vigthoria-cli 1.13.26 → 1.13.30

package/dist/utils/command-policy.js

@@ -1,7 +1,8 @@
 const REQUIRED_SESSION_PATHS = new Set([
     'chat', 'chat-resume', 'agent', 'operator',
     'edit', 'generate', 'explain', 'fix', 'review',
-    'workflow templates', 'workflow list', 'workflow use-template', 'workflow run', 'workflow status',
+    'creative plan',
+    'workflow templates', 'workflow list', 'workflow use-template', 'workflow run', 'workflow status', 'workflow delete',
     'hub activate', 'hub active',
     'repo push', 'repo review', 'repo pull', 'repo list', 'repo status', 'repo share', 'repo delete', 'repo open-in',
     'background start', 'background list', 'background status', 'background apply', 'background cancel', 'background approve',
@@ -16,6 +17,7 @@ const NO_SESSION_PATHS = new Set([
     'device', 'device status', 'device list', 'device screenshot', 'device install', 'device launch', 'device logs', 'device tcpip', 'device connect', 'device disconnect',
     'security', 'security scan', 'security score', 'security fix',
     'workflow',
+    'creative', 'creative workflows',
     'hub', 'hub discover', 'hub list', 'hub search', 'hub info',
     'music', 'music generate', 'music status',
     'repo', 'repo clone',

package/dist/utils/config.d.ts

@@ -48,8 +48,10 @@ export interface ConfigOptions {
 }
 export declare class Config {
     private store;
+    private readonly stateRoot;
     private static readonly OPERATOR_PLANS;
     constructor(options?: ConfigOptions);
+    getStateRoot(): string;
     private retireLegacyConfStore;
     /**
      * Re-apply secure POSIX permissions to the on-disk config file.  Safe

package/dist/utils/config.js

@@ -129,12 +129,14 @@ function isConfigValue(value) {
 }
 export class Config {
     store;
+    stateRoot;
     static OPERATOR_PLANS = new Set([
         'basic', 'pro', 'professional', 'professional_ai', 'enterprise',
         'enterprise_ai', 'whale', 'admin', 'master_admin', 'master_admin_plan',
     ]);
     constructor(options = {}) {
         const stateRoot = path.resolve(options.stateRoot || os.homedir());
+        this.stateRoot = stateRoot;
         const canonicalPath = path.join(stateRoot, '.vigthoria', 'config.json');
         const legacyConfPath = options.legacyConfPath
             ? path.resolve(options.legacyConfPath)
@@ -161,12 +163,20 @@ export class Config {
                 // canonical-file precedence.
                 if (legacyConf && legacyMtime > canonicalMtime) {
                     const legacyCredentials = normalizeConfigValue(legacyConf);
-                    merged.authToken = legacyCredentials.authToken;
-                    merged.refreshToken = legacyCredentials.refreshToken;
-                    merged.userId = legacyCredentials.userId;
-                    merged.email = legacyCredentials.email;
-                    merged.v3ServiceKey = legacyCredentials.v3ServiceKey;
-                    merged.subscription = legacyCredentials.subscription;
+                    // Old `conf` releases could touch or recreate an empty
+                    // AppData file during any command. That timestamp is not
+                    // an explicit logout and must never erase a valid session
+                    // already stored in the canonical ~/.vigthoria record.
+                    // A token-bearing legacy bundle can still win by recency;
+                    // current releases record logout atomically in canonical.
+                    if (legacyCredentials.authToken || !merged.authToken) {
+                        merged.authToken = legacyCredentials.authToken;
+                        merged.refreshToken = legacyCredentials.refreshToken;
+                        merged.userId = legacyCredentials.userId;
+                        merged.email = legacyCredentials.email;
+                        merged.v3ServiceKey = legacyCredentials.v3ServiceKey;
+                        merged.subscription = legacyCredentials.subscription;
+                    }
                 }
                 return merged;
             },
@@ -184,6 +194,9 @@ export class Config {
             this.retireLegacyConfStore(legacyConfPath, canonicalPath);
         this.secureOnDisk();
     }
+    getStateRoot() {
+        return this.stateRoot;
+    }
     retireLegacyConfStore(legacyPath, canonicalPath) {
         const retired = new DurableJsonStore({
             filePath: legacyPath,
@@ -324,10 +337,10 @@ export class Config {
         // Vigthoria server infrastructure operational models
         // ═══════════════════════════════════════════════════════════════
         const models = [
-            { id: 'architect', name: 'Vigthoria v4 Creative 27B', description: 'Architect, planning, deep reasoning, and creative systems work', tier: 'local', backendModel: 'Vigthoria-v4-Creative-27B' },
-            { id: 'code', name: 'Vigthoria v4 Code 27B', description: 'Dense production executor for coding, debugging, and repository changes', tier: 'local', backendModel: 'Vigthoria-v4-Code-27B' },
+            { id: 'architect', name: 'Vigthoria v4.2 Creative 27B', description: 'Multimodal architect for planning, deep reasoning, image/video analysis, and creative systems work', tier: 'local', backendModel: 'Vigthoria-v4.2-Creative-27B' },
+            { id: 'code', name: 'Vigthoria v4.2 Code 27B', description: 'Dense production executor for coding, debugging, and repository changes', tier: 'local', backendModel: 'Vigthoria-v4.2-Code-27B' },
             { id: 'assistant', name: 'Vigthoria v4 Assistant 9B', description: 'Low-latency FIM, completion, voice, and diagnostic model', tier: 'local', backendModel: 'Vigthoria-v4-Assistant-9B' },
-            { id: 'code-35b', name: 'Vigthoria v4 Code 27B', description: 'Legacy selector mapped to the V4 executor', tier: 'local', backendModel: 'Vigthoria-v4-Code-27B' },
+            { id: 'code-35b', name: 'Vigthoria v4.2 Code 27B', description: 'Legacy selector mapped to the V4 executor', tier: 'local', backendModel: 'Vigthoria-v4.2-Code-27B' },
             { id: 'code-9b', name: 'Vigthoria v4 Assistant 9B', description: 'Legacy selector mapped to the V4 assistant', tier: 'local', backendModel: 'Vigthoria-v4-Assistant-9B' },
             { id: 'balanced', name: 'Vigthoria v4 Assistant 9B', description: 'Legacy selector mapped to the V4 assistant', tier: 'local', backendModel: 'Vigthoria-v4-Assistant-9B' },
             { id: 'balanced-4b', name: 'Vigthoria v4 Assistant 9B', description: 'Legacy selector mapped to the V4 assistant', tier: 'local', backendModel: 'Vigthoria-v4-Assistant-9B' },

package/dist/utils/frontend-preview-service.d.ts

@@ -50,6 +50,7 @@ export interface FrontendPreviewServiceDependencies {
     sanitizeError(text: string): string;
     screenshotAdapter: PreviewScreenshotPort;
 }
+export declare function isConstrainedStaticFrontendRequest(message?: string): boolean;
 export declare class FrontendPreviewService {
     private readonly dependencies;
     constructor(dependencies: FrontendPreviewServiceDependencies);

package/dist/utils/frontend-preview-service.js

@@ -4,6 +4,13 @@ import * as path from 'node:path';
 import { assertProcessNetworkAllowed } from './process-policy.js';
 import { safeChildProcessEnv, scanOutboundContext } from './secret-policy.js';
 import { resolveWorkspacePath } from './workspace-boundary.js';
+export function isConstrainedStaticFrontendRequest(message = '') {
+    const prompt = String(message || '').toLowerCase();
+    return /\b(?:tiny|minimal|simple)\b/.test(prompt)
+        && /\bstatic\b/.test(prompt)
+        && /\b(?:single[- ]file|one\s+paragraph|exactly\s+one|current\s+directory\s+only|write\s+the\s+file\b[^.\n]{0,80}\bonly)\b/.test(prompt)
+        && !/\b(?:premium|signature|showcase|redesign|overhaul|dashboard|portal|saas|interactive|animation|motion|form|checkout|booking|commerce)\b/.test(prompt);
+}
 export class FrontendPreviewService {
     dependencies;
     constructor(dependencies) {
@@ -21,7 +28,7 @@ export class FrontendPreviewService {
         const prompt = String(message || '');
         const expectedFiles = this.dependencies.extractExpectedFiles(message, context);
         const hasHtmlEntry = expectedFiles.some((filePath) => /\.html?$/i.test(filePath));
-        return /(premium|polished|landing|site|page|dashboard|saas|frontend|ui|pricing|showcase|hero|responsive)/i.test(prompt)
+        return /(premium|polished|landing|site|page|dashboard|saas|frontend|ui|pricing|showcase|hero|responsive|interactive|game|canvas)/i.test(prompt)
             || hasHtmlEntry;
     }
     /**
@@ -259,7 +266,7 @@ export class FrontendPreviewService {
         const js = selectedJsFiles.map((filePath) => fs.readFileSync(resolveWorkspacePath(rootPath, filePath), 'utf8')).join('\n\n');
         return { htmlPath, html, css, js, cssPaths: selectedCssFiles, jsPaths: selectedJsFiles };
     }
-    evaluateFrontendVisualProof(summary = {}, artifacts = {}) {
+    evaluateFrontendVisualProof(summary = {}, artifacts = {}, options = {}) {
         const reasons = [];
         const cssPaths = Array.isArray(artifacts.cssPaths) ? artifacts.cssPaths : [];
         const html = String(artifacts.html || '');
@@ -269,11 +276,14 @@ export class FrontendPreviewService {
             reasons.push('missing viewport metadata');
         }
         const hasStyleEvidence = cssPaths.length > 0 || /<style[\s>]/i.test(html) || css.trim().length > 0;
-        if (!hasStyleEvidence) {
+        if (!options.constrainedStatic && !hasStyleEvidence) {
             reasons.push('missing stylesheet or inline style evidence');
         }
         const hasInteractionOrResponsiveEvidence = Boolean(summary.hasResponsiveSignals) || Boolean(summary.hasInteractiveSignals) || /<script[\s>]/i.test(html) || js.trim().length > 0;
-        if (!hasInteractionOrResponsiveEvidence) {
+        // A server-confirmed constrained static document is complete without
+        // invented interactivity or responsive behavior.  Richer frontend requests
+        // retain the fail-closed visual-evidence requirement.
+        if (!options.constrainedStatic && !hasInteractionOrResponsiveEvidence) {
             reasons.push('missing responsive or interactive evidence');
         }
         return {
@@ -396,10 +406,47 @@ export class FrontendPreviewService {
         const css = (artifacts.css || '').slice(0, PREVIEW_MAX_ARTIFACT_BYTES);
         const js = (artifacts.js || '').slice(0, PREVIEW_MAX_ARTIFACT_BYTES);
         const errors = [];
+        if (context.localScreenshotProof === true) {
+            const summary = {
+                hasViewportMeta: /<meta\b[^>]*name=["']viewport["'][^>]*>/i.test(html),
+                hasResponsiveSignals: /@media\b/i.test(`${html}\n${css}`),
+                hasInteractiveSignals: /<script[\s>]/i.test(html) || js.trim().length > 0,
+                sectionCount: (html.match(/<section\b/gi) || []).length,
+                proofSource: 'local-screenshot-adapter',
+            };
+            const constrainedStatic = isConstrainedStaticFrontendRequest(String(context.rawPrompt || message || ''));
+            const visualProof = this.evaluateFrontendVisualProof(summary, artifacts, { constrainedStatic });
+            const localGate = {
+                required: true,
+                passed: visualProof.ok,
+                backendUrl: 'local-screenshot-adapter',
+                entryPath: artifacts.htmlPath,
+                assetPaths: {
+                    css: artifacts.cssPaths || [],
+                    js: artifacts.jsPaths || [],
+                },
+                modes: {
+                    design: { ready: visualProof.ok, devices: ['local-browser'], variantCount: 1 },
+                    live: { ready: visualProof.ok, entryPoint: artifacts.htmlPath },
+                    production: { ready: visualProof.ok, deploymentTarget: 'local-static-artifact' },
+                },
+                summary,
+                error: visualProof.ok
+                    ? undefined
+                    : `Local screenshot proof is missing required visual evidence: ${visualProof.reasons.join(', ')}.`,
+            };
+            return await this.persistFrontendPreviewArtifacts(localGate, rootPath, {
+                ...context,
+                requireScreenshot: true,
+            });
+        }
         for (const baseUrl of this.dependencies.getBaseUrls()) {
             try {
                 const proofPayload = JSON.stringify({
                     vision: String(context.rawPrompt || message || '').slice(0, 2000),
+                    qualityProfile: isConstrainedStaticFrontendRequest(String(context.rawPrompt || message || ''))
+                        ? 'constrained-static'
+                        : 'auto',
                     html,
                     css,
                     js,
@@ -442,7 +489,9 @@ export class FrontendPreviewService {
                 const payload = await response.json();
                 const modes = payload?.modes || {};
                 const summary = payload?.summary || {};
-                const visualProof = this.evaluateFrontendVisualProof(summary, artifacts);
+                const constrainedStatic = isConstrainedStaticFrontendRequest(String(context.rawPrompt || message || ''))
+                    && modes?.production?.qualityTier === 'scope-complete';
+                const visualProof = this.evaluateFrontendVisualProof(summary, artifacts, { constrainedStatic });
                 const passed = payload?.success === true
                     && modes?.design?.ready === true
                     && modes?.live?.ready === true

package/dist/utils/model-governance.js

@@ -1,20 +1,29 @@
 const MODEL_ALIASES = {
     fast: 'Vigthoria-v4-Assistant-9B', mini: 'vigthoria-mini-0.6b', balanced: 'Vigthoria-v4-Assistant-9B',
-    'balanced-4b': 'Vigthoria-v4-Assistant-9B', assistant: 'Vigthoria-v4-Assistant-9B', creative: 'Vigthoria-v4-Creative-27B',
-    architect: 'Vigthoria-v4-Creative-27B', code: 'Vigthoria-v4-Code-27B', 'code-30b': 'Vigthoria-v4-Code-27B',
-    'code-35b': 'Vigthoria-v4-Code-27B', 'code-8b': 'Vigthoria-v4-Assistant-9B', 'code-9b': 'Vigthoria-v4-Assistant-9B',
-    pro: 'Vigthoria-v4-Code-27B', agent: 'Vigthoria-v4-Code-27B', 'vigthoria-code': 'Vigthoria-v4-Code-27B',
-    'vigthoria-agent': 'Vigthoria-v4-Code-27B', cloud: 'vigthoria-cloud-balanced', 'cloud-code': 'vigthoria-cloud-code',
+    'balanced-4b': 'Vigthoria-v4-Assistant-9B', assistant: 'Vigthoria-v4-Assistant-9B', creative: 'Vigthoria-v4.2-Creative-27B',
+    architect: 'Vigthoria-v4.2-Creative-27B', code: 'Vigthoria-v4.2-Code-27B', 'code-30b': 'Vigthoria-v4.2-Code-27B',
+    'code-35b': 'Vigthoria-v4.2-Code-27B', 'code-8b': 'Vigthoria-v4-Assistant-9B', 'code-9b': 'Vigthoria-v4-Assistant-9B',
+    pro: 'Vigthoria-v4.2-Code-27B', agent: 'Vigthoria-v4.2-Code-27B', 'vigthoria-code': 'Vigthoria-v4.2-Code-27B',
+    'vigthoria-agent': 'Vigthoria-v4.2-Code-27B', cloud: 'vigthoria-cloud-balanced', 'cloud-code': 'vigthoria-cloud-code',
     'cloud-balanced': 'vigthoria-cloud-balanced', 'cloud-fast': 'vigthoria-cloud-fast', 'cloud-power': 'vigthoria-cloud-power',
     'cloud-maximum': 'vigthoria-cloud-maximum', 'cloud-reason': 'vigthoria-cloud-power', ultra: 'vigthoria-cloud-maximum',
     'cloud-pro': 'vigthoria-cloud-power', 'cloud-k2': 'vigthoria-cloud-power', 'cloud-ultra': 'vigthoria-cloud-maximum',
+    'vigthoria-v4-creative-27b': 'Vigthoria-v4.2-Creative-27B',
+    'vigthoria-v4-code-27b': 'Vigthoria-v4.2-Code-27B',
+    'vigthoria-v4.2-code-27b': 'Vigthoria-v4.2-Code-27B',
+    'vigthoria-v3-code-35b': 'Vigthoria-v4.2-Code-27B',
+    'vigthoria-v3-code-35b:latest': 'Vigthoria-v4.2-Code-27B',
+    'vigthoria-v3-code-9b': 'Vigthoria-v4-Assistant-9B',
+    'vigthoria-v3-code-9b:latest': 'Vigthoria-v4-Assistant-9B',
+    'vigthoria-v3-balanced-4b': 'Vigthoria-v4-Assistant-9B',
+    'vigthoria-v3-balanced-4b:latest': 'Vigthoria-v4-Assistant-9B',
+    'vigthoria-mini-0.6b': 'Vigthoria-v4-Assistant-9B',
+    'qwen3-coder:latest': 'Vigthoria-v4.2-Code-27B',
 };
 const RETIRED_MODELS = new Set(['mini', 'creative-v3', 'creative-v4']);
 const LEGACY_CLOUD_IDS = new Set(['deepseek-v3.1:671b-cloud', 'moonshotai/kimi-k2.5']);
 const SELF_HOSTED_MODELS = new Set([
-    'Vigthoria-v4-Creative-27B', 'Vigthoria-v4-Code-27B', 'Vigthoria-v4-Assistant-9B',
-    'vigthoria-v3-code-35b', 'vigthoria-v3-code-35b:latest', 'vigthoria-v3-code-9b',
-    'vigthoria-v3-code-9b:latest', 'vigthoria-v3-balanced-4b', 'vigthoria-v3-balanced-4b:latest', 'qwen3-coder:latest',
+    'Vigthoria-v4.2-Creative-27B', 'Vigthoria-v4.2-Code-27B', 'Vigthoria-v4-Assistant-9B',
 ]);
 const SELF_HOSTED_ALIASES = new Set([
     'agent', 'architect', 'assistant', 'code', 'code-30b', 'code-35b', 'code-9b', 'balanced', 'balanced-4b', 'pro',
@@ -30,7 +39,7 @@ export class ModelGovernance {
         if (normalized.includes('vigthoria') || requested.includes('/') || requested.includes(':')) {
             return MODEL_ALIASES[normalized] || requested;
         }
-        return MODEL_ALIASES[normalized] || 'Vigthoria-v4-Code-27B';
+        return MODEL_ALIASES[normalized] || 'Vigthoria-v4.2-Code-27B';
     }
     isCloudModelId(modelId) {
         const normalized = String(modelId || '').toLowerCase();
@@ -39,8 +48,8 @@ export class ModelGovernance {
     resolvePermittedModelId(shortName) {
         const normalized = String(shortName || '').trim().toLowerCase();
         if (RETIRED_MODELS.has(normalized)) {
-            this.dependencies.debug(`Blocked retired model ${shortName}; using fallback Vigthoria-v4-Code-27B`);
-            return 'Vigthoria-v4-Code-27B';
+            this.dependencies.debug(`Blocked retired model ${shortName}; using fallback Vigthoria-v4.2-Code-27B`);
+            return 'Vigthoria-v4.2-Code-27B';
         }
         const resolved = this.resolveModelId(shortName);
         if (this.isCloudModelId(resolved) && !this.dependencies.hasCloudAccess()) {
@@ -54,7 +63,7 @@ export class ModelGovernance {
         return this.dependencies.simulateCloudFailure() && this.isCloudModelId(modelId);
     }
     getFallbackModelId(modelId) {
-        return this.isCloudModelId(modelId) ? 'Vigthoria-v4-Code-27B' : null;
+        return this.isCloudModelId(modelId) ? 'Vigthoria-v4.2-Code-27B' : null;
     }
     isSelfHostedPreferredModel(modelId, requestedModel) {
         return SELF_HOSTED_MODELS.has(modelId) || SELF_HOSTED_ALIASES.has(String(requestedModel || '').toLowerCase());
@@ -68,8 +77,8 @@ export class ModelGovernance {
     }
     getSelfHostedFallbackModelId(modelId, requestedModel) {
         if (this.isSelfHostedPreferredModel(modelId, requestedModel)) {
-            return modelId === 'qwen3-coder:latest' ? 'Vigthoria-v4-Code-27B' : modelId;
+            return modelId === 'qwen3-coder:latest' ? 'Vigthoria-v4.2-Code-27B' : modelId;
         }
-        return 'Vigthoria-v4-Code-27B';
+        return 'Vigthoria-v4.2-Code-27B';
     }
 }

package/dist/utils/model-transport-service.js

@@ -27,7 +27,7 @@ export class ModelTransportService {
         return null;
     }
     async complete(systemPrompt, userPrompt, model, maxTokens) {
-        const resolvedModel = model ? this.dependencies.resolvePermittedModelId(model) : 'Vigthoria-v4-Code-27B';
+        const resolvedModel = model ? this.dependencies.resolvePermittedModelId(model) : 'Vigthoria-v4.2-Code-27B';
         const messages = scanOutboundContext([{ role: 'system', content: systemPrompt }, { role: 'user', content: userPrompt }]).value;
         const body = {
             model: resolvedModel,

package/dist/utils/network-policy.js

@@ -31,6 +31,8 @@ const AUDIENCE_HOSTS = {
 const AUTO_CREDENTIAL_HOSTS = AUDIENCE_HOSTS.coder;
 const LOOPBACK_HOSTS = new Set(['localhost', '127.0.0.1', '::1']);
 const LOOPBACK_PORTS = new Set(['4008', '4009', '4011', '4016', '49160', '8030', '8020', '5060', '5050', '8016', '9000']);
+const TESTFARM_BRIDGE_HOSTS = new Set(['host.lan']);
+const TESTFARM_BRIDGE_PORTS = new Set(['14009', '18020', '18030', '4011']);
 const SENSITIVE_HEADER_NAMES = new Set(['authorization', 'cookie', 'proxy-authorization', 'x-api-key', 'x-service-key']);
 export const DEFAULT_NETWORK_TIMEOUT_MS = 30_000;
 export class NetworkPolicyError extends Error {
@@ -64,6 +66,16 @@ function isLoopback(url) {
 function isAllowedLoopback(url) {
     return isExplicitLoopbackEnabled() && LOOPBACK_PORTS.has(normalizePort(url));
 }
+function isAllowedTestfarmBridge(url) {
+    return process.env.VIGTHORIA_LOCAL_TEST_MODE === '1'
+        && process.env.VIGTHORIA_TESTFARM_REMOTE === '1'
+        && process.env.VIGTHORIA_ALLOW_LOCAL_SERVICES === '1'
+        && TESTFARM_BRIDGE_HOSTS.has(url.hostname.toLowerCase())
+        && TESTFARM_BRIDGE_PORTS.has(normalizePort(url));
+}
+function isLocalTrustBoundary(url) {
+    return isLoopback(url) || isAllowedTestfarmBridge(url);
+}
 function parseEndpoint(raw) {
     const value = String(raw || '').trim();
     if (!value || /[\\\u0000-\u001f\u007f]/.test(value)) {
@@ -92,7 +104,7 @@ export function assertTrustedEndpoint(raw, options = {}) {
     if (parsed.protocol !== secureProtocol && parsed.protocol !== insecureProtocol) {
         throw new NetworkPolicyError('untrusted_endpoint', `Unsupported endpoint protocol: ${parsed.protocol}`);
     }
-    if (parsed.protocol === insecureProtocol && !isAllowedLoopback(parsed)) {
+    if (parsed.protocol === insecureProtocol && !isAllowedLoopback(parsed) && !isAllowedTestfarmBridge(parsed)) {
         throw new NetworkPolicyError('untrusted_endpoint', 'Insecure endpoints require explicit loopback opt-in on an approved port');
     }
     if (isLoopback(parsed) && !isAllowedLoopback(parsed)) {
@@ -100,13 +112,13 @@ export function assertTrustedEndpoint(raw, options = {}) {
     }
     const audience = options.audience || 'auto';
     const credentialBearing = options.credentialBearing === true;
-    if (audience !== 'public' && audience !== 'auto' && !isLoopback(parsed)) {
+    if (audience !== 'public' && audience !== 'auto' && !isLocalTrustBoundary(parsed)) {
         const allowed = AUDIENCE_HOSTS[audience];
         if (!allowed.has(parsed.hostname.toLowerCase()) || normalizePort(parsed) !== '443') {
             throw new NetworkPolicyError('credential_audience', `Endpoint is outside the ${audience} credential audience`);
         }
     }
-    if (credentialBearing && audience === 'auto' && !isLoopback(parsed)) {
+    if (credentialBearing && audience === 'auto' && !isLocalTrustBoundary(parsed)) {
         if (!AUTO_CREDENTIAL_HOSTS.has(parsed.hostname.toLowerCase()) || normalizePort(parsed) !== '443') {
             throw new NetworkPolicyError('credential_audience', 'Credential-bearing request requires an explicit service audience');
         }

package/dist/utils/operator-client.js

@@ -7,6 +7,14 @@ export class OperatorClientError extends Error {
         this.name = 'OperatorClientError';
     }
 }
+class OperatorEndpointRejectedError extends Error {
+    safeToTryNextEndpoint;
+    constructor(message, safeToTryNextEndpoint) {
+        super(message);
+        this.safeToTryNextEndpoint = safeToTryNextEndpoint;
+        this.name = 'OperatorEndpointRejectedError';
+    }
+}
 export class OperatorClient {
     dependencies;
     constructor(dependencies) {
@@ -50,6 +58,8 @@ export class OperatorClient {
                         workspace: { path: input.workspaceAlias },
                         workspace_path: input.workspaceAlias,
                         workspace_summary: input.workspaceSummary,
+                        workspace_authority: context.workspaceAuthority || null,
+                        client_grounding_report: context.clientGroundingReport || null,
                         model: input.resolvedModel,
                         history: context.history || [],
                         executionSurface: context.executionSurface || 'cli',
@@ -63,7 +73,9 @@ export class OperatorClient {
                         vigthoriaBrain: context.vigthoriaBrain || null,
                         vigthoria_brain: context.vigthoriaBrain || null,
                     },
-                    workflow_type: context.workflowType || 'full',
+                    // Mutation-capable BMAD workflows must be selected explicitly by
+                    // the intent boundary. Direct API callers default to read-only.
+                    workflow_type: context.workflowType || 'analysis_only',
                     options: { stream: true, save_to_vigflow: context.savePlanToVigFlow === true },
                 }).value;
                 const token = this.dependencies.getAuthToken();
@@ -72,13 +84,13 @@ export class OperatorClient {
                     headers: {
                         'Content-Type': 'application/json', Accept: 'text/event-stream',
                         ...(context.mcpContextId ? { 'X-MCP-Context-Id': String(context.mcpContextId) } : {}),
-                        ...(token ? { Authorization: `Bearer ${token}`, Cookie: `vigthoria-auth-token=${token}` } : {}),
+                        ...(token ? { Authorization: `Bearer ${token}` } : {}),
                     },
                     body: JSON.stringify(body), signal: controller.signal,
                 });
                 if (!response.ok) {
                     const detail = await response.text().catch(() => '');
-                    throw new Error(`Operator stream ${response.status}: ${this.dependencies.sanitizeError(detail).slice(0, 200)}`);
+                    throw new OperatorEndpointRejectedError(`Operator stream ${response.status}: ${this.dependencies.sanitizeError(detail).slice(0, 200)}`, response.status === 404 || response.status === 503);
                 }
                 const contentType = response.headers.get('content-type')?.toLowerCase() || '';
                 const isEventStream = contentType.includes('text/event-stream');
@@ -140,6 +152,9 @@ export class OperatorClient {
                             throw new Error(payload.error || payload.message || 'Operator workflow failed');
                     }
                 }
+                if (!result) {
+                    throw new Error('Operator stream ended without a terminal result event. Reconcile the workflow id before retrying.');
+                }
                 return { content: this.formatResponse(result || {}), workflowId, contextId, backendUrl: baseUrl, savedWorkflow,
                     metadata: { source: 'operator', mode: 'operator', contextId, mcpContextId, savedWorkflowId: savedWorkflow?.id || null } };
             }
@@ -147,7 +162,11 @@ export class OperatorClient {
                 if (error?.name === 'AbortError' || error?.code === 'ABORT_ERR') {
                     throw new OperatorClientError(`Operator workflow timed out after ${Math.round(input.timeoutMs / 60_000)} minute(s). You can increase the timeout with VIGTHORIA_OPERATOR_TIMEOUT_MS.`, 'timeout');
                 }
-                errors.push(`${baseUrl}: ${error?.message || String(error)}`);
+                const safeMessage = this.dependencies.sanitizeError(error?.message || String(error));
+                errors.push(`${baseUrl}: ${safeMessage}`);
+                if (!(error instanceof OperatorEndpointRejectedError) || !error.safeToTryNextEndpoint) {
+                    throw new OperatorClientError(`Operator workflow outcome may be ambiguous; it was not retried against another endpoint: ${baseUrl}: ${safeMessage}`, 'model_backend');
+                }
             }
             finally {
                 if (timeoutId)

package/dist/utils/post-write-validator.js

@@ -31,9 +31,13 @@ function hasTsConfig(dir) {
  * which would violate offline mode and the process approval boundary.
  */
 function resolveTscBin(workspacePath) {
-    const localTsc = path.join(workspacePath, 'node_modules', '.bin', 'tsc');
-    if (fs.existsSync(localTsc))
-        return { cmd: localTsc, args: ["--noEmit", "--skipLibCheck"] };
+    const localTscEntrypoint = path.join(workspacePath, 'node_modules', 'typescript', 'bin', 'tsc');
+    if (fs.existsSync(localTscEntrypoint)) {
+        // Invoke the JavaScript entrypoint with the current Node executable. The
+        // node_modules/.bin/tsc file is a POSIX shim on Windows installations and
+        // execFileSync fails it with EINVAL even after `npm run build` succeeded.
+        return { cmd: process.execPath, args: [localTscEntrypoint, '--noEmit', '--skipLibCheck'] };
+    }
     try {
         execFileSync("tsc", ["--version"], { stdio: "pipe", timeout: 4000, windowsHide: true, env: safeChildProcessEnv() });
         return { cmd: "tsc", args: ["--noEmit", "--skipLibCheck"] };

package/dist/utils/preview-screenshot-adapter.d.ts

@@ -5,52 +5,27 @@ export type PreviewScreenshotResult = {
 export interface PreviewScreenshotPort {
     capture(entryAbsolutePath: string, screenshotPath: string): Promise<PreviewScreenshotResult>;
 }
-type BrowserPage = {
-    setViewport(options: {
-        width: number;
-        height: number;
-        deviceScaleFactor: number;
-    }): Promise<void>;
-    goto(url: string, options: {
-        waitUntil: string;
-        timeout: number;
-    }): Promise<void>;
-    screenshot(options: {
-        path: string;
-        fullPage: boolean;
-    }): Promise<unknown>;
-};
-type Browser = {
-    newPage(): Promise<BrowserPage>;
-    close(): Promise<void>;
-    process?(): {
-        kill(signal?: NodeJS.Signals): boolean;
-    } | null;
-};
-type PuppeteerLike = {
-    executablePath?(): string;
-    launch(options: {
-        headless: true | 'shell';
-        args: string[];
-        userDataDir: string;
-        executablePath?: string;
-        timeout: number;
-        protocolTimeout: number;
-    }): Promise<Browser>;
-};
 export type PreviewBrowserResolution = {
-    executablePath?: string;
-    headless: true | 'shell';
-    source: 'packaged' | 'system' | 'injected';
+    executablePath: string;
+    source: 'system';
 };
-export declare function resolvePreviewBrowserExecutable(puppeteer: PuppeteerLike, environment?: NodeJS.ProcessEnv, platform?: NodeJS.Platform, exists?: (candidate: string) => boolean): PreviewBrowserResolution | null;
-export declare class OptionalPuppeteerScreenshotAdapter implements PreviewScreenshotPort {
-    private readonly loadPuppeteer;
+export type PreviewBrowserRunner = (executablePath: string, args: readonly string[], platform: NodeJS.Platform, environment?: NodeJS.ProcessEnv) => Promise<void>;
+export declare function resolvePreviewBrowserExecutable(environment?: NodeJS.ProcessEnv, platform?: NodeJS.Platform, exists?: (candidate: string) => boolean): PreviewBrowserResolution | null;
+export declare const runPreviewBrowser: PreviewBrowserRunner;
+/** Dependency-free system-browser adapter. No browser download or archive
+ * extractor is shipped, and only fixed operating-system installation paths
+ * are eligible.
+ */
+export declare class SystemBrowserScreenshotAdapter implements PreviewScreenshotPort {
     private readonly environment;
     private readonly allocateTemp;
     private readonly releaseTemp;
     private readonly platform;
-    constructor(loadPuppeteer?: () => Promise<unknown>, environment?: NodeJS.ProcessEnv, allocateTemp?: (prefix: string) => string, releaseTemp?: (directory: string) => void, platform?: NodeJS.Platform);
+    private readonly exists;
+    private readonly runner;
+    constructor(environment?: NodeJS.ProcessEnv, allocateTemp?: (prefix: string, requestedMaxBytes?: number) => string, releaseTemp?: (directory: string) => void, platform?: NodeJS.Platform, exists?: (candidate: string) => boolean, runner?: PreviewBrowserRunner);
     capture(entryAbsolutePath: string, screenshotPath: string): Promise<PreviewScreenshotResult>;
+    private captureOnce;
 }
-export {};
+/** @deprecated Internal compatibility alias retained for older deep imports. */
+export { SystemBrowserScreenshotAdapter as OptionalPuppeteerScreenshotAdapter };