@monoes/monodesign 1.2.4 → 1.2.6

package/dist/tokens.js

@@ -0,0 +1,91 @@
+/** Design tokens as typed JS constants — mirrors tokens.css */
+export const fontFamily = {
+    display: "'Cormorant Garamond', Georgia, serif",
+    body: "'Instrument Sans', system-ui, sans-serif",
+    mono: "'Space Grotesk', monospace",
+};
+export const fontSize = {
+    xs: '0.75rem',
+    sm: '0.875rem',
+    base: '1rem',
+    lg: '1.125rem',
+    xl: '1.25rem',
+    '2xl': '1.5rem',
+    '3xl': '1.875rem',
+    '4xl': '2.25rem',
+    '5xl': '3rem',
+    '6xl': '3.75rem',
+    '7xl': '4.5rem',
+};
+export const spacing = {
+    1: '4px',
+    2: '8px',
+    3: '12px',
+    4: '16px',
+    5: '20px',
+    6: '24px',
+    7: '28px',
+    8: '32px',
+    10: '40px',
+    12: '48px',
+    16: '64px',
+    20: '80px',
+    24: '96px',
+    30: '120px',
+};
+export const easing = {
+    out: 'cubic-bezier(0.16, 1, 0.3, 1)',
+    outQuint: 'cubic-bezier(0.22, 1, 0.36, 1)',
+    inOut: 'cubic-bezier(0.65, 0, 0.35, 1)',
+    in: 'cubic-bezier(0.4, 0, 1, 1)',
+};
+export const duration = {
+    instant: '0s',
+    fast: '0.15s',
+    base: '0.3s',
+    slow: '0.6s',
+    slower: '0.8s',
+    slowest: '1.2s',
+};
+/** OKLCH color palette */
+export const color = {
+    ink: 'oklch(10% 0 0)',
+    charcoal: 'oklch(25% 0 0)',
+    ash: 'oklch(55% 0 0)',
+    mist: 'oklch(92% 0 0)',
+    cream: 'oklch(96% 0.005 350)',
+    paper: 'oklch(98% 0 0)',
+    white: 'oklch(99.5% 0 0)',
+    accent: 'oklch(60% 0.25 350)',
+    accentHover: 'oklch(52% 0.25 350)',
+    accentDim: 'oklch(60% 0.25 350 / 0.15)',
+    accentSoft: 'oklch(60% 0.25 350 / 0.25)',
+    accentText: 'oklch(45% 0.22 350)',
+};
+export const accentScale = {
+    1: 'oklch(22% 0.15 350)',
+    2: 'oklch(33% 0.20 350)',
+    3: 'oklch(42% 0.23 350)',
+    4: 'oklch(52% 0.25 350)',
+    5: 'oklch(60% 0.25 350)',
+    6: 'oklch(68% 0.22 350)',
+    7: 'oklch(76% 0.18 350)',
+    8: 'oklch(84% 0.12 350)',
+    9: 'oklch(94% 0.05 350)',
+};
+export const shadow = {
+    none: 'none',
+    sm: '0 1px 3px rgba(0, 0, 0, 0.06)',
+    md: '0 4px 24px -4px rgba(0, 0, 0, 0.12), 0 1px 3px rgba(0, 0, 0, 0.06)',
+    lg: '0 20px 40px rgba(0, 0, 0, 0.08)',
+    accent: '0 20px 60px oklch(60% 0.25 350 / 0.15)',
+};
+export const radius = {
+    none: '0',
+    sm: '4px',
+    md: '8px',
+    lg: '12px',
+    xl: '16px',
+    full: '9999px',
+};
+//# sourceMappingURL=tokens.js.map

package/dist/tokens.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tokens.js","sourceRoot":"","sources":["../src/tokens.ts"],"names":[],"mappings":"AAAA,+DAA+D;AAE/D,MAAM,CAAC,MAAM,UAAU,GAAG;IACxB,OAAO,EAAE,sCAAsC;IAC/C,IAAI,EAAE,0CAA0C;IAChD,IAAI,EAAE,4BAA4B;CAC1B,CAAC;AAEX,MAAM,CAAC,MAAM,QAAQ,GAAG;IACtB,EAAE,EAAE,SAAS;IACb,EAAE,EAAE,UAAU;IACd,IAAI,EAAE,MAAM;IACZ,EAAE,EAAE,UAAU;IACd,EAAE,EAAE,SAAS;IACb,KAAK,EAAE,QAAQ;IACf,KAAK,EAAE,UAAU;IACjB,KAAK,EAAE,SAAS;IAChB,KAAK,EAAE,MAAM;IACb,KAAK,EAAE,SAAS;IAChB,KAAK,EAAE,QAAQ;CACP,CAAC;AAEX,MAAM,CAAC,MAAM,OAAO,GAAG;IACrB,CAAC,EAAE,KAAK;IACR,CAAC,EAAE,KAAK;IACR,CAAC,EAAE,MAAM;IACT,CAAC,EAAE,MAAM;IACT,CAAC,EAAE,MAAM;IACT,CAAC,EAAE,MAAM;IACT,CAAC,EAAE,MAAM;IACT,CAAC,EAAE,MAAM;IACT,EAAE,EAAE,MAAM;IACV,EAAE,EAAE,MAAM;IACV,EAAE,EAAE,MAAM;IACV,EAAE,EAAE,MAAM;IACV,EAAE,EAAE,MAAM;IACV,EAAE,EAAE,OAAO;CACH,CAAC;AAEX,MAAM,CAAC,MAAM,MAAM,GAAG;IACpB,GAAG,EAAE,+BAA+B;IACpC,QAAQ,EAAE,gCAAgC;IAC1C,KAAK,EAAE,gCAAgC;IACvC,EAAE,EAAE,4BAA4B;CACxB,CAAC;AAEX,MAAM,CAAC,MAAM,QAAQ,GAAG;IACtB,OAAO,EAAE,IAAI;IACb,IAAI,EAAE,OAAO;IACb,IAAI,EAAE,MAAM;IACZ,IAAI,EAAE,MAAM;IACZ,MAAM,EAAE,MAAM;IACd,OAAO,EAAE,MAAM;CACP,CAAC;AAEX,0BAA0B;AAC1B,MAAM,CAAC,MAAM,KAAK,GAAG;IACnB,GAAG,EAAE,gBAAgB;IACrB,QAAQ,EAAE,gBAAgB;IAC1B,GAAG,EAAE,gBAAgB;IACrB,IAAI,EAAE,gBAAgB;IACtB,KAAK,EAAE,sBAAsB;IAC7B,KAAK,EAAE,gBAAgB;IACvB,KAAK,EAAE,kBAAkB;IACzB,MAAM,EAAE,qBAAqB;IAC7B,WAAW,EAAE,qBAAqB;IAClC,SAAS,EAAE,4BAA4B;IACvC,UAAU,EAAE,4BAA4B;IACxC,UAAU,EAAE,qBAAqB;CACzB,CAAC;AAEX,MAAM,CAAC,MAAM,WAAW,GAAG;IACzB,CAAC,EAAE,qBAAqB;IACxB,CAAC,EAAE,qBAAqB;IACxB,CAAC,EAAE,qBAAqB;IACxB,CAAC,EAAE,qBAAqB;IACxB,CAAC,EAAE,qBAAqB;IACxB,CAAC,EAAE,qBAAqB;IACxB,CAAC,EAAE,qBAAqB;IACxB,CAAC,EAAE,qBAAqB;IACxB,CAAC,EAAE,qBAAqB;CAChB,CAAC;AAEX,MAAM,CAAC,MAAM,MAAM,GAAG;IACpB,IAAI,EAAE,MAAM;IACZ,EAAE,EAAE,+BAA+B;IACnC,EAAE,EAAE,oEAAoE;IACxE,EAAE,EAAE,iCAAiC;IACrC,MAAM,EAAE,wCAAwC;CACxC,CAAC;AAEX,MAAM,CAAC,MAAM,MAAM,GAAG;IACpB,IAAI,EAAE,GAAG;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,KAAK;IACT,EAAE,EAAE,MAAM;IACV,EAAE,EAAE,MAAM;IACV,IAAI,EAAE,QAAQ;CACN,CAAC"}

package/package.json

@@ -1,11 +1,12 @@
 {
   "name": "@monoes/monodesign",
-  "version": "1.2.4",
+  "version": "1.2.6",
   "description": "Frontend design intelligence for AI agents — design tokens, antipattern detection, and the monodesign skill",
   "type": "module",
-  "main": "./src/index.ts",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
   "exports": {
-    ".": "./src/index.ts",
+    ".": "./dist/index.js",
     "./tokens": "./src/tokens.css",
     "./engine": "./cli/engine/detect-antipatterns.mjs",
     "./engine/browser": "./cli/engine/detect-antipatterns-browser.js"
@@ -15,12 +16,15 @@
   },
   "files": [
     "cli/",
+    "dist/",
     "skill/",
-    "src/",
+    "src/tokens.css",
     "NOTICE.md"
   ],
   "scripts": {
+    "prebuild": "node ../../../scripts/build-fs.mjs clean dist tsconfig.tsbuildinfo",
     "build": "tsc",
+    "prepublishOnly": "npm run build",
     "test": "node scripts/run-tests.mjs",
     "sync": "node scripts/sync-skill.mjs"
   },
@@ -44,7 +48,7 @@
     "marked": "^18.0.0"
   },
   "optionalDependencies": {
-    "@monoes/monobrowse": "^1.0.6",
+    "@monoes/monobrowse": "^1.0.7",
     "puppeteer": "^25.1.0"
   }
 }

package/skill/reference/hooks.md

@@ -10,7 +10,7 @@ Declare server-side template extensions under **`detector.extensions`** when the
 
 Manual `monomind design detect` scans use the same project filter config by default: `detector.ignoreRules`, `detector.ignoreFiles`, `detector.ignoreValues`, and `detector.designSystem.enabled`. `hook.enabled` only controls automatic hook execution, not manual CLI scans. Use `monomind design detect --no-config ...` for a raw detector run that ignores project config/context. Use `monomind design ignores ...` for direct CLI CRUD on the same detector ignores.
 
-Supported harnesses: Claude Code (`.claude/settings.local.json` in the project, which is gitignored so the hook stays machine-local; a hook you move into the shared `settings.json` is honored in place too), Codex (`.codex/hooks.json` in the project), Cursor (`.cursor/hooks.json` in the project), and GitHub Copilot (`.github/hooks/monodesign.json` in the project, a team-shared committed file that both the Copilot CLI and the cloud agent read). For the Copilot CLI, repo-level hooks fire once `.github/hooks/monodesign.json` is committed to the repository's default branch.
+Supported harnesses: Claude Code (`.claude/settings.local.json` in the project, which is gitignored so the hook stays machine-local; a hook you move into the shared `settings.json` is honored in place too), Codex (`.codex/config.toml` in the project), Cursor (`.cursor/hooks.json` in the project), and GitHub Copilot (`.github/hooks/monodesign.json` in the project, a team-shared committed file that both the Copilot CLI and the cloud agent read). For the Copilot CLI, repo-level hooks fire once `.github/hooks/monodesign.json` is committed to the repository's default branch.
 
 On **Cursor**, `preToolUse` checks proposed Write/Edit/Shell write content and denies only when the real detector finds an issue. The denial message is visible to the agent as the tool error, so the agent can reconsider before the bad write lands.
 
@@ -84,7 +84,7 @@ node {{scripts_path}}/hook-admin.mjs ignore-file "src/legacy/Card.tsx"
 - Never modify `.monodesign/config.json` or `.monodesign/config.local.json` by hand from this command. Always go through `hook-admin.mjs` so writes stay validated and the file shape stays consistent. One exception: `detector.extensions` has no admin action, so when the user asks to cover a template stack, edit that one field in `.monodesign/config.json` directly and leave the rest of the file untouched.
 - Do not edit the hook scripts themselves (`hook.mjs`, `hook-lib.mjs`, `hook-before-edit.mjs`) from this flow. Those are skill plumbing.
 - Cursor can block a proposed write when the detector finds a real issue. Claude Code, Codex, and GitHub Copilot do not block the edit; they emit a post-edit reminder instead. Disabling stops both blocking and reminders.
-- The hook is bundled with the Monodesign skill and installed through project-local manifests: `.claude/settings.local.json`, `.codex/hooks.json`, `.cursor/hooks.json`, and `.github/hooks/monodesign.json`. On Codex, the user must approve the hook via `/hooks` the first time. On Cursor, confirm hooks are enabled under Settings -> Hooks. On GitHub Copilot, the CLI loads `.github/hooks/monodesign.json` once it is committed to the repository's default branch, and the cloud agent reads it from the repo directly.
+- The hook is bundled with the Monodesign skill and installed through project-local manifests: `.claude/settings.local.json`, `.codex/config.toml`, `.cursor/hooks.json`, and `.github/hooks/monodesign.json`. On Codex, the user must approve the hook via `/hooks` the first time. On Cursor, confirm hooks are enabled under Settings -> Hooks. On GitHub Copilot, the CLI loads `.github/hooks/monodesign.json` once it is committed to the repository's default branch, and the cloud agent reads it from the repo directly.
 
 ## Failure modes
 

package/skill/scripts/hook-admin.mjs

@@ -74,24 +74,20 @@ const HOOK_MANIFEST_TARGETS = [
   {
     provider: '.agents',
     skillRel: '.agents/skills/monodesign',
-    destRel: '.codex/hooks.json',
-    manifest: () => ({
-      hooks: {
-        PostToolUse: [
-          {
-            matcher: 'Edit|Write|apply_patch',
-            hooks: [
-              {
-                type: 'command',
-                command: 'node ".agents/skills/monodesign/scripts/hook.mjs"',
-                timeout: TIMEOUT_SECONDS,
-                statusMessage: STATUS_MESSAGE,
-              },
-            ],
-          },
-        ],
-      },
-    }),
+    destRel: '.codex/config.toml',
+    format: 'toml',
+    manifest: () => [
+      '# monodesign:start native-hook',
+      '[[hooks.PostToolUse]]',
+      'matcher = "Edit|Write|apply_patch"',
+      '[[hooks.PostToolUse.hooks]]',
+      'type = "command"',
+      'command = "node .agents/skills/monodesign/scripts/hook.mjs"',
+      `timeout = ${TIMEOUT_SECONDS}`,
+      `statusMessage = "${STATUS_MESSAGE}"`,
+      '# monodesign:end native-hook',
+      '',
+    ].join('\n'),
   },
   {
     provider: '.cursor',
@@ -335,6 +331,19 @@ function repairHookManifests(cwd) {
     const dest = path.join(cwd, target.destRel);
     const sharedDest = target.sharedDestRel ? path.join(cwd, target.sharedDestRel) : null;
 
+    if (target.format === 'toml') {
+      const current = fs.existsSync(dest) ? safeReadText(dest) : '';
+      const next = mergeCodexHookConfig(current || '', target.manifest());
+      if (current === next) {
+        result.already.push(target.provider);
+        continue;
+      }
+      fs.mkdirSync(path.dirname(dest), { recursive: true });
+      fs.writeFileSync(dest, next);
+      result.written.push(target.provider);
+      continue;
+    }
+
     if (sharedDest && fileHasMonodesignHookMarker(sharedDest)) {
       pruneMonodesignHookFromManifest(dest);
       result.already.push(target.provider);
@@ -366,6 +375,30 @@ function repairHookManifests(cwd) {
   return result;
 }
 
+function mergeCodexHookConfig(existing, hookBlock) {
+  const completeBlock = /# monodesign:start native-hook[\s\S]*?# monodesign:end native-hook\n?/m;
+  const incompleteBlock = /# monodesign:start native-hook[\s\S]*$/m;
+  let merged = existing;
+  if (completeBlock.test(merged)) merged = merged.replace(completeBlock, hookBlock);
+  else if (incompleteBlock.test(merged)) merged = merged.replace(incompleteBlock, hookBlock);
+  else merged = `${merged.trimEnd()}${merged.trim() ? '\n\n' : ''}${hookBlock}`;
+  return enableCodexHooks(merged);
+}
+
+function enableCodexHooks(config) {
+  if (!/^\[features\]\s*$/m.test(config)) {
+    return `[features]\nhooks = true\n\n${config}`;
+  }
+  const lines = config.split(/\r?\n/);
+  const start = lines.findIndex((line) => /^\[features\]\s*$/.test(line));
+  let end = start + 1;
+  while (end < lines.length && !/^\[\[?[^\]]+\]\]?\s*$/.test(lines[end])) end++;
+  const hookIndex = lines.slice(start + 1, end).findIndex((line) => /^hooks\s*=/.test(line));
+  if (hookIndex === -1) lines.splice(end, 0, 'hooks = true');
+  else lines[start + 1 + hookIndex] = 'hooks = true';
+  return lines.join('\n');
+}
+
 function safeReadText(filePath) {
   try {
     return fs.readFileSync(filePath, 'utf-8');

package/skill/scripts/live/sveltekit-adapter.mjs

@@ -36,14 +36,17 @@ export function detectSvelteKitProject(cwd = process.cwd(), config = null) {
   };
 }
 
-export function applySvelteKitLiveAdapter({ cwd = process.cwd(), port, config = null } = {}) {
+export function applySvelteKitLiveAdapter({ cwd = process.cwd(), port, authCred, config = null } = {}) {
   if (!Number.isFinite(Number(port))) {
     throw new Error('SvelteKit live adapter requires a numeric port');
   }
+  if (!authCred) {
+    throw new Error('SvelteKit live adapter requires an auth credential');
+  }
   const detected = detectSvelteKitProject(cwd, config);
   if (!detected) return null;
 
-  ensureSvelteLiveRootComponent(cwd, Number(port));
+  ensureSvelteLiveRootComponent(cwd, Number(port), authCred);
 
   const layoutRel = detected.layoutFile;
   const layoutAbs = path.join(cwd, layoutRel);
@@ -136,18 +139,20 @@ export function unpatchSvelteLayout(content) {
   return out.replace(/\n{3,}/g, '\n\n');
 }
 
-export function ensureSvelteLiveRootComponent(cwd, port) {
+export function ensureSvelteLiveRootComponent(cwd, port, authCred) {
   const file = path.join(cwd, SVELTE_LIVE_ROOT_COMPONENT);
   fs.mkdirSync(path.dirname(file), { recursive: true });
-  fs.writeFileSync(file, buildSvelteLiveRootComponent(port), 'utf-8');
+  fs.writeFileSync(file, buildSvelteLiveRootComponent(port, authCred), 'utf-8');
   return file;
 }
 
-export function buildSvelteLiveRootComponent(port) {
+export function buildSvelteLiveRootComponent(port, authCred) {
+  const authQuery = new URLSearchParams();
+  authQuery.set('token', String(authCred ?? ''));
   return `<script>
   import { onMount } from 'svelte';
 
-  const LIVE_URL = 'http://localhost:${Number(port)}/live.js';
+  const LIVE_URL = 'http://localhost:${Number(port)}/live.js?${authQuery.toString()}';
   const HOST_ID = 'monodesign-live-root';
 
   onMount(() => {

package/skill/scripts/live-inject.mjs

@@ -16,7 +16,7 @@
 import fs from 'node:fs';
 import path from 'node:path';
 import { fileURLToPath } from 'node:url';
-import { resolveLiveConfigPath } from './lib/monodesign-paths.mjs';
+import { resolveLiveConfigPath, readLiveServerInfo } from './lib/monodesign-paths.mjs';
 import {
   applySvelteKitLiveAdapter,
   detectSvelteKitProject,
@@ -27,6 +27,8 @@ const __dirname = path.dirname(fileURLToPath(import.meta.url));
 const CONFIG_PATH = resolveLiveConfigPath({ cwd: process.cwd(), scriptsDir: __dirname });
 const MARKER_OPEN_TEXT = 'monodesign-live-start';
 const MARKER_CLOSE_TEXT = 'monodesign-live-end';
+// Query param name live-server.mjs checks on every protected route.
+const AUTH_QUERY_KEY = 'token';
 const IGNORE_MARKER_OPEN = '# monodesign-live-ignore-start';
 const IGNORE_MARKER_CLOSE = '# monodesign-live-ignore-end';
 
@@ -145,10 +147,19 @@ Output (JSON):
     console.error(JSON.stringify({ ok: false, error: 'missing_port' }));
     process.exit(1);
   }
+  // The injected tag must authenticate like every other server route does —
+  // read the per-process credential live-server.mjs persisted at startup.
+  const liveInfo = readLiveServerInfo(process.cwd());
+  const credentialFields = liveInfo?.info ?? {};
+  const authCred = credentialFields['token'];
+  if (!authCred) {
+    console.error(JSON.stringify({ ok: false, error: 'missing_auth_credential', detail: 'no running live server info found for this project — start it before injecting' }));
+    process.exit(1);
+  }
   const gitIgnore = ensureLiveGitIgnores(process.cwd());
 
   if (svelteKit) {
-    const adapterResult = applySvelteKitLiveAdapter({ cwd: process.cwd(), port, config });
+    const adapterResult = applySvelteKitLiveAdapter({ cwd: process.cwd(), port, authCred, config });
     console.log(JSON.stringify({ ok: true, port, adapter: 'sveltekit', gitIgnore, results: [adapterResult] }));
     return;
   }
@@ -158,7 +169,7 @@ Output (JSON):
     if (!fs.existsSync(absFile)) return { file: relFile, error: 'file_not_found' };
     const content = fs.readFileSync(absFile, 'utf-8');
     const withoutOld = revertCspMeta(removeTag(content, config.commentSyntax));
-    const withTag = insertTag(withoutOld, config, port, relFile);
+    const withTag = insertTag(withoutOld, config, port, authCred, relFile);
     if (withTag === withoutOld) {
       return { file: relFile, error: 'insertion_point_not_found', anchor: config.insertBefore || config.insertAfter };
     }
@@ -356,16 +367,18 @@ function validateConfig(cfg) {
 function commentOpen(syntax) { return syntax === 'jsx' ? '{/*' : '<!--'; }
 function commentClose(syntax) { return syntax === 'jsx' ? '*/}' : '-->'; }
 
-function buildTagBlock(syntax, port, filePath) {
+function buildTagBlock(syntax, port, authCred, filePath) {
   const open = commentOpen(syntax);
   const close = commentClose(syntax);
   // Astro processes <script> tags by default and rewrites src to its own
   // bundled URL. is:inline opts out so the literal external src survives.
   const isAstro = typeof filePath === 'string' && filePath.endsWith('.astro');
   const scriptAttrs = isAstro ? 'is:inline ' : '';
+  const authQuery = new URLSearchParams();
+  authQuery.set(AUTH_QUERY_KEY, authCred);
   return (
     open + ' ' + MARKER_OPEN_TEXT + ' ' + close + '\n' +
-    '<script ' + scriptAttrs + 'src="http://localhost:' + port + '/live.js"></script>\n' +
+    '<script ' + scriptAttrs + 'src="http://localhost:' + port + '/live.js?' + authQuery.toString() + '"></script>\n' +
     open + ' ' + MARKER_CLOSE_TEXT + ' ' + close + '\n'
   );
 }
@@ -387,9 +400,9 @@ function readLineEndingAt(content, index) {
   return '';
 }
 
-function insertTag(content, config, port, filePath) {
+function insertTag(content, config, port, authCred, filePath) {
   const lineEnding = detectLineEnding(content);
-  const block = normalizeLineEndings(buildTagBlock(config.commentSyntax, port, filePath), lineEnding);
+  const block = normalizeLineEndings(buildTagBlock(config.commentSyntax, port, authCred, filePath), lineEnding);
   // insertBefore: match the LAST occurrence. Anchors like `</body>` naturally
   // belong at the end, and the same literal can appear earlier in code blocks
   // within rendered documentation pages.

package/skill/scripts/live-server.mjs

@@ -63,6 +63,8 @@ const DESIGN_MD_PATH = PROJECT_CONTEXT.designPath
   : null;
 const DEFAULT_POLL_TIMEOUT = 600_000;   // 10 min — agent re-polls on timeout anyway
 const SSE_HEARTBEAT_INTERVAL = 30_000;  // keepalive ping every 30s
+// Query param name every protected route checks against the per-process credential.
+const AUTH_QUERY_KEY = 'token';
 
 // ---------------------------------------------------------------------------
 // Port detection
@@ -383,6 +385,20 @@ function statOrNull(filePath) {
   try { return fs.statSync(filePath); } catch { return null; }
 }
 
+// Shared gate for every protected route, including /live.js (see its call
+// site for why that one needs it too). Writes the 401 itself and returns
+// false so callers can `if (!requireAuthQueryCred(url, res)) return;`.
+function requireAuthQueryCred(url, res) {
+  const provided = url.searchParams.get(AUTH_QUERY_KEY);
+  const expected = state[AUTH_QUERY_KEY];
+  if (provided !== expected) {
+    res.writeHead(401);
+    res.end('Unauthorized');
+    return false;
+  }
+  return true;
+}
+
 // HTTP request handler
 // ---------------------------------------------------------------------------
 
@@ -398,6 +414,15 @@ function createRequestHandler({ detectScript, liveScriptParts }) {
 
     // --- Scripts ---
     if (p === '/live.js') {
+      // This response embeds the shared bearer credential (below) — unlike
+      // /detect.js and the vendored scripts, it must be gated the same way
+      // every OTHER protected route already is. Without this, requesting this
+      // one route defeats every other route's check: whoever fetches it walks
+      // away with the value that's supposed to distinguish the legitimate
+      // preview tab from any other page. See requireAuthQueryCred() below —
+      // callers must supply the credential the running server printed at
+      // startup (also mirrored into the live-server info file for tooling).
+      if (!requireAuthQueryCred(url, res)) return;
       // Re-read from disk each request so edits to live-browser.js land on
       // the next tab reload. No-store headers prevent browser caching across
       // sessions — during iteration, a cached old script silently breaks
@@ -604,8 +629,19 @@ function createRequestHandler({ detectScript, liveScriptParts }) {
       if (token !== state.token) { res.writeHead(401); res.end('Unauthorized'); return; }
       const filePath = url.searchParams.get('path');
       if (!filePath || filePath.includes('..')) { res.writeHead(400); res.end('Bad path'); return; }
-      const absPath = path.resolve(process.cwd(), filePath);
-      if (!absPath.startsWith(process.cwd())) { res.writeHead(403); res.end('Forbidden'); return; }
+      // Resolve symlinks on BOTH sides before comparing: a lexical prefix check
+      // (path.resolve + startsWith) can't tell a symlink that lexically resolves
+      // inside cwd from one that physically points outside it, and startsWith on
+      // its own also has no path-boundary — "/proj-evil" lexically "starts with"
+      // "/proj". realpath + path.relative closes both gaps (the same pattern
+      // already used correctly elsewhere in this package).
+      let root, absPath;
+      try {
+        root = fs.realpathSync(process.cwd());
+        absPath = fs.realpathSync(path.resolve(process.cwd(), filePath));
+      } catch { res.writeHead(404); res.end('File not found'); return; }
+      const rel = path.relative(root, absPath);
+      if (rel.startsWith('..') || path.isAbsolute(rel)) { res.writeHead(403); res.end('Forbidden'); return; }
       let content;
       try { content = fs.readFileSync(absPath, 'utf-8'); }
       catch { res.writeHead(404); res.end('File not found'); return; }

package/src/antipatterns.ts

@@ -1,164 +0,0 @@
-import { existsSync, readFileSync, statSync } from 'node:fs';
-import { extname } from 'node:path';
-
-export type AntipatternCategory = 'slop' | 'quality' | 'performance' | 'accessibility';
-
-export interface AntipatternFinding {
-  id: string;
-  category: AntipatternCategory;
-  name: string;
-  severity: 'error' | 'warning' | 'info';
-  message: string;
-  file?: string;
-  line?: number;
-}
-
-export interface DetectionResult {
-  findings: AntipatternFinding[];
-  fileCount: number;
-  durationMs: number;
-}
-
-// Shape of the bundled engine (cli/engine/detect-antipatterns.mjs).
-interface DetectorEngine {
-  detectText: (content: string, filePath: string, options?: Record<string, unknown>) => RawFinding[];
-  detectHtml: (filePath: string, options?: Record<string, unknown>) => Promise<RawFinding[]>;
-  detectUrl: (url: string, options?: Record<string, unknown>) => Promise<RawFinding[]>;
-  walkDir: (dir: string) => string[];
-  ANTIPATTERNS: Array<{ id: string; category?: string; severity?: string }>;
-}
-
-interface RawFinding {
-  antipattern?: string;
-  id?: string;
-  name?: string;
-  description?: string;
-  severity?: string;
-  file?: string;
-  line?: number;
-  snippet?: string;
-}
-
-// Typed as plain string so tsc emits a true dynamic import instead of trying
-// to type-resolve the untyped .mjs engine module.
-const ENGINE_SPECIFIER: string = '../cli/engine/detect-antipatterns.mjs';
-
-let enginePromise: Promise<DetectorEngine | null> | undefined;
-
-async function loadEngine(): Promise<DetectorEngine | null> {
-  enginePromise ??= import(ENGINE_SPECIFIER).then(
-    (mod) => mod as unknown as DetectorEngine,
-    () => null,
-  );
-  return enginePromise;
-}
-
-/** True when the bundled detection engine can be loaded. */
-export async function detectorAvailable(): Promise<boolean> {
-  return (await loadEngine()) !== null;
-}
-
-const HTML_EXTENSIONS = new Set(['.html', '.htm']);
-
-function mapSeverity(severity: string | undefined): AntipatternFinding['severity'] {
-  if (severity === 'error') return 'error';
-  if (severity === 'advisory' || severity === 'info') return 'info';
-  return 'warning';
-}
-
-function toFinding(raw: RawFinding, categoryById: Map<string, string>): AntipatternFinding {
-  const id = String(raw.antipattern ?? raw.id ?? '');
-  return {
-    id,
-    category: (categoryById.get(id) ?? 'quality') as AntipatternCategory,
-    name: String(raw.name ?? id),
-    severity: mapSeverity(raw.severity),
-    message: String(raw.description ?? raw.snippet ?? ''),
-    file: raw.file ? String(raw.file) : undefined,
-    line: raw.line ? Number(raw.line) : undefined,
-  };
-}
-
-async function detectFile(engine: DetectorEngine, filePath: string): Promise<RawFinding[]> {
-  if (HTML_EXTENSIONS.has(extname(filePath).toLowerCase())) {
-    return engine.detectHtml(filePath);
-  }
-  return engine.detectText(readFileSync(filePath, 'utf-8'), filePath);
-}
-
-/**
- * Run antipattern detection on a path (file, directory, or URL) using the
- * bundled detection engine (cli/engine/detect-antipatterns.mjs). URL targets
- * require the optional puppeteer dependency.
- */
-export async function detectAntipatterns(target: string): Promise<DetectionResult> {
-  const engine = await loadEngine();
-  if (!engine) {
-    throw new Error(
-      'The monodesign detection engine could not be loaded. ' +
-        'Reinstall @monoes/monodesign (its cli/engine/ directory is missing or its dependencies are not installed).',
-    );
-  }
-
-  const start = Date.now();
-  const categoryById = new Map(
-    engine.ANTIPATTERNS.map((ap) => [ap.id, ap.category ?? 'quality']),
-  );
-
-  let raw: RawFinding[] = [];
-  let fileCount = 0;
-
-  if (/^https?:\/\//i.test(target)) {
-    raw = await engine.detectUrl(target);
-    fileCount = 1;
-  } else if (existsSync(target) && statSync(target).isDirectory()) {
-    const files = engine.walkDir(target);
-    fileCount = files.length;
-    for (const file of files) {
-      raw.push(...(await detectFile(engine, file)));
-    }
-  } else if (existsSync(target)) {
-    raw = await detectFile(engine, target);
-    fileCount = 1;
-  } else {
-    throw new Error(`Target not found: ${target}`);
-  }
-
-  return {
-    findings: raw.map((f) => toFinding(f, categoryById)),
-    fileCount,
-    durationMs: Date.now() - start,
-  };
-}
-
-/**
- * Format findings as a human-readable string for display in agent output.
- */
-export function formatFindings(result: DetectionResult): string {
-  if (result.findings.length === 0) {
-    return `No antipatterns detected in ${result.fileCount} file(s). (${result.durationMs}ms)`;
-  }
-
-  const byCategory = result.findings.reduce<Record<string, AntipatternFinding[]>>((acc, f) => {
-    (acc[f.category] ??= []).push(f);
-    return acc;
-  }, {});
-
-  const lines: string[] = [
-    `${result.findings.length} finding(s) in ${result.fileCount} file(s) — ${result.durationMs}ms`,
-    '',
-  ];
-
-  for (const [cat, items] of Object.entries(byCategory)) {
-    lines.push(`[${cat.toUpperCase()}]`);
-    for (const f of items) {
-      const loc = f.file ? `  ${f.file}${f.line ? `:${f.line}` : ''}` : '';
-      lines.push(`  ${f.severity === 'error' ? '✗' : '⚠'} ${f.name}`);
-      lines.push(`    ${f.message}`);
-      if (loc) lines.push(loc);
-    }
-    lines.push('');
-  }
-
-  return lines.join('\n');
-}