patchwork-os 0.2.0-alpha.34 → 0.2.0-alpha.35

package/dist/featureFlags.js

@@ -30,17 +30,67 @@ export function registerFlag(flag) {
     // Initialize with default value
     FLAG_VALUES.set(flag.id, flag.defaultValue);
 }
+/**
+ * Snapshot of env-derived kill-switch values, populated by `lockKillSwitchEnv()`
+ * at bridge startup. Once locked, kill-switch flags ignore live `process.env`
+ * mutations — defends against a plugin / recipe step trying to disable an
+ * active emergency stop by writing `process.env.PATCHWORK_FLAG_*`.
+ */
+const FROZEN_KILL_SWITCH_ENV = new Map();
+let envLocked = false;
+/**
+ * Snapshot the current `process.env` values for every registered kill-switch
+ * flag. Called once by `Bridge.start()` after `loadFlags()` so subsequent
+ * env mutations are ignored for kill-switch reads. Idempotent — second call
+ * is a no-op (would otherwise let an attacker re-snapshot a tampered env).
+ *
+ * Non-kill-switch flags remain dynamic so test infrastructure that mutates
+ * env per case continues to work.
+ */
+export function lockKillSwitchEnv() {
+    if (envLocked)
+        return;
+    for (const [id, flag] of FLAG_REGISTRY.entries()) {
+        if (!flag.isKillSwitch)
+            continue;
+        const envKey = `PATCHWORK_FLAG_${id.replace(/[.-]/g, "_").toUpperCase()}`;
+        const envVal = process.env[envKey];
+        FROZEN_KILL_SWITCH_ENV.set(id, envVal === undefined
+            ? undefined
+            : envVal === "1" || envVal.toLowerCase() === "true");
+    }
+    envLocked = true;
+}
+/**
+ * TEST ONLY — resets the env lock so tests can exercise both locked and
+ * unlocked paths without process restart. Do not call from production code.
+ */
+export function _resetEnvLockForTesting() {
+    envLocked = false;
+    FROZEN_KILL_SWITCH_ENV.clear();
+}
 /**
  * Check if a feature flag is enabled.
  * Resolution order (highest to lowest priority):
- *   1. Environment variable (PATCHWORK_FLAG_<ID>)
+ *   1. Environment variable (PATCHWORK_FLAG_<ID>) — frozen at `lockKillSwitchEnv()`
+ *      time for kill-switch flags so post-lock mutations are ignored
  *   2. User config file (~/.patchwork/config/flags.json)
  *   3. Default value from registration
  */
 export function isEnabled(flagId) {
     // Check cache first
     if (FLAG_VALUES.has(flagId)) {
-        // Check environment override
+        const flag = FLAG_REGISTRY.get(flagId);
+        // Kill-switch flags read from the frozen snapshot once locked. This
+        // closes the gap where a plugin / recipe step could `process.env[...] = "0"`
+        // to disable an active emergency stop.
+        if (envLocked && flag?.isKillSwitch) {
+            const frozen = FROZEN_KILL_SWITCH_ENV.get(flagId);
+            if (frozen !== undefined)
+                return frozen;
+            return FLAG_VALUES.get(flagId);
+        }
+        // Dynamic env read for non-kill-switch flags (test-friendly).
         const envKey = `PATCHWORK_FLAG_${flagId.replace(/[.-]/g, "_").toUpperCase()}`;
         const envVal = process.env[envKey];
         if (envVal !== undefined) {
@@ -117,18 +167,8 @@ function persistFlags() {
 // ============================================================================
 /** Kill switch for ALL write-tier operations */
 export const KILL_SWITCH_WRITES = "kill-switch.writes";
-/** Enable visual recipe debugger (A3) */
-export const FLAG_DEBUGGER = "ui.recipe-debugger";
-/** Enable CLI test/watch commands (A2) */
-export const FLAG_CLI_UX = "ui.cli-ux-commands";
-/** Enable mock connector harness (A4) */
-export const FLAG_MOCK_HARNESS = "experimental.mock-harness";
-/** Enable Wave 2 connectors (A5) */
-export const FLAG_WAVE2_CONNECTORS = "connector.wave2";
 /** Enable recipe lint with schema validation (A1) */
 export const FLAG_SCHEMA_LINT = "ui.schema-lint";
-/** Enable community recipe gallery (M5) */
-export const FLAG_COMMUNITY_GALLERY = "experimental.community-gallery";
 // Register built-in flags
 registerFlag({
     id: KILL_SWITCH_WRITES,
@@ -138,34 +178,6 @@ registerFlag({
     requiresOptIn: false,
     isKillSwitch: true,
 });
-registerFlag({
-    id: FLAG_DEBUGGER,
-    description: "Visual recipe debugger at /runs/[seq] with step timeline",
-    defaultValue: false,
-    category: "ui",
-    requiresOptIn: true,
-});
-registerFlag({
-    id: FLAG_CLI_UX,
-    description: "Enhanced CLI commands: new, lint, test, watch, record, fmt",
-    defaultValue: false,
-    category: "ui",
-    requiresOptIn: true,
-});
-registerFlag({
-    id: FLAG_MOCK_HARNESS,
-    description: "Mock connector harness with fixture recording and VCR replay",
-    defaultValue: false,
-    category: "experimental",
-    requiresOptIn: true,
-});
-registerFlag({
-    id: FLAG_WAVE2_CONNECTORS,
-    description: "Wave 2 connectors: Confluence, Zendesk, Intercom, HubSpot, Datadog, Stripe",
-    defaultValue: false,
-    category: "connector",
-    requiresOptIn: true,
-});
 registerFlag({
     id: FLAG_SCHEMA_LINT,
     description: "Recipe linting with JSON Schema validation",
@@ -173,13 +185,6 @@ registerFlag({
     category: "ui",
     requiresOptIn: true,
 });
-registerFlag({
-    id: FLAG_COMMUNITY_GALLERY,
-    description: "Community recipe gallery and GitHub-backed install",
-    defaultValue: false,
-    category: "experimental",
-    requiresOptIn: true,
-});
 // Load persisted flags on module init
 loadFlags();
 // ============================================================================

package/dist/featureFlags.js.map

@@ -1 +1 @@
-{"version":3,"file":"featureFlags.js","sourceRoot":"","sources":["../src/featureFlags.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC7E,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAkBjC,sCAAsC;AACtC,MAAM,aAAa,GAA6B,IAAI,GAAG,EAAE,CAAC;AAE1D,sDAAsD;AACtD,MAAM,WAAW,GAAyB,IAAI,GAAG,EAAE,CAAC;AAEpD,wBAAwB;AACxB,SAAS,YAAY;IACnB,OAAO,IAAI,CACT,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,YAAY,CAAC,EAC9D,QAAQ,EACR,YAAY,CACb,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,YAAY,CAAC,IAAiB;IAC5C,IAAI,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CAAC,iBAAiB,IAAI,CAAC,EAAE,yBAAyB,CAAC,CAAC;IACrE,CAAC;IACD,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;IACjC,gCAAgC;IAChC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC;AAC9C,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,SAAS,CAAC,MAAc;IACtC,oBAAoB;IACpB,IAAI,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;QAC5B,6BAA6B;QAC7B,MAAM,MAAM,GAAG,kBAAkB,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;QAC9E,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACnC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,OAAO,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,WAAW,EAAE,KAAK,MAAM,CAAC;QAC3D,CAAC;QACD,OAAO,WAAW,CAAC,GAAG,CAAC,MAAM,CAAE,CAAC;IAClC,CAAC;IAED,yCAAyC;IACzC,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,OAAO,CAAC,MAAc,EAAE,KAAc,EAAE,OAAO,GAAG,KAAK;IACrE,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CAAC,0BAA0B,MAAM,GAAG,CAAC,CAAC;IACvD,CAAC;IAED,WAAW,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IAE/B,IAAI,OAAO,EAAE,CAAC;QACZ,YAAY,EAAE,CAAC;IACjB,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,SAAS;IACvB,OAAO,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QACvD,GAAG,IAAI;QACP,YAAY,EAAE,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC;KACjC,CAAC,CAAC,CAAC;AACN,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,SAAS;IACvB,MAAM,IAAI,GAAG,YAAY,EAAE,CAAC;IAC5B,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACtB,OAAO;IACT,CAAC;IAED,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACxC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAA4B,CAAC;QAE1D,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YAClD,IAAI,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC3B,WAAW,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YAC9B,CAAC;QACH,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,sCAAsC;IACxC,CAAC;AACH,CAAC;AAED;;GAEG;AACH,SAAS,YAAY;IACnB,MAAM,IAAI,GAAG,YAAY,EAAE,CAAC;IAC5B,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAE7B,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACrB,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACtC,CAAC;IAED,MAAM,MAAM,GAA4B,EAAE,CAAC;IAC3C,KAAK,MAAM,CAAC,EAAE,EAAE,KAAK,CAAC,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,CAAC;QAChD,MAAM,IAAI,GAAG,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACnC,sCAAsC;QACtC,IAAI,IAAI,IAAI,KAAK,KAAK,IAAI,CAAC,YAAY,EAAE,CAAC;YACxC,MAAM,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC;QACrB,CAAC;IACH,CAAC;IAED,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;AACvD,CAAC;AAED,+EAA+E;AAC/E,iBAAiB;AACjB,+EAA+E;AAE/E,gDAAgD;AAChD,MAAM,CAAC,MAAM,kBAAkB,GAAG,oBAAoB,CAAC;AAEvD,yCAAyC;AACzC,MAAM,CAAC,MAAM,aAAa,GAAG,oBAAoB,CAAC;AAElD,0CAA0C;AAC1C,MAAM,CAAC,MAAM,WAAW,GAAG,oBAAoB,CAAC;AAEhD,yCAAyC;AACzC,MAAM,CAAC,MAAM,iBAAiB,GAAG,2BAA2B,CAAC;AAE7D,oCAAoC;AACpC,MAAM,CAAC,MAAM,qBAAqB,GAAG,iBAAiB,CAAC;AAEvD,qDAAqD;AACrD,MAAM,CAAC,MAAM,gBAAgB,GAAG,gBAAgB,CAAC;AAEjD,2CAA2C;AAC3C,MAAM,CAAC,MAAM,sBAAsB,GAAG,gCAAgC,CAAC;AAEvE,0BAA0B;AAC1B,YAAY,CAAC;IACX,EAAE,EAAE,kBAAkB;IACtB,WAAW,EACT,uGAAuG;IACzG,YAAY,EAAE,KAAK;IACnB,QAAQ,EAAE,QAAQ;IAClB,aAAa,EAAE,KAAK;IACpB,YAAY,EAAE,IAAI;CACnB,CAAC,CAAC;AAEH,YAAY,CAAC;IACX,EAAE,EAAE,aAAa;IACjB,WAAW,EAAE,0DAA0D;IACvE,YAAY,EAAE,KAAK;IACnB,QAAQ,EAAE,IAAI;IACd,aAAa,EAAE,IAAI;CACpB,CAAC,CAAC;AAEH,YAAY,CAAC;IACX,EAAE,EAAE,WAAW;IACf,WAAW,EAAE,4DAA4D;IACzE,YAAY,EAAE,KAAK;IACnB,QAAQ,EAAE,IAAI;IACd,aAAa,EAAE,IAAI;CACpB,CAAC,CAAC;AAEH,YAAY,CAAC;IACX,EAAE,EAAE,iBAAiB;IACrB,WAAW,EAAE,8DAA8D;IAC3E,YAAY,EAAE,KAAK;IACnB,QAAQ,EAAE,cAAc;IACxB,aAAa,EAAE,IAAI;CACpB,CAAC,CAAC;AAEH,YAAY,CAAC;IACX,EAAE,EAAE,qBAAqB;IACzB,WAAW,EACT,4EAA4E;IAC9E,YAAY,EAAE,KAAK;IACnB,QAAQ,EAAE,WAAW;IACrB,aAAa,EAAE,IAAI;CACpB,CAAC,CAAC;AAEH,YAAY,CAAC;IACX,EAAE,EAAE,gBAAgB;IACpB,WAAW,EAAE,4CAA4C;IACzD,YAAY,EAAE,KAAK;IACnB,QAAQ,EAAE,IAAI;IACd,aAAa,EAAE,IAAI;CACpB,CAAC,CAAC;AAEH,YAAY,CAAC;IACX,EAAE,EAAE,sBAAsB;IAC1B,WAAW,EAAE,oDAAoD;IACjE,YAAY,EAAE,KAAK;IACnB,QAAQ,EAAE,cAAc;IACxB,aAAa,EAAE,IAAI;CACpB,CAAC,CAAC;AAEH,sCAAsC;AACtC,SAAS,EAAE,CAAC;AAEZ,+EAA+E;AAC/E,sBAAsB;AACtB,+EAA+E;AAE/E;;GAEG;AACH,MAAM,UAAU,uBAAuB;IACrC,OAAO,SAAS,CAAC,kBAAkB,CAAC,CAAC;AACvC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAAC,SAAiB;IAClD,IAAI,uBAAuB,EAAE,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CACb,2CAA2C,SAAS,IAAI;YACtD,qFAAqF,CACxF,CAAC;IACJ,CAAC;AACH,CAAC"}
+{"version":3,"file":"featureFlags.js","sourceRoot":"","sources":["../src/featureFlags.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC7E,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAkBjC,sCAAsC;AACtC,MAAM,aAAa,GAA6B,IAAI,GAAG,EAAE,CAAC;AAE1D,sDAAsD;AACtD,MAAM,WAAW,GAAyB,IAAI,GAAG,EAAE,CAAC;AAEpD,wBAAwB;AACxB,SAAS,YAAY;IACnB,OAAO,IAAI,CACT,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,YAAY,CAAC,EAC9D,QAAQ,EACR,YAAY,CACb,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,YAAY,CAAC,IAAiB;IAC5C,IAAI,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CAAC,iBAAiB,IAAI,CAAC,EAAE,yBAAyB,CAAC,CAAC;IACrE,CAAC;IACD,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;IACjC,gCAAgC;IAChC,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC;AAC9C,CAAC;AAED;;;;;GAKG;AACH,MAAM,sBAAsB,GAAqC,IAAI,GAAG,EAAE,CAAC;AAC3E,IAAI,SAAS,GAAG,KAAK,CAAC;AAEtB;;;;;;;;GAQG;AACH,MAAM,UAAU,iBAAiB;IAC/B,IAAI,SAAS;QAAE,OAAO;IACtB,KAAK,MAAM,CAAC,EAAE,EAAE,IAAI,CAAC,IAAI,aAAa,CAAC,OAAO,EAAE,EAAE,CAAC;QACjD,IAAI,CAAC,IAAI,CAAC,YAAY;YAAE,SAAS;QACjC,MAAM,MAAM,GAAG,kBAAkB,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;QAC1E,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACnC,sBAAsB,CAAC,GAAG,CACxB,EAAE,EACF,MAAM,KAAK,SAAS;YAClB,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,WAAW,EAAE,KAAK,MAAM,CACtD,CAAC;IACJ,CAAC;IACD,SAAS,GAAG,IAAI,CAAC;AACnB,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,uBAAuB;IACrC,SAAS,GAAG,KAAK,CAAC;IAClB,sBAAsB,CAAC,KAAK,EAAE,CAAC;AACjC,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,SAAS,CAAC,MAAc;IACtC,oBAAoB;IACpB,IAAI,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,GAAG,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACvC,oEAAoE;QACpE,6EAA6E;QAC7E,uCAAuC;QACvC,IAAI,SAAS,IAAI,IAAI,EAAE,YAAY,EAAE,CAAC;YACpC,MAAM,MAAM,GAAG,sBAAsB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YAClD,IAAI,MAAM,KAAK,SAAS;gBAAE,OAAO,MAAM,CAAC;YACxC,OAAO,WAAW,CAAC,GAAG,CAAC,MAAM,CAAE,CAAC;QAClC,CAAC;QACD,8DAA8D;QAC9D,MAAM,MAAM,GAAG,kBAAkB,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;QAC9E,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACnC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,OAAO,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,WAAW,EAAE,KAAK,MAAM,CAAC;QAC3D,CAAC;QACD,OAAO,WAAW,CAAC,GAAG,CAAC,MAAM,CAAE,CAAC;IAClC,CAAC;IAED,yCAAyC;IACzC,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,OAAO,CAAC,MAAc,EAAE,KAAc,EAAE,OAAO,GAAG,KAAK;IACrE,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CAAC,0BAA0B,MAAM,GAAG,CAAC,CAAC;IACvD,CAAC;IAED,WAAW,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IAE/B,IAAI,OAAO,EAAE,CAAC;QACZ,YAAY,EAAE,CAAC;IACjB,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,SAAS;IACvB,OAAO,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,MAAM,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;QACvD,GAAG,IAAI;QACP,YAAY,EAAE,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC;KACjC,CAAC,CAAC,CAAC;AACN,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,SAAS;IACvB,MAAM,IAAI,GAAG,YAAY,EAAE,CAAC;IAC5B,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACtB,OAAO;IACT,CAAC;IAED,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACxC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAA4B,CAAC;QAE1D,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;YAClD,IAAI,aAAa,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC3B,WAAW,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;YAC9B,CAAC;QACH,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,sCAAsC;IACxC,CAAC;AACH,CAAC;AAED;;GAEG;AACH,SAAS,YAAY;IACnB,MAAM,IAAI,GAAG,YAAY,EAAE,CAAC;IAC5B,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAE7B,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACrB,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACtC,CAAC;IAED,MAAM,MAAM,GAA4B,EAAE,CAAC;IAC3C,KAAK,MAAM,CAAC,EAAE,EAAE,KAAK,CAAC,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,CAAC;QAChD,MAAM,IAAI,GAAG,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACnC,sCAAsC;QACtC,IAAI,IAAI,IAAI,KAAK,KAAK,IAAI,CAAC,YAAY,EAAE,CAAC;YACxC,MAAM,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC;QACrB,CAAC;IACH,CAAC;IAED,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;AACvD,CAAC;AAED,+EAA+E;AAC/E,iBAAiB;AACjB,+EAA+E;AAE/E,gDAAgD;AAChD,MAAM,CAAC,MAAM,kBAAkB,GAAG,oBAAoB,CAAC;AAEvD,qDAAqD;AACrD,MAAM,CAAC,MAAM,gBAAgB,GAAG,gBAAgB,CAAC;AAEjD,0BAA0B;AAC1B,YAAY,CAAC;IACX,EAAE,EAAE,kBAAkB;IACtB,WAAW,EACT,uGAAuG;IACzG,YAAY,EAAE,KAAK;IACnB,QAAQ,EAAE,QAAQ;IAClB,aAAa,EAAE,KAAK;IACpB,YAAY,EAAE,IAAI;CACnB,CAAC,CAAC;AAEH,YAAY,CAAC;IACX,EAAE,EAAE,gBAAgB;IACpB,WAAW,EAAE,4CAA4C;IACzD,YAAY,EAAE,KAAK;IACnB,QAAQ,EAAE,IAAI;IACd,aAAa,EAAE,IAAI;CACpB,CAAC,CAAC;AAEH,sCAAsC;AACtC,SAAS,EAAE,CAAC;AAEZ,+EAA+E;AAC/E,sBAAsB;AACtB,+EAA+E;AAE/E;;GAEG;AACH,MAAM,UAAU,uBAAuB;IACrC,OAAO,SAAS,CAAC,kBAAkB,CAAC,CAAC;AACvC,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAAC,SAAiB;IAClD,IAAI,uBAAuB,EAAE,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CACb,2CAA2C,SAAS,IAAI;YACtD,qFAAqF,CACxF,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/index.js

@@ -92,6 +92,59 @@ async function downloadVsixFromOpenVsx() {
     writeFileSync(tmpPath, Buffer.from(buf));
     return tmpPath;
 }
+// Closes the race where bridge.start() began initialising in parallel with
+// a subcommand's async work — observed in the 2026-04-29 dogfood pass
+// where `recipe install` errors interleaved with bridge "Tools: full"
+// startup logs.
+//
+// Every subcommand `if`-block below dispatches via an `(async () => {...})()`
+// IIFE that ends with `process.exit`. The IIFE invocation returns
+// synchronously, so without this gate, control immediately falls through
+// to the bridge.start() block at end-of-file and starts initialising
+// alongside the subcommand's async work. process.exit fires *eventually*
+// after the await chain, but the bridge has already begun in parallel.
+// Two IIFEs (patchwork no-args dashboard, recipe watch) lack process.exit
+// entirely — without this gate they would run alongside the bridge
+// indefinitely.
+//
+// Single source of truth for "is this argv invoking a subcommand?" — the
+// same list is also used by the unknown-command suggester at L2570.
+const KNOWN_SUBCOMMANDS = [
+    "init",
+    "patchwork-init",
+    "start-all",
+    "install-extension",
+    "gen-claude-md",
+    "print-token",
+    "gen-plugin-stub",
+    "notify",
+    "install",
+    "marketplace",
+    "status",
+    "shim",
+    "recipe",
+    "dashboard",
+    "launchd",
+];
+const __invokedSubcommand = (() => {
+    const sub = process.argv[2];
+    if (!sub || sub.startsWith("-"))
+        return null;
+    // Treat KNOWN_SUBCOMMANDS as the dispatch source. The bare-binary
+    // dashboard launcher (no argv) is handled separately below.
+    return KNOWN_SUBCOMMANDS.includes(sub)
+        ? sub
+        : null;
+})();
+const __invokedBareBinaryDashboard = (() => {
+    if (process.argv[2])
+        return false;
+    const binName = path.basename(process.argv[1] ?? "");
+    return (binName === "patchwork-os" ||
+        binName === "patchwork" ||
+        binName === "patchwork.js");
+})();
+const __subcommandWillRun = __invokedSubcommand !== null || __invokedBareBinaryDashboard;
 // Handle --version flag — print package version and exit.
 if (process.argv[2] === "--version" || process.argv[2] === "-v") {
     console.log(`claude-ide-bridge ${PACKAGE_VERSION}`);
@@ -597,6 +650,68 @@ if (process.argv[2] === "recipe" && process.argv[3] === "list") {
         process.exit(0);
     })();
 }
+// Patchwork: `patchwork recipe enable <name>` / `recipe disable <name>` —
+// flip the disabled marker so scheduled triggers (cron/file-watch) take
+// effect (or stop). Manual `recipe run` is unaffected.
+if (process.argv[2] === "recipe" &&
+    (process.argv[3] === "enable" || process.argv[3] === "disable")) {
+    const subcommand = process.argv[3];
+    const name = process.argv[4];
+    if (!name) {
+        process.stderr.write(`Usage: patchwork recipe ${subcommand} <name>\n` +
+            `  See \`patchwork recipe list\` for installed recipe names.\n`);
+        process.exit(1);
+    }
+    (async () => {
+        try {
+            const { runRecipeEnable, runRecipeDisable } = await import("./commands/recipeInstall.js");
+            if (subcommand === "enable") {
+                const r = runRecipeEnable(name);
+                process.stdout.write(r.alreadyEnabled
+                    ? `  ℹ ${r.name} is already enabled\n`
+                    : `  ✓ enabled ${r.name}\n`);
+            }
+            else {
+                const r = runRecipeDisable(name);
+                process.stdout.write(r.alreadyDisabled
+                    ? `  ℹ ${r.name} is already disabled\n`
+                    : `  ✓ disabled ${r.name}\n`);
+            }
+            process.exit(0);
+        }
+        catch (err) {
+            process.stderr.write(`Error: ${err instanceof Error ? err.message : String(err)}\n`);
+            process.exit(1);
+        }
+    })();
+}
+// Patchwork: `patchwork recipe uninstall <name>` — remove an installed recipe
+// directory and all its files. Sister to `recipe install`. Idempotent on
+// success (subsequent uninstalls error with "no installed recipe").
+if (process.argv[2] === "recipe" && process.argv[3] === "uninstall") {
+    const name = process.argv[4];
+    if (!name) {
+        process.stderr.write("Usage: patchwork recipe uninstall <name>\n" +
+            "  See `patchwork recipe list` for installed recipe names.\n");
+        process.exit(1);
+    }
+    (async () => {
+        try {
+            const { runRecipeUninstall } = await import("./commands/recipeInstall.js");
+            const r = runRecipeUninstall(name);
+            if (!r.ok) {
+                process.stderr.write(`Error: ${r.error}\n`);
+                process.exit(1);
+            }
+            process.stdout.write(`  ✓ Uninstalled ${name} (${r.installDir})\n`);
+            process.exit(0);
+        }
+        catch (err) {
+            process.stderr.write(`Error: ${err instanceof Error ? err.message : String(err)}\n`);
+            process.exit(1);
+        }
+    })();
+}
 // Patchwork: `patchwork recipe run <name>` — runs a recipe locally or via
 // a running bridge's /recipes/run endpoint if one is available.
 if (process.argv[2] === "recipe" && process.argv[3] === "run") {
@@ -836,7 +951,10 @@ if (process.argv[2] === "recipe" && process.argv[3] === "new") {
     const args = process.argv.slice(4);
     const recipeName = args[0];
     if (!recipeName) {
-        process.stderr.write("Usage: patchwork recipe new <name> [--template <name>] [--desc <description>]\n");
+        process.stderr.write("Usage: patchwork recipe new <name> [--template <name>] [--desc <description>] [--out <dir>]\n" +
+            "  --out <dir>  Write the recipe to <dir>/<name>.yaml.\n" +
+            "               Defaults to ~/.patchwork/recipes/ — pass `--out .` to\n" +
+            "               write into the current directory instead.\n");
         process.stderr.write("\nTemplates:\n");
         (async () => {
             const { listTemplates } = await import("./commands/recipe.js");
@@ -855,10 +973,16 @@ if (process.argv[2] === "recipe" && process.argv[3] === "new") {
                 const descIdx = args.indexOf("--desc");
                 const description = (descIdx >= 0 ? args[descIdx + 1] : undefined) ??
                     `Recipe: ${recipeName}`;
+                const outIdx = args.indexOf("--out");
+                const outRaw = outIdx >= 0 ? args[outIdx + 1] : undefined;
+                // `--out .` is the common case for "scaffold in cwd" — resolve so
+                // the success message shows the absolute path the user can open.
+                const outputDir = outRaw ? path.resolve(outRaw) : undefined;
                 const result = runNew({
                     name: recipeName,
                     description,
                     ...(template ? { template } : {}),
+                    ...(outputDir ? { outputDir } : {}),
                 });
                 process.stdout.write(`  ✓ Created ${result.path}\n`);
                 process.exit(0);
@@ -1962,27 +2086,12 @@ if (process.argv[2] === "launchd") {
     }
 }
 {
-    const KNOWN_COMMANDS = [
-        "init",
-        "patchwork-init",
-        "start-all",
-        "install-extension",
-        "gen-claude-md",
-        "print-token",
-        "gen-plugin-stub",
-        "notify",
-        "install",
-        "marketplace",
-        "status",
-        "shim",
-        "recipe",
-        "dashboard",
-        "launchd",
-    ];
+    // Reuses the KNOWN_SUBCOMMANDS list from the top of this file as a single
+    // source of truth for "what subcommand argv tokens are recognized".
     const unknownSub = process.argv[2];
     if (unknownSub &&
         !unknownSub.startsWith("-") &&
-        !KNOWN_COMMANDS.includes(unknownSub)) {
+        !KNOWN_SUBCOMMANDS.includes(unknownSub)) {
         const lev = (a, b) => {
             const dp = Array.from({ length: a.length + 1 }, (_, i) => Array.from({ length: b.length + 1 }, (_, j) => i === 0 ? j : j === 0 ? i : 0));
             for (let i = 1; i <= a.length; i++)
@@ -1998,127 +2107,146 @@ if (process.argv[2] === "launchd") {
             // biome-ignore lint/style/noNonNullAssertion: dp is fully pre-allocated
             return dp[a.length][b.length];
         };
-        const closest = [...KNOWN_COMMANDS].sort((a, b) => lev(unknownSub, a) - lev(unknownSub, b))[0];
+        const closest = [...KNOWN_SUBCOMMANDS].sort((a, b) => lev(unknownSub, a) - lev(unknownSub, b))[0];
         console.error(`Unknown command: '${unknownSub}'. Did you mean: ${closest}?`);
         process.exit(1);
     }
 }
-const config = parseConfig(process.argv);
-// Patchwork: resolve --model flag (optional, non-invasive) — stashes the
-// configured adapter on globalThis for consumers that opt into the adapter
-// layer. Bridge subprocess driver still works when --model is absent.
-try {
-    const { resolveModel } = await import("./patchworkCli.js");
-    const resolved = resolveModel(process.argv);
-    if (resolved) {
-        globalThis.__patchworkAdapter =
-            resolved.adapter;
-        process.stderr.write(`[patchwork] model adapter initialized: ${resolved.adapter.name}\n`);
-    }
-}
-catch (err) {
-    process.stderr.write(`[patchwork] adapter init failed: ${err instanceof Error ? err.message : String(err)}\n`);
+// Skip the bridge-mode tail entirely when a subcommand IIFE will own the
+// process. `parseConfig` validates argv against the bridge's known-flag list
+// and raises "Unknown option" for subcommand-specific flags (e.g. `recipe
+// new --out .`); without this guard that throw kills the process before
+// the IIFE's microtask runs. The subcommand handles its own arg parsing.
+if (__subcommandWillRun) {
+    // Subcommand IIFE is in flight or about to fire; sit tight until it
+    // process.exits. Empty body — control naturally falls past end-of-file
+    // and Node keeps the process alive on the IIFE's pending microtask.
 }
-// If --analytics flag was passed, persist the preference immediately
-if (config.analyticsEnabled !== null) {
-    setAnalyticsPref(config.analyticsEnabled);
-}
-// Auto-tmux: if requested and not already inside tmux or screen, re-exec inside a tmux session
-if (config.autoTmux &&
-    !process.env.TMUX &&
-    !process.env.STY &&
-    !process.env.ZELLIJ &&
-    !process.env.ZELLIJ_SESSION_NAME) {
-    const ws = config.workspace.replace(/[^a-zA-Z0-9]/g, "").slice(-8);
-    const hash = crypto
-        .createHash("sha256")
-        .update(config.workspace)
-        .digest("hex")
-        .slice(0, 6);
-    const sessionName = `claude-bridge-${ws}${hash}`;
-    // Check if tmux is available
-    const tmuxCheck = spawnSync("which", ["tmux"], { stdio: "ignore" });
-    if (tmuxCheck.status !== 0) {
-        process.stderr.write("WARNING: --auto-tmux requested but tmux is not installed. Running without tmux.\n");
-    }
-    else {
-        // Strip --auto-tmux from argv to avoid infinite re-exec loop
-        const newArgv = process.argv.filter((a) => a !== "--auto-tmux");
-        // Pass each argv token as a separate tmux argument so paths with spaces work correctly
-        const result = spawnSync("tmux", ["new-session", "-d", "-s", sessionName, ...newArgv], { stdio: "inherit", timeout: 5000 });
-        if (result.status === 0) {
-            process.stderr.write(`Bridge launched in tmux session '${sessionName}'.\n`);
-            process.stderr.write(`  Attach with: tmux attach -t ${sessionName}\n`);
-            process.exit(0);
-        }
-        else {
-            // tmux session likely already exists — attach to it or fall through
-            process.stderr.write(`WARNING: Could not create tmux session '${sessionName}' (already exists?). Running without auto-tmux.\n`);
+else {
+    const config = parseConfig(process.argv);
+    // Patchwork: resolve --model flag (optional, non-invasive) — stashes the
+    // configured adapter on globalThis for consumers that opt into the adapter
+    // layer. Bridge subprocess driver still works when --model is absent.
+    try {
+        const { resolveModel } = await import("./patchworkCli.js");
+        const resolved = resolveModel(process.argv);
+        if (resolved) {
+            globalThis.__patchworkAdapter =
+                resolved.adapter;
+            process.stderr.write(`[patchwork] model adapter initialized: ${resolved.adapter.name}\n`);
         }
     }
-}
-// --watch: supervisor mode — spawn this binary as a child (without --watch) and restart on crash
-if (config.watch) {
-    const childArgv = process.argv.filter((a) => a !== "--watch");
-    const STABLE_THRESHOLD_MS = 60_000;
-    const BASE_DELAY_MS = 2_000;
-    const MAX_DELAY_MS = 30_000;
-    let delay = BASE_DELAY_MS;
-    let stopping = false;
-    function runChild() {
-        if (stopping)
-            return;
-        const startAt = Date.now();
-        process.stderr.write("[supervisor] starting bridge\n");
-        const [cmd, ...args] = childArgv;
-        if (!cmd)
-            return;
-        const child = spawn(cmd, args, {
-            stdio: "inherit",
-        });
-        for (const sig of ["SIGTERM", "SIGINT"]) {
-            process.once(sig, () => {
-                stopping = true;
-                child.kill(sig);
-            });
+    catch (err) {
+        process.stderr.write(`[patchwork] adapter init failed: ${err instanceof Error ? err.message : String(err)}\n`);
+    }
+    // If --analytics flag was passed, persist the preference immediately
+    if (config.analyticsEnabled !== null) {
+        setAnalyticsPref(config.analyticsEnabled);
+    }
+    // Auto-tmux: if requested and not already inside tmux or screen, re-exec inside a tmux session
+    if (config.autoTmux &&
+        !process.env.TMUX &&
+        !process.env.STY &&
+        !process.env.ZELLIJ &&
+        !process.env.ZELLIJ_SESSION_NAME) {
+        const ws = config.workspace.replace(/[^a-zA-Z0-9]/g, "").slice(-8);
+        const hash = crypto
+            .createHash("sha256")
+            .update(config.workspace)
+            .digest("hex")
+            .slice(0, 6);
+        const sessionName = `claude-bridge-${ws}${hash}`;
+        // Check if tmux is available
+        const tmuxCheck = spawnSync("which", ["tmux"], { stdio: "ignore" });
+        if (tmuxCheck.status !== 0) {
+            process.stderr.write("WARNING: --auto-tmux requested but tmux is not installed. Running without tmux.\n");
         }
-        child.on("exit", (code, signal) => {
-            if (stopping) {
-                process.stderr.write("[supervisor] bridge stopped\n");
+        else {
+            // Strip --auto-tmux from argv to avoid infinite re-exec loop
+            const newArgv = process.argv.filter((a) => a !== "--auto-tmux");
+            // Pass each argv token as a separate tmux argument so paths with spaces work correctly
+            const result = spawnSync("tmux", ["new-session", "-d", "-s", sessionName, ...newArgv], { stdio: "inherit", timeout: 5000 });
+            if (result.status === 0) {
+                process.stderr.write(`Bridge launched in tmux session '${sessionName}'.\n`);
+                process.stderr.write(`  Attach with: tmux attach -t ${sessionName}\n`);
                 process.exit(0);
             }
-            const uptime = Date.now() - startAt;
-            if (uptime >= STABLE_THRESHOLD_MS) {
-                delay = BASE_DELAY_MS; // reset backoff after a stable run
+            else {
+                // tmux session likely already exists — attach to it or fall through
+                process.stderr.write(`WARNING: Could not create tmux session '${sessionName}' (already exists?). Running without auto-tmux.\n`);
             }
-            process.stderr.write(`[supervisor] bridge exited (code=${code ?? signal}), restarting in ${delay / 1000}s\n`);
-            setTimeout(() => {
-                delay = Math.min(delay * 2, MAX_DELAY_MS);
-                runChild();
-            }, delay);
-        });
+        }
     }
-    runChild();
-}
-else {
-    const bridge = new Bridge(config);
-    bridge.start().catch((err) => {
-        const message = err instanceof Error ? err.message : String(err);
-        process.stderr.write(`Error: ${message}\n`);
-        process.exit(1);
-    });
-    // F5: Silent self-update nudge (fire-and-forget)
-    import("node:child_process")
-        .then(({ exec }) => {
-        exec("npm view claude-ide-bridge version", { timeout: 5000 }, (err, stdout) => {
-            if (err || !stdout)
+    // Skip bridge boot when a subcommand IIFE is doing the work — avoids the
+    // race where bridge.start() began initialising in parallel with the
+    // subcommand's async path. See the KNOWN_SUBCOMMANDS / __subcommandWillRun
+    // gate at the top of this file.
+    if (__subcommandWillRun) {
+        // intentionally empty — subcommand IIFE owns the process from here.
+    }
+    // --watch: supervisor mode — spawn this binary as a child (without --watch) and restart on crash
+    else if (config.watch) {
+        const childArgv = process.argv.filter((a) => a !== "--watch");
+        const STABLE_THRESHOLD_MS = 60_000;
+        const BASE_DELAY_MS = 2_000;
+        const MAX_DELAY_MS = 30_000;
+        let delay = BASE_DELAY_MS;
+        let stopping = false;
+        function runChild() {
+            if (stopping)
+                return;
+            const startAt = Date.now();
+            process.stderr.write("[supervisor] starting bridge\n");
+            const [cmd, ...args] = childArgv;
+            if (!cmd)
                 return;
-            const latest = stdout.trim();
-            if (latest && semverGt(latest, PACKAGE_VERSION)) {
-                console.log(`\n  Bridge v${latest} available — run: npm update -g claude-ide-bridge\n`);
+            const child = spawn(cmd, args, {
+                stdio: "inherit",
+            });
+            for (const sig of ["SIGTERM", "SIGINT"]) {
+                process.once(sig, () => {
+                    stopping = true;
+                    child.kill(sig);
+                });
             }
+            child.on("exit", (code, signal) => {
+                if (stopping) {
+                    process.stderr.write("[supervisor] bridge stopped\n");
+                    process.exit(0);
+                }
+                const uptime = Date.now() - startAt;
+                if (uptime >= STABLE_THRESHOLD_MS) {
+                    delay = BASE_DELAY_MS; // reset backoff after a stable run
+                }
+                process.stderr.write(`[supervisor] bridge exited (code=${code ?? signal}), restarting in ${delay / 1000}s\n`);
+                setTimeout(() => {
+                    delay = Math.min(delay * 2, MAX_DELAY_MS);
+                    runChild();
+                }, delay);
+            });
+        }
+        runChild();
+    }
+    else {
+        const bridge = new Bridge(config);
+        bridge.start().catch((err) => {
+            const message = err instanceof Error ? err.message : String(err);
+            process.stderr.write(`Error: ${message}\n`);
+            process.exit(1);
         });
-    })
-        .catch(() => { });
-}
+        // F5: Silent self-update nudge (fire-and-forget)
+        import("node:child_process")
+            .then(({ exec }) => {
+            exec("npm view claude-ide-bridge version", { timeout: 5000 }, (err, stdout) => {
+                if (err || !stdout)
+                    return;
+                const latest = stdout.trim();
+                if (latest && semverGt(latest, PACKAGE_VERSION)) {
+                    console.log(`\n  Bridge v${latest} available — run: npm update -g claude-ide-bridge\n`);
+                }
+            });
+        })
+            .catch(() => { });
+    }
+} // end of `else` for `if (__subcommandWillRun)` (bridge-mode block)
 //# sourceMappingURL=index.js.map