@trops/dash-core 0.1.550 → 0.1.551

package/dist/electron/index.js

@@ -50460,6 +50460,53 @@ const LOCKDOWN_DISALLOWED_TOOLS = [
   "SlashCommand",
 ].join(",");
 
+/**
+ * Path to the e2e-only argv capture file. Only written when
+ * `process.env.DASH_E2E === "1"` (set by `e2e/helpers/electron-app.js`
+ * for Playwright runs). Production launches never set it, so no
+ * diagnostic is written on a real user's machine.
+ *
+ * The capture deterministically pins the chain ChatCore → IPC →
+ * cliController. Slice 18a's diagnostic revealed that the chain
+ * silently dropped `replaceSystemPrompt` and `disableTools` for
+ * months. Without an argv assertion, the next break would be
+ * invisible until a user filed a bug. With it, the e2e test
+ * `widget-builder-cli-flow.spec.js` reads this file and asserts the
+ * full lockdown flag set is present — fails immediately if any flag
+ * goes missing.
+ */
+const E2E_LAST_SPAWN_LOG_PATH = (() => {
+  const os = require$$2$1;
+  const path = require$$1$1;
+  return path.join(os.tmpdir(), "dash-cli-last-spawn.e2e.json");
+})();
+
+/**
+ * Slice 18b — gated argv capture. No-op outside e2e mode.
+ *
+ * Captures argv only (NOT env values, NOT env keys — production users
+ * are protected by the env-var gate; we don't need the keys-only
+ * privacy hedge anymore since this never runs for them).
+ */
+function captureLastSpawnArgsForE2E({ args, disableTools = false } = {}) {
+  if (process.env.DASH_E2E !== "1") return;
+  try {
+    const fs = require("fs");
+    const payload = {
+      ts: Date.now(),
+      disableTools: disableTools === true,
+      args: Array.isArray(args) ? args.slice() : [],
+    };
+    fs.writeFileSync(
+      E2E_LAST_SPAWN_LOG_PATH,
+      JSON.stringify(payload, null, 2),
+      { encoding: "utf8" },
+    );
+  } catch (_e) {
+    // Capture must NEVER break the spawn.
+  }
+}
+
 /**
  * Build the argv array for spawning the Claude Code CLI.
  *
@@ -50758,6 +50805,8 @@ const cliController$2 = {
       }
       const spawnCmd = IS_WINDOWS ? windowsQuote(binaryPath) : binaryPath;
       const spawnArgs = IS_WINDOWS ? args.map(windowsQuote) : args;
+      // No-op outside e2e mode (gated on process.env.DASH_E2E === "1").
+      captureLastSpawnArgsForE2E({ args, disableTools });
       const child = spawn(spawnCmd, spawnArgs, spawnOpts);
 
       activeProcesses.set(requestId, child);
@@ -51079,6 +51128,7 @@ cliController$3.exports.buildClaudeCliArgs = buildClaudeCliArgs;
 cliController$3.exports.resolveLockdownCwd = resolveLockdownCwd;
 cliController$3.exports.resolveLockdownPluginDir = resolveLockdownPluginDir;
 cliController$3.exports.LOCKDOWN_DISALLOWED_TOOLS = LOCKDOWN_DISALLOWED_TOOLS;
+cliController$3.exports.E2E_LAST_SPAWN_LOG_PATH = E2E_LAST_SPAWN_LOG_PATH;
 
 var cliControllerExports = cliController$3.exports;