@spotpatch/dev-server 0.9.0 → 0.10.1

package/dist/index.d.cts

@@ -2,6 +2,7 @@ import { applyPreparedAgentChange, executeAgentChange, inspectAgentWorkspace, pr
 import { AgentJobEvent, AgentJobSnapshot, AgentJobCreateRequest, AgentCapabilityRequest, AgentCapabilitySnapshot, AgentJobResultResponse, AgentWorkspaceHealthSnapshot, ResolvedAiOptions, ExternalHandoffFramework, ExternalHandoffCapability, ExternalHandoffPublishRequest, SpotAnnotation, ExternalHandoffPublishResult, ExternalHandoffStatusResult, ExternalAgentControlStatus, ExternalAgentControlConnectRequest, ExternalAgentControlDisconnectRequest, ExternalAgentControlCancelRequest, ExternalAgentManagedResult, SpotPatchEditorPreference, ContextBudget, SpotPatchLocalePreference, DataFlowLimits, ContextualAskExecutorPreference, AiProviderProtocol, AiProviderAuthentication, AiExecutionOptions, AiOptions, ContextualAskOptions, RuntimeAiConfig, RuntimeDataFlowConfig, ResolvedAgentCheckDefinition, AgentLimits, SpotSelectionContext, AskJobEvent, AskJobSnapshot, ContextualAskCapability, AskJobCreateRequest, AskJobResultResponse, ContextualAskErrorCode, SpotPatchRuntimeConfig } from '@spotpatch/shared';
 import { SourceFilterEntry } from '@spotpatch/compiler';
 import { IncomingMessage, ServerResponse } from 'node:http';
+import { StaticDataFlowAnalyzerOptions } from '@spotpatch/analyzer';
 
 type WorkspaceActivityKind = "ask" | "change";
 interface WorkspaceActivityLease {
@@ -207,13 +208,6 @@ declare function readIntegrationFile(absolutePath: string): Promise<string>;
 declare function createIntegrationFileChange(appRoot: string, absolutePath: string, nextContent: string, previousContent: string | undefined): IntegrationFileChange | undefined;
 declare function applyIntegrationPlan(plan: IntegrationPlan): Promise<void>;
 
-interface ResolveProjectOptionsInput {
-    readonly appRoot: string;
-    readonly environmentAi?: false | SimpleAiOptions;
-    readonly options?: SpotPatchOptions;
-}
-declare function resolveProjectOptions(input: ResolveProjectOptionsInput): Promise<ResolvedSpotPatchOptions>;
-
 interface DiscoverProjectValidationCheckOptions {
     readonly appRoot: string;
     readonly timeoutMs: number;
@@ -233,6 +227,14 @@ declare function discoverProjectValidationCheck(options: DiscoverProjectValidati
 declare function resolveProjectValidationChecks(options: ResolveProjectValidationChecksOptions): Promise<Readonly<Record<string, ResolvedAgentCheckDefinition>>>;
 declare function resolveManagedExecutionValidation(options: ResolveManagedExecutionValidationOptions): Promise<ResolvedManagedExecutionValidation>;
 
+interface ResolveProjectOptionsInput {
+    readonly appRoot: string;
+    readonly environmentAi?: false | SimpleAiOptions;
+    readonly options?: SpotPatchOptions;
+    readonly resolveValidationChecks?: typeof resolveProjectValidationChecks;
+}
+declare function resolveProjectOptions(input: ResolveProjectOptionsInput): Promise<ResolvedSpotPatchOptions>;
+
 type SourceIdFactory = () => string;
 
 interface SourceRegistry {
@@ -268,6 +270,7 @@ interface CapturedAskReadSnapshot {
     }>;
 }
 interface CaptureAskReadSnapshotOptions {
+    readonly resolveSourceImports?: (absolutePath: string, code: string) => readonly string[] | undefined;
     readonly root: string;
     readonly registry: SourceRegistry;
     readonly selection: SpotSelectionContext;
@@ -293,6 +296,7 @@ interface ContextualAskManagerDependencies {
     readonly now: () => Date;
 }
 interface CreateContextualAskManagerOptions {
+    readonly resolveSourceImports?: CaptureAskReadSnapshotOptions["resolveSourceImports"];
     readonly coordinator: WorkspaceActivityCoordinator;
     readonly enabled: boolean;
     readonly executors?: readonly ContextualAskExecutor[];
@@ -354,6 +358,7 @@ interface SpotPatchServerLogger {
     warn(message: string): void;
 }
 interface CreateMiddlewareOptions {
+    readonly projectDataFlowSource?: StaticDataFlowAnalyzerOptions["projectSource"];
     readonly agentManager?: AgentJobManager;
     readonly contextualAskManager?: ContextualAskManager;
     readonly bootstrap?: RuntimeBootstrapOptions;
@@ -428,4 +433,20 @@ interface SerializedSpotPatchOptions {
 declare function serializeResolvedSpotPatchOptions(options: ResolvedSpotPatchOptions): SerializedSpotPatchOptions;
 declare function parseSerializedSpotPatchOptions(value: unknown): ResolvedSpotPatchOptions;
 
-export { type AgentJobEventListener, type AgentJobManager, type CaptureAskReadSnapshotOptions, type CapturedAskReadSnapshot, type ComposeContextualAskExecutorsOptions, ContextualAskError, type ContextualAskJobEventListener, type ContextualAskManager, type ContextualAskRoute, type CreateAgentJobManagerOptions, type CreateConfiguredKeyAskExecutorsOptions, type CreateContextualAskManagerOptions, type CreateExternalHandoffServiceOptions, type CreateMiddlewareOptions, DEFAULT_EXCLUDE, DEFAULT_OPTIONS, type DiscoverProjectValidationCheckOptions, type EnvironmentAiConfiguration, type ExternalAgentControlPort, type ExternalHandoffService, type FilterEntry, type IntegrationFileChange, type IntegrationPlan, type ResolveManagedExecutionValidationOptions, type ResolveProjectOptionsInput, type ResolveProjectValidationChecksOptions, type ResolvedContextualAskOptions, type ResolvedManagedExecutionValidation, type ResolvedRuntimeBootstrapOptions, type ResolvedSpotPatchDataFlowOptions, type ResolvedSpotPatchOptions, type RuntimeBootstrapOptions, type SerializedFilterEntry, type SerializedSpotPatchOptions, type SimpleAiOptions, type SourceRegistrationHandler, type SourceRegistrationService, type SourceRegistrationServiceOptions, type SourceRegistry, type SpotPatchAiOptions, type SpotPatchDataFlowOptions, type SpotPatchMiddleware, type SpotPatchNext, type SpotPatchOptions, type SpotPatchServerLogger, type SpotPatchSession, type WorkspaceActivityCoordinator, type WorkspaceActivityKind, type WorkspaceActivityLease, applyIntegrationPlan, captureAskReadSnapshot, composeContextualAskExecutors, createAgentJobManager, createConfiguredKeyAskExecutors, createContextualAskManager, createExternalHandoffService, createIntegrationFileChange, createRuntimeAiConfig, createRuntimeDataFlowConfig, createSession, createSourceRegistrationService, createSourceRegistry, createSpotPatchMiddleware, createWorkspaceActivityCoordinator, discoverProjectValidationCheck, handleContextualAskRequest, integrationPathExists, isLoopbackHostname, matchContextualAskPath, parseSerializedSpotPatchOptions, readIntegrationFile, readJsonRequestBody, readRuntimeBootstrap, resolveCredentialEnvironment, resolveEnvironmentAiConfiguration, resolveManagedExecutionValidation, resolveOptions, resolveProjectOptions, resolveProjectValidationChecks, resolveRuntimeBootstrapOptions, serializeResolvedSpotPatchOptions };
+interface DevelopmentSessionInput extends Omit<CreateMiddlewareOptions, "agentManager" | "contextualAskManager" | "externalAgentControl" | "externalHandoffService"> {
+    readonly framework: ExternalHandoffFramework;
+    readonly resolveSourceImports?: CreateContextualAskManagerOptions["resolveSourceImports"];
+    readonly environment: Readonly<Record<string, string | undefined>>;
+    readonly executionRoot?: string;
+    readonly createManagedAskExecutor: () => ContextualAskExecutor;
+    readonly createExternalAgentControl: (validation: ResolvedManagedExecutionValidation) => Promise<ExternalAgentControlPort>;
+    readonly resolveValidation?: () => Promise<ResolvedManagedExecutionValidation>;
+}
+interface DevelopmentSession {
+    readonly middleware: SpotPatchMiddleware;
+    readonly close: () => Promise<void>;
+}
+/** Owns feature services, not HTTP listeners or framework-specific transports. */
+declare function createDevelopmentSession(input: DevelopmentSessionInput): Promise<DevelopmentSession>;
+
+export { type AgentJobEventListener, type AgentJobManager, type CaptureAskReadSnapshotOptions, type CapturedAskReadSnapshot, type ComposeContextualAskExecutorsOptions, ContextualAskError, type ContextualAskJobEventListener, type ContextualAskManager, type ContextualAskRoute, type CreateAgentJobManagerOptions, type CreateConfiguredKeyAskExecutorsOptions, type CreateContextualAskManagerOptions, type CreateExternalHandoffServiceOptions, type CreateMiddlewareOptions, DEFAULT_EXCLUDE, DEFAULT_OPTIONS, type DevelopmentSession, type DevelopmentSessionInput, type DiscoverProjectValidationCheckOptions, type EnvironmentAiConfiguration, type ExternalAgentControlPort, type ExternalHandoffService, type FilterEntry, type IntegrationFileChange, type IntegrationPlan, type ResolveManagedExecutionValidationOptions, type ResolveProjectOptionsInput, type ResolveProjectValidationChecksOptions, type ResolvedContextualAskOptions, type ResolvedManagedExecutionValidation, type ResolvedRuntimeBootstrapOptions, type ResolvedSpotPatchDataFlowOptions, type ResolvedSpotPatchOptions, type RuntimeBootstrapOptions, type SerializedFilterEntry, type SerializedSpotPatchOptions, type SimpleAiOptions, type SourceRegistrationHandler, type SourceRegistrationService, type SourceRegistrationServiceOptions, type SourceRegistry, type SpotPatchAiOptions, type SpotPatchDataFlowOptions, type SpotPatchMiddleware, type SpotPatchNext, type SpotPatchOptions, type SpotPatchServerLogger, type SpotPatchSession, type WorkspaceActivityCoordinator, type WorkspaceActivityKind, type WorkspaceActivityLease, applyIntegrationPlan, captureAskReadSnapshot, composeContextualAskExecutors, createAgentJobManager, createConfiguredKeyAskExecutors, createContextualAskManager, createDevelopmentSession, createExternalHandoffService, createIntegrationFileChange, createRuntimeAiConfig, createRuntimeDataFlowConfig, createSession, createSourceRegistrationService, createSourceRegistry, createSpotPatchMiddleware, createWorkspaceActivityCoordinator, discoverProjectValidationCheck, handleContextualAskRequest, integrationPathExists, isLoopbackHostname, matchContextualAskPath, parseSerializedSpotPatchOptions, readIntegrationFile, readJsonRequestBody, readRuntimeBootstrap, resolveCredentialEnvironment, resolveEnvironmentAiConfiguration, resolveManagedExecutionValidation, resolveOptions, resolveProjectOptions, resolveProjectValidationChecks, resolveRuntimeBootstrapOptions, serializeResolvedSpotPatchOptions };

package/dist/index.d.ts

@@ -2,6 +2,7 @@ import { applyPreparedAgentChange, executeAgentChange, inspectAgentWorkspace, pr
 import { AgentJobEvent, AgentJobSnapshot, AgentJobCreateRequest, AgentCapabilityRequest, AgentCapabilitySnapshot, AgentJobResultResponse, AgentWorkspaceHealthSnapshot, ResolvedAiOptions, ExternalHandoffFramework, ExternalHandoffCapability, ExternalHandoffPublishRequest, SpotAnnotation, ExternalHandoffPublishResult, ExternalHandoffStatusResult, ExternalAgentControlStatus, ExternalAgentControlConnectRequest, ExternalAgentControlDisconnectRequest, ExternalAgentControlCancelRequest, ExternalAgentManagedResult, SpotPatchEditorPreference, ContextBudget, SpotPatchLocalePreference, DataFlowLimits, ContextualAskExecutorPreference, AiProviderProtocol, AiProviderAuthentication, AiExecutionOptions, AiOptions, ContextualAskOptions, RuntimeAiConfig, RuntimeDataFlowConfig, ResolvedAgentCheckDefinition, AgentLimits, SpotSelectionContext, AskJobEvent, AskJobSnapshot, ContextualAskCapability, AskJobCreateRequest, AskJobResultResponse, ContextualAskErrorCode, SpotPatchRuntimeConfig } from '@spotpatch/shared';
 import { SourceFilterEntry } from '@spotpatch/compiler';
 import { IncomingMessage, ServerResponse } from 'node:http';
+import { StaticDataFlowAnalyzerOptions } from '@spotpatch/analyzer';
 
 type WorkspaceActivityKind = "ask" | "change";
 interface WorkspaceActivityLease {
@@ -207,13 +208,6 @@ declare function readIntegrationFile(absolutePath: string): Promise<string>;
 declare function createIntegrationFileChange(appRoot: string, absolutePath: string, nextContent: string, previousContent: string | undefined): IntegrationFileChange | undefined;
 declare function applyIntegrationPlan(plan: IntegrationPlan): Promise<void>;
 
-interface ResolveProjectOptionsInput {
-    readonly appRoot: string;
-    readonly environmentAi?: false | SimpleAiOptions;
-    readonly options?: SpotPatchOptions;
-}
-declare function resolveProjectOptions(input: ResolveProjectOptionsInput): Promise<ResolvedSpotPatchOptions>;
-
 interface DiscoverProjectValidationCheckOptions {
     readonly appRoot: string;
     readonly timeoutMs: number;
@@ -233,6 +227,14 @@ declare function discoverProjectValidationCheck(options: DiscoverProjectValidati
 declare function resolveProjectValidationChecks(options: ResolveProjectValidationChecksOptions): Promise<Readonly<Record<string, ResolvedAgentCheckDefinition>>>;
 declare function resolveManagedExecutionValidation(options: ResolveManagedExecutionValidationOptions): Promise<ResolvedManagedExecutionValidation>;
 
+interface ResolveProjectOptionsInput {
+    readonly appRoot: string;
+    readonly environmentAi?: false | SimpleAiOptions;
+    readonly options?: SpotPatchOptions;
+    readonly resolveValidationChecks?: typeof resolveProjectValidationChecks;
+}
+declare function resolveProjectOptions(input: ResolveProjectOptionsInput): Promise<ResolvedSpotPatchOptions>;
+
 type SourceIdFactory = () => string;
 
 interface SourceRegistry {
@@ -268,6 +270,7 @@ interface CapturedAskReadSnapshot {
     }>;
 }
 interface CaptureAskReadSnapshotOptions {
+    readonly resolveSourceImports?: (absolutePath: string, code: string) => readonly string[] | undefined;
     readonly root: string;
     readonly registry: SourceRegistry;
     readonly selection: SpotSelectionContext;
@@ -293,6 +296,7 @@ interface ContextualAskManagerDependencies {
     readonly now: () => Date;
 }
 interface CreateContextualAskManagerOptions {
+    readonly resolveSourceImports?: CaptureAskReadSnapshotOptions["resolveSourceImports"];
     readonly coordinator: WorkspaceActivityCoordinator;
     readonly enabled: boolean;
     readonly executors?: readonly ContextualAskExecutor[];
@@ -354,6 +358,7 @@ interface SpotPatchServerLogger {
     warn(message: string): void;
 }
 interface CreateMiddlewareOptions {
+    readonly projectDataFlowSource?: StaticDataFlowAnalyzerOptions["projectSource"];
     readonly agentManager?: AgentJobManager;
     readonly contextualAskManager?: ContextualAskManager;
     readonly bootstrap?: RuntimeBootstrapOptions;
@@ -428,4 +433,20 @@ interface SerializedSpotPatchOptions {
 declare function serializeResolvedSpotPatchOptions(options: ResolvedSpotPatchOptions): SerializedSpotPatchOptions;
 declare function parseSerializedSpotPatchOptions(value: unknown): ResolvedSpotPatchOptions;
 
-export { type AgentJobEventListener, type AgentJobManager, type CaptureAskReadSnapshotOptions, type CapturedAskReadSnapshot, type ComposeContextualAskExecutorsOptions, ContextualAskError, type ContextualAskJobEventListener, type ContextualAskManager, type ContextualAskRoute, type CreateAgentJobManagerOptions, type CreateConfiguredKeyAskExecutorsOptions, type CreateContextualAskManagerOptions, type CreateExternalHandoffServiceOptions, type CreateMiddlewareOptions, DEFAULT_EXCLUDE, DEFAULT_OPTIONS, type DiscoverProjectValidationCheckOptions, type EnvironmentAiConfiguration, type ExternalAgentControlPort, type ExternalHandoffService, type FilterEntry, type IntegrationFileChange, type IntegrationPlan, type ResolveManagedExecutionValidationOptions, type ResolveProjectOptionsInput, type ResolveProjectValidationChecksOptions, type ResolvedContextualAskOptions, type ResolvedManagedExecutionValidation, type ResolvedRuntimeBootstrapOptions, type ResolvedSpotPatchDataFlowOptions, type ResolvedSpotPatchOptions, type RuntimeBootstrapOptions, type SerializedFilterEntry, type SerializedSpotPatchOptions, type SimpleAiOptions, type SourceRegistrationHandler, type SourceRegistrationService, type SourceRegistrationServiceOptions, type SourceRegistry, type SpotPatchAiOptions, type SpotPatchDataFlowOptions, type SpotPatchMiddleware, type SpotPatchNext, type SpotPatchOptions, type SpotPatchServerLogger, type SpotPatchSession, type WorkspaceActivityCoordinator, type WorkspaceActivityKind, type WorkspaceActivityLease, applyIntegrationPlan, captureAskReadSnapshot, composeContextualAskExecutors, createAgentJobManager, createConfiguredKeyAskExecutors, createContextualAskManager, createExternalHandoffService, createIntegrationFileChange, createRuntimeAiConfig, createRuntimeDataFlowConfig, createSession, createSourceRegistrationService, createSourceRegistry, createSpotPatchMiddleware, createWorkspaceActivityCoordinator, discoverProjectValidationCheck, handleContextualAskRequest, integrationPathExists, isLoopbackHostname, matchContextualAskPath, parseSerializedSpotPatchOptions, readIntegrationFile, readJsonRequestBody, readRuntimeBootstrap, resolveCredentialEnvironment, resolveEnvironmentAiConfiguration, resolveManagedExecutionValidation, resolveOptions, resolveProjectOptions, resolveProjectValidationChecks, resolveRuntimeBootstrapOptions, serializeResolvedSpotPatchOptions };
+interface DevelopmentSessionInput extends Omit<CreateMiddlewareOptions, "agentManager" | "contextualAskManager" | "externalAgentControl" | "externalHandoffService"> {
+    readonly framework: ExternalHandoffFramework;
+    readonly resolveSourceImports?: CreateContextualAskManagerOptions["resolveSourceImports"];
+    readonly environment: Readonly<Record<string, string | undefined>>;
+    readonly executionRoot?: string;
+    readonly createManagedAskExecutor: () => ContextualAskExecutor;
+    readonly createExternalAgentControl: (validation: ResolvedManagedExecutionValidation) => Promise<ExternalAgentControlPort>;
+    readonly resolveValidation?: () => Promise<ResolvedManagedExecutionValidation>;
+}
+interface DevelopmentSession {
+    readonly middleware: SpotPatchMiddleware;
+    readonly close: () => Promise<void>;
+}
+/** Owns feature services, not HTTP listeners or framework-specific transports. */
+declare function createDevelopmentSession(input: DevelopmentSessionInput): Promise<DevelopmentSession>;
+
+export { type AgentJobEventListener, type AgentJobManager, type CaptureAskReadSnapshotOptions, type CapturedAskReadSnapshot, type ComposeContextualAskExecutorsOptions, ContextualAskError, type ContextualAskJobEventListener, type ContextualAskManager, type ContextualAskRoute, type CreateAgentJobManagerOptions, type CreateConfiguredKeyAskExecutorsOptions, type CreateContextualAskManagerOptions, type CreateExternalHandoffServiceOptions, type CreateMiddlewareOptions, DEFAULT_EXCLUDE, DEFAULT_OPTIONS, type DevelopmentSession, type DevelopmentSessionInput, type DiscoverProjectValidationCheckOptions, type EnvironmentAiConfiguration, type ExternalAgentControlPort, type ExternalHandoffService, type FilterEntry, type IntegrationFileChange, type IntegrationPlan, type ResolveManagedExecutionValidationOptions, type ResolveProjectOptionsInput, type ResolveProjectValidationChecksOptions, type ResolvedContextualAskOptions, type ResolvedManagedExecutionValidation, type ResolvedRuntimeBootstrapOptions, type ResolvedSpotPatchDataFlowOptions, type ResolvedSpotPatchOptions, type RuntimeBootstrapOptions, type SerializedFilterEntry, type SerializedSpotPatchOptions, type SimpleAiOptions, type SourceRegistrationHandler, type SourceRegistrationService, type SourceRegistrationServiceOptions, type SourceRegistry, type SpotPatchAiOptions, type SpotPatchDataFlowOptions, type SpotPatchMiddleware, type SpotPatchNext, type SpotPatchOptions, type SpotPatchServerLogger, type SpotPatchSession, type WorkspaceActivityCoordinator, type WorkspaceActivityKind, type WorkspaceActivityLease, applyIntegrationPlan, captureAskReadSnapshot, composeContextualAskExecutors, createAgentJobManager, createConfiguredKeyAskExecutors, createContextualAskManager, createDevelopmentSession, createExternalHandoffService, createIntegrationFileChange, createRuntimeAiConfig, createRuntimeDataFlowConfig, createSession, createSourceRegistrationService, createSourceRegistry, createSpotPatchMiddleware, createWorkspaceActivityCoordinator, discoverProjectValidationCheck, handleContextualAskRequest, integrationPathExists, isLoopbackHostname, matchContextualAskPath, parseSerializedSpotPatchOptions, readIntegrationFile, readJsonRequestBody, readRuntimeBootstrap, resolveCredentialEnvironment, resolveEnvironmentAiConfiguration, resolveManagedExecutionValidation, resolveOptions, resolveProjectOptions, resolveProjectValidationChecks, resolveRuntimeBootstrapOptions, serializeResolvedSpotPatchOptions };

package/dist/index.js

@@ -1057,10 +1057,13 @@ import {
 } from "@spotpatch/shared";
 import {
   computeExternalHandoffProjectKey,
+  assertPrivateExternalHandoffPath,
   externalHandoffDescriptorSchema,
+  initializePrivateExternalHandoffFile,
   resolveExternalHandoffRuntimeDirectory
 } from "@spotpatch/shared/external-agent-node";
 async function syncDirectory(directory) {
+  if (process.platform === "win32") return;
   const handle = await open(directory, "r");
   try {
     await handle.sync();
@@ -1110,14 +1113,11 @@ async function publishExternalHandoffDescriptor(options) {
     } finally {
       await handle.close();
     }
+    await initializePrivateExternalHandoffFile(temporary);
     await rename(temporary, destination);
     temporaryExists = false;
     published = true;
-    const status = await lstat(destination);
-    const uid = process.getuid?.();
-    if (!status.isFile() || status.isSymbolicLink() || uid === void 0 || status.uid !== uid || (status.mode & 63) !== 0) {
-      throw new Error("SpotPatch external Agent descriptor is not private.");
-    }
+    const status = await assertPrivateExternalHandoffPath(destination, "file");
     descriptorIdentity = Object.freeze({ device: status.dev, inode: status.ino });
     await syncDirectory(directory);
   } catch (error) {
@@ -2457,14 +2457,14 @@ async function resolveProjectOptions(input) {
       "SpotPatch trustedFastMode cannot be combined with applyMode auto."
     );
   }
-  const checks = await resolveProjectValidationChecks({
+  const checks = await (input.resolveValidationChecks ?? resolveProjectValidationChecks)({
     appRoot: input.appRoot,
     checks: resolved.ai.execution.checks,
     timeoutMs: resolved.ai.execution.limits.checkTimeoutMs
   });
   if (!Object.values(checks).some((check) => check.required)) {
     throw new RangeError(
-      "SpotPatch trustedFastMode requires a configured required check or a local TypeScript project with tsconfig.json."
+      "SpotPatch trustedFastMode requires a configured required check or an available framework-compatible local project check."
     );
   }
   const ai = Object.freeze({
@@ -2591,6 +2591,7 @@ import {
 } from "@spotpatch/shared";
 import { parseSync, Visitor } from "oxc-parser";
 var SOURCE_EXTENSIONS = Object.freeze([
+  ".astro",
   ".ts",
   ".tsx",
   ".js",
@@ -2899,7 +2900,8 @@ async function captureAskReadSnapshot(options) {
       content: read.content
     });
     captured.push(entry);
-    for (const specifier of localSpecifiers(candidate.absolutePath, read.content)) {
+    const specifiers = options.resolveSourceImports?.(candidate.absolutePath, read.content) ?? localSpecifiers(candidate.absolutePath, read.content);
+    for (const specifier of specifiers.filter((value) => value.startsWith("."))) {
       options.signal?.throwIfAborted();
       for (const importPath of importCandidates(candidate.absolutePath, specifier)) {
         if (capturedPaths.has(importPath)) continue;
@@ -3035,6 +3037,7 @@ function fingerprint(request) {
     JSON.stringify({
       envelope: request.envelope,
       executorId: request.executorId,
+      model: request.model,
       providerDataConsent: request.providerDataConsent
     })
   ).digest("hex");
@@ -3325,7 +3328,8 @@ function createContextualAskManager(options) {
         registry: options.registry,
         selection: job.request.envelope.selection,
         signal: job.controller.signal,
-        createHandleId: dependencies.createId
+        createHandleId: dependencies.createId,
+        ...options.resolveSourceImports === void 0 ? {} : { resolveSourceImports: options.resolveSourceImports }
       });
       if (job.controller.signal.aborted) {
         captured.dispose();
@@ -3339,6 +3343,7 @@ function createContextualAskManager(options) {
         job.executor.execute(
           {
             jobId: job.id,
+            ...job.request.model === void 0 ? {} : { model: job.request.model },
             envelope: job.request.envelope,
             grant: captured.grant,
             snapshot: instrumentSnapshot(job, captured.snapshot, () => {
@@ -3458,6 +3463,9 @@ function createContextualAskManager(options) {
             )
           );
           if (isClosed()) throw new ContextualAskError("ASK_DISABLED");
+          if (request.model !== void 0 && !capability.models?.includes(request.model)) {
+            throw new ContextualAskError("ASK_EXECUTOR_UNAVAILABLE");
+          }
           if (capability.executorId !== executor.executorId || capability.state !== "ready" || !capability.readOnlyProven) {
             throw new ContextualAskError("ASK_EXECUTOR_UNAVAILABLE");
           }
@@ -3474,7 +3482,11 @@ function createContextualAskManager(options) {
             createdAt,
             events: [],
             executor,
-            executorCapability: capability,
+            executorCapability: request.model === void 0 ? capability : {
+              ...capability,
+              requestedModelLabel: request.model,
+              effectiveModelLabel: request.model
+            },
             fingerprint: requestFingerprint,
             id: dependencies.createId(),
             lease,
@@ -4119,6 +4131,7 @@ function nearbyContext(options) {
   });
 }
 function extractCodeContext(options) {
+  if (options.language === "astro") return nearbyContext(options);
   const component = findComponentSpan(options);
   if (component !== void 0) {
     const range = componentRange(options.source, component);
@@ -4142,7 +4155,7 @@ function extractCodeContext(options) {
 import { realpath as realpath4, stat as stat2 } from "fs/promises";
 import path6 from "path";
 import { ERROR_CODES as ERROR_CODES7, SpotPatchError as SpotPatchError7 } from "@spotpatch/shared";
-var ALLOWED_EXTENSIONS = /* @__PURE__ */ new Set([".jsx", ".tsx"]);
+var ALLOWED_EXTENSIONS = /* @__PURE__ */ new Set([".jsx", ".tsx", ".astro"]);
 function isMissingFileError(error) {
   return error instanceof Error && "code" in error && (error.code === "ENOENT" || error.code === "ENOTDIR");
 }
@@ -4228,7 +4241,7 @@ async function readSourceContext(options) {
     source,
     sourcePath,
     relativePath: toDisplayPath(await realpath5(options.root), sourcePath),
-    language: extension === ".tsx" ? "tsx" : "jsx",
+    language: extension === ".astro" ? "astro" : extension === ".tsx" ? "tsx" : "jsx",
     line: options.request.line,
     column: options.request.column,
     maxLines: Math.min(options.request.maxLines, options.maxLines),
@@ -4258,7 +4271,7 @@ function compactSourceRef(source) {
   });
 }
 async function authorizeSourceRef(source, registry, root) {
-  const markerOrigin = source.origin === "jsx-host" || source.origin === "dom-ancestor";
+  const markerOrigin = source.origin === "jsx-host" || source.origin === "astro-host" || source.origin === "dom-ancestor";
   if (markerOrigin && (source.fileId === void 0 || source.line === void 0 || source.column === void 0)) {
     throw new SpotPatchError9(ERROR_CODES9.INVALID_REQUEST);
   }
@@ -4974,7 +4987,8 @@ function createDataFlowAnalyzer(options) {
     root: options.root,
     registryEpoch: options.session.id,
     registerSource: (absolutePath) => options.registry.register(absolutePath),
-    limits: options.options.dataFlow.limits
+    limits: options.options.dataFlow.limits,
+    ...options.projectDataFlowSource === void 0 ? {} : { projectSource: options.projectDataFlowSource }
   });
 }
 async function analyzeTarget(request, analyzer, options) {
@@ -5938,6 +5952,113 @@ function parseSerializedSpotPatchOptions(value) {
     });
   }
 }
+
+// src/development-session.ts
+async function createDevelopmentSession(input) {
+  const cleanups = [
+    () => {
+      input.registry.clear();
+    }
+  ];
+  let closing;
+  const close = () => closing ??= (async () => {
+    const errors = [];
+    for (const cleanup of cleanups.splice(0).reverse()) {
+      try {
+        await cleanup();
+      } catch (error) {
+        errors.push(error);
+      }
+    }
+    if (errors.length > 0)
+      throw new AggregateError(errors, "SpotPatch service cleanup failed.");
+  })();
+  const warn = (message) => {
+    input.logger?.warn(`[spotpatch:${input.framework}] ${message}`);
+  };
+  try {
+    const { options, root, registry } = input;
+    const coordinator = createWorkspaceActivityCoordinator();
+    const agentManager = options.ai === false ? void 0 : createAgentJobManager({
+      ai: options.ai,
+      environment: input.environment,
+      root: input.executionRoot ?? root,
+      coordinator
+    });
+    if (agentManager !== void 0) cleanups.push(() => agentManager.close());
+    const preference = options.contextualAsk.defaultExecutor === void 0 ? {} : { defaultExecutor: options.contextualAsk.defaultExecutor };
+    const contextualAskManager = !options.contextualAsk.enabled ? void 0 : createContextualAskManager({
+      coordinator,
+      enabled: true,
+      registry,
+      root,
+      ...input.resolveSourceImports === void 0 ? {} : { resolveSourceImports: input.resolveSourceImports },
+      executors: composeContextualAskExecutors({
+        configuredKey: options.ai === false ? [] : createConfiguredKeyAskExecutors({
+          ai: options.ai,
+          environment: input.environment,
+          ...preference
+        }),
+        managedCodex: input.createManagedAskExecutor(),
+        ...preference
+      })
+    });
+    if (contextualAskManager !== void 0)
+      cleanups.push(() => contextualAskManager.close());
+    const externalHandoffService = !options.externalAgent.enabled ? void 0 : createExternalHandoffService({
+      framework: input.framework,
+      root,
+      sessionId: input.session.id
+    });
+    let externalAgentControl;
+    if (externalHandoffService !== void 0) {
+      cleanups.push(() => externalHandoffService.close());
+      try {
+        await externalHandoffService.start();
+      } catch {
+        warn("External Agent handoff is unavailable; core tools remain active.");
+      }
+      if (externalHandoffService.capability().brokerReady) {
+        try {
+          const validation = await (input.resolveValidation?.() ?? resolveManagedExecutionValidation({ ai: options.ai, appRoot: root }));
+          const control = await input.createExternalAgentControl(validation);
+          externalAgentControl = control;
+          cleanups.push(() => control.dispose());
+        } catch {
+          warn("Managed Agent control is unavailable; Inbox remains active.");
+        }
+      }
+    }
+    const middleware = createSpotPatchMiddleware({
+      options,
+      root,
+      registry,
+      session: input.session,
+      ...input.projectDataFlowSource === void 0 ? {} : { projectDataFlowSource: input.projectDataFlowSource },
+      ...input.bootstrap === void 0 ? {} : { bootstrap: input.bootstrap },
+      ...input.logger === void 0 ? {} : { logger: input.logger },
+      ...input.editorLauncher === void 0 ? {} : { editorLauncher: input.editorLauncher },
+      ...agentManager === void 0 ? {} : { agentManager },
+      ...contextualAskManager === void 0 ? {} : { contextualAskManager },
+      ...externalHandoffService === void 0 ? {} : { externalHandoffService },
+      ...externalAgentControl === void 0 ? {} : { externalAgentControl }
+    });
+    cleanups.push(() => {
+      middleware.dispose();
+    });
+    return Object.freeze({ middleware, close });
+  } catch (error) {
+    try {
+      await close();
+    } catch (cleanupError) {
+      throw new AggregateError(
+        [error, cleanupError],
+        "SpotPatch service startup and cleanup failed."
+      );
+    }
+    throw error;
+  }
+}
 export {
   ContextualAskError,
   DEFAULT_EXCLUDE,
@@ -5948,6 +6069,7 @@ export {
   createAgentJobManager,
   createConfiguredKeyAskExecutors,
   createContextualAskManager,
+  createDevelopmentSession,
   createExternalHandoffService,
   createIntegrationFileChange,
   createRuntimeAiConfig,