@svenroth-ai/shipwright 0.27.0 → 0.29.0

package/server/dist/core/session-info/types.d.ts

@@ -0,0 +1,77 @@
+export interface SessionContextInfo {
+    /** input + cache_read + cache_creation of the newest non-synthetic assistant message; null when none seen. */
+    tokens: number | null;
+    model: string | null;
+    /** Timestamp of the message the numbers came from. */
+    at: string | null;
+    /** A compaction happened AFTER that message, so `tokens` is stale. */
+    compactedSince: boolean;
+    /** The compactor's own post-compaction estimate; only set while `compactedSince`, null when it recorded none. */
+    tokensAfterCompaction: number | null;
+}
+export interface SessionCompactionInfo {
+    /** Compactions seen inside the scanned window. */
+    count: number;
+    last: {
+        at: string | null;
+        preTokens: number | null;
+        postTokens: number | null;
+    } | null;
+}
+export interface SessionOutputFile {
+    /** Absolute, normalised against the cwd of the entry that wrote it. */
+    path: string;
+    tool: "Write" | "Edit" | "NotebookEdit" | "MultiEdit";
+    firstAt: string | null;
+    lastAt: string | null;
+    /** Agent id when a subagent produced it; null for the session itself. */
+    agentId: string | null;
+}
+export interface SessionRemoteControl {
+    /** A LIVE process of this session currently has a bridge session. */
+    active: boolean;
+    /** A bridge-session record exists in the JSONL — it was enabled at least once. */
+    onceEnabled: boolean;
+    pid: number | null;
+}
+export type SubagentState = "running" | "finished" | "finished-stale";
+export interface SessionSubagent {
+    agentId: string;
+    agentType: string | null;
+    description: string | null;
+    toolUseId: string | null;
+    spawnDepth: number | null;
+    /** Set for depth-2 agents (a reviewer spawned by a sub-iterate). */
+    parentAgentId: string | null;
+    model: string | null;
+    prompt: string | null;
+    /** Last assistant text of the agent's own file (the notification's result is often just a pointer). */
+    answer: string | null;
+    startedAt: string | null;
+    endedAt: string | null;
+    durationMs: number | null;
+    state: SubagentState;
+    /** completed | failed | killed | stopped, from the parent's task-notification; null without one. */
+    status: string | null;
+    tokens: number | null;
+    toolUses: number | null;
+}
+export interface SessionInfoScan {
+    /** True when the session file was larger than the scan window; older history is not reflected. */
+    truncated: boolean;
+    scannedBytes: number;
+    sizeBytes: number;
+    /** Outputs / subagents beyond the caps (MAX_OUTPUTS, MAX_SUBAGENTS) that were not returned. */
+    outputsTruncated: number;
+    subagentsTruncated: number;
+}
+export interface SessionInfo {
+    sessionUuid: string;
+    context: SessionContextInfo;
+    compaction: SessionCompactionInfo;
+    outputs: SessionOutputFile[];
+    remoteControl: SessionRemoteControl;
+    subagents: SessionSubagent[];
+    scan: SessionInfoScan;
+}
+//# sourceMappingURL=types.d.ts.map

package/server/dist/core/session-info/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/core/session-info/types.ts"],"names":[],"mappings":"AAaA,MAAM,WAAW,kBAAkB;IACjC,8GAA8G;IAC9G,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,sDAAsD;IACtD,EAAE,EAAE,MAAM,GAAG,IAAI,CAAC;IAClB,sEAAsE;IACtE,cAAc,EAAE,OAAO,CAAC;IACxB,iHAAiH;IACjH,qBAAqB,EAAE,MAAM,GAAG,IAAI,CAAC;CACtC;AAED,MAAM,WAAW,qBAAqB;IACpC,kDAAkD;IAClD,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE;QAAE,EAAE,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,GAAG,IAAI,CAAC;CACzF;AAED,MAAM,WAAW,iBAAiB;IAChC,uEAAuE;IACvE,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,OAAO,GAAG,MAAM,GAAG,cAAc,GAAG,WAAW,CAAC;IACtD,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,yEAAyE;IACzE,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;CACxB;AAED,MAAM,WAAW,oBAAoB;IACnC,qEAAqE;IACrE,MAAM,EAAE,OAAO,CAAC;IAChB,kFAAkF;IAClF,WAAW,EAAE,OAAO,CAAC;IACrB,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;CACpB;AAED,MAAM,MAAM,aAAa,GAAG,SAAS,GAAG,UAAU,GAAG,gBAAgB,CAAC;AAEtE,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,oEAAoE;IACpE,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,uGAAuG;IACvG,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,KAAK,EAAE,aAAa,CAAC;IACrB,oGAAoG;IACpG,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;CACzB;AAED,MAAM,WAAW,eAAe;IAC9B,kGAAkG;IAClG,SAAS,EAAE,OAAO,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,+FAA+F;IAC/F,gBAAgB,EAAE,MAAM,CAAC;IACzB,kBAAkB,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,WAAW;IAC1B,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,kBAAkB,CAAC;IAC5B,UAAU,EAAE,qBAAqB,CAAC;IAClC,OAAO,EAAE,iBAAiB,EAAE,CAAC;IAC7B,aAAa,EAAE,oBAAoB,CAAC;IACpC,SAAS,EAAE,eAAe,EAAE,CAAC;IAC7B,IAAI,EAAE,eAAe,CAAC;CACvB"}

package/server/dist/core/session-info/types.js

@@ -0,0 +1,14 @@
+/*
+ * Wire shapes of GET /api/external/tasks/:id/session-info (campaign
+ * mission-desktop-style, M2). READ-ONLY view derived from Claude's own files
+ * (CLAUDE.md DO-NOT #1) — nothing here is ever written back.
+ *
+ * Outputs are ATTEMPTED-then-not-rejected writes: a tool_use whose result is_error is retracted.
+ * Runtime: Claude only (Codex tasks have no such JSONL and answer status "missing").
+ *
+ * Deliberately absent: a context PERCENTAGE and a context WINDOW SIZE. The
+ * window depends on the model/plan and is not recorded in the JSONL; inventing
+ * one would be a guess dressed as a fact. Consumers show the raw token count.
+ */
+export {};
+//# sourceMappingURL=types.js.map

package/server/dist/core/session-info/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/core/session-info/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG"}

package/server/dist/core/settings-reader.d.ts

@@ -0,0 +1,18 @@
+import type { GlobalSettings } from "../types/settings.js";
+export declare const DEFAULT_GLOBAL_SETTINGS: GlobalSettings;
+export interface SettingsReaderDeps {
+    readFile: (path: string, encoding: string) => Promise<string>;
+    existsSync: (path: string) => boolean;
+}
+/**
+ * Back-compat for the `codexRuntimeDefault` -> `runtimeDefault` rename
+ * (Codextender integration, Part B.1). A settings.json written before the
+ * rename has `codexRuntimeDefault` but no `runtimeDefault`; without this,
+ * the parsed value is silently dropped on read and an operator's configured
+ * default reverts to "claude". Read-side only — a PUT always writes
+ * whatever field name the caller sends, so a re-save completes the
+ * migration on disk.
+ */
+export declare function migrateLegacyRuntimeDefault(parsed: Record<string, unknown>): Record<string, unknown>;
+export declare function readGlobalSettings(settingsPath: string, deps: SettingsReaderDeps): Promise<GlobalSettings>;
+//# sourceMappingURL=settings-reader.d.ts.map

package/server/dist/core/settings-reader.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"settings-reader.d.ts","sourceRoot":"","sources":["../../src/core/settings-reader.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAE3D,eAAO,MAAM,uBAAuB,EAAE,cAKrC,CAAC;AAEF,MAAM,WAAW,kBAAkB;IACjC,QAAQ,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IAC9D,UAAU,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC;CACvC;AAED;;;;;;;;GAQG;AACH,wBAAgB,2BAA2B,CACzC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC9B,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAKzB;AAED,wBAAsB,kBAAkB,CACtC,YAAY,EAAE,MAAM,EACpB,IAAI,EAAE,kBAAkB,GACvB,OAAO,CAAC,cAAc,CAAC,CAYzB"}

package/server/dist/core/settings-reader.js

@@ -0,0 +1,40 @@
+export const DEFAULT_GLOBAL_SETTINGS = {
+    port: 3847,
+    maxConcurrent: 3,
+    heartbeatIntervalMs: 30000,
+    runtimeDefault: "claude",
+};
+/**
+ * Back-compat for the `codexRuntimeDefault` -> `runtimeDefault` rename
+ * (Codextender integration, Part B.1). A settings.json written before the
+ * rename has `codexRuntimeDefault` but no `runtimeDefault`; without this,
+ * the parsed value is silently dropped on read and an operator's configured
+ * default reverts to "claude". Read-side only — a PUT always writes
+ * whatever field name the caller sends, so a re-save completes the
+ * migration on disk.
+ */
+export function migrateLegacyRuntimeDefault(parsed) {
+    if (parsed.runtimeDefault !== undefined)
+        return parsed;
+    const legacy = parsed.codexRuntimeDefault;
+    if (legacy !== "claude" && legacy !== "codex")
+        return parsed;
+    return { ...parsed, runtimeDefault: legacy };
+}
+export async function readGlobalSettings(settingsPath, deps) {
+    if (!deps.existsSync(settingsPath))
+        return { ...DEFAULT_GLOBAL_SETTINGS };
+    try {
+        const content = await deps.readFile(settingsPath, "utf-8");
+        if (!content.trim())
+            return { ...DEFAULT_GLOBAL_SETTINGS };
+        return {
+            ...DEFAULT_GLOBAL_SETTINGS,
+            ...migrateLegacyRuntimeDefault(JSON.parse(content)),
+        };
+    }
+    catch {
+        return { ...DEFAULT_GLOBAL_SETTINGS };
+    }
+}
+//# sourceMappingURL=settings-reader.js.map

package/server/dist/core/settings-reader.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"settings-reader.js","sourceRoot":"","sources":["../../src/core/settings-reader.ts"],"names":[],"mappings":"AAYA,MAAM,CAAC,MAAM,uBAAuB,GAAmB;IACrD,IAAI,EAAE,IAAI;IACV,aAAa,EAAE,CAAC;IAChB,mBAAmB,EAAE,KAAK;IAC1B,cAAc,EAAE,QAAQ;CACzB,CAAC;AAOF;;;;;;;;GAQG;AACH,MAAM,UAAU,2BAA2B,CACzC,MAA+B;IAE/B,IAAI,MAAM,CAAC,cAAc,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC;IACvD,MAAM,MAAM,GAAG,MAAM,CAAC,mBAAmB,CAAC;IAC1C,IAAI,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,OAAO;QAAE,OAAO,MAAM,CAAC;IAC7D,OAAO,EAAE,GAAG,MAAM,EAAE,cAAc,EAAE,MAAM,EAAE,CAAC;AAC/C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,YAAoB,EACpB,IAAwB;IAExB,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,YAAY,CAAC;QAAE,OAAO,EAAE,GAAG,uBAAuB,EAAE,CAAC;IAC1E,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;QAC3D,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE;YAAE,OAAO,EAAE,GAAG,uBAAuB,EAAE,CAAC;QAC3D,OAAO;YACL,GAAG,uBAAuB;YAC1B,GAAG,2BAA2B,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;SACpD,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,GAAG,uBAAuB,EAAE,CAAC;IACxC,CAAC;AACH,CAAC"}

package/server/dist/core/shell-quote.d.ts

@@ -1,4 +1,33 @@
 export declare function qPs(v: string): string;
+/**
+ * PowerShell arg-quoting for text that may contain embedded newlines
+ * (multi-paragraph prompts) — used where `qPs()` alone is not safe.
+ *
+ * `qPs()` produces syntactically correct PowerShell (the tokenizer is
+ * quote-aware and does not get confused by content inside an open single-
+ * quoted string), but that is not sufficient here: PSReadLine (PowerShell 7)
+ * maintains its OWN multi-line edit buffer as input arrives, and when that
+ * input is delivered via pty keystroke injection (not a real interactive
+ * paste event) rather than typed by a human, a literal newline inside the
+ * still-open quoted string can corrupt that buffer — a trailing fragment of
+ * the string then gets parsed and executed as its own bare command once
+ * Enter is finally processed. Reproduced live against a real pwsh.exe pty
+ * (iterate-2026-09-19-codex-launch-powershell-chunk); confirmed independent
+ * of write-chunking (fails identically via one atomic `pty.write()`) and
+ * independent of bracketed-paste wrapping (PS7's bracketed-paste handling
+ * does not prevent it either) — the only thing that avoided it was removing
+ * every literal newline from the bytes actually sent to the pty.
+ *
+ * A value with no `\r`/`\n` takes the plain `qPs()` path unchanged (stays
+ * human-readable for manual copy/paste). A value containing either is
+ * Base64-encoded — the encoded text itself has no `\r`/`\n` by construction
+ * (RFC 4648 alphabet) — and wrapped in a PowerShell sub-expression that
+ * decodes it back to the exact original string at parse time, before the
+ * command it's embedded in ever runs. `$(...)` around a native-command
+ * argument passes its result as ONE argument regardless of embedded
+ * whitespace, so this is transparent to the receiving process.
+ */
+export declare function qPsMultiline(v: string): string;
 export declare function qCmd(v: string): string;
 export declare function qPosix(v: string): string;
 export declare function toPosixPath(p: string): string;

package/server/dist/core/shell-quote.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"shell-quote.d.ts","sourceRoot":"","sources":["../../src/core/shell-quote.ts"],"names":[],"mappings":"AAYA,wBAAgB,GAAG,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,CAGrC;AAED,wBAAgB,IAAI,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,CAwBtC;AAED,wBAAgB,MAAM,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,CAGxC;AAED,wBAAgB,WAAW,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,CAE7C"}
+{"version":3,"file":"shell-quote.d.ts","sourceRoot":"","sources":["../../src/core/shell-quote.ts"],"names":[],"mappings":"AAYA,wBAAgB,GAAG,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,CAGrC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,wBAAgB,YAAY,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,CAI9C;AAED,wBAAgB,IAAI,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,CAwBtC;AAED,wBAAgB,MAAM,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,CAGxC;AAED,wBAAgB,WAAW,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,CAE7C"}

package/server/dist/core/shell-quote.js

@@ -13,6 +13,40 @@ export function qPs(v) {
     // PS single-quoted: embedded `'` → `''`.
     return `'${v.replace(/'/g, "''")}'`;
 }
+/**
+ * PowerShell arg-quoting for text that may contain embedded newlines
+ * (multi-paragraph prompts) — used where `qPs()` alone is not safe.
+ *
+ * `qPs()` produces syntactically correct PowerShell (the tokenizer is
+ * quote-aware and does not get confused by content inside an open single-
+ * quoted string), but that is not sufficient here: PSReadLine (PowerShell 7)
+ * maintains its OWN multi-line edit buffer as input arrives, and when that
+ * input is delivered via pty keystroke injection (not a real interactive
+ * paste event) rather than typed by a human, a literal newline inside the
+ * still-open quoted string can corrupt that buffer — a trailing fragment of
+ * the string then gets parsed and executed as its own bare command once
+ * Enter is finally processed. Reproduced live against a real pwsh.exe pty
+ * (iterate-2026-09-19-codex-launch-powershell-chunk); confirmed independent
+ * of write-chunking (fails identically via one atomic `pty.write()`) and
+ * independent of bracketed-paste wrapping (PS7's bracketed-paste handling
+ * does not prevent it either) — the only thing that avoided it was removing
+ * every literal newline from the bytes actually sent to the pty.
+ *
+ * A value with no `\r`/`\n` takes the plain `qPs()` path unchanged (stays
+ * human-readable for manual copy/paste). A value containing either is
+ * Base64-encoded — the encoded text itself has no `\r`/`\n` by construction
+ * (RFC 4648 alphabet) — and wrapped in a PowerShell sub-expression that
+ * decodes it back to the exact original string at parse time, before the
+ * command it's embedded in ever runs. `$(...)` around a native-command
+ * argument passes its result as ONE argument regardless of embedded
+ * whitespace, so this is transparent to the receiving process.
+ */
+export function qPsMultiline(v) {
+    if (!/[\r\n]/.test(v))
+        return qPs(v);
+    const b64 = Buffer.from(v, "utf8").toString("base64");
+    return `$([System.Text.Encoding]::UTF8.GetString([System.Convert]::FromBase64String(${qPs(b64)})))`;
+}
 export function qCmd(v) {
     // cmd.exe double-quoted argument, escaped per CommandLineToArgvW (the prior
     // `"${v.replace(/"/g,'\\"')}"` left backslashes unescaped — CodeQL

package/server/dist/core/shell-quote.js.map

@@ -1 +1 @@
-{"version":3,"file":"shell-quote.js","sourceRoot":"","sources":["../../src/core/shell-quote.ts"],"names":[],"mappings":"AAAA,4EAA4E;AAC5E,mBAAmB;AACnB,EAAE;AACF,gFAAgF;AAChF,4EAA4E;AAC5E,+EAA+E;AAC/E,gFAAgF;AAChF,8EAA8E;AAC9E,6EAA6E;AAC7E,8EAA8E;AAC9E,oCAAoC;AAEpC,MAAM,UAAU,GAAG,CAAC,CAAS;IAC3B,yCAAyC;IACzC,OAAO,IAAI,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC;AACtC,CAAC;AAED,MAAM,UAAU,IAAI,CAAC,CAAS;IAC5B,4EAA4E;IAC5E,mEAAmE;IACnE,+EAA+E;IAC/E,4EAA4E;IAC5E,6EAA6E;IAC7E,qEAAqE;IACrE,8EAA8E;IAC9E,IAAI,GAAG,GAAG,GAAG,CAAC;IACd,IAAI,kBAAkB,GAAG,CAAC,CAAC;IAC3B,KAAK,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC;QACnB,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC;YAChB,kBAAkB,IAAI,CAAC,CAAC;YACxB,SAAS;QACX,CAAC;QACD,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YACf,GAAG,IAAI,IAAI,CAAC,MAAM,CAAC,kBAAkB,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,GAAG,CAAC;QACvD,CAAC;aAAM,CAAC;YACN,GAAG,IAAI,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC,GAAG,EAAE,CAAC;QAC9C,CAAC;QACD,kBAAkB,GAAG,CAAC,CAAC;IACzB,CAAC;IACD,GAAG,IAAI,IAAI,CAAC,MAAM,CAAC,kBAAkB,GAAG,CAAC,CAAC,GAAG,GAAG,CAAC;IACjD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,MAAM,CAAC,CAAS;IAC9B,qCAAqC;IACrC,OAAO,IAAI,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC;AACzC,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,CAAS;IACnC,OAAO,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;AAC/B,CAAC"}
+{"version":3,"file":"shell-quote.js","sourceRoot":"","sources":["../../src/core/shell-quote.ts"],"names":[],"mappings":"AAAA,4EAA4E;AAC5E,mBAAmB;AACnB,EAAE;AACF,gFAAgF;AAChF,4EAA4E;AAC5E,+EAA+E;AAC/E,gFAAgF;AAChF,8EAA8E;AAC9E,6EAA6E;AAC7E,8EAA8E;AAC9E,oCAAoC;AAEpC,MAAM,UAAU,GAAG,CAAC,CAAS;IAC3B,yCAAyC;IACzC,OAAO,IAAI,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC;AACtC,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,MAAM,UAAU,YAAY,CAAC,CAAS;IACpC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC;IACrC,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACtD,OAAO,+EAA+E,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC;AACtG,CAAC;AAED,MAAM,UAAU,IAAI,CAAC,CAAS;IAC5B,4EAA4E;IAC5E,mEAAmE;IACnE,+EAA+E;IAC/E,4EAA4E;IAC5E,6EAA6E;IAC7E,qEAAqE;IACrE,8EAA8E;IAC9E,IAAI,GAAG,GAAG,GAAG,CAAC;IACd,IAAI,kBAAkB,GAAG,CAAC,CAAC;IAC3B,KAAK,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC;QACnB,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC;YAChB,kBAAkB,IAAI,CAAC,CAAC;YACxB,SAAS;QACX,CAAC;QACD,IAAI,EAAE,KAAK,GAAG,EAAE,CAAC;YACf,GAAG,IAAI,IAAI,CAAC,MAAM,CAAC,kBAAkB,GAAG,CAAC,GAAG,CAAC,CAAC,GAAG,GAAG,CAAC;QACvD,CAAC;aAAM,CAAC;YACN,GAAG,IAAI,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC,GAAG,EAAE,CAAC;QAC9C,CAAC;QACD,kBAAkB,GAAG,CAAC,CAAC;IACzB,CAAC;IACD,GAAG,IAAI,IAAI,CAAC,MAAM,CAAC,kBAAkB,GAAG,CAAC,CAAC,GAAG,GAAG,CAAC;IACjD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,UAAU,MAAM,CAAC,CAAS;IAC9B,qCAAqC;IACrC,OAAO,IAAI,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC;AACzC,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,CAAS;IACnC,OAAO,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;AAC/B,CAAC"}

package/server/dist/core/stack-profiles-create.d.ts

@@ -0,0 +1,31 @@
+import { type StackProfileDeps } from "./stack-profiles.js";
+export type StackProfileScope = "project" | "user";
+export type CreateOutcome = {
+    status: "created";
+    name: string;
+    path: string;
+} | {
+    status: "invalid-request";
+    reason: string;
+} | {
+    status: "exists";
+    reason: string;
+} | {
+    status: "failed";
+    reason: string;
+};
+export interface CreateStackProfileInput {
+    from: string;
+    name: string;
+    scope: StackProfileScope;
+    /** Required for scope "project" (destination). For scope "user" it only widens the
+     *  collision check + validation to that project's own profiles. */
+    projectRoot?: string;
+}
+export interface CreateStackProfileDeps extends StackProfileDeps {
+    userProfilesDir?: string;
+}
+export declare function userProfilesDir(deps?: Pick<CreateStackProfileDeps, "userProfilesDir" | "homeDir">): string;
+export declare function validateNewProfileName(name: unknown): string | null;
+export declare function createStackProfileFromBundled(input: CreateStackProfileInput, deps?: CreateStackProfileDeps): Promise<CreateOutcome>;
+//# sourceMappingURL=stack-profiles-create.d.ts.map

package/server/dist/core/stack-profiles-create.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"stack-profiles-create.d.ts","sourceRoot":"","sources":["../../src/core/stack-profiles-create.ts"],"names":[],"mappings":"AAoBA,OAAO,EAKL,KAAK,gBAAgB,EACtB,MAAM,qBAAqB,CAAC;AAM7B,MAAM,MAAM,iBAAiB,GAAG,SAAS,GAAG,MAAM,CAAC;AAEnD,MAAM,MAAM,aAAa,GACrB;IAAE,MAAM,EAAE,SAAS,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GACjD;IAAE,MAAM,EAAE,iBAAiB,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAC7C;IAAE,MAAM,EAAE,QAAQ,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GACpC;IAAE,MAAM,EAAE,QAAQ,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAEzC,MAAM,WAAW,uBAAuB;IACtC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,iBAAiB,CAAC;IACzB;uEACmE;IACnE,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,sBAAuB,SAAQ,gBAAgB;IAC9D,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAWD,wBAAgB,eAAe,CAAC,IAAI,GAAE,IAAI,CAAC,sBAAsB,EAAE,iBAAiB,GAAG,SAAS,CAAM,GAAG,MAAM,CAM9G;AAED,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI,CASnE;AAED,wBAAsB,6BAA6B,CACjD,KAAK,EAAE,uBAAuB,EAC9B,IAAI,GAAE,sBAA2B,GAChC,OAAO,CAAC,aAAa,CAAC,CAUxB"}

package/server/dist/core/stack-profiles-create.js

@@ -0,0 +1,128 @@
+/*
+ * stack-profiles-create.ts — "create a custom profile from a bundled one".
+ *
+ * The ONLY write surface of the stack-profile feature, and deliberately tiny:
+ * it copies a bundled profile's JSON under a NEW name into the project's
+ * `.shipwright/profiles/` or the user's `~/.shipwright/profiles/`
+ * (`SHIPWRIGHT_USER_PROFILES_DIR` overrides, same as the resolver). Rules:
+ *   - the name is validated against the resolver's own NAME_RE and must be
+ *     unused in EVERY source — shadowing a bundled profile is the resolver's
+ *     "same-name shadow" regression case, so the UI never creates one;
+ *   - `wx` open — an existing file is never overwritten (race-safe, no
+ *     check-then-write window);
+ *   - the result is validated through the resolver; a copy it rejects is
+ *     removed again, so a failed create leaves nothing behind.
+ */
+import { promises as fsp } from "node:fs";
+import os from "node:os";
+import path from "node:path";
+import { MAX_PROFILE_NAME_LENGTH, isProfileNameShape, listStackProfiles, validateStackProfile, } from "./stack-profiles.js";
+/** Names the resolver reserves as sentinels, never real profiles. */
+const RESERVED = new Set(["generic", "detecting", "custom"]);
+const WINDOWS_DEVICE = /^(con|prn|aux|nul|com[1-9]|lpt[1-9])$/;
+function samePath(a, b) {
+    if (typeof a !== "string")
+        return false;
+    const norm = (x) => (process.platform === "win32" ? path.resolve(x).toLowerCase() : path.resolve(x));
+    return norm(a) === norm(b);
+}
+/** Names being created right now - two concurrent creates of one name never both run. */
+const inFlight = new Set();
+export function userProfilesDir(deps = {}) {
+    return (deps.userProfilesDir ??
+        (process.env.SHIPWRIGHT_USER_PROFILES_DIR?.trim() || undefined) ??
+        path.join(deps.homeDir ?? os.homedir(), ".shipwright", "profiles"));
+}
+export function validateNewProfileName(name) {
+    if (typeof name === "string" && name.length > MAX_PROFILE_NAME_LENGTH) {
+        return `Keep the name under ${MAX_PROFILE_NAME_LENGTH + 1} characters.`;
+    }
+    if (!isProfileNameShape(name)) {
+        return "Use lowercase letters, digits and dashes only (it must start with a letter or digit).";
+    }
+    if (RESERVED.has(name) || WINDOWS_DEVICE.test(name))
+        return `“${name}” is reserved — pick another name.`;
+    return null;
+}
+export async function createStackProfileFromBundled(input, deps = {}) {
+    if (typeof input.name === "string" && inFlight.has(input.name)) {
+        return { status: "exists", reason: `“${input.name}” is already being created.` };
+    }
+    inFlight.add(input.name);
+    try {
+        return await createUnlocked(input, deps);
+    }
+    finally {
+        inFlight.delete(input.name);
+    }
+}
+async function createUnlocked(input, deps) {
+    const nameProblem = validateNewProfileName(input.name);
+    if (nameProblem)
+        return { status: "invalid-request", reason: nameProblem };
+    if (input.scope === "project" && !input.projectRoot) {
+        return { status: "invalid-request", reason: "A project profile needs a project." };
+    }
+    const listed = await listStackProfiles({ projectRoot: input.projectRoot }, deps);
+    if (listed.status !== "ok") {
+        return { status: "failed", reason: listed.status === "failed" ? listed.reason : "The profile resolver isn't available." };
+    }
+    const source = listed.report.profiles.find((p) => p.name === input.from && p.source === "bundled");
+    if (!source || !source.valid) {
+        return { status: "invalid-request", reason: `“${input.from}” isn't a usable built-in profile.` };
+    }
+    if (listed.report.profiles.some((p) => p.name === input.name)) {
+        return { status: "exists", reason: `A profile called “${input.name}” already exists.` };
+    }
+    let content;
+    try {
+        const data = JSON.parse(await fsp.readFile(source.path, "utf-8"));
+        content = `${JSON.stringify({ ...data, name: input.name }, null, 2)}\n`;
+    }
+    catch (err) {
+        return { status: "failed", reason: `Couldn't read the built-in profile: ${String(err)}` };
+    }
+    const dir = input.scope === "project"
+        ? path.join(input.projectRoot, ".shipwright", "profiles")
+        : userProfilesDir(deps);
+    const target = path.join(dir, `${input.name}.json`);
+    try {
+        await fsp.mkdir(dir, { recursive: true });
+        // DO-NOT #10: a symlinked .shipwright / profiles dir must not redirect the write.
+        if (input.scope === "project") {
+            const rel = path.relative(await fsp.realpath(input.projectRoot), await fsp.realpath(dir));
+            if (rel.startsWith("..") || path.isAbsolute(rel)) {
+                return { status: "failed", reason: "The project's profiles folder points outside the project, so nothing was written." };
+            }
+        }
+        await fsp.writeFile(target, content, { encoding: "utf-8", flag: "wx" });
+    }
+    catch (err) {
+        if (err.code === "EEXIST") {
+            return { status: "exists", reason: `A profile called “${input.name}” already exists.` };
+        }
+        return { status: "failed", reason: `Couldn't write the profile: ${String(err)}` };
+    }
+    const checked = await validateStackProfile({ name: input.name, projectRoot: input.projectRoot }, deps);
+    // A copy stays ONLY on the resolver's explicit "valid" for THIS very file. Any
+    // other outcome (invalid, unreachable, timeout, newer contract, or the resolver
+    // resolving the name to a different file) removes the file this request created
+    // (wx guarantees it is ours) and says exactly why.
+    const sameFile = checked.status === "ok" && checked.report.valid && "path" in checked.report && samePath(checked.report.path, target);
+    if (!sameFile) {
+        const why = checked.status !== "ok"
+            ? "the resolver couldn't be reached to check it"
+            : !checked.report.valid
+                ? "error" in checked.report ? checked.report.error : "the resolver rejected it"
+                : "the resolver resolved that name to a different profile";
+        try {
+            await fsp.rm(target, { force: true });
+        }
+        catch {
+            return { status: "failed", reason: `The new profile didn't validate (${why}) and couldn't be removed — delete ${target} by hand.` };
+        }
+        return { status: "failed", reason: `The new profile didn't validate (${why}), so it was removed again.` };
+    }
+    return { status: "created", name: input.name, path: target };
+}
+//# sourceMappingURL=stack-profiles-create.js.map

package/server/dist/core/stack-profiles-create.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"stack-profiles-create.js","sourceRoot":"","sources":["../../src/core/stack-profiles-create.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,QAAQ,IAAI,GAAG,EAAE,MAAM,SAAS,CAAC;AAC1C,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EACL,uBAAuB,EACvB,kBAAkB,EAClB,iBAAiB,EACjB,oBAAoB,GAErB,MAAM,qBAAqB,CAAC;AAE7B,qEAAqE;AACrE,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,CAAC,SAAS,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC,CAAC;AAC7D,MAAM,cAAc,GAAG,uCAAuC,CAAC;AAuB/D,SAAS,QAAQ,CAAC,CAAU,EAAE,CAAS;IACrC,IAAI,OAAO,CAAC,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IACxC,MAAM,IAAI,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;IAC7G,OAAO,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC;AAC7B,CAAC;AAED,yFAAyF;AACzF,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;AAEnC,MAAM,UAAU,eAAe,CAAC,OAAoE,EAAE;IACpG,OAAO,CACL,IAAI,CAAC,eAAe;QACpB,CAAC,OAAO,CAAC,GAAG,CAAC,4BAA4B,EAAE,IAAI,EAAE,IAAI,SAAS,CAAC;QAC/D,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,CAAC,CACnE,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,IAAa;IAClD,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,GAAG,uBAAuB,EAAE,CAAC;QACtE,OAAO,uBAAuB,uBAAuB,GAAG,CAAC,cAAc,CAAC;IAC1E,CAAC;IACD,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,EAAE,CAAC;QAC9B,OAAO,uFAAuF,CAAC;IACjG,CAAC;IACD,IAAI,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,IAAI,oCAAoC,CAAC;IACzG,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,6BAA6B,CACjD,KAA8B,EAC9B,OAA+B,EAAE;IAEjC,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QAC/D,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,KAAK,CAAC,IAAI,6BAA6B,EAAE,CAAC;IACnF,CAAC;IACD,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACzB,IAAI,CAAC;QACH,OAAO,MAAM,cAAc,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IAC3C,CAAC;YAAS,CAAC;QACT,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC9B,CAAC;AACH,CAAC;AAED,KAAK,UAAU,cAAc,CAC3B,KAA8B,EAC9B,IAA4B;IAE5B,MAAM,WAAW,GAAG,sBAAsB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACvD,IAAI,WAAW;QAAE,OAAO,EAAE,MAAM,EAAE,iBAAiB,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;IAC3E,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC;QACpD,OAAO,EAAE,MAAM,EAAE,iBAAiB,EAAE,MAAM,EAAE,oCAAoC,EAAE,CAAC;IACrF,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,iBAAiB,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,EAAE,IAAI,CAAC,CAAC;IACjF,IAAI,MAAM,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;QAC3B,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,uCAAuC,EAAE,CAAC;IAC5H,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI,IAAI,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC;IACnG,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;QAC7B,OAAO,EAAE,MAAM,EAAE,iBAAiB,EAAE,MAAM,EAAE,IAAI,KAAK,CAAC,IAAI,oCAAoC,EAAE,CAAC;IACnG,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QAC9D,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,qBAAqB,KAAK,CAAC,IAAI,mBAAmB,EAAE,CAAC;IAC1F,CAAC;IAED,IAAI,OAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,CAA4B,CAAC;QAC7F,OAAO,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,IAAI,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC;IAC1E,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,uCAAuC,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;IAC5F,CAAC;IAED,MAAM,GAAG,GACP,KAAK,CAAC,KAAK,KAAK,SAAS;QACvB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,WAAqB,EAAE,aAAa,EAAE,UAAU,CAAC;QACnE,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC;IAC5B,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,IAAI,OAAO,CAAC,CAAC;IACpD,IAAI,CAAC;QACH,MAAM,GAAG,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC1C,kFAAkF;QAClF,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YAC9B,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,WAAqB,CAAC,EAAE,MAAM,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;YACpG,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;gBACjD,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,mFAAmF,EAAE,CAAC;YAC3H,CAAC;QACH,CAAC;QACD,MAAM,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAC1E,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACrD,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,qBAAqB,KAAK,CAAC,IAAI,mBAAmB,EAAE,CAAC;QAC1F,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,+BAA+B,MAAM,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;IACpF,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,oBAAoB,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,EAAE,IAAI,CAAC,CAAC;IACvG,+EAA+E;IAC/E,gFAAgF;IAChF,gFAAgF;IAChF,mDAAmD;IACnD,MAAM,QAAQ,GACZ,OAAO,CAAC,MAAM,KAAK,IAAI,IAAI,OAAO,CAAC,MAAM,CAAC,KAAK,IAAI,MAAM,IAAI,OAAO,CAAC,MAAM,IAAI,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IACvH,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,GAAG,GACP,OAAO,CAAC,MAAM,KAAK,IAAI;YACrB,CAAC,CAAC,8CAA8C;YAChD,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK;gBACrB,CAAC,CAAC,OAAO,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,0BAA0B;gBAC/E,CAAC,CAAC,wDAAwD,CAAC;QACjE,IAAI,CAAC;YACH,MAAM,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACxC,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,oCAAoC,GAAG,sCAAsC,MAAM,WAAW,EAAE,CAAC;QACtI,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,oCAAoC,GAAG,6BAA6B,EAAE,CAAC;IAC5G,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;AAC/D,CAAC"}

package/server/dist/core/stack-profiles.d.ts

@@ -0,0 +1,49 @@
+import { type CliChildSpawnFn } from "./cli-child-spawn.js";
+import { type RunFn } from "./readiness-probe.js";
+import { type StackProfileListReport, type StackProfileValidateReport } from "../types/stack-profile-contract.js";
+export declare const STACK_PROFILE_CLI_TIMEOUT_MS = 20000;
+/** Mirror of the resolver's NAME_RE + a filename-safe length cap. A name that
+ *  fails this never reaches argv (a leading `-` would parse as an option). */
+export declare const PROFILE_NAME_RE: RegExp;
+export declare const MAX_PROFILE_NAME_LENGTH = 64;
+export declare function isProfileNameShape(name: unknown): name is string;
+export type StackProfileOutcome<T> = {
+    status: "ok";
+    report: T;
+} | {
+    status: "unsupported-contract";
+    version: string;
+} | {
+    status: "engine-unavailable";
+    reason: string;
+    repairCommand: string;
+} | {
+    status: "failed";
+    reason: string;
+};
+export interface StackProfileDeps {
+    run?: RunFn;
+    spawn?: CliChildSpawnFn;
+    existsFn?: (p: string) => boolean;
+    homeDir?: string;
+    baseEnv?: NodeJS.ProcessEnv;
+    scriptOverride?: string;
+    timeoutMs?: number;
+}
+/** The cache-owned resolver CLI (`SHIPWRIGHT_RESOLVE_PROFILE_SCRIPT` overrides
+ *  the location — isolated E2E stacks run with an ephemeral HOME). */
+export declare function resolveProfileScript(deps?: Pick<StackProfileDeps, "existsFn" | "homeDir" | "scriptOverride">): string | null;
+export declare function listStackProfiles(input: {
+    projectRoot?: string;
+}, deps?: StackProfileDeps): Promise<StackProfileOutcome<StackProfileListReport>>;
+/** Validate one profile by NAME (resolved through the normal lookup order). A
+ *  profile the resolver rejects is `{valid:false}` data, not a transport failure. */
+export declare function validateStackProfile(input: {
+    name: string;
+    projectRoot?: string;
+}, deps?: StackProfileDeps): Promise<StackProfileOutcome<StackProfileValidateReport | {
+    valid: false;
+    name: string;
+    error: string;
+}>>;
+//# sourceMappingURL=stack-profiles.d.ts.map

package/server/dist/core/stack-profiles.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"stack-profiles.d.ts","sourceRoot":"","sources":["../../src/core/stack-profiles.ts"],"names":[],"mappings":"AAkBA,OAAO,EAAwB,KAAK,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAClF,OAAO,EAAiD,KAAK,KAAK,EAAE,MAAM,sBAAsB,CAAC;AAEjG,OAAO,EAEL,KAAK,sBAAsB,EAC3B,KAAK,0BAA0B,EAChC,MAAM,oCAAoC,CAAC;AAE5C,eAAO,MAAM,4BAA4B,QAAS,CAAC;AAEnD;8EAC8E;AAC9E,eAAO,MAAM,eAAe,QAAyB,CAAC;AACtD,eAAO,MAAM,uBAAuB,KAAK,CAAC;AAC1C,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,OAAO,GAAG,IAAI,IAAI,MAAM,CAEhE;AAED,MAAM,MAAM,mBAAmB,CAAC,CAAC,IAC7B;IAAE,MAAM,EAAE,IAAI,CAAC;IAAC,MAAM,EAAE,CAAC,CAAA;CAAE,GAC3B;IAAE,MAAM,EAAE,sBAAsB,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GACnD;IAAE,MAAM,EAAE,oBAAoB,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,aAAa,EAAE,MAAM,CAAA;CAAE,GACvE;IAAE,MAAM,EAAE,QAAQ,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAEzC,MAAM,WAAW,gBAAgB;IAC/B,GAAG,CAAC,EAAE,KAAK,CAAC;IACZ,KAAK,CAAC,EAAE,eAAe,CAAC;IACxB,QAAQ,CAAC,EAAE,CAAC,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC;IAClC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;IAC5B,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;sEACsE;AACtE,wBAAgB,oBAAoB,CAClC,IAAI,GAAE,IAAI,CAAC,gBAAgB,EAAE,UAAU,GAAG,SAAS,GAAG,gBAAgB,CAAM,GAC3E,MAAM,GAAG,IAAI,CAOf;AAoED,wBAAsB,iBAAiB,CACrC,KAAK,EAAE;IAAE,WAAW,CAAC,EAAE,MAAM,CAAA;CAAE,EAC/B,IAAI,GAAE,gBAAqB,GAC1B,OAAO,CAAC,mBAAmB,CAAC,sBAAsB,CAAC,CAAC,CAkBtD;AAED;qFACqF;AACrF,wBAAsB,oBAAoB,CACxC,KAAK,EAAE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,CAAA;CAAE,EAC7C,IAAI,GAAE,gBAAqB,GAC1B,OAAO,CAAC,mBAAmB,CAAC,0BAA0B,GAAG;IAAE,KAAK,EAAE,KAAK,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC,CAwB1G"}

package/server/dist/core/stack-profiles.js

@@ -0,0 +1,142 @@
+/*
+ * stack-profiles.ts — the READ-ONLY bridge to the monorepo's stack-profile
+ * resolver CLI (`shared/scripts/tools/resolve_profile.py list|validate --json`,
+ * cross-repo contract_version 1, mirrored in `types/stack-profile-contract.ts`).
+ * The WebUI never re-implements the lookup order (project → user → bundled) or
+ * the schema — it renders the resolver's verdict, exactly as the campaign DAG
+ * renders the scheduler's (`campaign-readiness.ts`, which this mirrors).
+ *
+ * Spawn discipline: `uv run --no-project --python ">=3.11"`, shell:false,
+ * fixed argv, honest engine-unavailable when uv / the script is absent — never
+ * a silent fallback to the bundled `server/profiles/` snapshot (that snapshot
+ * knows nothing of custom profiles, which is the point of this module).
+ */
+import { existsSync } from "node:fs";
+import os from "node:os";
+import path from "node:path";
+import { defaultCliChildSpawn } from "./cli-child-spawn.js";
+import { READINESS_REPAIR_COMMAND, shipwrightCacheRoot } from "./readiness-probe.js";
+import { resolveUv } from "./uv-runner.js";
+import { SUPPORTED_STACK_PROFILE_CONTRACT, } from "../types/stack-profile-contract.js";
+export const STACK_PROFILE_CLI_TIMEOUT_MS = 20_000;
+/** Mirror of the resolver's NAME_RE + a filename-safe length cap. A name that
+ *  fails this never reaches argv (a leading `-` would parse as an option). */
+export const PROFILE_NAME_RE = /^[a-z0-9][a-z0-9-]*$/;
+export const MAX_PROFILE_NAME_LENGTH = 64;
+export function isProfileNameShape(name) {
+    return typeof name === "string" && name.length <= MAX_PROFILE_NAME_LENGTH && PROFILE_NAME_RE.test(name);
+}
+/** The cache-owned resolver CLI (`SHIPWRIGHT_RESOLVE_PROFILE_SCRIPT` overrides
+ *  the location — isolated E2E stacks run with an ephemeral HOME). */
+export function resolveProfileScript(deps = {}) {
+    const exists = deps.existsFn ?? existsSync;
+    const candidate = deps.scriptOverride ??
+        process.env.SHIPWRIGHT_RESOLVE_PROFILE_SCRIPT ??
+        path.join(shipwrightCacheRoot(deps.homeDir ?? os.homedir()), "shared", "scripts", "tools", "resolve_profile.py");
+    return exists(candidate) ? candidate : null;
+}
+function lastLine(text) {
+    const lines = text.split(/\r?\n/).map((l) => l.trim()).filter(Boolean);
+    const err = [...lines].reverse().find((l) => l.startsWith("error:"));
+    return (err ?? lines.pop() ?? "").replace(/^error:\s*/, "");
+}
+function isEntryShape(e) {
+    return (isObject(e) &&
+        typeof e.name === "string" &&
+        typeof e.path === "string" &&
+        typeof e.valid === "boolean" &&
+        (e.source === "project" || e.source === "user" || e.source === "bundled"));
+}
+function isObject(v) {
+    return typeof v === "object" && v !== null && !Array.isArray(v);
+}
+/** Run one resolver subcommand. `cliArgs` positions are fixed; the only caller-supplied
+ *  values are a shape-checked profile name (`--name=...`) and a registry-sourced path. */
+async function runResolver(cliArgs, deps) {
+    const unavailable = (reason) => ({
+        status: "engine-unavailable",
+        reason,
+        repairCommand: READINESS_REPAIR_COMMAND,
+    });
+    const script = resolveProfileScript(deps);
+    if (!script)
+        return unavailable("The Shipwright profile resolver isn't installed.");
+    const uv = await resolveUv({ run: deps.run, homeDir: deps.homeDir, baseEnv: deps.baseEnv });
+    if (!uv)
+        return unavailable("uv isn't installed — profiles need it to run in a managed Python 3.11+.");
+    const spawn = deps.spawn ?? defaultCliChildSpawn;
+    const result = await spawn(uv.bin, ["run", "--no-project", "--python", ">=3.11", script, ...cliArgs], { timeoutMs: deps.timeoutMs ?? STACK_PROFILE_CLI_TIMEOUT_MS, env: uv.env });
+    if (result.code === -1)
+        return unavailable("uv couldn't start on this machine.");
+    if (result.spawnError === "timeout") {
+        return { status: "failed", reason: "Reading the profiles took too long and was stopped." };
+    }
+    return { stdout: result.stdout, code: result.code, stderr: result.stderr };
+}
+function isOutcome(v) {
+    return isObject(v) && typeof v.status === "string";
+}
+function parseJson(stdout) {
+    // `validate` prints a human line (`profile 'x': source=...`) before the JSON, so
+    // parse from the first line that STARTS with a brace - a brace inside that
+    // human line (a path, a name) must not be mistaken for the document.
+    const m = /^\{/m.exec(stdout);
+    if (!m)
+        return undefined;
+    try {
+        return JSON.parse(stdout.slice(m.index));
+    }
+    catch {
+        return undefined;
+    }
+}
+export async function listStackProfiles(input, deps = {}) {
+    const args = ["list", "--json", ...(input.projectRoot ? ["--project-root", input.projectRoot] : [])];
+    const ran = await runResolver(args, deps);
+    if (isOutcome(ran))
+        return ran;
+    if (ran.code !== 0)
+        return { status: "failed", reason: lastLine(ran.stderr) || "The profile resolver exited with an error." };
+    const parsed = parseJson(ran.stdout);
+    if (!isObject(parsed)) {
+        return { status: "failed", reason: "The profile resolver returned something unreadable." };
+    }
+    const version = parsed.contract_version;
+    if (version !== SUPPORTED_STACK_PROFILE_CONTRACT) {
+        return { status: "unsupported-contract", version: String(version) };
+    }
+    if (!Array.isArray(parsed.profiles) || !parsed.profiles.every(isEntryShape)) {
+        return { status: "failed", reason: "The profile resolver returned something unreadable." };
+    }
+    return { status: "ok", report: parsed };
+}
+/** Validate one profile by NAME (resolved through the normal lookup order). A
+ *  profile the resolver rejects is `{valid:false}` data, not a transport failure. */
+export async function validateStackProfile(input, deps = {}) {
+    if (!isProfileNameShape(input.name)) {
+        return { status: "ok", report: { valid: false, name: input.name, error: "That isn't a valid profile name." } };
+    }
+    const args = ["validate", "--json", `--name=${input.name}`, ...(input.projectRoot ? ["--project-root", input.projectRoot] : [])];
+    const ran = await runResolver(args, deps);
+    if (isOutcome(ran))
+        return ran;
+    if (ran.code !== 0) {
+        // 1/2/3 with the resolver's own "error:" line are verdicts (invalid / not found /
+        // bad JSON). Anything else (a crash traceback) is an outage, not "your profile is bad".
+        const verdict = [1, 2, 3].includes(ran.code) && /^error:/m.test(ran.stderr);
+        if (!verdict)
+            return { status: "failed", reason: lastLine(ran.stderr) || "The profile resolver crashed." };
+        return { status: "ok", report: { valid: false, name: input.name, error: lastLine(ran.stderr) || "The profile is not valid." } };
+    }
+    const parsed = parseJson(ran.stdout);
+    if (!isObject(parsed) || typeof parsed.valid !== "boolean") {
+        return { status: "failed", reason: "The profile resolver returned something unreadable." };
+    }
+    // `validate --json` carries no contract_version today; if upstream ever adds
+    // one, a different major must not be rendered as a green "valid".
+    if (parsed.contract_version !== undefined && parsed.contract_version !== SUPPORTED_STACK_PROFILE_CONTRACT) {
+        return { status: "unsupported-contract", version: String(parsed.contract_version) };
+    }
+    return { status: "ok", report: parsed };
+}
+//# sourceMappingURL=stack-profiles.js.map