@hawkeyexl/manni 4.5.0 → 4.7.0

package/dist/chunk-BWCWTHYS.js

@@ -0,0 +1,146 @@
+#!/usr/bin/env node
+import {
+  TracevalsError
+} from "./chunk-UKZNLVJW.js";
+import {
+  noticeOnce
+} from "./chunk-HX44GB4Z.js";
+import {
+  assertKnownProvider,
+  assertLocalFlag,
+  assertModelHasProvider,
+  localNotice,
+  providerSpecFor,
+  resolveIdentity,
+  selectProvider
+} from "./chunk-QCHVR4ZM.js";
+import {
+  errorMessage
+} from "./chunk-G3T47CFV.js";
+
+// src/tracevals/judge/provider.ts
+import {
+  makeProvider as makeInferenceProvider,
+  mockVerdict
+} from "@hawkeyexl/inference";
+var JEV = "jev";
+var JEV_OUT_OF_LOOP = "jev answers decisions only, so it cannot extract rules or write verdicts. Use it as tracevals.conformance.hook.provider.";
+var CONFIG_KEY = "tracevals.provider";
+var toTracevalsError = (message) => new TracevalsError(message);
+function selectProvider2(config, flags = {}, ev = {}) {
+  assertLocalFlag(flags, toTracevalsError);
+  return selectProvider(flags, [
+    {
+      ...ev.provider !== void 0 ? { provider: ev.provider } : {},
+      ...ev.model !== void 0 ? { model: ev.model } : {},
+      ...ev.origin !== void 0 ? { origin: ev.origin } : {}
+    },
+    ...configLevels(config)
+  ]);
+}
+function selectHookProvider(config) {
+  const hook = config.conformance?.hook;
+  return selectProvider({}, [
+    {
+      ...hook?.provider != null ? { provider: hook.provider } : {},
+      ...hook?.model != null ? { model: hook.model } : {},
+      origin: "tracevals.conformance.hook.provider"
+    },
+    ...configLevels(config)
+  ]);
+}
+function configLevels(config) {
+  return [
+    {
+      ...config.provider !== null ? { provider: config.provider } : {},
+      ...config.model !== null ? { model: config.model } : {},
+      origin: CONFIG_KEY
+    },
+    {
+      ...config.providers.provider !== void 0 ? { provider: config.providers.provider } : {},
+      ...config.providers.model !== void 0 ? { model: config.providers.model } : {},
+      origin: "providers.provider"
+    }
+  ];
+}
+function announceSelection(selection) {
+  const message = localNotice(selection);
+  if (message !== void 0) noticeOnce(message);
+}
+function assertProviderSelection(selection) {
+  if (selection.provider === JEV) throw new TracevalsError(JEV_OUT_OF_LOOP);
+  assertKnownProvider(selection.provider, toTracevalsError);
+  assertModelHasProvider(selection.provider, selection.model, CONFIG_KEY, toTracevalsError);
+}
+function providerSpecFor2(config, selection, options = {}) {
+  const spec = providerSpecFor(config.providers, selection);
+  switch (selection.provider) {
+    case "anthropic":
+      return { ...spec, anthropic: { toolName: "record_verdict" } };
+    case "openai":
+      return { ...spec, openai: { schemaName: "verdict" } };
+    case "llama-cpp":
+      return {
+        ...spec,
+        llamaCpp: { ...spec.llamaCpp, ...options.host ?? { host: "connect" } }
+      };
+    case "mock":
+      return {
+        ...spec,
+        mockResponses: options.mockResponses ?? [mockVerdict("pass", 0.95)]
+      };
+    default:
+      return spec;
+  }
+}
+async function resolveProviderIdentity(config, flags = {}, ev = {}) {
+  const selection = selectProvider2(config, flags, ev);
+  assertProviderSelection(selection);
+  return resolveSelectionIdentity(config, selection);
+}
+async function resolveSelectionIdentity(config, selection) {
+  const { provider, model } = selection;
+  assertKnownProvider(provider, toTracevalsError, { decisions: true });
+  assertModelHasProvider(provider, model, CONFIG_KEY, toTracevalsError);
+  announceSelection(selection);
+  return resolveIdentity(
+    providerSpecFor2(config, { provider, model: model ?? null }),
+    toTracevalsError
+  );
+}
+function constructProvider(config, identity, options = {}) {
+  if (identity.provider === JEV) {
+    const keyEnv = config.providers.jev?.apiKeyEnv ?? "TYPESAFE_API_KEY";
+    const key = process.env[keyEnv];
+    if (key === void 0 || key === "") {
+      throw new TracevalsError(`jev needs an API key in ${keyEnv}`);
+    }
+  }
+  try {
+    return makeInferenceProvider(providerSpecFor2(config, identity, options));
+  } catch (e) {
+    throw new TracevalsError(errorMessage(e));
+  }
+}
+async function makeJudgeProvider(config, flags = {}, ev = {}, options = {}) {
+  return constructProvider(
+    config,
+    await resolveProviderIdentity(config, flags, ev),
+    options
+  );
+}
+
+export {
+  JEV,
+  JEV_OUT_OF_LOOP,
+  selectProvider2 as selectProvider,
+  selectHookProvider,
+  announceSelection,
+  assertProviderSelection,
+  providerSpecFor2 as providerSpecFor,
+  resolveProviderIdentity,
+  resolveSelectionIdentity,
+  constructProvider,
+  makeJudgeProvider
+};
+//# sourceMappingURL=chunk-BWCWTHYS.js.map

package/dist/chunk-BWCWTHYS.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/tracevals/judge/provider.ts"],"sourcesContent":["/**\n * Choosing the provider and model, and building the shared inference\n * library's `ProviderSpec` for it.\n *\n * The providers themselves live in `@hawkeyexl/inference` (ADR 01006). The\n * names a provider may have, the two refusals, `--local`, the detection call,\n * the level-bound precedence and the mapping of the family's `providers:`\n * connection settings are `src/shared/providers.ts`, the same code\n * `manni meta fill` and `manni docevals` run. What stays here is what only\n * manni tracevals can decide: which levels it reads (a flag, an eval's own\n * `provider:`/`model:`, `tracevals.provider`/`model`, then the family's\n * `providers:`), and the judge-shaped options a verdict call wants.\n *\n * No model id is named in this file. A model the tool pinned would go stale\n * the week the provider shipped a better one, and would override the default\n * the library keeps current.\n */\nimport {\n  makeProvider as makeInferenceProvider,\n  mockVerdict,\n  type InferenceProvider,\n  type MockResponse,\n  type ProviderName as ConcreteProvider,\n  type ProviderSelector,\n  type ProviderSpec,\n} from \"@hawkeyexl/inference\";\nimport { TracevalsError } from \"../types.js\";\nimport type { HostSetting } from \"../rules/host.js\";\nimport type { TracevalsConfig } from \"../core/config.js\";\nimport {\n  assertKnownProvider,\n  assertLocalFlag,\n  assertModelHasProvider,\n  localNotice,\n  providerSpecFor as sharedProviderSpecFor,\n  resolveIdentity,\n  selectProvider as selectFromLevels,\n  type ProviderChoice,\n  type ProviderFlags,\n  type ProviderSelection,\n} from \"../../shared/providers.js\";\nimport { errorMessage } from \"../../shared/errors.js\";\nimport { noticeOnce } from \"../../shared/warn.js\";\n\nexport type { MockResponse, ProviderChoice, ProviderFlags, ProviderSelection };\n\n/** The decide-only provider (proposal 0079). */\nexport const JEV = \"jev\";\n\n/** Why jev cannot serve out of the loop, and where it goes instead. */\nexport const JEV_OUT_OF_LOOP =\n  \"jev answers decisions only, so it cannot extract rules or write verdicts. Use it as tracevals.conformance.hook.provider.\";\n\n/** The key a tracevals user writes, named by the refusal a bare model gets. */\nconst CONFIG_KEY = \"tracevals.provider\";\n\nconst toTracevalsError = (message: string): Error => new TracevalsError(message);\n\n/** What a caller wants of the provider beyond which one it is. */\nexport interface JudgeProviderOptions {\n  /**\n   * Responses for the `mock` seam. The default is verdict-shaped, which suits\n   * judging; callers with a different response schema (criteria proposals,\n   * say) must supply their own. `mock` is accepted when named but never\n   * offered, so nothing that lists providers mentions it.\n   */\n  mockResponses?: MockResponse[];\n  /**\n   * How a `llama-cpp` provider reaches the model host. Unset, it connects to\n   * a running host and never starts one, which is every run by hand.\n   */\n  host?: HostSetting;\n}\n\n/**\n * The provider and model in force: a flag, then the eval's own choice, then\n * `tracevals.provider`/`model`, then the family's `providers.provider`/`model`,\n * then `auto`. A model is carried only to the provider its own level names, so\n * an eval that names a different provider takes that provider's default\n * instead of a model it cannot run (`selectProvider` in the shared module).\n *\n * `--local` runs llama-cpp over all of them. A `--provider` it contradicts is\n * refused here, so no path selects past it. `ev.origin` names the eval in the\n * notice for a provider `--local` replaced; the caller knows its artifact.\n */\nexport function selectProvider(\n  config: TracevalsConfig,\n  flags: ProviderFlags = {},\n  ev: ProviderChoice = {},\n): ProviderSelection {\n  assertLocalFlag(flags, toTracevalsError);\n  return selectFromLevels(flags, [\n    {\n      ...(ev.provider !== undefined ? { provider: ev.provider } : {}),\n      ...(ev.model !== undefined ? { model: ev.model } : {}),\n      ...(ev.origin !== undefined ? { origin: ev.origin } : {}),\n    },\n    ...configLevels(config),\n  ]);\n}\n\n/**\n * The judge inside a hook (proposal 0079, \"Two model roles\"):\n * `conformance.hook.provider`/`model`, then `tracevals.provider`/`model`, then\n * the family's `providers:`, then `auto`. No flag reaches it, because a hook\n * has no command line. A hook level naming only a model lends it to whichever\n * provider wins, as every level does.\n */\nexport function selectHookProvider(config: TracevalsConfig): ProviderSelection {\n  const hook = config.conformance?.hook;\n  return selectFromLevels({}, [\n    {\n      ...(hook?.provider != null ? { provider: hook.provider } : {}),\n      ...(hook?.model != null ? { model: hook.model } : {}),\n      origin: \"tracevals.conformance.hook.provider\",\n    },\n    ...configLevels(config),\n  ]);\n}\n\n/** `tracevals.provider`/`model`, then the family's `providers:`. */\nfunction configLevels(config: TracevalsConfig): ProviderChoice[] {\n  return [\n    {\n      ...(config.provider !== null ? { provider: config.provider } : {}),\n      ...(config.model !== null ? { model: config.model } : {}),\n      origin: CONFIG_KEY,\n    },\n    {\n      ...(config.providers.provider !== undefined\n        ? { provider: config.providers.provider }\n        : {}),\n      ...(config.providers.model !== undefined ? { model: config.providers.model } : {}),\n      origin: \"providers.provider\",\n    },\n  ];\n}\n\n/**\n * Say what `--local` set aside, once per source. Called where a selection is\n * about to be used, never where it is only checked, so a run that sends\n * nothing to a model says nothing.\n */\nexport function announceSelection(selection: ProviderSelection): void {\n  const message = localNotice(selection);\n  if (message !== undefined) noticeOnce(message);\n}\n\n/**\n * Refuse a selection that cannot be right, with `manni meta fill`'s messages:\n * an unknown name, or a model under `auto`. Both are `TracevalsError`s, which\n * is what maps them to exit 2.\n */\nexport function assertProviderSelection(selection: ProviderSelection): void {\n  // Every caller of this check generates: `run`'s and `calibrate`'s verdicts,\n  // `fill`'s proposals, and rule extraction. Only the turn judge may decide.\n  if (selection.provider === JEV) throw new TracevalsError(JEV_OUT_OF_LOOP);\n  assertKnownProvider(selection.provider, toTracevalsError);\n  assertModelHasProvider(selection.provider, selection.model, CONFIG_KEY, toTracevalsError);\n}\n\n/**\n * The spec for a selection, with the family's connection settings for the\n * provider it names, and under `auto` the settings detection reads.\n */\nexport function providerSpecFor(\n  config: TracevalsConfig,\n  selection: { provider: ProviderSelector; model: string | null },\n  options: JudgeProviderOptions = {},\n): ProviderSpec {\n  const spec = sharedProviderSpecFor(config.providers, selection);\n  switch (selection.provider) {\n    case \"anthropic\":\n      // A verdict-shaped tool name steers the model better than a generic\n      // one, and it is free to keep.\n      return { ...spec, anthropic: { toolName: \"record_verdict\" } };\n    case \"openai\":\n      return { ...spec, openai: { schemaName: \"verdict\" } };\n    case \"llama-cpp\":\n      return {\n        ...spec,\n        llamaCpp: { ...spec.llamaCpp, ...(options.host ?? { host: \"connect\" }) },\n      };\n    case \"mock\":\n      return {\n        ...spec,\n        mockResponses: options.mockResponses ?? [mockVerdict(\"pass\", 0.95)],\n      };\n    default:\n      return spec;\n  }\n}\n\n/**\n * The concrete provider and model, WITHOUT constructing the provider: cache\n * keys need it, and a fully cached run must not require an API key.\n *\n * Under `auto` this is where detection runs, exactly as `manni meta fill` runs\n * it, seeing the same connection settings. The model is the RESOLVED one (the\n * provider's default when none was named, a llama-cpp tier's concrete\n * weights), so a library default that changes changes every cache key built\n * from it.\n */\nexport async function resolveProviderIdentity(\n  config: TracevalsConfig,\n  flags: ProviderFlags = {},\n  ev: ProviderChoice = {},\n): Promise<{ provider: ConcreteProvider; model: string }> {\n  // Every caller of this generates, so jev is refused here as well as where\n  // a command checks its selection up front.\n  const selection = selectProvider(config, flags, ev);\n  assertProviderSelection(selection);\n  return resolveSelectionIdentity(config, selection);\n}\n\n/** `resolveProviderIdentity` for a selection already made. */\nexport async function resolveSelectionIdentity(\n  config: TracevalsConfig,\n  selection: ProviderSelection,\n): Promise<{ provider: ConcreteProvider; model: string }> {\n  const { provider, model } = selection;\n  // Generating callers refused jev in assertProviderSelection; reaching here\n  // with it means the turn judge, which decides.\n  assertKnownProvider(provider, toTracevalsError, { decisions: true });\n  assertModelHasProvider(provider, model, CONFIG_KEY, toTracevalsError);\n  announceSelection(selection);\n  return resolveIdentity(\n    providerSpecFor(config, { provider, model: model ?? null }),\n    toTracevalsError,\n  );\n}\n\n/** Construct a provider for an identity already resolved. */\nexport function constructProvider(\n  config: TracevalsConfig,\n  identity: { provider: ConcreteProvider; model: string },\n  options: JudgeProviderOptions = {},\n): InferenceProvider {\n  if (identity.provider === JEV) {\n    // Checked here, so the message names the variable a user sets rather than\n    // the library's wording for it.\n    const keyEnv = config.providers.jev?.apiKeyEnv ?? \"TYPESAFE_API_KEY\";\n    const key = process.env[keyEnv];\n    if (key === undefined || key === \"\") {\n      throw new TracevalsError(`jev needs an API key in ${keyEnv}`);\n    }\n  }\n  try {\n    return makeInferenceProvider(providerSpecFor(config, identity, options));\n  } catch (e) {\n    // The library raises its own InferenceError (a missing API key). It must\n    // surface as a TracevalsError: `cli.ts`'s fail() maps only that to exit 2,\n    // and letting a foreign error type through turns \"no API key configured\"\n    // into an unhandled stack trace.\n    throw new TracevalsError(errorMessage(e));\n  }\n}\n\n/** Select, check, detect and construct: the provider a verb judges with. */\nexport async function makeJudgeProvider(\n  config: TracevalsConfig,\n  flags: ProviderFlags = {},\n  ev: ProviderChoice = {},\n  options: JudgeProviderOptions = {},\n): Promise<InferenceProvider> {\n  return constructProvider(\n    config,\n    await resolveProviderIdentity(config, flags, ev),\n    options,\n  );\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;AAiBA;AAAA,EACE,gBAAgB;AAAA,EAChB;AAAA,OAMK;AAsBA,IAAM,MAAM;AAGZ,IAAM,kBACX;AAGF,IAAM,aAAa;AAEnB,IAAM,mBAAmB,CAAC,YAA2B,IAAI,eAAe,OAAO;AA6BxE,SAASA,gBACd,QACA,QAAuB,CAAC,GACxB,KAAqB,CAAC,GACH;AACnB,kBAAgB,OAAO,gBAAgB;AACvC,SAAO,eAAiB,OAAO;AAAA,IAC7B;AAAA,MACE,GAAI,GAAG,aAAa,SAAY,EAAE,UAAU,GAAG,SAAS,IAAI,CAAC;AAAA,MAC7D,GAAI,GAAG,UAAU,SAAY,EAAE,OAAO,GAAG,MAAM,IAAI,CAAC;AAAA,MACpD,GAAI,GAAG,WAAW,SAAY,EAAE,QAAQ,GAAG,OAAO,IAAI,CAAC;AAAA,IACzD;AAAA,IACA,GAAG,aAAa,MAAM;AAAA,EACxB,CAAC;AACH;AASO,SAAS,mBAAmB,QAA4C;AAC7E,QAAM,OAAO,OAAO,aAAa;AACjC,SAAO,eAAiB,CAAC,GAAG;AAAA,IAC1B;AAAA,MACE,GAAI,MAAM,YAAY,OAAO,EAAE,UAAU,KAAK,SAAS,IAAI,CAAC;AAAA,MAC5D,GAAI,MAAM,SAAS,OAAO,EAAE,OAAO,KAAK,MAAM,IAAI,CAAC;AAAA,MACnD,QAAQ;AAAA,IACV;AAAA,IACA,GAAG,aAAa,MAAM;AAAA,EACxB,CAAC;AACH;AAGA,SAAS,aAAa,QAA2C;AAC/D,SAAO;AAAA,IACL;AAAA,MACE,GAAI,OAAO,aAAa,OAAO,EAAE,UAAU,OAAO,SAAS,IAAI,CAAC;AAAA,MAChE,GAAI,OAAO,UAAU,OAAO,EAAE,OAAO,OAAO,MAAM,IAAI,CAAC;AAAA,MACvD,QAAQ;AAAA,IACV;AAAA,IACA;AAAA,MACE,GAAI,OAAO,UAAU,aAAa,SAC9B,EAAE,UAAU,OAAO,UAAU,SAAS,IACtC,CAAC;AAAA,MACL,GAAI,OAAO,UAAU,UAAU,SAAY,EAAE,OAAO,OAAO,UAAU,MAAM,IAAI,CAAC;AAAA,MAChF,QAAQ;AAAA,IACV;AAAA,EACF;AACF;AAOO,SAAS,kBAAkB,WAAoC;AACpE,QAAM,UAAU,YAAY,SAAS;AACrC,MAAI,YAAY,OAAW,YAAW,OAAO;AAC/C;AAOO,SAAS,wBAAwB,WAAoC;AAG1E,MAAI,UAAU,aAAa,IAAK,OAAM,IAAI,eAAe,eAAe;AACxE,sBAAoB,UAAU,UAAU,gBAAgB;AACxD,yBAAuB,UAAU,UAAU,UAAU,OAAO,YAAY,gBAAgB;AAC1F;AAMO,SAASC,iBACd,QACA,WACA,UAAgC,CAAC,GACnB;AACd,QAAM,OAAO,gBAAsB,OAAO,WAAW,SAAS;AAC9D,UAAQ,UAAU,UAAU;AAAA,IAC1B,KAAK;AAGH,aAAO,EAAE,GAAG,MAAM,WAAW,EAAE,UAAU,iBAAiB,EAAE;AAAA,IAC9D,KAAK;AACH,aAAO,EAAE,GAAG,MAAM,QAAQ,EAAE,YAAY,UAAU,EAAE;AAAA,IACtD,KAAK;AACH,aAAO;AAAA,QACL,GAAG;AAAA,QACH,UAAU,EAAE,GAAG,KAAK,UAAU,GAAI,QAAQ,QAAQ,EAAE,MAAM,UAAU,EAAG;AAAA,MACzE;AAAA,IACF,KAAK;AACH,aAAO;AAAA,QACL,GAAG;AAAA,QACH,eAAe,QAAQ,iBAAiB,CAAC,YAAY,QAAQ,IAAI,CAAC;AAAA,MACpE;AAAA,IACF;AACE,aAAO;AAAA,EACX;AACF;AAYA,eAAsB,wBACpB,QACA,QAAuB,CAAC,GACxB,KAAqB,CAAC,GACkC;AAGxD,QAAM,YAAYD,gBAAe,QAAQ,OAAO,EAAE;AAClD,0BAAwB,SAAS;AACjC,SAAO,yBAAyB,QAAQ,SAAS;AACnD;AAGA,eAAsB,yBACpB,QACA,WACwD;AACxD,QAAM,EAAE,UAAU,MAAM,IAAI;AAG5B,sBAAoB,UAAU,kBAAkB,EAAE,WAAW,KAAK,CAAC;AACnE,yBAAuB,UAAU,OAAO,YAAY,gBAAgB;AACpE,oBAAkB,SAAS;AAC3B,SAAO;AAAA,IACLC,iBAAgB,QAAQ,EAAE,UAAU,OAAO,SAAS,KAAK,CAAC;AAAA,IAC1D;AAAA,EACF;AACF;AAGO,SAAS,kBACd,QACA,UACA,UAAgC,CAAC,GACd;AACnB,MAAI,SAAS,aAAa,KAAK;AAG7B,UAAM,SAAS,OAAO,UAAU,KAAK,aAAa;AAClD,UAAM,MAAM,QAAQ,IAAI,MAAM;AAC9B,QAAI,QAAQ,UAAa,QAAQ,IAAI;AACnC,YAAM,IAAI,eAAe,2BAA2B,MAAM,EAAE;AAAA,IAC9D;AAAA,EACF;AACA,MAAI;AACF,WAAO,sBAAsBA,iBAAgB,QAAQ,UAAU,OAAO,CAAC;AAAA,EACzE,SAAS,GAAG;AAKV,UAAM,IAAI,eAAe,aAAa,CAAC,CAAC;AAAA,EAC1C;AACF;AAGA,eAAsB,kBACpB,QACA,QAAuB,CAAC,GACxB,KAAqB,CAAC,GACtB,UAAgC,CAAC,GACL;AAC5B,SAAO;AAAA,IACL;AAAA,IACA,MAAM,wBAAwB,QAAQ,OAAO,EAAE;AAAA,IAC/C;AAAA,EACF;AACF;","names":["selectProvider","providerSpecFor"]}

package/dist/{chunk-QLUMKWQQ.js → chunk-C2TJG5KV.js}

@@ -1,21 +1,25 @@
 #!/usr/bin/env node
 import {
   discoverArtifacts
-} from "./chunk-CP4ZM43V.js";
+} from "./chunk-WTEILBKC.js";
 import {
   parseHookPayload,
   readStdin
 } from "./chunk-TZOYZK2E.js";
 import {
-  MANIFEST_VERSION,
   hashFile,
-  loadConfig,
-  makeRedactor,
   manifestPathFor,
   relPosix,
   sha256Hex,
   writeManifest
-} from "./chunk-3R5Y3XOL.js";
+} from "./chunk-OOEMKOX6.js";
+import {
+  loadConfig
+} from "./chunk-TPVOOTMN.js";
+import {
+  MANIFEST_VERSION,
+  makeRedactor
+} from "./chunk-CU57HT2E.js";
 import {
   TracevalsError
 } from "./chunk-UKZNLVJW.js";
@@ -208,4 +212,4 @@ export {
   runCapture,
   renderCapture
 };
-//# sourceMappingURL=chunk-QLUMKWQQ.js.map
+//# sourceMappingURL=chunk-C2TJG5KV.js.map

package/dist/{chunk-QLUMKWQQ.js.map → chunk-C2TJG5KV.js.map}

@@ -1 +1 @@
-{"version":3,"sources":["../src/tracevals/commands/capture.ts","../src/tracevals/capture/build.ts"],"sourcesContent":["/**\n * `manni tracevals capture` — record what the project's instruction artifacts\n * said, and at which commit, at the moment a session started (ADR 01024).\n *\n * **This is the one write path `run` never takes.** CLAUDE.md states that\n * evaluation is read-only, so the manifest is written by a separate,\n * explicitly-invoked command — the same shape as `fill`. `run` only ever reads\n * a manifest, and degrades cleanly when there is none.\n *\n * Designed to be wired to a `SessionStart` hook, which constrains it in two\n * ways that are not obvious:\n *\n *  - **Nothing goes to stdout in hook mode.** Claude Code adds a\n *    SessionStart hook's stdout to the model's context, so a report printed\n *    there would be a side effect on the very session being observed. In hook\n *    mode the report goes to stderr, where an exit-0 hook's output is a debug\n *    line and nothing more.\n *  - **The transcript is never read.** `transcript_path` is recorded as a\n *    correlation key only. At SessionStart the file barely exists, and the\n *    reference warns that it lags the conversation in any case.\n */\nimport { resolve } from \"node:path\";\nimport { loadConfig } from \"../core/config.js\";\nimport { buildManifest } from \"../capture/build.js\";\nimport { manifestPathFor, writeManifest } from \"../capture/manifest.js\";\nimport type { SessionManifest } from \"../capture/types.js\";\nimport { parseHookPayload, readStdin } from \"../capture/hook.js\";\nimport type { SummaryFormat } from \"../reporters/index.js\";\nimport { TracevalsError } from \"../types.js\";\n\nexport interface CaptureCommandOptions {\n  /**\n   * The hook payload. Undefined means \"read stdin\"; an empty string means\n   * \"there was none\", which is the hand-run path.\n   */\n  stdin?: string;\n  /** Overrides the payload's `cwd` as the project root to scan. */\n  project?: string;\n  /** Overrides the payload's `session_id`. */\n  sessionId?: string;\n  /** Write here instead of `<project>/<capture.dir>/<session-id>.json`. */\n  out?: string;\n  /** Directory holding manni.config.yaml; defaults to the project root. */\n  configDir?: string;\n  /** `-c/--config`: read this file instead of discovering one. */\n  config?: string;\n  /** `--no-config`: skip discovery and run on the built-in defaults. */\n  noConfig?: boolean;\n  format?: SummaryFormat;\n  /**\n   * Version recorded in the manifest. Passed in rather than read from\n   * package.json here: this module is bundled into an unpredictable chunk\n   * path, so any relative require of it resolves differently in dist than in\n   * src. The CLI, which is not bundled away, supplies it.\n   */\n  version?: string;\n}\n\nexport interface CaptureCommandResult {\n  manifest: SessionManifest;\n  /** Where the manifest was written. */\n  path: string;\n  /** The report, wherever it is destined for. */\n  rendered: string;\n  /** What the caller should print to stdout — empty in hook mode. */\n  stdout: string;\n  /** What the caller should print to stderr — the report, in hook mode. */\n  stderr: string;\n  exitCode: number;\n}\n\nexport async function runCapture(\n  options: CaptureCommandOptions = {},\n): Promise<CaptureCommandResult> {\n  const raw = options.stdin ?? (await readStdin());\n  const hookMode = raw.trim().length > 0;\n  const payload = hookMode ? parseHookPayload(raw) : {};\n\n  const sessionId = options.sessionId ?? payload.sessionId;\n  if (sessionId === undefined) {\n    // Without an id the manifest has no name and no join key, and writing one\n    // under a guessed name would produce evidence nothing could ever find.\n    throw new TracevalsError(\n      \"no session id: pipe a Claude Code hook payload on stdin, or pass --session-id\",\n    );\n  }\n\n  const root = resolve(options.project ?? payload.cwd ?? process.cwd());\n  const config = await loadConfig(options.configDir ?? root, {\n    ...(options.config === undefined ? {} : { configPath: options.config }),\n    ...(options.noConfig === undefined ? {} : { noConfig: options.noConfig }),\n  });\n\n  const manifest = await buildManifest({\n    sessionId,\n    root,\n    hookEvent: payload.hookEvent ?? \"manual\",\n    ...(payload.reason !== undefined ? { reason: payload.reason } : {}),\n    ...(payload.transcriptPath !== undefined\n      ? { transcriptPath: payload.transcriptPath }\n      : {}),\n    config,\n    redact: config.judge.redact,\n    ...(options.version !== undefined ? { version: options.version } : {}),\n  });\n\n  const path =\n    options.out ??\n    manifestPathFor(resolve(root, config.capture.dir), sessionId);\n  try {\n    await writeManifest(path, manifest);\n  } catch (err) {\n    throw new TracevalsError(\n      `could not write ${path}: ${err instanceof Error ? err.message : String(err)}`,\n    );\n  }\n\n  const rendered =\n    options.format === \"json\"\n      ? JSON.stringify({ path, manifest }, null, 2)\n      : renderCapture(path, manifest);\n\n  return {\n    manifest,\n    path,\n    rendered,\n    // The whole point of the split: a SessionStart hook's stdout becomes model\n    // context, so hook mode writes none.\n    stdout: hookMode ? \"\" : rendered,\n    stderr: hookMode ? rendered : \"\",\n    exitCode: 0,\n  };\n}\n\nexport function renderCapture(\n  path: string,\n  manifest: SessionManifest,\n): string {\n  const lines = [\n    `Captured session ${manifest.sessionId}`,\n    `  manifest   ${path}`,\n    `  artifacts  ${manifest.artifacts.length} hashed`,\n  ];\n  if (manifest.git !== undefined) {\n    lines.push(\n      `  commit     ${manifest.git.sha}${manifest.git.branch ? ` (${manifest.git.branch})` : \"\"}${\n        manifest.git.dirty ? \" — working tree dirty\" : \"\"\n      }`,\n    );\n  } else {\n    lines.push(\"  commit     not a git repository, or git is unavailable\");\n  }\n  lines.push(`  device     ${manifest.device.id} (${manifest.device.platform})`);\n  return lines.join(\"\\n\");\n}\n","/**\n * Building a session manifest (ADR 01024) — the producing half.\n *\n * Separate from `capture/manifest.ts` because this side reaches for\n * `discoverArtifacts`, which imports `artifacts/resolve.ts`, which consumes a\n * manifest. Producing and consuming therefore cannot share a module.\n */\nimport { spawn } from \"node:child_process\";\nimport { hostname, platform, userInfo } from \"node:os\";\nimport { resolve } from \"node:path\";\nimport { discoverArtifacts } from \"../artifacts/discover.js\";\nimport { makeRedactor, type Redactor } from \"../judge/redact.js\";\nimport { hashFile, relPosix, sha256Hex } from \"./manifest.js\";\nimport {\n  MANIFEST_VERSION,\n  type ManifestArtifact,\n  type ManifestGit,\n  type SessionManifest,\n} from \"./types.js\";\n\nexport interface BuildManifestOptions {\n  sessionId: string;\n  /** Project root to scan, and the base every artifact path is relative to. */\n  root: string;\n  hookEvent?: string;\n  reason?: string;\n  transcriptPath?: string;\n  /** The resolved config section, recorded as provenance. */\n  config?: unknown;\n  /** `judge.redact` sources, applied to the manifest's free text (ADR 01020). */\n  redact?: readonly string[];\n  version?: string;\n  /** Test seam: `false` skips shelling out to git. */\n  git?: ManifestGit | false;\n}\n\n/**\n * Hash every instruction artifact the project holds, at the commit it holds\n * them at.\n *\n * The population is `discoverArtifacts`' — the same one `fill` authors against\n * — so capture and authoring never disagree about what an instruction artifact\n * is. That scope is **project-only** by its own design note, so a user-level or\n * plugin artifact is simply absent from the manifest, and its hash check at run\n * time degrades to the mtime heuristic rather than to a wrong answer.\n *\n * **Redaction covers the free text and never a join key.** `root`,\n * `transcriptPath`, `git.branch`, `reason` and the recorded `config` go through\n * the `judge.redact` redactor; `sessionId`, an artifact's `name` and `path`,\n * and every `sha256` do not. A redactor applied to a join key would turn an\n * exact check into a silent `skipped` — the one failure mode this whole feature\n * exists to remove — and those keys are the project's own vocabulary and its\n * repository-relative paths, not somewhere a credential lives. A secret in an\n * artifact path is a problem to fix in the path, the same call ADR 01020 makes\n * about a secret in a `SKILL.md`.\n */\nexport async function buildManifest(\n  options: BuildManifestOptions,\n): Promise<SessionManifest> {\n  const root = resolve(options.root);\n  const redact = makeRedactor(options.redact ?? []);\n\n  const discovered = await discoverArtifacts({ root });\n  const artifacts: ManifestArtifact[] = [];\n  for (const found of discovered.artifacts) {\n    const rel = relPosix(root, found.artifact.path);\n    if (rel === null) continue;\n    const digest = await hashFile(found.artifact.path);\n    // An artifact that cannot be read is one the manifest says nothing about,\n    // which degrades to the mtime heuristic at run time. Never a crash.\n    if (digest === null) continue;\n    artifacts.push({\n      name: found.artifact.name,\n      type: found.artifact.type,\n      path: rel,\n      sha256: digest,\n      bytes: Buffer.byteLength(found.artifact.content, \"utf-8\"),\n    });\n  }\n  // Stable order, so two captures of an unchanged tree produce the same bytes.\n  artifacts.sort((a, b) => (a.path < b.path ? -1 : a.path > b.path ? 1 : 0));\n\n  const git =\n    options.git === false ? undefined : (options.git ?? (await readGit(root)));\n\n  return {\n    version: MANIFEST_VERSION,\n    sessionId: options.sessionId,\n    capturedAt: new Date().toISOString(),\n    hookEvent: options.hookEvent ?? \"manual\",\n    ...(options.reason !== undefined ? { reason: redact(options.reason) } : {}),\n    ...(options.transcriptPath !== undefined\n      ? { transcriptPath: redact(options.transcriptPath) }\n      : {}),\n    root: redact(root),\n    ...(git !== undefined\n      ? {\n          git: {\n            sha: git.sha,\n            ...(git.branch !== undefined ? { branch: redact(git.branch) } : {}),\n            dirty: git.dirty,\n          },\n        }\n      : {}),\n    device: { id: deviceId(), platform: platform() },\n    tool: { name: \"manni-tracevals\", version: options.version ?? \"unknown\" },\n    artifacts,\n    config: redactDeep(options.config ?? {}, redact),\n  };\n}\n\n/**\n * A stable, opaque per-machine id. Not the hostname: \"was this captured here?\"\n * is the whole question, and answering it does not require shipping the name of\n * the machine into a file that travels with the repository.\n */\nexport function deviceId(): string {\n  let user = \"\";\n  try {\n    user = userInfo().username;\n  } catch {\n    // A container with no passwd entry throws; the digest is still stable.\n  }\n  return sha256Hex(`${hostname()} ${user} ${platform()}`).slice(0, 16);\n}\n\n/**\n * Redact every string in a JSON-shaped value. Used for the recorded config\n * only — never for a join key.\n */\nexport function redactDeep(value: unknown, redact: Redactor): unknown {\n  if (typeof value === \"string\") return redact(value);\n  if (Array.isArray(value)) return value.map((v) => redactDeep(v, redact));\n  if (value !== null && typeof value === \"object\") {\n    const out: Record<string, unknown> = {};\n    for (const [key, member] of Object.entries(value)) {\n      out[key] = redactDeep(member, redact);\n    }\n    return out;\n  }\n  return value;\n}\n\n/**\n * What `git` says about `root`, or nothing. Every failure mode — git absent,\n * not a repository, a timeout — degrades to an absent block, because a manifest\n * without a SHA is still a manifest with hashes in it.\n */\nexport async function readGit(root: string): Promise<ManifestGit | undefined> {\n  const sha = await git([\"rev-parse\", \"HEAD\"], root);\n  if (sha === null || !/^[0-9a-f]{40}$/.test(sha)) return undefined;\n  const branch = await git([\"rev-parse\", \"--abbrev-ref\", \"HEAD\"], root);\n  const status = await git(\n    [\"status\", \"--porcelain\", \"--untracked-files=no\"],\n    root,\n  );\n  return {\n    sha,\n    // Detached HEAD reports the literal \"HEAD\", which is not a branch name.\n    ...(branch !== null && branch !== \"HEAD\" ? { branch } : {}),\n    dirty: status !== null && status.length > 0,\n  };\n}\n\n/** One `git` invocation, argv-only and bounded — the shape ADR 01011 uses. */\nfunction git(\n  args: string[],\n  cwd: string,\n  timeoutMs = 5000,\n): Promise<string | null> {\n  return new Promise((settle) => {\n    let done = false;\n    let child;\n    try {\n      // shell:false — nothing here is ever parsed as shell syntax.\n      child = spawn(\"git\", args, { cwd, shell: false, windowsHide: true });\n    } catch {\n      settle(null);\n      return;\n    }\n    // `finish` is declared below the timer because it clears it; the timer\n    // callback only runs after both exist.\n    const timer = setTimeout(() => {\n      child.kill();\n      finish(null);\n    }, timeoutMs);\n    const finish = (value: string | null): void => {\n      if (done) return;\n      done = true;\n      clearTimeout(timer);\n      settle(value);\n    };\n    let out = \"\";\n    child.stdout.on(\"data\", (d: Buffer) => {\n      out += d.toString(\"utf-8\");\n    });\n    child.stderr.resume();\n    child.on(\"error\", () => { finish(null); });\n    child.on(\"close\", (code) => { finish(code === 0 ? out.trim() : null); });\n  });\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;AAqBA,SAAS,WAAAA,gBAAe;;;ACdxB,SAAS,aAAa;AACtB,SAAS,UAAU,UAAU,gBAAgB;AAC7C,SAAS,eAAe;AA+CxB,eAAsB,cACpB,SAC0B;AAC1B,QAAM,OAAO,QAAQ,QAAQ,IAAI;AACjC,QAAM,SAAS,aAAa,QAAQ,UAAU,CAAC,CAAC;AAEhD,QAAM,aAAa,MAAM,kBAAkB,EAAE,KAAK,CAAC;AACnD,QAAM,YAAgC,CAAC;AACvC,aAAW,SAAS,WAAW,WAAW;AACxC,UAAM,MAAM,SAAS,MAAM,MAAM,SAAS,IAAI;AAC9C,QAAI,QAAQ,KAAM;AAClB,UAAM,SAAS,MAAM,SAAS,MAAM,SAAS,IAAI;AAGjD,QAAI,WAAW,KAAM;AACrB,cAAU,KAAK;AAAA,MACb,MAAM,MAAM,SAAS;AAAA,MACrB,MAAM,MAAM,SAAS;AAAA,MACrB,MAAM;AAAA,MACN,QAAQ;AAAA,MACR,OAAO,OAAO,WAAW,MAAM,SAAS,SAAS,OAAO;AAAA,IAC1D,CAAC;AAAA,EACH;AAEA,YAAU,KAAK,CAAC,GAAG,MAAO,EAAE,OAAO,EAAE,OAAO,KAAK,EAAE,OAAO,EAAE,OAAO,IAAI,CAAE;AAEzE,QAAMC,OACJ,QAAQ,QAAQ,QAAQ,SAAa,QAAQ,OAAQ,MAAM,QAAQ,IAAI;AAEzE,SAAO;AAAA,IACL,SAAS;AAAA,IACT,WAAW,QAAQ;AAAA,IACnB,aAAY,oBAAI,KAAK,GAAE,YAAY;AAAA,IACnC,WAAW,QAAQ,aAAa;AAAA,IAChC,GAAI,QAAQ,WAAW,SAAY,EAAE,QAAQ,OAAO,QAAQ,MAAM,EAAE,IAAI,CAAC;AAAA,IACzE,GAAI,QAAQ,mBAAmB,SAC3B,EAAE,gBAAgB,OAAO,QAAQ,cAAc,EAAE,IACjD,CAAC;AAAA,IACL,MAAM,OAAO,IAAI;AAAA,IACjB,GAAIA,SAAQ,SACR;AAAA,MACE,KAAK;AAAA,QACH,KAAKA,KAAI;AAAA,QACT,GAAIA,KAAI,WAAW,SAAY,EAAE,QAAQ,OAAOA,KAAI,MAAM,EAAE,IAAI,CAAC;AAAA,QACjE,OAAOA,KAAI;AAAA,MACb;AAAA,IACF,IACA,CAAC;AAAA,IACL,QAAQ,EAAE,IAAI,SAAS,GAAG,UAAU,SAAS,EAAE;AAAA,IAC/C,MAAM,EAAE,MAAM,mBAAmB,SAAS,QAAQ,WAAW,UAAU;AAAA,IACvE;AAAA,IACA,QAAQ,WAAW,QAAQ,UAAU,CAAC,GAAG,MAAM;AAAA,EACjD;AACF;AAOO,SAAS,WAAmB;AACjC,MAAI,OAAO;AACX,MAAI;AACF,WAAO,SAAS,EAAE;AAAA,EACpB,QAAQ;AAAA,EAER;AACA,SAAO,UAAU,GAAG,SAAS,CAAC,IAAI,IAAI,IAAI,SAAS,CAAC,EAAE,EAAE,MAAM,GAAG,EAAE;AACrE;AAMO,SAAS,WAAW,OAAgB,QAA2B;AACpE,MAAI,OAAO,UAAU,SAAU,QAAO,OAAO,KAAK;AAClD,MAAI,MAAM,QAAQ,KAAK,EAAG,QAAO,MAAM,IAAI,CAAC,MAAM,WAAW,GAAG,MAAM,CAAC;AACvE,MAAI,UAAU,QAAQ,OAAO,UAAU,UAAU;AAC/C,UAAM,MAA+B,CAAC;AACtC,eAAW,CAAC,KAAK,MAAM,KAAK,OAAO,QAAQ,KAAK,GAAG;AACjD,UAAI,GAAG,IAAI,WAAW,QAAQ,MAAM;AAAA,IACtC;AACA,WAAO;AAAA,EACT;AACA,SAAO;AACT;AAOA,eAAsB,QAAQ,MAAgD;AAC5E,QAAM,MAAM,MAAM,IAAI,CAAC,aAAa,MAAM,GAAG,IAAI;AACjD,MAAI,QAAQ,QAAQ,CAAC,iBAAiB,KAAK,GAAG,EAAG,QAAO;AACxD,QAAM,SAAS,MAAM,IAAI,CAAC,aAAa,gBAAgB,MAAM,GAAG,IAAI;AACpE,QAAM,SAAS,MAAM;AAAA,IACnB,CAAC,UAAU,eAAe,sBAAsB;AAAA,IAChD;AAAA,EACF;AACA,SAAO;AAAA,IACL;AAAA;AAAA,IAEA,GAAI,WAAW,QAAQ,WAAW,SAAS,EAAE,OAAO,IAAI,CAAC;AAAA,IACzD,OAAO,WAAW,QAAQ,OAAO,SAAS;AAAA,EAC5C;AACF;AAGA,SAAS,IACP,MACA,KACA,YAAY,KACY;AACxB,SAAO,IAAI,QAAQ,CAAC,WAAW;AAC7B,QAAI,OAAO;AACX,QAAI;AACJ,QAAI;AAEF,cAAQ,MAAM,OAAO,MAAM,EAAE,KAAK,OAAO,OAAO,aAAa,KAAK,CAAC;AAAA,IACrE,QAAQ;AACN,aAAO,IAAI;AACX;AAAA,IACF;AAGA,UAAM,QAAQ,WAAW,MAAM;AAC7B,YAAM,KAAK;AACX,aAAO,IAAI;AAAA,IACb,GAAG,SAAS;AACZ,UAAM,SAAS,CAAC,UAA+B;AAC7C,UAAI,KAAM;AACV,aAAO;AACP,mBAAa,KAAK;AAClB,aAAO,KAAK;AAAA,IACd;AACA,QAAI,MAAM;AACV,UAAM,OAAO,GAAG,QAAQ,CAAC,MAAc;AACrC,aAAO,EAAE,SAAS,OAAO;AAAA,IAC3B,CAAC;AACD,UAAM,OAAO,OAAO;AACpB,UAAM,GAAG,SAAS,MAAM;AAAE,aAAO,IAAI;AAAA,IAAG,CAAC;AACzC,UAAM,GAAG,SAAS,CAAC,SAAS;AAAE,aAAO,SAAS,IAAI,IAAI,KAAK,IAAI,IAAI;AAAA,IAAG,CAAC;AAAA,EACzE,CAAC;AACH;;;ADjIA,eAAsB,WACpB,UAAiC,CAAC,GACH;AAC/B,QAAM,MAAM,QAAQ,SAAU,MAAM,UAAU;AAC9C,QAAM,WAAW,IAAI,KAAK,EAAE,SAAS;AACrC,QAAM,UAAU,WAAW,iBAAiB,GAAG,IAAI,CAAC;AAEpD,QAAM,YAAY,QAAQ,aAAa,QAAQ;AAC/C,MAAI,cAAc,QAAW;AAG3B,UAAM,IAAI;AAAA,MACR;AAAA,IACF;AAAA,EACF;AAEA,QAAM,OAAOC,SAAQ,QAAQ,WAAW,QAAQ,OAAO,QAAQ,IAAI,CAAC;AACpE,QAAM,SAAS,MAAM,WAAW,QAAQ,aAAa,MAAM;AAAA,IACzD,GAAI,QAAQ,WAAW,SAAY,CAAC,IAAI,EAAE,YAAY,QAAQ,OAAO;AAAA,IACrE,GAAI,QAAQ,aAAa,SAAY,CAAC,IAAI,EAAE,UAAU,QAAQ,SAAS;AAAA,EACzE,CAAC;AAED,QAAM,WAAW,MAAM,cAAc;AAAA,IACnC;AAAA,IACA;AAAA,IACA,WAAW,QAAQ,aAAa;AAAA,IAChC,GAAI,QAAQ,WAAW,SAAY,EAAE,QAAQ,QAAQ,OAAO,IAAI,CAAC;AAAA,IACjE,GAAI,QAAQ,mBAAmB,SAC3B,EAAE,gBAAgB,QAAQ,eAAe,IACzC,CAAC;AAAA,IACL;AAAA,IACA,QAAQ,OAAO,MAAM;AAAA,IACrB,GAAI,QAAQ,YAAY,SAAY,EAAE,SAAS,QAAQ,QAAQ,IAAI,CAAC;AAAA,EACtE,CAAC;AAED,QAAM,OACJ,QAAQ,OACR,gBAAgBA,SAAQ,MAAM,OAAO,QAAQ,GAAG,GAAG,SAAS;AAC9D,MAAI;AACF,UAAM,cAAc,MAAM,QAAQ;AAAA,EACpC,SAAS,KAAK;AACZ,UAAM,IAAI;AAAA,MACR,mBAAmB,IAAI,KAAK,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG,CAAC;AAAA,IAC9E;AAAA,EACF;AAEA,QAAM,WACJ,QAAQ,WAAW,SACf,KAAK,UAAU,EAAE,MAAM,SAAS,GAAG,MAAM,CAAC,IAC1C,cAAc,MAAM,QAAQ;AAElC,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA;AAAA;AAAA,IAGA,QAAQ,WAAW,KAAK;AAAA,IACxB,QAAQ,WAAW,WAAW;AAAA,IAC9B,UAAU;AAAA,EACZ;AACF;AAEO,SAAS,cACd,MACA,UACQ;AACR,QAAM,QAAQ;AAAA,IACZ,oBAAoB,SAAS,SAAS;AAAA,IACtC,gBAAgB,IAAI;AAAA,IACpB,gBAAgB,SAAS,UAAU,MAAM;AAAA,EAC3C;AACA,MAAI,SAAS,QAAQ,QAAW;AAC9B,UAAM;AAAA,MACJ,gBAAgB,SAAS,IAAI,GAAG,GAAG,SAAS,IAAI,SAAS,KAAK,SAAS,IAAI,MAAM,MAAM,EAAE,GACvF,SAAS,IAAI,QAAQ,+BAA0B,EACjD;AAAA,IACF;AAAA,EACF,OAAO;AACL,UAAM,KAAK,0DAA0D;AAAA,EACvE;AACA,QAAM,KAAK,gBAAgB,SAAS,OAAO,EAAE,KAAK,SAAS,OAAO,QAAQ,GAAG;AAC7E,SAAO,MAAM,KAAK,IAAI;AACxB;","names":["resolve","git","resolve"]}
+{"version":3,"sources":["../src/tracevals/commands/capture.ts","../src/tracevals/capture/build.ts"],"sourcesContent":["/**\n * `manni tracevals capture` — record what the project's instruction artifacts\n * said, and at which commit, at the moment a session started (ADR 01024).\n *\n * **This is the one write path `run` never takes.** CLAUDE.md states that\n * evaluation is read-only, so the manifest is written by a separate,\n * explicitly-invoked command — the same shape as `fill`. `run` only ever reads\n * a manifest, and degrades cleanly when there is none.\n *\n * Designed to be wired to a `SessionStart` hook, which constrains it in two\n * ways that are not obvious:\n *\n *  - **Nothing goes to stdout in hook mode.** Claude Code adds a\n *    SessionStart hook's stdout to the model's context, so a report printed\n *    there would be a side effect on the very session being observed. In hook\n *    mode the report goes to stderr, where an exit-0 hook's output is a debug\n *    line and nothing more.\n *  - **The transcript is never read.** `transcript_path` is recorded as a\n *    correlation key only. At SessionStart the file barely exists, and the\n *    reference warns that it lags the conversation in any case.\n */\nimport { resolve } from \"node:path\";\nimport { loadConfig } from \"../core/config.js\";\nimport { buildManifest } from \"../capture/build.js\";\nimport { manifestPathFor, writeManifest } from \"../capture/manifest.js\";\nimport type { SessionManifest } from \"../capture/types.js\";\nimport { parseHookPayload, readStdin } from \"../capture/hook.js\";\nimport type { SummaryFormat } from \"../reporters/index.js\";\nimport { TracevalsError } from \"../types.js\";\n\nexport interface CaptureCommandOptions {\n  /**\n   * The hook payload. Undefined means \"read stdin\"; an empty string means\n   * \"there was none\", which is the hand-run path.\n   */\n  stdin?: string;\n  /** Overrides the payload's `cwd` as the project root to scan. */\n  project?: string;\n  /** Overrides the payload's `session_id`. */\n  sessionId?: string;\n  /** Write here instead of `<project>/<capture.dir>/<session-id>.json`. */\n  out?: string;\n  /** Directory holding manni.config.yaml; defaults to the project root. */\n  configDir?: string;\n  /** `-c/--config`: read this file instead of discovering one. */\n  config?: string;\n  /** `--no-config`: skip discovery and run on the built-in defaults. */\n  noConfig?: boolean;\n  format?: SummaryFormat;\n  /**\n   * Version recorded in the manifest. Passed in rather than read from\n   * package.json here: this module is bundled into an unpredictable chunk\n   * path, so any relative require of it resolves differently in dist than in\n   * src. The CLI, which is not bundled away, supplies it.\n   */\n  version?: string;\n}\n\nexport interface CaptureCommandResult {\n  manifest: SessionManifest;\n  /** Where the manifest was written. */\n  path: string;\n  /** The report, wherever it is destined for. */\n  rendered: string;\n  /** What the caller should print to stdout — empty in hook mode. */\n  stdout: string;\n  /** What the caller should print to stderr — the report, in hook mode. */\n  stderr: string;\n  exitCode: number;\n}\n\nexport async function runCapture(\n  options: CaptureCommandOptions = {},\n): Promise<CaptureCommandResult> {\n  const raw = options.stdin ?? (await readStdin());\n  const hookMode = raw.trim().length > 0;\n  const payload = hookMode ? parseHookPayload(raw) : {};\n\n  const sessionId = options.sessionId ?? payload.sessionId;\n  if (sessionId === undefined) {\n    // Without an id the manifest has no name and no join key, and writing one\n    // under a guessed name would produce evidence nothing could ever find.\n    throw new TracevalsError(\n      \"no session id: pipe a Claude Code hook payload on stdin, or pass --session-id\",\n    );\n  }\n\n  const root = resolve(options.project ?? payload.cwd ?? process.cwd());\n  const config = await loadConfig(options.configDir ?? root, {\n    ...(options.config === undefined ? {} : { configPath: options.config }),\n    ...(options.noConfig === undefined ? {} : { noConfig: options.noConfig }),\n  });\n\n  const manifest = await buildManifest({\n    sessionId,\n    root,\n    hookEvent: payload.hookEvent ?? \"manual\",\n    ...(payload.reason !== undefined ? { reason: payload.reason } : {}),\n    ...(payload.transcriptPath !== undefined\n      ? { transcriptPath: payload.transcriptPath }\n      : {}),\n    config,\n    redact: config.judge.redact,\n    ...(options.version !== undefined ? { version: options.version } : {}),\n  });\n\n  const path =\n    options.out ??\n    manifestPathFor(resolve(root, config.capture.dir), sessionId);\n  try {\n    await writeManifest(path, manifest);\n  } catch (err) {\n    throw new TracevalsError(\n      `could not write ${path}: ${err instanceof Error ? err.message : String(err)}`,\n    );\n  }\n\n  const rendered =\n    options.format === \"json\"\n      ? JSON.stringify({ path, manifest }, null, 2)\n      : renderCapture(path, manifest);\n\n  return {\n    manifest,\n    path,\n    rendered,\n    // The whole point of the split: a SessionStart hook's stdout becomes model\n    // context, so hook mode writes none.\n    stdout: hookMode ? \"\" : rendered,\n    stderr: hookMode ? rendered : \"\",\n    exitCode: 0,\n  };\n}\n\nexport function renderCapture(\n  path: string,\n  manifest: SessionManifest,\n): string {\n  const lines = [\n    `Captured session ${manifest.sessionId}`,\n    `  manifest   ${path}`,\n    `  artifacts  ${manifest.artifacts.length} hashed`,\n  ];\n  if (manifest.git !== undefined) {\n    lines.push(\n      `  commit     ${manifest.git.sha}${manifest.git.branch ? ` (${manifest.git.branch})` : \"\"}${\n        manifest.git.dirty ? \" — working tree dirty\" : \"\"\n      }`,\n    );\n  } else {\n    lines.push(\"  commit     not a git repository, or git is unavailable\");\n  }\n  lines.push(`  device     ${manifest.device.id} (${manifest.device.platform})`);\n  return lines.join(\"\\n\");\n}\n","/**\n * Building a session manifest (ADR 01024) — the producing half.\n *\n * Separate from `capture/manifest.ts` because this side reaches for\n * `discoverArtifacts`, which imports `artifacts/resolve.ts`, which consumes a\n * manifest. Producing and consuming therefore cannot share a module.\n */\nimport { spawn } from \"node:child_process\";\nimport { hostname, platform, userInfo } from \"node:os\";\nimport { resolve } from \"node:path\";\nimport { discoverArtifacts } from \"../artifacts/discover.js\";\nimport { makeRedactor, type Redactor } from \"../judge/redact.js\";\nimport { hashFile, relPosix, sha256Hex } from \"./manifest.js\";\nimport {\n  MANIFEST_VERSION,\n  type ManifestArtifact,\n  type ManifestGit,\n  type SessionManifest,\n} from \"./types.js\";\n\nexport interface BuildManifestOptions {\n  sessionId: string;\n  /** Project root to scan, and the base every artifact path is relative to. */\n  root: string;\n  hookEvent?: string;\n  reason?: string;\n  transcriptPath?: string;\n  /** The resolved config section, recorded as provenance. */\n  config?: unknown;\n  /** `judge.redact` sources, applied to the manifest's free text (ADR 01020). */\n  redact?: readonly string[];\n  version?: string;\n  /** Test seam: `false` skips shelling out to git. */\n  git?: ManifestGit | false;\n}\n\n/**\n * Hash every instruction artifact the project holds, at the commit it holds\n * them at.\n *\n * The population is `discoverArtifacts`' — the same one `fill` authors against\n * — so capture and authoring never disagree about what an instruction artifact\n * is. That scope is **project-only** by its own design note, so a user-level or\n * plugin artifact is simply absent from the manifest, and its hash check at run\n * time degrades to the mtime heuristic rather than to a wrong answer.\n *\n * **Redaction covers the free text and never a join key.** `root`,\n * `transcriptPath`, `git.branch`, `reason` and the recorded `config` go through\n * the `judge.redact` redactor; `sessionId`, an artifact's `name` and `path`,\n * and every `sha256` do not. A redactor applied to a join key would turn an\n * exact check into a silent `skipped` — the one failure mode this whole feature\n * exists to remove — and those keys are the project's own vocabulary and its\n * repository-relative paths, not somewhere a credential lives. A secret in an\n * artifact path is a problem to fix in the path, the same call ADR 01020 makes\n * about a secret in a `SKILL.md`.\n */\nexport async function buildManifest(\n  options: BuildManifestOptions,\n): Promise<SessionManifest> {\n  const root = resolve(options.root);\n  const redact = makeRedactor(options.redact ?? []);\n\n  const discovered = await discoverArtifacts({ root });\n  const artifacts: ManifestArtifact[] = [];\n  for (const found of discovered.artifacts) {\n    const rel = relPosix(root, found.artifact.path);\n    if (rel === null) continue;\n    const digest = await hashFile(found.artifact.path);\n    // An artifact that cannot be read is one the manifest says nothing about,\n    // which degrades to the mtime heuristic at run time. Never a crash.\n    if (digest === null) continue;\n    artifacts.push({\n      name: found.artifact.name,\n      type: found.artifact.type,\n      path: rel,\n      sha256: digest,\n      bytes: Buffer.byteLength(found.artifact.content, \"utf-8\"),\n    });\n  }\n  // Stable order, so two captures of an unchanged tree produce the same bytes.\n  artifacts.sort((a, b) => (a.path < b.path ? -1 : a.path > b.path ? 1 : 0));\n\n  const git =\n    options.git === false ? undefined : (options.git ?? (await readGit(root)));\n\n  return {\n    version: MANIFEST_VERSION,\n    sessionId: options.sessionId,\n    capturedAt: new Date().toISOString(),\n    hookEvent: options.hookEvent ?? \"manual\",\n    ...(options.reason !== undefined ? { reason: redact(options.reason) } : {}),\n    ...(options.transcriptPath !== undefined\n      ? { transcriptPath: redact(options.transcriptPath) }\n      : {}),\n    root: redact(root),\n    ...(git !== undefined\n      ? {\n          git: {\n            sha: git.sha,\n            ...(git.branch !== undefined ? { branch: redact(git.branch) } : {}),\n            dirty: git.dirty,\n          },\n        }\n      : {}),\n    device: { id: deviceId(), platform: platform() },\n    tool: { name: \"manni-tracevals\", version: options.version ?? \"unknown\" },\n    artifacts,\n    config: redactDeep(options.config ?? {}, redact),\n  };\n}\n\n/**\n * A stable, opaque per-machine id. Not the hostname: \"was this captured here?\"\n * is the whole question, and answering it does not require shipping the name of\n * the machine into a file that travels with the repository.\n */\nexport function deviceId(): string {\n  let user = \"\";\n  try {\n    user = userInfo().username;\n  } catch {\n    // A container with no passwd entry throws; the digest is still stable.\n  }\n  return sha256Hex(`${hostname()} ${user} ${platform()}`).slice(0, 16);\n}\n\n/**\n * Redact every string in a JSON-shaped value. Used for the recorded config\n * only — never for a join key.\n */\nexport function redactDeep(value: unknown, redact: Redactor): unknown {\n  if (typeof value === \"string\") return redact(value);\n  if (Array.isArray(value)) return value.map((v) => redactDeep(v, redact));\n  if (value !== null && typeof value === \"object\") {\n    const out: Record<string, unknown> = {};\n    for (const [key, member] of Object.entries(value)) {\n      out[key] = redactDeep(member, redact);\n    }\n    return out;\n  }\n  return value;\n}\n\n/**\n * What `git` says about `root`, or nothing. Every failure mode — git absent,\n * not a repository, a timeout — degrades to an absent block, because a manifest\n * without a SHA is still a manifest with hashes in it.\n */\nexport async function readGit(root: string): Promise<ManifestGit | undefined> {\n  const sha = await git([\"rev-parse\", \"HEAD\"], root);\n  if (sha === null || !/^[0-9a-f]{40}$/.test(sha)) return undefined;\n  const branch = await git([\"rev-parse\", \"--abbrev-ref\", \"HEAD\"], root);\n  const status = await git(\n    [\"status\", \"--porcelain\", \"--untracked-files=no\"],\n    root,\n  );\n  return {\n    sha,\n    // Detached HEAD reports the literal \"HEAD\", which is not a branch name.\n    ...(branch !== null && branch !== \"HEAD\" ? { branch } : {}),\n    dirty: status !== null && status.length > 0,\n  };\n}\n\n/** One `git` invocation, argv-only and bounded — the shape ADR 01011 uses. */\nfunction git(\n  args: string[],\n  cwd: string,\n  timeoutMs = 5000,\n): Promise<string | null> {\n  return new Promise((settle) => {\n    let done = false;\n    let child;\n    try {\n      // shell:false — nothing here is ever parsed as shell syntax.\n      child = spawn(\"git\", args, { cwd, shell: false, windowsHide: true });\n    } catch {\n      settle(null);\n      return;\n    }\n    // `finish` is declared below the timer because it clears it; the timer\n    // callback only runs after both exist.\n    const timer = setTimeout(() => {\n      child.kill();\n      finish(null);\n    }, timeoutMs);\n    const finish = (value: string | null): void => {\n      if (done) return;\n      done = true;\n      clearTimeout(timer);\n      settle(value);\n    };\n    let out = \"\";\n    child.stdout.on(\"data\", (d: Buffer) => {\n      out += d.toString(\"utf-8\");\n    });\n    child.stderr.resume();\n    child.on(\"error\", () => { finish(null); });\n    child.on(\"close\", (code) => { finish(code === 0 ? out.trim() : null); });\n  });\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;AAqBA,SAAS,WAAAA,gBAAe;;;ACdxB,SAAS,aAAa;AACtB,SAAS,UAAU,UAAU,gBAAgB;AAC7C,SAAS,eAAe;AA+CxB,eAAsB,cACpB,SAC0B;AAC1B,QAAM,OAAO,QAAQ,QAAQ,IAAI;AACjC,QAAM,SAAS,aAAa,QAAQ,UAAU,CAAC,CAAC;AAEhD,QAAM,aAAa,MAAM,kBAAkB,EAAE,KAAK,CAAC;AACnD,QAAM,YAAgC,CAAC;AACvC,aAAW,SAAS,WAAW,WAAW;AACxC,UAAM,MAAM,SAAS,MAAM,MAAM,SAAS,IAAI;AAC9C,QAAI,QAAQ,KAAM;AAClB,UAAM,SAAS,MAAM,SAAS,MAAM,SAAS,IAAI;AAGjD,QAAI,WAAW,KAAM;AACrB,cAAU,KAAK;AAAA,MACb,MAAM,MAAM,SAAS;AAAA,MACrB,MAAM,MAAM,SAAS;AAAA,MACrB,MAAM;AAAA,MACN,QAAQ;AAAA,MACR,OAAO,OAAO,WAAW,MAAM,SAAS,SAAS,OAAO;AAAA,IAC1D,CAAC;AAAA,EACH;AAEA,YAAU,KAAK,CAAC,GAAG,MAAO,EAAE,OAAO,EAAE,OAAO,KAAK,EAAE,OAAO,EAAE,OAAO,IAAI,CAAE;AAEzE,QAAMC,OACJ,QAAQ,QAAQ,QAAQ,SAAa,QAAQ,OAAQ,MAAM,QAAQ,IAAI;AAEzE,SAAO;AAAA,IACL,SAAS;AAAA,IACT,WAAW,QAAQ;AAAA,IACnB,aAAY,oBAAI,KAAK,GAAE,YAAY;AAAA,IACnC,WAAW,QAAQ,aAAa;AAAA,IAChC,GAAI,QAAQ,WAAW,SAAY,EAAE,QAAQ,OAAO,QAAQ,MAAM,EAAE,IAAI,CAAC;AAAA,IACzE,GAAI,QAAQ,mBAAmB,SAC3B,EAAE,gBAAgB,OAAO,QAAQ,cAAc,EAAE,IACjD,CAAC;AAAA,IACL,MAAM,OAAO,IAAI;AAAA,IACjB,GAAIA,SAAQ,SACR;AAAA,MACE,KAAK;AAAA,QACH,KAAKA,KAAI;AAAA,QACT,GAAIA,KAAI,WAAW,SAAY,EAAE,QAAQ,OAAOA,KAAI,MAAM,EAAE,IAAI,CAAC;AAAA,QACjE,OAAOA,KAAI;AAAA,MACb;AAAA,IACF,IACA,CAAC;AAAA,IACL,QAAQ,EAAE,IAAI,SAAS,GAAG,UAAU,SAAS,EAAE;AAAA,IAC/C,MAAM,EAAE,MAAM,mBAAmB,SAAS,QAAQ,WAAW,UAAU;AAAA,IACvE;AAAA,IACA,QAAQ,WAAW,QAAQ,UAAU,CAAC,GAAG,MAAM;AAAA,EACjD;AACF;AAOO,SAAS,WAAmB;AACjC,MAAI,OAAO;AACX,MAAI;AACF,WAAO,SAAS,EAAE;AAAA,EACpB,QAAQ;AAAA,EAER;AACA,SAAO,UAAU,GAAG,SAAS,CAAC,IAAI,IAAI,IAAI,SAAS,CAAC,EAAE,EAAE,MAAM,GAAG,EAAE;AACrE;AAMO,SAAS,WAAW,OAAgB,QAA2B;AACpE,MAAI,OAAO,UAAU,SAAU,QAAO,OAAO,KAAK;AAClD,MAAI,MAAM,QAAQ,KAAK,EAAG,QAAO,MAAM,IAAI,CAAC,MAAM,WAAW,GAAG,MAAM,CAAC;AACvE,MAAI,UAAU,QAAQ,OAAO,UAAU,UAAU;AAC/C,UAAM,MAA+B,CAAC;AACtC,eAAW,CAAC,KAAK,MAAM,KAAK,OAAO,QAAQ,KAAK,GAAG;AACjD,UAAI,GAAG,IAAI,WAAW,QAAQ,MAAM;AAAA,IACtC;AACA,WAAO;AAAA,EACT;AACA,SAAO;AACT;AAOA,eAAsB,QAAQ,MAAgD;AAC5E,QAAM,MAAM,MAAM,IAAI,CAAC,aAAa,MAAM,GAAG,IAAI;AACjD,MAAI,QAAQ,QAAQ,CAAC,iBAAiB,KAAK,GAAG,EAAG,QAAO;AACxD,QAAM,SAAS,MAAM,IAAI,CAAC,aAAa,gBAAgB,MAAM,GAAG,IAAI;AACpE,QAAM,SAAS,MAAM;AAAA,IACnB,CAAC,UAAU,eAAe,sBAAsB;AAAA,IAChD;AAAA,EACF;AACA,SAAO;AAAA,IACL;AAAA;AAAA,IAEA,GAAI,WAAW,QAAQ,WAAW,SAAS,EAAE,OAAO,IAAI,CAAC;AAAA,IACzD,OAAO,WAAW,QAAQ,OAAO,SAAS;AAAA,EAC5C;AACF;AAGA,SAAS,IACP,MACA,KACA,YAAY,KACY;AACxB,SAAO,IAAI,QAAQ,CAAC,WAAW;AAC7B,QAAI,OAAO;AACX,QAAI;AACJ,QAAI;AAEF,cAAQ,MAAM,OAAO,MAAM,EAAE,KAAK,OAAO,OAAO,aAAa,KAAK,CAAC;AAAA,IACrE,QAAQ;AACN,aAAO,IAAI;AACX;AAAA,IACF;AAGA,UAAM,QAAQ,WAAW,MAAM;AAC7B,YAAM,KAAK;AACX,aAAO,IAAI;AAAA,IACb,GAAG,SAAS;AACZ,UAAM,SAAS,CAAC,UAA+B;AAC7C,UAAI,KAAM;AACV,aAAO;AACP,mBAAa,KAAK;AAClB,aAAO,KAAK;AAAA,IACd;AACA,QAAI,MAAM;AACV,UAAM,OAAO,GAAG,QAAQ,CAAC,MAAc;AACrC,aAAO,EAAE,SAAS,OAAO;AAAA,IAC3B,CAAC;AACD,UAAM,OAAO,OAAO;AACpB,UAAM,GAAG,SAAS,MAAM;AAAE,aAAO,IAAI;AAAA,IAAG,CAAC;AACzC,UAAM,GAAG,SAAS,CAAC,SAAS;AAAE,aAAO,SAAS,IAAI,IAAI,KAAK,IAAI,IAAI;AAAA,IAAG,CAAC;AAAA,EACzE,CAAC;AACH;;;ADjIA,eAAsB,WACpB,UAAiC,CAAC,GACH;AAC/B,QAAM,MAAM,QAAQ,SAAU,MAAM,UAAU;AAC9C,QAAM,WAAW,IAAI,KAAK,EAAE,SAAS;AACrC,QAAM,UAAU,WAAW,iBAAiB,GAAG,IAAI,CAAC;AAEpD,QAAM,YAAY,QAAQ,aAAa,QAAQ;AAC/C,MAAI,cAAc,QAAW;AAG3B,UAAM,IAAI;AAAA,MACR;AAAA,IACF;AAAA,EACF;AAEA,QAAM,OAAOC,SAAQ,QAAQ,WAAW,QAAQ,OAAO,QAAQ,IAAI,CAAC;AACpE,QAAM,SAAS,MAAM,WAAW,QAAQ,aAAa,MAAM;AAAA,IACzD,GAAI,QAAQ,WAAW,SAAY,CAAC,IAAI,EAAE,YAAY,QAAQ,OAAO;AAAA,IACrE,GAAI,QAAQ,aAAa,SAAY,CAAC,IAAI,EAAE,UAAU,QAAQ,SAAS;AAAA,EACzE,CAAC;AAED,QAAM,WAAW,MAAM,cAAc;AAAA,IACnC;AAAA,IACA;AAAA,IACA,WAAW,QAAQ,aAAa;AAAA,IAChC,GAAI,QAAQ,WAAW,SAAY,EAAE,QAAQ,QAAQ,OAAO,IAAI,CAAC;AAAA,IACjE,GAAI,QAAQ,mBAAmB,SAC3B,EAAE,gBAAgB,QAAQ,eAAe,IACzC,CAAC;AAAA,IACL;AAAA,IACA,QAAQ,OAAO,MAAM;AAAA,IACrB,GAAI,QAAQ,YAAY,SAAY,EAAE,SAAS,QAAQ,QAAQ,IAAI,CAAC;AAAA,EACtE,CAAC;AAED,QAAM,OACJ,QAAQ,OACR,gBAAgBA,SAAQ,MAAM,OAAO,QAAQ,GAAG,GAAG,SAAS;AAC9D,MAAI;AACF,UAAM,cAAc,MAAM,QAAQ;AAAA,EACpC,SAAS,KAAK;AACZ,UAAM,IAAI;AAAA,MACR,mBAAmB,IAAI,KAAK,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG,CAAC;AAAA,IAC9E;AAAA,EACF;AAEA,QAAM,WACJ,QAAQ,WAAW,SACf,KAAK,UAAU,EAAE,MAAM,SAAS,GAAG,MAAM,CAAC,IAC1C,cAAc,MAAM,QAAQ;AAElC,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA;AAAA;AAAA,IAGA,QAAQ,WAAW,KAAK;AAAA,IACxB,QAAQ,WAAW,WAAW;AAAA,IAC9B,UAAU;AAAA,EACZ;AACF;AAEO,SAAS,cACd,MACA,UACQ;AACR,QAAM,QAAQ;AAAA,IACZ,oBAAoB,SAAS,SAAS;AAAA,IACtC,gBAAgB,IAAI;AAAA,IACpB,gBAAgB,SAAS,UAAU,MAAM;AAAA,EAC3C;AACA,MAAI,SAAS,QAAQ,QAAW;AAC9B,UAAM;AAAA,MACJ,gBAAgB,SAAS,IAAI,GAAG,GAAG,SAAS,IAAI,SAAS,KAAK,SAAS,IAAI,MAAM,MAAM,EAAE,GACvF,SAAS,IAAI,QAAQ,+BAA0B,EACjD;AAAA,IACF;AAAA,EACF,OAAO;AACL,UAAM,KAAK,0DAA0D;AAAA,EACvE;AACA,QAAM,KAAK,gBAAgB,SAAS,OAAO,EAAE,KAAK,SAAS,OAAO,QAAQ,GAAG;AAC7E,SAAO,MAAM,KAAK,IAAI;AACxB;","names":["resolve","git","resolve"]}

package/dist/{chunk-GAZFKZHM.js → chunk-CEVU3GFF.js}

@@ -22,7 +22,7 @@ import {
   updateConfigEval,
   updateManifestEval,
   updatePageEval
-} from "./chunk-YA63PVWI.js";
+} from "./chunk-K52CS4KT.js";
 import {
   DEFAULT_CONFIG_FILENAME,
   assertRegisteredGraders,
@@ -41,10 +41,10 @@ import {
   sha256,
   splitBody,
   withExternalMetadata
-} from "./chunk-7OQAU4EA.js";
+} from "./chunk-LDKIIZDW.js";
 import {
   isTurnBudgetSkip
-} from "./chunk-LJ2RDH3F.js";
+} from "./chunk-XG6PVB5S.js";
 import {
   SUMMARY_FORMATS,
   parseFormat
@@ -57,13 +57,13 @@ import {
 } from "./chunk-77AINBYM.js";
 import {
   mergeMetaProvenance
-} from "./chunk-3YHAYXBC.js";
+} from "./chunk-CR3HZERW.js";
 import {
   palette
 } from "./chunk-RNVYGWIC.js";
 import {
   warn
-} from "./chunk-Q35YIDBV.js";
+} from "./chunk-HX44GB4Z.js";
 import {
   errorMessage
 } from "./chunk-G3T47CFV.js";
@@ -1284,4 +1284,4 @@ export {
   renderCalibration,
   runInit
 };
-//# sourceMappingURL=chunk-GAZFKZHM.js.map
+//# sourceMappingURL=chunk-CEVU3GFF.js.map