@reticlehq/server 2.0.0 → 2.0.1

package/dist/tools/tool-names.js.map

@@ -1 +1 @@
-{"version":3,"file":"tool-names.js","sourceRoot":"","sources":["../../src/tools/tool-names.ts"],"names":[],"mappings":"AAAA,6EAA6E;AAC7E,MAAM,CAAC,MAAM,WAAW,GAAG;IACzB,QAAQ,EAAE,kBAAkB;IAC5B,QAAQ,EAAE,kBAAkB;IAC5B,KAAK,EAAE,eAAe;IACtB,OAAO,EAAE,iBAAiB;IAC1B,GAAG,EAAE,aAAa;IAClB,YAAY,EAAE,sBAAsB;IACpC,YAAY,EAAE,sBAAsB;IACpC,OAAO,EAAE,iBAAiB;IAC1B,QAAQ,EAAE,kBAAkB;IAC5B,OAAO,EAAE,iBAAiB;IAC1B,OAAO,EAAE,iBAAiB;IAC1B,UAAU,EAAE,oBAAoB;IAChC,MAAM,EAAE,gBAAgB;IACxB,aAAa,EAAE,uBAAuB;IACtC,aAAa,EAAE,uBAAuB;IACtC,IAAI,EAAE,cAAc;IACpB,YAAY,EAAE,sBAAsB;IACpC,WAAW,EAAE,qBAAqB;IAClC,MAAM,EAAE,gBAAgB;IACxB,OAAO,EAAE,iBAAiB;IAC1B,OAAO,EAAE,iBAAiB;IAC1B,KAAK,EAAE,eAAe;IACtB,KAAK,EAAE,eAAe;IACtB,YAAY,EAAE,sBAAsB;IACpC,aAAa,EAAE,uBAAuB;IACtC,MAAM,EAAE,gBAAgB;IACxB,SAAS,EAAE,mBAAmB;IAC9B,SAAS,EAAE,mBAAmB;IAC9B,SAAS,EAAE,mBAAmB;IAC9B,WAAW,EAAE,qBAAqB;IAClC,sGAAsG;IACtG,WAAW,EAAE,qBAAqB;IAClC,yDAAyD;IACzD,kBAAkB,EAAE,4BAA4B;IAChD,0EAA0E;IAC1E,SAAS,EAAE,mBAAmB;IAC9B,oFAAoF;IACpF,QAAQ,EAAE,kBAAkB;IAC5B,gFAAgF;IAChF,OAAO,EAAE,iBAAiB;IAC1B,gFAAgF;IAChF,UAAU,EAAE,oBAAoB;IAChC,oFAAoF;IACpF,UAAU,EAAE,oBAAoB;IAChC,oGAAoG;IACpG,YAAY,EAAE,sBAAsB;IACpC,wFAAwF;IACxF,QAAQ,EAAE,kBAAkB;IAC5B,qEAAqE;IACrE,WAAW,EAAE,qBAAqB;IAClC,iFAAiF;IACjF,KAAK,EAAE,eAAe;IACtB,4EAA4E;IAC5E,SAAS,EAAE,mBAAmB;IAC9B,gGAAgG;IAChG,OAAO,EAAE,iBAAiB;IAC1B,kGAAkG;IAClG,WAAW,EAAE,qBAAqB;IAClC,iGAAiG;IACjG,KAAK,EAAE,eAAe;IACtB,8CAA8C;IAC9C,MAAM,EAAE,gBAAgB;IACxB,iEAAiE;IACjE,QAAQ,EAAE,kBAAkB;IAC5B,iGAAiG;IACjG,MAAM,EAAE,gBAAgB;IACxB,uGAAuG;IACvG,UAAU,EAAE,oBAAoB;IAChC,mDAAmD;IACnD,QAAQ,EAAE,kBAAkB;IAC5B,uDAAuD;IACvD,OAAO,EAAE,iBAAiB;IAC1B,iFAAiF;IACjF,YAAY,EAAE,sBAAsB;IACpC,4FAA4F;IAC5F,YAAY,EAAE,sBAAsB;IACpC,uDAAuD;IACvD,QAAQ,EAAE,kBAAkB;IAC5B,oGAAoG;IACpG,UAAU,EAAE,oBAAoB;IAChC,2FAA2F;IAC3F,aAAa,EAAE,uBAAuB;IACtC,kEAAkE;IAClE,aAAa,EAAE,uBAAuB;CAC9B,CAAC"}
+{"version":3,"file":"tool-names.js","sourceRoot":"","sources":["../../src/tools/tool-names.ts"],"names":[],"mappings":"AAAA,6EAA6E;AAC7E,MAAM,CAAC,MAAM,WAAW,GAAG;IACzB,QAAQ,EAAE,kBAAkB;IAC5B,QAAQ,EAAE,kBAAkB;IAC5B,KAAK,EAAE,eAAe;IACtB,OAAO,EAAE,iBAAiB;IAC1B,GAAG,EAAE,aAAa;IAClB,YAAY,EAAE,sBAAsB;IACpC,YAAY,EAAE,sBAAsB;IACpC,OAAO,EAAE,iBAAiB;IAC1B,QAAQ,EAAE,kBAAkB;IAC5B,OAAO,EAAE,iBAAiB;IAC1B,OAAO,EAAE,iBAAiB;IAC1B,UAAU,EAAE,oBAAoB;IAChC,MAAM,EAAE,gBAAgB;IACxB,aAAa,EAAE,uBAAuB;IACtC,aAAa,EAAE,uBAAuB;IACtC,IAAI,EAAE,cAAc;IACpB,YAAY,EAAE,sBAAsB;IACpC,WAAW,EAAE,qBAAqB;IAClC,MAAM,EAAE,gBAAgB;IACxB,OAAO,EAAE,iBAAiB;IAC1B,OAAO,EAAE,iBAAiB;IAC1B,KAAK,EAAE,eAAe;IACtB,KAAK,EAAE,eAAe;IACtB,YAAY,EAAE,sBAAsB;IACpC,aAAa,EAAE,uBAAuB;IACtC,MAAM,EAAE,gBAAgB;IACxB,SAAS,EAAE,mBAAmB;IAC9B,SAAS,EAAE,mBAAmB;IAC9B,SAAS,EAAE,mBAAmB;IAC9B,WAAW,EAAE,qBAAqB;IAClC,WAAW,EAAE,qBAAqB;IAClC,sGAAsG;IACtG,WAAW,EAAE,qBAAqB;IAClC,yDAAyD;IACzD,kBAAkB,EAAE,4BAA4B;IAChD,0EAA0E;IAC1E,SAAS,EAAE,mBAAmB;IAC9B,oFAAoF;IACpF,QAAQ,EAAE,kBAAkB;IAC5B,gFAAgF;IAChF,OAAO,EAAE,iBAAiB;IAC1B,gFAAgF;IAChF,UAAU,EAAE,oBAAoB;IAChC,oFAAoF;IACpF,UAAU,EAAE,oBAAoB;IAChC,oGAAoG;IACpG,YAAY,EAAE,sBAAsB;IACpC,wFAAwF;IACxF,QAAQ,EAAE,kBAAkB;IAC5B,qEAAqE;IACrE,WAAW,EAAE,qBAAqB;IAClC,iFAAiF;IACjF,KAAK,EAAE,eAAe;IACtB,4EAA4E;IAC5E,SAAS,EAAE,mBAAmB;IAC9B,gGAAgG;IAChG,OAAO,EAAE,iBAAiB;IAC1B,kGAAkG;IAClG,WAAW,EAAE,qBAAqB;IAClC,iGAAiG;IACjG,KAAK,EAAE,eAAe;IACtB,8CAA8C;IAC9C,MAAM,EAAE,gBAAgB;IACxB,iEAAiE;IACjE,QAAQ,EAAE,kBAAkB;IAC5B,iGAAiG;IACjG,MAAM,EAAE,gBAAgB;IACxB,uGAAuG;IACvG,UAAU,EAAE,oBAAoB;IAChC,mDAAmD;IACnD,QAAQ,EAAE,kBAAkB;IAC5B,uDAAuD;IACvD,OAAO,EAAE,iBAAiB;IAC1B,iFAAiF;IACjF,YAAY,EAAE,sBAAsB;IACpC,4FAA4F;IAC5F,YAAY,EAAE,sBAAsB;IACpC,uDAAuD;IACvD,QAAQ,EAAE,kBAAkB;IAC5B,oGAAoG;IACpG,UAAU,EAAE,oBAAoB;IAChC,2FAA2F;IAC3F,aAAa,EAAE,uBAAuB;IACtC,kEAAkE;IAClE,aAAa,EAAE,uBAAuB;CAC9B,CAAC"}

package/dist/visual/visual-store.d.ts

@@ -6,9 +6,10 @@ import type { FileSystemPort } from '../project/fs-port.js';
 export declare class VisualStore {
     #private;
     constructor(fs: FileSystemPort, root: string);
-    /** The absolute baseline path for `name` (for echoing back to the agent). */
+    /** The absolute baseline path for `name` (for echoing back to the agent). Guards the name so a
+     *  crafted value can never echo a path outside .reticle/visual/ to a future caller that does IO. */
     baselinePath(name: string): string;
-    /** The absolute overlay-diff path for `name`. */
+    /** The absolute overlay-diff path for `name`. Same name guard as baselinePath. */
     diffPath(name: string): string;
     /** True iff a valid name and a baseline PNG exists on disk. */
     hasBaseline(name: string): Promise<boolean>;

package/dist/visual/visual-store.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"visual-store.d.ts","sourceRoot":"","sources":["../../src/visual/visual-store.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAQ5D;;;GAGG;AACH,qBAAa,WAAW;;gBAIV,EAAE,EAAE,cAAc,EAAE,IAAI,EAAE,MAAM;IAK5C,6EAA6E;IAC7E,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM;IAIlC,iDAAiD;IACjD,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM;IAI9B,+DAA+D;IACzD,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAKjD,qGAAqG;IAC/F,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC;IAQlE,4FAA4F;IACtF,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,SAAS,CAAC;IAYjE,gGAAgG;IAC1F,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC;CAO/D"}
+{"version":3,"file":"visual-store.d.ts","sourceRoot":"","sources":["../../src/visual/visual-store.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAQ5D;;;GAGG;AACH,qBAAa,WAAW;;gBAIV,EAAE,EAAE,cAAc,EAAE,IAAI,EAAE,MAAM;IAK5C;wGACoG;IACpG,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM;IAKlC,kFAAkF;IAClF,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM;IAK9B,+DAA+D;IACzD,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAKjD,qGAAqG;IAC/F,YAAY,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC;IAQlE,4FAA4F;IACtF,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,SAAS,CAAC;IAYjE,gGAAgG;IAC1F,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC;CAO/D"}

package/dist/visual/visual-store.js

@@ -10,12 +10,17 @@ export class VisualStore {
         this.#fs = fs;
         this.#root = root;
     }
-    /** The absolute baseline path for `name` (for echoing back to the agent). */
+    /** The absolute baseline path for `name` (for echoing back to the agent). Guards the name so a
+     *  crafted value can never echo a path outside .reticle/visual/ to a future caller that does IO. */
     baselinePath(name) {
+        if (!isValidFlowName(name))
+            throw new Error(`invalid visual baseline name: ${name}`);
         return visualPath(this.#root, name);
     }
-    /** The absolute overlay-diff path for `name`. */
+    /** The absolute overlay-diff path for `name`. Same name guard as baselinePath. */
     diffPath(name) {
+        if (!isValidFlowName(name))
+            throw new Error(`invalid visual diff name: ${name}`);
         return visualDiffPath(this.#root, name);
     }
     /** True iff a valid name and a baseline PNG exists on disk. */

package/dist/visual/visual-store.js.map

@@ -1 +1 @@
-{"version":3,"file":"visual-store.js","sourceRoot":"","sources":["../../src/visual/visual-store.ts"],"names":[],"mappings":"AACA,OAAO,EACL,eAAe,EACf,eAAe,EACf,cAAc,EACd,UAAU,GACX,MAAM,2BAA2B,CAAC;AAEnC;;;GAGG;AACH,MAAM,OAAO,WAAW;IACb,GAAG,CAAiB;IACpB,KAAK,CAAS;IAEvB,YAAY,EAAkB,EAAE,IAAY;QAC1C,IAAI,CAAC,GAAG,GAAG,EAAE,CAAC;QACd,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;IACpB,CAAC;IAED,6EAA6E;IAC7E,YAAY,CAAC,IAAY;QACvB,OAAO,UAAU,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IACtC,CAAC;IAED,iDAAiD;IACjD,QAAQ,CAAC,IAAY;QACnB,OAAO,cAAc,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IAC1C,CAAC;IAED,+DAA+D;IAC/D,KAAK,CAAC,WAAW,CAAC,IAAY;QAC5B,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC;YAAE,OAAO,KAAK,CAAC;QACzC,OAAO,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC;IACvD,CAAC;IAED,qGAAqG;IACrG,KAAK,CAAC,YAAY,CAAC,IAAY,EAAE,GAAe;QAC9C,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,IAAI,EAAE,CAAC,CAAC;QACrF,MAAM,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC;QACzD,MAAM,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QAC1C,MAAM,IAAI,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QACzC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,4FAA4F;IAC5F,KAAK,CAAC,YAAY,CAAC,IAAY;QAC7B,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;YACrF,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,IAAI,CAAC;YACH,OAAO,MAAM,IAAI,CAAC,GAAG,CAAC,aAAa,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC;QACpE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,CAAC;gBAAE,OAAO,SAAS,CAAC,CAAC,0BAA0B;YAC5E,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED,gGAAgG;IAChG,KAAK,CAAC,QAAQ,CAAC,IAAY,EAAE,GAAe;QAC1C,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,IAAI,EAAE,CAAC,CAAC;QACrF,MAAM,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC;QACzD,MAAM,IAAI,GAAG,cAAc,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QAC9C,MAAM,IAAI,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QACzC,OAAO,IAAI,CAAC;IACd,CAAC;CACF"}
+{"version":3,"file":"visual-store.js","sourceRoot":"","sources":["../../src/visual/visual-store.ts"],"names":[],"mappings":"AACA,OAAO,EACL,eAAe,EACf,eAAe,EACf,cAAc,EACd,UAAU,GACX,MAAM,2BAA2B,CAAC;AAEnC;;;GAGG;AACH,MAAM,OAAO,WAAW;IACb,GAAG,CAAiB;IACpB,KAAK,CAAS;IAEvB,YAAY,EAAkB,EAAE,IAAY;QAC1C,IAAI,CAAC,GAAG,GAAG,EAAE,CAAC;QACd,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;IACpB,CAAC;IAED;wGACoG;IACpG,YAAY,CAAC,IAAY;QACvB,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,IAAI,EAAE,CAAC,CAAC;QACrF,OAAO,UAAU,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IACtC,CAAC;IAED,kFAAkF;IAClF,QAAQ,CAAC,IAAY;QACnB,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,IAAI,EAAE,CAAC,CAAC;QACjF,OAAO,cAAc,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IAC1C,CAAC;IAED,+DAA+D;IAC/D,KAAK,CAAC,WAAW,CAAC,IAAY;QAC5B,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC;YAAE,OAAO,KAAK,CAAC;QACzC,OAAO,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC;IACvD,CAAC;IAED,qGAAqG;IACrG,KAAK,CAAC,YAAY,CAAC,IAAY,EAAE,GAAe;QAC9C,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,IAAI,EAAE,CAAC,CAAC;QACrF,MAAM,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC;QACzD,MAAM,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QAC1C,MAAM,IAAI,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QACzC,OAAO,IAAI,CAAC;IACd,CAAC;IAED,4FAA4F;IAC5F,KAAK,CAAC,YAAY,CAAC,IAAY;QAC7B,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;YACrF,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,IAAI,CAAC;YACH,OAAO,MAAM,IAAI,CAAC,GAAG,CAAC,aAAa,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC;QACpE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,CAAC;gBAAE,OAAO,SAAS,CAAC,CAAC,0BAA0B;YAC5E,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED,gGAAgG;IAChG,KAAK,CAAC,QAAQ,CAAC,IAAY,EAAE,GAAe;QAC1C,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,IAAI,EAAE,CAAC,CAAC;QACrF,MAAM,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC;QACzD,MAAM,IAAI,GAAG,cAAc,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QAC9C,MAAM,IAAI,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;QACzC,OAAO,IAAI,CAAC;IACd,CAAC;CACF"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@reticlehq/server",
-  "version": "2.0.0",
+  "version": "2.0.1",
   "description": "Reticle bridge + MCP server. Hosts the browser WS endpoint and exposes MCP tools to the coding agent.",
   "type": "module",
   "main": "./dist/index.js",
@@ -21,7 +21,7 @@
     "@modelcontextprotocol/sdk": "^1.13.0",
     "ws": "^8.18.0",
     "zod": "^3.24.1",
-    "@reticlehq/core": "2.0.0"
+    "@reticlehq/core": "2.0.1"
   },
   "devDependencies": {
     "@types/pngjs": "^6.0.5",