patchwork-os 0.2.0-beta.1 → 0.2.0-beta.10.canary.100

package/dist/commitIssueLinkLog.d.ts

@@ -61,6 +61,14 @@ export declare class CommitIssueLinkLog {
     private readonly file;
     private readonly memoryCap;
     private readonly now;
+    /**
+     * Highest file size seen so far. ADR-0007 tail-on-read: every
+     * `query()` re-stats the file; if it grew, we re-parse and merge
+     * any rows with `seq > this.seq` (so a sibling bridge's appends
+     * become visible without holding a separate offset cursor). Matches
+     * the pattern already in `src/runLog.ts:syncFromDisk`.
+     */
+    private lastFileSize;
     constructor(opts: LinkLogOptions);
     /**
      * Record one link. De-duplicates against the most recent existing row for
@@ -81,5 +89,13 @@ export declare class CommitIssueLinkLog {
      * against the un-rotated file.
      */
     private rotateDisk;
+    /**
+     * Incrementally read any new lines appended to the file since last
+     * load. Matches the runLog `syncFromDisk` pattern: re-read whole
+     * file, but use the `seq > this.seq` guard so existing rows aren't
+     * re-pushed. Tail-on-read (ADR-0007) — sibling-bridge appends are
+     * picked up at the next `query()`.
+     */
+    private syncFromDisk;
     private loadExisting;
 }

package/dist/commitIssueLinkLog.js

@@ -1,5 +1,7 @@
-import { appendFileSync, mkdirSync, readFileSync, statSync, writeFileSync, } from "node:fs";
+import { appendFileSync, mkdirSync, readFileSync, statSync } from "node:fs";
 import path from "node:path";
+import { withFileLockSync } from "./fileLockSync.js";
+import { writeFileAtomicSync } from "./writeFileAtomic.js";
 const DEFAULT_MEMORY_CAP = 2_000;
 /**
  * Disk rotation thresholds. Mirrors RecipeRunLog: without rotation a busy
@@ -16,6 +18,14 @@ export class CommitIssueLinkLog {
     file;
     memoryCap;
     now;
+    /**
+     * Highest file size seen so far. ADR-0007 tail-on-read: every
+     * `query()` re-stats the file; if it grew, we re-parse and merge
+     * any rows with `seq > this.seq` (so a sibling bridge's appends
+     * become visible without holding a separate offset cursor). Matches
+     * the pattern already in `src/runLog.ts:syncFromDisk`.
+     */
+    lastFileSize = 0;
     constructor(opts) {
         this.opts = opts;
         this.file = path.join(opts.dir, "commit_issue_links.jsonl");
@@ -66,26 +76,32 @@ export class CommitIssueLinkLog {
         return link;
     }
     query(q = {}) {
-        let out = this.links;
-        if (q.sha) {
-            const needle = q.sha;
-            out = out.filter((l) => l.sha === needle || (needle.length >= 7 && l.sha.startsWith(needle)));
-        }
-        if (q.ref)
-            out = out.filter((l) => l.ref === q.ref);
-        if (q.workspace)
-            out = out.filter((l) => l.workspace === q.workspace);
-        if (q.linkType)
-            out = out.filter((l) => l.linkType === q.linkType);
-        if (q.resolved !== undefined) {
-            const wanted = q.resolved;
-            out = out.filter((l) => l.resolved === wanted);
-        }
-        if (q.after !== undefined) {
-            const after = q.after;
-            out = out.filter((l) => l.seq > after);
-        }
-        out = [...out].sort((a, b) => b.seq - a.seq);
+        // ADR-0007 tail-on-read: pick up any rows a sibling bridge appended
+        // since our last query / load. statSync-only when no growth.
+        this.syncFromDisk();
+        const sha = q.sha;
+        const ref = q.ref;
+        const workspace = q.workspace;
+        const linkType = q.linkType;
+        const resolved = q.resolved;
+        const after = q.after;
+        const out = [];
+        for (const l of this.links) {
+            if (sha && !(l.sha === sha || (sha.length >= 7 && l.sha.startsWith(sha))))
+                continue;
+            if (ref && l.ref !== ref)
+                continue;
+            if (workspace && l.workspace !== workspace)
+                continue;
+            if (linkType && l.linkType !== linkType)
+                continue;
+            if (resolved !== undefined && l.resolved !== resolved)
+                continue;
+            if (after !== undefined && l.seq <= after)
+                continue;
+            out.push(l);
+        }
+        out.sort((a, b) => b.seq - a.seq);
         const limit = Math.min(Math.max(q.limit ?? 100, 1), 1_000);
         return out.slice(0, limit);
     }
@@ -115,7 +131,24 @@ export class CommitIssueLinkLog {
                 if (code !== "ENOENT")
                     throw err;
             }
-            appendFileSync(this.file, `${JSON.stringify(link)}\n`, { mode: 0o600 });
+            // Per-file lock — ADR-0007 multi-bridge concurrency. See the
+            // matching block in src/decisionTraceLog.ts for the full
+            // rationale; same pattern.
+            withFileLockSync(this.file, () => {
+                appendFileSync(this.file, `${JSON.stringify(link)}\n`, { mode: 0o600 });
+                // Advance the tail-on-read cursor past our own write so the next
+                // query() doesn't re-read the row from disk (we already pushed it
+                // to this.links in `record`). The seq-gt guard in syncFromDisk
+                // would also defend, but bumping the size cursor lets that path
+                // short-circuit on `size <= lastFileSize` and skip a readFileSync.
+                try {
+                    this.lastFileSize = statSync(this.file).size;
+                }
+                catch {
+                    /* ENOENT after a successful append is very unlikely; if it
+                       happens the next syncFromDisk re-tries cleanly. */
+                }
+            });
         }
         catch (err) {
             this.opts.logger?.warn?.(`[linklog] append failed: ${err instanceof Error ? err.message : String(err)}`);
@@ -145,19 +178,71 @@ export class CommitIssueLinkLog {
                 lines = [];
                 joined = "";
             }
-            writeFileSync(this.file, joined.length > 0 ? `${joined}\n` : "", {
+            writeFileAtomicSync(this.file, joined.length > 0 ? `${joined}\n` : "", {
                 mode: 0o600,
             });
+            // Refresh the tail-on-read cursor to the post-rotation file size.
+            // Without this, the next syncFromDisk() would see `size <
+            // lastFileSize`, skip the read entirely, and miss every row a
+            // sibling bridge has appended since.
+            try {
+                this.lastFileSize = statSync(this.file).size;
+            }
+            catch {
+                this.lastFileSize = 0;
+            }
         }
         catch (err) {
             this.opts.logger?.warn?.(`[linklog] rotate failed: ${err instanceof Error ? err.message : String(err)}`);
         }
     }
+    /**
+     * Incrementally read any new lines appended to the file since last
+     * load. Matches the runLog `syncFromDisk` pattern: re-read whole
+     * file, but use the `seq > this.seq` guard so existing rows aren't
+     * re-pushed. Tail-on-read (ADR-0007) — sibling-bridge appends are
+     * picked up at the next `query()`.
+     */
+    syncFromDisk() {
+        try {
+            const size = statSync(this.file).size;
+            if (size <= this.lastFileSize)
+                return;
+            const raw = readFileSync(this.file, "utf-8");
+            for (const line of raw.split("\n")) {
+                if (!line)
+                    continue;
+                try {
+                    const parsed = JSON.parse(line);
+                    if (typeof parsed.seq !== "number" ||
+                        typeof parsed.sha !== "string" ||
+                        typeof parsed.ref !== "string") {
+                        continue;
+                    }
+                    if (parsed.seq > this.seq) {
+                        this.seq = parsed.seq;
+                        this.links.push(parsed);
+                        if (this.links.length > this.memoryCap)
+                            this.links.shift();
+                    }
+                }
+                catch {
+                    /* skip malformed */
+                }
+            }
+            this.lastFileSize = size;
+        }
+        catch {
+            /* file may not exist yet */
+        }
+    }
     loadExisting() {
+        let size;
         try {
-            statSync(this.file);
+            size = statSync(this.file).size;
         }
         catch {
+            this.lastFileSize = 0;
             return;
         }
         let raw;
@@ -186,6 +271,7 @@ export class CommitIssueLinkLog {
                 // skip malformed line
             }
         }
+        this.lastFileSize = size;
         if (this.links.length > this.memoryCap) {
             this.links.splice(0, this.links.length - this.memoryCap);
         }

package/dist/commitIssueLinkLog.js.map

@@ -1 +1 @@
-{"version":3,"file":"commitIssueLinkLog.js","sourceRoot":"","sources":["../src/commitIssueLinkLog.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,cAAc,EACd,SAAS,EACT,YAAY,EACZ,QAAQ,EACR,aAAa,GACd,MAAM,SAAS,CAAC;AACjB,OAAO,IAAI,MAAM,WAAW,CAAC;AAuC7B,MAAM,kBAAkB,GAAG,KAAK,CAAC;AAEjC;;;;;GAKG;AACH,MAAM,iBAAiB,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,OAAO;AAC9C,MAAM,iBAAiB,GAAG,MAAM,CAAC;AA0BjC,MAAM,OAAO,kBAAkB;IAOA;IANrB,KAAK,GAAsB,EAAE,CAAC;IAC9B,GAAG,GAAG,CAAC,CAAC;IACC,IAAI,CAAS;IACb,SAAS,CAAS;IAClB,GAAG,CAAe;IAEnC,YAA6B,IAAoB;QAApB,SAAI,GAAJ,IAAI,CAAgB;QAC/C,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,0BAA0B,CAAC,CAAC;QAC5D,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,kBAAkB,CAAC;QACtD,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;QAChC,IAAI,CAAC;YACH,SAAS,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,CACjB,8BAA8B,IAAI,CAAC,GAAG,KAAK,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAC9F,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,YAAY,EAAE,CAAC;IACtB,CAAC;IAED;;;;;OAKG;IACH,MAAM,CACJ,KAAiD;QAEjD,MAAM,IAAI,GAAG,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC;QACxE,IACE,IAAI;YACJ,IAAI,CAAC,QAAQ,KAAK,KAAK,CAAC,QAAQ;YAChC,IAAI,CAAC,QAAQ,KAAK,KAAK,CAAC,QAAQ;YAChC,IAAI,CAAC,UAAU,KAAK,KAAK,CAAC,UAAU;YACpC,IAAI,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,EAC5B,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC;QACd,MAAM,IAAI,GAAoB;YAC5B,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,GAAG,EAAE,KAAK,CAAC,GAAG;YACd,GAAG,EAAE,KAAK,CAAC,GAAG;YACd,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,GAAG,CAAC,KAAK,CAAC,OAAO,KAAK,SAAS,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC;YAC9D,GAAG,CAAC,KAAK,CAAC,UAAU,KAAK,SAAS,IAAI,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC;YACvE,GAAG,CAAC,KAAK,CAAC,UAAU,KAAK,SAAS,IAAI,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC;YACvE,GAAG,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;YAC3D,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;SACtB,CAAC;QACF,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACtB,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;YACvC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC;QAC3D,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAClB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,CAAC,IAAe,EAAE;QACrB,IAAI,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC;QACrB,IAAI,CAAC,CAAC,GAAG,EAAE,CAAC;YACV,MAAM,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC;YACrB,GAAG,GAAG,GAAG,CAAC,MAAM,CACd,CAAC,CAAC,EAAE,EAAE,CACJ,CAAC,CAAC,GAAG,KAAK,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CACvE,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,CAAC,GAAG;YAAE,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC;QACpD,IAAI,CAAC,CAAC,SAAS;YAAE,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,KAAK,CAAC,CAAC,SAAS,CAAC,CAAC;QACtE,IAAI,CAAC,CAAC,QAAQ;YAAE,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,QAAQ,CAAC,CAAC;QACnE,IAAI,CAAC,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC7B,MAAM,MAAM,GAAG,CAAC,CAAC,QAAQ,CAAC;YAC1B,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC;QACjD,CAAC;QACD,IAAI,CAAC,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;YAC1B,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC;YACtB,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,GAAG,KAAK,CAAC,CAAC;QACzC,CAAC;QACD,GAAG,GAAG,CAAC,GAAG,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC;QAC7C,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,GAAG,EAAE,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;QAC3D,OAAO,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IAC7B,CAAC;IAED,IAAI;QACF,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;IAC3B,CAAC;IAEO,cAAc,CACpB,SAAiB,EACjB,GAAW,EACX,GAAW;QAEX,KAAK,IAAI,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;YACnD,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YACxB,IAAI,CAAC,IAAI,CAAC,CAAC,SAAS,KAAK,SAAS,IAAI,CAAC,CAAC,GAAG,KAAK,GAAG,IAAI,CAAC,CAAC,GAAG,KAAK,GAAG,EAAE,CAAC;gBACrE,OAAO,CAAC,CAAC;YACX,CAAC;QACH,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IAEO,MAAM,CAAC,IAAqB;QAClC,IAAI,CAAC;YACH,oEAAoE;YACpE,kEAAkE;YAClE,IAAI,CAAC;gBACH,MAAM,EAAE,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAC/B,IAAI,EAAE,CAAC,IAAI,GAAG,iBAAiB;oBAAE,IAAI,CAAC,UAAU,EAAE,CAAC;YACrD,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,IAAI,GAAI,GAA6B,CAAC,IAAI,CAAC;gBACjD,IAAI,IAAI,KAAK,QAAQ;oBAAE,MAAM,GAAG,CAAC;YACnC,CAAC;YACD,cAAc,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAC1E,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,CACtB,4BAA4B,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAC/E,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;;;;;OAMG;IACK,UAAU;QAChB,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YAC5C,IAAI,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;YACpD,IAAI,KAAK,CAAC,MAAM,GAAG,iBAAiB,EAAE,CAAC;gBACrC,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,iBAAiB,CAAC,CAAC;YAC1C,CAAC;YACD,IAAI,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC9B,OAAO,MAAM,CAAC,MAAM,GAAG,CAAC,GAAG,iBAAiB,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACjE,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;gBAChE,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC5B,CAAC;YACD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,GAAG,iBAAiB,EAAE,CAAC;gBAChE,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,CACtB,6CAA6C,MAAM,CAAC,MAAM,YAAY,iBAAiB,OAAO,CAC/F,CAAC;gBACF,KAAK,GAAG,EAAE,CAAC;gBACX,MAAM,GAAG,EAAE,CAAC;YACd,CAAC;YACD,aAAa,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,MAAM,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE;gBAC/D,IAAI,EAAE,KAAK;aACZ,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,CACtB,4BAA4B,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAC/E,CAAC;QACJ,CAAC;IACH,CAAC;IAEO,YAAY;QAClB,IAAI,CAAC;YACH,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACtB,CAAC;QAAC,MAAM,CAAC;YACP,OAAO;QACT,CAAC;QACD,IAAI,GAAW,CAAC;QAChB,IAAI,CAAC;YACH,GAAG,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACzC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,CACtB,0BAA0B,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAC7E,CAAC;YACF,OAAO;QACT,CAAC;QACD,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YACnC,IAAI,CAAC,IAAI;gBAAE,SAAS;YACpB,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAoB,CAAC;gBACnD,IACE,OAAO,MAAM,CAAC,GAAG,KAAK,QAAQ;oBAC9B,OAAO,MAAM,CAAC,GAAG,KAAK,QAAQ;oBAC9B,OAAO,MAAM,CAAC,GAAG,KAAK,QAAQ,EAC9B,CAAC;oBACD,SAAS;gBACX,CAAC;gBACD,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBACxB,IAAI,MAAM,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG;oBAAE,IAAI,CAAC,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC;YACnD,CAAC;YAAC,MAAM,CAAC;gBACP,sBAAsB;YACxB,CAAC;QACH,CAAC;QACD,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;YACvC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC;QAC3D,CAAC;IACH,CAAC;CACF"}
+{"version":3,"file":"commitIssueLinkLog.js","sourceRoot":"","sources":["../src/commitIssueLinkLog.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,SAAS,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC5E,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAErD,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAsC3D,MAAM,kBAAkB,GAAG,KAAK,CAAC;AAEjC;;;;;GAKG;AACH,MAAM,iBAAiB,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,OAAO;AAC9C,MAAM,iBAAiB,GAAG,MAAM,CAAC;AA0BjC,MAAM,OAAO,kBAAkB;IAeA;IAdrB,KAAK,GAAsB,EAAE,CAAC;IAC9B,GAAG,GAAG,CAAC,CAAC;IACC,IAAI,CAAS;IACb,SAAS,CAAS;IAClB,GAAG,CAAe;IACnC;;;;;;OAMG;IACK,YAAY,GAAG,CAAC,CAAC;IAEzB,YAA6B,IAAoB;QAApB,SAAI,GAAJ,IAAI,CAAgB;QAC/C,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,0BAA0B,CAAC,CAAC;QAC5D,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,kBAAkB,CAAC;QACtD,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;QAChC,IAAI,CAAC;YACH,SAAS,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3C,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,CACjB,8BAA8B,IAAI,CAAC,GAAG,KAAK,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAC9F,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,YAAY,EAAE,CAAC;IACtB,CAAC;IAED;;;;;OAKG;IACH,MAAM,CACJ,KAAiD;QAEjD,MAAM,IAAI,GAAG,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,SAAS,EAAE,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC;QACxE,IACE,IAAI;YACJ,IAAI,CAAC,QAAQ,KAAK,KAAK,CAAC,QAAQ;YAChC,IAAI,CAAC,QAAQ,KAAK,KAAK,CAAC,QAAQ;YAChC,IAAI,CAAC,UAAU,KAAK,KAAK,CAAC,UAAU;YACpC,IAAI,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,EAC5B,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC;QACd,MAAM,IAAI,GAAoB;YAC5B,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,GAAG,EAAE,KAAK,CAAC,GAAG;YACd,GAAG,EAAE,KAAK,CAAC,GAAG;YACd,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,GAAG,CAAC,KAAK,CAAC,OAAO,KAAK,SAAS,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC;YAC9D,GAAG,CAAC,KAAK,CAAC,UAAU,KAAK,SAAS,IAAI,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC;YACvE,GAAG,CAAC,KAAK,CAAC,UAAU,KAAK,SAAS,IAAI,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC;YACvE,GAAG,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;YAC3D,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;SACtB,CAAC;QACF,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACtB,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;YACvC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC;QAC3D,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAClB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,CAAC,IAAe,EAAE;QACrB,oEAAoE;QACpE,6DAA6D;QAC7D,IAAI,CAAC,YAAY,EAAE,CAAC;QACpB,MAAM,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC;QAClB,MAAM,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC;QAClB,MAAM,SAAS,GAAG,CAAC,CAAC,SAAS,CAAC;QAC9B,MAAM,QAAQ,GAAG,CAAC,CAAC,QAAQ,CAAC;QAC5B,MAAM,QAAQ,GAAG,CAAC,CAAC,QAAQ,CAAC;QAC5B,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC;QACtB,MAAM,GAAG,GAAsB,EAAE,CAAC;QAClC,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YAC3B,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;gBACvE,SAAS;YACX,IAAI,GAAG,IAAI,CAAC,CAAC,GAAG,KAAK,GAAG;gBAAE,SAAS;YACnC,IAAI,SAAS,IAAI,CAAC,CAAC,SAAS,KAAK,SAAS;gBAAE,SAAS;YACrD,IAAI,QAAQ,IAAI,CAAC,CAAC,QAAQ,KAAK,QAAQ;gBAAE,SAAS;YAClD,IAAI,QAAQ,KAAK,SAAS,IAAI,CAAC,CAAC,QAAQ,KAAK,QAAQ;gBAAE,SAAS;YAChE,IAAI,KAAK,KAAK,SAAS,IAAI,CAAC,CAAC,GAAG,IAAI,KAAK;gBAAE,SAAS;YACpD,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACd,CAAC;QACD,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC;QAClC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,IAAI,GAAG,EAAE,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;QAC3D,OAAO,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IAC7B,CAAC;IAED,IAAI;QACF,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC;IAC3B,CAAC;IAEO,cAAc,CACpB,SAAiB,EACjB,GAAW,EACX,GAAW;QAEX,KAAK,IAAI,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC;YACnD,MAAM,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;YACxB,IAAI,CAAC,IAAI,CAAC,CAAC,SAAS,KAAK,SAAS,IAAI,CAAC,CAAC,GAAG,KAAK,GAAG,IAAI,CAAC,CAAC,GAAG,KAAK,GAAG,EAAE,CAAC;gBACrE,OAAO,CAAC,CAAC;YACX,CAAC;QACH,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IAEO,MAAM,CAAC,IAAqB;QAClC,IAAI,CAAC;YACH,oEAAoE;YACpE,kEAAkE;YAClE,IAAI,CAAC;gBACH,MAAM,EAAE,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAC/B,IAAI,EAAE,CAAC,IAAI,GAAG,iBAAiB;oBAAE,IAAI,CAAC,UAAU,EAAE,CAAC;YACrD,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,MAAM,IAAI,GAAI,GAA6B,CAAC,IAAI,CAAC;gBACjD,IAAI,IAAI,KAAK,QAAQ;oBAAE,MAAM,GAAG,CAAC;YACnC,CAAC;YACD,6DAA6D;YAC7D,yDAAyD;YACzD,2BAA2B;YAC3B,gBAAgB,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,EAAE;gBAC/B,cAAc,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;gBACxE,iEAAiE;gBACjE,kEAAkE;gBAClE,+DAA+D;gBAC/D,gEAAgE;gBAChE,mEAAmE;gBACnE,IAAI,CAAC;oBACH,IAAI,CAAC,YAAY,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC;gBAC/C,CAAC;gBAAC,MAAM,CAAC;oBACP;yEACqD;gBACvD,CAAC;YACH,CAAC,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,CACtB,4BAA4B,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAC/E,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;;;;;OAMG;IACK,UAAU;QAChB,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;YAC5C,IAAI,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;YACpD,IAAI,KAAK,CAAC,MAAM,GAAG,iBAAiB,EAAE,CAAC;gBACrC,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,iBAAiB,CAAC,CAAC;YAC1C,CAAC;YACD,IAAI,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC9B,OAAO,MAAM,CAAC,MAAM,GAAG,CAAC,GAAG,iBAAiB,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACjE,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;gBAChE,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAC5B,CAAC;YACD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,GAAG,iBAAiB,EAAE,CAAC;gBAChE,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,CACtB,6CAA6C,MAAM,CAAC,MAAM,YAAY,iBAAiB,OAAO,CAC/F,CAAC;gBACF,KAAK,GAAG,EAAE,CAAC;gBACX,MAAM,GAAG,EAAE,CAAC;YACd,CAAC;YACD,mBAAmB,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,MAAM,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE;gBACrE,IAAI,EAAE,KAAK;aACZ,CAAC,CAAC;YACH,kEAAkE;YAClE,0DAA0D;YAC1D,8DAA8D;YAC9D,qCAAqC;YACrC,IAAI,CAAC;gBACH,IAAI,CAAC,YAAY,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC;YAC/C,CAAC;YAAC,MAAM,CAAC;gBACP,IAAI,CAAC,YAAY,GAAG,CAAC,CAAC;YACxB,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,CACtB,4BAA4B,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAC/E,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;;;;;OAMG;IACK,YAAY;QAClB,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC;YACtC,IAAI,IAAI,IAAI,IAAI,CAAC,YAAY;gBAAE,OAAO;YACtC,MAAM,GAAG,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;YAC7C,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;gBACnC,IAAI,CAAC,IAAI;oBAAE,SAAS;gBACpB,IAAI,CAAC;oBACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAoB,CAAC;oBACnD,IACE,OAAO,MAAM,CAAC,GAAG,KAAK,QAAQ;wBAC9B,OAAO,MAAM,CAAC,GAAG,KAAK,QAAQ;wBAC9B,OAAO,MAAM,CAAC,GAAG,KAAK,QAAQ,EAC9B,CAAC;wBACD,SAAS;oBACX,CAAC;oBACD,IAAI,MAAM,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;wBAC1B,IAAI,CAAC,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC;wBACtB,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;wBACxB,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,SAAS;4BAAE,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;oBAC7D,CAAC;gBACH,CAAC;gBAAC,MAAM,CAAC;oBACP,oBAAoB;gBACtB,CAAC;YACH,CAAC;YACD,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC;QAC3B,CAAC;QAAC,MAAM,CAAC;YACP,4BAA4B;QAC9B,CAAC;IACH,CAAC;IAEO,YAAY;QAClB,IAAI,IAAY,CAAC;QACjB,IAAI,CAAC;YACH,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC;QAClC,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,CAAC,YAAY,GAAG,CAAC,CAAC;YACtB,OAAO;QACT,CAAC;QACD,IAAI,GAAW,CAAC;QAChB,IAAI,CAAC;YACH,GAAG,GAAG,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;QACzC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,CACtB,0BAA0B,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAC7E,CAAC;YACF,OAAO;QACT,CAAC;QACD,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YACnC,IAAI,CAAC,IAAI;gBAAE,SAAS;YACpB,IAAI,CAAC;gBACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAoB,CAAC;gBACnD,IACE,OAAO,MAAM,CAAC,GAAG,KAAK,QAAQ;oBAC9B,OAAO,MAAM,CAAC,GAAG,KAAK,QAAQ;oBAC9B,OAAO,MAAM,CAAC,GAAG,KAAK,QAAQ,EAC9B,CAAC;oBACD,SAAS;gBACX,CAAC;gBACD,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBACxB,IAAI,MAAM,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG;oBAAE,IAAI,CAAC,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC;YACnD,CAAC;YAAC,MAAM,CAAC;gBACP,sBAAsB;YACxB,CAAC;QACH,CAAC;QACD,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC;QACzB,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;YACvC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC;QAC3D,CAAC;IACH,CAAC;CACF"}

package/dist/companions/registry.js

@@ -12,13 +12,15 @@ export const COMPANIONS = {
         description: "Persistent memory across Claude sessions",
         npmPackage: "@modelcontextprotocol/server-memory",
         command: "npx",
-        args: ["-y", "@modelcontextprotocol/server-memory"],
+        // Pinned: npm view @modelcontextprotocol/server-memory version → 2026.1.26 (2026-05-23)
+        args: ["-y", "@modelcontextprotocol/server-memory@2026.1.26"],
     },
     superpowers: {
         description: "Structured planning, task decomposition",
         npmPackage: "superpowers-mcp",
         command: "npx",
-        args: ["-y", "superpowers-mcp"],
+        // Pinned: npm view superpowers-mcp version → 4.3.2 (2026-05-23)
+        args: ["-y", "superpowers-mcp@4.3.2"],
     },
     // To connect to an existing Chrome instead of auto-launching:
     // add --browser-url http://127.0.0.1:9222 to args.
@@ -26,13 +28,15 @@ export const COMPANIONS = {
         description: "Full Chrome browser control — automate, debug, inspect network/console/performance",
         npmPackage: "chrome-devtools-mcp",
         command: "npx",
-        args: ["-y", "chrome-devtools-mcp"],
+        // Pinned: npm view chrome-devtools-mcp version → 1.0.1 (2026-05-23)
+        args: ["-y", "chrome-devtools-mcp@1.0.1"],
     },
     database: {
         description: "Multi-database query tools (Postgres, MySQL, SQLite, SQL Server, MariaDB)",
         npmPackage: "@bytebase/dbhub",
         command: "npx",
-        args: ["-y", "@bytebase/dbhub", "--transport", "stdio"],
+        // Pinned: npm view @bytebase/dbhub version → 0.21.2 (2026-05-23)
+        args: ["-y", "@bytebase/dbhub@0.21.2", "--transport", "stdio"],
         requiredEnv: { DSN: "<postgresql://user:pass@localhost/mydb>" },
         postInstallMessage: "Replace the DSN placeholder in claude_desktop_config.json with your real connection string,\n" +
             "or use: claude-ide-bridge install database --env DSN=postgresql://user:pass@localhost/mydb\n" +
@@ -42,7 +46,8 @@ export const COMPANIONS = {
         description: "Post Slack messages from automation hooks (onPullRequest, onGitPush, etc.)",
         npmPackage: "slack-mcp-server",
         command: "npx",
-        args: ["-y", "slack-mcp-server"],
+        // Pinned: npm view slack-mcp-server version → 1.3.0 (2026-05-23)
+        args: ["-y", "slack-mcp-server@1.3.0"],
         requiredEnv: {
             SLACK_BOT_TOKEN: "<xoxb-your-token>",
             SLACK_TEAM_ID: "<T00000000>",
@@ -54,7 +59,8 @@ export const COMPANIONS = {
         description: "AI-driven browser automation — navigate, click, fill forms, screenshot (e2e testing)",
         npmPackage: "@playwright/mcp",
         command: "npx",
-        args: ["-y", "@playwright/mcp"],
+        // Pinned: npm view @playwright/mcp version → 0.0.75 (2026-05-23)
+        args: ["-y", "@playwright/mcp@0.0.75"],
         postInstallMessage: "Browsers must be installed separately:\n  npx playwright install chromium",
     },
     "codebase-memory": {
@@ -63,7 +69,9 @@ export const COMPANIONS = {
         command: "codebase-memory-mcp",
         args: [],
         skipNpmInstall: true,
-        postInstallMessage: "Install the binary first (not on npm):\n" +
+        postInstallMessage: 
+        // WARNING: curl|bash install has no integrity check — replace with versioned npm package when available on npm
+        "Install the binary first (not on npm):\n" +
             "  curl -fsSL https://raw.githubusercontent.com/DeusData/codebase-memory-mcp/main/install.sh | bash\n" +
             "Then restart Claude Desktop.",
     },

package/dist/companions/registry.js.map

@@ -1 +1 @@
-{"version":3,"file":"registry.js","sourceRoot":"","sources":["../../src/companions/registry.ts"],"names":[],"mappings":"AAAA,iCAAiC;AACjC,sDAAsD;AACtD,wCAAwC;AACxC,oBAAoB;AACpB,wBAAwB;AACxB,oBAAoB;AACpB,qBAAqB;AACrB,oBAAoB;AACpB,uEAAuE;AAcvE,MAAM,CAAC,MAAM,UAAU,GAAmC;IACxD,MAAM,EAAE;QACN,WAAW,EAAE,0CAA0C;QACvD,UAAU,EAAE,qCAAqC;QACjD,OAAO,EAAE,KAAK;QACd,IAAI,EAAE,CAAC,IAAI,EAAE,qCAAqC,CAAC;KACpD;IACD,WAAW,EAAE;QACX,WAAW,EAAE,yCAAyC;QACtD,UAAU,EAAE,iBAAiB;QAC7B,OAAO,EAAE,KAAK;QACd,IAAI,EAAE,CAAC,IAAI,EAAE,iBAAiB,CAAC;KAChC;IACD,8DAA8D;IAC9D,mDAAmD;IACnD,QAAQ,EAAE;QACR,WAAW,EACT,oFAAoF;QACtF,UAAU,EAAE,qBAAqB;QACjC,OAAO,EAAE,KAAK;QACd,IAAI,EAAE,CAAC,IAAI,EAAE,qBAAqB,CAAC;KACpC;IACD,QAAQ,EAAE;QACR,WAAW,EACT,2EAA2E;QAC7E,UAAU,EAAE,iBAAiB;QAC7B,OAAO,EAAE,KAAK;QACd,IAAI,EAAE,CAAC,IAAI,EAAE,iBAAiB,EAAE,aAAa,EAAE,OAAO,CAAC;QACvD,WAAW,EAAE,EAAE,GAAG,EAAE,yCAAyC,EAAE;QAC/D,kBAAkB,EAChB,+FAA+F;YAC/F,8FAA8F;YAC9F,gFAAgF;KACnF;IACD,KAAK,EAAE;QACL,WAAW,EACT,4EAA4E;QAC9E,UAAU,EAAE,kBAAkB;QAC9B,OAAO,EAAE,KAAK;QACd,IAAI,EAAE,CAAC,IAAI,EAAE,kBAAkB,CAAC;QAChC,WAAW,EAAE;YACX,eAAe,EAAE,mBAAmB;YACpC,aAAa,EAAE,aAAa;SAC7B;QACD,kBAAkB,EAChB,4EAA4E;YAC5E,iGAAiG;KACpG;IACD,UAAU,EAAE;QACV,WAAW,EACT,sFAAsF;QACxF,UAAU,EAAE,iBAAiB;QAC7B,OAAO,EAAE,KAAK;QACd,IAAI,EAAE,CAAC,IAAI,EAAE,iBAAiB,CAAC;QAC/B,kBAAkB,EAChB,2EAA2E;KAC9E;IACD,iBAAiB,EAAE;QACjB,WAAW,EACT,qGAAqG;QACvG,UAAU,EAAE,qBAAqB;QACjC,OAAO,EAAE,qBAAqB;QAC9B,IAAI,EAAE,EAAE;QACR,cAAc,EAAE,IAAI;QACpB,kBAAkB,EAChB,0CAA0C;YAC1C,sGAAsG;YACtG,8BAA8B;KACjC;CACF,CAAC"}
+{"version":3,"file":"registry.js","sourceRoot":"","sources":["../../src/companions/registry.ts"],"names":[],"mappings":"AAAA,iCAAiC;AACjC,sDAAsD;AACtD,wCAAwC;AACxC,oBAAoB;AACpB,wBAAwB;AACxB,oBAAoB;AACpB,qBAAqB;AACrB,oBAAoB;AACpB,uEAAuE;AAcvE,MAAM,CAAC,MAAM,UAAU,GAAmC;IACxD,MAAM,EAAE;QACN,WAAW,EAAE,0CAA0C;QACvD,UAAU,EAAE,qCAAqC;QACjD,OAAO,EAAE,KAAK;QACd,wFAAwF;QACxF,IAAI,EAAE,CAAC,IAAI,EAAE,+CAA+C,CAAC;KAC9D;IACD,WAAW,EAAE;QACX,WAAW,EAAE,yCAAyC;QACtD,UAAU,EAAE,iBAAiB;QAC7B,OAAO,EAAE,KAAK;QACd,gEAAgE;QAChE,IAAI,EAAE,CAAC,IAAI,EAAE,uBAAuB,CAAC;KACtC;IACD,8DAA8D;IAC9D,mDAAmD;IACnD,QAAQ,EAAE;QACR,WAAW,EACT,oFAAoF;QACtF,UAAU,EAAE,qBAAqB;QACjC,OAAO,EAAE,KAAK;QACd,oEAAoE;QACpE,IAAI,EAAE,CAAC,IAAI,EAAE,2BAA2B,CAAC;KAC1C;IACD,QAAQ,EAAE;QACR,WAAW,EACT,2EAA2E;QAC7E,UAAU,EAAE,iBAAiB;QAC7B,OAAO,EAAE,KAAK;QACd,iEAAiE;QACjE,IAAI,EAAE,CAAC,IAAI,EAAE,wBAAwB,EAAE,aAAa,EAAE,OAAO,CAAC;QAC9D,WAAW,EAAE,EAAE,GAAG,EAAE,yCAAyC,EAAE;QAC/D,kBAAkB,EAChB,+FAA+F;YAC/F,8FAA8F;YAC9F,gFAAgF;KACnF;IACD,KAAK,EAAE;QACL,WAAW,EACT,4EAA4E;QAC9E,UAAU,EAAE,kBAAkB;QAC9B,OAAO,EAAE,KAAK;QACd,iEAAiE;QACjE,IAAI,EAAE,CAAC,IAAI,EAAE,wBAAwB,CAAC;QACtC,WAAW,EAAE;YACX,eAAe,EAAE,mBAAmB;YACpC,aAAa,EAAE,aAAa;SAC7B;QACD,kBAAkB,EAChB,4EAA4E;YAC5E,iGAAiG;KACpG;IACD,UAAU,EAAE;QACV,WAAW,EACT,sFAAsF;QACxF,UAAU,EAAE,iBAAiB;QAC7B,OAAO,EAAE,KAAK;QACd,iEAAiE;QACjE,IAAI,EAAE,CAAC,IAAI,EAAE,wBAAwB,CAAC;QACtC,kBAAkB,EAChB,2EAA2E;KAC9E;IACD,iBAAiB,EAAE;QACjB,WAAW,EACT,qGAAqG;QACvG,UAAU,EAAE,qBAAqB;QACjC,OAAO,EAAE,qBAAqB;QAC9B,IAAI,EAAE,EAAE;QACR,cAAc,EAAE,IAAI;QACpB,kBAAkB;QAChB,+GAA+G;QAC/G,0CAA0C;YAC1C,sGAAsG;YACtG,8BAA8B;KACjC;CACF,CAAC"}

package/dist/config.d.ts

@@ -21,6 +21,13 @@ export interface Config {
     antBinary: string;
     automationEnabled: boolean;
     automationPolicyPath: string | null;
+    /**
+     * When true, webhook hooks may target private / non-loopback addresses
+     * (RFC1918, link-local, etc.). Default false — loopback + public hosts
+     * only. Same shape the SSRF guard in `VsCodeBackend.postWebhook` checks.
+     * Set with `--automation-allow-private-webhooks`.
+     */
+    automationAllowPrivateWebhooks: boolean;
     toolRateLimit: number;
     /** Patchwork: gate tool dispatch on human approval via dashboard. "high" = only high-risk tools (default-safe); "all" = every tool; "off" = disabled. */
     approvalGate: "off" | "high" | "all";
@@ -36,6 +43,16 @@ export interface Config {
     managedSettingsPath: string | null;
     /** Patchwork: outbound webhook URL for approval queue notifications (from dashboard.webhookUrl in patchwork config). */
     approvalWebhookUrl: string | null;
+    /**
+     * Patchwork mobile-oversight push relay (FCM/APNS gateway). Seeded from
+     * `~/.patchwork/config.json`; previously only set by POST /settings, so
+     * push config was lost on every restart.
+     */
+    pushServiceUrl: string | null;
+    pushServiceToken: string | null;
+    pushServiceBaseUrl: string | null;
+    ntfyTopic: string | null;
+    ntfyServer: string | null;
     watch: boolean;
     plugins: string[];
     pluginWatch: boolean;
@@ -43,10 +60,25 @@ export interface Config {
     db: boolean;
     allowPrivateHttp: boolean;
     fixedToken: string | null;
+    /**
+     * Shared secret for HMAC-SHA256 verification of GitHub-style webhooks
+     * at POST /hooks/*. When set, requests presenting a valid
+     * `X-Hub-Signature-256: sha256=<hex>` header are authenticated via HMAC
+     * instead of Bearer token. Bearer-token access to /hooks/* still works
+     * (additive, backwards-compatible). null when feature disabled.
+     */
+    webhookSecret: string | null;
     issuerUrl: string | null;
     /** Access token TTL in milliseconds (derived from oauthTokenTtlDays config; default 24h). */
     oauthTokenTtlMs: number;
     corsOrigins: string[];
+    /**
+     * IPs of trusted reverse proxies. When the immediate socket peer is one
+     * of these, the bridge honors the X-Forwarded-For header for per-IP
+     * rate-limit bucketing on the phone-path approval bypass. Empty by
+     * default; X-Forwarded-For from an untrusted peer is ignored.
+     */
+    trustedProxies: string[];
     auditLogPath: string | null;
     fullMode: boolean;
     maxSessions: number;
@@ -76,8 +108,19 @@ export declare const VPS_ALLOWLIST_EXTRAS: string[];
  */
 export declare const DB_ALLOWLIST_EXTRAS: string[];
 /** Commands that can execute arbitrary code via flags like -e, -c, --eval.
- *  These are blocked from the default allowlist but can be added via --allow-command. */
+ *  These are blocked from the default allowlist and from --allow-command /
+ *  commandAllowlist additions. Entries are bare names; Windows extensions
+ *  (`.exe` / `.cmd` / `.bat` / `.com` / `.ps1`) are stripped before lookup
+ *  by `isInterpreterCommand()`. */
 export declare const INTERPRETER_COMMANDS: Set<string>;
+/**
+ * Case-insensitive interpreter check that also strips Windows executable
+ * extensions and any leading path. Defends against bypass attempts like:
+ *   --allow-command node.exe
+ *   --allow-command C:\\Windows\\System32\\cmd.exe
+ *   --allow-command Powershell.EXE
+ */
+export declare function isInterpreterCommand(cmd: string): boolean;
 export declare function findEditor(): string | null;
 /** Exported for testing. Maps an editor CLI command to its human-readable IDE name. */
 export declare function ideNameFromEditor(editorCommand: string): string;
@@ -97,18 +140,19 @@ interface ConfigFile {
     ideName?: string;
     autoTmux?: boolean;
     driver?: "subprocess" | "api" | "openai" | "grok" | "gemini" | "gemini-api" | "local" | "none";
-    /** @deprecated Use driver instead. */
-    claudeDriver?: "subprocess" | "api" | "openai" | "grok" | "gemini" | "gemini-api" | "local" | "none";
     claudeBinary?: string;
     antBinary?: string;
     automationEnabled?: boolean;
     automationPolicyPath?: string;
+    automationAllowPrivateWebhooks?: boolean;
     plugins?: string[];
     pluginWatch?: boolean;
     fixedToken?: string;
+    webhookSecret?: string;
     issuerUrl?: string;
     oauthTokenTtlDays?: number;
     corsOrigins?: string[];
+    trustedProxies?: string[];
     fullMode?: boolean;
     maxSessions?: number;
     githubDefaultRepo?: string;