studiograph 1.3.48-next.21 → 1.3.48-next.210

package/dist/cli/railway-provisioning.d.ts

@@ -0,0 +1,53 @@
+/**
+ * Railway-secret provisioning helpers.
+ *
+ * Phase 2 of the secrets refactor: every Railway deploy needs both
+ * STUDIOGRAPH_JWT_SECRET (existing, plan §1) and STUDIOGRAPH_MASTER_KEY
+ * (new — encrypts secrets.db) provisioned. We generate them client-side
+ * via crypto.randomBytes(32) and POST through the existing GraphQL
+ * variableCollectionUpsert mutation.
+ *
+ * Idempotent: pulls the current variable list first; only sets the keys
+ * that are missing. Caller controls how missing vars are surfaced
+ * (auto-provision in deploy.ts, prompt in redeploy.ts).
+ */
+export type RailwayQuery = (query: string, variables?: Record<string, unknown>) => Promise<any>;
+export interface RailwayServiceContext {
+    projectId: string;
+    serviceId: string;
+    environmentId: string;
+}
+/**
+ * Variables our deploy paths must guarantee exist. Pre-approved set.
+ * Extend here when a new bootstrap-classified env-var lands in the
+ * registry.
+ */
+export declare const REQUIRED_RAILWAY_SECRETS: ReadonlyArray<{
+    name: string;
+    /** Generator: returns a base64-encoded 32-byte secret. */
+    generate: () => string;
+    /** Human description for the audit log / runbook. */
+    description: string;
+}>;
+/**
+ * Read the current variable map for a Railway service+environment.
+ *
+ * Railway's GraphQL exposes per-service variables via the `variables`
+ * query. The shape changed across API versions; this helper deals with
+ * the modern projectId/environmentId/serviceId triple.
+ */
+export declare function fetchRailwayVariables(query: RailwayQuery, ctx: RailwayServiceContext): Promise<Record<string, string>>;
+/**
+ * Determine which of the required secrets are missing from the supplied
+ * variable map. Empty-string counts as missing — Railway sometimes emits
+ * empty values for variables that were defined but never set.
+ */
+export declare function missingRequiredSecrets(existing: Record<string, string>): typeof REQUIRED_RAILWAY_SECRETS;
+/**
+ * Provision any required secret that is missing from the service's
+ * environment. Returns the names of the secrets that were generated and
+ * set on this call (an empty array means everything was already set).
+ *
+ * Idempotent — a re-deploy that already has both vars set is a no-op.
+ */
+export declare function provisionRequiredRailwaySecrets(query: RailwayQuery, ctx: RailwayServiceContext): Promise<string[]>;

package/dist/cli/railway-provisioning.js

@@ -0,0 +1,85 @@
+/**
+ * Railway-secret provisioning helpers.
+ *
+ * Phase 2 of the secrets refactor: every Railway deploy needs both
+ * STUDIOGRAPH_JWT_SECRET (existing, plan §1) and STUDIOGRAPH_MASTER_KEY
+ * (new — encrypts secrets.db) provisioned. We generate them client-side
+ * via crypto.randomBytes(32) and POST through the existing GraphQL
+ * variableCollectionUpsert mutation.
+ *
+ * Idempotent: pulls the current variable list first; only sets the keys
+ * that are missing. Caller controls how missing vars are surfaced
+ * (auto-provision in deploy.ts, prompt in redeploy.ts).
+ */
+import { randomBytes } from 'crypto';
+/**
+ * Variables our deploy paths must guarantee exist. Pre-approved set.
+ * Extend here when a new bootstrap-classified env-var lands in the
+ * registry.
+ */
+export const REQUIRED_RAILWAY_SECRETS = [
+    {
+        name: 'STUDIOGRAPH_JWT_SECRET',
+        generate: () => randomBytes(32).toString('base64'),
+        description: 'JWT signing secret (auth-service)',
+    },
+    {
+        name: 'STUDIOGRAPH_MASTER_KEY',
+        generate: () => randomBytes(32).toString('base64'),
+        description: 'Master key (encrypts secrets.db)',
+    },
+];
+/**
+ * Read the current variable map for a Railway service+environment.
+ *
+ * Railway's GraphQL exposes per-service variables via the `variables`
+ * query. The shape changed across API versions; this helper deals with
+ * the modern projectId/environmentId/serviceId triple.
+ */
+export async function fetchRailwayVariables(query, ctx) {
+    const data = await query(`query($projectId: String!, $environmentId: String!, $serviceId: String!) {
+      variables(projectId: $projectId, environmentId: $environmentId, serviceId: $serviceId)
+    }`, { ...ctx });
+    // The `variables` query returns a JSON object map.
+    if (data && typeof data.variables === 'object' && data.variables !== null) {
+        return data.variables;
+    }
+    return {};
+}
+/**
+ * Determine which of the required secrets are missing from the supplied
+ * variable map. Empty-string counts as missing — Railway sometimes emits
+ * empty values for variables that were defined but never set.
+ */
+export function missingRequiredSecrets(existing) {
+    return REQUIRED_RAILWAY_SECRETS.filter((req) => !existing[req.name]?.trim());
+}
+/**
+ * Provision any required secret that is missing from the service's
+ * environment. Returns the names of the secrets that were generated and
+ * set on this call (an empty array means everything was already set).
+ *
+ * Idempotent — a re-deploy that already has both vars set is a no-op.
+ */
+export async function provisionRequiredRailwaySecrets(query, ctx) {
+    const existing = await fetchRailwayVariables(query, ctx);
+    const missing = missingRequiredSecrets(existing);
+    if (missing.length === 0)
+        return [];
+    const variables = {};
+    for (const req of missing) {
+        variables[req.name] = req.generate();
+    }
+    await query(`mutation($input: VariableCollectionUpsertInput!) {
+      variableCollectionUpsert(input: $input)
+    }`, {
+        input: {
+            projectId: ctx.projectId,
+            environmentId: ctx.environmentId,
+            serviceId: ctx.serviceId,
+            variables,
+        },
+    });
+    return missing.map((m) => m.name);
+}
+//# sourceMappingURL=railway-provisioning.js.map

package/dist/cli/railway-provisioning.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"railway-provisioning.js","sourceRoot":"","sources":["../../src/cli/railway-provisioning.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,WAAW,EAAE,MAAM,QAAQ,CAAC;AAarC;;;;GAIG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAMhC;IACH;QACE,IAAI,EAAE,wBAAwB;QAC9B,QAAQ,EAAE,GAAG,EAAE,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAClD,WAAW,EAAE,mCAAmC;KACjD;IACD;QACE,IAAI,EAAE,wBAAwB;QAC9B,QAAQ,EAAE,GAAG,EAAE,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAClD,WAAW,EAAE,kCAAkC;KAChD;CACF,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,KAAmB,EACnB,GAA0B;IAE1B,MAAM,IAAI,GAAG,MAAM,KAAK,CACtB;;MAEE,EACF,EAAE,GAAG,GAAG,EAAE,CACX,CAAC;IACF,mDAAmD;IACnD,IAAI,IAAI,IAAI,OAAO,IAAI,CAAC,SAAS,KAAK,QAAQ,IAAI,IAAI,CAAC,SAAS,KAAK,IAAI,EAAE,CAAC;QAC1E,OAAO,IAAI,CAAC,SAAmC,CAAC;IAClD,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,sBAAsB,CACpC,QAAgC;IAEhC,OAAO,wBAAwB,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;AAC/E,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,+BAA+B,CACnD,KAAmB,EACnB,GAA0B;IAE1B,MAAM,QAAQ,GAAG,MAAM,qBAAqB,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IACzD,MAAM,OAAO,GAAG,sBAAsB,CAAC,QAAQ,CAAC,CAAC;IACjD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAEpC,MAAM,SAAS,GAA2B,EAAE,CAAC;IAC7C,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;QAC1B,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,QAAQ,EAAE,CAAC;IACvC,CAAC;IACD,MAAM,KAAK,CACT;;MAEE,EACF;QACE,KAAK,EAAE;YACL,SAAS,EAAE,GAAG,CAAC,SAAS;YACxB,aAAa,EAAE,GAAG,CAAC,aAAa;YAChC,SAAS,EAAE,GAAG,CAAC,SAAS;YACxB,SAAS;SACV;KACF,CACF,CAAC;IACF,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;AACpC,CAAC"}

package/dist/cli/setup-wizard.d.ts

@@ -9,16 +9,16 @@ export declare const MODEL_PROVIDERS: {
     readonly anthropic: {
         readonly name: "Anthropic (Claude)";
         readonly models: readonly [{
-            readonly id: "claude-sonnet-4-5-20250929";
-            readonly name: "Claude Sonnet 4.5";
+            readonly id: "claude-sonnet-4-6";
+            readonly name: "Claude Sonnet 4.6";
             readonly hint: "Recommended";
         }, {
-            readonly id: "claude-opus-4-6";
-            readonly name: "Claude Opus 4.6";
+            readonly id: "claude-opus-4-7";
+            readonly name: "Claude Opus 4.7";
             readonly hint: "Most capable";
         }, {
-            readonly id: "claude-3-5-haiku-20241022";
-            readonly name: "Claude 3.5 Haiku";
+            readonly id: "claude-haiku-4-5-20251001";
+            readonly name: "Claude Haiku 4.5";
             readonly hint: "Fastest";
         }];
         readonly envVar: "ANTHROPIC_API_KEY";
@@ -26,59 +26,40 @@ export declare const MODEL_PROVIDERS: {
     readonly openai: {
         readonly name: "OpenAI (GPT)";
         readonly models: readonly [{
-            readonly id: "gpt-4o";
-            readonly name: "GPT-4o";
-            readonly hint: "Recommended";
+            readonly id: "gpt-5.5";
+            readonly name: "GPT-5.5";
+            readonly hint: "Recommended (latest GA)";
+        }, {
+            readonly id: "gpt-5.5-pro";
+            readonly name: "GPT-5.5 Pro";
+            readonly hint: "Most capable";
         }, {
-            readonly id: "gpt-4o-mini";
-            readonly name: "GPT-4o Mini";
-            readonly hint: "Faster and cheaper";
+            readonly id: "gpt-5.4-mini";
+            readonly name: "GPT-5.4 Mini";
+            readonly hint: "Fast & cheap";
         }];
         readonly envVar: "OPENAI_API_KEY";
     };
     readonly google: {
         readonly name: "Google (Gemini)";
         readonly models: readonly [{
-            readonly id: "gemini-2.0-flash-exp";
-            readonly name: "Gemini 2.0 Flash";
-            readonly hint: "Latest";
+            readonly id: "gemini-2.5-pro";
+            readonly name: "Gemini 2.5 Pro";
+            readonly hint: "Recommended (GA)";
         }, {
-            readonly id: "gemini-1.5-pro";
-            readonly name: "Gemini 1.5 Pro";
-            readonly hint: "Most capable";
-        }];
-        readonly envVar: "GOOGLE_API_KEY";
-    };
-    readonly xai: {
-        readonly name: "xAI (Grok)";
-        readonly models: readonly [{
-            readonly id: "grok-2-1212";
-            readonly name: "Grok 2";
-            readonly hint: "Latest";
-        }];
-        readonly envVar: "XAI_API_KEY";
-    };
-    readonly groq: {
-        readonly name: "Groq (Fast Inference)";
-        readonly models: readonly [{
-            readonly id: "llama-3.3-70b-versatile";
-            readonly name: "Llama 3.3 70B";
-            readonly hint: "Very fast";
-        }];
-        readonly envVar: "GROQ_API_KEY";
-    };
-    readonly openrouter: {
-        readonly name: "OpenRouter";
-        readonly models: readonly [{
-            readonly id: "anthropic/claude-opus-4-6";
-            readonly name: "Claude Opus 4.6";
-            readonly hint: "Via OpenRouter";
+            readonly id: "gemini-3.1-pro-preview";
+            readonly name: "Gemini 3.1 Pro Preview";
+            readonly hint: "Newest (preview — may rotate)";
         }, {
-            readonly id: "openai/gpt-4o";
-            readonly name: "GPT-4o";
-            readonly hint: "Via OpenRouter";
+            readonly id: "gemini-2.5-flash";
+            readonly name: "Gemini 2.5 Flash";
+            readonly hint: "Fast & cheap";
+        }, {
+            readonly id: "gemini-pro-latest";
+            readonly name: "Gemini Pro Latest";
+            readonly hint: "Rolling alias";
         }];
-        readonly envVar: "OPENROUTER_API_KEY";
+        readonly envVar: "GOOGLE_API_KEY";
     };
 };
 /**

package/dist/cli/setup-wizard.js

@@ -7,54 +7,41 @@
  */
 import { confirm, select, password, log, isCancel } from '@clack/prompts';
 import { loadUserConfig, saveUserConfig } from '../core/user-config.js';
+import { tryResolve } from '../core/secrets/read-flip.js';
 export const MODEL_PROVIDERS = {
     anthropic: {
         name: 'Anthropic (Claude)',
         models: [
-            { id: 'claude-sonnet-4-5-20250929', name: 'Claude Sonnet 4.5', hint: 'Recommended' },
-            { id: 'claude-opus-4-6', name: 'Claude Opus 4.6', hint: 'Most capable' },
-            { id: 'claude-3-5-haiku-20241022', name: 'Claude 3.5 Haiku', hint: 'Fastest' },
+            { id: 'claude-sonnet-4-6', name: 'Claude Sonnet 4.6', hint: 'Recommended' },
+            { id: 'claude-opus-4-7', name: 'Claude Opus 4.7', hint: 'Most capable' },
+            { id: 'claude-haiku-4-5-20251001', name: 'Claude Haiku 4.5', hint: 'Fastest' },
         ],
         envVar: 'ANTHROPIC_API_KEY',
     },
     openai: {
         name: 'OpenAI (GPT)',
         models: [
-            { id: 'gpt-4o', name: 'GPT-4o', hint: 'Recommended' },
-            { id: 'gpt-4o-mini', name: 'GPT-4o Mini', hint: 'Faster and cheaper' },
+            { id: 'gpt-5.5', name: 'GPT-5.5', hint: 'Recommended (latest GA)' },
+            { id: 'gpt-5.5-pro', name: 'GPT-5.5 Pro', hint: 'Most capable' },
+            { id: 'gpt-5.4-mini', name: 'GPT-5.4 Mini', hint: 'Fast & cheap' },
         ],
         envVar: 'OPENAI_API_KEY',
     },
     google: {
         name: 'Google (Gemini)',
         models: [
-            { id: 'gemini-2.0-flash-exp', name: 'Gemini 2.0 Flash', hint: 'Latest' },
-            { id: 'gemini-1.5-pro', name: 'Gemini 1.5 Pro', hint: 'Most capable' },
+            { id: 'gemini-2.5-pro', name: 'Gemini 2.5 Pro', hint: 'Recommended (GA)' },
+            { id: 'gemini-3.1-pro-preview', name: 'Gemini 3.1 Pro Preview', hint: 'Newest (preview — may rotate)' },
+            { id: 'gemini-2.5-flash', name: 'Gemini 2.5 Flash', hint: 'Fast & cheap' },
+            { id: 'gemini-pro-latest', name: 'Gemini Pro Latest', hint: 'Rolling alias' },
         ],
         envVar: 'GOOGLE_API_KEY',
     },
-    xai: {
-        name: 'xAI (Grok)',
-        models: [
-            { id: 'grok-2-1212', name: 'Grok 2', hint: 'Latest' },
-        ],
-        envVar: 'XAI_API_KEY',
-    },
-    groq: {
-        name: 'Groq (Fast Inference)',
-        models: [
-            { id: 'llama-3.3-70b-versatile', name: 'Llama 3.3 70B', hint: 'Very fast' },
-        ],
-        envVar: 'GROQ_API_KEY',
-    },
-    openrouter: {
-        name: 'OpenRouter',
-        models: [
-            { id: 'anthropic/claude-opus-4-6', name: 'Claude Opus 4.6', hint: 'Via OpenRouter' },
-            { id: 'openai/gpt-4o', name: 'GPT-4o', hint: 'Via OpenRouter' },
-        ],
-        envVar: 'OPENROUTER_API_KEY',
-    },
+    // Note: pi-ai and src/core/user-config.ts:createModel also support xai,
+    // groq, and openrouter via OpenAI-compatible endpoints. They're not
+    // exposed in the wizard until each has been verified end-to-end against
+    // the agent's tool-calling + streaming. Set MODEL_PROVIDER=<id> manually
+    // to use them in the meantime.
 };
 /**
  * Prompt for LLM provider setup if not configured.
@@ -62,6 +49,21 @@ export const MODEL_PROVIDERS = {
  */
 export async function promptLLMSetupIfNeeded() {
     const userConfig = loadUserConfig();
+    // Phase 6 read-flip: check the encrypted store first. If the
+    // per-provider key is set, treat the model as "already configured"
+    // and skip the prompt. We need `model.provider` to know WHICH
+    // per-provider slot to read; if provider isn't set, no key is
+    // considered configured yet.
+    const storeProvider = tryResolve('model.provider');
+    if (storeProvider) {
+        const storeApiKey = tryResolve(`model.${storeProvider}.api_key`);
+        if (storeApiKey) {
+            const providerKey = storeProvider;
+            const providerLabel = MODEL_PROVIDERS[providerKey]?.name.replace(/\s*\(.*\)/, '') ?? storeProvider;
+            log.success(`AI model configured (${providerLabel})`);
+            return;
+        }
+    }
     // Check if already configured via user config
     if (userConfig.api_key) {
         const providerKey = userConfig.model_provider;
@@ -71,14 +73,9 @@ export async function promptLLMSetupIfNeeded() {
         log.success(`AI model configured (${providerLabel})`);
         return;
     }
-    // Check generic MODEL_API_KEY first
-    if (process.env.MODEL_API_KEY) {
-        const provider = process.env.MODEL_PROVIDER || 'anthropic';
-        const providerLabel = MODEL_PROVIDERS[provider]?.name ?? provider;
-        log.success(`AI model configured (${providerLabel} via MODEL_API_KEY)`);
-        return;
-    }
-    // Check common env vars
+    // Check common per-provider env vars. The generic MODEL_API_KEY env
+    // was retired with Phase 12c (2026-05-12) — operators set the
+    // provider-specific env directly.
     const envProviders = [
         { key: 'ANTHROPIC_API_KEY', name: 'Anthropic', provider: 'anthropic' },
         { key: 'OPENAI_API_KEY', name: 'OpenAI', provider: 'openai' },
@@ -104,12 +101,14 @@ export async function promptLLMSetupIfNeeded() {
     }
     // Skip interactive prompt if no TTY (headless / Railway / CI)
     if (!process.stdout.isTTY) {
-        log.info('No AI model configured. Set MODEL_API_KEY and MODEL_PROVIDER environment variables.');
+        log.info('No AI model configured. Set ANTHROPIC_API_KEY (or another provider env var) and MODEL_PROVIDER environment variables.');
         return;
     }
-    // Prompt for setup
+    // Prompt for setup. The model is required by the agent runtime that
+    // runs inside `studiograph serve` (web chat + tool execution); both
+    // `serve` and `clone` invoke this wizard.
     const wantSetup = await confirm({
-        message: 'Set up an AI model? (required for `studiograph start`)',
+        message: 'Set up an AI model? (required for the agent)',
         initialValue: true,
     });
     if (!wantSetup || typeof wantSetup === 'symbol') {

package/dist/cli/setup-wizard.js.map

@@ -1 +1 @@
-{"version":3,"file":"setup-wizard.js","sourceRoot":"","sources":["../../src/cli/setup-wizard.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAQ,GAAG,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAChF,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AAKxE,MAAM,CAAC,MAAM,eAAe,GAAG;IAC7B,SAAS,EAAE;QACT,IAAI,EAAE,oBAAoB;QAC1B,MAAM,EAAE;YACN,EAAE,EAAE,EAAE,4BAA4B,EAAE,IAAI,EAAE,mBAAmB,EAAE,IAAI,EAAE,aAAa,EAAE;YACpF,EAAE,EAAE,EAAE,iBAAiB,EAAE,IAAI,EAAE,iBAAiB,EAAE,IAAI,EAAE,cAAc,EAAE;YACxE,EAAE,EAAE,EAAE,2BAA2B,EAAE,IAAI,EAAE,kBAAkB,EAAE,IAAI,EAAE,SAAS,EAAE;SAC/E;QACD,MAAM,EAAE,mBAAmB;KAC5B;IACD,MAAM,EAAE;QACN,IAAI,EAAE,cAAc;QACpB,MAAM,EAAE;YACN,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,aAAa,EAAE;YACrD,EAAE,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,oBAAoB,EAAE;SACvE;QACD,MAAM,EAAE,gBAAgB;KACzB;IACD,MAAM,EAAE;QACN,IAAI,EAAE,iBAAiB;QACvB,MAAM,EAAE;YACN,EAAE,EAAE,EAAE,sBAAsB,EAAE,IAAI,EAAE,kBAAkB,EAAE,IAAI,EAAE,QAAQ,EAAE;YACxE,EAAE,EAAE,EAAE,gBAAgB,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,cAAc,EAAE;SACvE;QACD,MAAM,EAAE,gBAAgB;KACzB;IACD,GAAG,EAAE;QACH,IAAI,EAAE,YAAY;QAClB,MAAM,EAAE;YACN,EAAE,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE;SACtD;QACD,MAAM,EAAE,aAAa;KACtB;IACD,IAAI,EAAE;QACJ,IAAI,EAAE,uBAAuB;QAC7B,MAAM,EAAE;YACN,EAAE,EAAE,EAAE,yBAAyB,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,WAAW,EAAE;SAC5E;QACD,MAAM,EAAE,cAAc;KACvB;IACD,UAAU,EAAE;QACV,IAAI,EAAE,YAAY;QAClB,MAAM,EAAE;YACN,EAAE,EAAE,EAAE,2BAA2B,EAAE,IAAI,EAAE,iBAAiB,EAAE,IAAI,EAAE,gBAAgB,EAAE;YACpF,EAAE,EAAE,EAAE,eAAe,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,gBAAgB,EAAE;SAChE;QACD,MAAM,EAAE,oBAAoB;KAC7B;CACO,CAAC;AAEX;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB;IAC1C,MAAM,UAAU,GAAG,cAAc,EAAE,CAAC;IAEpC,8CAA8C;IAC9C,IAAI,UAAU,CAAC,OAAO,EAAE,CAAC;QACvB,MAAM,WAAW,GAAG,UAAU,CAAC,cAA0D,CAAC;QAC1F,MAAM,aAAa,GAAG,WAAW;YAC/B,CAAC,CAAC,eAAe,CAAC,WAAW,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,IAAI,WAAW;YAC5E,CAAC,CAAC,YAAY,CAAC;QACjB,GAAG,CAAC,OAAO,CAAC,wBAAwB,aAAa,GAAG,CAAC,CAAC;QACtD,OAAO;IACT,CAAC;IAED,oCAAoC;IACpC,IAAI,OAAO,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC;QAC9B,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,WAAW,CAAC;QAC3D,MAAM,aAAa,GAAG,eAAe,CAAC,QAAwC,CAAC,EAAE,IAAI,IAAI,QAAQ,CAAC;QAClG,GAAG,CAAC,OAAO,CAAC,wBAAwB,aAAa,qBAAqB,CAAC,CAAC;QACxE,OAAO;IACT,CAAC;IAED,wBAAwB;IACxB,MAAM,YAAY,GAAG;QACnB,EAAE,GAAG,EAAE,mBAAmB,EAAE,IAAI,EAAE,WAAW,EAAE,QAAQ,EAAE,WAAW,EAAE;QACtE,EAAE,GAAG,EAAE,gBAAgB,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE;QAC7D,EAAE,GAAG,EAAE,gBAAgB,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE;QAC7D,EAAE,GAAG,EAAE,aAAa,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE;QACpD,EAAE,GAAG,EAAE,cAAc,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE;QACvD,EAAE,GAAG,EAAE,oBAAoB,EAAE,IAAI,EAAE,YAAY,EAAE,QAAQ,EAAE,YAAY,EAAE;KAC1E,CAAC;IAEF,KAAK,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,YAAY,EAAE,CAAC;QACnD,IAAI,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YACrB,6EAA6E;YAC7E,IAAI,CAAC,UAAU,CAAC,cAAc,EAAE,CAAC;gBAC/B,UAAU,CAAC,cAAc,GAAG,QAAQ,CAAC;gBACrC,MAAM,YAAY,GAAG,eAAe,CAAC,QAAwC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;gBAC9F,IAAI,YAAY,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;oBACzC,UAAU,CAAC,QAAQ,GAAG,YAAY,CAAC;gBACrC,CAAC;gBACD,cAAc,CAAC,UAAU,CAAC,CAAC;YAC7B,CAAC;YACD,GAAG,CAAC,OAAO,CAAC,wBAAwB,IAAI,QAAQ,GAAG,GAAG,CAAC,CAAC;YACxD,OAAO;QACT,CAAC;IACH,CAAC;IAED,8DAA8D;IAC9D,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;QAC1B,GAAG,CAAC,IAAI,CAAC,qFAAqF,CAAC,CAAC;QAChG,OAAO;IACT,CAAC;IAED,mBAAmB;IACnB,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC;QAC9B,OAAO,EAAE,wDAAwD;QACjE,YAAY,EAAE,IAAI;KACnB,CAAC,CAAC;IAEH,IAAI,CAAC,SAAS,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;QAChD,GAAG,CAAC,IAAI,CAAC,oDAAoD,CAAC,CAAC;QAC/D,OAAO;IACT,CAAC;IAED,MAAM,cAAc,GAAG,MAAM,MAAM,CAAC;QAClC,OAAO,EAAE,qBAAqB;QAC9B,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,QAAQ,CAAC,EAAE,EAAE,CAAC,CAAC;YACjE,KAAK,EAAE,GAAG;YACV,KAAK,EAAE,QAAQ,CAAC,IAAI;SACrB,CAAC,CAAC;KACJ,CAAC,CAAC;IAEH,IAAI,OAAO,cAAc,KAAK,QAAQ,EAAE,CAAC;QACvC,GAAG,CAAC,IAAI,CAAC,oDAAoD,CAAC,CAAC;QAC/D,OAAO;IACT,CAAC;IAED,MAAM,QAAQ,GAAG,eAAe,CAAC,cAA8C,CAAC,CAAC;IAEjF,MAAM,WAAW,GAAG,MAAM,MAAM,CAAC;QAC/B,OAAO,EAAE,UAAU,QAAQ,CAAC,IAAI,SAAS;QACzC,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YACjC,KAAK,EAAE,CAAC,CAAC,EAAE;YACX,KAAK,EAAE,CAAC,CAAC,IAAI;YACb,IAAI,EAAE,CAAC,CAAC,IAAI;SACb,CAAC,CAAC;KACJ,CAAC,CAAC;IAEH,IAAI,OAAO,WAAW,KAAK,QAAQ,EAAE,CAAC;QACpC,GAAG,CAAC,IAAI,CAAC,oDAAoD,CAAC,CAAC;QAC/D,OAAO;IACT,CAAC;IAED,MAAM,WAAW,GAAG,MAAM,QAAQ,CAAC;QACjC,OAAO,EAAE,cAAc,QAAQ,CAAC,IAAI,WAAW;QAC/C,QAAQ,EAAE,CAAC,KAAK,EAAE,EAAE;YAClB,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,EAAE;gBAAE,OAAO,yBAAyB,CAAC;QAC3E,CAAC;KACF,CAAC,CAAC;IAEH,IAAI,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;QAC1B,GAAG,CAAC,IAAI,CAAC,oDAAoD,CAAC,CAAC;QAC/D,OAAO;IACT,CAAC;IAED,UAAU,CAAC,cAAc,GAAG,cAAwB,CAAC;IACrD,UAAU,CAAC,QAAQ,GAAG,WAAqB,CAAC;IAC5C,UAAU,CAAC,OAAO,GAAI,WAAsB,CAAC,IAAI,EAAE,CAAC;IACpD,cAAc,CAAC,UAAU,CAAC,CAAC;IAC3B,GAAG,CAAC,OAAO,CAAC,wBAAwB,QAAQ,CAAC,IAAI,MAAM,WAAW,EAAE,CAAC,CAAC;AACxE,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,cAAsB;IAC/D,OAAO,CAAC,CAAC;AACX,CAAC"}
+{"version":3,"file":"setup-wizard.js","sourceRoot":"","sources":["../../src/cli/setup-wizard.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAQ,GAAG,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAChF,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,wBAAwB,CAAC;AACxE,OAAO,EAAE,UAAU,EAAE,MAAM,8BAA8B,CAAC;AAK1D,MAAM,CAAC,MAAM,eAAe,GAAG;IAC7B,SAAS,EAAE;QACT,IAAI,EAAE,oBAAoB;QAC1B,MAAM,EAAE;YACN,EAAE,EAAE,EAAE,mBAAmB,EAAE,IAAI,EAAE,mBAAmB,EAAE,IAAI,EAAE,aAAa,EAAE;YAC3E,EAAE,EAAE,EAAE,iBAAiB,EAAE,IAAI,EAAE,iBAAiB,EAAE,IAAI,EAAE,cAAc,EAAE;YACxE,EAAE,EAAE,EAAE,2BAA2B,EAAE,IAAI,EAAE,kBAAkB,EAAE,IAAI,EAAE,SAAS,EAAE;SAC/E;QACD,MAAM,EAAE,mBAAmB;KAC5B;IACD,MAAM,EAAE;QACN,IAAI,EAAE,cAAc;QACpB,MAAM,EAAE;YACN,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,yBAAyB,EAAE;YACnE,EAAE,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,aAAa,EAAE,IAAI,EAAE,cAAc,EAAE;YAChE,EAAE,EAAE,EAAE,cAAc,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,EAAE,cAAc,EAAE;SACnE;QACD,MAAM,EAAE,gBAAgB;KACzB;IACD,MAAM,EAAE;QACN,IAAI,EAAE,iBAAiB;QACvB,MAAM,EAAE;YACN,EAAE,EAAE,EAAE,gBAAgB,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,kBAAkB,EAAE;YAC1E,EAAE,EAAE,EAAE,wBAAwB,EAAE,IAAI,EAAE,wBAAwB,EAAE,IAAI,EAAE,+BAA+B,EAAE;YACvG,EAAE,EAAE,EAAE,kBAAkB,EAAE,IAAI,EAAE,kBAAkB,EAAE,IAAI,EAAE,cAAc,EAAE;YAC1E,EAAE,EAAE,EAAE,mBAAmB,EAAE,IAAI,EAAE,mBAAmB,EAAE,IAAI,EAAE,eAAe,EAAE;SAC9E;QACD,MAAM,EAAE,gBAAgB;KACzB;IACD,wEAAwE;IACxE,oEAAoE;IACpE,wEAAwE;IACxE,yEAAyE;IACzE,+BAA+B;CACvB,CAAC;AAEX;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB;IAC1C,MAAM,UAAU,GAAG,cAAc,EAAE,CAAC;IAEpC,6DAA6D;IAC7D,mEAAmE;IACnE,8DAA8D;IAC9D,8DAA8D;IAC9D,6BAA6B;IAC7B,MAAM,aAAa,GAAG,UAAU,CAAS,gBAAgB,CAAC,CAAC;IAC3D,IAAI,aAAa,EAAE,CAAC;QAClB,MAAM,WAAW,GAAG,UAAU,CAAS,SAAS,aAAa,UAAU,CAAC,CAAC;QACzE,IAAI,WAAW,EAAE,CAAC;YAChB,MAAM,WAAW,GAAG,aAA6C,CAAC;YAClE,MAAM,aAAa,GAAG,eAAe,CAAC,WAAW,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,IAAI,aAAa,CAAC;YACnG,GAAG,CAAC,OAAO,CAAC,wBAAwB,aAAa,GAAG,CAAC,CAAC;YACtD,OAAO;QACT,CAAC;IACH,CAAC;IAED,8CAA8C;IAC9C,IAAI,UAAU,CAAC,OAAO,EAAE,CAAC;QACvB,MAAM,WAAW,GAAG,UAAU,CAAC,cAA0D,CAAC;QAC1F,MAAM,aAAa,GAAG,WAAW;YAC/B,CAAC,CAAC,eAAe,CAAC,WAAW,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,IAAI,WAAW;YAC5E,CAAC,CAAC,YAAY,CAAC;QACjB,GAAG,CAAC,OAAO,CAAC,wBAAwB,aAAa,GAAG,CAAC,CAAC;QACtD,OAAO;IACT,CAAC;IAED,oEAAoE;IACpE,8DAA8D;IAC9D,kCAAkC;IAClC,MAAM,YAAY,GAAG;QACnB,EAAE,GAAG,EAAE,mBAAmB,EAAE,IAAI,EAAE,WAAW,EAAE,QAAQ,EAAE,WAAW,EAAE;QACtE,EAAE,GAAG,EAAE,gBAAgB,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE;QAC7D,EAAE,GAAG,EAAE,gBAAgB,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE;QAC7D,EAAE,GAAG,EAAE,aAAa,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE;QACpD,EAAE,GAAG,EAAE,cAAc,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE;QACvD,EAAE,GAAG,EAAE,oBAAoB,EAAE,IAAI,EAAE,YAAY,EAAE,QAAQ,EAAE,YAAY,EAAE;KAC1E,CAAC;IAEF,KAAK,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,YAAY,EAAE,CAAC;QACnD,IAAI,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YACrB,6EAA6E;YAC7E,IAAI,CAAC,UAAU,CAAC,cAAc,EAAE,CAAC;gBAC/B,UAAU,CAAC,cAAc,GAAG,QAAQ,CAAC;gBACrC,MAAM,YAAY,GAAG,eAAe,CAAC,QAAwC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;gBAC9F,IAAI,YAAY,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;oBACzC,UAAU,CAAC,QAAQ,GAAG,YAAY,CAAC;gBACrC,CAAC;gBACD,cAAc,CAAC,UAAU,CAAC,CAAC;YAC7B,CAAC;YACD,GAAG,CAAC,OAAO,CAAC,wBAAwB,IAAI,QAAQ,GAAG,GAAG,CAAC,CAAC;YACxD,OAAO;QACT,CAAC;IACH,CAAC;IAED,8DAA8D;IAC9D,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;QAC1B,GAAG,CAAC,IAAI,CAAC,uHAAuH,CAAC,CAAC;QAClI,OAAO;IACT,CAAC;IAED,oEAAoE;IACpE,oEAAoE;IACpE,0CAA0C;IAC1C,MAAM,SAAS,GAAG,MAAM,OAAO,CAAC;QAC9B,OAAO,EAAE,8CAA8C;QACvD,YAAY,EAAE,IAAI;KACnB,CAAC,CAAC;IAEH,IAAI,CAAC,SAAS,IAAI,OAAO,SAAS,KAAK,QAAQ,EAAE,CAAC;QAChD,GAAG,CAAC,IAAI,CAAC,oDAAoD,CAAC,CAAC;QAC/D,OAAO;IACT,CAAC;IAED,MAAM,cAAc,GAAG,MAAM,MAAM,CAAC;QAClC,OAAO,EAAE,qBAAqB;QAC9B,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,QAAQ,CAAC,EAAE,EAAE,CAAC,CAAC;YACjE,KAAK,EAAE,GAAG;YACV,KAAK,EAAE,QAAQ,CAAC,IAAI;SACrB,CAAC,CAAC;KACJ,CAAC,CAAC;IAEH,IAAI,OAAO,cAAc,KAAK,QAAQ,EAAE,CAAC;QACvC,GAAG,CAAC,IAAI,CAAC,oDAAoD,CAAC,CAAC;QAC/D,OAAO;IACT,CAAC;IAED,MAAM,QAAQ,GAAG,eAAe,CAAC,cAA8C,CAAC,CAAC;IAEjF,MAAM,WAAW,GAAG,MAAM,MAAM,CAAC;QAC/B,OAAO,EAAE,UAAU,QAAQ,CAAC,IAAI,SAAS;QACzC,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YACjC,KAAK,EAAE,CAAC,CAAC,EAAE;YACX,KAAK,EAAE,CAAC,CAAC,IAAI;YACb,IAAI,EAAE,CAAC,CAAC,IAAI;SACb,CAAC,CAAC;KACJ,CAAC,CAAC;IAEH,IAAI,OAAO,WAAW,KAAK,QAAQ,EAAE,CAAC;QACpC,GAAG,CAAC,IAAI,CAAC,oDAAoD,CAAC,CAAC;QAC/D,OAAO;IACT,CAAC;IAED,MAAM,WAAW,GAAG,MAAM,QAAQ,CAAC;QACjC,OAAO,EAAE,cAAc,QAAQ,CAAC,IAAI,WAAW;QAC/C,QAAQ,EAAE,CAAC,KAAK,EAAE,EAAE;YAClB,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,EAAE;gBAAE,OAAO,yBAAyB,CAAC;QAC3E,CAAC;KACF,CAAC,CAAC;IAEH,IAAI,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;QAC1B,GAAG,CAAC,IAAI,CAAC,oDAAoD,CAAC,CAAC;QAC/D,OAAO;IACT,CAAC;IAED,UAAU,CAAC,cAAc,GAAG,cAAwB,CAAC;IACrD,UAAU,CAAC,QAAQ,GAAG,WAAqB,CAAC;IAC5C,UAAU,CAAC,OAAO,GAAI,WAAsB,CAAC,IAAI,EAAE,CAAC;IACpD,cAAc,CAAC,UAAU,CAAC,CAAC;IAC3B,GAAG,CAAC,OAAO,CAAC,wBAAwB,QAAQ,CAAC,IAAI,MAAM,WAAW,EAAE,CAAC,CAAC;AACxE,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,cAAsB;IAC/D,OAAO,CAAC,CAAC;AACX,CAAC"}

package/dist/core/accent-palette.d.ts

@@ -0,0 +1,22 @@
+/**
+ * Shared accent color palette — used for user profile color picker and
+ * for assigning default colors to newly created users.
+ *
+ * Each entry is a single color chosen to remain readable on both light and
+ * dark surfaces, so the CSS token layer (see applyAccentColor in
+ * stores/workspace.svelte.ts) no longer flips foreground vs. background
+ * swatches based on theme — one color fills every accent role.
+ */
+export interface AccentColor {
+    name: string;
+    /** Single swatch used on both light and dark backgrounds. Stored as the
+     *  identity for a user's chosen accent (preferences.accent_color). */
+    color: string;
+}
+export declare const ACCENT_PALETTE: AccentColor[];
+/**
+ * Pick a deterministic default accent color for a new user, rotating
+ * through the palette based on their user id. Optionally excludes a
+ * reserved color (typically the workspace accent) to avoid collision.
+ */
+export declare function pickDefaultAccentColor(userId: number, reserved?: string | null): string;

package/dist/core/accent-palette.js

@@ -0,0 +1,47 @@
+/**
+ * Shared accent color palette — used for user profile color picker and
+ * for assigning default colors to newly created users.
+ *
+ * Each entry is a single color chosen to remain readable on both light and
+ * dark surfaces, so the CSS token layer (see applyAccentColor in
+ * stores/workspace.svelte.ts) no longer flips foreground vs. background
+ * swatches based on theme — one color fills every accent role.
+ */
+// The accent palette. Order matches the design source (left to right).
+// Red doubles as --color-accent and Lilac as --color-agent so the global
+// system tokens always have a palette member to match; users can still pick
+// either for their personal avatar.
+// Ordered for the picker: red-family first (Red → Rose → Orange),
+// then earthy/green (Sand → Pistachio → Mint), cool middle (Teal → Sky → Slate),
+// and purples/magenta last (Violet → Lilac → Orchid → Pink).
+export const ACCENT_PALETTE = [
+    { name: 'Red', color: '#FE3C3C' },
+    { name: 'Rose', color: '#C06A6A' },
+    { name: 'Orange', color: '#CC7013' },
+    { name: 'Sand', color: '#AB8630' },
+    { name: 'Pistachio', color: '#5A9A08' },
+    { name: 'Mint', color: '#369770' },
+    { name: 'Teal', color: '#289795' },
+    { name: 'Sky', color: '#4289C4' },
+    { name: 'Slate', color: '#718599' },
+    { name: 'Violet', color: '#7C7CD9' },
+    { name: 'Lilac', color: '#B267F3' },
+    { name: 'Orchid', color: '#B269C0' },
+    { name: 'Pink', color: '#DC6CD4' },
+];
+/**
+ * Pick a deterministic default accent color for a new user, rotating
+ * through the palette based on their user id. Optionally excludes a
+ * reserved color (typically the workspace accent) to avoid collision.
+ */
+export function pickDefaultAccentColor(userId, reserved) {
+    const reservedLower = reserved?.toLowerCase();
+    const pool = reservedLower
+        ? ACCENT_PALETTE.filter(c => c.color.toLowerCase() !== reservedLower)
+        : ACCENT_PALETTE;
+    if (pool.length === 0)
+        return ACCENT_PALETTE[0].color;
+    const idx = ((userId - 1) % pool.length + pool.length) % pool.length;
+    return pool[idx].color;
+}
+//# sourceMappingURL=accent-palette.js.map

package/dist/core/accent-palette.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"accent-palette.js","sourceRoot":"","sources":["../../src/core/accent-palette.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AASH,uEAAuE;AACvE,yEAAyE;AACzE,4EAA4E;AAC5E,oCAAoC;AACpC,kEAAkE;AAClE,iFAAiF;AACjF,6DAA6D;AAC7D,MAAM,CAAC,MAAM,cAAc,GAAkB;IAC5C,EAAE,IAAI,EAAE,KAAK,EAAQ,KAAK,EAAE,SAAS,EAAE;IACvC,EAAE,IAAI,EAAE,MAAM,EAAO,KAAK,EAAE,SAAS,EAAE;IACvC,EAAE,IAAI,EAAE,QAAQ,EAAK,KAAK,EAAE,SAAS,EAAE;IACvC,EAAE,IAAI,EAAE,MAAM,EAAO,KAAK,EAAE,SAAS,EAAE;IACvC,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,SAAS,EAAE;IACvC,EAAE,IAAI,EAAE,MAAM,EAAO,KAAK,EAAE,SAAS,EAAE;IACvC,EAAE,IAAI,EAAE,MAAM,EAAO,KAAK,EAAE,SAAS,EAAE;IACvC,EAAE,IAAI,EAAE,KAAK,EAAQ,KAAK,EAAE,SAAS,EAAE;IACvC,EAAE,IAAI,EAAE,OAAO,EAAM,KAAK,EAAE,SAAS,EAAE;IACvC,EAAE,IAAI,EAAE,QAAQ,EAAK,KAAK,EAAE,SAAS,EAAE;IACvC,EAAE,IAAI,EAAE,OAAO,EAAM,KAAK,EAAE,SAAS,EAAE;IACvC,EAAE,IAAI,EAAE,QAAQ,EAAK,KAAK,EAAE,SAAS,EAAE;IACvC,EAAE,IAAI,EAAE,MAAM,EAAO,KAAK,EAAE,SAAS,EAAE;CACvC,CAAC;AAEF;;;;GAIG;AACH,MAAM,UAAU,sBAAsB,CAAC,MAAc,EAAE,QAAwB;IAC9E,MAAM,aAAa,GAAG,QAAQ,EAAE,WAAW,EAAE,CAAC;IAC9C,MAAM,IAAI,GAAG,aAAa;QACzB,CAAC,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,EAAE,KAAK,aAAa,CAAC;QACrE,CAAC,CAAC,cAAc,CAAC;IAClB,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,cAAc,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;IACtD,MAAM,GAAG,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC;IACrE,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC;AACxB,CAAC"}

package/dist/core/artifact-asset-urls.d.ts

@@ -0,0 +1,51 @@
+/**
+ * Shared parser/rewriter for workspace asset URLs embedded in an artifact
+ * bundle. One implementation behind every surface that has to reason about
+ * `/api/assets/...` references, so they can't drift:
+ *   - mint  → enumerate the exact asset keys an artifact references (allowlist)
+ *   - in-app srcdoc + headless PNG/PDF render → append the `?at=` capability token
+ *   - HTML export → rewrite to relative `./assets/...` paths
+ *
+ * Matches BOTH forms that appear in bundles:
+ *   - root-relative   `/api/assets/<assetId>/<filename>`
+ *   - absolute        `https://host/api/assets/<assetId>/<filename>`
+ * in any textual context — `<img src>`, `srcset` descriptors, CSS `url(...)`,
+ * inline `style=`, and (acceptably) JS string literals. assetId is a UUID and
+ * filenames are upload-sanitized to `[A-Za-z0-9._-]`, so the path never holds a
+ * quote/space/paren — we can match the URL token directly without parsing
+ * HTML/CSS.
+ *
+ * Only the IMMUTABLE two-segment scheme is handled. The negative lookahead
+ * after the filename means a legacy three-segment `/api/assets/<type>/<id>/<file>`
+ * URL is left untouched rather than mis-parsed (legacy is out of scope).
+ */
+export interface ArtifactAssetRef {
+    /** The two-segment immutable key: `<assetId>/<filename>`. */
+    key: string;
+    assetId: string;
+    filename: string;
+}
+/** Every distinct asset referenced in the text, in first-seen order. */
+export declare function findArtifactAssetRefs(text: string): ArtifactAssetRef[];
+/**
+ * Set the `at=<token>` capability param on every asset URL. Preserves any other
+ * existing query params and **replaces** a pre-existing `at` with the fresh
+ * token (so a stale or embedded `?at=` in artifact HTML can't shadow a
+ * freshly-minted render/preview token). Idempotent: re-applying the same token
+ * yields the same string.
+ */
+export declare function appendAssetToken(text: string, token: string): string;
+/**
+ * Rewrite asset URLs for the self-contained HTML export zip. Refs whose key is
+ * in `bundledKeys` (the assets actually written into the zip) become relative
+ * `./assets/<id>/<file>` (offline-resolvable); any OTHER `/api/assets/...` ref
+ * (cross-repo / unauthorized — not bundled) is left absolute so it still
+ * resolves online: an already-absolute URL is kept, a root-relative one is
+ * prefixed with `origin`. With no `bundledKeys` every ref is relativized
+ * (caller bundles all of them). Legacy 3-segment URLs aren't matched and pass
+ * through unchanged.
+ */
+export declare function rewriteAssetsToRelative(text: string, baseDir?: string, opts?: {
+    bundledKeys?: Set<string>;
+    origin?: string;
+}): string;

package/dist/core/artifact-asset-urls.js

@@ -0,0 +1,79 @@
+/**
+ * Shared parser/rewriter for workspace asset URLs embedded in an artifact
+ * bundle. One implementation behind every surface that has to reason about
+ * `/api/assets/...` references, so they can't drift:
+ *   - mint  → enumerate the exact asset keys an artifact references (allowlist)
+ *   - in-app srcdoc + headless PNG/PDF render → append the `?at=` capability token
+ *   - HTML export → rewrite to relative `./assets/...` paths
+ *
+ * Matches BOTH forms that appear in bundles:
+ *   - root-relative   `/api/assets/<assetId>/<filename>`
+ *   - absolute        `https://host/api/assets/<assetId>/<filename>`
+ * in any textual context — `<img src>`, `srcset` descriptors, CSS `url(...)`,
+ * inline `style=`, and (acceptably) JS string literals. assetId is a UUID and
+ * filenames are upload-sanitized to `[A-Za-z0-9._-]`, so the path never holds a
+ * quote/space/paren — we can match the URL token directly without parsing
+ * HTML/CSS.
+ *
+ * Only the IMMUTABLE two-segment scheme is handled. The negative lookahead
+ * after the filename means a legacy three-segment `/api/assets/<type>/<id>/<file>`
+ * URL is left untouched rather than mis-parsed (legacy is out of scope).
+ */
+// g1 origin (optional, host has no slash) · g2 assetId · g3 filename · g4 query (incl leading ?)
+// The (?![A-Za-z0-9._%/-]) after the filename forbids ANY trailing path char so
+// the engine can't backtrack the filename into a partial segment — that both
+// stops mid-segment matches and leaves legacy 3-segment URLs untouched.
+const ASSET_URL_RE = /(https?:\/\/[^\s"'()<>\/]+)?\/api\/assets\/([A-Za-z0-9._%-]+)\/([A-Za-z0-9._%-]+)(?![A-Za-z0-9._%/-])(\?[^\s"'()<>]*)?/g;
+/** Every distinct asset referenced in the text, in first-seen order. */
+export function findArtifactAssetRefs(text) {
+    const seen = new Map();
+    for (const m of text.matchAll(ASSET_URL_RE)) {
+        const assetId = m[2];
+        const filename = m[3];
+        const key = `${assetId}/${filename}`;
+        if (!seen.has(key))
+            seen.set(key, { key, assetId, filename });
+    }
+    return [...seen.values()];
+}
+/**
+ * Set the `at=<token>` capability param on every asset URL. Preserves any other
+ * existing query params and **replaces** a pre-existing `at` with the fresh
+ * token (so a stale or embedded `?at=` in artifact HTML can't shadow a
+ * freshly-minted render/preview token). Idempotent: re-applying the same token
+ * yields the same string.
+ */
+export function appendAssetToken(text, token) {
+    const enc = encodeURIComponent(token);
+    return text.replace(ASSET_URL_RE, (_full, origin, assetId, filename, query) => {
+        const base = `${origin ?? ''}/api/assets/${assetId}/${filename}`;
+        const params = query ? query.slice(1).split('&').filter((p) => p && !/^at=/i.test(p)) : [];
+        params.push(`at=${enc}`);
+        return `${base}?${params.join('&')}`;
+    });
+}
+/**
+ * Rewrite asset URLs for the self-contained HTML export zip. Refs whose key is
+ * in `bundledKeys` (the assets actually written into the zip) become relative
+ * `./assets/<id>/<file>` (offline-resolvable); any OTHER `/api/assets/...` ref
+ * (cross-repo / unauthorized — not bundled) is left absolute so it still
+ * resolves online: an already-absolute URL is kept, a root-relative one is
+ * prefixed with `origin`. With no `bundledKeys` every ref is relativized
+ * (caller bundles all of them). Legacy 3-segment URLs aren't matched and pass
+ * through unchanged.
+ */
+export function rewriteAssetsToRelative(text, baseDir = './assets', opts = {}) {
+    const prefix = baseDir.replace(/\/+$/, '');
+    const originPrefix = opts.origin ? opts.origin.replace(/\/+$/, '') : null;
+    return text.replace(ASSET_URL_RE, (full, origin, assetId, filename, query) => {
+        if (!opts.bundledKeys || opts.bundledKeys.has(`${assetId}/${filename}`)) {
+            return `${prefix}/${assetId}/${filename}`;
+        }
+        if (origin)
+            return full; // already absolute → resolves online as-is
+        if (originPrefix)
+            return `${originPrefix}/api/assets/${assetId}/${filename}${query ?? ''}`;
+        return full;
+    });
+}
+//# sourceMappingURL=artifact-asset-urls.js.map

package/dist/core/artifact-asset-urls.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"artifact-asset-urls.js","sourceRoot":"","sources":["../../src/core/artifact-asset-urls.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AASH,iGAAiG;AACjG,gFAAgF;AAChF,6EAA6E;AAC7E,wEAAwE;AACxE,MAAM,YAAY,GAChB,yHAAyH,CAAC;AAE5H,wEAAwE;AACxE,MAAM,UAAU,qBAAqB,CAAC,IAAY;IAChD,MAAM,IAAI,GAAG,IAAI,GAAG,EAA4B,CAAC;IACjD,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;QAC5C,MAAM,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QACrB,MAAM,QAAQ,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QACtB,MAAM,GAAG,GAAG,GAAG,OAAO,IAAI,QAAQ,EAAE,CAAC;QACrC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC;IAChE,CAAC;IACD,OAAO,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;AAC5B,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAAY,EAAE,KAAa;IAC1D,MAAM,GAAG,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC;IACtC,OAAO,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAyB,EAAE,EAAE;QAChG,MAAM,IAAI,GAAG,GAAG,MAAM,IAAI,EAAE,eAAe,OAAO,IAAI,QAAQ,EAAE,CAAC;QACjE,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3F,MAAM,CAAC,IAAI,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;QACzB,OAAO,GAAG,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;IACvC,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,uBAAuB,CACrC,IAAY,EACZ,OAAO,GAAG,UAAU,EACpB,OAAuD,EAAE;IAEzD,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC3C,MAAM,YAAY,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC1E,OAAO,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAyB,EAAE,EAAE;QAC/F,IAAI,CAAC,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,OAAO,IAAI,QAAQ,EAAE,CAAC,EAAE,CAAC;YACxE,OAAO,GAAG,MAAM,IAAI,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC5C,CAAC;QACD,IAAI,MAAM;YAAE,OAAO,IAAI,CAAC,CAAC,2CAA2C;QACpE,IAAI,YAAY;YAAE,OAAO,GAAG,YAAY,eAAe,OAAO,IAAI,QAAQ,GAAG,KAAK,IAAI,EAAE,EAAE,CAAC;QAC3F,OAAO,IAAI,CAAC;IACd,CAAC,CAAC,CAAC;AACL,CAAC"}