npm - ugly-app - Versions diffs - 0.1.859 → 0.1.861 - Mend

ugly-app 0.1.859 → 0.1.861

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (30) hide show

package/dist/cli/version.d.ts +1 -1
package/dist/cli/version.js +1 -1
package/dist/playwright/dev-auth.d.ts +29 -0
package/dist/playwright/dev-auth.d.ts.map +1 -0
package/dist/playwright/dev-auth.js +35 -0
package/dist/playwright/dev-auth.js.map +1 -0
package/dist/playwright/index.d.ts +4 -0
package/dist/playwright/index.d.ts.map +1 -1
package/dist/playwright/index.js +2 -0
package/dist/playwright/index.js.map +1 -1
package/dist/playwright/real-native.d.ts +60 -0
package/dist/playwright/real-native.d.ts.map +1 -0
package/dist/playwright/real-native.js +178 -0
package/dist/playwright/real-native.js.map +1 -0
package/dist/server/sqlite/SqlitePipeline.d.ts.map +1 -1
package/dist/server/sqlite/SqlitePipeline.js +44 -0
package/dist/server/sqlite/SqlitePipeline.js.map +1 -1
package/dist/shared/menuChrome.d.ts +22 -0
package/dist/shared/menuChrome.d.ts.map +1 -0
package/dist/shared/menuChrome.js +47 -0
package/dist/shared/menuChrome.js.map +1 -0
package/package.json +2 -1
package/src/cli/version.ts +1 -1
package/src/playwright/dev-auth.ts +46 -0
package/src/playwright/index.ts +4 -0
package/src/playwright/real-native.ts +219 -0
package/src/server/sqlite/SqlitePipeline.test.ts +37 -0
package/src/server/sqlite/SqlitePipeline.ts +42 -0
package/src/shared/menuChrome.ts +50 -0
package/templates/.claude/skills/eval-swarm/SKILL.md +129 -3

package/dist/cli/version.d.ts CHANGED Viewed

@@ -1,2 +1,2 @@
-export declare const CLI_VERSION = "0.1.859";
+export declare const CLI_VERSION = "0.1.861";
 //# sourceMappingURL=version.d.ts.map

package/dist/cli/version.js CHANGED Viewed

@@ -1,3 +1,3 @@
 // Auto-generated by prebuild — do not edit manually
-export const CLI_VERSION = "0.1.859";
+export const CLI_VERSION = "0.1.861";
 //# sourceMappingURL=version.js.map

package/dist/playwright/dev-auth.d.ts ADDED Viewed

@@ -0,0 +1,29 @@
+import type { Page } from '@playwright/test';
+/**
+ * The developer's live ugly.bot session, persisted by Ugly Studio / `ugly-app login` at
+ * `~/.ugly-bot/auth.json` as `{ token, userId, serverUrl }`. This is a REAL ugly.bot-issued
+ * JWT — a Mode-A deployed app accepts it, and it bills real AI to the developer.
+ */
+export interface DevAuth {
+    token: string;
+    userId: string;
+    serverUrl: string;
+}
+/**
+ * Load the developer's real ugly.bot session token from `~/.ugly-bot/auth.json`, for tests
+ * that must run against the DEPLOYED app / real AI (the token that `ugly.bot/verify`
+ * accepts). Returns `null` when the file is absent (fresh CI) so a spec can `test.skip()`
+ * instead of failing. The token is read at run time — NEVER hard-code or commit it.
+ *
+ * @example
+ * const auth = loadDevAuth();
+ * test.skip(!auth, 'no ~/.ugly-bot/auth.json — run `ugly-app login`');
+ * await authenticateReal(page, auth!, 'code.ugly.bot');
+ */
+export declare function loadDevAuth(): DevAuth | null;
+/**
+ * Inject a real ugly.bot session cookie for a DEPLOYED domain (e.g. `myapp.ugly.bot`) before
+ * navigating — the counterpart to {@link injectAuthCookie} (which targets `localhost`).
+ */
+export declare function authenticateReal(page: Page, auth: DevAuth, domain: string): Promise<void>;
+//# sourceMappingURL=dev-auth.d.ts.map

package/dist/playwright/dev-auth.d.ts.map ADDED Viewed

@@ -0,0 +1 @@

+ {"version":3,"file":"dev-auth.d.ts","sourceRoot":"","sources":["../../src/playwright/dev-auth.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAE7C;;;;GAIG;AACH,MAAM,WAAW,OAAO;IACtB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;CACnB;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,WAAW,IAAI,OAAO,GAAG,IAAI,CAQ5C;AAED;;;GAGG;AACH,wBAAsB,gBAAgB,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAI/F"}

package/dist/playwright/dev-auth.js ADDED Viewed

@@ -0,0 +1,35 @@
+import { readFileSync } from 'node:fs';
+import { homedir } from 'node:os';
+import { join } from 'node:path';
+/**
+ * Load the developer's real ugly.bot session token from `~/.ugly-bot/auth.json`, for tests
+ * that must run against the DEPLOYED app / real AI (the token that `ugly.bot/verify`
+ * accepts). Returns `null` when the file is absent (fresh CI) so a spec can `test.skip()`
+ * instead of failing. The token is read at run time — NEVER hard-code or commit it.
+ *
+ * @example
+ * const auth = loadDevAuth();
+ * test.skip(!auth, 'no ~/.ugly-bot/auth.json — run `ugly-app login`');
+ * await authenticateReal(page, auth!, 'code.ugly.bot');
+ */
+export function loadDevAuth() {
+    try {
+        const raw = JSON.parse(readFileSync(join(homedir(), '.ugly-bot', 'auth.json'), 'utf8'));
+        if (!raw.token || !raw.userId)
+            return null;
+        return { token: raw.token, userId: raw.userId, serverUrl: raw.serverUrl ?? 'https://ugly.bot' };
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * Inject a real ugly.bot session cookie for a DEPLOYED domain (e.g. `myapp.ugly.bot`) before
+ * navigating — the counterpart to {@link injectAuthCookie} (which targets `localhost`).
+ */
+export async function authenticateReal(page, auth, domain) {
+    await page.context().addCookies([
+        { name: 'auth_token', value: auth.token, domain, path: '/', secure: true, sameSite: 'None' },
+    ]);
+}
+//# sourceMappingURL=dev-auth.js.map

package/dist/playwright/dev-auth.js.map ADDED Viewed

@@ -0,0 +1 @@

+ {"version":3,"file":"dev-auth.js","sourceRoot":"","sources":["../../src/playwright/dev-auth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAcjC;;;;;;;;;;GAUG;AACH,MAAM,UAAU,WAAW;IACzB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,WAAW,EAAE,WAAW,CAAC,EAAE,MAAM,CAAC,CAAqB,CAAC;QAC5G,IAAI,CAAC,GAAG,CAAC,KAAK,IAAI,CAAC,GAAG,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC;QAC3C,OAAO,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,IAAI,kBAAkB,EAAE,CAAC;IAClG,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,IAAU,EAAE,IAAa,EAAE,MAAc;IAC9E,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC,UAAU,CAAC;QAC9B,EAAE,IAAI,EAAE,YAAY,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE;KAC7F,CAAC,CAAC;AACL,CAAC"}

package/dist/playwright/index.d.ts CHANGED Viewed

@@ -38,4 +38,8 @@ export interface ExpectCleanOptions {
 export declare function expectClean(page: Page, opts?: ExpectCleanOptions): Promise<void>;
 export { installUglyNativeMock } from './native-mock.js';
 export type { UglyNativeMock } from './native-mock.js';
+export { installRealNative, makePathResolver } from './real-native.js';
+export type { RealNativeOptions } from './real-native.js';
+export { loadDevAuth, authenticateReal } from './dev-auth.js';
+export type { DevAuth } from './dev-auth.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/playwright/index.d.ts.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/playwright/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,4BAA4B,CAAC;AAEpE,YAAY,EAAE,iBAAiB,EAAE,MAAM,4BAA4B,CAAC;AACpE,YAAY,EACV,cAAc,EACd,QAAQ,EACR,YAAY,EACZ,WAAW,EACX,aAAa,EACb,YAAY,EACZ,UAAU,EACV,eAAe,EACf,iBAAiB,EACjB,iBAAiB,GAClB,MAAM,4BAA4B,CAAC;AAIpC;;;;;;;;GAQG;AACH,wBAAsB,gBAAgB,CACpC,IAAI,EAAE,IAAI,EACV,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,IAAI,CAAC,CAYf;AAED;;GAEG;AACH,wBAAsB,aAAa,CACjC,OAAO,EAAE,OAAO,EAChB,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,IAAI,CAAC,CAIf;AAOD,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,wBAAsB,UAAU,CAC9B,IAAI,EAAE,IAAI,EACV,IAAI,CAAC,EAAE;IAAE,SAAS,CAAC,EAAE,MAAM,CAAA;CAAE,GAC5B,OAAO,CAAC,IAAI,CAAC,CAIf;AAED,wBAAsB,WAAW,CAAC,IAAI,EAAE,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,CAI7D;AAED,wBAAsB,WAAW,CAC/B,IAAI,EAAE,IAAI,EACV,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,iBAAiB,CAAC,CAU5B;AAED,wBAAsB,aAAa,CACjC,IAAI,EAAE,IAAI,EACV,QAAQ,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,EAC7B,IAAI,CAAC,EAAE,oBAAoB,GAC1B,OAAO,CAAC,iBAAiB,CAAC,CAK5B;AAED,wBAAsB,SAAS,CAC7B,IAAI,EAAE,IAAI,EACV,MAAM,EAAE,SAAS,GAAG,KAAK,GAAG,SAAS,GACpC,OAAO,CAAC,IAAI,CAAC,CASf;AAED,wBAAsB,gBAAgB,CACpC,IAAI,EAAE,IAAI,EACV,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,IAAI,CAAC,CAMf;AAED,MAAM,WAAW,kBAAkB;IACjC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,uBAAuB,CAAC,EAAE,OAAO,CAAC;IAClC,qBAAqB,CAAC,EAAE,OAAO,CAAC;IAChC,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,wBAAsB,WAAW,CAC/B,IAAI,EAAE,IAAI,EACV,IAAI,CAAC,EAAE,kBAAkB,GACxB,OAAO,CAAC,IAAI,CAAC,CA2Df;AAED,OAAO,EAAE,qBAAqB,EAAE,MAAM,kBAAkB,CAAC;AACzD,YAAY,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC"}
1	+ {"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/playwright/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,4BAA4B,CAAC;AAEpE,YAAY,EAAE,iBAAiB,EAAE,MAAM,4BAA4B,CAAC;AACpE,YAAY,EACV,cAAc,EACd,QAAQ,EACR,YAAY,EACZ,WAAW,EACX,aAAa,EACb,YAAY,EACZ,UAAU,EACV,eAAe,EACf,iBAAiB,EACjB,iBAAiB,GAClB,MAAM,4BAA4B,CAAC;AAIpC;;;;;;;;GAQG;AACH,wBAAsB,gBAAgB,CACpC,IAAI,EAAE,IAAI,EACV,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,IAAI,CAAC,CAYf;AAED;;GAEG;AACH,wBAAsB,aAAa,CACjC,OAAO,EAAE,OAAO,EAChB,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,IAAI,CAAC,CAIf;AAOD,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAED,wBAAsB,UAAU,CAC9B,IAAI,EAAE,IAAI,EACV,IAAI,CAAC,EAAE;IAAE,SAAS,CAAC,EAAE,MAAM,CAAA;CAAE,GAC5B,OAAO,CAAC,IAAI,CAAC,CAIf;AAED,wBAAsB,WAAW,CAAC,IAAI,EAAE,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,CAI7D;AAED,wBAAsB,WAAW,CAC/B,IAAI,EAAE,IAAI,EACV,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,iBAAiB,CAAC,CAU5B;AAED,wBAAsB,aAAa,CACjC,IAAI,EAAE,IAAI,EACV,QAAQ,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,EAC7B,IAAI,CAAC,EAAE,oBAAoB,GAC1B,OAAO,CAAC,iBAAiB,CAAC,CAK5B;AAED,wBAAsB,SAAS,CAC7B,IAAI,EAAE,IAAI,EACV,MAAM,EAAE,SAAS,GAAG,KAAK,GAAG,SAAS,GACpC,OAAO,CAAC,IAAI,CAAC,CASf;AAED,wBAAsB,gBAAgB,CACpC,IAAI,EAAE,IAAI,EACV,QAAQ,EAAE,MAAM,GACf,OAAO,CAAC,IAAI,CAAC,CAMf;AAED,MAAM,WAAW,kBAAkB;IACjC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,uBAAuB,CAAC,EAAE,OAAO,CAAC;IAClC,qBAAqB,CAAC,EAAE,OAAO,CAAC;IAChC,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,wBAAsB,WAAW,CAC/B,IAAI,EAAE,IAAI,EACV,IAAI,CAAC,EAAE,kBAAkB,GACxB,OAAO,CAAC,IAAI,CAAC,CA2Df;AAED,OAAO,EAAE,qBAAqB,EAAE,MAAM,kBAAkB,CAAC;AACzD,YAAY,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AACvD,OAAO,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACvE,YAAY,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAC1D,OAAO,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAC9D,YAAY,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC"}

package/dist/playwright/index.js CHANGED Viewed

@@ -113,4 +113,6 @@ export async function expectClean(page, opts) {
     }
 }
 export { installUglyNativeMock } from './native-mock.js';
+export { installRealNative, makePathResolver } from './real-native.js';
+export { loadDevAuth, authenticateReal } from './dev-auth.js';
 //# sourceMappingURL=index.js.map

package/dist/playwright/index.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/playwright/index.ts"],"names":[],"mappings":"AAiBA,MAAM,WAAW,GAAG,YAAY,CAAC;AAEjC;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,IAAU,EACV,KAAa;IAEb,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC,UAAU,CAAC;QAC9B;YACE,IAAI,EAAE,WAAW;YACjB,KAAK,EAAE,KAAK;YACZ,MAAM,EAAE,WAAW;YACnB,IAAI,EAAE,GAAG;YACT,QAAQ,EAAE,IAAI;YACd,MAAM,EAAE,KAAK;YACb,QAAQ,EAAE,KAAK;SAChB;KACF,CAAC,CAAC;AACL,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,OAAgB,EAChB,KAAa;IAEb,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,OAAO,EAAE,CAAC;IACrC,MAAM,gBAAgB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACpC,OAAO,IAAI,CAAC;AACd,CAAC;AAWD,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,IAAU,EACV,IAA6B;IAE7B,MAAM,IAAI,CAAC,eAAe,CAAC,WAAW,EAAE;QACtC,OAAO,EAAE,IAAI,EAAE,SAAS,IAAI,MAAM;KACnC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,IAAU;IAC1C,OAAO,MAAM,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE;QAC9B,OAAO,MAAM,CAAC,iBAAiB,EAAE,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;IACpD,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,IAAU,EACV,KAAa;IAEb,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAS,EAAE,EAAE;QAC/C,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC;YAC1B,MAAM,IAAI,KAAK,CACb,8DAA8D,CAC/D,CAAC;QACJ,CAAC;QACD,OAAO,MAAM,CAAC,aAAa,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;IAC5C,CAAC,EAAE,KAAK,CAAC,CAAC;IACV,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,IAAU,EACV,QAA6B,EAC7B,IAA2B;IAE3B,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,IAAI,CAAC,CAAC;IACrC,MAAM,QAAQ,EAAE,CAAC;IACjB,MAAM,IAAI,CAAC,cAAc,CAAC,IAAI,EAAE,QAAQ,IAAI,GAAG,CAAC,CAAC;IACjD,OAAO,MAAM,WAAW,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;AACvC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,IAAU,EACV,MAAqC;IAErC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IAChC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,GAAG,CAAC,YAAY,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACjC,CAAC;SAAM,CAAC;QACN,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IACtC,CAAC;IACD,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;IAChC,MAAM,UAAU,CAAC,IAAI,CAAC,CAAC;AACzB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,IAAU,EACV,QAAgB;IAEhB,MAAM,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAS,EAAE,EAAE;QAChC,MAAM,CAAC,aAAa,CAClB,IAAI,WAAW,CAAC,iBAAiB,EAAE,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC,CAC9D,CAAC;IACJ,CAAC,EAAE,QAAQ,CAAC,CAAC;AACf,CAAC;AAWD,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,IAAU,EACV,IAAyB;IAEzB,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,IAAI,CAAC,CAAC;IACrC,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAE7C,MAAM,MAAM,GAAG,IAAI,EAAE,MAAM,IAAI,GAAG,CAAC;IACnC,MAAM,YAAY,GAAG,IAAI,EAAE,YAAY,IAAI,CAAC,CAAC;IAC7C,MAAM,aAAa,GAAG,IAAI,EAAE,aAAa,IAAI,KAAK,CAAC;IACnD,MAAM,uBAAuB,GAAG,IAAI,EAAE,uBAAuB,IAAI,KAAK,CAAC;IACvE,MAAM,qBAAqB,GAAG,IAAI,EAAE,qBAAqB,IAAI,KAAK,CAAC;IACnE,MAAM,gBAAgB,GAAG,IAAI,EAAE,gBAAgB,IAAI,CAAC,CAAC;IAErD,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,IAAI,MAAM,CAAC,GAAG,CAAC,KAAK,GAAG,MAAM,EAAE,CAAC;QAC9B,QAAQ,CAAC,IAAI,CACX,aAAa,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,MAAM,aAAa,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,GAAG,CAC7F,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,CAAC,SAAS,CAAC,MAAM,GAAG,YAAY,EAAE,CAAC;QAC3C,QAAQ,CAAC,IAAI,CACX,aAAa,MAAM,CAAC,SAAS,CAAC,MAAM,MAAM,YAAY,SAAS,IAAI,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CACpI,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,aAAa,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACjD,QAAQ,CAAC,IAAI,CACX,aAAa,MAAM,CAAC,QAAQ;aACzB,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;aACX,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;aAC7C,IAAI,CAAC,IAAI,CAAC,EAAE,CAChB,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,uBAAuB,IAAI,MAAM,CAAC,kBAAkB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrE,QAAQ,CAAC,IAAI,CACX,uBAAuB,MAAM,CAAC,kBAAkB;aAC7C,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;aACX,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,IAAI,GAAG,CAAC;aACtC,IAAI,CAAC,IAAI,CAAC,EAAE,CAChB,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,qBAAqB,IAAI,MAAM,CAAC,QAAQ,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvE,QAAQ,CAAC,IAAI,CACX,2BAA2B,MAAM,CAAC,QAAQ,CAAC,aAAa;aACrD,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;aACX,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,SAAS,KAAK,CAAC;aAC7C,IAAI,CAAC,IAAI,CAAC,EAAE,CAChB,CAAC;IACJ,CAAC;IACD,MAAM,aAAa,GAAG,MAAM,CAAC,UAAU,CAAC,MAAM,CAC5C,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,aAAa,EAC7B,CAAC,CACF,CAAC;IACF,IAAI,aAAa,GAAG,gBAAgB,EAAE,CAAC;QACrC,QAAQ,CAAC,IAAI,CACX,kBAAkB,aAAa,MAAM,gBAAgB,WAAW,MAAM,CAAC,UAAU,CAAC,MAAM,eAAe,CACxG,CAAC;IACJ,CAAC;IAED,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CAAC,4BAA4B,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IACzE,CAAC;AACH,CAAC;AAED,OAAO,EAAE,qBAAqB,EAAE,MAAM,kBAAkB,CAAC"}
1	+ {"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/playwright/index.ts"],"names":[],"mappings":"AAiBA,MAAM,WAAW,GAAG,YAAY,CAAC;AAEjC;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,IAAU,EACV,KAAa;IAEb,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC,UAAU,CAAC;QAC9B;YACE,IAAI,EAAE,WAAW;YACjB,KAAK,EAAE,KAAK;YACZ,MAAM,EAAE,WAAW;YACnB,IAAI,EAAE,GAAG;YACT,QAAQ,EAAE,IAAI;YACd,MAAM,EAAE,KAAK;YACb,QAAQ,EAAE,KAAK;SAChB;KACF,CAAC,CAAC;AACL,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,OAAgB,EAChB,KAAa;IAEb,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,OAAO,EAAE,CAAC;IACrC,MAAM,gBAAgB,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACpC,OAAO,IAAI,CAAC;AACd,CAAC;AAWD,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,IAAU,EACV,IAA6B;IAE7B,MAAM,IAAI,CAAC,eAAe,CAAC,WAAW,EAAE;QACtC,OAAO,EAAE,IAAI,EAAE,SAAS,IAAI,MAAM;KACnC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,IAAU;IAC1C,OAAO,MAAM,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE;QAC9B,OAAO,MAAM,CAAC,iBAAiB,EAAE,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;IACpD,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,IAAU,EACV,KAAa;IAEb,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAS,EAAE,EAAE;QAC/C,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC;YAC1B,MAAM,IAAI,KAAK,CACb,8DAA8D,CAC/D,CAAC;QACJ,CAAC;QACD,OAAO,MAAM,CAAC,aAAa,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;IAC5C,CAAC,EAAE,KAAK,CAAC,CAAC;IACV,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,IAAU,EACV,QAA6B,EAC7B,IAA2B;IAE3B,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,IAAI,CAAC,CAAC;IACrC,MAAM,QAAQ,EAAE,CAAC;IACjB,MAAM,IAAI,CAAC,cAAc,CAAC,IAAI,EAAE,QAAQ,IAAI,GAAG,CAAC,CAAC;IACjD,OAAO,MAAM,WAAW,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;AACvC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,IAAU,EACV,MAAqC;IAErC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IAChC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,GAAG,CAAC,YAAY,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACjC,CAAC;SAAM,CAAC;QACN,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IACtC,CAAC;IACD,MAAM,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC;IAChC,MAAM,UAAU,CAAC,IAAI,CAAC,CAAC;AACzB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,IAAU,EACV,QAAgB;IAEhB,MAAM,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAS,EAAE,EAAE;QAChC,MAAM,CAAC,aAAa,CAClB,IAAI,WAAW,CAAC,iBAAiB,EAAE,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC,CAC9D,CAAC;IACJ,CAAC,EAAE,QAAQ,CAAC,CAAC;AACf,CAAC;AAWD,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,IAAU,EACV,IAAyB;IAEzB,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,IAAI,CAAC,CAAC;IACrC,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAE7C,MAAM,MAAM,GAAG,IAAI,EAAE,MAAM,IAAI,GAAG,CAAC;IACnC,MAAM,YAAY,GAAG,IAAI,EAAE,YAAY,IAAI,CAAC,CAAC;IAC7C,MAAM,aAAa,GAAG,IAAI,EAAE,aAAa,IAAI,KAAK,CAAC;IACnD,MAAM,uBAAuB,GAAG,IAAI,EAAE,uBAAuB,IAAI,KAAK,CAAC;IACvE,MAAM,qBAAqB,GAAG,IAAI,EAAE,qBAAqB,IAAI,KAAK,CAAC;IACnE,MAAM,gBAAgB,GAAG,IAAI,EAAE,gBAAgB,IAAI,CAAC,CAAC;IAErD,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,IAAI,MAAM,CAAC,GAAG,CAAC,KAAK,GAAG,MAAM,EAAE,CAAC;QAC9B,QAAQ,CAAC,IAAI,CACX,aAAa,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,MAAM,aAAa,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,GAAG,CAC7F,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,CAAC,SAAS,CAAC,MAAM,GAAG,YAAY,EAAE,CAAC;QAC3C,QAAQ,CAAC,IAAI,CACX,aAAa,MAAM,CAAC,SAAS,CAAC,MAAM,MAAM,YAAY,SAAS,IAAI,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CACpI,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,aAAa,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACjD,QAAQ,CAAC,IAAI,CACX,aAAa,MAAM,CAAC,QAAQ;aACzB,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;aACX,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;aAC7C,IAAI,CAAC,IAAI,CAAC,EAAE,CAChB,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,uBAAuB,IAAI,MAAM,CAAC,kBAAkB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrE,QAAQ,CAAC,IAAI,CACX,uBAAuB,MAAM,CAAC,kBAAkB;aAC7C,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;aACX,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,IAAI,GAAG,CAAC;aACtC,IAAI,CAAC,IAAI,CAAC,EAAE,CAChB,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,qBAAqB,IAAI,MAAM,CAAC,QAAQ,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvE,QAAQ,CAAC,IAAI,CACX,2BAA2B,MAAM,CAAC,QAAQ,CAAC,aAAa;aACrD,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;aACX,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,SAAS,KAAK,CAAC;aAC7C,IAAI,CAAC,IAAI,CAAC,EAAE,CAChB,CAAC;IACJ,CAAC;IACD,MAAM,aAAa,GAAG,MAAM,CAAC,UAAU,CAAC,MAAM,CAC5C,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,aAAa,EAC7B,CAAC,CACF,CAAC;IACF,IAAI,aAAa,GAAG,gBAAgB,EAAE,CAAC;QACrC,QAAQ,CAAC,IAAI,CACX,kBAAkB,aAAa,MAAM,gBAAgB,WAAW,MAAM,CAAC,UAAU,CAAC,MAAM,eAAe,CACxG,CAAC;IACJ,CAAC;IAED,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CAAC,4BAA4B,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IACzE,CAAC;AACH,CAAC;AAED,OAAO,EAAE,qBAAqB,EAAE,MAAM,kBAAkB,CAAC;AAEzD,OAAO,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AAEvE,OAAO,EAAE,WAAW,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC"}

package/dist/playwright/real-native.d.ts ADDED Viewed

@@ -0,0 +1,60 @@
+import type { Page } from '@playwright/test';
+import type { NativePlatform } from '../native/protocol.js';
+/**
+ * Options for {@link installRealNative}.
+ */
+export interface RealNativeOptions {
+    /** `window.UglyNative.platform`. Must be non-`'web'` for `isNativeAvailable()` to be
+     *  true (many apps gate their desktop shell on it). Default `'desktop'`. */
+    platform?: NativePlatform;
+    /**
+     * Prepend the bundled toolchain (`node`, `git`, `rg`, `uv`, …) onto every spawn's PATH,
+     * bundled-first, so a real `run_command` / ripgrep search / indexer resolves the SAME
+     * deterministic binaries Studio ships — instead of whatever happens to be on the CI
+     * PATH. Requires the tools to already be installed under `BINARIES_ROOT`
+     * (`~/.ugly-studio/binaries`); pre-provision them with `ensureTools()` from
+     * `ugly-app/native/server/binaries` in your global setup, or point `UGLY_BINARIES_BASE`
+     * at a local mirror. Best-effort: if the bundle can't be resolved it logs and falls
+     * back to the ambient PATH. Default `false` (ambient PATH).
+     */
+    bundledBinaries?: boolean;
+    /** Extra env applied to every spawned process (merged over `process.env`). */
+    spawnEnv?: Record<string, string>;
+}
+/**
+ * Install a `window.UglyNative` backed by the REAL filesystem + real child processes,
+ * **confined to `root`** (a temp project dir). Unlike {@link installUglyNativeMock}
+ * (canned per-channel results), this lets an app actually read/write files and spawn
+ * processes — so a Playwright test can assert that code really changed ON DISK, and that
+ * native-backed panels/search run for real — without the Studio desktop shell.
+ *
+ * **Folder confinement (the sandbox):** every `fs.*` path and every spawn `cwd` is resolved
+ * through {@link makePathResolver} and a path that escapes `root` (`..`, an absolute path
+ * outside it, or a NUL byte) THROWS. This mirrors the production capability gate
+ * (`fs: 'scoped'`), so a test can prove the app never touches files outside the folder it
+ * was given. Point `root` at a fresh `fs.mkdtempSync(...)` per test.
+ *
+ * **Scope:** implements `fs.*`, `process.spawn` (+ its stdout/stderr/exit events), and
+ * auto-grants `permissions.*`. It does NOT run coding **tasks** (`task.start` forks a Node
+ * child that only the real Studio host / a `TaskManager` can spawn) — for task-driven
+ * flows use {@link installUglyNativeMock} and hand-drive `task.event:<id>` events, or run
+ * against a real host. Must be called BEFORE `page.goto()`.
+ *
+ * @example
+ * const root = fs.mkdtempSync(path.join(os.tmpdir(), 'eval-'));
+ * fs.writeFileSync(path.join(root, 'index.ts'), 'export const x = 1;\n');
+ * await installRealNative(page, root, { bundledBinaries: true });
+ * await page.goto('/');
+ * // …drive the app…  then assert on disk:
+ * expect(fs.readFileSync(path.join(root, 'index.ts'), 'utf8')).toContain('x = 2');
+ */
+export declare function installRealNative(page: Page, root: string, opts?: RealNativeOptions): Promise<void>;
+/**
+ * Build a sandbox path resolver confined to `root`. Returns an absolute path inside `root`,
+ * or THROWS on any escape (`..` traversal, an absolute path outside `root`, or a NUL byte).
+ * Mirrors the production `resolveScopedPath` used by the `fs: 'scoped'` capability grant, so
+ * a test's confinement matches how a real scoped app is limited. Exported so callers can
+ * reuse the same check for their own bindings.
+ */
+export declare function makePathResolver(root: string): (p: string) => string;
+//# sourceMappingURL=real-native.d.ts.map

package/dist/playwright/real-native.d.ts.map ADDED Viewed

@@ -0,0 +1 @@

+ {"version":3,"file":"real-native.d.ts","sourceRoot":"","sources":["../../src/playwright/real-native.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAC7C,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAE5D;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC;gFAC4E;IAC5E,QAAQ,CAAC,EAAE,cAAc,CAAC;IAC1B;;;;;;;;;OASG;IACH,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,8EAA8E;IAC9E,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACnC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,wBAAsB,iBAAiB,CACrC,IAAI,EAAE,IAAI,EACV,IAAI,EAAE,MAAM,EACZ,IAAI,GAAE,iBAAsB,GAC3B,OAAO,CAAC,IAAI,CAAC,CA8If;AAED;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,CAAC,CAAC,EAAE,MAAM,KAAK,MAAM,CAQpE"}

package/dist/playwright/real-native.js ADDED Viewed

@@ -0,0 +1,178 @@
+import * as fs from 'node:fs';
+import { spawn } from 'node:child_process';
+import { isAbsolute, join, resolve, sep } from 'node:path';
+/**
+ * Install a `window.UglyNative` backed by the REAL filesystem + real child processes,
+ * **confined to `root`** (a temp project dir). Unlike {@link installUglyNativeMock}
+ * (canned per-channel results), this lets an app actually read/write files and spawn
+ * processes — so a Playwright test can assert that code really changed ON DISK, and that
+ * native-backed panels/search run for real — without the Studio desktop shell.
+ *
+ * **Folder confinement (the sandbox):** every `fs.*` path and every spawn `cwd` is resolved
+ * through {@link makePathResolver} and a path that escapes `root` (`..`, an absolute path
+ * outside it, or a NUL byte) THROWS. This mirrors the production capability gate
+ * (`fs: 'scoped'`), so a test can prove the app never touches files outside the folder it
+ * was given. Point `root` at a fresh `fs.mkdtempSync(...)` per test.
+ *
+ * **Scope:** implements `fs.*`, `process.spawn` (+ its stdout/stderr/exit events), and
+ * auto-grants `permissions.*`. It does NOT run coding **tasks** (`task.start` forks a Node
+ * child that only the real Studio host / a `TaskManager` can spawn) — for task-driven
+ * flows use {@link installUglyNativeMock} and hand-drive `task.event:<id>` events, or run
+ * against a real host. Must be called BEFORE `page.goto()`.
+ *
+ * @example
+ * const root = fs.mkdtempSync(path.join(os.tmpdir(), 'eval-'));
+ * fs.writeFileSync(path.join(root, 'index.ts'), 'export const x = 1;\n');
+ * await installRealNative(page, root, { bundledBinaries: true });
+ * await page.goto('/');
+ * // …drive the app…  then assert on disk:
+ * expect(fs.readFileSync(path.join(root, 'index.ts'), 'utf8')).toContain('x = 2');
+ */
+export async function installRealNative(page, root, opts = {}) {
+    const platform = opts.platform ?? 'desktop';
+    const rp = makePathResolver(root);
+    // Bundled toolchain PATH for real spawns (opt-in). Resolved once, best-effort.
+    let spawnEnv = { ...(opts.spawnEnv ?? {}) };
+    if (opts.bundledBinaries) {
+        try {
+            const { bundledEnv, BINARIES_ROOT } = (await import('../native/server/binaries/index.js'));
+            spawnEnv = { ...bundledEnv(BINARIES_ROOT), ...spawnEnv };
+        }
+        catch (e) {
+            // eslint-disable-next-line no-console
+            console.warn('[installRealNative] bundledBinaries requested but unavailable — using ambient PATH', e);
+        }
+    }
+    // ── Node-side bindings, all path-confined to `root`. ──────────────────────────────────
+    await page.exposeFunction('__nfsReadFile', (p) => fs.readFileSync(rp(p), 'utf8'));
+    await page.exposeFunction('__nfsWriteFile', (p, c) => {
+        fs.writeFileSync(rp(p), c ?? '');
+        return true;
+    });
+    await page.exposeFunction('__nfsReaddir', (p) => fs.readdirSync(rp(p), { withFileTypes: true }).map((d) => ({
+        name: d.name,
+        isDirectory: d.isDirectory(),
+        isFile: d.isFile(),
+    })));
+    await page.exposeFunction('__nfsMkdir', (p) => { fs.mkdirSync(rp(p), { recursive: true }); return true; });
+    await page.exposeFunction('__nfsRm', (p) => { fs.rmSync(rp(p), { recursive: true, force: true }); return true; });
+    await page.exposeFunction('__nfsRename', (a, b) => { fs.renameSync(rp(a), rp(b)); return true; });
+    await page.exposeFunction('__nfsStat', (p) => {
+        const s = fs.statSync(rp(p));
+        return { size: s.size, isDirectory: s.isDirectory(), isFile: s.isFile(), mtimeMs: s.mtimeMs };
+    });
+    await page.exposeFunction('__nfsExists', (p) => {
+        try {
+            return fs.existsSync(rp(p));
+        }
+        catch {
+            return false;
+        }
+    });
+    await page.exposeFunction('__nproc', (cmd, args, cwd, env) => new Promise((res) => {
+        let out = '';
+        let err = '';
+        // A cwd that escapes the sandbox is silently pinned back to root (never runs outside).
+        let safeCwd = root;
+        try {
+            safeCwd = cwd ? rp(cwd) : root;
+        }
+        catch {
+            safeCwd = root;
+        }
+        const proc = spawn(cmd, args ?? [], { cwd: safeCwd, env: { ...process.env, ...spawnEnv, ...(env ?? {}) } });
+        proc.stdout?.on('data', (d) => { out += d.toString(); });
+        proc.stderr?.on('data', (d) => { err += d.toString(); });
+        proc.on('error', (e) => res({ stdout: out, stderr: err + String(e), code: 1 }));
+        proc.on('close', (code) => res({ stdout: out, stderr: err, code }));
+    }));
+    // ── In-page UglyNative: route the unified protocol to the exposed Node bindings. ──────
+    // Process output is collected to completion in Node then replayed as stdout/exit events
+    // once the app has subscribed to the per-id channels.
+    await page.addInitScript((platformArg) => {
+        // The Node bindings exposed above, as seen from the page. `Record<string,unknown>`
+        // payloads keep field access typed without an `any` escape hatch.
+        const w = window;
+        const listeners = {};
+        let seq = 0;
+        const emit = (e, d) => (listeners[e] ?? []).forEach((cb) => cb(d));
+        const s = (v) => typeof v === 'string' ? v : typeof v === 'number' || typeof v === 'boolean' ? String(v) : '';
+        w.UglyNative = {
+            platform: platformArg,
+            subscribe: (e, cb) => {
+                (listeners[e] ??= []).push(cb);
+                return () => { listeners[e] = (listeners[e] ?? []).filter((f) => f !== cb); };
+            },
+            invoke: async (ch, payload = {}) => {
+                const p = payload;
+                switch (ch) {
+                    case 'permissions.request':
+                    case 'permissions.query':
+                        return { granted: { fs: 'full', process: 'full' } };
+                    case 'fs.readFile':
+                        return { content: await w.__nfsReadFile(s(p.path)) };
+                    case 'fs.writeFile':
+                        await w.__nfsWriteFile(s(p.path), s(p.content));
+                        return {};
+                    case 'fs.readdir':
+                        return { entries: await w.__nfsReaddir(s(p.path)) };
+                    case 'fs.mkdir':
+                        await w.__nfsMkdir(s(p.path));
+                        return {};
+                    case 'fs.rm':
+                        await w.__nfsRm(s(p.path));
+                        return {};
+                    case 'fs.rename':
+                        await w.__nfsRename(s(p.from ?? p.oldPath), s(p.to ?? p.newPath));
+                        return {};
+                    case 'fs.stat':
+                        return await w.__nfsStat(s(p.path));
+                    case 'fs.exists':
+                        return { exists: await w.__nfsExists(s(p.path)) };
+                    case 'fs.realpath':
+                        return { path: s(p.path) };
+                    case 'process.spawn': {
+                        const id = `p${seq++}`;
+                        const args = Array.isArray(p.args) ? p.args.map(s) : [];
+                        const env = (p.env && typeof p.env === 'object' ? p.env : {});
+                        void w
+                            .__nproc(s(p.cmd), args, p.cwd ? s(p.cwd) : undefined, env)
+                            .then((r) => setTimeout(() => {
+                            if (r.stdout)
+                                emit('process.stdout:' + id, { chunk: r.stdout });
+                            if (r.stderr)
+                                emit('process.stderr:' + id, { chunk: r.stderr });
+                            emit('process.exit:' + id, { code: r.code });
+                        }, 0));
+                        return { id, pid: 1000 + seq };
+                    }
+                    case 'process.write':
+                    case 'process.closeStdin':
+                    case 'process.kill':
+                        return {};
+                    default:
+                        return {};
+                }
+            },
+        };
+    }, platform);
+}
+/**
+ * Build a sandbox path resolver confined to `root`. Returns an absolute path inside `root`,
+ * or THROWS on any escape (`..` traversal, an absolute path outside `root`, or a NUL byte).
+ * Mirrors the production `resolveScopedPath` used by the `fs: 'scoped'` capability grant, so
+ * a test's confinement matches how a real scoped app is limited. Exported so callers can
+ * reuse the same check for their own bindings.
+ */
+export function makePathResolver(root) {
+    const base = resolve(root);
+    return (p) => {
+        if (typeof p === 'string' && p.includes('\0'))
+            throw new Error(`path contains NUL: ${p}`);
+        const r = resolve(isAbsolute(p) ? p : join(base, p));
+        if (r !== base && !r.startsWith(base + sep))
+            throw new Error(`path escapes project root: ${p}`);
+        return r;
+    };
+}
+//# sourceMappingURL=real-native.js.map

package/dist/playwright/real-native.js.map ADDED Viewed

@@ -0,0 +1 @@

+ {"version":3,"file":"real-native.js","sourceRoot":"","sources":["../../src/playwright/real-native.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AA0B3D;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,IAAU,EACV,IAAY,EACZ,OAA0B,EAAE;IAE5B,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,SAAS,CAAC;IAC5C,MAAM,EAAE,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;IAElC,+EAA+E;IAC/E,IAAI,QAAQ,GAA2B,EAAE,GAAG,CAAC,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC,EAAE,CAAC;IACpE,IAAI,IAAI,CAAC,eAAe,EAAE,CAAC;QACzB,IAAI,CAAC;YACH,MAAM,EAAE,UAAU,EAAE,aAAa,EAAE,GAAG,CAAC,MAAM,MAAM,CACjD,oCAAoC,CACrC,CAAoF,CAAC;YACtF,QAAQ,GAAG,EAAE,GAAG,UAAU,CAAC,aAAa,CAAC,EAAE,GAAG,QAAQ,EAAE,CAAC;QAC3D,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,sCAAsC;YACtC,OAAO,CAAC,IAAI,CAAC,oFAAoF,EAAE,CAAC,CAAC,CAAC;QACxG,CAAC;IACH,CAAC;IAED,yFAAyF;IACzF,MAAM,IAAI,CAAC,cAAc,CAAC,eAAe,EAAE,CAAC,CAAS,EAAE,EAAE,CAAC,EAAE,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;IAC1F,MAAM,IAAI,CAAC,cAAc,CAAC,gBAAgB,EAAE,CAAC,CAAS,EAAE,CAAS,EAAE,EAAE;QACnE,EAAE,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;QACjC,OAAO,IAAI,CAAC;IACd,CAAC,CAAC,CAAC;IACH,MAAM,IAAI,CAAC,cAAc,CAAC,cAAc,EAAE,CAAC,CAAS,EAAE,EAAE,CACtD,EAAE,CAAC,WAAW,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACzD,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,WAAW,EAAE,CAAC,CAAC,WAAW,EAAE;QAC5B,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;KACnB,CAAC,CAAC,CACJ,CAAC;IACF,MAAM,IAAI,CAAC,cAAc,CAAC,YAAY,EAAE,CAAC,CAAS,EAAE,EAAE,GAAG,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IACnH,MAAM,IAAI,CAAC,cAAc,CAAC,SAAS,EAAE,CAAC,CAAS,EAAE,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1H,MAAM,IAAI,CAAC,cAAc,CAAC,aAAa,EAAE,CAAC,CAAS,EAAE,CAAS,EAAE,EAAE,GAAG,EAAE,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IAClH,MAAM,IAAI,CAAC,cAAc,CAAC,WAAW,EAAE,CAAC,CAAS,EAAE,EAAE;QACnD,MAAM,CAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAC7B,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC;IAChG,CAAC,CAAC,CAAC;IACH,MAAM,IAAI,CAAC,cAAc,CAAC,aAAa,EAAE,CAAC,CAAS,EAAE,EAAE;QACrD,IAAI,CAAC;YAAC,OAAO,EAAE,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,KAAK,CAAC;QAAC,CAAC;IAC9D,CAAC,CAAC,CAAC;IACH,MAAM,IAAI,CAAC,cAAc,CACvB,SAAS,EACT,CAAC,GAAW,EAAE,IAAc,EAAE,GAAuB,EAAE,GAAuC,EAAE,EAAE,CAChG,IAAI,OAAO,CAA0D,CAAC,GAAG,EAAE,EAAE;QAC3E,IAAI,GAAG,GAAG,EAAE,CAAC;QACb,IAAI,GAAG,GAAG,EAAE,CAAC;QACb,uFAAuF;QACvF,IAAI,OAAO,GAAG,IAAI,CAAC;QACnB,IAAI,CAAC;YAAC,OAAO,GAAG,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,GAAG,IAAI,CAAC;QAAC,CAAC;QACjE,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,EAAE,IAAI,IAAI,EAAE,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,GAAG,CAAC,GAAG,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;QAC5G,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,CAAS,EAAE,EAAE,GAAG,GAAG,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QACjE,IAAI,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,CAAS,EAAE,EAAE,GAAG,GAAG,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QACjE,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,GAAG,MAAM,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;QAChF,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;IACtE,CAAC,CAAC,CACL,CAAC;IAEF,yFAAyF;IACzF,wFAAwF;IACxF,sDAAsD;IACtD,MAAM,IAAI,CAAC,aAAa,CAAC,CAAC,WAAW,EAAE,EAAE;QAGvC,mFAAmF;QACnF,kEAAkE;QAClE,MAAM,CAAC,GAAG,MAWT,CAAC;QACF,MAAM,SAAS,GAAyB,EAAE,CAAC;QAC3C,IAAI,GAAG,GAAG,CAAC,CAAC;QACZ,MAAM,IAAI,GAAG,CAAC,CAAS,EAAE,CAAU,EAAQ,EAAE,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1F,MAAM,CAAC,GAAG,CAAC,CAAU,EAAU,EAAE,CAC/B,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,OAAO,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/F,CAAC,CAAC,UAAU,GAAG;YACb,QAAQ,EAAE,WAAW;YACrB,SAAS,EAAE,CAAC,CAAS,EAAE,EAAM,EAAE,EAAE;gBAC/B,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;gBAC/B,OAAO,GAAG,EAAE,GAAG,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;YAChF,CAAC;YACD,MAAM,EAAE,KAAK,EAAE,EAAU,EAAE,UAAmC,EAAE,EAAE,EAAE;gBAClE,MAAM,CAAC,GAAG,OAAO,CAAC;gBAClB,QAAQ,EAAE,EAAE,CAAC;oBACX,KAAK,qBAAqB,CAAC;oBAC3B,KAAK,mBAAmB;wBACtB,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,EAAE,CAAC;oBACtD,KAAK,aAAa;wBAChB,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;oBACvD,KAAK,cAAc;wBACjB,MAAM,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;wBAChD,OAAO,EAAE,CAAC;oBACZ,KAAK,YAAY;wBACf,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;oBACtD,KAAK,UAAU;wBACb,MAAM,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;wBAC9B,OAAO,EAAE,CAAC;oBACZ,KAAK,OAAO;wBACV,MAAM,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;wBAC3B,OAAO,EAAE,CAAC;oBACZ,KAAK,WAAW;wBACd,MAAM,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;wBAClE,OAAO,EAAE,CAAC;oBACZ,KAAK,SAAS;wBACZ,OAAO,MAAM,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;oBACtC,KAAK,WAAW;wBACd,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;oBACpD,KAAK,aAAa;wBAChB,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;oBAC7B,KAAK,eAAe,CAAC,CAAC,CAAC;wBACrB,MAAM,EAAE,GAAG,IAAI,GAAG,EAAE,EAAE,CAAC;wBACvB,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;wBACxD,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,IAAI,OAAO,CAAC,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAA2B,CAAC;wBACxF,KAAK,CAAC;6BACH,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,GAAG,CAAC;6BAC1D,IAAI,CAAC,CAAC,CAAa,EAAE,EAAE,CACtB,UAAU,CAAC,GAAG,EAAE;4BACd,IAAI,CAAC,CAAC,MAAM;gCAAE,IAAI,CAAC,iBAAiB,GAAG,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;4BAChE,IAAI,CAAC,CAAC,MAAM;gCAAE,IAAI,CAAC,iBAAiB,GAAG,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;4BAChE,IAAI,CAAC,eAAe,GAAG,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;wBAC/C,CAAC,EAAE,CAAC,CAAC,CACN,CAAC;wBACJ,OAAO,EAAE,EAAE,EAAE,GAAG,EAAE,IAAI,GAAG,GAAG,EAAE,CAAC;oBACjC,CAAC;oBACD,KAAK,eAAe,CAAC;oBACrB,KAAK,oBAAoB,CAAC;oBAC1B,KAAK,cAAc;wBACjB,OAAO,EAAE,CAAC;oBACZ;wBACE,OAAO,EAAE,CAAC;gBACd,CAAC;YACH,CAAC;SACF,CAAC;IACJ,CAAC,EAAE,QAAQ,CAAC,CAAC;AACf,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAAY;IAC3C,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC3B,OAAO,CAAC,CAAS,EAAU,EAAE;QAC3B,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,EAAE,CAAC,CAAC;QAC1F,MAAM,CAAC,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QACrD,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,GAAG,GAAG,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,EAAE,CAAC,CAAC;QAChG,OAAO,CAAC,CAAC;IACX,CAAC,CAAC;AACJ,CAAC"}

package/dist/server/sqlite/SqlitePipeline.d.ts.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"SqlitePipeline.d.ts","sourceRoot":"","sources":["../../../src/server/sqlite/SqlitePipeline.ts"],"names":[],"mappings":"AAgFA,wBAAgB,iBAAiB,CAC/B,UAAU,EAAE,MAAM,EAClB,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,EACnC,OAAO,CAAC,EAAE;IAAE,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,GAC1C;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,OAAO,EAAE,CAAA;CAAE,~~CAuFpC~~"}
1	+ {"version":3,"file":"SqlitePipeline.d.ts","sourceRoot":"","sources":["../../../src/server/sqlite/SqlitePipeline.ts"],"names":[],"mappings":"AAgFA,wBAAgB,iBAAiB,CAC/B,UAAU,EAAE,MAAM,EAClB,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,EACnC,OAAO,CAAC,EAAE;IAAE,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,GAC1C;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,OAAO,EAAE,CAAA;CAAE,CAiIpC"}

package/dist/server/sqlite/SqlitePipeline.js CHANGED Viewed

@@ -115,6 +115,50 @@ export function translatePipeline(collection, pipeline, options) {
                 parts.grouped = false;
                 break;
             }
+            case '$project': {
+                // Reshape `data` to the projected field set, keeping the row shape the
+                // DocStore hydrates (`_id, data, created, updated, version`). Inclusion
+                // ({field:1}) rebuilds `data` from only the listed keys; exclusion
+                // ({field:0}) strips the listed keys. Nested objects/arrays are
+                // preserved (not double-encoded) via the json_each `type` guard. A
+                // following $sort/$match still reads the base `data`, so it may reference
+                // projected-away fields — an intentional, documented divergence from
+                // Mongo that matches how these pipelines are written (project then sort
+                // on a projected field).
+                if (parts.grouped)
+                    Object.assign(parts, wrapAsSubquery(parts));
+                const proj = value;
+                const entries = Object.entries(proj);
+                const include = entries.filter(([, v]) => v === 1 || v === true).map(([k]) => k);
+                const exclude = entries.filter(([, v]) => v === 0 || v === false).map(([k]) => k);
+                if (include.length > 0 && exclude.length > 0) {
+                    throw new Error('[SqlitePipeline] $project cannot mix inclusion and exclusion');
+                }
+                const dataCol = parts.from.includes('_sub') ? '"data"' : 'data';
+                const asName = (k) => {
+                    if (!/^[a-zA-Z_][a-zA-Z0-9_]*$/.test(k)) {
+                        throw new Error(`[SqlitePipeline] $project field not a safe name: ${k}`);
+                    }
+                    return k;
+                };
+                let dataExpr;
+                if (include.length > 0) {
+                    const fields = include.filter((k) => !TOP_LEVEL_COLUMNS.has(k)).map(asName);
+                    dataExpr = fields.length
+                        ? `(SELECT json_group_object(je.key, ` +
+                            `CASE WHEN je.type IN ('object','array') THEN json(je.value) ELSE je.value END) ` +
+                            `FROM json_each(${dataCol}) je WHERE je.key IN (${fields.map((f) => `'${f}'`).join(', ')}))`
+                        : `'{}'`;
+                }
+                else {
+                    const fields = exclude.filter((k) => !TOP_LEVEL_COLUMNS.has(k)).map(asName);
+                    dataExpr = fields.length
+                        ? `json_remove(${dataCol}, ${fields.map((f) => `'$.${f}'`).join(', ')})`
+                        : dataCol;
+                }
+                parts.select = `_id, ${dataExpr} AS data, created, updated, version`;
+                break;
+            }
             case '$group': {
                 const group = value;
                 const groupId = group._id;

package/dist/server/sqlite/SqlitePipeline.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"SqlitePipeline.js","sourceRoot":"","sources":["../../../src/server/sqlite/SqlitePipeline.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAEpD,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC;AAE5E,SAAS,QAAQ,CAAC,KAAa,EAAE,MAAM,GAAG,KAAK;IAC7C,IAAI,iBAAiB,CAAC,GAAG,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,KAAK,GAAG,CAAC;IACtD,MAAM,OAAO,GAAG,wBAAwB,KAAK,IAAI,CAAC;IAClD,OAAO,MAAM,CAAC,CAAC,CAAC,QAAQ,OAAO,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC;AACvD,CAAC;AAcD,SAAS,QAAQ,CAAC,CAAa;IAC7B,IAAI,GAAG,GAAG,UAAU,CAAC,CAAC,MAAM,SAAS,CAAC,CAAC,IAAI,EAAE,CAAC;IAC9C,IAAI,CAAC,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC;QAAE,GAAG,IAAI,UAAU,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;IACjE,IAAI,CAAC,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC;QAAE,GAAG,IAAI,aAAa,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;IACrE,IAAI,CAAC,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC;QAAE,GAAG,IAAI,aAAa,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;IACrE,IAAI,CAAC,CAAC,KAAK,KAAK,IAAI;QAAE,GAAG,IAAI,UAAU,CAAC,CAAC,KAAK,EAAE,CAAC;IACjD,IAAI,CAAC,CAAC,MAAM,KAAK,IAAI;QAAE,GAAG,IAAI,WAAW,CAAC,CAAC,MAAM,EAAE,CAAC;IACpD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,cAAc,CAAC,CAAa;IACnC,MAAM,KAAK,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;IAC1B,OAAO;QACL,MAAM,EAAE,GAAG;QACX,IAAI,EAAE,IAAI,KAAK,WAAW;QAC1B,KAAK,EAAE,EAAE;QACT,OAAO,EAAE,EAAE;QACX,OAAO,EAAE,EAAE;QACX,KAAK,EAAE,IAAI;QACX,MAAM,EAAE,IAAI;QACZ,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC;QACrB,OAAO,EAAE,KAAK;KACf,CAAC;AACJ,CAAC;AAED,SAAS,kBAAkB,CAAC,GAA4B;IACtD,MAAM,CAAC,EAAE,EAAE,KAAK,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC;IAC5C,MAAM,GAAG,GACP,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC;QAChD,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC1B,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACpB,QAAQ,EAAE,EAAE,CAAC;QACX,KAAK,MAAM;YACT,IAAI,OAAO,KAAK,KAAK,QAAQ;gBAAE,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,kBAAkB;YACvE,OAAO,aAAa,GAAG,aAAa,CAAC;QACvC,KAAK,MAAM;YACT,OAAO,aAAa,GAAG,aAAa,CAAC;QACvC,KAAK,MAAM;YACT,OAAO,aAAa,GAAG,aAAa,CAAC;QACvC,KAAK,MAAM;YACT,OAAO,aAAa,GAAG,aAAa,CAAC;QACvC;YACE,MAAM,IAAI,KAAK,CAAC,6CAA6C,EAAE,EAAE,CAAC,CAAC;IACvE,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,KAAa,EAAE,GAAW,EAAE,OAAgB;IAC/D,MAAM,CAAC,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;IACrC,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,CAAC,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IAC5D,OAAO,IAAI,IAAI,aAAa,CAAC,KAAK,IAAI,IAAI,CAAC,EAAE,CAAC;AAChD,CAAC;AAED,MAAM,UAAU,iBAAiB,CAC/B,UAAkB,EAClB,QAAmC,EACnC,OAA2C;IAE3C,MAAM,KAAK,GAAe;QACxB,MAAM,EAAE,sCAAsC;QAC9C,IAAI,EAAE,IAAI,UAAU,GAAG;QACvB,KAAK,EAAE,EAAE;QACT,OAAO,EAAE,EAAE;QACX,OAAO,EAAE,EAAE;QACX,KAAK,EAAE,IAAI;QACX,MAAM,EAAE,IAAI;QACZ,MAAM,EAAE,EAAE;QACV,OAAO,EAAE,KAAK;KACf,CAAC;IAEF,KAAK,MAAM,KAAK,IAAI,QAAQ,EAAE,CAAC;QAC7B,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAE,CAAC;QAC/C,QAAQ,GAAG,EAAE,CAAC;YACZ,KAAK,QAAQ,CAAC,CAAC,CAAC;gBACd,IAAI,KAAK,CAAC,OAAO;oBAAE,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC;gBAC/D,MAAM,CAAC,GAAG,eAAe,CAAC,KAAgC,CAAC,CAAC;gBAC5D,IAAI,CAAC,CAAC,KAAK,EAAE,CAAC;oBACZ,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;oBAC1B,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC;gBACjC,CAAC;gBACD,MAAM;YACR,CAAC;YACD,KAAK,OAAO,CAAC,CAAC,CAAC;gBACb,IAAI,KAAK,CAAC,OAAO;oBAAE,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC;gBAC/D,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;gBAC5C,KAAK,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,KAA+B,CAAC,CAAC,GAAG,CACjE,CAAC,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,KAAK,EAAE,GAAG,EAAE,OAAO,CAAC,CACnD,CAAC;gBACF,MAAM;YACR,CAAC;YACD,KAAK,QAAQ;gBACX,KAAK,CAAC,KAAK,GAAG,KAAe,CAAC;gBAC9B,MAAM;YACR,KAAK,OAAO;gBACV,KAAK,CAAC,MAAM,GAAG,KAAe,CAAC;gBAC/B,MAAM;YACR,KAAK,QAAQ,CAAC,CAAC,CAAC;gBACd,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;gBAC9B,KAAK,CAAC,MAAM,GAAG,gBAAgB,KAAe,GAAG,CAAC;gBAClD,KAAK,CAAC,IAAI,GAAG,IAAI,KAAK,eAAe,CAAC;gBACtC,KAAK,CAAC,KAAK,GAAG,EAAE,CAAC;gBACjB,KAAK,CAAC,OAAO,GAAG,EAAE,CAAC;gBACnB,KAAK,CAAC,OAAO,GAAG,EAAE,CAAC;gBACnB,KAAK,CAAC,KAAK,GAAG,IAAI,CAAC;gBACnB,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC;gBACpB,KAAK,CAAC,OAAO,GAAG,KAAK,CAAC;gBACtB,MAAM;YACR,CAAC;YACD,KAAK,QAAQ,CAAC,CAAC,CAAC;gBACd,MAAM,KAAK,GAAG,KAAgC,CAAC;gBAC/C,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,CAAC;gBAC1B,MAAM,WAAW,GAAa,EAAE,CAAC;gBACjC,MAAM,YAAY,GAAa,EAAE,CAAC;gBAClC,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;oBACrB,WAAW,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;gBACpC,CAAC;qBAAM,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;oBAClE,MAAM,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;oBAC5C,WAAW,CAAC,IAAI,CAAC,GAAG,QAAQ,WAAW,CAAC,CAAC;oBACzC,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;gBAC9B,CAAC;qBAAM,CAAC;oBACN,MAAM,IAAI,KAAK,CACb,4CAA4C,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,CACtE,CAAC;gBACJ,CAAC;gBACD,KAAK,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;oBAClD,IAAI,KAAK,KAAK,KAAK;wBAAE,SAAS;oBAC9B,WAAW,CAAC,IAAI,CACd,GAAG,kBAAkB,CAAC,IAA+B,CAAC,QAAQ,KAAK,GAAG,CACvE,CAAC;gBACJ,CAAC;gBACD,KAAK,CAAC,MAAM,GAAG,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACtC,KAAK,CAAC,OAAO,GAAG,YAAY,CAAC;gBAC7B,KAAK,CAAC,OAAO,GAAG,IAAI,CAAC;gBACrB,MAAM;YACR,CAAC;YACD;gBACE,MAAM,IAAI,KAAK,CAAC,gDAAgD,GAAG,EAAE,CAAC,CAAC;QAC3E,CAAC;IACH,CAAC;IAED,IAAI,OAAO,EAAE,IAAI,KAAK,SAAS;QAAE,KAAK,CAAC,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAC7D,IAAI,OAAO,EAAE,KAAK,KAAK,SAAS;QAAE,KAAK,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;IAE9D,OAAO,EAAE,GAAG,EAAE,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;AACxD,CAAC"}
1	+ {"version":3,"file":"SqlitePipeline.js","sourceRoot":"","sources":["../../../src/server/sqlite/SqlitePipeline.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAEpD,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC;AAE5E,SAAS,QAAQ,CAAC,KAAa,EAAE,MAAM,GAAG,KAAK;IAC7C,IAAI,iBAAiB,CAAC,GAAG,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,KAAK,GAAG,CAAC;IACtD,MAAM,OAAO,GAAG,wBAAwB,KAAK,IAAI,CAAC;IAClD,OAAO,MAAM,CAAC,CAAC,CAAC,QAAQ,OAAO,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC;AACvD,CAAC;AAcD,SAAS,QAAQ,CAAC,CAAa;IAC7B,IAAI,GAAG,GAAG,UAAU,CAAC,CAAC,MAAM,SAAS,CAAC,CAAC,IAAI,EAAE,CAAC;IAC9C,IAAI,CAAC,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC;QAAE,GAAG,IAAI,UAAU,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;IACjE,IAAI,CAAC,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC;QAAE,GAAG,IAAI,aAAa,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;IACrE,IAAI,CAAC,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC;QAAE,GAAG,IAAI,aAAa,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;IACrE,IAAI,CAAC,CAAC,KAAK,KAAK,IAAI;QAAE,GAAG,IAAI,UAAU,CAAC,CAAC,KAAK,EAAE,CAAC;IACjD,IAAI,CAAC,CAAC,MAAM,KAAK,IAAI;QAAE,GAAG,IAAI,WAAW,CAAC,CAAC,MAAM,EAAE,CAAC;IACpD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,cAAc,CAAC,CAAa;IACnC,MAAM,KAAK,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;IAC1B,OAAO;QACL,MAAM,EAAE,GAAG;QACX,IAAI,EAAE,IAAI,KAAK,WAAW;QAC1B,KAAK,EAAE,EAAE;QACT,OAAO,EAAE,EAAE;QACX,OAAO,EAAE,EAAE;QACX,KAAK,EAAE,IAAI;QACX,MAAM,EAAE,IAAI;QACZ,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC;QACrB,OAAO,EAAE,KAAK;KACf,CAAC;AACJ,CAAC;AAED,SAAS,kBAAkB,CAAC,GAA4B;IACtD,MAAM,CAAC,EAAE,EAAE,KAAK,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC;IAC5C,MAAM,GAAG,GACP,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC;QAChD,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC1B,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACpB,QAAQ,EAAE,EAAE,CAAC;QACX,KAAK,MAAM;YACT,IAAI,OAAO,KAAK,KAAK,QAAQ;gBAAE,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,kBAAkB;YACvE,OAAO,aAAa,GAAG,aAAa,CAAC;QACvC,KAAK,MAAM;YACT,OAAO,aAAa,GAAG,aAAa,CAAC;QACvC,KAAK,MAAM;YACT,OAAO,aAAa,GAAG,aAAa,CAAC;QACvC,KAAK,MAAM;YACT,OAAO,aAAa,GAAG,aAAa,CAAC;QACvC;YACE,MAAM,IAAI,KAAK,CAAC,6CAA6C,EAAE,EAAE,CAAC,CAAC;IACvE,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,KAAa,EAAE,GAAW,EAAE,OAAgB;IAC/D,MAAM,CAAC,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;IACrC,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,CAAC,IAAI,KAAK,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IAC5D,OAAO,IAAI,IAAI,aAAa,CAAC,KAAK,IAAI,IAAI,CAAC,EAAE,CAAC;AAChD,CAAC;AAED,MAAM,UAAU,iBAAiB,CAC/B,UAAkB,EAClB,QAAmC,EACnC,OAA2C;IAE3C,MAAM,KAAK,GAAe;QACxB,MAAM,EAAE,sCAAsC;QAC9C,IAAI,EAAE,IAAI,UAAU,GAAG;QACvB,KAAK,EAAE,EAAE;QACT,OAAO,EAAE,EAAE;QACX,OAAO,EAAE,EAAE;QACX,KAAK,EAAE,IAAI;QACX,MAAM,EAAE,IAAI;QACZ,MAAM,EAAE,EAAE;QACV,OAAO,EAAE,KAAK;KACf,CAAC;IAEF,KAAK,MAAM,KAAK,IAAI,QAAQ,EAAE,CAAC;QAC7B,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,GAAG,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAE,CAAC;QAC/C,QAAQ,GAAG,EAAE,CAAC;YACZ,KAAK,QAAQ,CAAC,CAAC,CAAC;gBACd,IAAI,KAAK,CAAC,OAAO;oBAAE,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC;gBAC/D,MAAM,CAAC,GAAG,eAAe,CAAC,KAAgC,CAAC,CAAC;gBAC5D,IAAI,CAAC,CAAC,KAAK,EAAE,CAAC;oBACZ,KAAK,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;oBAC1B,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC;gBACjC,CAAC;gBACD,MAAM;YACR,CAAC;YACD,KAAK,OAAO,CAAC,CAAC,CAAC;gBACb,IAAI,KAAK,CAAC,OAAO;oBAAE,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC;gBAC/D,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;gBAC5C,KAAK,CAAC,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,KAA+B,CAAC,CAAC,GAAG,CACjE,CAAC,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,WAAW,CAAC,KAAK,EAAE,GAAG,EAAE,OAAO,CAAC,CACnD,CAAC;gBACF,MAAM;YACR,CAAC;YACD,KAAK,QAAQ;gBACX,KAAK,CAAC,KAAK,GAAG,KAAe,CAAC;gBAC9B,MAAM;YACR,KAAK,OAAO;gBACV,KAAK,CAAC,MAAM,GAAG,KAAe,CAAC;gBAC/B,MAAM;YACR,KAAK,QAAQ,CAAC,CAAC,CAAC;gBACd,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC;gBAC9B,KAAK,CAAC,MAAM,GAAG,gBAAgB,KAAe,GAAG,CAAC;gBAClD,KAAK,CAAC,IAAI,GAAG,IAAI,KAAK,eAAe,CAAC;gBACtC,KAAK,CAAC,KAAK,GAAG,EAAE,CAAC;gBACjB,KAAK,CAAC,OAAO,GAAG,EAAE,CAAC;gBACnB,KAAK,CAAC,OAAO,GAAG,EAAE,CAAC;gBACnB,KAAK,CAAC,KAAK,GAAG,IAAI,CAAC;gBACnB,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC;gBACpB,KAAK,CAAC,OAAO,GAAG,KAAK,CAAC;gBACtB,MAAM;YACR,CAAC;YACD,KAAK,UAAU,CAAC,CAAC,CAAC;gBAChB,uEAAuE;gBACvE,wEAAwE;gBACxE,mEAAmE;gBACnE,gEAAgE;gBAChE,mEAAmE;gBACnE,0EAA0E;gBAC1E,qEAAqE;gBACrE,wEAAwE;gBACxE,yBAAyB;gBACzB,IAAI,KAAK,CAAC,OAAO;oBAAE,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC;gBAC/D,MAAM,IAAI,GAAG,KAAyC,CAAC;gBACvD,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;gBACrC,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;gBACjF,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;gBAClF,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBAC7C,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAC;gBAClF,CAAC;gBACD,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC;gBAChE,MAAM,MAAM,GAAG,CAAC,CAAS,EAAU,EAAE;oBACnC,IAAI,CAAC,0BAA0B,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;wBACxC,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,EAAE,CAAC,CAAC;oBAC3E,CAAC;oBACD,OAAO,CAAC,CAAC;gBACX,CAAC,CAAC;gBACF,IAAI,QAAgB,CAAC;gBACrB,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;oBACvB,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;oBAC5E,QAAQ,GAAG,MAAM,CAAC,MAAM;wBACtB,CAAC,CAAC,oCAAoC;4BACpC,iFAAiF;4BACjF,kBAAkB,OAAO,yBAAyB,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI;wBAC9F,CAAC,CAAC,MAAM,CAAC;gBACb,CAAC;qBAAM,CAAC;oBACN,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;oBAC5E,QAAQ,GAAG,MAAM,CAAC,MAAM;wBACtB,CAAC,CAAC,eAAe,OAAO,KAAK,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;wBACxE,CAAC,CAAC,OAAO,CAAC;gBACd,CAAC;gBACD,KAAK,CAAC,MAAM,GAAG,QAAQ,QAAQ,qCAAqC,CAAC;gBACrE,MAAM;YACR,CAAC;YACD,KAAK,QAAQ,CAAC,CAAC,CAAC;gBACd,MAAM,KAAK,GAAG,KAAgC,CAAC;gBAC/C,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,CAAC;gBAC1B,MAAM,WAAW,GAAa,EAAE,CAAC;gBACjC,MAAM,YAAY,GAAa,EAAE,CAAC;gBAClC,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;oBACrB,WAAW,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;gBACpC,CAAC;qBAAM,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;oBAClE,MAAM,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;oBAC5C,WAAW,CAAC,IAAI,CAAC,GAAG,QAAQ,WAAW,CAAC,CAAC;oBACzC,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;gBAC9B,CAAC;qBAAM,CAAC;oBACN,MAAM,IAAI,KAAK,CACb,4CAA4C,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,CACtE,CAAC;gBACJ,CAAC;gBACD,KAAK,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;oBAClD,IAAI,KAAK,KAAK,KAAK;wBAAE,SAAS;oBAC9B,WAAW,CAAC,IAAI,CACd,GAAG,kBAAkB,CAAC,IAA+B,CAAC,QAAQ,KAAK,GAAG,CACvE,CAAC;gBACJ,CAAC;gBACD,KAAK,CAAC,MAAM,GAAG,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBACtC,KAAK,CAAC,OAAO,GAAG,YAAY,CAAC;gBAC7B,KAAK,CAAC,OAAO,GAAG,IAAI,CAAC;gBACrB,MAAM;YACR,CAAC;YACD;gBACE,MAAM,IAAI,KAAK,CAAC,gDAAgD,GAAG,EAAE,CAAC,CAAC;QAC3E,CAAC;IACH,CAAC;IAED,IAAI,OAAO,EAAE,IAAI,KAAK,SAAS;QAAE,KAAK,CAAC,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAC7D,IAAI,OAAO,EAAE,KAAK,KAAK,SAAS;QAAE,KAAK,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;IAE9D,OAAO,EAAE,GAAG,EAAE,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;AACxD,CAAC"}

package/dist/shared/menuChrome.d.ts ADDED Viewed

@@ -0,0 +1,22 @@
+/**
+ * menuChrome — the shared look for popup/context menus, as framework-agnostic
+ * HTML/CSS strings so it can be used by native shells (ugly-studio's Electron
+ * context menu + ugly.bot menu) as well as by web/React surfaces (which style
+ * their own menu markup from the SAME tokens below). One source of truth for
+ * menu typography, spacing, icons, and hover.
+ *
+ * Usage: drop MENU_FONTS in <head>, then MENU_TOKENS + MENU_CSS in a <style>.
+ * Build rows as `<div class="mi"><span class="ic">…icon…</span><span class="lbl">
+ * Label</span><span class="acc">⌘X</span></div>` and dividers as `<div class="sep">`.
+ */
+/** Webfonts — IBM Plex Mono (rows) + Bricolage (display). */
+export declare const MENU_FONTS: string;
+/** Industrial tokens (light + dark) shared by every menu. */
+export declare const MENU_TOKENS = ":root{\n  --panel2:#ece6da;--panel:#f2ede3;--dock:#e0d9cb;--line:#d3cab9;--line2:#c0b6a3;\n  --ink:#23201a;--dim:#6c6457;--faint:#a09784;--orange:#e8590c;--orange-d:#c2430a;--orange-soft:#f7e7d6;\n  --shadow:0 24px 52px -20px rgba(20,12,4,.6),0 8px 20px -10px rgba(20,12,4,.4);\n  --disp:'Bricolage Grotesque',ui-sans-serif,system-ui,sans-serif;\n  --mono:'IBM Plex Mono',ui-monospace,'SF Mono',Menlo,monospace;\n}\n@media (prefers-color-scheme:dark){:root{\n  --panel2:#241e18;--panel:#1e1915;--dock:#13100c;--line:#322a22;--line2:#473a2d;\n  --ink:#efe7da;--dim:#a99a86;--faint:#6f6453;--orange:#ff6a1f;--orange-d:#d44e0a;--orange-soft:rgba(255,106,31,.15);\n  --shadow:0 24px 52px -20px rgba(0,0,0,.62),0 8px 20px -10px rgba(0,0,0,.5);\n}}";
+/**
+ * The shared card + row primitives. `.menu` is the card; `.mi` a row (icon +
+ * label + trailing accel/chevron); `.sep` a divider. Icons work either wrapped
+ * in `.ic` or as a direct `<svg>` child.
+ */
+export declare const MENU_CSS = ".menu{background:var(--panel2);border:1px solid var(--line2);border-radius:13px;box-shadow:var(--shadow);padding:7px}\n.mi{display:flex;align-items:center;gap:11px;width:100%;padding:8px 9px;border:none;background:none;border-radius:8px;color:var(--ink);font-family:var(--mono);font-size:11.5px;line-height:1.35;text-align:left;white-space:nowrap;cursor:pointer}\n.mi:hover,.mi.active{background:var(--orange-soft);color:var(--orange)}\n.mi .ic{width:15px;height:15px;flex:none;display:grid;place-items:center;color:var(--dim)}\n.mi .ic svg{width:15px;height:15px}\n.mi:hover .ic,.mi.active .ic{color:var(--orange)}\n.mi>svg{width:15px;height:15px;flex:none;color:var(--dim)}\n.mi:hover>svg,.mi.active>svg{color:var(--orange)}\n.mi .lbl{flex:1;min-width:0;overflow:hidden;text-overflow:ellipsis}\n.mi .acc,.mi .chev{margin-left:auto;flex:none;color:var(--faint);font-size:10px;letter-spacing:.02em;display:grid}\n.mi .chev svg{width:14px;height:14px;display:block}\n.mi:hover .acc,.mi.active .acc,.mi:hover .chev,.mi.active .chev{color:var(--orange-d)}\n.mi.dis{color:var(--faint);cursor:default}.mi.dis:hover{background:none}.mi.dis .ic{color:var(--faint)}\n.sep{height:1px;background:var(--line);margin:6px 5px}";
+//# sourceMappingURL=menuChrome.d.ts.map

package/dist/shared/menuChrome.d.ts.map ADDED Viewed

	@@ -0,0 +1 @@
1	+ {"version":3,"file":"menuChrome.d.ts","sourceRoot":"","sources":["../../src/shared/menuChrome.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,6DAA6D;AAC7D,eAAO,MAAM,UAAU,QAEyJ,CAAC;AAEjL,6DAA6D;AAC7D,eAAO,MAAM,WAAW,2uBAWrB,CAAC;AAEJ;;;;GAIG;AACH,eAAO,MAAM,QAAQ,ksCAakC,CAAC"}

package/dist/shared/menuChrome.js ADDED Viewed

@@ -0,0 +1,47 @@
+/**
+ * menuChrome — the shared look for popup/context menus, as framework-agnostic
+ * HTML/CSS strings so it can be used by native shells (ugly-studio's Electron
+ * context menu + ugly.bot menu) as well as by web/React surfaces (which style
+ * their own menu markup from the SAME tokens below). One source of truth for
+ * menu typography, spacing, icons, and hover.
+ *
+ * Usage: drop MENU_FONTS in <head>, then MENU_TOKENS + MENU_CSS in a <style>.
+ * Build rows as `<div class="mi"><span class="ic">…icon…</span><span class="lbl">
+ * Label</span><span class="acc">⌘X</span></div>` and dividers as `<div class="sep">`.
+ */
+/** Webfonts — IBM Plex Mono (rows) + Bricolage (display). */
+export const MENU_FONTS = '<link rel="preconnect" href="https://fonts.googleapis.com">' +
+    '<link href="https://fonts.googleapis.com/css2?family=Bricolage+Grotesque:opsz,wght@12..96,400..800&family=IBM+Plex+Mono:wght@400;500;600;700&display=swap" rel="stylesheet">';
+/** Industrial tokens (light + dark) shared by every menu. */
+export const MENU_TOKENS = `:root{
+  --panel2:#ece6da;--panel:#f2ede3;--dock:#e0d9cb;--line:#d3cab9;--line2:#c0b6a3;
+  --ink:#23201a;--dim:#6c6457;--faint:#a09784;--orange:#e8590c;--orange-d:#c2430a;--orange-soft:#f7e7d6;
+  --shadow:0 24px 52px -20px rgba(20,12,4,.6),0 8px 20px -10px rgba(20,12,4,.4);
+  --disp:'Bricolage Grotesque',ui-sans-serif,system-ui,sans-serif;
+  --mono:'IBM Plex Mono',ui-monospace,'SF Mono',Menlo,monospace;
+}
+@media (prefers-color-scheme:dark){:root{
+  --panel2:#241e18;--panel:#1e1915;--dock:#13100c;--line:#322a22;--line2:#473a2d;
+  --ink:#efe7da;--dim:#a99a86;--faint:#6f6453;--orange:#ff6a1f;--orange-d:#d44e0a;--orange-soft:rgba(255,106,31,.15);
+  --shadow:0 24px 52px -20px rgba(0,0,0,.62),0 8px 20px -10px rgba(0,0,0,.5);
+}}`;
+/**
+ * The shared card + row primitives. `.menu` is the card; `.mi` a row (icon +
+ * label + trailing accel/chevron); `.sep` a divider. Icons work either wrapped
+ * in `.ic` or as a direct `<svg>` child.
+ */
+export const MENU_CSS = `.menu{background:var(--panel2);border:1px solid var(--line2);border-radius:13px;box-shadow:var(--shadow);padding:7px}
+.mi{display:flex;align-items:center;gap:11px;width:100%;padding:8px 9px;border:none;background:none;border-radius:8px;color:var(--ink);font-family:var(--mono);font-size:11.5px;line-height:1.35;text-align:left;white-space:nowrap;cursor:pointer}
+.mi:hover,.mi.active{background:var(--orange-soft);color:var(--orange)}
+.mi .ic{width:15px;height:15px;flex:none;display:grid;place-items:center;color:var(--dim)}
+.mi .ic svg{width:15px;height:15px}
+.mi:hover .ic,.mi.active .ic{color:var(--orange)}
+.mi>svg{width:15px;height:15px;flex:none;color:var(--dim)}
+.mi:hover>svg,.mi.active>svg{color:var(--orange)}
+.mi .lbl{flex:1;min-width:0;overflow:hidden;text-overflow:ellipsis}
+.mi .acc,.mi .chev{margin-left:auto;flex:none;color:var(--faint);font-size:10px;letter-spacing:.02em;display:grid}
+.mi .chev svg{width:14px;height:14px;display:block}
+.mi:hover .acc,.mi.active .acc,.mi:hover .chev,.mi.active .chev{color:var(--orange-d)}
+.mi.dis{color:var(--faint);cursor:default}.mi.dis:hover{background:none}.mi.dis .ic{color:var(--faint)}
+.sep{height:1px;background:var(--line);margin:6px 5px}`;
+//# sourceMappingURL=menuChrome.js.map

package/dist/shared/menuChrome.js.map ADDED Viewed

	@@ -0,0 +1 @@
1	+ {"version":3,"file":"menuChrome.js","sourceRoot":"","sources":["../../src/shared/menuChrome.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,6DAA6D;AAC7D,MAAM,CAAC,MAAM,UAAU,GACrB,6DAA6D;IAC7D,8KAA8K,CAAC;AAEjL,6DAA6D;AAC7D,MAAM,CAAC,MAAM,WAAW,GAAG;;;;;;;;;;;GAWxB,CAAC;AAEJ;;;;GAIG;AACH,MAAM,CAAC,MAAM,QAAQ,GAAG;;;;;;;;;;;;;uDAa+B,CAAC"}

package/package.json CHANGED Viewed

@@ -1,6 +1,6 @@
 {
   "name": "ugly-app",
-  "version": "0.1.859",
+  "version": "0.1.861",
   "type": "module",
   "comment:files": "Allowlist what ships to npm. dist = runtime; src = sourcemap targets (dist/*.js.map reference ../../src/); templates = CLI scaffold. Everything else at repo root (.pgdata local Postgres, coverage, assets/icons sources, test/, test-results/) is excluded by omission. The !negations strip the scaffold's installed deps + cruft (templates/node_modules is 200MB+ and must never ship). package.json/README/LICENSE ship automatically.",
   "files": [
@@ -21,6 +21,7 @@
     "./server/ssr": "./dist/server/adapter/workers/createSsrRender.js",
     "./server/publishFrame": "./dist/server/adapter/publishFrame.js",
     "./shared": "./dist/shared/index.js",
+    "./menu-chrome": "./dist/shared/menuChrome.js",
     "./cli/publish": "./dist/cli/publish/orchestrator.js",
     "./cli/publish/types": "./dist/cli/publish/types.js",
     "./cli/publish/secret-storage": "./dist/cli/publish/secret-storage.js",

package/src/cli/version.ts CHANGED Viewed

@@ -1,2 +1,2 @@
 // Auto-generated by prebuild — do not edit manually
-export const CLI_VERSION = "0.1.859";
+export const CLI_VERSION = "0.1.861";

package/src/playwright/dev-auth.ts ADDED Viewed

@@ -0,0 +1,46 @@
+import { readFileSync } from 'node:fs';
+import { homedir } from 'node:os';
+import { join } from 'node:path';
+import type { Page } from '@playwright/test';
+/**
+ * The developer's live ugly.bot session, persisted by Ugly Studio / `ugly-app login` at
+ * `~/.ugly-bot/auth.json` as `{ token, userId, serverUrl }`. This is a REAL ugly.bot-issued
+ * JWT — a Mode-A deployed app accepts it, and it bills real AI to the developer.
+ */
+export interface DevAuth {
+  token: string;
+  userId: string;
+  serverUrl: string;
+}
+/**
+ * Load the developer's real ugly.bot session token from `~/.ugly-bot/auth.json`, for tests
+ * that must run against the DEPLOYED app / real AI (the token that `ugly.bot/verify`
+ * accepts). Returns `null` when the file is absent (fresh CI) so a spec can `test.skip()`
+ * instead of failing. The token is read at run time — NEVER hard-code or commit it.
+ *
+ * @example
+ * const auth = loadDevAuth();
+ * test.skip(!auth, 'no ~/.ugly-bot/auth.json — run `ugly-app login`');
+ * await authenticateReal(page, auth!, 'code.ugly.bot');
+ */
+export function loadDevAuth(): DevAuth | null {
+  try {
+    const raw = JSON.parse(readFileSync(join(homedir(), '.ugly-bot', 'auth.json'), 'utf8')) as Partial<DevAuth>;
+    if (!raw.token || !raw.userId) return null;
+    return { token: raw.token, userId: raw.userId, serverUrl: raw.serverUrl ?? 'https://ugly.bot' };
+  } catch {
+    return null;
+  }
+}
+/**
+ * Inject a real ugly.bot session cookie for a DEPLOYED domain (e.g. `myapp.ugly.bot`) before
+ * navigating — the counterpart to {@link injectAuthCookie} (which targets `localhost`).
+ */
+export async function authenticateReal(page: Page, auth: DevAuth, domain: string): Promise<void> {
+  await page.context().addCookies([
+    { name: 'auth_token', value: auth.token, domain, path: '/', secure: true, sameSite: 'None' },
+  ]);
+}

package/src/playwright/index.ts CHANGED Viewed

@@ -205,3 +205,7 @@ export async function expectClean(
 export { installUglyNativeMock } from './native-mock.js';
 export type { UglyNativeMock } from './native-mock.js';
+export { installRealNative, makePathResolver } from './real-native.js';
+export type { RealNativeOptions } from './real-native.js';
+export { loadDevAuth, authenticateReal } from './dev-auth.js';
+export type { DevAuth } from './dev-auth.js';

package/src/playwright/real-native.ts ADDED Viewed

@@ -0,0 +1,219 @@
+import * as fs from 'node:fs';
+import { spawn } from 'node:child_process';
+import { isAbsolute, join, resolve, sep } from 'node:path';
+import type { Page } from '@playwright/test';
+import type { NativePlatform } from '../native/protocol.js';
+/**
+ * Options for {@link installRealNative}.
+ */
+export interface RealNativeOptions {
+  /** `window.UglyNative.platform`. Must be non-`'web'` for `isNativeAvailable()` to be
+   *  true (many apps gate their desktop shell on it). Default `'desktop'`. */
+  platform?: NativePlatform;
+  /**
+   * Prepend the bundled toolchain (`node`, `git`, `rg`, `uv`, …) onto every spawn's PATH,
+   * bundled-first, so a real `run_command` / ripgrep search / indexer resolves the SAME
+   * deterministic binaries Studio ships — instead of whatever happens to be on the CI
+   * PATH. Requires the tools to already be installed under `BINARIES_ROOT`
+   * (`~/.ugly-studio/binaries`); pre-provision them with `ensureTools()` from
+   * `ugly-app/native/server/binaries` in your global setup, or point `UGLY_BINARIES_BASE`
+   * at a local mirror. Best-effort: if the bundle can't be resolved it logs and falls
+   * back to the ambient PATH. Default `false` (ambient PATH).
+   */
+  bundledBinaries?: boolean;
+  /** Extra env applied to every spawned process (merged over `process.env`). */
+  spawnEnv?: Record<string, string>;
+}
+/**
+ * Install a `window.UglyNative` backed by the REAL filesystem + real child processes,
+ * **confined to `root`** (a temp project dir). Unlike {@link installUglyNativeMock}
+ * (canned per-channel results), this lets an app actually read/write files and spawn
+ * processes — so a Playwright test can assert that code really changed ON DISK, and that
+ * native-backed panels/search run for real — without the Studio desktop shell.
+ *
+ * **Folder confinement (the sandbox):** every `fs.*` path and every spawn `cwd` is resolved
+ * through {@link makePathResolver} and a path that escapes `root` (`..`, an absolute path
+ * outside it, or a NUL byte) THROWS. This mirrors the production capability gate
+ * (`fs: 'scoped'`), so a test can prove the app never touches files outside the folder it
+ * was given. Point `root` at a fresh `fs.mkdtempSync(...)` per test.
+ *
+ * **Scope:** implements `fs.*`, `process.spawn` (+ its stdout/stderr/exit events), and
+ * auto-grants `permissions.*`. It does NOT run coding **tasks** (`task.start` forks a Node
+ * child that only the real Studio host / a `TaskManager` can spawn) — for task-driven
+ * flows use {@link installUglyNativeMock} and hand-drive `task.event:<id>` events, or run
+ * against a real host. Must be called BEFORE `page.goto()`.
+ *
+ * @example
+ * const root = fs.mkdtempSync(path.join(os.tmpdir(), 'eval-'));
+ * fs.writeFileSync(path.join(root, 'index.ts'), 'export const x = 1;\n');
+ * await installRealNative(page, root, { bundledBinaries: true });
+ * await page.goto('/');
+ * // …drive the app…  then assert on disk:
+ * expect(fs.readFileSync(path.join(root, 'index.ts'), 'utf8')).toContain('x = 2');
+ */
+export async function installRealNative(
+  page: Page,
+  root: string,
+  opts: RealNativeOptions = {},
+): Promise<void> {
+  const platform = opts.platform ?? 'desktop';
+  const rp = makePathResolver(root);
+  // Bundled toolchain PATH for real spawns (opt-in). Resolved once, best-effort.
+  let spawnEnv: Record<string, string> = { ...(opts.spawnEnv ?? {}) };
+  if (opts.bundledBinaries) {
+    try {
+      const { bundledEnv, BINARIES_ROOT } = (await import(
+        '../native/server/binaries/index.js'
+      )) as { bundledEnv: (root: string) => Record<string, string>; BINARIES_ROOT: string };
+      spawnEnv = { ...bundledEnv(BINARIES_ROOT), ...spawnEnv };
+    } catch (e) {
+      // eslint-disable-next-line no-console
+      console.warn('[installRealNative] bundledBinaries requested but unavailable — using ambient PATH', e);
+    }
+  }
+  // ── Node-side bindings, all path-confined to `root`. ──────────────────────────────────
+  await page.exposeFunction('__nfsReadFile', (p: string) => fs.readFileSync(rp(p), 'utf8'));
+  await page.exposeFunction('__nfsWriteFile', (p: string, c: string) => {
+    fs.writeFileSync(rp(p), c ?? '');
+    return true;
+  });
+  await page.exposeFunction('__nfsReaddir', (p: string) =>
+    fs.readdirSync(rp(p), { withFileTypes: true }).map((d) => ({
+      name: d.name,
+      isDirectory: d.isDirectory(),
+      isFile: d.isFile(),
+    })),
+  );
+  await page.exposeFunction('__nfsMkdir', (p: string) => { fs.mkdirSync(rp(p), { recursive: true }); return true; });
+  await page.exposeFunction('__nfsRm', (p: string) => { fs.rmSync(rp(p), { recursive: true, force: true }); return true; });
+  await page.exposeFunction('__nfsRename', (a: string, b: string) => { fs.renameSync(rp(a), rp(b)); return true; });
+  await page.exposeFunction('__nfsStat', (p: string) => {
+    const s = fs.statSync(rp(p));
+    return { size: s.size, isDirectory: s.isDirectory(), isFile: s.isFile(), mtimeMs: s.mtimeMs };
+  });
+  await page.exposeFunction('__nfsExists', (p: string) => {
+    try { return fs.existsSync(rp(p)); } catch { return false; }
+  });
+  await page.exposeFunction(
+    '__nproc',
+    (cmd: string, args: string[], cwd: string | undefined, env: Record<string, string> | undefined) =>
+      new Promise<{ stdout: string; stderr: string; code: number | null }>((res) => {
+        let out = '';
+        let err = '';
+        // A cwd that escapes the sandbox is silently pinned back to root (never runs outside).
+        let safeCwd = root;
+        try { safeCwd = cwd ? rp(cwd) : root; } catch { safeCwd = root; }
+        const proc = spawn(cmd, args ?? [], { cwd: safeCwd, env: { ...process.env, ...spawnEnv, ...(env ?? {}) } });
+        proc.stdout?.on('data', (d: Buffer) => { out += d.toString(); });
+        proc.stderr?.on('data', (d: Buffer) => { err += d.toString(); });
+        proc.on('error', (e) => res({ stdout: out, stderr: err + String(e), code: 1 }));
+        proc.on('close', (code) => res({ stdout: out, stderr: err, code }));
+      }),
+  );
+  // ── In-page UglyNative: route the unified protocol to the exposed Node bindings. ──────
+  // Process output is collected to completion in Node then replayed as stdout/exit events
+  // once the app has subscribed to the per-id channels.
+  await page.addInitScript((platformArg) => {
+    type Cb = (d: unknown) => void;
+    interface ProcResult { stdout: string; stderr: string; code: number | null }
+    // The Node bindings exposed above, as seen from the page. `Record<string,unknown>`
+    // payloads keep field access typed without an `any` escape hatch.
+    const w = window as unknown as {
+      __nfsReadFile: (p: string) => Promise<string>;
+      __nfsWriteFile: (p: string, c: string) => Promise<boolean>;
+      __nfsReaddir: (p: string) => Promise<{ name: string; isDirectory: boolean; isFile: boolean }[]>;
+      __nfsMkdir: (p: string) => Promise<boolean>;
+      __nfsRm: (p: string) => Promise<boolean>;
+      __nfsRename: (a: string, b: string) => Promise<boolean>;
+      __nfsStat: (p: string) => Promise<{ size: number; isDirectory: boolean; isFile: boolean; mtimeMs: number }>;
+      __nfsExists: (p: string) => Promise<boolean>;
+      __nproc: (cmd: string, args: string[], cwd: string | undefined, env: Record<string, string> | undefined) => Promise<ProcResult>;
+      UglyNative: unknown;
+    };
+    const listeners: Record<string, Cb[]> = {};
+    let seq = 0;
+    const emit = (e: string, d: unknown): void => (listeners[e] ?? []).forEach((cb) => cb(d));
+    const s = (v: unknown): string =>
+      typeof v === 'string' ? v : typeof v === 'number' || typeof v === 'boolean' ? String(v) : '';
+    w.UglyNative = {
+      platform: platformArg,
+      subscribe: (e: string, cb: Cb) => {
+        (listeners[e] ??= []).push(cb);
+        return () => { listeners[e] = (listeners[e] ?? []).filter((f) => f !== cb); };
+      },
+      invoke: async (ch: string, payload: Record<string, unknown> = {}) => {
+        const p = payload;
+        switch (ch) {
+          case 'permissions.request':
+          case 'permissions.query':
+            return { granted: { fs: 'full', process: 'full' } };
+          case 'fs.readFile':
+            return { content: await w.__nfsReadFile(s(p.path)) };
+          case 'fs.writeFile':
+            await w.__nfsWriteFile(s(p.path), s(p.content));
+            return {};
+          case 'fs.readdir':
+            return { entries: await w.__nfsReaddir(s(p.path)) };
+          case 'fs.mkdir':
+            await w.__nfsMkdir(s(p.path));
+            return {};
+          case 'fs.rm':
+            await w.__nfsRm(s(p.path));
+            return {};
+          case 'fs.rename':
+            await w.__nfsRename(s(p.from ?? p.oldPath), s(p.to ?? p.newPath));
+            return {};
+          case 'fs.stat':
+            return await w.__nfsStat(s(p.path));
+          case 'fs.exists':
+            return { exists: await w.__nfsExists(s(p.path)) };
+          case 'fs.realpath':
+            return { path: s(p.path) };
+          case 'process.spawn': {
+            const id = `p${seq++}`;
+            const args = Array.isArray(p.args) ? p.args.map(s) : [];
+            const env = (p.env && typeof p.env === 'object' ? p.env : {}) as Record<string, string>;
+            void w
+              .__nproc(s(p.cmd), args, p.cwd ? s(p.cwd) : undefined, env)
+              .then((r: ProcResult) =>
+                setTimeout(() => {
+                  if (r.stdout) emit('process.stdout:' + id, { chunk: r.stdout });
+                  if (r.stderr) emit('process.stderr:' + id, { chunk: r.stderr });
+                  emit('process.exit:' + id, { code: r.code });
+                }, 0),
+              );
+            return { id, pid: 1000 + seq };
+          }
+          case 'process.write':
+          case 'process.closeStdin':
+          case 'process.kill':
+            return {};
+          default:
+            return {};
+        }
+      },
+    };
+  }, platform);
+}
+/**
+ * Build a sandbox path resolver confined to `root`. Returns an absolute path inside `root`,
+ * or THROWS on any escape (`..` traversal, an absolute path outside `root`, or a NUL byte).
+ * Mirrors the production `resolveScopedPath` used by the `fs: 'scoped'` capability grant, so
+ * a test's confinement matches how a real scoped app is limited. Exported so callers can
+ * reuse the same check for their own bindings.
+ */
+export function makePathResolver(root: string): (p: string) => string {
+  const base = resolve(root);
+  return (p: string): string => {
+    if (typeof p === 'string' && p.includes('\0')) throw new Error(`path contains NUL: ${p}`);
+    const r = resolve(isAbsolute(p) ? p : join(base, p));
+    if (r !== base && !r.startsWith(base + sep)) throw new Error(`path escapes project root: ${p}`);
+    return r;
+  };
+}

package/src/server/sqlite/SqlitePipeline.test.ts CHANGED Viewed

@@ -26,6 +26,43 @@ describe('SqlitePipeline.translatePipeline', () => {
     expect(sql).not.toContain('GROUP BY');
   });
+  it('$project inclusion rebuilds data from only the listed keys (nested-safe) + keeps top-level cols', () => {
+    const { sql } = translatePipeline('c', [
+      { $project: { _id: 1, title: 1, tags: 1 } },
+    ]);
+    expect(sql).toContain('_id,');
+    expect(sql).toContain('created, updated, version');
+    expect(sql).toContain("json_each(data) je WHERE je.key IN ('title', 'tags')");
+    // nested objects/arrays preserved (not double-encoded)
+    expect(sql).toContain("CASE WHEN je.type IN ('object','array') THEN json(je.value) ELSE je.value END");
+  });
+  it('$project exclusion strips listed keys via json_remove', () => {
+    const { sql } = translatePipeline('c', [{ $project: { text: 0, markdown: 0 } }]);
+    expect(sql).toContain("json_remove(data, '$.text', '$.markdown') AS data");
+  });
+  it('$project then $sort on a projected field still sorts (reads base data)', () => {
+    const { sql } = translatePipeline('c', [
+      { $project: { title: 1, tags: 1 } },
+      { $sort: { title: 1 } },
+    ]);
+    expect(sql).toContain('json_each(data)');
+    expect(sql).toContain(`ORDER BY (CAST(json_extract(data,'$.title') AS TEXT)`);
+  });
+  it('$project rejects mixed inclusion/exclusion', () => {
+    expect(() => translatePipeline('c', [{ $project: { title: 1, text: 0 } }])).toThrow(
+      /cannot mix inclusion and exclusion/,
+    );
+  });
+  it('$project rejects an unsafe field name', () => {
+    expect(() =>
+      translatePipeline('c', [{ $project: { ["bad'name"]: 1 } as Record<string, number> }]),
+    ).toThrow(/safe name/);
+  });
   it('$count wraps the query in a COUNT(*) subquery', () => {
     const { sql } = translatePipeline('c', [
       { $match: { kind: 'a' } },

package/src/server/sqlite/SqlitePipeline.ts CHANGED Viewed

@@ -133,6 +133,48 @@ export function translatePipeline(
         parts.grouped = false;
         break;
       }
+      case '$project': {
+        // Reshape `data` to the projected field set, keeping the row shape the
+        // DocStore hydrates (`_id, data, created, updated, version`). Inclusion
+        // ({field:1}) rebuilds `data` from only the listed keys; exclusion
+        // ({field:0}) strips the listed keys. Nested objects/arrays are
+        // preserved (not double-encoded) via the json_each `type` guard. A
+        // following $sort/$match still reads the base `data`, so it may reference
+        // projected-away fields — an intentional, documented divergence from
+        // Mongo that matches how these pipelines are written (project then sort
+        // on a projected field).
+        if (parts.grouped) Object.assign(parts, wrapAsSubquery(parts));
+        const proj = value as Record<string, number | boolean>;
+        const entries = Object.entries(proj);
+        const include = entries.filter(([, v]) => v === 1 || v === true).map(([k]) => k);
+        const exclude = entries.filter(([, v]) => v === 0 || v === false).map(([k]) => k);
+        if (include.length > 0 && exclude.length > 0) {
+          throw new Error('[SqlitePipeline] $project cannot mix inclusion and exclusion');
+        }
+        const dataCol = parts.from.includes('_sub') ? '"data"' : 'data';
+        const asName = (k: string): string => {
+          if (!/^[a-zA-Z_][a-zA-Z0-9_]*$/.test(k)) {
+            throw new Error(`[SqlitePipeline] $project field not a safe name: ${k}`);
+          }
+          return k;
+        };
+        let dataExpr: string;
+        if (include.length > 0) {
+          const fields = include.filter((k) => !TOP_LEVEL_COLUMNS.has(k)).map(asName);
+          dataExpr = fields.length
+            ? `(SELECT json_group_object(je.key, ` +
+              `CASE WHEN je.type IN ('object','array') THEN json(je.value) ELSE je.value END) ` +
+              `FROM json_each(${dataCol}) je WHERE je.key IN (${fields.map((f) => `'${f}'`).join(', ')}))`
+            : `'{}'`;
+        } else {
+          const fields = exclude.filter((k) => !TOP_LEVEL_COLUMNS.has(k)).map(asName);
+          dataExpr = fields.length
+            ? `json_remove(${dataCol}, ${fields.map((f) => `'$.${f}'`).join(', ')})`
+            : dataCol;
+        }
+        parts.select = `_id, ${dataExpr} AS data, created, updated, version`;
+        break;
+      }
       case '$group': {
         const group = value as Record<string, unknown>;
         const groupId = group._id;

package/src/shared/menuChrome.ts ADDED Viewed

@@ -0,0 +1,50 @@
+/**
+ * menuChrome — the shared look for popup/context menus, as framework-agnostic
+ * HTML/CSS strings so it can be used by native shells (ugly-studio's Electron
+ * context menu + ugly.bot menu) as well as by web/React surfaces (which style
+ * their own menu markup from the SAME tokens below). One source of truth for
+ * menu typography, spacing, icons, and hover.
+ *
+ * Usage: drop MENU_FONTS in <head>, then MENU_TOKENS + MENU_CSS in a <style>.
+ * Build rows as `<div class="mi"><span class="ic">…icon…</span><span class="lbl">
+ * Label</span><span class="acc">⌘X</span></div>` and dividers as `<div class="sep">`.
+ */
+/** Webfonts — IBM Plex Mono (rows) + Bricolage (display). */
+export const MENU_FONTS =
+  '<link rel="preconnect" href="https://fonts.googleapis.com">' +
+  '<link href="https://fonts.googleapis.com/css2?family=Bricolage+Grotesque:opsz,wght@12..96,400..800&family=IBM+Plex+Mono:wght@400;500;600;700&display=swap" rel="stylesheet">';
+/** Industrial tokens (light + dark) shared by every menu. */
+export const MENU_TOKENS = `:root{
+  --panel2:#ece6da;--panel:#f2ede3;--dock:#e0d9cb;--line:#d3cab9;--line2:#c0b6a3;
+  --ink:#23201a;--dim:#6c6457;--faint:#a09784;--orange:#e8590c;--orange-d:#c2430a;--orange-soft:#f7e7d6;
+  --shadow:0 24px 52px -20px rgba(20,12,4,.6),0 8px 20px -10px rgba(20,12,4,.4);
+  --disp:'Bricolage Grotesque',ui-sans-serif,system-ui,sans-serif;
+  --mono:'IBM Plex Mono',ui-monospace,'SF Mono',Menlo,monospace;
+}
+@media (prefers-color-scheme:dark){:root{
+  --panel2:#241e18;--panel:#1e1915;--dock:#13100c;--line:#322a22;--line2:#473a2d;
+  --ink:#efe7da;--dim:#a99a86;--faint:#6f6453;--orange:#ff6a1f;--orange-d:#d44e0a;--orange-soft:rgba(255,106,31,.15);
+  --shadow:0 24px 52px -20px rgba(0,0,0,.62),0 8px 20px -10px rgba(0,0,0,.5);
+}}`;
+/**
+ * The shared card + row primitives. `.menu` is the card; `.mi` a row (icon +
+ * label + trailing accel/chevron); `.sep` a divider. Icons work either wrapped
+ * in `.ic` or as a direct `<svg>` child.
+ */
+export const MENU_CSS = `.menu{background:var(--panel2);border:1px solid var(--line2);border-radius:13px;box-shadow:var(--shadow);padding:7px}
+.mi{display:flex;align-items:center;gap:11px;width:100%;padding:8px 9px;border:none;background:none;border-radius:8px;color:var(--ink);font-family:var(--mono);font-size:11.5px;line-height:1.35;text-align:left;white-space:nowrap;cursor:pointer}
+.mi:hover,.mi.active{background:var(--orange-soft);color:var(--orange)}
+.mi .ic{width:15px;height:15px;flex:none;display:grid;place-items:center;color:var(--dim)}
+.mi .ic svg{width:15px;height:15px}
+.mi:hover .ic,.mi.active .ic{color:var(--orange)}
+.mi>svg{width:15px;height:15px;flex:none;color:var(--dim)}
+.mi:hover>svg,.mi.active>svg{color:var(--orange)}
+.mi .lbl{flex:1;min-width:0;overflow:hidden;text-overflow:ellipsis}
+.mi .acc,.mi .chev{margin-left:auto;flex:none;color:var(--faint);font-size:10px;letter-spacing:.02em;display:grid}
+.mi .chev svg{width:14px;height:14px;display:block}
+.mi:hover .acc,.mi.active .acc,.mi:hover .chev,.mi.active .chev{color:var(--orange-d)}
+.mi.dis{color:var(--faint);cursor:default}.mi.dis:hover{background:none}.mi.dis .ic{color:var(--faint)}
+.sep{height:1px;background:var(--line);margin:6px 5px}`;

package/templates/.claude/skills/eval-swarm/SKILL.md CHANGED Viewed

@@ -91,6 +91,23 @@ Store `BASE_URL="$(npx ugly-app url)"` for the run. Everything the swarm reads a
 lives on **this local server** — the framework read CLIs (`ugly-app feedback`, `errors`,
 `logs`) query **prod**, not local, so don't use them to inspect the run.
+### Local vs. prod target
+Default to **local** (above) — it isolates the run and tests your current checkout. But
+target **prod** (`BASE_URL=https://<app-domain>`, skip step 5's dev server) when the app is
+**consume-heavy and the data only exists in prod** — e.g. a corpus/search app whose local
+DB is empty, where every consume-persona would fail Step 2. Only the user can OK a prod run
+(real users' app, real feedback queue). When you do run against prod:
+- **Verify auth first:** load `$BASE_URL` in Playwright with a bot's `auth_token` cookie and
+  confirm the app renders authed (not a login page) before dispatching — an SSO app may not
+  honor the cookie, which would waste the whole (billed) swarm.
+- **Tag feedback:** `feedback:submit` writes to the **real** prod queue that `ugly-app
+  feedback` / `/fix-feedback` read. Have every persona prefix its message with `[eval-swarm]`
+  so synthetic findings are filterable from genuine user feedback. (Upside vs. local: the
+  fixer *can* read these — no in-context handoff needed.)
+- You're testing the **deployed** build, not your checkout — deploy first if you want your
+  latest changes evaluated.
 ---
 ## Step 1 — Design the personas (grounded in THIS app)
@@ -205,10 +222,61 @@ rows. Don't hand off by telling a fixer to "go read the feedback" — it can't.)
    output, then UX friction, then wishes.
 4. Present one ranked list: for each item — feature, severity, how many personas hit it,
    the sharpest one-line evidence, and the persona verdicts (did the tool work?).
-5. Hand off the ranked list **as content** for fixing — either fix the items directly in
+5. **Rate the product 1–5 stars** (see rubric) with a one-line justification. Lead the
+   presentation with the rating — it is the headline the user wants; the ranked list is the
+   evidence behind it.
+6. Hand off the ranked list **as content** for fixing — either fix the items directly in
    this session, or paste the list into a `/fix-feedback`-style pass (using its ambition
    policy), since the fixer cannot pull these local rows itself.
+**A persona reports a SYMPTOM; you diagnose the CAUSE before fixing.** "Exact search
+returns only one book" is a symptom — the cause was an FTS index the D1 cutover never
+backfilled (72k fragments, only the newest book indexed), found by querying prod D1
+directly (`wrangler d1 execute … "SELECT count(*) FROM <c>_fts"`), not by reading the UI.
+Root-cause at the data/infra layer (indexes, migrations, provisioning, backfills) before
+touching surface code — several personas' separate complaints often trace to one cause,
+and patching the surface leaves it broken.
+### Iterating to a target rating (fix → re-run)
+Eval-swarm is a *loop*, not a one-shot: run → rate → fix → re-run → confirm the rating
+moved. That's how a product climbs from ★★★ to ★★★★★.
+- **Reuse the same bot accounts across rounds.** They don't delete and idle ones bill
+  nothing; a re-run just re-drives the app with fresh chats ("New chat"), so you don't
+  mint (and pay to warm) a new roster each round.
+- **Keep the round-N+1 goals the same** (don't tell personas "we fixed X, confirm it") —
+  their existing goals naturally re-exercise the fixed areas, and a fresh, unbiased
+  verdict is the honest signal. The rigorous persona's re-verification is the one that
+  actually moves the rating.
+- **Deploy before re-running a prod-target swarm** — personas test the *deployed* build,
+  so a fix that's only committed won't show. (Data/index fixes like a backfill are live
+  immediately; code fixes need a deploy.)
+- **Track the trajectory**: report round N's rating, the ceiling finding, what you fixed,
+  and round N+1's rating. The ceiling finding is your fix list — clear it and the next
+  round's ceiling rises.
+- **A billed re-run is the user's call.** After fixing, you may have *directly verified*
+  every ceiling item yourself (drove the flow, read the screenshot); say so and offer the
+  independent re-run rather than auto-spending another swarm's worth of tokens.
+### Rating rubric (1–5 stars)
+Rate the product as a whole, computed from the **worst core-feature outcome**, **how many
+personas completed their primary goal**, and the **persona verdicts**. A broken feature
+caps the score — polish can't buy back a blocker.
+| Stars | Meaning | Gate |
+|-------|---------|------|
+| ★☆☆☆☆ **1 — Broken** | A core feature fails; a real user cannot accomplish the primary job. | Any blocker on a *primary* feature, or most personas' verdict = "broken". |
+| ★★☆☆☆ **2 — Rough** | Only happy paths work; a primary feature is broken-with-workaround, or several high-severity bugs. | A primary feature is unreliable, or ≥2 high-severity correctness/empty-output findings. |
+| ★★★☆☆ **3 — Usable** | Core jobs work but with real friction, wrong/empty AI output, or a broken *secondary* feature. | Any blocker/high on a secondary feature, or mixed persona verdicts. |
+| ★★★★☆ **4 — Solid** | All core jobs work; findings are UX polish, edge cases, or wishes. | All personas completed their goal; no blocker/high on a core path. |
+| ★★★★★ **5 — Excellent** | Every persona completed their goal; outputs accurate and trustworthy; only cosmetic nits. | Every verdict "works"; no finding above `low`. |
+Caps are hard: one blocker on a primary feature means **≤2 stars no matter how good the
+rest is**; a broken secondary feature caps at **3**. Half-stars are fine (e.g. ★★★½).
+State the single finding that set the ceiling.
 ---
 ## Screenshot recipe — always wait for hydration
@@ -231,6 +299,16 @@ If `WAIT_SEL` never appears **and you've confirmed it's the right selector for t
 the page genuinely failed to render — report that as a real bug. Never fall back to a
 no-wait capture.
+**Writing your own Playwright script (multi-step journeys):** the CLI `pnpm exec playwright
+screenshot` is one-shot; a persona driving a real journey (search → click → chat → wait)
+writes a `.mjs` script instead. Two gotchas that will `ERR_MODULE_NOT_FOUND` you:
+- **Import from the package that's actually installed.** Many apps ship `@playwright/test`,
+  not standalone `playwright` — `import { chromium } from '@playwright/test'`. Check with
+  `ls node_modules | grep playwright` first.
+- **Put the script inside the project dir** (e.g. `./.eval-<slug>.mjs`), not `/tmp` — Node
+  resolves bare imports from the script's own folder upward, so a script in a scratchpad
+  can't find the app's `node_modules`. Delete it when done.
 ---
 ## Config (optional, per-app)
@@ -256,6 +334,54 @@ If no config exists, invent personas per Step 1 — that is the normal path.
 ---
+## Standard ugly-app capabilities (what's cheap to build)
+Every ugly-app child app is built on the same framework, so a large feature set is
+**standard and low-cost to wire** — it's a handler + a collection + a page, not new
+infrastructure. Use this list two ways: (1) when a persona wishes for something the app
+lacks, check here — if it's a standard capability, mark the `feature` finding **"low-cost
+(framework-standard)"** so the fixer knows it's an easy win, not a moonshot; (2) when
+designing personas, exercise the AI-bearing standard features hardest — they have the most
+to get wrong.
+**Data & search**
+- Typed collections on D1 or Neon (`createTypedDB` / `defineCollections`, zod schemas); CRUD via `socket.request` handlers.
+- Full-text search (FTS5, `meta.search`); semantic/vector search (Cloudflare Vectorize, `meta.vector`); RRF hybrid fusion of the two.
+- Structured queries: filters (`$in`, ranges), sort, pagination, counts.
+- `trackDocs` / collab — live-syncing documents with realtime updates (no manual polling).
+**AI (all user-billed or owner-proxied)**
+- Text generation with multiple providers (Claude, DeepSeek, GLM…), streaming via SSE, `reasoningEffort`.
+- Client-driven **agent loop** (`agentTurn` + tools + `sessionStore` memory) — a tool-using chat agent with durable per-user memory.
+- Image generation (`createImageGen`), TTS (with viseme + 3D-avatar pipeline), embeddings (`createEmbeddingClient`), web search (`createWebSearchClient`).
+- Grounded RAG: retrieval tool + citations that open the source (as in andalib's research chat).
+**Auth & users**
+- ugly.bot SSO (silent login, magic-link), `getUserId`/`getUserToken`/`userContextStore`; per-user preferences persisted cross-device.
+- Bot/test accounts (`auth:create-bot`); user profiles (`userGet`).
+**Comms & sharing**
+- Push notifications (`pushSendTyped`), email (`emailSend` + templates), public login-free **share links** (`shareLink`), cross-app chat hub.
+**Files, media & content**
+- Uploads/storage via `ctx.storage` (R2), blob upload, public-prefix serving.
+- Markdown editor + viewer (rich editing, streaming-markdown repair, annotations, heading labels).
+- Conversations engine (threads, messages, sharing).
+**App structure & ops**
+- Pages & routing (`definePage`/`definePages`, typed params, deep-link + push routing, popups), SSR.
+- Cron / scheduled tasks; A/B experiments; owner alerts.
+- Telemetry to D1 — error logs, feedback reports, perf snapshots (queryable via `ugly-app errors`/`feedback`/`perf`).
+**Trivially-assembled app features** (primitives already exist, ~a collection + a list/page):
+bookmarks/favorites, search history/recents, calendar/events, comments/annotations,
+tags/filters, a settings page, an admin gate.
+If a wished-for feature is **not** on this list (needs a new provider, a novel algorithm,
+native/mobile work, or cross-app infra), say so — that's a real-cost item, not an easy win.
+---
 ## Red flags — STOP
 | Thought | Reality |
@@ -269,8 +395,8 @@ If no config exists, invent personas per Step 1 — that is the normal path.
 ## Completion
-One-line summary:
+One-line summary — lead with the star rating:
 ```
-Eval swarm complete. Personas: {N}/{M} succeeded. Findings: {total} ({dedup} unique). Top issue: {…}. Verdict: {works / broken}.
+Eval swarm complete. Rating: {★★★☆☆ 3/5} ({ceiling finding}). Personas: {N}/{M} succeeded. Findings: {total} ({dedup} unique). Top issue: {…}.
 ```