thinkpool-pair 0.7.364 → 0.7.366

package/viewport.mjs

@@ -1,810 +1 @@
-// Bridge-owned visual QA for ThinkPool Code lanes.
-//
-// Agent sandboxes should not need permission to bind localhost or launch a GUI
-// process. The bridge already owns a contained static preview server
-// (flow-preview.mjs), so this module adds the missing half: an exact-viewport,
-// dependency-free Chrome DevTools Protocol capture worker plus per-lane tools.
-//
-// Security boundary:
-//   - preview roots must resolve inside the lane's own cwd (symlinks included)
-//   - the browser only opens the loopback URL created by startPreview()
-//   - no caller-supplied commands, executables, ports, hosts, or arbitrary URLs
-
-import { spawn } from 'node:child_process'
-import fs from 'node:fs'
-import fsp from 'node:fs/promises'
-import os from 'node:os'
-import path from 'node:path'
-import { randomUUID } from 'node:crypto'
-import { previews, startPreview } from './flow-preview.mjs'
-import {
-  DESIGN_SOURCE_MAP_RELATIVE,
-  MAX_DESIGN_SOURCE_MAP_BYTES,
-} from './design-source-contract.mjs'
-
-export const DEFAULT_VIEWPORTS = Object.freeze({
-  desktop: Object.freeze({ width: 1440, height: 900 }),
-  mobile: Object.freeze({ width: 390, height: 844 }),
-})
-
-const MAX_CAPTURE_HEIGHT = 20000
-const MAX_SETTLE_MS = 5000
-const AUTH_READY_TIMEOUT_MS = 15000
-const AUTH_FRESH_MARGIN_SEC = 30
-const PREVIEW_LOCAL_EXPIRY_EXTENSION_SEC = 3600
-const CDP_TIMEOUT_MS = 12000
-const MAX_PORTABLE_SNAPSHOT_BYTES = 1_900_000
-
-const isInside = (parent, child) => {
-  const rel = path.relative(parent, child)
-  return rel === '' || (!rel.startsWith('..') && !path.isAbsolute(rel))
-}
-
-export async function resolveContainedRoot(workspaceRoot, requested = 'dist') {
-  if (!workspaceRoot) throw new Error('A lane workspace is required.')
-  if (path.isAbsolute(requested)) throw new Error('Preview root must be relative to the lane workspace.')
-  const workspace = await fsp.realpath(path.resolve(workspaceRoot))
-  const candidate = path.resolve(workspace, requested || 'dist')
-  let resolved
-  try { resolved = await fsp.realpath(candidate) }
-  catch { throw new Error(`Preview root does not exist: ${requested || 'dist'}. Build the app first, or choose a directory containing index.html.`) }
-  if (!isInside(workspace, resolved)) throw new Error('Preview root escapes the lane workspace.')
-  const stat = await fsp.stat(resolved)
-  if (!stat.isDirectory()) throw new Error('Preview root must be a directory.')
-  if (!fs.existsSync(path.join(resolved, 'index.html'))) throw new Error(`No index.html found in preview root: ${requested || 'dist'}.`)
-  return resolved
-}
-
-export async function resolvePreviewSourceMap(previewRoot) {
-  if (!previewRoot) return null
-  let root, sourceMap
-  try {
-    root = await fsp.realpath(previewRoot)
-    sourceMap = await fsp.realpath(path.join(root, DESIGN_SOURCE_MAP_RELATIVE))
-    const stat = await fsp.stat(sourceMap)
-    if (!stat.isFile() || stat.size <= 0 || stat.size > MAX_DESIGN_SOURCE_MAP_BYTES) return null
-  } catch { return null }
-  return isInside(root, sourceMap) ? sourceMap : null
-}
-
-export function normalizeRoute(value = '/') {
-  const route = String(value || '/').trim()
-  if (!route.startsWith('/') || route.startsWith('//')) throw new Error('Preview path must start with one "/" and cannot be a URL.')
-  const parsed = new URL(route, 'http://127.0.0.1')
-  if (parsed.origin !== 'http://127.0.0.1') throw new Error('Preview path cannot change the preview origin.')
-  return `${parsed.pathname}${parsed.search}${parsed.hash}`
-}
-
-export function safeSlug(value = 'viewport') {
-  return String(value || 'viewport')
-    .toLowerCase()
-    .replace(/[^a-z0-9]+/g, '-')
-    .replace(/^-+|-+$/g, '')
-    .slice(0, 56) || 'viewport'
-}
-
-export function isSignedOutRoomPreview(route, snapshot) {
-  const parsed = new URL(normalizeRoute(route), 'http://127.0.0.1')
-  if (!parsed.searchParams.get('r')) return false
-  return /\bid\s*=\s*["']invitation-room-title["']/i.test(String(snapshot || ''))
-}
-
-export function previewArtifactIssue(route, capture) {
-  const parsed = new URL(normalizeRoute(route), 'http://127.0.0.1')
-  const routeIdentity = (url) => {
-    if (typeof url !== 'string' || !url.trim()) return null
-    try {
-      const value = new URL(url, 'http://127.0.0.1')
-      const pathname = value.pathname === '/' ? '/' : value.pathname.replace(/\/+$/, '')
-      return `${pathname}${value.search}`
-    } catch { return null }
-  }
-  const expectedRoute = routeIdentity(parsed.href)
-  const protectedRoute = parsed.pathname === '/code' || parsed.pathname.startsWith('/code/') || parsed.searchParams.has('r')
-  for (const state of [capture?.beforeState, capture?.afterState]) {
-    if (!state) return 'The captured page did not report settled rendered state.'
-    const actualRoute = routeIdentity(state.url)
-    if (actualRoute && actualRoute !== expectedRoute) return `Preview navigated from ${expectedRoute} to ${actualRoute}.`
-    if (state.signedOutInvite) return 'Preview resolved to the signed-out room invitation instead of the authenticated Code room.'
-    if (state.visibleBoot) return 'Preview was still showing the application loading shell.'
-    if (state.visibleLoading) return 'Preview was still showing an application loading state.'
-    if (protectedRoute && state.prerenderGeo) return 'Preview resolved to the public marketing shell instead of the authenticated Code surface.'
-    if (!state.hasBody || (state.textLength < 2 && state.meaningfulVisualCount < 1)) return 'Preview rendered an empty page.'
-  }
-  return null
-}
-
-export function routeNeedsPreviewAuth(route) {
-  const parsed = new URL(normalizeRoute(route), 'http://127.0.0.1')
-  return !!parsed.searchParams.get('r') || ['/settings', '/contacts', '/code/link'].includes(parsed.pathname)
-}
-
-function decodeJwtPayload(token) {
-  try {
-    const payload = String(token || '').split('.')[1]
-    return payload ? JSON.parse(Buffer.from(payload, 'base64url').toString('utf8')) : null
-  } catch { return null }
-}
-
-// Build the minimum Supabase local-storage session needed for a short-lived,
-// read-only visual capture. Never expose the bridge refresh token to Chrome.
-export function previewAuthBootstrap({ accessToken, supabaseUrl, nowSec = Math.floor(Date.now() / 1000), minTtlSec = 0 } = {}) {
-  const claims = decodeJwtPayload(accessToken)
-  let endpoint
-  try { endpoint = new URL(supabaseUrl) } catch { return null }
-  if (!accessToken || endpoint.protocol !== 'https:' || !claims?.sub || !claims?.exp || claims.exp - nowSec <= minTtlSec) return null
-  const projectRef = endpoint.hostname.split('.')[0]
-  if (!projectRef) return null
-  return {
-    storageKey: `sb-${projectRef}-auth-token`,
-    allowedReadOrigins: [endpoint.origin],
-    allowedSocketOrigins: [`wss://${endpoint.host}`],
-    session: {
-      access_token: accessToken,
-      refresh_token: '',
-      // auth-js refreshes 90s early. Extend only its browser-local marker; the
-      // signed JWT keeps its real expiry and is still server-validated per read.
-      expires_in: Math.max(1, claims.exp - nowSec) + PREVIEW_LOCAL_EXPIRY_EXTENSION_SEC,
-      expires_at: claims.exp + PREVIEW_LOCAL_EXPIRY_EXTENSION_SEC,
-      token_type: 'bearer',
-      user: {
-        id: claims.sub,
-        aud: claims.aud || 'authenticated',
-        role: claims.role || 'authenticated',
-        email: claims.email || null,
-        phone: claims.phone || '',
-        app_metadata: claims.app_metadata || {},
-        user_metadata: claims.user_metadata || {},
-        identities: [],
-        created_at: claims.created_at || new Date(nowSec * 1000).toISOString(),
-        updated_at: new Date(nowSec * 1000).toISOString(),
-      },
-    },
-  }
-}
-
-export function findBrowserExecutable({ env = process.env, platform = process.platform, exists = fs.existsSync } = {}) {
-  const candidates = [
-    env.TP_BROWSER_PATH,
-    platform === 'darwin' && '/Applications/Google Chrome.app/Contents/MacOS/Google Chrome',
-    platform === 'darwin' && '/Applications/Chromium.app/Contents/MacOS/Chromium',
-    platform === 'win32' && env.PROGRAMFILES && path.join(env.PROGRAMFILES, 'Google', 'Chrome', 'Application', 'chrome.exe'),
-    platform === 'win32' && env['PROGRAMFILES(X86)'] && path.join(env['PROGRAMFILES(X86)'], 'Google', 'Chrome', 'Application', 'chrome.exe'),
-    platform === 'linux' && '/usr/bin/google-chrome',
-    platform === 'linux' && '/usr/bin/google-chrome-stable',
-    platform === 'linux' && '/usr/bin/chromium',
-    platform === 'linux' && '/usr/bin/chromium-browser',
-  ].filter(Boolean)
-  return candidates.find((candidate) => {
-    try { return exists(candidate) } catch { return false }
-  }) || null
-}
-
-class CdpPipe {
-  constructor(child, timeoutMs = CDP_TIMEOUT_MS) {
-    this.child = child
-    this.timeoutMs = timeoutMs
-    this.nextId = 1
-    this.buffer = Buffer.alloc(0)
-    this.pending = new Map()
-    this.waiters = new Set()
-    this.subscribers = new Set()
-    child.stdio[4].on('data', (chunk) => this.onData(chunk))
-    child.once('exit', (code, signal) => this.failAll(new Error(`Chrome exited (${signal || code || 'unknown'}).`)))
-    child.once('error', (error) => this.failAll(error))
-  }
-
-  onData(chunk) {
-    this.buffer = Buffer.concat([this.buffer, chunk])
-    for (;;) {
-      const end = this.buffer.indexOf(0)
-      if (end < 0) break
-      const raw = this.buffer.subarray(0, end).toString('utf8')
-      this.buffer = this.buffer.subarray(end + 1)
-      if (!raw) continue
-      let message
-      try { message = JSON.parse(raw) } catch { continue }
-      if (message.id) {
-        const pending = this.pending.get(message.id)
-        if (!pending) continue
-        clearTimeout(pending.timer)
-        this.pending.delete(message.id)
-        if (message.error) pending.reject(new Error(message.error.message || 'Chrome DevTools error'))
-        else pending.resolve(message.result || {})
-        continue
-      }
-      for (const waiter of [...this.waiters]) {
-        if (waiter.method !== message.method) continue
-        if (waiter.sessionId && waiter.sessionId !== message.sessionId) continue
-        if (waiter.predicate && !waiter.predicate(message.params || {})) continue
-        clearTimeout(waiter.timer)
-        this.waiters.delete(waiter)
-        waiter.resolve(message.params || {})
-      }
-      for (const subscriber of [...this.subscribers]) {
-        if (subscriber.method !== message.method) continue
-        if (subscriber.sessionId && subscriber.sessionId !== message.sessionId) continue
-        try { subscriber.handler(message.params || {}) } catch { /* subscriber owns recovery */ }
-      }
-    }
-  }
-
-  failAll(error) {
-    for (const pending of this.pending.values()) { clearTimeout(pending.timer); pending.reject(error) }
-    this.pending.clear()
-    for (const waiter of this.waiters) { clearTimeout(waiter.timer); waiter.reject(error) }
-    this.waiters.clear()
-    this.subscribers.clear()
-  }
-
-  send(method, params = {}, sessionId) {
-    const id = this.nextId++
-    return new Promise((resolve, reject) => {
-      const timer = setTimeout(() => {
-        this.pending.delete(id)
-        reject(new Error(`Chrome timed out running ${method}.`))
-      }, this.timeoutMs)
-      this.pending.set(id, { resolve, reject, timer })
-      const message = { id, method, params, ...(sessionId ? { sessionId } : {}) }
-      this.child.stdio[3].write(`${JSON.stringify(message)}\0`)
-    })
-  }
-
-  waitFor(method, sessionId, predicate) {
-    return new Promise((resolve, reject) => {
-      const waiter = { method, sessionId, predicate, resolve, reject, timer: null }
-      waiter.timer = setTimeout(() => {
-        this.waiters.delete(waiter)
-        reject(new Error(`Chrome timed out waiting for ${method}.`))
-      }, this.timeoutMs)
-      this.waiters.add(waiter)
-    })
-  }
-
-  subscribe(method, sessionId, handler) {
-    const subscriber = { method, sessionId, handler }
-    this.subscribers.add(subscriber)
-    return () => this.subscribers.delete(subscriber)
-  }
-}
-
-export class CdpBrowser {
-  constructor({ executable, spawnImpl = spawn, timeoutMs = CDP_TIMEOUT_MS } = {}) {
-    this.executable = executable || null
-    this.spawnImpl = spawnImpl
-    this.timeoutMs = timeoutMs
-    this.child = null
-    this.pipe = null
-    this.profileDir = null
-    this.starting = null
-    this.stderr = ''
-  }
-
-  async ensureStarted() {
-    if (this.child && this.pipe) return
-    if (this.starting) return this.starting
-    this.starting = this.start().finally(() => { this.starting = null })
-    return this.starting
-  }
-
-  async start() {
-    const executable = this.executable || findBrowserExecutable()
-    if (!executable) throw new Error('No supported Chrome/Chromium executable found. Install Google Chrome or set TP_BROWSER_PATH on the bridge host.')
-    this.profileDir = await fsp.mkdtemp(path.join(os.tmpdir(), 'thinkpool-viewport-'))
-    const args = [
-      '--headless=new', '--remote-debugging-pipe', '--no-first-run', '--no-default-browser-check',
-      '--disable-background-networking', '--disable-component-update', '--disable-sync',
-      '--disable-extensions', '--disable-default-apps',
-      '--metrics-recording-only', '--mute-audio', '--hide-scrollbars',
-      `--user-data-dir=${this.profileDir}`, 'about:blank',
-    ]
-    const child = this.spawnImpl(executable, args, { stdio: ['ignore', 'ignore', 'pipe', 'pipe', 'pipe'] })
-    this.child = child
-    child.stderr?.on('data', (chunk) => { this.stderr = (this.stderr + chunk.toString('utf8')).slice(-4000) })
-    this.pipe = new CdpPipe(child, this.timeoutMs)
-    try { await this.pipe.send('Browser.getVersion') }
-    catch (error) {
-      await this.close()
-      const detail = this.stderr.trim().split('\n').slice(-2).join(' ')
-      throw new Error(`Could not start Chrome for viewport capture: ${detail || error.message}`)
-    }
-  }
-
-  async withPage({ url, viewport, waitMs = 300, auth = null }, fn) {
-    await this.ensureStarted()
-    const { targetId } = await this.pipe.send('Target.createTarget', { url: 'about:blank' })
-    const { sessionId } = await this.pipe.send('Target.attachToTarget', { targetId, flatten: true })
-    let unsubscribeRequests = null
-    let unsubscribeResponses = null
-    let unsubscribeExceptions = null
-    const authResponses = []
-    const localResponses = []
-    const runtimeExceptions = []
-    try {
-      await this.pipe.send('Page.enable', {}, sessionId)
-      await this.pipe.send('Runtime.enable', {}, sessionId)
-      await this.pipe.send('Network.enable', {}, sessionId).catch(() => {})
-      if (auth?.storageKey && auth?.session) {
-        const source = `(() => { try { localStorage.setItem(${JSON.stringify(auth.storageKey)}, ${JSON.stringify(JSON.stringify(auth.session))}); window.__TP_READ_ONLY_PREVIEW__ = true; } catch {} })()`
-        await this.pipe.send('Page.addScriptToEvaluateOnNewDocument', { source }, sessionId)
-      }
-      // The page is untrusted build output. Keep its network authority narrower
-      // than the lane sandbox: same preview origin plus read-only requests to
-      // the exact Supabase origin provided by the bridge auth context.
-      const allowedOrigin = new URL(url).origin
-      const allowedReadOrigins = new Set(auth?.allowedReadOrigins || [])
-      const allowedSocketOrigins = new Set(auth?.allowedSocketOrigins || [])
-      unsubscribeResponses = this.pipe.subscribe('Network.responseReceived', sessionId, (params) => {
-        try {
-          const responseUrl = new URL(params.response?.url || '')
-          if (allowedReadOrigins.has(responseUrl.origin) && authResponses.length < 20) authResponses.push(`${params.response?.status || 0}:${responseUrl.pathname}`)
-          if (responseUrl.origin === allowedOrigin && localResponses.length < 20) localResponses.push(`${params.response?.status || 0}:${responseUrl.pathname}`)
-        } catch { /* diagnostics only */ }
-      })
-      unsubscribeExceptions = this.pipe.subscribe('Runtime.exceptionThrown', sessionId, (params) => {
-        if (runtimeExceptions.length >= 5) return
-        const detail = params.exceptionDetails?.exception?.description || params.exceptionDetails?.text || 'runtime error'
-        runtimeExceptions.push(String(detail).split('\n')[0].slice(0, 180))
-      })
-      unsubscribeRequests = this.pipe.subscribe('Fetch.requestPaused', sessionId, (params) => {
-        let allowed = false
-        try {
-          const requestUrl = new URL(params.request?.url || '')
-          const requestMethod = String(params.request?.method || 'GET').toUpperCase()
-          allowed = requestUrl.origin === allowedOrigin ||
-            (allowedReadOrigins.has(requestUrl.origin) && ['GET', 'HEAD', 'OPTIONS'].includes(requestMethod)) ||
-            (allowedSocketOrigins.has(requestUrl.origin) && requestMethod === 'GET')
-        } catch { allowed = false }
-        const method = allowed ? 'Fetch.continueRequest' : 'Fetch.failRequest'
-        const request = allowed
-          ? { requestId: params.requestId }
-          : { requestId: params.requestId, errorReason: 'BlockedByClient' }
-        void this.pipe.send(method, request, sessionId).catch(() => {})
-      })
-      await this.pipe.send('Fetch.enable', { patterns: [{ urlPattern: '*', requestStage: 'Request' }] }, sessionId)
-      await this.pipe.send('Network.setBypassServiceWorker', { bypass: true }, sessionId).catch(() => {})
-      await this.pipe.send('Emulation.setDeviceMetricsOverride', {
-        width: viewport.width, height: viewport.height, deviceScaleFactor: 1, mobile: false,
-        screenWidth: viewport.width, screenHeight: viewport.height,
-      }, sessionId)
-      const loaded = this.pipe.waitFor('Page.loadEventFired', sessionId)
-      const nav = await this.pipe.send('Page.navigate', { url }, sessionId)
-      if (nav.errorText) throw new Error(`Preview navigation failed: ${nav.errorText}`)
-      await loaded
-      await this.pipe.send('Runtime.evaluate', {
-        expression: 'document.fonts && document.fonts.ready', awaitPromise: true, returnByValue: true,
-      }, sessionId).catch(() => {})
-      if (auth) {
-        const deadline = Date.now() + AUTH_READY_TIMEOUT_MS
-        let ready = false
-        let readySince = 0
-        while (Date.now() < deadline) {
-          const state = await this.pipe.send('Runtime.evaluate', {
-            expression: `(() => {
-              if (document.querySelector('#invitation-room-title')) return true;
-              if (document.querySelector('#boot, .boot-loader')) return false;
-              const room = document.querySelector('[data-tp-preview-room-status]');
-              if (room?.dataset.tpPreviewRoomStatus === 'pending') return false;
-              const loading = [...document.querySelectorAll('span')].some((node) => /^(loading session|restoring terminals…|connecting(?:…|\.\.\.))$/i.test((node.textContent || '').trim()));
-              return !loading && (document.body?.innerText || '').trim().length > 1;
-            })()`,
-            returnByValue: true,
-          }, sessionId)
-          if (state.result?.value === true) {
-            if (!readySince) readySince = Date.now()
-            if (Date.now() - readySince >= 800) { ready = true; break }
-          } else readySince = 0
-          await new Promise((resolve) => setTimeout(resolve, 100))
-        }
-        if (!ready) {
-          const diagnostic = await this.pipe.send('Runtime.evaluate', {
-            expression: `(async () => {
-              let locks = { held: [], pending: [] };
-              try { locks = await navigator.locks.query(); } catch {}
-              return {
-                sessionPresent: !!localStorage.getItem(${JSON.stringify(auth.storageKey || '')}),
-                inlineBoot: !!document.querySelector('#boot, .boot-loader'),
-                loadingSession: [...document.querySelectorAll('span')].some((node) => (node.textContent || '').trim() === 'Loading session'),
-                connecting: [...document.querySelectorAll('span')].some((node) => (node.textContent || '').trim().toLowerCase() === 'connecting…'),
-                invitation: !!document.querySelector('#invitation-room-title'),
-                roomStatus: document.querySelector('[data-tp-preview-room-status]')?.dataset.tpPreviewRoomStatus || null,
-                heldLocks: locks.held?.length || 0,
-                pendingLocks: locks.pending?.length || 0,
-              };
-            })()`,
-            awaitPromise: true,
-            returnByValue: true,
-          }, sessionId).catch(() => ({ result: { value: {} } }))
-          const d = diagnostic.result?.value || {}
-          throw new Error(`Authenticated preview did not leave its loading state within 15 seconds (session=${d.sessionPresent ? 'present' : 'missing'}, inlineBoot=${d.inlineBoot ? 'yes' : 'no'}, loadingSession=${d.loadingSession ? 'yes' : 'no'}, connecting=${d.connecting ? 'yes' : 'no'}, roomStatus=${d.roomStatus || 'none'}, authLocks=${d.heldLocks || 0}/${d.pendingLocks || 0}, invitation=${d.invitation ? 'yes' : 'no'}, reads=${authResponses.join(',') || 'none'}, local=${localResponses.join(',') || 'none'}, runtime=${runtimeExceptions.join(' | ') || 'none'}); no screenshot was created.`)
-        }
-      }
-      const settle = auth
-        ? Math.min(300, Math.max(0, Number(waitMs) || 0))
-        : Math.min(MAX_SETTLE_MS, Math.max(0, Number(waitMs) || 0))
-      if (settle) await new Promise((resolve) => setTimeout(resolve, settle))
-      return await fn({ pipe: this.pipe, sessionId })
-    } finally {
-      unsubscribeRequests?.()
-      unsubscribeResponses?.()
-      unsubscribeExceptions?.()
-      await this.pipe.send('Target.closeTarget', { targetId }).catch(() => {})
-    }
-  }
-
-  async renderedState(pipe, sessionId) {
-    const expression = `(() => {
-      const visible = (node) => {
-        if (!node) return false;
-        const style = getComputedStyle(node);
-        const rect = node.getBoundingClientRect();
-        return style.display !== 'none' && style.visibility !== 'hidden' && Number(style.opacity || 1) > 0 && rect.width > 0 && rect.height > 0;
-      };
-      const boot = document.querySelector('#boot');
-      const meaningful = [...document.querySelectorAll('main,article,section,img,video,canvas,svg,[role="dialog"],[role="main"],[role="img"]')]
-        .filter((node) => !node.closest('#boot') && visible(node));
-      return {
-        title: document.title || '', url: location.href,
-        hasBody: !!document.body,
-        textLength: (document.body?.innerText || '').trim().length,
-        meaningfulVisualCount: meaningful.length,
-        visibleBoot: visible(boot),
-        visibleLoading: [...document.querySelectorAll('span')].some((node) => {
-          const text = (node.textContent || '').trim();
-          return visible(node) && /^(loading session|restoring terminals…|connecting(?:…|\.\.\.))$/i.test(text);
-        }),
-        signedOutInvite: !!document.querySelector('#invitation-room-title'),
-        prerenderGeo: !!document.querySelector('[data-prerender="geo"]'),
-      };
-    })()`
-    const result = await pipe.send('Runtime.evaluate', { expression, returnByValue: true }, sessionId)
-    if (result.exceptionDetails) throw new Error('Could not inspect the rendered preview state.')
-    return result.result?.value || null
-  }
-
-  async freezeCurrentPage(pipe, sessionId) {
-    // Freeze the rendered DOM, not the build entry document. A Vite/React entry
-    // depends on root-relative chunks and often boots to an empty shell in a
-    // sandboxed srcDoc; the settled DOM plus same-origin CSS/assets is portable.
-    const expression = `(async () => {
-      const clone = document.documentElement.cloneNode(true);
-      clone.querySelectorAll('script,link[rel="modulepreload"],link[rel="preload"]').forEach((node) => node.remove());
-      clone.querySelectorAll('*').forEach((node) => {
-        for (const attr of [...node.attributes]) if (/^on/i.test(attr.name)) node.removeAttribute(attr.name);
-        if (node instanceof HTMLInputElement) node.removeAttribute('value');
-        if (node instanceof HTMLTextAreaElement) node.textContent = '';
-      });
-      const css = [];
-      for (const sheet of [...document.styleSheets]) {
-        try { css.push([...sheet.cssRules].map((rule) => rule.cssText).join('\\n')); } catch {}
-      }
-      clone.querySelectorAll('style,link[rel="stylesheet"]').forEach((node) => node.remove());
-      const head = clone.querySelector('head') || clone.insertBefore(document.createElement('head'), clone.firstChild);
-      const style = document.createElement('style');
-      style.setAttribute('data-thinkpool-snapshot', '');
-      style.textContent = css.join('\\n');
-      head.appendChild(style);
-
-      const assetUrls = new Set();
-      const remember = (raw) => {
-        if (!raw || /^(data:|blob:|#)/i.test(raw)) return;
-        try {
-          const absolute = new URL(raw, location.href);
-          if (absolute.origin === location.origin) assetUrls.add(absolute.href);
-        } catch {}
-      };
-      clone.querySelectorAll('[src],[poster]').forEach((node) => {
-        remember(node.getAttribute('src'));
-        remember(node.getAttribute('poster'));
-      });
-      for (const match of style.textContent.matchAll(/url\\(\\s*(['"]?)([^'"\\)]+)\\1\\s*\\)/gi)) remember(match[2]);
-
-      const replacements = new Map();
-      let inlinedBytes = 0;
-      for (const absolute of assetUrls) {
-        try {
-          const response = await fetch(absolute);
-          const buffer = await response.arrayBuffer();
-          if (!response.ok || buffer.byteLength > 512000 || inlinedBytes + buffer.byteLength > 1000000) continue;
-          const bytes = new Uint8Array(buffer);
-          let binary = '';
-          for (let offset = 0; offset < bytes.length; offset += 0x8000) binary += String.fromCharCode(...bytes.subarray(offset, offset + 0x8000));
-          replacements.set(absolute, 'data:' + (response.headers.get('content-type') || 'application/octet-stream') + ';base64,' + btoa(binary));
-          inlinedBytes += buffer.byteLength;
-        } catch {}
-      }
-      const replaceAsset = (raw) => {
-        try { return replacements.get(new URL(raw, location.href).href) || raw; } catch { return raw; }
-      };
-      clone.querySelectorAll('[src],[poster]').forEach((node) => {
-        for (const name of ['src', 'poster']) if (node.hasAttribute(name)) node.setAttribute(name, replaceAsset(node.getAttribute(name)));
-        node.removeAttribute('srcset');
-      });
-      style.textContent = style.textContent.replace(/url\\(\\s*(['"]?)([^'"\\)]+)\\1\\s*\\)/gi, (_all, quote, raw) => 'url("' + replaceAsset(raw) + '")');
-      return '<!doctype html>\\n' + clone.outerHTML;
-    })()`
-    const result = await pipe.send('Runtime.evaluate', { expression, awaitPromise: true, returnByValue: true }, sessionId)
-    if (result.exceptionDetails || typeof result.result?.value !== 'string') {
-      const detail = result.exceptionDetails?.exception?.description || result.exceptionDetails?.text || result.result?.description
-      throw new Error(`Could not freeze the rendered preview for Design${detail ? `: ${detail}` : '.'}`)
-    }
-    const html = result.result.value
-    if (!html.trim() || Buffer.byteLength(html) > MAX_PORTABLE_SNAPSHOT_BYTES) throw new Error('The rendered preview is too large to make editable.')
-    return html
-  }
-
-  async capture({ url, viewport, fullPage = true, waitMs = 300, includeSnapshot = false, auth = null }) {
-    return this.withPage({ url, viewport, waitMs, auth }, async ({ pipe, sessionId }) => {
-      const beforeState = await this.renderedState(pipe, sessionId)
-      const metrics = await pipe.send('Page.getLayoutMetrics', {}, sessionId)
-      const contentHeight = Math.ceil(metrics.cssContentSize?.height || viewport.height)
-      const height = fullPage ? Math.min(MAX_CAPTURE_HEIGHT, Math.max(viewport.height, contentHeight)) : viewport.height
-      const result = await pipe.send('Page.captureScreenshot', {
-        format: 'png', fromSurface: true, captureBeyondViewport: true,
-        clip: { x: 0, y: 0, width: viewport.width, height, scale: 1 },
-      }, sessionId)
-      const afterState = await this.renderedState(pipe, sessionId)
-      const snapshot = includeSnapshot ? await this.freezeCurrentPage(pipe, sessionId) : null
-      return { png: Buffer.from(result.data, 'base64'), width: viewport.width, height, contentHeight, capped: contentHeight > MAX_CAPTURE_HEIGHT, beforeState, afterState, snapshot }
-    })
-  }
-
-  async snapshot({ url, viewport = DEFAULT_VIEWPORTS.desktop, waitMs = 300, auth = null }) {
-    return this.withPage({ url, viewport, waitMs, auth }, ({ pipe, sessionId }) => this.freezeCurrentPage(pipe, sessionId))
-  }
-
-  async inspect({ url, viewport = DEFAULT_VIEWPORTS.mobile, selector, waitMs = 300, auth = null }) {
-    return this.withPage({ url, viewport, waitMs, auth }, async ({ pipe, sessionId }) => {
-      const expression = `(() => {
-        const selector = ${JSON.stringify(selector || null)};
-        const el = selector ? document.querySelector(selector) : null;
-        const r = el && el.getBoundingClientRect();
-        return {
-          title: document.title, url: location.href,
-          viewport: { width: innerWidth, height: innerHeight, dpr: devicePixelRatio },
-          document: { width: Math.max(document.documentElement.scrollWidth, document.body?.scrollWidth || 0), height: Math.max(document.documentElement.scrollHeight, document.body?.scrollHeight || 0) },
-          selector: selector ? { query: selector, found: !!el, tag: el?.tagName || null, text: el?.innerText?.slice(0, 2000) || '', rect: r ? { x:r.x, y:r.y, width:r.width, height:r.height } : null } : null,
-          text: document.body?.innerText?.slice(0, 12000) || ''
-        };
-      })()`
-      const result = await pipe.send('Runtime.evaluate', { expression, returnByValue: true }, sessionId)
-      if (result.exceptionDetails) throw new Error('DOM inspection failed in the preview page.')
-      return result.result?.value || {}
-    })
-  }
-
-  async close() {
-    const child = this.child
-    const pipe = this.pipe
-    this.child = null
-    this.pipe = null
-    if (pipe) await pipe.send('Browser.close').catch(() => {})
-    if (child && child.exitCode == null) { try { child.kill('SIGTERM') } catch { /* already gone */ } }
-    if (this.profileDir) await fsp.rm(this.profileDir, { recursive: true, force: true }).catch(() => {})
-    this.profileDir = null
-  }
-}
-
-export const sharedViewportBrowser = new CdpBrowser()
-
-export class ViewportManager {
-  constructor({ workspaceRoot, ownerId, roomCode, outbox, browser = sharedViewportBrowser, startPreviewImpl = startPreview, designContext = null, authContext = null } = {}) {
-    this.workspaceRoot = path.resolve(workspaceRoot || process.cwd())
-    this.ownerId = ownerId || randomUUID()
-    this.roomCode = typeof roomCode === 'string' && roomCode.trim() ? roomCode.trim() : null
-    this.outbox = outbox || path.join(os.tmpdir(), 'thinkpool-viewport-captures', this.ownerId)
-    this.browser = browser
-    this.startPreviewImpl = startPreviewImpl
-    this.designContext = typeof designContext === 'function' ? designContext : () => null
-    this.authContext = typeof authContext === 'function' ? authContext : () => null
-    this.previewId = `viewport:${this.ownerId}`
-    this.preview = null
-    this.root = null
-  }
-
-  setWorkspaceRoot(workspaceRoot) {
-    if (!workspaceRoot) throw new Error('A lane workspace is required.')
-    this.workspaceRoot = path.resolve(workspaceRoot)
-    return this.workspaceRoot
-  }
-
-  async start({ root = 'dist' } = {}) {
-    const resolved = await resolveContainedRoot(this.workspaceRoot, root)
-    await this.stop()
-    const preview = await this.startPreviewImpl({ dir: resolved, host: '127.0.0.1', port: 0, id: this.previewId })
-    const parsed = new URL(preview.url)
-    if (parsed.hostname !== '127.0.0.1' && parsed.hostname !== 'localhost') {
-      await preview.stop?.()
-      throw new Error('Preview server did not bind to loopback.')
-    }
-    this.preview = preview
-    this.root = resolved
-    return { url: preview.url, root: resolved }
-  }
-
-  requirePreview() {
-    if (!this.preview?.url) throw new Error('No preview is running. Call preview_start after building the app.')
-    return this.preview
-  }
-
-  defaultRoute() {
-    return this.roomCode ? `/?r=${encodeURIComponent(this.roomCode)}` : '/'
-  }
-
-  resolveRoute(route) {
-    return normalizeRoute(route ?? this.defaultRoute())
-  }
-
-  pageUrl(route) {
-    const preview = this.requirePreview()
-    return new URL(normalizeRoute(route), preview.url).href
-  }
-
-  async previewAuth(route) {
-    if (!routeNeedsPreviewAuth(route)) return null
-    let context = this.authContext() || {}
-    if (!context.accessToken) return null
-    const deadline = Date.now() + AUTH_READY_TIMEOUT_MS
-    for (;;) {
-      const auth = previewAuthBootstrap({ ...context, minTtlSec: AUTH_FRESH_MARGIN_SEC })
-      if (auth) return auth
-      if (Date.now() >= deadline) throw new Error('The bridge account token did not refresh in time for an authenticated preview; no screenshot was created.')
-      await new Promise((resolve) => setTimeout(resolve, 250))
-      context = this.authContext() || {}
-    }
-  }
-
-  async capture({ route, viewports = 'both', title = 'Viewport capture', fullPage = true, waitMs = 300, card = false } = {}) {
-    const normalizedRoute = this.resolveRoute(route)
-    const url = this.pageUrl(normalizedRoute)
-    const names = viewports === 'both' ? ['desktop', 'mobile'] : [viewports]
-    if (names.some((name) => !DEFAULT_VIEWPORTS[name])) throw new Error('viewports must be "both", "desktop", or "mobile".')
-    const slug = `${safeSlug(title)}-${Date.now().toString(36)}`
-    const workspace = await fsp.realpath(this.workspaceRoot)
-    const previewRoot = path.relative(workspace, this.root) || '.'
-    const captureKey = JSON.stringify([previewRoot, normalizedRoute])
-    const active = this.designContext() || null
-    const correlation = active?.captureKey === captureKey
-      ? { designRequestId: active.requestId, parentRevision: active.parentRevision }
-      : {}
-    // A correlated Design revision is already an explicit room deliverable;
-    // ordinary verification still needs the caller to opt in with card=true.
-    const cardRequested = card === true || !!correlation.designRequestId
-    const captures = {}
-    for (const name of names) {
-      captures[name] = await this.browser.capture({
-        url, viewport: DEFAULT_VIEWPORTS[name], fullPage, waitMs,
-        includeSnapshot: cardRequested && name === (names.includes('desktop') ? 'desktop' : names[0]),
-        auth: await this.previewAuth(normalizedRoute),
-      })
-    }
-    // The screenshot and readiness state must come from the SAME page. The old
-    // preflight loaded one page and then opened fresh pages for each PNG;
-    // production proved the preflight could see marketing content while the
-    // screenshot caught only the boot spinner.
-    const cardReady = cardRequested && !!(captures.desktop && captures.mobile)
-    if (cardReady || routeNeedsPreviewAuth(normalizedRoute)) {
-      for (const [name, capture] of Object.entries(captures)) {
-        const issue = previewArtifactIssue(normalizedRoute, capture)
-        if (issue) throw new Error(`${name} preview rejected: ${issue} No screenshot or mockup card was created.`)
-      }
-    }
-    const snapshot = captures.desktop?.snapshot || captures.mobile?.snapshot || null
-    if (cardReady && (typeof snapshot !== 'string' || !snapshot.trim())) {
-      throw new Error('The deliverable could not freeze its rendered source. No mockup card was created.')
-    }
-    await fsp.mkdir(this.outbox, { recursive: true })
-    for (const [name, capture] of Object.entries(captures)) {
-      capture.file = path.join(this.outbox, `${slug}--${name}.png`)
-      await fsp.writeFile(capture.file, capture.png)
-    }
-    const snapshotPath = cardReady ? path.join(this.outbox, `${slug}--source.html`) : null
-    if (snapshotPath) await fsp.writeFile(snapshotPath, snapshot)
-    let manifestPath = null
-    if (cardReady) {
-      const sourceMap = await resolvePreviewSourceMap(this.root)
-      const manifest = {
-        slug, title: String(title || 'Viewport capture').slice(0, 120),
-        desktop: captures.desktop.file, mobile: captures.mobile.file, ts: Date.now(),
-        sourceKind: 'preview', deliveryIntent: 'card', readinessValidated: true,
-        snapshot: snapshotPath, previewRoot, route: normalizedRoute, captureKey,
-        ...(sourceMap ? { sourceMap } : {}),
-        ...correlation,
-      }
-      manifestPath = path.join(this.outbox, `${slug}.json`)
-      const tmp = `${manifestPath}.tmp`
-      await fsp.writeFile(tmp, JSON.stringify(manifest))
-      await fsp.rename(tmp, manifestPath)
-    }
-    return { url, route: normalizedRoute, slug, manifestPath, captures, snapshotPath, cardReady }
-  }
-
-  async inspect({ route, viewport = 'mobile', selector, waitMs = 300 } = {}) {
-    if (!DEFAULT_VIEWPORTS[viewport]) throw new Error('viewport must be "desktop" or "mobile".')
-    const normalizedRoute = this.resolveRoute(route)
-    return this.browser.inspect({
-      url: this.pageUrl(normalizedRoute), viewport: DEFAULT_VIEWPORTS[viewport], selector, waitMs,
-      auth: await this.previewAuth(normalizedRoute),
-    })
-  }
-
-  async stop() {
-    const preview = this.preview || previews.get(this.previewId)
-    this.preview = null
-    this.root = null
-    if (preview?.stop) await preview.stop()
-  }
-}
-
-const textResult = (text) => ({ content: [{ type: 'text', text }] })
-const errorResult = (error) => textResult(`Viewport error: ${error?.message || error}`)
-
-export function createViewportTools({ tool, z, manager }) {
-  return [
-    tool(
-      'preview_start',
-      'Start a bridge-owned, read-only localhost preview for built files inside this lane workspace. Run the project build first. The default root is dist; pass another relative directory only when its index.html is the intended preview.',
-      { root: z.string().max(240).optional().describe('relative directory inside this lane workspace; default: dist') },
-      async (args) => {
-        try {
-          const started = await manager.start({ root: args?.root || 'dist' })
-          return textResult(`Preview ready from ${path.relative(manager.workspaceRoot, started.root) || '.'}. Use preview_capture to see desktop/mobile, or preview_inspect for DOM text and geometry.`)
-        } catch (error) { return errorResult(error) }
-      },
-    ),
-    tool(
-      'preview_capture',
-      'Capture this lane preview in a fresh isolated browser at exact desktop (1440×900) and mobile (390×844) CSS viewports. Omit path to preview the current authenticated room; pass / explicitly for the public landing page. Defaults to both and full-page. Captures are inline verification evidence by default. Room and protected routes automatically use the bridge account as a read-only authenticated visual harness; external REST writes, presence, and room broadcasts are blocked, apart from non-mutating roster/transcript snapshot requests. Set card=true only for a user-requested mockup or visual deliverable that should remain editable in the transcript; complete desktop+mobile settled content is then required and the card arrives after the final response.',
-      {
-        path: z.string().max(500).optional().describe('route within the preview; omit for the current authenticated room, or pass / for the public landing page; never a full URL'),
-        viewports: z.enum(['both', 'desktop', 'mobile']).optional(),
-        title: z.string().max(120).optional(),
-        fullPage: z.boolean().optional(),
-        card: z.boolean().optional().describe('default false; true only for an intentional user-facing mockup/Design deliverable'),
-        waitMs: z.number().int().min(0).max(MAX_SETTLE_MS).optional().describe('settle time after load, max 5000ms'),
-      },
-      async (args) => {
-        try {
-          const result = await manager.capture({
-            route: args?.path, viewports: args?.viewports || 'both', title: args?.title || 'Viewport capture',
-            fullPage: args?.fullPage !== false, waitMs: args?.waitMs ?? 300, card: args?.card === true,
-          })
-          const delivery = result.cardReady
-            ? 'The complete room preview card is queued after your final response.'
-            : 'This is verification evidence only; no room card was created.'
-          const content = [{ type: 'text', text: `Captured ${Object.keys(result.captures).join(' + ')} for ${result.route}. ${delivery}` }]
-          for (const [name, capture] of Object.entries(result.captures)) {
-            content.push({ type: 'text', text: `${name}: ${capture.width}×${capture.height}${capture.capped ? ' (height capped)' : ''}` })
-            content.push({ type: 'image', data: capture.png.toString('base64'), mimeType: 'image/png' })
-          }
-          return { content }
-        } catch (error) { return errorResult(error) }
-      },
-    ),
-    tool(
-      'preview_inspect',
-      'Inspect rendered DOM state in this lane preview at an exact desktop or mobile viewport. Omit path for the current authenticated room; pass / explicitly for the public landing page. Returns page text, document dimensions, and optional selector text/geometry without changing the page.',
-      {
-        path: z.string().max(500).optional().describe('route within the preview; omit for the current authenticated room, or pass / for the public landing page; never a full URL'),
-        viewport: z.enum(['desktop', 'mobile']).optional(),
-        selector: z.string().max(500).optional(),
-        waitMs: z.number().int().min(0).max(MAX_SETTLE_MS).optional(),
-      },
-      async (args) => {
-        try {
-          const result = await manager.inspect({ route: args?.path, viewport: args?.viewport || 'mobile', selector: args?.selector, waitMs: args?.waitMs ?? 300 })
-          return textResult(JSON.stringify(result, null, 2))
-        } catch (error) { return errorResult(error) }
-      },
-    ),
-    tool(
-      'preview_stop',
-      'Stop this lane\'s bridge-owned preview server and release its port.',
-      {},
-      async () => {
-        try { await manager.stop(); return textResult('Preview stopped.') }
-        catch (error) { return errorResult(error) }
-      },
-    ),
-  ]
-}
+import{spawn as e}from"node:child_process";import t from"node:fs";import r from"node:fs/promises";import o from"node:os";import n from"node:path";import{randomUUID as i}from"node:crypto";import{previews as s,startPreview as a}from"./flow-preview.mjs";import{DESIGN_SOURCE_MAP_RELATIVE as l,MAX_DESIGN_SOURCE_MAP_BYTES as c}from"./design-source-contract.mjs";export const DEFAULT_VIEWPORTS=Object.freeze({desktop:Object.freeze({width:1440,height:900}),mobile:Object.freeze({width:390,height:844})});const u=5e3,h=(e,t)=>{const r=n.relative(e,t);return""===r||!r.startsWith("..")&&!n.isAbsolute(r)};export async function resolveContainedRoot(e,o="dist"){if(!e)throw new Error("A lane workspace is required.");if(n.isAbsolute(o))throw new Error("Preview root must be relative to the lane workspace.");const i=await r.realpath(n.resolve(e)),s=n.resolve(i,o||"dist");let a;try{a=await r.realpath(s)}catch{throw new Error(`Preview root does not exist: ${o||"dist"}. Build the app first, or choose a directory containing index.html.`)}if(!h(i,a))throw new Error("Preview root escapes the lane workspace.");if(!(await r.stat(a)).isDirectory())throw new Error("Preview root must be a directory.");if(!t.existsSync(n.join(a,"index.html")))throw new Error(`No index.html found in preview root: ${o||"dist"}.`);return a}export async function resolvePreviewSourceMap(e){if(!e)return null;let t,o;try{t=await r.realpath(e),o=await r.realpath(n.join(t,l));const i=await r.stat(o);if(!i.isFile()||i.size<=0||i.size>c)return null}catch{return null}return h(t,o)?o:null}export function normalizeRoute(e="/"){const t=String(e||"/").trim();if(!t.startsWith("/")||t.startsWith("//"))throw new Error('Preview path must start with one "/" and cannot be a URL.');const r=new URL(t,"http://127.0.0.1");if("http://127.0.0.1"!==r.origin)throw new Error("Preview path cannot change the preview origin.");return`${r.pathname}${r.search}${r.hash}`}export function safeSlug(e="viewport"){return String(e||"viewport").toLowerCase().replace(/[^a-z0-9]+/g,"-").replace(/^-+|-+$/g,"").slice(0,56)||"viewport"}export function isSignedOutRoomPreview(e,t){return!!new URL(normalizeRoute(e),"http://127.0.0.1").searchParams.get("r")&&/\bid\s*=\s*["']invitation-room-title["']/i.test(String(t||""))}export function previewArtifactIssue(e,t){const r=new URL(normalizeRoute(e),"http://127.0.0.1"),o=e=>{if("string"!=typeof e||!e.trim())return null;try{const t=new URL(e,"http://127.0.0.1");return`${"/"===t.pathname?"/":t.pathname.replace(/\/+$/,"")}${t.search}`}catch{return null}},n=o(r.href),i="/code"===r.pathname||r.pathname.startsWith("/code/")||r.searchParams.has("r");for(const e of[t?.beforeState,t?.afterState]){if(!e)return"The captured page did not report settled rendered state.";const t=o(e.url);if(t&&t!==n)return`Preview navigated from ${n} to ${t}.`;if(e.signedOutInvite)return"Preview resolved to the signed-out room invitation instead of the authenticated Code room.";if(e.visibleBoot)return"Preview was still showing the application loading shell.";if(e.visibleLoading)return"Preview was still showing an application loading state.";if(i&&e.prerenderGeo)return"Preview resolved to the public marketing shell instead of the authenticated Code surface.";if(!e.hasBody||e.textLength<2&&e.meaningfulVisualCount<1)return"Preview rendered an empty page."}return null}export function routeNeedsPreviewAuth(e){const t=new URL(normalizeRoute(e),"http://127.0.0.1");return!!t.searchParams.get("r")||["/settings","/contacts","/code/link"].includes(t.pathname)}export function previewAuthBootstrap({accessToken:e,supabaseUrl:t,nowSec:r=Math.floor(Date.now()/1e3),minTtlSec:o=0}={}){const n=function(e){try{const t=String(e||"").split(".")[1];return t?JSON.parse(Buffer.from(t,"base64url").toString("utf8")):null}catch{return null}}(e);let i;try{i=new URL(t)}catch{return null}if(!e||"https:"!==i.protocol||!n?.sub||!n?.exp||n.exp-r<=o)return null;const s=i.hostname.split(".")[0];return s?{storageKey:`sb-${s}-auth-token`,allowedReadOrigins:[i.origin],allowedSocketOrigins:[`wss://${i.host}`],session:{access_token:e,refresh_token:"",expires_in:Math.max(1,n.exp-r)+3600,expires_at:n.exp+3600,token_type:"bearer",user:{id:n.sub,aud:n.aud||"authenticated",role:n.role||"authenticated",email:n.email||null,phone:n.phone||"",app_metadata:n.app_metadata||{},user_metadata:n.user_metadata||{},identities:[],created_at:n.created_at||new Date(1e3*r).toISOString(),updated_at:new Date(1e3*r).toISOString()}}}:null}export function findBrowserExecutable({env:e=process.env,platform:r=process.platform,exists:o=t.existsSync}={}){return[e.TP_BROWSER_PATH,"darwin"===r&&"/Applications/Google Chrome.app/Contents/MacOS/Google Chrome","darwin"===r&&"/Applications/Chromium.app/Contents/MacOS/Chromium","win32"===r&&e.PROGRAMFILES&&n.join(e.PROGRAMFILES,"Google","Chrome","Application","chrome.exe"),"win32"===r&&e["PROGRAMFILES(X86)"]&&n.join(e["PROGRAMFILES(X86)"],"Google","Chrome","Application","chrome.exe"),"linux"===r&&"/usr/bin/google-chrome","linux"===r&&"/usr/bin/google-chrome-stable","linux"===r&&"/usr/bin/chromium","linux"===r&&"/usr/bin/chromium-browser"].filter(Boolean).find(e=>{try{return o(e)}catch{return!1}})||null}class d{constructor(e,t=12e3){this.child=e,this.timeoutMs=t,this.nextId=1,this.buffer=Buffer.alloc(0),this.pending=new Map,this.waiters=new Set,this.subscribers=new Set,e.stdio[4].on("data",e=>this.onData(e)),e.once("exit",(e,t)=>this.failAll(new Error(`Chrome exited (${t||e||"unknown"}).`))),e.once("error",e=>this.failAll(e))}onData(e){for(this.buffer=Buffer.concat([this.buffer,e]);;){const e=this.buffer.indexOf(0);if(e<0)break;const t=this.buffer.subarray(0,e).toString("utf8");if(this.buffer=this.buffer.subarray(e+1),!t)continue;let r;try{r=JSON.parse(t)}catch{continue}if(r.id){const e=this.pending.get(r.id);if(!e)continue;clearTimeout(e.timer),this.pending.delete(r.id),r.error?e.reject(new Error(r.error.message||"Chrome DevTools error")):e.resolve(r.result||{});continue}for(const e of[...this.waiters])e.method===r.method&&(e.sessionId&&e.sessionId!==r.sessionId||e.predicate&&!e.predicate(r.params||{})||(clearTimeout(e.timer),this.waiters.delete(e),e.resolve(r.params||{})));for(const e of[...this.subscribers])if(e.method===r.method&&(!e.sessionId||e.sessionId===r.sessionId))try{e.handler(r.params||{})}catch{}}}failAll(e){for(const t of this.pending.values())clearTimeout(t.timer),t.reject(e);this.pending.clear();for(const t of this.waiters)clearTimeout(t.timer),t.reject(e);this.waiters.clear(),this.subscribers.clear()}send(e,t={},r){const o=this.nextId++;return new Promise((n,i)=>{const s=setTimeout(()=>{this.pending.delete(o),i(new Error(`Chrome timed out running ${e}.`))},this.timeoutMs);this.pending.set(o,{resolve:n,reject:i,timer:s});const a={id:o,method:e,params:t,...r?{sessionId:r}:{}};this.child.stdio[3].write(`${JSON.stringify(a)}\0`)})}waitFor(e,t,r){return new Promise((o,n)=>{const i={method:e,sessionId:t,predicate:r,resolve:o,reject:n,timer:null};i.timer=setTimeout(()=>{this.waiters.delete(i),n(new Error(`Chrome timed out waiting for ${e}.`))},this.timeoutMs),this.waiters.add(i)})}subscribe(e,t,r){const o={method:e,sessionId:t,handler:r};return this.subscribers.add(o),()=>this.subscribers.delete(o)}}export class CdpBrowser{constructor({executable:t,spawnImpl:r=e,timeoutMs:o=12e3}={}){this.executable=t||null,this.spawnImpl=r,this.timeoutMs=o,this.child=null,this.pipe=null,this.profileDir=null,this.starting=null,this.stderr=""}async ensureStarted(){if(!this.child||!this.pipe)return this.starting||(this.starting=this.start().finally(()=>{this.starting=null})),this.starting}async start(){const e=this.executable||findBrowserExecutable();if(!e)throw new Error("No supported Chrome/Chromium executable found. Install Google Chrome or set TP_BROWSER_PATH on the bridge host.");this.profileDir=await r.mkdtemp(n.join(o.tmpdir(),"thinkpool-viewport-"));const t=["--headless=new","--remote-debugging-pipe","--no-first-run","--no-default-browser-check","--disable-background-networking","--disable-component-update","--disable-sync","--disable-extensions","--disable-default-apps","--metrics-recording-only","--mute-audio","--hide-scrollbars",`--user-data-dir=${this.profileDir}`,"about:blank"],i=this.spawnImpl(e,t,{stdio:["ignore","ignore","pipe","pipe","pipe"]});this.child=i,i.stderr?.on("data",e=>{this.stderr=(this.stderr+e.toString("utf8")).slice(-4e3)}),this.pipe=new d(i,this.timeoutMs);try{await this.pipe.send("Browser.getVersion")}catch(e){await this.close();const t=this.stderr.trim().split("\n").slice(-2).join(" ");throw new Error(`Could not start Chrome for viewport capture: ${t||e.message}`)}}async withPage({url:e,viewport:t,waitMs:r=300,auth:o=null},n){await this.ensureStarted();const{targetId:i}=await this.pipe.send("Target.createTarget",{url:"about:blank"}),{sessionId:s}=await this.pipe.send("Target.attachToTarget",{targetId:i,flatten:!0});let a=null,l=null,c=null;const h=[],d=[],p=[];try{if(await this.pipe.send("Page.enable",{},s),await this.pipe.send("Runtime.enable",{},s),await this.pipe.send("Network.enable",{},s).catch(()=>{}),o?.storageKey&&o?.session){const e=`(() => { try { localStorage.setItem(${JSON.stringify(o.storageKey)}, ${JSON.stringify(JSON.stringify(o.session))}); window.__TP_READ_ONLY_PREVIEW__ = true; } catch {} })()`;await this.pipe.send("Page.addScriptToEvaluateOnNewDocument",{source:e},s)}const i=new URL(e).origin,w=new Set(o?.allowedReadOrigins||[]),m=new Set(o?.allowedSocketOrigins||[]);l=this.pipe.subscribe("Network.responseReceived",s,e=>{try{const t=new URL(e.response?.url||"");w.has(t.origin)&&h.length<20&&h.push(`${e.response?.status||0}:${t.pathname}`),t.origin===i&&d.length<20&&d.push(`${e.response?.status||0}:${t.pathname}`)}catch{}}),c=this.pipe.subscribe("Runtime.exceptionThrown",s,e=>{if(p.length>=5)return;const t=e.exceptionDetails?.exception?.description||e.exceptionDetails?.text||"runtime error";p.push(String(t).split("\n")[0].slice(0,180))}),a=this.pipe.subscribe("Fetch.requestPaused",s,e=>{let t=!1;try{const r=new URL(e.request?.url||""),o=String(e.request?.method||"GET").toUpperCase();t=r.origin===i||w.has(r.origin)&&["GET","HEAD","OPTIONS"].includes(o)||m.has(r.origin)&&"GET"===o}catch{t=!1}const r=t?"Fetch.continueRequest":"Fetch.failRequest",o=t?{requestId:e.requestId}:{requestId:e.requestId,errorReason:"BlockedByClient"};this.pipe.send(r,o,s).catch(()=>{})}),await this.pipe.send("Fetch.enable",{patterns:[{urlPattern:"*",requestStage:"Request"}]},s),await this.pipe.send("Network.setBypassServiceWorker",{bypass:!0},s).catch(()=>{}),await this.pipe.send("Emulation.setDeviceMetricsOverride",{width:t.width,height:t.height,deviceScaleFactor:1,mobile:!1,screenWidth:t.width,screenHeight:t.height},s);const f=this.pipe.waitFor("Page.loadEventFired",s),g=await this.pipe.send("Page.navigate",{url:e},s);if(g.errorText)throw new Error(`Preview navigation failed: ${g.errorText}`);if(await f,await this.pipe.send("Runtime.evaluate",{expression:"document.fonts && document.fonts.ready",awaitPromise:!0,returnByValue:!0},s).catch(()=>{}),o){const e=Date.now()+15e3;let t=!1,r=0;for(;Date.now()<e;){const e=await this.pipe.send("Runtime.evaluate",{expression:"(() => {\n              if (document.querySelector('#invitation-room-title')) return true;\n              if (document.querySelector('#boot, .boot-loader')) return false;\n              const room = document.querySelector('[data-tp-preview-room-status]');\n              if (room?.dataset.tpPreviewRoomStatus === 'pending') return false;\n              const loading = [...document.querySelectorAll('span')].some((node) => /^(loading session|restoring terminals…|connecting(?:…|...))$/i.test((node.textContent || '').trim()));\n              return !loading && (document.body?.innerText || '').trim().length > 1;\n            })()",returnByValue:!0},s);if(!0===e.result?.value){if(r||(r=Date.now()),Date.now()-r>=800){t=!0;break}}else r=0;await new Promise(e=>setTimeout(e,100))}if(!t){const e=await this.pipe.send("Runtime.evaluate",{expression:`(async () => {\n              let locks = { held: [], pending: [] };\n              try { locks = await navigator.locks.query(); } catch {}\n              return {\n                sessionPresent: !!localStorage.getItem(${JSON.stringify(o.storageKey||"")}),\n                inlineBoot: !!document.querySelector('#boot, .boot-loader'),\n                loadingSession: [...document.querySelectorAll('span')].some((node) => (node.textContent || '').trim() === 'Loading session'),\n                connecting: [...document.querySelectorAll('span')].some((node) => (node.textContent || '').trim().toLowerCase() === 'connecting…'),\n                invitation: !!document.querySelector('#invitation-room-title'),\n                roomStatus: document.querySelector('[data-tp-preview-room-status]')?.dataset.tpPreviewRoomStatus || null,\n                heldLocks: locks.held?.length || 0,\n                pendingLocks: locks.pending?.length || 0,\n              };\n            })()`,awaitPromise:!0,returnByValue:!0},s).catch(()=>({result:{value:{}}})),t=e.result?.value||{};throw new Error(`Authenticated preview did not leave its loading state within 15 seconds (session=${t.sessionPresent?"present":"missing"}, inlineBoot=${t.inlineBoot?"yes":"no"}, loadingSession=${t.loadingSession?"yes":"no"}, connecting=${t.connecting?"yes":"no"}, roomStatus=${t.roomStatus||"none"}, authLocks=${t.heldLocks||0}/${t.pendingLocks||0}, invitation=${t.invitation?"yes":"no"}, reads=${h.join(",")||"none"}, local=${d.join(",")||"none"}, runtime=${p.join(" | ")||"none"}); no screenshot was created.`)}}const b=o?Math.min(300,Math.max(0,Number(r)||0)):Math.min(u,Math.max(0,Number(r)||0));return b&&await new Promise(e=>setTimeout(e,b)),await n({pipe:this.pipe,sessionId:s})}finally{a?.(),l?.(),c?.(),await this.pipe.send("Target.closeTarget",{targetId:i}).catch(()=>{})}}async renderedState(e,t){const r=await e.send("Runtime.evaluate",{expression:"(() => {\n      const visible = (node) => {\n        if (!node) return false;\n        const style = getComputedStyle(node);\n        const rect = node.getBoundingClientRect();\n        return style.display !== 'none' && style.visibility !== 'hidden' && Number(style.opacity || 1) > 0 && rect.width > 0 && rect.height > 0;\n      };\n      const boot = document.querySelector('#boot');\n      const meaningful = [...document.querySelectorAll('main,article,section,img,video,canvas,svg,[role=\"dialog\"],[role=\"main\"],[role=\"img\"]')]\n        .filter((node) => !node.closest('#boot') && visible(node));\n      return {\n        title: document.title || '', url: location.href,\n        hasBody: !!document.body,\n        textLength: (document.body?.innerText || '').trim().length,\n        meaningfulVisualCount: meaningful.length,\n        visibleBoot: visible(boot),\n        visibleLoading: [...document.querySelectorAll('span')].some((node) => {\n          const text = (node.textContent || '').trim();\n          return visible(node) && /^(loading session|restoring terminals…|connecting(?:…|...))$/i.test(text);\n        }),\n        signedOutInvite: !!document.querySelector('#invitation-room-title'),\n        prerenderGeo: !!document.querySelector('[data-prerender=\"geo\"]'),\n      };\n    })()",returnByValue:!0},t);if(r.exceptionDetails)throw new Error("Could not inspect the rendered preview state.");return r.result?.value||null}async freezeCurrentPage(e,t){const r=await e.send("Runtime.evaluate",{expression:"(async () => {\n      const clone = document.documentElement.cloneNode(true);\n      clone.querySelectorAll('script,link[rel=\"modulepreload\"],link[rel=\"preload\"]').forEach((node) => node.remove());\n      clone.querySelectorAll('*').forEach((node) => {\n        for (const attr of [...node.attributes]) if (/^on/i.test(attr.name)) node.removeAttribute(attr.name);\n        if (node instanceof HTMLInputElement) node.removeAttribute('value');\n        if (node instanceof HTMLTextAreaElement) node.textContent = '';\n      });\n      const css = [];\n      for (const sheet of [...document.styleSheets]) {\n        try { css.push([...sheet.cssRules].map((rule) => rule.cssText).join('\\n')); } catch {}\n      }\n      clone.querySelectorAll('style,link[rel=\"stylesheet\"]').forEach((node) => node.remove());\n      const head = clone.querySelector('head') || clone.insertBefore(document.createElement('head'), clone.firstChild);\n      const style = document.createElement('style');\n      style.setAttribute('data-thinkpool-snapshot', '');\n      style.textContent = css.join('\\n');\n      head.appendChild(style);\n\n      const assetUrls = new Set();\n      const remember = (raw) => {\n        if (!raw || /^(data:|blob:|#)/i.test(raw)) return;\n        try {\n          const absolute = new URL(raw, location.href);\n          if (absolute.origin === location.origin) assetUrls.add(absolute.href);\n        } catch {}\n      };\n      clone.querySelectorAll('[src],[poster]').forEach((node) => {\n        remember(node.getAttribute('src'));\n        remember(node.getAttribute('poster'));\n      });\n      for (const match of style.textContent.matchAll(/url\\(\\s*(['\"]?)([^'\"\\)]+)\\1\\s*\\)/gi)) remember(match[2]);\n\n      const replacements = new Map();\n      let inlinedBytes = 0;\n      for (const absolute of assetUrls) {\n        try {\n          const response = await fetch(absolute);\n          const buffer = await response.arrayBuffer();\n          if (!response.ok || buffer.byteLength > 512000 || inlinedBytes + buffer.byteLength > 1000000) continue;\n          const bytes = new Uint8Array(buffer);\n          let binary = '';\n          for (let offset = 0; offset < bytes.length; offset += 0x8000) binary += String.fromCharCode(...bytes.subarray(offset, offset + 0x8000));\n          replacements.set(absolute, 'data:' + (response.headers.get('content-type') || 'application/octet-stream') + ';base64,' + btoa(binary));\n          inlinedBytes += buffer.byteLength;\n        } catch {}\n      }\n      const replaceAsset = (raw) => {\n        try { return replacements.get(new URL(raw, location.href).href) || raw; } catch { return raw; }\n      };\n      clone.querySelectorAll('[src],[poster]').forEach((node) => {\n        for (const name of ['src', 'poster']) if (node.hasAttribute(name)) node.setAttribute(name, replaceAsset(node.getAttribute(name)));\n        node.removeAttribute('srcset');\n      });\n      style.textContent = style.textContent.replace(/url\\(\\s*(['\"]?)([^'\"\\)]+)\\1\\s*\\)/gi, (_all, quote, raw) => 'url(\"' + replaceAsset(raw) + '\")');\n      return '<!doctype html>\\n' + clone.outerHTML;\n    })()",awaitPromise:!0,returnByValue:!0},t);if(r.exceptionDetails||"string"!=typeof r.result?.value){const e=r.exceptionDetails?.exception?.description||r.exceptionDetails?.text||r.result?.description;throw new Error("Could not freeze the rendered preview for Design"+(e?`: ${e}`:"."))}const o=r.result.value;if(!o.trim()||Buffer.byteLength(o)>19e5)throw new Error("The rendered preview is too large to make editable.");return o}async capture({url:e,viewport:t,fullPage:r=!0,waitMs:o=300,includeSnapshot:n=!1,auth:i=null}){return this.withPage({url:e,viewport:t,waitMs:o,auth:i},async({pipe:e,sessionId:o})=>{const i=await this.renderedState(e,o),s=await e.send("Page.getLayoutMetrics",{},o),a=Math.ceil(s.cssContentSize?.height||t.height),l=r?Math.min(2e4,Math.max(t.height,a)):t.height,c=await e.send("Page.captureScreenshot",{format:"png",fromSurface:!0,captureBeyondViewport:!0,clip:{x:0,y:0,width:t.width,height:l,scale:1}},o),u=await this.renderedState(e,o),h=n?await this.freezeCurrentPage(e,o):null;return{png:Buffer.from(c.data,"base64"),width:t.width,height:l,contentHeight:a,capped:a>2e4,beforeState:i,afterState:u,snapshot:h}})}async snapshot({url:e,viewport:t=DEFAULT_VIEWPORTS.desktop,waitMs:r=300,auth:o=null}){return this.withPage({url:e,viewport:t,waitMs:r,auth:o},({pipe:e,sessionId:t})=>this.freezeCurrentPage(e,t))}async inspect({url:e,viewport:t=DEFAULT_VIEWPORTS.mobile,selector:r,waitMs:o=300,auth:n=null}){return this.withPage({url:e,viewport:t,waitMs:o,auth:n},async({pipe:e,sessionId:t})=>{const o=`(() => {\n        const selector = ${JSON.stringify(r||null)};\n        const el = selector ? document.querySelector(selector) : null;\n        const r = el && el.getBoundingClientRect();\n        return {\n          title: document.title, url: location.href,\n          viewport: { width: innerWidth, height: innerHeight, dpr: devicePixelRatio },\n          document: { width: Math.max(document.documentElement.scrollWidth, document.body?.scrollWidth || 0), height: Math.max(document.documentElement.scrollHeight, document.body?.scrollHeight || 0) },\n          selector: selector ? { query: selector, found: !!el, tag: el?.tagName || null, text: el?.innerText?.slice(0, 2000) || '', rect: r ? { x:r.x, y:r.y, width:r.width, height:r.height } : null } : null,\n          text: document.body?.innerText?.slice(0, 12000) || ''\n        };\n      })()`,n=await e.send("Runtime.evaluate",{expression:o,returnByValue:!0},t);if(n.exceptionDetails)throw new Error("DOM inspection failed in the preview page.");return n.result?.value||{}})}async close(){const e=this.child,t=this.pipe;if(this.child=null,this.pipe=null,t&&await t.send("Browser.close").catch(()=>{}),e&&null==e.exitCode)try{e.kill("SIGTERM")}catch{}this.profileDir&&await r.rm(this.profileDir,{recursive:!0,force:!0}).catch(()=>{}),this.profileDir=null}}export const sharedViewportBrowser=new CdpBrowser;export class ViewportManager{constructor({workspaceRoot:e,ownerId:t,roomCode:r,outbox:s,browser:l=sharedViewportBrowser,startPreviewImpl:c=a,designContext:u=null,authContext:h=null}={}){this.workspaceRoot=n.resolve(e||process.cwd()),this.ownerId=t||i(),this.roomCode="string"==typeof r&&r.trim()?r.trim():null,this.outbox=s||n.join(o.tmpdir(),"thinkpool-viewport-captures",this.ownerId),this.browser=l,this.startPreviewImpl=c,this.designContext="function"==typeof u?u:()=>null,this.authContext="function"==typeof h?h:()=>null,this.previewId=`viewport:${this.ownerId}`,this.preview=null,this.root=null}setWorkspaceRoot(e){if(!e)throw new Error("A lane workspace is required.");return this.workspaceRoot=n.resolve(e),this.workspaceRoot}async start({root:e="dist"}={}){const t=await resolveContainedRoot(this.workspaceRoot,e);await this.stop();const r=await this.startPreviewImpl({dir:t,host:"127.0.0.1",port:0,id:this.previewId}),o=new URL(r.url);if("127.0.0.1"!==o.hostname&&"localhost"!==o.hostname)throw await(r.stop?.()),new Error("Preview server did not bind to loopback.");return this.preview=r,this.root=t,{url:r.url,root:t}}requirePreview(){if(!this.preview?.url)throw new Error("No preview is running. Call preview_start after building the app.");return this.preview}defaultRoute(){return this.roomCode?`/?r=${encodeURIComponent(this.roomCode)}`:"/"}resolveRoute(e){return normalizeRoute(e??this.defaultRoute())}pageUrl(e){const t=this.requirePreview();return new URL(normalizeRoute(e),t.url).href}async previewAuth(e){if(!routeNeedsPreviewAuth(e))return null;let t=this.authContext()||{};if(!t.accessToken)return null;const r=Date.now()+15e3;for(;;){const e=previewAuthBootstrap({...t,minTtlSec:30});if(e)return e;if(Date.now()>=r)throw new Error("The bridge account token did not refresh in time for an authenticated preview; no screenshot was created.");await new Promise(e=>setTimeout(e,250)),t=this.authContext()||{}}}async capture({route:e,viewports:t="both",title:o="Viewport capture",fullPage:i=!0,waitMs:s=300,card:a=!1}={}){const l=this.resolveRoute(e),c=this.pageUrl(l),u="both"===t?["desktop","mobile"]:[t];if(u.some(e=>!DEFAULT_VIEWPORTS[e]))throw new Error('viewports must be "both", "desktop", or "mobile".');const h=`${safeSlug(o)}-${Date.now().toString(36)}`,d=await r.realpath(this.workspaceRoot),p=n.relative(d,this.root)||".",w=JSON.stringify([p,l]),m=this.designContext()||null,f=m?.captureKey===w?{designRequestId:m.requestId,parentRevision:m.parentRevision}:{},g=!0===a||!!f.designRequestId,b={};for(const e of u)b[e]=await this.browser.capture({url:c,viewport:DEFAULT_VIEWPORTS[e],fullPage:i,waitMs:s,includeSnapshot:g&&e===(u.includes("desktop")?"desktop":u[0]),auth:await this.previewAuth(l)});const v=g&&!(!b.desktop||!b.mobile);if(v||routeNeedsPreviewAuth(l))for(const[e,t]of Object.entries(b)){const r=previewArtifactIssue(l,t);if(r)throw new Error(`${e} preview rejected: ${r} No screenshot or mockup card was created.`)}const y=b.desktop?.snapshot||b.mobile?.snapshot||null;if(v&&("string"!=typeof y||!y.trim()))throw new Error("The deliverable could not freeze its rendered source. No mockup card was created.");await r.mkdir(this.outbox,{recursive:!0});for(const[e,t]of Object.entries(b))t.file=n.join(this.outbox,`${h}--${e}.png`),await r.writeFile(t.file,t.png);const x=v?n.join(this.outbox,`${h}--source.html`):null;x&&await r.writeFile(x,y);let S=null;if(v){const e=await resolvePreviewSourceMap(this.root),t={slug:h,title:String(o||"Viewport capture").slice(0,120),desktop:b.desktop.file,mobile:b.mobile.file,ts:Date.now(),sourceKind:"preview",deliveryIntent:"card",readinessValidated:!0,snapshot:x,previewRoot:p,route:l,captureKey:w,...e?{sourceMap:e}:{},...f};S=n.join(this.outbox,`${h}.json`);const i=`${S}.tmp`;await r.writeFile(i,JSON.stringify(t)),await r.rename(i,S)}return{url:c,route:l,slug:h,manifestPath:S,captures:b,snapshotPath:x,cardReady:v}}async inspect({route:e,viewport:t="mobile",selector:r,waitMs:o=300}={}){if(!DEFAULT_VIEWPORTS[t])throw new Error('viewport must be "desktop" or "mobile".');const n=this.resolveRoute(e);return this.browser.inspect({url:this.pageUrl(n),viewport:DEFAULT_VIEWPORTS[t],selector:r,waitMs:o,auth:await this.previewAuth(n)})}async stop(){const e=this.preview||s.get(this.previewId);this.preview=null,this.root=null,e?.stop&&await e.stop()}}const p=e=>({content:[{type:"text",text:e}]}),w=e=>p(`Viewport error: ${e?.message||e}`);export function createViewportTools({tool:e,z:t,manager:r}){return[e("preview_start","Start a bridge-owned, read-only localhost preview for built files inside this lane workspace. Run the project build first. The default root is dist; pass another relative directory only when its index.html is the intended preview.",{root:t.string().max(240).optional().describe("relative directory inside this lane workspace; default: dist")},async e=>{try{const t=await r.start({root:e?.root||"dist"});return p(`Preview ready from ${n.relative(r.workspaceRoot,t.root)||"."}. Use preview_capture to see desktop/mobile, or preview_inspect for DOM text and geometry.`)}catch(e){return w(e)}}),e("preview_capture","Capture this lane preview in a fresh isolated browser at exact desktop (1440×900) and mobile (390×844) CSS viewports. Omit path to preview the current authenticated room; pass / explicitly for the public landing page. Defaults to both and full-page. Captures are inline verification evidence by default. Room and protected routes automatically use the bridge account as a read-only authenticated visual harness; external REST writes, presence, and room broadcasts are blocked, apart from non-mutating roster/transcript snapshot requests. Set card=true only for a user-requested mockup or visual deliverable that should remain editable in the transcript; complete desktop+mobile settled content is then required and the card arrives after the final response.",{path:t.string().max(500).optional().describe("route within the preview; omit for the current authenticated room, or pass / for the public landing page; never a full URL"),viewports:t.enum(["both","desktop","mobile"]).optional(),title:t.string().max(120).optional(),fullPage:t.boolean().optional(),card:t.boolean().optional().describe("default false; true only for an intentional user-facing mockup/Design deliverable"),waitMs:t.number().int().min(0).max(u).optional().describe("settle time after load, max 5000ms")},async e=>{try{const t=await r.capture({route:e?.path,viewports:e?.viewports||"both",title:e?.title||"Viewport capture",fullPage:!1!==e?.fullPage,waitMs:e?.waitMs??300,card:!0===e?.card}),o=t.cardReady?"The complete room preview card is queued after your final response.":"This is verification evidence only; no room card was created.",n=[{type:"text",text:`Captured ${Object.keys(t.captures).join(" + ")} for ${t.route}. ${o}`}];for(const[e,r]of Object.entries(t.captures))n.push({type:"text",text:`${e}: ${r.width}×${r.height}${r.capped?" (height capped)":""}`}),n.push({type:"image",data:r.png.toString("base64"),mimeType:"image/png"});return{content:n}}catch(e){return w(e)}}),e("preview_inspect","Inspect rendered DOM state in this lane preview at an exact desktop or mobile viewport. Omit path for the current authenticated room; pass / explicitly for the public landing page. Returns page text, document dimensions, and optional selector text/geometry without changing the page.",{path:t.string().max(500).optional().describe("route within the preview; omit for the current authenticated room, or pass / for the public landing page; never a full URL"),viewport:t.enum(["desktop","mobile"]).optional(),selector:t.string().max(500).optional(),waitMs:t.number().int().min(0).max(u).optional()},async e=>{try{const t=await r.inspect({route:e?.path,viewport:e?.viewport||"mobile",selector:e?.selector,waitMs:e?.waitMs??300});return p(JSON.stringify(t,null,2))}catch(e){return w(e)}}),e("preview_stop","Stop this lane's bridge-owned preview server and release its port.",{},async()=>{try{return await r.stop(),p("Preview stopped.")}catch(e){return w(e)}})]}