@promptframe/cli 0.1.60 → 0.1.64

package/dist/development-revisions.js

@@ -0,0 +1,130 @@
+import { createHash } from 'node:crypto';
+import { posix } from 'node:path';
+/** A private copy of one complete input set, including declared dependencies. */
+export class DevelopmentContents {
+    revision;
+    byteLength;
+    #files;
+    constructor(files, limits) {
+        if (!Number.isSafeInteger(limits.maximumFiles) || limits.maximumFiles < 1
+            || !Number.isSafeInteger(limits.maximumBytes) || limits.maximumBytes < 1) {
+            throw new Error('development.contents.invalid_limits');
+        }
+        if (!files.length || files.length > limits.maximumFiles) {
+            throw new Error('development.contents.file_count');
+        }
+        const names = new Set();
+        let total = 0;
+        const captured = files.map(file => {
+            const name = file.path;
+            if (!name || name.length > 1024 || name.includes('\\') || name.includes('\0')
+                || posix.isAbsolute(name) || posix.normalize(name) !== name
+                || name.split('/').some(part => part === '.' || part === '..' || !part)
+                || names.has(name)) {
+                throw new Error('development.contents.invalid_path');
+            }
+            names.add(name);
+            if (!(file.bytes instanceof Uint8Array) || file.bytes.byteLength > limits.maximumBytes - total) {
+                throw new Error('development.contents.byte_limit');
+            }
+            total += file.bytes.byteLength;
+            // Copy now: a caller's Buffer must not change what was checked later.
+            return { path: name, bytes: Buffer.from(file.bytes) };
+        }).sort((a, b) => a.path < b.path ? -1 : a.path > b.path ? 1 : 0);
+        const hash = createHash('sha256').update('promptframe-development-contents/v1\0');
+        this.#files = Object.freeze(captured.map(file => {
+            hash.update(`${Buffer.byteLength(file.path)}:`).update(file.path)
+                .update(`${file.bytes.length}:`).update(file.bytes);
+            return Object.freeze({ path: file.path, base64: file.bytes.toString('base64') });
+        }));
+        this.revision = `sha256:${hash.digest('hex')}`;
+        this.byteLength = total;
+        Object.freeze(this);
+    }
+    /** Consumers receive independent bytes; the checked capture remains immutable. */
+    readFiles() {
+        return this.#files.map(file => ({ path: file.path, bytes: Buffer.from(file.base64, 'base64') }));
+    }
+}
+/**
+ * Adoption only. The caller captures dependencies, runs the common checks/build,
+ * and recaptures current inputs before publish/reject. Watcher events alone do
+ * not authorize a revision. This helper never executes component code.
+ */
+export class DevelopmentRevisionGate {
+    #states = new Map();
+    #checkerKey;
+    #maximumModules;
+    #sequence = 0;
+    constructor(options) {
+        if (!options.checkerKey.trim() || options.checkerKey.length > 512
+            || !Number.isSafeInteger(options.maximumModules) || options.maximumModules < 1) {
+            throw new Error('development.registry.invalid_options');
+        }
+        this.#checkerKey = options.checkerKey;
+        this.#maximumModules = options.maximumModules;
+    }
+    begin(moduleId, source) {
+        this.assertIdentity(moduleId);
+        const previous = this.#states.get(moduleId);
+        const check = Object.freeze({ moduleId, sourceRevision: source.revision, sequence: ++this.#sequence });
+        this.#states.set(moduleId, { check, state: Object.freeze({
+                moduleId, sourceRevision: source.revision, status: 'checking',
+                ...(previous?.state.lastChecked ? { lastChecked: previous.state.lastChecked } : {}),
+            }) });
+        return check;
+    }
+    invalidate(moduleId, diagnostic) {
+        this.assertIdentity(moduleId);
+        const previous = this.#states.get(moduleId);
+        this.#states.set(moduleId, { state: Object.freeze({ moduleId, status: 'failed',
+                diagnostic: diagnostic.slice(0, 1024) || 'development.capture.failed',
+                ...(previous?.state.lastChecked ? { lastChecked: previous.state.lastChecked } : {}),
+            }) });
+    }
+    assertIdentity(moduleId) {
+        if (!moduleId.trim() || moduleId.length > 256 || /[\u0000-\u001f]/.test(moduleId)) {
+            throw new Error('development.module.invalid_identity');
+        }
+        if (!this.#states.has(moduleId) && this.#states.size >= this.#maximumModules) {
+            throw new Error('development.registry.module_limit');
+        }
+    }
+    publish(check, current, artifacts) {
+        const entry = this.currentCheck(check, current);
+        if (!entry)
+            return false;
+        const lastChecked = Object.freeze({ moduleId: check.moduleId,
+            sourceRevision: check.sourceRevision, checkerKey: this.#checkerKey, artifacts });
+        entry.state = Object.freeze({ moduleId: check.moduleId,
+            sourceRevision: check.sourceRevision, status: 'checked', lastChecked });
+        return true;
+    }
+    reject(check, current, diagnostic) {
+        const entry = this.currentCheck(check, current);
+        if (!entry)
+            return false;
+        entry.state = Object.freeze({ ...entry.state, status: 'failed',
+            diagnostic: diagnostic.slice(0, 1024) || 'development.check.failed' });
+        return true;
+    }
+    state(moduleId) {
+        return this.#states.get(moduleId)?.state;
+    }
+    remove(moduleId) {
+        // A late completion retains its old token and cannot recreate this entry.
+        this.#states.delete(moduleId);
+    }
+    currentCheck(check, current) {
+        const entry = this.#states.get(check.moduleId);
+        if (!entry || entry.check !== check || entry.state.status !== 'checking')
+            return undefined;
+        if (current.revision !== check.sourceRevision) {
+            // Even a missed final filesystem notification cannot publish old bytes.
+            this.begin(check.moduleId, current);
+            return undefined;
+        }
+        return entry;
+    }
+}
+//# sourceMappingURL=development-revisions.js.map

package/dist/development-revisions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"development-revisions.js","sourceRoot":"","sources":["../src/development-revisions.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,KAAK,EAAE,MAAM,WAAW,CAAC;AAYlC,iFAAiF;AACjF,MAAM,OAAO,mBAAmB;IACrB,QAAQ,CAAS;IACjB,UAAU,CAAS;IACnB,MAAM,CAA4D;IAE3E,YAAY,KAAiC,EAAE,MAAyB;QACtE,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,MAAM,CAAC,YAAY,GAAG,CAAC;eACpE,CAAC,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,MAAM,CAAC,YAAY,GAAG,CAAC,EAAE,CAAC;YAC3E,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;QACzD,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,MAAM,IAAI,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC,YAAY,EAAE,CAAC;YACxD,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;QACrD,CAAC;QACD,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;QAChC,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE;YAChC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC;YACvB,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,GAAG,IAAI,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;mBACxE,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,IAAI;mBACxD,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,IAAI,IAAI,CAAC,IAAI,CAAC;mBACpE,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;gBACrB,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;YACvD,CAAC;YACD,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAChB,IAAI,CAAC,CAAC,IAAI,CAAC,KAAK,YAAY,UAAU,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,UAAU,GAAG,MAAM,CAAC,YAAY,GAAG,KAAK,EAAE,CAAC;gBAC/F,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;YACrD,CAAC;YACD,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC;YAC/B,sEAAsE;YACtE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACxD,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAClE,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,uCAAuC,CAAC,CAAC;QAClF,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE;YAC9C,IAAI,CAAC,MAAM,CAAC,GAAG,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC;iBAC9D,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACtD,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QACnF,CAAC,CAAC,CAAC,CAAC;QACJ,IAAI,CAAC,QAAQ,GAAG,UAAU,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;QAC/C,IAAI,CAAC,UAAU,GAAG,KAAK,CAAC;QACxB,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACtB,CAAC;IAED,kFAAkF;IAClF,SAAS;QACP,OAAO,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC;IACnG,CAAC;CACF;AAyBD;;;;GAIG;AACH,MAAM,OAAO,uBAAuB;IACzB,OAAO,GAAG,IAAI,GAAG,EAAuE,CAAC;IACzF,WAAW,CAAS;IACpB,eAAe,CAAS;IACjC,SAAS,GAAG,CAAC,CAAC;IAEd,YAAY,OAAuD;QACjE,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,EAAE,IAAI,OAAO,CAAC,UAAU,CAAC,MAAM,GAAG,GAAG;eAC5D,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,cAAc,CAAC,IAAI,OAAO,CAAC,cAAc,GAAG,CAAC,EAAE,CAAC;YACjF,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;QAC1D,CAAC;QACD,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,UAAU,CAAC;QACtC,IAAI,CAAC,eAAe,GAAG,OAAO,CAAC,cAAc,CAAC;IAChD,CAAC;IAED,KAAK,CAAC,QAAgB,EAAE,MAA2B;QACjD,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;QAC9B,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC5C,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,CAAC,QAAQ,EAAE,QAAQ,EAAE,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;QACvG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC;gBACvD,QAAQ,EAAE,cAAc,EAAE,MAAM,CAAC,QAAQ,EAAE,MAAM,EAAE,UAAU;gBAC7D,GAAG,CAAC,QAAQ,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,QAAQ,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACpF,CAAC,EAAE,CAAC,CAAC;QACN,OAAO,KAAK,CAAC;IACf,CAAC;IAED,UAAU,CAAC,QAAgB,EAAE,UAAkB;QAC7C,IAAI,CAAC,cAAc,CAAC,QAAQ,CAAC,CAAC;QAC9B,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC5C,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ;gBAC5E,UAAU,EAAE,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,4BAA4B;gBACrE,GAAG,CAAC,QAAQ,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,QAAQ,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACpF,CAAC,EAAE,CAAC,CAAC;IACR,CAAC;IAEO,cAAc,CAAC,QAAgB;QACrC,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,IAAI,QAAQ,CAAC,MAAM,GAAG,GAAG,IAAI,iBAAiB,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YAClF,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;QACzD,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;YAC7E,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;QACvD,CAAC;IACH,CAAC;IAED,OAAO,CAAC,KAAuB,EAAE,OAA4B,EAAE,SAA8B;QAC3F,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QAChD,IAAI,CAAC,KAAK;YAAE,OAAO,KAAK,CAAC;QACzB,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ;YAC1D,cAAc,EAAE,KAAK,CAAC,cAAc,EAAE,UAAU,EAAE,IAAI,CAAC,WAAW,EAAE,SAAS,EAAE,CAAC,CAAC;QACnF,KAAK,CAAC,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACpD,cAAc,EAAE,KAAK,CAAC,cAAc,EAAE,MAAM,EAAE,SAAS,EAAE,WAAW,EAAE,CAAC,CAAC;QAC1E,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,CAAC,KAAuB,EAAE,OAA4B,EAAE,UAAkB;QAC9E,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;QAChD,IAAI,CAAC,KAAK;YAAE,OAAO,KAAK,CAAC;QACzB,KAAK,CAAC,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,KAAK,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ;YAC5D,UAAU,EAAE,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,0BAA0B,EAAE,CAAC,CAAC;QACzE,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,CAAC,QAAgB;QACpB,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,KAAK,CAAC;IAC3C,CAAC;IAED,MAAM,CAAC,QAAgB;QACrB,0EAA0E;QAC1E,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAChC,CAAC;IAEO,YAAY,CAAC,KAAuB,EAAE,OAA4B;QACxE,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC/C,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,KAAK,KAAK,KAAK,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,KAAK,UAAU;YAAE,OAAO,SAAS,CAAC;QAC3F,IAAI,OAAO,CAAC,QAAQ,KAAK,KAAK,CAAC,cAAc,EAAE,CAAC;YAC9C,wEAAwE;YACxE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;YACpC,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;CACF"}

package/dist/development-validation.d.ts

@@ -0,0 +1,22 @@
+import type { DevelopmentContents } from './development-revisions.js';
+export interface DevelopmentValidationReceipt {
+    readonly sourceRevision: string;
+    readonly securityPolicyVersion: string;
+    readonly securityPolicyDigest: string;
+    readonly securityEvaluatorMode: 'ast';
+    readonly checkedRuleIds: readonly string[];
+}
+export declare class DevelopmentValidationError extends Error {
+    readonly code: string;
+    readonly diagnosticCode?: string | undefined;
+    constructor(code: string, diagnosticCode?: string | undefined);
+}
+/** The ordinary CLI validates a private materialization of the capture. It
+ * never reopens the live workspace, runs package scripts, or grants a platform
+ * admission. The caller must still build these bytes, recapture and publish. */
+export declare function validateDevelopmentContents(contents: DevelopmentContents, options?: {
+    temporaryParent?: string;
+    timeoutMs?: number;
+    signal?: AbortSignal;
+}): Promise<DevelopmentValidationReceipt>;
+//# sourceMappingURL=development-validation.d.ts.map

package/dist/development-validation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"development-validation.d.ts","sourceRoot":"","sources":["../src/development-validation.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AAEtE,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,qBAAqB,EAAE,MAAM,CAAC;IACvC,QAAQ,CAAC,oBAAoB,EAAE,MAAM,CAAC;IACtC,QAAQ,CAAC,qBAAqB,EAAE,KAAK,CAAC;IACtC,QAAQ,CAAC,cAAc,EAAE,SAAS,MAAM,EAAE,CAAC;CAC5C;AAED,qBAAa,0BAA2B,SAAQ,KAAK;IACvC,QAAQ,CAAC,IAAI,EAAE,MAAM;IAAE,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM;gBAA9C,IAAI,EAAE,MAAM,EAAW,cAAc,CAAC,EAAE,MAAM,YAAA;CAGpE;AAED;;gFAEgF;AAChF,wBAAsB,2BAA2B,CAC/C,QAAQ,EAAE,mBAAmB,EAC7B,OAAO,GAAE;IAAE,eAAe,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,WAAW,CAAA;CAAO,GACnF,OAAO,CAAC,4BAA4B,CAAC,CA0CvC"}

package/dist/development-validation.js

@@ -0,0 +1,122 @@
+import { spawn } from 'node:child_process';
+import { mkdtemp, mkdir, rm, writeFile } from 'node:fs/promises';
+import { tmpdir } from 'node:os';
+import { dirname, join } from 'node:path';
+import { fileURLToPath } from 'node:url';
+export class DevelopmentValidationError extends Error {
+    code;
+    diagnosticCode;
+    constructor(code, diagnosticCode) {
+        super(code);
+        this.code = code;
+        this.diagnosticCode = diagnosticCode;
+        this.name = 'DevelopmentValidationError';
+    }
+}
+/** The ordinary CLI validates a private materialization of the capture. It
+ * never reopens the live workspace, runs package scripts, or grants a platform
+ * admission. The caller must still build these bytes, recapture and publish. */
+export async function validateDevelopmentContents(contents, options = {}) {
+    const timeoutMs = options.timeoutMs ?? 30_000;
+    if (!Number.isSafeInteger(timeoutMs) || timeoutMs < 1 || timeoutMs > 120_000) {
+        throw new DevelopmentValidationError('development.validation.invalid_timeout');
+    }
+    options.signal?.throwIfAborted();
+    const files = contents.readFiles();
+    for (const file of files) {
+        if (file.path.split('/').some(part => ['node_modules', 'dist', '.git', '.component-packages', '.promptframe'].includes(part))) {
+            throw new DevelopmentValidationError('development.validation.excluded_input');
+        }
+    }
+    const directory = await mkdtemp(join(options.temporaryParent ?? tmpdir(), 'promptframe-check-'));
+    let hadFailure = false;
+    try {
+        for (const file of files) {
+            options.signal?.throwIfAborted();
+            const path = join(directory, ...file.path.split('/'));
+            await mkdir(dirname(path), { recursive: true });
+            await writeFile(path, file.bytes, { flag: 'wx', mode: 0o400 });
+        }
+        const result = await runCapturedValidation(directory, timeoutMs, options.signal);
+        const output = JSON.parse(result);
+        if (output.command !== 'validate' || output.securityEvaluatorMode !== 'ast'
+            || typeof output.securityPolicyVersion !== 'string' || typeof output.securityPolicyDigest !== 'string'
+            || !Array.isArray(output.checkedRuleIds) || !output.checkedRuleIds.every(rule => typeof rule === 'string')) {
+            throw new DevelopmentValidationError('development.validation.invalid_receipt');
+        }
+        return Object.freeze({ sourceRevision: contents.revision,
+            securityPolicyVersion: output.securityPolicyVersion, securityPolicyDigest: output.securityPolicyDigest,
+            securityEvaluatorMode: 'ast', checkedRuleIds: Object.freeze([...output.checkedRuleIds]) });
+    }
+    catch (error) {
+        hadFailure = true;
+        throw error;
+    }
+    finally {
+        // runCapturedValidation waits for actual child close, also after abort or
+        // timeout. Its reader cannot outlive this private input directory.
+        try {
+            await rm(directory, { recursive: true, force: true });
+        }
+        catch (error) {
+            if (!hadFailure)
+                throw error;
+            process.stderr.write(JSON.stringify({ code: 'development.validation.cleanup_failed', directory }) + '\n');
+        }
+    }
+}
+function runCapturedValidation(directory, timeoutMs, signal) {
+    signal?.throwIfAborted();
+    return new Promise((resolve, reject) => {
+        const child = spawn(process.execPath, [fileURLToPath(new URL('./index.js', import.meta.url)), 'validate', directory, '--json'], {
+            cwd: directory, stdio: ['ignore', 'pipe', 'pipe'],
+            // Validation is local. Neither endpoint/auth configuration nor arbitrary
+            // Node preload options from the host belong in this subprocess.
+            env: { NO_COLOR: '1', ...(process.platform === 'win32' && process.env.SystemRoot ? { SystemRoot: process.env.SystemRoot } : {}) },
+        });
+        let firstError, failed = false, total = 0;
+        const stdout = [], stderr = [];
+        const fail = (error) => {
+            if (!failed) {
+                failed = true;
+                firstError = error;
+            }
+            child.kill('SIGKILL');
+        };
+        const receive = (target, chunk) => {
+            total += chunk.length;
+            if (total > 512 * 1024)
+                return fail(new DevelopmentValidationError('development.validation.output_limit'));
+            target.push(chunk);
+        };
+        child.stdout.on('data', chunk => receive(stdout, chunk));
+        child.stderr.on('data', chunk => receive(stderr, chunk));
+        const abort = () => fail(signal.reason);
+        signal?.addEventListener('abort', abort, { once: true });
+        const timeout = setTimeout(() => fail(new DevelopmentValidationError('development.validation.timeout')), timeoutMs);
+        child.once('error', error => { if (!failed) {
+            failed = true;
+            firstError = error;
+        } });
+        child.once('close', code => {
+            clearTimeout(timeout);
+            signal?.removeEventListener('abort', abort);
+            if (failed)
+                return reject(firstError);
+            if (code === 0)
+                return resolve(Buffer.concat(stdout).toString('utf8'));
+            let diagnosticCode;
+            try {
+                const output = JSON.parse(Buffer.concat(stderr).toString('utf8'));
+                const candidate = output.diagnostic?.code;
+                if (typeof candidate === 'string' && /^[a-z0-9_]+(?:\.[a-z0-9_]+)+$/u.test(candidate) && candidate.length <= 256)
+                    diagnosticCode = candidate;
+            }
+            catch { /* Unstructured child output is not a diagnostic contract. */ }
+            reject(new DevelopmentValidationError('development.validation.rejected', diagnosticCode));
+        });
+        if (signal?.aborted)
+            abort();
+    });
+}
+//# sourceMappingURL=development-validation.js.map

package/dist/development-validation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"development-validation.js","sourceRoot":"","sources":["../src/development-validation.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACjE,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAWzC,MAAM,OAAO,0BAA2B,SAAQ,KAAK;IAC9B;IAAuB;IAA5C,YAAqB,IAAY,EAAW,cAAuB;QACjE,KAAK,CAAC,IAAI,CAAC,CAAC;QADO,SAAI,GAAJ,IAAI,CAAQ;QAAW,mBAAc,GAAd,cAAc,CAAS;QACpD,IAAI,CAAC,IAAI,GAAG,4BAA4B,CAAC;IACxD,CAAC;CACF;AAED;;gFAEgF;AAChF,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAC/C,QAA6B,EAC7B,UAAkF,EAAE;IAEpF,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,MAAM,CAAC;IAC9C,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,SAAS,CAAC,IAAI,SAAS,GAAG,CAAC,IAAI,SAAS,GAAG,OAAO,EAAE,CAAC;QAC7E,MAAM,IAAI,0BAA0B,CAAC,wCAAwC,CAAC,CAAC;IACjF,CAAC;IACD,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC;IACjC,MAAM,KAAK,GAAG,QAAQ,CAAC,SAAS,EAAE,CAAC;IACnC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,cAAc,EAAE,MAAM,EAAE,MAAM,EAAE,qBAAqB,EAAE,cAAc,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;YAC9H,MAAM,IAAI,0BAA0B,CAAC,uCAAuC,CAAC,CAAC;QAChF,CAAC;IACH,CAAC;IACD,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,eAAe,IAAI,MAAM,EAAE,EAAE,oBAAoB,CAAC,CAAC,CAAC;IACjG,IAAI,UAAU,GAAG,KAAK,CAAC;IACvB,IAAI,CAAC;QACH,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;YACzB,OAAO,CAAC,MAAM,EAAE,cAAc,EAAE,CAAC;YACjC,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;YACtD,MAAM,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YAChD,MAAM,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACjE,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,qBAAqB,CAAC,SAAS,EAAE,SAAS,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;QACjF,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAA4B,CAAC;QAC7D,IAAI,MAAM,CAAC,OAAO,KAAK,UAAU,IAAI,MAAM,CAAC,qBAAqB,KAAK,KAAK;eACtE,OAAO,MAAM,CAAC,qBAAqB,KAAK,QAAQ,IAAI,OAAO,MAAM,CAAC,oBAAoB,KAAK,QAAQ;eACnG,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC,EAAE,CAAC;YAC7G,MAAM,IAAI,0BAA0B,CAAC,wCAAwC,CAAC,CAAC;QACjF,CAAC;QACD,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,cAAc,EAAE,QAAQ,CAAC,QAAQ;YACtD,qBAAqB,EAAE,MAAM,CAAC,qBAAqB,EAAE,oBAAoB,EAAE,MAAM,CAAC,oBAAoB;YACtG,qBAAqB,EAAE,KAAK,EAAE,cAAc,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,MAAM,CAAC,cAAc,CAAC,CAAC,EAAE,CAAC,CAAC;IAC/F,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,UAAU,GAAG,IAAI,CAAC;QAAC,MAAM,KAAK,CAAC;IACjC,CAAC;YAAS,CAAC;QACT,0EAA0E;QAC1E,mEAAmE;QACnE,IAAI,CAAC;YAAC,MAAM,EAAE,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QAAC,CAAC;QAC9D,OAAO,KAAK,EAAE,CAAC;YACb,IAAI,CAAC,UAAU;gBAAE,MAAM,KAAK,CAAC;YAC7B,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,uCAAuC,EAAE,SAAS,EAAE,CAAC,GAAG,IAAI,CAAC,CAAC;QAC5G,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,qBAAqB,CAAC,SAAiB,EAAE,SAAiB,EAAE,MAAoB;IACvF,MAAM,EAAE,cAAc,EAAE,CAAC;IACzB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,aAAa,CAAC,IAAI,GAAG,CAAC,YAAY,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,UAAU,EAAE,SAAS,EAAE,QAAQ,CAAC,EAAE;YAC9H,GAAG,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;YACjD,yEAAyE;YACzE,gEAAgE;YAChE,GAAG,EAAE,EAAE,QAAQ,EAAE,GAAG,EAAE,GAAG,CAAC,OAAO,CAAC,QAAQ,KAAK,OAAO,IAAI,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE;SAClI,CAAC,CAAC;QACH,IAAI,UAAmB,EAAE,MAAM,GAAG,KAAK,EAAE,KAAK,GAAG,CAAC,CAAC;QACnD,MAAM,MAAM,GAAa,EAAE,EAAE,MAAM,GAAa,EAAE,CAAC;QACnD,MAAM,IAAI,GAAG,CAAC,KAAc,EAAE,EAAE;YAC9B,IAAI,CAAC,MAAM,EAAE,CAAC;gBAAC,MAAM,GAAG,IAAI,CAAC;gBAAC,UAAU,GAAG,KAAK,CAAC;YAAC,CAAC;YACnD,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACxB,CAAC,CAAC;QACF,MAAM,OAAO,GAAG,CAAC,MAAgB,EAAE,KAAa,EAAE,EAAE;YAClD,KAAK,IAAI,KAAK,CAAC,MAAM,CAAC;YACtB,IAAI,KAAK,GAAG,GAAG,GAAG,IAAI;gBAAE,OAAO,IAAI,CAAC,IAAI,0BAA0B,CAAC,qCAAqC,CAAC,CAAC,CAAC;YAC3G,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACrB,CAAC,CAAC;QACF,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;QACzD,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;QACzD,MAAM,KAAK,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,MAAO,CAAC,MAAM,CAAC,CAAC;QACzC,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACzD,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,0BAA0B,CAAC,gCAAgC,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;QACpH,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;YAAC,MAAM,GAAG,IAAI,CAAC;YAAC,UAAU,GAAG,KAAK,CAAC;QAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACtF,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE;YACzB,YAAY,CAAC,OAAO,CAAC,CAAC;YAAC,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YACnE,IAAI,MAAM;gBAAE,OAAO,MAAM,CAAC,UAAU,CAAC,CAAC;YACtC,IAAI,IAAI,KAAK,CAAC;gBAAE,OAAO,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;YACvE,IAAI,cAAkC,CAAC;YACvC,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAwC,CAAC;gBACzG,MAAM,SAAS,GAAG,MAAM,CAAC,UAAU,EAAE,IAAI,CAAC;gBAC1C,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,gCAAgC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,SAAS,CAAC,MAAM,IAAI,GAAG;oBAAE,cAAc,GAAG,SAAS,CAAC;YAC/I,CAAC;YAAC,MAAM,CAAC,CAAC,6DAA6D,CAAC,CAAC;YACzE,MAAM,CAAC,IAAI,0BAA0B,CAAC,iCAAiC,EAAE,cAAc,CAAC,CAAC,CAAC;QAC5F,CAAC,CAAC,CAAC;QACH,IAAI,MAAM,EAAE,OAAO;YAAE,KAAK,EAAE,CAAC;IAC/B,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/development-workspace.d.ts

@@ -0,0 +1,37 @@
+import { DevelopmentContents } from './development-revisions.js';
+export interface DevelopmentWorkspaceModule {
+    id: string;
+    path: string;
+}
+/** One capture includes the module and its real shared pnpm lock bytes. Source
+ * aliases/parent imports remain explicitly unsupported by the common policy. */
+export declare function captureDevelopmentModule(root: string, module: DevelopmentWorkspaceModule): DevelopmentContents;
+/** A single root Vite watcher plus a closed HTTP surface. Vite's raw-source,
+ * HTML, /@fs, HMR and plugin/config serving middleware is never attached. */
+export declare function startDevelopmentWorkspace(options: {
+    root: string;
+    modules: readonly DevelopmentWorkspaceModule[];
+    studioOrigin: string;
+    host?: '127.0.0.1' | '::1';
+    port?: number;
+    connectionId?: string;
+    portFallback?: boolean;
+    idleTimeoutMs?: number;
+    heartbeatMs?: number;
+}): Promise<Readonly<{
+    connectionId: string;
+    url: `http://${string}`;
+    studioOrigin: string;
+    credential: string;
+    lifecycle: {
+        mode: "until_stopped";
+        idleTimeoutSeconds: number;
+        heartbeatSeconds: number;
+    };
+    closed: Promise<{
+        reason: string;
+        failed: boolean;
+    }>;
+    close: (reason?: string) => Promise<void>;
+}>>;
+//# sourceMappingURL=development-workspace.d.ts.map

package/dist/development-workspace.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"development-workspace.d.ts","sourceRoot":"","sources":["../src/development-workspace.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AAKjE,MAAM,WAAW,0BAA0B;IAAG,EAAE,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE;AAExE;gFACgF;AAChF,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,0BAA0B,GAAG,mBAAmB,CAuD9G;AAED;6EAC6E;AAC7E,wBAAsB,yBAAyB,CAAC,OAAO,EAAE;IACvD,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,SAAS,0BAA0B,EAAE,CAAC;IAAC,YAAY,EAAE,MAAM,CAAC;IACnF,IAAI,CAAC,EAAE,WAAW,GAAG,KAAK,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,YAAY,CAAC,EAAC,MAAM,CAAC;IAAC,YAAY,CAAC,EAAC,OAAO,CAAC;IACvF,aAAa,CAAC,EAAC,MAAM,CAAC;IAAC,WAAW,CAAC,EAAC,MAAM,CAAC;CAC5C;;;;;;;;;;;gBA+LwC,MAAM;gBAAQ,OAAO;;;IAuB7D"}