@reticlehq/vite-plugin 3.2.0 → 3.4.0

package/dist/index.cjs

@@ -80,8 +80,6 @@ function ensurePairingToken(dir) {
 // src/index.ts
 var import_node_os2 = require("node:os");
 var import_node_path8 = require("node:path");
-var import_core6 = require("@babel/core");
-var import_babel_plugin = __toESM(require("@reticlehq/babel-plugin"), 1);
 
 // ../../../node_modules/.pnpm/zod@3.25.76/node_modules/zod/v3/external.js
 var external_exports = {};
@@ -4124,6 +4122,119 @@ var coerce = {
 };
 var NEVER = INVALID;
 
+// ../../../core/dist/wire/constants/event-types.js
+var EventType = {
+  DOM_ADDED: "dom.added",
+  DOM_REMOVED: "dom.removed",
+  DOM_ATTR: "dom.attr",
+  DOM_TEXT: "dom.text",
+  NET_REQUEST: "net.request",
+  NET_PENDING: "net.pending",
+  /** An SSE (EventSource) or WebSocket frame — a message on a long-lived streaming connection. */
+  NET_STREAM: "net.stream",
+  /** A web-perf metric a screenshot can't verify: LCP, cumulative layout shift, or a long task. */
+  PERF: "perf",
+  ROUTE_CHANGE: "route.change",
+  CONSOLE_LOG: "console.log",
+  CONSOLE_WARN: "console.warn",
+  CONSOLE_ERROR: "console.error",
+  CONSOLE_INFO: "console.info",
+  CONSOLE_DEBUG: "console.debug",
+  ERROR_UNCAUGHT: "error.uncaught",
+  VISIBLE_SHOWN: "visible.shown",
+  ANIM_START: "anim.start",
+  ANIM_END: "anim.end",
+  SCROLL_POSITION: "scroll.position",
+  REVEAL_SHOWN: "reveal.shown",
+  SIGNAL: "signal",
+  STATE_CHANGE: "state.change",
+  /** a write to localStorage/sessionStorage/cookies — `data: { area, key, old?, new? }` (values redacted). */
+  STORAGE_CHANGE: "storage.change",
+  /** page-level visibility/focus health (distinct from element-level VISIBLE_*). */
+  PAGE_HEALTH: "page.health",
+  /**
+   * synthetic: the page called window.open, so the consequence of what was just clicked may live in
+   * another browsing context this one cannot observe (an OAuth popup is the archetype).
+   * `data: { href }` — the URL the page asked to open, when it named one.
+   */
+  CONTEXT_OPENED: "context.opened",
+  /**
+   * The app opened a native `alert`/`confirm`/`prompt` while Reticle was driving it.
+   *
+   * Recorded because Reticle ANSWERS these rather than letting them block — a native dialog halts
+   * the main thread, and the SDK's own message pump is on that thread, so one `confirm` behind a
+   * driven click made the tab permanently unresponsive with no recovery from inside the session.
+   * Answering silently would trade a wedge for an invisible one, so the question the app asked, and
+   * the answer given, ride out as an event.
+   */
+  DIALOG_OPENED: "dialog.opened",
+  /** aggregated React commits over a throttle window (dev builds) — `data: { commits }`. Commit storms /
+   * wasted re-renders show up here without a per-render flood. */
+  RENDER_COMMIT: "render.commit",
+  /** element focus moved — `data: { to, from, toBody }`. Focus dropping to body after an act is a regression. */
+  FOCUS_CHANGE: "focus.change",
+  /**
+   * a form field's value moved — `data: { field, kind, value?, redacted?, length }`.
+   *
+   * The DOM observer never saw this: `value` is in its attribute allowlist, but React and every
+   * controlled input set the PROPERTY, so `MutationObserver` does not fire. `value` is omitted and
+   * `redacted` set for a password, a sensitive name, or a payment autocomplete hint; `length` is
+   * always present, because "it was wiped" is assertable without carrying anybody's data.
+   */
+  FIELD_CHANGE: "field.change",
+  /** browser → bridge: a human recording compiled in-page. */
+  FLOW_RECORDED: "flow.recorded",
+  /** synthetic: browser transport queue overflowed; events were dropped. `data: { dropped: number }`. */
+  TRANSPORT_OVERFLOW: "transport.overflow",
+  /**
+   * synthetic: a per-channel cap truncated a batch (e.g. a DOM mutation flood). `data: { channel, dropped }`.
+   * Marks downstream rollups/envelopes as built on incomplete data — a ledger that lies at scale is worse
+   * than no ledger, so truncation is never silent.
+   */
+  TRUNCATED: "truncated",
+  /**
+   * synthetic: the SDK detected a region it CANNOT observe (a cross-origin iframe, a closed shadow root).
+   * `data: { kind: BlindSpotKind, count }`. Surfaced on results as `coverage: partial` so a green never
+   * implies it saw everything.
+   */
+  BLIND_SPOT: "blind-spot",
+  /** synthetic: the SDK ITSELF failed (an observer threw). `data: { site, message, errorType }`.
+   *  Rides the existing bridge — no outbound request. See browser/observers/sdk-failure.ts. */
+  SDK_FAILED: "sdk.failed",
+  /**
+   * synthetic (driven only): CDP/Playwright-authoritative network detail for a response the in-page
+   * fetch/XHR wrapper also saw — full response headers + authoritative status/mimeType the page-side
+   * wrapper can't reach. `data: { url, method?, status, headers, resourceType? }`. Merged onto the
+   * matching in-page NET_REQUEST so the driven view never loses fidelity to an outside-in tool.
+   */
+  NET_DETAIL: "net.detail",
+  /**
+   * Live-control: browser → bridge. A human acted on the presenter panel.
+   * `data: { kind: HumanControlKind; text?: string }`. Rides the existing EventMessage.
+   */
+  HUMAN_CONTROL: "human.control",
+  /**
+   * Human review: browser → bridge. A human pinned a mistake to an element on the running page
+   * (the "annotate the bug where you see it" loop). `data` narrows to HumanMarkDataSchema — a note
+   * plus a re-resolvable element anchor (and its source file:line when the framework stamped one) so
+   * the agent that drains the mark knows exactly which element and which source to fix.
+   */
+  HUMAN_MARK: "human.mark",
+  /**
+   * The app produced a FILE — a Blob handed to `URL.createObjectURL`, usually saved by clicking an
+   * anchor with `download`. `data: { filename?, mimeType, bytes, lines?, preview? }`. The one artifact
+   * class no outside-the-browser tool can inspect: it never crosses the network, so there is no
+   * request to intercept. See `observers/download.ts` for the defect that motivated it.
+   */
+  DOWNLOAD: "download",
+  /**
+   * Browser -> bridge: a person used the HUD — pressed a control, or the HUD changed how it sits.
+   * `data` narrows to HudUseDataSchema: names only. Telemetry, not evidence: the session takes it
+   * off the wire before the buffer, so no verdict, settle or agent read ever sees it.
+   */
+  HUD_USED: "hud.used"
+};
+
 // ../../../core/dist/wire/constants/constants.js
 var RETICLE_DEFAULT_PORT = 4400;
 var RETICLE_WS_PATH = "/reticle";
@@ -4248,7 +4359,14 @@ var ReticleEnv = {
   API_KEY: "RETICLE_API_KEY",
   /** The name this key had until 2026-09. Still honoured; see `apiKeyFrom()`. */
   CLOUD_KEY: "RETICLE_CLOUD_KEY",
-  CLOUD_URL: "RETICLE_CLOUD_URL"
+  /** The platform host. Read through `cloudUrlFrom()`, which also accepts `URL`. */
+  CLOUD_URL: "RETICLE_CLOUD_URL",
+  /** The short name for `CLOUD_URL`, which people type first. `CLOUD_URL` wins when both are set. */
+  URL: "RETICLE_URL"
+};
+var SYNC_BATCH_LIMITS = {
+  MAX_RUNS: 50,
+  MAX_BYTES: 4 * 1024 * 1024
 };
 var TRANSPORT_LIMITS = {
   MAX_MESSAGE_BYTES: 1024 * 1024,
@@ -4349,6 +4467,14 @@ var ReticleDir = {
   RUNS_SUBDIR: "runs",
   /** fail-to-pass bug capsules —.reticle/capsules/<id>.json (a minimal failing flow + its evidence). */
   CAPSULES_SUBDIR: "capsules",
+  /**
+   * Where a feedback report refused delivery is copied — .reticle/feedback/.
+   *
+   * Named here rather than at the writer because the partition over this object is what decides
+   * whether a name Reticle creates is committed, ignored, or swept. It was spelled as a free string
+   * in three separate files, so the guard could not see it and nobody was ever asked.
+   */
+  FEEDBACK_SUBDIR: "feedback",
   /** durable causal journal —.reticle/sessions/<id>/{events,actions}.jsonl (the substrate). */
   SESSIONS_SUBDIR: "sessions",
   /** append-only event ledger inside a session dir (one ReticleEvent per line). */
@@ -4370,6 +4496,8 @@ var ReticleDir = {
   AMBIENT_FILE: "ambient.json",
   /** per-flow flake ledger — replay outcomes that decide intermittent-failure quarantine. */
   FLAKE_FILE: "flake.json",
+  /** The app-wide coverage ledger — see server features/exhaust/ledger.ts. */
+  COVERAGE_FILE: "coverage.json",
   /**
    * the project's cloud binding — .reticle/cloud.json, written by `reticle link`. Git-checked and
    * non-secret: the project id, the API origin, and where its dashboard lives. The KEY lives in
@@ -4414,102 +4542,6 @@ var RING_BUFFER_DEFAULTS = {
   MAX_AGE_MS: 6e4,
   MAX_BYTES: TRANSPORT_LIMITS.MAX_BUFFER_BYTES
 };
-var EventType = {
-  DOM_ADDED: "dom.added",
-  DOM_REMOVED: "dom.removed",
-  DOM_ATTR: "dom.attr",
-  DOM_TEXT: "dom.text",
-  NET_REQUEST: "net.request",
-  NET_PENDING: "net.pending",
-  /** An SSE (EventSource) or WebSocket frame — a message on a long-lived streaming connection. */
-  NET_STREAM: "net.stream",
-  /** A web-perf metric a screenshot can't verify: LCP, cumulative layout shift, or a long task. */
-  PERF: "perf",
-  ROUTE_CHANGE: "route.change",
-  CONSOLE_LOG: "console.log",
-  CONSOLE_WARN: "console.warn",
-  CONSOLE_ERROR: "console.error",
-  CONSOLE_INFO: "console.info",
-  CONSOLE_DEBUG: "console.debug",
-  ERROR_UNCAUGHT: "error.uncaught",
-  VISIBLE_SHOWN: "visible.shown",
-  ANIM_START: "anim.start",
-  ANIM_END: "anim.end",
-  SCROLL_POSITION: "scroll.position",
-  REVEAL_SHOWN: "reveal.shown",
-  SIGNAL: "signal",
-  STATE_CHANGE: "state.change",
-  /** a write to localStorage/sessionStorage/cookies — `data: { area, key, old?, new? }` (values redacted). */
-  STORAGE_CHANGE: "storage.change",
-  /** page-level visibility/focus health (distinct from element-level VISIBLE_*). */
-  PAGE_HEALTH: "page.health",
-  /**
-   * synthetic: the page called window.open, so the consequence of what was just clicked may live in
-   * another browsing context this one cannot observe (an OAuth popup is the archetype).
-   * `data: { href }` — the URL the page asked to open, when it named one.
-   */
-  CONTEXT_OPENED: "context.opened",
-  /**
-   * The app opened a native `alert`/`confirm`/`prompt` while Reticle was driving it.
-   *
-   * Recorded because Reticle ANSWERS these rather than letting them block — a native dialog halts
-   * the main thread, and the SDK's own message pump is on that thread, so one `confirm` behind a
-   * driven click made the tab permanently unresponsive with no recovery from inside the session.
-   * Answering silently would trade a wedge for an invisible one, so the question the app asked, and
-   * the answer given, ride out as an event.
-   */
-  DIALOG_OPENED: "dialog.opened",
-  /** aggregated React commits over a throttle window (dev builds) — `data: { commits }`. Commit storms /
-   * wasted re-renders show up here without a per-render flood. */
-  RENDER_COMMIT: "render.commit",
-  /** element focus moved — `data: { to, from, toBody }`. Focus dropping to body after an act is a regression. */
-  FOCUS_CHANGE: "focus.change",
-  /** browser → bridge: a human recording compiled in-page. */
-  FLOW_RECORDED: "flow.recorded",
-  /** synthetic: browser transport queue overflowed; events were dropped. `data: { dropped: number }`. */
-  TRANSPORT_OVERFLOW: "transport.overflow",
-  /**
-   * synthetic: a per-channel cap truncated a batch (e.g. a DOM mutation flood). `data: { channel, dropped }`.
-   * Marks downstream rollups/envelopes as built on incomplete data — a ledger that lies at scale is worse
-   * than no ledger, so truncation is never silent.
-   */
-  TRUNCATED: "truncated",
-  /**
-   * synthetic: the SDK detected a region it CANNOT observe (a cross-origin iframe, a closed shadow root).
-   * `data: { kind: BlindSpotKind, count }`. Surfaced on results as `coverage: partial` so a green never
-   * implies it saw everything.
-   */
-  BLIND_SPOT: "blind-spot",
-  /** synthetic: the SDK ITSELF failed (an observer threw). `data: { site, message, errorType }`.
-   *  Rides the existing bridge — no outbound request. See browser/observers/sdk-failure.ts. */
-  SDK_FAILED: "sdk.failed",
-  /**
-   * synthetic (driven only): CDP/Playwright-authoritative network detail for a response the in-page
-   * fetch/XHR wrapper also saw — full response headers + authoritative status/mimeType the page-side
-   * wrapper can't reach. `data: { url, method?, status, headers, resourceType? }`. Merged onto the
-   * matching in-page NET_REQUEST so the driven view never loses fidelity to an outside-in tool.
-   */
-  NET_DETAIL: "net.detail",
-  /**
-   * Live-control: browser → bridge. A human acted on the presenter panel.
-   * `data: { kind: HumanControlKind; text?: string }`. Rides the existing EventMessage.
-   */
-  HUMAN_CONTROL: "human.control",
-  /**
-   * Human review: browser → bridge. A human pinned a mistake to an element on the running page
-   * (the "annotate the bug where you see it" loop). `data` narrows to HumanMarkDataSchema — a note
-   * plus a re-resolvable element anchor (and its source file:line when the framework stamped one) so
-   * the agent that drains the mark knows exactly which element and which source to fix.
-   */
-  HUMAN_MARK: "human.mark",
-  /**
-   * The app produced a FILE — a Blob handed to `URL.createObjectURL`, usually saved by clicking an
-   * anchor with `download`. `data: { filename?, mimeType, bytes, lines?, preview? }`. The one artifact
-   * class no outside-the-browser tool can inspect: it never crosses the network, so there is no
-   * request to intercept. See `observers/download.ts` for the defect that motivated it.
-   */
-  DOWNLOAD: "download"
-};
 var RETICLE_RENDER_PREHOOK = "__reticleRenderPreHook";
 var CONSOLE_LEVEL_PREFIX = "console.";
 var CONSOLE_LEVELS = [
@@ -4523,6 +4555,7 @@ var CONSOLE_LEVELS = [
 var DATA_RETICLE_SOURCE_ATTR = "data-reticle-source";
 var RETICLE_ROOT_GLOBAL = "__RETICLE_ROOT__";
 var RETICLE_SDK_VERSION_GLOBAL = "__RETICLE_SDK_VERSION__";
+var RETICLE_IGNORE_MARKER = "@reticle-ignore";
 
 // ../../../core/dist/identity/project-id.js
 var PROJECT_ID_HASH_LENGTH = 8;
@@ -4571,7 +4604,10 @@ var DaemonRegistryEntrySchema = external_exports.object({
   projectId: external_exports.string().optional(),
   startedAt: external_exports.number()
 });
-function pickDaemonPort(entries, projectId, isAlive2) {
+function pickDaemonPort(entries, projectId, isAlive2, configuredPort) {
+  if (void 0 !== configuredPort && entries.some((e) => e.port === configuredPort && isAlive2(e.pid) && (e.projectId === void 0 || projectId === void 0 || e.projectId === projectId))) {
+    return configuredPort;
+  }
   if (projectId === void 0 || 0 === projectId.length)
     return null;
   const matches = entries.filter((e) => e.projectId === projectId && isAlive2(e.pid)).map((e) => e.port).sort((a, b) => a - b);
@@ -4621,14 +4657,17 @@ function deriveProjectId(pkgName, rootPath) {
 var readFileOrThrow = (path) => (0, import_node_fs2.readFileSync)(path, "utf8");
 var MAX_CONFIG_SEARCH_DEPTH = 6;
 var MAX_PACKAGE_SEARCH_DEPTH = 50;
-function readNearestField(startDir, basename, field, readFile, maxDepth) {
+var nonEmptyString = (value) => "string" === typeof value && value.length > 0 ? value : void 0;
+var MAX_TCP_PORT = 65535;
+var tcpPort = (value) => Number.isInteger(value) && value > 0 && value <= MAX_TCP_PORT ? value : void 0;
+function readNearestField(startDir, basename, field, readFile, maxDepth, accept) {
   let dir = startDir;
   for (let depth = 0; depth <= maxDepth; depth++) {
     try {
       const parsed = JSON.parse(readFile((0, import_node_path2.join)(dir, basename)));
       if ("object" === typeof parsed && parsed !== null) {
-        const value = parsed[field];
-        if ("string" === typeof value && value.length > 0) return value;
+        const value = accept(parsed[field]);
+        if (value !== void 0) return value;
       }
     } catch {
     }
@@ -4639,7 +4678,14 @@ function readNearestField(startDir, basename, field, readFile, maxDepth) {
   return void 0;
 }
 function readNearestPackageName(startDir, readFile = readFileOrThrow) {
-  return readNearestField(startDir, "package.json", "name", readFile, MAX_PACKAGE_SEARCH_DEPTH);
+  return readNearestField(
+    startDir,
+    "package.json",
+    "name",
+    readFile,
+    MAX_PACKAGE_SEARCH_DEPTH,
+    nonEmptyString
+  );
 }
 function readConfiguredProjectId(startDir, readFile = readFileOrThrow) {
   return readNearestField(
@@ -4647,7 +4693,18 @@ function readConfiguredProjectId(startDir, readFile = readFileOrThrow) {
     RETICLE_CONFIG_BASENAME,
     "projectId",
     readFile,
-    MAX_CONFIG_SEARCH_DEPTH
+    MAX_CONFIG_SEARCH_DEPTH,
+    nonEmptyString
+  );
+}
+function readConfiguredPort(startDir, readFile = readFileOrThrow) {
+  return readNearestField(
+    startDir,
+    RETICLE_CONFIG_BASENAME,
+    "port",
+    readFile,
+    MAX_CONFIG_SEARCH_DEPTH,
+    tcpPort
   );
 }
 function resolveProjectId(explicit, cwd, readPkgName = readNearestPackageName, readConfiguredId = readConfiguredProjectId) {
@@ -4669,6 +4726,9 @@ function stateHome(env = process.env) {
   return override !== void 0 && override.length > 0 ? override : (0, import_node_path3.join)((0, import_node_os.homedir)(), ReticleDir.ROOT);
 }
 
+// src/plugin-name.ts
+var RETICLE_VITE_PLUGIN_NAME = "reticle";
+
 // src/discover-port.ts
 function isAlive(pid) {
   try {
@@ -4678,7 +4738,7 @@ function isAlive(pid) {
     return false;
   }
 }
-function discoverDaemonPort(projectId, home = stateHome(), alive = isAlive) {
+function discoverDaemonPort(projectId, home = stateHome(), alive = isAlive, configured) {
   const entries = [];
   let files;
   try {
@@ -4696,7 +4756,27 @@ function discoverDaemonPort(projectId, home = stateHome(), alive = isAlive) {
     } catch {
     }
   }
-  return pickDaemonPort(entries, projectId, alive) ?? void 0;
+  return pickDaemonPort(entries, projectId, alive, configured) ?? void 0;
+}
+var portConflictWarning = (explicit, configured, used) => `[${RETICLE_VITE_PLUGIN_NAME}] reticle({ port: ${String(explicit)} }) and "port": ${String(configured)} in .reticle.json disagree; connecting to ${String(used)}. The daemon and the CLI follow .reticle.json, so drop the port option from reticle() or make the two match.`;
+function chooseDaemonPort(sources) {
+  const { discovered, configured, explicit } = sources;
+  const port = discovered ?? configured ?? explicit;
+  if (explicit === void 0 || configured === void 0 || port === void 0) {
+    return { port, warning: void 0 };
+  }
+  return {
+    port,
+    warning: explicit === configured ? void 0 : portConflictWarning(explicit, configured, port)
+  };
+}
+function resolveDaemonPort(explicit, projectId, cwd) {
+  const configured = readConfiguredPort(cwd);
+  return chooseDaemonPort({
+    discovered: discoverDaemonPort(projectId, stateHome(), isAlive, configured),
+    configured,
+    explicit
+  });
 }
 
 // src/announce.ts
@@ -4811,6 +4891,51 @@ function stampSvelte(code, id, load = defaultLoadCompiler) {
   return out;
 }
 
+// src/stamping.ts
+var import_core6 = require("@babel/core");
+var import_babel_plugin = __toESM(require("@reticlehq/babel-plugin"), 1);
+var import_ignore = require("@reticlehq/babel-plugin/ignore");
+var JSX_FILE = /\.[jt]sx$/;
+var VIRTUAL_PREFIX = "\0";
+var NODE_MODULES = "node_modules";
+function stampableId(id) {
+  if (id.startsWith(VIRTUAL_PREFIX)) return null;
+  if (id.includes(NODE_MODULES)) return null;
+  return id.split("?")[0] ?? id;
+}
+var TEST_FILE = /(?:\.(?:test|spec)\.[^./]+$)|(?:^|\/)__tests__\//;
+function shouldStamp(id) {
+  const clean = stampableId(id);
+  if (null === clean) return false;
+  if (TEST_FILE.test(clean)) return false;
+  return JSX_FILE.test(clean);
+}
+function shouldStampSvelte(id) {
+  const clean = stampableId(id);
+  return clean !== null && SVELTE_FILE.test(clean);
+}
+function stamp(code, id) {
+  const out = (0, import_core6.transformSync)(code, {
+    filename: id,
+    plugins: [import_babel_plugin.default],
+    parserOpts: { plugins: ["jsx", "typescript"] },
+    sourceMaps: true,
+    configFile: false,
+    babelrc: false
+  });
+  if (out?.code === void 0 || null === out.code) return null;
+  return {
+    code: out.code,
+    map: out.map === void 0 || null === out.map ? null : JSON.stringify(out.map)
+  };
+}
+function optsOutOfStamping(code, id) {
+  return (shouldStamp(id) || shouldStampSvelte(id)) && (0, import_ignore.isSourceStampingIgnored)(code);
+}
+function ignoredFileNotice(id) {
+  return `[reticle] ${id} opts out of source stamping (${RETICLE_IGNORE_MARKER} on its first line) \u2014 elements in it will have no file:line.`;
+}
+
 // src/installed.ts
 var import_node_fs5 = require("node:fs");
 var import_node_path7 = require("node:path");
@@ -4909,14 +5034,234 @@ function optimizerOptions(key, inherited, add) {
   };
 }
 
-// src/plugin-name.ts
-var RETICLE_VITE_PLUGIN_NAME = "reticle";
+// src/disabled-browser-stub.ts
+var RETICLE_DISABLED_STUB = "\0reticle-disabled-stub";
+var BUILD_COMMAND = "build";
+var PRODUCTION_MODE = "production";
+var isReticleDisabledBuild = (desktop, command, mode) => BUILD_COMMAND === command && (!desktop || mode === void 0 || PRODUCTION_MODE === mode);
+var RETICLE_DISABLED_STUB_CODE = `
+export class Reticle {
+  connect() {}
+  signal() {}
+  state() {}
+  renderCommit() {}
+  describe() {}
+  endSession() {}
+  observeHotUpdates() {}
+  disconnect() {}
+
+  get connected() {
+    return false;
+  }
+}
+
+export const reticle = new Reticle();
+
+export const SESSION_AUTO = 'auto';
+
+export function setIgnoreSelectors() {}
+
+export function registerAdapter() {}
+export function identifyComponent() {
+  return null;
+}
+export function readComponentState() {
+  return undefined;
+}
+export function elementHasHoverHandlers() {
+  return false;
+}
+export function adapterNames() {
+  return [];
+}
+
+export function registerStore() {}
+export function unregisterStore() {}
+export function storeNames() {
+  return [];
+}
+export function readStores() {
+  return {};
+}
+export function readStoresWithTruncation() {
+  return { stores: {} };
+}
+export function sourceOwner() {
+  return undefined;
+}
+export function markAdapterSource() {}
+
+export function tanstackQueryStore() {
+  return undefined;
+}
+export function jotaiStore() {
+  return undefined;
+}
+export function xstateStore() {
+  return undefined;
+}
+export function valtioStore() {
+  return undefined;
+}
+export function mobxStore() {
+  return undefined;
+}
+export function recoilStore() {
+  return undefined;
+}
+export function svelteStore() {
+  return undefined;
+}
+export function piniaStore() {
+  return undefined;
+}
+export function pushStore() {
+  return undefined;
+}
+
+export function registerCapabilities() {}
+export function getCapabilities() {
+  return {};
+}
+export function hasCapabilities() {
+  return false;
+}
+export function setCapabilitiesListener() {}
+
+export function createReticleEmitter() {
+  return {
+    signal() {},
+    state() {},
+  };
+}
+
+export function commitAndSignal() {}
+export function registerReticleDomain() {}
+
+export function buildSnapshot() {
+  return {};
+}
+
+export function inspectChart() {
+  return {};
+}
+export function canvasChartData() {
+  return {};
+}
+
+export function matchQuery() {
+  return false;
+}
+export function runQuery() {
+  return undefined;
+}
+
+export function executeAction() {
+  return undefined;
+}
+export function executeSequence() {
+  return undefined;
+}
+
+export function describe() {
+  return undefined;
+}
+export function getRole() {
+  return undefined;
+}
+export function getAccessibleName() {
+  return undefined;
+}
+export function getStates() {
+  return {};
+}
+export function isVisible() {
+  return false;
+}
+
+export class RefRegistry {
+  get size() {
+    return 0;
+  }
+
+  markEdited() {}
+
+  mintedBeforeLastEdit() {
+    return false;
+  }
+
+  refFor() {
+    return undefined;
+  }
+
+  resolve() {
+    return null;
+  }
+}
+
+export const refs = new RefRegistry();
+
+export class Annotator {
+  constructor() {}
+
+  get active() {
+    return false;
+  }
+
+  get markCount() {
+    return 0;
+  }
+
+  mount() {}
+  unmount() {}
+}
+
+export function installAnnotator() {}
+
+export function resolveMarkAnchor() {
+  return undefined;
+}
+`;
+
+// src/connect-args.ts
+function connectArgs(options) {
+  const args = {};
+  const port = options.port ?? RETICLE_DEFAULT_PORT;
+  if (port !== RETICLE_DEFAULT_PORT) args["url"] = bridgeWsUrl(port);
+  if (options.session !== void 0) args["session"] = options.session;
+  if (options.projectId !== void 0) args["projectId"] = options.projectId;
+  if (options.token !== void 0) args["token"] = options.token;
+  if (options.root !== void 0 && options.root.length > 0) args["root"] = options.root;
+  if (options.sdkVersion !== void 0 && options.sdkVersion.length > 0) {
+    args["sdkVersion"] = options.sdkVersion;
+  }
+  if (true === options.desktop) args["allowInProduction"] = true;
+  if (true === options.captureNetworkBodies || "1" === process.env["VITE_RETICLE_CAPTURE_BODIES"]) {
+    args["captureNetworkBodies"] = true;
+  }
+  if (false === options.sourceMapping) args["sourceMapping"] = false;
+  if (false === options.captureErrorBodies || "1" === process.env["VITE_RETICLE_NO_ERROR_BODIES"]) {
+    args["captureErrorBodies"] = false;
+  }
+  const envBodyChars = Number(process.env["VITE_RETICLE_BODY_MAX_CHARS"]);
+  const bodyChars = options.networkBodyMaxChars ?? (Number.isFinite(envBodyChars) && envBodyChars > 0 ? envBodyChars : void 0);
+  if (bodyChars !== void 0) {
+    args["networkBodyMaxChars"] = bodyChars;
+  }
+  if (true === options.exposePresenter || "1" === process.env["VITE_RETICLE_EXPOSE_PRESENTER"]) {
+    args["exposePresenter"] = true;
+  }
+  if (true === options.allowNonLocalhost || "1" === process.env["VITE_RETICLE_ALLOW_NON_LOCALHOST"]) {
+    args["allowNonLocalhost"] = true;
+  }
+  return Object.keys(args).length > 0 ? JSON.stringify(args) : "";
+}
 
 // src/injection-postcondition.ts
 var DEV_INJECTION_GRACE_MS = 1e4;
 var notInjectedMessage = () => `[${RETICLE_VITE_PLUGIN_NAME}] could not inject reticle.connect(): the HTML entry module was never matched, so this app carries no instrumentation and will never connect. Check that index.html references your entry with a <script type="module" src="...">, or pass \`inject: false\` and call reticle.connect({ token: __RETICLE_TOKEN__ }) yourself. The plugin still inlines that define; a connect without it is refused.`;
 var unconfirmedInjectionMessage = () => `[${RETICLE_VITE_PLUGIN_NAME}] could not confirm reticle.connect() was injected: the HTML entry module was not transformed this session. That is expected when Vite served it from its transform cache. If the app does not appear in \`reticle status\`, restart the dev server with \`--force\` to bypass the cache, then check that index.html references your entry with a <script type="module" src="...">.`;
-var htmlHookNeverRanMessage = () => `[${RETICLE_VITE_PLUGIN_NAME}] this app will never connect: the dev server never asked this plugin to transform any HTML, so reticle.connect() was never added to the page. That usually means your framework renders its own HTML instead of serving index.html \u2014 SvelteKit, Nuxt, Astro, React Router (framework mode) and TanStack Start all do. Fix: import '@reticlehq/browser' and call reticle.connect({ token: __RETICLE_TOKEN__ }) yourself from your app entry file, and pass \`inject: false\` to this plugin so the two do not both try.`;
+var htmlHookNeverRanMessage = (connectModule) => `[${RETICLE_VITE_PLUGIN_NAME}] this app will never connect: the dev server never asked this plugin to transform any HTML and nothing loaded its connect module, so reticle.connect() never reached the page. That usually means your framework renders its own HTML instead of serving index.html \u2014 SvelteKit, Nuxt, Astro, React Router (framework mode) and TanStack Start all do. Fix: in dev, dynamically import '${connectModule}' from your client entry file \u2014 this plugin serves that module, so leave \`inject\` on \u2014 or import '@reticlehq/browser' there and call reticle.connect({ token: __RETICLE_TOKEN__ }) yourself.`;
 var defaultSchedule = (run, ms) => {
   const timer = setTimeout(run, ms);
   timer.unref?.();
@@ -4925,9 +5270,9 @@ function createInjectionWatch(deps) {
   let htmlRequested = false;
   const isDocumentRequest = (req) => true === req.headers?.accept?.includes("text/html");
   const checkHtmlHookRan = () => {
-    if (deps.desktop || !deps.inject || deps.htmlTransformed()) return;
+    if (deps.desktop || !deps.inject || deps.connectDelivered()) return;
     if (!htmlRequested) return;
-    deps.warn(htmlHookNeverRanMessage());
+    deps.warn(htmlHookNeverRanMessage(deps.connectModule()));
   };
   const noteHtmlRequest = () => {
     if (htmlRequested) return;
@@ -4967,9 +5312,6 @@ function isVitestBrowserServer(config) {
 var RETICLE_PACKAGE2 = "@reticlehq/react";
 var RETICLE_SENSOR = "@reticlehq/browser";
 var RETICLE_TOKEN_GLOBAL = "__RETICLE_TOKEN__";
-var JSX_FILE = /\.[jt]sx$/;
-var VIRTUAL_PREFIX = "\0";
-var NODE_MODULES = "node_modules";
 var RETICLE_CONNECT_MODULE = "/@reticle-connect";
 function connectModuleUrl(base) {
   if (void 0 === base || !base.startsWith("/")) return RETICLE_CONNECT_MODULE;
@@ -5004,34 +5346,6 @@ function isHtmlEntry(id, specifier, root) {
   }
   return candidate.endsWith(target.startsWith("/") ? target : `/${target}`);
 }
-function stampableId(id) {
-  if (id.startsWith(VIRTUAL_PREFIX)) return null;
-  if (id.includes(NODE_MODULES)) return null;
-  return id.split("?")[0] ?? id;
-}
-function shouldStamp(id) {
-  const clean = stampableId(id);
-  return clean !== null && JSX_FILE.test(clean);
-}
-function shouldStampSvelte(id) {
-  const clean = stampableId(id);
-  return clean !== null && SVELTE_FILE.test(clean);
-}
-function stamp(code, id) {
-  const out = (0, import_core6.transformSync)(code, {
-    filename: id,
-    plugins: [import_babel_plugin.default],
-    parserOpts: { plugins: ["jsx", "typescript"] },
-    sourceMaps: true,
-    configFile: false,
-    babelrc: false
-  });
-  if (out?.code === void 0 || null === out.code) return null;
-  return {
-    code: out.code,
-    map: out.map === void 0 || null === out.map ? null : JSON.stringify(out.map)
-  };
-}
 function readPairingToken() {
   const override = process.env[ReticleEnv.PAIRING_TOKEN_DIR];
   const dir = override !== void 0 && override.length > 0 ? override : (0, import_node_path8.join)((0, import_node_os2.homedir)(), ReticleDir.ROOT);
@@ -5046,33 +5360,6 @@ function warnIfTokenMissing(token) {
   }
   return token;
 }
-function connectArgs(options) {
-  const args = {};
-  const port = options.port ?? RETICLE_DEFAULT_PORT;
-  if (port !== RETICLE_DEFAULT_PORT) args["url"] = bridgeWsUrl(port);
-  if (options.session !== void 0) args["session"] = options.session;
-  if (options.projectId !== void 0) args["projectId"] = options.projectId;
-  if (options.token !== void 0) args["token"] = options.token;
-  if (options.root !== void 0 && options.root.length > 0) args["root"] = options.root;
-  if (options.sdkVersion !== void 0 && options.sdkVersion.length > 0) {
-    args["sdkVersion"] = options.sdkVersion;
-  }
-  if (true === options.desktop) args["allowInProduction"] = true;
-  if (true === options.captureNetworkBodies || "1" === process.env["VITE_RETICLE_CAPTURE_BODIES"]) {
-    args["captureNetworkBodies"] = true;
-  }
-  if (false === options.sourceMapping) args["sourceMapping"] = false;
-  if (false === options.captureErrorBodies || "1" === process.env["VITE_RETICLE_NO_ERROR_BODIES"]) {
-    args["captureErrorBodies"] = false;
-  }
-  if (true === options.exposePresenter || "1" === process.env["VITE_RETICLE_EXPOSE_PRESENTER"]) {
-    args["exposePresenter"] = true;
-  }
-  if (true === options.allowNonLocalhost || "1" === process.env["VITE_RETICLE_ALLOW_NON_LOCALHOST"]) {
-    args["allowNonLocalhost"] = true;
-  }
-  return Object.keys(args).length > 0 ? JSON.stringify(args) : "";
-}
 var RETICLE_DEV_MODULE_CANDIDATES = [
   "src/reticle-dev.ts",
   "src/reticle-dev.js",
@@ -5131,13 +5418,22 @@ function reticle(options = {}) {
   let htmlEntrySpecifier;
   let root;
   let command;
+  let mode;
+  const disabledBuild = () => isReticleDisabledBuild(desktop, command, mode);
   let base;
   let vitestBrowser = false;
   const warn = options.onWarn ?? ((message) => globalThis.console.warn(message));
   let injected = false;
+  const announcedIgnored = /* @__PURE__ */ new Set();
   let htmlTransformed = false;
+  let connectDelivered = false;
+  let lastPortWarning;
   const resolveLazy = () => {
-    const port = resolved.port ?? discoverDaemonPort(resolved.projectId);
+    const { port, warning } = resolveDaemonPort(resolved.port, resolved.projectId, process.cwd());
+    if (warning !== void 0 && warning !== lastPortWarning) {
+      lastPortWarning = warning;
+      warn(warning);
+    }
     const withPort = port !== void 0 ? { ...resolved, port } : resolved;
     const token = withPort.token ?? readPairingToken();
     const withToken = token !== void 0 ? { ...withPort, token } : withPort;
@@ -5152,15 +5448,12 @@ function reticle(options = {}) {
     desktop,
     inject,
     injected: () => injected,
-    htmlTransformed: () => htmlTransformed,
+    connectDelivered: () => htmlTransformed || connectDelivered,
+    connectModule: () => connectModuleUrl(base),
     warn
   });
   return {
     name: RETICLE_VITE_PLUGIN_NAME,
-    // Web: serve-only, so a production bundle can never carry the SDK — gating is the tool's job.
-    // Desktop: a packaged renderer IS a production build with no dev server, so the plugin must also
-    // run for `vite build` or the shipped app has no connect() at all.
-    ...true === options.desktop ? {} : { apply: "serve" },
     enforce: "pre",
     /**
      * Declare the SDK itself and the optimizer cache fingerprint.
@@ -5244,6 +5537,10 @@ function reticle(options = {}) {
       };
     },
     transform(code, id) {
+      if (disabledBuild()) return null;
+      if (!connectDelivered && code.includes(RETICLE_TOKEN_GLOBAL) && !id.includes(NODE_MODULES)) {
+        connectDelivered = true;
+      }
       if (desktop && inject && isHtmlEntry(id, htmlEntrySpecifier, root)) {
         injected = true;
         const withConnect = `${connectModuleSource(resolveLazy())}
@@ -5252,6 +5549,13 @@ ${code}`;
         return stamped ?? { code: withConnect, map: null };
       }
       if (!sourceMapping) return null;
+      if (optsOutOfStamping(code, id)) {
+        if (!announcedIgnored.has(id)) {
+          announcedIgnored.add(id);
+          warn(ignoredFileNotice(id));
+        }
+        return null;
+      }
       if (shouldStampSvelte(id)) {
         const stamped = stampSvelte(code, id);
         return null === stamped ? null : { code: stamped, map: null };
@@ -5260,20 +5564,28 @@ ${code}`;
       return stamp(code, id);
     },
     resolveId(id, importer) {
+      if (disabledBuild() && id === RETICLE_SENSOR) {
+        return RETICLE_DISABLED_STUB;
+      }
       if (desktop && inject && importer !== void 0 && importer.includes(".html")) {
         htmlEntrySpecifier = id;
       }
       return inject && id === RETICLE_CONNECT_MODULE ? RETICLE_CONNECT_MODULE : null;
     },
     load(id) {
+      if (disabledBuild() && id === RETICLE_DISABLED_STUB) {
+        return RETICLE_DISABLED_STUB_CODE;
+      }
       if (!inject || id !== RETICLE_CONNECT_MODULE) return null;
       const source = currentConnectSource();
       lastServedConnectSource = source;
+      connectDelivered = true;
       return source;
     },
     configResolved(config) {
       root = config.root;
       command = config.command;
+      mode = config.mode;
       base = config.base;
       vitestBrowser = isVitestBrowserServer(config);
     },
@@ -5298,7 +5610,6 @@ ${code}`;
      * appearing IS a change), and makes the module inert once it has settled.
      */
     configureServer(server) {
-      if (!inject) return;
       const announce = () => {
         const address = server.httpServer?.address();
         const port = "object" === typeof address && null !== address && void 0 !== address ? address.port : void 0;
@@ -5323,6 +5634,7 @@ ${code}`;
       } else {
         announce();
       }
+      if (!inject) return;
       server.middlewares.use((req, _res, next) => {
         if (!desktop && watch.isDocumentRequest(req)) watch.noteHtmlRequest();
         const requestPath = (req.url ?? "").split("?")[0];
@@ -5343,13 +5655,14 @@ ${code}`;
      * build that could not instrument must fail loudly instead of shipping a binary that lies.
      */
     buildEnd() {
-      if (!desktop || !inject || injected) return;
+      if (!desktop || !inject || injected || disabledBuild()) return;
       throw new Error(notInjectedMessage());
     },
     checkInjectedForTest: watch.checkInjected,
     checkHtmlHookForTest: watch.checkHtmlHookRan,
     injectionWatchForTest: watch,
     transformIndexHtml() {
+      if (disabledBuild()) return [];
       htmlTransformed = true;
       if (desktop && inject && "serve" === command) watch.armDesktopCheck();
       if (!inject || desktop) return [];