@promptframe/cli 0.1.60 → 0.1.64

package/README.md

@@ -4,7 +4,7 @@ PromptFrame component authoring CLI.
 
 Use it to inspect the public component standard, check component folders, validate manifests, inspect the local preview envelope, package source archives, upload components, check build status, rebuild evidence indexes, and rerun layout/security probes.
 
-Current source baseline is `@promptframe/cli@0.1.60`, `@promptframe/contracts@0.1.28`, `@promptframe/component-kit@0.1.22`, and `create-promptframe-component@0.1.50`. The published CLI consumes the contracts AST-aware public security policy evaluator, reports `securityPolicyDigest` / `securityEvaluatorMode` in JSON output, rejects red-team browser capability vectors such as Image/Audio beacons, Worker/SharedWorker, `window.open`, `postMessage`, dynamic script/iframe creation, browser fingerprinting, storage/cookie access, and dangerous HTML, reports `publicResources` for component-level public assets, keeps native `<img>` / `<video>` source checks case-sensitive so Remotion `<Img>` / `<Video>` remain valid, validates preview props against statically declared `propsSchema` fields and requires readable public prop descriptions, enforces strict Slot-first layout/source diagnostics, supports endpoint discovery, project list/current diagnostics, self-service CI token create/list/revoke, single-component and workspace GitHub workflow setup with `promptframe-workflow-version: 2`, `setup-ci --upgrade` stale-template repair, dynamic workspace matrix discovery, `RUNNER_LABELS` and pnpm 10 workflow support, pnpm workspace root lockfile evidence without component symlinks, `promptframe-workspace.json` validation, workspace root `check .` / `upload .` auto-detection, explicit `workspace:*` shared-package diagnostics, workspace upload source metadata headers, packages sanitized lockfile evidence for platform admission, release notes forwarding to upload, stderr NDJSON upload progress for `--json`, human-readable token kind/expiry summaries for `login`, `whoami`, and authenticated `upload`, server version auto-bump notes, and supports `status --fail-on-build-failed` for CI build-status gating.
+Current source baseline is `@promptframe/cli@0.1.64`, `@promptframe/contracts@0.1.32`, `@promptframe/component-kit@0.1.26`, and `create-promptframe-component@0.1.54`. The published CLI consumes the contracts AST-aware public security policy evaluator, reports `securityPolicyDigest` / `securityEvaluatorMode` in JSON output, rejects red-team browser capability vectors such as Image/Audio beacons, Worker/SharedWorker, `window.open`, `postMessage`, dynamic script/iframe creation, browser fingerprinting, storage/cookie access, and dangerous HTML, reports `publicResources` for component-level public assets, keeps native `<img>` / `<video>` source checks case-sensitive so Remotion `<Img>` / `<Video>` remain valid, validates preview props against statically declared `propsSchema` fields and requires readable public prop descriptions, enforces strict Slot-first layout/source diagnostics, supports endpoint discovery, project list/current diagnostics, self-service CI token create/list/revoke, single-component and workspace GitHub workflow setup with `promptframe-workflow-version: 2`, `setup-ci --upgrade` stale-template repair, dynamic workspace matrix discovery, `RUNNER_LABELS` and pnpm 10 workflow support, pnpm workspace root lockfile evidence without component symlinks, `promptframe-workspace.json` validation, workspace root `check .` / `upload .` auto-detection, explicit `workspace:*` shared-package diagnostics, workspace upload source metadata headers, packages sanitized lockfile evidence for platform admission, release notes forwarding to upload, stderr NDJSON upload progress for `--json`, human-readable token kind/expiry summaries for `login`, `whoami`, and authenticated `upload`, server version auto-bump notes, and supports `status --fail-on-build-failed` for CI build-status gating.
 
 ```bash
 npm install -D @promptframe/cli
@@ -88,6 +88,24 @@ The upload-to-publish lifecycle has multiple gates. `upload` returning success m
 
 ### Repository layouts and monorepos
 
+#### 根开发服务（源码入口）
+
+工作区根目录声明 `promptframe-workspace.json` 后，源码中的根开发入口使用一个 Vite watcher 管理全部模块：
+
+```bash
+promptframe dev . --studio-origin https://studio.example
+```
+
+入口监听一个 loopback 地址，端口 `0` 由系统选择一个实际端口，也可用 `--port` 指定。成功监听后输出实际 URL、连接 ID、精确 Studio Origin 和十分钟连接凭据。凭据只用于本机显式连接，不是平台登录或上传 Token；不要提交或放进组件代码。远程浏览器、SSH/WSL 和 HTTPS 到本机的访问仍需真实桥接及浏览器许可，不能根据命令启动推断可达。
+
+`/__promptframe/registry` 和 `events` 以精确 Host/Origin/Authorization 返回模块的当前捕获版本、checking/checked/failed、固定诊断及明确的 lastChecked。精确版本的 bundle 接口一次返回 Component/schema/index ESM、共享 chunk 和已捕获 public 资源；输出不附原包锁或连接凭据。原始 Vite 文件、`/@fs`、默认 HTML/HMR、子配置和 npm 脚本入口关闭。
+
+每个模块先捕获自身文件、实际 workspace pnpm 锁和声明，再运行普通 CLI validate、固定 Vite 闭合图构建和当前内容重捕获。漏通知、快速保存或旧构建晚回不能授权旧字节覆盖新版；失败保留明确标记的 lastChecked。检查状态是构建/规则事实，Player 必须在隔离执行后另报实际加载版本。根服务本身尚未提供 Studio 消费端或 Player 加载 ACK，也不代替平台正式 upload/admission。
+
+构建采用 Vite 8.0.10 和自动 JSX，支持捕获内的 JS/TS/JSON 静态图与 `.module.css`。CSS Modules 的类名按捕获版本和文件路径隔离，样式随实际组件挂载和卸载；默认脚手架的 `propsSchema`、命名 index 与 manifest 指定的组件导出会对齐 Player 原有入口。样式只支持本模块类选择器和纯布局、颜色表达式，不解析 CSS import、URL、composition、全局选择器或独立动画时钟；资源仍使用原公共资源 helper。React/ReactDOM/Remotion、zod 及 PromptFrame 公共 runtime 作为明确列出的共享 external，由消费端按兼容合同提供；不从作者 `node_modules` 偷读依赖。其它 npm/本机 alias、父目录源码、普通全局 CSS、`import.meta` 和非字面动态 import 尚不支持，返回确定诊断。锁文件捕获证明实际输入，不冒依赖安装或解析完整性；正式各模块独立包仍走原检查和上传。
+
+默认界为 32 模块、每模块 2048 文件/16MiB 输入、512 文件/8MiB 输出；检查/构建串行并有超时，受检产物保留总量 64MiB，HTTP 传输另有有界预留，最多八个通知连接。关闭时停止 watcher/HTTP，abort 并 join 实际检查/构建子进程后回收自身临时目录。这些本机进程和内容预算不构成 OS/网络或网页执行沙箱，也不声称全进程 heap/RSS 上限。
+
 The default CLI workflow assumes a single component repository: the current directory is the component package and contains `manifest.json`, `package.json`, `src/`, and optional `public/`.
 
 Monorepos are allowed only when component mapping is explicit. `promptframe-workspace.json` is the supported workspace SSOT; it lists each component `id` and relative `path`. `workspace validate` confirms every path exists and every selected directory's `manifest.json` declares the same id before upload. `PROMPTFRAME_CI_TOKEN` authorizes the upload; it does not map a repository, commit, or tag to a component for you.
@@ -165,3 +183,22 @@ Components generated by `create-promptframe-component` include `.promptframe/sca
 - `freshness.status`: `current`, `warning`, `upload_blocking`, or `security_breaking`.
 
 `validate` and `package` consume public policies from `@promptframe/contracts`: required files, preview limits, deterministic frame-driven source rules, dependency policy, and security policy. Source files are evaluated with the contracts AST-aware security evaluator so alias usage such as `const BC = BroadcastChannel; new BC()` is rejected while ordinary comments or strings mentioning a blocked API do not fail validation. `runtime.deterministic.fps_hardcoded_timing` is a manual-review validation gate: hardcoded frame timing in Remotion contexts fails `validate` with a repair hint to use `secondsToFrames`, `createDurationTimeline`, `createRevealPhases`, `createFillProgress`, or `timeline.at`. JSON, Markdown, and package metadata still use bounded pattern fallback for install scripts, prompt-injection strings, and remote URL signals. These local checks are early author feedback; the platform admission pipeline remains the final trust gate.
+
+## 工作区开发连接
+
+带有 `promptframe-workspace.json` 的工程使用一个本机服务连接 Studio：
+
+```bash
+promptframe dev . --studio-origin https://your-studio.example
+promptframe dev . --studio-origin https://your-studio.example --idle-timeout 30
+promptframe dev . --studio-origin https://your-studio.example --replace
+promptframe dev stop .
+```
+
+将启动时输出的完整 JSON 粘贴到同一浏览器主机的 Studio 开发连接面板。服务运行期间连接没有固定十分钟截止；没有推送连接且没有请求持续30分钟后正常退出，`--idle-timeout 0` 可关闭闲置退出。推送心跳默认为25秒。普通单组件 Vite 预览仍使用原5173入口。
+
+工作区默认端口为24000—24999，冲突时在段内选择并记住可用端口；`--port` 优先。`.promptframe/dev/` 保存本机连接ID、端口及实例锁，并自行忽略Git，不含连接凭据。重启后ID保持、凭据重新生成：在Studio重新粘贴一次新JSON即可继续使用同ID节点。旧随机ID的节点需要手动重新绑定一次。本地连接v2需要相容的Studio；旧v1连接仍遵守原有效期。
+
+关闭开发面板不停止连接；切换账号或作品、关闭页面会断开。刷新页面后重新粘贴连接JSON。停止或替换仅操作本工作区的实际实例；无法确认实例退出时命令报错，不自动强制终止进程。
+
+上传组件后，用准确的正式 `componentRef` 替换作品节点引用并移除该节点的 `componentSource`。仅上传成功不会自动改变作品的选源。确认作品已使用正式引用且不再需要本地预览后，可执行 `promptframe dev stop .`。

package/dist/development-build-worker.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=development-build-worker.d.ts.map

package/dist/development-build-worker.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"development-build-worker.d.ts","sourceRoot":"","sources":["../src/development-build-worker.ts"],"names":[],"mappings":""}

package/dist/development-build-worker.js

@@ -0,0 +1,184 @@
+import { posix } from 'node:path';
+import ts from 'typescript';
+import { build, version } from 'vite';
+import { DevelopmentContents } from './development-revisions.js';
+import { compileDevelopmentCssModule } from './development-css.js';
+const prefix = '\0promptframe-captured:';
+const entryPrefix = '\0promptframe-entry:';
+const cssPrefix = '\0promptframe-css:';
+const externals = new Set(['react', 'react/jsx-runtime', 'react/jsx-dev-runtime',
+    'react-dom', 'react-dom/client', 'remotion', 'zod', '@promptframe/component-kit', '@promptframe/contracts',
+    '@promptframe/component-kit/layout', '@promptframe/component-kit/timing',
+    '@promptframe/component-kit/style', '@promptframe/component-kit/standard']);
+let diagnosticCode = 'development.build.failed';
+function fail(code) { diagnosticCode = code; throw new Error(code); }
+async function main() {
+    let total = 0;
+    const input = [];
+    for await (const chunk of process.stdin) {
+        total += chunk.length;
+        if (total > 24 * 1024 * 1024)
+            fail('development.build.input_limit');
+        input.push(chunk);
+    }
+    const request = JSON.parse(Buffer.concat(input).toString('utf8'));
+    const captured = new DevelopmentContents(request.files.map(file => ({
+        path: file.path, bytes: Buffer.from(file.base64, 'base64'),
+    })), { maximumFiles: 2048, maximumBytes: 16 * 1024 * 1024 });
+    if (captured.revision !== request.sourceRevision || version !== '8.0.10')
+        fail('development.build.input_mismatch');
+    const files = new Map(captured.readFiles().map(file => [file.path, file.bytes]));
+    const manifestBytes = files.get('manifest.json');
+    if (!manifestBytes)
+        fail('development.build.manifest_missing');
+    const manifest = JSON.parse(Buffer.from(manifestBytes).toString('utf8'));
+    const entries = { component: manifest.entry.sourcePath, schema: manifest.entry.propsSchemaPath, index: 'src/index.ts' };
+    const cssPlaceholder = `__PROMPTFRAME_CAPTURED_CSS_${captured.revision}__`;
+    const styles = new Map();
+    // Normalize the manifest's real component export and both supported schema
+    // spellings to the Player's existing three-entry identity contract. Original
+    // index exports remain available; no second manifest authority is created.
+    const generated = new Map([
+        ['component', `import * as Source from ${JSON.stringify(prefix + entries.component)};
+      import { Fragment, createElement } from 'react';
+      const Component = Source[${JSON.stringify(manifest.entry.componentExport ?? 'default')}];
+      export default function CapturedComponent(props) {
+        return createElement(Fragment, null, createElement('style', null, ${JSON.stringify(cssPlaceholder)}), createElement(Component, props));
+      }`],
+        ['schema', `import * as Source from ${JSON.stringify(prefix + entries.schema)};
+      export * from ${JSON.stringify(prefix + entries.schema)};
+      export const PropsSchema = Source.PropsSchema ?? Source.propsSchema;`],
+        ['index', `export * from ${JSON.stringify(prefix + entries.index)};
+      export { default } from ${JSON.stringify(entryPrefix + 'component')};
+      export { PropsSchema } from ${JSON.stringify(entryPrefix + 'schema')};`],
+    ]);
+    const importedRuntimes = new Set();
+    const source = (path) => {
+        const bytes = files.get(path);
+        if (!bytes)
+            fail('development.build.uncaptured_import');
+        if (!/\.(?:[cm]?[jt]sx?|json)$/u.test(path) && !path.endsWith('.module.css'))
+            fail('development.build.unsupported_source_type');
+        const text = Buffer.from(bytes).toString('utf8');
+        if (!path.endsWith('.json') && !path.endsWith('.module.css')) {
+            const parsed = ts.createSourceFile(path, text, ts.ScriptTarget.Latest, true);
+            const visit = (node) => {
+                // These Vite features would discover files outside the closed import
+                // graph. They need an explicit captured-resource contract first.
+                if (ts.isMetaProperty(node) && node.keywordToken === ts.SyntaxKind.ImportKeyword) {
+                    fail('development.build.import_meta_unsupported');
+                }
+                if (ts.isCallExpression(node) && node.expression.kind === ts.SyntaxKind.ImportKeyword
+                    && (node.arguments.length !== 1 || !(ts.isStringLiteral(node.arguments[0]) || ts.isNoSubstitutionTemplateLiteral(node.arguments[0])))) {
+                    fail('development.build.dynamic_import_unsupported');
+                }
+                ts.forEachChild(node, visit);
+            };
+            visit(parsed);
+        }
+        return text;
+    };
+    const plugin = {
+        name: 'promptframe-captured-sources', enforce: 'pre',
+        resolveId(id, importer) {
+            if (id.startsWith(entryPrefix)) {
+                if (importer && !importer.startsWith(entryPrefix))
+                    return fail('development.build.uncaptured_import');
+                if (!generated.has(id.slice(entryPrefix.length)))
+                    return fail('development.build.uncaptured_import');
+                return id;
+            }
+            if (id.startsWith(prefix)) {
+                if (!importer?.startsWith(entryPrefix))
+                    return fail('development.build.uncaptured_import');
+                source(id.slice(prefix.length));
+                return id;
+            }
+            if (!importer?.startsWith(prefix) && !importer?.startsWith(entryPrefix))
+                return fail('development.build.uncaptured_import');
+            if (externals.has(id)) {
+                importedRuntimes.add(id);
+                return { id, external: true };
+            }
+            if (!importer.startsWith(prefix))
+                return fail('development.build.uncaptured_import');
+            if (!id.startsWith('.') || /[\\?#\0]/u.test(id))
+                return fail('development.build.unsupported_dependency');
+            const path = posix.normalize(posix.join(posix.dirname(importer.slice(prefix.length)), id));
+            if (path === '..' || path.startsWith('../') || posix.isAbsolute(path))
+                return fail('development.build.uncaptured_import');
+            const resolved = [path, ...['.ts', '.tsx', '.js', '.jsx', '.mjs', '.mts', '.json', '/index.ts', '/index.tsx', '/index.js'].map(ext => path + ext)]
+                .find(candidate => files.has(candidate));
+            if (!resolved)
+                return fail('development.build.uncaptured_import');
+            source(resolved);
+            // This loader already compiled the CSS Module to JS. A JS virtual ID
+            // keeps Vite's later CSS plugin from parsing that mapping as a stylesheet.
+            return resolved.endsWith('.module.css') ? cssPrefix + resolved + '.mjs' : prefix + resolved;
+        },
+        async load(id) {
+            if (id.startsWith(entryPrefix))
+                return generated.get(id.slice(entryPrefix.length));
+            if (!id.startsWith(prefix) && !id.startsWith(cssPrefix))
+                return fail('development.build.uncaptured_import');
+            const path = id.startsWith(cssPrefix) ? id.slice(cssPrefix.length, -4) : id.slice(prefix.length), text = source(path);
+            if (path.endsWith('.module.css')) {
+                let compiled;
+                try {
+                    compiled = await compileDevelopmentCssModule({ path, text, sourceRevision: captured.revision });
+                }
+                catch {
+                    return fail('development.build.unsupported_css');
+                }
+                styles.set(path, compiled.css);
+                return `export default ${JSON.stringify(compiled.classes)};`;
+            }
+            return text;
+        },
+    };
+    const result = await build({ root: process.cwd(), configFile: false, envFile: false,
+        mode: 'development', publicDir: false, logLevel: 'silent', plugins: [plugin],
+        css: { postcss: { plugins: [] } }, resolve: { tsconfigPaths: false },
+        oxc: { jsx: { runtime: 'automatic', importSource: 'react' } },
+        build: { write: false, target: 'es2022', minify: false, sourcemap: false, modulePreload: false,
+            lib: { entry: Object.fromEntries(Object.keys(entries).map(key => [key, entryPrefix + key])), formats: ['es'] },
+            rolldownOptions: { input: Object.fromEntries(Object.keys(entries).map(key => [key, entryPrefix + key])),
+                output: { entryFileNames: '[name].mjs', chunkFileNames: 'chunks/[name]-[hash].mjs',
+                    assetFileNames: 'assets/[name]-[hash][extname]' } },
+        },
+    });
+    const built = Array.isArray(result) && result.length === 1 ? result[0] : result;
+    if (!built || !('output' in built))
+        fail('development.build.invalid_output');
+    const css = [...styles].sort(([a], [b]) => a.localeCompare(b, 'en')).map(([, text]) => text).join('\n');
+    let replacements = 0;
+    const output = built.output.map(file => {
+        if (file.type !== 'chunk')
+            return { path: file.fileName, bytes: Buffer.from(file.source) };
+        const code = file.code.replaceAll(JSON.stringify(cssPlaceholder), () => { replacements++; return JSON.stringify(css); });
+        return { path: file.fileName, bytes: Buffer.from(code) };
+    });
+    if (replacements !== 1)
+        fail('development.build.invalid_output');
+    output.push({ path: 'manifest.json', bytes: Buffer.from(manifestBytes) });
+    for (const [path, bytes] of files) {
+        if (path.startsWith('public/'))
+            output.push({ path: 'resources/public/' + path.slice(7), bytes: Buffer.from(bytes) });
+        if (path === 'src/preview-props.json')
+            output.push({ path: 'preview.json', bytes: Buffer.from(bytes) });
+    }
+    const artifacts = new DevelopmentContents(output, { maximumFiles: 512, maximumBytes: 8 * 1024 * 1024 });
+    process.stdout.write(JSON.stringify({ sourceRevision: captured.revision, builder: `vite/${version}/captured-v1`,
+        entries: Object.fromEntries(Object.keys(entries).map(key => [key, `${key}.mjs`])),
+        runtimeImports: [...importedRuntimes].sort(),
+        files: artifacts.readFiles().map(file => ({ path: file.path, base64: Buffer.from(file.bytes).toString('base64') })),
+    }));
+}
+try {
+    await main();
+}
+catch {
+    process.stderr.write(JSON.stringify({ code: diagnosticCode }));
+    process.exitCode = 1;
+}
+//# sourceMappingURL=development-build-worker.js.map

package/dist/development-build-worker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"development-build-worker.js","sourceRoot":"","sources":["../src/development-build-worker.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,MAAM,YAAY,CAAC;AAC5B,OAAO,EAAE,KAAK,EAAE,OAAO,EAAe,MAAM,MAAM,CAAC;AACnD,OAAO,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AACjE,OAAO,EAAE,2BAA2B,EAAE,MAAM,sBAAsB,CAAC;AAEnE,MAAM,MAAM,GAAG,yBAAyB,CAAC;AACzC,MAAM,WAAW,GAAG,sBAAsB,CAAC;AAC3C,MAAM,SAAS,GAAG,oBAAoB,CAAC;AACvC,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,mBAAmB,EAAE,uBAAuB;IAC9E,WAAW,EAAE,kBAAkB,EAAE,UAAU,EAAE,KAAK,EAAE,4BAA4B,EAAE,wBAAwB;IAC1G,mCAAmC,EAAE,mCAAmC;IACxE,kCAAkC,EAAE,qCAAqC,CAAC,CAAC,CAAC;AAC9E,IAAI,cAAc,GAAG,0BAA0B,CAAC;AAChD,SAAS,IAAI,CAAC,IAAY,IAAW,cAAc,GAAG,IAAI,CAAC,CAAC,MAAM,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAEpF,KAAK,UAAU,IAAI;IACjB,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;QACxC,KAAK,IAAI,KAAK,CAAC,MAAM,CAAC;QACtB,IAAI,KAAK,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI;YAAE,IAAI,CAAC,+BAA+B,CAAC,CAAC;QACpE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACpB,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAE/D,CAAC;IACF,MAAM,QAAQ,GAAG,IAAI,mBAAmB,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAClE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC;KAC3D,CAAC,CAAC,EAAE,EAAE,YAAY,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI,EAAE,CAAC,CAAC;IAC7D,IAAI,QAAQ,CAAC,QAAQ,KAAK,OAAO,CAAC,cAAc,IAAI,OAAO,KAAK,QAAQ;QAAE,IAAI,CAAC,kCAAkC,CAAC,CAAC;IACnH,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,SAAS,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACjF,MAAM,aAAa,GAAG,KAAK,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;IACjD,IAAI,CAAC,aAAa;QAAE,IAAI,CAAC,oCAAoC,CAAC,CAAC;IAC/D,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAEtE,CAAC;IACF,MAAM,OAAO,GAAG,EAAE,SAAS,EAAE,QAAQ,CAAC,KAAK,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,CAAC,KAAK,CAAC,eAAe,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC;IACxH,MAAM,cAAc,GAAG,8BAA8B,QAAQ,CAAC,QAAQ,IAAI,CAAC;IAC3E,MAAM,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAC;IACzC,2EAA2E;IAC3E,6EAA6E;IAC7E,2EAA2E;IAC3E,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC;QACxB,CAAC,WAAW,EAAE,2BAA2B,IAAI,CAAC,SAAS,CAAC,MAAM,GAAG,OAAO,CAAC,SAAS,CAAC;;iCAEtD,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,eAAe,IAAI,SAAS,CAAC;;4EAEhB,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC;QAClG,CAAC;QACL,CAAC,QAAQ,EAAE,2BAA2B,IAAI,CAAC,SAAS,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;sBAC3D,IAAI,CAAC,SAAS,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;2EACc,CAAC;QACxE,CAAC,OAAO,EAAE,iBAAiB,IAAI,CAAC,SAAS,CAAC,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC;gCACrC,IAAI,CAAC,SAAS,CAAC,WAAW,GAAG,WAAW,CAAC;oCACrC,IAAI,CAAC,SAAS,CAAC,WAAW,GAAG,QAAQ,CAAC,GAAG,CAAC;KAC3E,CAAC,CAAC;IACH,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAAU,CAAC;IAC3C,MAAM,MAAM,GAAG,CAAC,IAAY,EAAE,EAAE;QAC9B,MAAM,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC9B,IAAI,CAAC,KAAK;YAAE,IAAI,CAAC,qCAAqC,CAAC,CAAC;QACxD,IAAI,CAAC,2BAA2B,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC;YAAE,IAAI,CAAC,2CAA2C,CAAC,CAAC;QAChI,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACjD,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC;YAC7D,MAAM,MAAM,GAAG,EAAE,CAAC,gBAAgB,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,CAAC,YAAY,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;YAC7E,MAAM,KAAK,GAAG,CAAC,IAAa,EAAQ,EAAE;gBACpC,qEAAqE;gBACrE,iEAAiE;gBACjE,IAAI,EAAE,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,YAAY,KAAK,EAAE,CAAC,UAAU,CAAC,aAAa,EAAE,CAAC;oBACjF,IAAI,CAAC,2CAA2C,CAAC,CAAC;gBACpD,CAAC;gBACD,IAAI,EAAE,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,KAAK,EAAE,CAAC,UAAU,CAAC,aAAa;uBAChF,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,eAAe,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAE,CAAC,IAAI,EAAE,CAAC,+BAA+B,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC1I,IAAI,CAAC,8CAA8C,CAAC,CAAC;gBACvD,CAAC;gBACD,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YAC/B,CAAC,CAAC;YACF,KAAK,CAAC,MAAM,CAAC,CAAC;QAChB,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC,CAAC;IACF,MAAM,MAAM,GAAW;QACrB,IAAI,EAAE,8BAA8B,EAAE,OAAO,EAAE,KAAK;QACpD,SAAS,CAAC,EAAE,EAAE,QAAQ;YACpB,IAAI,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;gBAC/B,IAAI,QAAQ,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,WAAW,CAAC;oBAAE,OAAO,IAAI,CAAC,qCAAqC,CAAC,CAAC;gBACtG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;oBAAE,OAAO,IAAI,CAAC,qCAAqC,CAAC,CAAC;gBACrG,OAAO,EAAE,CAAC;YACZ,CAAC;YACD,IAAI,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;gBAC1B,IAAI,CAAC,QAAQ,EAAE,UAAU,CAAC,WAAW,CAAC;oBAAE,OAAO,IAAI,CAAC,qCAAqC,CAAC,CAAC;gBAC3F,MAAM,CAAC,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;gBAAC,OAAO,EAAE,CAAC;YAC7C,CAAC;YACD,IAAI,CAAC,QAAQ,EAAE,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,EAAE,UAAU,CAAC,WAAW,CAAC;gBAAE,OAAO,IAAI,CAAC,qCAAqC,CAAC,CAAC;YAC5H,IAAI,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;gBAAC,gBAAgB,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;gBAAC,OAAO,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;YAAC,CAAC;YACnF,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC;gBAAE,OAAO,IAAI,CAAC,qCAAqC,CAAC,CAAC;YACrF,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC;gBAAE,OAAO,IAAI,CAAC,0CAA0C,CAAC,CAAC;YACzG,MAAM,IAAI,GAAG,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;YAC3F,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC;gBAAE,OAAO,IAAI,CAAC,qCAAqC,CAAC,CAAC;YAC1H,MAAM,QAAQ,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,WAAW,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC;iBAC/I,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC;YAC3C,IAAI,CAAC,QAAQ;gBAAE,OAAO,IAAI,CAAC,qCAAqC,CAAC,CAAC;YAClE,MAAM,CAAC,QAAQ,CAAC,CAAC;YACjB,qEAAqE;YACrE,2EAA2E;YAC3E,OAAO,QAAQ,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,SAAS,GAAG,QAAQ,GAAG,MAAM,CAAC,CAAC,CAAC,MAAM,GAAG,QAAQ,CAAC;QAC9F,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,EAAE;YACX,IAAI,EAAE,CAAC,UAAU,CAAC,WAAW,CAAC;gBAAE,OAAO,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,CAAE,CAAC;YACpF,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC;gBAAE,OAAO,IAAI,CAAC,qCAAqC,CAAC,CAAC;YAC5G,MAAM,IAAI,GAAG,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC;YACtH,IAAI,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC;gBACjC,IAAI,QAAQ,CAAC;gBACb,IAAI,CAAC;oBAAC,QAAQ,GAAG,MAAM,2BAA2B,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,cAAc,EAAE,QAAQ,CAAC,QAAQ,EAAE,CAAC,CAAC;gBAAC,CAAC;gBACxG,MAAM,CAAC;oBAAC,OAAO,IAAI,CAAC,mCAAmC,CAAC,CAAC;gBAAC,CAAC;gBAC3D,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC;gBAC/B,OAAO,kBAAkB,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC;YAC/D,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;KACF,CAAC;IACF,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,GAAG,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK;QACjF,IAAI,EAAE,aAAa,EAAE,SAAS,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC;QAC5E,GAAG,EAAE,EAAE,OAAO,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,aAAa,EAAE,KAAK,EAAE;QACpE,GAAG,EAAE,EAAE,GAAG,EAAE,EAAE,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,OAAO,EAAE,EAAE;QAC7D,KAAK,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,aAAa,EAAE,KAAK;YAC5F,GAAG,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,GAAG,EAAE,WAAW,GAAG,GAAG,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,IAAI,CAAC,EAAE;YAC9G,eAAe,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,GAAG,EAAE,WAAW,GAAG,GAAG,CAAC,CAAC,CAAC;gBACrG,MAAM,EAAE,EAAE,cAAc,EAAE,YAAY,EAAE,cAAc,EAAE,0BAA0B;oBAClF,cAAc,EAAE,+BAA+B,EAAE,EAAE;SACtD;KACF,CAAC,CAAC;IACH,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;IAChF,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC,QAAQ,IAAI,KAAK,CAAC;QAAE,IAAI,CAAC,kCAAkC,CAAC,CAAC;IAC7E,MAAM,GAAG,GAAG,CAAC,GAAG,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACxG,IAAI,YAAY,GAAG,CAAC,CAAC;IACrB,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE;QACrC,IAAI,IAAI,CAAC,IAAI,KAAK,OAAO;YAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3F,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,cAAc,CAAC,EAAE,GAAG,EAAE,GAAG,YAAY,EAAE,CAAC,CAAC,OAAO,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACzH,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;IAC3D,CAAC,CAAC,CAAC;IACH,IAAI,YAAY,KAAK,CAAC;QAAE,IAAI,CAAC,kCAAkC,CAAC,CAAC;IACjE,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC;IAC1E,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,KAAK,EAAE,CAAC;QAClC,IAAI,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC;YAAE,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,mBAAmB,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACtH,IAAI,IAAI,KAAK,wBAAwB;YAAE,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAC1G,CAAC;IACD,MAAM,SAAS,GAAG,IAAI,mBAAmB,CAAC,MAAM,EAAE,EAAE,YAAY,EAAE,GAAG,EAAE,YAAY,EAAE,CAAC,GAAG,IAAI,GAAG,IAAI,EAAE,CAAC,CAAC;IACxG,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,cAAc,EAAE,QAAQ,CAAC,QAAQ,EAAE,OAAO,EAAE,QAAQ,OAAO,cAAc;QAC7G,OAAO,EAAE,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,GAAG,EAAE,GAAG,GAAG,MAAM,CAAC,CAAC,CAAC;QACjF,cAAc,EAAE,CAAC,GAAG,gBAAgB,CAAC,CAAC,IAAI,EAAE;QAC5C,KAAK,EAAE,SAAS,CAAC,SAAS,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;KACpH,CAAC,CAAC,CAAC;AACN,CAAC;AAED,IAAI,CAAC;IAAC,MAAM,IAAI,EAAE,CAAC;AAAC,CAAC;AACrB,MAAM,CAAC;IAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC;IAAC,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;AAAC,CAAC"}

package/dist/development-build.d.ts

@@ -0,0 +1,22 @@
+import { DevelopmentContents } from './development-revisions.js';
+export interface DevelopmentBuildReceipt {
+    readonly sourceRevision: string;
+    readonly builder: string;
+    readonly artifacts: DevelopmentContents;
+    readonly entries: Readonly<{
+        component: string;
+        schema: string;
+        index: string;
+    }>;
+    /** Only explicitly shared host runtimes are external, never arbitrary npm imports. */
+    readonly runtimeImports: readonly string[];
+}
+/** Compile the capture through a fixed Vite config and a closed virtual source
+ * graph. No workspace files, child vite.config, scripts or node_modules are
+ * resolved by the build. A build receipt alone does not assert a safety check. */
+export declare function buildDevelopmentContents(contents: DevelopmentContents, options?: {
+    temporaryParent?: string;
+    timeoutMs?: number;
+    signal?: AbortSignal;
+}): Promise<DevelopmentBuildReceipt>;
+//# sourceMappingURL=development-build.d.ts.map

package/dist/development-build.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"development-build.d.ts","sourceRoot":"","sources":["../src/development-build.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AAIjE,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAC;IACxC,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACjF,sFAAsF;IACtF,QAAQ,CAAC,cAAc,EAAE,SAAS,MAAM,EAAE,CAAC;CAC5C;AAED;;kFAEkF;AAClF,wBAAsB,wBAAwB,CAC5C,QAAQ,EAAE,mBAAmB,EAC7B,OAAO,GAAE;IAAE,eAAe,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,WAAW,CAAA;CAAO,GACnF,OAAO,CAAC,uBAAuB,CAAC,CAiDlC"}

package/dist/development-build.js

@@ -0,0 +1,66 @@
+import { mkdtemp, rm } from 'node:fs/promises';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import { fileURLToPath } from 'node:url';
+import { DevelopmentContents } from './development-revisions.js';
+import { DevelopmentProcessError, runDevelopmentProcess } from './development-process.js';
+const outputLimits = Object.freeze({ maximumFiles: 512, maximumBytes: 8 * 1024 * 1024 });
+/** Compile the capture through a fixed Vite config and a closed virtual source
+ * graph. No workspace files, child vite.config, scripts or node_modules are
+ * resolved by the build. A build receipt alone does not assert a safety check. */
+export async function buildDevelopmentContents(contents, options = {}) {
+    const timeoutMs = options.timeoutMs ?? 30_000;
+    if (!Number.isSafeInteger(timeoutMs) || timeoutMs < 1 || timeoutMs > 120_000) {
+        throw new DevelopmentProcessError('development.build.invalid_timeout');
+    }
+    options.signal?.throwIfAborted();
+    if (contents.byteLength > 16 * 1024 * 1024)
+        throw new DevelopmentProcessError('development.build.input_limit');
+    const files = contents.readFiles();
+    if (files.length > 2048)
+        throw new DevelopmentProcessError('development.build.input_limit');
+    const input = JSON.stringify({ sourceRevision: contents.revision,
+        files: files.map(file => ({ path: file.path, base64: Buffer.from(file.bytes).toString('base64') })) });
+    const directory = await mkdtemp(join(options.temporaryParent ?? tmpdir(), 'promptframe-build-'));
+    let hadFailure = false;
+    try {
+        const raw = await runDevelopmentProcess({
+            worker: fileURLToPath(new URL('./development-build-worker.js', import.meta.url)),
+            cwd: directory, input, timeoutMs, maximumOutputBytes: 20 * 1024 * 1024, signal: options.signal,
+        });
+        const result = JSON.parse(raw);
+        if (result.sourceRevision !== contents.revision || result.builder !== 'vite/8.0.10/captured-v1'
+            || !Array.isArray(result.files) || !Array.isArray(result.runtimeImports)
+            || !result.runtimeImports.every(id => typeof id === 'string') || !result.entries) {
+            throw new DevelopmentProcessError('development.build.invalid_receipt');
+        }
+        const artifacts = new DevelopmentContents(result.files.map(file => ({
+            path: file.path, bytes: Buffer.from(file.base64, 'base64'),
+        })), outputLimits);
+        const paths = new Set(artifacts.readFiles().map(file => file.path));
+        if (!['component', 'schema', 'index'].every(key => paths.has(result.entries[key]))) {
+            throw new DevelopmentProcessError('development.build.invalid_entries');
+        }
+        return Object.freeze({ sourceRevision: contents.revision, builder: result.builder, artifacts,
+            entries: Object.freeze({ ...result.entries }), runtimeImports: Object.freeze([...result.runtimeImports]) });
+    }
+    catch (error) {
+        hadFailure = true;
+        throw error;
+    }
+    finally {
+        // The worker has actually closed before returning/throwing above. A cleanup
+        // failure must not replace the original abort/compiler cause.
+        try {
+            await rm(directory, { recursive: true, force: true });
+        }
+        catch (error) {
+            if (!hadFailure)
+                throw error;
+            // Keep the first failure and make any retained private directory
+            // actionable to its local owner; never print source/error bodies.
+            process.stderr.write(JSON.stringify({ code: 'development.build.cleanup_failed', directory }) + '\n');
+        }
+    }
+}
+//# sourceMappingURL=development-build.js.map

package/dist/development-build.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"development-build.js","sourceRoot":"","sources":["../src/development-build.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AACjE,OAAO,EAAE,uBAAuB,EAAE,qBAAqB,EAAE,MAAM,0BAA0B,CAAC;AAE1F,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,YAAY,EAAE,GAAG,EAAE,YAAY,EAAE,CAAC,GAAG,IAAI,GAAG,IAAI,EAAE,CAAC,CAAC;AAUzF;;kFAEkF;AAClF,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,QAA6B,EAC7B,UAAkF,EAAE;IAEpF,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,MAAM,CAAC;IAC9C,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,SAAS,CAAC,IAAI,SAAS,GAAG,CAAC,IAAI,SAAS,GAAG,OAAO,EAAE,CAAC;QAC7E,MAAM,IAAI,uBAAuB,CAAC,mCAAmC,CAAC,CAAC;IACzE,CAAC;IACD,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC;IACjC,IAAI,QAAQ,CAAC,UAAU,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI;QAAE,MAAM,IAAI,uBAAuB,CAAC,+BAA+B,CAAC,CAAC;IAC/G,MAAM,KAAK,GAAG,QAAQ,CAAC,SAAS,EAAE,CAAC;IACnC,IAAI,KAAK,CAAC,MAAM,GAAG,IAAI;QAAE,MAAM,IAAI,uBAAuB,CAAC,+BAA+B,CAAC,CAAC;IAC5F,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,cAAc,EAAE,QAAQ,CAAC,QAAQ;QAC9D,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;IACzG,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,eAAe,IAAI,MAAM,EAAE,EAAE,oBAAoB,CAAC,CAAC,CAAC;IACjG,IAAI,UAAU,GAAG,KAAK,CAAC;IACvB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,qBAAqB,CAAC;YACtC,MAAM,EAAE,aAAa,CAAC,IAAI,GAAG,CAAC,+BAA+B,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAChF,GAAG,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE,kBAAkB,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM;SAC/F,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAG5B,CAAC;QACF,IAAI,MAAM,CAAC,cAAc,KAAK,QAAQ,CAAC,QAAQ,IAAI,MAAM,CAAC,OAAO,KAAK,yBAAyB;eAC1F,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,cAAc,CAAC;eACrE,CAAC,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC,OAAO,EAAE,KAAK,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACnF,MAAM,IAAI,uBAAuB,CAAC,mCAAmC,CAAC,CAAC;QACzE,CAAC;QACD,MAAM,SAAS,GAAG,IAAI,mBAAmB,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAClE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC;SAC3D,CAAC,CAAC,EAAE,YAAY,CAAC,CAAC;QACnB,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,SAAS,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QACpE,IAAI,CAAC,CAAC,WAAW,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,GAAkC,CAAC,CAAC,CAAC,EAAE,CAAC;YAClH,MAAM,IAAI,uBAAuB,CAAC,mCAAmC,CAAC,CAAC;QACzE,CAAC;QACD,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,cAAc,EAAE,QAAQ,CAAC,QAAQ,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,SAAS;YAC1F,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC,EAAE,cAAc,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,MAAM,CAAC,cAAc,CAAC,CAAC,EAAE,CAAC,CAAC;IAChH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,UAAU,GAAG,IAAI,CAAC;QAAC,MAAM,KAAK,CAAC;IACjC,CAAC;YAAS,CAAC;QACT,4EAA4E;QAC5E,8DAA8D;QAC9D,IAAI,CAAC;YAAC,MAAM,EAAE,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAAC,CAAC;QAC9D,OAAO,KAAK,EAAE,CAAC;YACb,IAAI,CAAC,UAAU;gBAAE,MAAM,KAAK,CAAC;YAC7B,iEAAiE;YACjE,kEAAkE;YAClE,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,kCAAkC,EAAE,SAAS,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC;QACvG,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/development-coordinator.d.ts

@@ -0,0 +1,26 @@
+import { type DevelopmentBuildReceipt } from './development-build.js';
+import { type DevelopmentValidationReceipt } from './development-validation.js';
+import { DevelopmentContents } from './development-revisions.js';
+interface CompilerOptions {
+    signal?: AbortSignal;
+}
+interface DevelopmentCoordinatorOptions {
+    maximumModules: number;
+    capture(moduleId: string): DevelopmentContents | Promise<DevelopmentContents>;
+    maximumAttempts?: number;
+    /** Trusted composition ports, never supplied by component configs or HTTP. */
+    validate?: (source: DevelopmentContents, options: CompilerOptions) => Promise<DevelopmentValidationReceipt>;
+    build?: (source: DevelopmentContents, options: CompilerOptions) => Promise<DevelopmentBuildReceipt>;
+}
+/** Joins capture -> common checks -> captured Vite build -> current recapture.
+ * It exposes checked bytes, never a claim that a Player has loaded them. */
+export declare class DevelopmentModuleCoordinator {
+    #private;
+    constructor(options: DevelopmentCoordinatorOptions);
+    state(moduleId: string): import("./development-revisions.js").DevelopmentModuleState | undefined;
+    buildReceipt(moduleId: string): DevelopmentBuildReceipt | undefined;
+    refresh(moduleId: string, options?: CompilerOptions): Promise<boolean>;
+    remove(moduleId: string): void;
+}
+export {};
+//# sourceMappingURL=development-coordinator.d.ts.map

package/dist/development-coordinator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"development-coordinator.d.ts","sourceRoot":"","sources":["../src/development-coordinator.ts"],"names":[],"mappings":"AACA,OAAO,EAA4B,KAAK,uBAAuB,EAAE,MAAM,wBAAwB,CAAC;AAChG,OAAO,EAA+B,KAAK,4BAA4B,EAAE,MAAM,6BAA6B,CAAC;AAC7G,OAAO,EAAE,mBAAmB,EAA0D,MAAM,4BAA4B,CAAC;AAEzH,UAAU,eAAe;IAAG,MAAM,CAAC,EAAE,WAAW,CAAA;CAAE;AAClD,UAAU,6BAA6B;IACrC,cAAc,EAAE,MAAM,CAAC;IACvB,OAAO,CAAC,QAAQ,EAAE,MAAM,GAAG,mBAAmB,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAC;IAC9E,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,8EAA8E;IAC9E,QAAQ,CAAC,EAAE,CAAC,MAAM,EAAE,mBAAmB,EAAE,OAAO,EAAE,eAAe,KAAK,OAAO,CAAC,4BAA4B,CAAC,CAAC;IAC5G,KAAK,CAAC,EAAE,CAAC,MAAM,EAAE,mBAAmB,EAAE,OAAO,EAAE,eAAe,KAAK,OAAO,CAAC,uBAAuB,CAAC,CAAC;CACrG;AAED;4EAC4E;AAC5E,qBAAa,4BAA4B;;gBAS3B,OAAO,EAAE,6BAA6B;IAYlD,KAAK,CAAC,QAAQ,EAAE,MAAM;IACtB,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,uBAAuB,GAAG,SAAS;IAK7D,OAAO,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,GAAE,eAAoB,GAAG,OAAO,CAAC,OAAO,CAAC;IAmDhF,MAAM,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI;CAI/B"}

package/dist/development-coordinator.js

@@ -0,0 +1,114 @@
+import { PROMPTFRAME_PUBLIC_SECURITY_POLICY_DIGEST } from '@promptframe/contracts';
+import { buildDevelopmentContents } from './development-build.js';
+import { validateDevelopmentContents } from './development-validation.js';
+import { DevelopmentRevisionGate } from './development-revisions.js';
+/** Joins capture -> common checks -> captured Vite build -> current recapture.
+ * It exposes checked bytes, never a claim that a Player has loaded them. */
+export class DevelopmentModuleCoordinator {
+    #gate;
+    #active = new Map();
+    #receipts = new WeakMap();
+    #attempts;
+    #capture;
+    #validate;
+    #build;
+    constructor(options) {
+        this.#capture = options.capture;
+        this.#validate = options.validate ?? validateDevelopmentContents;
+        this.#build = options.build ?? buildDevelopmentContents;
+        this.#attempts = options.maximumAttempts ?? 3;
+        if (!Number.isSafeInteger(this.#attempts) || this.#attempts < 1 || this.#attempts > 8) {
+            throw new Error('development.check.invalid_attempts');
+        }
+        this.#gate = new DevelopmentRevisionGate({ maximumModules: options.maximumModules,
+            checkerKey: `captured-v1:${PROMPTFRAME_PUBLIC_SECURITY_POLICY_DIGEST}:vite/8.0.10` });
+    }
+    state(moduleId) { return this.#gate.state(moduleId); }
+    buildReceipt(moduleId) {
+        const checked = this.#gate.state(moduleId)?.lastChecked;
+        return checked ? this.#receipts.get(checked) : undefined;
+    }
+    async refresh(moduleId, options = {}) {
+        this.#active.get(moduleId)?.abort(new Error('development.check.superseded'));
+        const controller = new AbortController();
+        this.#active.set(moduleId, controller);
+        const signal = options.signal ? AbortSignal.any([controller.signal, options.signal]) : controller.signal;
+        const currentRequest = () => this.#active.get(moduleId) === controller;
+        try {
+            let source = await this.#capture(moduleId);
+            for (let attempt = 0; attempt < this.#attempts; attempt++) {
+                if (!currentRequest())
+                    return false;
+                signal.throwIfAborted();
+                const check = this.#gate.begin(moduleId, source);
+                let build;
+                try {
+                    const validation = await this.#validate(source, { signal });
+                    if (!currentRequest())
+                        return false;
+                    signal.throwIfAborted();
+                    if (validation.sourceRevision !== source.revision)
+                        throw new Error('development.check.source_mismatch');
+                    build = await this.#build(source, { signal });
+                    if (build.sourceRevision !== source.revision)
+                        throw new Error('development.check.source_mismatch');
+                }
+                catch (error) {
+                    if (!currentRequest())
+                        return false;
+                    signal.throwIfAborted();
+                    const current = await this.#capture(moduleId);
+                    if (!currentRequest())
+                        return false;
+                    if (current.revision !== source.revision) {
+                        source = current;
+                        this.#gate.begin(moduleId, current);
+                        continue;
+                    }
+                    this.#gate.reject(check, current, diagnostic(error));
+                    return false;
+                }
+                if (!currentRequest())
+                    return false;
+                signal.throwIfAborted();
+                const current = await this.#capture(moduleId);
+                if (!currentRequest())
+                    return false;
+                if (this.#gate.publish(check, current, build.artifacts)) {
+                    this.#receipts.set(this.#gate.state(moduleId).lastChecked, build);
+                    return true;
+                }
+                source = current;
+            }
+            // Continuous changes remain visibly checking with explicit lastChecked.
+            // The next event/manual refresh retries; no quiet-period sleep authorizes.
+            return false;
+        }
+        catch (error) {
+            if (currentRequest())
+                this.#gate.invalidate(moduleId, signal.aborted ? 'development.check.aborted' : diagnostic(error));
+            return false;
+        }
+        finally {
+            if (currentRequest())
+                this.#active.delete(moduleId);
+        }
+    }
+    remove(moduleId) {
+        this.#active.get(moduleId)?.abort(new Error('development.check.removed'));
+        this.#active.delete(moduleId);
+        this.#gate.remove(moduleId);
+    }
+}
+function diagnostic(error) {
+    if (error && typeof error === 'object') {
+        for (const key of ['diagnosticCode', 'code', 'message']) {
+            const descriptor = Object.getOwnPropertyDescriptor(error, key);
+            if (typeof descriptor?.value === 'string' && /^[a-z0-9_]+(?:\.[a-z0-9_]+)+$/u.test(descriptor.value)
+                && descriptor.value.length <= 256)
+                return descriptor.value;
+        }
+    }
+    return 'development.check.failed';
+}
+//# sourceMappingURL=development-coordinator.js.map

package/dist/development-coordinator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"development-coordinator.js","sourceRoot":"","sources":["../src/development-coordinator.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,yCAAyC,EAAE,MAAM,wBAAwB,CAAC;AACnF,OAAO,EAAE,wBAAwB,EAAgC,MAAM,wBAAwB,CAAC;AAChG,OAAO,EAAE,2BAA2B,EAAqC,MAAM,6BAA6B,CAAC;AAC7G,OAAO,EAAuB,uBAAuB,EAAiC,MAAM,4BAA4B,CAAC;AAYzH;4EAC4E;AAC5E,MAAM,OAAO,4BAA4B;IAC9B,KAAK,CAA0B;IAC/B,OAAO,GAAG,IAAI,GAAG,EAA2B,CAAC;IAC7C,SAAS,GAAG,IAAI,OAAO,EAAqD,CAAC;IAC7E,SAAS,CAAS;IAClB,QAAQ,CAA2C;IACnD,SAAS,CAAyD;IAClE,MAAM,CAAsD;IAErE,YAAY,OAAsC;QAChD,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC;QAChC,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,QAAQ,IAAI,2BAA2B,CAAC;QACjE,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,KAAK,IAAI,wBAAwB,CAAC;QACxD,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,eAAe,IAAI,CAAC,CAAC;QAC9C,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,SAAS,GAAG,CAAC,IAAI,IAAI,CAAC,SAAS,GAAG,CAAC,EAAE,CAAC;YACtF,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;QACxD,CAAC;QACD,IAAI,CAAC,KAAK,GAAG,IAAI,uBAAuB,CAAC,EAAE,cAAc,EAAE,OAAO,CAAC,cAAc;YAC/E,UAAU,EAAE,eAAe,yCAAyC,cAAc,EAAE,CAAC,CAAC;IAC1F,CAAC;IAED,KAAK,CAAC,QAAgB,IAAI,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;IAC9D,YAAY,CAAC,QAAgB;QAC3B,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,WAAW,CAAC;QACxD,OAAO,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC3D,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,QAAgB,EAAE,UAA2B,EAAE;QAC3D,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,KAAK,CAAC,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC,CAAC;QAC7E,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;QACvC,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,UAAU,CAAC,MAAM,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC;QACzG,MAAM,cAAc,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,UAAU,CAAC;QACvE,IAAI,CAAC;YACH,IAAI,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YAC3C,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,IAAI,CAAC,SAAS,EAAE,OAAO,EAAE,EAAE,CAAC;gBAC1D,IAAI,CAAC,cAAc,EAAE;oBAAE,OAAO,KAAK,CAAC;gBACpC,MAAM,CAAC,cAAc,EAAE,CAAC;gBACxB,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;gBACjD,IAAI,KAA8B,CAAC;gBACnC,IAAI,CAAC;oBACH,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;oBAC5D,IAAI,CAAC,cAAc,EAAE;wBAAE,OAAO,KAAK,CAAC;oBACpC,MAAM,CAAC,cAAc,EAAE,CAAC;oBACxB,IAAI,UAAU,CAAC,cAAc,KAAK,MAAM,CAAC,QAAQ;wBAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;oBACxG,KAAK,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;oBAC9C,IAAI,KAAK,CAAC,cAAc,KAAK,MAAM,CAAC,QAAQ;wBAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;gBACrG,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,IAAI,CAAC,cAAc,EAAE;wBAAE,OAAO,KAAK,CAAC;oBACpC,MAAM,CAAC,cAAc,EAAE,CAAC;oBACxB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;oBAC9C,IAAI,CAAC,cAAc,EAAE;wBAAE,OAAO,KAAK,CAAC;oBACpC,IAAI,OAAO,CAAC,QAAQ,KAAK,MAAM,CAAC,QAAQ,EAAE,CAAC;wBACzC,MAAM,GAAG,OAAO,CAAC;wBAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;wBAAC,SAAS;oBAClE,CAAC;oBACD,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC;oBAAC,OAAO,KAAK,CAAC;gBACrE,CAAC;gBACD,IAAI,CAAC,cAAc,EAAE;oBAAE,OAAO,KAAK,CAAC;gBACpC,MAAM,CAAC,cAAc,EAAE,CAAC;gBACxB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;gBAC9C,IAAI,CAAC,cAAc,EAAE;oBAAE,OAAO,KAAK,CAAC;gBACpC,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;oBACxD,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAE,CAAC,WAAY,EAAE,KAAK,CAAC,CAAC;oBAAC,OAAO,IAAI,CAAC;gBACnF,CAAC;gBACD,MAAM,GAAG,OAAO,CAAC;YACnB,CAAC;YACD,wEAAwE;YACxE,2EAA2E;YAC3E,OAAO,KAAK,CAAC;QACf,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,cAAc,EAAE;gBAAE,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,QAAQ,EAClD,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,2BAA2B,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC;YACpE,OAAO,KAAK,CAAC;QACf,CAAC;gBAAS,CAAC;YACT,IAAI,cAAc,EAAE;gBAAE,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QACtD,CAAC;IACH,CAAC;IAED,MAAM,CAAC,QAAgB;QACrB,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,KAAK,CAAC,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC,CAAC;QAC1E,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC7D,CAAC;CACF;AAED,SAAS,UAAU,CAAC,KAAc;IAChC,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACvC,KAAK,MAAM,GAAG,IAAI,CAAC,gBAAgB,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,CAAC;YACxD,MAAM,UAAU,GAAG,MAAM,CAAC,wBAAwB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;YAC/D,IAAI,OAAO,UAAU,EAAE,KAAK,KAAK,QAAQ,IAAI,gCAAgC,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC;mBAC/F,UAAU,CAAC,KAAK,CAAC,MAAM,IAAI,GAAG;gBAAE,OAAO,UAAU,CAAC,KAAK,CAAC;QAC/D,CAAC;IACH,CAAC;IACD,OAAO,0BAA0B,CAAC;AACpC,CAAC"}

package/dist/development-css.d.ts

@@ -0,0 +1,10 @@
+/** The local Player accepts captured, module-scoped styles, with no CSS I/O. */
+export declare function compileDevelopmentCssModule(input: {
+    path: string;
+    text: string;
+    sourceRevision: string;
+}): Promise<{
+    css: string;
+    classes: Record<string, string>;
+}>;
+//# sourceMappingURL=development-css.d.ts.map

package/dist/development-css.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"development-css.d.ts","sourceRoot":"","sources":["../src/development-css.ts"],"names":[],"mappings":"AAKA,gFAAgF;AAChF,wBAAsB,2BAA2B,CAAC,KAAK,EAAE;IACvD,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,cAAc,EAAE,MAAM,CAAC;CACpD,GAAG,OAAO,CAAC;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;CAAE,CAAC,CAiD5D"}

package/dist/development-css.js

@@ -0,0 +1,65 @@
+import { createHash } from 'node:crypto';
+import postcss from 'postcss';
+import selectorParser from 'postcss-selector-parser';
+import { preprocessCSS, resolveConfig } from 'vite';
+/** The local Player accepts captured, module-scoped styles, with no CSS I/O. */
+export async function compileDevelopmentCssModule(input) {
+    const reject = () => { throw new Error('development.build.unsupported_css'); };
+    // Escaped identifiers/URLs, imports, composition and ambient selectors need
+    // a captured dependency contract. Do not delegate their resolution to Vite.
+    if (!input.path.endsWith('.module.css') || input.text.includes('\\')
+        || /[#@]\s*sourceMappingURL\s*=/iu.test(input.text))
+        reject();
+    const root = postcss.parse(input.text, { from: input.path });
+    root.walkAtRules(rule => {
+        if (!['media', 'supports', 'container'].includes(rule.name.toLowerCase()))
+            reject();
+    });
+    root.walkRules(rule => {
+        if (rule.parent?.type === 'rule')
+            reject();
+        selectorParser(selectors => {
+            selectors.each(selector => {
+                const first = selector.nodes.find(node => node.type !== 'comment');
+                if (first?.type !== 'class')
+                    reject();
+            });
+            selectors.walkPseudos(pseudo => {
+                if ([':global', ':local', ':root', ':host', ':host-context', '::slotted'].includes(pseudo.value.toLowerCase()))
+                    reject();
+            });
+            selectors.walkCombinators(combinator => {
+                if (!['', '>'].includes(combinator.value.trim()))
+                    reject();
+            });
+        }).processSync(rule.selector);
+    });
+    root.walkDecls(declaration => {
+        if (/^(?:composes|compose-with|behavior|-moz-binding|(?:-\w+-)?animation|(?:-\w+-)?transition)(?:-|$)/iu.test(declaration.prop))
+            reject();
+    });
+    // These functions are pure layout/color expressions. In particular url(),
+    // image-set(), expression() and file/font loaders cannot acquire resources.
+    const functions = new Set(['var', 'calc', 'clamp', 'min', 'max', 'rgb', 'rgba', 'hsl', 'hsla',
+        'hwb', 'lab', 'lch', 'oklab', 'oklch', 'color', 'color-mix', 'linear-gradient',
+        'radial-gradient', 'conic-gradient', 'repeating-linear-gradient', 'repeating-radial-gradient',
+        'translate', 'translatex', 'translatey', 'translatez', 'translate3d', 'scale', 'scalex', 'scaley',
+        'scalez', 'scale3d', 'rotate', 'rotatex', 'rotatey', 'rotatez', 'rotate3d', 'skew', 'skewx',
+        'skewy', 'matrix', 'matrix3d', 'perspective', 'blur', 'brightness', 'contrast', 'grayscale',
+        'hue-rotate', 'invert', 'opacity', 'saturate', 'sepia', 'drop-shadow', 'repeat', 'minmax', 'fit-content',
+        'selector', 'style']);
+    for (const match of input.text.matchAll(/([a-z_-][\w-]*)\s*\(/giu)) {
+        if (!functions.has(match[1].toLowerCase()))
+            reject();
+    }
+    const namespace = createHash('sha256').update(input.sourceRevision).update('\0').update(input.path).digest('hex').slice(0, 20);
+    const config = await resolveConfig({
+        root: process.cwd(), configFile: false, envFile: false, publicDir: false, logLevel: 'silent',
+        css: { postcss: { plugins: [], map: false }, modules: { generateScopedName: name => `pf_${namespace}_${name}` } },
+    }, 'build');
+    const result = await preprocessCSS(input.text, `/promptframe-captured/${input.path}`, config);
+    if (!result.modules || result.deps?.size)
+        reject();
+    return { css: result.code, classes: result.modules };
+}
+//# sourceMappingURL=development-css.js.map