@reticlehq/vite-plugin 3.1.0 → 3.3.0

package/dist/index.cjs

@@ -80,8 +80,6 @@ function ensurePairingToken(dir) {
 // src/index.ts
 var import_node_os2 = require("node:os");
 var import_node_path8 = require("node:path");
-var import_core6 = require("@babel/core");
-var import_babel_plugin = __toESM(require("@reticlehq/babel-plugin"), 1);
 
 // ../../../node_modules/.pnpm/zod@3.25.76/node_modules/zod/v3/external.js
 var external_exports = {};
@@ -4124,6 +4122,119 @@ var coerce = {
 };
 var NEVER = INVALID;
 
+// ../../../core/dist/wire/constants/event-types.js
+var EventType = {
+  DOM_ADDED: "dom.added",
+  DOM_REMOVED: "dom.removed",
+  DOM_ATTR: "dom.attr",
+  DOM_TEXT: "dom.text",
+  NET_REQUEST: "net.request",
+  NET_PENDING: "net.pending",
+  /** An SSE (EventSource) or WebSocket frame — a message on a long-lived streaming connection. */
+  NET_STREAM: "net.stream",
+  /** A web-perf metric a screenshot can't verify: LCP, cumulative layout shift, or a long task. */
+  PERF: "perf",
+  ROUTE_CHANGE: "route.change",
+  CONSOLE_LOG: "console.log",
+  CONSOLE_WARN: "console.warn",
+  CONSOLE_ERROR: "console.error",
+  CONSOLE_INFO: "console.info",
+  CONSOLE_DEBUG: "console.debug",
+  ERROR_UNCAUGHT: "error.uncaught",
+  VISIBLE_SHOWN: "visible.shown",
+  ANIM_START: "anim.start",
+  ANIM_END: "anim.end",
+  SCROLL_POSITION: "scroll.position",
+  REVEAL_SHOWN: "reveal.shown",
+  SIGNAL: "signal",
+  STATE_CHANGE: "state.change",
+  /** a write to localStorage/sessionStorage/cookies — `data: { area, key, old?, new? }` (values redacted). */
+  STORAGE_CHANGE: "storage.change",
+  /** page-level visibility/focus health (distinct from element-level VISIBLE_*). */
+  PAGE_HEALTH: "page.health",
+  /**
+   * synthetic: the page called window.open, so the consequence of what was just clicked may live in
+   * another browsing context this one cannot observe (an OAuth popup is the archetype).
+   * `data: { href }` — the URL the page asked to open, when it named one.
+   */
+  CONTEXT_OPENED: "context.opened",
+  /**
+   * The app opened a native `alert`/`confirm`/`prompt` while Reticle was driving it.
+   *
+   * Recorded because Reticle ANSWERS these rather than letting them block — a native dialog halts
+   * the main thread, and the SDK's own message pump is on that thread, so one `confirm` behind a
+   * driven click made the tab permanently unresponsive with no recovery from inside the session.
+   * Answering silently would trade a wedge for an invisible one, so the question the app asked, and
+   * the answer given, ride out as an event.
+   */
+  DIALOG_OPENED: "dialog.opened",
+  /** aggregated React commits over a throttle window (dev builds) — `data: { commits }`. Commit storms /
+   * wasted re-renders show up here without a per-render flood. */
+  RENDER_COMMIT: "render.commit",
+  /** element focus moved — `data: { to, from, toBody }`. Focus dropping to body after an act is a regression. */
+  FOCUS_CHANGE: "focus.change",
+  /**
+   * a form field's value moved — `data: { field, kind, value?, redacted?, length }`.
+   *
+   * The DOM observer never saw this: `value` is in its attribute allowlist, but React and every
+   * controlled input set the PROPERTY, so `MutationObserver` does not fire. `value` is omitted and
+   * `redacted` set for a password, a sensitive name, or a payment autocomplete hint; `length` is
+   * always present, because "it was wiped" is assertable without carrying anybody's data.
+   */
+  FIELD_CHANGE: "field.change",
+  /** browser → bridge: a human recording compiled in-page. */
+  FLOW_RECORDED: "flow.recorded",
+  /** synthetic: browser transport queue overflowed; events were dropped. `data: { dropped: number }`. */
+  TRANSPORT_OVERFLOW: "transport.overflow",
+  /**
+   * synthetic: a per-channel cap truncated a batch (e.g. a DOM mutation flood). `data: { channel, dropped }`.
+   * Marks downstream rollups/envelopes as built on incomplete data — a ledger that lies at scale is worse
+   * than no ledger, so truncation is never silent.
+   */
+  TRUNCATED: "truncated",
+  /**
+   * synthetic: the SDK detected a region it CANNOT observe (a cross-origin iframe, a closed shadow root).
+   * `data: { kind: BlindSpotKind, count }`. Surfaced on results as `coverage: partial` so a green never
+   * implies it saw everything.
+   */
+  BLIND_SPOT: "blind-spot",
+  /** synthetic: the SDK ITSELF failed (an observer threw). `data: { site, message, errorType }`.
+   *  Rides the existing bridge — no outbound request. See browser/observers/sdk-failure.ts. */
+  SDK_FAILED: "sdk.failed",
+  /**
+   * synthetic (driven only): CDP/Playwright-authoritative network detail for a response the in-page
+   * fetch/XHR wrapper also saw — full response headers + authoritative status/mimeType the page-side
+   * wrapper can't reach. `data: { url, method?, status, headers, resourceType? }`. Merged onto the
+   * matching in-page NET_REQUEST so the driven view never loses fidelity to an outside-in tool.
+   */
+  NET_DETAIL: "net.detail",
+  /**
+   * Live-control: browser → bridge. A human acted on the presenter panel.
+   * `data: { kind: HumanControlKind; text?: string }`. Rides the existing EventMessage.
+   */
+  HUMAN_CONTROL: "human.control",
+  /**
+   * Human review: browser → bridge. A human pinned a mistake to an element on the running page
+   * (the "annotate the bug where you see it" loop). `data` narrows to HumanMarkDataSchema — a note
+   * plus a re-resolvable element anchor (and its source file:line when the framework stamped one) so
+   * the agent that drains the mark knows exactly which element and which source to fix.
+   */
+  HUMAN_MARK: "human.mark",
+  /**
+   * The app produced a FILE — a Blob handed to `URL.createObjectURL`, usually saved by clicking an
+   * anchor with `download`. `data: { filename?, mimeType, bytes, lines?, preview? }`. The one artifact
+   * class no outside-the-browser tool can inspect: it never crosses the network, so there is no
+   * request to intercept. See `observers/download.ts` for the defect that motivated it.
+   */
+  DOWNLOAD: "download",
+  /**
+   * Browser -> bridge: a person used the HUD — pressed a control, or the HUD changed how it sits.
+   * `data` narrows to HudUseDataSchema: names only. Telemetry, not evidence: the session takes it
+   * off the wire before the buffer, so no verdict, settle or agent read ever sees it.
+   */
+  HUD_USED: "hud.used"
+};
+
 // ../../../core/dist/wire/constants/constants.js
 var RETICLE_DEFAULT_PORT = 4400;
 var RETICLE_WS_PATH = "/reticle";
@@ -4213,7 +4324,42 @@ var ReticleEnv = {
   /** Base URL for the harness's model API, for a proxy or a gateway. */
   HARNESS_BASE_URL: "RETICLE_HARNESS_BASE_URL",
   /** Hard ceiling on harness model turns in one drive. Bounds cost, not value. */
-  HARNESS_MAX_STEPS: "RETICLE_HARNESS_MAX_STEPS"
+  HARNESS_MAX_STEPS: "RETICLE_HARNESS_MAX_STEPS",
+  /**
+   * Which model backs the harness driver: `anthropic` (the default) or `jev`.
+   *
+   * Two drivers exist because the driver's job turns out not to need a text generator. It picks the
+   * next action and says what it expects; the verdict is decided afterwards by the engine, with no
+   * model anywhere near it. A System One model answers typed questions against a state, which is
+   * exactly that job and none of the rest, so it can drive without being able to generate a
+   * sentence. Unset keeps the existing behaviour for everybody who has not asked for this.
+   */
+  HARNESS_DRIVER: "RETICLE_HARNESS_DRIVER",
+  /**
+   * A direct Jev key, for this repo's own benchmarks and for anyone holding a TypeSafe account.
+   *
+   * Users are not expected to have one. The ordinary path is the key they already minted on the
+   * platform (`RETICLE_API_KEY`), which reaches Jev through the proxy at `RETICLE_CLOUD_URL` —
+   * this variable is the escape hatch that skips it, and it takes precedence when both are set so
+   * that a developer debugging the upstream is never silently talking to the proxy instead.
+   */
+  HARNESS_JEV_KEY: "JEV_API_KEY",
+  /** Base URL for the Jev API, for a proxy or a gateway. Defaults to TypeSafe's own endpoint. */
+  HARNESS_JEV_URL: "RETICLE_HARNESS_JEV_URL",
+  /** A direct OpenAI key. As with Jev, the ordinary path is the platform key and its proxy. */
+  HARNESS_OPENAI_KEY: "OPENAI_API_KEY",
+  /** Model the OpenAI driver uses. Defaults to a small one — see `DEFAULT_OPENAI_MODEL`. */
+  HARNESS_OPENAI_MODEL: "RETICLE_HARNESS_OPENAI_MODEL",
+  /**
+   * The API key minted on the platform, and the host it belongs to.
+   *
+   * Read through `apiKeyFrom()`, never directly — see the note on that function for why there are
+   * two names for one key and why neither may be dropped.
+   */
+  API_KEY: "RETICLE_API_KEY",
+  /** The name this key had until 2026-09. Still honoured; see `apiKeyFrom()`. */
+  CLOUD_KEY: "RETICLE_CLOUD_KEY",
+  CLOUD_URL: "RETICLE_CLOUD_URL"
 };
 var TRANSPORT_LIMITS = {
   MAX_MESSAGE_BYTES: 1024 * 1024,
@@ -4290,18 +4436,53 @@ var ReticleDir = {
   IMPACT_FILE: "impact.json",
   /** what changes were SUPPOSED to make true —.reticle/intent.json (git-checked, reviewed) */
   INTENT_FILE: "intent.json",
+  /**
+   * The sharded form of the same ledger —.reticle/intent/ (git-checked, for the same reason).
+   *
+   * Named here rather than inline at the store that writes it, because the partition guard over
+   * this object is what decides whether a name Reticle creates is committed or ignored. A directory
+   * spelled as a free string somewhere else is one the guard cannot see, so nobody ever makes that
+   * decision: `intent/` was written into users' repositories for that reason alone, neither
+   * classified nor ignored.
+   */
+  INTENT_SUBDIR: "intent",
+  /**
+   * what a drive types into a field, keyed by the field's label —.reticle/fill-values.json.
+   *
+   * Git-checked on purpose. A generated value is paid for once and then belongs to the project: the
+   * next drive reuses it for free, a replay sends exactly what the recording sent, and a human who
+   * dislikes one can edit the file rather than argue with a model.
+   */
+  FILL_VALUES_FILE: "fill-values.json",
   /** opt-in pixel baselines —.reticle/visual/<name>.png + <name>.diff.png. */
   VISUAL_SUBDIR: "visual",
   /** verification-run artifacts —.reticle/runs/<runId>.json (the OEM/CI-consumable verdict). */
   RUNS_SUBDIR: "runs",
   /** fail-to-pass bug capsules —.reticle/capsules/<id>.json (a minimal failing flow + its evidence). */
   CAPSULES_SUBDIR: "capsules",
+  /**
+   * Where a feedback report refused delivery is copied — .reticle/feedback/.
+   *
+   * Named here rather than at the writer because the partition over this object is what decides
+   * whether a name Reticle creates is committed, ignored, or swept. It was spelled as a free string
+   * in three separate files, so the guard could not see it and nobody was ever asked.
+   */
+  FEEDBACK_SUBDIR: "feedback",
   /** durable causal journal —.reticle/sessions/<id>/{events,actions}.jsonl (the substrate). */
   SESSIONS_SUBDIR: "sessions",
   /** append-only event ledger inside a session dir (one ReticleEvent per line). */
   JOURNAL_EVENTS_FILE: "events.jsonl",
   /** append-only action ledger inside a session dir (one JournalAction per line). */
   JOURNAL_ACTIONS_FILE: "actions.jsonl",
+  /**
+   * the event ledger's closure report — .reticle/sessions/<id>/events.closed.json.
+   *
+   * Written once, when the byte ceiling refuses a batch, and never removed. Its PRESENCE is what
+   * makes the ceiling durable: a session id survives a reload, so the next connection reopens the
+   * same ledger with an empty memory, and a bound that lives only in one object's field is a bound
+   * per connection. Its CONTENTS are the loss report a time-windowed query cannot filter away.
+   */
+  JOURNAL_EVENTS_CLOSED_FILE: "events.closed.json",
   /** learned expected-envelopes per route, accumulated across runs (the deviation-report baseline). */
   ENVELOPES_FILE: "envelopes.json",
   /** learned ambient (action-less churn) region map — excluded from settle/summaries/envelopes. */
@@ -4352,102 +4533,6 @@ var RING_BUFFER_DEFAULTS = {
   MAX_AGE_MS: 6e4,
   MAX_BYTES: TRANSPORT_LIMITS.MAX_BUFFER_BYTES
 };
-var EventType = {
-  DOM_ADDED: "dom.added",
-  DOM_REMOVED: "dom.removed",
-  DOM_ATTR: "dom.attr",
-  DOM_TEXT: "dom.text",
-  NET_REQUEST: "net.request",
-  NET_PENDING: "net.pending",
-  /** An SSE (EventSource) or WebSocket frame — a message on a long-lived streaming connection. */
-  NET_STREAM: "net.stream",
-  /** A web-perf metric a screenshot can't verify: LCP, cumulative layout shift, or a long task. */
-  PERF: "perf",
-  ROUTE_CHANGE: "route.change",
-  CONSOLE_LOG: "console.log",
-  CONSOLE_WARN: "console.warn",
-  CONSOLE_ERROR: "console.error",
-  CONSOLE_INFO: "console.info",
-  CONSOLE_DEBUG: "console.debug",
-  ERROR_UNCAUGHT: "error.uncaught",
-  VISIBLE_SHOWN: "visible.shown",
-  ANIM_START: "anim.start",
-  ANIM_END: "anim.end",
-  SCROLL_POSITION: "scroll.position",
-  REVEAL_SHOWN: "reveal.shown",
-  SIGNAL: "signal",
-  STATE_CHANGE: "state.change",
-  /** a write to localStorage/sessionStorage/cookies — `data: { area, key, old?, new? }` (values redacted). */
-  STORAGE_CHANGE: "storage.change",
-  /** page-level visibility/focus health (distinct from element-level VISIBLE_*). */
-  PAGE_HEALTH: "page.health",
-  /**
-   * synthetic: the page called window.open, so the consequence of what was just clicked may live in
-   * another browsing context this one cannot observe (an OAuth popup is the archetype).
-   * `data: { href }` — the URL the page asked to open, when it named one.
-   */
-  CONTEXT_OPENED: "context.opened",
-  /**
-   * The app opened a native `alert`/`confirm`/`prompt` while Reticle was driving it.
-   *
-   * Recorded because Reticle ANSWERS these rather than letting them block — a native dialog halts
-   * the main thread, and the SDK's own message pump is on that thread, so one `confirm` behind a
-   * driven click made the tab permanently unresponsive with no recovery from inside the session.
-   * Answering silently would trade a wedge for an invisible one, so the question the app asked, and
-   * the answer given, ride out as an event.
-   */
-  DIALOG_OPENED: "dialog.opened",
-  /** aggregated React commits over a throttle window (dev builds) — `data: { commits }`. Commit storms /
-   * wasted re-renders show up here without a per-render flood. */
-  RENDER_COMMIT: "render.commit",
-  /** element focus moved — `data: { to, from, toBody }`. Focus dropping to body after an act is a regression. */
-  FOCUS_CHANGE: "focus.change",
-  /** browser → bridge: a human recording compiled in-page. */
-  FLOW_RECORDED: "flow.recorded",
-  /** synthetic: browser transport queue overflowed; events were dropped. `data: { dropped: number }`. */
-  TRANSPORT_OVERFLOW: "transport.overflow",
-  /**
-   * synthetic: a per-channel cap truncated a batch (e.g. a DOM mutation flood). `data: { channel, dropped }`.
-   * Marks downstream rollups/envelopes as built on incomplete data — a ledger that lies at scale is worse
-   * than no ledger, so truncation is never silent.
-   */
-  TRUNCATED: "truncated",
-  /**
-   * synthetic: the SDK detected a region it CANNOT observe (a cross-origin iframe, a closed shadow root).
-   * `data: { kind: BlindSpotKind, count }`. Surfaced on results as `coverage: partial` so a green never
-   * implies it saw everything.
-   */
-  BLIND_SPOT: "blind-spot",
-  /** synthetic: the SDK ITSELF failed (an observer threw). `data: { site, message, errorType }`.
-   *  Rides the existing bridge — no outbound request. See browser/observers/sdk-failure.ts. */
-  SDK_FAILED: "sdk.failed",
-  /**
-   * synthetic (driven only): CDP/Playwright-authoritative network detail for a response the in-page
-   * fetch/XHR wrapper also saw — full response headers + authoritative status/mimeType the page-side
-   * wrapper can't reach. `data: { url, method?, status, headers, resourceType? }`. Merged onto the
-   * matching in-page NET_REQUEST so the driven view never loses fidelity to an outside-in tool.
-   */
-  NET_DETAIL: "net.detail",
-  /**
-   * Live-control: browser → bridge. A human acted on the presenter panel.
-   * `data: { kind: HumanControlKind; text?: string }`. Rides the existing EventMessage.
-   */
-  HUMAN_CONTROL: "human.control",
-  /**
-   * Human review: browser → bridge. A human pinned a mistake to an element on the running page
-   * (the "annotate the bug where you see it" loop). `data` narrows to HumanMarkDataSchema — a note
-   * plus a re-resolvable element anchor (and its source file:line when the framework stamped one) so
-   * the agent that drains the mark knows exactly which element and which source to fix.
-   */
-  HUMAN_MARK: "human.mark",
-  /**
-   * The app produced a FILE — a Blob handed to `URL.createObjectURL`, usually saved by clicking an
-   * anchor with `download`. `data: { filename?, mimeType, bytes, lines?, preview? }`. The one artifact
-   * class no outside-the-browser tool can inspect: it never crosses the network, so there is no
-   * request to intercept. See `observers/download.ts` for the defect that motivated it.
-   */
-  DOWNLOAD: "download"
-};
 var RETICLE_RENDER_PREHOOK = "__reticleRenderPreHook";
 var CONSOLE_LEVEL_PREFIX = "console.";
 var CONSOLE_LEVELS = [
@@ -4461,6 +4546,7 @@ var CONSOLE_LEVELS = [
 var DATA_RETICLE_SOURCE_ATTR = "data-reticle-source";
 var RETICLE_ROOT_GLOBAL = "__RETICLE_ROOT__";
 var RETICLE_SDK_VERSION_GLOBAL = "__RETICLE_SDK_VERSION__";
+var RETICLE_IGNORE_MARKER = "@reticle-ignore";
 
 // ../../../core/dist/identity/project-id.js
 var PROJECT_ID_HASH_LENGTH = 8;
@@ -4749,6 +4835,51 @@ function stampSvelte(code, id, load = defaultLoadCompiler) {
   return out;
 }
 
+// src/stamping.ts
+var import_core6 = require("@babel/core");
+var import_babel_plugin = __toESM(require("@reticlehq/babel-plugin"), 1);
+var import_ignore = require("@reticlehq/babel-plugin/ignore");
+var JSX_FILE = /\.[jt]sx$/;
+var VIRTUAL_PREFIX = "\0";
+var NODE_MODULES = "node_modules";
+function stampableId(id) {
+  if (id.startsWith(VIRTUAL_PREFIX)) return null;
+  if (id.includes(NODE_MODULES)) return null;
+  return id.split("?")[0] ?? id;
+}
+var TEST_FILE = /(?:\.(?:test|spec)\.[^./]+$)|(?:^|\/)__tests__\//;
+function shouldStamp(id) {
+  const clean = stampableId(id);
+  if (null === clean) return false;
+  if (TEST_FILE.test(clean)) return false;
+  return JSX_FILE.test(clean);
+}
+function shouldStampSvelte(id) {
+  const clean = stampableId(id);
+  return clean !== null && SVELTE_FILE.test(clean);
+}
+function stamp(code, id) {
+  const out = (0, import_core6.transformSync)(code, {
+    filename: id,
+    plugins: [import_babel_plugin.default],
+    parserOpts: { plugins: ["jsx", "typescript"] },
+    sourceMaps: true,
+    configFile: false,
+    babelrc: false
+  });
+  if (out?.code === void 0 || null === out.code) return null;
+  return {
+    code: out.code,
+    map: out.map === void 0 || null === out.map ? null : JSON.stringify(out.map)
+  };
+}
+function optsOutOfStamping(code, id) {
+  return (shouldStamp(id) || shouldStampSvelte(id)) && (0, import_ignore.isSourceStampingIgnored)(code);
+}
+function ignoredFileNotice(id) {
+  return `[reticle] ${id} opts out of source stamping (${RETICLE_IGNORE_MARKER} on its first line) \u2014 elements in it will have no file:line.`;
+}
+
 // src/installed.ts
 var import_node_fs5 = require("node:fs");
 var import_node_path7 = require("node:path");
@@ -4847,6 +4978,227 @@ function optimizerOptions(key, inherited, add) {
   };
 }
 
+// src/disabled-browser-stub.ts
+var RETICLE_DISABLED_STUB = "\0reticle-disabled-stub";
+var isReticleDisabledWebBuild = (desktop, command) => !desktop && "build" === command;
+var RETICLE_DISABLED_STUB_CODE = `
+export class Reticle {
+  connect() {}
+  signal() {}
+  state() {}
+  renderCommit() {}
+  describe() {}
+  endSession() {}
+  observeHotUpdates() {}
+  disconnect() {}
+
+  get connected() {
+    return false;
+  }
+}
+
+export const reticle = new Reticle();
+
+export const SESSION_AUTO = 'auto';
+
+export function setIgnoreSelectors() {}
+
+export function registerAdapter() {}
+export function identifyComponent() {
+  return null;
+}
+export function readComponentState() {
+  return undefined;
+}
+export function elementHasHoverHandlers() {
+  return false;
+}
+export function adapterNames() {
+  return [];
+}
+
+export function registerStore() {}
+export function unregisterStore() {}
+export function storeNames() {
+  return [];
+}
+export function readStores() {
+  return {};
+}
+export function readStoresWithTruncation() {
+  return { stores: {} };
+}
+export function sourceOwner() {
+  return undefined;
+}
+export function markAdapterSource() {}
+
+export function tanstackQueryStore() {
+  return undefined;
+}
+export function jotaiStore() {
+  return undefined;
+}
+export function xstateStore() {
+  return undefined;
+}
+export function valtioStore() {
+  return undefined;
+}
+export function mobxStore() {
+  return undefined;
+}
+export function recoilStore() {
+  return undefined;
+}
+export function svelteStore() {
+  return undefined;
+}
+export function piniaStore() {
+  return undefined;
+}
+export function pushStore() {
+  return undefined;
+}
+
+export function registerCapabilities() {}
+export function getCapabilities() {
+  return {};
+}
+export function hasCapabilities() {
+  return false;
+}
+export function setCapabilitiesListener() {}
+
+export function createReticleEmitter() {
+  return {
+    signal() {},
+    state() {},
+  };
+}
+
+export function commitAndSignal() {}
+export function registerReticleDomain() {}
+
+export function buildSnapshot() {
+  return {};
+}
+
+export function inspectChart() {
+  return {};
+}
+export function canvasChartData() {
+  return {};
+}
+
+export function matchQuery() {
+  return false;
+}
+export function runQuery() {
+  return undefined;
+}
+
+export function executeAction() {
+  return undefined;
+}
+export function executeSequence() {
+  return undefined;
+}
+
+export function describe() {
+  return undefined;
+}
+export function getRole() {
+  return undefined;
+}
+export function getAccessibleName() {
+  return undefined;
+}
+export function getStates() {
+  return {};
+}
+export function isVisible() {
+  return false;
+}
+
+export class RefRegistry {
+  get size() {
+    return 0;
+  }
+
+  markEdited() {}
+
+  mintedBeforeLastEdit() {
+    return false;
+  }
+
+  refFor() {
+    return undefined;
+  }
+
+  resolve() {
+    return null;
+  }
+}
+
+export const refs = new RefRegistry();
+
+export class Annotator {
+  constructor() {}
+
+  get active() {
+    return false;
+  }
+
+  get markCount() {
+    return 0;
+  }
+
+  mount() {}
+  unmount() {}
+}
+
+export function installAnnotator() {}
+
+export function resolveMarkAnchor() {
+  return undefined;
+}
+`;
+
+// src/connect-args.ts
+function connectArgs(options) {
+  const args = {};
+  const port = options.port ?? RETICLE_DEFAULT_PORT;
+  if (port !== RETICLE_DEFAULT_PORT) args["url"] = bridgeWsUrl(port);
+  if (options.session !== void 0) args["session"] = options.session;
+  if (options.projectId !== void 0) args["projectId"] = options.projectId;
+  if (options.token !== void 0) args["token"] = options.token;
+  if (options.root !== void 0 && options.root.length > 0) args["root"] = options.root;
+  if (options.sdkVersion !== void 0 && options.sdkVersion.length > 0) {
+    args["sdkVersion"] = options.sdkVersion;
+  }
+  if (true === options.desktop) args["allowInProduction"] = true;
+  if (true === options.captureNetworkBodies || "1" === process.env["VITE_RETICLE_CAPTURE_BODIES"]) {
+    args["captureNetworkBodies"] = true;
+  }
+  if (false === options.sourceMapping) args["sourceMapping"] = false;
+  if (false === options.captureErrorBodies || "1" === process.env["VITE_RETICLE_NO_ERROR_BODIES"]) {
+    args["captureErrorBodies"] = false;
+  }
+  const envBodyChars = Number(process.env["VITE_RETICLE_BODY_MAX_CHARS"]);
+  const bodyChars = options.networkBodyMaxChars ?? (Number.isFinite(envBodyChars) && envBodyChars > 0 ? envBodyChars : void 0);
+  if (bodyChars !== void 0) {
+    args["networkBodyMaxChars"] = bodyChars;
+  }
+  if (true === options.exposePresenter || "1" === process.env["VITE_RETICLE_EXPOSE_PRESENTER"]) {
+    args["exposePresenter"] = true;
+  }
+  if (true === options.allowNonLocalhost || "1" === process.env["VITE_RETICLE_ALLOW_NON_LOCALHOST"]) {
+    args["allowNonLocalhost"] = true;
+  }
+  return Object.keys(args).length > 0 ? JSON.stringify(args) : "";
+}
+
 // src/plugin-name.ts
 var RETICLE_VITE_PLUGIN_NAME = "reticle";
 
@@ -4905,9 +5257,6 @@ function isVitestBrowserServer(config) {
 var RETICLE_PACKAGE2 = "@reticlehq/react";
 var RETICLE_SENSOR = "@reticlehq/browser";
 var RETICLE_TOKEN_GLOBAL = "__RETICLE_TOKEN__";
-var JSX_FILE = /\.[jt]sx$/;
-var VIRTUAL_PREFIX = "\0";
-var NODE_MODULES = "node_modules";
 var RETICLE_CONNECT_MODULE = "/@reticle-connect";
 function connectModuleUrl(base) {
   if (void 0 === base || !base.startsWith("/")) return RETICLE_CONNECT_MODULE;
@@ -4942,34 +5291,6 @@ function isHtmlEntry(id, specifier, root) {
   }
   return candidate.endsWith(target.startsWith("/") ? target : `/${target}`);
 }
-function stampableId(id) {
-  if (id.startsWith(VIRTUAL_PREFIX)) return null;
-  if (id.includes(NODE_MODULES)) return null;
-  return id.split("?")[0] ?? id;
-}
-function shouldStamp(id) {
-  const clean = stampableId(id);
-  return clean !== null && JSX_FILE.test(clean);
-}
-function shouldStampSvelte(id) {
-  const clean = stampableId(id);
-  return clean !== null && SVELTE_FILE.test(clean);
-}
-function stamp(code, id) {
-  const out = (0, import_core6.transformSync)(code, {
-    filename: id,
-    plugins: [import_babel_plugin.default],
-    parserOpts: { plugins: ["jsx", "typescript"] },
-    sourceMaps: true,
-    configFile: false,
-    babelrc: false
-  });
-  if (out?.code === void 0 || null === out.code) return null;
-  return {
-    code: out.code,
-    map: out.map === void 0 || null === out.map ? null : JSON.stringify(out.map)
-  };
-}
 function readPairingToken() {
   const override = process.env[ReticleEnv.PAIRING_TOKEN_DIR];
   const dir = override !== void 0 && override.length > 0 ? override : (0, import_node_path8.join)((0, import_node_os2.homedir)(), ReticleDir.ROOT);
@@ -4984,33 +5305,6 @@ function warnIfTokenMissing(token) {
   }
   return token;
 }
-function connectArgs(options) {
-  const args = {};
-  const port = options.port ?? RETICLE_DEFAULT_PORT;
-  if (port !== RETICLE_DEFAULT_PORT) args["url"] = bridgeWsUrl(port);
-  if (options.session !== void 0) args["session"] = options.session;
-  if (options.projectId !== void 0) args["projectId"] = options.projectId;
-  if (options.token !== void 0) args["token"] = options.token;
-  if (options.root !== void 0 && options.root.length > 0) args["root"] = options.root;
-  if (options.sdkVersion !== void 0 && options.sdkVersion.length > 0) {
-    args["sdkVersion"] = options.sdkVersion;
-  }
-  if (true === options.desktop) args["allowInProduction"] = true;
-  if (true === options.captureNetworkBodies || "1" === process.env["VITE_RETICLE_CAPTURE_BODIES"]) {
-    args["captureNetworkBodies"] = true;
-  }
-  if (false === options.sourceMapping) args["sourceMapping"] = false;
-  if (false === options.captureErrorBodies || "1" === process.env["VITE_RETICLE_NO_ERROR_BODIES"]) {
-    args["captureErrorBodies"] = false;
-  }
-  if (true === options.exposePresenter || "1" === process.env["VITE_RETICLE_EXPOSE_PRESENTER"]) {
-    args["exposePresenter"] = true;
-  }
-  if (true === options.allowNonLocalhost || "1" === process.env["VITE_RETICLE_ALLOW_NON_LOCALHOST"]) {
-    args["allowNonLocalhost"] = true;
-  }
-  return Object.keys(args).length > 0 ? JSON.stringify(args) : "";
-}
 var RETICLE_DEV_MODULE_CANDIDATES = [
   "src/reticle-dev.ts",
   "src/reticle-dev.js",
@@ -5073,6 +5367,7 @@ function reticle(options = {}) {
   let vitestBrowser = false;
   const warn = options.onWarn ?? ((message) => globalThis.console.warn(message));
   let injected = false;
+  const announcedIgnored = /* @__PURE__ */ new Set();
   let htmlTransformed = false;
   const resolveLazy = () => {
     const port = resolved.port ?? discoverDaemonPort(resolved.projectId);
@@ -5095,10 +5390,6 @@ function reticle(options = {}) {
   });
   return {
     name: RETICLE_VITE_PLUGIN_NAME,
-    // Web: serve-only, so a production bundle can never carry the SDK — gating is the tool's job.
-    // Desktop: a packaged renderer IS a production build with no dev server, so the plugin must also
-    // run for `vite build` or the shipped app has no connect() at all.
-    ...true === options.desktop ? {} : { apply: "serve" },
     enforce: "pre",
     /**
      * Declare the SDK itself and the optimizer cache fingerprint.
@@ -5182,6 +5473,7 @@ function reticle(options = {}) {
       };
     },
     transform(code, id) {
+      if (isReticleDisabledWebBuild(desktop, command)) return null;
       if (desktop && inject && isHtmlEntry(id, htmlEntrySpecifier, root)) {
         injected = true;
         const withConnect = `${connectModuleSource(resolveLazy())}
@@ -5190,6 +5482,13 @@ ${code}`;
         return stamped ?? { code: withConnect, map: null };
       }
       if (!sourceMapping) return null;
+      if (optsOutOfStamping(code, id)) {
+        if (!announcedIgnored.has(id)) {
+          announcedIgnored.add(id);
+          warn(ignoredFileNotice(id));
+        }
+        return null;
+      }
       if (shouldStampSvelte(id)) {
         const stamped = stampSvelte(code, id);
         return null === stamped ? null : { code: stamped, map: null };
@@ -5198,12 +5497,18 @@ ${code}`;
       return stamp(code, id);
     },
     resolveId(id, importer) {
+      if (isReticleDisabledWebBuild(desktop, command) && id === RETICLE_SENSOR) {
+        return RETICLE_DISABLED_STUB;
+      }
       if (desktop && inject && importer !== void 0 && importer.includes(".html")) {
         htmlEntrySpecifier = id;
       }
       return inject && id === RETICLE_CONNECT_MODULE ? RETICLE_CONNECT_MODULE : null;
     },
     load(id) {
+      if (isReticleDisabledWebBuild(desktop, command) && id === RETICLE_DISABLED_STUB) {
+        return RETICLE_DISABLED_STUB_CODE;
+      }
       if (!inject || id !== RETICLE_CONNECT_MODULE) return null;
       const source = currentConnectSource();
       lastServedConnectSource = source;
@@ -5288,6 +5593,7 @@ ${code}`;
     checkHtmlHookForTest: watch.checkHtmlHookRan,
     injectionWatchForTest: watch,
     transformIndexHtml() {
+      if (isReticleDisabledWebBuild(desktop, command)) return [];
       htmlTransformed = true;
       if (desktop && inject && "serve" === command) watch.armDesktopCheck();
       if (!inject || desktop) return [];