@svenroth-ai/shipwright 0.26.0 → 0.28.0

package/server/dist/core/launcher-codextender.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"launcher-codextender.js","sourceRoot":"","sources":["../../src/core/launcher-codextender.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAErC,OAAO,EACL,gCAAgC,EAChC,yBAAyB,EACzB,6BAA6B,GAC9B,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAAE,aAAa,EAAyB,MAAM,eAAe,CAAC;AACrE,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAErD;;;;;;;;;;GAUG;AACH,MAAM,UAAU,2BAA2B;IACzC,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,sBAAsB,EAAE,IAAI,EAAE,CAAC;IAC3D,OAAO,OAAO,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;AAC7D,CAAC;AAED;iEACiE;AACjE,MAAM,CAAC,MAAM,+BAA+B,GAAG,KAAK,CAAC;AAwCrD;;;;;;;;;;;;;GAaG;AACH,MAAM,OAAO,2BAA4B,SAAQ,KAAK;IACpD,YAAY,GAAW;QACrB,KAAK,CACH,wEAAwE;YACtE,mBAAmB,GAAG,+CAA+C;YACrE,wDAAwD,CAC3D,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,6BAA6B,CAAC;IAC5C,CAAC;CACF;AAED,MAAM,UAAU,wBAAwB,CAAC,IAA2B;IAClE,2EAA2E;IAC3E,uEAAuE;IACvE,2EAA2E;IAC3E,oEAAoE;IACpE,8CAA8C;IAC9C,MAAM,aAAa,GAAG,6BAA6B,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACpE,IAAI,CAAC;QACH,OAAO;YACL,UAAU,EAAE,eAAe,CAAC,IAAI,EAAE,YAAY,EAAE,GAAG,EAAE,aAAa,CAAC;YACnE,GAAG,EAAE,eAAe,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,aAAa,CAAC;YACtD,KAAK,EAAE,eAAe,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,aAAa,CAAC;SAC7D,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,uEAAuE;QACvE,uEAAuE;QACvE,oEAAoE;QACpE,UAAU,CAAC,aAAa,CAAC,CAAC;QAC1B,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CACtB,IAA2B,EAC3B,SAAyC,EACzC,CAAwB,EACxB,aAAqB;IAErB,MAAM,QAAQ,GAAG,aAAa,CAAC,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;IACpD,MAAM,IAAI,GAAG,IAAI,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC;IAC5C,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,2BAA2B,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAClD,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACzC,OAAO,CACL,QAAQ;QACR,yBAAyB,CAAC,IAAI,EAAE,CAAC,EAAE,SAAS,EAAE,aAAa,CAAC;QAC5D,IAAI;QACJ,gCAAgC,CAAC,SAAS,EAAE,CAAC,EAAE,aAAa,CAAC,CAC9D,CAAC;AACJ,CAAC"}

package/server/dist/core/launcher-codextender.smoke-helpers.d.ts

@@ -0,0 +1,25 @@
+export declare const SAMPLE_UUID = "00000000-1111-2222-3333-444444444444";
+export declare const MARKER_VALUE = "smoke-test-secret-9f3a2b7c-do-not-leak";
+export declare const ENV_NAMES: string[];
+export declare const SPAWN_TIMEOUT_MS = 15000;
+export declare function extractTokenFilePath(command: string, shellForm: "powershell" | "cmd" | "posix"): string;
+export declare function findBash(): string | null;
+export declare function findCmd(): string | null;
+export declare function scratchDir(): string;
+export declare function cleanupScratchDirs(): void;
+export interface SmokeResult {
+    exit: number | null;
+    stdout: string;
+    stderr: string;
+    tokenSeenByChild: string;
+    remainingEnv: string;
+    tokenFileExists: boolean;
+}
+export declare function generatedCommandFor(shellForm: "powershell" | "cmd" | "posix"): {
+    command: string;
+    tokenFilePath: string;
+};
+export declare function runPowershell(exitCode: number, powershellBin: string): SmokeResult;
+export declare function runBash(exitCode: number): SmokeResult;
+export declare function runCmd(exitCode: number): SmokeResult;
+//# sourceMappingURL=launcher-codextender.smoke-helpers.d.ts.map

package/server/dist/core/launcher-codextender.smoke-helpers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"launcher-codextender.smoke-helpers.d.ts","sourceRoot":"","sources":["../../src/core/launcher-codextender.smoke-helpers.ts"],"names":[],"mappings":"AAmBA,eAAO,MAAM,WAAW,yCAAyC,CAAC;AAClE,eAAO,MAAM,YAAY,2CAA2C,CAAC;AACrE,eAAO,MAAM,SAAS,UAUrB,CAAC;AACF,eAAO,MAAM,gBAAgB,QAAS,CAAC;AAEvC,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,YAAY,GAAG,KAAK,GAAG,OAAO,GAAG,MAAM,CAiBvG;AAED,wBAAgB,QAAQ,IAAI,MAAM,GAAG,IAAI,CAGxC;AAED,wBAAgB,OAAO,IAAI,MAAM,GAAG,IAAI,CAMvC;AAGD,wBAAgB,UAAU,IAAI,MAAM,CAInC;AACD,wBAAgB,kBAAkB,IAAI,IAAI,CAKzC;AAED,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,gBAAgB,EAAE,MAAM,CAAC;IACzB,YAAY,EAAE,MAAM,CAAC;IACrB,eAAe,EAAE,OAAO,CAAC;CAC1B;AAED,wBAAgB,mBAAmB,CAAC,SAAS,EAAE,YAAY,GAAG,KAAK,GAAG,OAAO;;;EAS5E;AAED,wBAAgB,aAAa,CAAC,QAAQ,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,GAAG,WAAW,CA+BlF;AAED,wBAAgB,OAAO,CAAC,QAAQ,EAAE,MAAM,GAAG,WAAW,CAgCrD;AAID,wBAAgB,MAAM,CAAC,QAAQ,EAAE,MAAM,GAAG,WAAW,CA6DpD"}

package/server/dist/core/launcher-codextender.smoke-helpers.js

@@ -0,0 +1,211 @@
+/*
+ * launcher-codextender.smoke-helpers.ts — real-shell execution plumbing for
+ * launcher-codextender.smoke.test.ts, split out (bloat anti-ratchet,
+ * 2026-09-28) once the test file crossed the 300-line source/test limit
+ * after adding CLAUDE_CODE_AUTO_MODE_SERVER coverage. Pure helpers + shell
+ * spawning only — no `describe`/`it` here, so this file is not itself a
+ * test suite (vitest only collects files it's told to run tests from; a
+ * plain .ts helper imported by a .test.ts file is not treated as one).
+ */
+import { spawnSync } from "node:child_process";
+import { mkdtempSync, rmSync, writeFileSync, existsSync, readFileSync, mkdirSync } from "node:fs";
+import { tmpdir } from "node:os";
+import path from "node:path";
+import { buildCopyCommands } from "./launcher.js";
+import { buildCodextenderCommands } from "./launcher-codextender.js";
+import { POWERSHELL_QUIET_ENV } from "./powershell-probe.smoke-helpers.js";
+export const SAMPLE_UUID = "00000000-1111-2222-3333-444444444444";
+export const MARKER_VALUE = "smoke-test-secret-9f3a2b7c-do-not-leak";
+export const ENV_NAMES = [
+    "ANTHROPIC_BASE_URL",
+    "ANTHROPIC_AUTH_TOKEN",
+    "ANTHROPIC_MODEL",
+    "CODEXTENDER_ACTIVE",
+    "CODEXTENDER_MODEL",
+    "CLAUDE_CODE_AUTO_MODE_SERVER",
+    "ANTHROPIC_DEFAULT_OPUS_MODEL",
+    "ANTHROPIC_DEFAULT_SONNET_MODEL",
+    "ANTHROPIC_DEFAULT_HAIKU_MODEL",
+];
+export const SPAWN_TIMEOUT_MS = 15_000;
+export function extractTokenFilePath(command, shellForm) {
+    if (shellForm === "powershell") {
+        const m = command.match(/Get-Content -LiteralPath '([^']+)'/);
+        if (!m)
+            throw new Error("token file path not found in powershell command");
+        return m[1];
+    }
+    /* v8 ignore start -- cmd.exe branch only reached via runCmd(), which
+     * findCmd()'s win32 guard skips entirely on the Linux CI runner. */
+    if (shellForm === "cmd") {
+        const m = command.match(/set \/p ANTHROPIC_AUTH_TOKEN=<"([^"]+)"/);
+        if (!m)
+            throw new Error("token file path not found in cmd command");
+        return m[1];
+    }
+    /* v8 ignore stop */
+    const m = command.match(/\$\(cat '([^']+)'\)/);
+    if (!m)
+        throw new Error("token file path not found in posix command");
+    return m[1];
+}
+export function findBash() {
+    const result = spawnSync("bash", ["-c", "true"], { stdio: "pipe", timeout: SPAWN_TIMEOUT_MS });
+    return result.status === 0 ? "bash" : null;
+}
+export function findCmd() {
+    if (process.platform !== "win32")
+        return null; // cmd.exe is Windows-only.
+    /* v8 ignore start -- unreachable on the Linux CI runner (platform check above). */
+    const result = spawnSync("cmd", ["/c", "exit", "0"], { stdio: "pipe", timeout: SPAWN_TIMEOUT_MS });
+    return result.status === 0 ? "cmd" : null;
+    /* v8 ignore stop */
+}
+const scratchDirs = [];
+export function scratchDir() {
+    const dir = mkdtempSync(path.join(tmpdir(), "codextender-smoke-"));
+    scratchDirs.push(dir);
+    return dir;
+}
+export function cleanupScratchDirs() {
+    while (scratchDirs.length > 0) {
+        const dir = scratchDirs.pop();
+        if (dir)
+            rmSync(dir, { recursive: true, force: true });
+    }
+}
+export function generatedCommandFor(shellForm) {
+    const claudeCommands = buildCopyCommands({ sessionUuid: SAMPLE_UUID, cwd: process.cwd(), title: "smoke" });
+    const command = buildCodextenderCommands({
+        cwd: process.cwd(),
+        baseUrl: "http://127.0.0.1:4000",
+        authToken: MARKER_VALUE,
+        claudeCommands,
+    })[shellForm];
+    return { command, tokenFilePath: extractTokenFilePath(command, shellForm) };
+}
+export function runPowershell(exitCode, powershellBin) {
+    const { command, tokenFilePath } = generatedCommandFor("powershell");
+    const dir = scratchDir();
+    const captureFile = path.join(dir, "capture.txt");
+    const wrapper = "function claude {\n" +
+        "  Set-Content -LiteralPath $env:SMOKE_CAPTURE_FILE -Value $env:ANTHROPIC_AUTH_TOKEN -NoNewline\n" +
+        "  $global:LASTEXITCODE = [int]$env:SMOKE_EXIT_CODE\n" +
+        "}\n" +
+        command +
+        "\n" +
+        '$remaining = @()\n' +
+        `foreach ($n in @(${ENV_NAMES.map((n) => `"${n}"`).join(",")})) {\n` +
+        "  if ([Environment]::GetEnvironmentVariable($n)) { $remaining += $n }\n" +
+        "}\n" +
+        'Write-Output ("SMOKE_REMAINING_ENV=" + ($remaining -join ","))\n' +
+        `Write-Output ("SMOKE_TOKEN_FILE_EXISTS=" + (Test-Path -LiteralPath '${tokenFilePath.replace(/'/g, "''")}'))\n`;
+    const result = spawnSync(powershellBin, ["-NoProfile", "-Command", wrapper], {
+        stdio: "pipe",
+        timeout: SPAWN_TIMEOUT_MS,
+        env: { ...process.env, ...POWERSHELL_QUIET_ENV, SMOKE_CAPTURE_FILE: captureFile, SMOKE_EXIT_CODE: String(exitCode) },
+    });
+    const stdout = result.stdout?.toString() ?? "";
+    return {
+        exit: result.status,
+        stdout,
+        stderr: result.stderr?.toString() ?? "",
+        tokenSeenByChild: existsSync(captureFile) ? readFileSync(captureFile, "utf8") : "",
+        remainingEnv: /SMOKE_REMAINING_ENV=([^\r\n]*)/.exec(stdout)?.[1] ?? "MISSING",
+        tokenFileExists: /SMOKE_TOKEN_FILE_EXISTS=True/i.test(stdout),
+    };
+}
+export function runBash(exitCode) {
+    const { command, tokenFilePath } = generatedCommandFor("posix");
+    const dir = scratchDir();
+    const captureFile = path.join(dir, "capture.txt");
+    const wrapper = "claude() {\n" +
+        '  printf "%s" "$ANTHROPIC_AUTH_TOKEN" > "$SMOKE_CAPTURE_FILE"\n' +
+        "  return $SMOKE_EXIT_CODE\n" +
+        "}\n" +
+        command +
+        "\n" +
+        'remaining=""\n' +
+        `for n in ${ENV_NAMES.join(" ")}; do\n` +
+        '  v=$(eval "printf \'%s\' \\"\\${$n:-}\\"")\n' +
+        '  if [ -n "$v" ]; then remaining="$remaining$n,"; fi\n' +
+        "done\n" +
+        'echo "SMOKE_REMAINING_ENV=$remaining"\n' +
+        `if [ -e "${tokenFilePath}" ]; then echo "SMOKE_TOKEN_FILE_EXISTS=true"; else echo "SMOKE_TOKEN_FILE_EXISTS=false"; fi\n`;
+    const result = spawnSync("bash", ["-c", wrapper], {
+        stdio: "pipe",
+        timeout: SPAWN_TIMEOUT_MS,
+        env: { ...process.env, SMOKE_CAPTURE_FILE: captureFile, SMOKE_EXIT_CODE: String(exitCode) },
+    });
+    const stdout = result.stdout?.toString() ?? "";
+    return {
+        exit: result.status,
+        stdout,
+        stderr: result.stderr?.toString() ?? "",
+        tokenSeenByChild: existsSync(captureFile) ? readFileSync(captureFile, "utf8") : "",
+        remainingEnv: /SMOKE_REMAINING_ENV=([^\r\n]*)/.exec(stdout)?.[1] ?? "MISSING",
+        tokenFileExists: /SMOKE_TOKEN_FILE_EXISTS=true/i.test(stdout),
+    };
+}
+/* v8 ignore start -- only invoked by the cmd.exe smoke test, which
+ * it.skipIf(!findCmd()) skips entirely on the Linux CI runner. */
+export function runCmd(exitCode) {
+    const { command, tokenFilePath } = generatedCommandFor("cmd");
+    const dir = scratchDir();
+    const stubDir = path.join(dir, "stub");
+    mkdirSync(stubDir);
+    const captureFile = path.join(dir, "capture.txt");
+    writeFileSync(path.join(stubDir, "claude.cmd"), "@echo off\r\n" +
+        '>"%SMOKE_CAPTURE_FILE%" echo %ANTHROPIC_AUTH_TOKEN%\r\n' +
+        "exit /b %SMOKE_EXIT_CODE%\r\n");
+    // Diagnostics MUST be chained with `&` onto the SAME logical line as
+    // `command`, never as subsequent physical lines: cmd.exe invokes the
+    // `claude.cmd` stub by bare name (no `call`, matching production, where
+    // real `claude` is a native .exe and this quirk never applies), and once a
+    // .cmd/.bat is invoked that way, control returns for the REST OF THE SAME
+    // LINE's `&`-chained commands but never advances to the calling script's
+    // next physical line (verified empirically: a batch file's own line after
+    // a bare-name nested-.cmd call never runs, even though same-line `&`
+    // continuations after that call do).
+    //
+    // There is NO reliable same-line way left to observe whether the
+    // cleanup suffix's `set NAME=` clears actually took effect: cmd.exe
+    // resolves every %VAR%/`if defined VAR` reference on an entire `&`-chained
+    // line against the environment snapshot from BEFORE that line started
+    // executing, regardless of `set` commands earlier on the SAME line — the
+    // textbook reason `setlocal enabledelayedexpansion` exists at all
+    // (confirmed in isolation: `set "X=1" & set X=CLEARED & echo %X%` prints
+    // the OLD value; `enabledelayedexpansion` + `!X!` does not fix `if
+    // defined` either, and even a nested `cmd /c "if defined X ..."` spawned
+    // mid-line inherits the same stale snapshot). This is a limitation of
+    // observing it from the SAME script, not evidence cleanup didn't run:
+    // `if exist <tokenFilePath>` below checks DISK state, immune to this
+    // per-line env snapshot, and its `false` result already proves the whole
+    // `&`-chained cleanup suffix — including the `set NAME=` clears that
+    // precede `del` in that exact same chain — ran to completion in order.
+    const oneLine = `set "PATH=${stubDir};%PATH%" & ` +
+        `set "SMOKE_CAPTURE_FILE=${captureFile}" & ` +
+        `set "SMOKE_EXIT_CODE=${exitCode}" & ` +
+        command +
+        ` & (if exist "${tokenFilePath}" (echo SMOKE_TOKEN_FILE_EXISTS=true) else (echo SMOKE_TOKEN_FILE_EXISTS=false))`;
+    const wrapperFile = path.join(dir, "wrapper.cmd");
+    writeFileSync(wrapperFile, `@echo off\r\n${oneLine}\r\n`);
+    const result = spawnSync("cmd", ["/c", wrapperFile], {
+        stdio: "pipe",
+        timeout: SPAWN_TIMEOUT_MS,
+        env: { ...process.env },
+    });
+    const stdout = result.stdout?.toString() ?? "";
+    return {
+        exit: result.status,
+        stdout,
+        stderr: result.stderr?.toString() ?? "",
+        tokenSeenByChild: existsSync(captureFile) ? readFileSync(captureFile, "utf8").trim() : "",
+        // Not observable same-line for cmd — see the comment above; the disk-based
+        // tokenFileExists check below covers whether the cleanup chain ran.
+        remainingEnv: "",
+        tokenFileExists: /SMOKE_TOKEN_FILE_EXISTS=true/i.test(stdout),
+    };
+}
+/* v8 ignore stop */
+//# sourceMappingURL=launcher-codextender.smoke-helpers.js.map

package/server/dist/core/launcher-codextender.smoke-helpers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"launcher-codextender.smoke-helpers.js","sourceRoot":"","sources":["../../src/core/launcher-codextender.smoke-helpers.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,aAAa,EAAE,UAAU,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAClG,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAClD,OAAO,EAAE,wBAAwB,EAAE,MAAM,2BAA2B,CAAC;AACrE,OAAO,EAAE,oBAAoB,EAAE,MAAM,qCAAqC,CAAC;AAE3E,MAAM,CAAC,MAAM,WAAW,GAAG,sCAAsC,CAAC;AAClE,MAAM,CAAC,MAAM,YAAY,GAAG,wCAAwC,CAAC;AACrE,MAAM,CAAC,MAAM,SAAS,GAAG;IACvB,oBAAoB;IACpB,sBAAsB;IACtB,iBAAiB;IACjB,oBAAoB;IACpB,mBAAmB;IACnB,8BAA8B;IAC9B,8BAA8B;IAC9B,gCAAgC;IAChC,+BAA+B;CAChC,CAAC;AACF,MAAM,CAAC,MAAM,gBAAgB,GAAG,MAAM,CAAC;AAEvC,MAAM,UAAU,oBAAoB,CAAC,OAAe,EAAE,SAAyC;IAC7F,IAAI,SAAS,KAAK,YAAY,EAAE,CAAC;QAC/B,MAAM,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,oCAAoC,CAAC,CAAC;QAC9D,IAAI,CAAC,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;QAC3E,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;IACd,CAAC;IACD;wEACoE;IACpE,IAAI,SAAS,KAAK,KAAK,EAAE,CAAC;QACxB,MAAM,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,yCAAyC,CAAC,CAAC;QACnE,IAAI,CAAC,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;QACpE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;IACd,CAAC;IACD,oBAAoB;IACpB,MAAM,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC;IAC/C,IAAI,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;IACtE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;AACd,CAAC;AAED,MAAM,UAAU,QAAQ;IACtB,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,gBAAgB,EAAE,CAAC,CAAC;IAC/F,OAAO,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;AAC7C,CAAC;AAED,MAAM,UAAU,OAAO;IACrB,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;QAAE,OAAO,IAAI,CAAC,CAAC,2BAA2B;IAC1E,mFAAmF;IACnF,MAAM,MAAM,GAAG,SAAS,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,gBAAgB,EAAE,CAAC,CAAC;IACnG,OAAO,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;IAC1C,oBAAoB;AACtB,CAAC;AAED,MAAM,WAAW,GAAa,EAAE,CAAC;AACjC,MAAM,UAAU,UAAU;IACxB,MAAM,GAAG,GAAG,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,oBAAoB,CAAC,CAAC,CAAC;IACnE,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACtB,OAAO,GAAG,CAAC;AACb,CAAC;AACD,MAAM,UAAU,kBAAkB;IAChC,OAAO,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC9B,MAAM,GAAG,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;QAC9B,IAAI,GAAG;YAAE,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACzD,CAAC;AACH,CAAC;AAWD,MAAM,UAAU,mBAAmB,CAAC,SAAyC;IAC3E,MAAM,cAAc,GAAG,iBAAiB,CAAC,EAAE,WAAW,EAAE,WAAW,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;IAC3G,MAAM,OAAO,GAAG,wBAAwB,CAAC;QACvC,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE;QAClB,OAAO,EAAE,uBAAuB;QAChC,SAAS,EAAE,YAAY;QACvB,cAAc;KACf,CAAC,CAAC,SAAS,CAAC,CAAC;IACd,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,oBAAoB,CAAC,OAAO,EAAE,SAAS,CAAC,EAAE,CAAC;AAC9E,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,QAAgB,EAAE,aAAqB;IACnE,MAAM,EAAE,OAAO,EAAE,aAAa,EAAE,GAAG,mBAAmB,CAAC,YAAY,CAAC,CAAC;IACrE,MAAM,GAAG,GAAG,UAAU,EAAE,CAAC;IACzB,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC;IAClD,MAAM,OAAO,GACX,qBAAqB;QACrB,kGAAkG;QAClG,sDAAsD;QACtD,KAAK;QACL,OAAO;QACP,IAAI;QACJ,oBAAoB;QACpB,oBAAoB,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ;QACpE,yEAAyE;QACzE,KAAK;QACL,kEAAkE;QAClE,uEAAuE,aAAa,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC;IAClH,MAAM,MAAM,GAAG,SAAS,CAAC,aAAa,EAAE,CAAC,YAAY,EAAE,UAAU,EAAE,OAAO,CAAC,EAAE;QAC3E,KAAK,EAAE,MAAM;QACb,OAAO,EAAE,gBAAgB;QACzB,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,GAAG,oBAAoB,EAAE,kBAAkB,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,CAAC,QAAQ,CAAC,EAAE;KACrH,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IAC/C,OAAO;QACL,IAAI,EAAE,MAAM,CAAC,MAAM;QACnB,MAAM;QACN,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE;QACvC,gBAAgB,EAAE,UAAU,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE;QAClF,YAAY,EAAE,gCAAgC,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,SAAS;QAC7E,eAAe,EAAE,+BAA+B,CAAC,IAAI,CAAC,MAAM,CAAC;KAC9D,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,OAAO,CAAC,QAAgB;IACtC,MAAM,EAAE,OAAO,EAAE,aAAa,EAAE,GAAG,mBAAmB,CAAC,OAAO,CAAC,CAAC;IAChE,MAAM,GAAG,GAAG,UAAU,EAAE,CAAC;IACzB,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC;IAClD,MAAM,OAAO,GACX,cAAc;QACd,iEAAiE;QACjE,6BAA6B;QAC7B,KAAK;QACL,OAAO;QACP,IAAI;QACJ,gBAAgB;QAChB,YAAY,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ;QACvC,+CAA+C;QAC/C,wDAAwD;QACxD,QAAQ;QACR,yCAAyC;QACzC,YAAY,aAAa,gGAAgG,CAAC;IAC5H,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE;QAChD,KAAK,EAAE,MAAM;QACb,OAAO,EAAE,gBAAgB;QACzB,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,kBAAkB,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,CAAC,QAAQ,CAAC,EAAE;KAC5F,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IAC/C,OAAO;QACL,IAAI,EAAE,MAAM,CAAC,MAAM;QACnB,MAAM;QACN,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE;QACvC,gBAAgB,EAAE,UAAU,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE;QAClF,YAAY,EAAE,gCAAgC,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,SAAS;QAC7E,eAAe,EAAE,+BAA+B,CAAC,IAAI,CAAC,MAAM,CAAC;KAC9D,CAAC;AACJ,CAAC;AAED;kEACkE;AAClE,MAAM,UAAU,MAAM,CAAC,QAAgB;IACrC,MAAM,EAAE,OAAO,EAAE,aAAa,EAAE,GAAG,mBAAmB,CAAC,KAAK,CAAC,CAAC;IAC9D,MAAM,GAAG,GAAG,UAAU,EAAE,CAAC;IACzB,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IACvC,SAAS,CAAC,OAAO,CAAC,CAAC;IACnB,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC;IAClD,aAAa,CACX,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,YAAY,CAAC,EAChC,eAAe;QACb,yDAAyD;QACzD,+BAA+B,CAClC,CAAC;IACF,qEAAqE;IACrE,qEAAqE;IACrE,wEAAwE;IACxE,2EAA2E;IAC3E,0EAA0E;IAC1E,yEAAyE;IACzE,0EAA0E;IAC1E,qEAAqE;IACrE,qCAAqC;IACrC,EAAE;IACF,iEAAiE;IACjE,oEAAoE;IACpE,2EAA2E;IAC3E,sEAAsE;IACtE,yEAAyE;IACzE,kEAAkE;IAClE,yEAAyE;IACzE,mEAAmE;IACnE,yEAAyE;IACzE,sEAAsE;IACtE,sEAAsE;IACtE,qEAAqE;IACrE,yEAAyE;IACzE,qEAAqE;IACrE,uEAAuE;IACvE,MAAM,OAAO,GACX,aAAa,OAAO,aAAa;QACjC,2BAA2B,WAAW,MAAM;QAC5C,wBAAwB,QAAQ,MAAM;QACtC,OAAO;QACP,iBAAiB,aAAa,kFAAkF,CAAC;IACnH,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC;IAClD,aAAa,CAAC,WAAW,EAAE,gBAAgB,OAAO,MAAM,CAAC,CAAC;IAC1D,MAAM,MAAM,GAAG,SAAS,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,WAAW,CAAC,EAAE;QACnD,KAAK,EAAE,MAAM;QACb,OAAO,EAAE,gBAAgB;QACzB,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE;KACxB,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IAC/C,OAAO;QACL,IAAI,EAAE,MAAM,CAAC,MAAM;QACnB,MAAM;QACN,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE;QACvC,gBAAgB,EAAE,UAAU,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE;QACzF,2EAA2E;QAC3E,oEAAoE;QACpE,YAAY,EAAE,EAAE;QAChB,eAAe,EAAE,+BAA+B,CAAC,IAAI,CAAC,MAAM,CAAC;KAC9D,CAAC;AACJ,CAAC;AACD,oBAAoB"}

package/server/dist/core/launcher-permission-flags.d.ts

@@ -0,0 +1,17 @@
+/** Narrowest slice of `launcher.ts`'s own `Argv` this module needs. */
+export interface PermissionPerimeterArgv {
+    toolsAllowlist: readonly string[];
+    permissionMode?: string;
+}
+/**
+ * Emits `--tools <comma-list>` and `--permission-mode <mode>` when
+ * `toolsAllowlist` is non-empty. Both flags or neither: a `permissionMode`
+ * without a `toolsAllowlist` would leave the process's full default toolset
+ * pre-approved-without-asking, the exact "looks compliant, isn't" shape
+ * this perimeter exists to prevent — so `permissionMode` is only ever
+ * emitted alongside a real allow-list. Emits nothing for an ordinary launch
+ * (`toolsAllowlist` empty/absent), which is why a manual launch's command
+ * string is unchanged byte-for-byte.
+ */
+export declare function appendPermissionPerimeter(a: PermissionPerimeterArgv, parts: string[], q: (v: string) => string): void;
+//# sourceMappingURL=launcher-permission-flags.d.ts.map

package/server/dist/core/launcher-permission-flags.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"launcher-permission-flags.d.ts","sourceRoot":"","sources":["../../src/core/launcher-permission-flags.ts"],"names":[],"mappings":"AAUA,uEAAuE;AACvE,MAAM,WAAW,uBAAuB;IACtC,cAAc,EAAE,SAAS,MAAM,EAAE,CAAC;IAClC,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED;;;;;;;;;GASG;AACH,wBAAgB,yBAAyB,CACvC,CAAC,EAAE,uBAAuB,EAC1B,KAAK,EAAE,MAAM,EAAE,EACf,CAAC,EAAE,CAAC,CAAC,EAAE,MAAM,KAAK,MAAM,GACvB,IAAI,CAIN"}

package/server/dist/core/launcher-permission-flags.js

@@ -0,0 +1,27 @@
+/*
+ * core/launcher-permission-flags.ts — FR-04.22 permission-perimeter argv
+ * rendering, split out of launcher.ts purely to keep that file under the
+ * repo's 300-line guideline (no behavior change from the split itself).
+ *
+ * See `external/launch/claim-executor-permissions.ts` for WHY this exists
+ * and the empirical CLI evidence behind the `--tools` + `--permission-mode`
+ * combination.
+ */
+/**
+ * Emits `--tools <comma-list>` and `--permission-mode <mode>` when
+ * `toolsAllowlist` is non-empty. Both flags or neither: a `permissionMode`
+ * without a `toolsAllowlist` would leave the process's full default toolset
+ * pre-approved-without-asking, the exact "looks compliant, isn't" shape
+ * this perimeter exists to prevent — so `permissionMode` is only ever
+ * emitted alongside a real allow-list. Emits nothing for an ordinary launch
+ * (`toolsAllowlist` empty/absent), which is why a manual launch's command
+ * string is unchanged byte-for-byte.
+ */
+export function appendPermissionPerimeter(a, parts, q) {
+    if (a.toolsAllowlist.length === 0)
+        return;
+    parts.push("--tools", q(a.toolsAllowlist.join(",")));
+    if (a.permissionMode)
+        parts.push("--permission-mode", q(a.permissionMode));
+}
+//# sourceMappingURL=launcher-permission-flags.js.map

package/server/dist/core/launcher-permission-flags.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"launcher-permission-flags.js","sourceRoot":"","sources":["../../src/core/launcher-permission-flags.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAQH;;;;;;;;;GASG;AACH,MAAM,UAAU,yBAAyB,CACvC,CAA0B,EAC1B,KAAe,EACf,CAAwB;IAExB,IAAI,CAAC,CAAC,cAAc,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IAC1C,KAAK,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IACrD,IAAI,CAAC,CAAC,cAAc;QAAE,KAAK,CAAC,IAAI,CAAC,mBAAmB,EAAE,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC;AAC7E,CAAC"}

package/server/dist/core/launcher.d.ts

@@ -32,6 +32,24 @@ export interface LaunchArgs {
      * are rejected here as defense-in-depth.
      */
     slashCommand?: string;
+    /**
+     * FR-04.22 permission perimeter (iterate-2026-09-06-claim-launch-
+     * permission-perimeter) — emitted as `--tools <names>` when non-empty.
+     * ONLY set by a caller that has independently established this launch is
+     * claim-authorized (see `external/launch/claim-executor-permissions.ts`);
+     * a plain human/manual launch never sets this field, so its command
+     * string is byte-identical to before this change. Genuinely restricts
+     * the spawned process's function set (verified live) — NOT the same as
+     * `--allowed-tools`, which only pre-approves combos without removing
+     * anything.
+     */
+    toolsAllowlist?: readonly string[];
+    /**
+     * FR-04.22 permission perimeter — emitted as `--permission-mode <mode>`
+     * alongside `toolsAllowlist`. See `claimExecutorLaunchOverrides()` for
+     * the verified value and why.
+     */
+    permissionMode?: string;
 }
 export interface LaunchResult {
     /** Always populated; the user's fallback. */

package/server/dist/core/launcher.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"launcher.d.ts","sourceRoot":"","sources":["../../src/core/launcher.ts"],"names":[],"mappings":"AAkBA,MAAM,WAAW,gBAAgB;IAC/B,UAAU,EAAE,MAAM,CAAC;IACnB,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,UAAU;IACzB,WAAW,EAAE,MAAM,CAAC;IACpB,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB;;;;;;;;;OASG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;;;;;;;;OASG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,YAAY;IAC3B,6CAA6C;IAC7C,QAAQ,EAAE,gBAAgB,CAAC;IAC3B,6DAA6D;IAC7D,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,MAAM,aAAa,GAAG,CAAC,IAAI,EAAE,UAAU,KAAK,OAAO,CAAC,YAAY,CAAC,GAAG,YAAY,CAAC;AAEvF,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,UAAU,GAAG,gBAAgB,CAOpE;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,wBAAgB,aAAa,CAAC,SAAS,EAAE,YAAY,GAAG,KAAK,GAAG,OAAO,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,CAS5F;AAED,eAAO,MAAM,YAAY,EAAE,aAGzB,CAAC;AAmJH,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC"}
+{"version":3,"file":"launcher.d.ts","sourceRoot":"","sources":["../../src/core/launcher.ts"],"names":[],"mappings":"AAmBA,MAAM,WAAW,gBAAgB;IAC/B,UAAU,EAAE,MAAM,CAAC;IACnB,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,UAAU;IACzB,WAAW,EAAE,MAAM,CAAC;IACpB,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB;;;;;;;;;OASG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;;;;;;;;OASG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB;;;;;;;;;;OAUG;IACH,cAAc,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACnC;;;;OAIG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,YAAY;IAC3B,6CAA6C;IAC7C,QAAQ,EAAE,gBAAgB,CAAC;IAC3B,6DAA6D;IAC7D,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,MAAM,aAAa,GAAG,CAAC,IAAI,EAAE,UAAU,KAAK,OAAO,CAAC,YAAY,CAAC,GAAG,YAAY,CAAC;AAEvF,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,UAAU,GAAG,gBAAgB,CAOpE;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,wBAAgB,aAAa,CAAC,SAAS,EAAE,YAAY,GAAG,KAAK,GAAG,OAAO,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,CAS5F;AAED,eAAO,MAAM,YAAY,EAAE,aAGzB,CAAC;AA0JH,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC"}

package/server/dist/core/launcher.js

@@ -14,6 +14,7 @@
  * 2 can plug implementations in without rewiring callers.
  */
 import { qPs, qCmd, qPosix, toPosixPath } from "./shell-quote.js";
+import { appendPermissionPerimeter } from "./launcher-permission-flags.js";
 export function buildCopyCommands(args) {
     const parts = buildArgv(args);
     return {
@@ -76,6 +77,8 @@ function buildArgv(args) {
         pluginDirs: args.pluginDirs ?? [],
         title,
         slashCommand,
+        toolsAllowlist: [...(args.toolsAllowlist ?? [])],
+        permissionMode: args.permissionMode,
     };
 }
 /**
@@ -112,6 +115,7 @@ function normalizeSlashCommand(raw) {
 function renderPowershell(a) {
     const parts = ["claude"];
     appendSessionFlags(a, parts, qPs);
+    appendPermissionPerimeter(a, parts, qPs);
     parts.push("--add-dir", qPs(a.cwd));
     appendResumeFork(a, parts, qPs);
     appendName(a, parts, qPs);
@@ -124,6 +128,7 @@ function renderPowershell(a) {
 function renderCmd(a) {
     const parts = ["claude"];
     appendSessionFlags(a, parts, qCmd);
+    appendPermissionPerimeter(a, parts, qCmd);
     parts.push("--add-dir", qCmd(a.cwd));
     appendResumeFork(a, parts, qCmd);
     appendName(a, parts, qCmd);
@@ -138,6 +143,7 @@ function renderPosix(a) {
     const plugins = a.pluginDirs.map(toPosixPath);
     const parts = ["claude"];
     appendSessionFlags(a, parts, qPosix);
+    appendPermissionPerimeter(a, parts, qPosix);
     parts.push("--add-dir", qPosix(cwd));
     appendResumeFork(a, parts, qPosix);
     appendName(a, parts, qPosix);

package/server/dist/core/launcher.js.map

@@ -1 +1 @@
-{"version":3,"file":"launcher.js","sourceRoot":"","sources":["../../src/core/launcher.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAgDlE,MAAM,UAAU,iBAAiB,CAAC,IAAgB;IAChD,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAC9B,OAAO;QACL,UAAU,EAAE,gBAAgB,CAAC,KAAK,CAAC;QACnC,GAAG,EAAE,SAAS,CAAC,KAAK,CAAC;QACrB,KAAK,EAAE,WAAW,CAAC,KAAK,CAAC;KAC1B,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,MAAM,UAAU,aAAa,CAAC,SAAyC,EAAE,GAAW;IAClF,IAAI,CAAC,GAAG;QAAE,OAAO,EAAE,CAAC;IACpB,IAAI,SAAS,KAAK,YAAY,EAAE,CAAC;QAC/B,OAAO,gBAAgB,GAAG,CAAC,GAAG,CAAC,sBAAsB,CAAC;IACxD,CAAC;IACD,IAAI,SAAS,KAAK,KAAK,EAAE,CAAC;QACxB,OAAO,SAAS,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC;IAClC,CAAC;IACD,OAAO,MAAM,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC;AAC9C,CAAC;AAED,MAAM,CAAC,MAAM,YAAY,GAAkB,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IACpD,QAAQ,EAAE,iBAAiB,CAAC,IAAI,CAAC;IACjC,YAAY,EAAE,MAAM;CACrB,CAAC,CAAC;AAeH,SAAS,SAAS,CAAC,IAAgB;IACjC,MAAM,KAAK,GAAG,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACzC,MAAM,YAAY,GAAG,qBAAqB,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IAC9D,OAAO;QACL,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,GAAG,EAAE,IAAI,CAAC,GAAG;QACb,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC;QAC5B,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC;QACxB,iBAAiB,EAAE,IAAI,CAAC,iBAAiB;QACzC,UAAU,EAAE,IAAI,CAAC,UAAU,IAAI,EAAE;QACjC,KAAK;QACL,YAAY;KACb,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,SAAS,cAAc,CAAC,GAAuB;IAC7C,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAC9C,IAAI,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,8EAA8E,CAAC,CAAC;IAClG,CAAC;IACD,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IAC3B,OAAO,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC;AAC9C,CAAC;AAED;;;;;GAKG;AACH,SAAS,qBAAqB,CAAC,GAAuB;IACpD,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAC9C,KAAK,MAAM,EAAE,IAAI,GAAG,EAAE,CAAC;QACrB,MAAM,IAAI,GAAG,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QAC9B,IAAI,IAAI,GAAG,IAAI,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YACjC,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;QACrE,CAAC;IACH,CAAC;IACD,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IAC3B,OAAO,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC;AAC9C,CAAC;AAED,SAAS,gBAAgB,CAAC,CAAO;IAC/B,MAAM,KAAK,GAAa,CAAC,QAAQ,CAAC,CAAC;IACnC,kBAAkB,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;IAClC,KAAK,CAAC,IAAI,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACpC,gBAAgB,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;IAChC,UAAU,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;IAC1B,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,CAAC;QAC7B,KAAK,CAAC,IAAI,CAAC,cAAc,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACrC,CAAC;IACD,kBAAkB,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;IAClC,OAAO,aAAa,CAAC,YAAY,EAAE,CAAC,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACrE,CAAC;AAED,SAAS,SAAS,CAAC,CAAO;IACxB,MAAM,KAAK,GAAa,CAAC,QAAQ,CAAC,CAAC;IACnC,kBAAkB,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;IACnC,KAAK,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACrC,gBAAgB,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;IACjC,UAAU,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;IAC3B,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,CAAC;QAC7B,KAAK,CAAC,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IACtC,CAAC;IACD,kBAAkB,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;IACnC,OAAO,aAAa,CAAC,KAAK,EAAE,CAAC,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACvD,CAAC;AAED,SAAS,WAAW,CAAC,CAAO;IAC1B,MAAM,GAAG,GAAG,WAAW,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IAC/B,MAAM,OAAO,GAAG,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IAC9C,MAAM,KAAK,GAAa,CAAC,QAAQ,CAAC,CAAC;IACnC,kBAAkB,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;IACrC,KAAK,CAAC,IAAI,CAAC,WAAW,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;IACrC,gBAAgB,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;IACnC,UAAU,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;IAC7B,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,KAAK,CAAC,IAAI,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;IACxC,CAAC;IACD,kBAAkB,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;IACrC,0EAA0E;IAC1E,OAAO,aAAa,CAAC,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACzD,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,kBAAkB,CAAC,CAAO,EAAE,KAAe,EAAE,CAAwB;IAC5E,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,IAAI;QAAE,OAAO;IAChC,KAAK,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC;AAC/C,CAAC;AAED,SAAS,gBAAgB,CAAC,CAAO,EAAE,KAAe,EAAE,CAAwB;IAC1E,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;QACX,mFAAmF;QACnF,IAAI,CAAC,CAAC,CAAC,iBAAiB,EAAE,CAAC;YACzB,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;QAC1D,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,EAAE,gBAAgB,CAAC,CAAC;IACnE,CAAC;SAAM,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC;QACpB,KAAK,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC;IAC3C,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CAAC,CAAO,EAAE,KAAe,EAAE,CAAwB;IACpE,IAAI,CAAC,CAAC,KAAK;QAAE,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;AAChD,CAAC;AAED,SAAS,kBAAkB,CACzB,CAAO,EACP,KAAe,EACf,CAAwB;IAExB,IAAI,CAAC,CAAC,YAAY;QAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC;AACpD,CAAC;AAED,kCAAkC;AAClC,EAAE;AACF,oEAAoE;AACpE,+EAA+E;AAC/E,+EAA+E;AAC/E,yEAAyE;AACzE,8DAA8D;AAC9D,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC"}
+{"version":3,"file":"launcher.js","sourceRoot":"","sources":["../../src/core/launcher.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAClE,OAAO,EAAE,yBAAyB,EAAE,MAAM,gCAAgC,CAAC;AAkE3E,MAAM,UAAU,iBAAiB,CAAC,IAAgB;IAChD,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAC9B,OAAO;QACL,UAAU,EAAE,gBAAgB,CAAC,KAAK,CAAC;QACnC,GAAG,EAAE,SAAS,CAAC,KAAK,CAAC;QACrB,KAAK,EAAE,WAAW,CAAC,KAAK,CAAC;KAC1B,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,MAAM,UAAU,aAAa,CAAC,SAAyC,EAAE,GAAW;IAClF,IAAI,CAAC,GAAG;QAAE,OAAO,EAAE,CAAC;IACpB,IAAI,SAAS,KAAK,YAAY,EAAE,CAAC;QAC/B,OAAO,gBAAgB,GAAG,CAAC,GAAG,CAAC,sBAAsB,CAAC;IACxD,CAAC;IACD,IAAI,SAAS,KAAK,KAAK,EAAE,CAAC;QACxB,OAAO,SAAS,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC;IAClC,CAAC;IACD,OAAO,MAAM,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC;AAC9C,CAAC;AAED,MAAM,CAAC,MAAM,YAAY,GAAkB,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IACpD,QAAQ,EAAE,iBAAiB,CAAC,IAAI,CAAC;IACjC,YAAY,EAAE,MAAM;CACrB,CAAC,CAAC;AAiBH,SAAS,SAAS,CAAC,IAAgB;IACjC,MAAM,KAAK,GAAG,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACzC,MAAM,YAAY,GAAG,qBAAqB,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IAC9D,OAAO;QACL,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,GAAG,EAAE,IAAI,CAAC,GAAG;QACb,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC;QAC5B,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC;QACxB,iBAAiB,EAAE,IAAI,CAAC,iBAAiB;QACzC,UAAU,EAAE,IAAI,CAAC,UAAU,IAAI,EAAE;QACjC,KAAK;QACL,YAAY;QACZ,cAAc,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,cAAc,IAAI,EAAE,CAAC,CAAC;QAChD,cAAc,EAAE,IAAI,CAAC,cAAc;KACpC,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,SAAS,cAAc,CAAC,GAAuB;IAC7C,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAC9C,IAAI,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,8EAA8E,CAAC,CAAC;IAClG,CAAC;IACD,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IAC3B,OAAO,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC;AAC9C,CAAC;AAED;;;;;GAKG;AACH,SAAS,qBAAqB,CAAC,GAAuB;IACpD,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAC9C,KAAK,MAAM,EAAE,IAAI,GAAG,EAAE,CAAC;QACrB,MAAM,IAAI,GAAG,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QAC9B,IAAI,IAAI,GAAG,IAAI,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YACjC,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;QACrE,CAAC;IACH,CAAC;IACD,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IAC3B,OAAO,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC;AAC9C,CAAC;AAED,SAAS,gBAAgB,CAAC,CAAO;IAC/B,MAAM,KAAK,GAAa,CAAC,QAAQ,CAAC,CAAC;IACnC,kBAAkB,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;IAClC,yBAAyB,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;IACzC,KAAK,CAAC,IAAI,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACpC,gBAAgB,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;IAChC,UAAU,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;IAC1B,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,CAAC;QAC7B,KAAK,CAAC,IAAI,CAAC,cAAc,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACrC,CAAC;IACD,kBAAkB,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;IAClC,OAAO,aAAa,CAAC,YAAY,EAAE,CAAC,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACrE,CAAC;AAED,SAAS,SAAS,CAAC,CAAO;IACxB,MAAM,KAAK,GAAa,CAAC,QAAQ,CAAC,CAAC;IACnC,kBAAkB,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;IACnC,yBAAyB,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;IAC1C,KAAK,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACrC,gBAAgB,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;IACjC,UAAU,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;IAC3B,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,CAAC;QAC7B,KAAK,CAAC,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IACtC,CAAC;IACD,kBAAkB,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;IACnC,OAAO,aAAa,CAAC,KAAK,EAAE,CAAC,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACvD,CAAC;AAED,SAAS,WAAW,CAAC,CAAO;IAC1B,MAAM,GAAG,GAAG,WAAW,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IAC/B,MAAM,OAAO,GAAG,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IAC9C,MAAM,KAAK,GAAa,CAAC,QAAQ,CAAC,CAAC;IACnC,kBAAkB,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;IACrC,yBAAyB,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;IAC5C,KAAK,CAAC,IAAI,CAAC,WAAW,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;IACrC,gBAAgB,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;IACnC,UAAU,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;IAC7B,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,KAAK,CAAC,IAAI,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;IACxC,CAAC;IACD,kBAAkB,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;IACrC,0EAA0E;IAC1E,OAAO,aAAa,CAAC,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACzD,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,kBAAkB,CAAC,CAAO,EAAE,KAAe,EAAE,CAAwB;IAC5E,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,IAAI;QAAE,OAAO;IAChC,KAAK,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC;AAC/C,CAAC;AAED,SAAS,gBAAgB,CAAC,CAAO,EAAE,KAAe,EAAE,CAAwB;IAC1E,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;QACX,mFAAmF;QACnF,IAAI,CAAC,CAAC,CAAC,iBAAiB,EAAE,CAAC;YACzB,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;QAC1D,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,EAAE,gBAAgB,CAAC,CAAC;IACnE,CAAC;SAAM,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC;QACpB,KAAK,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC;IAC3C,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CAAC,CAAO,EAAE,KAAe,EAAE,CAAwB;IACpE,IAAI,CAAC,CAAC,KAAK;QAAE,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;AAChD,CAAC;AAED,SAAS,kBAAkB,CACzB,CAAO,EACP,KAAe,EACf,CAAwB;IAExB,IAAI,CAAC,CAAC,YAAY;QAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC;AACpD,CAAC;AAED,kCAAkC;AAClC,EAAE;AACF,oEAAoE;AACpE,+EAA+E;AAC/E,+EAA+E;AAC/E,yEAAyE;AACzE,8DAA8D;AAC9D,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC"}

package/server/dist/core/leadwright-preflight-transport.d.ts

@@ -0,0 +1,27 @@
+import { spawn as realSpawn } from "node:child_process";
+import { type ResolvedSpawn } from "./win32-spawn.js";
+import type { PreflightResult, PreflightStdinInput } from "../types/leadwright-preflight.js";
+export type LeadwrightTransportResult = {
+    ranOk: true;
+    result: PreflightResult;
+} | {
+    ranOk: false;
+    reason: string;
+};
+export interface RunLeadwrightPreflightOptions {
+    /** Injected for tests. */
+    spawn?: typeof realSpawn;
+    /** Injected for tests. */
+    resolveSpawnFn?: (argv: string[], cwd: string) => ResolvedSpawn | null;
+    /** Wall-clock deadline for the ENTIRE call, independent of the CLI's own
+     *  30s stdin-read timeout — bounds a child that hangs after receiving
+     *  stdin (e.g. stalled on filesystem I/O). Default: 45s. */
+    timeoutMs?: number;
+    /** Caps total collected stdout+stderr bytes; exceeding it kills the
+     *  child rather than parsing a truncated/misleading partial result.
+     *  Default: 10 MiB (generous — a real PreflightResult with dozens of
+     *  findings is a few KB). */
+    maxOutputBytes?: number;
+}
+export declare function runLeadwrightPreflight(checkoutRoot: string, proposal: PreflightStdinInput, options?: RunLeadwrightPreflightOptions): Promise<LeadwrightTransportResult>;
+//# sourceMappingURL=leadwright-preflight-transport.d.ts.map

package/server/dist/core/leadwright-preflight-transport.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"leadwright-preflight-transport.d.ts","sourceRoot":"","sources":["../../src/core/leadwright-preflight-transport.ts"],"names":[],"mappings":"AAmBA,OAAO,EAAE,KAAK,IAAI,SAAS,EAAqB,MAAM,oBAAoB,CAAC;AAG3E,OAAO,EAAoC,KAAK,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACxF,OAAO,KAAK,EAAE,eAAe,EAAE,mBAAmB,EAAE,MAAM,kCAAkC,CAAC;AAE7F,MAAM,MAAM,yBAAyB,GACjC;IAAE,KAAK,EAAE,IAAI,CAAC;IAAC,MAAM,EAAE,eAAe,CAAA;CAAE,GACxC;IAAE,KAAK,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAErC,MAAM,WAAW,6BAA6B;IAC5C,0BAA0B;IAC1B,KAAK,CAAC,EAAE,OAAO,SAAS,CAAC;IACzB,0BAA0B;IAC1B,cAAc,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,GAAG,EAAE,MAAM,KAAK,aAAa,GAAG,IAAI,CAAC;IACvE;;gEAE4D;IAC5D,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;iCAG6B;IAC7B,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAcD,wBAAgB,sBAAsB,CACpC,YAAY,EAAE,MAAM,EACpB,QAAQ,EAAE,mBAAmB,EAC7B,OAAO,GAAE,6BAAkC,GAC1C,OAAO,CAAC,yBAAyB,CAAC,CAqGpC"}

package/server/dist/core/leadwright-preflight-transport.js

@@ -0,0 +1,124 @@
+/*
+ * leadwright-preflight-transport.ts — spawns leadwright's
+ * `scripts/check-setup.ts --stdin --json` and returns its verdict.
+ * (iterate-2026-09-07-leadwright-setup-wizard, W14).
+ *
+ * "The transport is a subprocess, not a re-implementation. Never re-type a
+ * shape, never compute a verdict here." This module does none of leadwright's
+ * validation — it only gets a proposal there and a result back, faithfully.
+ *
+ * Fail-closed signal (correction 4, verified against leadwright origin/main
+ * @ 43fcd492's scripts/check-setup.ts): stdout parses as {ok, findings} ⇒
+ * ranOk:true, REGARDLESS of exit code (exit 1 with a parseable result is a
+ * legitimate red verdict). stdout empty/unparsable ⇒ ranOk:false — this,
+ * not the exit code, is "leadwright not reachable".
+ *
+ * Reuses the existing Windows-safe spawn resolver (core/win32-spawn.ts) —
+ * the same one preview-session-manager.ts already uses — rather than a
+ * second spawn primitive.
+ */
+import { spawn as realSpawn } from "node:child_process";
+import path from "node:path";
+import { resolveSpawn as realResolveSpawn } from "./win32-spawn.js";
+const DEFAULT_TIMEOUT_MS = 45_000;
+const DEFAULT_MAX_OUTPUT_BYTES = 10 * 1024 * 1024;
+function looksLikePreflightResult(value) {
+    return (typeof value === "object" &&
+        value !== null &&
+        typeof value.ok === "boolean" &&
+        Array.isArray(value.findings));
+}
+export function runLeadwrightPreflight(checkoutRoot, proposal, options = {}) {
+    const spawnFn = options.spawn ?? realSpawn;
+    const resolveSpawnFn = options.resolveSpawnFn ?? realResolveSpawn;
+    const timeoutMs = options.timeoutMs ?? DEFAULT_TIMEOUT_MS;
+    const maxOutputBytes = options.maxOutputBytes ?? DEFAULT_MAX_OUTPUT_BYTES;
+    const argv = [
+        path.join(checkoutRoot, "node_modules", ".bin", "tsx"),
+        path.join(checkoutRoot, "scripts", "check-setup.ts"),
+        "--stdin",
+        "--json",
+    ];
+    const resolved = resolveSpawnFn(argv, checkoutRoot);
+    if (resolved === null) {
+        return Promise.resolve({
+            ranOk: false,
+            reason: `tsx not found under the configured leadwright checkout (${checkoutRoot}) — check SHIPWRIGHT_LEADWRIGHT_CHECKOUT and that dependencies are installed there`,
+        });
+    }
+    return new Promise((resolvePromise) => {
+        let settled = false;
+        let stdoutBytes = 0;
+        let stderrBytes = 0;
+        let stdoutText = "";
+        let stderrText = "";
+        let outputCapExceeded = false;
+        const child = spawnFn(resolved.command, resolved.args, {
+            cwd: checkoutRoot,
+            stdio: "pipe",
+            windowsVerbatimArguments: resolved.windowsVerbatimArguments,
+        });
+        const timer = setTimeout(() => {
+            finish({ ranOk: false, reason: `leadwright check-setup timed out after ${timeoutMs}ms` });
+            child.kill();
+        }, timeoutMs);
+        function finish(result) {
+            if (settled)
+                return;
+            settled = true;
+            clearTimeout(timer);
+            resolvePromise(result);
+        }
+        child.on("error", (err) => {
+            finish({ ranOk: false, reason: `could not spawn leadwright check-setup: ${err.message}` });
+        });
+        child.stdin?.on("error", () => {
+            // EPIPE etc. — the eventual 'close' (or the timeout) is the source of
+            // truth for the final result; a stdin write failure alone must not
+            // resolve early with a misleading partial state.
+        });
+        child.stdout?.on("data", (chunk) => {
+            stdoutBytes += chunk.length;
+            stdoutText += chunk.toString("utf-8");
+            if (stdoutBytes + stderrBytes > maxOutputBytes && !outputCapExceeded) {
+                outputCapExceeded = true;
+                finish({ ranOk: false, reason: "leadwright check-setup produced more output than the configured cap — treated as a runaway process" });
+                child.kill();
+            }
+        });
+        child.stderr?.on("data", (chunk) => {
+            stderrBytes += chunk.length;
+            stderrText += chunk.toString("utf-8");
+            if (stdoutBytes + stderrBytes > maxOutputBytes && !outputCapExceeded) {
+                outputCapExceeded = true;
+                finish({ ranOk: false, reason: "leadwright check-setup produced more output than the configured cap — treated as a runaway process" });
+                child.kill();
+            }
+        });
+        child.on("close", () => {
+            if (outputCapExceeded)
+                return; // already finished
+            const trimmed = stdoutText.trim();
+            if (trimmed === "") {
+                finish({ ranOk: false, reason: stderrText.trim() || "leadwright check-setup produced no output" });
+                return;
+            }
+            let parsed;
+            try {
+                parsed = JSON.parse(trimmed);
+            }
+            catch {
+                finish({ ranOk: false, reason: stderrText.trim() || `leadwright check-setup produced unparsable output: ${trimmed.slice(0, 500)}` });
+                return;
+            }
+            if (!looksLikePreflightResult(parsed)) {
+                finish({ ranOk: false, reason: "leadwright check-setup produced output that does not match the published PreflightResult shape" });
+                return;
+            }
+            finish({ ranOk: true, result: parsed });
+        });
+        child.stdin?.write(JSON.stringify(proposal));
+        child.stdin?.end();
+    });
+}
+//# sourceMappingURL=leadwright-preflight-transport.js.map

package/server/dist/core/leadwright-preflight-transport.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"leadwright-preflight-transport.js","sourceRoot":"","sources":["../../src/core/leadwright-preflight-transport.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AACH,OAAO,EAAE,KAAK,IAAI,SAAS,EAAqB,MAAM,oBAAoB,CAAC;AAC3E,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,YAAY,IAAI,gBAAgB,EAAsB,MAAM,kBAAkB,CAAC;AAuBxF,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAClC,MAAM,wBAAwB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAElD,SAAS,wBAAwB,CAAC,KAAc;IAC9C,OAAO,CACL,OAAO,KAAK,KAAK,QAAQ;QACzB,KAAK,KAAK,IAAI;QACd,OAAQ,KAA0B,CAAC,EAAE,KAAK,SAAS;QACnD,KAAK,CAAC,OAAO,CAAE,KAAgC,CAAC,QAAQ,CAAC,CAC1D,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,sBAAsB,CACpC,YAAoB,EACpB,QAA6B,EAC7B,UAAyC,EAAE;IAE3C,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,IAAI,SAAS,CAAC;IAC3C,MAAM,cAAc,GAAG,OAAO,CAAC,cAAc,IAAI,gBAAgB,CAAC;IAClE,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,kBAAkB,CAAC;IAC1D,MAAM,cAAc,GAAG,OAAO,CAAC,cAAc,IAAI,wBAAwB,CAAC;IAE1E,MAAM,IAAI,GAAG;QACX,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,cAAc,EAAE,MAAM,EAAE,KAAK,CAAC;QACtD,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,SAAS,EAAE,gBAAgB,CAAC;QACpD,SAAS;QACT,QAAQ;KACT,CAAC;IAEF,MAAM,QAAQ,GAAG,cAAc,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;IACpD,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;QACtB,OAAO,OAAO,CAAC,OAAO,CAAC;YACrB,KAAK,EAAE,KAAK;YACZ,MAAM,EAAE,2DAA2D,YAAY,oFAAoF;SACpK,CAAC,CAAC;IACL,CAAC;IAED,OAAO,IAAI,OAAO,CAAC,CAAC,cAAc,EAAE,EAAE;QACpC,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,IAAI,WAAW,GAAG,CAAC,CAAC;QACpB,IAAI,WAAW,GAAG,CAAC,CAAC;QACpB,IAAI,UAAU,GAAG,EAAE,CAAC;QACpB,IAAI,UAAU,GAAG,EAAE,CAAC;QACpB,IAAI,iBAAiB,GAAG,KAAK,CAAC;QAE9B,MAAM,KAAK,GAAiB,OAAO,CAAC,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,IAAI,EAAE;YACnE,GAAG,EAAE,YAAY;YACjB,KAAK,EAAE,MAAM;YACb,wBAAwB,EAAE,QAAQ,CAAC,wBAAwB;SAC5D,CAAC,CAAC;QAEH,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC5B,MAAM,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,0CAA0C,SAAS,IAAI,EAAE,CAAC,CAAC;YAC1F,KAAK,CAAC,IAAI,EAAE,CAAC;QACf,CAAC,EAAE,SAAS,CAAC,CAAC;QAEd,SAAS,MAAM,CAAC,MAAiC;YAC/C,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,cAAc,CAAC,MAAM,CAAC,CAAC;QACzB,CAAC;QAED,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,EAAE,EAAE;YACxB,MAAM,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,2CAA2C,GAAG,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QAC7F,CAAC,CAAC,CAAC;QAEH,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;YAC5B,sEAAsE;YACtE,mEAAmE;YACnE,iDAAiD;QACnD,CAAC,CAAC,CAAC;QAEH,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YACzC,WAAW,IAAI,KAAK,CAAC,MAAM,CAAC;YAC5B,UAAU,IAAI,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YACtC,IAAI,WAAW,GAAG,WAAW,GAAG,cAAc,IAAI,CAAC,iBAAiB,EAAE,CAAC;gBACrE,iBAAiB,GAAG,IAAI,CAAC;gBACzB,MAAM,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,oGAAoG,EAAE,CAAC,CAAC;gBACvI,KAAK,CAAC,IAAI,EAAE,CAAC;YACf,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YACzC,WAAW,IAAI,KAAK,CAAC,MAAM,CAAC;YAC5B,UAAU,IAAI,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;YACtC,IAAI,WAAW,GAAG,WAAW,GAAG,cAAc,IAAI,CAAC,iBAAiB,EAAE,CAAC;gBACrE,iBAAiB,GAAG,IAAI,CAAC;gBACzB,MAAM,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,oGAAoG,EAAE,CAAC,CAAC;gBACvI,KAAK,CAAC,IAAI,EAAE,CAAC;YACf,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;YACrB,IAAI,iBAAiB;gBAAE,OAAO,CAAC,mBAAmB;YAClD,MAAM,OAAO,GAAG,UAAU,CAAC,IAAI,EAAE,CAAC;YAClC,IAAI,OAAO,KAAK,EAAE,EAAE,CAAC;gBACnB,MAAM,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,CAAC,IAAI,EAAE,IAAI,2CAA2C,EAAE,CAAC,CAAC;gBACnG,OAAO;YACT,CAAC;YACD,IAAI,MAAe,CAAC;YACpB,IAAI,CAAC;gBACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAC/B,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,CAAC,IAAI,EAAE,IAAI,sDAAsD,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC;gBACrI,OAAO;YACT,CAAC;YACD,IAAI,CAAC,wBAAwB,CAAC,MAAM,CAAC,EAAE,CAAC;gBACtC,MAAM,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,gGAAgG,EAAE,CAAC,CAAC;gBACnI,OAAO;YACT,CAAC;YACD,MAAM,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;QAC1C,CAAC,CAAC,CAAC;QAEH,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC7C,KAAK,CAAC,KAAK,EAAE,GAAG,EAAE,CAAC;IACrB,CAAC,CAAC,CAAC;AACL,CAAC"}

package/server/dist/core/mission-context/artifacts-tests-ac.d.ts

@@ -0,0 +1,6 @@
+import type { AcTestGroup, TestRow } from "./types-slice2.js";
+export declare function groupByAc(rows: TestRow[]): {
+    tagged: boolean;
+    groups: AcTestGroup[];
+};
+//# sourceMappingURL=artifacts-tests-ac.d.ts.map

package/server/dist/core/mission-context/artifacts-tests-ac.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"artifacts-tests-ac.d.ts","sourceRoot":"","sources":["../../../src/core/mission-context/artifacts-tests-ac.ts"],"names":[],"mappings":"AAaA,OAAO,KAAK,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AAE9D,wBAAgB,SAAS,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG;IAAE,MAAM,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,WAAW,EAAE,CAAA;CAAE,CAmBrF"}

package/server/dist/core/mission-context/artifacts-tests-ac.js

@@ -0,0 +1,31 @@
+/*
+ * core/mission-context/artifacts-tests-ac.ts — the per-AC regrouping of the
+ * Tests artifact's file rows (split from artifacts-tests.ts at the 300-LOC
+ * rule).
+ *
+ * A VIEW over `TestRow[].frs[].acIds`, which `traceability.ts` already
+ * populates as a pure relay of the v4 manifest's `ac_id`. This module
+ * computes NO binding of its own — it only regroups rows that already exist
+ * by `(frId, acId)` instead of by file. `tagged: false` (the common case
+ * today — 0/33 requirements in this repo's manifest carry `ac_id`) must
+ * render as "not yet tagged", never as an empty coverage table.
+ */
+export function groupByAc(rows) {
+    const byKey = new Map();
+    for (const row of rows) {
+        for (const fr of row.frs) {
+            for (const acId of fr.acIds) {
+                const key = `${fr.frId}::${acId}`;
+                let group = byKey.get(key);
+                if (!group) {
+                    group = { frId: fr.frId, acId, files: [] };
+                    byKey.set(key, group);
+                }
+                group.files.push({ path: row.path, kind: row.kind });
+            }
+        }
+    }
+    const groups = [...byKey.values()].sort((a, b) => a.frId.localeCompare(b.frId) || a.acId.localeCompare(b.acId));
+    return { tagged: groups.length > 0, groups };
+}
+//# sourceMappingURL=artifacts-tests-ac.js.map

package/server/dist/core/mission-context/artifacts-tests-ac.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"artifacts-tests-ac.js","sourceRoot":"","sources":["../../../src/core/mission-context/artifacts-tests-ac.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAIH,MAAM,UAAU,SAAS,CAAC,IAAe;IACvC,MAAM,KAAK,GAAG,IAAI,GAAG,EAAuB,CAAC;IAC7C,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,KAAK,MAAM,EAAE,IAAI,GAAG,CAAC,GAAG,EAAE,CAAC;YACzB,KAAK,MAAM,IAAI,IAAI,EAAE,CAAC,KAAK,EAAE,CAAC;gBAC5B,MAAM,GAAG,GAAG,GAAG,EAAE,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;gBAClC,IAAI,KAAK,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;gBAC3B,IAAI,CAAC,KAAK,EAAE,CAAC;oBACX,KAAK,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC;oBAC3C,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;gBACxB,CAAC;gBACD,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;YACvD,CAAC;QACH,CAAC;IACH,CAAC;IACD,MAAM,MAAM,GAAG,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CACrC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CACvE,CAAC;IACF,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,MAAM,EAAE,CAAC;AAC/C,CAAC"}