stuntdouble 0.1.3 → 0.2.0

package/dist/mcp-HFIAQ6HP.js

@@ -0,0 +1,133 @@
+import {
+  LocalSession,
+  PACKAGE
+} from "./chunk-XHSDRB3X.js";
+import "./chunk-BFI6P5DO.js";
+import {
+  DIRECT_TOOL_SPECS
+} from "./chunk-FMZTT2MC.js";
+import {
+  projectDir
+} from "./chunk-F3R3QL7V.js";
+
+// src/mcp.ts
+import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
+import { dirname } from "path";
+import { z } from "zod";
+var reply = ({ text, image, isError }) => ({
+  content: [
+    { type: "text", text },
+    ...image ? [{ type: "image", data: image, mimeType: "image/png" }] : []
+  ],
+  ...isError ? { isError: true } : {}
+});
+var queue = Promise.resolve();
+function attempt(work) {
+  const run = queue.then(async () => {
+    try {
+      const out = await work();
+      return reply(typeof out === "string" ? { text: out } : out);
+    } catch (err) {
+      return reply({ text: err.message, isError: true });
+    }
+  });
+  queue = run;
+  return run;
+}
+function shapeOf(spec) {
+  const required = new Set(spec.parameters.required ?? []);
+  return Object.fromEntries(
+    Object.entries(spec.parameters.properties).map(([key, raw]) => {
+      const prop = raw;
+      let schema = prop.enum ? z.enum(prop.enum) : prop.type === "number" ? z.number() : z.string();
+      if (prop.description) schema = schema.describe(prop.description);
+      return [key, required.has(key) ? schema : schema.optional()];
+    })
+  );
+}
+function createServer(session) {
+  const server = new McpServer({ name: "stuntdouble", version: PACKAGE.split("@")[1] });
+  for (const spec of DIRECT_TOOL_SPECS.filter((s) => s.name !== "done")) {
+    server.registerTool(
+      spec.name,
+      { description: spec.description, inputSchema: shapeOf(spec) },
+      (input) => attempt(() => session.browserTool(spec.name, input))
+    );
+  }
+  server.registerTool(
+    "start_run",
+    {
+      description: "Start a local run of a checklist from .stuntdouble/checklists/<checklist>.json: opens a fresh Chrome at the checklist's URL, and returns the viewer link, the actor's brief and the checks to judge. If a file is invalid, returns each field to fix. With resume, continues the run still open in this session, or else the newest interrupted or stopped run of that checklist, judging only the checks without a verdict.",
+      inputSchema: {
+        checklist: z.string().describe('The checklist slug, e.g. "checkout".'),
+        resume: z.boolean().optional().describe("Continue the last unfinished run instead.")
+      }
+    },
+    (input) => attempt(() => session.startRun(input))
+  );
+  server.registerTool(
+    "evaluate_check",
+    {
+      description: 'Record the verdict on one check, as soon as you have observed it. A passed verdict needs a locator for evidence visible on the page now; a failure may describe something missing. Use "informational" only for informational checks, and "blocked" when you could not reach what the check is about. Saves a screenshot of the evidence and returns the next check.',
+      inputSchema: {
+        check: z.string().describe('The check key, e.g. "guest-checkout".'),
+        status: z.enum(["passed", "failed", "informational", "blocked"]),
+        evidence: z.string().min(1).describe("What you observed, in a sentence or two, quoting the page where you can."),
+        locator: z.object({
+          text: z.string().optional().describe("Distinctive text visible on the page."),
+          selector: z.string().optional().describe("A CSS selector for the element.")
+        }).optional().describe("Where the evidence is on the page. Required for passed.")
+      }
+    },
+    (input) => attempt(() => session.evaluateCheck(input))
+  );
+  server.registerTool(
+    "finish_run",
+    {
+      description: "End the run: settles the checks left, scores it the way the cloud does, writes run.json, closes the browser and returns the outcome. Always call it, even when blocked or stopped.",
+      inputSchema: {
+        summary: z.string().min(1).describe("One or two sentences on what you found.")
+      }
+    },
+    (input) => attempt(() => session.finishRun(input))
+  );
+  server.registerTool(
+    "open_ui",
+    {
+      description: "The local viewer for this project: every run with its verdicts, screenshots and activity, and the checklists and actors. Returns a link to open in a browser and a line on each of the latest runs."
+    },
+    () => attempt(() => session.overview())
+  );
+  server.registerTool(
+    "doctor",
+    {
+      description: "Check what local runs need: Node, Chrome, the viewer port, this project's stuntdouble.json and how runs are billed. Read only. Returns one line per check, each starting ok, FAIL, note or --.",
+      annotations: { readOnlyHint: true }
+    },
+    () => attempt(async () => {
+      const { doctor } = await import("./doctor-ZAYOOCPT.js");
+      const { lines } = await doctor({
+        project: dirname(session.root),
+        viewerPort: session.viewerPort
+      });
+      return lines.join("\n");
+    })
+  );
+  return server;
+}
+async function serveMcp() {
+  const session = new LocalSession({ project: projectDir() });
+  const server = createServer(session);
+  let closing;
+  const shutdown = () => closing ??= session.close().finally(() => process.exit(0));
+  process.stdin.on("close", shutdown);
+  process.on("SIGINT", shutdown);
+  process.on("SIGTERM", shutdown);
+  await server.connect(new StdioServerTransport());
+}
+export {
+  createServer,
+  serveMcp
+};
+//# sourceMappingURL=mcp-HFIAQ6HP.js.map

package/dist/mcp-HFIAQ6HP.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/mcp.ts"],"sourcesContent":["// The stdio MCP server: the browser toolset's direct tools plus the run tools,\n// over one `LocalSession`. The person's own agent session is the only model:\n// this process drives a browser and writes files, and calls no model at all.\n\nimport { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';\nimport { StdioServerTransport } from '@modelcontextprotocol/sdk/server/stdio.js';\nimport type { CallToolResult } from '@modelcontextprotocol/sdk/types.js';\nimport { DIRECT_TOOL_SPECS } from '@stuntkit/browser-toolset/direct-tools';\nimport { dirname } from 'node:path';\nimport { z } from 'zod';\n\nimport { projectDir } from './files.ts';\nimport { LocalSession, PACKAGE, type ToolOutput } from './run.ts';\n\nconst reply = ({ text, image, isError }: ToolOutput): CallToolResult => ({\n  content: [\n    { type: 'text', text },\n    ...(image ? [{ type: 'image' as const, data: image, mimeType: 'image/png' }] : []),\n  ],\n  ...(isError ? { isError: true } : {}),\n});\n\nlet queue: Promise<unknown> = Promise.resolve();\n\n/**\n * Run a tool, turning a thrown error into a result the model reads and acts on.\n * Calls can arrive at once (two verdicts in one turn) but share one page and\n * one run.json, so they take turns.\n */\nfunction attempt(work: () => Promise<string | ToolOutput>): Promise<CallToolResult> {\n  const run = queue.then(async () => {\n    try {\n      const out = await work();\n      return reply(typeof out === 'string' ? { text: out } : out);\n    } catch (err) {\n      return reply({ text: (err as Error).message, isError: true });\n    }\n  });\n  queue = run;\n  return run;\n}\n\ntype PropertySpec = { type: string; enum?: string[]; description?: string };\n\n/** A direct tool's flat JSON Schema as the zod shape the SDK registers. */\nfunction shapeOf(spec: (typeof DIRECT_TOOL_SPECS)[number]): z.ZodRawShape {\n  const required = new Set(spec.parameters.required ?? []);\n  return Object.fromEntries(\n    Object.entries(spec.parameters.properties).map(([key, raw]) => {\n      const prop = raw as PropertySpec;\n      let schema: z.ZodType = prop.enum\n        ? z.enum(prop.enum as [string, ...string[]])\n        : prop.type === 'number'\n          ? z.number()\n          : z.string();\n      if (prop.description) schema = schema.describe(prop.description);\n      return [key, required.has(key) ? schema : schema.optional()];\n    })\n  );\n}\n\nexport function createServer(session: LocalSession): McpServer {\n  const server = new McpServer({ name: 'stuntdouble', version: PACKAGE.split('@')[1]! });\n\n  // `done` is the toolset's end signal; here a run ends with finish_run.\n  for (const spec of DIRECT_TOOL_SPECS.filter((s) => s.name !== 'done')) {\n    server.registerTool(\n      spec.name,\n      { description: spec.description, inputSchema: shapeOf(spec) },\n      (input) => attempt(() => session.browserTool(spec.name, input))\n    );\n  }\n\n  server.registerTool(\n    'start_run',\n    {\n      description:\n        \"Start a local run of a checklist from .stuntdouble/checklists/<checklist>.json: opens a fresh Chrome at the checklist's URL, and returns the viewer link, the actor's brief and the checks to judge. If a file is invalid, returns each field to fix. With resume, continues the run still open in this session, or else the newest interrupted or stopped run of that checklist, judging only the checks without a verdict.\",\n      inputSchema: {\n        checklist: z.string().describe('The checklist slug, e.g. \"checkout\".'),\n        resume: z.boolean().optional().describe('Continue the last unfinished run instead.'),\n      },\n    },\n    (input) => attempt(() => session.startRun(input))\n  );\n\n  server.registerTool(\n    'evaluate_check',\n    {\n      description:\n        'Record the verdict on one check, as soon as you have observed it. A passed verdict needs a locator for evidence visible on the page now; a failure may describe something missing. Use \"informational\" only for informational checks, and \"blocked\" when you could not reach what the check is about. Saves a screenshot of the evidence and returns the next check.',\n      inputSchema: {\n        check: z.string().describe('The check key, e.g. \"guest-checkout\".'),\n        status: z.enum(['passed', 'failed', 'informational', 'blocked']),\n        evidence: z\n          .string()\n          .min(1)\n          .describe('What you observed, in a sentence or two, quoting the page where you can.'),\n        locator: z\n          .object({\n            text: z.string().optional().describe('Distinctive text visible on the page.'),\n            selector: z.string().optional().describe('A CSS selector for the element.'),\n          })\n          .optional()\n          .describe('Where the evidence is on the page. Required for passed.'),\n      },\n    },\n    (input) => attempt(() => session.evaluateCheck(input))\n  );\n\n  server.registerTool(\n    'finish_run',\n    {\n      description:\n        'End the run: settles the checks left, scores it the way the cloud does, writes run.json, closes the browser and returns the outcome. Always call it, even when blocked or stopped.',\n      inputSchema: {\n        summary: z.string().min(1).describe('One or two sentences on what you found.'),\n      },\n    },\n    (input) => attempt(() => session.finishRun(input))\n  );\n\n  server.registerTool(\n    'open_ui',\n    {\n      description:\n        'The local viewer for this project: every run with its verdicts, screenshots and activity, and the checklists and actors. Returns a link to open in a browser and a line on each of the latest runs.',\n    },\n    () => attempt(() => session.overview())\n  );\n\n  server.registerTool(\n    'doctor',\n    {\n      description:\n        \"Check what local runs need: Node, Chrome, the viewer port, this project's stuntdouble.json and how runs are billed. Read only. Returns one line per check, each starting ok, FAIL, note or --.\",\n      annotations: { readOnlyHint: true },\n    },\n    () =>\n      attempt(async () => {\n        const { doctor } = await import('./doctor.ts');\n        // A FAIL line says what is wrong; the call itself succeeded.\n        const { lines } = await doctor({\n          project: dirname(session.root),\n          viewerPort: session.viewerPort,\n        });\n        return lines.join('\\n');\n      })\n  );\n\n  return server;\n}\n\nexport async function serveMcp(): Promise<void> {\n  const session = new LocalSession({ project: projectDir() });\n  const server = createServer(session);\n  // stdin closing and the SIGTERM that follows both land here; close once.\n  let closing: Promise<void> | undefined;\n  const shutdown = () => (closing ??= session.close().finally(() => process.exit(0)));\n  process.stdin.on('close', shutdown);\n  process.on('SIGINT', shutdown);\n  process.on('SIGTERM', shutdown);\n  await server.connect(new StdioServerTransport());\n}\n"],"mappings":";;;;;;;;;;;;;AAIA,SAAS,iBAAiB;AAC1B,SAAS,4BAA4B;AAGrC,SAAS,eAAe;AACxB,SAAS,SAAS;AAKlB,IAAM,QAAQ,CAAC,EAAE,MAAM,OAAO,QAAQ,OAAmC;AAAA,EACvE,SAAS;AAAA,IACP,EAAE,MAAM,QAAQ,KAAK;AAAA,IACrB,GAAI,QAAQ,CAAC,EAAE,MAAM,SAAkB,MAAM,OAAO,UAAU,YAAY,CAAC,IAAI,CAAC;AAAA,EAClF;AAAA,EACA,GAAI,UAAU,EAAE,SAAS,KAAK,IAAI,CAAC;AACrC;AAEA,IAAI,QAA0B,QAAQ,QAAQ;AAO9C,SAAS,QAAQ,MAAmE;AAClF,QAAM,MAAM,MAAM,KAAK,YAAY;AACjC,QAAI;AACF,YAAM,MAAM,MAAM,KAAK;AACvB,aAAO,MAAM,OAAO,QAAQ,WAAW,EAAE,MAAM,IAAI,IAAI,GAAG;AAAA,IAC5D,SAAS,KAAK;AACZ,aAAO,MAAM,EAAE,MAAO,IAAc,SAAS,SAAS,KAAK,CAAC;AAAA,IAC9D;AAAA,EACF,CAAC;AACD,UAAQ;AACR,SAAO;AACT;AAKA,SAAS,QAAQ,MAAyD;AACxE,QAAM,WAAW,IAAI,IAAI,KAAK,WAAW,YAAY,CAAC,CAAC;AACvD,SAAO,OAAO;AAAA,IACZ,OAAO,QAAQ,KAAK,WAAW,UAAU,EAAE,IAAI,CAAC,CAAC,KAAK,GAAG,MAAM;AAC7D,YAAM,OAAO;AACb,UAAI,SAAoB,KAAK,OACzB,EAAE,KAAK,KAAK,IAA6B,IACzC,KAAK,SAAS,WACZ,EAAE,OAAO,IACT,EAAE,OAAO;AACf,UAAI,KAAK,YAAa,UAAS,OAAO,SAAS,KAAK,WAAW;AAC/D,aAAO,CAAC,KAAK,SAAS,IAAI,GAAG,IAAI,SAAS,OAAO,SAAS,CAAC;AAAA,IAC7D,CAAC;AAAA,EACH;AACF;AAEO,SAAS,aAAa,SAAkC;AAC7D,QAAM,SAAS,IAAI,UAAU,EAAE,MAAM,eAAe,SAAS,QAAQ,MAAM,GAAG,EAAE,CAAC,EAAG,CAAC;AAGrF,aAAW,QAAQ,kBAAkB,OAAO,CAAC,MAAM,EAAE,SAAS,MAAM,GAAG;AACrE,WAAO;AAAA,MACL,KAAK;AAAA,MACL,EAAE,aAAa,KAAK,aAAa,aAAa,QAAQ,IAAI,EAAE;AAAA,MAC5D,CAAC,UAAU,QAAQ,MAAM,QAAQ,YAAY,KAAK,MAAM,KAAK,CAAC;AAAA,IAChE;AAAA,EACF;AAEA,SAAO;AAAA,IACL;AAAA,IACA;AAAA,MACE,aACE;AAAA,MACF,aAAa;AAAA,QACX,WAAW,EAAE,OAAO,EAAE,SAAS,sCAAsC;AAAA,QACrE,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,2CAA2C;AAAA,MACrF;AAAA,IACF;AAAA,IACA,CAAC,UAAU,QAAQ,MAAM,QAAQ,SAAS,KAAK,CAAC;AAAA,EAClD;AAEA,SAAO;AAAA,IACL;AAAA,IACA;AAAA,MACE,aACE;AAAA,MACF,aAAa;AAAA,QACX,OAAO,EAAE,OAAO,EAAE,SAAS,uCAAuC;AAAA,QAClE,QAAQ,EAAE,KAAK,CAAC,UAAU,UAAU,iBAAiB,SAAS,CAAC;AAAA,QAC/D,UAAU,EACP,OAAO,EACP,IAAI,CAAC,EACL,SAAS,0EAA0E;AAAA,QACtF,SAAS,EACN,OAAO;AAAA,UACN,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,uCAAuC;AAAA,UAC5E,UAAU,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,iCAAiC;AAAA,QAC5E,CAAC,EACA,SAAS,EACT,SAAS,yDAAyD;AAAA,MACvE;AAAA,IACF;AAAA,IACA,CAAC,UAAU,QAAQ,MAAM,QAAQ,cAAc,KAAK,CAAC;AAAA,EACvD;AAEA,SAAO;AAAA,IACL;AAAA,IACA;AAAA,MACE,aACE;AAAA,MACF,aAAa;AAAA,QACX,SAAS,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,SAAS,yCAAyC;AAAA,MAC/E;AAAA,IACF;AAAA,IACA,CAAC,UAAU,QAAQ,MAAM,QAAQ,UAAU,KAAK,CAAC;AAAA,EACnD;AAEA,SAAO;AAAA,IACL;AAAA,IACA;AAAA,MACE,aACE;AAAA,IACJ;AAAA,IACA,MAAM,QAAQ,MAAM,QAAQ,SAAS,CAAC;AAAA,EACxC;AAEA,SAAO;AAAA,IACL;AAAA,IACA;AAAA,MACE,aACE;AAAA,MACF,aAAa,EAAE,cAAc,KAAK;AAAA,IACpC;AAAA,IACA,MACE,QAAQ,YAAY;AAClB,YAAM,EAAE,OAAO,IAAI,MAAM,OAAO,sBAAa;AAE7C,YAAM,EAAE,MAAM,IAAI,MAAM,OAAO;AAAA,QAC7B,SAAS,QAAQ,QAAQ,IAAI;AAAA,QAC7B,YAAY,QAAQ;AAAA,MACtB,CAAC;AACD,aAAO,MAAM,KAAK,IAAI;AAAA,IACxB,CAAC;AAAA,EACL;AAEA,SAAO;AACT;AAEA,eAAsB,WAA0B;AAC9C,QAAM,UAAU,IAAI,aAAa,EAAE,SAAS,WAAW,EAAE,CAAC;AAC1D,QAAM,SAAS,aAAa,OAAO;AAEnC,MAAI;AACJ,QAAM,WAAW,MAAO,YAAY,QAAQ,MAAM,EAAE,QAAQ,MAAM,QAAQ,KAAK,CAAC,CAAC;AACjF,UAAQ,MAAM,GAAG,SAAS,QAAQ;AAClC,UAAQ,GAAG,UAAU,QAAQ;AAC7B,UAAQ,GAAG,WAAW,QAAQ;AAC9B,QAAM,OAAO,QAAQ,IAAI,qBAAqB,CAAC;AACjD;","names":[]}

package/dist/open-browser-CTOGH5HQ.js

@@ -0,0 +1,17 @@
+// src/open-browser.ts
+import { spawn } from "child_process";
+function openBrowser(url) {
+  if (!/^https?:\/\//.test(url)) return;
+  const [command, args] = process.platform === "darwin" ? ["open", [url]] : process.platform === "win32" ? ["rundll32", ["url.dll,FileProtocolHandler", url]] : ["xdg-open", [url]];
+  try {
+    const child = spawn(command, args, { stdio: "ignore", detached: true });
+    child.on("error", () => {
+    });
+    child.unref();
+  } catch {
+  }
+}
+export {
+  openBrowser
+};
+//# sourceMappingURL=open-browser-CTOGH5HQ.js.map

package/dist/open-browser-CTOGH5HQ.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/open-browser.ts"],"sourcesContent":["// Opens a link in the person's default browser, for `stuntdouble studio` and\n// `stuntdouble login`. The one place this package starts a process: the\n// platform's own opener, with the link as its only argument, nothing else\n// (test/no-model.test.ts holds it to that).\n\nimport { spawn } from 'node:child_process';\n\nexport function openBrowser(url: string): void {\n  if (!/^https?:\\/\\//.test(url)) return;\n  const [command, args] =\n    process.platform === 'darwin'\n      ? ['open', [url]]\n      : process.platform === 'win32'\n        ? ['rundll32', ['url.dll,FileProtocolHandler', url]]\n        : ['xdg-open', [url]];\n  try {\n    const child = spawn(command, args, { stdio: 'ignore', detached: true });\n    child.on('error', () => {});\n    child.unref();\n  } catch {\n    // No opener: the link is printed as well.\n  }\n}\n"],"mappings":";AAKA,SAAS,aAAa;AAEf,SAAS,YAAY,KAAmB;AAC7C,MAAI,CAAC,eAAe,KAAK,GAAG,EAAG;AAC/B,QAAM,CAAC,SAAS,IAAI,IAClB,QAAQ,aAAa,WACjB,CAAC,QAAQ,CAAC,GAAG,CAAC,IACd,QAAQ,aAAa,UACnB,CAAC,YAAY,CAAC,+BAA+B,GAAG,CAAC,IACjD,CAAC,YAAY,CAAC,GAAG,CAAC;AAC1B,MAAI;AACF,UAAM,QAAQ,MAAM,SAAS,MAAM,EAAE,OAAO,UAAU,UAAU,KAAK,CAAC;AACtE,UAAM,GAAG,SAAS,MAAM;AAAA,IAAC,CAAC;AAC1B,UAAM,MAAM;AAAA,EACd,QAAQ;AAAA,EAER;AACF;","names":[]}

package/dist/run-MPIAR3LQ.js

@@ -0,0 +1,20 @@
+import {
+  LocalSession,
+  PACKAGE,
+  isTrustedHost,
+  rebase,
+  scoreLocalRun,
+  unweightedNote
+} from "./chunk-XHSDRB3X.js";
+import "./chunk-BFI6P5DO.js";
+import "./chunk-FMZTT2MC.js";
+import "./chunk-F3R3QL7V.js";
+export {
+  LocalSession,
+  PACKAGE,
+  isTrustedHost,
+  rebase,
+  scoreLocalRun,
+  unweightedNote
+};
+//# sourceMappingURL=run-MPIAR3LQ.js.map

package/dist/run-MPIAR3LQ.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"sourcesContent":[],"mappings":"","names":[]}

package/dist/runner-E45EJ76B.js

@@ -0,0 +1,17 @@
+import {
+  DEFAULT_LIMITS,
+  RUN_TOOLS,
+  scrub,
+  startStandaloneRun,
+  testConnection
+} from "./chunk-P3CI4FTE.js";
+import "./chunk-FMZTT2MC.js";
+import "./chunk-F3R3QL7V.js";
+export {
+  DEFAULT_LIMITS,
+  RUN_TOOLS,
+  scrub,
+  startStandaloneRun,
+  testConnection
+};
+//# sourceMappingURL=runner-E45EJ76B.js.map

package/dist/runner-E45EJ76B.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"sourcesContent":[],"mappings":"","names":[]}

package/dist/studio-FBC66BER.js

@@ -0,0 +1,360 @@
+import {
+  CloudRefusal,
+  beginLogin,
+  chooseWorkspace,
+  cloudStatus,
+  completeLogin,
+  listWorkspaces,
+  logout,
+  startCloudRun
+} from "./chunk-DFXASIGV.js";
+import {
+  PROVIDERS,
+  connectionStatus,
+  resolveConnection,
+  saveConnection
+} from "./chunk-MSV5OLSY.js";
+import {
+  LocalSession
+} from "./chunk-XHSDRB3X.js";
+import {
+  send,
+  startUi
+} from "./chunk-BFI6P5DO.js";
+import {
+  DEFAULT_LIMITS,
+  startStandaloneRun,
+  testConnection
+} from "./chunk-P3CI4FTE.js";
+import "./chunk-FMZTT2MC.js";
+import {
+  ActorSchema,
+  ChecklistSchema,
+  sdDir,
+  writeFileAtomic,
+  writeJsonAtomic
+} from "./chunk-F3R3QL7V.js";
+
+// src/studio.ts
+import { readFile, stat } from "fs/promises";
+import { join } from "path";
+import { z } from "zod";
+var SLUG = /^[a-z0-9][a-z0-9-]*$/;
+var MAX_BODY = 1e6;
+var json = (res, status, data) => send(res, status, JSON.stringify(data), "application/json");
+var problem = (res, status, message) => json(res, status, { error: message });
+var issuesOf = (error) => error.issues.map((i) => ({ path: i.path.join("."), message: i.message }));
+async function readBody(req) {
+  let body = "";
+  for await (const chunk of req) {
+    body += chunk;
+    if (body.length > MAX_BODY) throw new Error("Body too large");
+  }
+  return body ? JSON.parse(body) : {};
+}
+var exists = (path) => stat(path).then(
+  () => true,
+  () => false
+);
+function usable(connection) {
+  if (!connection) return false;
+  if (connection.apiKey) return true;
+  const host = new URL(connection.baseUrl).hostname;
+  return connection.provider === "openai" && /^(localhost|127\.0\.0\.1|\[::1\])$/.test(host);
+}
+async function createStarter(project, url) {
+  const root = sdDir(project);
+  await writeJsonAtomic(join(root, "stuntdouble.json"), {
+    format: "stuntdouble/1",
+    local_base_url: null,
+    headless: false,
+    model_screenshots: "on_request",
+    safety: "third_party"
+  });
+  await writeFileAtomic(join(root, ".gitignore"), ".live/\n");
+  const actor = join(root, "actors", "first-time-visitor.json");
+  if (!await exists(actor)) {
+    await writeJsonAtomic(actor, {
+      name: "First-time visitor",
+      description: "Has never used the product, arrives from a search result and decides within a minute whether it is worth their time",
+      knowledge: [],
+      persist_login: false
+    });
+  }
+  const checklist = join(root, "checklists", "first-look.json");
+  if (!await exists(checklist)) {
+    await writeJsonAtomic(checklist, {
+      name: "First look",
+      actor: "first-time-visitor",
+      url,
+      instructions: "Arrive at the home page as someone who has never heard of the product. Work out what it is, try the main next step without paying or signing up, and follow the main navigation.",
+      checks: [
+        {
+          key: "says-what-it-is",
+          description: "The first screen says plainly what the product is and who it is for"
+        },
+        {
+          key: "clear-next-step",
+          description: "There is one clear next step, such as a sign-up button, without scrolling"
+        },
+        {
+          key: "navigation-works",
+          description: "The main navigation links open working pages, with no error or empty page"
+        },
+        {
+          key: "first-impression",
+          description: "Record what a new visitor would read or do first",
+          type: "informational"
+        }
+      ]
+    });
+  }
+}
+var InitInput = z.object({ url: z.url({ protocol: /^https?$/ }) });
+var RunInput = z.object({
+  checklist: z.string().regex(SLUG),
+  where: z.enum(["local", "cloud"]).default("local"),
+  resume: z.boolean().optional()
+});
+var ConnectionInput = z.object({
+  provider: z.enum(PROVIDERS),
+  model: z.string().trim().min(1, "Name the model").max(200),
+  base_url: z.union([z.url({ protocol: /^https?$/ }), z.literal("")]).nullish(),
+  api_key: z.string().max(500).nullish(),
+  clear_key: z.boolean().optional()
+});
+async function startStudio(options) {
+  const project = options.project;
+  const root = sdDir(project);
+  let job = null;
+  let session = null;
+  const cloudJobs = /* @__PURE__ */ new Map();
+  async function status() {
+    return {
+      project,
+      initialised: await exists(join(root, "stuntdouble.json")),
+      connection: await connectionStatus(),
+      cloud: await cloudStatus(),
+      jobs: [...job ? [job] : [], ...cloudJobs.values()],
+      limits: DEFAULT_LIMITS
+    };
+  }
+  async function saveDefinition(res, folder, slug, body) {
+    const input = z.object({ data: z.record(z.string(), z.unknown()), create: z.boolean().optional() }).safeParse(body);
+    if (!input.success) return problem(res, 400, 'Send {"data": {...}}.');
+    if (!SLUG.test(slug)) {
+      return json(res, 422, {
+        issues: [{ path: "slug", message: "Use lowercase letters, digits and hyphens" }]
+      });
+    }
+    const path = join(root, folder, `${slug}.json`);
+    const existing = await readFile(path, "utf8").then((t) => JSON.parse(t)).catch(() => null);
+    if (input.data.create && existing) {
+      return json(res, 409, {
+        issues: [
+          { path: "slug", message: `There is already a ${folder.slice(0, -1)} called ${slug}` }
+        ]
+      });
+    }
+    const { cloud: _ignored, ...fields } = input.data.data;
+    const data = existing?.cloud ? { ...fields, cloud: existing.cloud } : fields;
+    const schema = folder === "actors" ? ActorSchema : ChecklistSchema;
+    const parsed = schema.safeParse(data);
+    const issues = parsed.success ? [] : issuesOf(parsed.error);
+    if (folder === "checklists" && typeof data.actor === "string" && SLUG.test(data.actor)) {
+      if (!await exists(join(root, "actors", `${data.actor}.json`))) {
+        issues.push({ path: "actor", message: `There is no actor called ${data.actor}` });
+      }
+    }
+    if (issues.length) return json(res, 422, { issues });
+    await writeJsonAtomic(path, data);
+    return json(res, 200, { slug });
+  }
+  async function startRun(res, body) {
+    const input = RunInput.safeParse(body);
+    if (!input.success) return problem(res, 400, "Name a checklist to run.");
+    const { checklist, where, resume } = input.data;
+    if (where === "cloud") {
+      const run = await startCloudRun({ project, checklist, pollMs: options.cloudPollMs });
+      const entry = {
+        kind: "cloud",
+        run_id: run.runId,
+        checklist,
+        model: null,
+        usage: null,
+        last: "Running in the cloud"
+      };
+      cloudJobs.set(run.runId, entry);
+      run.done.catch(() => {
+      }).finally(() => cloudJobs.delete(run.runId));
+      return json(res, 200, { run_id: run.runId });
+    }
+    if (job) return problem(res, 409, `A run of ${job.checklist} is still going.`);
+    const connection = await resolveConnection();
+    if (!usable(connection)) {
+      return problem(res, 400, "Connect a model first: Settings, then Connection.");
+    }
+    const model = { provider: connection.provider, id: connection.model };
+    session = new LocalSession({ project, ui, launch: options.launch, runner: { model } });
+    const current = { kind: "local", run_id: "", checklist, model, usage: null, last: "" };
+    job = current;
+    try {
+      const run = await startStandaloneRun({
+        session,
+        connection,
+        checklist,
+        resume,
+        fetch: options.fetch,
+        onProgress: (p) => {
+          current.usage = p.usage;
+          current.last = p.last;
+        }
+      });
+      current.run_id = run.runId;
+      const ended = session;
+      run.done.catch(() => {
+      }).finally(() => {
+        if (job === current) job = null;
+        void ended.close();
+      });
+      return json(res, 200, { run_id: run.runId });
+    } catch (err) {
+      job = null;
+      await session.close().catch(() => {
+      });
+      throw err;
+    }
+  }
+  async function handle(req, res, url) {
+    const path = url.pathname;
+    if (path === "/studio.js" && req.method === "GET") {
+      const script = await readFile(new URL("./studio.js", import.meta.url));
+      send(res, 200, script, "text/javascript; charset=utf-8");
+      return true;
+    }
+    if (!path.startsWith("/api/studio")) return false;
+    if (req.method === "GET") {
+      if (path === "/api/studio") json(res, 200, await status());
+      else if (path === "/api/studio/cloud/workspaces") {
+        json(res, 200, { workspaces: await listWorkspaces() });
+      } else problem(res, 404, "Not found");
+      return true;
+    }
+    if (req.headers.origin !== `http://${req.headers.host}`) {
+      problem(res, 403, "Forbidden");
+      return true;
+    }
+    if (!/^application\/json\b/.test(req.headers["content-type"] ?? "")) {
+      problem(res, 415, "Send JSON.");
+      return true;
+    }
+    let body;
+    try {
+      body = await readBody(req);
+    } catch {
+      problem(res, 400, "That was not JSON.");
+      return true;
+    }
+    const definition = path.match(/^\/api\/studio\/(actors|checklists)\/([^/]+)$/);
+    try {
+      if (definition && req.method === "PUT") {
+        await saveDefinition(
+          res,
+          definition[1],
+          decodeURIComponent(definition[2]),
+          body
+        );
+      } else if (req.method !== "POST") {
+        problem(res, 405, "Method not allowed");
+      } else if (path === "/api/studio/init") {
+        const input = InitInput.safeParse(body);
+        if (!input.success) {
+          json(res, 422, {
+            issues: [{ path: "url", message: "Enter a web address, http or https" }]
+          });
+        } else if (await exists(join(root, "stuntdouble.json"))) {
+          problem(res, 409, "This project is already set up.");
+        } else {
+          await createStarter(project, input.data.url);
+          json(res, 200, { checklist: "first-look" });
+        }
+      } else if (path === "/api/studio/run") {
+        await startRun(res, body);
+      } else if (path === "/api/studio/connection") {
+        const input = ConnectionInput.safeParse(body);
+        if (!input.success) json(res, 422, { issues: issuesOf(input.error) });
+        else {
+          await saveConnection(input.data);
+          json(res, 200, await connectionStatus());
+        }
+      } else if (path === "/api/studio/connection/test") {
+        const connection = await resolveConnection();
+        json(
+          res,
+          200,
+          usable(connection) ? await testConnection(connection, options.fetch) : { ok: false, message: "There is no key for this connection yet." }
+        );
+      } else if (path === "/api/studio/cloud/login") {
+        json(res, 200, { url: await beginLogin(`http://127.0.0.1:${ui.port}/oauth/callback`) });
+      } else if (path === "/api/studio/cloud/logout") {
+        await logout();
+        json(res, 200, await cloudStatus());
+      } else if (path === "/api/studio/cloud/workspace") {
+        const id = body.id;
+        if (typeof id !== "string") problem(res, 400, "Name a workspace.");
+        else json(res, 200, { workspace: await chooseWorkspace(id) });
+      } else {
+        problem(res, 404, "Not found");
+      }
+    } catch (err) {
+      problem(res, err instanceof CloudRefusal ? 403 : 400, err.message);
+    }
+    return true;
+  }
+  async function oauthCallback(_req, res, url) {
+    const state = url.searchParams.get("state") ?? "";
+    const code = url.searchParams.get("code");
+    let message = "Signed in to Stunt Double.";
+    let ok = true;
+    try {
+      if (!code)
+        throw new Error(url.searchParams.get("error_description") ?? "Sign-in was cancelled.");
+      await completeLogin(state, code);
+    } catch (err) {
+      ok = false;
+      message = err.message;
+    }
+    const escape = (s) => s.replace(/[&<>"']/g, (c) => `&#${c.charCodeAt(0)};`);
+    send(
+      res,
+      ok ? 200 : 400,
+      `<!doctype html><meta charset="utf-8"><title>Stunt Double Studio</title>${ok ? '<meta http-equiv="refresh" content="1;url=/settings">' : ""}<body style="font:15px system-ui;padding:3rem;max-width:32rem"><p>${escape(message)}</p><p><a href="/settings">Back to the Studio</a></p></body>`,
+      "text/html; charset=utf-8",
+      { "Content-Security-Policy": "default-src 'none'; style-src 'unsafe-inline'" }
+    );
+  }
+  const ui = await startUi({
+    root,
+    port: options.port,
+    extension: {
+      pages: /^\/(checklists|actors|settings)(\/[^/]+(\/run)?)?$/,
+      script: "/studio.js",
+      handle,
+      oauthCallback
+    }
+  });
+  return {
+    ui,
+    link: (path) => ui.link(path),
+    close: async () => {
+      await session?.close().catch(() => {
+      });
+      await ui.close();
+    }
+  };
+}
+export {
+  createStarter,
+  startStudio
+};
+//# sourceMappingURL=studio-FBC66BER.js.map

package/dist/studio-FBC66BER.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/studio.ts"],"sourcesContent":["// Stunt Double Studio: the viewer grown into a local app (`stuntdouble\n// studio`). It adds editing actors and checklists, starting a run on the\n// person's own model connection or in the cloud, and settings for both.\n//\n// Policy line: a Studio run uses only a connection the person configures (an\n// Anthropic API key or an OpenAI-compatible endpoint), never a Claude\n// subscription. Keys stay in ~/.stuntdouble/credentials.json (credentials.ts):\n// the page is told only whether one is set and where from. The MCP server\n// never imports this module, so inside Claude Code nothing here runs.\n//\n// The security model is the viewer's (ui-server.ts): loopback only, the\n// per-start key cookie, the Host check on every request, no CORS. Every write\n// here also needs this server's own Origin and a JSON body, so neither another\n// site nor a plain form can make one.\n\nimport { readFile, stat } from 'node:fs/promises';\nimport type { IncomingMessage, ServerResponse } from 'node:http';\nimport { join } from 'node:path';\nimport { z } from 'zod';\n\nimport {\n  beginLogin,\n  chooseWorkspace,\n  CloudRefusal,\n  cloudStatus,\n  completeLogin,\n  listWorkspaces,\n  logout,\n  startCloudRun,\n} from './cloud.ts';\nimport {\n  connectionStatus,\n  PROVIDERS,\n  resolveConnection,\n  saveConnection,\n  type Connection,\n} from './credentials.ts';\nimport { ActorSchema, ChecklistSchema, sdDir, writeFileAtomic, writeJsonAtomic } from './files.ts';\nimport { LocalSession, type Launch } from './run.ts';\nimport { DEFAULT_LIMITS, startStandaloneRun, testConnection, type RunUsage } from './runner.ts';\nimport { send, startUi, type UiServer } from './ui-server.ts';\n\nconst SLUG = /^[a-z0-9][a-z0-9-]*$/;\nconst MAX_BODY = 1_000_000;\n\ntype Job = {\n  kind: 'local' | 'cloud';\n  run_id: string;\n  checklist: string;\n  model: { provider: string; id: string } | null;\n  usage: RunUsage | null;\n  last: string;\n};\n\nexport type Studio = {\n  ui: UiServer;\n  link(path?: string): string;\n  close(): Promise<void>;\n};\n\nconst json = (res: ServerResponse, status: number, data: unknown) =>\n  send(res, status, JSON.stringify(data), 'application/json');\nconst problem = (res: ServerResponse, status: number, message: string) =>\n  json(res, status, { error: message });\n\ntype Issue = { path: string; message: string };\nconst issuesOf = (error: z.ZodError): Issue[] =>\n  error.issues.map((i) => ({ path: i.path.join('.'), message: i.message }));\n\nasync function readBody(req: IncomingMessage): Promise<unknown> {\n  let body = '';\n  for await (const chunk of req) {\n    body += chunk;\n    if (body.length > MAX_BODY) throw new Error('Body too large');\n  }\n  return body ? JSON.parse(body) : {};\n}\n\nconst exists = (path: string) =>\n  stat(path).then(\n    () => true,\n    () => false\n  );\n\n/** A connection that can make a call: a key, unless the endpoint is on this machine. */\nfunction usable(connection: Connection | null): connection is Connection {\n  if (!connection) return false;\n  if (connection.apiKey) return true;\n  const host = new URL(connection.baseUrl).hostname;\n  return connection.provider === 'openai' && /^(localhost|127\\.0\\.0\\.1|\\[::1\\])$/.test(host);\n}\n\n/** The starter files for a project with no `.stuntdouble/` yet. */\nexport async function createStarter(project: string, url: string): Promise<void> {\n  const root = sdDir(project);\n  await writeJsonAtomic(join(root, 'stuntdouble.json'), {\n    format: 'stuntdouble/1',\n    local_base_url: null,\n    headless: false,\n    model_screenshots: 'on_request',\n    safety: 'third_party',\n  });\n  await writeFileAtomic(join(root, '.gitignore'), '.live/\\n');\n  const actor = join(root, 'actors', 'first-time-visitor.json');\n  if (!(await exists(actor))) {\n    await writeJsonAtomic(actor, {\n      name: 'First-time visitor',\n      description:\n        'Has never used the product, arrives from a search result and decides within a minute whether it is worth their time',\n      knowledge: [],\n      persist_login: false,\n    });\n  }\n  const checklist = join(root, 'checklists', 'first-look.json');\n  if (!(await exists(checklist))) {\n    await writeJsonAtomic(checklist, {\n      name: 'First look',\n      actor: 'first-time-visitor',\n      url,\n      instructions:\n        'Arrive at the home page as someone who has never heard of the product. Work out what it is, try the main next step without paying or signing up, and follow the main navigation.',\n      checks: [\n        {\n          key: 'says-what-it-is',\n          description: 'The first screen says plainly what the product is and who it is for',\n        },\n        {\n          key: 'clear-next-step',\n          description: 'There is one clear next step, such as a sign-up button, without scrolling',\n        },\n        {\n          key: 'navigation-works',\n          description: 'The main navigation links open working pages, with no error or empty page',\n        },\n        {\n          key: 'first-impression',\n          description: 'Record what a new visitor would read or do first',\n          type: 'informational',\n        },\n      ],\n    });\n  }\n}\n\nconst InitInput = z.object({ url: z.url({ protocol: /^https?$/ }) });\nconst RunInput = z.object({\n  checklist: z.string().regex(SLUG),\n  where: z.enum(['local', 'cloud']).default('local'),\n  resume: z.boolean().optional(),\n});\nconst ConnectionInput = z.object({\n  provider: z.enum(PROVIDERS),\n  model: z.string().trim().min(1, 'Name the model').max(200),\n  base_url: z.union([z.url({ protocol: /^https?$/ }), z.literal('')]).nullish(),\n  api_key: z.string().max(500).nullish(),\n  clear_key: z.boolean().optional(),\n});\n\nexport async function startStudio(options: {\n  project: string;\n  port?: number;\n  launch?: Launch;\n  fetch?: typeof fetch;\n  cloudPollMs?: number;\n}): Promise<Studio> {\n  const project = options.project;\n  const root = sdDir(project);\n  let job: Job | null = null;\n  let session: LocalSession | null = null;\n  const cloudJobs = new Map<string, Job>();\n\n  async function status() {\n    return {\n      project,\n      initialised: await exists(join(root, 'stuntdouble.json')),\n      connection: await connectionStatus(),\n      cloud: await cloudStatus(),\n      jobs: [...(job ? [job] : []), ...cloudJobs.values()],\n      limits: DEFAULT_LIMITS,\n    };\n  }\n\n  /** Write one actor or checklist, validated by the schema `start_run` reads it with. */\n  async function saveDefinition(\n    res: ServerResponse,\n    folder: 'actors' | 'checklists',\n    slug: string,\n    body: unknown\n  ): Promise<void> {\n    const input = z\n      .object({ data: z.record(z.string(), z.unknown()), create: z.boolean().optional() })\n      .safeParse(body);\n    if (!input.success) return problem(res, 400, 'Send {\"data\": {...}}.');\n    if (!SLUG.test(slug)) {\n      return json(res, 422, {\n        issues: [{ path: 'slug', message: 'Use lowercase letters, digits and hyphens' }],\n      });\n    }\n    const path = join(root, folder, `${slug}.json`);\n    const existing = await readFile(path, 'utf8')\n      .then((t) => JSON.parse(t) as Record<string, unknown>)\n      .catch(() => null);\n    if (input.data.create && existing) {\n      return json(res, 409, {\n        issues: [\n          { path: 'slug', message: `There is already a ${folder.slice(0, -1)} called ${slug}` },\n        ],\n      });\n    }\n    // Cloud ids are written by a push, never by the form.\n    const { cloud: _ignored, ...fields } = input.data.data;\n    const data = existing?.cloud ? { ...fields, cloud: existing.cloud } : fields;\n    const schema = folder === 'actors' ? ActorSchema : ChecklistSchema;\n    const parsed = schema.safeParse(data);\n    const issues = parsed.success ? [] : issuesOf(parsed.error);\n    if (folder === 'checklists' && typeof data.actor === 'string' && SLUG.test(data.actor)) {\n      if (!(await exists(join(root, 'actors', `${data.actor}.json`)))) {\n        issues.push({ path: 'actor', message: `There is no actor called ${data.actor}` });\n      }\n    }\n    if (issues.length) return json(res, 422, { issues });\n    await writeJsonAtomic(path, data);\n    return json(res, 200, { slug });\n  }\n\n  async function startRun(res: ServerResponse, body: unknown): Promise<void> {\n    const input = RunInput.safeParse(body);\n    if (!input.success) return problem(res, 400, 'Name a checklist to run.');\n    const { checklist, where, resume } = input.data;\n    if (where === 'cloud') {\n      const run = await startCloudRun({ project, checklist, pollMs: options.cloudPollMs });\n      const entry: Job = {\n        kind: 'cloud',\n        run_id: run.runId,\n        checklist,\n        model: null,\n        usage: null,\n        last: 'Running in the cloud',\n      };\n      cloudJobs.set(run.runId, entry);\n      run.done.catch(() => {}).finally(() => cloudJobs.delete(run.runId));\n      return json(res, 200, { run_id: run.runId });\n    }\n    if (job) return problem(res, 409, `A run of ${job.checklist} is still going.`);\n    const connection = await resolveConnection();\n    if (!usable(connection)) {\n      return problem(res, 400, 'Connect a model first: Settings, then Connection.');\n    }\n    const model = { provider: connection.provider, id: connection.model };\n    session = new LocalSession({ project, ui, launch: options.launch, runner: { model } });\n    const current: Job = { kind: 'local', run_id: '', checklist, model, usage: null, last: '' };\n    job = current;\n    try {\n      const run = await startStandaloneRun({\n        session,\n        connection,\n        checklist,\n        resume,\n        fetch: options.fetch,\n        onProgress: (p) => {\n          current.usage = p.usage;\n          current.last = p.last;\n        },\n      });\n      current.run_id = run.runId;\n      const ended = session;\n      run.done\n        .catch(() => {})\n        .finally(() => {\n          if (job === current) job = null;\n          void ended.close();\n        });\n      return json(res, 200, { run_id: run.runId });\n    } catch (err) {\n      job = null;\n      await session.close().catch(() => {});\n      throw err;\n    }\n  }\n\n  async function handle(req: IncomingMessage, res: ServerResponse, url: URL): Promise<boolean> {\n    const path = url.pathname;\n    if (path === '/studio.js' && req.method === 'GET') {\n      const script = await readFile(new URL('./studio.js', import.meta.url));\n      send(res, 200, script, 'text/javascript; charset=utf-8');\n      return true;\n    }\n    if (!path.startsWith('/api/studio')) return false;\n    if (req.method === 'GET') {\n      if (path === '/api/studio') json(res, 200, await status());\n      else if (path === '/api/studio/cloud/workspaces') {\n        json(res, 200, { workspaces: await listWorkspaces() });\n      } else problem(res, 404, 'Not found');\n      return true;\n    }\n    // Writes: only from this server's own page.\n    if (req.headers.origin !== `http://${req.headers.host}`) {\n      problem(res, 403, 'Forbidden');\n      return true;\n    }\n    if (!/^application\\/json\\b/.test(req.headers['content-type'] ?? '')) {\n      problem(res, 415, 'Send JSON.');\n      return true;\n    }\n    let body: unknown;\n    try {\n      body = await readBody(req);\n    } catch {\n      problem(res, 400, 'That was not JSON.');\n      return true;\n    }\n    const definition = path.match(/^\\/api\\/studio\\/(actors|checklists)\\/([^/]+)$/);\n    try {\n      if (definition && req.method === 'PUT') {\n        await saveDefinition(\n          res,\n          definition[1] as 'actors' | 'checklists',\n          decodeURIComponent(definition[2]!),\n          body\n        );\n      } else if (req.method !== 'POST') {\n        problem(res, 405, 'Method not allowed');\n      } else if (path === '/api/studio/init') {\n        const input = InitInput.safeParse(body);\n        if (!input.success) {\n          json(res, 422, {\n            issues: [{ path: 'url', message: 'Enter a web address, http or https' }],\n          });\n        } else if (await exists(join(root, 'stuntdouble.json'))) {\n          problem(res, 409, 'This project is already set up.');\n        } else {\n          await createStarter(project, input.data.url);\n          json(res, 200, { checklist: 'first-look' });\n        }\n      } else if (path === '/api/studio/run') {\n        await startRun(res, body);\n      } else if (path === '/api/studio/connection') {\n        const input = ConnectionInput.safeParse(body);\n        if (!input.success) json(res, 422, { issues: issuesOf(input.error) });\n        else {\n          await saveConnection(input.data);\n          json(res, 200, await connectionStatus());\n        }\n      } else if (path === '/api/studio/connection/test') {\n        const connection = await resolveConnection();\n        json(\n          res,\n          200,\n          usable(connection)\n            ? await testConnection(connection, options.fetch)\n            : { ok: false, message: 'There is no key for this connection yet.' }\n        );\n      } else if (path === '/api/studio/cloud/login') {\n        json(res, 200, { url: await beginLogin(`http://127.0.0.1:${ui.port}/oauth/callback`) });\n      } else if (path === '/api/studio/cloud/logout') {\n        await logout();\n        json(res, 200, await cloudStatus());\n      } else if (path === '/api/studio/cloud/workspace') {\n        const id = (body as { id?: unknown }).id;\n        if (typeof id !== 'string') problem(res, 400, 'Name a workspace.');\n        else json(res, 200, { workspace: await chooseWorkspace(id) });\n      } else {\n        problem(res, 404, 'Not found');\n      }\n    } catch (err) {\n      // Our own errors say what to fix (a file, a refusal from Stunt Double); the page shows them as text.\n      problem(res, err instanceof CloudRefusal ? 403 : 400, (err as Error).message);\n    }\n    return true;\n  }\n\n  async function oauthCallback(_req: IncomingMessage, res: ServerResponse, url: URL) {\n    const state = url.searchParams.get('state') ?? '';\n    const code = url.searchParams.get('code');\n    let message = 'Signed in to Stunt Double.';\n    let ok = true;\n    try {\n      if (!code)\n        throw new Error(url.searchParams.get('error_description') ?? 'Sign-in was cancelled.');\n      await completeLogin(state, code);\n    } catch (err) {\n      ok = false;\n      message = (err as Error).message;\n    }\n    const escape = (s: string) => s.replace(/[&<>\"']/g, (c) => `&#${c.charCodeAt(0)};`);\n    // A same-origin navigation from here carries the Strict cookie again.\n    send(\n      res,\n      ok ? 200 : 400,\n      `<!doctype html><meta charset=\"utf-8\"><title>Stunt Double Studio</title>${ok ? '<meta http-equiv=\"refresh\" content=\"1;url=/settings\">' : ''}<body style=\"font:15px system-ui;padding:3rem;max-width:32rem\"><p>${escape(message)}</p><p><a href=\"/settings\">Back to the Studio</a></p></body>`,\n      'text/html; charset=utf-8',\n      { 'Content-Security-Policy': \"default-src 'none'; style-src 'unsafe-inline'\" }\n    );\n  }\n\n  const ui = await startUi({\n    root,\n    port: options.port,\n    extension: {\n      pages: /^\\/(checklists|actors|settings)(\\/[^/]+(\\/run)?)?$/,\n      script: '/studio.js',\n      handle,\n      oauthCallback,\n    },\n  });\n\n  return {\n    ui,\n    link: (path) => ui.link(path),\n    close: async () => {\n      await session?.close().catch(() => {});\n      await ui.close();\n    },\n  };\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAeA,SAAS,UAAU,YAAY;AAE/B,SAAS,YAAY;AACrB,SAAS,SAAS;AAwBlB,IAAM,OAAO;AACb,IAAM,WAAW;AAiBjB,IAAM,OAAO,CAAC,KAAqB,QAAgB,SACjD,KAAK,KAAK,QAAQ,KAAK,UAAU,IAAI,GAAG,kBAAkB;AAC5D,IAAM,UAAU,CAAC,KAAqB,QAAgB,YACpD,KAAK,KAAK,QAAQ,EAAE,OAAO,QAAQ,CAAC;AAGtC,IAAM,WAAW,CAAC,UAChB,MAAM,OAAO,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,KAAK,GAAG,GAAG,SAAS,EAAE,QAAQ,EAAE;AAE1E,eAAe,SAAS,KAAwC;AAC9D,MAAI,OAAO;AACX,mBAAiB,SAAS,KAAK;AAC7B,YAAQ;AACR,QAAI,KAAK,SAAS,SAAU,OAAM,IAAI,MAAM,gBAAgB;AAAA,EAC9D;AACA,SAAO,OAAO,KAAK,MAAM,IAAI,IAAI,CAAC;AACpC;AAEA,IAAM,SAAS,CAAC,SACd,KAAK,IAAI,EAAE;AAAA,EACT,MAAM;AAAA,EACN,MAAM;AACR;AAGF,SAAS,OAAO,YAAyD;AACvE,MAAI,CAAC,WAAY,QAAO;AACxB,MAAI,WAAW,OAAQ,QAAO;AAC9B,QAAM,OAAO,IAAI,IAAI,WAAW,OAAO,EAAE;AACzC,SAAO,WAAW,aAAa,YAAY,qCAAqC,KAAK,IAAI;AAC3F;AAGA,eAAsB,cAAc,SAAiB,KAA4B;AAC/E,QAAM,OAAO,MAAM,OAAO;AAC1B,QAAM,gBAAgB,KAAK,MAAM,kBAAkB,GAAG;AAAA,IACpD,QAAQ;AAAA,IACR,gBAAgB;AAAA,IAChB,UAAU;AAAA,IACV,mBAAmB;AAAA,IACnB,QAAQ;AAAA,EACV,CAAC;AACD,QAAM,gBAAgB,KAAK,MAAM,YAAY,GAAG,UAAU;AAC1D,QAAM,QAAQ,KAAK,MAAM,UAAU,yBAAyB;AAC5D,MAAI,CAAE,MAAM,OAAO,KAAK,GAAI;AAC1B,UAAM,gBAAgB,OAAO;AAAA,MAC3B,MAAM;AAAA,MACN,aACE;AAAA,MACF,WAAW,CAAC;AAAA,MACZ,eAAe;AAAA,IACjB,CAAC;AAAA,EACH;AACA,QAAM,YAAY,KAAK,MAAM,cAAc,iBAAiB;AAC5D,MAAI,CAAE,MAAM,OAAO,SAAS,GAAI;AAC9B,UAAM,gBAAgB,WAAW;AAAA,MAC/B,MAAM;AAAA,MACN,OAAO;AAAA,MACP;AAAA,MACA,cACE;AAAA,MACF,QAAQ;AAAA,QACN;AAAA,UACE,KAAK;AAAA,UACL,aAAa;AAAA,QACf;AAAA,QACA;AAAA,UACE,KAAK;AAAA,UACL,aAAa;AAAA,QACf;AAAA,QACA;AAAA,UACE,KAAK;AAAA,UACL,aAAa;AAAA,QACf;AAAA,QACA;AAAA,UACE,KAAK;AAAA,UACL,aAAa;AAAA,UACb,MAAM;AAAA,QACR;AAAA,MACF;AAAA,IACF,CAAC;AAAA,EACH;AACF;AAEA,IAAM,YAAY,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,WAAW,CAAC,EAAE,CAAC;AACnE,IAAM,WAAW,EAAE,OAAO;AAAA,EACxB,WAAW,EAAE,OAAO,EAAE,MAAM,IAAI;AAAA,EAChC,OAAO,EAAE,KAAK,CAAC,SAAS,OAAO,CAAC,EAAE,QAAQ,OAAO;AAAA,EACjD,QAAQ,EAAE,QAAQ,EAAE,SAAS;AAC/B,CAAC;AACD,IAAM,kBAAkB,EAAE,OAAO;AAAA,EAC/B,UAAU,EAAE,KAAK,SAAS;AAAA,EAC1B,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,GAAG,gBAAgB,EAAE,IAAI,GAAG;AAAA,EACzD,UAAU,EAAE,MAAM,CAAC,EAAE,IAAI,EAAE,UAAU,WAAW,CAAC,GAAG,EAAE,QAAQ,EAAE,CAAC,CAAC,EAAE,QAAQ;AAAA,EAC5E,SAAS,EAAE,OAAO,EAAE,IAAI,GAAG,EAAE,QAAQ;AAAA,EACrC,WAAW,EAAE,QAAQ,EAAE,SAAS;AAClC,CAAC;AAED,eAAsB,YAAY,SAMd;AAClB,QAAM,UAAU,QAAQ;AACxB,QAAM,OAAO,MAAM,OAAO;AAC1B,MAAI,MAAkB;AACtB,MAAI,UAA+B;AACnC,QAAM,YAAY,oBAAI,IAAiB;AAEvC,iBAAe,SAAS;AACtB,WAAO;AAAA,MACL;AAAA,MACA,aAAa,MAAM,OAAO,KAAK,MAAM,kBAAkB,CAAC;AAAA,MACxD,YAAY,MAAM,iBAAiB;AAAA,MACnC,OAAO,MAAM,YAAY;AAAA,MACzB,MAAM,CAAC,GAAI,MAAM,CAAC,GAAG,IAAI,CAAC,GAAI,GAAG,UAAU,OAAO,CAAC;AAAA,MACnD,QAAQ;AAAA,IACV;AAAA,EACF;AAGA,iBAAe,eACb,KACA,QACA,MACA,MACe;AACf,UAAM,QAAQ,EACX,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,EAAE,QAAQ,CAAC,GAAG,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,CAAC,EAClF,UAAU,IAAI;AACjB,QAAI,CAAC,MAAM,QAAS,QAAO,QAAQ,KAAK,KAAK,uBAAuB;AACpE,QAAI,CAAC,KAAK,KAAK,IAAI,GAAG;AACpB,aAAO,KAAK,KAAK,KAAK;AAAA,QACpB,QAAQ,CAAC,EAAE,MAAM,QAAQ,SAAS,4CAA4C,CAAC;AAAA,MACjF,CAAC;AAAA,IACH;AACA,UAAM,OAAO,KAAK,MAAM,QAAQ,GAAG,IAAI,OAAO;AAC9C,UAAM,WAAW,MAAM,SAAS,MAAM,MAAM,EACzC,KAAK,CAAC,MAAM,KAAK,MAAM,CAAC,CAA4B,EACpD,MAAM,MAAM,IAAI;AACnB,QAAI,MAAM,KAAK,UAAU,UAAU;AACjC,aAAO,KAAK,KAAK,KAAK;AAAA,QACpB,QAAQ;AAAA,UACN,EAAE,MAAM,QAAQ,SAAS,sBAAsB,OAAO,MAAM,GAAG,EAAE,CAAC,WAAW,IAAI,GAAG;AAAA,QACtF;AAAA,MACF,CAAC;AAAA,IACH;AAEA,UAAM,EAAE,OAAO,UAAU,GAAG,OAAO,IAAI,MAAM,KAAK;AAClD,UAAM,OAAO,UAAU,QAAQ,EAAE,GAAG,QAAQ,OAAO,SAAS,MAAM,IAAI;AACtE,UAAM,SAAS,WAAW,WAAW,cAAc;AACnD,UAAM,SAAS,OAAO,UAAU,IAAI;AACpC,UAAM,SAAS,OAAO,UAAU,CAAC,IAAI,SAAS,OAAO,KAAK;AAC1D,QAAI,WAAW,gBAAgB,OAAO,KAAK,UAAU,YAAY,KAAK,KAAK,KAAK,KAAK,GAAG;AACtF,UAAI,CAAE,MAAM,OAAO,KAAK,MAAM,UAAU,GAAG,KAAK,KAAK,OAAO,CAAC,GAAI;AAC/D,eAAO,KAAK,EAAE,MAAM,SAAS,SAAS,4BAA4B,KAAK,KAAK,GAAG,CAAC;AAAA,MAClF;AAAA,IACF;AACA,QAAI,OAAO,OAAQ,QAAO,KAAK,KAAK,KAAK,EAAE,OAAO,CAAC;AACnD,UAAM,gBAAgB,MAAM,IAAI;AAChC,WAAO,KAAK,KAAK,KAAK,EAAE,KAAK,CAAC;AAAA,EAChC;AAEA,iBAAe,SAAS,KAAqB,MAA8B;AACzE,UAAM,QAAQ,SAAS,UAAU,IAAI;AACrC,QAAI,CAAC,MAAM,QAAS,QAAO,QAAQ,KAAK,KAAK,0BAA0B;AACvE,UAAM,EAAE,WAAW,OAAO,OAAO,IAAI,MAAM;AAC3C,QAAI,UAAU,SAAS;AACrB,YAAM,MAAM,MAAM,cAAc,EAAE,SAAS,WAAW,QAAQ,QAAQ,YAAY,CAAC;AACnF,YAAM,QAAa;AAAA,QACjB,MAAM;AAAA,QACN,QAAQ,IAAI;AAAA,QACZ;AAAA,QACA,OAAO;AAAA,QACP,OAAO;AAAA,QACP,MAAM;AAAA,MACR;AACA,gBAAU,IAAI,IAAI,OAAO,KAAK;AAC9B,UAAI,KAAK,MAAM,MAAM;AAAA,MAAC,CAAC,EAAE,QAAQ,MAAM,UAAU,OAAO,IAAI,KAAK,CAAC;AAClE,aAAO,KAAK,KAAK,KAAK,EAAE,QAAQ,IAAI,MAAM,CAAC;AAAA,IAC7C;AACA,QAAI,IAAK,QAAO,QAAQ,KAAK,KAAK,YAAY,IAAI,SAAS,kBAAkB;AAC7E,UAAM,aAAa,MAAM,kBAAkB;AAC3C,QAAI,CAAC,OAAO,UAAU,GAAG;AACvB,aAAO,QAAQ,KAAK,KAAK,mDAAmD;AAAA,IAC9E;AACA,UAAM,QAAQ,EAAE,UAAU,WAAW,UAAU,IAAI,WAAW,MAAM;AACpE,cAAU,IAAI,aAAa,EAAE,SAAS,IAAI,QAAQ,QAAQ,QAAQ,QAAQ,EAAE,MAAM,EAAE,CAAC;AACrF,UAAM,UAAe,EAAE,MAAM,SAAS,QAAQ,IAAI,WAAW,OAAO,OAAO,MAAM,MAAM,GAAG;AAC1F,UAAM;AACN,QAAI;AACF,YAAM,MAAM,MAAM,mBAAmB;AAAA,QACnC;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA,OAAO,QAAQ;AAAA,QACf,YAAY,CAAC,MAAM;AACjB,kBAAQ,QAAQ,EAAE;AAClB,kBAAQ,OAAO,EAAE;AAAA,QACnB;AAAA,MACF,CAAC;AACD,cAAQ,SAAS,IAAI;AACrB,YAAM,QAAQ;AACd,UAAI,KACD,MAAM,MAAM;AAAA,MAAC,CAAC,EACd,QAAQ,MAAM;AACb,YAAI,QAAQ,QAAS,OAAM;AAC3B,aAAK,MAAM,MAAM;AAAA,MACnB,CAAC;AACH,aAAO,KAAK,KAAK,KAAK,EAAE,QAAQ,IAAI,MAAM,CAAC;AAAA,IAC7C,SAAS,KAAK;AACZ,YAAM;AACN,YAAM,QAAQ,MAAM,EAAE,MAAM,MAAM;AAAA,MAAC,CAAC;AACpC,YAAM;AAAA,IACR;AAAA,EACF;AAEA,iBAAe,OAAO,KAAsB,KAAqB,KAA4B;AAC3F,UAAM,OAAO,IAAI;AACjB,QAAI,SAAS,gBAAgB,IAAI,WAAW,OAAO;AACjD,YAAM,SAAS,MAAM,SAAS,IAAI,IAAI,eAAe,YAAY,GAAG,CAAC;AACrE,WAAK,KAAK,KAAK,QAAQ,gCAAgC;AACvD,aAAO;AAAA,IACT;AACA,QAAI,CAAC,KAAK,WAAW,aAAa,EAAG,QAAO;AAC5C,QAAI,IAAI,WAAW,OAAO;AACxB,UAAI,SAAS,cAAe,MAAK,KAAK,KAAK,MAAM,OAAO,CAAC;AAAA,eAChD,SAAS,gCAAgC;AAChD,aAAK,KAAK,KAAK,EAAE,YAAY,MAAM,eAAe,EAAE,CAAC;AAAA,MACvD,MAAO,SAAQ,KAAK,KAAK,WAAW;AACpC,aAAO;AAAA,IACT;AAEA,QAAI,IAAI,QAAQ,WAAW,UAAU,IAAI,QAAQ,IAAI,IAAI;AACvD,cAAQ,KAAK,KAAK,WAAW;AAC7B,aAAO;AAAA,IACT;AACA,QAAI,CAAC,uBAAuB,KAAK,IAAI,QAAQ,cAAc,KAAK,EAAE,GAAG;AACnE,cAAQ,KAAK,KAAK,YAAY;AAC9B,aAAO;AAAA,IACT;AACA,QAAI;AACJ,QAAI;AACF,aAAO,MAAM,SAAS,GAAG;AAAA,IAC3B,QAAQ;AACN,cAAQ,KAAK,KAAK,oBAAoB;AACtC,aAAO;AAAA,IACT;AACA,UAAM,aAAa,KAAK,MAAM,+CAA+C;AAC7E,QAAI;AACF,UAAI,cAAc,IAAI,WAAW,OAAO;AACtC,cAAM;AAAA,UACJ;AAAA,UACA,WAAW,CAAC;AAAA,UACZ,mBAAmB,WAAW,CAAC,CAAE;AAAA,UACjC;AAAA,QACF;AAAA,MACF,WAAW,IAAI,WAAW,QAAQ;AAChC,gBAAQ,KAAK,KAAK,oBAAoB;AAAA,MACxC,WAAW,SAAS,oBAAoB;AACtC,cAAM,QAAQ,UAAU,UAAU,IAAI;AACtC,YAAI,CAAC,MAAM,SAAS;AAClB,eAAK,KAAK,KAAK;AAAA,YACb,QAAQ,CAAC,EAAE,MAAM,OAAO,SAAS,qCAAqC,CAAC;AAAA,UACzE,CAAC;AAAA,QACH,WAAW,MAAM,OAAO,KAAK,MAAM,kBAAkB,CAAC,GAAG;AACvD,kBAAQ,KAAK,KAAK,iCAAiC;AAAA,QACrD,OAAO;AACL,gBAAM,cAAc,SAAS,MAAM,KAAK,GAAG;AAC3C,eAAK,KAAK,KAAK,EAAE,WAAW,aAAa,CAAC;AAAA,QAC5C;AAAA,MACF,WAAW,SAAS,mBAAmB;AACrC,cAAM,SAAS,KAAK,IAAI;AAAA,MAC1B,WAAW,SAAS,0BAA0B;AAC5C,cAAM,QAAQ,gBAAgB,UAAU,IAAI;AAC5C,YAAI,CAAC,MAAM,QAAS,MAAK,KAAK,KAAK,EAAE,QAAQ,SAAS,MAAM,KAAK,EAAE,CAAC;AAAA,aAC/D;AACH,gBAAM,eAAe,MAAM,IAAI;AAC/B,eAAK,KAAK,KAAK,MAAM,iBAAiB,CAAC;AAAA,QACzC;AAAA,MACF,WAAW,SAAS,+BAA+B;AACjD,cAAM,aAAa,MAAM,kBAAkB;AAC3C;AAAA,UACE;AAAA,UACA;AAAA,UACA,OAAO,UAAU,IACb,MAAM,eAAe,YAAY,QAAQ,KAAK,IAC9C,EAAE,IAAI,OAAO,SAAS,2CAA2C;AAAA,QACvE;AAAA,MACF,WAAW,SAAS,2BAA2B;AAC7C,aAAK,KAAK,KAAK,EAAE,KAAK,MAAM,WAAW,oBAAoB,GAAG,IAAI,iBAAiB,EAAE,CAAC;AAAA,MACxF,WAAW,SAAS,4BAA4B;AAC9C,cAAM,OAAO;AACb,aAAK,KAAK,KAAK,MAAM,YAAY,CAAC;AAAA,MACpC,WAAW,SAAS,+BAA+B;AACjD,cAAM,KAAM,KAA0B;AACtC,YAAI,OAAO,OAAO,SAAU,SAAQ,KAAK,KAAK,mBAAmB;AAAA,YAC5D,MAAK,KAAK,KAAK,EAAE,WAAW,MAAM,gBAAgB,EAAE,EAAE,CAAC;AAAA,MAC9D,OAAO;AACL,gBAAQ,KAAK,KAAK,WAAW;AAAA,MAC/B;AAAA,IACF,SAAS,KAAK;AAEZ,cAAQ,KAAK,eAAe,eAAe,MAAM,KAAM,IAAc,OAAO;AAAA,IAC9E;AACA,WAAO;AAAA,EACT;AAEA,iBAAe,cAAc,MAAuB,KAAqB,KAAU;AACjF,UAAM,QAAQ,IAAI,aAAa,IAAI,OAAO,KAAK;AAC/C,UAAM,OAAO,IAAI,aAAa,IAAI,MAAM;AACxC,QAAI,UAAU;AACd,QAAI,KAAK;AACT,QAAI;AACF,UAAI,CAAC;AACH,cAAM,IAAI,MAAM,IAAI,aAAa,IAAI,mBAAmB,KAAK,wBAAwB;AACvF,YAAM,cAAc,OAAO,IAAI;AAAA,IACjC,SAAS,KAAK;AACZ,WAAK;AACL,gBAAW,IAAc;AAAA,IAC3B;AACA,UAAM,SAAS,CAAC,MAAc,EAAE,QAAQ,YAAY,CAAC,MAAM,KAAK,EAAE,WAAW,CAAC,CAAC,GAAG;AAElF;AAAA,MACE;AAAA,MACA,KAAK,MAAM;AAAA,MACX,0EAA0E,KAAK,0DAA0D,EAAE,qEAAqE,OAAO,OAAO,CAAC;AAAA,MAC/N;AAAA,MACA,EAAE,2BAA2B,gDAAgD;AAAA,IAC/E;AAAA,EACF;AAEA,QAAM,KAAK,MAAM,QAAQ;AAAA,IACvB;AAAA,IACA,MAAM,QAAQ;AAAA,IACd,WAAW;AAAA,MACT,OAAO;AAAA,MACP,QAAQ;AAAA,MACR;AAAA,MACA;AAAA,IACF;AAAA,EACF,CAAC;AAED,SAAO;AAAA,IACL;AAAA,IACA,MAAM,CAAC,SAAS,GAAG,KAAK,IAAI;AAAA,IAC5B,OAAO,YAAY;AACjB,YAAM,SAAS,MAAM,EAAE,MAAM,MAAM;AAAA,MAAC,CAAC;AACrC,YAAM,GAAG,MAAM;AAAA,IACjB;AAAA,EACF;AACF;","names":[]}