
 var LAUNCH_KIT_TOOLS_GUIDE_STATIC_HEAD = `
 Wired in Claude Code (.mcp.json):
   launch-secure   \u2014 LS API: work items, comms, secrets, members, board
@@ -2345,19 +2346,23 @@ function buildLaunchKitMcpEntries(cfg) {
     },
     "launch-chart": {
       command: "npx",
-      args: ["-y", "-p", LAUNCH_KIT_PKG_LATEST, "launch-chart"]
+      args: ["-y", "-p", LAUNCH_KIT_PKG_LATEST, "launch-chart"],
+      env: { ...LAUNCH_KIT_NPX_ENV }
     },
     "launch-deck": {
       command: "npx",
-      args: ["-y", "-p", LAUNCH_KIT_PKG_LATEST, "launch-deck"]
+      args: ["-y", "-p", LAUNCH_KIT_PKG_LATEST, "launch-deck"],
+      env: { ...LAUNCH_KIT_NPX_ENV }
     },
     "launch-orbit": {
       command: "npx",
-      args: ["-y", "-p", LAUNCH_KIT_PKG_LATEST, "launch-orbit", "mcp"]
+      args: ["-y", "-p", LAUNCH_KIT_PKG_LATEST, "launch-orbit", "mcp"],
+      env: { ...LAUNCH_KIT_NPX_ENV }
     },
     "launch-recall": {
       command: "npx",
-      args: ["-y", "-p", LAUNCH_KIT_PKG_LATEST, "launch-recall", "mcp"]
+      args: ["-y", "-p", LAUNCH_KIT_PKG_LATEST, "launch-recall", "mcp"],
+      env: { ...LAUNCH_KIT_NPX_ENV }
     }
   };
 }
@@ -2378,16 +2383,21 @@ function mergeMcpEntry(existing, ours) {
   return merged;
 }
 function pinLaunchKitLatest(servers) {
-  const fixed = [];
+  const fixed = /* @__PURE__ */ new Set();
   for (const [name, entry] of Object.entries(servers)) {
     if (entry.command !== "npx" || !Array.isArray(entry.args)) continue;
     const i = entry.args.indexOf(LAUNCH_KIT_PKG);
     if (i !== -1) {
       entry.args[i] = LAUNCH_KIT_PKG_LATEST;
-      fixed.push(name);
+      fixed.add(name);
+    }
+    const isLaunchKit = entry.args.some((a) => a === LAUNCH_KIT_PKG || a === LAUNCH_KIT_PKG_LATEST);
+    if (isLaunchKit && entry.env?.npm_config_prefer_online === void 0) {
+      entry.env = { ...LAUNCH_KIT_NPX_ENV, ...entry.env ?? {} };
+      fixed.add(name);
     }
   }
-  return fixed;
+  return [...fixed];
 }
 function mergeMcpFile(targetDir, launchKitEntries) {
   const p = path5.join(targetDir, ".mcp.json");

package/dist/server/rover-entry.js

@@ -608,7 +608,7 @@ var require_package = __commonJS({
   "package.json"(exports2, module2) {
     module2.exports = {
       name: "@launchsecure/launch-kit",
-      version: "0.0.40",
+      version: "0.0.41",
       description: "LaunchSecure toolkit \u2014 launch-sequencer (pipeline runner + terminal bridge), launch-radar (feedback webhook receiver), launch-chart (project graph MCP), launch-deck (visual playground MCP), launch-kit-beacon (feedback Web Component), launch-recall (file-watcher backup). launch-pod is the container image these run inside.",
       license: "MIT",
       author: "LaunchSecure - AutomateWithUs",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@launchsecure/launch-kit",
-  "version": "0.0.40",
+  "version": "0.0.41",
   "description": "LaunchSecure toolkit — launch-sequencer (pipeline runner + terminal bridge), launch-radar (feedback webhook receiver), launch-chart (project graph MCP), launch-deck (visual playground MCP), launch-kit-beacon (feedback Web Component), launch-recall (file-watcher backup). launch-pod is the container image these run inside.",
   "license": "MIT",
   "author": "LaunchSecure - AutomateWithUs",

package/scaffolds/ls-marketplace/plugins/kit/skills/comms/SKILL.md

@@ -47,6 +47,38 @@ Examples:
 
 If a search comes back empty, widen *before* concluding it's absent: drop `resource_type`, drop `tag`, try a shorter `q` stem (`"deck"` not `"create deck kit skill"`), try `author` alone. Only after the unfiltered `q`/`author` sweep is empty should you say it isn't there.
 
+## Cross-project paste: the "Copy for Claude" payload
+
+The CapCom UI has a **Copy for Claude** button on the selected thread. It puts a payload on the clipboard that starts with `/kit:comms reply` followed by a fenced ` ```capcom ` block — so when the user pastes it, this skill fires. The whole point is **cross-project**: the block names the project the thread lives in, which is usually NOT the MCP's default project. Parse it; do not fall back to the default project.
+
+The block looks like:
+
+```capcom
+project: duet-pay
+org: automatewithus
+type: discussion
+id: cmc1x9k20003
+author: drew.m.jacobs
+status: OPEN
+url: https://.../communication?comment=cmc1x9k20003
+title: launch-kit init: scaffold .mcp.json with @latest
+---
+<full thread body>
+
+--- replies (2) ---
+[drew.m.jacobs] first reply text...
+[prajyot] second reply text...
+```
+
+How to handle a pasted payload:
+
+1. **Parse the metadata** (everything above the `---` line). `project` → `project_slug`, `org` → `org_slug`. **Pass both on every MCP call** — this is what targets the right project instead of the local default. `id` is the thread's comment id (use as `parent_id` to reply). `type` is the `resource_type`. `title`/`author` help locate it.
+2. **Get current context.** The body + replies are embedded so you can read and draft immediately, but they're a snapshot from when the user clicked. Before drafting a reply, do one `communication_read(project_slug, org_slug, resource_type:<type>, q:<distinctive title words>, author:<author>)` to confirm nothing new landed (there's no read-by-id; `q`+`author`+`project_slug` pins it). If the read surfaces newer replies than the paste, use those.
+3. **Draft, preview, gate.** Draft the reply, paste the full body in the terminal, and wait for explicit "post it" — same write gate as everywhere else (the paste is NOT authorization to post).
+4. **Post** with `communication_write(project_slug, org_slug, parent_id:<id>, body:<reply>)`. Keep `resource_type` off the reply unless threading rules require it — a reply inherits its parent's thread.
+
+If the user pastes the block with no instruction beyond the leading command, default to: read for freshness, summarize the thread, and draft a reply for their review.
+
 ## Default system tags
 
 These ship on every org (from `tags_list`, `isSystem: true`) — you don't need to call `tags_list` to know them, only to get their **IDs** for a write. Numeric tags (e.g. `247`) are auto-created per work-item and are not in this list.
@@ -84,5 +116,6 @@ To attach tags on a write you need their IDs: call `tags_list` once and map name
 
 - **Repo-backed long-form doc?** That's `/kit:brief` — it writes a file and the server syncs the comment; don't hand-post it here.
 - **Daily standup?** That's `/kit:standup` — it has the voice/format conventions and the "since last push" diffing.
-- **Bug/gap in launch-kit itself?** That's `kit_feedback_submit`, not a hand-written comment.
+- **Bug/gap in launch-kit TOOLING?** (launch-chart/deck/orbit/beacon/recall or a kit skill) That's `kit_feedback_submit`, not a hand-written comment.
+- **Bug/feedback about the LaunchSecure PLATFORM itself?** (the LS web app / API / pipeline) That's `ls_feedback_submit` — it routes to the LS project regardless of which project you're in, so an LS bug you hit while working in another project (e.g. DuetPay) lands with the LS team instead of in that project's Comm Hub. It stamps your current org/project into `fields.origin` for context. Pass `severity` (bug/feature/idea/question) to tag it.
 - **Reading is free; writing is gated.** Default to read/search freely; gate every write on an explicit go-ahead.