@promptframe/cli 0.1.64 → 0.1.67

package/dist/preview-resource-draft.d.ts

@@ -0,0 +1,31 @@
+export declare const PREVIEW_RESOURCE_DRAFT_TTL_MS: number;
+export declare const PREVIEW_RESOURCE_FILE_BYTES: number;
+export interface PreviewResourceFile {
+    path: string;
+    dev: number;
+    ino: number;
+    size: number;
+    mtimeMs: number;
+    sha256: string;
+    contentType: string;
+}
+export interface PreviewResourceSelection {
+    prop: string;
+    reference?: string;
+    sessionId?: string;
+    file?: PreviewResourceFile;
+}
+export interface PreviewResourceDraft {
+    contractVersion: 'promptframe-local-resource-draft/v1';
+    updatedAt: string;
+    selections: PreviewResourceSelection[];
+}
+export declare function previewResourceDraftPath(root: string): string;
+/** Managed draft parents must be real directories, including for reads/clear. */
+export declare function assertPreviewResourceDirectory(root: string): boolean;
+export declare function clearPreviewResourceDraft(root: string): void;
+export declare function readPreviewResourceDraft(root: string, now?: number): PreviewResourceDraft | undefined;
+export declare function previewResourcePropPath(pointer: string): (string | number)[];
+export declare function capturePreviewResourceFile(file: string): PreviewResourceFile;
+export declare function writePreviewResourceSelection(root: string, selection: PreviewResourceSelection): void;
+//# sourceMappingURL=preview-resource-draft.d.ts.map

package/dist/preview-resource-draft.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"preview-resource-draft.d.ts","sourceRoot":"","sources":["../src/preview-resource-draft.ts"],"names":[],"mappings":"AAMA,eAAO,MAAM,6BAA6B,QAAsB,CAAC;AACjE,eAAO,MAAM,2BAA2B,QAAmB,CAAC;AAC5D,MAAM,WAAW,mBAAmB;IAAG,IAAI,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAA;CAAE;AACnJ,MAAM,WAAW,wBAAwB;IAAG,IAAI,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,mBAAmB,CAAA;CAAE;AAC9H,MAAM,WAAW,oBAAoB;IAAG,eAAe,EAAE,qCAAqC,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,wBAAwB,EAAE,CAAA;CAAE;AAE3J,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAA2E;AAEzI,iFAAiF;AACjF,wBAAgB,8BAA8B,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAMpE;AAED,wBAAgB,yBAAyB,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAa5D;AAED,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,SAAa,GAAG,oBAAoB,GAAG,SAAS,CAyBzG;AAED,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,MAAM,GAAG,CAAC,MAAM,GAAG,MAAM,CAAC,EAAE,CAK5E;AAED,wBAAgB,0BAA0B,CAAC,IAAI,EAAE,MAAM,GAAG,mBAAmB,CAuB5E;AAED,wBAAgB,6BAA6B,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,wBAAwB,GAAG,IAAI,CAmBrG"}

package/dist/preview-resource-draft.js

@@ -0,0 +1,185 @@
+import { createHash } from 'node:crypto';
+import { closeSync, constants, fstatSync, fsyncSync, lstatSync, mkdirSync, openSync, readFileSync, readSync, renameSync, rmSync, writeFileSync } from 'node:fs';
+import { dirname, extname, isAbsolute, join, resolve } from 'node:path';
+import { parsePromptFrameAssetReference } from '@promptframe/contracts';
+export const PREVIEW_RESOURCE_DRAFT_TTL_MS = 24 * 60 * 60 * 1000;
+export const PREVIEW_RESOURCE_FILE_BYTES = 16 * 1024 * 1024;
+export function previewResourceDraftPath(root) { return join(root, '.promptframe', 'local-previews', 'resources.json'); }
+/** Managed draft parents must be real directories, including for reads/clear. */
+export function assertPreviewResourceDirectory(root) {
+    for (const part of [join(root, '.promptframe'), join(root, '.promptframe', 'local-previews')]) {
+        try {
+            if (!lstatSync(part).isDirectory())
+                throw Error('preview.resource.draft_invalid');
+        }
+        catch (error) {
+            if (error.code === 'ENOENT')
+                return false;
+            throw Error('preview.resource.draft_invalid');
+        }
+    }
+    return true;
+}
+export function clearPreviewResourceDraft(root) {
+    if (!assertPreviewResourceDirectory(root))
+        return;
+    const path = previewResourceDraftPath(root);
+    let fd;
+    try {
+        fd = openSync(path, constants.O_RDONLY | constants.O_NOFOLLOW);
+    }
+    catch (error) {
+        if (error.code === 'ENOENT')
+            return;
+        throw Error('preview.resource.draft_invalid');
+    }
+    try {
+        const stat = fstatSync(fd);
+        if (!stat.isFile() || stat.size > 65_536 || JSON.parse(readFileSync(fd, 'utf8')).contractVersion !== 'promptframe-local-resource-draft/v1')
+            throw Error('preview.resource.draft_invalid');
+        const current = lstatSync(path);
+        if (current.dev !== stat.dev || current.ino !== stat.ino)
+            throw Error('preview.resource.draft_invalid');
+        rmSync(path);
+    }
+    finally {
+        closeSync(fd);
+    }
+}
+export function readPreviewResourceDraft(root, now = Date.now()) {
+    const file = previewResourceDraftPath(root);
+    if (!assertPreviewResourceDirectory(root))
+        return undefined;
+    let fd;
+    try {
+        fd = openSync(file, constants.O_RDONLY | constants.O_NOFOLLOW);
+    }
+    catch (error) {
+        if (error.code === 'ENOENT')
+            return undefined;
+        throw Error('preview.resource.draft_invalid');
+    }
+    try {
+        const stat = fstatSync(fd);
+        if (!stat.isFile() || stat.size > 65_536)
+            throw Error();
+        const draft = JSON.parse(readFileSync(fd, 'utf8'));
+        if (draft.contractVersion !== 'promptframe-local-resource-draft/v1' || !Number.isFinite(Date.parse(draft.updatedAt))
+            || now < Date.parse(draft.updatedAt) || now - Date.parse(draft.updatedAt) >= PREVIEW_RESOURCE_DRAFT_TTL_MS
+            || !Array.isArray(draft.selections) || draft.selections.length > 16)
+            throw Error();
+        for (const row of draft.selections) {
+            previewResourcePropPath(row.prop);
+            if (!!row.reference === !!row.file)
+                throw Error();
+            if (row.reference && (!parsePromptFrameAssetReference(row.reference) || !row.sessionId || row.sessionId.length > 160))
+                throw Error();
+            if (row.file && (typeof row.file.path !== 'string' || !isAbsolute(row.file.path) || !/^sha256:[a-f0-9]{64}$/u.test(row.file.sha256)
+                || !['image/png', 'image/jpeg', 'image/webp'].includes(row.file.contentType)
+                || !Number.isSafeInteger(row.file.ino) || !Number.isSafeInteger(row.file.dev) || !Number.isFinite(row.file.mtimeMs)
+                || !Number.isSafeInteger(row.file.size) || row.file.size < 1 || row.file.size > PREVIEW_RESOURCE_FILE_BYTES))
+                throw Error();
+        }
+        if (new Set(draft.selections.map(row => row.prop)).size !== draft.selections.length)
+            throw Error();
+        return draft;
+    }
+    catch {
+        throw Error('preview.resource.draft_invalid_or_expired');
+    }
+    finally {
+        closeSync(fd);
+    }
+}
+export function previewResourcePropPath(pointer) {
+    if (!pointer.startsWith('/') || pointer.length > 500)
+        throw Error('preview.resource.prop_invalid');
+    const keys = pointer.slice(1).split('/').map(key => key.replace(/~1/g, '/').replace(/~0/g, '~'));
+    if (!keys.length || keys.length > 8 || keys.some(key => !key || ['__proto__', 'prototype', 'constructor'].includes(key)))
+        throw Error('preview.resource.prop_invalid');
+    return keys.map(key => /^(?:0|[1-9][0-9]*)$/u.test(key) ? Number(key) : key);
+}
+export function capturePreviewResourceFile(file) {
+    const path = resolve(file), fd = openSync(path, constants.O_RDONLY | constants.O_NOFOLLOW);
+    try {
+        const stat = fstatSync(fd);
+        if (!stat.isFile() || stat.size < 1 || stat.size > PREVIEW_RESOURCE_FILE_BYTES)
+            throw Error('preview.resource.file_budget');
+        const contentType = new Map([['.png', 'image/png'], ['.jpg', 'image/jpeg'], ['.jpeg', 'image/jpeg'], ['.webp', 'image/webp']]).get(extname(path).toLowerCase());
+        if (!contentType)
+            throw Error('preview.resource.file_type');
+        const buffer = Buffer.alloc(65_536), hash = createHash('sha256');
+        let total = 0, first = true;
+        while (true) {
+            const count = readSync(fd, buffer);
+            if (!count)
+                break;
+            total += count;
+            if (total > PREVIEW_RESOURCE_FILE_BYTES)
+                throw Error('preview.resource.file_budget');
+            if (first) {
+                first = false;
+                if (contentType === 'image/png' && !buffer.subarray(0, 8).equals(Buffer.from([137, 80, 78, 71, 13, 10, 26, 10]))
+                    || contentType === 'image/jpeg' && !(buffer[0] === 255 && buffer[1] === 216 && buffer[2] === 255)
+                    || contentType === 'image/webp' && !(buffer.toString('ascii', 0, 4) === 'RIFF' && buffer.toString('ascii', 8, 12) === 'WEBP'))
+                    throw Error('preview.resource.file_type');
+            }
+            hash.update(buffer.subarray(0, count));
+        }
+        const after = fstatSync(fd);
+        if (total !== stat.size || after.size !== stat.size || after.mtimeMs !== stat.mtimeMs || after.ino !== stat.ino || after.dev !== stat.dev)
+            throw Error('preview.resource.file_changed');
+        return { path, dev: stat.dev, ino: stat.ino, size: stat.size, mtimeMs: stat.mtimeMs,
+            sha256: 'sha256:' + hash.digest('hex'), contentType };
+    }
+    finally {
+        closeSync(fd);
+    }
+}
+export function writePreviewResourceSelection(root, selection) {
+    previewResourcePropPath(selection.prop);
+    if (selection.reference && (!parsePromptFrameAssetReference(selection.reference) || !selection.sessionId))
+        throw Error('preview.resource.reference_invalid');
+    if (!!selection.reference === !!selection.file)
+        throw Error('preview.resource.selection_invalid');
+    const path = previewResourceDraftPath(root), directory = dirname(path);
+    for (const part of [join(root, '.promptframe'), directory]) {
+        mkdirSync(part, { recursive: true, mode: 0o700 });
+        if (lstatSync(part).isSymbolicLink())
+            throw Error('preview.resource.draft_invalid');
+    }
+    let previous;
+    try {
+        previous = readPreviewResourceDraft(root);
+    }
+    catch {
+        throw Error('preview.resource.draft_invalid_or_expired');
+    }
+    const selections = [...(previous?.selections ?? []).filter(row => row.prop !== selection.prop), selection];
+    if (selections.length > 16)
+        throw Error('preview.resource.draft_budget');
+    const draft = { contractVersion: 'promptframe-local-resource-draft/v1', updatedAt: new Date().toISOString(), selections };
+    const temporary = path + '.' + process.pid + '.tmp';
+    let fd;
+    try {
+        fd = openSync(temporary, constants.O_CREAT | constants.O_EXCL | constants.O_WRONLY | constants.O_NOFOLLOW, 0o600);
+        writeFileSync(fd, JSON.stringify(draft, null, 2) + '\n');
+        fsyncSync(fd);
+        closeSync(fd);
+        fd = undefined;
+        renameSync(temporary, path);
+        const parent = openSync(directory, constants.O_RDONLY);
+        try {
+            fsyncSync(parent);
+        }
+        finally {
+            closeSync(parent);
+        }
+    }
+    finally {
+        if (fd !== undefined)
+            closeSync(fd);
+        rmSync(temporary, { force: true });
+    }
+}
+//# sourceMappingURL=preview-resource-draft.js.map

package/dist/preview-resource-draft.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"preview-resource-draft.js","sourceRoot":"","sources":["../src/preview-resource-draft.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,YAAY,EAC/F,QAAQ,EAAE,UAAU,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC/D,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACxE,OAAO,EAAE,8BAA8B,EAAE,MAAM,wBAAwB,CAAC;AAExE,MAAM,CAAC,MAAM,6BAA6B,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AACjE,MAAM,CAAC,MAAM,2BAA2B,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAK5D,MAAM,UAAU,wBAAwB,CAAC,IAAY,IAAY,OAAO,IAAI,CAAC,IAAI,EAAE,cAAc,EAAE,gBAAgB,EAAE,gBAAgB,CAAC,CAAC,CAAC,CAAC;AAEzI,iFAAiF;AACjF,MAAM,UAAU,8BAA8B,CAAC,IAAY;IACzD,KAAK,MAAM,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,cAAc,CAAC,EAAE,IAAI,CAAC,IAAI,EAAE,cAAc,EAAE,gBAAgB,CAAC,CAAC,EAAE,CAAC;QAC9F,IAAI,CAAC;YAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE;gBAAE,MAAM,KAAK,CAAC,gCAAgC,CAAC,CAAC;QAAC,CAAC;QAC1F,OAAO,KAAK,EAAE,CAAC;YAAC,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;gBAAE,OAAO,KAAK,CAAC;YAAC,MAAM,KAAK,CAAC,gCAAgC,CAAC,CAAC;QAAC,CAAC;IACxI,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,IAAY;IACpD,IAAI,CAAC,8BAA8B,CAAC,IAAI,CAAC;QAAE,OAAO;IAClD,MAAM,IAAI,GAAG,wBAAwB,CAAC,IAAI,CAAC,CAAC;IAAC,IAAI,EAAU,CAAC;IAC5D,IAAI,CAAC;QAAC,EAAE,GAAG,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,UAAU,CAAC,CAAC;IAAC,CAAC;IACvE,OAAO,KAAK,EAAE,CAAC;QAAC,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO;QAAC,MAAM,KAAK,CAAC,gCAAgC,CAAC,CAAC;IAAC,CAAC;IAChI,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,SAAS,CAAC,EAAE,CAAC,CAAC;QAC3B,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,IAAI,GAAG,MAAM,IAAI,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC,eAAe,KAAK,qCAAqC;YACxI,MAAM,KAAK,CAAC,gCAAgC,CAAC,CAAC;QAChD,MAAM,OAAO,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;QAChC,IAAI,OAAO,CAAC,GAAG,KAAK,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,KAAK,IAAI,CAAC,GAAG;YAAE,MAAM,KAAK,CAAC,gCAAgC,CAAC,CAAC;QACxG,MAAM,CAAC,IAAI,CAAC,CAAC;IACf,CAAC;YAAS,CAAC;QAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IAAC,CAAC;AAC9B,CAAC;AAED,MAAM,UAAU,wBAAwB,CAAC,IAAY,EAAE,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;IACrE,MAAM,IAAI,GAAG,wBAAwB,CAAC,IAAI,CAAC,CAAC;IAC5C,IAAI,CAAC,8BAA8B,CAAC,IAAI,CAAC;QAAE,OAAO,SAAS,CAAC;IAC5D,IAAI,EAAU,CAAC;IACf,IAAI,CAAC;QAAC,EAAE,GAAG,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,UAAU,CAAC,CAAC;IAAC,CAAC;IACvE,OAAO,KAAK,EAAE,CAAC;QAAC,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,SAAS,CAAC;QAAC,MAAM,KAAK,CAAC,gCAAgC,CAAC,CAAC;IAAC,CAAC;IAC1I,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,SAAS,CAAC,EAAE,CAAC,CAAC;QAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,IAAI,GAAG,MAAM;YAAE,MAAM,KAAK,EAAE,CAAC;QACpF,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,EAAE,MAAM,CAAC,CAAyB,CAAC;QAC3E,IAAI,KAAK,CAAC,eAAe,KAAK,qCAAqC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;eAC/G,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,6BAA6B;eACvG,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,MAAM,GAAG,EAAE;YAAE,MAAM,KAAK,EAAE,CAAC;QACrF,KAAK,MAAM,GAAG,IAAI,KAAK,CAAC,UAAU,EAAE,CAAC;YACnC,uBAAuB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAClC,IAAI,CAAC,CAAC,GAAG,CAAC,SAAS,KAAK,CAAC,CAAC,GAAG,CAAC,IAAI;gBAAE,MAAM,KAAK,EAAE,CAAC;YAClD,IAAI,GAAG,CAAC,SAAS,IAAI,CAAC,CAAC,8BAA8B,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,IAAI,GAAG,CAAC,SAAS,CAAC,MAAM,GAAG,GAAG,CAAC;gBAAE,MAAM,KAAK,EAAE,CAAC;YACrI,IAAI,GAAG,CAAC,IAAI,IAAI,CAAC,OAAO,GAAG,CAAC,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC;mBAC9H,CAAC,CAAC,WAAW,EAAE,YAAY,EAAE,YAAY,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC;mBACzE,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC;mBAChH,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,IAAI,GAAG,2BAA2B,CAAC;gBAAE,MAAM,KAAK,EAAE,CAAC;QAChI,CAAC;QACD,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,UAAU,CAAC,MAAM;YAAE,MAAM,KAAK,EAAE,CAAC;QACnG,OAAO,KAAK,CAAC;IACf,CAAC;IAAC,MAAM,CAAC;QAAC,MAAM,KAAK,CAAC,2CAA2C,CAAC,CAAC;IAAC,CAAC;YAC7D,CAAC;QAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IAAC,CAAC;AAC5B,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,OAAe;IACrD,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,MAAM,GAAG,GAAG;QAAE,MAAM,KAAK,CAAC,+BAA+B,CAAC,CAAC;IACnG,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,CAAC;IACjG,IAAI,CAAC,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,WAAW,EAAE,WAAW,EAAE,aAAa,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QAAE,MAAM,KAAK,CAAC,+BAA+B,CAAC,CAAC;IACvK,OAAO,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,sBAAsB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;AAC/E,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,IAAY;IACrD,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,GAAG,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,UAAU,CAAC,CAAC;IAC3F,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,SAAS,CAAC,EAAE,CAAC,CAAC;QAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,IAAI,GAAG,CAAC,IAAI,IAAI,CAAC,IAAI,GAAG,2BAA2B;YAAE,MAAM,KAAK,CAAC,8BAA8B,CAAC,CAAC;QACxJ,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,MAAM,EAAE,WAAW,CAAC,EAAE,CAAC,MAAM,EAAE,YAAY,CAAC,EAAE,CAAC,OAAO,EAAE,YAAY,CAAC,EAAE,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;QAChK,IAAI,CAAC,WAAW;YAAE,MAAM,KAAK,CAAC,4BAA4B,CAAC,CAAC;QAC5D,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;QAAC,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC;QAC9F,OAAO,IAAI,EAAE,CAAC;YACZ,MAAM,KAAK,GAAG,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;YAAC,IAAI,CAAC,KAAK;gBAAE,MAAM;YAAC,KAAK,IAAI,KAAK,CAAC;YACtE,IAAI,KAAK,GAAG,2BAA2B;gBAAE,MAAM,KAAK,CAAC,8BAA8B,CAAC,CAAC;YACrF,IAAI,KAAK,EAAE,CAAC;gBACV,KAAK,GAAG,KAAK,CAAC;gBACd,IAAI,WAAW,KAAK,WAAW,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,EAAC,EAAE,EAAC,EAAE,EAAC,EAAE,EAAC,EAAE,EAAC,EAAE,EAAC,EAAE,EAAC,EAAE,CAAC,CAAC,CAAC;uBACpG,WAAW,KAAK,YAAY,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,MAAM,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC;uBAC9F,WAAW,KAAK,YAAY,IAAI,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC,KAAK,MAAM,IAAI,MAAM,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,EAAE,EAAE,CAAC,KAAK,MAAM,CAAC;oBAAE,MAAM,KAAK,CAAC,4BAA4B,CAAC,CAAC;YAC7K,CAAC;YACD,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC;QACzC,CAAC;QACD,MAAM,KAAK,GAAG,SAAS,CAAC,EAAE,CAAC,CAAC;QAC5B,IAAI,KAAK,KAAK,IAAI,CAAC,IAAI,IAAI,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,IAAI,KAAK,CAAC,OAAO,KAAK,IAAI,CAAC,OAAO,IAAI,KAAK,CAAC,GAAG,KAAK,IAAI,CAAC,GAAG,IAAI,KAAK,CAAC,GAAG,KAAK,IAAI,CAAC,GAAG;YAAE,MAAM,KAAK,CAAC,+BAA+B,CAAC,CAAC;QACxL,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO;YACjF,MAAM,EAAE,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,WAAW,EAAE,CAAC;IAC1D,CAAC;YAAS,CAAC;QAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IAAC,CAAC;AAC9B,CAAC;AAED,MAAM,UAAU,6BAA6B,CAAC,IAAY,EAAE,SAAmC;IAC7F,uBAAuB,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IACxC,IAAI,SAAS,CAAC,SAAS,IAAI,CAAC,CAAC,8BAA8B,CAAC,SAAS,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC;QAAE,MAAM,KAAK,CAAC,oCAAoC,CAAC,CAAC;IAC7J,IAAI,CAAC,CAAC,SAAS,CAAC,SAAS,KAAK,CAAC,CAAC,SAAS,CAAC,IAAI;QAAE,MAAM,KAAK,CAAC,oCAAoC,CAAC,CAAC;IAClG,MAAM,IAAI,GAAG,wBAAwB,CAAC,IAAI,CAAC,EAAE,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACvE,KAAK,MAAM,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,cAAc,CAAC,EAAE,SAAS,CAAC,EAAE,CAAC;QAC3D,SAAS,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAAC,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC,cAAc,EAAE;YAAE,MAAM,KAAK,CAAC,gCAAgC,CAAC,CAAC;IACzI,CAAC;IACD,IAAI,QAA0C,CAAC;IAC/C,IAAI,CAAC;QAAC,QAAQ,GAAG,wBAAwB,CAAC,IAAI,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,MAAM,KAAK,CAAC,2CAA2C,CAAC,CAAC;IAAC,CAAC;IACtH,MAAM,UAAU,GAAG,CAAC,GAAG,CAAC,QAAQ,EAAE,UAAU,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,IAAI,CAAC,EAAE,SAAS,CAAC,CAAC;IAC3G,IAAI,UAAU,CAAC,MAAM,GAAG,EAAE;QAAE,MAAM,KAAK,CAAC,+BAA+B,CAAC,CAAC;IACzE,MAAM,KAAK,GAAyB,EAAE,eAAe,EAAE,qCAAqC,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,UAAU,EAAE,CAAC;IAChJ,MAAM,SAAS,GAAG,IAAI,GAAG,GAAG,GAAG,OAAO,CAAC,GAAG,GAAG,MAAM,CAAC;IAAC,IAAI,EAAsB,CAAC;IAChF,IAAI,CAAC;QACH,EAAE,GAAG,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC,OAAO,GAAG,SAAS,CAAC,MAAM,GAAG,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;QAClH,aAAa,CAAC,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;QAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QAAC,EAAE,GAAG,SAAS,CAAC;QACvG,UAAU,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QAAC,MAAM,MAAM,GAAG,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC,QAAQ,CAAC,CAAC;QAAC,IAAI,CAAC;YAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QAAC,CAAC;gBAAS,CAAC;YAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QAAC,CAAC;IAChJ,CAAC;YAAS,CAAC;QAAC,IAAI,EAAE,KAAK,SAAS;YAAE,SAAS,CAAC,EAAE,CAAC,CAAC;QAAC,MAAM,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAAC,CAAC;AACxF,CAAC"}

package/dist/preview-resource-server.d.ts

@@ -0,0 +1,23 @@
+import type { Plugin } from 'vite';
+import { type ComponentResourceSlot } from '@promptframe/contracts';
+import { type PreviewResourceSelection } from './preview-resource-draft.js';
+type Grant = {
+    reference: string;
+    status: string;
+    code?: string;
+    url?: string;
+    contentType?: string;
+    sizeBytes?: number;
+    sha256?: string;
+    expiresAt?: string;
+};
+export declare function resolvePreviewResourceGrant(root: string, selection: PreviewResourceSelection, slot: ComponentResourceSlot, options?: {
+    signal?: AbortSignal;
+    fetch?: typeof fetch;
+    env?: NodeJS.ProcessEnv;
+}): Promise<Grant>;
+/** A Vite development adapter only. The runtime component bundle never imports
+ * this module, the credential reader, local paths, or platform clients. */
+export declare function promptFramePreviewResources(): Plugin;
+export {};
+//# sourceMappingURL=preview-resource-server.d.ts.map

package/dist/preview-resource-server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"preview-resource-server.d.ts","sourceRoot":"","sources":["../src/preview-resource-server.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,MAAM,EAAiB,MAAM,MAAM,CAAC;AAClD,OAAO,EAAwC,KAAK,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAG1G,OAAO,EACL,KAAK,wBAAwB,EAAE,MAAM,6BAA6B,CAAC;AAIrE,KAAK,KAAK,GAAG;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC;AAmE/J,wBAAsB,2BAA2B,CAAC,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,wBAAwB,EAAE,IAAI,EAAE,qBAAqB,EAC9H,OAAO,GAAE;IAAE,MAAM,CAAC,EAAE,WAAW,CAAC;IAAC,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAA;CAAO,GAAG,OAAO,CAAC,KAAK,CAAC,CAqCvG;AAWD;2EAC2E;AAC3E,wBAAgB,2BAA2B,IAAI,MAAM,CAgFpD"}

package/dist/preview-resource-server.js

@@ -0,0 +1,278 @@
+import { createHash, randomBytes } from 'node:crypto';
+import { closeSync, constants, fstatSync, openSync, readFileSync, readSync, realpathSync } from 'node:fs';
+import { homedir } from 'node:os';
+import { isAbsolute, join, relative, resolve } from 'node:path';
+import { collectPromptFrameResourceReferences } from '@promptframe/contracts';
+import { evaluatePromptFrameSchemaSource } from '@promptframe/contracts/schema-evaluator';
+import { cliBearerToken, readCliConfiguration } from './configuration.js';
+import { capturePreviewResourceFile, previewResourcePropPath, readPreviewResourceDraft } from './preview-resource-draft.js';
+const virtual = 'virtual:promptframe-local-preview', resolvedVirtual = '\0' + virtual;
+const maximumBytes = 16 * 1024 * 1024;
+function localFileMatches(slot, file) {
+    return slot.kinds.includes('image') && (slot.maxFileBytes === undefined || file.size <= slot.maxFileBytes)
+        && (!slot.accept?.length || slot.accept.some(pattern => pattern === '*/*' || pattern === file.contentType
+            || pattern.endsWith('/*') && file.contentType.startsWith(pattern.slice(0, -1))));
+}
+function safeCode(error) {
+    const code = error instanceof Error ? error.message : '';
+    return /^(?:preview\.resource\.|cli\.auth\.)[a-z0-9_.]{1,100}$/u.test(code) ? code : 'preview.resource.unavailable';
+}
+function readBoundedFile(path, maximum, expected) {
+    const fd = openSync(path, constants.O_RDONLY | constants.O_NOFOLLOW);
+    try {
+        const stat = fstatSync(fd);
+        if (expected && (stat.ino !== expected.ino || stat.dev !== expected.dev || stat.size !== expected.size))
+            throw Error('preview.resource.file_changed');
+        if (!stat.isFile() || stat.size > maximum)
+            throw Error('preview.resource.input_budget');
+        const result = Buffer.alloc(stat.size + 1);
+        let size = 0;
+        while (size < result.length) {
+            const count = readSync(fd, result, size, result.length - size, null);
+            if (!count)
+                break;
+            size += count;
+        }
+        const after = fstatSync(fd);
+        if (size !== stat.size || after.size !== stat.size || after.mtimeMs !== stat.mtimeMs)
+            throw Error('preview.resource.input_changed');
+        return result.subarray(0, size);
+    }
+    finally {
+        closeSync(fd);
+    }
+}
+function readJson(path, max = 131_072) {
+    const fd = openSync(path, constants.O_RDONLY | constants.O_NOFOLLOW);
+    try {
+        const stat = fstatSync(fd);
+        if (!stat.isFile() || stat.size > max)
+            throw Error('preview.resource.input_budget');
+        const value = JSON.parse(readFileSync(fd, 'utf8'));
+        if (!value || typeof value !== 'object' || Array.isArray(value))
+            throw Error('preview.resource.input_invalid');
+        return value;
+    }
+    finally {
+        closeSync(fd);
+    }
+}
+function setProp(props, pointer, value) {
+    const path = previewResourcePropPath(pointer);
+    let object = props;
+    for (const key of path.slice(0, -1)) {
+        if (!object || typeof object !== 'object' || !Object.hasOwn(object, key))
+            throw Error('preview.resource.prop_missing');
+        object = object[key];
+    }
+    if (!object || typeof object !== 'object')
+        throw Error('preview.resource.prop_missing');
+    object[path.at(-1)] = value;
+}
+function relativePath(root, path) {
+    const within = relative(realpathSync(root), path);
+    return !!within && !isAbsolute(within) && within !== '..' && !within.startsWith('..' + (process.platform === 'win32' ? '\\' : '/'));
+}
+function selectionSlot(root, selection) {
+    const manifest = readJson(join(root, 'manifest.json'));
+    const entry = manifest.entry;
+    const schemaPath = typeof entry?.propsSchemaPath === 'string' ? entry.propsSchemaPath : 'src/schema.ts';
+    const path = resolve(root, schemaPath), physical = realpathSync(path), within = relativePath(root, physical);
+    if (!within)
+        throw Error('preview.resource.schema_invalid');
+    const facts = evaluatePromptFrameSchemaSource(readBoundedFile(path, 131_072).toString('utf8'));
+    if (facts.status !== 'resolved')
+        throw Error('preview.resource.schema_invalid');
+    const props = structuredClone(readJson(join(root, 'src/preview-props.json')).props ?? {});
+    setProp(props, selection.prop, selection.reference ?? '/local-preview.png');
+    const binding = collectPromptFrameResourceReferences({ type: 'object', properties: facts.properties }, props)
+        .find(row => JSON.stringify(row.path) === JSON.stringify(previewResourcePropPath(selection.prop)));
+    if (!binding || selection.file && !binding.slot.sources.includes('public'))
+        throw Error('preview.resource.slot_missing');
+    return binding.slot;
+}
+export async function resolvePreviewResourceGrant(root, selection, slot, options = {}) {
+    const env = options.env ?? process.env;
+    const configuration = readCliConfiguration(resolve(env.PROMPTFRAME_CONFIG ?? join(homedir(), '.promptframe', 'component-authoring.json')));
+    const credential = configuration.credential;
+    const endpointValue = env.PROMPTFRAME_API_BASE ?? env.REMOTION_MEDIA_API_BASE ?? configuration.endpoint ?? credential?.endpoint;
+    if (typeof endpointValue !== 'string')
+        throw Error('preview.resource.endpoint_required');
+    const endpoint = endpointValue.replace(/\/+$/, ''), url = new URL(endpoint);
+    if (!['http:', 'https:'].includes(url.protocol) || url.username || url.password || url.search || url.hash
+        || !['/api', '/api-proxy'].includes(url.pathname))
+        throw Error('preview.resource.endpoint_invalid');
+    const token = cliBearerToken({ endpoint, configuration,
+        explicit: env.PROMPTFRAME_CI_TOKEN ?? env.PROMPTFRAME_CLI_TOKEN ?? env.PROMPTFRAME_AUTH_TOKEN });
+    if (!token)
+        throw Error('cli.auth.login_required');
+    const context = readJson(join(root, '.promptframerc'));
+    if (typeof context.projectId !== 'string' || !selection.reference || !selection.sessionId)
+        throw Error('preview.resource.scope_required');
+    if (typeof context.endpoint === 'string' && new URL(context.endpoint).origin !== url.origin)
+        throw Error('preview.resource.endpoint_mismatch');
+    const response = await (options.fetch ?? fetch)(endpoint + '/cli/component-assets/resolve', {
+        method: 'POST', redirect: 'error', signal: options.signal ?? AbortSignal.timeout(5_000),
+        headers: { authorization: `Bearer ${token}`, 'content-type': 'application/json' },
+        body: JSON.stringify({ projectId: context.projectId, sessionId: selection.sessionId,
+            references: [{ reference: selection.reference, slot }] }),
+    });
+    const bytes = await readBoundedResponse(response, 65_536);
+    const body = JSON.parse(bytes.toString('utf8'));
+    if (!response.ok || body.results?.length !== 1)
+        throw Error(response.status === 401 || response.status === 403
+            ? 'preview.resource.asset_permission_required' : 'preview.resource.unavailable');
+    const grant = body.results[0];
+    if (grant.reference !== selection.reference || grant.status !== 'ready' || !grant.url || !grant.sha256
+        || !/^sha256:[a-f0-9]{64}$/u.test(grant.sha256) || !grant.contentType || !Number.isSafeInteger(grant.sizeBytes)
+        || grant.sizeBytes < 1 || grant.sizeBytes > maximumBytes
+        || !slot.kinds.some(kind => grant.contentType.startsWith(kind + '/'))
+        || slot.maxFileBytes !== undefined && grant.sizeBytes > slot.maxFileBytes
+        || slot.accept?.length && !slot.accept.some(type => type === '*/*' || type === grant.contentType
+            || type.endsWith('/*') && grant.contentType.startsWith(type.slice(0, -1)))
+        || !grant.expiresAt || !Number.isFinite(Date.parse(grant.expiresAt)) || Date.parse(grant.expiresAt) <= Date.now()) {
+        throw Error('preview.resource.unavailable');
+    }
+    return grant;
+}
+async function readBoundedResponse(response, max) {
+    if (!response.body)
+        throw Error('preview.resource.unavailable');
+    const reader = response.body.getReader(), chunks = [];
+    let size = 0;
+    try {
+        while (true) {
+            const { done, value } = await reader.read();
+            if (done)
+                break;
+            size += value.length;
+            if (size > max)
+                throw Error('preview.resource.response_budget');
+            chunks.push(value);
+        }
+        return Buffer.concat(chunks);
+    }
+    finally {
+        await reader.cancel().catch(() => { });
+        reader.releaseLock();
+    }
+}
+/** A Vite development adapter only. The runtime component bundle never imports
+ * this module, the credential reader, local paths, or platform clients. */
+export function promptFramePreviewResources() {
+    const secret = randomBytes(32), prefix = '/__promptframe/local-preview/';
+    let root = '', server, active = 0;
+    const controller = new AbortController(), pending = new Set();
+    const capability = (row) => createHash('sha256').update(secret).update(JSON.stringify(row)).digest('hex');
+    const handle = async (request, response, next) => {
+        const path = (request.url ?? '').split('?')[0];
+        if (!path.startsWith(prefix))
+            return next();
+        const finish = (status, value) => {
+            if (response.destroyed || response.headersSent)
+                return;
+            response.writeHead(status, { 'content-type': 'application/json',
+                'cache-control': 'no-store', 'x-content-type-options': 'nosniff' });
+            response.end(JSON.stringify(value));
+        };
+        if (request.method !== 'GET')
+            return finish(405, { code: 'preview.resource.read_only' });
+        const address = server?.httpServer?.address();
+        const hosts = typeof address === 'object' && address ? new Set([`127.0.0.1:${address.port}`, `localhost:${address.port}`, `[::1]:${address.port}`]) : new Set();
+        const host = request.headers.host ?? '', origin = request.headers.origin;
+        if (!hosts.has(host) || origin !== undefined && origin !== `http://${host}` || active >= 2)
+            return finish(403, { code: 'preview.resource.origin_denied' });
+        active++;
+        const timer = setTimeout(() => response.destroy(), 15_000);
+        try {
+            const draft = readPreviewResourceDraft(root);
+            if (path === prefix + 'state') {
+                const envelope = readJson(join(root, 'src/preview-props.json'));
+                const props = structuredClone(envelope.props ?? {}), issues = [];
+                for (const row of draft?.selections ?? []) {
+                    try {
+                        const slot = selectionSlot(root, row);
+                        if (row.file) {
+                            const actual = capturePreviewResourceFile(row.file.path);
+                            if (JSON.stringify(actual) !== JSON.stringify(row.file) || !localFileMatches(slot, actual))
+                                throw Error('preview.resource.file_changed');
+                        }
+                        else
+                            await resolvePreviewResourceGrant(root, row, slot, { signal: AbortSignal.any([controller.signal, AbortSignal.timeout(5_000)]) });
+                        setProp(props, row.prop, prefix + capability(row));
+                    }
+                    catch (error) {
+                        issues.push({ prop: row.prop, code: safeCode(error) });
+                    }
+                }
+                return finish(200, { props: issues.length ? envelope.props ?? {} : props, issues,
+                    selectedCount: draft?.selections.length ?? 0, usingExample: issues.length > 0 });
+            }
+            const row = draft?.selections.find(row => prefix + capability(row) === path);
+            if (!row)
+                return finish(404, { code: 'preview.resource.selection_changed' });
+            const slot = selectionSlot(root, row);
+            let bytes, contentType;
+            if (row.file) {
+                const actual = capturePreviewResourceFile(row.file.path);
+                if (JSON.stringify(actual) !== JSON.stringify(row.file) || !localFileMatches(slot, actual))
+                    throw Error('preview.resource.file_changed');
+                bytes = readBoundedFile(row.file.path, maximumBytes, actual);
+                if ('sha256:' + createHash('sha256').update(bytes).digest('hex') !== actual.sha256)
+                    throw Error('preview.resource.file_changed');
+                contentType = actual.contentType;
+            }
+            else {
+                const signal = AbortSignal.any([controller.signal, AbortSignal.timeout(8_000)]);
+                const grant = await resolvePreviewResourceGrant(root, row, slot, { signal });
+                if (grant.sizeBytes > maximumBytes)
+                    throw Error('preview.resource.response_budget');
+                const url = new URL(grant.url);
+                if (!['http:', 'https:'].includes(url.protocol) || url.username || url.password)
+                    throw Error('preview.resource.url_invalid');
+                const result = await fetch(url, { signal, redirect: 'error' });
+                if (!result.ok)
+                    throw Error('preview.resource.unavailable');
+                bytes = await readBoundedResponse(result, maximumBytes);
+                if (bytes.length !== grant.sizeBytes || 'sha256:' + createHash('sha256').update(bytes).digest('hex') !== grant.sha256)
+                    throw Error('preview.resource.bytes_changed');
+                contentType = grant.contentType;
+            }
+            response.writeHead(200, { 'content-type': contentType, 'content-length': bytes.length,
+                'cache-control': 'no-store', 'x-content-type-options': 'nosniff' });
+            response.end(bytes);
+        }
+        catch (error) {
+            finish(409, { code: safeCode(error) });
+        }
+        finally {
+            if (!response.writableFinished && !response.destroyed)
+                await new Promise(resolve => {
+                    response.once('finish', resolve);
+                    response.once('close', resolve);
+                });
+            clearTimeout(timer);
+            active--;
+        }
+    };
+    return {
+        name: 'promptframe-preview-resources', apply: 'serve',
+        configResolved(config) { root = resolve(config.root); },
+        resolveId(id) { return id === virtual ? resolvedVirtual : undefined; },
+        load(id) {
+            if (id !== resolvedVirtual)
+                return;
+            return `export const promptFrameLocalPreview = fetch(${JSON.stringify(prefix + 'state')}, {cache:'no-store'}).then(r=>r.json()).then(v=>v.props?v:{props:null,issues:[{code:v.code||'preview.resource.unavailable'}],usingExample:true}).catch(()=>({props:null,issues:[{code:'preview.resource.unavailable'}],usingExample:true}));`;
+        },
+        configureServer(value) {
+            server = value;
+            const host = value.config.server.host;
+            if (host !== undefined && !['127.0.0.1', 'localhost', '::1'].includes(String(host)))
+                throw Error('preview.resource.loopback_required');
+            value.middlewares.use((req, res, next) => { const task = handle(req, res, next); pending.add(task); void task.catch(() => { if (!res.destroyed)
+                res.destroy(); }).finally(() => pending.delete(task)); });
+        },
+        async closeBundle() { controller.abort(); await Promise.allSettled([...pending]); secret.fill(0); },
+    };
+}
+//# sourceMappingURL=preview-resource-server.js.map

package/dist/preview-resource-server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"preview-resource-server.js","sourceRoot":"","sources":["../src/preview-resource-server.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AACtD,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,YAAY,EAAE,QAAQ,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAC1G,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEhE,OAAO,EAAE,oCAAoC,EAA8B,MAAM,wBAAwB,CAAC;AAC1G,OAAO,EAAE,+BAA+B,EAAE,MAAM,yCAAyC,CAAC;AAC1F,OAAO,EAAE,cAAc,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAC1E,OAAO,EAAE,0BAA0B,EAAE,uBAAuB,EAAE,wBAAwB,EACrD,MAAM,6BAA6B,CAAC;AAErE,MAAM,OAAO,GAAG,mCAAmC,EAAE,eAAe,GAAG,IAAI,GAAG,OAAO,CAAC;AACtF,MAAM,YAAY,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAGtC,SAAS,gBAAgB,CAAC,IAA2B,EAAE,IAA2C;IAChG,OAAO,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,KAAK,SAAS,IAAI,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,YAAY,CAAC;WACrG,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,KAAK,KAAK,IAAI,OAAO,KAAK,IAAI,CAAC,WAAW;eACpG,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACvF,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,MAAM,IAAI,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;IACzD,OAAO,yDAAyD,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,8BAA8B,CAAC;AACtH,CAAC;AAED,SAAS,eAAe,CAAC,IAAY,EAAE,OAAe,EAAE,QAAqD;IAC3G,MAAM,EAAE,GAAG,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,UAAU,CAAC,CAAC;IACrE,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,SAAS,CAAC,EAAE,CAAC,CAAC;QAC3B,IAAI,QAAQ,IAAI,CAAC,IAAI,CAAC,GAAG,KAAK,QAAQ,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,KAAK,QAAQ,CAAC,GAAG,IAAI,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,IAAI,CAAC;YAAE,MAAM,KAAK,CAAC,+BAA+B,CAAC,CAAC;QACtJ,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,IAAI,GAAG,OAAO;YAAE,MAAM,KAAK,CAAC,+BAA+B,CAAC,CAAC;QACxF,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC;QAAC,IAAI,IAAI,GAAG,CAAC,CAAC;QACzD,OAAO,IAAI,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC;YAAC,MAAM,KAAK,GAAG,QAAQ,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,GAAG,IAAI,EAAE,IAAI,CAAC,CAAC;YAAC,IAAI,CAAC,KAAK;gBAAE,MAAM;YAAC,IAAI,IAAI,KAAK,CAAC;QAAC,CAAC;QACxI,MAAM,KAAK,GAAG,SAAS,CAAC,EAAE,CAAC,CAAC;QAC5B,IAAI,IAAI,KAAK,IAAI,CAAC,IAAI,IAAI,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,IAAI,KAAK,CAAC,OAAO,KAAK,IAAI,CAAC,OAAO;YAAE,MAAM,KAAK,CAAC,gCAAgC,CAAC,CAAC;QACpI,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;IAClC,CAAC;YAAS,CAAC;QAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IAAC,CAAC;AAC9B,CAAC;AAED,SAAS,QAAQ,CAAC,IAAY,EAAE,GAAG,GAAG,OAAO;IAC3C,MAAM,EAAE,GAAG,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,UAAU,CAAC,CAAC;IACrE,IAAI,CAAC;QAAC,MAAM,IAAI,GAAG,SAAS,CAAC,EAAE,CAAC,CAAC;QAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,IAAI,GAAG,GAAG;YAAE,MAAM,KAAK,CAAC,+BAA+B,CAAC,CAAC;QACpH,MAAM,KAAK,GAAY,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC;QAC5D,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;YAAE,MAAM,KAAK,CAAC,gCAAgC,CAAC,CAAC;QAC/G,OAAO,KAAgC,CAAC;IAC1C,CAAC;YAAS,CAAC;QAAC,SAAS,CAAC,EAAE,CAAC,CAAC;IAAC,CAAC;AAC9B,CAAC;AAED,SAAS,OAAO,CAAC,KAA8B,EAAE,OAAe,EAAE,KAAa;IAC7E,MAAM,IAAI,GAAG,uBAAuB,CAAC,OAAO,CAAC,CAAC;IAAC,IAAI,MAAM,GAAY,KAAK,CAAC;IAC3E,KAAK,MAAM,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACpC,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC;YAAE,MAAM,KAAK,CAAC,+BAA+B,CAAC,CAAC;QACvH,MAAM,GAAI,MAA2C,CAAC,GAAG,CAAC,CAAC;IAC7D,CAAC;IACD,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ;QAAE,MAAM,KAAK,CAAC,+BAA+B,CAAC,CAAC;IACvF,MAA2C,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAE,CAAC,GAAG,KAAK,CAAC;AACrE,CAAC;AAED,SAAS,YAAY,CAAC,IAAY,EAAE,IAAY;IAC9C,MAAM,MAAM,GAAG,QAAQ,CAAC,YAAY,CAAC,IAAI,CAAC,EAAE,IAAI,CAAC,CAAC;IAClD,OAAO,CAAC,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,MAAM,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,GAAG,CAAC,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;AACtI,CAAC;AAED,SAAS,aAAa,CAAC,IAAY,EAAE,SAAmC;IACtE,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,eAAe,CAAC,CAAC,CAAC;IACvD,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAkD,CAAC;IAC1E,MAAM,UAAU,GAAG,OAAO,KAAK,EAAE,eAAe,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC,eAAe,CAAC;IACxG,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,EAAE,UAAU,CAAC,EAAE,QAAQ,GAAG,YAAY,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,YAAY,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IAC7G,IAAI,CAAC,MAAM;QAAE,MAAM,KAAK,CAAC,iCAAiC,CAAC,CAAC;IAC5D,MAAM,KAAK,GAAG,+BAA+B,CAAC,eAAe,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IAC/F,IAAI,KAAK,CAAC,MAAM,KAAK,UAAU;QAAE,MAAM,KAAK,CAAC,iCAAiC,CAAC,CAAC;IAChF,MAAM,KAAK,GAAG,eAAe,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,wBAAwB,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAA4B,CAAC;IACrH,OAAO,CAAC,KAAK,EAAE,SAAS,CAAC,IAAI,EAAE,SAAS,CAAC,SAAS,IAAI,oBAAoB,CAAC,CAAC;IAC5E,MAAM,OAAO,GAAG,oCAAoC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,EAAE,KAAK,CAAC;SAC1G,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,uBAAuB,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IACrG,IAAI,CAAC,OAAO,IAAI,SAAS,CAAC,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAAE,MAAM,KAAK,CAAC,+BAA+B,CAAC,CAAC;IACzH,OAAO,OAAO,CAAC,IAAI,CAAC;AACtB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAAC,IAAY,EAAE,SAAmC,EAAE,IAA2B,EAC9H,UAAmF,EAAE;IACrF,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IACvC,MAAM,aAAa,GAAG,oBAAoB,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,cAAc,EAAE,0BAA0B,CAAC,CAAC,CAAC,CAAC;IAC3I,MAAM,UAAU,GAAG,aAAa,CAAC,UAAiD,CAAC;IACnF,MAAM,aAAa,GAAG,GAAG,CAAC,oBAAoB,IAAI,GAAG,CAAC,uBAAuB,IAAI,aAAa,CAAC,QAAQ,IAAI,UAAU,EAAE,QAAQ,CAAC;IAChI,IAAI,OAAO,aAAa,KAAK,QAAQ;QAAE,MAAM,KAAK,CAAC,oCAAoC,CAAC,CAAC;IACzF,MAAM,QAAQ,GAAG,aAAa,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,EAAE,GAAG,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC5E,IAAI,CAAC,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,IAAI;WACpG,CAAC,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC;QAAE,MAAM,KAAK,CAAC,mCAAmC,CAAC,CAAC;IACtG,MAAM,KAAK,GAAG,cAAc,CAAC,EAAE,QAAQ,EAAE,aAAa;QACpD,QAAQ,EAAE,GAAG,CAAC,oBAAoB,IAAI,GAAG,CAAC,qBAAqB,IAAI,GAAG,CAAC,sBAAsB,EAAE,CAAC,CAAC;IACnG,IAAI,CAAC,KAAK;QAAE,MAAM,KAAK,CAAC,yBAAyB,CAAC,CAAC;IACnD,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC,CAAC;IACvD,IAAI,OAAO,OAAO,CAAC,SAAS,KAAK,QAAQ,IAAI,CAAC,SAAS,CAAC,SAAS,IAAI,CAAC,SAAS,CAAC,SAAS;QAAE,MAAM,KAAK,CAAC,iCAAiC,CAAC,CAAC;IAC1I,IAAI,OAAO,OAAO,CAAC,QAAQ,KAAK,QAAQ,IAAI,IAAI,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,MAAM,KAAK,GAAG,CAAC,MAAM;QAAE,MAAM,KAAK,CAAC,oCAAoC,CAAC,CAAC;IAC/I,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,IAAI,KAAK,CAAC,CAAC,QAAQ,GAAG,+BAA+B,EAAE;QAC1F,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC;QACvF,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,KAAK,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;QACjF,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,SAAS,EAAE,SAAS,CAAC,SAAS;YACjF,UAAU,EAAE,CAAC,EAAE,SAAS,EAAE,SAAS,CAAC,SAAS,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;KAC5D,CAAC,CAAC;IACH,MAAM,KAAK,GAAG,MAAM,mBAAmB,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC1D,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAyC,CAAC;IACxF,IAAI,CAAC,QAAQ,CAAC,EAAE,IAAI,IAAI,CAAC,OAAO,EAAE,MAAM,KAAK,CAAC;QAAE,MAAM,KAAK,CAAC,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG;YAC5G,CAAC,CAAC,4CAA4C,CAAC,CAAC,CAAC,8BAA8B,CAAC,CAAC;IACnF,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC,CAAE,CAAC;IAC/B,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS,CAAC,SAAS,IAAI,KAAK,CAAC,MAAM,KAAK,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM;WACjG,CAAC,wBAAwB,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,WAAW,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,SAAS,CAAC;WAC5G,KAAK,CAAC,SAAU,GAAG,CAAC,IAAI,KAAK,CAAC,SAAU,GAAG,YAAY;WACvD,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,WAAY,CAAC,UAAU,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC;WACnE,IAAI,CAAC,YAAY,KAAK,SAAS,IAAI,KAAK,CAAC,SAAU,GAAG,IAAI,CAAC,YAAY;WACvE,IAAI,CAAC,MAAM,EAAE,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,CAAC,WAAW;eAC3F,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,WAAY,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;WAC1E,CAAC,KAAK,CAAC,SAAS,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;QACpH,MAAM,KAAK,CAAC,8BAA8B,CAAC,CAAC;IAC9C,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,KAAK,UAAU,mBAAmB,CAAC,QAAkB,EAAE,GAAW;IAChE,IAAI,CAAC,QAAQ,CAAC,IAAI;QAAE,MAAM,KAAK,CAAC,8BAA8B,CAAC,CAAC;IAChE,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,MAAM,GAAiB,EAAE,CAAC;IAAC,IAAI,IAAI,GAAG,CAAC,CAAC;IAClF,IAAI,CAAC;QAAC,OAAO,IAAI,EAAE,CAAC;YAAC,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;YAAC,IAAI,IAAI;gBAAE,MAAM;YAChF,IAAI,IAAI,KAAK,CAAC,MAAM,CAAC;YAAC,IAAI,IAAI,GAAG,GAAG;gBAAE,MAAM,KAAK,CAAC,kCAAkC,CAAC,CAAC;YAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAAC,CAAC;QAC5G,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC/B,CAAC;YAAS,CAAC;QAAC,MAAM,MAAM,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QAAC,MAAM,CAAC,WAAW,EAAE,CAAC;IAAC,CAAC;AAC5E,CAAC;AAED;2EAC2E;AAC3E,MAAM,UAAU,2BAA2B;IACzC,MAAM,MAAM,GAAG,WAAW,CAAC,EAAE,CAAC,EAAE,MAAM,GAAG,+BAA+B,CAAC;IACzE,IAAI,IAAI,GAAG,EAAE,EAAE,MAAiC,EAAE,MAAM,GAAG,CAAC,CAAC;IAC7D,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,EAAE,OAAO,GAAG,IAAI,GAAG,EAAoB,CAAC;IAChF,MAAM,UAAU,GAAG,CAAC,GAA6B,EAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACpI,MAAM,MAAM,GAAG,KAAK,EAAE,OAA4C,EAAE,QAA4C,EAC9G,IAAgB,EAAE,EAAE;QACpB,MAAM,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC;QAChD,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC;YAAE,OAAO,IAAI,EAAE,CAAC;QAC5C,MAAM,MAAM,GAAG,CAAC,MAAc,EAAE,KAAc,EAAE,EAAE;YAAG,IAAI,QAAQ,CAAC,SAAS,IAAI,QAAQ,CAAC,WAAW;gBAAE,OAAO;YAAC,QAAQ,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,cAAc,EAAE,kBAAkB;gBAC1K,eAAe,EAAE,UAAU,EAAE,wBAAwB,EAAE,SAAS,EAAE,CAAC,CAAC;YAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;QAAC,CAAC,CAAC;QAC9G,IAAI,OAAO,CAAC,MAAM,KAAK,KAAK;YAAE,OAAO,MAAM,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,4BAA4B,EAAE,CAAC,CAAC;QACzF,MAAM,OAAO,GAAG,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC;QAC9C,MAAM,KAAK,GAAG,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,aAAa,OAAO,CAAC,IAAI,EAAE,EAAE,aAAa,OAAO,CAAC,IAAI,EAAE,EAAE,SAAS,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,EAAU,CAAC;QACxK,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC;QACzE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,UAAU,IAAI,EAAE,IAAI,MAAM,IAAI,CAAC;YAAE,OAAO,MAAM,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,gCAAgC,EAAE,CAAC,CAAC;QAC3J,MAAM,EAAE,CAAC;QACT,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,OAAO,EAAE,EAAE,MAAM,CAAC,CAAC;QAC3D,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,wBAAwB,CAAC,IAAI,CAAC,CAAC;YAC7C,IAAI,IAAI,KAAK,MAAM,GAAG,OAAO,EAAE,CAAC;gBAC9B,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,wBAAwB,CAAC,CAAC,CAAC;gBAChE,MAAM,KAAK,GAAG,eAAe,CAAC,QAAQ,CAAC,KAAK,IAAI,EAAE,CAA4B,EAAE,MAAM,GAAsC,EAAE,CAAC;gBAC/H,KAAK,MAAM,GAAG,IAAI,KAAK,EAAE,UAAU,IAAI,EAAE,EAAE,CAAC;oBAC1C,IAAI,CAAC;wBACH,MAAM,IAAI,GAAG,aAAa,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;wBACtC,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC;4BACb,MAAM,MAAM,GAAG,0BAA0B,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;4BACzD,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,IAAI,EAAE,MAAM,CAAC;gCAAE,MAAM,KAAK,CAAC,+BAA+B,CAAC,CAAC;wBAC3I,CAAC;;4BAAM,MAAM,2BAA2B,CAAC,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,WAAW,CAAC,GAAG,CAAC,CAAC,UAAU,CAAC,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;wBACxI,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;oBACrD,CAAC;oBAAC,OAAO,KAAK,EAAE,CAAC;wBAAC,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;oBAAC,CAAC;gBAC7E,CAAC;gBACD,OAAO,MAAM,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,EAAE,MAAM;oBAC9E,aAAa,EAAE,KAAK,EAAE,UAAU,CAAC,MAAM,IAAI,CAAC,EAAE,YAAY,EAAE,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,CAAC;YACrF,CAAC;YACD,MAAM,GAAG,GAAG,KAAK,EAAE,UAAU,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,KAAK,IAAI,CAAC,CAAC;YAC7E,IAAI,CAAC,GAAG;gBAAE,OAAO,MAAM,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,oCAAoC,EAAE,CAAC,CAAC;YAC7E,MAAM,IAAI,GAAG,aAAa,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;YAAC,IAAI,KAAa,EAAE,WAAmB,CAAC;YAC9E,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC;gBACb,MAAM,MAAM,GAAG,0BAA0B,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACzD,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,IAAI,EAAE,MAAM,CAAC;oBAAE,MAAM,KAAK,CAAC,+BAA+B,CAAC,CAAC;gBACzI,KAAK,GAAG,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,YAAY,EAAE,MAAM,CAAC,CAAC;gBAC7D,IAAI,SAAS,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,MAAM,CAAC,MAAM;oBAAE,MAAM,KAAK,CAAC,+BAA+B,CAAC,CAAC;gBACjI,WAAW,GAAG,MAAM,CAAC,WAAW,CAAC;YACnC,CAAC;iBAAM,CAAC;gBACN,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,UAAU,CAAC,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;gBAChF,MAAM,KAAK,GAAG,MAAM,2BAA2B,CAAC,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;gBAC7E,IAAI,KAAK,CAAC,SAAU,GAAG,YAAY;oBAAE,MAAM,KAAK,CAAC,kCAAkC,CAAC,CAAC;gBACrF,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,GAAI,CAAC,CAAC;gBAAC,IAAI,CAAC,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ;oBAAE,MAAM,KAAK,CAAC,8BAA8B,CAAC,CAAC;gBAC9J,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;gBAC/D,IAAI,CAAC,MAAM,CAAC,EAAE;oBAAE,MAAM,KAAK,CAAC,8BAA8B,CAAC,CAAC;gBAC5D,KAAK,GAAG,MAAM,mBAAmB,CAAC,MAAM,EAAE,YAAY,CAAC,CAAC;gBACxD,IAAI,KAAK,CAAC,MAAM,KAAK,KAAK,CAAC,SAAS,IAAI,SAAS,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,KAAK,CAAC,MAAM;oBAAE,MAAM,KAAK,CAAC,gCAAgC,CAAC,CAAC;gBACrK,WAAW,GAAG,KAAK,CAAC,WAAY,CAAC;YACnC,CAAC;YACD,QAAQ,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,WAAW,EAAE,gBAAgB,EAAE,KAAK,CAAC,MAAM;gBACnF,eAAe,EAAE,UAAU,EAAE,wBAAwB,EAAE,SAAS,EAAE,CAAC,CAAC;YAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAC7F,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAAC,MAAM,CAAC,GAAG,EAAE,EAAE,IAAI,EAAE,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAAC,CAAC;gBACnD,CAAC;YACP,IAAI,CAAC,QAAQ,CAAC,gBAAgB,IAAI,CAAC,QAAQ,CAAC,SAAS;gBAAE,MAAM,IAAI,OAAO,CAAO,OAAO,CAAC,EAAE;oBACvF,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;oBAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;gBACpE,CAAC,CAAC,CAAC;YACH,YAAY,CAAC,KAAK,CAAC,CAAC;YAAC,MAAM,EAAE,CAAC;QAChC,CAAC;IACH,CAAC,CAAC;IACF,OAAO;QACL,IAAI,EAAE,+BAA+B,EAAE,KAAK,EAAE,OAAO;QACrD,cAAc,CAAC,MAAM,IAAI,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACvD,SAAS,CAAC,EAAE,IAAI,OAAO,EAAE,KAAK,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;QACtE,IAAI,CAAC,EAAE;YAAI,IAAI,EAAE,KAAK,eAAe;gBAAE,OAAO;YAC5C,OAAO,gDAAgD,IAAI,CAAC,SAAS,CAAC,MAAM,GAAG,OAAO,CAAC,8OAA8O,CAAC;QAAC,CAAC;QAC1U,eAAe,CAAC,KAAK;YACnB,MAAM,GAAG,KAAK,CAAC;YACf,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC;YACtC,IAAI,IAAI,KAAK,SAAS,IAAI,CAAC,CAAC,WAAW,EAAE,WAAW,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;gBAAE,MAAM,KAAK,CAAC,oCAAoC,CAAC,CAAC;YACvI,KAAK,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,GAAG,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,SAAS;gBAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC5M,CAAC;QACD,KAAK,CAAC,WAAW,KAAK,UAAU,CAAC,KAAK,EAAE,CAAC,CAAC,MAAM,OAAO,CAAC,UAAU,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;KACpG,CAAC;AACJ,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@promptframe/cli",
-  "version": "0.1.64",
+  "version": "0.1.67",
   "license": "MIT",
   "engines": {
     "node": "^20.19.0 || >=22.12.0"
@@ -22,6 +22,10 @@
     },
     "./package.json": {
       "default": "./package.json"
+    },
+    "./preview": {
+      "import": "./dist/preview-resource-server.js",
+      "types": "./dist/preview-resource-server.d.ts"
     }
   },
   "publishConfig": {
@@ -46,7 +50,8 @@
     "clean": "rm -rf dist"
   },
   "dependencies": {
-    "@promptframe/contracts": "0.1.32",
+    "@promptframe/contracts": "0.1.35",
+    "ignore": "7.0.14",
     "postcss": "8.5.30",
     "postcss-selector-parser": "7.1.0",
     "typescript": "~5.7.0",