@aayambansal/squint 0.8.2 → 0.9.1

package/dist/{App-C3LOYRTR.js → App-TEZ6E4R6.js}

@@ -1,11 +1,11 @@
 #!/usr/bin/env node
 import {
   App
-} from "./chunk-PPC2KM7P.js";
-import "./chunk-B356UR44.js";
+} from "./chunk-6M54VGLM.js";
+import "./chunk-MWPZCXN7.js";
 import "./chunk-YKEAKVIS.js";
 import "./chunk-LNJ7O5O4.js";
-import "./chunk-3ZHETLUC.js";
+import "./chunk-KPLEM7SV.js";
 import "./chunk-UBADCBPT.js";
 import "./chunk-IEQGTVWN.js";
 import "./chunk-AUJJGMZG.js";
@@ -16,10 +16,10 @@ import "./chunk-K5QJMSJH.js";
 import "./chunk-WAJXATCO.js";
 import "./chunk-62JNF5M2.js";
 import "./chunk-7CAGWFAQ.js";
-import "./chunk-4DZAWPS2.js";
+import "./chunk-MITMSC2W.js";
 import "./chunk-55JZKI2M.js";
 import "./chunk-HIUQ4FXO.js";
-import "./chunk-6RMF4NAW.js";
+import "./chunk-AYJQYDN6.js";
 export {
   App
 };

package/dist/{cdp-6YBMFE7M.js → cdp-E6VAQ7XL.js}

@@ -6,7 +6,7 @@ import {
   pixelDiffPct,
   runFlow,
   summarizeSoftNav
-} from "./chunk-4DZAWPS2.js";
+} from "./chunk-MITMSC2W.js";
 export {
   cdpCapture,
   hasWebSocket,

package/dist/{checks-GTKPEQ2L.js → checks-Y73R4SS3.js}

@@ -2,7 +2,7 @@
 import {
   loadChecks,
   runIntervalSweep
-} from "./chunk-6RMF4NAW.js";
+} from "./chunk-AYJQYDN6.js";
 export {
   loadChecks,
   runIntervalSweep

package/dist/{chunk-PPC2KM7P.js → chunk-6M54VGLM.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   Session
-} from "./chunk-B356UR44.js";
+} from "./chunk-MWPZCXN7.js";
 import {
   completeCommand
 } from "./chunk-LNJ7O5O4.js";

package/dist/{chunk-6RMF4NAW.js → chunk-AYJQYDN6.js}

@@ -44,7 +44,7 @@ async function runIntervalSweep(cwd, url, lastRun) {
   const chrome = findChrome();
   if (!chrome) return [];
   const os = await import("os");
-  const { cdpCapture } = await import("./cdp-6YBMFE7M.js");
+  const { cdpCapture } = await import("./cdp-E6VAQ7XL.js");
   const tmp = fs.mkdtempSync(path.join(os.tmpdir(), "squint-interval-"));
   try {
     const result = await cdpCapture(chrome, url, tmp, [], 800, false, due);

package/dist/{chunk-53DPUAXN.js → chunk-FQYJ343N.js}

@@ -143,8 +143,8 @@ function stepExpression(step) {
 async function suggestFlows(cwd, baseUrl, chromePath) {
   const fs2 = await import("fs");
   const path2 = await import("path");
-  const { cdpCapture } = await import("./cdp-6YBMFE7M.js");
-  const { loadRoutes } = await import("./preview-UV67QLVI.js");
+  const { cdpCapture } = await import("./cdp-E6VAQ7XL.js");
+  const { loadRoutes } = await import("./preview-M6VBOTQZ.js");
   const dir = path2.join(cwd, ".squint", "flows");
   fs2.mkdirSync(dir, { recursive: true });
   const created = [];

package/dist/{chunk-3ZHETLUC.js → chunk-KPLEM7SV.js}

@@ -5,14 +5,14 @@ import {
 import {
   cdpCapture,
   hasWebSocket
-} from "./chunk-4DZAWPS2.js";
+} from "./chunk-MITMSC2W.js";
 import {
   findChrome,
   screenshot
 } from "./chunk-55JZKI2M.js";
 import {
   loadChecks
-} from "./chunk-6RMF4NAW.js";
+} from "./chunk-AYJQYDN6.js";
 
 // src/preview/preview.ts
 import fs from "fs";
@@ -51,7 +51,7 @@ async function captureViewports(cwd, url) {
   if (hasWebSocket()) {
     try {
       const checks = loadChecks(cwd);
-      const { report, shots: shots2, a11y, slop, narration, phantoms, viewTransitions, components, checkFailures, webmcp, jank, locale } = await cdpCapture(chrome, url, dir, VIEWPORTS, 2500, true, checks);
+      const { report, shots: shots2, a11y, slop, narration, phantoms, viewTransitions, components, checkFailures, webmcp, jank, locale, speculation } = await cdpCapture(chrome, url, dir, VIEWPORTS, 2500, true, checks);
       const errors2 = [];
       for (const route of routes.slice(1)) {
         try {
@@ -66,7 +66,7 @@ async function captureViewports(cwd, url) {
           errors2.push(`${route}: capture failed`);
         }
       }
-      return { shots: shots2, errors: errors2, runtime: report, a11y, slop, narration, phantoms, viewTransitions, components, checkFailures, webmcp, jank, locale };
+      return { shots: shots2, errors: errors2, runtime: report, a11y, slop, narration, phantoms, viewTransitions, components, checkFailures, webmcp, jank, locale, speculation };
     } catch {
     }
   }
@@ -139,13 +139,13 @@ async function probeRuntime(url, cwd) {
 async function comparePulse(previous, current) {
   const chrome = findChrome();
   if (!chrome || !hasWebSocket()) return null;
-  const { pixelDiffPct } = await import("./cdp-6YBMFE7M.js");
+  const { pixelDiffPct } = await import("./cdp-E6VAQ7XL.js");
   return pixelDiffPct(chrome, previous, current);
 }
 async function comparePulseAttributed(previous, current, url, outPath) {
   const chrome = findChrome();
   if (!chrome || !hasWebSocket()) return null;
-  const { pixelDiffAttributed } = await import("./cdp-6YBMFE7M.js");
+  const { pixelDiffAttributed } = await import("./cdp-E6VAQ7XL.js");
   return pixelDiffAttributed(chrome, previous, current, url, outPath);
 }
 function buildRuntimeFixPrompt(report) {
@@ -173,6 +173,16 @@ ${narration.join("\n")}
 
 Judge this narration as an experience: does the reading order make sense? do names actually describe their targets? is anything announced as "(no accessible name)"? Fix real incoherence \u2014 this is how non-visual users meet the page.`;
 }
+function speculationSection(speculation) {
+  if (!speculation || speculation.length === 0) return "";
+  return `
+
+## Speculation-rules findings
+
+${speculation.join("\n")}
+
+Invalid rule sets silently disable speculative loading; failed prefetch/prerender attempts waste the declaration. Fix the rules (or the target pages), don't remove them.`;
+}
 function localeSection(locale) {
   if (!locale || locale.length === 0) return "";
   return `
@@ -243,13 +253,13 @@ ${findings.join("\n")}
 
 These patterns make the page read as template output. Rework them within the committed design direction \u2014 this is style debt, not a defect list.`;
 }
-function buildReviewPrompt(shots, extra, runtime, a11y, slop, narration, phantoms, viewTransitions, components, webmcp, jank, locale) {
+function buildReviewPrompt(shots, extra, runtime, a11y, slop, narration, phantoms, viewTransitions, components, webmcp, jank, locale, speculation) {
   const list = shots.map((s) => `- ${s.name}: ${s.path}`).join("\n");
   return `Screenshots of the running app were just captured:
 
 ${list}
 
-Read each screenshot and review the rendered UI against the design standards you were given. Check: visual hierarchy and spacing rhythm, typography, color and contrast, alignment, empty-looking or broken regions, and whether the mobile capture shows horizontal overflow or cramped layout. List the concrete issues you can SEE (not hypothetical ones), ranked by visual impact${extra ? `, with special attention to: ${extra}` : ""}. Then fix them and verify the app still builds.${runtimeSection(runtime)}${a11ySection(a11y)}${slopSection(slop)}${narrationSection(narration)}${phantomSection(phantoms)}${vtSection(viewTransitions)}${componentSection(components)}${webmcpSection(webmcp)}${jankSection(jank)}${localeSection(locale)}`;
+Read each screenshot and review the rendered UI against the design standards you were given. Check: visual hierarchy and spacing rhythm, typography, color and contrast, alignment, empty-looking or broken regions, and whether the mobile capture shows horizontal overflow or cramped layout. List the concrete issues you can SEE (not hypothetical ones), ranked by visual impact${extra ? `, with special attention to: ${extra}` : ""}. Then fix them and verify the app still builds.${runtimeSection(runtime)}${a11ySection(a11y)}${slopSection(slop)}${narrationSection(narration)}${phantomSection(phantoms)}${vtSection(viewTransitions)}${componentSection(components)}${webmcpSection(webmcp)}${jankSection(jank)}${localeSection(locale)}${speculationSection(speculation)}`;
 }
 
 export {

package/dist/{chunk-4DZAWPS2.js → chunk-MITMSC2W.js}

@@ -211,7 +211,7 @@ function summarizeSoftNav(entries) {
   });
 }
 async function runFlow(chromePath, baseUrl, flow, outDir) {
-  const { stepExpression } = await import("./flows-4QS2ER6N.js");
+  const { stepExpression } = await import("./flows-EHUNUHED.js");
   const { child, wsUrl, profileDir } = await launchChrome(chromePath);
   const shots = [];
   let transitions = [];
@@ -879,6 +879,7 @@ async function cdpCapture(chromePath, url, outDir, viewports, settleMs = 2500, a
   const checkFailures = [];
   let webmcp = [];
   let locale = [];
+  const speculation = [];
   let jank = [];
   const requests = /* @__PURE__ */ new Map();
   let connection = null;
@@ -897,6 +898,22 @@ async function cdpCapture(chromePath, url, outDir, viewports, settleMs = 2500, a
       const text = detail?.exception?.description ?? detail?.text;
       if (text) report.pageErrors.push(String(text).split("\n").slice(0, 3).join("\n"));
     });
+    connection.on("Preload.ruleSetUpdated", (params) => {
+      const rs = params.ruleSet;
+      if (rs?.errorType) {
+        speculation.push(`speculation: rule set invalid (${rs.errorType}) \u2014 ${String(rs.errorMessage ?? "").slice(0, 120)}`);
+      }
+    });
+    connection.on("Preload.prefetchStatusUpdated", (params) => {
+      if (params.status === "Failure") {
+        speculation.push(`speculation: prefetch failed for ${params.prefetchUrl ?? "?"}`);
+      }
+    });
+    connection.on("Preload.prerenderStatusUpdated", (params) => {
+      if (params.status === "Failure") {
+        speculation.push(`speculation: prerender failed${params.disallowedMojoInterface ? ` (${params.disallowedMojoInterface})` : ""}${params.prerenderStatus ? ` \u2014 ${params.prerenderStatus}` : ""}`);
+      }
+    });
     connection.on("Network.requestWillBeSent", (params) => {
       requests.set(params.requestId, params.request?.url ?? "unknown");
     });
@@ -918,6 +935,7 @@ async function cdpCapture(chromePath, url, outDir, viewports, settleMs = 2500, a
     await connection.send("Runtime.enable", {}, sessionId);
     await connection.send("Network.enable", {}, sessionId);
     await connection.send("Page.enable", {}, sessionId);
+    await connection.send("Preload.enable", {}, sessionId).catch(() => null);
     await connection.send("Page.addScriptToEvaluateOnNewDocument", { source: WEBMCP_SHIM }, sessionId).catch(() => null);
     await connection.send("Page.addScriptToEvaluateOnNewDocument", { source: LOAF_SHIM }, sessionId).catch(() => null);
     await connection.send("Page.navigate", { url }, sessionId);
@@ -1201,7 +1219,7 @@ async function cdpCapture(chromePath, url, outDir, viewports, settleMs = 2500, a
     child.kill("SIGKILL");
     setTimeout(() => fs.rmSync(profileDir, { recursive: true, force: true }), 500).unref?.();
   }
-  return { report, shots, a11y, slop, perf, narration, phantoms, viewTransitions, components, checkFailures, webmcp, jank, locale };
+  return { report, shots, a11y, slop, perf, narration, phantoms, viewTransitions, components, checkFailures, webmcp, jank, locale, speculation };
 }
 
 export {

package/dist/{chunk-B356UR44.js → chunk-MWPZCXN7.js}

@@ -12,7 +12,7 @@ import {
   comparePulseAttributed,
   probeRuntime,
   runtimeSummary
-} from "./chunk-3ZHETLUC.js";
+} from "./chunk-KPLEM7SV.js";
 import {
   enrich
 } from "./chunk-UBADCBPT.js";
@@ -117,6 +117,7 @@ var Session = class {
       engineId: opts.engineId,
       model: opts.model,
       devState: "stopped",
+      pendingApproval: null,
       devUrl: null,
       totals: { costUsd: 0, turns: 0 },
       queue: [],
@@ -155,7 +156,6 @@ var Session = class {
   checkpoints = [];
   fixAttempts = 0;
   reviewTipShown = false;
-  pendingApproval = null;
   goal = null;
   laneEnabled = false;
   inLane = false;
@@ -274,7 +274,7 @@ ${question}`,
         return;
       }
       await this.runTurn(
-        buildReviewPrompt(result.shots, void 0, result.runtime, result.a11y, result.slop, result.narration, result.phantoms, result.viewTransitions, result.components, result.webmcp, result.jank, result.locale),
+        buildReviewPrompt(result.shots, void 0, result.runtime, result.a11y, result.slop, result.narration, result.phantoms, result.viewTransitions, result.components, result.webmcp, result.jank, result.locale, result.speculation),
         `\u{1F441} polish round ${round}/${rounds}`
       );
     }
@@ -496,7 +496,7 @@ ${question}`,
           const req = JSON.parse(fs2.readFileSync(reqPath, "utf8"));
           fs2.rmSync(reqPath, { force: true });
           if (typeof req?.summary === "string" && req.summary.length > 0) {
-            this.pendingApproval = req.summary;
+            this.notify({ pendingApproval: req.summary });
             const shot = typeof req.screenshot === "string" ? path2.resolve(this.execCwd(), req.screenshot) : null;
             if (shot && fs2.existsSync(shot)) this.push("image", shot);
             this.push("status", `\u23F8 approval requested: ${req.summary}
@@ -665,7 +665,7 @@ ${probe.checkFailures.slice(0, 5).join("\n")}`);
               const captureResult = await this.capture();
               if (captureResult) {
                 await this.runTurn(
-                  buildReviewPrompt(captureResult.shots, void 0, captureResult.runtime, captureResult.a11y, captureResult.slop, captureResult.narration, captureResult.phantoms, captureResult.viewTransitions, captureResult.components, captureResult.webmcp, captureResult.jank, captureResult.locale),
+                  buildReviewPrompt(captureResult.shots, void 0, captureResult.runtime, captureResult.a11y, captureResult.slop, captureResult.narration, captureResult.phantoms, captureResult.viewTransitions, captureResult.components, captureResult.webmcp, captureResult.jank, captureResult.locale, captureResult.speculation),
                   "\u{1F441} auto-review rendered UI"
                 );
               }
@@ -812,7 +812,7 @@ squint verifies every turn \u2014 gates, runtime probe, page audits. Do not decl
       this.push("image", pulsePath);
       return null;
     }
-    const { previewDir } = await import("./preview-UV67QLVI.js");
+    const { previewDir } = await import("./preview-M6VBOTQZ.js");
     const diff = await comparePulseAttributed(
       previous,
       current,
@@ -1069,12 +1069,12 @@ every ask now carries it; auto-fix presses to ${MAX_GOAL_FIX_ATTEMPTS} attempts
       }
       case "yes":
       case "no": {
-        if (!this.pendingApproval) {
+        if (!this.state.pendingApproval) {
           this.push("status", `nothing awaiting approval \u2014 /${name} answers an engine's approval request`);
           break;
         }
-        const summary = this.pendingApproval;
-        this.pendingApproval = null;
+        const summary = this.state.pendingApproval;
+        this.notify({ pendingApproval: null });
         const approved = name === "yes";
         appendDecision(this.opts.cwd, {
           decision: `${approved ? "approved" : "rejected"}: ${summary}${arg ? ` \u2014 ${arg}` : ""}`,
@@ -1190,7 +1190,7 @@ every ask now carries it; auto-fix presses to ${MAX_GOAL_FIX_ATTEMPTS} attempts
               this.push("error", "no Chrome/Chromium found");
               return;
             }
-            const { suggestFlows } = await import("./flows-4QS2ER6N.js");
+            const { suggestFlows } = await import("./flows-EHUNUHED.js");
             this.push("status", "drafting flows from the live routes\u2026");
             const { created, skipped } = await suggestFlows(this.opts.cwd, this.state.devUrl, chrome);
             if (created.length > 0) this.push("status", `drafted ${created.length} flow(s): ${created.join(", ")} \u2014 edit .squint/flows/*.flow or ask the engine to deepen them`);
@@ -1200,7 +1200,7 @@ every ask now carries it; auto-fix presses to ${MAX_GOAL_FIX_ATTEMPTS} attempts
           break;
         }
         void (async () => {
-          const { loadFlows } = await import("./flows-4QS2ER6N.js");
+          const { loadFlows } = await import("./flows-EHUNUHED.js");
           const flows = loadFlows(this.opts.cwd);
           if (flows.length === 0) {
             this.push("status", "no flows \u2014 add .squint/flows/<name>.flow (goto/click/fill/press/expect/shot lines), or ask the engine to write one");
@@ -1211,8 +1211,8 @@ every ask now carries it; auto-fix presses to ${MAX_GOAL_FIX_ATTEMPTS} attempts
             this.push("error", "no Chrome/Chromium found for flows");
             return;
           }
-          const { runFlow } = await import("./cdp-6YBMFE7M.js");
-          const { previewDir } = await import("./preview-UV67QLVI.js");
+          const { runFlow } = await import("./cdp-E6VAQ7XL.js");
+          const { previewDir } = await import("./preview-M6VBOTQZ.js");
           this.push("status", `replaying ${flows.length} flow(s)\u2026`);
           this.notify({ running: true, runStartedAt: Date.now() });
           const failures = [];
@@ -1352,7 +1352,7 @@ every ask now carries it; auto-fix presses to ${MAX_GOAL_FIX_ATTEMPTS} attempts
           const result = await this.capture();
           if (result) {
             await this.runTurn(
-              buildReviewPrompt(result.shots, arg || void 0, result.runtime, result.a11y, result.slop, result.narration, result.phantoms, result.viewTransitions, result.components, result.webmcp, result.jank, result.locale),
+              buildReviewPrompt(result.shots, arg || void 0, result.runtime, result.a11y, result.slop, result.narration, result.phantoms, result.viewTransitions, result.components, result.webmcp, result.jank, result.locale, result.speculation),
               `\u{1F441} review rendered UI${arg ? ` \xB7 ${arg}` : ""}`
             );
           }

package/dist/{chunk-MDLNTOGX.js → chunk-QYK6OO46.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   Session
-} from "./chunk-B356UR44.js";
+} from "./chunk-MWPZCXN7.js";
 
 // src/daemon/client.ts
 import net from "net";
@@ -57,7 +57,7 @@ function socketPath(cwd) {
   const hash = crypto.createHash("sha256").update(cwd).digest("hex").slice(0, 12);
   return path.join(os.tmpdir(), `squint-${hash}.sock`);
 }
-function startDaemon(opts) {
+async function startDaemon(opts) {
   const session = new Session(opts);
   const sock = socketPath(opts.cwd);
   fs.mkdirSync(path.dirname(sock), { recursive: true });
@@ -122,7 +122,7 @@ function startDaemon(opts) {
     const state = session.getState();
     if (!state.devUrl || state.running) return;
     try {
-      const { runIntervalSweep } = await import("./checks-GTKPEQ2L.js");
+      const { runIntervalSweep } = await import("./checks-Y73R4SS3.js");
       const failures = await runIntervalSweep(opts.cwd, state.devUrl, lastRun);
       if (failures.length > 0) {
         session.note(`\u23F0 interval check(s) failing:
@@ -132,6 +132,54 @@ ${failures.join("\n")}`);
     }
   }, opts.intervalSweepMs ?? 6e4);
   sweep.unref?.();
+  let relayServer = null;
+  let relayUrl;
+  let relayUnsub = null;
+  if (opts.approvalWebhook) {
+    const http = await import("http");
+    const crypto2 = await import("crypto");
+    const tokens = /* @__PURE__ */ new Map();
+    relayServer = http.createServer((req, res) => {
+      const token = (req.url ?? "").replace(/^\//, "");
+      const verdict = tokens.get(token);
+      if (!verdict) {
+        res.writeHead(404).end("unknown or already-used token");
+        return;
+      }
+      tokens.clear();
+      session.command(verdict === "yes" ? "/yes approved via webhook" : "/no rejected via webhook");
+      res.writeHead(200, { "content-type": "text/plain" });
+      res.end(verdict === "yes" ? "approved \u2014 the engine proceeds" : "rejected \u2014 the engine stands down");
+    });
+    await new Promise((resolve) => relayServer?.listen(opts.relayPort ?? 0, "127.0.0.1", resolve));
+    const addr = relayServer.address();
+    relayUrl = `http://127.0.0.1:${addr.port}`;
+    let lastSeen = null;
+    relayUnsub = session.subscribe(() => {
+      const pending = session.getState().pendingApproval;
+      if (!pending || pending === lastSeen) {
+        if (!pending) lastSeen = null;
+        return;
+      }
+      lastSeen = pending;
+      const approve = crypto2.randomBytes(16).toString("hex");
+      const reject = crypto2.randomBytes(16).toString("hex");
+      tokens.clear();
+      tokens.set(approve, "yes");
+      tokens.set(reject, "no");
+      fetch(opts.approvalWebhook, {
+        method: "POST",
+        headers: { "content-type": "application/json" },
+        body: JSON.stringify({
+          text: `squint approval requested: ${pending}`,
+          summary: pending,
+          approveUrl: `${relayUrl}/${approve}`,
+          rejectUrl: `${relayUrl}/${reject}`
+        }),
+        signal: AbortSignal.timeout(5e3)
+      }).catch(() => null);
+    });
+  }
   const unsubscribe = session.subscribe(() => {
     const payload = serialize();
     for (const client of clients) {
@@ -143,9 +191,12 @@ ${failures.join("\n")}`);
     server.listen(sock, () => {
       resolve({
         session,
+        relayUrl,
         clientCount: () => clients.length,
         close: () => {
           clearInterval(sweep);
+          relayUnsub?.();
+          relayServer?.close();
           unsubscribe();
           for (const client of clients) client.destroy();
           server.close();

package/dist/cli.js

@@ -3,14 +3,14 @@ import {
   connectDaemon,
   socketPath,
   startDaemon
-} from "./chunk-MDLNTOGX.js";
+} from "./chunk-QYK6OO46.js";
 import {
   App
-} from "./chunk-PPC2KM7P.js";
-import "./chunk-B356UR44.js";
+} from "./chunk-6M54VGLM.js";
+import "./chunk-MWPZCXN7.js";
 import "./chunk-YKEAKVIS.js";
 import "./chunk-LNJ7O5O4.js";
-import "./chunk-3ZHETLUC.js";
+import "./chunk-KPLEM7SV.js";
 import "./chunk-UBADCBPT.js";
 import "./chunk-IEQGTVWN.js";
 import "./chunk-AUJJGMZG.js";
@@ -25,13 +25,13 @@ import {
 } from "./chunk-WAJXATCO.js";
 import "./chunk-62JNF5M2.js";
 import "./chunk-7CAGWFAQ.js";
-import "./chunk-4DZAWPS2.js";
+import "./chunk-MITMSC2W.js";
 import "./chunk-55JZKI2M.js";
 import {
   detectEngines,
   getEngine
 } from "./chunk-HIUQ4FXO.js";
-import "./chunk-6RMF4NAW.js";
+import "./chunk-AYJQYDN6.js";
 
 // src/cli.tsx
 import { Command } from "commander";
@@ -66,7 +66,9 @@ var ConfigSchema = z.object({
   /** Cheaper model used for auto-fix and /fix turns (mechanical work). */
   fixModel: z.string().optional(),
   /** TUI theme name (amber, ocean, moss, rose, mono). */
-  theme: z.string().optional()
+  theme: z.string().optional(),
+  /** POSTed when an engine requests visual approval under squint serve. */
+  approvalWebhook: z.string().url().optional()
 });
 function defaultPaths(cwd) {
   const xdg = process.env.XDG_CONFIG_HOME;
@@ -114,6 +116,8 @@ function setConfigValue(file, key, value) {
       throw new Error(`"${key}" must be true or false`);
     }
     next = { ...current, [key]: value === "true" };
+  } else if (key === "approvalWebhook") {
+    next = { ...current, approvalWebhook: value };
   } else if (key === "budgetUsd") {
     const budget = Number.parseFloat(value);
     if (!Number.isFinite(budget) || budget <= 0) {
@@ -126,7 +130,7 @@ function setConfigValue(file, key, value) {
     next = { ...current, models: { ...current.models, [engineId]: value } };
   } else {
     throw new Error(
-      `Unknown config key "${key}". Supported: engine, theme, autoDev, autoFix, autoProbe, autoCheck, autoReview, bell, budgetUsd, fixModel, models.<engineId>`
+      `Unknown config key "${key}". Supported: engine, theme, autoDev, autoFix, autoProbe, autoCheck, autoReview, bell, budgetUsd, fixModel, approvalWebhook, models.<engineId>`
     );
   }
   fs.mkdirSync(path.dirname(file), { recursive: true });
@@ -173,6 +177,7 @@ function registerDaemon(program2) {
       autoReview: config.autoReview,
       fixModel: config.fixModel,
       budgetUsd: config.budgetUsd,
+      approvalWebhook: config.approvalWebhook,
       onQuit: () => {
         daemon.close();
         process.exit(0);
@@ -180,6 +185,7 @@ function registerDaemon(program2) {
     });
     console.log(`squint daemon on ${socketPath(cwd)} (engine: ${engineId})`);
     console.log("attach from another terminal with: squint attach");
+    if (daemon.relayUrl) console.log(`approval relay on ${daemon.relayUrl} \u2192 ${config.approvalWebhook}`);
     const stop = () => {
       daemon.close();
       process.exit(0);
@@ -188,18 +194,18 @@ function registerDaemon(program2) {
     process.on("SIGTERM", stop);
   });
   program2.command("mcp").description("serve the gates as MCP tools over stdio (check, shot, flows, context)").action(async () => {
-    const { runMcpServer } = await import("./server-WOYEQLAA.js");
+    const { runMcpServer } = await import("./server-V3DHLHPK.js");
     runMcpServer(process.cwd());
   });
   program2.command("attach").description("attach this terminal to a running squint daemon (full TUI; --plain for line mode)").option("--plain", "line-mode attach instead of the full TUI").action(async (opts) => {
     const cwd = process.cwd();
     if (!opts.plain) {
       try {
-        const { RemoteSession } = await import("./remote-ICNK2PPK.js");
+        const { RemoteSession } = await import("./remote-VAIQNPAV.js");
         const remote = await RemoteSession.connect(cwd);
         const config = loadConfig(defaultPaths(cwd));
         const { render: render2 } = await import("ink");
-        const { App: App2 } = await import("./App-C3LOYRTR.js");
+        const { App: App2 } = await import("./App-TEZ6E4R6.js");
         const React = await import("react");
         render2(
           React.createElement(App2, {
@@ -316,7 +322,7 @@ function registerEnv(program2) {
       }
     }
     const { findChrome } = await import("./chrome-BQ4WOCOH.js");
-    const { hasWebSocket } = await import("./cdp-6YBMFE7M.js");
+    const { hasWebSocket } = await import("./cdp-E6VAQ7XL.js");
     const chrome = findChrome();
     console.log(
       chrome ? `${pc3.green("\u2713")} Chrome ${pc3.dim(chrome)}` : `${pc3.yellow("\u25CB")} Chrome ${pc3.dim("\u2014 screenshots and runtime probing disabled")}`
@@ -552,7 +558,7 @@ function registerQuality(program2) {
     report.gates = gateResults.map((r) => ({ id: r.gate.id, ok: r.ok, durationMs: r.durationMs, outputTail: r.ok ? void 0 : r.outputTail }));
     if (gateResults.some((r) => !r.ok)) failed = true;
     if (opts.url) {
-      const { captureViewports, runtimeSummary, previewDir } = await import("./preview-UV67QLVI.js");
+      const { captureViewports, runtimeSummary, previewDir } = await import("./preview-M6VBOTQZ.js");
       const capture = await captureViewports(cwd, opts.url);
       if (!capture) {
         console.log(pc5.red("\u2717 audit: capture failed (Chrome missing or URL unreachable)"));
@@ -584,14 +590,14 @@ function registerQuality(program2) {
           console.log(`${pc5.green("\u2713")} audit ${pc5.dim(`(${advisories.a11y.length} a11y, ${advisories.slop.length} slop, ${advisories.jank.length} jank advisories)`)}`);
         }
       }
-      const { loadFlows } = await import("./flows-4QS2ER6N.js");
+      const { loadFlows } = await import("./flows-EHUNUHED.js");
       const flows = loadFlows(cwd);
       if (flows.length > 0) {
         const { findChrome } = await import("./chrome-BQ4WOCOH.js");
         const chrome = findChrome();
         const flowReport = [];
         if (chrome) {
-          const { runFlow } = await import("./cdp-6YBMFE7M.js");
+          const { runFlow } = await import("./cdp-E6VAQ7XL.js");
           for (const flow of flows) {
             const result = await runFlow(chrome, opts.url, flow, previewDir(cwd));
             flowReport.push({ name: flow.name, ok: result.ok, detail: result.ok ? void 0 : `step ${result.failedStep}: ${result.detail}` });
@@ -605,7 +611,7 @@ function registerQuality(program2) {
     report.ok = !failed;
     report.finishedAt = (/* @__PURE__ */ new Date()).toISOString();
     try {
-      const { writeReceipt } = await import("./receipts-7PERXBJO.js");
+      const { writeReceipt } = await import("./receipts-KNOHIVCA.js");
       console.log(pc5.dim(`receipt \u2192 ${writeReceipt(cwd, report)}`));
     } catch {
     }
@@ -617,7 +623,7 @@ function registerQuality(program2) {
     if (failed) process.exitCode = 1;
   });
   program2.command("shot").description("Screenshot a running app at mobile/tablet/desktop viewports (+ .squint/routes)").argument("<url>", "URL of the running app (e.g. http://localhost:5173)").action(async (url) => {
-    const { captureViewports } = await import("./preview-UV67QLVI.js");
+    const { captureViewports } = await import("./preview-M6VBOTQZ.js");
     const result = await captureViewports(process.cwd(), url);
     if (!result) {
       console.error(pc5.red("\u2717 no Chrome/Chromium found"));
@@ -804,7 +810,7 @@ function registerTui(program2) {
 }
 
 // src/cli.tsx
-var VERSION = true ? "0.8.2" : "0.0.0-dev";
+var VERSION = true ? "0.9.1" : "0.0.0-dev";
 var program = new Command();
 program.name("squint").description("Lovable for your terminal \u2014 a frontend harness on top of Claude Code, Codex, and friends.").version(VERSION);
 registerRun(program);

package/dist/{flows-4QS2ER6N.js → flows-EHUNUHED.js}

@@ -4,7 +4,7 @@ import {
   parseFlow,
   stepExpression,
   suggestFlows
-} from "./chunk-53DPUAXN.js";
+} from "./chunk-FQYJ343N.js";
 export {
   loadFlows,
   parseFlow,

package/dist/{preview-UV67QLVI.js → preview-M6VBOTQZ.js}

@@ -11,12 +11,12 @@ import {
   probeRuntime,
   routeShotName,
   runtimeSummary
-} from "./chunk-3ZHETLUC.js";
+} from "./chunk-KPLEM7SV.js";
 import "./chunk-7CAGWFAQ.js";
-import "./chunk-4DZAWPS2.js";
+import "./chunk-MITMSC2W.js";
 import "./chunk-55JZKI2M.js";
 import "./chunk-HIUQ4FXO.js";
-import "./chunk-6RMF4NAW.js";
+import "./chunk-AYJQYDN6.js";
 export {
   VIEWPORTS,
   buildReviewPrompt,

package/dist/{receipts-7PERXBJO.js → receipts-KNOHIVCA.js}

@@ -31,7 +31,7 @@ function buildReceipt(cwd, report) {
     }
   }
   const unsigned = {
-    version: true ? "0.8.2" : "0.0.0-dev",
+    version: true ? "0.9.1" : "0.0.0-dev",
     node: process.version,
     gitHead,
     report,

package/dist/{remote-ICNK2PPK.js → remote-VAIQNPAV.js}

@@ -2,10 +2,10 @@
 import {
   connectDaemon,
   socketPath
-} from "./chunk-MDLNTOGX.js";
-import "./chunk-B356UR44.js";
+} from "./chunk-QYK6OO46.js";
+import "./chunk-MWPZCXN7.js";
 import "./chunk-YKEAKVIS.js";
-import "./chunk-3ZHETLUC.js";
+import "./chunk-KPLEM7SV.js";
 import "./chunk-UBADCBPT.js";
 import "./chunk-IEQGTVWN.js";
 import "./chunk-AUJJGMZG.js";
@@ -16,10 +16,10 @@ import "./chunk-K5QJMSJH.js";
 import "./chunk-WAJXATCO.js";
 import "./chunk-62JNF5M2.js";
 import "./chunk-7CAGWFAQ.js";
-import "./chunk-4DZAWPS2.js";
+import "./chunk-MITMSC2W.js";
 import "./chunk-55JZKI2M.js";
 import "./chunk-HIUQ4FXO.js";
-import "./chunk-6RMF4NAW.js";
+import "./chunk-AYJQYDN6.js";
 
 // src/daemon/remote.ts
 var noteId = 0;
@@ -38,7 +38,8 @@ var RemoteSession = class _RemoteSession {
       queue: [],
       mode: "safe",
       problems: [],
-      sandbox: false
+      sandbox: false,
+      pendingApproval: null
     };
     client.onMessage((msg) => {
       if (msg.type === "state" && msg.state) {

package/dist/{server-WOYEQLAA.js → server-V3DHLHPK.js}

@@ -7,7 +7,7 @@ import {
   captureViewports,
   previewDir,
   runtimeSummary
-} from "./chunk-3ZHETLUC.js";
+} from "./chunk-KPLEM7SV.js";
 import "./chunk-UBADCBPT.js";
 import "./chunk-IEQGTVWN.js";
 import "./chunk-WAJXATCO.js";
@@ -18,13 +18,13 @@ import {
 import "./chunk-7CAGWFAQ.js";
 import {
   loadFlows
-} from "./chunk-53DPUAXN.js";
-import "./chunk-4DZAWPS2.js";
+} from "./chunk-FQYJ343N.js";
+import "./chunk-MITMSC2W.js";
 import {
   findChrome
 } from "./chunk-55JZKI2M.js";
 import "./chunk-HIUQ4FXO.js";
-import "./chunk-6RMF4NAW.js";
+import "./chunk-AYJQYDN6.js";
 
 // src/mcp/server.ts
 import readline from "readline";
@@ -59,6 +59,7 @@ ${r.outputTail.slice(-1500)}`}`).join("\n");
         ["view transitions", result.viewTransitions],
         ["jank", result.jank],
         ["locale", result.locale],
+        ["speculation", result.speculation],
         ["components", result.components]
       ]) {
         if (list && list.length > 0) sections.push(`${label}:
@@ -77,7 +78,7 @@ ${list.join("\n")}`);
       if (flows.length === 0) return "no flows declared \u2014 add .squint/flows/<name>.flow";
       const chrome = findChrome();
       if (!chrome) return "no Chrome/Chromium found";
-      const { runFlow } = await import("./cdp-6YBMFE7M.js");
+      const { runFlow } = await import("./cdp-E6VAQ7XL.js");
       const lines = [];
       for (const flow of flows) {
         const result = await runFlow(chrome, url, flow, previewDir(cwd));
@@ -97,7 +98,7 @@ ${result.leaks.map((l) => `  ${l}`).join("\n")}` : ""}` : `\u2717 ${flow.name} a
     async run(args, cwd) {
       const chrome = findChrome();
       if (!chrome) return "no Chrome/Chromium found";
-      const { suggestFlows } = await import("./flows-4QS2ER6N.js");
+      const { suggestFlows } = await import("./flows-EHUNUHED.js");
       const { created, skipped } = await suggestFlows(cwd, String(args.url ?? ""), chrome);
       return [
         created.length > 0 ? `drafted: ${created.join(", ")}` : "nothing drafted",
@@ -112,7 +113,7 @@ ${result.leaks.map((l) => `  ${l}`).join("\n")}` : ""}` : `\u2717 ${flow.name} a
     async run(args, cwd) {
       const fs = await import("fs");
       const path = await import("path");
-      const { verifyReceipt } = await import("./receipts-7PERXBJO.js");
+      const { verifyReceipt } = await import("./receipts-KNOHIVCA.js");
       const file = path.isAbsolute(String(args.path)) ? String(args.path) : path.join(cwd, String(args.path));
       let receipt;
       try {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aayambansal/squint",
-  "version": "0.8.2",
+  "version": "0.9.1",
   "description": "Lovable for your terminal \u2014 a frontend harness on top of Claude Code, Codex, and other coding agents.",
   "type": "module",
   "license": "MIT",