mewkit 1.14.1 → 1.16.0

package/dist/orchviz/plan/plan-constants.d.ts

@@ -1,17 +0,0 @@
-/**
- * Shared constants for the plan module — regexes used across multiple
- * files (parser, collector, listPlans, etag, find-active-plan).
- *
- * Single source of truth eliminates drift if naming conventions change.
- */
-export declare const FRONTMATTER_RE: RegExp;
-export declare const PHASE_FILE_RE: RegExp;
-export declare const PHASE_FILE_NUM_RE: RegExp;
-export declare const SLUG_RE: RegExp;
-/**
- * Build a regex matching `phase-NN-*.md` for a specific phase number,
- * tolerating zero-padding (R2-1): phase=1 matches both `phase-01-x.md`
- * and `phase-1-x.md`. Excludes leading-dot files (orphan tmps).
- */
-export declare function buildPhaseNumberRe(phase: number): RegExp;
-//# sourceMappingURL=plan-constants.d.ts.map

package/dist/orchviz/plan/plan-constants.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"plan-constants.d.ts","sourceRoot":"","sources":["../../../src/orchviz/plan/plan-constants.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,eAAO,MAAM,cAAc,QAAgC,CAAC;AAC5D,eAAO,MAAM,aAAa,QAAwB,CAAC;AACnD,eAAO,MAAM,iBAAiB,QAA0B,CAAC;AACzD,eAAO,MAAM,OAAO,QAA0B,CAAC;AAE/C;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAExD"}

package/dist/orchviz/plan/plan-constants.js

@@ -1,19 +0,0 @@
-/**
- * Shared constants for the plan module — regexes used across multiple
- * files (parser, collector, listPlans, etag, find-active-plan).
- *
- * Single source of truth eliminates drift if naming conventions change.
- */
-export const FRONTMATTER_RE = /^---\r?\n([\s\S]*?)\r?\n---/;
-export const PHASE_FILE_RE = /^phase-\d+-.+\.md$/i;
-export const PHASE_FILE_NUM_RE = /^phase-(\d+)-.+\.md$/i;
-export const SLUG_RE = /^[a-zA-Z0-9_-]{1,80}$/;
-/**
- * Build a regex matching `phase-NN-*.md` for a specific phase number,
- * tolerating zero-padding (R2-1): phase=1 matches both `phase-01-x.md`
- * and `phase-1-x.md`. Excludes leading-dot files (orphan tmps).
- */
-export function buildPhaseNumberRe(phase) {
-    return new RegExp(`^phase-0*${phase}-.*\\.md$`, "i");
-}
-//# sourceMappingURL=plan-constants.js.map

package/dist/orchviz/plan/plan-constants.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"plan-constants.js","sourceRoot":"","sources":["../../../src/orchviz/plan/plan-constants.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,MAAM,CAAC,MAAM,cAAc,GAAG,6BAA6B,CAAC;AAC5D,MAAM,CAAC,MAAM,aAAa,GAAG,qBAAqB,CAAC;AACnD,MAAM,CAAC,MAAM,iBAAiB,GAAG,uBAAuB,CAAC;AACzD,MAAM,CAAC,MAAM,OAAO,GAAG,uBAAuB,CAAC;AAE/C;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAAC,KAAa;IAC/C,OAAO,IAAI,MAAM,CAAC,YAAY,KAAK,WAAW,EAAE,GAAG,CAAC,CAAC;AACtD,CAAC"}

package/dist/orchviz/plan/plan-lifecycle.d.ts

@@ -1,17 +0,0 @@
-/**
- * Plan lifecycle helpers for completion-driven archiving.
- *
- * A plan is complete when every non-abandoned phase todo is checked and at
- * least one todo exists. Failed phases block auto-archive so humans can resolve
- * the terminal state explicitly.
- */
-export type PlanLifecycleResult = {
-    archived: false;
-    reason: "not-complete" | "no-todos" | "failed-phase" | "missing-plan" | "already-archived";
-} | {
-    archived: true;
-    from: string;
-    to: string;
-};
-export declare function completeAndArchivePlanIfDone(planDir: string, plansDir?: string): PlanLifecycleResult;
-//# sourceMappingURL=plan-lifecycle.d.ts.map

package/dist/orchviz/plan/plan-lifecycle.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"plan-lifecycle.d.ts","sourceRoot":"","sources":["../../../src/orchviz/plan/plan-lifecycle.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAOH,MAAM,MAAM,mBAAmB,GAC5B;IAAE,QAAQ,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,cAAc,GAAG,UAAU,GAAG,cAAc,GAAG,cAAc,GAAG,kBAAkB,CAAA;CAAE,GAC/G;IAAE,QAAQ,EAAE,IAAI,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,EAAE,EAAE,MAAM,CAAA;CAAE,CAAC;AAsEhD,wBAAgB,4BAA4B,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,SAAwB,GAAG,mBAAmB,CAkBnH"}

package/dist/orchviz/plan/plan-lifecycle.js

@@ -1,97 +0,0 @@
-/**
- * Plan lifecycle helpers for completion-driven archiving.
- *
- * A plan is complete when every non-abandoned phase todo is checked and at
- * least one todo exists. Failed phases block auto-archive so humans can resolve
- * the terminal state explicitly.
- */
-import * as fs from "node:fs";
-import * as path from "node:path";
-import { parsePhaseFile } from "./parse-phase-file.js";
-import { PHASE_FILE_RE } from "./plan-constants.js";
-const FRONTMATTER_RE = /^---\r?\n([\s\S]*?)\r?\n---/;
-function planCompletionState(planDir) {
-    let entries;
-    try {
-        entries = fs.readdirSync(planDir);
-    }
-    catch {
-        return { complete: false, reason: "missing-plan" };
-    }
-    let totalTodos = 0;
-    for (const name of entries) {
-        if (!PHASE_FILE_RE.test(name))
-            continue;
-        const phase = parsePhaseFile(path.join(planDir, name));
-        if (!phase || phase.abandoned)
-            continue;
-        if (phase.status === "failed")
-            return { complete: false, reason: "failed-phase" };
-        totalTodos += phase.todos.length;
-        if (phase.todos.some((todo) => !todo.checked))
-            return { complete: false, reason: "not-complete" };
-    }
-    if (totalTodos === 0)
-        return { complete: false, reason: "no-todos" };
-    return { complete: true };
-}
-function withCompletedStatus(content) {
-    const match = content.match(FRONTMATTER_RE);
-    if (!match) {
-        return `---\nstatus: completed\n---\n${content}`;
-    }
-    const block = match[1];
-    const eol = block.includes("\r\n") ? "\r\n" : "\n";
-    const lines = block.split(/\r?\n/);
-    const statusIdx = lines.findIndex((line) => /^\s*status\s*:/.test(line));
-    if (statusIdx >= 0) {
-        lines[statusIdx] = "status: completed";
-    }
-    else {
-        lines.push("status: completed");
-    }
-    return content.replace(FRONTMATTER_RE, `---${eol}${lines.join(eol)}${eol}---`);
-}
-function markPlanCompleted(planDir) {
-    const planPath = path.join(planDir, "plan.md");
-    let content;
-    try {
-        content = fs.readFileSync(planPath, "utf-8");
-    }
-    catch {
-        return false;
-    }
-    const next = withCompletedStatus(content);
-    if (next !== content)
-        fs.writeFileSync(planPath, next, "utf-8");
-    return true;
-}
-function uniqueArchivePath(archiveRoot, slug) {
-    let candidate = path.join(archiveRoot, slug);
-    let suffix = 2;
-    while (fs.existsSync(candidate)) {
-        candidate = path.join(archiveRoot, `${slug}-${suffix}`);
-        suffix += 1;
-    }
-    return candidate;
-}
-export function completeAndArchivePlanIfDone(planDir, plansDir = path.dirname(planDir)) {
-    const slug = path.basename(planDir);
-    if (slug === "archive" || planDir.includes(`${path.sep}archive${path.sep}`)) {
-        return { archived: false, reason: "already-archived" };
-    }
-    if (!fs.existsSync(path.join(planDir, "plan.md"))) {
-        return { archived: false, reason: "missing-plan" };
-    }
-    const state = planCompletionState(planDir);
-    if (!state.complete)
-        return { archived: false, reason: state.reason ?? "not-complete" };
-    if (!markPlanCompleted(planDir))
-        return { archived: false, reason: "missing-plan" };
-    const archiveRoot = path.join(plansDir, "archive");
-    fs.mkdirSync(archiveRoot, { recursive: true });
-    const destination = uniqueArchivePath(archiveRoot, slug);
-    fs.renameSync(planDir, destination);
-    return { archived: true, from: planDir, to: destination };
-}
-//# sourceMappingURL=plan-lifecycle.js.map

package/dist/orchviz/plan/plan-lifecycle.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"plan-lifecycle.js","sourceRoot":"","sources":["../../../src/orchviz/plan/plan-lifecycle.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AACvD,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAQpD,MAAM,cAAc,GAAG,6BAA6B,CAAC;AAErD,SAAS,mBAAmB,CAAC,OAAe;IAC3C,IAAI,OAAiB,CAAC;IACtB,IAAI,CAAC;QACJ,OAAO,GAAG,EAAE,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;IACnC,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC;IACpD,CAAC;IAED,IAAI,UAAU,GAAG,CAAC,CAAC;IACnB,KAAK,MAAM,IAAI,IAAI,OAAO,EAAE,CAAC;QAC5B,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,SAAS;QACxC,MAAM,KAAK,GAAG,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC;QACvD,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,SAAS;YAAE,SAAS;QACxC,IAAI,KAAK,CAAC,MAAM,KAAK,QAAQ;YAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC;QAClF,UAAU,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC;QACjC,IAAI,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC;YAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC;IACnG,CAAC;IAED,IAAI,UAAU,KAAK,CAAC;QAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;IACrE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;AAC3B,CAAC;AAED,SAAS,mBAAmB,CAAC,OAAe;IAC3C,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;IAC5C,IAAI,CAAC,KAAK,EAAE,CAAC;QACZ,OAAO,gCAAgC,OAAO,EAAE,CAAC;IAClD,CAAC;IAED,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;IACvB,MAAM,GAAG,GAAG,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC;IACnD,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACnC,MAAM,SAAS,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IACzE,IAAI,SAAS,IAAI,CAAC,EAAE,CAAC;QACpB,KAAK,CAAC,SAAS,CAAC,GAAG,mBAAmB,CAAC;IACxC,CAAC;SAAM,CAAC;QACP,KAAK,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;IACjC,CAAC;IAED,OAAO,OAAO,CAAC,OAAO,CAAC,cAAc,EAAE,MAAM,GAAG,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,KAAK,CAAC,CAAC;AAChF,CAAC;AAED,SAAS,iBAAiB,CAAC,OAAe;IACzC,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IAC/C,IAAI,OAAe,CAAC;IACpB,IAAI,CAAC;QACJ,OAAO,GAAG,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC9C,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,KAAK,CAAC;IACd,CAAC;IACD,MAAM,IAAI,GAAG,mBAAmB,CAAC,OAAO,CAAC,CAAC;IAC1C,IAAI,IAAI,KAAK,OAAO;QAAE,EAAE,CAAC,aAAa,CAAC,QAAQ,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;IAChE,OAAO,IAAI,CAAC;AACb,CAAC;AAED,SAAS,iBAAiB,CAAC,WAAmB,EAAE,IAAY;IAC3D,IAAI,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;IAC7C,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,OAAO,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QACjC,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,GAAG,IAAI,IAAI,MAAM,EAAE,CAAC,CAAC;QACxD,MAAM,IAAI,CAAC,CAAC;IACb,CAAC;IACD,OAAO,SAAS,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,4BAA4B,CAAC,OAAe,EAAE,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC;IAC7F,MAAM,IAAI,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IACpC,IAAI,IAAI,KAAK,SAAS,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC,GAAG,UAAU,IAAI,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC;QAC7E,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC;IACxD,CAAC;IACD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC,EAAE,CAAC;QACnD,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC;IACpD,CAAC;IAED,MAAM,KAAK,GAAG,mBAAmB,CAAC,OAAO,CAAC,CAAC;IAC3C,IAAI,CAAC,KAAK,CAAC,QAAQ;QAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,IAAI,cAAc,EAAE,CAAC;IACxF,IAAI,CAAC,iBAAiB,CAAC,OAAO,CAAC;QAAE,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC;IAEpF,MAAM,WAAW,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC;IACnD,EAAE,CAAC,SAAS,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC/C,MAAM,WAAW,GAAG,iBAAiB,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;IACzD,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;IACpC,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,WAAW,EAAE,CAAC;AAC3D,CAAC"}

package/dist/orchviz/plan/types.d.ts

@@ -1,46 +0,0 @@
-/**
- * Plan parser types — describes the shape of an active plan + its phases for
- * the /api/plan endpoint. Pure data; no logic.
- */
-export type PhaseStatus = "pending" | "active" | "in_progress" | "completed" | "failed" | "abandoned" | "unknown";
-/**
- * Plan-level status vocabulary (red-team H3).
- * Used by listPlans and PlanSummary. "unknown" is the fallback for unrecognized strings.
- */
-export type PlanStatus = "draft" | "in_progress" | "active" | "completed" | "archived" | "blocked" | "unknown";
-/**
- * Lightweight summary of a plan — returned by GET /api/plans.
- * Full plan state (with phases + todos) is returned by GET /api/plan?slug=<slug>.
- */
-export interface PlanSummary {
-    slug: string;
-    title: string;
-    status: PlanStatus;
-    created: string;
-    effort: string;
-    mtimeMs: number;
-    phaseCount: number;
-}
-export interface TodoItem {
-    checked: boolean;
-    text: string;
-}
-export interface PhaseState {
-    number: number;
-    title: string;
-    status: PhaseStatus;
-    effort: string;
-    todos: TodoItem[];
-    filePath: string;
-    abandoned: boolean;
-}
-export interface PlanState {
-    slug: string;
-    title: string;
-    status: string;
-    effort: string;
-    created: string;
-    phases: PhaseState[];
-    path: string;
-}
-//# sourceMappingURL=types.d.ts.map

package/dist/orchviz/plan/types.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/orchviz/plan/types.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,MAAM,MAAM,WAAW,GAAG,SAAS,GAAG,QAAQ,GAAG,aAAa,GAAG,WAAW,GAAG,QAAQ,GAAG,WAAW,GAAG,SAAS,CAAC;AAElH;;;GAGG;AACH,MAAM,MAAM,UAAU,GAAG,OAAO,GAAG,aAAa,GAAG,QAAQ,GAAG,WAAW,GAAG,UAAU,GAAG,SAAS,GAAG,SAAS,CAAC;AAE/G;;;GAGG;AACH,MAAM,WAAW,WAAW;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,UAAU,CAAC;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,QAAQ;IACxB,OAAO,EAAE,OAAO,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;CACb;AAED,MAAM,WAAW,UAAU;IAC1B,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,WAAW,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,QAAQ,EAAE,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,WAAW,SAAS;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,UAAU,EAAE,CAAC;IACrB,IAAI,EAAE,MAAM,CAAC;CACb"}

package/dist/orchviz/plan/types.js

@@ -1,6 +0,0 @@
-/**
- * Plan parser types — describes the shape of an active plan + its phases for
- * the /api/plan endpoint. Pure data; no logic.
- */
-export {};
-//# sourceMappingURL=types.js.map

package/dist/orchviz/plan/types.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/orchviz/plan/types.ts"],"names":[],"mappings":"AAAA;;;GAGG"}

package/dist/orchviz/protocol.d.ts

@@ -1,171 +0,0 @@
-/**
- * Agent event protocol — types describing live Claude Code session events.
- *
- * Ported (in part) from patoles/agent-flow @ 59ccf4e
- *   Original: extension/src/protocol.ts
- *   License:  Apache-2.0 (see ../../NOTICE)
- *
- * Modifications: dropped VS Code extension/webview message types;
- * replaced FSWatcher import path; pruned helper signatures unused server-side.
- */
-import type { FSWatcher } from "node:fs";
-export type AgentEventType = "agent_spawn" | "agent_complete" | "agent_idle" | "message" | "context_update" | "model_detected" | "tool_call_start" | "tool_call_end" | "subagent_dispatch" | "subagent_return" | "permission_requested" | "pause_started" | "pause_cleared" | "error";
-/**
- * Deterministic pause reasons emitted by the parser layer.
- * - permission_request: heuristic 5s stall fallback (no toolUseId)
- * - ask_user_question: AskUserQuestion tool_use with no matching tool_result
- * - plan_mode_review: ExitPlanMode tool_use with no matching tool_result
- * - tool_rejected: tool_result content contains rejection string
- * - hook_blocked: system stop_hook_summary with preventedContinuation=true
- */
-export type PauseReason = "permission_request" | "ask_user_question" | "plan_mode_review" | "tool_rejected" | "hook_blocked";
-/**
- * Detail payload for pause_started events.
- * All string fields must flow through sanitize.ts before SSE emission (enforced in phase-06).
- *
- * [red-team #22] options is string[] (flat), NOT Array<{label; description?}>.
- * Aligns with what tool-input-data.ts:67-69 already produces.
- *
- * [red-team #16] detail.plan is emitted with newlines preserved; phase-04 renders
- * via JSX .map() — NEVER use dangerouslySetInnerHTML to restore newlines.
- *
- * [security — red-team #17] hookCommand may contain env-style secrets
- * (AWS_SECRET_ACCESS_KEY=, Authorization: Bearer). Known gap for v1 — documented,
- * mitigation deferred to follow-up CLI warning. See phase-02 security notes.
- */
-export interface PauseDetail {
-    questions?: Array<{
-        question: string;
-        header?: string;
-        options: string[];
-        multiSelect?: boolean;
-    }>;
-    plan?: string;
-    hookCommand?: string;
-    hookReason?: string;
-}
-export interface PauseStartedPayload {
-    agent: string;
-    reason: PauseReason;
-    toolUseId?: string;
-    toolName?: string;
-    detail?: PauseDetail;
-}
-export interface PauseClearedPayload {
-    agent: string;
-    reason: PauseReason;
-    toolUseId?: string;
-    durationMs: number;
-}
-export interface AgentEvent {
-    time: number;
-    type: AgentEventType;
-    payload: Record<string, unknown>;
-    sessionId?: string;
-}
-export interface SessionInfo {
-    id: string;
-    label: string;
-    status: "active" | "completed";
-    startTime: number;
-    lastActivityTime: number;
-}
-export interface TranscriptEntry {
-    sessionId: string;
-    type: string;
-    uuid?: string;
-    message: {
-        role: string;
-        model?: string;
-        content: Array<TranscriptContentBlock> | string;
-    };
-}
-export interface ToolUseBlock {
-    type: "tool_use";
-    name: string;
-    id: string;
-    input: Record<string, unknown>;
-}
-export interface ToolResultBlock {
-    type: "tool_result";
-    tool_use_id: string;
-    content: string | Array<{
-        text?: string;
-        type?: string;
-    }>;
-}
-export interface ThinkingBlock {
-    type: "thinking";
-    thinking: string;
-}
-export interface TextBlock {
-    type: "text";
-    text: string;
-}
-export type TranscriptContentBlock = ToolUseBlock | ToolResultBlock | ThinkingBlock | TextBlock | {
-    type: string;
-    [key: string]: unknown;
-};
-export interface AgentEventEmitter {
-    emit(event: AgentEvent, sessionId?: string): void;
-    elapsed(sessionId?: string): number;
-}
-export declare function emitSubagentSpawn(emitter: AgentEventEmitter, parent: string, child: string, task: string, sessionId?: string): void;
-export interface PendingToolCall {
-    name: string;
-    args: string;
-    filePath?: string;
-    startTime: number;
-}
-export interface SubagentState {
-    watcher: FSWatcher | null;
-    fileSize: number;
-    agentName: string;
-    /** Originating Task/Agent tool_use id from the spawn sidecar, when available. */
-    spawnToolUseId?: string;
-    pendingToolCalls: Map<string, PendingToolCall>;
-    seenToolUseIds: Set<string>;
-    permissionTimer: NodeJS.Timeout | null;
-    permissionEmitted: boolean;
-    spawnEmitted: boolean;
-}
-export interface ContextBreakdown {
-    systemPrompt: number;
-    userMessages: number;
-    toolResults: number;
-    reasoning: number;
-    subagentResults: number;
-}
-export interface WatchedSession {
-    sessionId: string;
-    filePath: string;
-    fileWatcher: FSWatcher | null;
-    pollTimer: NodeJS.Timeout | null;
-    fileSize: number;
-    sessionStartTime: number;
-    pendingToolCalls: Map<string, PendingToolCall>;
-    seenToolUseIds: Set<string>;
-    seenMessageHashes: Set<string>;
-    sessionDetected: boolean;
-    sessionCompleted: boolean;
-    lastActivityTime: number;
-    inactivityTimer: NodeJS.Timeout | null;
-    subagentWatchers: Map<string, SubagentState>;
-    spawnedSubagents: Set<string>;
-    /**
-     * Dedup primary key for agent_spawn events. Keyed by originating tool_use id
-     * so siblings sharing a display label (two `subagent_type: "researcher"` calls)
-     * each fire their own spawn — the canvas reactivates the existing node.
-     */
-    spawnedToolUseIds: Set<string>;
-    inlineProgressAgents: Set<string>;
-    subagentsDirWatcher: FSWatcher | null;
-    subagentsDir: string | null;
-    label: string;
-    labelSet: boolean;
-    model: string | null;
-    permissionTimer: NodeJS.Timeout | null;
-    permissionEmitted: boolean;
-    contextBreakdown: ContextBreakdown;
-}
-//# sourceMappingURL=protocol.d.ts.map

package/dist/orchviz/protocol.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"protocol.d.ts","sourceRoot":"","sources":["../../src/orchviz/protocol.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAEzC,MAAM,MAAM,cAAc,GACvB,aAAa,GACb,gBAAgB,GAChB,YAAY,GACZ,SAAS,GACT,gBAAgB,GAChB,gBAAgB,GAChB,iBAAiB,GACjB,eAAe,GACf,mBAAmB,GACnB,iBAAiB,GACjB,sBAAsB,GACtB,eAAe,GACf,eAAe,GACf,OAAO,CAAC;AAIX;;;;;;;GAOG;AACH,MAAM,MAAM,WAAW,GACpB,oBAAoB,GACpB,mBAAmB,GACnB,kBAAkB,GAClB,eAAe,GACf,cAAc,CAAC;AAElB;;;;;;;;;;;;;GAaG;AACH,MAAM,WAAW,WAAW;IAC3B,SAAS,CAAC,EAAE,KAAK,CAAC;QACjB,QAAQ,EAAE,MAAM,CAAC;QACjB,MAAM,CAAC,EAAE,MAAM,CAAC;QAChB,OAAO,EAAE,MAAM,EAAE,CAAC;QAClB,WAAW,CAAC,EAAE,OAAO,CAAC;KACtB,CAAC,CAAC;IACH,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,mBAAmB;IACnC,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,WAAW,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,WAAW,CAAC;CACrB;AAED,MAAM,WAAW,mBAAmB;IACnC,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,WAAW,CAAC;IACpB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,UAAU;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,cAAc,CAAC;IACrB,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,SAAS,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,WAAW;IAC3B,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,QAAQ,GAAG,WAAW,CAAC;IAC/B,SAAS,EAAE,MAAM,CAAC;IAClB,gBAAgB,EAAE,MAAM,CAAC;CACzB;AAID,MAAM,WAAW,eAAe;IAC/B,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,OAAO,EAAE;QACR,IAAI,EAAE,MAAM,CAAC;QACb,KAAK,CAAC,EAAE,MAAM,CAAC;QACf,OAAO,EAAE,KAAK,CAAC,sBAAsB,CAAC,GAAG,MAAM,CAAC;KAChD,CAAC;CACF;AAED,MAAM,WAAW,YAAY;IAC5B,IAAI,EAAE,UAAU,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAC/B;AAED,MAAM,WAAW,eAAe;IAC/B,IAAI,EAAE,aAAa,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,GAAG,KAAK,CAAC;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CAC1D;AAED,MAAM,WAAW,aAAa;IAC7B,IAAI,EAAE,UAAU,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,SAAS;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;CACb;AAED,MAAM,MAAM,sBAAsB,GAC/B,YAAY,GACZ,eAAe,GACf,aAAa,GACb,SAAS,GACT;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;CAAE,CAAC;AAI5C,MAAM,WAAW,iBAAiB;IACjC,IAAI,CAAC,KAAK,EAAE,UAAU,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAClD,OAAO,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;CACpC;AAED,wBAAgB,iBAAiB,CAChC,OAAO,EAAE,iBAAiB,EAC1B,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,MAAM,EACZ,SAAS,CAAC,EAAE,MAAM,GAChB,IAAI,CAiBN;AAID,MAAM,WAAW,eAAe;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,aAAa;IAC7B,OAAO,EAAE,SAAS,GAAG,IAAI,CAAC;IAC1B,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,iFAAiF;IACjF,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,gBAAgB,EAAE,GAAG,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;IAC/C,cAAc,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IAC5B,eAAe,EAAE,MAAM,CAAC,OAAO,GAAG,IAAI,CAAC;IACvC,iBAAiB,EAAE,OAAO,CAAC;IAC3B,YAAY,EAAE,OAAO,CAAC;CACtB;AAED,MAAM,WAAW,gBAAgB;IAChC,YAAY,EAAE,MAAM,CAAC;IACrB,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,eAAe,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,cAAc;IAC9B,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,EAAE,SAAS,GAAG,IAAI,CAAC;IAC9B,SAAS,EAAE,MAAM,CAAC,OAAO,GAAG,IAAI,CAAC;IACjC,QAAQ,EAAE,MAAM,CAAC;IACjB,gBAAgB,EAAE,MAAM,CAAC;IACzB,gBAAgB,EAAE,GAAG,CAAC,MAAM,EAAE,eAAe,CAAC,CAAC;IAC/C,cAAc,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IAC5B,iBAAiB,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IAC/B,eAAe,EAAE,OAAO,CAAC;IACzB,gBAAgB,EAAE,OAAO,CAAC;IAC1B,gBAAgB,EAAE,MAAM,CAAC;IACzB,eAAe,EAAE,MAAM,CAAC,OAAO,GAAG,IAAI,CAAC;IACvC,gBAAgB,EAAE,GAAG,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;IAC7C,gBAAgB,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IAC9B;;;;OAIG;IACH,iBAAiB,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IAC/B,oBAAoB,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;IAClC,mBAAmB,EAAE,SAAS,GAAG,IAAI,CAAC;IACtC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,OAAO,CAAC;IAClB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,eAAe,EAAE,MAAM,CAAC,OAAO,GAAG,IAAI,CAAC;IACvC,iBAAiB,EAAE,OAAO,CAAC;IAC3B,gBAAgB,EAAE,gBAAgB,CAAC;CACnC"}

package/dist/orchviz/protocol.js

@@ -1,23 +0,0 @@
-/**
- * Agent event protocol — types describing live Claude Code session events.
- *
- * Ported (in part) from patoles/agent-flow @ 59ccf4e
- *   Original: extension/src/protocol.ts
- *   License:  Apache-2.0 (see ../../NOTICE)
- *
- * Modifications: dropped VS Code extension/webview message types;
- * replaced FSWatcher import path; pruned helper signatures unused server-side.
- */
-export function emitSubagentSpawn(emitter, parent, child, task, sessionId) {
-    emitter.emit({
-        time: emitter.elapsed(sessionId),
-        type: "subagent_dispatch",
-        payload: { parent, child, task },
-    }, sessionId);
-    emitter.emit({
-        time: emitter.elapsed(sessionId),
-        type: "agent_spawn",
-        payload: { name: child, parent, task },
-    }, sessionId);
-}
-//# sourceMappingURL=protocol.js.map

package/dist/orchviz/protocol.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"protocol.js","sourceRoot":"","sources":["../../src/orchviz/protocol.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AA+IH,MAAM,UAAU,iBAAiB,CAChC,OAA0B,EAC1B,MAAc,EACd,KAAa,EACb,IAAY,EACZ,SAAkB;IAElB,OAAO,CAAC,IAAI,CACX;QACC,IAAI,EAAE,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC;QAChC,IAAI,EAAE,mBAAmB;QACzB,OAAO,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE;KAChC,EACD,SAAS,CACT,CAAC;IACF,OAAO,CAAC,IAAI,CACX;QACC,IAAI,EAAE,OAAO,CAAC,OAAO,CAAC,SAAS,CAAC;QAChC,IAAI,EAAE,aAAa;QACnB,OAAO,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE;KACtC,EACD,SAAS,CACT,CAAC;AACH,CAAC"}

package/dist/orchviz/redact.d.ts

@@ -1,10 +0,0 @@
-/**
- * Strict-prefix credential redaction for terminal/log output.
- *
- * Per Q3 validation + red-team #13, redact only strings with high-confidence
- * key prefixes (sk-, ghp_, AKIA, PEM blocks). Lexical "password=" / "token="
- * patterns are NOT scrubbed — false-positive rate on user prompts is too high.
- */
-export declare function scrubSecrets(input: string): string;
-export declare function scrubObject<T>(value: T): T;
-//# sourceMappingURL=redact.d.ts.map

package/dist/orchviz/redact.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"redact.d.ts","sourceRoot":"","sources":["../../src/orchviz/redact.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAYH,wBAAgB,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAMlD;AAED,wBAAgB,WAAW,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,GAAG,CAAC,CAW1C"}

package/dist/orchviz/redact.js

@@ -1,38 +0,0 @@
-/**
- * Strict-prefix credential redaction for terminal/log output.
- *
- * Per Q3 validation + red-team #13, redact only strings with high-confidence
- * key prefixes (sk-, ghp_, AKIA, PEM blocks). Lexical "password=" / "token="
- * patterns are NOT scrubbed — false-positive rate on user prompts is too high.
- */
-const PATTERNS = [
-    { re: /sk-[a-zA-Z0-9_-]{20,}/g, replacement: "sk-***REDACTED***" },
-    { re: /ghp_[a-zA-Z0-9]{36}/g, replacement: "ghp_***REDACTED***" },
-    { re: /AKIA[0-9A-Z]{16}/g, replacement: "AKIA***REDACTED***" },
-    {
-        re: /-----BEGIN [A-Z ]+-----[\s\S]*?-----END [A-Z ]+-----/g,
-        replacement: "-----REDACTED-PEM-BLOCK-----",
-    },
-];
-export function scrubSecrets(input) {
-    let out = input;
-    for (const { re, replacement } of PATTERNS) {
-        out = out.replace(re, replacement);
-    }
-    return out;
-}
-export function scrubObject(value) {
-    if (typeof value === "string")
-        return scrubSecrets(value);
-    if (Array.isArray(value))
-        return value.map((v) => scrubObject(v));
-    if (value && typeof value === "object") {
-        const out = {};
-        for (const [k, v] of Object.entries(value)) {
-            out[k] = scrubObject(v);
-        }
-        return out;
-    }
-    return value;
-}
-//# sourceMappingURL=redact.js.map

package/dist/orchviz/redact.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"redact.js","sourceRoot":"","sources":["../../src/orchviz/redact.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,MAAM,QAAQ,GAAuD;IACpE,EAAE,EAAE,EAAE,wBAAwB,EAAE,WAAW,EAAE,mBAAmB,EAAE;IAClE,EAAE,EAAE,EAAE,sBAAsB,EAAE,WAAW,EAAE,oBAAoB,EAAE;IACjE,EAAE,EAAE,EAAE,mBAAmB,EAAE,WAAW,EAAE,oBAAoB,EAAE;IAC9D;QACC,EAAE,EAAE,uDAAuD;QAC3D,WAAW,EAAE,8BAA8B;KAC3C;CACD,CAAC;AAEF,MAAM,UAAU,YAAY,CAAC,KAAa;IACzC,IAAI,GAAG,GAAG,KAAK,CAAC;IAChB,KAAK,MAAM,EAAE,EAAE,EAAE,WAAW,EAAE,IAAI,QAAQ,EAAE,CAAC;QAC5C,GAAG,GAAG,GAAG,CAAC,OAAO,CAAC,EAAE,EAAE,WAAW,CAAC,CAAC;IACpC,CAAC;IACD,OAAO,GAAG,CAAC;AACZ,CAAC;AAED,MAAM,UAAU,WAAW,CAAI,KAAQ;IACtC,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,YAAY,CAAC,KAAK,CAAiB,CAAC;IAC1E,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC,CAAiB,CAAC;IAClF,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACxC,MAAM,GAAG,GAA4B,EAAE,CAAC;QACxC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAgC,CAAC,EAAE,CAAC;YACvE,GAAG,CAAC,CAAC,CAAC,GAAG,WAAW,CAAC,CAAC,CAAC,CAAC;QACzB,CAAC;QACD,OAAO,GAAmB,CAAC;IAC5B,CAAC;IACD,OAAO,KAAK,CAAC;AACd,CAAC"}

package/dist/orchviz/sanitize.d.ts

@@ -1,11 +0,0 @@
-/**
- * Combined sanitization for events leaving the server (SSE / API).
- * - stripAnsi  → defense vs ANSI-injection (red-team Critical #1)
- * - scrubSecrets → defense vs key/PEM leak (red-team Medium #13 / Q3)
- * - newline scrubbing → defense vs SSE frame injection (red-team RT2 #2)
- *
- * Recursive: walks every string in nested objects/arrays.
- */
-import type { AgentEvent } from "./protocol.js";
-export declare function sanitizeEvent(event: AgentEvent): AgentEvent;
-//# sourceMappingURL=sanitize.d.ts.map

package/dist/orchviz/sanitize.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"sanitize.d.ts","sourceRoot":"","sources":["../../src/orchviz/sanitize.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAuBhD,wBAAgB,aAAa,CAAC,KAAK,EAAE,UAAU,GAAG,UAAU,CAO3D"}

package/dist/orchviz/sanitize.js

@@ -1,38 +0,0 @@
-/**
- * Combined sanitization for events leaving the server (SSE / API).
- * - stripAnsi  → defense vs ANSI-injection (red-team Critical #1)
- * - scrubSecrets → defense vs key/PEM leak (red-team Medium #13 / Q3)
- * - newline scrubbing → defense vs SSE frame injection (red-team RT2 #2)
- *
- * Recursive: walks every string in nested objects/arrays.
- */
-import { stripAnsi } from "./parser/strip-ansi.js";
-import { scrubSecrets } from "./redact.js";
-function sanitizeString(s) {
-    // Strip ANSI, scrub secrets, then collapse \r\n / \n that would break SSE frames.
-    const cleaned = scrubSecrets(stripAnsi(s));
-    return cleaned.replace(/\r\n|\r|\n/g, " ");
-}
-function sanitizeValue(v) {
-    if (typeof v === "string")
-        return sanitizeString(v);
-    if (Array.isArray(v))
-        return v.map(sanitizeValue);
-    if (v && typeof v === "object") {
-        const out = {};
-        for (const [k, val] of Object.entries(v)) {
-            out[k] = sanitizeValue(val);
-        }
-        return out;
-    }
-    return v;
-}
-export function sanitizeEvent(event) {
-    return {
-        time: event.time,
-        type: event.type,
-        payload: sanitizeValue(event.payload),
-        ...(event.sessionId ? { sessionId: event.sessionId } : {}),
-    };
-}
-//# sourceMappingURL=sanitize.js.map

package/dist/orchviz/sanitize.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"sanitize.js","sourceRoot":"","sources":["../../src/orchviz/sanitize.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAGH,OAAO,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AACnD,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAE3C,SAAS,cAAc,CAAC,CAAS;IAChC,kFAAkF;IAClF,MAAM,OAAO,GAAG,YAAY,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3C,OAAO,OAAO,CAAC,OAAO,CAAC,aAAa,EAAE,GAAG,CAAC,CAAC;AAC5C,CAAC;AAED,SAAS,aAAa,CAAC,CAAU;IAChC,IAAI,OAAO,CAAC,KAAK,QAAQ;QAAE,OAAO,cAAc,CAAC,CAAC,CAAC,CAAC;IACpD,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC;QAAE,OAAO,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;IAClD,IAAI,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,EAAE,CAAC;QAChC,MAAM,GAAG,GAA4B,EAAE,CAAC;QACxC,KAAK,MAAM,CAAC,CAAC,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,CAA4B,CAAC,EAAE,CAAC;YACrE,GAAG,CAAC,CAAC,CAAC,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;QAC7B,CAAC;QACD,OAAO,GAAG,CAAC;IACZ,CAAC;IACD,OAAO,CAAC,CAAC;AACV,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,KAAiB;IAC9C,OAAO;QACN,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,OAAO,EAAE,aAAa,CAAC,KAAK,CAAC,OAAO,CAA4B;QAChE,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC1D,CAAC;AACH,CAAC"}

package/dist/orchviz/server/__tests__/security-smoke.test.d.ts

@@ -1,13 +0,0 @@
-/**
- * Security smoke tests — adversarial and regression cases for OrchvizServer.
- *
- *   Adv-3  Symlink-out (M15): symlink inside planDir → 403; target unchanged
- *   Adv-4  Slow-loris (M11): body trickle triggers 5s timeout socket destroy
- *   R2-13  Orphaned .orchviz-tmp-* > 5min cleaned on next write
- *   V1-1   GET /api/plan most-recent works (no slug)
- *   V1-2   serveStatic 404 on unknown path
- *   V1-3   SSE /events responds with text/event-stream
- *   V1-4   Bad Host header → 403
- */
-export {};
-//# sourceMappingURL=security-smoke.test.d.ts.map

package/dist/orchviz/server/__tests__/security-smoke.test.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"security-smoke.test.d.ts","sourceRoot":"","sources":["../../../../src/orchviz/server/__tests__/security-smoke.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG"}