@patze/code-cli 0.10.2

package/CHANGELOG.md

@@ -0,0 +1,92 @@
+# Changelog
+
+All notable changes to `@patze/code-cli` are documented here.
+
+Format follows [Keep a Changelog](https://keepachangelog.com/en/1.1.0/).
+
+## [0.10.2] - 2026-05-27
+
+### Added (internal beta rollout)
+
+- `scripts/install-beta.sh` — npm `@beta` or local tarball install + verify
+- `patze doctor [--check]` — read-only diagnostics (version, node, redacted config, package health, trust-loop posture); network only with `--check`
+- Rollout docs: `install-beta`, `uninstall-reset`, `beta-tester-checklist`, `beta-feedback-template`, `release-checklist`, `known-limitations`, `smoke-command-guide`
+- `tests/doctor.test.mjs`, `tests/docs-secrets.test.mjs` — redaction and docs hygiene
+
+### Changed
+
+- `verify-pack` required paths include rollout docs
+- `smoke-beta` asserts `patze doctor` read-only output
+- README internal beta section and command table updated
+
+## [0.10.1] - 2026-05-27
+
+### Added (internal beta hardening)
+
+- `scripts/verify-pack.mjs` — publish tarball audit (blocked paths, required files, secret-like content scan)
+- `scripts/smoke-beta.mjs` — clean temp workspace smoke + local `npm pack` install check
+- `docs/safety-model.md` — fail-closed safety boundaries for beta testers
+- `docs/trust-loop.md` — operator guide for the interactive trust loop
+- `docs/internal-beta.md` — internal beta install, verification, and known limits
+- README internal beta quickstart and expanded implemented vs planned command tables
+
+### Changed
+
+- `npm run verify` now includes smoke test after unit tests
+- `help` output aligned with Phase 4 trust-loop commands
+
+## [0.10.0] - 2026-05-27
+
+### Added
+
+- **Phase 4E:** Session apply history (process-local), trust-loop snapshot on `/status` and `/context`, drift recovery UX
+- Verify failure blocks stale `/approve` and `/apply` until `/reject` or passing `/verify`
+- `/reject` clears drift recovery without modifying files
+
+### Changed
+
+- Richer `/status` and `/context` with masked digests, last apply/verify summaries
+
+## [0.9.0] - 2026-05-27
+
+### Added
+
+- **Phase 4D:** Interactive `/verify` — local read-only hash verification after gated apply
+- Per-file `beforeHash` / `afterHash` on apply; gate consumed tracking; repeated apply refused
+- `patze code verify` — help-only local summary (no shell, no network)
+
+## [0.8.0] - 2026-05-27
+
+### Added
+
+- **Phase 4C:** Gated interactive `/apply` with typed `APPLY <masked-digest>` confirmation
+- `edit-with-approval` permission mode; unified diff apply with workspace guards
+- `patze code apply` remains disabled (interactive only)
+
+## [0.6.0] - 2026-05-27
+
+### Added
+
+- **Phase 4B:** Approval gate after `/diff` → `/approve` (no file writes)
+
+## [0.5.0] - 2026-05-27
+
+### Added
+
+- **Phase 4A:** Read-only `/diff` and `patze code diff` for server patch proposals
+
+## [0.4.0] - 2026-05-27
+
+### Added
+
+- Interactive agent loop, slash commands, free-text prompts
+
+## [0.3.0] - 2026-05-27
+
+### Added
+
+- `patze code inspect`, `patze code plan --preview`, local workspace boundaries
+
+[0.10.2]: https://github.com/patzeagent/patzelife-plugin-agentdiscord/compare/patze-code-cli-v0.10.1...patze-code-cli-v0.10.2
+[0.10.1]: https://github.com/patzeagent/patzelife-plugin-agentdiscord/compare/patze-code-cli-v0.10.0...patze-code-cli-v0.10.1
+[0.10.0]: https://github.com/patzeagent/patzelife-plugin-agentdiscord/releases/tag/patze-code-cli-v0.10.0

package/NOTICE.md

@@ -0,0 +1,17 @@
+# NOTICE
+
+## Patze Code CLI
+
+Copyright (c) Patze. All rights reserved.
+
+This package is **proprietary** unless and until a public license is explicitly declared.
+
+## Third-party references
+
+Patze Code CLI is designed with reference to publicly documented terminal-agent patterns. We do **not** copy OpenAI Codex source code or branding into this product.
+
+Internal development may consult the Cursor cookbook `coding-agent-cli` sample under `.cookbook-vendor/` (not published to npm). Any future adaptation of Apache-2.0 licensed code will preserve LICENSE/NOTICE attribution in this file.
+
+## Trademarks
+
+"Codex" and "OpenAI" are trademarks of their respective owners. Patze Code is an independent product.

package/README.md

@@ -0,0 +1,177 @@
+# Patze Code CLI
+
+Professional local terminal client for Patze Code / PatzeAgents.
+
+Patze Code runs coding tasks against your workspace while keeping **PatzeAgents server** as the authority for auth, entitlements, run records, artifacts, verification, and policy.
+
+> **Internal beta (0.10.x):** Trust loop complete through verify + drift recovery. See [`docs/internal-beta.md`](docs/internal-beta.md) and [`docs/install-beta.md`](docs/install-beta.md). Not yet `npm latest` / 1.0.
+
+## Requirements
+
+- **Node.js** 20+
+- Patze API reachable from your machine (optional — for server-backed preview)
+
+## Install (internal beta)
+
+```bash
+# Helper script (monorepo)
+cd packages/patze-code-cli
+./scripts/install-beta.sh local
+
+# Or manual tarball
+npm run build && npm pack
+npm install -g ./patze-code-cli-0.10.2.tgz
+patze --version
+```
+
+Registry (when published):
+
+```bash
+npm install -g @patze/code-cli@beta
+# or pinned: @patze/code-cli@0.10.2
+patze --version
+```
+
+Full guide: [`docs/install-beta.md`](docs/install-beta.md) · Checklist: [`docs/beta-tester-checklist.md`](docs/beta-tester-checklist.md)
+
+## Quick start (beta tester)
+
+```bash
+# 1. Clean fixture workspace
+mkdir -p /tmp/patze-beta && cd /tmp/patze-beta
+git init
+
+# 2. Optional — server preview auth (use env, never commit secrets)
+export PATZE_CODE_API=https://api.example.com
+export PATZE_CODE_TOKEN=<internal-api-key>
+export PATZE_CODE_USER_ID=<user-uuid>
+
+# 3. Read-only checks
+patze status
+patze doctor
+patze code inspect
+patze goal "Review README" --dry-run
+
+# 4. Interactive trust loop
+patze
+```
+
+Inside `patze`:
+
+```text
+/goal Update README quickstart
+/plan
+/diff
+/permissions suggest
+/approve
+/permissions edit-with-approval
+/apply
+APPLY artifa…90ab
+/verify
+/status
+```
+
+## Trust loop
+
+```
+prompt → inspect → plan → diff → permissions → approve → apply → verify
+```
+
+Docs: [`docs/trust-loop.md`](docs/trust-loop.md) · [`docs/safety-model.md`](docs/safety-model.md)
+
+## Command status (0.10.2)
+
+### Interactive (`patze` shell)
+
+| Command | Status | Notes |
+|---------|--------|-------|
+| free-text prompt | ✅ | Agent loop (inspect → plan) |
+| `/help` | ✅ | |
+| `/status [--check]` | ✅ | Trust-loop snapshot + auth posture |
+| `/context` | ✅ | Session state (digests masked) |
+| `/goal <task>` | ✅ | Local dry-run plan |
+| `/inspect` | ✅ | Read-only workspace scan |
+| `/plan [task]` | ✅ | Server preview when auth ready |
+| `/permissions [mode]` | ✅ | Selector + direct set |
+| `/tools` | ✅ | Tool availability catalog |
+| `/diff` | ✅ | Read-only patch preview |
+| `/approve` | ✅ | Approval gate (no writes) |
+| `/apply` | ✅ | Gated apply + typed confirmation |
+| `/verify` | ✅ | Local read-only hash verify |
+| `/reject` | ✅ | Clear gate / drift recovery |
+| `/reset` | ✅ | Clear agent session state |
+| `/clear` | ✅ | Clear transcript |
+| `/exit` | ✅ | |
+
+### Top-level CLI
+
+| Command | Status | Notes |
+|---------|--------|-------|
+| `patze` | ✅ | Interactive shell (default) |
+| `patze --version` | ✅ | |
+| `patze status [--check]` | ✅ | |
+| `patze doctor [--check]` | ✅ | Read-only; network only with `--check` |
+| `patze login <api> <token> <id>` | ✅ | Writes local config |
+| `patze goal "<task>" --dry-run` | ✅ | Non-interactive plan |
+| `patze code inspect` | ✅ | |
+| `patze code plan --preview` | ✅ | Needs auth |
+| `patze code diff` | ✅ | Read-only |
+| `patze code apply` | 🚫 disabled | Interactive `/apply` only |
+| `patze code verify` | ℹ️ help-only | No session apply → summary only |
+| `patze runs …` | 📋 planned | No runs sync in beta |
+| `patze config` | 📋 planned | |
+
+### Permission modes
+
+| Mode | Status | Capabilities |
+|------|--------|--------------|
+| `read-only` | ✅ | inspect, plan, diff |
+| `suggest` | ✅ | + approval gate |
+| `edit-with-approval` | ✅ | + gated `/apply` |
+| `full-auto` | 🚫 forbidden | Never enabled |
+
+Legend: ✅ implemented · 🚫 explicitly disabled · 📋 planned · ℹ️ informational only
+
+## Safety model (summary)
+
+- No auto-apply, no `--yes`, no shell execution from verify
+- Apply is interactive-only with explicit `APPLY <masked-digest>` confirmation
+- All session digests masked; tokens never printed in full
+- Verify fail-closed; drift recovery blocks stale approve/apply
+- **`full-auto` forbidden permanently**
+
+Full detail: [`docs/safety-model.md`](docs/safety-model.md)
+
+## Development & release verify
+
+```bash
+cd packages/patze-code-cli
+npm run verify        # version + pack audit + typecheck + tests + smoke
+npm run verify:pack   # tarball audit (--verbose for JSON summary)
+npm run smoke         # temp workspace + local npm pack install
+```
+
+## Release blockers (before npm `latest` / 1.0)
+
+- [ ] Public npm publish policy + scoped access review
+- [ ] Shell-based verify (npm test/lint) as optional gated capability
+- [ ] `patze runs` read-only sync (no mutation path)
+- [ ] Server apply receipt correlation (read-only)
+- [ ] Cross-restart session persistence decision
+- [ ] OAuth / dashboard login flow (replace dev `login` token paste)
+- [ ] Production error telemetry without leaking secrets
+
+## Documentation
+
+- Architecture: [`docs/patze-cli-architecture.md`](docs/patze-cli-architecture.md)
+- Internal beta: [`docs/internal-beta.md`](docs/internal-beta.md)
+- Install: [`docs/install-beta.md`](docs/install-beta.md)
+- Beta checklist: [`docs/beta-tester-checklist.md`](docs/beta-tester-checklist.md)
+- Feedback template: [`docs/beta-feedback-template.md`](docs/beta-feedback-template.md)
+- Known limits: [`docs/known-limitations.md`](docs/known-limitations.md)
+- Release checklist: [`docs/release-checklist.md`](docs/release-checklist.md)
+- Changelog: [`CHANGELOG.md`](CHANGELOG.md)
+
+## License
+
+Proprietary — see [`NOTICE.md`](NOTICE.md).

package/VERSION

@@ -0,0 +1 @@
+0.10.2

package/bin/patze.mjs

@@ -0,0 +1,7 @@
+#!/usr/bin/env node
+import { pathToFileURL } from "node:url"
+import { dirname, resolve } from "node:path"
+import { fileURLToPath } from "node:url"
+
+const root = resolve(dirname(fileURLToPath(import.meta.url)), "..")
+await import(pathToFileURL(resolve(root, "dist/cli/main.js")).href)

package/dist/backend/auth.d.ts

@@ -0,0 +1,13 @@
+export type AuthState = {
+    configured: boolean;
+    api: string | null;
+    userId: string | null;
+    tokenPresent: boolean;
+};
+export declare function describeAuth(state: AuthState): string[];
+export declare function isAuthConfigured(input: {
+    api: string | null;
+    token: string | null;
+    userId: string | null;
+}): boolean;
+//# sourceMappingURL=auth.d.ts.map

package/dist/backend/auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../src/backend/auth.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,SAAS,GAAG;IACtB,UAAU,EAAE,OAAO,CAAA;IACnB,GAAG,EAAE,MAAM,GAAG,IAAI,CAAA;IAClB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAA;IACrB,YAAY,EAAE,OAAO,CAAA;CACtB,CAAA;AAED,wBAAgB,YAAY,CAAC,KAAK,EAAE,SAAS,GAAG,MAAM,EAAE,CAOvD;AAED,wBAAgB,gBAAgB,CAAC,KAAK,EAAE;IACtC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAA;IAClB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;IACpB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAA;CACtB,GAAG,OAAO,CAEV"}

package/dist/backend/auth.js

@@ -0,0 +1,12 @@
+export function describeAuth(state) {
+    const lines = [];
+    lines.push(`api: ${state.api ?? "not set"}`);
+    lines.push(`user: ${state.userId ?? "not set"}`);
+    lines.push(`token: ${state.tokenPresent ? "configured" : "missing"}`);
+    lines.push(`ready: ${state.configured ? "yes" : "no"}`);
+    return lines;
+}
+export function isAuthConfigured(input) {
+    return Boolean(input.api && input.token && input.userId);
+}
+//# sourceMappingURL=auth.js.map

package/dist/backend/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../src/backend/auth.ts"],"names":[],"mappings":"AAOA,MAAM,UAAU,YAAY,CAAC,KAAgB;IAC3C,MAAM,KAAK,GAAa,EAAE,CAAA;IAC1B,KAAK,CAAC,IAAI,CAAC,QAAQ,KAAK,CAAC,GAAG,IAAI,SAAS,EAAE,CAAC,CAAA;IAC5C,KAAK,CAAC,IAAI,CAAC,SAAS,KAAK,CAAC,MAAM,IAAI,SAAS,EAAE,CAAC,CAAA;IAChD,KAAK,CAAC,IAAI,CAAC,UAAU,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAA;IACrE,KAAK,CAAC,IAAI,CAAC,UAAU,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAA;IACvD,OAAO,KAAK,CAAA;AACd,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,KAIhC;IACC,OAAO,OAAO,CAAC,KAAK,CAAC,GAAG,IAAI,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,CAAC,CAAA;AAC1D,CAAC"}

package/dist/backend/client.d.ts

@@ -0,0 +1,14 @@
+import type { ResolvedConfig } from "../config/config.js";
+export type HealthProbe = {
+    ok: boolean;
+    status: number | null;
+    message: string;
+};
+export declare class PatzeBackendClient {
+    private readonly config;
+    constructor(config: ResolvedConfig);
+    get baseUrl(): string | null;
+    buildHeaders(): Record<string, string>;
+    probeHealth(timeoutMs?: number): Promise<HealthProbe>;
+}
+//# sourceMappingURL=client.d.ts.map

package/dist/backend/client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../src/backend/client.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAA;AAEzD,MAAM,MAAM,WAAW,GAAG;IACxB,EAAE,EAAE,OAAO,CAAA;IACX,MAAM,EAAE,MAAM,GAAG,IAAI,CAAA;IACrB,OAAO,EAAE,MAAM,CAAA;CAChB,CAAA;AAED,qBAAa,kBAAkB;IACjB,OAAO,CAAC,QAAQ,CAAC,MAAM;gBAAN,MAAM,EAAE,cAAc;IAEnD,IAAI,OAAO,IAAI,MAAM,GAAG,IAAI,CAE3B;IAED,YAAY,IAAI,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC;IAchC,WAAW,CAAC,SAAS,SAAQ,GAAG,OAAO,CAAC,WAAW,CAAC;CA4B3D"}

package/dist/backend/client.js

@@ -0,0 +1,51 @@
+export class PatzeBackendClient {
+    config;
+    constructor(config) {
+        this.config = config;
+    }
+    get baseUrl() {
+        return this.config.api;
+    }
+    buildHeaders() {
+        const headers = {
+            Accept: "application/json",
+            "Content-Type": "application/json",
+        };
+        if (this.config.token) {
+            headers["X-Internal-API-Key"] = this.config.token;
+        }
+        if (this.config.userId) {
+            headers["X-Internal-User-Id"] = this.config.userId;
+        }
+        return headers;
+    }
+    async probeHealth(timeoutMs = 5_000) {
+        if (!this.config.api) {
+            return { ok: false, status: null, message: "API URL not configured" };
+        }
+        const controller = new AbortController();
+        const timer = setTimeout(() => controller.abort(), timeoutMs);
+        try {
+            const response = await fetch(new URL("/health", this.config.api), {
+                method: "GET",
+                signal: controller.signal,
+            });
+            if (!response.ok) {
+                return {
+                    ok: false,
+                    status: response.status,
+                    message: `health returned ${response.status}`,
+                };
+            }
+            return { ok: true, status: response.status, message: "reachable" };
+        }
+        catch (error) {
+            const message = error instanceof Error ? error.message : "health probe failed";
+            return { ok: false, status: null, message };
+        }
+        finally {
+            clearTimeout(timer);
+        }
+    }
+}
+//# sourceMappingURL=client.js.map

package/dist/backend/client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../../src/backend/client.ts"],"names":[],"mappings":"AAQA,MAAM,OAAO,kBAAkB;IACA;IAA7B,YAA6B,MAAsB;QAAtB,WAAM,GAAN,MAAM,CAAgB;IAAG,CAAC;IAEvD,IAAI,OAAO;QACT,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAA;IACxB,CAAC;IAED,YAAY;QACV,MAAM,OAAO,GAA2B;YACtC,MAAM,EAAE,kBAAkB;YAC1B,cAAc,EAAE,kBAAkB;SACnC,CAAA;QACD,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;YACtB,OAAO,CAAC,oBAAoB,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAA;QACnD,CAAC;QACD,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;YACvB,OAAO,CAAC,oBAAoB,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAA;QACpD,CAAC;QACD,OAAO,OAAO,CAAA;IAChB,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,SAAS,GAAG,KAAK;QACjC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC;YACrB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,wBAAwB,EAAE,CAAA;QACvE,CAAC;QAED,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAA;QACxC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,SAAS,CAAC,CAAA;QAE7D,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,IAAI,GAAG,CAAC,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE;gBAChE,MAAM,EAAE,KAAK;gBACb,MAAM,EAAE,UAAU,CAAC,MAAM;aAC1B,CAAC,CAAA;YACF,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACjB,OAAO;oBACL,EAAE,EAAE,KAAK;oBACT,MAAM,EAAE,QAAQ,CAAC,MAAM;oBACvB,OAAO,EAAE,mBAAmB,QAAQ,CAAC,MAAM,EAAE;iBAC9C,CAAA;YACH,CAAC;YACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,CAAA;QACpE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,qBAAqB,CAAA;YAC9E,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,CAAA;QAC7C,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,KAAK,CAAC,CAAA;QACrB,CAAC;IACH,CAAC;CACF"}

package/dist/backend/preview-client.d.ts

@@ -0,0 +1,33 @@
+import type { PatchProposalRaw } from "../runtime/patch-proposal.js";
+export type PreviewRouteResponse = {
+    status: string;
+    error_code: string;
+    artifact_digest: string;
+    preview_digest: string;
+    finding_codes: string[];
+    approval_required: boolean;
+    canary_eligible: boolean;
+    no_auto_apply: boolean;
+    digest: string;
+    patch_proposal?: PatchProposalRaw | null;
+};
+export type PreviewClientResult = {
+    ok: true;
+    response: PreviewRouteResponse;
+    httpStatus: number;
+} | {
+    ok: false;
+    kind: "auth" | "network" | "server";
+    message: string;
+    httpStatus: number | null;
+};
+export type FetchLike = typeof fetch;
+export declare function postUserTaskPreview(input: {
+    apiBase: string;
+    headers: Record<string, string>;
+    payload: unknown;
+    fetchImpl?: FetchLike;
+    timeoutMs?: number;
+}): Promise<PreviewClientResult>;
+export declare function normalizePreviewResponse(body: unknown): PreviewRouteResponse | null;
+//# sourceMappingURL=preview-client.d.ts.map

package/dist/backend/preview-client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"preview-client.d.ts","sourceRoot":"","sources":["../../src/backend/preview-client.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,8BAA8B,CAAA;AAEpE,MAAM,MAAM,oBAAoB,GAAG;IACjC,MAAM,EAAE,MAAM,CAAA;IACd,UAAU,EAAE,MAAM,CAAA;IAClB,eAAe,EAAE,MAAM,CAAA;IACvB,cAAc,EAAE,MAAM,CAAA;IACtB,aAAa,EAAE,MAAM,EAAE,CAAA;IACvB,iBAAiB,EAAE,OAAO,CAAA;IAC1B,eAAe,EAAE,OAAO,CAAA;IACxB,aAAa,EAAE,OAAO,CAAA;IACtB,MAAM,EAAE,MAAM,CAAA;IACd,cAAc,CAAC,EAAE,gBAAgB,GAAG,IAAI,CAAA;CACzC,CAAA;AAED,MAAM,MAAM,mBAAmB,GAC3B;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,QAAQ,EAAE,oBAAoB,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,GAChE;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,IAAI,EAAE,MAAM,GAAG,SAAS,GAAG,QAAQ,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CAAA;AAElG,MAAM,MAAM,SAAS,GAAG,OAAO,KAAK,CAAA;AAEpC,wBAAsB,mBAAmB,CAAC,KAAK,EAAE;IAC/C,OAAO,EAAE,MAAM,CAAA;IACf,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAC/B,OAAO,EAAE,OAAO,CAAA;IAChB,SAAS,CAAC,EAAE,SAAS,CAAA;IACrB,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB,GAAG,OAAO,CAAC,mBAAmB,CAAC,CA6D/B;AAiBD,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,OAAO,GAAG,oBAAoB,GAAG,IAAI,CAyBnF"}

package/dist/backend/preview-client.js

@@ -0,0 +1,104 @@
+export async function postUserTaskPreview(input) {
+    const fetchImpl = input.fetchImpl ?? fetch;
+    const url = new URL("/internal/patze-code/user-task-preview", input.apiBase);
+    const controller = new AbortController();
+    const timer = setTimeout(() => controller.abort(), input.timeoutMs ?? 60_000);
+    try {
+        const response = await fetchImpl(url, {
+            method: "POST",
+            headers: input.headers,
+            body: JSON.stringify(input.payload),
+            signal: controller.signal,
+        });
+        let body;
+        try {
+            body = await response.json();
+        }
+        catch {
+            return {
+                ok: false,
+                kind: "server",
+                message: `preview returned non-JSON (${response.status})`,
+                httpStatus: response.status,
+            };
+        }
+        if (response.status === 401 || response.status === 403) {
+            return {
+                ok: false,
+                kind: "auth",
+                message: extractDetail(body) ?? `preview auth failed (${response.status})`,
+                httpStatus: response.status,
+            };
+        }
+        if (!response.ok) {
+            return {
+                ok: false,
+                kind: "server",
+                message: extractDetail(body) ?? `preview failed (${response.status})`,
+                httpStatus: response.status,
+            };
+        }
+        const normalized = normalizePreviewResponse(body);
+        if (!normalized) {
+            return {
+                ok: false,
+                kind: "server",
+                message: "preview returned unexpected shape",
+                httpStatus: response.status,
+            };
+        }
+        return { ok: true, response: normalized, httpStatus: response.status };
+    }
+    catch (error) {
+        const message = error instanceof Error ? error.message : "preview request failed";
+        return { ok: false, kind: "network", message, httpStatus: null };
+    }
+    finally {
+        clearTimeout(timer);
+    }
+}
+function extractDetail(body) {
+    if (!body || typeof body !== "object") {
+        return null;
+    }
+    const detail = body.detail;
+    if (typeof detail === "string" && detail.trim()) {
+        return detail.trim();
+    }
+    const errorCode = body.error_code;
+    if (typeof errorCode === "string" && errorCode.trim()) {
+        return errorCode.trim();
+    }
+    return null;
+}
+export function normalizePreviewResponse(body) {
+    if (!body || typeof body !== "object") {
+        return null;
+    }
+    const record = body;
+    const findingCodes = Array.isArray(record.finding_codes)
+        ? record.finding_codes.filter((item) => typeof item === "string")
+        : [];
+    if (typeof record.status !== "string") {
+        return null;
+    }
+    return {
+        status: record.status,
+        error_code: typeof record.error_code === "string" ? record.error_code : "",
+        artifact_digest: typeof record.artifact_digest === "string" ? record.artifact_digest : "",
+        preview_digest: typeof record.preview_digest === "string" ? record.preview_digest : "",
+        finding_codes: findingCodes,
+        approval_required: record.approval_required === true,
+        canary_eligible: record.canary_eligible === true,
+        no_auto_apply: record.no_auto_apply !== false,
+        digest: typeof record.digest === "string" ? record.digest : "",
+        patch_proposal: parseOptionalPatchProposal(record.patch_proposal),
+    };
+}
+function parseOptionalPatchProposal(value) {
+    if (!value || typeof value !== "object" || Array.isArray(value)) {
+        return null;
+    }
+    return value;
+}
+//# sourceMappingURL=preview-client.js.map

package/dist/backend/preview-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"preview-client.js","sourceRoot":"","sources":["../../src/backend/preview-client.ts"],"names":[],"mappings":"AAqBA,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,KAMzC;IACC,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,IAAI,KAAK,CAAA;IAC1C,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,wCAAwC,EAAE,KAAK,CAAC,OAAO,CAAC,CAAA;IAC5E,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAA;IACxC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,KAAK,CAAC,SAAS,IAAI,MAAM,CAAC,CAAA;IAE7E,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE;YACpC,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC;YACnC,MAAM,EAAE,UAAU,CAAC,MAAM;SAC1B,CAAC,CAAA;QAEF,IAAI,IAAa,CAAA;QACjB,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAA;QAC9B,CAAC;QAAC,MAAM,CAAC;YACP,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,IAAI,EAAE,QAAQ;gBACd,OAAO,EAAE,8BAA8B,QAAQ,CAAC,MAAM,GAAG;gBACzD,UAAU,EAAE,QAAQ,CAAC,MAAM;aAC5B,CAAA;QACH,CAAC;QAED,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YACvD,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,IAAI,EAAE,MAAM;gBACZ,OAAO,EAAE,aAAa,CAAC,IAAI,CAAC,IAAI,wBAAwB,QAAQ,CAAC,MAAM,GAAG;gBAC1E,UAAU,EAAE,QAAQ,CAAC,MAAM;aAC5B,CAAA;QACH,CAAC;QAED,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,IAAI,EAAE,QAAQ;gBACd,OAAO,EAAE,aAAa,CAAC,IAAI,CAAC,IAAI,mBAAmB,QAAQ,CAAC,MAAM,GAAG;gBACrE,UAAU,EAAE,QAAQ,CAAC,MAAM;aAC5B,CAAA;QACH,CAAC;QAED,MAAM,UAAU,GAAG,wBAAwB,CAAC,IAAI,CAAC,CAAA;QACjD,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,IAAI,EAAE,QAAQ;gBACd,OAAO,EAAE,mCAAmC;gBAC5C,UAAU,EAAE,QAAQ,CAAC,MAAM;aAC5B,CAAA;QACH,CAAC;QAED,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,UAAU,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAA;IACxE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,wBAAwB,CAAA;QACjF,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,CAAA;IAClE,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,KAAK,CAAC,CAAA;IACrB,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,IAAa;IAClC,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QACtC,OAAO,IAAI,CAAA;IACb,CAAC;IACD,MAAM,MAAM,GAAI,IAA6B,CAAC,MAAM,CAAA;IACpD,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;QAChD,OAAO,MAAM,CAAC,IAAI,EAAE,CAAA;IACtB,CAAC;IACD,MAAM,SAAS,GAAI,IAAiC,CAAC,UAAU,CAAA;IAC/D,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,CAAC,IAAI,EAAE,EAAE,CAAC;QACtD,OAAO,SAAS,CAAC,IAAI,EAAE,CAAA;IACzB,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,IAAa;IACpD,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QACtC,OAAO,IAAI,CAAA;IACb,CAAC;IACD,MAAM,MAAM,GAAG,IAA+B,CAAA;IAC9C,MAAM,YAAY,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,aAAa,CAAC;QACtD,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,IAAI,EAAkB,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC;QACjF,CAAC,CAAC,EAAE,CAAA;IAEN,IAAI,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;QACtC,OAAO,IAAI,CAAA;IACb,CAAC;IAED,OAAO;QACL,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,UAAU,EAAE,OAAO,MAAM,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE;QAC1E,eAAe,EAAE,OAAO,MAAM,CAAC,eAAe,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE;QACzF,cAAc,EAAE,OAAO,MAAM,CAAC,cAAc,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE;QACtF,aAAa,EAAE,YAAY;QAC3B,iBAAiB,EAAE,MAAM,CAAC,iBAAiB,KAAK,IAAI;QACpD,eAAe,EAAE,MAAM,CAAC,eAAe,KAAK,IAAI;QAChD,aAAa,EAAE,MAAM,CAAC,aAAa,KAAK,KAAK;QAC7C,MAAM,EAAE,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE;QAC9D,cAAc,EAAE,0BAA0B,CAAC,MAAM,CAAC,cAAc,CAAC;KAClE,CAAA;AACH,CAAC;AAED,SAAS,0BAA0B,CAAC,KAAc;IAChD,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAChE,OAAO,IAAI,CAAA;IACb,CAAC;IACD,OAAO,KAA+C,CAAA;AACxD,CAAC"}

package/dist/backend/preview-payload.d.ts

@@ -0,0 +1,50 @@
+import type { ResolvedConfig } from "../config/config.js";
+export type PreviewTaskPayload = {
+    owner_user_id: string;
+    task_input: {
+        objective: string;
+        workflow_mode: string;
+        repo_id: string;
+        workspace_scope: string;
+        allowed_paths: string[];
+        denied_paths: string[];
+        consent: {
+            status: "granted";
+            consent_digest: string;
+            granted_by_digest: string;
+        };
+        approval_requirement: {
+            required: true;
+            reason: string;
+            review_artifact_digest: string;
+        };
+        expected_artifacts: string[];
+        rollback_notes: string[];
+        canary_requested: false;
+        metadata: {
+            source: string;
+        };
+        repo_metadata: {
+            repo: string;
+        };
+    };
+    policy: {
+        repo_id: string;
+        repo_allowlist: string[];
+        no_auto_apply: true;
+        auto_apply_requested: false;
+        cloud_requested: false;
+        pr_requested: false;
+        public_route_requested: false;
+        ui_requested: false;
+        cursor_canary_requested: false;
+        frontend_api_key_exposure_marker: false;
+        require_review_artifact_for_canary: true;
+    };
+};
+export declare function buildPreviewPayload(input: {
+    objective: string;
+    cwd: string;
+    config: ResolvedConfig;
+}): PreviewTaskPayload;
+//# sourceMappingURL=preview-payload.d.ts.map

package/dist/backend/preview-payload.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"preview-payload.d.ts","sourceRoot":"","sources":["../../src/backend/preview-payload.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAA;AAGzD,MAAM,MAAM,kBAAkB,GAAG;IAC/B,aAAa,EAAE,MAAM,CAAA;IACrB,UAAU,EAAE;QACV,SAAS,EAAE,MAAM,CAAA;QACjB,aAAa,EAAE,MAAM,CAAA;QACrB,OAAO,EAAE,MAAM,CAAA;QACf,eAAe,EAAE,MAAM,CAAA;QACvB,aAAa,EAAE,MAAM,EAAE,CAAA;QACvB,YAAY,EAAE,MAAM,EAAE,CAAA;QACtB,OAAO,EAAE;YACP,MAAM,EAAE,SAAS,CAAA;YACjB,cAAc,EAAE,MAAM,CAAA;YACtB,iBAAiB,EAAE,MAAM,CAAA;SAC1B,CAAA;QACD,oBAAoB,EAAE;YACpB,QAAQ,EAAE,IAAI,CAAA;YACd,MAAM,EAAE,MAAM,CAAA;YACd,sBAAsB,EAAE,MAAM,CAAA;SAC/B,CAAA;QACD,kBAAkB,EAAE,MAAM,EAAE,CAAA;QAC5B,cAAc,EAAE,MAAM,EAAE,CAAA;QACxB,gBAAgB,EAAE,KAAK,CAAA;QACvB,QAAQ,EAAE;YAAE,MAAM,EAAE,MAAM,CAAA;SAAE,CAAA;QAC5B,aAAa,EAAE;YAAE,IAAI,EAAE,MAAM,CAAA;SAAE,CAAA;KAChC,CAAA;IACD,MAAM,EAAE;QACN,OAAO,EAAE,MAAM,CAAA;QACf,cAAc,EAAE,MAAM,EAAE,CAAA;QACxB,aAAa,EAAE,IAAI,CAAA;QACnB,oBAAoB,EAAE,KAAK,CAAA;QAC3B,eAAe,EAAE,KAAK,CAAA;QACtB,YAAY,EAAE,KAAK,CAAA;QACnB,sBAAsB,EAAE,KAAK,CAAA;QAC7B,YAAY,EAAE,KAAK,CAAA;QACnB,uBAAuB,EAAE,KAAK,CAAA;QAC9B,gCAAgC,EAAE,KAAK,CAAA;QACvC,kCAAkC,EAAE,IAAI,CAAA;KACzC,CAAA;CACF,CAAA;AA6CD,wBAAgB,mBAAmB,CAAC,KAAK,EAAE;IACzC,SAAS,EAAE,MAAM,CAAA;IACjB,GAAG,EAAE,MAAM,CAAA;IACX,MAAM,EAAE,cAAc,CAAA;CACvB,GAAG,kBAAkB,CAmDrB"}