litmus-cli 1.4.22 → 1.4.25

package/dist/lib/environment-checks.js

@@ -0,0 +1,324 @@
+import { existsSync, mkdirSync, mkdtempSync, readFileSync, rmSync, writeFileSync } from "fs";
+import os from "os";
+import path from "path";
+import { execSync } from "child_process";
+import { CLI_VERSION } from "./version.js";
+import { startTracker, trackerDiagnostics } from "./tracker.js";
+/** The `engines.node` floor in package.json; pinned to it by test. */
+export const NODE_MIN_MAJOR = 18;
+export const REINSTALL_COMMAND = "npm install -g litmus-cli@latest";
+/** How long the watcher smoke waits for the ready marker before calling the boot failed. */
+export const WATCHER_BOOT_TIMEOUT_MS = 6000;
+/** Registry document for the `latest` dist-tag. */
+export const NPM_LATEST_URL = "https://registry.npmjs.org/litmus-cli/latest";
+const REGISTRY_TIMEOUT_MS = 5000;
+const SERVER_TIMEOUT_MS = 8000;
+/** Above this the connection is reported as slow. Still `ok`: slowness is not a fix the candidate can apply. */
+const SERVER_SLOW_MS = 3000;
+// ── Node ─────────────────────────────────────────────────────────────
+export function parseNodeMajor(version) {
+    const m = /^v?(\d+)/.exec(version.trim());
+    return m ? Number(m[1]) : null;
+}
+export function checkNodeVersion(version = process.version) {
+    const major = parseNodeMajor(version);
+    if (major === null) {
+        return { name: "node", status: "warn", detail: `Node.js: version could not be read (${version})` };
+    }
+    if (major < NODE_MIN_MAJOR) {
+        return {
+            name: "node",
+            status: "fail",
+            detail: `Node.js: ${version} is too old. Install Node.js ${NODE_MIN_MAJOR} or newer from https://nodejs.org, then run "litmus setup-check" again.`,
+        };
+    }
+    return { name: "node", status: "ok", detail: `Node.js: ${version}` };
+}
+// ── CLI version against npm ──────────────────────────────────────────
+/**
+ * Numeric compare of dotted versions; prerelease suffixes are ignored, so
+ * `1.4.25-beta` compares as `1.4.25`. Returns <0 when a is behind b.
+ */
+export function compareVersions(a, b) {
+    const parse = (v) => v.replace(/^v/, "").split("-")[0].split(".").map((n) => Number(n) || 0);
+    const pa = parse(a);
+    const pb = parse(b);
+    const len = Math.max(pa.length, pb.length);
+    for (let i = 0; i < len; i++) {
+        const d = (pa[i] ?? 0) - (pb[i] ?? 0);
+        if (d !== 0)
+            return d;
+    }
+    return 0;
+}
+export async function fetchNpmLatest(fetchImpl = fetch) {
+    const res = await fetchImpl(NPM_LATEST_URL, { signal: AbortSignal.timeout(REGISTRY_TIMEOUT_MS) });
+    if (!res.ok)
+        throw new Error(`registry answered HTTP ${res.status}`);
+    const body = (await res.json());
+    if (typeof body?.version !== "string")
+        throw new Error("registry document has no version");
+    return body.version;
+}
+export async function checkCliVersion(opts = {}) {
+    const installed = opts.installed ?? CLI_VERSION;
+    let latest;
+    try {
+        latest = await (opts.fetchLatest ?? fetchNpmLatest)();
+    }
+    catch (err) {
+        // Could not verify is not a failure: the candidate's install may be
+        // current and the registry merely unreachable from where they sit.
+        return {
+            name: "cli_version",
+            status: "warn",
+            detail: `Litmus CLI: ${installed} installed (could not check npm for a newer version)`,
+            verbose: err instanceof Error ? err.message : String(err),
+        };
+    }
+    if (installed === "unknown") {
+        return { name: "cli_version", status: "warn", detail: `Litmus CLI: installed version could not be read (${latest} is current)` };
+    }
+    if (compareVersions(installed, latest) < 0) {
+        return {
+            name: "cli_version",
+            status: "fail",
+            detail: `Litmus CLI: ${installed} installed, ${latest} is current. Run "${REINSTALL_COMMAND}" and then "litmus setup-check" again.`,
+        };
+    }
+    return { name: "cli_version", status: "ok", detail: `Litmus CLI: ${installed} (current)` };
+}
+// ── Server reachability ──────────────────────────────────────────────
+/**
+ * Any HTTP answer from the API host counts as reachable — the question is
+ * whether this machine can talk to us at all, not whether the endpoint is
+ * healthy. `/api/health/db` is public (Clerk's middleware lets `/api/health/`
+ * through) and cheap.
+ */
+export async function checkServerReachable(opts) {
+    const now = opts.now ?? Date.now;
+    const url = `${opts.apiBase.replace(/\/$/, "")}/api/health/db`;
+    const started = now();
+    try {
+        const res = await (opts.fetchImpl ?? fetch)(url, { signal: AbortSignal.timeout(SERVER_TIMEOUT_MS) });
+        const ms = now() - started;
+        const slow = ms > SERVER_SLOW_MS;
+        return {
+            name: "server",
+            status: "ok",
+            detail: slow
+                ? `Server connection: OK but slow (${ms}ms). Downloads may take a while; a wired or stronger connection helps.`
+                : `Server connection: OK (${ms}ms)`,
+            verbose: `GET ${url} -> HTTP ${res.status}`,
+        };
+    }
+    catch (err) {
+        return {
+            name: "server",
+            status: "fail",
+            detail: `Server connection: FAILED. Check your internet connection (and any VPN or firewall), then run "litmus setup-check" again.`,
+            verbose: `GET ${url}: ${err instanceof Error ? err.message : String(err)}`,
+        };
+    }
+}
+// ── git ──────────────────────────────────────────────────────────────
+export function checkGit(exec = (cmd) => execSync(cmd, { stdio: "pipe", windowsHide: true }).toString()) {
+    try {
+        const out = exec("git --version").trim();
+        return { name: "git", status: "ok", detail: `Git: ${out.replace(/^git version\s*/i, "")}` };
+    }
+    catch (err) {
+        // `litmus init` runs `git init` and the tracker records commits, so a
+        // missing git is a real blocker with a one-step fix.
+        return {
+            name: "git",
+            status: "fail",
+            detail: "Git: not found. Install it from https://git-scm.com, then run \"litmus setup-check\" again.",
+            verbose: err instanceof Error ? err.message : String(err),
+        };
+    }
+}
+// ── Watcher boot smoke ───────────────────────────────────────────────
+/**
+ * Spawn the REAL watcher against a throwaway directory and wait for it to
+ * stamp `tracker.ready`, which it does only once its monitors are running
+ * (end of its module init). Then ask it to exit through the shutdown
+ * sentinel it already polls — never a signal at a pid — and delete the dir.
+ *
+ * Safe to run on a candidate's machine before any assessment exists: with no
+ * config the watcher has no token and no backend, so it uploads nothing, arms
+ * no auto-submit, and its capture nudge needs two scans ten minutes apart
+ * before it will notify. Everything it writes lands under the temp dir.
+ */
+export async function checkWatcherBoot(opts = {}) {
+    const timeoutMs = opts.timeoutMs ?? WATCHER_BOOT_TIMEOUT_MS;
+    let dir;
+    try {
+        dir = mkdtempSync(path.join(opts.tmpRoot ?? os.tmpdir(), "litmus-setup-check-"));
+    }
+    catch (err) {
+        return {
+            name: "watcher",
+            status: "fail",
+            detail: "Activity tracker: could not create a temporary folder to test in. Check that your temp directory is writable, then run \"litmus setup-check\" again.",
+            verbose: err instanceof Error ? err.message : String(err),
+        };
+    }
+    const litmusDir = path.join(dir, ".litmus");
+    const readyFile = path.join(litmusDir, "tracker.ready");
+    const logFile = path.join(litmusDir, "tracker.log");
+    const stderrTail = () => {
+        try {
+            return readFileSync(logFile, "utf8").trim().split("\n").slice(-12).join("\n");
+        }
+        catch {
+            return "(no tracker.log)";
+        }
+    };
+    let stopOutcome = null;
+    const annotate = (check) => {
+        if (!stopOutcome || stopOutcome.how === "sentinel" || stopOutcome.how === "never_started")
+            return check;
+        const note = stopOutcome.exited
+            ? `smoke watcher ignored the shutdown sentinel and was stopped with ${stopOutcome.how.toUpperCase()}`
+            : `smoke watcher pid could not be stopped; its folder ${dir} was left in place`;
+        return { ...check, verbose: check.verbose ? `${check.verbose}\n${note}` : note };
+    };
+    let result;
+    try {
+        mkdirSync(litmusDir, { recursive: true });
+        startTracker(dir);
+        const deadline = Date.now() + timeoutMs;
+        let ready = false;
+        let died = false;
+        while (Date.now() < deadline) {
+            if (existsSync(readyFile)) {
+                ready = true;
+                break;
+            }
+            const diag = trackerDiagnostics(dir);
+            if (diag.pid !== null && !diag.pidAlive) {
+                died = true;
+                break;
+            }
+            await new Promise((r) => setTimeout(r, 100));
+        }
+        if (ready) {
+            result = { name: "watcher", status: "ok", detail: "Activity tracker: starts and runs", verbose: stderrTail() };
+        }
+        else {
+            const tail = stderrTail();
+            const looksBlocked = /EPERM|EACCES|operation not permitted|access is denied/i.test(tail);
+            result = {
+                name: "watcher",
+                status: "fail",
+                detail: died
+                    ? looksBlocked
+                        ? "Activity tracker: exited during startup because something on this machine blocked it from writing files. Antivirus or endpoint-protection software is the usual cause; allow Node.js and the folder you will work in, then run \"litmus setup-check\" again."
+                        : "Activity tracker: exited during startup. Copy this whole output into an email to support@litmushiring.com."
+                    : "Activity tracker: did not finish starting in time. Run \"litmus setup-check\" again; if this line repeats, copy this whole output into an email to support@litmushiring.com.",
+                verbose: tail,
+            };
+        }
+    }
+    catch (err) {
+        result = {
+            name: "watcher",
+            status: "fail",
+            detail: "Activity tracker: could not be started. Copy this whole output into an email to support@litmushiring.com.",
+            verbose: `${err instanceof Error ? err.message : String(err)}\n${stderrTail()}`,
+        };
+    }
+    finally {
+        stopOutcome = await stopSmokeWatcher(dir);
+    }
+    return annotate(result);
+}
+/**
+ * Stop the smoke watcher and remove its directory, in that order and never
+ * the other way round (Greptile P1 on #2410): a watcher that wedged during
+ * init has not reached its sentinel poll and cannot see a shutdown file, so
+ * deleting the directory under it would orphan a live process with no
+ * control files left to stop it by.
+ *
+ * Escalation: the sentinel first (the watcher's own graceful path, and the
+ * only one that works on Windows without killing handlers), then SIGTERM,
+ * then SIGKILL. Signalling a pid is safe HERE where doctor refuses it: this
+ * pid was written by our own `startTracker` into a directory we created
+ * moments ago, so it is provably our child and not a recycled stranger.
+ * The directory is removed only once the process is gone; if it somehow
+ * survives even SIGKILL the directory is left in place so the files that
+ * name it are still there for a human.
+ */
+export async function stopSmokeWatcher(dir, opts = {}) {
+    const kill = opts.kill ?? ((pid, signal) => process.kill(pid, signal));
+    const graceMs = opts.graceMs ?? 3000;
+    const litmusDir = path.join(dir, ".litmus");
+    const alive = () => {
+        const diag = trackerDiagnostics(dir);
+        return diag.pid !== null && diag.pidAlive;
+    };
+    const waitForExit = async (ms) => {
+        const deadline = Date.now() + ms;
+        while (Date.now() < deadline) {
+            if (!alive())
+                return true;
+            await new Promise((r) => setTimeout(r, 100));
+        }
+        return !alive();
+    };
+    const remove = () => {
+        try {
+            rmSync(dir, { recursive: true, force: true });
+        }
+        catch { /* a still-held handle on Windows; the OS temp cleaner takes it */ }
+    };
+    if (!alive()) {
+        remove();
+        return { exited: true, how: "never_started" };
+    }
+    try {
+        writeFileSync(path.join(litmusDir, "shutdown"), "", "utf8");
+    }
+    catch { /* fall through to signals */ }
+    if (await waitForExit(graceMs)) {
+        remove();
+        return { exited: true, how: "sentinel" };
+    }
+    const pid = trackerDiagnostics(dir).pid;
+    if (pid !== null) {
+        try {
+            kill(pid, "SIGTERM");
+        }
+        catch { /* already gone */ }
+        if (await waitForExit(graceMs)) {
+            remove();
+            return { exited: true, how: "sigterm" };
+        }
+        try {
+            kill(pid, "SIGKILL");
+        }
+        catch { /* already gone */ }
+        if (await waitForExit(graceMs)) {
+            remove();
+            return { exited: true, how: "sigkill" };
+        }
+    }
+    return { exited: false, how: "survived" };
+}
+// ── Composition ──────────────────────────────────────────────────────
+/**
+ * The checks a candidate can act on before init, in the order they print.
+ * `apiBase` is the resolved frontend base (`resolveApiBase`).
+ */
+export async function runEnvironmentChecks(opts) {
+    const results = [];
+    const push = (c) => { results.push(c); opts.record(c); };
+    push(checkNodeVersion());
+    push(await checkCliVersion());
+    push(checkGit());
+    push(await checkServerReachable({ apiBase: opts.apiBase }));
+    push(await checkWatcherBoot());
+    return results;
+}
+//# sourceMappingURL=environment-checks.js.map

package/dist/lib/environment-checks.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"environment-checks.js","sourceRoot":"","sources":["../../src/lib/environment-checks.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,IAAI,CAAA;AAC5F,OAAO,EAAE,MAAM,IAAI,CAAA;AACnB,OAAO,IAAI,MAAM,MAAM,CAAA;AACvB,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAA;AACxC,OAAO,EAAE,WAAW,EAAE,MAAM,cAAc,CAAA;AAC1C,OAAO,EAAE,YAAY,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAA;AA2C/D,sEAAsE;AACtE,MAAM,CAAC,MAAM,cAAc,GAAG,EAAE,CAAA;AAEhC,MAAM,CAAC,MAAM,iBAAiB,GAAG,kCAAkC,CAAA;AAEnE,4FAA4F;AAC5F,MAAM,CAAC,MAAM,uBAAuB,GAAG,IAAK,CAAA;AAE5C,mDAAmD;AACnD,MAAM,CAAC,MAAM,cAAc,GAAG,8CAA8C,CAAA;AAE5E,MAAM,mBAAmB,GAAG,IAAK,CAAA;AACjC,MAAM,iBAAiB,GAAG,IAAK,CAAA;AAC/B,gHAAgH;AAChH,MAAM,cAAc,GAAG,IAAK,CAAA;AAE5B,wEAAwE;AAExE,MAAM,UAAU,cAAc,CAAC,OAAe;IAC5C,MAAM,CAAC,GAAG,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAA;IACzC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;AAChC,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,UAAkB,OAAO,CAAC,OAAO;IAChE,MAAM,KAAK,GAAG,cAAc,CAAC,OAAO,CAAC,CAAA;IACrC,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QACnB,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,uCAAuC,OAAO,GAAG,EAAE,CAAA;IACpG,CAAC;IACD,IAAI,KAAK,GAAG,cAAc,EAAE,CAAC;QAC3B,OAAO;YACL,IAAI,EAAE,MAAM;YACZ,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,YAAY,OAAO,gCAAgC,cAAc,yEAAyE;SACnJ,CAAA;IACH,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,YAAY,OAAO,EAAE,EAAE,CAAA;AACtE,CAAC;AAED,wEAAwE;AAExE;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAC,CAAS,EAAE,CAAS;IAClD,MAAM,KAAK,GAAG,CAAC,CAAS,EAAY,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAA;IAC9G,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC,CAAA;IACnB,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC,CAAA;IACnB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,CAAA;IAC1C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;QAC7B,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAA;QACrC,IAAI,CAAC,KAAK,CAAC;YAAE,OAAO,CAAC,CAAA;IACvB,CAAC;IACD,OAAO,CAAC,CAAA;AACV,CAAC;AAID,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,YAAuB,KAAK;IAC/D,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,cAAc,EAAE,EAAE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,mBAAmB,CAAC,EAAE,CAAC,CAAA;IACjG,IAAI,CAAC,GAAG,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,GAAG,CAAC,MAAM,EAAE,CAAC,CAAA;IACpE,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAA0B,CAAA;IACxD,IAAI,OAAO,IAAI,EAAE,OAAO,KAAK,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAA;IAC1F,OAAO,IAAI,CAAC,OAAO,CAAA;AACrB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,OAGlC,EAAE;IACJ,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,WAAW,CAAA;IAC/C,IAAI,MAAc,CAAA;IAClB,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,WAAW,IAAI,cAAc,CAAC,EAAE,CAAA;IACvD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,oEAAoE;QACpE,mEAAmE;QACnE,OAAO;YACL,IAAI,EAAE,aAAa;YACnB,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,eAAe,SAAS,sDAAsD;YACtF,OAAO,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;SAC1D,CAAA;IACH,CAAC;IACD,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QAC5B,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,oDAAoD,MAAM,cAAc,EAAE,CAAA;IAClI,CAAC;IACD,IAAI,eAAe,CAAC,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;QAC3C,OAAO;YACL,IAAI,EAAE,aAAa;YACnB,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,eAAe,SAAS,eAAe,MAAM,qBAAqB,iBAAiB,wCAAwC;SACpI,CAAA;IACH,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,eAAe,SAAS,YAAY,EAAE,CAAA;AAC5F,CAAC;AAED,wEAAwE;AAExE;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,IAI1C;IACC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAA;IAChC,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,gBAAgB,CAAA;IAC9D,MAAM,OAAO,GAAG,GAAG,EAAE,CAAA;IACrB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,IAAI,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,iBAAiB,CAAC,EAAE,CAAC,CAAA;QACpG,MAAM,EAAE,GAAG,GAAG,EAAE,GAAG,OAAO,CAAA;QAC1B,MAAM,IAAI,GAAG,EAAE,GAAG,cAAc,CAAA;QAChC,OAAO;YACL,IAAI,EAAE,QAAQ;YACd,MAAM,EAAE,IAAI;YACZ,MAAM,EAAE,IAAI;gBACV,CAAC,CAAC,mCAAmC,EAAE,wEAAwE;gBAC/G,CAAC,CAAC,0BAA0B,EAAE,KAAK;YACrC,OAAO,EAAE,OAAO,GAAG,YAAY,GAAG,CAAC,MAAM,EAAE;SAC5C,CAAA;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO;YACL,IAAI,EAAE,QAAQ;YACd,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,2HAA2H;YACnI,OAAO,EAAE,OAAO,GAAG,KAAK,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE;SAC3E,CAAA;IACH,CAAC;AACH,CAAC;AAED,wEAAwE;AAExE,MAAM,UAAU,QAAQ,CAAC,OAAgC,CAAC,GAAG,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC9H,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,eAAe,CAAC,CAAC,IAAI,EAAE,CAAA;QACxC,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,GAAG,CAAC,OAAO,CAAC,kBAAkB,EAAE,EAAE,CAAC,EAAE,EAAE,CAAA;IAC7F,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,sEAAsE;QACtE,qDAAqD;QACrD,OAAO;YACL,IAAI,EAAE,KAAK;YACX,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,6FAA6F;YACrG,OAAO,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;SAC1D,CAAA;IACH,CAAC;AACH,CAAC;AAED,wEAAwE;AAExE;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,OAGnC,EAAE;IACJ,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,uBAAuB,CAAA;IAC3D,IAAI,GAAW,CAAA;IACf,IAAI,CAAC;QACH,GAAG,GAAG,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,MAAM,EAAE,EAAE,qBAAqB,CAAC,CAAC,CAAA;IAClF,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO;YACL,IAAI,EAAE,SAAS;YACf,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,sJAAsJ;YAC9J,OAAO,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;SAC1D,CAAA;IACH,CAAC;IACD,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,CAAA;IAC3C,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,eAAe,CAAC,CAAA;IACvD,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,aAAa,CAAC,CAAA;IAEnD,MAAM,UAAU,GAAG,GAAW,EAAE;QAC9B,IAAI,CAAC;YACH,OAAO,YAAY,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAC/E,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,kBAAkB,CAAA;QAC3B,CAAC;IACH,CAAC,CAAA;IAED,IAAI,WAAW,GAAwD,IAAI,CAAA;IAC3E,MAAM,QAAQ,GAAG,CAAC,KAAuB,EAAoB,EAAE;QAC7D,IAAI,CAAC,WAAW,IAAI,WAAW,CAAC,GAAG,KAAK,UAAU,IAAI,WAAW,CAAC,GAAG,KAAK,eAAe;YAAE,OAAO,KAAK,CAAA;QACvG,MAAM,IAAI,GAAG,WAAW,CAAC,MAAM;YAC7B,CAAC,CAAC,oEAAoE,WAAW,CAAC,GAAG,CAAC,WAAW,EAAE,EAAE;YACrG,CAAC,CAAC,sDAAsD,GAAG,oBAAoB,CAAA;QACjF,OAAO,EAAE,GAAG,KAAK,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,OAAO,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;IAClF,CAAC,CAAA;IACD,IAAI,MAAwB,CAAA;IAC5B,IAAI,CAAC;QACH,SAAS,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAA;QACzC,YAAY,CAAC,GAAG,CAAC,CAAA;QAEjB,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAA;QACvC,IAAI,KAAK,GAAG,KAAK,CAAA;QACjB,IAAI,IAAI,GAAG,KAAK,CAAA;QAChB,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;YAC7B,IAAI,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;gBAAC,KAAK,GAAG,IAAI,CAAC;gBAAC,MAAK;YAAC,CAAC;YAClD,MAAM,IAAI,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAA;YACpC,IAAI,IAAI,CAAC,GAAG,KAAK,IAAI,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;gBAAC,IAAI,GAAG,IAAI,CAAC;gBAAC,MAAK;YAAC,CAAC;YAC/D,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAA;QAC9C,CAAC;QAED,IAAI,KAAK,EAAE,CAAC;YACV,MAAM,GAAG,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,mCAAmC,EAAE,OAAO,EAAE,UAAU,EAAE,EAAE,CAAA;QAChH,CAAC;aAAM,CAAC;YACN,MAAM,IAAI,GAAG,UAAU,EAAE,CAAA;YACzB,MAAM,YAAY,GAAG,wDAAwD,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;YACxF,MAAM,GAAG;gBACP,IAAI,EAAE,SAAS;gBACf,MAAM,EAAE,MAAM;gBACd,MAAM,EAAE,IAAI;oBACV,CAAC,CAAC,YAAY;wBACZ,CAAC,CAAC,8PAA8P;wBAChQ,CAAC,CAAC,4GAA4G;oBAChH,CAAC,CAAC,8KAA8K;gBAClL,OAAO,EAAE,IAAI;aACd,CAAA;QACH,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,GAAG;YACP,IAAI,EAAE,SAAS;YACf,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,2GAA2G;YACnH,OAAO,EAAE,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,UAAU,EAAE,EAAE;SAChF,CAAA;IACH,CAAC;YAAS,CAAC;QACT,WAAW,GAAG,MAAM,gBAAgB,CAAC,GAAG,CAAC,CAAA;IAC3C,CAAC;IACD,OAAO,QAAQ,CAAC,MAAM,CAAC,CAAA;AACzB,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,GAAW,EACX,OAAmF,EAAE;IAErF,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAA;IACtE,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,IAAK,CAAA;IACrC,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,CAAA;IAE3C,MAAM,KAAK,GAAG,GAAY,EAAE;QAC1B,MAAM,IAAI,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAA;QACpC,OAAO,IAAI,CAAC,GAAG,KAAK,IAAI,IAAI,IAAI,CAAC,QAAQ,CAAA;IAC3C,CAAC,CAAA;IACD,MAAM,WAAW,GAAG,KAAK,EAAE,EAAU,EAAoB,EAAE;QACzD,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,CAAA;QAChC,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;YAC7B,IAAI,CAAC,KAAK,EAAE;gBAAE,OAAO,IAAI,CAAA;YACzB,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAA;QAC9C,CAAC;QACD,OAAO,CAAC,KAAK,EAAE,CAAA;IACjB,CAAC,CAAA;IACD,MAAM,MAAM,GAAG,GAAS,EAAE;QACxB,IAAI,CAAC;YACH,MAAM,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;QAC/C,CAAC;QAAC,MAAM,CAAC,CAAC,kEAAkE,CAAC,CAAC;IAChF,CAAC,CAAA;IAED,IAAI,CAAC,KAAK,EAAE,EAAE,CAAC;QACb,MAAM,EAAE,CAAA;QACR,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,eAAe,EAAE,CAAA;IAC/C,CAAC;IAED,IAAI,CAAC;QACH,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,UAAU,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,CAAA;IAC7D,CAAC;IAAC,MAAM,CAAC,CAAC,6BAA6B,CAAC,CAAC;IACzC,IAAI,MAAM,WAAW,CAAC,OAAO,CAAC,EAAE,CAAC;QAAC,MAAM,EAAE,CAAC;QAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,UAAU,EAAE,CAAA;IAAC,CAAC;IAEtF,MAAM,GAAG,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC,GAAG,CAAA;IACvC,IAAI,GAAG,KAAK,IAAI,EAAE,CAAC;QACjB,IAAI,CAAC;YAAC,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,CAAA;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,kBAAkB,CAAC,CAAC;QACzD,IAAI,MAAM,WAAW,CAAC,OAAO,CAAC,EAAE,CAAC;YAAC,MAAM,EAAE,CAAC;YAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,SAAS,EAAE,CAAA;QAAC,CAAC;QACrF,IAAI,CAAC;YAAC,IAAI,CAAC,GAAG,EAAE,SAAS,CAAC,CAAA;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,kBAAkB,CAAC,CAAC;QACzD,IAAI,MAAM,WAAW,CAAC,OAAO,CAAC,EAAE,CAAC;YAAC,MAAM,EAAE,CAAC;YAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,SAAS,EAAE,CAAA;QAAC,CAAC;IACvF,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,EAAE,UAAU,EAAE,CAAA;AAC3C,CAAC;AAED,wEAAwE;AAExE;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,IAG1C;IACC,MAAM,OAAO,GAAuB,EAAE,CAAA;IACtC,MAAM,IAAI,GAAG,CAAC,CAAmB,EAAQ,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAA,CAAC,CAAC,CAAA;IAC/E,IAAI,CAAC,gBAAgB,EAAE,CAAC,CAAA;IACxB,IAAI,CAAC,MAAM,eAAe,EAAE,CAAC,CAAA;IAC7B,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAA;IAChB,IAAI,CAAC,MAAM,oBAAoB,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAA;IAC3D,IAAI,CAAC,MAAM,gBAAgB,EAAE,CAAC,CAAA;IAC9B,OAAO,OAAO,CAAA;AAChB,CAAC"}

package/dist/lib/git-bundle.d.ts

@@ -0,0 +1,19 @@
+/** Cap on what we will upload, measured gzipped (base64 adds ~33% on top).
+ *  A candidate who committed large binaries must not turn every five-minute
+ *  tick into a multi-megabyte upload; their code still rides the files map. */
+export declare const MAX_BUNDLE_BYTES: number;
+export interface GitBundleDeps {
+    /** Seam for tests; defaults to a real `git` in `projectDir`. */
+    run?: (command: string, maxBuffer: number) => Buffer;
+}
+/** The commit HEAD points at, or null when this is not a repo or has no
+ *  commits yet. Used to skip re-uploading a history that has not moved. */
+export declare function currentHead(projectDir: string, deps?: GitBundleDeps): string | null;
+/**
+ * Gzipped `git bundle --all`, or null when there is nothing worth sending: no
+ * repo, no commits, or a bundle over the cap. Every failure mode is null —
+ * history is a bonus on a snapshot whose real job is the code, so nothing here
+ * may cost the caller its upload.
+ */
+export declare function buildGitBundle(projectDir: string, deps?: GitBundleDeps): Buffer | null;
+//# sourceMappingURL=git-bundle.d.ts.map

package/dist/lib/git-bundle.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"git-bundle.d.ts","sourceRoot":"","sources":["../../src/lib/git-bundle.ts"],"names":[],"mappings":"AAqBA;;+EAE+E;AAC/E,eAAO,MAAM,gBAAgB,QAAkB,CAAA;AAI/C,MAAM,WAAW,aAAa;IAC5B,gEAAgE;IAChE,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,KAAK,MAAM,CAAA;CACrD;AAgBD;2EAC2E;AAC3E,wBAAgB,WAAW,CAAC,UAAU,EAAE,MAAM,EAAE,IAAI,GAAE,aAAkB,GAAG,MAAM,GAAG,IAAI,CAOvF;AAED;;;;;GAKG;AACH,wBAAgB,cAAc,CAC5B,UAAU,EAAE,MAAM,EAClB,IAAI,GAAE,aAAkB,GACvB,MAAM,GAAG,IAAI,CAgBf"}

package/dist/lib/git-bundle.js

@@ -0,0 +1,71 @@
+/**
+ * ENG-2238: the candidate's git history, in a form the periodic snapshot can
+ * carry.
+ *
+ * The snapshot's `files` map is text-only and drops every dotfile, so a
+ * server-side reconstruction (the deadline auto-submit, taken when this CLI is
+ * not running to submit for itself) rebuilt the candidate's code with no `.git`
+ * at all: their local commits were absent from their own submission, and the
+ * grader could only repeat the last ten commit messages as the candidate's
+ * claim rather than measure them.
+ *
+ * A bundle is git's own single-file transport: `git bundle create - --all`
+ * writes every commit and ref to stdout and the server clones it back into a
+ * real `.git`. It carries OBJECTS AND REFS ONLY — no `.git/config`, no hooks —
+ * so nothing candidate-controlled that git would later execute rides along,
+ * which is the hazard `backend/services/commit_diff.py` documents about reading
+ * somebody else's repository.
+ */
+import { execSync } from "child_process";
+import { gzipSync } from "zlib";
+/** Cap on what we will upload, measured gzipped (base64 adds ~33% on top).
+ *  A candidate who committed large binaries must not turn every five-minute
+ *  tick into a multi-megabyte upload; their code still rides the files map. */
+export const MAX_BUNDLE_BYTES = 4 * 1024 * 1024;
+/** Refuse to buffer a bundle bigger than this at all. */
+const BUNDLE_BUFFER_BYTES = 64 * 1024 * 1024;
+function runner(projectDir, deps) {
+    return (deps.run ??
+        ((command, maxBuffer) => execSync(command, {
+            cwd: projectDir,
+            maxBuffer,
+            timeout: 60000,
+            windowsHide: true,
+            stdio: ["ignore", "pipe", "ignore"],
+        })));
+}
+/** The commit HEAD points at, or null when this is not a repo or has no
+ *  commits yet. Used to skip re-uploading a history that has not moved. */
+export function currentHead(projectDir, deps = {}) {
+    try {
+        const out = runner(projectDir, deps)("git rev-parse HEAD", 10000).toString().trim();
+        return out || null;
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * Gzipped `git bundle --all`, or null when there is nothing worth sending: no
+ * repo, no commits, or a bundle over the cap. Every failure mode is null —
+ * history is a bonus on a snapshot whose real job is the code, so nothing here
+ * may cost the caller its upload.
+ */
+export function buildGitBundle(projectDir, deps = {}) {
+    let raw;
+    try {
+        raw = runner(projectDir, deps)("git bundle create - --all", BUNDLE_BUFFER_BYTES);
+    }
+    catch {
+        return null;
+    }
+    if (!raw?.length)
+        return null;
+    const gz = gzipSync(raw);
+    if (gz.length > MAX_BUNDLE_BYTES) {
+        process.stderr.write(`[watcher] git bundle ${(gz.length / 1024 / 1024).toFixed(1)}MB over cap; skipping history upload\n`);
+        return null;
+    }
+    return gz;
+}
+//# sourceMappingURL=git-bundle.js.map

package/dist/lib/git-bundle.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"git-bundle.js","sourceRoot":"","sources":["../../src/lib/git-bundle.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AACH,OAAO,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAA;AACxC,OAAO,EAAE,QAAQ,EAAE,MAAM,MAAM,CAAA;AAE/B;;+EAE+E;AAC/E,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAA;AAC/C,yDAAyD;AACzD,MAAM,mBAAmB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAA;AAO5C,SAAS,MAAM,CAAC,UAAkB,EAAE,IAAmB;IACrD,OAAO,CACL,IAAI,CAAC,GAAG;QACR,CAAC,CAAC,OAAe,EAAE,SAAiB,EAAE,EAAE,CACtC,QAAQ,CAAC,OAAO,EAAE;YAChB,GAAG,EAAE,UAAU;YACf,SAAS;YACT,OAAO,EAAE,KAAM;YACf,WAAW,EAAE,IAAI;YACjB,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,CAAC;SACpC,CAAC,CAAC,CACN,CAAA;AACH,CAAC;AAED;2EAC2E;AAC3E,MAAM,UAAU,WAAW,CAAC,UAAkB,EAAE,OAAsB,EAAE;IACtE,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC,oBAAoB,EAAE,KAAM,CAAC,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,CAAA;QACpF,OAAO,GAAG,IAAI,IAAI,CAAA;IACpB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAA;IACb,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,cAAc,CAC5B,UAAkB,EAClB,OAAsB,EAAE;IAExB,IAAI,GAAW,CAAA;IACf,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC,2BAA2B,EAAE,mBAAmB,CAAC,CAAA;IAClF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAA;IACb,CAAC;IACD,IAAI,CAAC,GAAG,EAAE,MAAM;QAAE,OAAO,IAAI,CAAA;IAC7B,MAAM,EAAE,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAA;IACxB,IAAI,EAAE,CAAC,MAAM,GAAG,gBAAgB,EAAE,CAAC;QACjC,OAAO,CAAC,MAAM,CAAC,KAAK,CAClB,wBAAwB,CAAC,EAAE,CAAC,MAAM,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,wCAAwC,CACrG,CAAA;QACD,OAAO,IAAI,CAAA;IACb,CAAC;IACD,OAAO,EAAE,CAAA;AACX,CAAC"}

package/dist/lib/session-end.d.ts

@@ -0,0 +1,111 @@
+/**
+ * What happens to a NATIVE editor window when the session ends — ENG-2154.
+ *
+ * ## The decision, which this ticket was asked to make explicitly
+ *
+ * **We do not close the candidate's editor window. We tell them what the window
+ * is doing instead.** Elena asked for the opposite ("when I finish submitting
+ * can you exit out of the ID editor, because the file tree is still there even
+ * though I'm disconnecting the codebase"), so the reasons are worth stating
+ * rather than leaving in a PR description.
+ *
+ * MEASURED FIRST, on a real VS Code 1.136 / Remote-SSH 0.128.0 window connected
+ * over ssh into a container whose transport was then killed. The window does not
+ * go quiet: the title bar and the Explorer root still read `[SSH: <host>]`, the
+ * status bar flips to `Disconnected from SSH: <host>`, and the resolver raises a
+ * modal reporting that it could not establish the connection and offering to retry.
+ * So the state a candidate is left in is not a silent stale file tree — it is an
+ * ERROR DIALOG, arriving seconds after they pressed submit. That is the ENG-2066
+ * misreading pointed at a different surface: a workspace that stops working with
+ * no explanation reads as a FAILED SUBMISSION. Disambiguating it is the whole
+ * job; making the window vanish is not.
+ *
+ * And closing it is not reachable anyway, for three independent reasons:
+ *
+ *   1. **Nothing of ours is running on the laptop at submit time.** `litmus
+ *      connect` spawns the editor detached and returns; a v2 candidate then
+ *      submits from the container (`litmus push` in the editor's own remote
+ *      terminal) or from the assessment page. Closing the window would mean
+ *      leaving a background daemon on a candidate's machine for the life of the
+ *      assessment, purely to close a window.
+ *   2. **We could not honour "only the window we opened."** `code --remote` hands
+ *      the request to an already-running Electron app and exits; the window is
+ *      not a process we own. Every close mechanism available (osascript UI
+ *      scripting, PowerShell `CloseMainWindow`, wmctrl) picks its target by
+ *      window title, which is a guess that can land on a window the candidate
+ *      opened themselves. The ticket forbids exactly that.
+ *   3. **macOS gates it behind a permission the candidate has not granted.** UI
+ *      scripting needs an Automation/Accessibility grant; without it the attempt
+ *      is refused (`-1743`), and the first attempt in a fresh grant state blocks
+ *      on a system dialog — which is what ENG-1502 measured when it made its own
+ *      close best-effort and detached.
+ *
+ * A window that vanishes while somebody is reading their own code is worse than
+ * one that says what happened, and (1)-(3) mean we could only ever have vanished
+ * it unreliably. So: say it, and leave the window to them.
+ *
+ * ## Why the copy lives in a module
+ *
+ * The same answer is needed at two moments, in two commands, and a second copy
+ * of it would rot — the argument `submit-guidance.ts` and the candidate page's
+ * `workspace-guidance.ts` already make:
+ *
+ *   - `litmus connect` says it AHEAD of time, because it is the only laptop-side
+ *     moment we have, and it is the only thing that reaches a candidate whose
+ *     session ends some other way (they submit from the assessment page, the
+ *     company ends the trial, the deadline cron fires).
+ *   - `litmus push` says it AT the moment, in the terminal that is very often
+ *     the disconnecting window's own.
+ *
+ * ## What the copy may claim
+ *
+ * NO EDITOR-SPECIFIC CONTROL IS NAMED. The dialog's buttons were measured on VS
+ * Code only; Cursor resolves `ssh-remote+` through `anysphere.remote-ssh`, a
+ * different extension whose dialog we have not measured, and naming a button a
+ * candidate cannot find costs us the trust they need in the rest of the sentence
+ * (the same line `workspace-guidance.ts` draws over its tool list). What is true
+ * of both is the shape: the window stays, it reports a lost connection, and
+ * closing it is theirs to do. That bound is tighter than it first looks and
+ * Greptile caught the first draft crossing it — describing WHAT THE EDITOR WILL
+ * ASK ("and offers to try again") is as unmeasured on Cursor as naming the
+ * button would be, and a candidate told to expect a prompt that never appears
+ * is left doubting the sentence that was meant to reassure them. Only the fact
+ * of a reported disconnection is verified on both.
+ *
+ * It also may not claim the assessment is FINISHED. A submit can still owe a
+ * post-submit walkthrough, and `runPush` prints the next step right after this;
+ * the claim here is only about the workspace and the window.
+ */
+/**
+ * The state the candidate's native editor window is now in, said once.
+ *
+ * Printed after a submit that ENDED the session — a fresh capture, an
+ * `already_submitted`, or a confirmed empty submission. Never after a refusal, a
+ * cancellation or a failure: in all three the workspace is still live and the
+ * window is still connected, so this would be a lie about both.
+ *
+ * Written as a conditional ("if ... is open") because `litmus push` runs from
+ * four places — a native remote window's terminal, the browser IDE's terminal, a
+ * plain ssh session, and a laptop with an explicit token — and cannot tell them
+ * apart. The browser IDE's own tab is deliberately not mentioned: ENG-2066 ends
+ * that one by navigating it, so describing it here would contradict what that
+ * candidate is about to see.
+ */
+export declare function editorEndingLines(): string[];
+/**
+ * The same fact, said before it happens, on the native-editor path of
+ * `litmus connect`.
+ *
+ * Two lines, and deliberately no more. This is the ONLY route that reaches a
+ * candidate who ends their session from somewhere we do not run — the assessment
+ * page's Submit, End trial, the deadline cron — and for them it is the whole
+ * warning. But it is also printed at the top of a session, minutes or days
+ * before it is true, next to a Cursor notice that is already long; anything more
+ * than the fact and what to do with it is noise at the wrong moment.
+ *
+ * @param editorLabel  what the candidate calls the editor being opened, from
+ *   `NATIVE_EDITORS` — this one CAN be named, because `connect` knows which one
+ *   it is launching. The dialog's controls still cannot be.
+ */
+export declare function editorEndingForewarning(editorLabel: string): string[];
+//# sourceMappingURL=session-end.d.ts.map

package/dist/lib/session-end.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-end.d.ts","sourceRoot":"","sources":["../../src/lib/session-end.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6EG;AAEH;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,iBAAiB,IAAI,MAAM,EAAE,CAS5C;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,uBAAuB,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,EAAE,CAKrE"}