sculpted 0.3.1 → 0.3.3

package/dist/vite.mjs

@@ -1,9 +1,9 @@
 import { _ as markerClassForEditId, a as DEFAULT_JSX_SOURCE_ATTRIBUTE, c as DEFAULT_OPEN_SOURCE_ENDPOINT, d as DEFAULT_TOKEN_WRITEBACK_ENDPOINT, f as DEFAULT_WRITEBACK_ENDPOINT, l as DEFAULT_SOURCE_ATTRIBUTE, p as SCULPTED_EVENTS, r as DEFAULT_EDIT_ID_ATTRIBUTE, t as DEFAULT_COMPONENT_ATTRIBUTE, u as DEFAULT_STYLE_MODULE_ENDPOINT } from "./protocol-D5heR2QM.mjs";
-import { S as resolveSourceParserAdapter, _ as analyzePandaCssSource, a as createStyleModuleSourcePatch, b as parsePandaSource, c as resolveProjectPath, d as toRelativeProjectPath$1, f as trustedManifestFilePath, g as createInlineCssSourcePatch, h as createStaticCssPatch, i as createStyleModuleDetachPatch, l as safeProjectSourcePath, m as createStaticCssBatchPatch, n as componentStyleModulePaths, o as readComponentStyleModule, p as trustedTokenSourceFilePath, r as createStyleModuleAttachPatch, s as normalizePath$1, t as createTokenConfigPatch, u as stripViteQuery, v as hashSource } from "./patcher-DQgKdozw.mjs";
+import { S as parsePandaSource, _ as createStaticCssPatch, a as createStyleModuleSourcePatch, b as hashSource, c as resolveProjectPath, d as toRelativeProjectPath$1, f as trustedManifestFilePath, g as createStaticCssBatchPatch, h as verifyProjectWritePath, i as createStyleModuleDetachPatch, l as safeProjectSourcePath, m as verifyProjectExistingPath, n as componentStyleModulePaths, o as readComponentStyleModule, p as trustedTokenSourceFilePath, r as createStyleModuleAttachPatch, s as normalizePath$1, t as createTokenConfigPatch, u as stripViteQuery, v as createInlineCssSourcePatch, w as resolveSourceParserAdapter, y as analyzePandaCssSource } from "./patcher-nj9VhRT-.mjs";
 import ts from "typescript";
 import { access, mkdir, readFile, writeFile } from "node:fs/promises";
-import { loadConfigAndCreateContext } from "@pandacss/node";
 import { dirname } from "node:path";
+import { loadConfigAndCreateContext } from "@pandacss/node";
 //#region src/vite/constants.ts
 const DEFAULT_EXCLUDE = ["node_modules/**", "styled-system/**"];
 const DEFAULT_RUNTIME_BOOTSTRAP_ENDPOINT = "/@sculpted/runtime";
@@ -281,22 +281,43 @@ async function createEditorMetadata(options) {
 		properties
 	};
 }
+function tokenSourceIdsForPandaConfigSource(options) {
+	return parsePandaConfigEditorMetadata(options).tokenSources.map((item) => item.id);
+}
 async function readPandaConfigSource(projectRoot, pandaConfigPath) {
 	const root = normalizePath(projectRoot).replace(/\/$/, "");
 	const candidates = pandaConfigPath ? [absoluteProjectPath(root, pandaConfigPath)] : DEFAULT_PANDA_CONFIG_FILES.map((fileName) => `${root}/${fileName}`);
-	for (const filePath of candidates) try {
-		return {
-			ok: true,
-			filePath,
-			sourceText: await readFile(filePath, "utf8")
-		};
-	} catch (error) {
-		if (isMissingFileError$2(error)) continue;
-		return {
+	for (const filePath of candidates) {
+		try {
+			await access(filePath);
+		} catch (error) {
+			if (isMissingFileError$2(error)) continue;
+			return {
+				ok: false,
+				reason: "panda-config-unreadable",
+				message: `Failed to access Panda config ${filePath}: ${errorMessage$1(error)}`
+			};
+		}
+		const safePath = await verifyProjectExistingPath(root, filePath);
+		if (!safePath.ok) return {
 			ok: false,
 			reason: "panda-config-unreadable",
-			message: `Failed to read Panda config ${filePath}: ${errorMessage(error)}`
+			message: safePath.message
 		};
+		try {
+			return {
+				ok: true,
+				filePath,
+				sourceText: await readFile(filePath, "utf8")
+			};
+		} catch (error) {
+			if (isMissingFileError$2(error)) continue;
+			return {
+				ok: false,
+				reason: "panda-config-unreadable",
+				message: `Failed to read Panda config ${filePath}: ${errorMessage$1(error)}`
+			};
+		}
 	}
 	return {
 		ok: false,
@@ -446,7 +467,7 @@ async function resolvePandaConfigEditorMetadata(options) {
 	} catch (error) {
 		return {
 			ok: false,
-			message: `Failed to resolve Panda token metadata: ${errorMessage(error)}`
+			message: `Failed to resolve Panda token metadata: ${errorMessage$1(error)}`
 		};
 	}
 }
@@ -697,7 +718,7 @@ function collectColorTokenMetadata(object, options, path = []) {
 					sourcePath: nextPath,
 					writable: options.writable,
 					readonlyReason: options.writable ? void 0 : "Token source target is read-only.",
-					conditions: options.kind === "semantic-token" && isJsonObject(value) ? Object.entries(value).map(([condition, conditionValue]) => ({
+					conditions: options.kind === "semantic-token" && isJsonObject$1(value) ? Object.entries(value).map(([condition, conditionValue]) => ({
 						condition,
 						value: conditionValue,
 						swatch: swatchFromJsonValue(conditionValue)
@@ -822,7 +843,7 @@ function unavailableMetadataSection(reason, message) {
 		message
 	};
 }
-function isJsonObject(value) {
+function isJsonObject$1(value) {
 	return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function swatchFromJsonValue(value) {
@@ -848,7 +869,7 @@ function normalizePath(path) {
 function isMissingFileError$2(error) {
 	return isRecord$3(error) && error.code === "ENOENT";
 }
-function errorMessage(error) {
+function errorMessage$1(error) {
 	return error instanceof Error ? error.message : String(error);
 }
 function isRecord$3(value) {
@@ -866,10 +887,33 @@ function isJsonValue$1(value) {
 	return Object.values(value).every(isJsonValue$1);
 }
 //#endregion
+//#region src/vite/logging.ts
+function logUnexpectedDevServerError(message, error) {
+	console.error(`[sculpted] ${message}`, error);
+}
+function errorMessage(error) {
+	return error instanceof Error ? error.message : String(error);
+}
+//#endregion
+//#region src/vite/requestBody.ts
+const MAX_DEV_SERVER_JSON_BODY_BYTES = 1024 * 1024;
+async function readRequestBody(request, maxBytes = MAX_DEV_SERVER_JSON_BODY_BYTES) {
+	if (!request[Symbol.asyncIterator]) return "";
+	let bytes = 0;
+	let body = "";
+	for await (const chunk of request) {
+		const text = typeof chunk === "string" ? chunk : Buffer.from(chunk).toString("utf8");
+		bytes += Buffer.byteLength(text);
+		if (bytes > maxBytes) throw new Error(`Request body exceeds ${maxBytes} bytes.`);
+		body += text;
+	}
+	return body;
+}
+//#endregion
 //#region src/vite/sourceLocation.ts
 async function readOpenSourceLocationRequest(request) {
 	try {
-		const body = await readRequestBody$2(request);
+		const body = await readRequestBody(request);
 		const parsed = JSON.parse(body);
 		if (!isOpenSourceLocationRequest(parsed)) return {
 			ok: false,
@@ -900,6 +944,8 @@ async function resolveOpenSourceLocation(options) {
 		} catch {
 			return openSourceLocationFailure("file-not-found", "Component source file does not exist.", { file: toRelativeProjectPath$1(trustedPath.file, options.projectRoot) });
 		}
+		const resolvedPath = await verifyProjectExistingPath(options.projectRoot, trustedPath.file);
+		if (!resolvedPath.ok) return openSourceLocationFailure("path-outside-project", resolvedPath.message, resolvedPath.details);
 		return openSourceLocationSuccess({
 			file: trustedPath.file,
 			line,
@@ -916,6 +962,8 @@ async function resolveOpenSourceLocation(options) {
 	} catch {
 		return openSourceLocationFailure("file-not-found", "Source file does not exist.", { file: toRelativeProjectPath$1(safePath.file, options.projectRoot) });
 	}
+	const resolvedPath = await verifyProjectExistingPath(options.projectRoot, safePath.file);
+	if (!resolvedPath.ok) return openSourceLocationFailure("path-outside-project", resolvedPath.message, resolvedPath.details);
 	return openSourceLocationSuccess({
 		file: safePath.file,
 		line: parsed.line,
@@ -935,9 +983,9 @@ function parseSourceLocationText(source) {
 		ok: false,
 		response: openSourceLocationFailure("invalid-request", "Source location must include a file path.")
 	};
-	const line = match[2] ? Number.parseInt(match[2], 10) : void 0;
-	const column = match[3] ? Number.parseInt(match[3], 10) : void 0;
-	if (line !== void 0 && line < 1 || column !== void 0 && column < 1) return {
+	const line = parseOptionalPositiveInteger(match[2]);
+	const column = parseOptionalPositiveInteger(match[3]);
+	if (match[2] !== void 0 && line === void 0 || match[3] !== void 0 && column === void 0) return {
 		ok: false,
 		response: openSourceLocationFailure("invalid-request", "Line and column numbers must be positive integers.")
 	};
@@ -948,6 +996,11 @@ function parseSourceLocationText(source) {
 		column
 	};
 }
+function parseOptionalPositiveInteger(value) {
+	if (value === void 0) return void 0;
+	const parsed = Number(value);
+	return Number.isSafeInteger(parsed) && parsed >= 1 ? parsed : void 0;
+}
 function openSourceLocationSuccess(options) {
 	const file = toRelativeProjectPath$1(options.file, options.projectRoot);
 	const location = [
@@ -975,15 +1028,12 @@ function openSourceLocationFailure(code, message, details) {
 }
 function isOpenSourceLocationRequest(value) {
 	if (!isRecord$2(value)) return false;
-	if (value.kind === "source") return typeof value.source === "string" && value.source.length > 0;
-	if (value.kind === "component") return typeof value.editId === "string" && value.editId.length > 0;
+	if (value.kind === "source") return hasOnlyKeys$2(value, ["kind", "source"]) && typeof value.source === "string" && value.source.length > 0;
+	if (value.kind === "component") return hasOnlyKeys$2(value, ["kind", "editId"]) && typeof value.editId === "string" && value.editId.length > 0;
 	return false;
 }
-async function readRequestBody$2(request) {
-	if (!request[Symbol.asyncIterator]) return "";
-	let body = "";
-	for await (const chunk of request) body += typeof chunk === "string" ? chunk : Buffer.from(chunk).toString("utf8");
-	return body;
+function hasOnlyKeys$2(value, allowedKeys) {
+	return Object.keys(value).every((key) => allowedKeys.includes(key));
 }
 function isRecord$2(value) {
 	return typeof value === "object" && value !== null && !Array.isArray(value);
@@ -1010,10 +1060,11 @@ function registerRuntimeModuleRoutes(server, options) {
 			response.setHeader("cache-control", "no-store");
 			response.end(runtimeModuleSourceMap);
 		} catch (error) {
+			logUnexpectedDevServerError("Failed to load Sculpted runtime module source map.", error);
 			response.statusCode = 404;
 			response.setHeader("content-type", "text/plain");
 			response.setHeader("cache-control", "no-store");
-			response.end(`Failed to load Sculpted runtime module source map: ${error instanceof Error ? error.message : String(error)}`);
+			response.end(`Failed to load Sculpted runtime module source map: ${errorMessage(error)}`);
 		}
 	});
 	server.middlewares.use(options.runtimeModuleEndpoint, async (_request, response) => {
@@ -1024,10 +1075,11 @@ function registerRuntimeModuleRoutes(server, options) {
 			response.setHeader("cache-control", "no-store");
 			response.end(runtimeModuleSource);
 		} catch (error) {
+			logUnexpectedDevServerError("Failed to load Sculpted runtime module.", error);
 			response.statusCode = 500;
 			response.setHeader("content-type", "text/plain");
 			response.setHeader("cache-control", "no-store");
-			response.end(`Failed to load Sculpted runtime module: ${error instanceof Error ? error.message : String(error)}`);
+			response.end(`Failed to load Sculpted runtime module: ${errorMessage(error)}`);
 		}
 	});
 	server.middlewares.use(options.runtimeChunkEndpoint, async (request, response) => {
@@ -1040,16 +1092,24 @@ function registerRuntimeModuleRoutes(server, options) {
 			return;
 		}
 		try {
+			if (!(await runtimeChunkFileNames()).has(fileName)) {
+				response.statusCode = 404;
+				response.setHeader("content-type", "text/plain");
+				response.setHeader("cache-control", "no-store");
+				response.end("Unknown Sculpted runtime chunk.");
+				return;
+			}
 			const runtimeChunkSource = await readFile(new URL(`./${fileName}`, import.meta.url), "utf8");
 			response.statusCode = 200;
 			response.setHeader("content-type", fileName.endsWith(".map") ? "application/json" : "application/javascript");
 			response.setHeader("cache-control", "no-store");
 			response.end(runtimeChunkSource);
 		} catch (error) {
+			logUnexpectedDevServerError("Failed to load Sculpted runtime chunk.", error);
 			response.statusCode = 404;
 			response.setHeader("content-type", "text/plain");
 			response.setHeader("cache-control", "no-store");
-			response.end(`Failed to load Sculpted runtime chunk: ${error instanceof Error ? error.message : String(error)}`);
+			response.end(`Failed to load Sculpted runtime chunk: ${errorMessage(error)}`);
 		}
 	});
 	server.middlewares.use(DEFAULT_UI_MODULE_SOURCE_MAP_ENDPOINT, async (_request, response) => {
@@ -1060,10 +1120,11 @@ function registerRuntimeModuleRoutes(server, options) {
 			response.setHeader("cache-control", "no-store");
 			response.end(uiModuleSourceMap);
 		} catch (error) {
+			logUnexpectedDevServerError("Failed to load Sculpted UI module source map.", error);
 			response.statusCode = 404;
 			response.setHeader("content-type", "text/plain");
 			response.setHeader("cache-control", "no-store");
-			response.end(`Failed to load Sculpted UI module source map: ${error instanceof Error ? error.message : String(error)}`);
+			response.end(`Failed to load Sculpted UI module source map: ${errorMessage(error)}`);
 		}
 	});
 	server.middlewares.use(options.uiModuleEndpoint, async (_request, response) => {
@@ -1074,10 +1135,11 @@ function registerRuntimeModuleRoutes(server, options) {
 			response.setHeader("cache-control", "no-store");
 			response.end(uiModuleSource);
 		} catch (error) {
+			logUnexpectedDevServerError("Failed to load Sculpted UI module.", error);
 			response.statusCode = 500;
 			response.setHeader("content-type", "text/plain");
 			response.setHeader("cache-control", "no-store");
-			response.end(`Failed to load Sculpted UI module: ${error instanceof Error ? error.message : String(error)}`);
+			response.end(`Failed to load Sculpted UI module: ${errorMessage(error)}`);
 		}
 	});
 }
@@ -1096,6 +1158,22 @@ function runtimeBootstrapSource(options) {
 function rewriteInspectorModuleSource(source, runtimeChunkEndpoint, sourceMapEndpoint) {
 	return source.replaceAll("from \"./", `from "${runtimeChunkEndpoint}`).replace(/\/\/# sourceMappingURL=[^\r\n]+/g, `//# sourceMappingURL=${sourceMapEndpoint}`);
 }
+async function runtimeChunkFileNames() {
+	const [runtimeSource, uiSource] = await Promise.all([readFile(new URL("./runtime.mjs", import.meta.url), "utf8"), readFile(new URL("./ui.mjs", import.meta.url), "utf8")]);
+	return runtimeChunkFileNamesFromSources([runtimeSource, uiSource]);
+}
+function runtimeChunkFileNamesFromSources(sources) {
+	const fileNames = /* @__PURE__ */ new Set();
+	for (const source of sources) for (const match of source.matchAll(/(?:from\s+|import\s*\()\s*["']\.\/([^"']+)["']/g)) {
+		const specifier = match[1] ?? "";
+		if (specifier.includes("/") || specifier.includes("\\") || /[?#]/.test(specifier)) continue;
+		const fileName = runtimeChunkFileName(specifier);
+		if (!fileName) continue;
+		fileNames.add(fileName);
+		if (fileName.endsWith(".mjs")) fileNames.add(`${fileName}.map`);
+	}
+	return fileNames;
+}
 function runtimeChunkFileName(url) {
 	const fileName = (url ?? "").replace(/[?#].*$/, "").split("/").filter(Boolean).at(-1);
 	if (!fileName || !/^[A-Za-z0-9._-]+\.mjs(?:\.map)?$/.test(fileName)) return void 0;
@@ -1132,23 +1210,52 @@ function registerStyleModuleRoute(server, options) {
 			return;
 		}
 		let sourceText;
+		let styleFileExists = true;
 		try {
-			sourceText = await readFile(paths.paths.styleFile, "utf8");
+			await access(paths.paths.styleFile);
 		} catch (error) {
-			if (!isMissingFileError$1(error)) {
+			if (isMissingFileError$1(error)) styleFileExists = false;
+			else {
+				logUnexpectedDevServerError("Failed to read Sculpted style module.", error);
 				response.statusCode = 400;
 				response.setHeader("content-type", "application/json");
 				response.setHeader("cache-control", "no-store");
-				response.end(JSON.stringify(styleModuleFailure("write-failed", `Failed to read style module: ${error instanceof Error ? error.message : String(error)}`)));
+				response.end(JSON.stringify(styleModuleFailure("write-failed", `Failed to read style module: ${errorMessage(error)}`)));
 				return;
 			}
 		}
-		const result = readComponentStyleModule({
-			projectRoot: options.projectRoot,
-			componentSource: requestResult.componentSource,
-			sourceText,
-			cssImportSources: options.cssImportSources
-		});
+		if (styleFileExists) {
+			const safePath = await verifyProjectExistingPath(options.projectRoot, paths.paths.styleFile);
+			if (!safePath.ok) {
+				response.statusCode = 400;
+				response.setHeader("content-type", "application/json");
+				response.setHeader("cache-control", "no-store");
+				response.end(JSON.stringify(styleModuleFailure(safePath.code, safePath.message, safePath.details)));
+				return;
+			}
+			try {
+				sourceText = await readFile(paths.paths.styleFile, "utf8");
+			} catch (error) {
+				logUnexpectedDevServerError("Failed to read Sculpted style module.", error);
+				response.statusCode = 400;
+				response.setHeader("content-type", "application/json");
+				response.setHeader("cache-control", "no-store");
+				response.end(JSON.stringify(styleModuleFailure("write-failed", `Failed to read style module: ${errorMessage(error)}`)));
+				return;
+			}
+		}
+		let result;
+		try {
+			result = readComponentStyleModule({
+				projectRoot: options.projectRoot,
+				componentSource: requestResult.componentSource,
+				sourceText,
+				cssImportSources: options.cssImportSources
+			});
+		} catch (error) {
+			logUnexpectedDevServerError("Failed to inspect Sculpted style module.", error);
+			result = styleModuleFailure("write-failed", `Failed to inspect style module: ${errorMessage(error)}`);
+		}
 		response.statusCode = result.ok ? 200 : 400;
 		response.setHeader("content-type", "application/json");
 		response.setHeader("cache-control", "no-store");
@@ -1157,9 +1264,9 @@ function registerStyleModuleRoute(server, options) {
 }
 async function readStyleModuleRequest(request) {
 	try {
-		const body = await readRequestBody$1(request);
+		const body = await readRequestBody(request);
 		const parsed = JSON.parse(body);
-		if (!isRecord$1(parsed) || typeof parsed.componentSource !== "string") return {
+		if (!isRecord$1(parsed) || !hasOnlyKeys$1(parsed, ["componentSource"]) || typeof parsed.componentSource !== "string" || parsed.componentSource.length === 0) return {
 			ok: false,
 			response: styleModuleFailure("invalid-edit", "Request body is not a valid style-module request.")
 		};
@@ -1174,12 +1281,6 @@ async function readStyleModuleRequest(request) {
 		};
 	}
 }
-async function readRequestBody$1(request) {
-	if (!request[Symbol.asyncIterator]) return "";
-	let body = "";
-	for await (const chunk of request) body += typeof chunk === "string" ? chunk : Buffer.from(chunk).toString("utf8");
-	return body;
-}
 function styleModuleFailure(code, message, details) {
 	return {
 		ok: false,
@@ -1193,6 +1294,9 @@ function styleModuleFailure(code, message, details) {
 function isMissingFileError$1(error) {
 	return isRecord$1(error) && error.code === "ENOENT";
 }
+function hasOnlyKeys$1(value, allowedKeys) {
+	return Object.keys(value).every((key) => allowedKeys.includes(key));
+}
 function isRecord$1(value) {
 	return typeof value === "object" && value !== null && !Array.isArray(value);
 }
@@ -1509,42 +1613,49 @@ function registerWritebackRoutes(server, options) {
 			response.end(JSON.stringify(requestResult.response));
 			return;
 		}
-		const result = requestResult.request.kind === "panda-css-inline-source" ? await writeInlineCssSourcePatch({
-			request: requestResult.request,
-			projectRoot: options.projectRoot,
-			cssImportSources: options.cssImportSources,
-			sourceSyntax: options.sourceSyntax,
-			attributes: options.attributes,
-			onManifestEntries: options.onManifestEntries
-		}) : requestResult.request.kind === "panda-css-style-module-source" || requestResult.request.kind === "panda-css-style-module-attach" || requestResult.request.kind === "panda-css-style-module-detach" ? await writeStyleModulePatch({
-			request: requestResult.request,
-			projectRoot: options.projectRoot,
-			cssImportSources: options.cssImportSources,
-			styledSystemPackageName: await inferStyledSystemPackageName(options.projectRoot),
-			attributes: options.attributes,
-			onManifestEntries: options.onManifestEntries
-		}) : requestResult.request.kind === "panda-css-batch" ? await writeStaticCssBatchPatch({
-			manifest: options.manifest(),
-			request: requestResult.request,
-			projectRoot: options.projectRoot,
-			cssImportSources: options.cssImportSources,
-			sourceSyntax: options.sourceSyntax,
-			onManifestEntries: options.onManifestEntries
-		}) : await writeStaticCssPatch({
-			manifest: options.manifest(),
-			request: requestResult.request,
-			projectRoot: options.projectRoot,
-			cssImportSources: options.cssImportSources,
-			sourceSyntax: options.sourceSyntax,
-			onManifestEntries: options.onManifestEntries
-		});
+		let result;
+		try {
+			result = requestResult.request.kind === "panda-css-inline-source" ? await writeInlineCssSourcePatch({
+				request: requestResult.request,
+				projectRoot: options.projectRoot,
+				cssImportSources: options.cssImportSources,
+				sourceSyntax: options.sourceSyntax,
+				attributes: options.attributes,
+				onManifestEntries: options.onManifestEntries
+			}) : requestResult.request.kind === "panda-css-style-module-source" || requestResult.request.kind === "panda-css-style-module-attach" || requestResult.request.kind === "panda-css-style-module-detach" ? await writeStyleModulePatch({
+				request: requestResult.request,
+				projectRoot: options.projectRoot,
+				cssImportSources: options.cssImportSources,
+				styledSystemPackageName: await inferStyledSystemPackageName(options.projectRoot),
+				attributes: options.attributes,
+				onManifestEntries: options.onManifestEntries
+			}) : requestResult.request.kind === "panda-css-batch" ? await writeStaticCssBatchPatch({
+				manifest: options.manifest(),
+				request: requestResult.request,
+				projectRoot: options.projectRoot,
+				cssImportSources: options.cssImportSources,
+				sourceSyntax: options.sourceSyntax,
+				onManifestEntries: options.onManifestEntries
+			}) : await writeStaticCssPatch({
+				manifest: options.manifest(),
+				request: requestResult.request,
+				projectRoot: options.projectRoot,
+				cssImportSources: options.cssImportSources,
+				sourceSyntax: options.sourceSyntax,
+				onManifestEntries: options.onManifestEntries
+			});
+		} catch (error) {
+			logUnexpectedDevServerError("Unhandled Sculpted writeback failure.", error);
+			const failure = styleEditFailure(requestResult.request.kind === "panda-css-batch" ? requestResult.request.requests.map((item) => item.editId).join(" ") : requestResult.request.editId, "write-failed", `Unhandled Sculpted writeback failure: ${errorMessage(error)}`);
+			result = requestResult.request.kind === "panda-css-batch" ? styleEditBatchFailure(failure) : failure;
+		}
 		response.statusCode = result.ok ? 200 : 400;
 		response.setHeader("content-type", "application/json");
 		response.setHeader("cache-control", "no-store");
 		response.end(JSON.stringify(result));
 		if (result.ok && result.written && result.manifestUpdate) {
 			notifyViteAboutWrittenFiles(server, options.projectRoot, result.manifestUpdate.changedFiles);
-			server.ws?.send(SCULPTED_EVENTS.manifestUpdate, result.manifestUpdate);
+			sendViteEvent$1(server, SCULPTED_EVENTS.manifestUpdate, result.manifestUpdate);
 		}
 	});
 	server.middlewares.use(DEFAULT_TOKEN_WRITEBACK_ENDPOINT, async (request, response) => {
@@ -1563,27 +1674,42 @@ function registerWritebackRoutes(server, options) {
 			response.end(JSON.stringify(requestResult.response));
 			return;
 		}
-		const result = await writeTokenConfigPatch({
-			request: requestResult.request,
-			projectRoot: options.projectRoot,
-			pandaConfigPath: options.pandaConfigPath
-		});
+		let result;
+		try {
+			result = await writeTokenConfigPatch({
+				request: requestResult.request,
+				projectRoot: options.projectRoot,
+				pandaConfigPath: options.pandaConfigPath
+			});
+		} catch (error) {
+			logUnexpectedDevServerError("Unhandled Sculpted token writeback failure.", error);
+			result = tokenConfigEditFailure(requestResult.request.editId, "write-failed", `Unhandled Sculpted token writeback failure: ${errorMessage(error)}`);
+		}
 		response.statusCode = result.ok ? 200 : 400;
 		response.setHeader("content-type", "application/json");
 		response.setHeader("cache-control", "no-store");
 		response.end(JSON.stringify(result));
 		if (result.ok && result.written && result.metadataUpdate) {
 			notifyViteAboutWrittenFiles(server, options.projectRoot, result.metadataUpdate.changedFiles);
-			server.ws?.send(SCULPTED_EVENTS.metadataUpdate, result.metadataUpdate);
+			sendViteEvent$1(server, SCULPTED_EVENTS.metadataUpdate, result.metadataUpdate);
 		}
 	});
 }
+function sendViteEvent$1(server, event, payload) {
+	try {
+		server.ws?.send(event, payload);
+	} catch {}
+}
 function notifyViteAboutWrittenFiles(server, projectRoot, changedFiles) {
 	for (const changedFile of changedFiles) {
 		const absoluteFile = normalizePath$1(`${projectRoot.replace(/\/$/, "")}/${changedFile}`);
-		const modules = server.moduleGraph?.getModulesByFile?.(absoluteFile);
-		if (modules) for (const module of modules) server.moduleGraph?.invalidateModule?.(module);
-		server.watcher?.emit?.("change", absoluteFile);
+		try {
+			const modules = server.moduleGraph?.getModulesByFile?.(absoluteFile);
+			if (modules) for (const module of modules) server.moduleGraph?.invalidateModule?.(module);
+		} catch {}
+		try {
+			server.watcher?.emit?.("change", absoluteFile);
+		} catch {}
 	}
 }
 async function readStyleEditRequest(request) {
@@ -1624,44 +1750,87 @@ async function readTokenConfigEditRequest(request) {
 		};
 	}
 }
-async function readRequestBody(request) {
-	if (!request[Symbol.asyncIterator]) return "";
-	let body = "";
-	for await (const chunk of request) body += typeof chunk === "string" ? chunk : Buffer.from(chunk).toString("utf8");
-	return body;
-}
 function isStyleEditRequest(value) {
 	if (!isRecord(value)) return false;
+	if (!hasOnlyKeys(value, [
+		"editId",
+		"kind",
+		"edits",
+		"options"
+	])) return false;
 	if (typeof value.editId !== "string" || value.editId.length === 0) return false;
 	if (value.kind !== "panda-css") return false;
 	if (!Array.isArray(value.edits) || value.edits.length === 0) return false;
+	if (!isStyleEditOptions(value.options, true)) return false;
 	return value.edits.every((edit) => {
 		if (!isRecord(edit)) return false;
-		if (edit.op === "set") return isPath(edit.path) && isJsonValue(edit.value);
-		if (edit.op === "delete") return isPath(edit.path);
-		if (edit.op === "rename") return isPath(edit.from) && isPath(edit.to);
-		if (edit.op === "replace-object") return isRecord(edit.value);
+		if (edit.op === "set") return hasOnlyKeys(edit, [
+			"op",
+			"path",
+			"value"
+		]) && isPath(edit.path) && isJsonValue(edit.value);
+		if (edit.op === "delete") return hasOnlyKeys(edit, ["op", "path"]) && isPath(edit.path);
+		if (edit.op === "rename") return hasOnlyKeys(edit, [
+			"op",
+			"from",
+			"to"
+		]) && isPath(edit.from) && isPath(edit.to);
+		if (edit.op === "replace-object") return hasOnlyKeys(edit, ["op", "value"]) && isJsonObject(edit.value);
 		return false;
 	});
 }
 function isStyleEditBatchRequest(value) {
 	if (!isRecord(value)) return false;
+	if (!hasOnlyKeys(value, [
+		"kind",
+		"requests",
+		"options"
+	])) return false;
 	if (value.kind !== "panda-css-batch") return false;
 	if (!Array.isArray(value.requests) || value.requests.length === 0) return false;
+	if (!isStyleEditOptions(value.options, false)) return false;
 	return value.requests.every(isStyleEditRequest);
 }
 function isInlineCssSourceCreateRequest(value) {
 	if (!isRecord(value)) return false;
+	if (!hasOnlyKeys(value, [
+		"editId",
+		"kind",
+		"jsxSource",
+		"edits",
+		"options"
+	])) return false;
 	if (typeof value.editId !== "string" || value.editId.length === 0) return false;
 	if (value.kind !== "panda-css-inline-source") return false;
 	if (typeof value.jsxSource !== "string" || value.jsxSource.length === 0) return false;
-	return value.options === void 0 || isRecord(value.options);
+	if (value.edits !== void 0) {
+		if (!Array.isArray(value.edits)) return false;
+		if (!value.edits.every((edit) => {
+			if (!isRecord(edit)) return false;
+			if (edit.op === "set") return hasOnlyKeys(edit, [
+				"op",
+				"path",
+				"value"
+			]) && isPath(edit.path) && isJsonValue(edit.value);
+			if (edit.op === "delete") return hasOnlyKeys(edit, ["op", "path"]) && isPath(edit.path);
+			return false;
+		})) return false;
+	}
+	return isStyleEditOptions(value.options, false);
 }
 function isStyleModuleEditRequest(value) {
 	return isStyleModuleSourceCreateRequest(value) || isStyleModuleSourceAttachRequest(value) || isStyleModuleSourceDetachRequest(value);
 }
 function isStyleModuleSourceCreateRequest(value) {
 	if (!isRecord(value)) return false;
+	if (!hasOnlyKeys(value, [
+		"editId",
+		"kind",
+		"componentSource",
+		"name",
+		"edits",
+		"options"
+	])) return false;
 	if (typeof value.editId !== "string" || value.editId.length === 0) return false;
 	if (value.kind !== "panda-css-style-module-source") return false;
 	if (typeof value.componentSource !== "string" || value.componentSource.length === 0) return false;
@@ -1670,40 +1839,82 @@ function isStyleModuleSourceCreateRequest(value) {
 		if (!Array.isArray(value.edits)) return false;
 		if (!value.edits.every((edit) => {
 			if (!isRecord(edit)) return false;
-			if (edit.op === "set") return isPath(edit.path) && isJsonValue(edit.value);
-			if (edit.op === "delete") return isPath(edit.path);
+			if (edit.op === "set") return hasOnlyKeys(edit, [
+				"op",
+				"path",
+				"value"
+			]) && isPath(edit.path) && isJsonValue(edit.value);
+			if (edit.op === "delete") return hasOnlyKeys(edit, ["op", "path"]) && isPath(edit.path);
 			return false;
 		})) return false;
 	}
-	return value.options === void 0 || isRecord(value.options);
+	return isStyleEditOptions(value.options, false);
 }
 function isStyleModuleSourceAttachRequest(value) {
 	if (!isRecord(value)) return false;
+	if (!hasOnlyKeys(value, [
+		"editId",
+		"kind",
+		"jsxSource",
+		"componentSource",
+		"name",
+		"options"
+	])) return false;
 	if (typeof value.editId !== "string" || value.editId.length === 0) return false;
 	if (value.kind !== "panda-css-style-module-attach") return false;
 	if (typeof value.jsxSource !== "string" || value.jsxSource.length === 0) return false;
 	if (typeof value.componentSource !== "string" || value.componentSource.length === 0) return false;
 	if (typeof value.name !== "string" || value.name.length === 0) return false;
-	return value.options === void 0 || isRecord(value.options);
+	return isStyleEditOptions(value.options, false);
 }
 function isStyleModuleSourceDetachRequest(value) {
 	if (!isRecord(value)) return false;
+	if (!hasOnlyKeys(value, [
+		"editId",
+		"kind",
+		"jsxSource",
+		"componentSource",
+		"name",
+		"options"
+	])) return false;
 	if (typeof value.editId !== "string" || value.editId.length === 0) return false;
 	if (value.kind !== "panda-css-style-module-detach") return false;
 	if (typeof value.jsxSource !== "string" || value.jsxSource.length === 0) return false;
 	if (typeof value.componentSource !== "string" || value.componentSource.length === 0) return false;
 	if (typeof value.name !== "string" || value.name.length === 0) return false;
-	return value.options === void 0 || isRecord(value.options);
+	return isStyleEditOptions(value.options, false);
 }
 function isTokenConfigEditRequest(value) {
 	if (!isRecord(value)) return false;
+	if (!hasOnlyKeys(value, [
+		"editId",
+		"kind",
+		"sourceTargetId",
+		"section",
+		"path",
+		"value",
+		"options"
+	])) return false;
 	if (typeof value.editId !== "string" || value.editId.length === 0) return false;
 	if (value.kind !== "panda-token-config") return false;
 	if (typeof value.sourceTargetId !== "string" || value.sourceTargetId.length === 0) return false;
 	if (value.section !== "tokens.colors" && value.section !== "semanticTokens.colors") return false;
 	if (!isPath(value.path)) return false;
 	if (!isJsonPrimitive(value.value)) return false;
-	return value.options === void 0 || isRecord(value.options);
+	return isStyleEditOptions(value.options, true);
+}
+function isStyleEditOptions(value, allowExpectedSourceHash) {
+	if (value === void 0) return true;
+	if (!isRecord(value)) return false;
+	for (const key of Object.keys(value)) {
+		if (key === "write" || key === "format") continue;
+		if (key === "expectedSourceHash" && allowExpectedSourceHash) continue;
+		return false;
+	}
+	return (!("write" in value) || typeof value.write === "boolean") && (!("format" in value) || typeof value.format === "boolean") && (!allowExpectedSourceHash || !("expectedSourceHash" in value) || typeof value.expectedSourceHash === "string");
+}
+function hasOnlyKeys(value, allowedKeys) {
+	return Object.keys(value).every((key) => allowedKeys.includes(key));
 }
 function styleEditBatchFailure(response) {
 	return {
@@ -1714,14 +1925,17 @@ function styleEditBatchFailure(response) {
 		error: response.error
 	};
 }
-function isNewEmptyInlineSourceEntry(entry) {
-	return entry.kind === "panda-css" && (entry.attribute === "class" || entry.attribute === "className") && Object.keys(entry.styleObject).length === 0;
+function isNewInlineSourceEntry(entry, request) {
+	const initialSetPaths = request.edits?.flatMap((edit) => edit.op === "set" && edit.path.length === 1 ? edit.path : []) ?? [];
+	return entry.kind === "panda-css" && (entry.attribute === "class" || entry.attribute === "className") && (initialSetPaths.length === 0 ? Object.keys(entry.styleObject).length === 0 : initialSetPaths.every((path) => path in entry.styleObject));
 }
 async function writeInlineCssSourcePatch(options) {
 	const parsed = parseJsxSourceFile(options.request.jsxSource);
 	if (!parsed.ok) return styleEditFailure(options.request.editId, parsed.code, parsed.message, parsed.details);
 	const filePath = safeProjectSourcePath(options.projectRoot, parsed.file);
 	if (!filePath.ok) return styleEditFailure(options.request.editId, filePath.code, filePath.message, filePath.details);
+	const readPath = await verifyWriteTarget(options.projectRoot, filePath.file, options.request.editId);
+	if (readPath) return readPath;
 	let sourceText;
 	try {
 		sourceText = await readFile(filePath.file, "utf8");
@@ -1744,22 +1958,30 @@ async function writeInlineCssSourcePatch(options) {
 	});
 	if (!patch.ok || !patch.nextSource) return patch;
 	if (options.request.options?.write !== true) return patch;
+	let transformedEntries;
 	try {
-		await writeFile(filePath.file, patch.nextSource, "utf8");
+		transformedEntries = transformTsxSource({
+			sourceText: patch.nextSource,
+			filePath: filePath.file,
+			projectRoot: options.projectRoot,
+			attributes: options.attributes,
+			cssImportSources: options.cssImportSources,
+			sourceSyntax: options.sourceSyntax
+		}).entries;
 	} catch (error) {
-		return styleEditFailure(options.request.editId, "write-failed", `Failed to write source file: ${error instanceof Error ? error.message : String(error)}`);
+		return styleEditFailure(options.request.editId, "write-failed", `Failed to analyze source after inline source creation: ${error instanceof Error ? error.message : String(error)}`);
 	}
-	const nextEntries = transformTsxSource({
-		sourceText: patch.nextSource,
-		filePath: filePath.file,
-		projectRoot: options.projectRoot,
-		attributes: options.attributes,
-		cssImportSources: options.cssImportSources,
-		sourceSyntax: options.sourceSyntax
-	}).entries.map((entry) => isNewEmptyInlineSourceEntry(entry) ? {
+	const nextEntries = transformedEntries.map((entry) => isNewInlineSourceEntry(entry, options.request) ? {
 		...entry,
 		jsxSourceAliases: Array.from(new Set([...entry.jsxSourceAliases ?? [], options.request.jsxSource]))
 	} : entry);
+	const writePath = await verifyWriteTarget(options.projectRoot, filePath.file, options.request.editId);
+	if (writePath) return writePath;
+	try {
+		await writeFile(filePath.file, patch.nextSource, "utf8");
+	} catch (error) {
+		return styleEditFailure(options.request.editId, "write-failed", `Failed to write source file: ${error instanceof Error ? error.message : String(error)}`);
+	}
 	options.onManifestEntries(filePath.file, nextEntries);
 	const manifestUpdate = {
 		version: 1,
@@ -1780,6 +2002,8 @@ async function writeStyleModulePatch(options) {
 	if (!paths.ok) return styleEditFailure(options.request.editId, paths.code, paths.message, paths.details);
 	const write = options.request.options?.write === true;
 	if (options.request.kind === "panda-css-style-module-source") {
+		const readPath = await verifyWriteTarget(options.projectRoot, paths.paths.styleFile, options.request.editId);
+		if (readPath) return readPath;
 		let sourceText;
 		try {
 			sourceText = await readFile(paths.paths.styleFile, "utf8");
@@ -1801,18 +2025,25 @@ async function writeStyleModulePatch(options) {
 		});
 		if (!patch.ok || !patch.nextSource) return patch;
 		if (!write) return patch;
+		let nextEntries;
+		try {
+			nextEntries = analyzePandaCssSource({
+				sourceText: patch.nextSource,
+				filePath: paths.paths.styleFile,
+				projectRoot: options.projectRoot,
+				cssImportSources: options.cssImportSources
+			}).entries;
+		} catch (error) {
+			return styleEditFailure(options.request.editId, "write-failed", `Failed to analyze style module after writeback: ${error instanceof Error ? error.message : String(error)}`);
+		}
+		const writePath = await verifyWriteTarget(options.projectRoot, paths.paths.styleFile, options.request.editId);
+		if (writePath) return writePath;
 		try {
 			await mkdir(dirname(paths.paths.styleFile), { recursive: true });
 			await writeFile(paths.paths.styleFile, patch.nextSource, "utf8");
 		} catch (error) {
 			return styleEditFailure(options.request.editId, "write-failed", `Failed to write style module: ${error instanceof Error ? error.message : String(error)}`);
 		}
-		const nextEntries = analyzePandaCssSource({
-			sourceText: patch.nextSource,
-			filePath: paths.paths.styleFile,
-			projectRoot: options.projectRoot,
-			cssImportSources: options.cssImportSources
-		}).entries;
 		options.onManifestEntries(paths.paths.styleFile, nextEntries);
 		const manifestUpdate = {
 			version: 1,
@@ -1826,12 +2057,16 @@ async function writeStyleModulePatch(options) {
 		};
 	}
 	let componentSourceText;
+	const componentReadPath = await verifyWriteTarget(options.projectRoot, paths.paths.componentFile, options.request.editId);
+	if (componentReadPath) return componentReadPath;
 	try {
 		componentSourceText = await readFile(paths.paths.componentFile, "utf8");
 	} catch (error) {
 		return styleEditFailure(options.request.editId, "write-failed", `Failed to read component module before style attachment: ${error instanceof Error ? error.message : String(error)}`);
 	}
 	let styleSourceText;
+	const styleReadPath = await verifyWriteTarget(options.projectRoot, paths.paths.styleFile, options.request.editId);
+	if (styleReadPath) return styleReadPath;
 	try {
 		styleSourceText = await readFile(paths.paths.styleFile, "utf8");
 	} catch (error) {
@@ -1863,28 +2098,36 @@ async function writeStyleModulePatch(options) {
 	});
 	if (!patch.ok || !patch.nextSource) return patch;
 	if (!write) return patch;
+	let componentEntries;
+	let analyzedStyleEntries;
 	try {
-		await writeFile(paths.paths.componentFile, patch.nextSource, "utf8");
+		componentEntries = transformTsxSource({
+			sourceText: patch.nextSource,
+			filePath: paths.paths.componentFile,
+			projectRoot: options.projectRoot,
+			attributes: options.attributes,
+			cssImportSources: options.cssImportSources
+		}).entries;
+		analyzedStyleEntries = analyzePandaCssSource({
+			sourceText: styleSourceText,
+			filePath: paths.paths.styleFile,
+			projectRoot: options.projectRoot,
+			cssImportSources: options.cssImportSources
+		}).entries;
 	} catch (error) {
-		return styleEditFailure(options.request.editId, "write-failed", `Failed to write component module: ${error instanceof Error ? error.message : String(error)}`);
+		return styleEditFailure(options.request.editId, "write-failed", `Failed to analyze style-module attachment after writeback: ${error instanceof Error ? error.message : String(error)}`);
 	}
-	const componentEntries = transformTsxSource({
-		sourceText: patch.nextSource,
-		filePath: paths.paths.componentFile,
-		projectRoot: options.projectRoot,
-		attributes: options.attributes,
-		cssImportSources: options.cssImportSources
-	}).entries;
-	const analyzedStyleEntries = analyzePandaCssSource({
-		sourceText: styleSourceText,
-		filePath: paths.paths.styleFile,
-		projectRoot: options.projectRoot,
-		cssImportSources: options.cssImportSources
-	}).entries;
 	const styleEntries = styleModuleEntriesWithJsxAlias({
 		entries: analyzedStyleEntries,
 		request: options.request
 	});
+	const writePath = await verifyWriteTarget(options.projectRoot, paths.paths.componentFile, options.request.editId);
+	if (writePath) return writePath;
+	try {
+		await writeFile(paths.paths.componentFile, patch.nextSource, "utf8");
+	} catch (error) {
+		return styleEditFailure(options.request.editId, "write-failed", `Failed to write component module: ${error instanceof Error ? error.message : String(error)}`);
+	}
 	options.onManifestEntries(paths.paths.componentFile, componentEntries);
 	options.onManifestEntries(paths.paths.styleFile, styleEntries);
 	const manifestUpdate = {
@@ -1918,6 +2161,8 @@ async function writeStaticCssPatch(options) {
 	if (!entry) return styleEditFailure(options.request.editId, "manifest-entry-not-found", "No manifest entry exists for edit id.");
 	const filePath = trustedManifestFilePath(options.manifest, entry);
 	if (!filePath.ok) return styleEditFailure(options.request.editId, filePath.code, filePath.message, filePath.details);
+	const readPath = await verifyWriteTarget(options.projectRoot, filePath.file, options.request.editId);
+	if (readPath) return readPath;
 	let sourceText;
 	try {
 		sourceText = await readFile(filePath.file, "utf8");
@@ -1940,18 +2185,25 @@ async function writeStaticCssPatch(options) {
 	});
 	if (!patch.ok || !patch.nextSource) return patch;
 	if (options.request.options?.write !== true) return patch;
+	let nextEntries;
+	try {
+		nextEntries = analyzePandaCssSource({
+			sourceText: patch.nextSource,
+			filePath: filePath.file,
+			projectRoot: options.projectRoot,
+			cssImportSources: options.cssImportSources,
+			sourceSyntax: options.sourceSyntax
+		}).entries;
+	} catch (error) {
+		return styleEditFailure(options.request.editId, "write-failed", `Failed to analyze source after writeback: ${error instanceof Error ? error.message : String(error)}`);
+	}
+	const writePath = await verifyWriteTarget(options.projectRoot, filePath.file, options.request.editId);
+	if (writePath) return writePath;
 	try {
 		await writeFile(filePath.file, patch.nextSource, "utf8");
 	} catch (error) {
 		return styleEditFailure(options.request.editId, "write-failed", `Failed to write source file: ${error instanceof Error ? error.message : String(error)}`);
 	}
-	const nextEntries = analyzePandaCssSource({
-		sourceText: patch.nextSource,
-		filePath: filePath.file,
-		projectRoot: options.projectRoot,
-		cssImportSources: options.cssImportSources,
-		sourceSyntax: options.sourceSyntax
-	}).entries;
 	options.onManifestEntries(filePath.file, nextEntries);
 	const manifestUpdate = {
 		version: 1,
@@ -1983,6 +2235,8 @@ async function writeStaticCssBatchPatch(options) {
 	}
 	const prepared = [];
 	for (const group of groups.values()) {
+		const readPath = await verifyWriteTarget(options.projectRoot, group.file, group.requests.map((request) => request.editId).join(" "));
+		if (readPath) return styleEditBatchFailure(readPath);
 		let sourceText;
 		try {
 			sourceText = await readFile(group.file, "utf8");
@@ -2004,30 +2258,52 @@ async function writeStaticCssBatchPatch(options) {
 			sourceSyntax: options.sourceSyntax
 		});
 		if (!patch.ok || !patch.nextSource) return styleEditBatchFailure(patch);
+		let nextEntries;
+		if (write) try {
+			nextEntries = analyzePandaCssSource({
+				sourceText: patch.nextSource,
+				filePath: group.file,
+				projectRoot: options.projectRoot,
+				cssImportSources: options.cssImportSources,
+				sourceSyntax: options.sourceSyntax
+			}).entries;
+		} catch (error) {
+			return styleEditBatchFailure(styleEditFailure(group.requests[0]?.editId ?? "", "write-failed", `Failed to analyze source after batch writeback: ${error instanceof Error ? error.message : String(error)}`));
+		}
 		prepared.push({
 			file: group.file,
 			changedFile: group.changedFile,
 			requests: group.requests,
-			nextSource: patch.nextSource
+			previousSource: sourceText,
+			nextSource: patch.nextSource,
+			nextEntries
 		});
 	}
 	const changedFiles = prepared.map((item) => item.changedFile);
 	const entryIds = [];
-	if (write) for (const item of prepared) {
-		try {
-			await writeFile(item.file, item.nextSource, "utf8");
-		} catch (error) {
-			return styleEditBatchFailure(styleEditFailure(item.requests[0]?.editId ?? "", "write-failed", `Failed to write source file: ${error instanceof Error ? error.message : String(error)}`));
+	if (write) {
+		const written = [];
+		for (const item of prepared) {
+			const writePath = await verifyWriteTarget(options.projectRoot, item.file, item.requests.map((request) => request.editId).join(" "));
+			if (writePath) return styleEditBatchFailure(writePath);
+			try {
+				await writeFile(item.file, item.nextSource, "utf8");
+				written.push(item);
+			} catch (error) {
+				const rollbackFailures = [];
+				for (const writtenItem of [...written].reverse()) try {
+					await writeFile(writtenItem.file, writtenItem.previousSource, "utf8");
+				} catch (rollbackError) {
+					rollbackFailures.push(`${writtenItem.changedFile}: ${rollbackError instanceof Error ? rollbackError.message : String(rollbackError)}`);
+				}
+				return styleEditBatchFailure(styleEditFailure(item.requests[0]?.editId ?? "", "write-failed", `Failed to write source file: ${error instanceof Error ? error.message : String(error)}`, rollbackFailures.length > 0 ? { rollbackFailures } : void 0));
+			}
+		}
+		for (const item of prepared) {
+			if (!item.nextEntries) continue;
+			options.onManifestEntries(item.file, item.nextEntries);
+			entryIds.push(...item.nextEntries.map((nextEntry) => nextEntry.id));
 		}
-		const nextEntries = analyzePandaCssSource({
-			sourceText: item.nextSource,
-			filePath: item.file,
-			projectRoot: options.projectRoot,
-			cssImportSources: options.cssImportSources,
-			sourceSyntax: options.sourceSyntax
-		}).entries;
-		options.onManifestEntries(item.file, nextEntries);
-		entryIds.push(...nextEntries.map((nextEntry) => nextEntry.id));
 	}
 	const manifestUpdate = write ? {
 		version: 1,
@@ -2060,6 +2336,8 @@ async function writeTokenConfigPatch(options) {
 	if (!tokenSource) return tokenConfigEditFailure(options.request.editId, "manifest-entry-not-found", "No token source exists for source target id.", { sourceTargetId: options.request.sourceTargetId });
 	const filePath = trustedTokenSourceFilePath(options.projectRoot, tokenSource);
 	if (!filePath.ok) return tokenConfigEditFailure(options.request.editId, filePath.code, filePath.message, filePath.details);
+	const readPath = await verifyWriteTarget(options.projectRoot, filePath.file, options.request.editId);
+	if (readPath) return tokenConfigEditFailure(options.request.editId, readPath.error?.code ?? "path-outside-project", readPath.error?.message ?? "Token source path resolves outside the project root.");
 	let sourceText;
 	try {
 		sourceText = await readFile(filePath.file, "utf8");
@@ -2082,19 +2360,27 @@ async function writeTokenConfigPatch(options) {
 	});
 	if (!patch.ok || !patch.nextSource) return patch;
 	if (!write) return patch;
+	let nextTokenSourceIds;
+	try {
+		nextTokenSourceIds = tokenSourceIdsForPandaConfigSource({
+			projectRoot: options.projectRoot,
+			filePath: filePath.file,
+			sourceText: patch.nextSource
+		});
+	} catch (error) {
+		return tokenConfigEditFailure(options.request.editId, "write-failed", `Failed to prepare editor metadata for token writeback: ${error instanceof Error ? error.message : String(error)}`);
+	}
+	const writePath = await verifyWriteTarget(options.projectRoot, filePath.file, options.request.editId);
+	if (writePath) return writePath;
 	try {
 		await writeFile(filePath.file, patch.nextSource, "utf8");
 	} catch (error) {
 		return tokenConfigEditFailure(options.request.editId, "write-failed", `Failed to write Panda config: ${error instanceof Error ? error.message : String(error)}`);
 	}
-	const nextMetadata = await createEditorMetadata({
-		projectRoot: options.projectRoot,
-		pandaConfigPath: options.pandaConfigPath
-	});
 	const metadataUpdate = {
 		version: 1,
 		changedFiles: [toRelativeProjectPath$1(filePath.file, options.projectRoot)],
-		tokenSourceIds: nextMetadata.tokenSources.status === "available" ? nextMetadata.tokenSources.items.map((item) => item.id) : []
+		tokenSourceIds: nextTokenSourceIds
 	};
 	return {
 		...patch,
@@ -2111,6 +2397,11 @@ async function inferStyledSystemPackageName(projectRoot) {
 		return;
 	}
 }
+async function verifyWriteTarget(projectRoot, filePath, editId) {
+	const verified = await verifyProjectWritePath(projectRoot, filePath);
+	if (verified.ok) return void 0;
+	return styleEditFailure(editId, verified.code, verified.message, verified.details);
+}
 function styleEditFailure(editId, code, message, details) {
 	return {
 		ok: false,
@@ -2160,21 +2451,17 @@ function isPath(value) {
 }
 function isJsonValue(value) {
 	if (value === null) return true;
-	if ([
-		"string",
-		"number",
-		"boolean"
-	].includes(typeof value)) return true;
+	if (typeof value === "string" || typeof value === "boolean") return true;
+	if (typeof value === "number") return Number.isFinite(value);
 	if (Array.isArray(value)) return value.every(isJsonValue);
 	if (!isRecord(value)) return false;
 	return Object.values(value).every(isJsonValue);
 }
 function isJsonPrimitive(value) {
-	return value === null || [
-		"string",
-		"number",
-		"boolean"
-	].includes(typeof value);
+	return value === null || typeof value === "string" || typeof value === "boolean" || typeof value === "number" && Number.isFinite(value);
+}
+function isJsonObject(value) {
+	return isRecord(value) && Object.values(value).every(isJsonValue);
 }
 //#endregion
 //#region src/vite.ts
@@ -2217,10 +2504,20 @@ function sculpted(options = {}) {
 				response.end(JSON.stringify(manifest()));
 			});
 			nextServer.middlewares.use(editorMetadataEndpoint, async (_request, response) => {
-				const metadata = await createEditorMetadata({
-					projectRoot,
-					pandaConfigPath: options.panda?.configPath
-				});
+				let metadata;
+				try {
+					metadata = await createEditorMetadata({
+						projectRoot,
+						pandaConfigPath: options.panda?.configPath
+					});
+				} catch (error) {
+					logUnexpectedDevServerError("Failed to create Sculpted editor metadata.", error);
+					response.statusCode = 500;
+					response.setHeader("content-type", "text/plain");
+					response.setHeader("cache-control", "no-store");
+					response.end(`Failed to create Sculpted editor metadata: ${errorMessage(error)}`);
+					return;
+				}
 				response.statusCode = 200;
 				response.setHeader("content-type", "application/json");
 				response.setHeader("cache-control", "no-store");
@@ -2242,11 +2539,17 @@ function sculpted(options = {}) {
 					response.end(JSON.stringify(requestResult.response));
 					return;
 				}
-				const result = await resolveOpenSourceLocation({
-					request: requestResult.request,
-					manifest: manifest(),
-					projectRoot
-				});
+				let result;
+				try {
+					result = await resolveOpenSourceLocation({
+						request: requestResult.request,
+						manifest: manifest(),
+						projectRoot
+					});
+				} catch (error) {
+					logUnexpectedDevServerError("Unhandled Sculpted source-open failure.", error);
+					result = openSourceLocationFailure("open-failed", `Unhandled Sculpted source-open failure: ${errorMessage(error)}`);
+				}
 				response.statusCode = result.ok ? 200 : 400;
 				response.setHeader("content-type", "application/json");
 				response.setHeader("cache-control", "no-store");
@@ -2303,7 +2606,7 @@ function sculpted(options = {}) {
 				sourceSyntax: options.sourceSyntax
 			});
 			manifestByFile.set(filePath, result.entries);
-			if (result.entries.length > 0) server?.ws?.send(SCULPTED_EVENTS.manifestUpdate, {
+			if (result.entries.length > 0) sendViteEvent(server, SCULPTED_EVENTS.manifestUpdate, {
 				version: 1,
 				changedFiles: [toRelativeProjectPath$1(filePath, projectRoot)],
 				entryIds: result.entries.map((entry) => entry.id)
@@ -2316,5 +2619,10 @@ function sculpted(options = {}) {
 		}
 	};
 }
+function sendViteEvent(server, event, payload) {
+	try {
+		server?.ws?.send(event, payload);
+	} catch {}
+}
 //#endregion
 export { sculpted };