@svenroth-ai/shipwright 0.27.0 → 0.28.0

package/server/dist/core/launcher-codextender.d.ts

@@ -0,0 +1,72 @@
+import { type CopyCommandForms } from "./launcher.js";
+/**
+ * Resolves the bearer token sent to the local Codextender proxy from
+ * `process.env.CODEXTENDER_AUTH_TOKEN` — a validated configuration/
+ * environment value, never a value baked into this source (PR-review
+ * BLOCK, iterate-2026-09-23, second round: a hardcoded fallback here read
+ * as an unconditional credential regardless of its actual local-only,
+ * non-secret nature). Returns `undefined` when unset or blank; every
+ * caller must treat that as "Codextender isn't configured on this machine"
+ * and fail closed (`codextenderAuthTokenMissingError`) rather than send an
+ * empty/placeholder token.
+ */
+export declare function resolveCodextenderAuthToken(): string | undefined;
+/** Matches `codextender`'s own CLI default (`codextender --port 4000`
+ *  exposes `gpt-6-sol` as alias `sol` unless told otherwise). */
+export declare const DEFAULT_CODEXTENDER_MODEL_ALIAS = "sol";
+export interface CodextenderLaunchArgs {
+    cwd: string;
+    /** `http://127.0.0.1:<codextenderPort>` — built by the caller from the
+     *  `codextenderPort` global setting. */
+    baseUrl: string;
+    /** The Codextender model alias (Part A — "no closed enum", free text,
+     *  reuses the existing `codexImplementationModel` launch-body field).
+     *  Defaults to `DEFAULT_CODEXTENDER_MODEL_ALIAS` when omitted. */
+    model?: string;
+    /**
+     * Resolved via `resolveCodextenderAuthToken()` by the caller — this
+     * function has no built-in default and never resolves it itself, so a
+     * caller that skips the "is Codextender configured?" preflight gets a
+     * TypeScript error here, not a silently-sent empty/placeholder token.
+     */
+    authToken: string;
+    /**
+     * The Codextender model's real context window in tokens, resolved by the
+     * caller from the proxy's own `/v1/models` `max_input_tokens` field
+     * (`resolveCodextenderMaxContextTokens` in `codextender-proxy-probe.ts`) —
+     * operator finding, 2026-09-26: Claude Code assumes a 200K window for any
+     * model id it doesn't recognize and over-compacts against that wrong
+     * ceiling long before the real ~1.05M-token Codex window is anywhere near
+     * full. `undefined` (probe failed, alias unknown, or field absent) leaves
+     * `CLAUDE_CODE_MAX_CONTEXT_TOKENS` unset — the safe fallback is Claude
+     * Code's own 200K default, never a number guessed here.
+     */
+    maxContextTokens?: number;
+    /**
+     * The already-built plain-Claude commands for THIS task (same
+     * session-id/resume/name/plugin-dir/slash-command shape an ordinary
+     * Claude-runtime launch of this task would produce) — the chokepoint's
+     * own Claude-fallback `commands`, computed before it decides to override
+     * for a Codex-runtime task.
+     */
+    claudeCommands: CopyCommandForms;
+}
+/**
+ * Doubt-review HIGH — `args.cwd` is caller-supplied (`task.cwd` at the
+ * launch chokepoint and the fork route; `applyActionSubstitutionBranch`'s
+ * custom-action commands are built from `project.path` instead, which can
+ * legitimately diverge from `task.cwd`, e.g. a worktree-based task). When
+ * `args.claudeCommands` was built from a DIFFERENT cwd than `args.cwd`,
+ * the exact-string cd-prefix match below fails, and silently falling
+ * through to prepend a second, possibly-wrong `cd`/`Set-Location` ahead of
+ * the original produced a command that could abort outright (PowerShell's
+ * `-ErrorAction Stop` on a nonexistent `args.cwd`) or silently launch in
+ * the wrong directory. Thrown instead, so a caller surfaces this as an
+ * actionable error rather than an auto-executed command that mysteriously
+ * fails or does the wrong thing.
+ */
+export declare class CodextenderCwdMismatchError extends Error {
+    constructor(cwd: string);
+}
+export declare function buildCodextenderCommands(args: CodextenderLaunchArgs): CopyCommandForms;
+//# sourceMappingURL=launcher-codextender.d.ts.map

package/server/dist/core/launcher-codextender.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"launcher-codextender.d.ts","sourceRoot":"","sources":["../../src/core/launcher-codextender.ts"],"names":[],"mappings":"AA2BA,OAAO,EAAiB,KAAK,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAGrE;;;;;;;;;;GAUG;AACH,wBAAgB,2BAA2B,IAAI,MAAM,GAAG,SAAS,CAGhE;AAED;iEACiE;AACjE,eAAO,MAAM,+BAA+B,QAAQ,CAAC;AAErD,MAAM,WAAW,qBAAqB;IACpC,GAAG,EAAE,MAAM,CAAC;IACZ;4CACwC;IACxC,OAAO,EAAE,MAAM,CAAC;IAChB;;sEAEkE;IAClE,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;;;;OAKG;IACH,SAAS,EAAE,MAAM,CAAC;IAClB;;;;;;;;;;OAUG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B;;;;;;OAMG;IACH,cAAc,EAAE,gBAAgB,CAAC;CAClC;AAED;;;;;;;;;;;;;GAaG;AACH,qBAAa,2BAA4B,SAAQ,KAAK;gBACxC,GAAG,EAAE,MAAM;CAQxB;AAED,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,qBAAqB,GAAG,gBAAgB,CAoBtF"}

package/server/dist/core/launcher-codextender.js

@@ -0,0 +1,98 @@
+/*
+ * Codextender launch-command builder (Codextender integration spec Part B.2,
+ * `C:\01_Development\shipwright\Spec\codextender-integration.md`).
+ *
+ * Sibling of `launcher-codex.ts`, but structurally different from it:
+ * Codextender never changes the DRIVING BINARY (`claude` stays `claude` —
+ * only `ANTHROPIC_BASE_URL`/`ANTHROPIC_MODEL` re-point it at a local
+ * LiteLLM proxy that talks to a Codex-plan subscription). So instead of
+ * re-implementing session/resume/name/plugin-dir argv logic the way
+ * `launcher-codex.ts` does for the genuinely different `codex` CLI, this
+ * module REUSES the already-built plain-Claude `CopyCommandForms` for this
+ * task (identical to what an ordinary Claude-runtime launch would produce)
+ * and prepends a per-shell env-var prefix ahead of the `claude` invocation
+ * itself — the exact insertion point `buildCdPrefix` (pure, exported from
+ * `launcher.ts`) lets us locate by exact string match, no regex guessing.
+ *
+ * "webui never spawns a process, only builds a string" (CLAUDE.md rule 1)
+ * holds identically to every other launcher in this directory.
+ */
+import { unlinkSync } from "node:fs";
+import { buildCodextenderEnvCleanupSuffix, buildCodextenderEnvPrefix, writeCodextenderAuthTokenFile, } from "./launcher-codextender-env.js";
+import { buildCdPrefix } from "./launcher.js";
+import { qPs, qCmd, qPosix } from "./shell-quote.js";
+/**
+ * Resolves the bearer token sent to the local Codextender proxy from
+ * `process.env.CODEXTENDER_AUTH_TOKEN` — a validated configuration/
+ * environment value, never a value baked into this source (PR-review
+ * BLOCK, iterate-2026-09-23, second round: a hardcoded fallback here read
+ * as an unconditional credential regardless of its actual local-only,
+ * non-secret nature). Returns `undefined` when unset or blank; every
+ * caller must treat that as "Codextender isn't configured on this machine"
+ * and fail closed (`codextenderAuthTokenMissingError`) rather than send an
+ * empty/placeholder token.
+ */
+export function resolveCodextenderAuthToken() {
+    const fromEnv = process.env.CODEXTENDER_AUTH_TOKEN?.trim();
+    return fromEnv && fromEnv.length > 0 ? fromEnv : undefined;
+}
+/** Matches `codextender`'s own CLI default (`codextender --port 4000`
+ *  exposes `gpt-6-sol` as alias `sol` unless told otherwise). */
+export const DEFAULT_CODEXTENDER_MODEL_ALIAS = "sol";
+/**
+ * Doubt-review HIGH — `args.cwd` is caller-supplied (`task.cwd` at the
+ * launch chokepoint and the fork route; `applyActionSubstitutionBranch`'s
+ * custom-action commands are built from `project.path` instead, which can
+ * legitimately diverge from `task.cwd`, e.g. a worktree-based task). When
+ * `args.claudeCommands` was built from a DIFFERENT cwd than `args.cwd`,
+ * the exact-string cd-prefix match below fails, and silently falling
+ * through to prepend a second, possibly-wrong `cd`/`Set-Location` ahead of
+ * the original produced a command that could abort outright (PowerShell's
+ * `-ErrorAction Stop` on a nonexistent `args.cwd`) or silently launch in
+ * the wrong directory. Thrown instead, so a caller surfaces this as an
+ * actionable error rather than an auto-executed command that mysteriously
+ * fails or does the wrong thing.
+ */
+export class CodextenderCwdMismatchError extends Error {
+    constructor(cwd) {
+        super(`buildCodextenderCommands: claudeCommands' embedded cd-prefix does not ` +
+            `match args.cwd (${cwd}) — this task's plain-Claude commands appear ` +
+            "to have been built from a different working directory.");
+        this.name = "CodextenderCwdMismatchError";
+    }
+}
+export function buildCodextenderCommands(args) {
+    // PR-review preflight fix (round 8, iterate-2026-09-23) — the bearer token
+    // itself never appears in any of the three command strings below; only
+    // this file's PATH does. See `writeCodextenderAuthTokenFile`'s doc comment
+    // for why a temp file replaces the literal-value approach round 7's
+    // env-cleanup fix alone didn't fully address.
+    const tokenFilePath = writeCodextenderAuthTokenFile(args.authToken);
+    try {
+        return {
+            powershell: injectEnvPrefix(args, "powershell", qPs, tokenFilePath),
+            cmd: injectEnvPrefix(args, "cmd", qCmd, tokenFilePath),
+            posix: injectEnvPrefix(args, "posix", qPosix, tokenFilePath),
+        };
+    }
+    catch (err) {
+        // A cwd mismatch (below) throws before any command is returned for the
+        // caller to run/clean up itself — without this, the token file written
+        // above would be orphaned on every mismatch, not just a killed pty.
+        unlinkSync(tokenFilePath);
+        throw err;
+    }
+}
+function injectEnvPrefix(args, shellForm, q, tokenFilePath) {
+    const cdPrefix = buildCdPrefix(shellForm, args.cwd);
+    const full = args.claudeCommands[shellForm];
+    if (!full.startsWith(cdPrefix)) {
+        throw new CodextenderCwdMismatchError(args.cwd);
+    }
+    const rest = full.slice(cdPrefix.length);
+    return (cdPrefix +
+        buildCodextenderEnvPrefix(args, q, shellForm, tokenFilePath) +
+        rest +
+        buildCodextenderEnvCleanupSuffix(shellForm, q, tokenFilePath));
+}
+//# sourceMappingURL=launcher-codextender.js.map

package/server/dist/core/launcher-codextender.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"launcher-codextender.js","sourceRoot":"","sources":["../../src/core/launcher-codextender.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AAErC,OAAO,EACL,gCAAgC,EAChC,yBAAyB,EACzB,6BAA6B,GAC9B,MAAM,+BAA+B,CAAC;AACvC,OAAO,EAAE,aAAa,EAAyB,MAAM,eAAe,CAAC;AACrE,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAC;AAErD;;;;;;;;;;GAUG;AACH,MAAM,UAAU,2BAA2B;IACzC,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,sBAAsB,EAAE,IAAI,EAAE,CAAC;IAC3D,OAAO,OAAO,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;AAC7D,CAAC;AAED;iEACiE;AACjE,MAAM,CAAC,MAAM,+BAA+B,GAAG,KAAK,CAAC;AAwCrD;;;;;;;;;;;;;GAaG;AACH,MAAM,OAAO,2BAA4B,SAAQ,KAAK;IACpD,YAAY,GAAW;QACrB,KAAK,CACH,wEAAwE;YACtE,mBAAmB,GAAG,+CAA+C;YACrE,wDAAwD,CAC3D,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,6BAA6B,CAAC;IAC5C,CAAC;CACF;AAED,MAAM,UAAU,wBAAwB,CAAC,IAA2B;IAClE,2EAA2E;IAC3E,uEAAuE;IACvE,2EAA2E;IAC3E,oEAAoE;IACpE,8CAA8C;IAC9C,MAAM,aAAa,GAAG,6BAA6B,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACpE,IAAI,CAAC;QACH,OAAO;YACL,UAAU,EAAE,eAAe,CAAC,IAAI,EAAE,YAAY,EAAE,GAAG,EAAE,aAAa,CAAC;YACnE,GAAG,EAAE,eAAe,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,aAAa,CAAC;YACtD,KAAK,EAAE,eAAe,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,aAAa,CAAC;SAC7D,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,uEAAuE;QACvE,uEAAuE;QACvE,oEAAoE;QACpE,UAAU,CAAC,aAAa,CAAC,CAAC;QAC1B,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CACtB,IAA2B,EAC3B,SAAyC,EACzC,CAAwB,EACxB,aAAqB;IAErB,MAAM,QAAQ,GAAG,aAAa,CAAC,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;IACpD,MAAM,IAAI,GAAG,IAAI,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC;IAC5C,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,2BAA2B,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAClD,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACzC,OAAO,CACL,QAAQ;QACR,yBAAyB,CAAC,IAAI,EAAE,CAAC,EAAE,SAAS,EAAE,aAAa,CAAC;QAC5D,IAAI;QACJ,gCAAgC,CAAC,SAAS,EAAE,CAAC,EAAE,aAAa,CAAC,CAC9D,CAAC;AACJ,CAAC"}

package/server/dist/core/launcher-codextender.smoke-helpers.d.ts

@@ -0,0 +1,25 @@
+export declare const SAMPLE_UUID = "00000000-1111-2222-3333-444444444444";
+export declare const MARKER_VALUE = "smoke-test-secret-9f3a2b7c-do-not-leak";
+export declare const ENV_NAMES: string[];
+export declare const SPAWN_TIMEOUT_MS = 15000;
+export declare function extractTokenFilePath(command: string, shellForm: "powershell" | "cmd" | "posix"): string;
+export declare function findBash(): string | null;
+export declare function findCmd(): string | null;
+export declare function scratchDir(): string;
+export declare function cleanupScratchDirs(): void;
+export interface SmokeResult {
+    exit: number | null;
+    stdout: string;
+    stderr: string;
+    tokenSeenByChild: string;
+    remainingEnv: string;
+    tokenFileExists: boolean;
+}
+export declare function generatedCommandFor(shellForm: "powershell" | "cmd" | "posix"): {
+    command: string;
+    tokenFilePath: string;
+};
+export declare function runPowershell(exitCode: number, powershellBin: string): SmokeResult;
+export declare function runBash(exitCode: number): SmokeResult;
+export declare function runCmd(exitCode: number): SmokeResult;
+//# sourceMappingURL=launcher-codextender.smoke-helpers.d.ts.map

package/server/dist/core/launcher-codextender.smoke-helpers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"launcher-codextender.smoke-helpers.d.ts","sourceRoot":"","sources":["../../src/core/launcher-codextender.smoke-helpers.ts"],"names":[],"mappings":"AAmBA,eAAO,MAAM,WAAW,yCAAyC,CAAC;AAClE,eAAO,MAAM,YAAY,2CAA2C,CAAC;AACrE,eAAO,MAAM,SAAS,UAUrB,CAAC;AACF,eAAO,MAAM,gBAAgB,QAAS,CAAC;AAEvC,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,YAAY,GAAG,KAAK,GAAG,OAAO,GAAG,MAAM,CAiBvG;AAED,wBAAgB,QAAQ,IAAI,MAAM,GAAG,IAAI,CAGxC;AAED,wBAAgB,OAAO,IAAI,MAAM,GAAG,IAAI,CAMvC;AAGD,wBAAgB,UAAU,IAAI,MAAM,CAInC;AACD,wBAAgB,kBAAkB,IAAI,IAAI,CAKzC;AAED,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,gBAAgB,EAAE,MAAM,CAAC;IACzB,YAAY,EAAE,MAAM,CAAC;IACrB,eAAe,EAAE,OAAO,CAAC;CAC1B;AAED,wBAAgB,mBAAmB,CAAC,SAAS,EAAE,YAAY,GAAG,KAAK,GAAG,OAAO;;;EAS5E;AAED,wBAAgB,aAAa,CAAC,QAAQ,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,GAAG,WAAW,CA+BlF;AAED,wBAAgB,OAAO,CAAC,QAAQ,EAAE,MAAM,GAAG,WAAW,CAgCrD;AAID,wBAAgB,MAAM,CAAC,QAAQ,EAAE,MAAM,GAAG,WAAW,CA6DpD"}

package/server/dist/core/launcher-codextender.smoke-helpers.js

@@ -0,0 +1,211 @@
+/*
+ * launcher-codextender.smoke-helpers.ts — real-shell execution plumbing for
+ * launcher-codextender.smoke.test.ts, split out (bloat anti-ratchet,
+ * 2026-09-28) once the test file crossed the 300-line source/test limit
+ * after adding CLAUDE_CODE_AUTO_MODE_SERVER coverage. Pure helpers + shell
+ * spawning only — no `describe`/`it` here, so this file is not itself a
+ * test suite (vitest only collects files it's told to run tests from; a
+ * plain .ts helper imported by a .test.ts file is not treated as one).
+ */
+import { spawnSync } from "node:child_process";
+import { mkdtempSync, rmSync, writeFileSync, existsSync, readFileSync, mkdirSync } from "node:fs";
+import { tmpdir } from "node:os";
+import path from "node:path";
+import { buildCopyCommands } from "./launcher.js";
+import { buildCodextenderCommands } from "./launcher-codextender.js";
+import { POWERSHELL_QUIET_ENV } from "./powershell-probe.smoke-helpers.js";
+export const SAMPLE_UUID = "00000000-1111-2222-3333-444444444444";
+export const MARKER_VALUE = "smoke-test-secret-9f3a2b7c-do-not-leak";
+export const ENV_NAMES = [
+    "ANTHROPIC_BASE_URL",
+    "ANTHROPIC_AUTH_TOKEN",
+    "ANTHROPIC_MODEL",
+    "CODEXTENDER_ACTIVE",
+    "CODEXTENDER_MODEL",
+    "CLAUDE_CODE_AUTO_MODE_SERVER",
+    "ANTHROPIC_DEFAULT_OPUS_MODEL",
+    "ANTHROPIC_DEFAULT_SONNET_MODEL",
+    "ANTHROPIC_DEFAULT_HAIKU_MODEL",
+];
+export const SPAWN_TIMEOUT_MS = 15_000;
+export function extractTokenFilePath(command, shellForm) {
+    if (shellForm === "powershell") {
+        const m = command.match(/Get-Content -LiteralPath '([^']+)'/);
+        if (!m)
+            throw new Error("token file path not found in powershell command");
+        return m[1];
+    }
+    /* v8 ignore start -- cmd.exe branch only reached via runCmd(), which
+     * findCmd()'s win32 guard skips entirely on the Linux CI runner. */
+    if (shellForm === "cmd") {
+        const m = command.match(/set \/p ANTHROPIC_AUTH_TOKEN=<"([^"]+)"/);
+        if (!m)
+            throw new Error("token file path not found in cmd command");
+        return m[1];
+    }
+    /* v8 ignore stop */
+    const m = command.match(/\$\(cat '([^']+)'\)/);
+    if (!m)
+        throw new Error("token file path not found in posix command");
+    return m[1];
+}
+export function findBash() {
+    const result = spawnSync("bash", ["-c", "true"], { stdio: "pipe", timeout: SPAWN_TIMEOUT_MS });
+    return result.status === 0 ? "bash" : null;
+}
+export function findCmd() {
+    if (process.platform !== "win32")
+        return null; // cmd.exe is Windows-only.
+    /* v8 ignore start -- unreachable on the Linux CI runner (platform check above). */
+    const result = spawnSync("cmd", ["/c", "exit", "0"], { stdio: "pipe", timeout: SPAWN_TIMEOUT_MS });
+    return result.status === 0 ? "cmd" : null;
+    /* v8 ignore stop */
+}
+const scratchDirs = [];
+export function scratchDir() {
+    const dir = mkdtempSync(path.join(tmpdir(), "codextender-smoke-"));
+    scratchDirs.push(dir);
+    return dir;
+}
+export function cleanupScratchDirs() {
+    while (scratchDirs.length > 0) {
+        const dir = scratchDirs.pop();
+        if (dir)
+            rmSync(dir, { recursive: true, force: true });
+    }
+}
+export function generatedCommandFor(shellForm) {
+    const claudeCommands = buildCopyCommands({ sessionUuid: SAMPLE_UUID, cwd: process.cwd(), title: "smoke" });
+    const command = buildCodextenderCommands({
+        cwd: process.cwd(),
+        baseUrl: "http://127.0.0.1:4000",
+        authToken: MARKER_VALUE,
+        claudeCommands,
+    })[shellForm];
+    return { command, tokenFilePath: extractTokenFilePath(command, shellForm) };
+}
+export function runPowershell(exitCode, powershellBin) {
+    const { command, tokenFilePath } = generatedCommandFor("powershell");
+    const dir = scratchDir();
+    const captureFile = path.join(dir, "capture.txt");
+    const wrapper = "function claude {\n" +
+        "  Set-Content -LiteralPath $env:SMOKE_CAPTURE_FILE -Value $env:ANTHROPIC_AUTH_TOKEN -NoNewline\n" +
+        "  $global:LASTEXITCODE = [int]$env:SMOKE_EXIT_CODE\n" +
+        "}\n" +
+        command +
+        "\n" +
+        '$remaining = @()\n' +
+        `foreach ($n in @(${ENV_NAMES.map((n) => `"${n}"`).join(",")})) {\n` +
+        "  if ([Environment]::GetEnvironmentVariable($n)) { $remaining += $n }\n" +
+        "}\n" +
+        'Write-Output ("SMOKE_REMAINING_ENV=" + ($remaining -join ","))\n' +
+        `Write-Output ("SMOKE_TOKEN_FILE_EXISTS=" + (Test-Path -LiteralPath '${tokenFilePath.replace(/'/g, "''")}'))\n`;
+    const result = spawnSync(powershellBin, ["-NoProfile", "-Command", wrapper], {
+        stdio: "pipe",
+        timeout: SPAWN_TIMEOUT_MS,
+        env: { ...process.env, ...POWERSHELL_QUIET_ENV, SMOKE_CAPTURE_FILE: captureFile, SMOKE_EXIT_CODE: String(exitCode) },
+    });
+    const stdout = result.stdout?.toString() ?? "";
+    return {
+        exit: result.status,
+        stdout,
+        stderr: result.stderr?.toString() ?? "",
+        tokenSeenByChild: existsSync(captureFile) ? readFileSync(captureFile, "utf8") : "",
+        remainingEnv: /SMOKE_REMAINING_ENV=([^\r\n]*)/.exec(stdout)?.[1] ?? "MISSING",
+        tokenFileExists: /SMOKE_TOKEN_FILE_EXISTS=True/i.test(stdout),
+    };
+}
+export function runBash(exitCode) {
+    const { command, tokenFilePath } = generatedCommandFor("posix");
+    const dir = scratchDir();
+    const captureFile = path.join(dir, "capture.txt");
+    const wrapper = "claude() {\n" +
+        '  printf "%s" "$ANTHROPIC_AUTH_TOKEN" > "$SMOKE_CAPTURE_FILE"\n' +
+        "  return $SMOKE_EXIT_CODE\n" +
+        "}\n" +
+        command +
+        "\n" +
+        'remaining=""\n' +
+        `for n in ${ENV_NAMES.join(" ")}; do\n` +
+        '  v=$(eval "printf \'%s\' \\"\\${$n:-}\\"")\n' +
+        '  if [ -n "$v" ]; then remaining="$remaining$n,"; fi\n' +
+        "done\n" +
+        'echo "SMOKE_REMAINING_ENV=$remaining"\n' +
+        `if [ -e "${tokenFilePath}" ]; then echo "SMOKE_TOKEN_FILE_EXISTS=true"; else echo "SMOKE_TOKEN_FILE_EXISTS=false"; fi\n`;
+    const result = spawnSync("bash", ["-c", wrapper], {
+        stdio: "pipe",
+        timeout: SPAWN_TIMEOUT_MS,
+        env: { ...process.env, SMOKE_CAPTURE_FILE: captureFile, SMOKE_EXIT_CODE: String(exitCode) },
+    });
+    const stdout = result.stdout?.toString() ?? "";
+    return {
+        exit: result.status,
+        stdout,
+        stderr: result.stderr?.toString() ?? "",
+        tokenSeenByChild: existsSync(captureFile) ? readFileSync(captureFile, "utf8") : "",
+        remainingEnv: /SMOKE_REMAINING_ENV=([^\r\n]*)/.exec(stdout)?.[1] ?? "MISSING",
+        tokenFileExists: /SMOKE_TOKEN_FILE_EXISTS=true/i.test(stdout),
+    };
+}
+/* v8 ignore start -- only invoked by the cmd.exe smoke test, which
+ * it.skipIf(!findCmd()) skips entirely on the Linux CI runner. */
+export function runCmd(exitCode) {
+    const { command, tokenFilePath } = generatedCommandFor("cmd");
+    const dir = scratchDir();
+    const stubDir = path.join(dir, "stub");
+    mkdirSync(stubDir);
+    const captureFile = path.join(dir, "capture.txt");
+    writeFileSync(path.join(stubDir, "claude.cmd"), "@echo off\r\n" +
+        '>"%SMOKE_CAPTURE_FILE%" echo %ANTHROPIC_AUTH_TOKEN%\r\n' +
+        "exit /b %SMOKE_EXIT_CODE%\r\n");
+    // Diagnostics MUST be chained with `&` onto the SAME logical line as
+    // `command`, never as subsequent physical lines: cmd.exe invokes the
+    // `claude.cmd` stub by bare name (no `call`, matching production, where
+    // real `claude` is a native .exe and this quirk never applies), and once a
+    // .cmd/.bat is invoked that way, control returns for the REST OF THE SAME
+    // LINE's `&`-chained commands but never advances to the calling script's
+    // next physical line (verified empirically: a batch file's own line after
+    // a bare-name nested-.cmd call never runs, even though same-line `&`
+    // continuations after that call do).
+    //
+    // There is NO reliable same-line way left to observe whether the
+    // cleanup suffix's `set NAME=` clears actually took effect: cmd.exe
+    // resolves every %VAR%/`if defined VAR` reference on an entire `&`-chained
+    // line against the environment snapshot from BEFORE that line started
+    // executing, regardless of `set` commands earlier on the SAME line — the
+    // textbook reason `setlocal enabledelayedexpansion` exists at all
+    // (confirmed in isolation: `set "X=1" & set X=CLEARED & echo %X%` prints
+    // the OLD value; `enabledelayedexpansion` + `!X!` does not fix `if
+    // defined` either, and even a nested `cmd /c "if defined X ..."` spawned
+    // mid-line inherits the same stale snapshot). This is a limitation of
+    // observing it from the SAME script, not evidence cleanup didn't run:
+    // `if exist <tokenFilePath>` below checks DISK state, immune to this
+    // per-line env snapshot, and its `false` result already proves the whole
+    // `&`-chained cleanup suffix — including the `set NAME=` clears that
+    // precede `del` in that exact same chain — ran to completion in order.
+    const oneLine = `set "PATH=${stubDir};%PATH%" & ` +
+        `set "SMOKE_CAPTURE_FILE=${captureFile}" & ` +
+        `set "SMOKE_EXIT_CODE=${exitCode}" & ` +
+        command +
+        ` & (if exist "${tokenFilePath}" (echo SMOKE_TOKEN_FILE_EXISTS=true) else (echo SMOKE_TOKEN_FILE_EXISTS=false))`;
+    const wrapperFile = path.join(dir, "wrapper.cmd");
+    writeFileSync(wrapperFile, `@echo off\r\n${oneLine}\r\n`);
+    const result = spawnSync("cmd", ["/c", wrapperFile], {
+        stdio: "pipe",
+        timeout: SPAWN_TIMEOUT_MS,
+        env: { ...process.env },
+    });
+    const stdout = result.stdout?.toString() ?? "";
+    return {
+        exit: result.status,
+        stdout,
+        stderr: result.stderr?.toString() ?? "",
+        tokenSeenByChild: existsSync(captureFile) ? readFileSync(captureFile, "utf8").trim() : "",
+        // Not observable same-line for cmd — see the comment above; the disk-based
+        // tokenFileExists check below covers whether the cleanup chain ran.
+        remainingEnv: "",
+        tokenFileExists: /SMOKE_TOKEN_FILE_EXISTS=true/i.test(stdout),
+    };
+}
+/* v8 ignore stop */
+//# sourceMappingURL=launcher-codextender.smoke-helpers.js.map

package/server/dist/core/launcher-codextender.smoke-helpers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"launcher-codextender.smoke-helpers.js","sourceRoot":"","sources":["../../src/core/launcher-codextender.smoke-helpers.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAAE,WAAW,EAAE,MAAM,EAAE,aAAa,EAAE,UAAU,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAClG,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAC;AAClD,OAAO,EAAE,wBAAwB,EAAE,MAAM,2BAA2B,CAAC;AACrE,OAAO,EAAE,oBAAoB,EAAE,MAAM,qCAAqC,CAAC;AAE3E,MAAM,CAAC,MAAM,WAAW,GAAG,sCAAsC,CAAC;AAClE,MAAM,CAAC,MAAM,YAAY,GAAG,wCAAwC,CAAC;AACrE,MAAM,CAAC,MAAM,SAAS,GAAG;IACvB,oBAAoB;IACpB,sBAAsB;IACtB,iBAAiB;IACjB,oBAAoB;IACpB,mBAAmB;IACnB,8BAA8B;IAC9B,8BAA8B;IAC9B,gCAAgC;IAChC,+BAA+B;CAChC,CAAC;AACF,MAAM,CAAC,MAAM,gBAAgB,GAAG,MAAM,CAAC;AAEvC,MAAM,UAAU,oBAAoB,CAAC,OAAe,EAAE,SAAyC;IAC7F,IAAI,SAAS,KAAK,YAAY,EAAE,CAAC;QAC/B,MAAM,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,oCAAoC,CAAC,CAAC;QAC9D,IAAI,CAAC,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;QAC3E,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;IACd,CAAC;IACD;wEACoE;IACpE,IAAI,SAAS,KAAK,KAAK,EAAE,CAAC;QACxB,MAAM,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,yCAAyC,CAAC,CAAC;QACnE,IAAI,CAAC,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;QACpE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;IACd,CAAC;IACD,oBAAoB;IACpB,MAAM,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC;IAC/C,IAAI,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;IACtE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;AACd,CAAC;AAED,MAAM,UAAU,QAAQ;IACtB,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,CAAC,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,gBAAgB,EAAE,CAAC,CAAC;IAC/F,OAAO,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;AAC7C,CAAC;AAED,MAAM,UAAU,OAAO;IACrB,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;QAAE,OAAO,IAAI,CAAC,CAAC,2BAA2B;IAC1E,mFAAmF;IACnF,MAAM,MAAM,GAAG,SAAS,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,CAAC,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,gBAAgB,EAAE,CAAC,CAAC;IACnG,OAAO,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;IAC1C,oBAAoB;AACtB,CAAC;AAED,MAAM,WAAW,GAAa,EAAE,CAAC;AACjC,MAAM,UAAU,UAAU;IACxB,MAAM,GAAG,GAAG,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,oBAAoB,CAAC,CAAC,CAAC;IACnE,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACtB,OAAO,GAAG,CAAC;AACb,CAAC;AACD,MAAM,UAAU,kBAAkB;IAChC,OAAO,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC9B,MAAM,GAAG,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;QAC9B,IAAI,GAAG;YAAE,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACzD,CAAC;AACH,CAAC;AAWD,MAAM,UAAU,mBAAmB,CAAC,SAAyC;IAC3E,MAAM,cAAc,GAAG,iBAAiB,CAAC,EAAE,WAAW,EAAE,WAAW,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;IAC3G,MAAM,OAAO,GAAG,wBAAwB,CAAC;QACvC,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE;QAClB,OAAO,EAAE,uBAAuB;QAChC,SAAS,EAAE,YAAY;QACvB,cAAc;KACf,CAAC,CAAC,SAAS,CAAC,CAAC;IACd,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,oBAAoB,CAAC,OAAO,EAAE,SAAS,CAAC,EAAE,CAAC;AAC9E,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,QAAgB,EAAE,aAAqB;IACnE,MAAM,EAAE,OAAO,EAAE,aAAa,EAAE,GAAG,mBAAmB,CAAC,YAAY,CAAC,CAAC;IACrE,MAAM,GAAG,GAAG,UAAU,EAAE,CAAC;IACzB,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC;IAClD,MAAM,OAAO,GACX,qBAAqB;QACrB,kGAAkG;QAClG,sDAAsD;QACtD,KAAK;QACL,OAAO;QACP,IAAI;QACJ,oBAAoB;QACpB,oBAAoB,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ;QACpE,yEAAyE;QACzE,KAAK;QACL,kEAAkE;QAClE,uEAAuE,aAAa,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC;IAClH,MAAM,MAAM,GAAG,SAAS,CAAC,aAAa,EAAE,CAAC,YAAY,EAAE,UAAU,EAAE,OAAO,CAAC,EAAE;QAC3E,KAAK,EAAE,MAAM;QACb,OAAO,EAAE,gBAAgB;QACzB,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,GAAG,oBAAoB,EAAE,kBAAkB,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,CAAC,QAAQ,CAAC,EAAE;KACrH,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IAC/C,OAAO;QACL,IAAI,EAAE,MAAM,CAAC,MAAM;QACnB,MAAM;QACN,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE;QACvC,gBAAgB,EAAE,UAAU,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE;QAClF,YAAY,EAAE,gCAAgC,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,SAAS;QAC7E,eAAe,EAAE,+BAA+B,CAAC,IAAI,CAAC,MAAM,CAAC;KAC9D,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,OAAO,CAAC,QAAgB;IACtC,MAAM,EAAE,OAAO,EAAE,aAAa,EAAE,GAAG,mBAAmB,CAAC,OAAO,CAAC,CAAC;IAChE,MAAM,GAAG,GAAG,UAAU,EAAE,CAAC;IACzB,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC;IAClD,MAAM,OAAO,GACX,cAAc;QACd,iEAAiE;QACjE,6BAA6B;QAC7B,KAAK;QACL,OAAO;QACP,IAAI;QACJ,gBAAgB;QAChB,YAAY,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ;QACvC,+CAA+C;QAC/C,wDAAwD;QACxD,QAAQ;QACR,yCAAyC;QACzC,YAAY,aAAa,gGAAgG,CAAC;IAC5H,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,OAAO,CAAC,EAAE;QAChD,KAAK,EAAE,MAAM;QACb,OAAO,EAAE,gBAAgB;QACzB,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,kBAAkB,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,CAAC,QAAQ,CAAC,EAAE;KAC5F,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IAC/C,OAAO;QACL,IAAI,EAAE,MAAM,CAAC,MAAM;QACnB,MAAM;QACN,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE;QACvC,gBAAgB,EAAE,UAAU,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE;QAClF,YAAY,EAAE,gCAAgC,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,SAAS;QAC7E,eAAe,EAAE,+BAA+B,CAAC,IAAI,CAAC,MAAM,CAAC;KAC9D,CAAC;AACJ,CAAC;AAED;kEACkE;AAClE,MAAM,UAAU,MAAM,CAAC,QAAgB;IACrC,MAAM,EAAE,OAAO,EAAE,aAAa,EAAE,GAAG,mBAAmB,CAAC,KAAK,CAAC,CAAC;IAC9D,MAAM,GAAG,GAAG,UAAU,EAAE,CAAC;IACzB,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC;IACvC,SAAS,CAAC,OAAO,CAAC,CAAC;IACnB,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC;IAClD,aAAa,CACX,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,YAAY,CAAC,EAChC,eAAe;QACb,yDAAyD;QACzD,+BAA+B,CAClC,CAAC;IACF,qEAAqE;IACrE,qEAAqE;IACrE,wEAAwE;IACxE,2EAA2E;IAC3E,0EAA0E;IAC1E,yEAAyE;IACzE,0EAA0E;IAC1E,qEAAqE;IACrE,qCAAqC;IACrC,EAAE;IACF,iEAAiE;IACjE,oEAAoE;IACpE,2EAA2E;IAC3E,sEAAsE;IACtE,yEAAyE;IACzE,kEAAkE;IAClE,yEAAyE;IACzE,mEAAmE;IACnE,yEAAyE;IACzE,sEAAsE;IACtE,sEAAsE;IACtE,qEAAqE;IACrE,yEAAyE;IACzE,qEAAqE;IACrE,uEAAuE;IACvE,MAAM,OAAO,GACX,aAAa,OAAO,aAAa;QACjC,2BAA2B,WAAW,MAAM;QAC5C,wBAAwB,QAAQ,MAAM;QACtC,OAAO;QACP,iBAAiB,aAAa,kFAAkF,CAAC;IACnH,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC;IAClD,aAAa,CAAC,WAAW,EAAE,gBAAgB,OAAO,MAAM,CAAC,CAAC;IAC1D,MAAM,MAAM,GAAG,SAAS,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,WAAW,CAAC,EAAE;QACnD,KAAK,EAAE,MAAM;QACb,OAAO,EAAE,gBAAgB;QACzB,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE;KACxB,CAAC,CAAC;IACH,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IAC/C,OAAO;QACL,IAAI,EAAE,MAAM,CAAC,MAAM;QACnB,MAAM;QACN,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE;QACvC,gBAAgB,EAAE,UAAU,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE;QACzF,2EAA2E;QAC3E,oEAAoE;QACpE,YAAY,EAAE,EAAE;QAChB,eAAe,EAAE,+BAA+B,CAAC,IAAI,CAAC,MAAM,CAAC;KAC9D,CAAC;AACJ,CAAC;AACD,oBAAoB"}

package/server/dist/core/launcher-permission-flags.d.ts

@@ -0,0 +1,17 @@
+/** Narrowest slice of `launcher.ts`'s own `Argv` this module needs. */
+export interface PermissionPerimeterArgv {
+    toolsAllowlist: readonly string[];
+    permissionMode?: string;
+}
+/**
+ * Emits `--tools <comma-list>` and `--permission-mode <mode>` when
+ * `toolsAllowlist` is non-empty. Both flags or neither: a `permissionMode`
+ * without a `toolsAllowlist` would leave the process's full default toolset
+ * pre-approved-without-asking, the exact "looks compliant, isn't" shape
+ * this perimeter exists to prevent — so `permissionMode` is only ever
+ * emitted alongside a real allow-list. Emits nothing for an ordinary launch
+ * (`toolsAllowlist` empty/absent), which is why a manual launch's command
+ * string is unchanged byte-for-byte.
+ */
+export declare function appendPermissionPerimeter(a: PermissionPerimeterArgv, parts: string[], q: (v: string) => string): void;
+//# sourceMappingURL=launcher-permission-flags.d.ts.map

package/server/dist/core/launcher-permission-flags.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"launcher-permission-flags.d.ts","sourceRoot":"","sources":["../../src/core/launcher-permission-flags.ts"],"names":[],"mappings":"AAUA,uEAAuE;AACvE,MAAM,WAAW,uBAAuB;IACtC,cAAc,EAAE,SAAS,MAAM,EAAE,CAAC;IAClC,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED;;;;;;;;;GASG;AACH,wBAAgB,yBAAyB,CACvC,CAAC,EAAE,uBAAuB,EAC1B,KAAK,EAAE,MAAM,EAAE,EACf,CAAC,EAAE,CAAC,CAAC,EAAE,MAAM,KAAK,MAAM,GACvB,IAAI,CAIN"}

package/server/dist/core/launcher-permission-flags.js

@@ -0,0 +1,27 @@
+/*
+ * core/launcher-permission-flags.ts — FR-04.22 permission-perimeter argv
+ * rendering, split out of launcher.ts purely to keep that file under the
+ * repo's 300-line guideline (no behavior change from the split itself).
+ *
+ * See `external/launch/claim-executor-permissions.ts` for WHY this exists
+ * and the empirical CLI evidence behind the `--tools` + `--permission-mode`
+ * combination.
+ */
+/**
+ * Emits `--tools <comma-list>` and `--permission-mode <mode>` when
+ * `toolsAllowlist` is non-empty. Both flags or neither: a `permissionMode`
+ * without a `toolsAllowlist` would leave the process's full default toolset
+ * pre-approved-without-asking, the exact "looks compliant, isn't" shape
+ * this perimeter exists to prevent — so `permissionMode` is only ever
+ * emitted alongside a real allow-list. Emits nothing for an ordinary launch
+ * (`toolsAllowlist` empty/absent), which is why a manual launch's command
+ * string is unchanged byte-for-byte.
+ */
+export function appendPermissionPerimeter(a, parts, q) {
+    if (a.toolsAllowlist.length === 0)
+        return;
+    parts.push("--tools", q(a.toolsAllowlist.join(",")));
+    if (a.permissionMode)
+        parts.push("--permission-mode", q(a.permissionMode));
+}
+//# sourceMappingURL=launcher-permission-flags.js.map

package/server/dist/core/launcher-permission-flags.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"launcher-permission-flags.js","sourceRoot":"","sources":["../../src/core/launcher-permission-flags.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAQH;;;;;;;;;GASG;AACH,MAAM,UAAU,yBAAyB,CACvC,CAA0B,EAC1B,KAAe,EACf,CAAwB;IAExB,IAAI,CAAC,CAAC,cAAc,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO;IAC1C,KAAK,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IACrD,IAAI,CAAC,CAAC,cAAc;QAAE,KAAK,CAAC,IAAI,CAAC,mBAAmB,EAAE,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC;AAC7E,CAAC"}

package/server/dist/core/launcher.d.ts

@@ -32,6 +32,24 @@ export interface LaunchArgs {
      * are rejected here as defense-in-depth.
      */
     slashCommand?: string;
+    /**
+     * FR-04.22 permission perimeter (iterate-2026-09-06-claim-launch-
+     * permission-perimeter) — emitted as `--tools <names>` when non-empty.
+     * ONLY set by a caller that has independently established this launch is
+     * claim-authorized (see `external/launch/claim-executor-permissions.ts`);
+     * a plain human/manual launch never sets this field, so its command
+     * string is byte-identical to before this change. Genuinely restricts
+     * the spawned process's function set (verified live) — NOT the same as
+     * `--allowed-tools`, which only pre-approves combos without removing
+     * anything.
+     */
+    toolsAllowlist?: readonly string[];
+    /**
+     * FR-04.22 permission perimeter — emitted as `--permission-mode <mode>`
+     * alongside `toolsAllowlist`. See `claimExecutorLaunchOverrides()` for
+     * the verified value and why.
+     */
+    permissionMode?: string;
 }
 export interface LaunchResult {
     /** Always populated; the user's fallback. */

package/server/dist/core/launcher.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"launcher.d.ts","sourceRoot":"","sources":["../../src/core/launcher.ts"],"names":[],"mappings":"AAkBA,MAAM,WAAW,gBAAgB;IAC/B,UAAU,EAAE,MAAM,CAAC;IACnB,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,UAAU;IACzB,WAAW,EAAE,MAAM,CAAC;IACpB,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB;;;;;;;;;OASG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;;;;;;;;OASG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,YAAY;IAC3B,6CAA6C;IAC7C,QAAQ,EAAE,gBAAgB,CAAC;IAC3B,6DAA6D;IAC7D,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,MAAM,aAAa,GAAG,CAAC,IAAI,EAAE,UAAU,KAAK,OAAO,CAAC,YAAY,CAAC,GAAG,YAAY,CAAC;AAEvF,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,UAAU,GAAG,gBAAgB,CAOpE;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,wBAAgB,aAAa,CAAC,SAAS,EAAE,YAAY,GAAG,KAAK,GAAG,OAAO,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,CAS5F;AAED,eAAO,MAAM,YAAY,EAAE,aAGzB,CAAC;AAmJH,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC"}
+{"version":3,"file":"launcher.d.ts","sourceRoot":"","sources":["../../src/core/launcher.ts"],"names":[],"mappings":"AAmBA,MAAM,WAAW,gBAAgB;IAC/B,UAAU,EAAE,MAAM,CAAC;IACnB,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,UAAU;IACzB,WAAW,EAAE,MAAM,CAAC;IACpB,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IACtB;;;;;;;;;OASG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;;;;;;;;OASG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB;;;;;;;;;;OAUG;IACH,cAAc,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACnC;;;;OAIG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,YAAY;IAC3B,6CAA6C;IAC7C,QAAQ,EAAE,gBAAgB,CAAC;IAC3B,6DAA6D;IAC7D,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,MAAM,aAAa,GAAG,CAAC,IAAI,EAAE,UAAU,KAAK,OAAO,CAAC,YAAY,CAAC,GAAG,YAAY,CAAC;AAEvF,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,UAAU,GAAG,gBAAgB,CAOpE;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,wBAAgB,aAAa,CAAC,SAAS,EAAE,YAAY,GAAG,KAAK,GAAG,OAAO,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,CAS5F;AAED,eAAO,MAAM,YAAY,EAAE,aAGzB,CAAC;AA0JH,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC"}

package/server/dist/core/launcher.js

@@ -14,6 +14,7 @@
  * 2 can plug implementations in without rewiring callers.
  */
 import { qPs, qCmd, qPosix, toPosixPath } from "./shell-quote.js";
+import { appendPermissionPerimeter } from "./launcher-permission-flags.js";
 export function buildCopyCommands(args) {
     const parts = buildArgv(args);
     return {
@@ -76,6 +77,8 @@ function buildArgv(args) {
         pluginDirs: args.pluginDirs ?? [],
         title,
         slashCommand,
+        toolsAllowlist: [...(args.toolsAllowlist ?? [])],
+        permissionMode: args.permissionMode,
     };
 }
 /**
@@ -112,6 +115,7 @@ function normalizeSlashCommand(raw) {
 function renderPowershell(a) {
     const parts = ["claude"];
     appendSessionFlags(a, parts, qPs);
+    appendPermissionPerimeter(a, parts, qPs);
     parts.push("--add-dir", qPs(a.cwd));
     appendResumeFork(a, parts, qPs);
     appendName(a, parts, qPs);
@@ -124,6 +128,7 @@ function renderPowershell(a) {
 function renderCmd(a) {
     const parts = ["claude"];
     appendSessionFlags(a, parts, qCmd);
+    appendPermissionPerimeter(a, parts, qCmd);
     parts.push("--add-dir", qCmd(a.cwd));
     appendResumeFork(a, parts, qCmd);
     appendName(a, parts, qCmd);
@@ -138,6 +143,7 @@ function renderPosix(a) {
     const plugins = a.pluginDirs.map(toPosixPath);
     const parts = ["claude"];
     appendSessionFlags(a, parts, qPosix);
+    appendPermissionPerimeter(a, parts, qPosix);
     parts.push("--add-dir", qPosix(cwd));
     appendResumeFork(a, parts, qPosix);
     appendName(a, parts, qPosix);

package/server/dist/core/launcher.js.map

@@ -1 +1 @@
-{"version":3,"file":"launcher.js","sourceRoot":"","sources":["../../src/core/launcher.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAgDlE,MAAM,UAAU,iBAAiB,CAAC,IAAgB;IAChD,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAC9B,OAAO;QACL,UAAU,EAAE,gBAAgB,CAAC,KAAK,CAAC;QACnC,GAAG,EAAE,SAAS,CAAC,KAAK,CAAC;QACrB,KAAK,EAAE,WAAW,CAAC,KAAK,CAAC;KAC1B,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,MAAM,UAAU,aAAa,CAAC,SAAyC,EAAE,GAAW;IAClF,IAAI,CAAC,GAAG;QAAE,OAAO,EAAE,CAAC;IACpB,IAAI,SAAS,KAAK,YAAY,EAAE,CAAC;QAC/B,OAAO,gBAAgB,GAAG,CAAC,GAAG,CAAC,sBAAsB,CAAC;IACxD,CAAC;IACD,IAAI,SAAS,KAAK,KAAK,EAAE,CAAC;QACxB,OAAO,SAAS,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC;IAClC,CAAC;IACD,OAAO,MAAM,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC;AAC9C,CAAC;AAED,MAAM,CAAC,MAAM,YAAY,GAAkB,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IACpD,QAAQ,EAAE,iBAAiB,CAAC,IAAI,CAAC;IACjC,YAAY,EAAE,MAAM;CACrB,CAAC,CAAC;AAeH,SAAS,SAAS,CAAC,IAAgB;IACjC,MAAM,KAAK,GAAG,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACzC,MAAM,YAAY,GAAG,qBAAqB,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IAC9D,OAAO;QACL,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,GAAG,EAAE,IAAI,CAAC,GAAG;QACb,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC;QAC5B,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC;QACxB,iBAAiB,EAAE,IAAI,CAAC,iBAAiB;QACzC,UAAU,EAAE,IAAI,CAAC,UAAU,IAAI,EAAE;QACjC,KAAK;QACL,YAAY;KACb,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,SAAS,cAAc,CAAC,GAAuB;IAC7C,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAC9C,IAAI,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,8EAA8E,CAAC,CAAC;IAClG,CAAC;IACD,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IAC3B,OAAO,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC;AAC9C,CAAC;AAED;;;;;GAKG;AACH,SAAS,qBAAqB,CAAC,GAAuB;IACpD,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAC9C,KAAK,MAAM,EAAE,IAAI,GAAG,EAAE,CAAC;QACrB,MAAM,IAAI,GAAG,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QAC9B,IAAI,IAAI,GAAG,IAAI,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YACjC,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;QACrE,CAAC;IACH,CAAC;IACD,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IAC3B,OAAO,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC;AAC9C,CAAC;AAED,SAAS,gBAAgB,CAAC,CAAO;IAC/B,MAAM,KAAK,GAAa,CAAC,QAAQ,CAAC,CAAC;IACnC,kBAAkB,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;IAClC,KAAK,CAAC,IAAI,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACpC,gBAAgB,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;IAChC,UAAU,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;IAC1B,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,CAAC;QAC7B,KAAK,CAAC,IAAI,CAAC,cAAc,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACrC,CAAC;IACD,kBAAkB,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;IAClC,OAAO,aAAa,CAAC,YAAY,EAAE,CAAC,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACrE,CAAC;AAED,SAAS,SAAS,CAAC,CAAO;IACxB,MAAM,KAAK,GAAa,CAAC,QAAQ,CAAC,CAAC;IACnC,kBAAkB,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;IACnC,KAAK,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACrC,gBAAgB,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;IACjC,UAAU,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;IAC3B,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,CAAC;QAC7B,KAAK,CAAC,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IACtC,CAAC;IACD,kBAAkB,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;IACnC,OAAO,aAAa,CAAC,KAAK,EAAE,CAAC,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACvD,CAAC;AAED,SAAS,WAAW,CAAC,CAAO;IAC1B,MAAM,GAAG,GAAG,WAAW,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IAC/B,MAAM,OAAO,GAAG,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IAC9C,MAAM,KAAK,GAAa,CAAC,QAAQ,CAAC,CAAC;IACnC,kBAAkB,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;IACrC,KAAK,CAAC,IAAI,CAAC,WAAW,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;IACrC,gBAAgB,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;IACnC,UAAU,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;IAC7B,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,KAAK,CAAC,IAAI,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;IACxC,CAAC;IACD,kBAAkB,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;IACrC,0EAA0E;IAC1E,OAAO,aAAa,CAAC,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACzD,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,kBAAkB,CAAC,CAAO,EAAE,KAAe,EAAE,CAAwB;IAC5E,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,IAAI;QAAE,OAAO;IAChC,KAAK,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC;AAC/C,CAAC;AAED,SAAS,gBAAgB,CAAC,CAAO,EAAE,KAAe,EAAE,CAAwB;IAC1E,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;QACX,mFAAmF;QACnF,IAAI,CAAC,CAAC,CAAC,iBAAiB,EAAE,CAAC;YACzB,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;QAC1D,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,EAAE,gBAAgB,CAAC,CAAC;IACnE,CAAC;SAAM,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC;QACpB,KAAK,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC;IAC3C,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CAAC,CAAO,EAAE,KAAe,EAAE,CAAwB;IACpE,IAAI,CAAC,CAAC,KAAK;QAAE,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;AAChD,CAAC;AAED,SAAS,kBAAkB,CACzB,CAAO,EACP,KAAe,EACf,CAAwB;IAExB,IAAI,CAAC,CAAC,YAAY;QAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC;AACpD,CAAC;AAED,kCAAkC;AAClC,EAAE;AACF,oEAAoE;AACpE,+EAA+E;AAC/E,+EAA+E;AAC/E,yEAAyE;AACzE,8DAA8D;AAC9D,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC"}
+{"version":3,"file":"launcher.js","sourceRoot":"","sources":["../../src/core/launcher.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAClE,OAAO,EAAE,yBAAyB,EAAE,MAAM,gCAAgC,CAAC;AAkE3E,MAAM,UAAU,iBAAiB,CAAC,IAAgB;IAChD,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAC9B,OAAO;QACL,UAAU,EAAE,gBAAgB,CAAC,KAAK,CAAC;QACnC,GAAG,EAAE,SAAS,CAAC,KAAK,CAAC;QACrB,KAAK,EAAE,WAAW,CAAC,KAAK,CAAC;KAC1B,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,MAAM,UAAU,aAAa,CAAC,SAAyC,EAAE,GAAW;IAClF,IAAI,CAAC,GAAG;QAAE,OAAO,EAAE,CAAC;IACpB,IAAI,SAAS,KAAK,YAAY,EAAE,CAAC;QAC/B,OAAO,gBAAgB,GAAG,CAAC,GAAG,CAAC,sBAAsB,CAAC;IACxD,CAAC;IACD,IAAI,SAAS,KAAK,KAAK,EAAE,CAAC;QACxB,OAAO,SAAS,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC;IAClC,CAAC;IACD,OAAO,MAAM,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC;AAC9C,CAAC;AAED,MAAM,CAAC,MAAM,YAAY,GAAkB,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;IACpD,QAAQ,EAAE,iBAAiB,CAAC,IAAI,CAAC;IACjC,YAAY,EAAE,MAAM;CACrB,CAAC,CAAC;AAiBH,SAAS,SAAS,CAAC,IAAgB;IACjC,MAAM,KAAK,GAAG,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACzC,MAAM,YAAY,GAAG,qBAAqB,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IAC9D,OAAO;QACL,WAAW,EAAE,IAAI,CAAC,WAAW;QAC7B,GAAG,EAAE,IAAI,CAAC,GAAG;QACb,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC;QAC5B,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC;QACxB,iBAAiB,EAAE,IAAI,CAAC,iBAAiB;QACzC,UAAU,EAAE,IAAI,CAAC,UAAU,IAAI,EAAE;QACjC,KAAK;QACL,YAAY;QACZ,cAAc,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,cAAc,IAAI,EAAE,CAAC,CAAC;QAChD,cAAc,EAAE,IAAI,CAAC,cAAc;KACpC,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,SAAS,cAAc,CAAC,GAAuB;IAC7C,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAC9C,IAAI,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CAAC,8EAA8E,CAAC,CAAC;IAClG,CAAC;IACD,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IAC3B,OAAO,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC;AAC9C,CAAC;AAED;;;;;GAKG;AACH,SAAS,qBAAqB,CAAC,GAAuB;IACpD,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAC9C,KAAK,MAAM,EAAE,IAAI,GAAG,EAAE,CAAC;QACrB,MAAM,IAAI,GAAG,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QAC9B,IAAI,IAAI,GAAG,IAAI,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YACjC,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;QACrE,CAAC;IACH,CAAC;IACD,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IAC3B,OAAO,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC;AAC9C,CAAC;AAED,SAAS,gBAAgB,CAAC,CAAO;IAC/B,MAAM,KAAK,GAAa,CAAC,QAAQ,CAAC,CAAC;IACnC,kBAAkB,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;IAClC,yBAAyB,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;IACzC,KAAK,CAAC,IAAI,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACpC,gBAAgB,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;IAChC,UAAU,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;IAC1B,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,CAAC;QAC7B,KAAK,CAAC,IAAI,CAAC,cAAc,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACrC,CAAC;IACD,kBAAkB,CAAC,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC;IAClC,OAAO,aAAa,CAAC,YAAY,EAAE,CAAC,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACrE,CAAC;AAED,SAAS,SAAS,CAAC,CAAO;IACxB,MAAM,KAAK,GAAa,CAAC,QAAQ,CAAC,CAAC;IACnC,kBAAkB,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;IACnC,yBAAyB,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;IAC1C,KAAK,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;IACrC,gBAAgB,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;IACjC,UAAU,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;IAC3B,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,CAAC;QAC7B,KAAK,CAAC,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IACtC,CAAC;IACD,kBAAkB,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;IACnC,OAAO,aAAa,CAAC,KAAK,EAAE,CAAC,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACvD,CAAC;AAED,SAAS,WAAW,CAAC,CAAO;IAC1B,MAAM,GAAG,GAAG,WAAW,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IAC/B,MAAM,OAAO,GAAG,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IAC9C,MAAM,KAAK,GAAa,CAAC,QAAQ,CAAC,CAAC;IACnC,kBAAkB,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;IACrC,yBAAyB,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;IAC5C,KAAK,CAAC,IAAI,CAAC,WAAW,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;IACrC,gBAAgB,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;IACnC,UAAU,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;IAC7B,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,KAAK,CAAC,IAAI,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;IACxC,CAAC;IACD,kBAAkB,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;IACrC,0EAA0E;IAC1E,OAAO,aAAa,CAAC,OAAO,EAAE,CAAC,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACzD,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,kBAAkB,CAAC,CAAO,EAAE,KAAe,EAAE,CAAwB;IAC5E,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,CAAC,IAAI;QAAE,OAAO;IAChC,KAAK,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC;AAC/C,CAAC;AAED,SAAS,gBAAgB,CAAC,CAAO,EAAE,KAAe,EAAE,CAAwB;IAC1E,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;QACX,mFAAmF;QACnF,IAAI,CAAC,CAAC,CAAC,iBAAiB,EAAE,CAAC;YACzB,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;QAC1D,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,EAAE,gBAAgB,CAAC,CAAC;IACnE,CAAC;SAAM,IAAI,CAAC,CAAC,MAAM,EAAE,CAAC;QACpB,KAAK,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC;IAC3C,CAAC;AACH,CAAC;AAED,SAAS,UAAU,CAAC,CAAO,EAAE,KAAe,EAAE,CAAwB;IACpE,IAAI,CAAC,CAAC,KAAK;QAAE,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;AAChD,CAAC;AAED,SAAS,kBAAkB,CACzB,CAAO,EACP,KAAe,EACf,CAAwB;IAExB,IAAI,CAAC,CAAC,YAAY;QAAE,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC;AACpD,CAAC;AAED,kCAAkC;AAClC,EAAE;AACF,oEAAoE;AACpE,+EAA+E;AAC/E,+EAA+E;AAC/E,yEAAyE;AACzE,8DAA8D;AAC9D,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC"}

package/server/dist/core/leadwright-preflight-transport.d.ts

@@ -0,0 +1,27 @@
+import { spawn as realSpawn } from "node:child_process";
+import { type ResolvedSpawn } from "./win32-spawn.js";
+import type { PreflightResult, PreflightStdinInput } from "../types/leadwright-preflight.js";
+export type LeadwrightTransportResult = {
+    ranOk: true;
+    result: PreflightResult;
+} | {
+    ranOk: false;
+    reason: string;
+};
+export interface RunLeadwrightPreflightOptions {
+    /** Injected for tests. */
+    spawn?: typeof realSpawn;
+    /** Injected for tests. */
+    resolveSpawnFn?: (argv: string[], cwd: string) => ResolvedSpawn | null;
+    /** Wall-clock deadline for the ENTIRE call, independent of the CLI's own
+     *  30s stdin-read timeout — bounds a child that hangs after receiving
+     *  stdin (e.g. stalled on filesystem I/O). Default: 45s. */
+    timeoutMs?: number;
+    /** Caps total collected stdout+stderr bytes; exceeding it kills the
+     *  child rather than parsing a truncated/misleading partial result.
+     *  Default: 10 MiB (generous — a real PreflightResult with dozens of
+     *  findings is a few KB). */
+    maxOutputBytes?: number;
+}
+export declare function runLeadwrightPreflight(checkoutRoot: string, proposal: PreflightStdinInput, options?: RunLeadwrightPreflightOptions): Promise<LeadwrightTransportResult>;
+//# sourceMappingURL=leadwright-preflight-transport.d.ts.map

package/server/dist/core/leadwright-preflight-transport.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"leadwright-preflight-transport.d.ts","sourceRoot":"","sources":["../../src/core/leadwright-preflight-transport.ts"],"names":[],"mappings":"AAmBA,OAAO,EAAE,KAAK,IAAI,SAAS,EAAqB,MAAM,oBAAoB,CAAC;AAG3E,OAAO,EAAoC,KAAK,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACxF,OAAO,KAAK,EAAE,eAAe,EAAE,mBAAmB,EAAE,MAAM,kCAAkC,CAAC;AAE7F,MAAM,MAAM,yBAAyB,GACjC;IAAE,KAAK,EAAE,IAAI,CAAC;IAAC,MAAM,EAAE,eAAe,CAAA;CAAE,GACxC;IAAE,KAAK,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAErC,MAAM,WAAW,6BAA6B;IAC5C,0BAA0B;IAC1B,KAAK,CAAC,EAAE,OAAO,SAAS,CAAC;IACzB,0BAA0B;IAC1B,cAAc,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,GAAG,EAAE,MAAM,KAAK,aAAa,GAAG,IAAI,CAAC;IACvE;;gEAE4D;IAC5D,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;iCAG6B;IAC7B,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAcD,wBAAgB,sBAAsB,CACpC,YAAY,EAAE,MAAM,EACpB,QAAQ,EAAE,mBAAmB,EAC7B,OAAO,GAAE,6BAAkC,GAC1C,OAAO,CAAC,yBAAyB,CAAC,CAqGpC"}