@loompad/cli 0.1.0 → 1.1.2

package/dist/daemon/specs.js

@@ -0,0 +1,285 @@
+/**
+ * Playwright specs: find them, run one, stream what happened.
+ *
+ * Agents write browser tests constantly and Loom had nowhere to watch them run —
+ * you alt-tabbed to a terminal, ran the file blind, and read a stack trace. The
+ * Browser tab closes that loop: list the project's specs, run one with a click,
+ * watch the reporter line by line, and hand a failure straight back to an agent.
+ *
+ * Playwright is deliberately the PROJECT's dependency, not Loom's. We run
+ * `npx playwright test` in the project's own directory; a project without
+ * Playwright gets told that plainly instead of Loom shipping a browser runner
+ * the project didn't ask for.
+ */
+import { spawnContained, fileCommand, stopWindowsTree } from "../core/process.js";
+import fs from "node:fs";
+import path from "node:path";
+/** Directories never worth walking. Deep, huge, and never contain user specs. */
+const SKIP_DIRS = new Set([
+    "node_modules",
+    ".git",
+    "dist",
+    "build",
+    "out",
+    ".next",
+    ".loom",
+    "coverage",
+    "playwright-report",
+    "test-results",
+]);
+const SPEC_RE = /\.(spec|e2e)\.(ts|tsx|js|mjs|cjs)$/;
+/** Inside a Playwright testDir, Playwright's own default testMatch applies too. */
+const TESTDIR_RE = /\.(spec|test|e2e)\.[cm]?[jt]sx?$/;
+const CONFIG_NAMES = ["ts", "js", "mjs", "cjs", "mts", "cts"].map((e) => `playwright.config.${e}`);
+/**
+ * Does this project use Playwright, and where does it keep its tests?
+ *
+ * A `*.spec.ts` alone isn't evidence — Jest and Vitest name theirs the same
+ * way, and offering to run those through Playwright is a button that can only
+ * fail. A config file or the dependency is. The testDir is read off the
+ * config by pattern, not by running it: the common shapes are a string or
+ * `path.join(__dirname, "…")`, and anything cleverer falls back to the name
+ * match across the project.
+ */
+export function playwrightSetup(projectDir) {
+    const config = CONFIG_NAMES.find((n) => fs.existsSync(path.join(projectDir, n))) ?? null;
+    let testDir = null;
+    if (config) {
+        try {
+            const src = fs.readFileSync(path.join(projectDir, config), "utf8").slice(0, 64_000);
+            const m = /\btestDir\s*:\s*(['"`])([^'"`$]+)\1/.exec(src) ??
+                /\btestDir\s*:\s*path\.(?:join|resolve)\(\s*__dirname\s*,\s*(['"`])([^'"`$]+)\1\s*\)/.exec(src);
+            if (m?.[2]) {
+                const abs = path.resolve(projectDir, m[2]);
+                const rel = path.relative(projectDir, abs);
+                // a testDir outside the project is not ours to walk
+                if (rel && !rel.startsWith("..") && !path.isAbsolute(rel))
+                    testDir = rel.split(path.sep).join("/");
+                else if (!rel)
+                    testDir = null;
+            }
+        }
+        catch {
+            /* unreadable config — the name match still applies */
+        }
+    }
+    let dependency = false;
+    try {
+        const pkg = JSON.parse(fs.readFileSync(path.join(projectDir, "package.json"), "utf8"));
+        const deps = { ...pkg.dependencies, ...pkg.devDependencies, ...pkg.optionalDependencies };
+        dependency = "@playwright/test" in deps || "playwright" in deps;
+    }
+    catch {
+        /* no package.json, or not JSON */
+    }
+    return { config, testDir, dependency };
+}
+/**
+ * Every Playwright spec in the project.
+ *
+ * Only in a project that has Playwright (playwrightSetup). Inside a testDir
+ * the config names, every spec- or test-named file is Playwright's; without
+ * one, it's by name — `*.spec.*` and `*.e2e.*` is the convention Playwright
+ * scaffolds and the one agents follow when asked to "write a test". Parsing
+ * imports to be cleverer would drag a TS parser in to answer a question the
+ * filename already answers.
+ */
+export function findSpecs(projectDir, maxDepth = 6) {
+    const setup = playwrightSetup(projectDir);
+    if (!setup.config && !setup.dependency)
+        return [];
+    const found = [];
+    const match = setup.testDir ? TESTDIR_RE : SPEC_RE;
+    const walk = (dir, depth) => {
+        if (depth > maxDepth || found.length >= 200)
+            return;
+        let entries;
+        try {
+            entries = fs.readdirSync(dir, { withFileTypes: true });
+        }
+        catch {
+            return; // unreadable directory — not this feature's problem
+        }
+        for (const e of entries) {
+            if (e.isDirectory()) {
+                if (!SKIP_DIRS.has(e.name) && !e.name.startsWith(".")) {
+                    walk(path.join(dir, e.name), depth + 1);
+                }
+                continue;
+            }
+            if (!match.test(e.name))
+                continue;
+            const abs = path.join(dir, e.name);
+            try {
+                const st = fs.statSync(abs);
+                found.push({
+                    path: path.relative(projectDir, abs).split(path.sep).join("/"),
+                    bytes: st.size,
+                    mtimeMs: st.mtimeMs,
+                });
+            }
+            catch {
+                /* raced a delete — skip */
+            }
+        }
+    };
+    walk(setup.testDir ? path.join(projectDir, setup.testDir) : projectDir, 0);
+    return found.sort((a, b) => a.path.localeCompare(b.path));
+}
+const MAX_LINES = 800;
+/** A spec run that's still going after this has hung, not "taking a while". */
+export const SPEC_TIMEOUT_MS = 10 * 60_000;
+/**
+ * One spec run per project at a time.
+ *
+ * Not a queue — a refusal. Two Playwright runs in one project fight over ports,
+ * dev servers and trace directories, and the second's output interleaved into
+ * the first's is worse than either alone. The UI disables Run while one is
+ * live, and the API says "already running" to anyone else.
+ */
+export class SpecRunner {
+    timeoutMs;
+    live = new Map();
+    /** How long one run may take (LOOM_SPEC_TIMEOUT_MS overrides, for tests). */
+    constructor(timeoutMs = Number(process.env.LOOM_SPEC_TIMEOUT_MS) || SPEC_TIMEOUT_MS) {
+        this.timeoutMs = timeoutMs;
+    }
+    running(projectId) {
+        return this.live.get(projectId)?.run ?? null;
+    }
+    /**
+     * Start `npx playwright test <file>` in the project directory.
+     *
+     * The command is overridable via LOOM_SPEC_CMD so tests can exercise the
+     * whole streaming path with a shell one-liner instead of installing
+     * Playwright into a fixture project.
+     */
+    start(projectId, projectDir, file, events) {
+        if (this.live.has(projectId)) {
+            throw new Error("a spec run is already in progress in this project");
+        }
+        // The file must be one discovery would offer. This is the same "the rail
+        // only offers ADES" rule: accepting any path lets a caller run arbitrary
+        // files through npx with the daemon's hands.
+        const known = findSpecs(projectDir).some((s) => s.path === file);
+        if (!known)
+            throw new Error(`"${file}" is not a spec in this project`);
+        const run = {
+            id: Math.random().toString(36).slice(2, 10),
+            file,
+            startedAt: Date.now(),
+            lines: [],
+        };
+        const custom = process.env.LOOM_SPEC_CMD;
+        const launch = custom ? fileCommand(custom, file) : { command: "npx", args: ["--no-install", "playwright", "test", file, "--reporter=line"], env: process.env, windowsVerbatimArguments: false };
+        // Its own process group, so Stop reaches what npx started (the test
+        // runner, its workers, the browsers) and not only npx itself.
+        const group = process.platform !== "win32";
+        const child = spawnContained(launch.command, launch.args, {
+            cwd: projectDir,
+            env: { ...launch.env, CI: "1", FORCE_COLOR: "0" },
+            stdio: ["ignore", "pipe", "pipe"],
+            detached: group,
+            windowsVerbatimArguments: launch.windowsVerbatimArguments,
+        });
+        let containmentError = false;
+        const unproven = (error) => {
+            if (containmentError)
+                return;
+            containmentError = true;
+            const line = `could not verify spec process shutdown: ${error instanceof Error ? error.message : String(error)}`;
+            run.lines.push(line);
+            events.onLine(run, line);
+            // Keep the run live: another test writer must not start without proof.
+        };
+        const signal = (sig) => {
+            try {
+                if (group && child.pid)
+                    process.kill(-child.pid, sig);
+                else
+                    void stopWindowsTree(child).catch(unproven);
+            }
+            catch {
+                try {
+                    child.kill(sig);
+                }
+                catch { /* already gone */ }
+            }
+        };
+        let hard = null;
+        const kill = (why) => {
+            if (run.exitCode !== undefined)
+                return;
+            run.stopped ??= why;
+            signal("SIGTERM");
+            // a runner that ignores SIGTERM still has to end
+            hard ??= setTimeout(() => signal("SIGKILL"), 5_000);
+            hard.unref?.();
+        };
+        const timer = setTimeout(() => {
+            const line = `timed out after ${Math.round(this.timeoutMs / 1000)}s — stopping it`;
+            run.lines.push(line);
+            events.onLine(run, line);
+            kill("timeout");
+        }, this.timeoutMs);
+        timer.unref?.();
+        const settle = () => {
+            clearTimeout(timer);
+            if (hard)
+                clearTimeout(hard);
+        };
+        const push = (chunk) => {
+            for (const raw of chunk.toString().split("\n")) {
+                const line = raw.trimEnd();
+                if (!line)
+                    continue;
+                run.lines.push(line);
+                if (run.lines.length > MAX_LINES)
+                    run.lines.shift();
+                events.onLine(run, line);
+            }
+        };
+        child.stdout.on("data", push);
+        child.stderr.on("data", push);
+        child.on("error", (err) => {
+            // npx missing, spawn refused — the run "ended" without starting.
+            run.lines.push(`could not start: ${err.message}`);
+            events.onLine(run, run.lines[run.lines.length - 1]);
+            run.exitCode = 127;
+            settle();
+            this.live.delete(projectId);
+            events.onDone(run);
+        });
+        const finished = (code) => {
+            if (run.exitCode !== undefined)
+                return; // error path already settled it
+            // killed by a signal: no code, and not a pass
+            run.exitCode = code ?? (run.stopped ? 130 : 1);
+            settle();
+            this.live.delete(projectId);
+            events.onDone(run);
+        };
+        child.on("close", code => {
+            if (process.platform === "win32")
+                void stopWindowsTree(child).then(() => finished(code), unproven);
+            else
+                finished(code);
+        });
+        this.live.set(projectId, { run, kill: () => kill("stop") });
+        return run;
+    }
+    stop(projectId) {
+        const entry = this.live.get(projectId);
+        if (!entry)
+            return false;
+        entry.kill();
+        return true;
+    }
+    /** Kill everything — daemon shutdown. */
+    closeAll() {
+        for (const { kill } of this.live.values())
+            kill();
+        this.live.clear();
+    }
+}
+//# sourceMappingURL=specs.js.map

package/dist/daemon/specs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"specs.js","sourceRoot":"","sources":["../../src/daemon/specs.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAClF,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,iFAAiF;AACjF,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC;IACxB,cAAc;IACd,MAAM;IACN,MAAM;IACN,OAAO;IACP,KAAK;IACL,OAAO;IACP,OAAO;IACP,UAAU;IACV,mBAAmB;IACnB,cAAc;CACf,CAAC,CAAC;AAEH,MAAM,OAAO,GAAG,oCAAoC,CAAC;AACrD,mFAAmF;AACnF,MAAM,UAAU,GAAG,kCAAkC,CAAC;AAEtD,MAAM,YAAY,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,qBAAqB,CAAC,EAAE,CAAC,CAAC;AAWnG;;;;;;;;;GASG;AACH,MAAM,UAAU,eAAe,CAAC,UAAkB;IAChD,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC;IACzF,IAAI,OAAO,GAAkB,IAAI,CAAC;IAClC,IAAI,MAAM,EAAE,CAAC;QACX,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,MAAM,CAAC,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;YACpF,MAAM,CAAC,GACL,qCAAqC,CAAC,IAAI,CAAC,GAAG,CAAC;gBAC/C,qFAAqF,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAClG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACX,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;gBAC3C,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;gBAC3C,oDAAoD;gBACpD,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;oBAAE,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;qBAC9F,IAAI,CAAC,GAAG;oBAAE,OAAO,GAAG,IAAI,CAAC;YAChC,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,sDAAsD;QACxD,CAAC;IACH,CAAC;IACD,IAAI,UAAU,GAAG,KAAK,CAAC;IACvB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,cAAc,CAAC,EAAE,MAAM,CAAC,CAAuD,CAAC;QAC7I,MAAM,IAAI,GAAG,EAAE,GAAG,GAAG,CAAC,YAAY,EAAE,GAAG,GAAG,CAAC,eAAe,EAAE,GAAG,GAAG,CAAC,oBAAoB,EAAE,CAAC;QAC1F,UAAU,GAAG,kBAAkB,IAAI,IAAI,IAAI,YAAY,IAAI,IAAI,CAAC;IAClE,CAAC;IAAC,MAAM,CAAC;QACP,kCAAkC;IACpC,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC;AACzC,CAAC;AASD;;;;;;;;;GASG;AACH,MAAM,UAAU,SAAS,CAAC,UAAkB,EAAE,QAAQ,GAAG,CAAC;IACxD,MAAM,KAAK,GAAG,eAAe,CAAC,UAAU,CAAC,CAAC;IAC1C,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,UAAU;QAAE,OAAO,EAAE,CAAC;IAClD,MAAM,KAAK,GAAe,EAAE,CAAC;IAC7B,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC;IACnD,MAAM,IAAI,GAAG,CAAC,GAAW,EAAE,KAAa,EAAQ,EAAE;QAChD,IAAI,KAAK,GAAG,QAAQ,IAAI,KAAK,CAAC,MAAM,IAAI,GAAG;YAAE,OAAO;QACpD,IAAI,OAAoB,CAAC;QACzB,IAAI,CAAC;YACH,OAAO,GAAG,EAAE,CAAC,WAAW,CAAC,GAAG,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC;QACzD,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,oDAAoD;QAC9D,CAAC;QACD,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;YACxB,IAAI,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;gBACpB,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;oBACtD,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;gBAC1C,CAAC;gBACD,SAAS;YACX,CAAC;YACD,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;gBAAE,SAAS;YAClC,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;YACnC,IAAI,CAAC;gBACH,MAAM,EAAE,GAAG,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;gBAC5B,KAAK,CAAC,IAAI,CAAC;oBACT,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;oBAC9D,KAAK,EAAE,EAAE,CAAC,IAAI;oBACd,OAAO,EAAE,EAAE,CAAC,OAAO;iBACpB,CAAC,CAAC;YACL,CAAC;YAAC,MAAM,CAAC;gBACP,2BAA2B;YAC7B,CAAC;QACH,CAAC;IACH,CAAC,CAAC;IACF,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;IAC3E,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;AAC5D,CAAC;AAmBD,MAAM,SAAS,GAAG,GAAG,CAAC;AAEtB,+EAA+E;AAC/E,MAAM,CAAC,MAAM,eAAe,GAAG,EAAE,GAAG,MAAM,CAAC;AAE3C;;;;;;;GAOG;AACH,MAAM,OAAO,UAAU;IAID;IAHZ,IAAI,GAAG,IAAI,GAAG,EAA8C,CAAC;IAErE,6EAA6E;IAC7E,YAAoB,YAAY,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,IAAI,eAAe;QAAvE,cAAS,GAAT,SAAS,CAA8D;IAAG,CAAC;IAE/F,OAAO,CAAC,SAAiB;QACvB,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,GAAG,IAAI,IAAI,CAAC;IAC/C,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CACH,SAAiB,EACjB,UAAkB,EAClB,IAAY,EACZ,MAAwB;QAExB,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;YAC7B,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;QACvE,CAAC;QACD,yEAAyE;QACzE,yEAAyE;QACzE,6CAA6C;QAC7C,MAAM,KAAK,GAAG,SAAS,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;QACjE,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,IAAI,IAAI,iCAAiC,CAAC,CAAC;QAEvE,MAAM,GAAG,GAAY;YACnB,EAAE,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;YAC3C,IAAI;YACJ,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;YACrB,KAAK,EAAE,EAAE;SACV,CAAC;QAEF,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC;QACzC,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,cAAc,EAAE,YAAY,EAAE,MAAM,EAAE,IAAI,EAAE,iBAAiB,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,wBAAwB,EAAE,KAAK,EAAE,CAAC;QAEjM,oEAAoE;QACpE,8DAA8D;QAC9D,MAAM,KAAK,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC;QAC3C,MAAM,KAAK,GAAG,cAAc,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,IAAI,EAAE;YACxD,GAAG,EAAE,UAAU;YACf,GAAG,EAAE,EAAE,GAAG,MAAM,CAAC,GAAG,EAAE,EAAE,EAAE,GAAG,EAAE,WAAW,EAAE,GAAG,EAAE;YACjD,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;YACjC,QAAQ,EAAE,KAAK;YACf,wBAAwB,EAAE,MAAM,CAAC,wBAAwB;SAC1D,CAAC,CAAC;QACH,IAAI,gBAAgB,GAAG,KAAK,CAAC;QAC7B,MAAM,QAAQ,GAAG,CAAC,KAAc,EAAQ,EAAE;YACxC,IAAI,gBAAgB;gBAAE,OAAO;YAC7B,gBAAgB,GAAG,IAAI,CAAC;YACxB,MAAM,IAAI,GAAG,2CAA2C,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;YACjH,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAAC,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YAC/C,uEAAuE;QACzE,CAAC,CAAC;QACF,MAAM,MAAM,GAAG,CAAC,GAAmB,EAAQ,EAAE;YAC3C,IAAI,CAAC;gBACH,IAAI,KAAK,IAAI,KAAK,CAAC,GAAG;oBAAE,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;;oBACjD,KAAK,eAAe,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;YACnD,CAAC;YAAC,MAAM,CAAC;gBACP,IAAI,CAAC;oBAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;gBAAC,CAAC;gBAAC,MAAM,CAAC,CAAC,kBAAkB,CAAC,CAAC;YACvD,CAAC;QACH,CAAC,CAAC;QACF,IAAI,IAAI,GAA0B,IAAI,CAAC;QACvC,MAAM,IAAI,GAAG,CAAC,GAAuB,EAAQ,EAAE;YAC7C,IAAI,GAAG,CAAC,QAAQ,KAAK,SAAS;gBAAE,OAAO;YACvC,GAAG,CAAC,OAAO,KAAK,GAAG,CAAC;YACpB,MAAM,CAAC,SAAS,CAAC,CAAC;YAClB,iDAAiD;YACjD,IAAI,KAAK,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,KAAK,CAAC,CAAC;YACpD,IAAI,CAAC,KAAK,EAAE,EAAE,CAAC;QACjB,CAAC,CAAC;QACF,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC5B,MAAM,IAAI,GAAG,mBAAmB,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,iBAAiB,CAAC;YACnF,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACrB,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YACzB,IAAI,CAAC,SAAS,CAAC,CAAC;QAClB,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;QACnB,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;QAChB,MAAM,MAAM,GAAG,GAAS,EAAE;YACxB,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,IAAI,IAAI;gBAAE,YAAY,CAAC,IAAI,CAAC,CAAC;QAC/B,CAAC,CAAC;QAEF,MAAM,IAAI,GAAG,CAAC,KAAa,EAAQ,EAAE;YACnC,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC/C,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,EAAE,CAAC;gBAC3B,IAAI,CAAC,IAAI;oBAAE,SAAS;gBACpB,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACrB,IAAI,GAAG,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS;oBAAE,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;gBACpD,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YAC3B,CAAC;QACH,CAAC,CAAC;QACF,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAC9B,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAE9B,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;YACxB,iEAAiE;YACjE,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,oBAAoB,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;YAClD,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAE,CAAC,CAAC;YACrD,GAAG,CAAC,QAAQ,GAAG,GAAG,CAAC;YACnB,MAAM,EAAE,CAAC;YACT,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YAC5B,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACrB,CAAC,CAAC,CAAC;QACH,MAAM,QAAQ,GAAG,CAAC,IAAmB,EAAQ,EAAE;YAC7C,IAAI,GAAG,CAAC,QAAQ,KAAK,SAAS;gBAAE,OAAO,CAAC,gCAAgC;YACxE,8CAA8C;YAC9C,GAAG,CAAC,QAAQ,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;YAC/C,MAAM,EAAE,CAAC;YACT,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YAC5B,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACrB,CAAC,CAAC;QACF,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE;YACvB,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;gBAAE,KAAK,eAAe,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,QAAQ,CAAC,CAAC;;gBAC9F,QAAQ,CAAC,IAAI,CAAC,CAAC;QACtB,CAAC,CAAC,CAAC;QAEH,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC5D,OAAO,GAAG,CAAC;IACb,CAAC;IAED,IAAI,CAAC,SAAiB;QACpB,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACvC,IAAI,CAAC,KAAK;YAAE,OAAO,KAAK,CAAC;QACzB,KAAK,CAAC,IAAI,EAAE,CAAC;QACb,OAAO,IAAI,CAAC;IACd,CAAC;IAED,yCAAyC;IACzC,QAAQ;QACN,KAAK,MAAM,EAAE,IAAI,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE;YAAE,IAAI,EAAE,CAAC;QAClD,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;IACpB,CAAC;CACF"}

package/dist/daemon/system.d.ts

@@ -0,0 +1,208 @@
+import { type ServerConfig } from "../core/servers.js";
+import { ProjectRuntime } from "./runtime.js";
+export declare const DEFAULT_PORT = 7420;
+/**
+ * Fingerprint every built file the daemon can load, as one hash.
+ *
+ * The walk is what makes it honest. This used to hash exactly two files —
+ * server.js and app-page.js — which meant a change anywhere else (an adapter,
+ * the router, core/registry.ts) left the rev identical. `loom up` said "daemon
+ * already running", the shell agreed it was current, and a daemon kept serving
+ * the old code from memory. A correct fix looked like it did nothing, which
+ * sends you debugging code that is already right.
+ *
+ * Content-based on purpose: mtimes are unreliable across runtimes on some
+ * filesystems (exFAT drives skew them by the local timezone offset). Names are
+ * hashed alongside contents so a rename or a deletion moves the rev too.
+ *
+ * Read the runtime JS, CSS and HTML once at import; exclude source maps and
+ * declarations because they do not change the running app.
+ *
+ * The desktop shell has a twin of this in desktop/loom-app.js — it can't import
+ * this module without pulling express into Electron's main process. They must
+ * agree byte for byte; test/desktop-app.test.ts compares them against the real
+ * built output so a drift fails there rather than in the field.
+ */
+export declare function fingerprintBuild(root: string): string | null;
+/**
+ * This build's rev. Source runs retain the "dev" marker; hashing only their
+ * browser JS would misleadingly ignore changes to the TypeScript daemon.
+ */
+export declare const BUILD_REV: string;
+/**
+ * Loom's own install root — the directory to ask "am I behind my remote?".
+ *
+ * Walks up from this module looking for a .git directory (a source checkout or
+ * a cloned install). null when Loom was installed some other way (a package),
+ * in which case "check for updates" honestly says there's no git tree to check.
+ */
+export declare function loomRoot(): string | null;
+export declare const TERM_MARK = "\u0001__LOOM_END__";
+/**
+ * Just enough to give a pasted attachment a sensible extension.
+ */
+export declare const MIME_EXT: Record<string, string>;
+/**
+ * Paths from an HTTP body, as strings and nothing else.
+ *
+ * These reach `git checkout --` and `git clean -fd`, which delete things. A
+ * body is whatever the caller felt like sending, so anything that isn't a
+ * string is dropped here rather than stringified into a path somewhere deeper.
+ * This is the shape check; core/git.ts does the safety check, resolving every
+ * one of them against the project root.
+ */
+export declare function asPaths(v: unknown): string[];
+/** KAIRO-style dense fleet metrics for the Observatory Metrics tab. */
+export declare function kairoMetrics(rt: ProjectRuntime): Record<string, unknown>;
+/** A server entry from the wire, checked — a command is a thing we will run. */
+export declare function parseServerConfig(raw: unknown): ServerConfig;
+/** Resolve this machine's Tailscale IPv4 — the tailnet is the trust boundary. */
+export declare function tailscaleIp(): Promise<string>;
+/**
+ * One `tailscale status --json`, folded into the three facts the connect-a-phone
+ * flow needs: is the CLI installed, is it signed in, and the tailnet IPv4. Lets
+ * the UI tell "install Tailscale" apart from "sign in" — and offer to do the
+ * latter from inside the app. Never rejects; a missing binary is `installed:false`.
+ */
+export declare function tailscaleState(): Promise<{
+    installed: boolean;
+    loggedIn: boolean;
+    ip: string | null;
+    dnsName: string | null;
+    state: string | null;
+}>;
+/**
+ * Expose a local port to the public internet over Tailscale Funnel — how the
+ * physical LoomPad reaches the voice backend from anywhere (a bare ESP32 can't
+ * route to a 100.x tailnet address, but it can reach a Funnel's HTTPS URL).
+ * `--bg` returns as soon as it's serving and prints the public URL.
+ */
+export declare function tailscaleFunnel(port: number): Promise<{
+    url: string;
+}>;
+/**
+ * Fallback ids for a codex too old to have `codex debug models`.
+ *
+ * Not the shipped set — a *previous* shipped set, which is exactly what a codex
+ * without the subcommand would be running. The current one is asked of the CLI;
+ * see codexModelCatalog. Anything served from here is reported as
+ * `source: "builtin"`.
+ */
+export declare const CODEX_MODELS: string[];
+/**
+ * Claude Code's model aliases. The only builtin list left, and it is builtin
+ * because the CLI genuinely cannot answer the question.
+ *
+ * `claude --help` has no `models` subcommand and lists none: what it documents
+ * is the shape of the argument — "Provide an alias for the latest model (e.g.
+ * 'fable', 'opus', or 'sonnet') or a model's full name (e.g. 'claude-fable-5')".
+ * And `claude models` is not an error, which is the trap: `models` is taken as a
+ * *prompt*, so the "enumeration" is a billed turn of an LLM writing prose about
+ * models, with whatever ids it believes today. A model list that costs money and
+ * can hallucinate is not a model list.
+ *
+ * So: aliases only. They are what the CLI's own help names, they resolve to the
+ * latest snapshot by definition, and they can't go stale the way a pinned
+ * "claude-sonnet-5" did — an id that used to sit in this array and has never
+ * been a model. Full ids belong in the picker's custom field, where they're your
+ * claim rather than ours.
+ */
+export declare const CLAUDE_MODELS: string[];
+/** Where a model list came from, so a caller can say which. */
+export type ModelSource = "cli" | "builtin" | "api" | "none";
+export type ModelList = {
+    models: string[];
+    source: ModelSource;
+};
+export declare const MODEL_LIST_CACHE: Map<string, {
+    list: ModelList;
+    ts: number;
+}>;
+/**
+ * Whatever a CLI prints on stdout, or "" if it can't be run. Never throws.
+ *
+ * This is `spawn` and not `execFile` for a reason that cost an afternoon:
+ * `execFile` calls back when the child's *streams* close, and `agy models`
+ * leaves a language-server process holding stdout open after it exits, so
+ * execFile waits out its whole timeout and hands back an empty string — the
+ * Antigravity picker looked exactly like a CLI that reports no models, on a
+ * machine where `agy models` prints eleven. Measured, repeatedly, one fresh
+ * process per attempt: execFile 25s/0 lines, spawn 5.3s/11 lines.
+ *
+ * So: resolve on `exit`, with a short grace period for data still in the pipe,
+ * and take `close` when it comes first (it does for every other CLI here).
+ * stderr is drained and dropped — unread, a chatty CLI can fill its pipe and
+ * block on the write.
+ */
+export declare function runCapture(cmd: string, args: string[], timeoutMs?: number): Promise<string>;
+/** Model ids a CLI prints (one per line), ANSI stripped. Never throws. */
+export declare function runModelList(cmd: string, args: string[]): Promise<string[]>;
+/**
+ * codex's own model catalog, which it will print as JSON: `codex debug models`.
+ *
+ * Not a documented list command — it's under `debug` — but it is the CLI
+ * answering about itself rather than us remembering, and it's the same catalog
+ * the picker in codex's own TUI is built from. Each entry carries a `slug` (the
+ * value `-m` takes) and a `visibility`; `hide` means internal (codex-auto-review
+ * is one), and offering an agent a model its own UI won't is offering a
+ * failure. ~65ms and 184KB on this machine — the base instructions for every
+ * model ride along in that JSON, hence the buffer.
+ *
+ * Empty on any older codex that has no `debug models`, which is the caller's cue
+ * to fall back and say so.
+ */
+export declare function codexModelCatalog(bin: string): Promise<string[]>;
+/**
+ * The models an agent kind can run, and whether Loom asked or remembered.
+ *
+ * Four of the five adapters can be asked, each in its own dialect: `opencode
+ * models` (~500 lines across every provider it has), `grok models`, `agy models`
+ * (the Antigravity CLI — this branch was missing entirely, so its picker offered
+ * "Default" and "Custom…" and nothing else), and `codex debug models`, which
+ * prints a JSON catalog rather than lines. Claude Code cannot be asked at all —
+ * see CLAUDE_MODELS.
+ *
+ * `source` is the point of the return shape. "cli" means the tool answered;
+ * "builtin" means it couldn't and this is Loom's remembered list, which the UI
+ * must be able to say out loud instead of implying a lookup that never
+ * happened. An uninstalled CLI answers with nothing, and an empty answer from a
+ * CLI is still "cli" — an empty picker for a tool you don't have is the honest
+ * result, not a reason to serve it a remembered list behind its back. codex is
+ * the one exception: an empty answer there can equally mean a codex too old to
+ * have `debug models`, so it falls back — and "builtin" is the true label for
+ * whichever of the two it was.
+ *
+ * Cached 60s per kind: the pickers reopen constantly and none of these change
+ * between two clicks.
+ */
+export declare function listModelsForKind(kind: string): Promise<ModelList>;
+/**
+ * Bring Tailscale up from inside the app. Runs `tailscale up`; if the machine
+ * needs to sign in, that prints a one-time login URL and then blocks until the
+ * user authorizes — so we resolve with the URL as soon as we see it and leave
+ * the process running (unref'd) to finish the handshake in the background. If it
+ * was already signed in, `up` returns fast and we resolve with the tailnet IP.
+ */
+export declare function tailscaleUp(): Promise<{
+    loginUrl?: string;
+    ip?: string;
+}>;
+/**
+ * This machine's LAN IPv4 — the address a phone on the same Wi-Fi uses. We skip
+ * loopback, link-local (169.254), and Tailscale's own 100.64/10 CGNAT range so
+ * "local network" and "tailnet" stay distinct choices. Returns null when the
+ * only addresses are loopback (e.g. no network) — the caller says so honestly
+ * rather than minting an unreachable QR.
+ */
+export declare function lanIp(): string | null;
+/** Is this connection from the same machine? (127.0.0.1, ::1, or v4-mapped v6.) */
+export declare function isLoopback(remoteAddress: string | undefined): boolean;
+/**
+ * Is the request's `Host` header a loopback literal? The anti-DNS-rebinding
+ * check: a rebinding attacker loads a page from their own domain, so the browser
+ * sends `Host: attacker.example` even after the name rebinds to 127.0.0.1 — while
+ * the genuine local console is always reached at `127.0.0.1`/`localhost`. Pairing
+ * the socket check with this closes the "any website → localhost token oracle"
+ * path. The port is ignored; only the host is checked.
+ */
+export declare function isLoopbackHost(hostHeader: string | undefined): boolean;