strikethroo 3.0.2 → 3.2.0

package/dist/serve/self-review.js

@@ -0,0 +1,164 @@
+"use strict";
+/**
+ * Self-review launch capability for `npx strikethroo serve`.
+ *
+ * The serve API is otherwise read-only. This module adds the single, narrowly
+ * scoped exception the SPA's "Launch self-review" button needs:
+ *
+ *   - {@link isSelfReviewAvailable} — a PATH scan answering "is the `self-review`
+ *     binary installed?", exposed to the SPA via `GET /api/capabilities` so the
+ *     button only renders when launching can actually succeed;
+ *   - {@link launchSelfReview} — validates a client-supplied plan path stays
+ *     inside the workspace's `plans/` or `archive/` subtree, then spawns the
+ *     binary detached (fire-and-forget, like the browser auto-open).
+ *
+ * Untrusted input (the path string) is never passed to the shell: `spawn` is
+ * invoked with an argv array, and the path is rejected before spawning unless it
+ * resolves to an existing file under `plans/` or `archive/`. Node built-ins only.
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.launchSelfReview = exports.resolveReviewPath = exports.isSelfReviewAvailable = exports.SELF_REVIEW_URL = exports.SELF_REVIEW_BINARY = void 0;
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+const child_process_1 = require("child_process");
+/** The binary name looked up on PATH and spawned. */
+exports.SELF_REVIEW_BINARY = 'self-review';
+/** Where to obtain self-review; surfaced by the SPA when it is not installed. */
+exports.SELF_REVIEW_URL = 'https://github.com/e0ipso/self-review';
+/**
+ * Returns `true` when the `self-review` binary is found on the process `PATH`.
+ *
+ * A presence check, matching the literal "binary is in path" contract: each
+ * `PATH` entry is probed for a regular file named `self-review` (plus the
+ * `PATHEXT` variants on Windows). It deliberately does not execute the binary,
+ * so it cannot hang and has no side effects.
+ */
+const isSelfReviewAvailable = (env = process.env) => {
+    const pathVar = env.PATH ?? env.Path ?? '';
+    if (!pathVar)
+        return false;
+    const exts = process.platform === 'win32'
+        ? (env.PATHEXT ?? '.EXE;.CMD;.BAT;.COM').split(';').filter(Boolean)
+        : [''];
+    for (const dir of pathVar.split(path.delimiter).filter(Boolean)) {
+        for (const ext of exts) {
+            const candidate = path.join(dir, exports.SELF_REVIEW_BINARY + ext);
+            try {
+                if (fs.statSync(candidate).isFile())
+                    return true;
+            }
+            catch {
+                // Not present in this directory; keep scanning.
+            }
+        }
+    }
+    return false;
+};
+exports.isSelfReviewAvailable = isSelfReviewAvailable;
+/** Spawns the binary detached and unref'd so it outlives the request. */
+const spawnDetached = (command, args) => {
+    const child = (0, child_process_1.spawn)(command, args, { stdio: 'ignore', detached: true });
+    child.on('error', () => {
+        /* a failed launch must not crash the server */
+    });
+    child.unref();
+};
+/**
+ * Resolves a client-supplied plan path to an absolute path, requiring it to be
+ * an existing file inside `<root>/plans` or `<root>/archive`. Returns the
+ * absolute path on success or a user-facing error otherwise.
+ *
+ * `root` is the absolute `.ai/strikethroo` directory; client paths are the
+ * workspace-relative form the SPA shows (e.g. `.ai/strikethroo/plans/NN--s/…`),
+ * so they are resolved against the project root (`root/../..`). Absolute client
+ * paths are accepted too — the containment check is what enforces safety.
+ */
+const resolveReviewPath = (root, clientPath) => {
+    if (typeof clientPath !== 'string' || clientPath.trim() === '') {
+        return { error: 'A plan path is required.', status: 400 };
+    }
+    const projectRoot = path.resolve(root, '..', '..');
+    const resolved = path.resolve(projectRoot, clientPath);
+    const plansDir = path.join(root, 'plans');
+    const archiveDir = path.join(root, 'archive');
+    const within = (dir) => resolved === dir || resolved.startsWith(dir + path.sep);
+    if (!within(plansDir) && !within(archiveDir)) {
+        return {
+            error: 'Plan path must be inside the workspace plans/ or archive/ directory.',
+            status: 400,
+        };
+    }
+    try {
+        if (!fs.statSync(resolved).isFile()) {
+            return { error: 'Plan path does not point to a file.', status: 404 };
+        }
+    }
+    catch {
+        return { error: 'Plan file not found.', status: 404 };
+    }
+    return { absPath: resolved };
+};
+exports.resolveReviewPath = resolveReviewPath;
+/**
+ * Validates `clientPath` and, if the binary is available, launches
+ * `self-review <absolutePath>` detached. Pure of HTTP concerns: returns the
+ * status/body the endpoint should send so it stays unit-testable.
+ */
+const launchSelfReview = (root, clientPath, deps = {}) => {
+    const available = deps.available ?? exports.isSelfReviewAvailable;
+    if (!available()) {
+        return {
+            status: 409,
+            body: { ok: false, error: 'self-review is not installed on PATH.' },
+        };
+    }
+    const resolved = (0, exports.resolveReviewPath)(root, clientPath);
+    if ('error' in resolved) {
+        return { status: resolved.status, body: { ok: false, error: resolved.error } };
+    }
+    try {
+        (deps.spawnDetached ?? spawnDetached)(exports.SELF_REVIEW_BINARY, [resolved.absPath]);
+    }
+    catch (err) {
+        return {
+            status: 500,
+            body: { ok: false, error: `Failed to launch self-review: ${err.message}` },
+        };
+    }
+    return { status: 200, body: { ok: true } };
+};
+exports.launchSelfReview = launchSelfReview;
+//# sourceMappingURL=self-review.js.map

package/dist/serve/self-review.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"self-review.js","sourceRoot":"","sources":["../../src/serve/self-review.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;GAgBG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAEH,uCAAyB;AACzB,2CAA6B;AAC7B,iDAAsC;AAEtC,qDAAqD;AACxC,QAAA,kBAAkB,GAAG,aAAa,CAAC;AAEhD,iFAAiF;AACpE,QAAA,eAAe,GAAG,uCAAuC,CAAC;AAEvE;;;;;;;GAOG;AACI,MAAM,qBAAqB,GAAG,CACnC,MAA0C,OAAO,CAAC,GAAG,EAC5C,EAAE;IACX,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC;IAC3C,IAAI,CAAC,OAAO;QAAE,OAAO,KAAK,CAAC;IAE3B,MAAM,IAAI,GACR,OAAO,CAAC,QAAQ,KAAK,OAAO;QAC1B,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,IAAI,qBAAqB,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC;QACnE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAEX,KAAK,MAAM,GAAG,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;QAChE,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,0BAAkB,GAAG,GAAG,CAAC,CAAC;YAC3D,IAAI,CAAC;gBACH,IAAI,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,MAAM,EAAE;oBAAE,OAAO,IAAI,CAAC;YACnD,CAAC;YAAC,MAAM,CAAC;gBACP,gDAAgD;YAClD,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC,CAAC;AAtBW,QAAA,qBAAqB,yBAsBhC;AAgBF,yEAAyE;AACzE,MAAM,aAAa,GAAG,CAAC,OAAe,EAAE,IAAc,EAAQ,EAAE;IAC9D,MAAM,KAAK,GAAG,IAAA,qBAAK,EAAC,OAAO,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;IACxE,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;QACrB,+CAA+C;IACjD,CAAC,CAAC,CAAC;IACH,KAAK,CAAC,KAAK,EAAE,CAAC;AAChB,CAAC,CAAC;AAEF;;;;;;;;;GASG;AACI,MAAM,iBAAiB,GAAG,CAC/B,IAAY,EACZ,UAAkB,EACuC,EAAE;IAC3D,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,UAAU,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QAC/D,OAAO,EAAE,KAAK,EAAE,0BAA0B,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;IAC5D,CAAC;IAED,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;IACnD,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,UAAU,CAAC,CAAC;IAEvD,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAC1C,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IAC9C,MAAM,MAAM,GAAG,CAAC,GAAW,EAAW,EAAE,CAAC,QAAQ,KAAK,GAAG,IAAI,QAAQ,CAAC,UAAU,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;IAEjG,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC;QAC7C,OAAO;YACL,KAAK,EAAE,sEAAsE;YAC7E,MAAM,EAAE,GAAG;SACZ,CAAC;IACJ,CAAC;IAED,IAAI,CAAC;QACH,IAAI,CAAC,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;YACpC,OAAO,EAAE,KAAK,EAAE,qCAAqC,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;QACvE,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,KAAK,EAAE,sBAAsB,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;IACxD,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC;AAC/B,CAAC,CAAC;AA/BW,QAAA,iBAAiB,qBA+B5B;AAEF;;;;GAIG;AACI,MAAM,gBAAgB,GAAG,CAC9B,IAAY,EACZ,UAAkB,EAClB,OAAmB,EAAE,EACP,EAAE;IAChB,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,6BAAqB,CAAC;IAC1D,IAAI,CAAC,SAAS,EAAE,EAAE,CAAC;QACjB,OAAO;YACL,MAAM,EAAE,GAAG;YACX,IAAI,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,uCAAuC,EAAE;SACpE,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,IAAA,yBAAiB,EAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IACrD,IAAI,OAAO,IAAI,QAAQ,EAAE,CAAC;QACxB,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,EAAE,CAAC;IACjF,CAAC;IAED,IAAI,CAAC;QACH,CAAC,IAAI,CAAC,aAAa,IAAI,aAAa,CAAC,CAAC,0BAAkB,EAAE,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;IAChF,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO;YACL,MAAM,EAAE,GAAG;YACX,IAAI,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,iCAAkC,GAAa,CAAC,OAAO,EAAE,EAAE;SACtF,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC;AAC7C,CAAC,CAAC;AA5BW,QAAA,gBAAgB,oBA4B3B"}

package/dist/serve/server.d.ts

@@ -0,0 +1,70 @@
+/**
+ * Core HTTP server for `npx strikethroo serve`.
+ *
+ * Composes three concerns over the workspace model (`workspace-model.ts`):
+ *   - static hosting of the prebuilt SPA, with directory-traversal protection
+ *     and an `index.html` fallback so client-side routing resolves;
+ *   - a read-only JSON API (`/api/plans`, `/api/plans/:id`, `/api/config`,
+ *     `/api/capabilities`) read fresh per request so responses reflect current
+ *     disk state;
+ *   - `POST /api/plans/:id/archive`, the one sanctioned workspace mutation:
+ *     it moves a `done` plan's directory from `plans/` to `archive/`;
+ *   - the non-read endpoint `POST /api/self-review`, which launches the
+ *     external self-review binary for a validated in-workspace plan path;
+ *   - platform-aware browser auto-open on startup.
+ *
+ * The SSE change stream (`GET /api/events`) is added by a separate module that
+ * hooks into the `apiHandlers` extension point below, so this module stays free
+ * of file-watching concerns. Node built-ins only — no runtime dependency, no
+ * Vite/React/Tailwind imports.
+ */
+import * as http from 'http';
+import { EventsHub } from './events';
+/** Options for {@link startServer}. */
+export interface ServeOptions {
+    /** Absolute path of the `.ai/strikethroo` workspace directory to serve. */
+    root: string;
+    /** Port to bind. `0` selects an ephemeral free port (used by tests). */
+    port: number;
+    /** When `false`, do not open the browser on startup. */
+    open: boolean;
+    /** Absolute path of the prebuilt SPA assets directory. */
+    assetsDir: string;
+    /**
+     * Optional extra API route handlers, tried before the built-in read endpoints
+     * and the built-in SSE stream. A handler returns `true` once it has taken
+     * ownership of the response, `false` to fall through.
+     */
+    apiHandlers?: ApiHandler[];
+    /**
+     * Debounce quiet window (ms) for the change watcher. Defaults to the watcher
+     * module's default; exposed mainly so tests can tighten it.
+     */
+    debounceMs?: number;
+}
+/** A pluggable `/api/*` handler. Returns `true` if it handled the request. */
+export type ApiHandler = (req: http.IncomingMessage, res: http.ServerResponse, ctx: {
+    root: string;
+    pathname: string;
+}) => boolean;
+/** Result of a successful {@link startServer} call. */
+export interface ServeHandle {
+    url: string;
+    server: http.Server;
+    port: number;
+    /** The SSE change-stream hub backing `GET /api/events`. */
+    events: EventsHub;
+}
+/**
+ * Resolves the default prebuilt SPA assets directory relative to the installed
+ * package. The compiled server lives at `<pkg>/dist/serve/server.js`, so the
+ * package root is two levels up and the Plan 82 Vite output is `<pkg>/dist-web`.
+ * Plan 94 finalizes the shipped asset path; this is the local-dev default.
+ */
+export declare const defaultAssetsDir: () => string;
+/**
+ * Creates and starts the HTTP server, resolving with the bound URL once it is
+ * listening. Rejects only on a genuine listen/bind error.
+ */
+export declare const startServer: (opts: ServeOptions) => Promise<ServeHandle>;
+//# sourceMappingURL=server.d.ts.map

package/dist/serve/server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../src/serve/server.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,KAAK,IAAI,MAAM,MAAM,CAAC;AAM7B,OAAO,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AAIrC,uCAAuC;AACvC,MAAM,WAAW,YAAY;IAC3B,2EAA2E;IAC3E,IAAI,EAAE,MAAM,CAAC;IACb,wEAAwE;IACxE,IAAI,EAAE,MAAM,CAAC;IACb,wDAAwD;IACxD,IAAI,EAAE,OAAO,CAAC;IACd,0DAA0D;IAC1D,SAAS,EAAE,MAAM,CAAC;IAClB;;;;OAIG;IACH,WAAW,CAAC,EAAE,UAAU,EAAE,CAAC;IAC3B;;;OAGG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,8EAA8E;AAC9E,MAAM,MAAM,UAAU,GAAG,CACvB,GAAG,EAAE,IAAI,CAAC,eAAe,EACzB,GAAG,EAAE,IAAI,CAAC,cAAc,EACxB,GAAG,EAAE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,KACpC,OAAO,CAAC;AAEb,uDAAuD;AACvD,MAAM,WAAW,WAAW;IAC1B,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,2DAA2D;IAC3D,MAAM,EAAE,SAAS,CAAC;CACnB;AA2BD;;;;;GAKG;AACH,eAAO,MAAM,gBAAgB,QAAO,MAAyD,CAAC;AAgP9F;;;GAGG;AACH,eAAO,MAAM,WAAW,GAAI,MAAM,YAAY,KAAG,OAAO,CAAC,WAAW,CA4CnE,CAAC"}

package/dist/serve/server.js

@@ -0,0 +1,368 @@
+"use strict";
+/**
+ * Core HTTP server for `npx strikethroo serve`.
+ *
+ * Composes three concerns over the workspace model (`workspace-model.ts`):
+ *   - static hosting of the prebuilt SPA, with directory-traversal protection
+ *     and an `index.html` fallback so client-side routing resolves;
+ *   - a read-only JSON API (`/api/plans`, `/api/plans/:id`, `/api/config`,
+ *     `/api/capabilities`) read fresh per request so responses reflect current
+ *     disk state;
+ *   - `POST /api/plans/:id/archive`, the one sanctioned workspace mutation:
+ *     it moves a `done` plan's directory from `plans/` to `archive/`;
+ *   - the non-read endpoint `POST /api/self-review`, which launches the
+ *     external self-review binary for a validated in-workspace plan path;
+ *   - platform-aware browser auto-open on startup.
+ *
+ * The SSE change stream (`GET /api/events`) is added by a separate module that
+ * hooks into the `apiHandlers` extension point below, so this module stays free
+ * of file-watching concerns. Node built-ins only — no runtime dependency, no
+ * Vite/React/Tailwind imports.
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.startServer = exports.defaultAssetsDir = void 0;
+const http = __importStar(require("http"));
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+const child_process_1 = require("child_process");
+const url_1 = require("url");
+const workspace_model_1 = require("./workspace-model");
+const events_1 = require("./events");
+const self_review_1 = require("./self-review");
+const archive_1 = require("./archive");
+const MIME_TYPES = {
+    '.html': 'text/html; charset=utf-8',
+    '.js': 'text/javascript; charset=utf-8',
+    '.mjs': 'text/javascript; charset=utf-8',
+    '.css': 'text/css; charset=utf-8',
+    '.json': 'application/json; charset=utf-8',
+    '.svg': 'image/svg+xml',
+    '.png': 'image/png',
+    '.jpg': 'image/jpeg',
+    '.jpeg': 'image/jpeg',
+    '.gif': 'image/gif',
+    '.ico': 'image/x-icon',
+    '.webp': 'image/webp',
+    '.woff': 'font/woff',
+    '.woff2': 'font/woff2',
+    '.ttf': 'font/ttf',
+    '.otf': 'font/otf',
+    '.map': 'application/json; charset=utf-8',
+    '.txt': 'text/plain; charset=utf-8',
+    '.wasm': 'application/wasm',
+};
+const mimeFor = (filePath) => MIME_TYPES[path.extname(filePath).toLowerCase()] ?? 'application/octet-stream';
+/**
+ * Resolves the default prebuilt SPA assets directory relative to the installed
+ * package. The compiled server lives at `<pkg>/dist/serve/server.js`, so the
+ * package root is two levels up and the Plan 82 Vite output is `<pkg>/dist-web`.
+ * Plan 94 finalizes the shipped asset path; this is the local-dev default.
+ */
+const defaultAssetsDir = () => path.resolve(__dirname, '..', '..', 'dist-web');
+exports.defaultAssetsDir = defaultAssetsDir;
+const sendJson = (res, status, body) => {
+    const payload = JSON.stringify(body);
+    res.writeHead(status, {
+        'Content-Type': 'application/json; charset=utf-8',
+        'Content-Length': Buffer.byteLength(payload),
+    });
+    res.end(payload);
+};
+/** Parses `/api/plans/:id` -> numeric id, or `null` if the segment is not numeric. */
+const parsePlanId = (pathname) => {
+    const match = /^\/api\/plans\/([^/]+)\/?$/.exec(pathname);
+    if (!match || match[1] === undefined)
+        return null;
+    const id = Number(decodeURIComponent(match[1]));
+    return Number.isInteger(id) && id >= 0 ? id : null;
+};
+/** Parses `/api/plans/:id/archive` -> numeric id, or `null` if not numeric. */
+const parseArchivePlanId = (pathname) => {
+    const match = /^\/api\/plans\/([^/]+)\/archive\/?$/.exec(pathname);
+    if (!match || match[1] === undefined)
+        return null;
+    const id = Number(decodeURIComponent(match[1]));
+    return Number.isInteger(id) && id >= 0 ? id : null;
+};
+/**
+ * Handles `POST /api/plans/:id/archive`: delegates entirely to the {@link
+ * archivePlan} operation and maps its discriminated result to status codes
+ * without duplicating validation. Returns `true` once it owns the response.
+ */
+const handleArchive = (res, root, pathname) => {
+    const id = parseArchivePlanId(pathname);
+    if (id === null) {
+        sendJson(res, 400, { error: 'Invalid plan id.' });
+        return true;
+    }
+    (0, archive_1.archivePlan)(root, id)
+        .then(result => {
+        if (result.ok) {
+            sendJson(res, 200, result.plan);
+            return;
+        }
+        switch (result.reason) {
+            case 'not-found':
+                sendJson(res, 404, { error: result.message });
+                return;
+            case 'not-done':
+            case 'already-archived':
+            case 'destination-exists':
+                sendJson(res, 409, { error: result.message });
+                return;
+            default:
+                // fs-error: a safe, fixed message — never leak internals.
+                sendJson(res, 500, { error: 'Failed to archive plan.' });
+        }
+    })
+        .catch(() => {
+        sendJson(res, 500, { error: 'Failed to archive plan.' });
+    });
+    return true;
+};
+/** Handles the built-in read-only API. Returns `true` when the request matched. */
+const handleApi = (res, root, pathname) => {
+    try {
+        if (pathname === '/api/plans' || pathname === '/api/plans/') {
+            sendJson(res, 200, (0, workspace_model_1.getWorkspaceModel)(root).plans);
+            return true;
+        }
+        if (pathname === '/api/config' || pathname === '/api/config/') {
+            sendJson(res, 200, (0, workspace_model_1.getConfig)(root));
+            return true;
+        }
+        if (pathname === '/api/capabilities' || pathname === '/api/capabilities/') {
+            sendJson(res, 200, { selfReview: (0, self_review_1.isSelfReviewAvailable)() });
+            return true;
+        }
+        if (/^\/api\/plans\/[^/]+\/?$/.test(pathname)) {
+            const id = parsePlanId(pathname);
+            if (id === null) {
+                sendJson(res, 404, { error: 'Invalid plan id' });
+                return true;
+            }
+            const detail = (0, workspace_model_1.getPlanDetail)(root, id);
+            if (!detail) {
+                sendJson(res, 404, { error: `Plan ${id} not found` });
+                return true;
+            }
+            sendJson(res, 200, detail);
+            return true;
+        }
+        return false;
+    }
+    catch (err) {
+        // Malformed workspace data: concise message, never a raw stack trace.
+        sendJson(res, 500, {
+            error: `Failed to read workspace: ${err instanceof Error ? err.message : String(err)}`,
+        });
+        return true;
+    }
+};
+/** Max accepted request-body size (bytes). The self-review body is tiny JSON. */
+const MAX_BODY_BYTES = 64 * 1024;
+/** Reads and JSON-parses a request body, rejecting oversized or malformed input. */
+const readJsonBody = (req) => new Promise((resolve, reject) => {
+    let size = 0;
+    const chunks = [];
+    req.on('data', (chunk) => {
+        size += chunk.length;
+        if (size > MAX_BODY_BYTES) {
+            reject(new Error('Request body too large'));
+            req.destroy();
+            return;
+        }
+        chunks.push(chunk);
+    });
+    req.on('end', () => {
+        const raw = Buffer.concat(chunks).toString('utf8').trim();
+        if (raw === '') {
+            resolve({});
+            return;
+        }
+        try {
+            resolve(JSON.parse(raw));
+        }
+        catch {
+            reject(new Error('Invalid JSON body'));
+        }
+    });
+    req.on('error', reject);
+});
+/**
+ * Handles `POST /api/self-review`: launches the external self-review binary for
+ * the requested plan path. Returns `true` once it has owned the response.
+ */
+const handleSelfReview = (req, res, root) => {
+    readJsonBody(req)
+        .then(body => {
+        const clientPath = body.path;
+        const result = (0, self_review_1.launchSelfReview)(root, typeof clientPath === 'string' ? clientPath : '');
+        sendJson(res, result.status, result.body);
+    })
+        .catch((err) => {
+        sendJson(res, 400, { ok: false, error: err.message });
+    });
+    return true;
+};
+/** Streams a static file with an appropriate content type. */
+const sendFile = (res, filePath) => {
+    res.writeHead(200, { 'Content-Type': mimeFor(filePath) });
+    const stream = fs.createReadStream(filePath);
+    stream.on('error', () => {
+        if (!res.headersSent)
+            res.writeHead(500);
+        res.end();
+    });
+    stream.pipe(res);
+};
+const ASSETS_MISSING_MESSAGE = 'Web assets not found. Build the web app first (e.g. `npm run build:web`).';
+/** Serves the SPA: a real file under the assets root, else the index fallback. */
+const handleStatic = (res, assetsDir, pathname) => {
+    const indexFile = path.join(assetsDir, 'index.html');
+    // Resolve the request path under assetsDir and guard against traversal.
+    const relative = decodeURIComponent(pathname).replace(/^\/+/, '');
+    const resolved = path.resolve(assetsDir, relative);
+    const assetsRoot = path.resolve(assetsDir);
+    const withinRoot = resolved === assetsRoot || resolved.startsWith(assetsRoot + path.sep);
+    if (!withinRoot) {
+        res.writeHead(403, { 'Content-Type': 'text/plain; charset=utf-8' });
+        res.end('Forbidden');
+        return;
+    }
+    // A real, non-directory file under the assets root: serve it directly.
+    try {
+        if (relative !== '' && fs.statSync(resolved).isFile()) {
+            sendFile(res, resolved);
+            return;
+        }
+    }
+    catch {
+        // Not a file; fall through to the SPA index fallback.
+    }
+    // SPA fallback: serve index.html for any non-file route so client routing works.
+    try {
+        if (fs.statSync(indexFile).isFile()) {
+            sendFile(res, indexFile);
+            return;
+        }
+    }
+    catch {
+        // index.html missing -> assets not built.
+    }
+    res.writeHead(503, { 'Content-Type': 'text/plain; charset=utf-8' });
+    res.end(ASSETS_MISSING_MESSAGE);
+};
+/** Opens the default browser at `url`. Failures are logged, never fatal. */
+const openBrowser = (url) => {
+    try {
+        const platform = process.platform;
+        let command;
+        let args;
+        if (platform === 'darwin') {
+            command = 'open';
+            args = [url];
+        }
+        else if (platform === 'win32') {
+            command = 'cmd';
+            args = ['/c', 'start', '', url];
+        }
+        else {
+            command = 'xdg-open';
+            args = [url];
+        }
+        const child = (0, child_process_1.spawn)(command, args, { stdio: 'ignore', detached: true });
+        child.on('error', () => {
+            /* a failed open must not stop the server */
+        });
+        child.unref();
+    }
+    catch {
+        /* non-fatal */
+    }
+};
+/**
+ * Creates and starts the HTTP server, resolving with the bound URL once it is
+ * listening. Rejects only on a genuine listen/bind error.
+ */
+const startServer = (opts) => {
+    const extraHandlers = opts.apiHandlers ?? [];
+    const events = new events_1.EventsHub(opts.root, opts.debounceMs);
+    const server = http.createServer((req, res) => {
+        const pathname = new url_1.URL(req.url ?? '/', 'http://localhost').pathname;
+        if (pathname.startsWith('/api/')) {
+            for (const handler of extraHandlers) {
+                if (handler(req, res, { root: opts.root, pathname }))
+                    return;
+            }
+            // The one sanctioned workspace mutation: archive a done plan.
+            if (req.method === 'POST' && /^\/api\/plans\/[^/]+\/archive\/?$/.test(pathname)) {
+                if (handleArchive(res, opts.root, pathname))
+                    return;
+            }
+            // The one write-ish endpoint: launch the external self-review binary.
+            if (req.method === 'POST' && /^\/api\/self-review\/?$/.test(pathname)) {
+                if (handleSelfReview(req, res, opts.root))
+                    return;
+            }
+            // Built-in SSE change stream.
+            if (events.apiHandler(req, res, { pathname }))
+                return;
+            if (handleApi(res, opts.root, pathname))
+                return;
+            sendJson(res, 404, { error: `Unknown API route: ${pathname}` });
+            return;
+        }
+        handleStatic(res, opts.assetsDir, pathname);
+    });
+    // Tear the watcher and open client streams down with the server.
+    server.on('close', () => events.close());
+    return new Promise((resolve, reject) => {
+        server.once('error', reject);
+        server.listen(opts.port, () => {
+            server.removeListener('error', reject);
+            const address = server.address();
+            const boundPort = typeof address === 'object' && address ? address.port : opts.port;
+            const url = `http://localhost:${boundPort}`;
+            events.start();
+            if (opts.open)
+                openBrowser(url);
+            resolve({ url, server, port: boundPort, events });
+        });
+    });
+};
+exports.startServer = startServer;
+//# sourceMappingURL=server.js.map

package/dist/serve/server.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../../src/serve/server.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;GAmBG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAEH,2CAA6B;AAC7B,uCAAyB;AACzB,2CAA6B;AAC7B,iDAAsC;AACtC,6BAA0B;AAC1B,uDAAgF;AAChF,qCAAqC;AACrC,+CAAwE;AACxE,uCAAwC;AAyCxC,MAAM,UAAU,GAA2B;IACzC,OAAO,EAAE,0BAA0B;IACnC,KAAK,EAAE,gCAAgC;IACvC,MAAM,EAAE,gCAAgC;IACxC,MAAM,EAAE,yBAAyB;IACjC,OAAO,EAAE,iCAAiC;IAC1C,MAAM,EAAE,eAAe;IACvB,MAAM,EAAE,WAAW;IACnB,MAAM,EAAE,YAAY;IACpB,OAAO,EAAE,YAAY;IACrB,MAAM,EAAE,WAAW;IACnB,MAAM,EAAE,cAAc;IACtB,OAAO,EAAE,YAAY;IACrB,OAAO,EAAE,WAAW;IACpB,QAAQ,EAAE,YAAY;IACtB,MAAM,EAAE,UAAU;IAClB,MAAM,EAAE,UAAU;IAClB,MAAM,EAAE,iCAAiC;IACzC,MAAM,EAAE,2BAA2B;IACnC,OAAO,EAAE,kBAAkB;CAC5B,CAAC;AAEF,MAAM,OAAO,GAAG,CAAC,QAAgB,EAAU,EAAE,CAC3C,UAAU,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC,IAAI,0BAA0B,CAAC;AAEjF;;;;;GAKG;AACI,MAAM,gBAAgB,GAAG,GAAW,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC;AAAjF,QAAA,gBAAgB,oBAAiE;AAE9F,MAAM,QAAQ,GAAG,CAAC,GAAwB,EAAE,MAAc,EAAE,IAAa,EAAQ,EAAE;IACjF,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IACrC,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE;QACpB,cAAc,EAAE,iCAAiC;QACjD,gBAAgB,EAAE,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC;KAC7C,CAAC,CAAC;IACH,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;AACnB,CAAC,CAAC;AAEF,sFAAsF;AACtF,MAAM,WAAW,GAAG,CAAC,QAAgB,EAAiB,EAAE;IACtD,MAAM,KAAK,GAAG,4BAA4B,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC1D,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IAClD,MAAM,EAAE,GAAG,MAAM,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAChD,OAAO,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AACrD,CAAC,CAAC;AAEF,+EAA+E;AAC/E,MAAM,kBAAkB,GAAG,CAAC,QAAgB,EAAiB,EAAE;IAC7D,MAAM,KAAK,GAAG,qCAAqC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACnE,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IAClD,MAAM,EAAE,GAAG,MAAM,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAChD,OAAO,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AACrD,CAAC,CAAC;AAEF;;;;GAIG;AACH,MAAM,aAAa,GAAG,CAAC,GAAwB,EAAE,IAAY,EAAE,QAAgB,EAAW,EAAE;IAC1F,MAAM,EAAE,GAAG,kBAAkB,CAAC,QAAQ,CAAC,CAAC;IACxC,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC;QAChB,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,kBAAkB,EAAE,CAAC,CAAC;QAClD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAA,qBAAW,EAAC,IAAI,EAAE,EAAE,CAAC;SAClB,IAAI,CAAC,MAAM,CAAC,EAAE;QACb,IAAI,MAAM,CAAC,EAAE,EAAE,CAAC;YACd,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;YAChC,OAAO;QACT,CAAC;QACD,QAAQ,MAAM,CAAC,MAAM,EAAE,CAAC;YACtB,KAAK,WAAW;gBACd,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;gBAC9C,OAAO;YACT,KAAK,UAAU,CAAC;YAChB,KAAK,kBAAkB,CAAC;YACxB,KAAK,oBAAoB;gBACvB,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;gBAC9C,OAAO;YACT;gBACE,0DAA0D;gBAC1D,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,yBAAyB,EAAE,CAAC,CAAC;QAC7D,CAAC;IACH,CAAC,CAAC;SACD,KAAK,CAAC,GAAG,EAAE;QACV,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,yBAAyB,EAAE,CAAC,CAAC;IAC3D,CAAC,CAAC,CAAC;IACL,OAAO,IAAI,CAAC;AACd,CAAC,CAAC;AAEF,mFAAmF;AACnF,MAAM,SAAS,GAAG,CAAC,GAAwB,EAAE,IAAY,EAAE,QAAgB,EAAW,EAAE;IACtF,IAAI,CAAC;QACH,IAAI,QAAQ,KAAK,YAAY,IAAI,QAAQ,KAAK,aAAa,EAAE,CAAC;YAC5D,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,IAAA,mCAAiB,EAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC;YAClD,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IAAI,QAAQ,KAAK,aAAa,IAAI,QAAQ,KAAK,cAAc,EAAE,CAAC;YAC9D,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,IAAA,2BAAS,EAAC,IAAI,CAAC,CAAC,CAAC;YACpC,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IAAI,QAAQ,KAAK,mBAAmB,IAAI,QAAQ,KAAK,oBAAoB,EAAE,CAAC;YAC1E,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,UAAU,EAAE,IAAA,mCAAqB,GAAE,EAAE,CAAC,CAAC;YAC5D,OAAO,IAAI,CAAC;QACd,CAAC;QAED,IAAI,0BAA0B,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC9C,MAAM,EAAE,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAC;YACjC,IAAI,EAAE,KAAK,IAAI,EAAE,CAAC;gBAChB,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,iBAAiB,EAAE,CAAC,CAAC;gBACjD,OAAO,IAAI,CAAC;YACd,CAAC;YACD,MAAM,MAAM,GAAG,IAAA,+BAAa,EAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YACvC,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,YAAY,EAAE,CAAC,CAAC;gBACtD,OAAO,IAAI,CAAC;YACd,CAAC;YACD,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;YAC3B,OAAO,IAAI,CAAC;QACd,CAAC;QAED,OAAO,KAAK,CAAC;IACf,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,sEAAsE;QACtE,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE;YACjB,KAAK,EAAE,6BAA6B,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE;SACvF,CAAC,CAAC;QACH,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC,CAAC;AAEF,iFAAiF;AACjF,MAAM,cAAc,GAAG,EAAE,GAAG,IAAI,CAAC;AAEjC,oFAAoF;AACpF,MAAM,YAAY,GAAG,CAAC,GAAyB,EAAoB,EAAE,CACnE,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;IAC9B,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;QAC/B,IAAI,IAAI,KAAK,CAAC,MAAM,CAAC;QACrB,IAAI,IAAI,GAAG,cAAc,EAAE,CAAC;YAC1B,MAAM,CAAC,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC,CAAC;YAC5C,GAAG,CAAC,OAAO,EAAE,CAAC;YACd,OAAO;QACT,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACrB,CAAC,CAAC,CAAC;IACH,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;QACjB,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;QAC1D,IAAI,GAAG,KAAK,EAAE,EAAE,CAAC;YACf,OAAO,CAAC,EAAE,CAAC,CAAC;YACZ,OAAO;QACT,CAAC;QACD,IAAI,CAAC;YACH,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC;QAC3B,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,CAAC,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC,CAAC;QACzC,CAAC;IACH,CAAC,CAAC,CAAC;IACH,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;AAC1B,CAAC,CAAC,CAAC;AAEL;;;GAGG;AACH,MAAM,gBAAgB,GAAG,CACvB,GAAyB,EACzB,GAAwB,EACxB,IAAY,EACH,EAAE;IACX,YAAY,CAAC,GAAG,CAAC;SACd,IAAI,CAAC,IAAI,CAAC,EAAE;QACX,MAAM,UAAU,GAAI,IAA2B,CAAC,IAAI,CAAC;QACrD,MAAM,MAAM,GAAG,IAAA,8BAAgB,EAAC,IAAI,EAAE,OAAO,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACxF,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC;IAC5C,CAAC,CAAC;SACD,KAAK,CAAC,CAAC,GAAU,EAAE,EAAE;QACpB,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;IACxD,CAAC,CAAC,CAAC;IACL,OAAO,IAAI,CAAC;AACd,CAAC,CAAC;AAEF,8DAA8D;AAC9D,MAAM,QAAQ,GAAG,CAAC,GAAwB,EAAE,QAAgB,EAAQ,EAAE;IACpE,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IAC1D,MAAM,MAAM,GAAG,EAAE,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IAC7C,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;QACtB,IAAI,CAAC,GAAG,CAAC,WAAW;YAAE,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;QACzC,GAAG,CAAC,GAAG,EAAE,CAAC;IACZ,CAAC,CAAC,CAAC;IACH,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACnB,CAAC,CAAC;AAEF,MAAM,sBAAsB,GAC1B,2EAA2E,CAAC;AAE9E,kFAAkF;AAClF,MAAM,YAAY,GAAG,CAAC,GAAwB,EAAE,SAAiB,EAAE,QAAgB,EAAQ,EAAE;IAC3F,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,YAAY,CAAC,CAAC;IAErD,wEAAwE;IACxE,MAAM,QAAQ,GAAG,kBAAkB,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAClE,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IACnD,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAC3C,MAAM,UAAU,GAAG,QAAQ,KAAK,UAAU,IAAI,QAAQ,CAAC,UAAU,CAAC,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC;IACzF,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,2BAA2B,EAAE,CAAC,CAAC;QACpE,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QACrB,OAAO;IACT,CAAC;IAED,uEAAuE;IACvE,IAAI,CAAC;QACH,IAAI,QAAQ,KAAK,EAAE,IAAI,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;YACtD,QAAQ,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;YACxB,OAAO;QACT,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,sDAAsD;IACxD,CAAC;IAED,iFAAiF;IACjF,IAAI,CAAC;QACH,IAAI,EAAE,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;YACpC,QAAQ,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;YACzB,OAAO;QACT,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,0CAA0C;IAC5C,CAAC;IAED,GAAG,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,2BAA2B,EAAE,CAAC,CAAC;IACpE,GAAG,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAC;AAClC,CAAC,CAAC;AAEF,4EAA4E;AAC5E,MAAM,WAAW,GAAG,CAAC,GAAW,EAAQ,EAAE;IACxC,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;QAClC,IAAI,OAAe,CAAC;QACpB,IAAI,IAAc,CAAC;QACnB,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;YAC1B,OAAO,GAAG,MAAM,CAAC;YACjB,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;QACf,CAAC;aAAM,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;YAChC,OAAO,GAAG,KAAK,CAAC;YAChB,IAAI,GAAG,CAAC,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,GAAG,CAAC,CAAC;QAClC,CAAC;aAAM,CAAC;YACN,OAAO,GAAG,UAAU,CAAC;YACrB,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;QACf,CAAC;QACD,MAAM,KAAK,GAAG,IAAA,qBAAK,EAAC,OAAO,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QACxE,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;YACrB,4CAA4C;QAC9C,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,KAAK,EAAE,CAAC;IAChB,CAAC;IAAC,MAAM,CAAC;QACP,eAAe;IACjB,CAAC;AACH,CAAC,CAAC;AAEF;;;GAGG;AACI,MAAM,WAAW,GAAG,CAAC,IAAkB,EAAwB,EAAE;IACtE,MAAM,aAAa,GAAG,IAAI,CAAC,WAAW,IAAI,EAAE,CAAC;IAC7C,MAAM,MAAM,GAAG,IAAI,kBAAS,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,UAAU,CAAC,CAAC;IAEzD,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE;QAC5C,MAAM,QAAQ,GAAG,IAAI,SAAG,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,kBAAkB,CAAC,CAAC,QAAQ,CAAC;QAEtE,IAAI,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;YACjC,KAAK,MAAM,OAAO,IAAI,aAAa,EAAE,CAAC;gBACpC,IAAI,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,CAAC;oBAAE,OAAO;YAC/D,CAAC;YACD,8DAA8D;YAC9D,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,IAAI,mCAAmC,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAChF,IAAI,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC;oBAAE,OAAO;YACtD,CAAC;YACD,sEAAsE;YACtE,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,IAAI,yBAAyB,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACtE,IAAI,gBAAgB,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC;oBAAE,OAAO;YACpD,CAAC;YACD,8BAA8B;YAC9B,IAAI,MAAM,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,QAAQ,EAAE,CAAC;gBAAE,OAAO;YACtD,IAAI,SAAS,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC;gBAAE,OAAO;YAChD,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,sBAAsB,QAAQ,EAAE,EAAE,CAAC,CAAC;YAChE,OAAO;QACT,CAAC;QAED,YAAY,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;IAEH,iEAAiE;IACjE,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;IAEzC,OAAO,IAAI,OAAO,CAAc,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAClD,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC7B,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,EAAE;YAC5B,MAAM,CAAC,cAAc,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;YACvC,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC;YACjC,MAAM,SAAS,GAAG,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;YACpF,MAAM,GAAG,GAAG,oBAAoB,SAAS,EAAE,CAAC;YAC5C,MAAM,CAAC,KAAK,EAAE,CAAC;YACf,IAAI,IAAI,CAAC,IAAI;gBAAE,WAAW,CAAC,GAAG,CAAC,CAAC;YAChC,OAAO,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC;QACpD,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC;AA5CW,QAAA,WAAW,eA4CtB"}

package/dist/serve/watcher.d.ts

@@ -0,0 +1,32 @@
+/**
+ * Workspace file watcher for `npx strikethroo serve`.
+ *
+ * Centralizes change detection behind one small interface so the underlying
+ * mechanism can be swapped later without touching call sites. Today it uses a
+ * single recursive `fs.watch` over the workspace, feeding a debounce so a burst
+ * of rapid writes (editor saves, assistant edits) collapses into one `onChange`
+ * call after a short quiet window.
+ *
+ * Per the plan's portability risk, recursive `fs.watch` may be unreliable on
+ * some Linux configurations. If that proves true on a target platform, a tiny
+ * watcher dependency can be substituted here as a documented last resort without
+ * changing how the server consumes this module. No such dependency is added now.
+ *
+ * Node built-ins only.
+ */
+/** A running watcher. Call `close()` to stop watching and clear timers. */
+export interface WorkspaceWatcher {
+    close(): void;
+}
+/** Default debounce quiet window, in milliseconds. */
+export declare const DEFAULT_DEBOUNCE_MS = 300;
+/**
+ * Starts watching `workspaceDir` recursively. `onChange` is invoked once per
+ * burst, after `debounceMs` of quiet. Returns a handle whose `close()` stops the
+ * watch and clears any pending debounce timer.
+ *
+ * Watch errors are swallowed (the stream stays usable); they must not crash the
+ * server. If `fs.watch` cannot start at all, a no-op watcher is returned.
+ */
+export declare const createWorkspaceWatcher: (workspaceDir: string, onChange: () => void, debounceMs?: number) => WorkspaceWatcher;
+//# sourceMappingURL=watcher.d.ts.map