create-interview-cockpit 0.13.0 → 0.15.0

package/template/server/src/index.ts

@@ -726,6 +726,7 @@ app.post("/api/questions/:questionId/save-code-snippet", async (req, res) => {
       | "user"
       | "ai"
       | "sandbox"
+      | "browser-security"
       | "infra"
       | "react"
       | "nextjs"
@@ -738,6 +739,7 @@ app.post("/api/questions/:questionId/save-code-snippet", async (req, res) => {
     origin !== "user" &&
     origin !== "ai" &&
     origin !== "sandbox" &&
+    origin !== "browser-security" &&
     origin !== "infra" &&
     origin !== "react" &&
     origin !== "nextjs" &&
@@ -745,7 +747,7 @@ app.post("/api/questions/:questionId/save-code-snippet", async (req, res) => {
   ) {
     return res.status(400).json({
       error:
-        "origin must be 'user', 'ai', 'sandbox', 'infra', 'react', 'nextjs', or 'module-federation'",
+        "origin must be 'user', 'ai', 'sandbox', 'browser-security', 'infra', 'react', 'nextjs', or 'module-federation'",
     });
   }
   try {
@@ -2589,17 +2591,19 @@ function getModuleFederationCommandEnv(
   sandbox: ModuleFederationSandboxEntry,
 ): NodeJS.ProcessEnv {
   const hostPort = new URL(sandbox.appUrls.host).port;
-  const profilePort = new URL(sandbox.appUrls.profile).port;
-  const checkoutPort = new URL(sandbox.appUrls.checkout).port;
-
-  return {
+  const env: NodeJS.ProcessEnv = {
     ...process.env,
     HOST_PORT: hostPort,
-    PROFILE_PORT: profilePort,
-    CHECKOUT_PORT: checkoutPort,
     MF_SANDBOX_ID: sandbox.id,
     npm_config_update_notifier: "false",
   };
+  if (sandbox.appUrls.profile)
+    env.PROFILE_PORT = new URL(sandbox.appUrls.profile).port;
+  if (sandbox.appUrls.checkout)
+    env.CHECKOUT_PORT = new URL(sandbox.appUrls.checkout).port;
+  if (sandbox.appUrls.mfeAuth)
+    env.MFE_AUTH_PORT = new URL(sandbox.appUrls.mfeAuth).port;
+  return env;
 }
 
 async function runStreamedCommand(
@@ -2883,6 +2887,51 @@ app.post("/api/nextjs/:id/update-files", async (req, res) => {
   res.json({ ok: true });
 });
 
+app.post("/api/nextjs/:id/command-stream", async (req, res) => {
+  const sb = nextSandboxes.get(req.params.id);
+
+  res.setHeader("Content-Type", "text/event-stream");
+  res.setHeader("Cache-Control", "no-cache");
+  res.setHeader("Connection", "keep-alive");
+  res.flushHeaders();
+
+  const send = (payload: unknown) => {
+    res.write(`data: ${JSON.stringify(payload)}\n\n`);
+  };
+
+  if (!sb) {
+    send({ type: "error", error: "Sandbox not found" });
+    res.end();
+    return;
+  }
+
+  const { command } = req.body as { command?: string };
+  if (typeof command !== "string" || !command.trim()) {
+    send({ type: "error", error: "command is required" });
+    res.end();
+    return;
+  }
+
+  try {
+    const parsed = parseReactLabCommand(command);
+    send({ type: "output", kind: "info", text: `$ ${command.trim()}\n` });
+    await runStreamedCommand(
+      npmCommand(),
+      parsed.args,
+      {
+        cwd: sb.dir,
+        env: { ...process.env, npm_config_update_notifier: "false" },
+      },
+      ({ kind, text }) => send({ type: "output", kind, text }),
+    );
+    send({ type: "complete" });
+  } catch (error: any) {
+    send({ type: "error", error: error?.message || "Command failed" });
+  }
+
+  res.end();
+});
+
 app.get("/api/nextjs/:id/status", (req, res) => {
   const sb = nextSandboxes.get(req.params.id);
   if (!sb) return res.json({ running: false });
@@ -2934,24 +2983,42 @@ app.post("/api/module-federation/start", async (req, res) => {
       logs,
     );
 
-    const [hostPort, profilePort, checkoutPort] = await getDistinctPorts(3);
-    const appUrls = {
+    // Detect isolated 2-app pattern (host + mfe-auth, no profile/checkout).
+    const isIsolated =
+      typeof files["apps/mfe-auth/package.json"] === "string" &&
+      typeof files["apps/checkout/package.json"] !== "string";
+
+    const ports = await getDistinctPorts(isIsolated ? 2 : 3);
+    const [hostPort] = ports;
+
+    const appUrls: Record<string, string> = {
       host: `http://localhost:${hostPort}`,
-      profile: `http://localhost:${profilePort}`,
-      checkout: `http://localhost:${checkoutPort}`,
     };
+    const spawnEnv: NodeJS.ProcessEnv = {
+      ...process.env,
+      HOST_PORT: String(hostPort),
+      MF_SANDBOX_ID: id,
+      npm_config_update_notifier: "false",
+    };
+
+    if (isIsolated) {
+      const [, mfeAuthPort] = ports;
+      appUrls.mfeAuth = `http://localhost:${mfeAuthPort}`;
+      spawnEnv.MFE_AUTH_PORT = String(mfeAuthPort);
+    } else {
+      const [, profilePort, checkoutPort] = ports;
+      appUrls.profile = `http://localhost:${profilePort}`;
+      appUrls.checkout = `http://localhost:${checkoutPort}`;
+      spawnEnv.PROFILE_PORT = String(profilePort);
+      spawnEnv.CHECKOUT_PORT = String(checkoutPort);
+    }
+
     const readyPorts = new Set<string>();
+    const requiredPorts = isIsolated ? 2 : 3;
 
     const child = spawn(npmCommand(), ["run", "dev"], {
       cwd: dir,
-      env: {
-        ...process.env,
-        HOST_PORT: String(hostPort),
-        PROFILE_PORT: String(profilePort),
-        CHECKOUT_PORT: String(checkoutPort),
-        MF_SANDBOX_ID: id,
-        npm_config_update_notifier: "false",
-      },
+      env: spawnEnv,
     });
 
     const entry: ModuleFederationSandboxEntry = {
@@ -2966,11 +3033,10 @@ app.post("/api/module-federation/start", async (req, res) => {
     };
 
     const markReady = (text: string) => {
-      if (text.includes(`localhost:${hostPort}`)) readyPorts.add("host");
-      if (text.includes(`localhost:${profilePort}`)) readyPorts.add("profile");
-      if (text.includes(`localhost:${checkoutPort}`))
-        readyPorts.add("checkout");
-      if (readyPorts.size === 3) {
+      for (const [key, url] of Object.entries(appUrls)) {
+        if (text.includes(new URL(url).host)) readyPorts.add(key);
+      }
+      if (readyPorts.size >= requiredPorts) {
         entry.ready = true;
       }
     };

package/template/server/src/storage.ts

@@ -59,6 +59,7 @@ export interface ContextFile {
   /** Distinguishes how this file was added. 'upload' = user-uploaded doc,
    *  'user' = code saved from Code Runner, 'ai' = AI-generated code block,
    *  'sandbox' = paired server+client sandbox saved as JSON,
+   *  'browser-security' = paired server+client security lab saved as JSON,
    *  'infra' = Terraform-style infra lab workspace saved as JSON,
    *  'react' = React + TypeScript lab workspace,
    *  'nextjs' = Next.js App Router lab workspace,
@@ -68,6 +69,7 @@ export interface ContextFile {
     | "ai"
     | "upload"
     | "sandbox"
+    | "browser-security"
     | "infra"
     | "react"
     | "nextjs"