@svenroth-ai/shipwright 0.27.0 → 0.29.0

package/server/dist/core/codextender-proxy-probe.js

@@ -0,0 +1,179 @@
+/*
+ * codextender-proxy-probe — HTTP probes of the local Codextender (LiteLLM)
+ * proxy (Codextender integration spec Part B.3/B.5, re-verified live
+ * 2026-09-23).
+ *
+ * Two distinct endpoints, deliberately not collapsed into one probe:
+ *  - `probeCodextenderLiveness` -> `GET /health/liveliness`, no auth
+ *    header. This is the AC8 pre-flight check (`runtime-chokepoint.ts`'s
+ *    `checkCodextenderProxyAvailable` default, and its fork-route
+ *    equivalent in `external/tasks/fork.ts`) — a launch/fork only needs to
+ *    know the proxy is UP, not what it serves.
+ *  - `probeCodextenderModels` -> `GET /v1/models`, WITH
+ *    `Authorization: Bearer <token>` where `<token>` comes from
+ *    `process.env.CODEXTENDER_AUTH_TOKEN` (`resolveCodextenderAuthToken()`
+ *    in `launcher-codextender.ts` — no built-in default, PR-review BLOCK,
+ *    iterate-2026-09-23) — an unconfigured token degrades this probe to
+ *    `{ok: false}` the same as an unreachable proxy, rather than sending a
+ *    baked-in value. Confirmed live against a real local LiteLLM proxy: an
+ *    unauthenticated `/v1/models` request returns `500` (a LiteLLM quirk,
+ *    not a clean 401), so omitting the header makes every probe look like
+ *    a hard failure regardless. Backs the cached `/api/codextender-models`
+ *    route (`routes/codextender-models.ts`), which wraps this probe in a
+ *    TTL cache mirroring `codex-models.ts`'s shape.
+ *
+ * Deliberately no CLI shell-out (unlike `codex-models-probe.ts`) — the
+ * proxy already speaks these two endpoints natively (LiteLLM's own
+ * built-in routes), so plain HTTP GETs are both the cheapest check and the
+ * datalist's real source.
+ */
+import { DEFAULT_CODEXTENDER_MODEL_ALIAS, resolveCodextenderAuthToken, } from "./launcher-codextender.js";
+/**
+ * `codextenderPort` is persisted/read as arbitrary JSON (PUT /api/settings
+ * accepts an unvalidated body; a hand-edited settings.json is untyped on
+ * disk too) before ever reaching here, so `port: number`'s compile-time
+ * type is not a runtime guarantee. Both probes below MUST reject anything
+ * outside a real TCP port before interpolating it into a URL — a value
+ * like `"4000@attacker.example"` would otherwise redirect the request via
+ * URL userinfo-authority confusion (PR-review BLOCK, iterate-2026-09-23
+ * fifth round). This is the enforcement point regardless of how an invalid
+ * value got in; `routes/settings.ts`'s PUT-time rejection (same finding)
+ * is defense-in-depth on top of it, not a substitute for it.
+ */
+export function isValidCodextenderPort(value) {
+    return (typeof value === "number" &&
+        Number.isInteger(value) &&
+        value >= 1 &&
+        value <= 65535);
+}
+/**
+ * PR-review preflight BLOCK (round 14, 2026-09-26) — `max_input_tokens`
+ * lives under each entry's `model_info` object (LiteLLM's own extension to
+ * the OpenAI-shaped `/v1/models` list; codextender's operator finding
+ * describes its config as declaring the value "in its LiteLLM
+ * `model_info`"), NOT as a flat, top-level field on the entry. A flat
+ * `entry.max_input_tokens` is checked too, purely as a forward-compatible
+ * fallback in case a future LiteLLM/codextender version flattens it — the
+ * nested form is the one actually confirmed, so it takes precedence.
+ */
+function extractMaxInputTokens(entry) {
+    const modelInfo = entry.model_info;
+    const nested = modelInfo && typeof modelInfo === "object"
+        ? modelInfo.max_input_tokens
+        : undefined;
+    const raw = nested ?? entry.max_input_tokens;
+    return typeof raw === "number" && Number.isInteger(raw) && raw > 0 ? raw : undefined;
+}
+/**
+ * `GET http://127.0.0.1:<port>/v1/models` with the configured Codextender
+ * master-key bearer token (`deps.authToken` or `resolveCodextenderAuthToken()`).
+ * Never throws — an unconfigured token, any network error, non-2xx status,
+ * timeout, or malformed body all resolve `{ok: false, models: []}` rather
+ * than rejecting, so callers never need a try/catch.
+ *
+ * LiteLLM's `/v1/models` response is OpenAI-shaped (`{"data": [{"id":
+ * "sol"}, ...]}`) — it carries no separate display name, so `display_name`
+ * is set to the same slug (matches `codex-models-probe.ts`'s
+ * `CodexModelCatalogEntry` shape for the client's shared consumer).
+ */
+export async function probeCodextenderModels(port, deps = {}) {
+    if (!isValidCodextenderPort(port))
+        return { ok: false, models: [] };
+    const authToken = deps.authToken ?? resolveCodextenderAuthToken();
+    if (!authToken)
+        return { ok: false, models: [] };
+    const fetchFn = deps.fetchFn ?? fetch;
+    const timeoutMs = deps.timeoutMs ?? 1500;
+    const controller = new AbortController();
+    const timer = setTimeout(() => controller.abort(), timeoutMs);
+    try {
+        const res = await fetchFn(`http://127.0.0.1:${port}/v1/models`, {
+            signal: controller.signal,
+            headers: { Authorization: `Bearer ${authToken}` },
+        });
+        if (!res.ok)
+            return { ok: false, models: [] };
+        const body = await res.json();
+        const rawModels = body?.data;
+        if (!Array.isArray(rawModels))
+            return { ok: false, models: [] };
+        const models = [];
+        for (const entry of rawModels) {
+            if (!entry || typeof entry !== "object")
+                continue;
+            const id = entry.id;
+            if (typeof id !== "string" || id.trim() === "")
+                continue;
+            const maxInputTokens = extractMaxInputTokens(entry);
+            models.push({
+                slug: id,
+                display_name: id,
+                ...(maxInputTokens !== undefined ? { max_input_tokens: maxInputTokens } : {}),
+            });
+        }
+        return { ok: true, models };
+    }
+    catch {
+        return { ok: false, models: [] };
+    }
+    finally {
+        clearTimeout(timer);
+    }
+}
+/**
+ * Resolves the REAL context window for the Codextender alias a task is
+ * about to launch with, straight from the proxy's own `/v1/models` response
+ * (operator finding, 2026-09-26, live Codextender iterate test) — never a
+ * number hardcoded here a second time. Claude Code assumes a 200K context
+ * window for any model id it doesn't recognize (the Codex alias is one) and
+ * proactively over-compacts against that wrong, much-too-small ceiling; the
+ * fix is `launcher-codextender.ts` setting `CLAUDE_CODE_MAX_CONTEXT_TOKENS`
+ * from THIS value, so a change to codextender's own declared window (its
+ * `config.py` `model_info.max_input_tokens`) can never drift out of sync
+ * with what webui tells Claude Code — both repos read the same live number.
+ *
+ * Never throws, same contract as `probeCodextenderModels` — resolves
+ * `undefined` (not a guessed fallback) when the probe fails, the alias
+ * isn't in the response, or the response carries no usable
+ * `max_input_tokens` for it (an older/unpatched proxy). The caller's
+ * contract for `undefined` is "leave `CLAUDE_CODE_MAX_CONTEXT_TOKENS`
+ * unset", which is the conservative, safe default — Claude Code's own 200K
+ * fallback — rather than risking an inflated ceiling that starves
+ * compaction entirely.
+ */
+export async function resolveCodextenderMaxContextTokens(port, model, deps = {}) {
+    const alias = model?.trim() || DEFAULT_CODEXTENDER_MODEL_ALIAS;
+    const result = await probeCodextenderModels(port, deps);
+    if (!result.ok)
+        return undefined;
+    const entry = result.models.find((m) => m.slug === alias);
+    return entry?.max_input_tokens;
+}
+/**
+ * `GET http://127.0.0.1:<port>/health/liveliness` — no auth header
+ * required (confirmed live against a real local LiteLLM proxy). This is
+ * the AC8 pre-flight probe: it only needs to know the proxy process is up
+ * and answering, not what it serves. Never throws — same
+ * never-reject contract as `probeCodextenderModels`.
+ */
+export async function probeCodextenderLiveness(port, deps = {}) {
+    if (!isValidCodextenderPort(port))
+        return false;
+    const fetchFn = deps.fetchFn ?? fetch;
+    const timeoutMs = deps.timeoutMs ?? 1500;
+    const controller = new AbortController();
+    const timer = setTimeout(() => controller.abort(), timeoutMs);
+    try {
+        const res = await fetchFn(`http://127.0.0.1:${port}/health/liveliness`, {
+            signal: controller.signal,
+        });
+        return res.ok;
+    }
+    catch {
+        return false;
+    }
+    finally {
+        clearTimeout(timer);
+    }
+}
+//# sourceMappingURL=codextender-proxy-probe.js.map

package/server/dist/core/codextender-proxy-probe.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"codextender-proxy-probe.js","sourceRoot":"","sources":["../../src/core/codextender-proxy-probe.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAEH,OAAO,EACL,+BAA+B,EAC/B,2BAA2B,GAC5B,MAAM,2BAA2B,CAAC;AAEnC;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,sBAAsB,CAAC,KAAc;IACnD,OAAO,CACL,OAAO,KAAK,KAAK,QAAQ;QACzB,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC;QACvB,KAAK,IAAI,CAAC;QACV,KAAK,IAAI,KAAK,CACf,CAAC;AACJ,CAAC;AA4BD;;;;;;;;;GASG;AACH,SAAS,qBAAqB,CAAC,KAA8B;IAC3D,MAAM,SAAS,GAAG,KAAK,CAAC,UAAU,CAAC;IACnC,MAAM,MAAM,GACV,SAAS,IAAI,OAAO,SAAS,KAAK,QAAQ;QACxC,CAAC,CAAE,SAAqC,CAAC,gBAAgB;QACzD,CAAC,CAAC,SAAS,CAAC;IAChB,MAAM,GAAG,GAAG,MAAM,IAAI,KAAK,CAAC,gBAAgB,CAAC;IAC7C,OAAO,OAAO,GAAG,KAAK,QAAQ,IAAI,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;AACvF,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,IAAY,EACZ,OAA6B,EAAE;IAE/B,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;IACpE,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,2BAA2B,EAAE,CAAC;IAClE,IAAI,CAAC,SAAS;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;IACjD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,KAAK,CAAC;IACtC,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC;IACzC,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,SAAS,CAAC,CAAC;IAC9D,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,oBAAoB,IAAI,YAAY,EAAE;YAC9D,MAAM,EAAE,UAAU,CAAC,MAAM;YACzB,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,SAAS,EAAE,EAAE;SAClD,CAAC,CAAC;QACH,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;QAC9C,MAAM,IAAI,GAAY,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QACvC,MAAM,SAAS,GAAI,IAAkC,EAAE,IAAI,CAAC;QAC5D,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;QAChE,MAAM,MAAM,GAA4B,EAAE,CAAC;QAC3C,KAAK,MAAM,KAAK,IAAI,SAAS,EAAE,CAAC;YAC9B,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;gBAAE,SAAS;YAClD,MAAM,EAAE,GAAI,KAAiC,CAAC,EAAE,CAAC;YACjD,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,EAAE,CAAC,IAAI,EAAE,KAAK,EAAE;gBAAE,SAAS;YACzD,MAAM,cAAc,GAAG,qBAAqB,CAAC,KAAgC,CAAC,CAAC;YAC/E,MAAM,CAAC,IAAI,CAAC;gBACV,IAAI,EAAE,EAAE;gBACR,YAAY,EAAE,EAAE;gBAChB,GAAG,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,cAAc,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC9E,CAAC,CAAC;QACL,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAC9B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,CAAC;IACnC,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,KAAK,CAAC,CAAC;IACtB,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,CAAC,KAAK,UAAU,kCAAkC,CACtD,IAAY,EACZ,KAAyB,EACzB,OAA6B,EAAE;IAE/B,MAAM,KAAK,GAAG,KAAK,EAAE,IAAI,EAAE,IAAI,+BAA+B,CAAC;IAC/D,MAAM,MAAM,GAAG,MAAM,sBAAsB,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IACxD,IAAI,CAAC,MAAM,CAAC,EAAE;QAAE,OAAO,SAAS,CAAC;IACjC,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,CAAC;IAC1D,OAAO,KAAK,EAAE,gBAAgB,CAAC;AACjC,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC5C,IAAY,EACZ,OAA6B,EAAE;IAE/B,IAAI,CAAC,sBAAsB,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IAChD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,KAAK,CAAC;IACtC,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC;IACzC,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,SAAS,CAAC,CAAC;IAC9D,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,oBAAoB,IAAI,oBAAoB,EAAE;YACtE,MAAM,EAAE,UAAU,CAAC,MAAM;SAC1B,CAAC,CAAC;QACH,OAAO,GAAG,CAAC,EAAE,CAAC;IAChB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,KAAK,CAAC,CAAC;IACtB,CAAC;AACH,CAAC"}

package/server/dist/core/contract-version.d.ts

@@ -44,12 +44,27 @@ export declare const PROFILE_SCHEMA_VERSION = 1;
  * (it consumes `Object.values(requirements)` then inner `.id`/`.tests`), so v3
  * is a pure data-shape acknowledgement — no reader-logic change.
  *
+ * **v4** (shipwright monorepo campaign req3-04c-ac-identity-wave2, P3.2:
+ * "AC-scoped `@covers` tag grammar + test-traceability manifest v4") —
+ * additive AC-scoped test binding. A test link may carry an optional
+ * `ac_id` (e.g. `covers("FR-01.11/AC07")` → `"AC07"`), and a requirement
+ * node may carry an optional `acs` breakdown mirroring its own
+ * `tests`/`coverage` shape, scoped per AC. Both are OMITTED ENTIRELY when
+ * the requirement has no AC-scoped tag anywhere, so a repo with none of
+ * these tags yet emits a byte-identical v3-shaped body (only the
+ * `schema_version` const moves). This reader does not consume `ac_id` or
+ * `acs` — it still only reads `.id`/`.tests[<layer>][*].id/.layer/.resolved_from`,
+ * every one of which is unchanged and required in both v3 and v4 — so a
+ * v4 manifest with NO AC tags at all (a "v3-shaped bare FR tag" body) and
+ * one WITH AC tags both invert identically; frozen fixture in
+ * `traceability.v4-fixture.test.ts` pins both shapes.
+ *
  * A manifest declaring a HIGHER version is warned once (via
  * `checkContractVersion`) and still read best-effort — the inner shape the
  * reader consumes has been stable across the bumps seen so far, so an
  * ahead-of-us manifest still yields a useful index.
  */
-export declare const TRACEABILITY_SCHEMA_VERSION = 3;
+export declare const TRACEABILITY_SCHEMA_VERSION = 4;
 /**
  * Check a parsed artefact's declared version against the library's
  * known max. Logs one JSON warning per (artefact, path, version)

package/server/dist/core/contract-version.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"contract-version.d.ts","sourceRoot":"","sources":["../../src/core/contract-version.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH;;;;GAIG;AACH,eAAO,MAAM,2BAA2B,IAAI,CAAC;AAE7C;;;GAGG;AACH,eAAO,MAAM,sBAAsB,IAAI,CAAC;AAExC;;;;;;GAMG;AACH,eAAO,MAAM,sBAAsB,IAAI,CAAC;AAExC;;;;;;;;;;;;;;;;;GAiBG;AACH,eAAO,MAAM,2BAA2B,IAAI,CAAC;AAc7C;;;;;;;;;GASG;AACH,wBAAgB,oBAAoB,CAAC,KAAK,EAAE;IAC1C,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,OAAO,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,GAAG,OAAO,CAmDV;AAED,gEAAgE;AAChE,wBAAgB,cAAc,IAAI,IAAI,CAErC"}
+{"version":3,"file":"contract-version.d.ts","sourceRoot":"","sources":["../../src/core/contract-version.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH;;;;GAIG;AACH,eAAO,MAAM,2BAA2B,IAAI,CAAC;AAE7C;;;GAGG;AACH,eAAO,MAAM,sBAAsB,IAAI,CAAC;AAExC;;;;;;GAMG;AACH,eAAO,MAAM,sBAAsB,IAAI,CAAC;AAExC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,eAAO,MAAM,2BAA2B,IAAI,CAAC;AAc7C;;;;;;;;;GASG;AACH,wBAAgB,oBAAoB,CAAC,KAAK,EAAE;IAC1C,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,OAAO,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,GAAG,OAAO,CAmDV;AAED,gEAAgE;AAChE,wBAAgB,cAAc,IAAI,IAAI,CAErC"}

package/server/dist/core/contract-version.js

@@ -44,12 +44,27 @@ export const PROFILE_SCHEMA_VERSION = 1;
  * (it consumes `Object.values(requirements)` then inner `.id`/`.tests`), so v3
  * is a pure data-shape acknowledgement — no reader-logic change.
  *
+ * **v4** (shipwright monorepo campaign req3-04c-ac-identity-wave2, P3.2:
+ * "AC-scoped `@covers` tag grammar + test-traceability manifest v4") —
+ * additive AC-scoped test binding. A test link may carry an optional
+ * `ac_id` (e.g. `covers("FR-01.11/AC07")` → `"AC07"`), and a requirement
+ * node may carry an optional `acs` breakdown mirroring its own
+ * `tests`/`coverage` shape, scoped per AC. Both are OMITTED ENTIRELY when
+ * the requirement has no AC-scoped tag anywhere, so a repo with none of
+ * these tags yet emits a byte-identical v3-shaped body (only the
+ * `schema_version` const moves). This reader does not consume `ac_id` or
+ * `acs` — it still only reads `.id`/`.tests[<layer>][*].id/.layer/.resolved_from`,
+ * every one of which is unchanged and required in both v3 and v4 — so a
+ * v4 manifest with NO AC tags at all (a "v3-shaped bare FR tag" body) and
+ * one WITH AC tags both invert identically; frozen fixture in
+ * `traceability.v4-fixture.test.ts` pins both shapes.
+ *
  * A manifest declaring a HIGHER version is warned once (via
  * `checkContractVersion`) and still read best-effort — the inner shape the
  * reader consumes has been stable across the bumps seen so far, so an
  * ahead-of-us manifest still yields a useful index.
  */
-export const TRACEABILITY_SCHEMA_VERSION = 3;
+export const TRACEABILITY_SCHEMA_VERSION = 4;
 const warnedOnce = new Set();
 function warnKey(k) {
     return `${k.artefact}::${k.path}::${k.observedVersion}`;

package/server/dist/core/contract-version.js.map

@@ -1 +1 @@
-{"version":3,"file":"contract-version.js","sourceRoot":"","sources":["../../src/core/contract-version.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH;;;;GAIG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,CAAC;AAE7C;;;GAGG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC;AAExC;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC;AAExC;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,CAAC;AAQ7C,MAAM,UAAU,GAAG,IAAI,GAAG,EAAU,CAAC;AAErC,SAAS,OAAO,CAAC,CAAc;IAC7B,OAAO,GAAG,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,eAAe,EAAE,CAAC;AAC1D,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,oBAAoB,CAAC,KAMpC;IACC,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,GAAG,iBAAiB,EAAE,GACzE,KAAK,CAAC;IAER,uEAAuE;IACvE,sEAAsE;IACtE,gCAAgC;IAChC,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAE7D,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC;QAChE,gEAAgE;QAChE,MAAM,CAAC,GAAG,OAAO,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;QAC3D,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YACvB,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YAClB,OAAO,CAAC,IAAI,CACV,IAAI,CAAC,SAAS,CAAC;gBACb,KAAK,EAAE,MAAM;gBACb,KAAK,EAAE,4BAA4B;gBACnC,QAAQ;gBACR,IAAI;gBACJ,KAAK,EAAE,SAAS;gBAChB,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;aACxC,CAAC,CACH,CAAC;QACJ,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IAAI,QAAQ,GAAG,QAAQ,EAAE,CAAC;QACxB,MAAM,CAAC,GAAG,OAAO,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,eAAe,EAAE,QAAQ,EAAE,CAAC,CAAC;QACjE,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YACvB,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YAClB,OAAO,CAAC,IAAI,CACV,IAAI,CAAC,SAAS,CAAC;gBACb,KAAK,EAAE,MAAM;gBACb,KAAK,EAAE,wBAAwB;gBAC/B,QAAQ;gBACR,IAAI;gBACJ,KAAK,EAAE,SAAS;gBAChB,QAAQ;gBACR,QAAQ;gBACR,IAAI,EACF,+DAA+D;oBAC/D,mEAAmE;aACtE,CAAC,CACH,CAAC;QACJ,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,gEAAgE;AAChE,MAAM,UAAU,cAAc;IAC5B,UAAU,CAAC,KAAK,EAAE,CAAC;AACrB,CAAC"}
+{"version":3,"file":"contract-version.js","sourceRoot":"","sources":["../../src/core/contract-version.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH;;;;GAIG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,CAAC;AAE7C;;;GAGG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC;AAExC;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC;AAExC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,CAAC;AAQ7C,MAAM,UAAU,GAAG,IAAI,GAAG,EAAU,CAAC;AAErC,SAAS,OAAO,CAAC,CAAc;IAC7B,OAAO,GAAG,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,eAAe,EAAE,CAAC;AAC1D,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,oBAAoB,CAAC,KAMpC;IACC,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,SAAS,GAAG,iBAAiB,EAAE,GACzE,KAAK,CAAC;IAER,uEAAuE;IACvE,sEAAsE;IACtE,gCAAgC;IAChC,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAE7D,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,CAAC;QAChE,gEAAgE;QAChE,MAAM,CAAC,GAAG,OAAO,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;QAC3D,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YACvB,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YAClB,OAAO,CAAC,IAAI,CACV,IAAI,CAAC,SAAS,CAAC;gBACb,KAAK,EAAE,MAAM;gBACb,KAAK,EAAE,4BAA4B;gBACnC,QAAQ;gBACR,IAAI;gBACJ,KAAK,EAAE,SAAS;gBAChB,QAAQ,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;aACxC,CAAC,CACH,CAAC;QACJ,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IAAI,QAAQ,GAAG,QAAQ,EAAE,CAAC;QACxB,MAAM,CAAC,GAAG,OAAO,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,eAAe,EAAE,QAAQ,EAAE,CAAC,CAAC;QACjE,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YACvB,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YAClB,OAAO,CAAC,IAAI,CACV,IAAI,CAAC,SAAS,CAAC;gBACb,KAAK,EAAE,MAAM;gBACb,KAAK,EAAE,wBAAwB;gBAC/B,QAAQ;gBACR,IAAI;gBACJ,KAAK,EAAE,SAAS;gBAChB,QAAQ;gBACR,QAAQ;gBACR,IAAI,EACF,+DAA+D;oBAC/D,mEAAmE;aACtE,CAAC,CACH,CAAC;QACJ,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,gEAAgE;AAChE,MAAM,UAAU,cAAc;IAC5B,UAAU,CAAC,KAAK,EAAE,CAAC;AACrB,CAAC"}

package/server/dist/core/custom-profile-command-policy.d.ts

@@ -0,0 +1,6 @@
+/** Project-source command policy. Returns a refusal reason, or null when allowed. */
+export declare function projectCommandRefusal(command: string): string | null;
+/** User-source: any bare program, or an ABSOLUTE path - never a path relative to the repo. */
+export declare function userCommandRefusal(command: string, projectPath?: string): string | null;
+export declare function contained(root: string, target: string): boolean;
+//# sourceMappingURL=custom-profile-command-policy.d.ts.map

package/server/dist/core/custom-profile-command-policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"custom-profile-command-policy.d.ts","sourceRoot":"","sources":["../../src/core/custom-profile-command-policy.ts"],"names":[],"mappings":"AAsBA,qFAAqF;AACrF,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAqCpE;AAED,8FAA8F;AAC9F,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,MAAM,EAAE,WAAW,SAAK,GAAG,MAAM,GAAG,IAAI,CAwBnF;AAeD,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAG/D"}

package/server/dist/core/custom-profile-command-policy.js

@@ -0,0 +1,110 @@
+/*
+ * custom-profile-command-policy.ts — command policy for custom Preview profiles.
+ * Split out of custom-profile-loader.ts (300-line cap). A PROJECT-source command
+ * must be a bare allowlisted runner; a USER-source one may be any bare program or
+ * absolute path, never one pointing into the repo. Pure functions, no I/O beyond
+ * realpath of the program being checked.
+ */
+import { realpathSync } from "node:fs";
+import path from "node:path";
+import { PreviewSessionManager } from "./preview-session-manager.js";
+// `npx` is deliberately absent: it downloads and runs a package the repo names.
+const RUNNERS = new Set(["npm", "pnpm", "yarn", "bun", "node", "vite", "next", "python", "python3", "uv", "deno"]);
+const PACKAGE_MANAGERS = new Set(["npm", "pnpm", "yarn", "bun"]);
+const SCRIPT_VERBS = new Set(["run", "run-script", "dev", "start", "serve", "preview"]);
+// Interpreters take code from flags (-e, --eval=, -cprint, -Ic, --import data:...),
+// subcommands (deno eval, -m) and URLs. For these the only accepted shape is
+// "runner + plain file argument(s)": any dash-led argument, `eval`, or URL is refused.
+const INTERPRETERS = new Set(["node", "python", "python3", "deno", "uv"]);
+/** Project-source command policy. Returns a refusal reason, or null when allowed. */
+export function projectCommandRefusal(command) {
+    let argv;
+    try {
+        argv = PreviewSessionManager.tokenizeCommand(command);
+    }
+    catch (err) {
+        return err instanceof Error ? err.message : "unparseable command";
+    }
+    const exe = argv[0] ?? "";
+    if (/[\\/:]/.test(exe))
+        return "a project profile may not run a path or a program inside the repo";
+    const name = exe.toLowerCase().replace(/\.(cmd|exe|bat)$/, "");
+    if (!RUNNERS.has(name))
+        return `“${exe}” is not an allowed runner for a project profile`;
+    const args = argv.slice(1);
+    const argRefusal = runnerArgRefusal(args);
+    if (argRefusal)
+        return argRefusal;
+    if (PACKAGE_MANAGERS.has(name)) {
+        // Run a script the repo's own package.json declares - the same trust as `npm run dev`.
+        // exec / dlx / x / create fetch and run a package; -e / -c run inline code.
+        if (!SCRIPT_VERBS.has((args[0] ?? "").toLowerCase()))
+            return "a project profile may only run a package script (run, dev, start)";
+        const verb = (args[0] ?? "").toLowerCase();
+        const script = verb === "run" || verb === "run-script" ? (args[1] ?? "") : "dev";
+        if (!script || script.startsWith("-") || /^[a-z][a-z0-9+.-]*:/i.test(script) || /[\\/]/.test(script)) {
+            return "a project profile must name a plain package script";
+        }
+    }
+    if (INTERPRETERS.has(name)) {
+        if (args.some((a) => a.startsWith("-") || a.toLowerCase() === "eval" || /^[a-z][a-z0-9+.-]*:/i.test(a))) {
+            return "flags, eval and URLs are not allowed for an interpreter in a project profile";
+        }
+        // a script INSIDE the repo only: no absolute / drive / UNC / parent-relative file argument
+        if (args.some((a) => /^([\\/]|[a-z]:)/i.test(a) || a.split(/[\\/]/).includes(".."))) {
+            return "an interpreter may only run a script inside the project";
+        }
+        if (name === "uv" && (args[0] !== "run" || INTERPRETERS.has((args[1] ?? "").toLowerCase().replace(/\.(cmd|exe|bat)$/, "")))) {
+            return "uv may only run a script file in a project profile";
+        }
+    }
+    return null;
+}
+/** User-source: any bare program, or an ABSOLUTE path - never a path relative to the repo. */
+export function userCommandRefusal(command, projectPath = "") {
+    let argv;
+    try {
+        argv = PreviewSessionManager.tokenizeCommand(command);
+    }
+    catch (err) {
+        return err instanceof Error ? err.message : "unparseable command";
+    }
+    const exe = argv[0] ?? "";
+    if (/[\\/]/.test(exe) && !path.isAbsolute(exe))
+        return "a profile command must be a bare program or an absolute path";
+    // an absolute path that points INTO the repository is the same thing as a repo-relative one
+    if (projectPath && path.isAbsolute(exe)) {
+        let root = projectPath;
+        let target = exe;
+        try {
+            root = realpathSync(projectPath);
+            target = realpathSync(exe);
+        }
+        catch {
+            // a program that does not exist yet cannot be resolved - compare the literal paths
+        }
+        if (contained(root, target) || contained(path.resolve(projectPath), path.resolve(exe))) {
+            return "a profile command may not point into the project";
+        }
+    }
+    return null;
+}
+/** Arguments no runner may take: a path out of the project, a URL, or a config/eval flag. */
+function runnerArgRefusal(args) {
+    for (const a of args) {
+        if (/^([\\/]|[a-z]:)/i.test(a) || a.split(/[\\/]/).includes(".."))
+            return "a project profile argument may not be an absolute path or leave the project";
+        if (/^[a-z][a-z0-9+.-]*:/i.test(a) && !/^[a-z]:[\\/]/i.test(a))
+            return "a project profile argument may not be a URL";
+        const flag = a.toLowerCase().split("=")[0];
+        if (["-c", "--config", "-e", "--eval", "--print", "--require", "-r", "--import", "--loader", "--input-type"].includes(flag ?? "")) {
+            return "config, eval and preload flags are not allowed in a project profile";
+        }
+    }
+    return null;
+}
+export function contained(root, target) {
+    const rel = path.relative(root, target);
+    return rel !== "" && rel !== ".." && !rel.startsWith(".." + path.sep) && !path.isAbsolute(rel);
+}
+//# sourceMappingURL=custom-profile-command-policy.js.map

package/server/dist/core/custom-profile-command-policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"custom-profile-command-policy.js","sourceRoot":"","sources":["../../src/core/custom-profile-command-policy.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,qBAAqB,EAAE,MAAM,8BAA8B,CAAC;AAErE,gFAAgF;AAChF,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;AACnH,MAAM,gBAAgB,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC;AACjE,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,EAAE,YAAY,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC;AACxF,oFAAoF;AACpF,6EAA6E;AAC7E,uFAAuF;AACvF,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC;AAE1E,qFAAqF;AACrF,MAAM,UAAU,qBAAqB,CAAC,OAAe;IACnD,IAAI,IAAc,CAAC;IACnB,IAAI,CAAC;QACH,IAAI,GAAG,qBAAqB,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC;IACxD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,qBAAqB,CAAC;IACpE,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC1B,IAAI,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,mEAAmE,CAAC;IACnG,MAAM,IAAI,GAAG,GAAG,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,kBAAkB,EAAE,EAAE,CAAC,CAAC;IAC/D,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,GAAG,kDAAkD,CAAC;IACzF,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC3B,MAAM,UAAU,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;IAC1C,IAAI,UAAU;QAAE,OAAO,UAAU,CAAC;IAClC,IAAI,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;QAC/B,uFAAuF;QACvF,4EAA4E;QAC5E,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;YAAE,OAAO,mEAAmE,CAAC;QACjI,MAAM,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;QAC3C,MAAM,MAAM,GAAG,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,YAAY,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;QACjF,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,sBAAsB,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YACrG,OAAO,oDAAoD,CAAC;QAC9D,CAAC;IACH,CAAC;IACD,IAAI,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;QAC3B,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,KAAK,MAAM,IAAI,sBAAsB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YACxG,OAAO,8EAA8E,CAAC;QACxF,CAAC;QACD,2FAA2F;QAC3F,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;YACpF,OAAO,yDAAyD,CAAC;QACnE,CAAC;QACD,IAAI,IAAI,KAAK,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,KAAK,IAAI,YAAY,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,kBAAkB,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC5H,OAAO,oDAAoD,CAAC;QAC9D,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,8FAA8F;AAC9F,MAAM,UAAU,kBAAkB,CAAC,OAAe,EAAE,WAAW,GAAG,EAAE;IAClE,IAAI,IAAc,CAAC;IACnB,IAAI,CAAC;QACH,IAAI,GAAG,qBAAqB,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC;IACxD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,qBAAqB,CAAC;IACpE,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IAC1B,IAAI,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;QAAE,OAAO,8DAA8D,CAAC;IACtH,4FAA4F;IAC5F,IAAI,WAAW,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACxC,IAAI,IAAI,GAAG,WAAW,CAAC;QACvB,IAAI,MAAM,GAAG,GAAG,CAAC;QACjB,IAAI,CAAC;YACH,IAAI,GAAG,YAAY,CAAC,WAAW,CAAC,CAAC;YACjC,MAAM,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC;QAC7B,CAAC;QAAC,MAAM,CAAC;YACP,mFAAmF;QACrF,CAAC;QACD,IAAI,SAAS,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;YACvF,OAAO,kDAAkD,CAAC;QAC5D,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,6FAA6F;AAC7F,SAAS,gBAAgB,CAAC,IAAc;IACtC,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;QACrB,IAAI,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;YAAE,OAAO,6EAA6E,CAAC;QACxJ,IAAI,sBAAsB,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC;YAAE,OAAO,6CAA6C,CAAC;QACrH,MAAM,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QAC3C,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,WAAW,EAAE,IAAI,EAAE,UAAU,EAAE,UAAU,EAAE,cAAc,CAAC,CAAC,QAAQ,CAAC,IAAI,IAAI,EAAE,CAAC,EAAE,CAAC;YAClI,OAAO,qEAAqE,CAAC;QAC/E,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,IAAY,EAAE,MAAc;IACpD,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACxC,OAAO,GAAG,KAAK,EAAE,IAAI,GAAG,KAAK,IAAI,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;AACjG,CAAC"}

package/server/dist/core/custom-profile-loader.d.ts

@@ -0,0 +1,34 @@
+import { projectCommandRefusal, userCommandRefusal } from "./custom-profile-command-policy.js";
+import type { PreviewProfile } from "./preview-session-manager.js";
+import { validateStackProfile, type StackProfileDeps } from "./stack-profiles.js";
+export { projectCommandRefusal, userCommandRefusal };
+export type ResolvedPreviewProfile = PreviewProfile & {
+    stack?: {
+        frontend?: unknown;
+    };
+};
+export interface PreviewProfileLookup {
+    profile: ResolvedPreviewProfile | null;
+    /** Why there is no profile (diagnostics only; never shown as a verdict). */
+    reason?: string;
+}
+export interface PreviewProfileResolverDeps {
+    /** Bundled-snapshot loader (the existing sync one). */
+    bundled: (name: string) => ResolvedPreviewProfile | null;
+    validate?: typeof validateStackProfile;
+    stack?: StackProfileDeps;
+    homeDir?: string;
+    now?: () => number;
+    /** Max concurrent resolver processes. */
+    maxConcurrent?: number;
+}
+export declare const POSITIVE_TTL_MS = 15000;
+export declare const NEGATIVE_TTL_MS = 30000;
+export declare function createPreviewProfileResolver(deps: PreviewProfileResolverDeps): {
+    /** `fresh` bypasses the cache (spawn re-resolves right before it runs). Never throws. */
+    resolve(name: string, projectPath: string, opts?: {
+        fresh?: boolean;
+    }): Promise<PreviewProfileLookup>;
+    clear(): void;
+};
+//# sourceMappingURL=custom-profile-loader.d.ts.map

package/server/dist/core/custom-profile-loader.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"custom-profile-loader.d.ts","sourceRoot":"","sources":["../../src/core/custom-profile-loader.ts"],"names":[],"mappings":"AAuBA,OAAO,EAAa,qBAAqB,EAAE,kBAAkB,EAAE,MAAM,oCAAoC,CAAC;AAC1G,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,8BAA8B,CAAC;AACnE,OAAO,EAAsB,oBAAoB,EAAE,KAAK,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAGtG,OAAO,EAAE,qBAAqB,EAAE,kBAAkB,EAAE,CAAC;AAErD,MAAM,MAAM,sBAAsB,GAAG,cAAc,GAAG;IAAE,KAAK,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,OAAO,CAAA;KAAE,CAAA;CAAE,CAAC;AAEzF,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,sBAAsB,GAAG,IAAI,CAAC;IACvC,4EAA4E;IAC5E,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,0BAA0B;IACzC,uDAAuD;IACvD,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,sBAAsB,GAAG,IAAI,CAAC;IACzD,QAAQ,CAAC,EAAE,OAAO,oBAAoB,CAAC;IACvC,KAAK,CAAC,EAAE,gBAAgB,CAAC;IACzB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IACnB,yCAAyC;IACzC,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,eAAO,MAAM,eAAe,QAAS,CAAC;AACtC,eAAO,MAAM,eAAe,QAAS,CAAC;AAwBtC,wBAAgB,4BAA4B,CAAC,IAAI,EAAE,0BAA0B;IAsGzE,yFAAyF;kBACrE,MAAM,eAAe,MAAM,SAAQ;QAAE,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE,GAAQ,OAAO,CAAC,oBAAoB,CAAC;aAkCtG,IAAI;EAIhB"}