@tendrilapp/cli 0.1.49 → 0.1.50

package/dist/tendril.js

@@ -841,6 +841,46 @@ import { createHash } from "node:crypto";
 import { existsSync } from "node:fs";
 import path from "node:path";
 import { z as z4 } from "zod";
+function congruenceProjection(node, isRoot) {
+  return {
+    id: node.id,
+    name: node.name,
+    type: node.type,
+    ...isRoot ? {} : { ...node.x !== void 0 ? { x: node.x } : {}, ...node.y !== void 0 ? { y: node.y } : {} },
+    ...node.width !== void 0 ? { width: node.width } : {},
+    ...node.height !== void 0 ? { height: node.height } : {},
+    ...node.hidden === true ? { hidden: true } : {},
+    children: node.children.map((c) => congruenceProjection(c, false))
+  };
+}
+function metadataCongruent(recordedText, candidateDocument, parse2) {
+  const recorded = parse2(recordedText);
+  if (recorded.truncated === true) return { ok: false, divergence: "the recorded metadata parse is TRUNCATED \u2014 congruence cannot be established over a partial truth; re-record the metadata first" };
+  const candidate = parse2(synthesizeMetadataMarkup(candidateDocument));
+  const a = recorded.roots.map((r) => congruenceProjection(r, true));
+  const b = candidate.roots.map((r) => congruenceProjection(r, true));
+  const left = JSON.stringify(a);
+  const right = JSON.stringify(b);
+  if (left === right) return { ok: true };
+  const flat = (nodes, out) => {
+    for (const n of nodes) {
+      out.set(n.id, n);
+      flat(n.children, out);
+    }
+    return out;
+  };
+  const am = flat(a, /* @__PURE__ */ new Map());
+  const bm = flat(b, /* @__PURE__ */ new Map());
+  for (const [id, n] of am) {
+    const m = bm.get(id);
+    if (m === void 0) return { ok: false, divergence: `recorded node ${id} ("${n.name}") is no longer in the document` };
+    if (JSON.stringify({ ...n, children: [] }) !== JSON.stringify({ ...m, children: [] })) {
+      return { ok: false, divergence: `node ${id} ("${n.name}") changed since recording (name, box, type or visibility)` };
+    }
+  }
+  for (const id of bm.keys()) if (!am.has(id)) return { ok: false, divergence: `the document gained node ${id} the recording never contained` };
+  return { ok: false, divergence: "tree shape changed since recording" };
+}
 function resolveRepEnvelopePath(setDir, slug, kind) {
   return resolveRepEnvelopePathIn(path.join(setDir, slug), kind);
 }
@@ -936,13 +976,14 @@ function deriveMetadataEnvelope(restNodesBytes, nodeId) {
     }
   };
 }
-var REST_SCREENSHOT_FILE, REST_NODES_FILE, REST_METADATA_FILE, RestNodesEnvelopeSchema, RestScreenshotEnvelopeSchema, RestMetadataEnvelopeSchema, TYPE_TO_TAG, num;
+var REST_SCREENSHOT_FILE, REST_NODES_FILE, REST_METADATA_FILE, REST_INSTANCES_FILE, RestNodesEnvelopeSchema, RestScreenshotEnvelopeSchema, RestInstancesEnvelopeSchema, RestMetadataEnvelopeSchema, TYPE_TO_TAG, num;
 var init_rest_envelopes = __esm({
   "packages/figma/src/recording/rest-envelopes.ts"() {
     "use strict";
     REST_SCREENSHOT_FILE = "rest_screenshot.json";
     REST_NODES_FILE = "rest_nodes.json";
     REST_METADATA_FILE = "rest_metadata.json";
+    REST_INSTANCES_FILE = "rest_instances.json";
     RestNodesEnvelopeSchema = z4.object({
       url: z4.string().max(2048),
       params: z4.object({ ids: z4.string().max(4096) }).strict(),
@@ -960,6 +1001,23 @@ var init_rest_envelopes = __esm({
       imageUrl: z4.string().max(2048),
       content: z4.array(z4.object({ type: z4.literal("image"), data: z4.string() })).length(1)
     }).strict();
+    RestInstancesEnvelopeSchema = z4.object({
+      url: z4.string().max(2048),
+      params: z4.object({ ids: z4.string().max(4096) }).strict(),
+      status: z4.number().int(),
+      fileVersion: z4.string().max(128).optional(),
+      fetchedAt: z4.string().max(64),
+      /** "captured" file identity came from the manifest; "asserted"
+       * came from an operator's --file flag at enrich time (disclosed
+       * on every binding it produces). */
+      fileIdentity: z4.enum(["captured", "asserted"]),
+      verifiedAgainst: z4.object({
+        metadataSha256: z4.string().length(64),
+        screenshotSha256: z4.string().length(64).optional(),
+        contextSha256: z4.string().length(64).optional()
+      }).strict(),
+      nodes: z4.record(z4.string(), z4.unknown())
+    }).strict();
     RestMetadataEnvelopeSchema = z4.object({
       derived: z4.object({ from: z4.literal(REST_NODES_FILE), sha256: z4.string().length(64) }).strict(),
       content: z4.array(z4.object({ type: z4.literal("text"), text: z4.string() })).length(1)
@@ -1178,6 +1236,7 @@ var init_envelope_content = __esm({
 import { existsSync as existsSync2, mkdirSync, readFileSync, writeFileSync } from "node:fs";
 import path2 from "node:path";
 import { z as z5 } from "zod";
+import { createHash as createHash2 } from "node:crypto";
 function manifestMains(manifest) {
   const roles = manifest.roles;
   return roles?.main ?? [];
@@ -1512,6 +1571,68 @@ function ingestRestArtifacts(setDir, slug, input) {
 `);
   return { overwrote };
 }
+function enrichRepBindings(setDir, slug, input) {
+  const manifest = loadManifest(setDir);
+  const rep = manifest.reps.find((r) => r.slug === slug);
+  if (rep === void 0) return { ok: false, refusal: `unknown rep "${slug}" \u2014 not in the planned manifest` };
+  if (repChannel(manifest, slug) === "rest") {
+    return { ok: false, refusal: `${slug} records over REST \u2014 rest_nodes.json already carries its bindings; nothing to enrich` };
+  }
+  if (existsSync2(containedPath(setDir, slug, REST_NODES_FILE))) {
+    return { ok: false, refusal: `${slug} holds BOTH channel families (invalid rep) \u2014 repair the recording before enriching` };
+  }
+  const metadataFile = containedPath(setDir, slug, "get_metadata.json");
+  if (!existsSync2(metadataFile)) return { ok: false, refusal: `${slug} has no recorded metadata \u2014 congruence has nothing to verify against` };
+  let recordedText;
+  try {
+    recordedText = envelopeTextContent(JSON.parse(readFileSync(metadataFile, "utf8")));
+  } catch {
+    return { ok: false, refusal: `${slug}'s recorded metadata is unreadable \u2014 re-record it before enriching` };
+  }
+  const doc = input.fetchedEntry?.document;
+  if (doc === void 0) return { ok: false, refusal: `the fetch returned no document for ${slug} (${rep.nodeId})` };
+  const congruent = metadataCongruent(recordedText, doc, parseMetadataForest);
+  if (!congruent.ok) return { ok: false, refusal: `${slug} REFUSED \u2014 the document diverged from the recording: ${congruent.divergence}` };
+  const sha = (name) => {
+    const file = containedPath(setDir, slug, name);
+    return existsSync2(file) ? createHash2("sha256").update(readFileSync(file)).digest("hex") : void 0;
+  };
+  const envelope = {
+    url: input.url,
+    params: { ids: rep.nodeId },
+    status: input.status,
+    ...input.fileVersion !== void 0 ? { fileVersion: input.fileVersion } : {},
+    fetchedAt: input.fetchedAt,
+    fileIdentity: input.fileIdentity,
+    verifiedAgainst: {
+      metadataSha256: sha("get_metadata.json"),
+      ...sha("get_screenshot.json") !== void 0 ? { screenshotSha256: sha("get_screenshot.json") } : {},
+      ...sha("get_design_context.json") !== void 0 ? { contextSha256: sha("get_design_context.json") } : {}
+    },
+    nodes: { [rep.nodeId]: input.fetchedEntry }
+  };
+  const parsed = RestInstancesEnvelopeSchema.safeParse(envelope);
+  if (!parsed.success) return { ok: false, refusal: `${slug}/${REST_INSTANCES_FILE} was NOT written \u2014 ${parsed.error.issues[0]?.message ?? "invalid"}` };
+  const bytes = `${JSON.stringify(envelope, null, 1)}
+`;
+  if (input.accessToken !== "" && bytes.includes(input.accessToken)) {
+    return { ok: false, refusal: `${slug} bindings were NOT written \u2014 the payload contains the live Figma credential, which must never enter a recording` };
+  }
+  writeFileSync(containedPath(setDir, slug, REST_INSTANCES_FILE), bytes);
+  const count = (() => {
+    let n = 0;
+    const walk2 = (node) => {
+      if (node.type === "INSTANCE") {
+        n += 1;
+        return;
+      }
+      if (Array.isArray(node.children)) for (const c of node.children) walk2(c);
+    };
+    walk2(doc);
+    return n;
+  })();
+  return { ok: true, instances: count };
+}
 function envelopeTextContent(env) {
   const parts = env?.content ?? [];
   return parts.map((c) => c.text ?? "").filter((t) => t !== "").join("\n");
@@ -1549,6 +1670,7 @@ var init_session = __esm({
     init_envelope_content();
     init_plan();
     init_rest_envelopes();
+    init_normalize();
     RECORD_TOOLS = ["get_design_context", "get_metadata", "get_screenshot", "get_variable_defs", "get_metadata_interior", "get_motion_context"];
     INTERIOR_TOOL = "get_metadata_interior";
     REQUIRED_TOOLS = ["get_design_context", "get_metadata", "get_screenshot"];
@@ -1732,7 +1854,7 @@ var init_visibility = __esm({
 });
 
 // packages/figma/src/recording/compose.ts
-import { createHash as createHash2 } from "node:crypto";
+import { createHash as createHash3 } from "node:crypto";
 import { existsSync as existsSync4, readFileSync as readFileSync3, readdirSync, statSync } from "node:fs";
 import path4 from "node:path";
 import { z as z6 } from "zod";
@@ -1841,29 +1963,56 @@ function emissionTails(setDir, repSlug) {
   }
   return byHead;
 }
-function restInstancePoses(setDir, repSlug, nodeId) {
-  const repDir = path4.join(setDir, repSlug);
-  if (!resolveRepEnvelopePathIn(repDir, "metadata").endsWith(REST_METADATA_FILE)) return /* @__PURE__ */ new Map();
-  const file = path4.join(repDir, REST_NODES_FILE);
-  if (!existsSync4(file)) return /* @__PURE__ */ new Map();
-  let doc;
-  try {
-    const parsed = JSON.parse(readFileSync3(file, "utf8"));
-    doc = parsed.nodes?.[nodeId]?.document;
-  } catch {
-    return /* @__PURE__ */ new Map();
-  }
+function bindingsFromEntry(entry) {
   const out = /* @__PURE__ */ new Map();
+  const components = entry?.components ?? {};
   const walk2 = (n) => {
     if (n.type === "INSTANCE") {
-      if (typeof n.id === "string" && typeof n.componentId === "string") out.set(n.id, n.componentId);
+      if (typeof n.id === "string" && typeof n.componentId === "string") {
+        const setId = components[n.componentId]?.componentSetId;
+        out.set(n.id, { componentId: n.componentId, ...typeof setId === "string" ? { componentSetId: setId } : {} });
+      }
       return;
     }
     if (Array.isArray(n.children)) for (const c of n.children) walk2(c);
   };
+  const doc = entry?.document;
   if (doc !== null && typeof doc === "object") walk2(doc);
   return out;
 }
+function restInstancePoses(setDir, repSlug, nodeId) {
+  const repDir = path4.join(setDir, repSlug);
+  const metadataPath = resolveRepEnvelopePathIn(repDir, "metadata");
+  if (!existsSync4(metadataPath)) return NO_BINDINGS;
+  const restNodes = path4.join(repDir, REST_NODES_FILE);
+  if (metadataPath.endsWith(REST_METADATA_FILE)) {
+    if (!existsSync4(restNodes)) return NO_BINDINGS;
+    try {
+      const parsed = JSON.parse(readFileSync3(restNodes, "utf8"));
+      return { bindings: bindingsFromEntry(parsed.nodes?.[nodeId]), source: "captured" };
+    } catch {
+      return NO_BINDINGS;
+    }
+  }
+  if (existsSync4(restNodes)) return NO_BINDINGS;
+  const enriched = path4.join(repDir, REST_INSTANCES_FILE);
+  if (!existsSync4(enriched)) return NO_BINDINGS;
+  try {
+    const parsed = JSON.parse(readFileSync3(enriched, "utf8"));
+    const shaOfPath = (f) => existsSync4(f) ? createHash3("sha256").update(readFileSync3(f)).digest("hex") : void 0;
+    const v = parsed.verifiedAgainst;
+    const staleReasons = v?.metadataSha256 !== shaOfPath(metadataPath) || v?.screenshotSha256 !== void 0 && v.screenshotSha256 !== shaOfPath(resolveRepEnvelopePathIn(repDir, "screenshot")) || v?.contextSha256 !== void 0 && v.contextSha256 !== shaOfPath(path4.join(repDir, "get_design_context.json"));
+    if (staleReasons) return { bindings: /* @__PURE__ */ new Map(), source: "enriched", stale: true, ...typeof parsed.fetchedAt === "string" ? { fetchedAt: parsed.fetchedAt } : {} };
+    return {
+      bindings: bindingsFromEntry(parsed.nodes?.[nodeId]),
+      source: "enriched",
+      ...typeof parsed.fetchedAt === "string" ? { fetchedAt: parsed.fetchedAt } : {},
+      ...parsed.fileIdentity === "asserted" ? { identityAsserted: true } : {}
+    };
+  } catch {
+    return NO_BINDINGS;
+  }
+}
 function hostInstances(setDir, repSlug) {
   const metaFile = resolveRepEnvelopePathIn(path4.join(setDir, repSlug), "metadata");
   if (!existsSync4(metaFile)) return [];
@@ -1915,15 +2064,31 @@ function composeReport(index) {
           continue;
         }
         const tails = tailsByHead.get(inst.id) ?? /* @__PURE__ */ new Map();
-        const cid = cidByInstance.get(inst.id);
+        const binding = cidByInstance.bindings.get(inst.id);
+        const cid = binding?.componentId;
         const disclosures = [];
+        if (cidByInstance.stale === true) {
+          disclosures.push(
+            `an ENRICHMENT for this pose predates a re-record of its evidence \u2014 its bindings are IGNORED until the bindings fetch is re-run`
+          );
+        }
         const refused = [];
+        const staleRemediation = cidByInstance.stale === true ? { remediation: { kind: "re-bindings", hostSet: host.dir } } : {};
+        let cidIdentityRefused;
         const idCands = index.filter((c) => {
           if (c.dir === host.dir || sameComponent(c, host)) return false;
-          if (cid !== void 0 && c.variantNodeIds.has(cid)) return true;
+          if (cid !== void 0 && c.variantNodeIds.has(cid)) {
+            if (binding?.componentSetId === void 0 || c.componentSetNode === void 0 || binding.componentSetId === c.componentSetNode) return true;
+            cidIdentityRefused = c;
+          }
           for (const t of tails.keys()) if (c.ownIds.has(t)) return true;
           return false;
         });
+        if (cidIdentityRefused !== void 0) {
+          disclosures.push(
+            `binding identity REFUSED: Figma names component set ${binding?.componentSetId ?? "?"} for this instance while ${kitLabel(cidIdentityRefused)} captured set ${cidIdentityRefused.componentSetNode ?? "?"} \u2014 a lookalike variant id is not a pair`
+          );
+        }
         const survivors = [];
         for (const c of idCands) {
           if (host.figmaFile !== void 0 && c.figmaFile !== void 0 && c.figmaFile !== host.figmaFile) {
@@ -1969,18 +2134,23 @@ function composeReport(index) {
               disclosures: [
                 ...disclosures,
                 `NAME-ONLY proposal \u2014 identity unproven, name evidence never auto-joins: instance "${inst.name}" names ${nameProps.map(kitLabel).join(" / ")}. Name-only edges are NOT confirmable (there is nothing sound to confirm); record the partner so an id-backed join can form, or ignore`,
-                // The remediation is CONDITIONAL (review): componentId
-                // is a host-file-namespace id, so the promise holds
-                // only for same-file partners — and only when the host
-                // rep was recorded over MCP (a REST-recorded rep with
-                // no binding genuinely has none to capture).
-                ...repIsMcpRecorded && host.figmaFile !== void 0 && nameProps.some((p) => p.figmaFile === host.figmaFile) ? [
-                  `this host records over MCP, so Figma's instance\u2192component binding was never captured \u2014 re-recording the HOST over the REST channel makes this pair id-backed (a fresh recording, then a full host regeneration and re-verify)`
+                // The claim is CONDITIONAL (review): componentId is a
+                // host-file-namespace id, so the promise holds only
+                // for same-file partners (uncaptured identities get
+                // the attempt, disclosed) — and only when the host rep
+                // records over MCP (a REST-recorded rep with no
+                // binding genuinely has none to capture).
+                ...repIsMcpRecorded && !(host.figmaFile !== void 0 && nameProps.every((p) => p.figmaFile !== void 0 && p.figmaFile !== host.figmaFile)) ? [
+                  // Worded to stay clear of the free-forever
+                  // ratchet's \bfetch( pattern — prose, no call.
+                  `this host records over MCP, so Figma's instance\u2192component binding was never captured \u2014 one batched \`record bindings\` run makes an id-backed pairing possible without re-recording; re-recording the host over the REST channel is the heavier alternative`
                 ] : []
-              ]
+              ],
+              ...repIsMcpRecorded && !(host.figmaFile !== void 0 && nameProps.every((p) => p.figmaFile !== void 0 && p.figmaFile !== host.figmaFile)) ? { remediation: { kind: "bindings", hostSet: host.dir } } : {},
+              ...staleRemediation
             });
           } else if (disclosures.length > 0) {
-            edges.push({ hostSet: host.dir, hostRep: slug, instanceId: inst.id, instanceName: inst.name, kind: "external", partners: [], disclosures });
+            edges.push({ hostSet: host.dir, hostRep: slug, instanceId: inst.id, instanceName: inst.name, kind: "external", partners: [], disclosures, ...staleRemediation });
           }
           continue;
         }
@@ -1999,10 +2169,14 @@ function composeReport(index) {
         const group = eligible[0];
         const ownedDepths = [];
         for (const [t, d] of tails) if (group.some((m) => m.ownIds.has(t))) ownedDepths.push(d);
-        const cidBacked = cid !== void 0 && group.some((m) => m.variantNodeIds.has(cid));
+        const cidOwner = cid !== void 0 ? group.find((m) => m.variantNodeIds.has(cid)) : void 0;
+        const cidBacked = cidOwner !== void 0;
+        if (cidBacked && (binding?.componentSetId === void 0 || cidOwner.componentSetNode === void 0)) {
+          disclosures.push(`binding identity PARTIALLY proven: the component-set cross-check had a missing side (${binding?.componentSetId === void 0 ? "no components map in the fetched entry" : "partner's componentSetNode not captured"})`);
+        }
         const substitution = (ownedDepths.length > 0 || cidBacked) && ownedDepths.every((d) => d === 1);
         const poseVariants = /* @__PURE__ */ new Set();
-        if (cidBacked) poseVariants.add(cid);
+        if (cidBacked && cid !== void 0) poseVariants.add(cid);
         for (const m of group) {
           for (const [t, d] of tails) {
             if (d !== 1 || !m.ownIds.has(t)) continue;
@@ -2059,7 +2233,12 @@ function composeReport(index) {
           },
           disclosures: [
             ...disclosures,
-            `substitution-grade (${[...ownedDepths.length > 0 ? ["every owned emission id at depth 1"] : [], ...cidBacked ? ["Figma's instance\u2192component binding (componentId), recorded verbatim over REST"] : []].join(" + ")}); pixel-neutrality is NOT asserted here \u2014 instance overrides are measured real, and a per-region check is still future work (whole-frame pixels remain the evidence for composed regions)`
+            `substitution-grade (${[
+              ...ownedDepths.length > 0 ? ["every owned emission id at depth 1"] : [],
+              ...cidBacked ? [
+                cidByInstance.source === "enriched" ? `Figma's instance\u2192component binding (componentId), ENRICHED${cidByInstance.fetchedAt !== void 0 ? ` ${cidByInstance.fetchedAt}` : ""} \u2014 congruence-verified against the recorded metadata, NOT captured with the pixels${cidByInstance.identityAsserted === true ? "; file identity asserted at enrich time, not captured at record time" : ""}` : "Figma's instance\u2192component binding (componentId), recorded verbatim over REST"
+              ] : []
+            ].join(" + ")}); pixel-neutrality is NOT asserted here \u2014 instance overrides are measured real, and a per-region check is still future work (whole-frame pixels remain the evidence for composed regions)`
           ]
         });
       }
@@ -2153,7 +2332,7 @@ function confirmedCompositionStatus(hostSet) {
   return { rows, ...malformedEntries.length > 0 ? { malformed: malformedEntries.join("; ") } : {} };
 }
 function createHashHex(bytes) {
-  return createHash2("sha256").update(bytes).digest("hex");
+  return createHash3("sha256").update(bytes).digest("hex");
 }
 function liteIdentity(dir) {
   try {
@@ -2242,19 +2421,21 @@ function partnerOpportunities(partnerSet, roots) {
       });
     }
     if (byKind.proposal.length > 0) {
+      const remediation = byKind.proposal.find((e) => e.remediation !== void 0)?.remediation;
       opportunities.push({
         hostSet,
         hostDisplayName: hostName,
         kind: "name-only",
         instances: byKind.proposal.length,
         hostReps: [...new Set(byKind.proposal.map((e) => e.hostRep))],
-        disclosures: [...new Set(byKind.proposal.flatMap((e) => e.disclosures))]
+        disclosures: [...new Set(byKind.proposal.flatMap((e) => e.disclosures))],
+        ...remediation !== void 0 ? { remediation } : {}
       });
     }
   }
   return { opportunities, hostsWithUnreadableDecisions: unreadable };
 }
-var CompositionEntrySchema, norm, FOOTER, kitLabel, toPosixRel, fromStoredRel, pairKeyFor;
+var CompositionEntrySchema, norm, FOOTER, NO_BINDINGS, kitLabel, toPosixRel, fromStoredRel, pairKeyFor;
 var init_compose = __esm({
   "packages/figma/src/recording/compose.ts"() {
     "use strict";
@@ -2275,6 +2456,7 @@ var init_compose = __esm({
     });
     norm = (s) => s.toLowerCase().replace(/\s+/g, " ").trim();
     FOOTER = /Node ids have been added to the code as data attributes/i;
+    NO_BINDINGS = { bindings: /* @__PURE__ */ new Map(), source: "none" };
     kitLabel = (e) => `${e.displayName} [${path4.basename(e.dir)}${e.figmaFile !== void 0 ? `, file ${e.figmaFile}` : ", file identity NOT captured"}]`;
     toPosixRel = (rel) => rel.split(path4.sep).join("/");
     fromStoredRel = (rel) => rel.replace(/\\/g, "/");
@@ -2402,8 +2584,8 @@ var init_src = __esm({
 function variableNameToPath(name) {
   return name.split("/").map(canonicalCssIdentPart).filter((part) => part.length > 0);
 }
-function tokenPathToCssVar(path59) {
-  return `--${path59.join("-")}`;
+function tokenPathToCssVar(path60) {
+  return `--${path60.join("-")}`;
 }
 function toDtcgToken(variable, defaultMode) {
   const modes = Object.keys(variable.valuesByMode);
@@ -2447,11 +2629,11 @@ function toDtcgToken(variable, defaultMode) {
 }
 function mapVariablesToDtcg(variables, defaultMode = "light") {
   const entries = variables.map((variable) => {
-    const path59 = variableNameToPath(variable.name);
-    if (path59.length === 0) {
+    const path60 = variableNameToPath(variable.name);
+    if (path60.length === 0) {
       throw new DtcgMappingError("empty-name", `Figma variable ${variable.id} has an empty name`);
     }
-    return { variable, path: path59 };
+    return { variable, path: path60 };
   });
   const groupPrefixes = /* @__PURE__ */ new Set();
   for (const e of entries) {
@@ -2472,21 +2654,21 @@ function mapVariablesToDtcg(variables, defaultMode = "light") {
   }
   const tokens = {};
   const flat = [];
-  for (const { variable, path: path59 } of entries) {
+  for (const { variable, path: path60 } of entries) {
     const token = toDtcgToken(variable, defaultMode);
     let group = tokens;
-    for (const segment of path59.slice(0, -1)) {
+    for (const segment of path60.slice(0, -1)) {
       const existing = group[segment];
       group = existing ?? (group[segment] = {});
     }
-    const leaf = path59[path59.length - 1];
+    const leaf = path60[path60.length - 1];
     if (group[leaf] !== void 0) {
-      throw new DtcgMappingError("duplicate-path", `Duplicate token path "${path59.join(".")}" (variable ${variable.id})`);
+      throw new DtcgMappingError("duplicate-path", `Duplicate token path "${path60.join(".")}" (variable ${variable.id})`);
     }
     group[leaf] = token;
     flat.push({
-      path: path59.join("."),
-      cssVar: tokenPathToCssVar(path59),
+      path: path60.join("."),
+      cssVar: tokenPathToCssVar(path60),
       type: token.$type,
       value: token.$value
     });
@@ -2675,9 +2857,9 @@ function boundId(value) {
   return isObject(value) && typeof value["boundVariableId"] === "string" ? value["boundVariableId"] : void 0;
 }
 function resolveBinding(ctx, id) {
-  const path59 = ctx.pathById.get(id);
-  if (path59 === void 0) ctx.unresolved.add(id);
-  return path59;
+  const path60 = ctx.pathById.get(id);
+  if (path60 === void 0) ctx.unresolved.add(id);
+  return path60;
 }
 function parseVariantProps(name) {
   if (!name.includes("=")) return void 0;
@@ -2712,8 +2894,8 @@ function walk(ctx, raw) {
       if (!isObject(paint) || paint["visible"] === false) continue;
       const id = boundId(paint);
       if (id !== void 0) {
-        const path59 = resolveBinding(ctx, id);
-        if (path59 !== void 0) tokens.add(path59);
+        const path60 = resolveBinding(ctx, id);
+        if (path60 !== void 0) tokens.add(path60);
       } else if (typeof paint["color"] === "string") {
         ctx.hardcoded.push({ node: name, property, value: paint["color"] });
       }
@@ -2721,8 +2903,8 @@ function walk(ctx, raw) {
   }
   const radiusId = boundId(raw["cornerRadius"]);
   if (radiusId !== void 0) {
-    const path59 = resolveBinding(ctx, radiusId);
-    if (path59 !== void 0) tokens.add(path59);
+    const path60 = resolveBinding(ctx, radiusId);
+    if (path60 !== void 0) tokens.add(path60);
   } else if (typeof raw["cornerRadius"] === "number" && raw["cornerRadius"] !== 0) {
     ctx.hardcoded.push({ node: name, property: "border-radius", value: `${raw["cornerRadius"]}px` });
   }
@@ -2732,10 +2914,10 @@ function walk(ctx, raw) {
     layout = { mode: layoutMode === "HORIZONTAL" ? "flex-row" : "flex-column" };
     const gapId = boundId(raw["itemSpacing"]);
     if (gapId !== void 0) {
-      const path59 = resolveBinding(ctx, gapId);
-      if (path59 !== void 0) {
-        layout.gap = path59;
-        tokens.add(path59);
+      const path60 = resolveBinding(ctx, gapId);
+      if (path60 !== void 0) {
+        layout.gap = path60;
+        tokens.add(path60);
       }
     } else if (typeof raw["itemSpacing"] === "number" && raw["itemSpacing"] !== 0) {
       ctx.hardcoded.push({ node: name, property: "gap", value: `${raw["itemSpacing"]}px` });
@@ -2744,10 +2926,10 @@ function walk(ctx, raw) {
     for (const field of PADDING_FIELDS) {
       const id = boundId(raw[field]);
       if (id !== void 0) {
-        const path59 = resolveBinding(ctx, id);
-        if (path59 !== void 0) {
-          paddingPaths.push(path59);
-          tokens.add(path59);
+        const path60 = resolveBinding(ctx, id);
+        if (path60 !== void 0) {
+          paddingPaths.push(path60);
+          tokens.add(path60);
         }
       } else if (typeof raw[field] === "number" && raw[field] !== 0) {
         ctx.hardcoded.push({ node: name, property: field, value: `${raw[field]}px` });
@@ -4926,7 +5108,7 @@ var init_font_discovery = __esm({
 });
 
 // packages/verify/src/font-resolve.ts
-import { createHash as createHash3 } from "node:crypto";
+import { createHash as createHash4 } from "node:crypto";
 import { existsSync as existsSync10, mkdirSync as mkdirSync2, readFileSync as readFileSync7, writeFileSync as writeFileSync3 } from "node:fs";
 import os3 from "node:os";
 import path14 from "node:path";
@@ -4997,7 +5179,7 @@ async function resolveFonts(family, weights, cacheDir = DEFAULT_FONT_CACHE) {
         continue;
       }
       const bytes = new Uint8Array(await fileRes.arrayBuffer());
-      const sha256 = createHash3("sha256").update(bytes).digest("hex");
+      const sha256 = createHash4("sha256").update(bytes).digest("hex");
       const file = path14.join(cacheDir, `${family.toLowerCase().replace(/\s+/g, "-")}-${weight}.woff2`);
       writeFileSync3(file, bytes);
       resolved.push({ family, weight, source: url, sha256, file, license: meta.license, ...meta.family !== null ? { servedFamily: meta.family } : {} });
@@ -5038,7 +5220,7 @@ ${shown}`
     storedExt = ".ttf";
   }
   mkdirSync2(cacheDir, { recursive: true });
-  const sha256 = createHash3("sha256").update(bytes).digest("hex");
+  const sha256 = createHash4("sha256").update(bytes).digest("hex");
   const file = path14.join(cacheDir, `${family.toLowerCase().replace(/\s+/g, "-")}-${weight}${storedExt}`);
   writeFileSync3(file, bytes);
   const face = { family, weight, source: `${provenance}:${path14.basename(src)}`, sha256, file, license: "unknown" };
@@ -5118,7 +5300,7 @@ function verifiedFontFamilies(cacheDir = DEFAULT_FONT_CACHE) {
     if (typeof e.family !== "string" || typeof e.weight !== "number" || typeof e.file !== "string") continue;
     const file = path14.isAbsolute(e.file) && existsSync10(e.file) ? e.file : path14.resolve(cacheDir, path14.basename(e.file));
     if (!existsSync10(file)) continue;
-    if (createHash3("sha256").update(readFileSync7(file)).digest("hex") !== e.sha256) continue;
+    if (createHash4("sha256").update(readFileSync7(file)).digest("hex") !== e.sha256) continue;
     const set = byFamily.get(e.family) ?? /* @__PURE__ */ new Set();
     set.add(e.weight);
     byFamily.set(e.family, set);
@@ -5201,7 +5383,7 @@ var init_font_resolve = __esm({
 });
 
 // packages/verify/src/font-faces.ts
-import { createHash as createHash4 } from "node:crypto";
+import { createHash as createHash5 } from "node:crypto";
 import { existsSync as existsSync11, readFileSync as readFileSync8 } from "node:fs";
 import path15 from "node:path";
 function injectedGroups(manifestPath2) {
@@ -5212,7 +5394,7 @@ function injectedGroups(manifestPath2) {
   for (const f of claimed) {
     const file = resolveFile(f.file);
     if (!existsSync11(file)) continue;
-    if (createHash4("sha256").update(readFileSync8(file)).digest("hex") !== f.sha256) continue;
+    if (createHash5("sha256").update(readFileSync8(file)).digest("hex") !== f.sha256) continue;
     const k = `${f.family}:${f.file}`;
     const e = byFile.get(k) ?? { family: f.family, weights: [], file };
     e.weights.push(f.weight);
@@ -6675,43 +6857,43 @@ function classifyBundleSurface(files, opts) {
   const excluded = [];
   const unknown = [];
   for (const raw of files) {
-    const path59 = raw.replace(/\\/g, "/").replace(/^\.\//, "");
-    const inEvidence = path59.startsWith(`${EVIDENCE_DIR}/`);
-    if (path59.startsWith("fonts/")) {
-      const fname = path59.slice("fonts/".length);
+    const path60 = raw.replace(/\\/g, "/").replace(/^\.\//, "");
+    const inEvidence = path60.startsWith(`${EVIDENCE_DIR}/`);
+    if (path60.startsWith("fonts/")) {
+      const fname = path60.slice("fonts/".length);
       if (!fname.includes("/") && (/\.(woff2?|ttf|otf)$/i.test(fname) || /^(NOTICE|LICENSE|LICENCE)[^/]*\.txt$/i.test(fname))) {
-        excluded.push({ path: path59, reason: "font payload \u2014 not published (fonts policy pending); faces are sha-pinned in component.json requiredFonts" });
+        excluded.push({ path: path60, reason: "font payload \u2014 not published (fonts policy pending); faces are sha-pinned in component.json requiredFonts" });
         continue;
       }
-      unknown.push(path59);
+      unknown.push(path60);
       continue;
     }
-    const name = inEvidence ? path59.slice(EVIDENCE_DIR.length + 1) : path59;
+    const name = inEvidence ? path60.slice(EVIDENCE_DIR.length + 1) : path60;
     if (name.includes("/")) {
-      unknown.push(path59);
+      unknown.push(path60);
       continue;
     }
     if (inEvidence) {
-      if (name === "verify-report.json") published.push({ path: path59, role: "verify-report" });
-      else if (name === "diff-legend.txt") published.push({ path: path59, role: "diff-legend" });
-      else if (name === "inspect.html") published.push({ path: path59, role: "inspect-sheet" });
-      else if (/-mount-failure\.png$/.test(name)) excluded.push({ path: path59, reason: "harness failure diagnostic (regenerated every verify run, never published)" });
+      if (name === "verify-report.json") published.push({ path: path60, role: "verify-report" });
+      else if (name === "diff-legend.txt") published.push({ path: path60, role: "diff-legend" });
+      else if (name === "inspect.html") published.push({ path: path60, role: "inspect-sheet" });
+      else if (/-mount-failure\.png$/.test(name)) excluded.push({ path: path60, reason: "harness failure diagnostic (regenerated every verify run, never published)" });
       else {
         const hit = EVIDENCE_PATTERNS.find((p) => p.re.test(name));
-        if (hit !== void 0) published.push({ path: path59, role: hit.role });
-        else unknown.push(path59);
+        if (hit !== void 0) published.push({ path: path60, role: hit.role });
+        else unknown.push(path60);
       }
       continue;
     }
-    if (name === opts.entry) published.push({ path: path59, role: "entry" });
-    else if (name === "styles.css") published.push({ path: path59, role: "styles" });
-    else if (name === "tokens.css") published.push({ path: path59, role: "tokens" });
-    else if (name === "fonts.css") published.push({ path: path59, role: "fonts" });
-    else if (name === "component.json") published.push({ path: path59, role: "manifest" });
+    if (name === opts.entry) published.push({ path: path60, role: "entry" });
+    else if (name === "styles.css") published.push({ path: path60, role: "styles" });
+    else if (name === "tokens.css") published.push({ path: path60, role: "tokens" });
+    else if (name === "fonts.css") published.push({ path: path60, role: "fonts" });
+    else if (name === "component.json") published.push({ path: path60, role: "manifest" });
     else {
       const skip = EXCLUDED.find((e) => e.test(name));
-      if (skip !== void 0) excluded.push({ path: path59, reason: skip.reason });
-      else unknown.push(path59);
+      if (skip !== void 0) excluded.push({ path: path60, reason: skip.reason });
+      else unknown.push(path60);
     }
   }
   const roles = new Set(published.map((p) => p.role));
@@ -6721,8 +6903,8 @@ function missingInspectCrops(sheetText, publishedPaths) {
   const held = new Set(publishedPaths);
   const missing = /* @__PURE__ */ new Set();
   for (const [, name] of sheetText.matchAll(/src="\.\/([^"]+)"/g)) {
-    const path59 = `${EVIDENCE_DIR}/${name}`;
-    if (!held.has(path59)) missing.add(path59);
+    const path60 = `${EVIDENCE_DIR}/${name}`;
+    if (!held.has(path60)) missing.add(path60);
   }
   return [...missing].sort();
 }
@@ -6758,7 +6940,7 @@ var init_published_surface = __esm({
 });
 
 // packages/metadata/src/bundle-files.ts
-import { createHash as createHash5 } from "node:crypto";
+import { createHash as createHash6 } from "node:crypto";
 import { readFileSync as readFileSync12, readdirSync as readdirSync6, statSync as statSync3 } from "node:fs";
 import path20 from "node:path";
 function bundleFiles(dir, prefix = "") {
@@ -6776,7 +6958,7 @@ function digestScoredFiles(bundleDir, entry) {
   const out = {};
   for (const file of surface.published) {
     if (!SCORED_FILE_ROLES.has(file.role)) continue;
-    out[file.path] = createHash5("sha256").update(readFileSync12(path20.join(bundleDir, file.path))).digest("hex");
+    out[file.path] = createHash6("sha256").update(readFileSync12(path20.join(bundleDir, file.path))).digest("hex");
   }
   return out;
 }
@@ -6830,10 +7012,10 @@ function readScoredFiles(report) {
   const entries = Object.entries(value);
   if (entries.length === 0) return void 0;
   const out = {};
-  for (const [path59, digest] of entries) {
-    if (path59 === "" || path59.startsWith("/") || path59.includes("..")) return void 0;
+  for (const [path60, digest] of entries) {
+    if (path60 === "" || path60.startsWith("/") || path60.includes("..")) return void 0;
     if (!isSetHash(digest)) return void 0;
-    out[path59] = digest;
+    out[path60] = digest;
   }
   return out;
 }
@@ -6841,11 +7023,11 @@ function compareScoredFiles(recorded, actual) {
   const missing = [];
   const unscored = [];
   const changed = [];
-  for (const [path59, digest] of Object.entries(recorded)) {
-    if (!(path59 in actual)) missing.push(path59);
-    else if (actual[path59] !== digest) changed.push(path59);
+  for (const [path60, digest] of Object.entries(recorded)) {
+    if (!(path60 in actual)) missing.push(path60);
+    else if (actual[path60] !== digest) changed.push(path60);
   }
-  for (const path59 of Object.keys(actual)) if (!(path59 in recorded)) unscored.push(path59);
+  for (const path60 of Object.keys(actual)) if (!(path60 in recorded)) unscored.push(path60);
   return { missing: missing.sort(), unscored: unscored.sort(), changed: changed.sort() };
 }
 function scoredRecordingSetHash(report) {
@@ -8690,7 +8872,7 @@ var init_src5 = __esm({
 // packages/cli/src/environment.ts
 import { existsSync as existsSync20, readFileSync as readFileSync17 } from "node:fs";
 import path26 from "node:path";
-import { createHash as createHash6 } from "node:crypto";
+import { createHash as createHash7 } from "node:crypto";
 import { fileURLToPath as fileURLToPath5 } from "node:url";
 function cliVersion() {
   try {
@@ -8707,7 +8889,7 @@ function environmentStamp(taskFamilies) {
       const entries = JSON.parse(readFileSync17(manifestPath2, "utf8"));
       const scoped = taskFamilies === void 0 || taskFamilies === null ? entries : entries.filter((f) => taskFamilies.some((fam) => fam.toLowerCase() === f.family.toLowerCase()));
       const faces = scoped.map((f) => `${f.family}:${f.weight}:${f.sha256}`).sort();
-      fontsHash = faces.length === 0 ? null : createHash6("sha256").update(faces.join("\n")).digest("hex").slice(0, 16);
+      fontsHash = faces.length === 0 ? null : createHash7("sha256").update(faces.join("\n")).digest("hex").slice(0, 16);
     } catch {
       fontsHash = null;
     }
@@ -8904,6 +9086,12 @@ var init_publish_client = __esm({
       pollApproval(input) {
         return this.json("GET", `/api/publish-approvals/${encodeURIComponent(input.approvalId)}`, null, true);
       }
+      requestComposeApproval(input) {
+        return this.json("POST", "/api/compose-approvals", input);
+      }
+      pollComposeApproval(input) {
+        return this.json("GET", `/api/compose-approvals/${encodeURIComponent(input.approvalId)}`, null, true);
+      }
       whoami() {
         return this.json("GET", "/api/whoami", null, true);
       }
@@ -11993,7 +12181,7 @@ var init_adapter = __esm({
 });
 
 // packages/generate/src/bundle-emit.ts
-import { createHash as createHash7 } from "node:crypto";
+import { createHash as createHash8 } from "node:crypto";
 import { copyFileSync, existsSync as existsSync30, mkdirSync as mkdirSync9, readFileSync as readFileSync27, readdirSync as readdirSync11, rmSync as rmSync5, writeFileSync as writeFileSync13 } from "node:fs";
 import path37 from "node:path";
 function pinFromConfigs(configs) {
@@ -12104,7 +12292,7 @@ function fontsCssFor(faces, bundleDir, cacheDir = DEFAULT_FONT_CACHE, substitute
           `/* ${decl} */`
         );
       }
-    } else if (existsSync30(src) && createHash7("sha256").update(readFileSync27(src)).digest("hex") === face.sha256) {
+    } else if (existsSync30(src) && createHash8("sha256").update(readFileSync27(src)).digest("hex") === face.sha256) {
       mkdirSync9(path37.join(bundleDir, "fonts"), { recursive: true });
       copyFileSync(src, path37.join(bundleDir, "fonts", path37.basename(face.file)));
       licenseTexts.set(terms.file, terms.text);
@@ -12193,7 +12381,7 @@ function recordingSetHash(setDir, configs) {
     relPaths,
     (p) => new Uint8Array(readFileSync27(path37.join(setDir, p))),
     (chunks) => {
-      const h = createHash7("sha256");
+      const h = createHash8("sha256");
       for (const c of chunks) h.update(c);
       return h.digest("hex");
     }
@@ -12745,7 +12933,7 @@ DEALINGS IN THE FONT SOFTWARE.
 });
 
 // packages/generate/src/compose-pins.ts
-import { createHash as createHash8 } from "node:crypto";
+import { createHash as createHash9 } from "node:crypto";
 import { existsSync as existsSync31, readFileSync as readFileSync28, readdirSync as readdirSync12, realpathSync as realpathSync3, statSync as statSync4 } from "node:fs";
 import path38 from "node:path";
 function bundleDirs(roots, depth = 4) {
@@ -12883,7 +13071,7 @@ function composedPins(hostSet, libraryRoots) {
           fileIssue = `${rel}: partner file ${name} exceeds the pin size cap (${bytes.byteLength} bytes)`;
           break;
         }
-        moduleFiles.push({ name, content: bytes.toString("utf8"), sha256: createHash8("sha256").update(bytes).digest("hex") });
+        moduleFiles.push({ name, content: bytes.toString("utf8"), sha256: createHash9("sha256").update(bytes).digest("hex") });
       }
       if (fileIssue !== void 0) {
         failures.push(fileIssue);
@@ -12969,7 +13157,7 @@ function composedChecks(candidateDir, hostEntry, pins) {
         wrong.push(`${f.name} missing`);
         continue;
       }
-      const sha = createHash8("sha256").update(readFileSync28(target)).digest("hex");
+      const sha = createHash9("sha256").update(readFileSync28(target)).digest("hex");
       if (sha !== f.sha256) wrong.push(`${f.name} differs from the pinned partner bytes`);
     }
     checks.push({
@@ -14474,14 +14662,14 @@ var init_figma_rest = __esm({
 });
 
 // packages/cli/src/run-presence.ts
-import { createHash as createHash9 } from "node:crypto";
+import { createHash as createHash10 } from "node:crypto";
 import { existsSync as existsSync34, mkdirSync as mkdirSync11, readFileSync as readFileSync30, rmSync as rmSync6, writeFileSync as writeFileSync15 } from "node:fs";
 import path43 from "node:path";
 function presenceDir() {
   return path43.join(path43.dirname(sessionPath()), "runs");
 }
 function presenceFile(componentName) {
-  return path43.join(presenceDir(), `${createHash9("sha256").update(componentName).digest("hex").slice(0, 16)}.json`);
+  return path43.join(presenceDir(), `${createHash10("sha256").update(componentName).digest("hex").slice(0, 16)}.json`);
 }
 function readCached(componentName) {
   const file = presenceFile(componentName);
@@ -14544,12 +14732,21 @@ var compose_exports = {};
 __export(compose_exports, {
   COMPOSE_DESCRIPTION: () => COMPOSE_DESCRIPTION,
   IMPLICIT_PARENT_SCAN_MAX_ENTRIES: () => IMPLICIT_PARENT_SCAN_MAX_ENTRIES,
+  buildCompositionEntries: () => buildCompositionEntries,
   compositionPairsFor: () => compositionPairsFor,
-  runCompose: () => runCompose
+  renderBindingsRemediation: () => renderBindingsRemediation,
+  runCompose: () => runCompose,
+  substitutionPairs: () => substitutionPairs,
+  writeCompositionDecisions: () => writeCompositionDecisions
 });
-import { createHash as createHash10 } from "node:crypto";
+import { createHash as createHash11 } from "node:crypto";
 import { existsSync as existsSync35, readFileSync as readFileSync31, readdirSync as readdirSync14 } from "node:fs";
 import path44 from "node:path";
+function renderBindingsRemediation(r) {
+  if (r === void 0) return void 0;
+  const hostQ = quoteArg(path44.resolve(r.hostSet));
+  return r.kind === "re-bindings" ? `An earlier bindings enrichment predates a re-record \u2014 re-run ${tendrilCommand(`record bindings --set ${hostQ}`)} to restore the id evidence.` : `${tendrilCommand(`record bindings --set ${hostQ}`)} fetches Figma's instance\u2192component bindings for the HOST set (one or two batched REST calls, congruence-verified against the recording \u2014 no re-recording); then confirm the pairing and regenerate the host bundle.`;
+}
 function compositionPairsFor(hostSet, roots) {
   const parent = path44.dirname(hostSet);
   const explicitRoots = [...new Set(roots)];
@@ -14584,6 +14781,7 @@ function compositionPairsFor(hostSet, roots) {
     const row = proposalRows.get(key) ?? { displayName: e.partners[0]?.displayName ?? e.instanceName, partnerDirs: e.partners.map((p) => p.dir), instances: 0, disclosures: [] };
     row.instances += 1;
     for (const d of e.disclosures) if (!row.disclosures.includes(d)) row.disclosures.push(d);
+    if (row.remediation === void 0 && e.remediation !== void 0) row.remediation = e.remediation;
     proposalRows.set(key, row);
   }
   return { open: pairs.filter((p) => !decidedKeys.has(p.key)), proposals: [...proposalRows.values()], standing, invalid, ...skippedParent !== void 0 ? { skippedParent } : {} };
@@ -14620,7 +14818,7 @@ function runCompose(flags) {
   const roots = flags.library !== void 0 && flags.library.length > 0 ? flags.library.map((d) => path44.resolve(base, d)) : [base];
   if (flags.set === void 0 && (flags.confirmCompositions === true || flags.decline !== void 0 && flags.decline.length > 0)) {
     fail(flags, ExitCode.InputValidation, {
-      error: "--confirm-compositions/--decline require --set <host> \u2014 a decision needs the host set it decides for",
+      error: "a compose decision flag requires --set <host> \u2014 a decision needs the host set it decides for",
       code: "compose-decision-without-set",
       remediation: "Add --set <host recording-set dir>, or drop the decision flags to list opportunities."
     });
@@ -14675,6 +14873,7 @@ function runComposeConfirm(flags, hostSet, roots) {
   const index = buildComposeIndex(scanRoots);
   const edges = composeReport(index);
   const pairs = substitutionPairs(edges, hostSet);
+  const nameOnly = edges.filter((e) => e.hostSet === hostSet && e.kind === "proposal");
   const { raw } = readManifestFile(hostSet);
   const rawStanding = Array.isArray(raw["compositions"]) ? raw["compositions"] : [];
   const standing = [];
@@ -14694,8 +14893,22 @@ function runComposeConfirm(flags, hostSet, roots) {
   const printProposal = () => {
     for (const s of standing) process.stdout.write(`standing ${s.status.toUpperCase()}: ${s.partner.displayName} [${s.partner.key}] (${s.instances.length} instance(s)) \u2014 asked once, not re-asked
 `);
+    if (nameOnly.length > 0) {
+      const byPartner = /* @__PURE__ */ new Map();
+      for (const e of nameOnly) {
+        const key = e.partners.map((p) => p.dir).sort().join("+");
+        const row = byPartner.get(key) ?? { name: e.partners[0]?.displayName ?? e.instanceName, count: 0 };
+        row.count += 1;
+        if (row.remediation === void 0 && e.remediation !== void 0) row.remediation = e.remediation;
+        byPartner.set(key, row);
+      }
+      for (const row of byPartner.values()) {
+        process.stdout.write(`NAME-ONLY: instance names match recorded component ${row.name} (${row.count} instance(s)) \u2014 identity unproven, NOT confirmable. ${renderBindingsRemediation(row.remediation) ?? "Record id evidence to make it confirmable, or ignore."}
+`);
+      }
+    }
     if (open.length === 0) {
-      process.stdout.write(standing.length > 0 ? "no undecided composition pairs for this host\n" : "no id-backed composition pairs found for this host (name-only proposals, if any, are not confirmable \u2014 see compose --list)\n");
+      process.stdout.write(standing.length > 0 ? "no undecided composition pairs for this host\n" : "no id-backed composition pairs found for this host (name-only proposals, if any, print above and are not confirmable)\n");
       return;
     }
     for (const p of open) {
@@ -14712,7 +14925,17 @@ PAIR ${p.displayName}${p.figmaFile !== void 0 ? ` (file ${p.figmaFile})` : " \u2
   };
   const deciding = flags.confirmCompositions === true || flags.decline !== void 0 && flags.decline.length > 0;
   if (open.length === 0 || !deciding) {
-    emitData(flags, { hostSet, openPairs: open, standing, note: "confirmations are human-only; declines persist; name-only proposals are never confirmable" }, printProposal);
+    emitData(
+      flags,
+      {
+        hostSet,
+        openPairs: open,
+        nameOnlyProposals: [...new Set(nameOnly.map((e) => e.partners[0]?.displayName ?? e.instanceName))].map((name) => ({ displayName: name, remediation: renderBindingsRemediation(nameOnly.find((e) => (e.partners[0]?.displayName ?? e.instanceName) === name)?.remediation) ?? null })),
+        standing,
+        note: "confirmations are human-only; declines persist; name-only proposals are never confirmable"
+      },
+      printProposal
+    );
   } else if (!flags.json) {
     printProposal();
   }
@@ -14721,7 +14944,7 @@ PAIR ${p.displayName}${p.figmaFile !== void 0 ? ` (file ${p.figmaFile})` : " \u2
     fail(flags, ExitCode.ConfirmationRequired, {
       error: "composition pairs require a human decision (an honest stop, not a failure \u2014 exit 4 is the documented confirmation-required outcome)",
       code: "compositions-unconfirmed",
-      remediation: `To accept the pairing(s) above, run \`${tendrilCommand(`compose --set ${hostSet} --confirm-compositions`)}\` in your own terminal; to refuse one, add \`--decline <pair-key>\` using the pair-key printed above each pair. This decision is yours alone \u2014 agents cannot make it (the flag is refused without an interactive terminal), and nothing composes without it. Agents: relay this block to your operator verbatim.`
+      remediation: `This decision is human-only, on either channel. CLICK PATH (agents lead with this): tendril_compose puts the pairing in your browser as an Approve card \u2014 one click decides it (sign in first with tendril_login if needed; both are one browser Approve). TERMINAL PATH: run \`${tendrilCommand(`compose --set ${hostSet} --confirm-compositions`)}\` yourself (no account needed); to refuse one permanently, add \`--decline <pair-key>\` using the pair-key printed above each pair. Agents cannot decide on either channel \u2014 relay this block to your operator.`
     });
   }
   if (process.stdin.isTTY !== true) {
@@ -14741,7 +14964,27 @@ PAIR ${p.displayName}${p.figmaFile !== void 0 ? ` (file ${p.figmaFile})` : " \u2
       });
     }
   }
-  const entries = open.map((p) => ({
+  const entries = buildCompositionEntries(hostSet, open, declineKeys);
+  const decided = flags.confirmCompositions === true ? entries : entries.filter((e) => declineKeys.has(e.partner.key));
+  const written = writeCompositionDecisions(hostSet, decided);
+  if (!written.ok) {
+    fail(flags, ExitCode.General, {
+      error: written.refusal,
+      code: "compositions-write-raced",
+      remediation: "Nothing was changed. Re-run the same command \u2014 the fresh derivation re-reads the manifest as it is now."
+    });
+  }
+  warn(
+    flags,
+    "the host manifest changed \u2014 its bytes are hashed into bundle provenance, so bundles generated from this set before this decision now carry a stale set identity; regenerate to compose (`tendril engine brief` carries the pins)"
+  );
+  emitData(flags, { hostSet, openPairs: open, standing, written: written.written, note: "confirmations are human-only; declines persist; name-only proposals are never confirmable" }, () => {
+    for (const e of written.written) process.stdout.write(`${e.status.toUpperCase()}: ${e.partner.displayName} [${e.partner.key}] (${e.instances.length} instance(s))
+`);
+  });
+}
+function buildCompositionEntries(hostSet, pairs, declineKeys) {
+  return pairs.map((p) => ({
     v: 1,
     partner: {
       key: p.key,
@@ -14750,33 +14993,29 @@ PAIR ${p.displayName}${p.figmaFile !== void 0 ? ` (file ${p.figmaFile})` : " \u2
       // The partner's manifest BYTES, pinned at decision time and
       // keyed by the same host-relative identity as the pair key —
       // any partner re-plan/roles/composition write flips it, which
-      // is the staleness signal later slices compare against. (The
-      // full recording-set hash join lands with pin authoring, where
-      // task configs exist.)
+      // is the staleness signal later slices compare against.
       manifestSha256: Object.fromEntries(
-        p.partnerDirs.map((d) => [path44.relative(hostSet, d), createHash10("sha256").update(readFileSync31(path44.join(d, "recording-set.json"))).digest("hex")])
+        p.partnerDirs.map((d) => [path44.relative(hostSet, d), createHash11("sha256").update(readFileSync31(path44.join(d, "recording-set.json"))).digest("hex")])
       )
     },
-    // Schema shape ONLY (review: the display-side poseDisplay field
-    // leaked into the provenance-hashed compositions extension —
-    // zod's strip on the next rewrite would re-serialize the same
-    // decision with different bytes, flipping the staleness signal
-    // for a no-op and embedding local dir basenames in a pinned
-    // human-decision record).
     instances: p.instances.map((i) => ({ hostRep: i.hostRep, instanceId: i.instanceId, poseVariantNodeId: i.poseVariantNodeId })),
     status: declineKeys.has(p.key) ? "declined" : "confirmed"
   }));
-  const decided = flags.confirmCompositions === true ? entries : entries.filter((e) => declineKeys.has(e.partner.key));
-  const merged = { ...raw, compositions: [...standing, ...decided] };
-  writeManifest(hostSet, merged);
-  warn(
-    flags,
-    "the host manifest changed \u2014 its bytes are hashed into bundle provenance, so bundles generated from this set before this decision now carry a stale set identity; regenerate to compose (`tendril engine brief` carries the pins)"
-  );
-  emitData(flags, { hostSet, openPairs: open, standing, written: decided, note: "confirmations are human-only; declines persist; name-only proposals are never confirmable" }, () => {
-    for (const e of decided) process.stdout.write(`${e.status.toUpperCase()}: ${e.partner.displayName} [${e.partner.key}] (${e.instances.length} instance(s))
-`);
-  });
+}
+function writeCompositionDecisions(hostSet, decided) {
+  const { raw } = readManifestFile(hostSet);
+  const rawStanding = Array.isArray(raw["compositions"]) ? raw["compositions"] : [];
+  const standing = [];
+  for (let i = 0; i < rawStanding.length; i++) {
+    const parsed = CompositionEntrySchema.safeParse(rawStanding[i]);
+    if (!parsed.success) return { ok: false, refusal: `compositions[${i}] in the host manifest is not a valid v1 entry \u2014 a standing human decision could not be re-validated, so nothing was written` };
+    standing.push(parsed.data);
+  }
+  const decidedKeys = new Set(standing.map((c) => fromStoredRel(c.partner.key)));
+  const fresh = decided.filter((e) => !decidedKeys.has(fromStoredRel(e.partner.key)));
+  const alreadyDecided = decided.filter((e) => decidedKeys.has(fromStoredRel(e.partner.key))).map((e) => e.partner.key);
+  if (fresh.length > 0) writeManifest(hostSet, { ...raw, compositions: [...standing, ...fresh] });
+  return { ok: true, written: fresh, alreadyDecided };
 }
 var COMPOSE_DESCRIPTION, NOTE, IMPLICIT_PARENT_SCAN_MAX_ENTRIES;
 var init_compose2 = __esm({
@@ -14826,6 +15065,7 @@ __export(record_exports, {
   nextPayload: () => nextPayload,
   recordsInteractionState: () => recordsInteractionState,
   runRecordAsset: () => runRecordAsset,
+  runRecordBindings: () => runRecordBindings,
   runRecordFetch: () => runRecordFetch,
   runRecordFinish: () => runRecordFinish,
   runRecordIngest: () => runRecordIngest,
@@ -15389,6 +15629,119 @@ async function runRecordRestFetch(opts) {
 `);
   });
 }
+async function runRecordBindings(opts) {
+  const setDir = path45.resolve(opts.setDir);
+  const manifest = loadManifest(setDir);
+  if (manifest.channel !== void 0) {
+    fail(opts, ExitCode.InputValidation, {
+      error: "this set records over REST \u2014 its REST reps already carry the bindings in rest_nodes.json (probe poses excepted, a named limitation of this slice)",
+      code: "bindings-set-already-channeled",
+      remediation: `Nothing to enrich. Pair discovery reads the channeled bindings directly \u2014 run ${tendrilCommand(`compose --set ${quoteArg(setDir)}`)}.`
+    });
+  }
+  const fileKey = manifest.figmaFile ?? opts.file;
+  if (fileKey === void 0) {
+    fail(opts, ExitCode.InputValidation, {
+      error: "the manifest carries no figmaFile key, and no --file was given",
+      code: "bindings-no-file-identity",
+      remediation: "Pass the design's file key (from its URL: figma.com/design/<KEY>/\u2026) as --file <KEY>. It is an OPERATOR ASSERTION recorded in the envelope, never backfilled into the manifest \u2014 node ids are file-scoped and every binding must still pass congruence against the recording, so a wrong key yields refusals, not wrong evidence."
+    });
+  }
+  if (manifest.figmaFile !== void 0 && opts.file !== void 0 && opts.file !== manifest.figmaFile) {
+    fail(opts, ExitCode.InputValidation, {
+      error: `--file ${opts.file} contradicts the manifest's captured identity ${manifest.figmaFile}`,
+      code: "bindings-file-mismatch",
+      remediation: "Drop --file \u2014 the captured identity wins."
+    });
+  }
+  const fileIdentity = manifest.figmaFile !== void 0 ? "captured" : "asserted";
+  const client = opts.restClient !== void 0 ? { ok: true, value: opts.restClient } : await figmaRestClient();
+  if (!client.ok) {
+    fail(opts, ExitCode.General, { error: client.refusal, code: `figma-rest-${client.kind}`, remediation: client.kind === "no-credential" ? `Run ${tendrilCommand("figma-connect")} once, then re-run this.` : "Fix what is named above and re-run." });
+  }
+  const fetchedAt = (/* @__PURE__ */ new Date()).toISOString();
+  const docs = /* @__PURE__ */ new Map();
+  const refused = [];
+  const versions = /* @__PURE__ */ new Set();
+  let calls = 0;
+  for (let i = 0; i < manifest.reps.length; i += REST_BATCH_SIZE) {
+    const batch = manifest.reps.slice(i, i + REST_BATCH_SIZE);
+    const got = await client.value.nodes(fileKey, batch.map((r) => r.nodeId));
+    calls += 1;
+    if (got.ok) {
+      if (got.value.fileVersion !== void 0) versions.add(got.value.fileVersion);
+      for (const rep of batch) docs.set(rep.slug, got.value.nodes[rep.nodeId]);
+      continue;
+    }
+    if (!(got.kind === "transport" && got.refusal.includes("missing"))) failRest(opts, got);
+    for (const rep of batch) {
+      const one = await client.value.nodes(fileKey, [rep.nodeId]);
+      calls += 1;
+      if (one.ok) {
+        if (one.value.fileVersion !== void 0) versions.add(one.value.fileVersion);
+        docs.set(rep.slug, one.value.nodes[rep.nodeId]);
+      } else if (one.kind === "transport" && one.refusal.includes("missing")) {
+        refused.push({ slug: rep.slug, reason: `the recorded node ${rep.nodeId} no longer exists in the document (deleted or moved since recording)` });
+      } else {
+        failRest(opts, one);
+      }
+    }
+  }
+  if (versions.size > 1) {
+    fail(opts, ExitCode.General, {
+      error: `the Figma file changed mid-fetch (versions ${[...versions].join(" vs ")}) \u2014 the bindings would attest two different documents`,
+      code: "bindings-file-version-drift",
+      remediation: `Re-run ${tendrilCommand(`record bindings --set ${quoteArg(setDir)}`)} \u2014 the versions must agree.`
+    });
+  }
+  const fileVersion = [...versions][0];
+  let enriched = 0;
+  let instances = 0;
+  for (const rep of manifest.reps) {
+    const entry = docs.get(rep.slug);
+    if (entry === void 0) continue;
+    const out = enrichRepBindings(setDir, rep.slug, {
+      fetchedEntry: entry,
+      url: "https://api.figma.com/v1/files/" + encodeURIComponent(fileKey) + "/nodes",
+      status: 200,
+      ...fileVersion !== void 0 ? { fileVersion } : {},
+      fileIdentity,
+      fetchedAt,
+      accessToken: client.value.accessToken()
+    });
+    if (out.ok) {
+      enriched += 1;
+      instances += out.instances;
+    } else {
+      refused.push({ slug: rep.slug, reason: out.refusal });
+    }
+  }
+  const discovery = (() => {
+    try {
+      const { open, proposals, skippedParent } = compositionPairsFor(setDir, [path45.dirname(setDir)]);
+      const scanned = skippedParent !== void 0 ? `(parent ${skippedParent.dir} skipped: ${skippedParent.entries} entries \u2014 pass compose --library)` : path45.dirname(setDir);
+      const note = open.length > 0 ? `${open.length} id-backed pair(s) now confirmable: a human runs ${tendrilCommand(`compose --set ${quoteArg(setDir)}`)} in their own terminal. Confirming writes the decision into this set's manifest \u2014 an EXISTING bundle of this host will then report set drift until it is regenerated (the regeneration is what composes the partner).` : proposals.length > 0 ? `name-only matches remain (no id-backed pair formed) \u2014 the partner set may record different variants than these bindings name, or sits outside the scanned root` : `no partner recording is visible in the scanned root \u2014 co-locate the partner set next to this one, or run ${tendrilCommand(`compose --set ${quoteArg(setDir)} --library <partner-workspace>`)}`;
+      return { confirmable: open.length, nameOnly: proposals.length, scanned, note };
+    } catch (err) {
+      return { confirmable: 0, nameOnly: 0, scanned: "(discovery failed)", note: `pair discovery failed (${err instanceof Error ? err.message.split("\n")[0] : String(err)}) \u2014 whether partners are visible is UNKNOWN, not "no"` };
+    }
+  })();
+  emitData(
+    opts,
+    { enriched, instances, refused, calls, ...fileVersion !== void 0 ? { fileVersion } : {}, fileIdentity, discovery },
+    () => {
+      process.stdout.write(`bindings: ${enriched}/${manifest.reps.length} rep(s) enriched (${instances} instance binding(s), ${calls} REST call(s)${fileVersion !== void 0 ? `, file version ${fileVersion}` : ""}${fileIdentity === "asserted" ? ", file identity ASSERTED via --file" : ""})
+`);
+      for (const r of refused) process.stdout.write(`REFUSED   ${r.slug}: ${r.reason}
+`);
+      process.stdout.write(`COMPOSE   scanned: ${discovery.scanned}
+`);
+      process.stdout.write(`next: ${discovery.note}
+`);
+    }
+  );
+  if (enriched === 0 && manifest.reps.length > 0) process.exitCode = ExitCode.General;
+}
 function failRest(opts, out) {
   fail(opts, ExitCode.General, {
     error: out.refusal,
@@ -15801,14 +16154,15 @@ function runRecordStatus(opts) {
   const composition = (() => {
     try {
       const setDir = path45.resolve(opts.setDir);
-      const { open, proposals, standing, invalid } = compositionPairsFor(setDir, [path45.dirname(setDir)]);
+      const { open, proposals, standing, invalid } = compositionPairsFor(setDir, [opts.library !== void 0 ? path45.resolve(opts.library) : path45.dirname(setDir)]);
       return {
         openPairs: open.map((p) => ({ displayName: p.displayName, pairKey: p.key, instances: p.instances.length })),
         // Name-only proposals (field, 2026-08-26): the host-side
         // surface an MCP-recorded host embedding a later partner never
         // had — not confirmable, but never silent either; the
-        // disclosures carry the conditional re-record remediation.
-        nameOnly: proposals.map((p) => ({ displayName: p.displayName, instances: p.instances, disclosures: p.disclosures })),
+        // remediation renders copy-paste-complete for this install
+        // shape (structured, never substring-selected — review).
+        nameOnly: proposals.map((p) => ({ displayName: p.displayName, instances: p.instances, disclosures: p.disclosures, remediation: renderBindingsRemediation(p.remediation) ?? null })),
         confirmed: standing.filter((s) => s.status === "confirmed").length,
         declined: standing.filter((s) => s.status === "declined").length,
         invalid
@@ -15844,7 +16198,7 @@ function runRecordStatus(opts) {
     }
     if (!("unavailable" in composition) && composition.nameOnly.length > 0) {
       for (const p of composition.nameOnly) {
-        process.stdout.write(`COMPOSITION NAME-ONLY: instance name matches recorded component ${p.displayName} (${p.instances} instance(s)) \u2014 identity unproven, NOT confirmable. ${p.disclosures.find((d) => d.includes("re-record")) ?? "Record id evidence to make it confirmable, or ignore."}
+        process.stdout.write(`COMPOSITION NAME-ONLY: instance name matches recorded component ${p.displayName} (${p.instances} instance(s)) \u2014 identity unproven, NOT confirmable. ${p.remediation ?? "Record id evidence to make it confirmable, or ignore."}
 `);
       }
     }
@@ -17570,7 +17924,7 @@ READY     this component is verified \u2014 the run is not finished until it is
 `
           );
         } else {
-          process.stdout.write(`COMPOSE   ${o.hostDisplayName} [${o.hostSet}]: name-only match (${o.instances} instance(s)) \u2014 identity unproven, not confirmable. ${o.disclosures.find((d) => d.includes("re-record")) ?? "Id evidence is needed for a pairing."}
+          process.stdout.write(`COMPOSE   ${o.hostDisplayName} [${o.hostSet}]: name-only match (${o.instances} instance(s)) \u2014 identity unproven, not confirmable. ${renderBindingsRemediation(o.remediation) ?? "Id evidence is needed for a pairing."}
 `);
         }
       }
@@ -17759,7 +18113,7 @@ function runEngineBrief(opts) {
       }
       if (proposals.length > 0) {
         disclosures.push(
-          `COMPOSITION NAME-ONLY: instance names match ${proposals.length} recorded component(s) (${proposals.map((p) => `${p.displayName}: ${p.instances} instance(s)`).join("; ")}) but identity is UNPROVEN \u2014 name evidence never auto-joins, so these regions are implemented locally. ${proposals.flatMap((p) => p.disclosures).find((d) => d.includes("re-record")) ?? "Record id evidence to make a pairing confirmable, or proceed self-contained."}`
+          `COMPOSITION NAME-ONLY: instance names match ${proposals.length} recorded component(s) (${proposals.map((p) => `${p.displayName}: ${p.instances} instance(s)`).join("; ")}) but identity is UNPROVEN \u2014 name evidence never auto-joins, so these regions are implemented locally. ${renderBindingsRemediation(proposals.find((p) => p.remediation !== void 0)?.remediation) ?? "Record id evidence to make a pairing confirmable, or proceed self-contained."}`
         );
       }
     } catch (err) {
@@ -18391,7 +18745,7 @@ var init_codeconnect = __esm({
 });
 
 // packages/mcp/src/server.ts
-import { createHash as createHash11 } from "node:crypto";
+import { createHash as createHash12 } from "node:crypto";
 import { existsSync as existsSync43, mkdtempSync as mkdtempSync3, readFileSync as readFileSync39, readdirSync as readdirSync17, writeFileSync as writeFileSync21 } from "node:fs";
 import os8 from "node:os";
 import path53 from "node:path";
@@ -18399,7 +18753,7 @@ import { fileURLToPath as fileURLToPath6 } from "node:url";
 import { z as z15 } from "zod";
 function sourceHash() {
   const dir = path53.dirname(fileURLToPath6(import.meta.url));
-  const h = createHash11("sha256");
+  const h = createHash12("sha256");
   for (const f of readdirSync17(dir).filter((n) => n.endsWith(".ts")).sort()) {
     h.update(f);
     h.update(readFileSync39(path53.join(dir, f)));
@@ -18545,6 +18899,40 @@ var init_server = __esm({
         schema: z15.object({ setDir: str("recording set directory") }),
         argv: (i) => ["record", "rest-fetch", "--set", i["setDir"]]
       },
+      {
+        name: "tendril_record_bindings",
+        description: "Fetch Figma's instance\u2192component bindings for an EXISTING MCP-recorded set \u2014 one or two batched REST calls, no re-recording, pixels/geometry/identity untouched. This is how components that are ALREADY recorded and generated become connectable: the bindings make cross-component pairing id-backed, so `tendril compose` can propose it for the human's confirm. Every binding is congruence-verified against the recorded metadata (a design that changed since recording refuses per pose, named). The CLI makes the requests itself with the user's connected Figma credential (tendril_figma_connect); you make NO Figma call. The result names the next step \u2014 including when no partner set is visible in the scanned root (co-locate the sets or pass compose --library). For sets recorded before file identity was captured, pass the design's file key as `file`.",
+        schema: z15.object({ setDir: str("recording set directory"), file: optStr("the design's file key (figma.com/design/<KEY>/\u2026) \u2014 only for sets whose manifest lacks figmaFile; an operator assertion, congruence still gates every binding") }),
+        argv: (i) => ["record", "bindings", "--set", i["setDir"], ...typeof i["file"] === "string" ? ["--file", i["file"]] : []]
+      },
+      {
+        name: "tendril_compose",
+        description: "Put ONE composition pairing in front of the user's BROWSER \u2014 phase one of the browser-approved connect (invariant-5 migration; the terminal `--confirm-compositions` path remains for humans at a TTY). Requires a portal session (tendril_login \u2014 one browser Approve). Returns the approve-page link: RELAY IT verbatim, name the account the result says to approve as, and never urge the decision \u2014 the card carries the engine's honest disclosures and the human reads them. Deny on the card is NOT NOW (this request only, never a permanent decline). You cannot decide this yourself on any channel: the portal accepts the decision only from the user's signed-in browser, and the terminal flag only from an interactive TTY. A host with several open pairings needs `pair` (one card = one decision). Then finish with tendril_compose_wait. Both recording sets must be visible in one scanned workspace \u2014 co-locate them or pass `library`.",
+        schema: z15.object({
+          setDir: str("the HOST recording set directory (the component that embeds the partner)"),
+          pair: optStr("the pair-key to request when the host has several open pairings"),
+          library: z15.array(z15.string()).optional().describe("workspace root(s) holding the partner recording set(s) \u2014 required when they live in another project root"),
+          portal: optStr("portal origin override (defaults to the stored session's portal)")
+        }),
+        argv: (i) => [
+          "compose",
+          "--set",
+          i["setDir"],
+          "--approve-start",
+          ...typeof i["pair"] === "string" ? ["--pair", i["pair"]] : [],
+          ...Array.isArray(i["library"]) ? i["library"].flatMap((d) => ["--library", d]) : [],
+          ...typeof i["portal"] === "string" ? ["--to", i["portal"]] : []
+        ]
+      },
+      {
+        name: "tendril_compose_wait",
+        description: 'Phase two of the browser-approved connect. Waits in a BOUNDED window (~1 minute per call) for the user\'s decision on the card tendril_compose returned; on Approve it records the SAME manifest entry the terminal confirm writes \u2014 after re-deriving the pairing from the CURRENT recordings and refusing if anything changed underneath the click (the click is then not wrong; the project moved \u2014 run the connect again). While undecided, each call returns `status: "approval-pending"` \u2014 a heartbeat, not a failure: one short liveness line to the user, then call again; the request stays live ~30 minutes, and a decided card can take moments to land. NOT NOW, a lapse, and success each arrive as their own sentence \u2014 report the one you got. After success: regenerate the HOST bundle with the same library roots (brief \u2192 generate \u2192 score \u2192 verify), then republish \u2014 announce the republish in one line first. Compose waits follow the same heartbeat contract as publish waits: never urge, never call an in-flight wait stuck.',
+        schema: z15.object({
+          setDir: str("the same HOST set directory tendril_compose was called with"),
+          portal: optStr("portal origin override (must match tendril_compose's)")
+        }),
+        argv: (i) => ["compose", "--set", i["setDir"], "--approve-wait", "--wait-window", "55", ...typeof i["portal"] === "string" ? ["--to", i["portal"]] : []]
+      },
       {
         name: "tendril_record_fetch",
         description: "Download a Figma asset URL (from get_screenshot's image_url) straight to disk and ingest it as the rep's envelope \u2014 the fallback when only the screenshot piece needs (re-)recording; for a rep's standard three recordings PREFER tendril_record_ingest_rep. Never download the image yourself: the bytes must not pass through your context.",
@@ -19023,864 +19411,1321 @@ var init_permissions = __esm({
   }
 });
 
-// packages/cli/src/commands/login.ts
-var login_exports = {};
-__export(login_exports, {
-  DEFAULT_PORTAL_ORIGIN: () => DEFAULT_PORTAL_ORIGIN,
-  runLogin: () => runLogin,
-  runLogout: () => runLogout
+// packages/cli/src/commands/publish.ts
+var publish_exports = {};
+__export(publish_exports, {
+  approveWaitPhase: () => approveWaitPhase,
+  resolveOrigin: () => resolveOrigin,
+  runPublish: () => runPublish,
+  spendPendingApproval: () => spendPendingApproval
 });
-import { spawn } from "node:child_process";
-import { existsSync as existsSync45, mkdirSync as mkdirSync14, readFileSync as readFileSync41, rmSync as rmSync8, writeFileSync as writeFileSync23 } from "node:fs";
+import { existsSync as existsSync45, readFileSync as readFileSync41, rmSync as rmSync8, writeFileSync as writeFileSync23 } from "node:fs";
 import path55 from "node:path";
-import { isCancel as isCancel3, password as password2 } from "@clack/prompts";
-async function runLogin(opts, deps) {
-  const origin = (opts.to ?? process.env["TENDRIL_PORTAL_URL"] ?? DEFAULT_PORTAL_ORIGIN).replace(/\/+$/, "");
-  if (!isSecureOrigin(origin)) {
+async function runPublish(opts) {
+  if (opts.waitWindowSeconds !== void 0 && opts.approveWait !== true) {
     fail(opts, ExitCode.InputValidation, {
-      error: `${origin} is not https, so a session token sent there would travel in the clear`,
-      code: "portal-not-https",
-      remediation: "Use the https:// address of your portal. Only 127.0.0.1 and localhost are exempt, for local development."
+      error: "--wait-window only bounds an --approve-wait poll",
+      code: "wait-window-without-approve-wait",
+      remediation: "Pass --approve-wait with it, or drop --wait-window."
     });
   }
-  if (opts.deviceStart === true) {
-    await deviceStartPhase(opts, origin, deps ?? realDeps());
-    return;
+  if (opts.waitWindowSeconds !== void 0 && (!Number.isFinite(opts.waitWindowSeconds) || opts.waitWindowSeconds <= 0)) {
+    fail(opts, ExitCode.InputValidation, {
+      error: "--wait-window needs a positive number of seconds",
+      code: "wait-window-invalid",
+      remediation: "Pass e.g. --wait-window 55."
+    });
   }
-  if (opts.deviceWait === true) {
-    await deviceWaitPhase(opts, deps ?? realDeps());
-    return;
+  const bundleDir = path55.resolve(opts.bundleDir);
+  const bundle = readBundle(opts, bundleDir);
+  const report = bundle.report;
+  if (typeof report["rulerExit"] !== "number" || !Number.isInteger(report["rulerExit"])) {
+    fail(opts, ExitCode.InputValidation, {
+      error: `${VERIFY_REPORT_FILENAME} does not state the ruler's exit code, and an absent exit code is not a passing one`,
+      code: "report-has-no-exit-code",
+      remediation: `Re-run \`${tendrilCommand(`verify ${opts.bundleDir}`)}\` with a current CLI \u2014 this report predates the field.`
+    });
   }
-  if (process.stdin.isTTY === true && opts.paste !== true) {
-    await deviceLogin(opts, origin, deps ?? realDeps());
-    return;
+  if (report["rulerExit"] !== 0) {
+    const why = typeof report["rulerRefusal"] === "string" ? ` \u2014 ${report["rulerRefusal"]}` : "";
+    fail(opts, ExitCode.VerificationFailed, {
+      error: `the ruler refused this run (exit ${String(report["rulerExit"])}), so it has nothing to publish${why}`,
+      code: "run-refused-by-ruler",
+      remediation: `Fix what the report names, re-run \`${tendrilCommand(`verify ${opts.bundleDir}`)}\` until it passes, then publish. A declined verdict never becomes a page.`
+    });
   }
-  await pasteLogin(opts, origin);
-}
-async function deviceLogin(opts, origin, deps) {
-  const started = await startHandshake(opts, origin, deps);
-  process.stderr.write(`
-  Open this link to approve the sign-in:
-
-    ${started.verificationUrl}
-
-`);
-  process.stderr.write(`  The page must show this code: ${started.userCode}
-`);
-  process.stderr.write(`  Approve it only if this terminal is yours.
-
-`);
-  deps.openBrowser(started.verificationUrl);
-  process.stderr.write(`  Waiting for the browser (about ten minutes before this code lapses) `);
-  const outcome = await waitForDecision(opts, origin, deps, started, () => process.stderr.write("."));
-  process.stderr.write("\n");
-  settleDecision(opts, origin, outcome);
-}
-async function waitForDecision(opts, origin, deps, started, onTick) {
-  const interval = Math.max(1, started.intervalSeconds);
-  const attempts = Math.ceil(660 / interval);
-  for (let n = 0; n < attempts; n += 1) {
-    await deps.sleep(interval);
-    const state = await pollHandshake(opts, origin, deps, started.deviceCode);
-    if (state.status === "pending") {
-      onTick();
-      continue;
+  const undisclosed = undisclosedTrustFacts(report);
+  if (undisclosed.length > 0) {
+    fail(opts, ExitCode.InputValidation, {
+      error: `this report carries a disclosure a published page cannot yet show, and a verdict shown without it is worse than no page: ${undisclosed.map((f) => `${f.pointer} \u2014 ${f.consequence}`).join("; ")}`,
+      code: "report-carries-an-unrenderable-disclosure",
+      remediation: "Resolve what the disclosure names \u2014 re-record so the set matches the bundle's stamp, or resolve the substituted font families \u2014 then re-verify and publish the clean run."
+    });
+  }
+  if (scoredRecordingSetHash(report) === void 0) {
+    fail(opts, ExitCode.InputValidation, {
+      error: "this report does not name the recording set these scores were measured against",
+      code: "report-names-no-recording-set",
+      remediation: `Re-run \`${tendrilCommand(`verify ${opts.bundleDir}`)}\` with a current CLI \u2014 the set identity rides the report.`
+    });
+  }
+  const componentName = (opts.name ?? bundle.manifest.name).trim();
+  const surface = classifyBundleSurface(bundle.files, { entry: bundle.manifest.entry });
+  if (surface.unknown.length > 0) {
+    fail(opts, ExitCode.InputValidation, {
+      error: `this bundle carries files a portal does not recognise, and publishing guesses at nothing: ${surface.unknown.join(", ")}`,
+      code: "bundle-carries-unrecognised-files",
+      remediation: `Remove them from ${opts.bundleDir}, or re-emit the bundle. Publishing them would ship something nobody reviewed; dropping them silently would ship evidence with a hole in it.`
+    });
+  }
+  const sheetEntry = surface.published.find((p) => p.role === "inspect-sheet");
+  if (sheetEntry !== void 0) {
+    const missingCrops = missingInspectCrops(
+      readFileSync41(path55.join(bundleDir, sheetEntry.path), "utf8"),
+      surface.published.map((p) => p.path)
+    );
+    if (missingCrops.length > 0) {
+      fail(opts, ExitCode.InputValidation, {
+        error: `this bundle's inspect sheet references images it does not carry, and half a sheet reads as a broken component: ${missingCrops.join(", ")}`,
+        code: "inspect-sheet-without-its-crops",
+        remediation: `Re-run \`${tendrilCommand(`inspect ${opts.bundleDir}`)}\` to rebuild the sheet and its crops together, or delete the sheet and publish without it.`
+      });
     }
-    if (state.status === "approved") return state;
-    return { status: state.status };
   }
-  return { status: "gave-up" };
-}
-function settleDecision(opts, origin, outcome) {
-  switch (outcome.status) {
-    case "approved":
-      writeStoredSession({ origin, token: outcome.token });
-      emitData(opts, { origin, storedAt: sessionPath(), via: "device" }, () => {
-        process.stdout.write(`signed in to ${origin}
+  if (surface.missingRequired.length > 0) {
+    fail(opts, ExitCode.InputValidation, {
+      error: `this bundle is missing what a publishable bundle cannot be without: ${surface.missingRequired.join(", ")}`,
+      code: "bundle-missing-required-role",
+      remediation: `Run \`${tendrilCommand(`verify ${opts.bundleDir}`)}\` \u2014 the evidence a page shows is written by that run. Required: ${REQUIRED_ROLES.join(", ")}.`
+    });
+  }
+  const recorded = readScoredFiles(report);
+  if (recorded === void 0) {
+    fail(opts, ExitCode.InputValidation, {
+      error: `${VERIFY_REPORT_FILENAME} does not record the files this run was scored beside, so nothing ties this bundle's bytes to its verdict`,
+      code: "report-records-no-file-digests",
+      remediation: `Re-run \`${tendrilCommand(`verify ${opts.bundleDir}`)}\` with a current CLI \u2014 this report predates the field.`
+    });
+  } else {
+    const delta = compareScoredFiles(recorded, digestScoredFiles(bundleDir, bundle.manifest.entry));
+    const disagreements = [
+      ...delta.changed.map((p) => `${p} (bytes differ from the scored run)`),
+      ...delta.missing.map((p) => `${p} (scored, no longer in the bundle)`),
+      ...delta.unscored.map((p) => `${p} (in the bundle, never scored)`)
+    ];
+    if (disagreements.length > 0) {
+      fail(opts, ExitCode.InputValidation, {
+        error: `this bundle is not the one the ruler scored: ${disagreements.join("; ")}`,
+        code: "bundle-disagrees-with-scored-files",
+        remediation: `Re-run \`${tendrilCommand(`verify ${opts.bundleDir}`)}\` so the verdict describes these bytes. A page must never show code the ruler never saw.`
+      });
+    }
+  }
+  const figmaFile = bundle.manifest.provenance.recordingSet.figmaFile ?? null;
+  if (opts.dryRun) {
+    emitData(
+      opts,
+      {
+        bundleDir,
+        componentName,
+        figmaFile,
+        entry: bundle.manifest.entry,
+        publishes: surface.published,
+        excluded: surface.excluded,
+        rulerVersion: report["environment"]?.["ruler"] ?? null,
+        wouldPublish: true
+      },
+      () => {
+        process.stdout.write(`${componentName} would publish ${String(surface.published.length)} files:
 `);
-        process.stdout.write(`  token stored at ${sessionPath()} (readable only by you)
+        for (const entry of surface.published) process.stdout.write(`  ${entry.path}  (${entry.role})
 `);
+        for (const left of surface.excluded) process.stdout.write(`  \u2014 leaving ${left.path} behind (${left.reason})
+`);
+      }
+    );
+    return;
+  }
+  const origin = resolveOrigin(opts);
+  const client = opts.client ?? httpClient(opts, origin);
+  if (opts.approveWait === true) {
+    const phase = await approveWaitPhase(opts, client, bundleDir, { componentName, figmaFile });
+    if (phase === "yielded") return;
+  }
+  void reportRunPresence(componentName, "publishing");
+  emitProgress(0, 1, "requesting the upload plan from the portal");
+  let opened = await client.begin({
+    componentName,
+    figmaFile,
+    entry: bundle.manifest.entry,
+    files: bundle.files,
+    report: bundle.reportText
+  });
+  if (!opened.ok && opened.needsConfirmation !== void 0 && opts.approveWait !== true) {
+    const flow = await runApprovalFlow(opts, client, bundleDir, {
+      componentName,
+      figmaFile,
+      begin: () => client.begin({ componentName, figmaFile, entry: bundle.manifest.entry, files: bundle.files, report: bundle.reportText })
+    });
+    if (flow === void 0) return;
+    opened = flow;
+  }
+  if (!opened.ok) {
+    if (opened.needsConfirmation !== void 0) {
+      fail(opts, ExitCode.ConfirmationRequired, {
+        error: opened.refusal,
+        code: "first-publish-unconfirmed",
+        remediation: "Approve it in your browser \u2014 run the publish again and open the link it prints."
       });
-      return;
-    case "denied":
-      fail(opts, ExitCode.General, {
-        error: "the sign-in was denied in the browser",
-        code: "login-denied",
-        remediation: `If that was not you saying no, run ${tendrilCommand("login")} again and approve the fresh code.`
-      });
-      break;
-    case "expired":
-    case "gave-up":
-      fail(opts, ExitCode.General, {
-        error: outcome.status === "expired" ? "the sign-in code lapsed before anyone approved it \u2014 they live ten minutes" : "gave up waiting for the browser approval",
-        code: "login-expired",
-        remediation: `Run ${tendrilCommand("login")} again for a fresh code.`
+    }
+    refuse(opts, opened, "publish-refused");
+  }
+  if (opts.approveWait === true) spendPendingApproval();
+  const uploaded = [];
+  for (const object of opened.value.plan.objects) {
+    const file = path55.join(bundleDir, object.relPath);
+    if (!existsSync45(file)) {
+      fail(opts, ExitCode.InputValidation, {
+        error: `the portal expects ${object.relPath}, and it is not in ${opts.bundleDir}`,
+        code: "planned-file-missing",
+        remediation: `Re-run \`${tendrilCommand(`verify ${opts.bundleDir}`)}\` and publish again \u2014 a publication is refused rather than going live with a hole in its evidence.`
       });
-      break;
-    default:
+    }
+    const sent = await client.upload({
+      publicationId: opened.value.publicationId,
+      relPath: object.relPath,
+      bytes: new Uint8Array(readFileSync41(file))
+    });
+    if (!sent.ok) refuse(opts, sent, "upload-refused", true);
+    uploaded.push({ relPath: object.relPath, deduplicated: sent.value.deduplicated });
+    emitProgress(uploaded.length, opened.value.plan.objects.length, `uploading ${object.relPath}`);
+  }
+  emitProgress(uploaded.length, uploaded.length, "upload complete \u2014 committing the publication");
+  const committed = await client.commit({ publicationId: opened.value.publicationId });
+  if (committed.ok) {
+    await endRunPresence(componentName);
+  }
+  if (!committed.ok) {
+    if (committed.missing !== void 0 && committed.missing.length > 0) {
       fail(opts, ExitCode.General, {
-        error: "the portal no longer recognises this sign-in attempt",
-        code: "login-unknown",
-        remediation: `Run ${tendrilCommand("login")} again. If this repeats, the approval may be racing another terminal \u2014 approve only one at a time.`
+        error: `this publication is missing objects the bundle declared, and a verdict beside missing evidence is worse than no page: ${committed.missing.join(", ")}`,
+        code: "publication-incomplete",
+        remediation: `Run \`${tendrilCommand(`publish ${opts.bundleDir}`)}\` again \u2014 it rejoins this same unfinished publication and re-sends only what is missing.`
       });
+    }
+    refuse(opts, committed, "commit-refused", true);
   }
-}
-function pendingLoginPath() {
-  return path55.join(path55.dirname(sessionPath()), "pending-login.json");
-}
-async function deviceStartPhase(opts, origin, deps) {
-  const started = await startHandshake(opts, origin, deps);
-  const file = pendingLoginPath();
-  mkdirSync14(path55.dirname(file), { recursive: true });
-  writeFileSync23(file, `${JSON.stringify({ origin, ...started }, null, 2)}
-`, { mode: 384 });
-  deps.openBrowser(started.verificationUrl);
   emitData(
     opts,
     {
-      verificationUrl: started.verificationUrl,
-      userCode: started.userCode,
-      expiresAt: started.expiresAt,
-      origin,
-      next: "Show the user the link and the code \u2014 they approve in the browser, and must check the page shows this exact code. Then run login --device-wait (the tendril_login_wait tool) to finish."
+      publicationId: committed.value.publicationId,
+      url: committed.value.url,
+      componentName,
+      figmaFile: opened.value.figmaFile,
+      rulerVersion: opened.value.rulerVersion,
+      resumed: opened.value.resumed === true,
+      files: uploaded
     },
     () => {
-      process.stdout.write(`open ${started.verificationUrl}
+      const reused = uploaded.filter((u) => u.deduplicated).length;
+      if (opened.value.resumed === true) process.stdout.write(`resumed the unfinished publish of ${componentName}
 `);
-      process.stdout.write(`  the page must show: ${started.userCode}
+      process.stdout.write(`published ${componentName} \u2014 ${String(uploaded.length)} files`);
+      process.stdout.write(reused > 0 ? ` (${String(reused)} you already had)
+` : "\n");
+      process.stdout.write(`  ${committed.value.url}
 `);
-      process.stdout.write(`  then: ${tendrilCommand("login --device-wait")}
+      process.stdout.write(`  verdict as scored by ruler ${opened.value.rulerVersion}
 `);
     }
   );
 }
-async function deviceWaitPhase(opts, deps) {
-  const file = pendingLoginPath();
-  let pending;
-  if (existsSync45(file)) {
-    try {
-      const parsed = JSON.parse(readFileSync41(file, "utf8"));
-      if (typeof parsed.origin === "string" && typeof parsed.deviceCode === "string" && typeof parsed.intervalSeconds === "number") {
-        pending = parsed;
-      }
-    } catch {
-    }
+function readBundle(opts, bundleDir) {
+  const manifestPath2 = path55.join(bundleDir, "component.json");
+  const reportPath = path55.join(bundleDir, EVIDENCE_DIR, VERIFY_REPORT_FILENAME);
+  if (!existsSync45(manifestPath2)) {
+    fail(opts, ExitCode.InputValidation, {
+      error: `there is no component.json in ${opts.bundleDir}, so this is not a bundle`,
+      code: "not-a-bundle",
+      remediation: `Point publish at a directory a Tendril run produced. \`${tendrilCommand("generate --help")}\` shows how one is made.`
+    });
   }
-  if (pending === void 0) {
+  if (!existsSync45(reportPath)) {
     fail(opts, ExitCode.InputValidation, {
-      error: "there is no sign-in waiting to finish",
-      code: "no-pending-login",
-      remediation: `Start one first: ${tendrilCommand("login --device-start")} (the tendril_login tool).`
+      error: `this bundle has never been verified \u2014 there is no ${EVIDENCE_DIR}/${VERIFY_REPORT_FILENAME}`,
+      code: "bundle-not-verified",
+      remediation: `Run \`${tendrilCommand(`verify ${opts.bundleDir}`)}\` first. Verification is free and needs no account; publishing without it would put a page up with no verdict on it.`
     });
   }
-  const done = () => rmSync8(file, { force: true });
-  const total = Math.ceil(660 / Math.max(1, pending.intervalSeconds));
-  let ticks = 0;
-  const outcome = await waitForDecision(opts, pending.origin, deps, pending, () => {
-    ticks += 1;
-    emitProgress(ticks, total, "waiting for the browser approval");
-  });
-  done();
-  settleDecision(opts, pending.origin, outcome);
-}
-async function startHandshake(opts, origin, deps) {
-  let response;
+  const { manifest } = readBundleManifest(readFileSync41(manifestPath2, "utf8"));
+  if (manifest === void 0) {
+    fail(opts, ExitCode.InputValidation, {
+      error: "component.json did not parse as a bundle manifest",
+      code: "no-mount-contract",
+      remediation: `Re-emit the bundle \u2014 \`${tendrilCommand(`verify ${opts.bundleDir}`)}\` rewrites component.json \u2014 then publish.`
+    });
+  }
+  const reportText = readFileSync41(reportPath, "utf8");
+  let report;
   try {
-    response = await deps.fetch(`${origin}/api/device`, { method: "POST", headers: { "content-type": "application/json" }, body: "{}" });
+    report = JSON.parse(reportText);
   } catch (error) {
-    return unreachable(opts, origin, error.message);
+    fail(opts, ExitCode.InputValidation, {
+      error: `${EVIDENCE_DIR}/${VERIFY_REPORT_FILENAME} is not parseable JSON: ${error.message}`,
+      code: "report-unparseable",
+      remediation: `Re-run \`${tendrilCommand(`verify ${opts.bundleDir}`)}\` \u2014 that file is written by the ruler and should never be edited by hand.`
+    });
   }
-  if (!response.ok) return unreachable(opts, origin, `the portal answered ${String(response.status)}`);
-  const body = await response.json();
-  if (typeof body.deviceCode !== "string" || typeof body.userCode !== "string" || typeof body.verificationUrl !== "string" || typeof body.intervalSeconds !== "number" || typeof body.expiresAt !== "string") {
-    return unreachable(opts, origin, "the portal's answer was not a device handshake");
+  if (report === null || typeof report !== "object" || Array.isArray(report)) {
+    fail(opts, ExitCode.InputValidation, {
+      error: `${EVIDENCE_DIR}/${VERIFY_REPORT_FILENAME} parses, but a verify report is a JSON object and this is not one`,
+      code: "report-not-an-object",
+      remediation: `Re-run \`${tendrilCommand(`verify ${opts.bundleDir}`)}\`.`
+    });
   }
-  return body;
+  return { manifest, report, reportText, files: bundleFiles(bundleDir) };
 }
-async function pollHandshake(opts, origin, deps, deviceCode) {
-  let response;
-  try {
-    response = await deps.fetch(`${origin}/api/device/token`, {
-      method: "POST",
-      headers: { "content-type": "application/json" },
-      body: JSON.stringify({ deviceCode })
+function resolveOrigin(opts) {
+  const named = (opts.to ?? process.env["TENDRIL_PORTAL_URL"] ?? "").replace(/\/+$/, "");
+  if (named !== "") return named;
+  if ((process.env["TENDRIL_TOKEN"] ?? "") !== "") return "";
+  return (readStoredSession()?.origin ?? "").replace(/\/+$/, "");
+}
+function httpClient(opts, origin) {
+  if (origin === "") {
+    fail(opts, ExitCode.InputValidation, {
+      error: "no portal to publish to",
+      code: "no-portal-configured",
+      remediation: `Pass \`--to <url>\` or set TENDRIL_PORTAL_URL. \`${tendrilCommand(`publish ${opts.bundleDir} --dry-run`)}\` shows exactly what would be published without needing one.`
     });
-  } catch {
-    return { status: "pending" };
   }
-  if (!response.ok) return { status: "pending" };
-  const body = await response.json();
-  if (body.status === "approved" && typeof body.token === "string") return { status: "approved", token: body.token };
-  if (body.status === "denied" || body.status === "expired" || body.status === "unknown") return { status: body.status };
-  return { status: "pending" };
+  if (!isSecureOrigin(origin)) {
+    fail(opts, ExitCode.InputValidation, {
+      error: `${origin} is not https, so a session token sent there would travel in the clear`,
+      code: "portal-not-https",
+      remediation: "Use the https:// address of your portal. Only 127.0.0.1 and localhost are exempt, for local development."
+    });
+  }
+  const found = tokenFor(origin);
+  if (!found.ok && found.reason === "origin-mismatch") {
+    fail(opts, ExitCode.Auth, {
+      error: `the session available here belongs to ${found.boundTo}, and this would publish to ${origin}`,
+      code: "session-belongs-to-another-portal",
+      remediation: found.from === "env" ? `TENDRIL_TOKEN is pinned to TENDRIL_PORTAL_URL (${found.boundTo}). Publish to that portal, or set both to ${origin} together \u2014 a token is a credential for one host.` : `Sign in to ${origin}. The stored session is for ${found.boundTo}, and sending it elsewhere would hand that host a live credential.`
+    });
+  }
+  if (!found.ok) {
+    fail(opts, ExitCode.Auth, {
+      error: `no session for ${origin}`,
+      code: "not-signed-in",
+      remediation: `Run \`${tendrilCommand(`login --to ${origin}`)}\` and paste the token your portal operator gave you (or set TENDRIL_TOKEN and TENDRIL_PORTAL_URL together for this shell). Verification stays free and account-less; only publishing needs an account.`
+    });
+  }
+  return new HttpPublishClient({ origin, token: found.token });
 }
-function unreachable(opts, origin, detail) {
-  fail(opts, ExitCode.General, {
-    error: `could not start a sign-in with ${origin}: ${detail}`,
-    code: "portal-unreachable",
-    remediation: "Check your connection and try again. If your portal is self-hosted, confirm the --to URL."
+function refuse(opts, sent, code, rejoins = false) {
+  const detail = sent.detail === void 0 || sent.detail.length === 0 ? "" : `: ${sent.detail.join(", ")}`;
+  const retry = rejoins ? `run \`${tendrilCommand(`publish ${opts.bundleDir}`)}\` again \u2014 it rejoins this same unfinished publication rather than starting a second one` : `run \`${tendrilCommand(`publish ${opts.bundleDir}`)}\` again`;
+  fail(opts, sent.status === 401 ? ExitCode.Auth : ExitCode.General, {
+    error: `${sent.refusal}${detail}`,
+    code,
+    remediation: sent.status === 401 ? `That session is no longer valid. Run \`${tendrilCommand(`login --to ${resolveOrigin(opts)}`)}\` and paste a fresh token.` : sent.status >= 500 ? `The portal failed on its side. Quote the error id above to whoever runs it, then ${retry}.` : `Fix what is named above and ${retry}.`
   });
 }
-function realDeps() {
-  return {
-    fetch: globalThis.fetch.bind(globalThis),
-    sleep: (seconds) => new Promise((resolve) => setTimeout(resolve, seconds * 1e3)),
-    openBrowser: (url) => {
-      const [cmd, args] = process.platform === "darwin" ? ["open", [url]] : process.platform === "win32" ? ["cmd", ["/c", "start", "", url]] : ["xdg-open", [url]];
-      try {
-        spawn(cmd, args, { stdio: "ignore", detached: true }).on("error", () => void 0).unref();
-      } catch {
+function pendingApprovalPath() {
+  return path55.join(path55.dirname(sessionPath()), "pending-publish.json");
+}
+async function runApprovalFlow(opts, client, bundleDir, input) {
+  const requested = await client.requestApproval({ componentName: input.componentName, figmaFile: input.figmaFile });
+  if (!requested.ok) refuse(opts, requested, "approval-request-refused");
+  const approval = requested.value;
+  const who = await client.whoami?.();
+  const asAccount = who?.ok === true && who.value.email !== "" ? ` signed in as ${who.value.email}` : "";
+  if (opts.approveStart === true) {
+    const pending = { ...approval, bundleDir, componentName: input.componentName, figmaFile: input.figmaFile, requestedAt: (/* @__PURE__ */ new Date()).toISOString() };
+    writeFileSync23(pendingApprovalPath(), `${JSON.stringify(pending, null, 2)}
+`, { mode: 384 });
+    await endRunPresence(input.componentName);
+    emitData(
+      opts,
+      {
+        status: "approval-pending",
+        approveUrl: approval.approveUrl,
+        componentName: input.componentName,
+        ...asAccount === "" ? {} : { approveAsAccount: who?.ok === true ? who.value.email : "" },
+        expiresAt: approval.expiresAt,
+        next: `open the approve page in the browser${asAccount}, click Approve, then finish with --approve-wait`
+      },
+      () => {
+        process.stdout.write(`Approval requested for ${JSON.stringify(input.componentName)}.
+`);
+        process.stdout.write(`Approve it here${asAccount}: ${approval.approveUrl}
+`);
+        process.stdout.write(`Then finish with: ${tendrilCommand(`publish ${opts.bundleDir} --approve-wait`)}
+`);
+      }
+    );
+    return void 0;
+  }
+  process.stderr.write(`This component's FIRST publish needs your approval in the browser${asAccount}:
+  ${approval.approveUrl}
+`);
+  process.stderr.write(`Waiting for your decision (lapses at ${approval.expiresAt.slice(11, 16)} UTC)\u2026
+`);
+  const decided = await waitForApproval(opts, client, approval);
+  if (decided === "approved") return input.begin();
+  await endRunPresence(input.componentName);
+  failDecision(opts, decided === "window-elapsed" ? "expired" : decided);
+}
+async function approveWaitPhase(opts, client, bundleDir, subject) {
+  const file = pendingApprovalPath();
+  let pending;
+  if (existsSync45(file)) {
+    try {
+      const parsed = JSON.parse(readFileSync41(file, "utf8"));
+      if (typeof parsed.approvalId === "string" && typeof parsed.approveUrl === "string" && typeof parsed.expiresAt === "string") {
+        pending = { pollSeconds: 3, bundleDir, ...parsed };
       }
+    } catch {
     }
-  };
-}
-async function pasteLogin(opts, origin) {
-  const token = await readToken(opts);
-  if (token === void 0 || token.trim() === "") {
+  }
+  if (pending === void 0) {
     fail(opts, ExitCode.InputValidation, {
-      error: "no token was given",
-      code: "no-token",
-      remediation: `Paste the token when prompted, or pipe it: \`echo "<token>" | ${tendrilCommand(`login --to ${origin}`)}\`.`
+      error: "there is no publish approval waiting to finish",
+      code: "no-pending-approval",
+      remediation: `Start one first: ${tendrilCommand(`publish ${opts.bundleDir} --approve-start`)} (the tendril_publish tool).`
     });
   }
-  const trimmed = token.trim();
-  if (!/^[A-Za-z0-9_-]{16,512}$/.test(trimmed)) {
+  if (pending.componentName !== void 0 && pending.componentName !== subject.componentName) {
     fail(opts, ExitCode.InputValidation, {
-      error: "that does not look like a Tendril session token",
-      code: "malformed-token",
-      remediation: "Tokens are a single line of letters, digits, hyphens and underscores. Check for a stray space or a truncated paste."
+      error: `the waiting approval is for ${JSON.stringify(pending.componentName)}, and this publish is ${JSON.stringify(subject.componentName)}`,
+      code: "pending-approval-mismatch",
+      remediation: `Finish that one first (${tendrilCommand(`publish ${pending.bundleDir} --approve-wait`)}), or start this one fresh with --approve-start \u2014 starting one replaces the waiting slot.`
     });
   }
-  writeStoredSession({ origin, token: trimmed });
-  emitData(opts, { origin, storedAt: sessionPath(), via: "paste" }, () => {
-    process.stdout.write(`signed in to ${origin}
-`);
-    process.stdout.write(`  token stored at ${sessionPath()} (readable only by you)
+  const done = () => rmSync8(file, { force: true });
+  const decided = await waitForApproval(opts, client, pending);
+  if (decided === "window-elapsed") {
+    const who = await client.whoami?.();
+    const asAccount = who?.ok === true && who.value.email !== "" ? who.value.email : void 0;
+    emitData(
+      opts,
+      {
+        status: "approval-pending",
+        approveUrl: pending.approveUrl,
+        ...asAccount !== void 0 ? { approveAsAccount: asAccount } : {},
+        expiresAt: pending.expiresAt,
+        windowSeconds: opts.waitWindowSeconds ?? 0,
+        ...pending.requestedAt !== void 0 ? { waitedTotalSeconds: Math.max(0, Math.round((Date.now() - Date.parse(pending.requestedAt)) / 1e3)) } : {},
+        remainingSeconds: Math.max(0, Math.round((Date.parse(pending.expiresAt) - Date.now()) / 1e3)),
+        next: "the approval request is STILL LIVE and undecided \u2014 tell the user in one short line you are still waiting for their Approve click (restate the approve link and the account to approve as, ONLY if they seem lost; never urge the decision), then run the wait again to keep waiting"
+      },
+      () => {
+        process.stdout.write(`Still waiting for the browser approval (wait window elapsed; the request stays live until ${pending.expiresAt.slice(11, 16)} UTC): ${pending.approveUrl}
 `);
-  });
+      }
+    );
+    return "yielded";
+  }
+  if (decided !== "approved") {
+    done();
+    failDecision(opts, decided);
+  }
+  return "proceed";
 }
-async function readToken(opts) {
-  if (process.stdin.isTTY === true) {
-    const entered = await password2({ message: "Paste your Tendril portal token (it will not be shown)" });
-    if (isCancel3(entered)) {
-      fail(opts, ExitCode.General, { error: "cancelled", code: "cancelled", remediation: "Run it again when you have the token." });
-    }
-    return entered;
+function spendPendingApproval() {
+  rmSync8(pendingApprovalPath(), { force: true });
+}
+async function waitForApproval(opts, client, approval) {
+  const interval = Math.max(1, approval.pollSeconds) * 1e3;
+  const capMs = opts.waitWindowSeconds !== void 0 ? Math.max(1, opts.waitWindowSeconds) * 1e3 : APPROVAL_WAIT_CAP_MS;
+  const total = Math.ceil(capMs / interval);
+  for (let tick = 1; tick <= total; tick += 1) {
+    const polled = await client.pollApproval({ approvalId: approval.approvalId });
+    if (!polled.ok) refuse(opts, polled, "approval-poll-refused");
+    if (polled.value.status !== "pending") return polled.value.status;
+    emitProgress(tick, total, "waiting for the browser approval");
+    await new Promise((resolve) => setTimeout(resolve, interval));
   }
-  const chunks = [];
-  for await (const chunk of process.stdin) chunks.push(chunk);
-  return Buffer.concat(chunks).toString("utf8").split("\n")[0];
+  return opts.waitWindowSeconds !== void 0 ? "window-elapsed" : "expired";
 }
-function runLogout(opts) {
-  const stored = readStoredSession();
-  if (stored === void 0) {
-    emitData(opts, { signedOut: true, wasSignedIn: false }, () => process.stdout.write("you were not signed in\n"));
-    return;
+function failDecision(opts, decided) {
+  if (decided === "denied") {
+    fail(opts, ExitCode.ConfirmationRequired, {
+      error: "the publish was DENIED in the browser \u2014 the human said no",
+      code: "publish-approval-denied",
+      remediation: "Nothing was published. If minds change, run the publish again \u2014 it makes a fresh request."
+    });
   }
-  clearStoredSession();
-  emitData(opts, { signedOut: true, wasSignedIn: true, origin: stored.origin }, () => {
-    process.stdout.write(`this machine has forgotten its session for ${stored.origin}
-`);
-    process.stdout.write("  the session itself is still valid \u2014 sign out everywhere from the portal to end it\n");
+  fail(opts, ExitCode.ConfirmationRequired, {
+    error: decided === "expired" ? "the approval request lapsed before anyone decided it" : "the approval request is gone \u2014 it lapsed and was cleaned up, or was already spent",
+    code: "publish-approval-lapsed",
+    remediation: "Run the publish again for a fresh request, and decide it within its 30-minute window. If the approve page showed nothing waiting, the browser is signed in to a DIFFERENT account than this CLI \u2014 the page lists only its own account's requests."
   });
 }
-var DEFAULT_PORTAL_ORIGIN;
-var init_login = __esm({
-  "packages/cli/src/commands/login.ts"() {
+var APPROVAL_WAIT_CAP_MS;
+var init_publish = __esm({
+  "packages/cli/src/commands/publish.ts"() {
     "use strict";
     init_src3();
+    init_src4();
     init_invocation();
     init_output();
     init_publish_client();
-    DEFAULT_PORTAL_ORIGIN = "https://app.trytendril.com";
+    init_run_presence();
+    APPROVAL_WAIT_CAP_MS = 31 * 6e4;
   }
 });
 
-// packages/cli/src/commands/figma-connect.ts
-var figma_connect_exports = {};
-__export(figma_connect_exports, {
-  runFigmaConnect: () => runFigmaConnect
+// packages/cli/src/commands/compose-approve.ts
+var compose_approve_exports = {};
+__export(compose_approve_exports, {
+  composeSubjectDigest: () => composeSubjectDigest,
+  composeSubjectFor: () => composeSubjectFor,
+  runComposeApprove: () => runComposeApprove,
+  runComposeApproveStart: () => runComposeApproveStart,
+  runComposeApproveWait: () => runComposeApproveWait
 });
-import { existsSync as existsSync46, mkdirSync as mkdirSync15, readFileSync as readFileSync42, rmSync as rmSync9, writeFileSync as writeFileSync24 } from "node:fs";
+import { createHash as createHash13 } from "node:crypto";
+import { existsSync as existsSync46, mkdirSync as mkdirSync14, readFileSync as readFileSync42, rmSync as rmSync9, writeFileSync as writeFileSync24 } from "node:fs";
 import path56 from "node:path";
-function pendingConnectPath() {
-  return path56.join(path56.dirname(sessionPath()), "pending-figma-connect.json");
-}
-function resolveOrigin(opts) {
-  const named = (opts.to ?? process.env["TENDRIL_PORTAL_URL"] ?? "").replace(/\/+$/, "");
-  if (named !== "") return named;
-  if ((process.env["TENDRIL_TOKEN"] ?? "") !== "") return "";
-  return (readStoredSession()?.origin ?? "").replace(/\/+$/, "");
+function composeSubjectDigest(subject) {
+  const preimage = JSON.stringify([
+    subject.hostComponent,
+    subject.hostFigmaFile,
+    subject.hostManifestSha256,
+    subject.pairKey,
+    subject.partnerManifestSha256,
+    subject.instances.map((i) => [i.hostRep, i.instanceId, i.poseVariantNodeId]),
+    subject.disclosures
+  ]);
+  return createHash13("sha256").update(preimage, "utf8").digest("hex");
+}
+function composeSubjectFor(hostSet, pair) {
+  const manifest = loadManifest(hostSet);
+  const canonical = {
+    hostComponent: manifest.component,
+    hostFigmaFile: manifest.figmaFile ?? "unidentified",
+    hostManifestSha256: createHash13("sha256").update(readFileSync42(path56.join(hostSet, "recording-set.json"))).digest("hex"),
+    pairKey: pair.key,
+    partnerManifestSha256: pair.partnerDirs.map((d) => [fromStoredRel(path56.relative(hostSet, d)), createHash13("sha256").update(readFileSync42(path56.join(d, "recording-set.json"))).digest("hex")]).sort((a, b) => a[0] < b[0] ? -1 : 1),
+    instances: [...pair.instances].map((i) => ({ hostRep: i.hostRep, instanceId: i.instanceId, poseVariantNodeId: i.poseVariantNodeId })).sort((a, b) => a.hostRep + a.instanceId < b.hostRep + b.instanceId ? -1 : 1),
+    disclosures: [...pair.disclosures]
+  };
+  const slugs = [...new Set(canonical.instances.map((i) => i.hostRep))].sort();
+  return {
+    canonical,
+    digest: composeSubjectDigest(canonical),
+    display: {
+      hostComponent: canonical.hostComponent,
+      hostFigmaFile: canonical.hostFigmaFile,
+      partnerDisplay: pair.displayName,
+      poseSummary: truncateWithMarker(slugs.join(", "), 500),
+      instanceCount: Math.min(canonical.instances.length, 500),
+      disclosures: truncateWithMarker(canonical.disclosures.join("\n"), 4096)
+    }
+  };
 }
-function bearerFor(opts, origin) {
+function composePortalClient(flags) {
+  if (flags.client !== void 0) return flags.client;
+  const origin = resolveOrigin({ to: flags.to });
   if (origin === "") {
-    fail(opts, ExitCode.InputValidation, {
-      error: "no portal to connect through",
+    fail(flags, ExitCode.InputValidation, {
+      error: "no portal to request the approval from",
       code: "no-portal-configured",
-      remediation: `Sign in first (${tendrilCommand("login")}) \u2014 the connect uses your portal account.`
+      remediation: "Pass --to <url> or set TENDRIL_PORTAL_URL \u2014 or decide in your terminal instead: `--confirm-compositions` needs no account at all."
+    });
+  }
+  if (!isSecureOrigin(origin)) {
+    fail(flags, ExitCode.InputValidation, {
+      error: `${origin} is not https, so a session token sent there would travel in the clear`,
+      code: "portal-not-https",
+      remediation: "Use the https:// address of your portal. Only 127.0.0.1 and localhost are exempt, for local development."
     });
   }
   const found = tokenFor(origin);
+  if (!found.ok && found.reason === "origin-mismatch") {
+    fail(flags, ExitCode.Auth, {
+      error: `the session available here belongs to ${found.boundTo}, and this would ask ${origin}`,
+      code: "session-belongs-to-another-portal",
+      remediation: "Sign in to the portal this workspace uses, or decide in your terminal with --confirm-compositions."
+    });
+  }
   if (!found.ok) {
-    fail(opts, ExitCode.Auth, {
+    fail(flags, ExitCode.Auth, {
       error: `no session for ${origin}`,
       code: "not-signed-in",
-      remediation: `Run ${tendrilCommand("login")} first \u2014 connecting Figma needs your signed-in portal account.`
+      remediation: "Agents: run tendril_login \u2014 the user signs in with ONE browser Approve, then re-run this. Terminal humans can skip the account entirely and decide with `--confirm-compositions` (composition never requires an account; only the browser-approve convenience does)."
     });
   }
-  return found.token;
+  return new HttpPublishClient({ origin, token: found.token });
 }
-async function runFigmaConnect(opts) {
-  const send = opts.fetchImpl ?? globalThis.fetch;
-  const origin = resolveOrigin(opts);
-  if (opts.wait === true) {
-    await waitPhase(opts, send);
-    return;
+function pendingComposePath() {
+  return path56.join(path56.dirname(sessionPath()), "pending-compose.json");
+}
+function openPairsFor(hostSet, roots) {
+  const scanRoots = [.../* @__PURE__ */ new Set([...roots, path56.dirname(hostSet)])];
+  const edges = composeReport(buildComposeIndex(scanRoots));
+  const pairs = substitutionPairs(edges, hostSet);
+  const { raw } = readManifestFile(hostSet);
+  const rawStanding = Array.isArray(raw["compositions"]) ? raw["compositions"] : [];
+  const decidedKeys = new Set(
+    rawStanding.map((e) => CompositionEntrySchema.safeParse(e)).filter((p) => p.success).map((p) => fromStoredRel(p.data.partner.key))
+  );
+  return pairs.filter((p) => !decidedKeys.has(p.key));
+}
+async function runComposeApproveStart(flags, hostSet, roots) {
+  if (!existsSync46(path56.join(hostSet, "recording-set.json"))) {
+    fail(flags, ExitCode.InputValidation, { error: `no recording-set.json in ${hostSet}`, code: "no-recording-set", remediation: "Point --set at a recorded host set." });
   }
-  const token = bearerFor(opts, origin);
-  const started = await startConnect(opts, send, origin, token);
-  if (opts.start === true) {
-    const pending = { origin, ...started };
-    mkdirSync15(path56.dirname(pendingConnectPath()), { recursive: true });
-    writeFileSync24(pendingConnectPath(), `${JSON.stringify(pending, null, 2)}
+  const open = openPairsFor(hostSet, roots);
+  if (open.length === 0) {
+    fail(flags, ExitCode.InputValidation, {
+      error: "no undecided id-backed composition pairs for this host \u2014 nothing to put in front of the human",
+      code: "compose-approve-nothing-open",
+      remediation: `${tendrilCommand(`compose --set ${quoteArg(hostSet)}`)} shows what exists (name-only proposals carry their own remediation); ${tendrilCommand(`record bindings --set ${quoteArg(hostSet)}`)} makes MCP-recorded pairings id-backed.`
+    });
+  }
+  let pair = open[0];
+  if (open.length > 1) {
+    if (flags.pair === void 0) {
+      fail(flags, ExitCode.InputValidation, {
+        error: `this host has ${open.length} open pairs and one card carries one decision \u2014 pick with --pair <key>: ${open.map((p) => p.key).join(", ")}`,
+        code: "compose-approve-pick-a-pair",
+        remediation: "Re-run with --pair <key> for the pairing to request; repeat for the others, one decision each."
+      });
+    }
+    const picked = open.find((p) => p.key === flags.pair);
+    if (picked === void 0) {
+      fail(flags, ExitCode.InputValidation, { error: `--pair "${flags.pair}" names no open pair (open: ${open.map((p) => p.key).join(", ")})`, code: "unknown-composition-pair", remediation: "Use a pair-key from the list." });
+    }
+    pair = picked;
+  } else if (flags.pair !== void 0 && flags.pair !== pair.key) {
+    fail(flags, ExitCode.InputValidation, { error: `--pair "${flags.pair}" names no open pair (open: ${pair.key})`, code: "unknown-composition-pair", remediation: "Use the open pair-key, or drop --pair." });
+  }
+  const subject = composeSubjectFor(hostSet, pair);
+  const client = composePortalClient(flags);
+  const requested = await client.requestComposeApproval({ subjectDigest: subject.digest, ...subject.display });
+  if (!requested.ok) {
+    if (requested.status === 404) {
+      fail(flags, ExitCode.General, {
+        error: "this portal does not offer compose approvals yet",
+        code: "compose-approvals-unavailable",
+        remediation: `Decide in your terminal instead: ${tendrilCommand(`compose --set ${quoteArg(hostSet)} --confirm-compositions`)} (human-only, no account needed).`
+      });
+    }
+    fail(flags, ExitCode.General, { error: requested.refusal, code: "compose-approval-request-refused", remediation: "Fix what is named above and re-run." });
+  }
+  const who = await client.whoami?.();
+  const asAccount = who?.ok === true && who.value.email !== "" ? who.value.email : void 0;
+  const pending = {
+    approvalId: requested.value.approvalId,
+    approveUrl: requested.value.approveUrl,
+    expiresAt: requested.value.expiresAt,
+    pollSeconds: requested.value.pollSeconds,
+    hostSet,
+    pairKey: pair.key,
+    subjectDigest: subject.digest,
+    canonical: subject.canonical,
+    roots,
+    requestedAt: (/* @__PURE__ */ new Date()).toISOString()
+  };
+  mkdirSync14(path56.dirname(pendingComposePath()), { recursive: true });
+  writeFileSync24(pendingComposePath(), `${JSON.stringify(pending, null, 2)}
 `, { mode: 384 });
-    (opts.openBrowser ?? (() => {
-    }))(started.connectUrl);
-    emitData(
-      opts,
-      {
-        connectUrl: started.connectUrl,
-        expiresAt: started.expiresAt,
-        origin,
-        next: "Show the user the link \u2014 they sign in (same account) and click Allow on Figma's consent screen. Then run figma-connect --wait (the tendril_figma_connect_wait tool) to finish."
-      },
-      () => {
-        process.stdout.write(`open ${started.connectUrl}
-`);
-        process.stdout.write(`  then: ${tendrilCommand("figma-connect --wait")}
+  emitData(
+    flags,
+    {
+      status: "approval-pending",
+      approveUrl: pending.approveUrl,
+      ...asAccount !== void 0 ? { approveAsAccount: asAccount } : {},
+      expiresAt: pending.expiresAt,
+      pairKey: pair.key,
+      hostComponent: subject.display.hostComponent,
+      partnerDisplay: subject.display.partnerDisplay,
+      next: "relay the approve link VERBATIM and name the account to approve as; the human clicks Approve (or Not now) in their browser \u2014 never urge the decision; then finish with the compose wait"
+    },
+    () => {
+      process.stdout.write(`Connect ${subject.display.partnerDisplay} into ${subject.display.hostComponent}?
 `);
-      }
-    );
-    return;
-  }
-  process.stderr.write(`Connect Figma in your browser:
-  ${started.connectUrl}
+      process.stdout.write(`Decide it here${asAccount !== void 0 ? ` signed in as ${asAccount}` : ""}: ${pending.approveUrl}
 `);
-  process.stderr.write(`Waiting for the Allow click (lapses at ${started.expiresAt.slice(11, 16)} UTC)\u2026
+      process.stdout.write(`Then finish with: ${tendrilCommand(`compose --set ${quoteArg(hostSet)} --approve-wait`)}
 `);
-  const outcome = await pollToDecision(opts, send, origin, token, started);
-  settle2(opts, origin, outcome);
-}
-async function startConnect(opts, send, origin, token) {
-  let response;
-  try {
-    response = await send(`${origin}/api/figma-connect`, { method: "POST", headers: { authorization: `Bearer ${token}`, "content-type": "application/json" }, body: "{}" });
-  } catch (error) {
-    fail(opts, ExitCode.General, {
-      error: `could not reach ${origin}: ${error.message}`,
-      code: "portal-unreachable",
-      remediation: "Check the address and your connection, then try again."
-    });
-  }
-  const body = await response.json().catch(() => ({}));
-  if (!response.ok || typeof body.connectId !== "string" || typeof body.connectUrl !== "string" || typeof body.expiresAt !== "string") {
-    fail(opts, ExitCode.General, {
-      error: body.refusal ?? `the portal answered ${String(response.status)} to the connect start`,
-      code: "figma-connect-refused",
-      remediation: body.remediation ?? "Fix what is named above and run the connect again."
-    });
-  }
-  return { connectId: body.connectId, connectUrl: body.connectUrl, expiresAt: body.expiresAt, pollSeconds: typeof body.pollSeconds === "number" ? body.pollSeconds : 3 };
+    }
+  );
 }
-async function waitPhase(opts, send) {
-  const file = pendingConnectPath();
+async function runComposeApproveWait(flags, hostSet) {
+  const file = pendingComposePath();
   let pending;
   if (existsSync46(file)) {
     try {
       const parsed = JSON.parse(readFileSync42(file, "utf8"));
-      if (typeof parsed.origin === "string" && typeof parsed.connectId === "string") pending = parsed;
+      if (typeof parsed.approvalId === "string" && typeof parsed.subjectDigest === "string" && typeof parsed.hostSet === "string" && typeof parsed.pairKey === "string") {
+        pending = parsed;
+      }
     } catch {
     }
   }
   if (pending === void 0) {
-    fail(opts, ExitCode.InputValidation, {
-      error: "there is no Figma connection waiting to finish",
-      code: "no-pending-figma-connect",
-      remediation: `Start one first: ${tendrilCommand("figma-connect --start")} (the tendril_figma_connect tool).`
+    fail(flags, ExitCode.InputValidation, {
+      error: "there is no compose approval waiting to finish",
+      code: "no-pending-compose",
+      remediation: `Start one first: ${tendrilCommand(`compose --set ${quoteArg(hostSet)} --approve-start`)} (the tendril_compose tool).`
+    });
+  }
+  if (path56.resolve(pending.hostSet) !== path56.resolve(hostSet)) {
+    fail(flags, ExitCode.InputValidation, {
+      error: `the waiting approval is for ${pending.hostSet}, and this wait is for ${hostSet}`,
+      code: "pending-compose-mismatch",
+      remediation: `Finish that one first (${tendrilCommand(`compose --set ${quoteArg(pending.hostSet)} --approve-wait`)}), or start this one fresh with --approve-start \u2014 starting one replaces the waiting slot.`
     });
   }
-  const token = bearerFor(opts, pending.origin);
-  const outcome = await pollToDecision(opts, send, pending.origin, token, pending);
-  rmSync9(file, { force: true });
-  settle2(opts, pending.origin, outcome);
-}
-async function pollToDecision(opts, send, origin, token, started) {
-  const interval = Math.max(1, started.pollSeconds) * 1e3;
-  const total = Math.ceil(WAIT_CAP_SECONDS * 1e3 / interval);
+  const rederive = () => {
+    const open = openPairsFor(pending.hostSet, pending.roots ?? []);
+    const pair = open.find((p) => p.key === pending.pairKey);
+    if (pair === void 0) return { changed: "the approved pairing no longer derives from the current recordings (or was decided by another channel)" };
+    const now = composeSubjectFor(pending.hostSet, pair);
+    if (now.digest === pending.subjectDigest) return { pair, digest: now.digest };
+    const then = pending.canonical;
+    const changed = now.canonical.hostManifestSha256 !== then.hostManifestSha256 ? "the HOST recording changed since the request" : JSON.stringify(now.canonical.partnerManifestSha256) !== JSON.stringify(then.partnerManifestSha256) ? "the PARTNER recording changed since the request" : JSON.stringify(now.canonical.instances) !== JSON.stringify(then.instances) ? "the derived instances changed since the request" : "the derived disclosures changed since the request";
+    return { changed };
+  };
+  const before = rederive();
+  if ("changed" in before) {
+    spendComposeSlot();
+    fail(flags, ExitCode.General, {
+      error: `this approval no longer matches the workspace: ${before.changed} \u2014 a stale approval must never write a decision the evidence does not support`,
+      code: "compose-approval-stale",
+      remediation: "Nothing was recorded, and the click was not wrong \u2014 the project moved under it. Run the connect again for a fresh card that matches what is on disk."
+    });
+  }
+  const client = composePortalClient(flags);
+  const interval = Math.max(1, pending.pollSeconds ?? 3) * 1e3;
+  const capMs = flags.waitWindowSeconds !== void 0 ? Math.max(1, flags.waitWindowSeconds) * 1e3 : 31 * 6e4;
+  const total = Math.ceil(capMs / interval);
+  let decision = "window-elapsed";
+  let approvedDigest;
   for (let tick = 1; tick <= total; tick += 1) {
-    let body = {};
-    try {
-      const response = await send(`${origin}/api/figma-connect/${encodeURIComponent(started.connectId)}`, {
-        headers: { authorization: `Bearer ${token}` }
-      });
-      if (response.ok) body = await response.json();
-    } catch {
+    const polled = await client.pollComposeApproval({ approvalId: pending.approvalId });
+    if (!polled.ok) {
+      if (polled.status === 404) {
+        spendComposeSlot();
+        fail(flags, ExitCode.General, {
+          error: "this portal does not offer compose approvals yet",
+          code: "compose-approvals-unavailable",
+          remediation: `Decide in your terminal instead: ${tendrilCommand(`compose --set ${quoteArg(hostSet)} --confirm-compositions`)}.`
+        });
+      }
+      fail(flags, ExitCode.General, { error: polled.refusal, code: "compose-approval-poll-refused", remediation: polled.status === 401 ? "That session is no longer valid \u2014 sign in again (tendril_login), then re-run this." : "Fix what is named above and re-run." });
     }
-    if (body.status === "connected" && typeof body.accessToken === "string" && typeof body.refreshToken === "string") {
-      return {
-        status: "connected",
-        tokens: {
-          origin,
-          accessToken: body.accessToken,
-          refreshToken: body.refreshToken,
-          tokenExpiresAt: typeof body.tokenExpiresAt === "string" ? body.tokenExpiresAt : new Date(Date.now() + 80 * 24 * 60 * 6e4).toISOString()
-        }
-      };
+    if (polled.value.status !== "pending") {
+      decision = polled.value.status;
+      approvedDigest = polled.value.subjectDigest;
+      break;
     }
-    if (body.status === "failed") return { status: "failed", reason: body.reason ?? "declined" };
-    if (body.status === "expired") return { status: "expired" };
-    if (body.status === "unknown") return { status: "unknown" };
-    emitProgress(tick, total, "waiting for the Allow click in the browser");
+    emitProgress(tick, total, "waiting for the browser decision");
     await new Promise((resolve) => setTimeout(resolve, interval));
   }
-  return { status: "expired" };
-}
-function settle2(opts, origin, outcome) {
-  if (outcome.status === "connected") {
-    writeFigmaTokens(outcome.tokens);
+  if (decision === "window-elapsed") {
     emitData(
-      opts,
-      { status: "connected", origin, tokenExpiresAt: outcome.tokens.tokenExpiresAt, storedAt: figmaTokenPath() },
+      flags,
+      {
+        status: "approval-pending",
+        approveUrl: pending.approveUrl,
+        expiresAt: pending.expiresAt,
+        windowSeconds: flags.waitWindowSeconds ?? 0,
+        waitedTotalSeconds: Math.max(0, Math.round((Date.now() - Date.parse(pending.requestedAt)) / 1e3)),
+        remainingSeconds: Math.max(0, Math.round((Date.parse(pending.expiresAt) - Date.now()) / 1e3)),
+        next: "the request is STILL LIVE and undecided \u2014 one short liveness line to the user, then run the wait again"
+      },
       () => {
-        process.stdout.write(`Figma is connected \u2014 recording can use the REST channel now.
-`);
-        process.stdout.write(`  credential: ${figmaTokenPath()} (0600; renews itself through the portal)
+        process.stdout.write(`Still waiting for the browser decision (window elapsed; live until ${pending.expiresAt.slice(11, 16)} UTC): ${pending.approveUrl}
 `);
       }
     );
     return;
   }
-  if (outcome.status === "failed") {
-    fail(opts, ExitCode.ConfirmationRequired, {
-      error: `the Figma connection was not granted: ${outcome.reason}`,
-      code: "figma-connect-declined",
-      remediation: "Nothing was stored. If minds change, run the connect again \u2014 it makes a fresh request."
+  if (decision === "denied") {
+    spendComposeSlot();
+    fail(flags, ExitCode.ConfirmationRequired, {
+      error: "the human said NOT NOW in the browser \u2014 nothing was recorded, and the pairing is NOT declined forever",
+      code: "compose-not-now",
+      remediation: "If minds change, run the connect again \u2014 it makes a fresh request and a fresh card."
     });
   }
-  fail(opts, ExitCode.ConfirmationRequired, {
-    error: outcome.status === "expired" ? "the Figma connection lapsed before the Allow click" : "the Figma connection is gone \u2014 it lapsed, or was collected by another terminal",
-    code: "figma-connect-lapsed",
-    remediation: "Run the connect again and finish it within its ten-minute window."
-  });
+  if (decision === "expired" || decision === "unknown") {
+    spendComposeSlot();
+    fail(flags, ExitCode.ConfirmationRequired, {
+      error: decision === "expired" ? "the connect request lapsed before anyone decided it" : "the connect request is gone \u2014 it lapsed and was purged",
+      code: "compose-approval-lapsed",
+      remediation: "Run the connect again for a fresh request, and decide it within its 30-minute window. If the connect page showed nothing waiting, the browser is signed in to a DIFFERENT account than this CLI \u2014 the page lists only its own account's requests."
+    });
+  }
+  if (approvedDigest !== void 0 && approvedDigest !== pending.subjectDigest) {
+    spendComposeSlot();
+    fail(flags, ExitCode.General, {
+      error: "the approved row's subject is not the one this wait carries \u2014 refusing to act on someone else's decision",
+      code: "compose-approval-subject-mismatch",
+      remediation: "Start the connect again \u2014 a fresh request binds a fresh subject."
+    });
+  }
+  const after = rederive();
+  if ("changed" in after) {
+    spendComposeSlot();
+    fail(flags, ExitCode.General, {
+      error: `this approval no longer matches the workspace: ${after.changed} \u2014 a stale approval must never write a decision the evidence does not support`,
+      code: "compose-approval-stale",
+      remediation: "Nothing was recorded, and the click was not wrong \u2014 the project moved under it. Run the connect again for a fresh card that matches what is on disk."
+    });
+  }
+  const entries = buildCompositionEntries(pending.hostSet, [after.pair], /* @__PURE__ */ new Set());
+  const written = writeCompositionDecisions(pending.hostSet, entries);
+  spendComposeSlot();
+  if (!written.ok) {
+    fail(flags, ExitCode.General, { error: written.refusal, code: "compositions-write-raced", remediation: "Nothing was changed. Run the connect again \u2014 the fresh derivation re-reads the manifest as it is now." });
+  }
+  emitData(
+    flags,
+    {
+      status: written.written.length > 0 ? "confirmed" : "already-decided",
+      hostSet: pending.hostSet,
+      pairKey: pending.pairKey,
+      written: written.written,
+      alreadyDecided: written.alreadyDecided,
+      next: `regenerate the HOST bundle with --library so the pairing composes (an agent run: brief \u2192 generate \u2192 score \u2192 verify), then republish \u2014 announce the republish in one line first`
+    },
+    () => {
+      process.stdout.write(
+        written.written.length > 0 ? `CONFIRMED: ${pending.pairKey} \u2014 the decision is recorded in the host manifest. Regenerate the host with --library to compose it.
+` : `already decided: ${pending.pairKey} \u2014 a standing entry was in place (asked once); nothing changed.
+`
+      );
+    }
+  );
 }
-var WAIT_CAP_SECONDS;
-var init_figma_connect = __esm({
-  "packages/cli/src/commands/figma-connect.ts"() {
+async function runComposeApprove(flags) {
+  const base = process.env["INIT_CWD"] ?? process.cwd();
+  const roots = flags.library !== void 0 && flags.library.length > 0 ? flags.library.map((d) => path56.resolve(base, d)) : [base];
+  if (flags.set === void 0) {
+    fail(flags, ExitCode.InputValidation, {
+      error: "a compose decision flag requires --set <host> \u2014 a decision needs the host set it decides for",
+      code: "compose-decision-without-set",
+      remediation: "Add --set <host recording-set dir>."
+    });
+  }
+  if (flags.waitWindowSeconds !== void 0 && flags.approveWait !== true) {
+    fail(flags, ExitCode.InputValidation, {
+      error: "--wait-window only bounds an --approve-wait poll",
+      code: "wait-window-without-approve-wait",
+      remediation: "Pass --approve-wait with it, or drop --wait-window."
+    });
+  }
+  if (flags.waitWindowSeconds !== void 0 && (!Number.isFinite(flags.waitWindowSeconds) || flags.waitWindowSeconds <= 0)) {
+    fail(flags, ExitCode.InputValidation, {
+      error: "--wait-window needs a positive number of seconds",
+      code: "wait-window-invalid",
+      remediation: "Pass e.g. --wait-window 55."
+    });
+  }
+  const hostSet = path56.resolve(base, flags.set);
+  if (flags.approveStart === true) {
+    await runComposeApproveStart(flags, hostSet, roots);
+    return;
+  }
+  await runComposeApproveWait(flags, hostSet);
+}
+var truncateWithMarker, spendComposeSlot;
+var init_compose_approve = __esm({
+  "packages/cli/src/commands/compose-approve.ts"() {
     "use strict";
     init_src3();
-    init_figma_token();
+    init_src();
     init_invocation();
     init_output();
     init_publish_client();
-    WAIT_CAP_SECONDS = 660;
+    init_publish();
+    init_compose2();
+    truncateWithMarker = (text, max) => text.length <= max ? text : `${text.slice(0, max - 14)}\u2026 [truncated]`;
+    spendComposeSlot = () => rmSync9(pendingComposePath(), { force: true });
   }
 });
 
-// packages/cli/src/commands/share.ts
-var share_exports = {};
-__export(share_exports, {
-  runShare: () => runShare
+// packages/cli/src/commands/login.ts
+var login_exports = {};
+__export(login_exports, {
+  DEFAULT_PORTAL_ORIGIN: () => DEFAULT_PORTAL_ORIGIN,
+  runLogin: () => runLogin,
+  runLogout: () => runLogout
 });
-async function runShare(opts) {
-  const origin = (opts.to ?? process.env["TENDRIL_PORTAL_URL"] ?? "").replace(/\/+$/, "");
-  if (origin === "") {
+import { spawn } from "node:child_process";
+import { existsSync as existsSync47, mkdirSync as mkdirSync15, readFileSync as readFileSync43, rmSync as rmSync10, writeFileSync as writeFileSync25 } from "node:fs";
+import path57 from "node:path";
+import { isCancel as isCancel3, password as password2 } from "@clack/prompts";
+async function runLogin(opts, deps) {
+  const origin = (opts.to ?? process.env["TENDRIL_PORTAL_URL"] ?? DEFAULT_PORTAL_ORIGIN).replace(/\/+$/, "");
+  if (!isSecureOrigin(origin)) {
     fail(opts, ExitCode.InputValidation, {
-      error: "no portal to share from",
-      code: "no-portal-configured",
-      remediation: `Pass \`--to <url>\` or set TENDRIL_PORTAL_URL.`
+      error: `${origin} is not https, so a session token sent there would travel in the clear`,
+      code: "portal-not-https",
+      remediation: "Use the https:// address of your portal. Only 127.0.0.1 and localhost are exempt, for local development."
     });
   }
-  if (!isSecureOrigin(origin)) {
+  if (opts.deviceStart === true) {
+    await deviceStartPhase(opts, origin, deps ?? realDeps());
+    return;
+  }
+  if (opts.deviceWait === true) {
+    await deviceWaitPhase(opts, deps ?? realDeps());
+    return;
+  }
+  if (process.stdin.isTTY === true && opts.paste !== true) {
+    await deviceLogin(opts, origin, deps ?? realDeps());
+    return;
+  }
+  await pasteLogin(opts, origin);
+}
+async function deviceLogin(opts, origin, deps) {
+  const started = await startHandshake(opts, origin, deps);
+  process.stderr.write(`
+  Open this link to approve the sign-in:
+
+    ${started.verificationUrl}
+
+`);
+  process.stderr.write(`  The page must show this code: ${started.userCode}
+`);
+  process.stderr.write(`  Approve it only if this terminal is yours.
+
+`);
+  deps.openBrowser(started.verificationUrl);
+  process.stderr.write(`  Waiting for the browser (about ten minutes before this code lapses) `);
+  const outcome = await waitForDecision(opts, origin, deps, started, () => process.stderr.write("."));
+  process.stderr.write("\n");
+  settleDecision(opts, origin, outcome);
+}
+async function waitForDecision(opts, origin, deps, started, onTick) {
+  const interval = Math.max(1, started.intervalSeconds);
+  const attempts = Math.ceil(660 / interval);
+  for (let n = 0; n < attempts; n += 1) {
+    await deps.sleep(interval);
+    const state = await pollHandshake(opts, origin, deps, started.deviceCode);
+    if (state.status === "pending") {
+      onTick();
+      continue;
+    }
+    if (state.status === "approved") return state;
+    return { status: state.status };
+  }
+  return { status: "gave-up" };
+}
+function settleDecision(opts, origin, outcome) {
+  switch (outcome.status) {
+    case "approved":
+      writeStoredSession({ origin, token: outcome.token });
+      emitData(opts, { origin, storedAt: sessionPath(), via: "device" }, () => {
+        process.stdout.write(`signed in to ${origin}
+`);
+        process.stdout.write(`  token stored at ${sessionPath()} (readable only by you)
+`);
+      });
+      return;
+    case "denied":
+      fail(opts, ExitCode.General, {
+        error: "the sign-in was denied in the browser",
+        code: "login-denied",
+        remediation: `If that was not you saying no, run ${tendrilCommand("login")} again and approve the fresh code.`
+      });
+      break;
+    case "expired":
+    case "gave-up":
+      fail(opts, ExitCode.General, {
+        error: outcome.status === "expired" ? "the sign-in code lapsed before anyone approved it \u2014 they live ten minutes" : "gave up waiting for the browser approval",
+        code: "login-expired",
+        remediation: `Run ${tendrilCommand("login")} again for a fresh code.`
+      });
+      break;
+    default:
+      fail(opts, ExitCode.General, {
+        error: "the portal no longer recognises this sign-in attempt",
+        code: "login-unknown",
+        remediation: `Run ${tendrilCommand("login")} again. If this repeats, the approval may be racing another terminal \u2014 approve only one at a time.`
+      });
+  }
+}
+function pendingLoginPath() {
+  return path57.join(path57.dirname(sessionPath()), "pending-login.json");
+}
+async function deviceStartPhase(opts, origin, deps) {
+  const started = await startHandshake(opts, origin, deps);
+  const file = pendingLoginPath();
+  mkdirSync15(path57.dirname(file), { recursive: true });
+  writeFileSync25(file, `${JSON.stringify({ origin, ...started }, null, 2)}
+`, { mode: 384 });
+  deps.openBrowser(started.verificationUrl);
+  emitData(
+    opts,
+    {
+      verificationUrl: started.verificationUrl,
+      userCode: started.userCode,
+      expiresAt: started.expiresAt,
+      origin,
+      next: "Show the user the link and the code \u2014 they approve in the browser, and must check the page shows this exact code. Then run login --device-wait (the tendril_login_wait tool) to finish."
+    },
+    () => {
+      process.stdout.write(`open ${started.verificationUrl}
+`);
+      process.stdout.write(`  the page must show: ${started.userCode}
+`);
+      process.stdout.write(`  then: ${tendrilCommand("login --device-wait")}
+`);
+    }
+  );
+}
+async function deviceWaitPhase(opts, deps) {
+  const file = pendingLoginPath();
+  let pending;
+  if (existsSync47(file)) {
+    try {
+      const parsed = JSON.parse(readFileSync43(file, "utf8"));
+      if (typeof parsed.origin === "string" && typeof parsed.deviceCode === "string" && typeof parsed.intervalSeconds === "number") {
+        pending = parsed;
+      }
+    } catch {
+    }
+  }
+  if (pending === void 0) {
     fail(opts, ExitCode.InputValidation, {
-      error: `${origin} is not https, so a session token sent there would travel in the clear`,
-      code: "portal-not-https",
-      remediation: "Use the https:// address of your portal. Only 127.0.0.1 and localhost are exempt, for local development."
+      error: "there is no sign-in waiting to finish",
+      code: "no-pending-login",
+      remediation: `Start one first: ${tendrilCommand("login --device-start")} (the tendril_login tool).`
     });
   }
-  const found = tokenFor(origin);
-  if (!found.ok) {
-    fail(opts, ExitCode.Auth, {
-      error: found.reason === "origin-mismatch" ? `the session available here belongs to ${found.boundTo}, not ${origin}` : `no session for ${origin}`,
-      code: found.reason === "origin-mismatch" ? "session-belongs-to-another-portal" : "not-signed-in",
-      remediation: `Run \`${tendrilCommand(`login --to ${origin}`)}\`.`
+  const done = () => rmSync10(file, { force: true });
+  const total = Math.ceil(660 / Math.max(1, pending.intervalSeconds));
+  let ticks = 0;
+  const outcome = await waitForDecision(opts, pending.origin, deps, pending, () => {
+    ticks += 1;
+    emitProgress(ticks, total, "waiting for the browser approval");
+  });
+  done();
+  settleDecision(opts, pending.origin, outcome);
+}
+async function startHandshake(opts, origin, deps) {
+  let response;
+  try {
+    response = await deps.fetch(`${origin}/api/device`, { method: "POST", headers: { "content-type": "application/json" }, body: "{}" });
+  } catch (error) {
+    return unreachable(opts, origin, error.message);
+  }
+  if (!response.ok) return unreachable(opts, origin, `the portal answered ${String(response.status)}`);
+  const body = await response.json();
+  if (typeof body.deviceCode !== "string" || typeof body.userCode !== "string" || typeof body.verificationUrl !== "string" || typeof body.intervalSeconds !== "number" || typeof body.expiresAt !== "string") {
+    return unreachable(opts, origin, "the portal's answer was not a device handshake");
+  }
+  return body;
+}
+async function pollHandshake(opts, origin, deps, deviceCode) {
+  let response;
+  try {
+    response = await deps.fetch(`${origin}/api/device/token`, {
+      method: "POST",
+      headers: { "content-type": "application/json" },
+      body: JSON.stringify({ deviceCode })
     });
+  } catch {
+    return { status: "pending" };
   }
-  const client = new HttpPublishClient({ origin, token: found.token });
-  if (opts.list === true) {
-    const listed = await client.listShareLinks({ publicationId: opts.publicationId });
-    if (!listed.ok) refuse(opts, listed);
-    emitData(opts, listed.value, () => {
-      if (listed.value.links.length === 0) {
-        process.stdout.write("no links have been issued for this publication\n");
-        return;
-      }
-      process.stdout.write(`${String(listed.value.links.length)} link(s) for this publication:
-`);
-      for (const link of listed.value.links) {
-        const ended = link.revoked_at !== null ? ` REVOKED ${link.revoked_at}` : link.expires_at !== null ? ` expires ${link.expires_at}` : " open-ended";
-        process.stdout.write(`  ${link.id}${ended}${link.recipient_email === null ? "" : ` \u2014 for ${link.recipient_email}`}
-`);
+  if (!response.ok) return { status: "pending" };
+  const body = await response.json();
+  if (body.status === "approved" && typeof body.token === "string") return { status: "approved", token: body.token };
+  if (body.status === "denied" || body.status === "expired" || body.status === "unknown") return { status: body.status };
+  return { status: "pending" };
+}
+function unreachable(opts, origin, detail) {
+  fail(opts, ExitCode.General, {
+    error: `could not start a sign-in with ${origin}: ${detail}`,
+    code: "portal-unreachable",
+    remediation: "Check your connection and try again. If your portal is self-hosted, confirm the --to URL."
+  });
+}
+function realDeps() {
+  return {
+    fetch: globalThis.fetch.bind(globalThis),
+    sleep: (seconds) => new Promise((resolve) => setTimeout(resolve, seconds * 1e3)),
+    openBrowser: (url) => {
+      const [cmd, args] = process.platform === "darwin" ? ["open", [url]] : process.platform === "win32" ? ["cmd", ["/c", "start", "", url]] : ["xdg-open", [url]];
+      try {
+        spawn(cmd, args, { stdio: "ignore", detached: true }).on("error", () => void 0).unref();
+      } catch {
       }
-      process.stdout.write("  (the links themselves are not stored \u2014 only their digests, so a lost link is a new link)\n");
+    }
+  };
+}
+async function pasteLogin(opts, origin) {
+  const token = await readToken(opts);
+  if (token === void 0 || token.trim() === "") {
+    fail(opts, ExitCode.InputValidation, {
+      error: "no token was given",
+      code: "no-token",
+      remediation: `Paste the token when prompted, or pipe it: \`echo "<token>" | ${tendrilCommand(`login --to ${origin}`)}\`.`
     });
-    return;
   }
-  if (opts.revoke !== void 0) {
-    const revoked = await client.revokeShareLink({ publicationId: opts.publicationId, shareLinkId: opts.revoke });
-    if (!revoked.ok) refuse(opts, revoked);
-    emitData(opts, revoked.value, () => {
-      process.stdout.write(`revoked ${opts.revoke ?? ""}
-`);
-      process.stdout.write("  anyone holding that link now gets told it was revoked, not that it never existed\n");
+  const trimmed = token.trim();
+  if (!/^[A-Za-z0-9_-]{16,512}$/.test(trimmed)) {
+    fail(opts, ExitCode.InputValidation, {
+      error: "that does not look like a Tendril session token",
+      code: "malformed-token",
+      remediation: "Tokens are a single line of letters, digits, hyphens and underscores. Check for a stray space or a truncated paste."
     });
-    return;
   }
-  const expiresAt = resolveExpiry(opts);
-  const issued = await client.issueShareLink({
-    publicationId: opts.publicationId,
-    expiresAt,
-    recipientEmail: opts.recipient ?? null
-  });
-  if (!issued.ok) refuse(opts, issued);
-  emitData(opts, issued.value, () => {
-    process.stdout.write(`${issued.value.url}
-
+  writeStoredSession({ origin, token: trimmed });
+  emitData(opts, { origin, storedAt: sessionPath(), via: "paste" }, () => {
+    process.stdout.write(`signed in to ${origin}
+`);
+    process.stdout.write(`  token stored at ${sessionPath()} (readable only by you)
 `);
-    process.stdout.write("  Anyone with this link can read this one publication and its evidence.\n");
-    process.stdout.write("  It is not tied to a person and needs no account.\n");
-    process.stdout.write(
-      issued.value.expiresAt === null ? "  It does not expire. Revoke it with --revoke when you are done.\n" : `  It stops working at ${issued.value.expiresAt}.
-`
-    );
-    process.stdout.write("  This is the only time the link is shown \u2014 only its digest is stored.\n");
   });
 }
-function resolveExpiry(opts) {
-  if (opts.expires === void 0) return null;
-  const days = Number(opts.expires);
-  if (Number.isInteger(days) && days > 0) {
-    return new Date(Date.now() + days * 24 * 60 * 60 * 1e3).toISOString().replace(/\.\d{3}Z$/, (m) => m);
+async function readToken(opts) {
+  if (process.stdin.isTTY === true) {
+    const entered = await password2({ message: "Paste your Tendril portal token (it will not be shown)" });
+    if (isCancel3(entered)) {
+      fail(opts, ExitCode.General, { error: "cancelled", code: "cancelled", remediation: "Run it again when you have the token." });
+    }
+    return entered;
   }
-  if (/^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}\.\d{3}Z$/.test(opts.expires)) return opts.expires;
-  fail(opts, ExitCode.InputValidation, {
-    error: `--expires takes a number of days (e.g. 7) or an ISO-8601 UTC timestamp with milliseconds \u2014 got ${JSON.stringify(opts.expires)}`,
-    code: "bad-expiry",
-    remediation: "Try `--expires 7` for a week, or omit it for a link that does not expire."
-  });
+  const chunks = [];
+  for await (const chunk of process.stdin) chunks.push(chunk);
+  return Buffer.concat(chunks).toString("utf8").split("\n")[0];
 }
-function refuse(opts, sent) {
-  fail(opts, sent.status === 401 ? ExitCode.Auth : ExitCode.General, {
-    error: sent.refusal,
-    code: "share-refused",
-    remediation: sent.status === 404 ? "Check the publication id \u2014 only its owner can share it." : `Fix what is named above and run \`${tendrilCommand(`share ${opts.publicationId}`)}\` again.`
+function runLogout(opts) {
+  const stored = readStoredSession();
+  if (stored === void 0) {
+    emitData(opts, { signedOut: true, wasSignedIn: false }, () => process.stdout.write("you were not signed in\n"));
+    return;
+  }
+  clearStoredSession();
+  emitData(opts, { signedOut: true, wasSignedIn: true, origin: stored.origin }, () => {
+    process.stdout.write(`this machine has forgotten its session for ${stored.origin}
+`);
+    process.stdout.write("  the session itself is still valid \u2014 sign out everywhere from the portal to end it\n");
   });
 }
-var init_share = __esm({
-  "packages/cli/src/commands/share.ts"() {
+var DEFAULT_PORTAL_ORIGIN;
+var init_login = __esm({
+  "packages/cli/src/commands/login.ts"() {
     "use strict";
     init_src3();
     init_invocation();
     init_output();
     init_publish_client();
+    DEFAULT_PORTAL_ORIGIN = "https://app.trytendril.com";
   }
 });
 
-// packages/cli/src/commands/publish.ts
-var publish_exports = {};
-__export(publish_exports, {
-  approveWaitPhase: () => approveWaitPhase,
-  resolveOrigin: () => resolveOrigin2,
-  runPublish: () => runPublish,
-  spendPendingApproval: () => spendPendingApproval
+// packages/cli/src/commands/figma-connect.ts
+var figma_connect_exports = {};
+__export(figma_connect_exports, {
+  runFigmaConnect: () => runFigmaConnect
 });
-import { existsSync as existsSync47, readFileSync as readFileSync43, rmSync as rmSync10, writeFileSync as writeFileSync25 } from "node:fs";
-import path57 from "node:path";
-async function runPublish(opts) {
-  if (opts.waitWindowSeconds !== void 0 && opts.approveWait !== true) {
-    fail(opts, ExitCode.InputValidation, {
-      error: "--wait-window only bounds an --approve-wait poll",
-      code: "wait-window-without-approve-wait",
-      remediation: "Pass --approve-wait with it, or drop --wait-window."
-    });
-  }
-  if (opts.waitWindowSeconds !== void 0 && (!Number.isFinite(opts.waitWindowSeconds) || opts.waitWindowSeconds <= 0)) {
-    fail(opts, ExitCode.InputValidation, {
-      error: "--wait-window needs a positive number of seconds",
-      code: "wait-window-invalid",
-      remediation: "Pass e.g. --wait-window 55."
-    });
-  }
-  const bundleDir = path57.resolve(opts.bundleDir);
-  const bundle = readBundle(opts, bundleDir);
-  const report = bundle.report;
-  if (typeof report["rulerExit"] !== "number" || !Number.isInteger(report["rulerExit"])) {
-    fail(opts, ExitCode.InputValidation, {
-      error: `${VERIFY_REPORT_FILENAME} does not state the ruler's exit code, and an absent exit code is not a passing one`,
-      code: "report-has-no-exit-code",
-      remediation: `Re-run \`${tendrilCommand(`verify ${opts.bundleDir}`)}\` with a current CLI \u2014 this report predates the field.`
-    });
-  }
-  if (report["rulerExit"] !== 0) {
-    const why = typeof report["rulerRefusal"] === "string" ? ` \u2014 ${report["rulerRefusal"]}` : "";
-    fail(opts, ExitCode.VerificationFailed, {
-      error: `the ruler refused this run (exit ${String(report["rulerExit"])}), so it has nothing to publish${why}`,
-      code: "run-refused-by-ruler",
-      remediation: `Fix what the report names, re-run \`${tendrilCommand(`verify ${opts.bundleDir}`)}\` until it passes, then publish. A declined verdict never becomes a page.`
-    });
-  }
-  const undisclosed = undisclosedTrustFacts(report);
-  if (undisclosed.length > 0) {
-    fail(opts, ExitCode.InputValidation, {
-      error: `this report carries a disclosure a published page cannot yet show, and a verdict shown without it is worse than no page: ${undisclosed.map((f) => `${f.pointer} \u2014 ${f.consequence}`).join("; ")}`,
-      code: "report-carries-an-unrenderable-disclosure",
-      remediation: "Resolve what the disclosure names \u2014 re-record so the set matches the bundle's stamp, or resolve the substituted font families \u2014 then re-verify and publish the clean run."
-    });
-  }
-  if (scoredRecordingSetHash(report) === void 0) {
-    fail(opts, ExitCode.InputValidation, {
-      error: "this report does not name the recording set these scores were measured against",
-      code: "report-names-no-recording-set",
-      remediation: `Re-run \`${tendrilCommand(`verify ${opts.bundleDir}`)}\` with a current CLI \u2014 the set identity rides the report.`
-    });
-  }
-  const componentName = (opts.name ?? bundle.manifest.name).trim();
-  const surface = classifyBundleSurface(bundle.files, { entry: bundle.manifest.entry });
-  if (surface.unknown.length > 0) {
-    fail(opts, ExitCode.InputValidation, {
-      error: `this bundle carries files a portal does not recognise, and publishing guesses at nothing: ${surface.unknown.join(", ")}`,
-      code: "bundle-carries-unrecognised-files",
-      remediation: `Remove them from ${opts.bundleDir}, or re-emit the bundle. Publishing them would ship something nobody reviewed; dropping them silently would ship evidence with a hole in it.`
-    });
-  }
-  const sheetEntry = surface.published.find((p) => p.role === "inspect-sheet");
-  if (sheetEntry !== void 0) {
-    const missingCrops = missingInspectCrops(
-      readFileSync43(path57.join(bundleDir, sheetEntry.path), "utf8"),
-      surface.published.map((p) => p.path)
-    );
-    if (missingCrops.length > 0) {
-      fail(opts, ExitCode.InputValidation, {
-        error: `this bundle's inspect sheet references images it does not carry, and half a sheet reads as a broken component: ${missingCrops.join(", ")}`,
-        code: "inspect-sheet-without-its-crops",
-        remediation: `Re-run \`${tendrilCommand(`inspect ${opts.bundleDir}`)}\` to rebuild the sheet and its crops together, or delete the sheet and publish without it.`
-      });
-    }
-  }
-  if (surface.missingRequired.length > 0) {
+import { existsSync as existsSync48, mkdirSync as mkdirSync16, readFileSync as readFileSync44, rmSync as rmSync11, writeFileSync as writeFileSync26 } from "node:fs";
+import path58 from "node:path";
+function pendingConnectPath() {
+  return path58.join(path58.dirname(sessionPath()), "pending-figma-connect.json");
+}
+function resolveOrigin2(opts) {
+  const named = (opts.to ?? process.env["TENDRIL_PORTAL_URL"] ?? "").replace(/\/+$/, "");
+  if (named !== "") return named;
+  if ((process.env["TENDRIL_TOKEN"] ?? "") !== "") return "";
+  return (readStoredSession()?.origin ?? "").replace(/\/+$/, "");
+}
+function bearerFor(opts, origin) {
+  if (origin === "") {
     fail(opts, ExitCode.InputValidation, {
-      error: `this bundle is missing what a publishable bundle cannot be without: ${surface.missingRequired.join(", ")}`,
-      code: "bundle-missing-required-role",
-      remediation: `Run \`${tendrilCommand(`verify ${opts.bundleDir}`)}\` \u2014 the evidence a page shows is written by that run. Required: ${REQUIRED_ROLES.join(", ")}.`
+      error: "no portal to connect through",
+      code: "no-portal-configured",
+      remediation: `Sign in first (${tendrilCommand("login")}) \u2014 the connect uses your portal account.`
     });
   }
-  const recorded = readScoredFiles(report);
-  if (recorded === void 0) {
-    fail(opts, ExitCode.InputValidation, {
-      error: `${VERIFY_REPORT_FILENAME} does not record the files this run was scored beside, so nothing ties this bundle's bytes to its verdict`,
-      code: "report-records-no-file-digests",
-      remediation: `Re-run \`${tendrilCommand(`verify ${opts.bundleDir}`)}\` with a current CLI \u2014 this report predates the field.`
+  const found = tokenFor(origin);
+  if (!found.ok) {
+    fail(opts, ExitCode.Auth, {
+      error: `no session for ${origin}`,
+      code: "not-signed-in",
+      remediation: `Run ${tendrilCommand("login")} first \u2014 connecting Figma needs your signed-in portal account.`
     });
-  } else {
-    const delta = compareScoredFiles(recorded, digestScoredFiles(bundleDir, bundle.manifest.entry));
-    const disagreements = [
-      ...delta.changed.map((p) => `${p} (bytes differ from the scored run)`),
-      ...delta.missing.map((p) => `${p} (scored, no longer in the bundle)`),
-      ...delta.unscored.map((p) => `${p} (in the bundle, never scored)`)
-    ];
-    if (disagreements.length > 0) {
-      fail(opts, ExitCode.InputValidation, {
-        error: `this bundle is not the one the ruler scored: ${disagreements.join("; ")}`,
-        code: "bundle-disagrees-with-scored-files",
-        remediation: `Re-run \`${tendrilCommand(`verify ${opts.bundleDir}`)}\` so the verdict describes these bytes. A page must never show code the ruler never saw.`
-      });
-    }
   }
-  const figmaFile = bundle.manifest.provenance.recordingSet.figmaFile ?? null;
-  if (opts.dryRun) {
+  return found.token;
+}
+async function runFigmaConnect(opts) {
+  const send = opts.fetchImpl ?? globalThis.fetch;
+  const origin = resolveOrigin2(opts);
+  if (opts.wait === true) {
+    await waitPhase(opts, send);
+    return;
+  }
+  const token = bearerFor(opts, origin);
+  const started = await startConnect(opts, send, origin, token);
+  if (opts.start === true) {
+    const pending = { origin, ...started };
+    mkdirSync16(path58.dirname(pendingConnectPath()), { recursive: true });
+    writeFileSync26(pendingConnectPath(), `${JSON.stringify(pending, null, 2)}
+`, { mode: 384 });
+    (opts.openBrowser ?? (() => {
+    }))(started.connectUrl);
     emitData(
       opts,
       {
-        bundleDir,
-        componentName,
-        figmaFile,
-        entry: bundle.manifest.entry,
-        publishes: surface.published,
-        excluded: surface.excluded,
-        rulerVersion: report["environment"]?.["ruler"] ?? null,
-        wouldPublish: true
+        connectUrl: started.connectUrl,
+        expiresAt: started.expiresAt,
+        origin,
+        next: "Show the user the link \u2014 they sign in (same account) and click Allow on Figma's consent screen. Then run figma-connect --wait (the tendril_figma_connect_wait tool) to finish."
       },
       () => {
-        process.stdout.write(`${componentName} would publish ${String(surface.published.length)} files:
-`);
-        for (const entry of surface.published) process.stdout.write(`  ${entry.path}  (${entry.role})
+        process.stdout.write(`open ${started.connectUrl}
 `);
-        for (const left of surface.excluded) process.stdout.write(`  \u2014 leaving ${left.path} behind (${left.reason})
+        process.stdout.write(`  then: ${tendrilCommand("figma-connect --wait")}
 `);
       }
     );
     return;
   }
-  const origin = resolveOrigin2(opts);
-  const client = opts.client ?? httpClient(opts, origin);
-  if (opts.approveWait === true) {
-    const phase = await approveWaitPhase(opts, client, bundleDir, { componentName, figmaFile });
-    if (phase === "yielded") return;
+  process.stderr.write(`Connect Figma in your browser:
+  ${started.connectUrl}
+`);
+  process.stderr.write(`Waiting for the Allow click (lapses at ${started.expiresAt.slice(11, 16)} UTC)\u2026
+`);
+  const outcome = await pollToDecision(opts, send, origin, token, started);
+  settle2(opts, origin, outcome);
+}
+async function startConnect(opts, send, origin, token) {
+  let response;
+  try {
+    response = await send(`${origin}/api/figma-connect`, { method: "POST", headers: { authorization: `Bearer ${token}`, "content-type": "application/json" }, body: "{}" });
+  } catch (error) {
+    fail(opts, ExitCode.General, {
+      error: `could not reach ${origin}: ${error.message}`,
+      code: "portal-unreachable",
+      remediation: "Check the address and your connection, then try again."
+    });
   }
-  void reportRunPresence(componentName, "publishing");
-  emitProgress(0, 1, "requesting the upload plan from the portal");
-  let opened = await client.begin({
-    componentName,
-    figmaFile,
-    entry: bundle.manifest.entry,
-    files: bundle.files,
-    report: bundle.reportText
-  });
-  if (!opened.ok && opened.needsConfirmation !== void 0 && opts.approveWait !== true) {
-    const flow = await runApprovalFlow(opts, client, bundleDir, {
-      componentName,
-      figmaFile,
-      begin: () => client.begin({ componentName, figmaFile, entry: bundle.manifest.entry, files: bundle.files, report: bundle.reportText })
+  const body = await response.json().catch(() => ({}));
+  if (!response.ok || typeof body.connectId !== "string" || typeof body.connectUrl !== "string" || typeof body.expiresAt !== "string") {
+    fail(opts, ExitCode.General, {
+      error: body.refusal ?? `the portal answered ${String(response.status)} to the connect start`,
+      code: "figma-connect-refused",
+      remediation: body.remediation ?? "Fix what is named above and run the connect again."
     });
-    if (flow === void 0) return;
-    opened = flow;
   }
-  if (!opened.ok) {
-    if (opened.needsConfirmation !== void 0) {
-      fail(opts, ExitCode.ConfirmationRequired, {
-        error: opened.refusal,
-        code: "first-publish-unconfirmed",
-        remediation: "Approve it in your browser \u2014 run the publish again and open the link it prints."
-      });
+  return { connectId: body.connectId, connectUrl: body.connectUrl, expiresAt: body.expiresAt, pollSeconds: typeof body.pollSeconds === "number" ? body.pollSeconds : 3 };
+}
+async function waitPhase(opts, send) {
+  const file = pendingConnectPath();
+  let pending;
+  if (existsSync48(file)) {
+    try {
+      const parsed = JSON.parse(readFileSync44(file, "utf8"));
+      if (typeof parsed.origin === "string" && typeof parsed.connectId === "string") pending = parsed;
+    } catch {
     }
-    refuse2(opts, opened, "publish-refused");
   }
-  if (opts.approveWait === true) spendPendingApproval();
-  const uploaded = [];
-  for (const object of opened.value.plan.objects) {
-    const file = path57.join(bundleDir, object.relPath);
-    if (!existsSync47(file)) {
-      fail(opts, ExitCode.InputValidation, {
-        error: `the portal expects ${object.relPath}, and it is not in ${opts.bundleDir}`,
-        code: "planned-file-missing",
-        remediation: `Re-run \`${tendrilCommand(`verify ${opts.bundleDir}`)}\` and publish again \u2014 a publication is refused rather than going live with a hole in its evidence.`
-      });
-    }
-    const sent = await client.upload({
-      publicationId: opened.value.publicationId,
-      relPath: object.relPath,
-      bytes: new Uint8Array(readFileSync43(file))
+  if (pending === void 0) {
+    fail(opts, ExitCode.InputValidation, {
+      error: "there is no Figma connection waiting to finish",
+      code: "no-pending-figma-connect",
+      remediation: `Start one first: ${tendrilCommand("figma-connect --start")} (the tendril_figma_connect tool).`
     });
-    if (!sent.ok) refuse2(opts, sent, "upload-refused", true);
-    uploaded.push({ relPath: object.relPath, deduplicated: sent.value.deduplicated });
-    emitProgress(uploaded.length, opened.value.plan.objects.length, `uploading ${object.relPath}`);
-  }
-  emitProgress(uploaded.length, uploaded.length, "upload complete \u2014 committing the publication");
-  const committed = await client.commit({ publicationId: opened.value.publicationId });
-  if (committed.ok) {
-    await endRunPresence(componentName);
   }
-  if (!committed.ok) {
-    if (committed.missing !== void 0 && committed.missing.length > 0) {
-      fail(opts, ExitCode.General, {
-        error: `this publication is missing objects the bundle declared, and a verdict beside missing evidence is worse than no page: ${committed.missing.join(", ")}`,
-        code: "publication-incomplete",
-        remediation: `Run \`${tendrilCommand(`publish ${opts.bundleDir}`)}\` again \u2014 it rejoins this same unfinished publication and re-sends only what is missing.`
+  const token = bearerFor(opts, pending.origin);
+  const outcome = await pollToDecision(opts, send, pending.origin, token, pending);
+  rmSync11(file, { force: true });
+  settle2(opts, pending.origin, outcome);
+}
+async function pollToDecision(opts, send, origin, token, started) {
+  const interval = Math.max(1, started.pollSeconds) * 1e3;
+  const total = Math.ceil(WAIT_CAP_SECONDS * 1e3 / interval);
+  for (let tick = 1; tick <= total; tick += 1) {
+    let body = {};
+    try {
+      const response = await send(`${origin}/api/figma-connect/${encodeURIComponent(started.connectId)}`, {
+        headers: { authorization: `Bearer ${token}` }
       });
+      if (response.ok) body = await response.json();
+    } catch {
     }
-    refuse2(opts, committed, "commit-refused", true);
-  }
-  emitData(
-    opts,
-    {
-      publicationId: committed.value.publicationId,
-      url: committed.value.url,
-      componentName,
-      figmaFile: opened.value.figmaFile,
-      rulerVersion: opened.value.rulerVersion,
-      resumed: opened.value.resumed === true,
-      files: uploaded
-    },
-    () => {
-      const reused = uploaded.filter((u) => u.deduplicated).length;
-      if (opened.value.resumed === true) process.stdout.write(`resumed the unfinished publish of ${componentName}
-`);
-      process.stdout.write(`published ${componentName} \u2014 ${String(uploaded.length)} files`);
-      process.stdout.write(reused > 0 ? ` (${String(reused)} you already had)
-` : "\n");
-      process.stdout.write(`  ${committed.value.url}
-`);
-      process.stdout.write(`  verdict as scored by ruler ${opened.value.rulerVersion}
-`);
+    if (body.status === "connected" && typeof body.accessToken === "string" && typeof body.refreshToken === "string") {
+      return {
+        status: "connected",
+        tokens: {
+          origin,
+          accessToken: body.accessToken,
+          refreshToken: body.refreshToken,
+          tokenExpiresAt: typeof body.tokenExpiresAt === "string" ? body.tokenExpiresAt : new Date(Date.now() + 80 * 24 * 60 * 6e4).toISOString()
+        }
+      };
     }
-  );
-}
-function readBundle(opts, bundleDir) {
-  const manifestPath2 = path57.join(bundleDir, "component.json");
-  const reportPath = path57.join(bundleDir, EVIDENCE_DIR, VERIFY_REPORT_FILENAME);
-  if (!existsSync47(manifestPath2)) {
-    fail(opts, ExitCode.InputValidation, {
-      error: `there is no component.json in ${opts.bundleDir}, so this is not a bundle`,
-      code: "not-a-bundle",
-      remediation: `Point publish at a directory a Tendril run produced. \`${tendrilCommand("generate --help")}\` shows how one is made.`
-    });
-  }
-  if (!existsSync47(reportPath)) {
-    fail(opts, ExitCode.InputValidation, {
-      error: `this bundle has never been verified \u2014 there is no ${EVIDENCE_DIR}/${VERIFY_REPORT_FILENAME}`,
-      code: "bundle-not-verified",
-      remediation: `Run \`${tendrilCommand(`verify ${opts.bundleDir}`)}\` first. Verification is free and needs no account; publishing without it would put a page up with no verdict on it.`
-    });
-  }
-  const { manifest } = readBundleManifest(readFileSync43(manifestPath2, "utf8"));
-  if (manifest === void 0) {
-    fail(opts, ExitCode.InputValidation, {
-      error: "component.json did not parse as a bundle manifest",
-      code: "no-mount-contract",
-      remediation: `Re-emit the bundle \u2014 \`${tendrilCommand(`verify ${opts.bundleDir}`)}\` rewrites component.json \u2014 then publish.`
-    });
+    if (body.status === "failed") return { status: "failed", reason: body.reason ?? "declined" };
+    if (body.status === "expired") return { status: "expired" };
+    if (body.status === "unknown") return { status: "unknown" };
+    emitProgress(tick, total, "waiting for the Allow click in the browser");
+    await new Promise((resolve) => setTimeout(resolve, interval));
   }
-  const reportText = readFileSync43(reportPath, "utf8");
-  let report;
-  try {
-    report = JSON.parse(reportText);
-  } catch (error) {
-    fail(opts, ExitCode.InputValidation, {
-      error: `${EVIDENCE_DIR}/${VERIFY_REPORT_FILENAME} is not parseable JSON: ${error.message}`,
-      code: "report-unparseable",
-      remediation: `Re-run \`${tendrilCommand(`verify ${opts.bundleDir}`)}\` \u2014 that file is written by the ruler and should never be edited by hand.`
-    });
+  return { status: "expired" };
+}
+function settle2(opts, origin, outcome) {
+  if (outcome.status === "connected") {
+    writeFigmaTokens(outcome.tokens);
+    emitData(
+      opts,
+      { status: "connected", origin, tokenExpiresAt: outcome.tokens.tokenExpiresAt, storedAt: figmaTokenPath() },
+      () => {
+        process.stdout.write(`Figma is connected \u2014 recording can use the REST channel now.
+`);
+        process.stdout.write(`  credential: ${figmaTokenPath()} (0600; renews itself through the portal)
+`);
+      }
+    );
+    return;
   }
-  if (report === null || typeof report !== "object" || Array.isArray(report)) {
-    fail(opts, ExitCode.InputValidation, {
-      error: `${EVIDENCE_DIR}/${VERIFY_REPORT_FILENAME} parses, but a verify report is a JSON object and this is not one`,
-      code: "report-not-an-object",
-      remediation: `Re-run \`${tendrilCommand(`verify ${opts.bundleDir}`)}\`.`
+  if (outcome.status === "failed") {
+    fail(opts, ExitCode.ConfirmationRequired, {
+      error: `the Figma connection was not granted: ${outcome.reason}`,
+      code: "figma-connect-declined",
+      remediation: "Nothing was stored. If minds change, run the connect again \u2014 it makes a fresh request."
     });
   }
-  return { manifest, report, reportText, files: bundleFiles(bundleDir) };
-}
-function resolveOrigin2(opts) {
-  const named = (opts.to ?? process.env["TENDRIL_PORTAL_URL"] ?? "").replace(/\/+$/, "");
-  if (named !== "") return named;
-  if ((process.env["TENDRIL_TOKEN"] ?? "") !== "") return "";
-  return (readStoredSession()?.origin ?? "").replace(/\/+$/, "");
+  fail(opts, ExitCode.ConfirmationRequired, {
+    error: outcome.status === "expired" ? "the Figma connection lapsed before the Allow click" : "the Figma connection is gone \u2014 it lapsed, or was collected by another terminal",
+    code: "figma-connect-lapsed",
+    remediation: "Run the connect again and finish it within its ten-minute window."
+  });
 }
-function httpClient(opts, origin) {
+var WAIT_CAP_SECONDS;
+var init_figma_connect = __esm({
+  "packages/cli/src/commands/figma-connect.ts"() {
+    "use strict";
+    init_src3();
+    init_figma_token();
+    init_invocation();
+    init_output();
+    init_publish_client();
+    WAIT_CAP_SECONDS = 660;
+  }
+});
+
+// packages/cli/src/commands/share.ts
+var share_exports = {};
+__export(share_exports, {
+  runShare: () => runShare
+});
+async function runShare(opts) {
+  const origin = (opts.to ?? process.env["TENDRIL_PORTAL_URL"] ?? "").replace(/\/+$/, "");
   if (origin === "") {
     fail(opts, ExitCode.InputValidation, {
-      error: "no portal to publish to",
+      error: "no portal to share from",
       code: "no-portal-configured",
-      remediation: `Pass \`--to <url>\` or set TENDRIL_PORTAL_URL. \`${tendrilCommand(`publish ${opts.bundleDir} --dry-run`)}\` shows exactly what would be published without needing one.`
+      remediation: `Pass \`--to <url>\` or set TENDRIL_PORTAL_URL.`
     });
   }
   if (!isSecureOrigin(origin)) {
@@ -19891,173 +20736,90 @@ function httpClient(opts, origin) {
     });
   }
   const found = tokenFor(origin);
-  if (!found.ok && found.reason === "origin-mismatch") {
-    fail(opts, ExitCode.Auth, {
-      error: `the session available here belongs to ${found.boundTo}, and this would publish to ${origin}`,
-      code: "session-belongs-to-another-portal",
-      remediation: found.from === "env" ? `TENDRIL_TOKEN is pinned to TENDRIL_PORTAL_URL (${found.boundTo}). Publish to that portal, or set both to ${origin} together \u2014 a token is a credential for one host.` : `Sign in to ${origin}. The stored session is for ${found.boundTo}, and sending it elsewhere would hand that host a live credential.`
-    });
-  }
   if (!found.ok) {
     fail(opts, ExitCode.Auth, {
-      error: `no session for ${origin}`,
-      code: "not-signed-in",
-      remediation: `Run \`${tendrilCommand(`login --to ${origin}`)}\` and paste the token your portal operator gave you (or set TENDRIL_TOKEN and TENDRIL_PORTAL_URL together for this shell). Verification stays free and account-less; only publishing needs an account.`
+      error: found.reason === "origin-mismatch" ? `the session available here belongs to ${found.boundTo}, not ${origin}` : `no session for ${origin}`,
+      code: found.reason === "origin-mismatch" ? "session-belongs-to-another-portal" : "not-signed-in",
+      remediation: `Run \`${tendrilCommand(`login --to ${origin}`)}\`.`
     });
   }
-  return new HttpPublishClient({ origin, token: found.token });
-}
-function refuse2(opts, sent, code, rejoins = false) {
-  const detail = sent.detail === void 0 || sent.detail.length === 0 ? "" : `: ${sent.detail.join(", ")}`;
-  const retry = rejoins ? `run \`${tendrilCommand(`publish ${opts.bundleDir}`)}\` again \u2014 it rejoins this same unfinished publication rather than starting a second one` : `run \`${tendrilCommand(`publish ${opts.bundleDir}`)}\` again`;
-  fail(opts, sent.status === 401 ? ExitCode.Auth : ExitCode.General, {
-    error: `${sent.refusal}${detail}`,
-    code,
-    remediation: sent.status === 401 ? `That session is no longer valid. Run \`${tendrilCommand(`login --to ${resolveOrigin2(opts)}`)}\` and paste a fresh token.` : sent.status >= 500 ? `The portal failed on its side. Quote the error id above to whoever runs it, then ${retry}.` : `Fix what is named above and ${retry}.`
-  });
-}
-function pendingApprovalPath() {
-  return path57.join(path57.dirname(sessionPath()), "pending-publish.json");
-}
-async function runApprovalFlow(opts, client, bundleDir, input) {
-  const requested = await client.requestApproval({ componentName: input.componentName, figmaFile: input.figmaFile });
-  if (!requested.ok) refuse2(opts, requested, "approval-request-refused");
-  const approval = requested.value;
-  const who = await client.whoami?.();
-  const asAccount = who?.ok === true && who.value.email !== "" ? ` signed in as ${who.value.email}` : "";
-  if (opts.approveStart === true) {
-    const pending = { ...approval, bundleDir, componentName: input.componentName, figmaFile: input.figmaFile, requestedAt: (/* @__PURE__ */ new Date()).toISOString() };
-    writeFileSync25(pendingApprovalPath(), `${JSON.stringify(pending, null, 2)}
-`, { mode: 384 });
-    await endRunPresence(input.componentName);
-    emitData(
-      opts,
-      {
-        status: "approval-pending",
-        approveUrl: approval.approveUrl,
-        componentName: input.componentName,
-        ...asAccount === "" ? {} : { approveAsAccount: who?.ok === true ? who.value.email : "" },
-        expiresAt: approval.expiresAt,
-        next: `open the approve page in the browser${asAccount}, click Approve, then finish with --approve-wait`
-      },
-      () => {
-        process.stdout.write(`Approval requested for ${JSON.stringify(input.componentName)}.
-`);
-        process.stdout.write(`Approve it here${asAccount}: ${approval.approveUrl}
-`);
-        process.stdout.write(`Then finish with: ${tendrilCommand(`publish ${opts.bundleDir} --approve-wait`)}
-`);
+  const client = new HttpPublishClient({ origin, token: found.token });
+  if (opts.list === true) {
+    const listed = await client.listShareLinks({ publicationId: opts.publicationId });
+    if (!listed.ok) refuse2(opts, listed);
+    emitData(opts, listed.value, () => {
+      if (listed.value.links.length === 0) {
+        process.stdout.write("no links have been issued for this publication\n");
+        return;
       }
-    );
-    return void 0;
-  }
-  process.stderr.write(`This component's FIRST publish needs your approval in the browser${asAccount}:
-  ${approval.approveUrl}
+      process.stdout.write(`${String(listed.value.links.length)} link(s) for this publication:
 `);
-  process.stderr.write(`Waiting for your decision (lapses at ${approval.expiresAt.slice(11, 16)} UTC)\u2026
+      for (const link of listed.value.links) {
+        const ended = link.revoked_at !== null ? ` REVOKED ${link.revoked_at}` : link.expires_at !== null ? ` expires ${link.expires_at}` : " open-ended";
+        process.stdout.write(`  ${link.id}${ended}${link.recipient_email === null ? "" : ` \u2014 for ${link.recipient_email}`}
 `);
-  const decided = await waitForApproval(opts, client, approval);
-  if (decided === "approved") return input.begin();
-  await endRunPresence(input.componentName);
-  failDecision(opts, decided === "window-elapsed" ? "expired" : decided);
-}
-async function approveWaitPhase(opts, client, bundleDir, subject) {
-  const file = pendingApprovalPath();
-  let pending;
-  if (existsSync47(file)) {
-    try {
-      const parsed = JSON.parse(readFileSync43(file, "utf8"));
-      if (typeof parsed.approvalId === "string" && typeof parsed.approveUrl === "string" && typeof parsed.expiresAt === "string") {
-        pending = { pollSeconds: 3, bundleDir, ...parsed };
       }
-    } catch {
-    }
-  }
-  if (pending === void 0) {
-    fail(opts, ExitCode.InputValidation, {
-      error: "there is no publish approval waiting to finish",
-      code: "no-pending-approval",
-      remediation: `Start one first: ${tendrilCommand(`publish ${opts.bundleDir} --approve-start`)} (the tendril_publish tool).`
+      process.stdout.write("  (the links themselves are not stored \u2014 only their digests, so a lost link is a new link)\n");
     });
+    return;
   }
-  if (pending.componentName !== void 0 && pending.componentName !== subject.componentName) {
-    fail(opts, ExitCode.InputValidation, {
-      error: `the waiting approval is for ${JSON.stringify(pending.componentName)}, and this publish is ${JSON.stringify(subject.componentName)}`,
-      code: "pending-approval-mismatch",
-      remediation: `Finish that one first (${tendrilCommand(`publish ${pending.bundleDir} --approve-wait`)}), or start this one fresh with --approve-start \u2014 starting one replaces the waiting slot.`
+  if (opts.revoke !== void 0) {
+    const revoked = await client.revokeShareLink({ publicationId: opts.publicationId, shareLinkId: opts.revoke });
+    if (!revoked.ok) refuse2(opts, revoked);
+    emitData(opts, revoked.value, () => {
+      process.stdout.write(`revoked ${opts.revoke ?? ""}
+`);
+      process.stdout.write("  anyone holding that link now gets told it was revoked, not that it never existed\n");
     });
+    return;
   }
-  const done = () => rmSync10(file, { force: true });
-  const decided = await waitForApproval(opts, client, pending);
-  if (decided === "window-elapsed") {
-    const who = await client.whoami?.();
-    const asAccount = who?.ok === true && who.value.email !== "" ? who.value.email : void 0;
-    emitData(
-      opts,
-      {
-        status: "approval-pending",
-        approveUrl: pending.approveUrl,
-        ...asAccount !== void 0 ? { approveAsAccount: asAccount } : {},
-        expiresAt: pending.expiresAt,
-        windowSeconds: opts.waitWindowSeconds ?? 0,
-        ...pending.requestedAt !== void 0 ? { waitedTotalSeconds: Math.max(0, Math.round((Date.now() - Date.parse(pending.requestedAt)) / 1e3)) } : {},
-        remainingSeconds: Math.max(0, Math.round((Date.parse(pending.expiresAt) - Date.now()) / 1e3)),
-        next: "the approval request is STILL LIVE and undecided \u2014 tell the user in one short line you are still waiting for their Approve click (restate the approve link and the account to approve as, ONLY if they seem lost; never urge the decision), then run the wait again to keep waiting"
-      },
-      () => {
-        process.stdout.write(`Still waiting for the browser approval (wait window elapsed; the request stays live until ${pending.expiresAt.slice(11, 16)} UTC): ${pending.approveUrl}
+  const expiresAt = resolveExpiry(opts);
+  const issued = await client.issueShareLink({
+    publicationId: opts.publicationId,
+    expiresAt,
+    recipientEmail: opts.recipient ?? null
+  });
+  if (!issued.ok) refuse2(opts, issued);
+  emitData(opts, issued.value, () => {
+    process.stdout.write(`${issued.value.url}
+
 `);
-      }
+    process.stdout.write("  Anyone with this link can read this one publication and its evidence.\n");
+    process.stdout.write("  It is not tied to a person and needs no account.\n");
+    process.stdout.write(
+      issued.value.expiresAt === null ? "  It does not expire. Revoke it with --revoke when you are done.\n" : `  It stops working at ${issued.value.expiresAt}.
+`
     );
-    return "yielded";
-  }
-  if (decided !== "approved") {
-    done();
-    failDecision(opts, decided);
-  }
-  return "proceed";
-}
-function spendPendingApproval() {
-  rmSync10(pendingApprovalPath(), { force: true });
+    process.stdout.write("  This is the only time the link is shown \u2014 only its digest is stored.\n");
+  });
 }
-async function waitForApproval(opts, client, approval) {
-  const interval = Math.max(1, approval.pollSeconds) * 1e3;
-  const capMs = opts.waitWindowSeconds !== void 0 ? Math.max(1, opts.waitWindowSeconds) * 1e3 : APPROVAL_WAIT_CAP_MS;
-  const total = Math.ceil(capMs / interval);
-  for (let tick = 1; tick <= total; tick += 1) {
-    const polled = await client.pollApproval({ approvalId: approval.approvalId });
-    if (!polled.ok) refuse2(opts, polled, "approval-poll-refused");
-    if (polled.value.status !== "pending") return polled.value.status;
-    emitProgress(tick, total, "waiting for the browser approval");
-    await new Promise((resolve) => setTimeout(resolve, interval));
+function resolveExpiry(opts) {
+  if (opts.expires === void 0) return null;
+  const days = Number(opts.expires);
+  if (Number.isInteger(days) && days > 0) {
+    return new Date(Date.now() + days * 24 * 60 * 60 * 1e3).toISOString().replace(/\.\d{3}Z$/, (m) => m);
   }
-  return opts.waitWindowSeconds !== void 0 ? "window-elapsed" : "expired";
+  if (/^\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}\.\d{3}Z$/.test(opts.expires)) return opts.expires;
+  fail(opts, ExitCode.InputValidation, {
+    error: `--expires takes a number of days (e.g. 7) or an ISO-8601 UTC timestamp with milliseconds \u2014 got ${JSON.stringify(opts.expires)}`,
+    code: "bad-expiry",
+    remediation: "Try `--expires 7` for a week, or omit it for a link that does not expire."
+  });
 }
-function failDecision(opts, decided) {
-  if (decided === "denied") {
-    fail(opts, ExitCode.ConfirmationRequired, {
-      error: "the publish was DENIED in the browser \u2014 the human said no",
-      code: "publish-approval-denied",
-      remediation: "Nothing was published. If minds change, run the publish again \u2014 it makes a fresh request."
-    });
-  }
-  fail(opts, ExitCode.ConfirmationRequired, {
-    error: decided === "expired" ? "the approval request lapsed before anyone decided it" : "the approval request is gone \u2014 it lapsed and was cleaned up, or was already spent",
-    code: "publish-approval-lapsed",
-    remediation: "Run the publish again for a fresh request, and decide it within its 30-minute window. If the approve page showed nothing waiting, the browser is signed in to a DIFFERENT account than this CLI \u2014 the page lists only its own account's requests."
+function refuse2(opts, sent) {
+  fail(opts, sent.status === 401 ? ExitCode.Auth : ExitCode.General, {
+    error: sent.refusal,
+    code: "share-refused",
+    remediation: sent.status === 404 ? "Check the publication id \u2014 only its owner can share it." : `Fix what is named above and run \`${tendrilCommand(`share ${opts.publicationId}`)}\` again.`
   });
 }
-var APPROVAL_WAIT_CAP_MS;
-var init_publish = __esm({
-  "packages/cli/src/commands/publish.ts"() {
+var init_share = __esm({
+  "packages/cli/src/commands/share.ts"() {
     "use strict";
     init_src3();
-    init_src4();
     init_invocation();
     init_output();
     init_publish_client();
-    init_run_presence();
-    APPROVAL_WAIT_CAP_MS = 31 * 6e4;
   }
 });
 
@@ -20085,17 +20847,17 @@ __export(generate_recorded_exports, {
   runGenerateRecorded: () => runGenerateRecorded
 });
 import { confirm as confirm3, isCancel as isCancel4 } from "@clack/prompts";
-import { existsSync as existsSync48, readFileSync as readFileSync44 } from "node:fs";
-import path58 from "node:path";
+import { existsSync as existsSync49, readFileSync as readFileSync45 } from "node:fs";
+import path59 from "node:path";
 async function runGenerateRecorded(opts) {
   const callerCwd = process.env["INIT_CWD"] ?? process.cwd();
-  const outDirAbs = path58.resolve(callerCwd, opts.out);
-  const recordedAsPath = path58.resolve(callerCwd, opts.recorded);
+  const outDirAbs = path59.resolve(callerCwd, opts.out);
+  const recordedAsPath = path59.resolve(callerCwd, opts.recorded);
   let task;
   let taskName;
   let authoredApi;
   let composition;
-  const isSet = existsSync48(path58.join(recordedAsPath, "recording-set.json"));
+  const isSet = existsSync49(path59.join(recordedAsPath, "recording-set.json"));
   const registry = TASKS[opts.recorded];
   if (registry !== void 0 && !isSet) {
     task = registry;
@@ -20104,7 +20866,7 @@ async function runGenerateRecorded(opts) {
     try {
       const authored = authorTaskFromSet(recordedAsPath);
       task = authored.task;
-      taskName = path58.basename(recordedAsPath);
+      taskName = path59.basename(recordedAsPath);
       authoredApi = authored.api;
       const roles = RolesSchema.safeParse(loadManifest(recordedAsPath).roles);
       if (roles.success) composition = roles.data;
@@ -20138,7 +20900,7 @@ async function runGenerateRecorded(opts) {
     warn(opts, `font weights (advisory): the recording implies weights ${g.declared.join(", ")} for "${g.family}" \u2014 cache provides ${g.provided.join(", ")}; nearest-weight rendering may shift stroke density (certification stays family-gated; implied weights can leak across families)`);
   }
   const missing = task.configs.filter(
-    (c) => !repEnvelopeExists(task.set, c.rep, "screenshot") || !repEnvelopeExists(task.set, c.rep, "metadata") || !existsSync48(path58.join(task.set, c.rep, "get_design_context.json"))
+    (c) => !repEnvelopeExists(task.set, c.rep, "screenshot") || !repEnvelopeExists(task.set, c.rep, "metadata") || !existsSync49(path59.join(task.set, c.rep, "get_design_context.json"))
   );
   if (missing.length > 0) {
     fail(opts, ExitCode.RecordingIncomplete, {
@@ -20208,8 +20970,8 @@ async function runGenerateRecorded(opts) {
 ` : `${line}
 `);
   if (opts.dryRun) {
-    emitData(opts, { dryRun: true, task: taskName, model: modelId, consent, wouldWrite: path58.join(outDirAbs, taskName) }, () => {
-      process.stdout.write(`dry-run: nothing sent, nothing written (would write ${path58.join(outDirAbs, taskName)})
+    emitData(opts, { dryRun: true, task: taskName, model: modelId, consent, wouldWrite: path59.join(outDirAbs, taskName) }, () => {
+      process.stdout.write(`dry-run: nothing sent, nothing written (would write ${path59.join(outDirAbs, taskName)})
 `);
     });
     return;
@@ -20232,10 +20994,10 @@ async function runGenerateRecorded(opts) {
       });
     }
   }
-  const bundleDir = path58.join(outDirAbs, taskName);
-  if (existsSync48(path58.join(bundleDir, "component.json"))) {
+  const bundleDir = path59.join(outDirAbs, taskName);
+  if (existsSync49(path59.join(bundleDir, "component.json"))) {
     try {
-      const prior = readBundleManifest(readFileSync44(path58.join(bundleDir, "component.json"), "utf8")).manifest;
+      const prior = readBundleManifest(readFileSync45(path59.join(bundleDir, "component.json"), "utf8")).manifest;
       if (prior !== void 0 && prior.provenance.recordingSet.hash !== recordingSetHash(task.set, task.configs)) {
         fail(opts, ExitCode.InputValidation, {
           error: `${bundleDir} already holds a bundle bound to recording set "${prior.provenance.recordingSet.path}" \u2014 generating here against a different set would silently rewrite its verification identity`,
@@ -21310,6 +22072,12 @@ function buildProgram() {
     const { runRecordRestFetch: runRecordRestFetch2 } = await Promise.resolve().then(() => (init_record(), record_exports));
     await runRecordRestFetch2({ ...flags, setDir: local["set"] });
   });
+  record.command("bindings").description("Fetch Figma's instance\u2192component bindings for an EXISTING MCP-recorded set (one or two batched REST calls, congruence-verified per pose against the recording) \u2014 makes cross-component pairing id-backed WITHOUT re-recording. Pixels, geometry and the set's identity are untouched.").requiredOption("--set <dir>", "recording set directory").option("--file <key>", "the design's file key (figma.com/design/<KEY>/\u2026) \u2014 an operator assertion for sets recorded before file identity was captured; congruence still gates every binding").action(async (_o, cmd) => {
+    const flags = globalFlags(cmd.parent.parent);
+    const local = cmd.opts();
+    const { runRecordBindings: runRecordBindings2 } = await Promise.resolve().then(() => (init_record(), record_exports));
+    await runRecordBindings2({ ...flags, setDir: local["set"], ...local["file"] !== void 0 ? { file: local["file"] } : {} });
+  });
   record.command("next").requiredOption("--set <dir>", "recording set directory").action(async (_o, cmd) => {
     const flags = globalFlags(cmd.parent.parent);
     const { runRecordNext: runRecordNext2 } = await Promise.resolve().then(() => (init_record(), record_exports));
@@ -21354,10 +22122,11 @@ function buildProgram() {
     const { runRecordFinish: runRecordFinish2 } = await Promise.resolve().then(() => (init_record(), record_exports));
     runRecordFinish2({ ...flags, setDir: local["set"], confirmRoles: local["confirmRoles"], rolesFile: local["rolesFile"] });
   });
-  record.command("status").requiredOption("--set <dir>", "recording set directory").action(async (_o, cmd) => {
+  record.command("status").requiredOption("--set <dir>", "recording set directory").option("--library <dir>", "workspace root to scan for composition partners (default: the set's parent directory, bounded) \u2014 a partner in another project root is invisible without this").action(async (_o, cmd) => {
     const flags = globalFlags(cmd.parent.parent);
+    const local = cmd.opts();
     const { runRecordStatus: runRecordStatus2 } = await Promise.resolve().then(() => (init_record(), record_exports));
-    runRecordStatus2({ ...flags, setDir: cmd.opts()["set"] });
+    runRecordStatus2({ ...flags, setDir: local["set"], ...local["library"] !== void 0 ? { library: local["library"] } : {} });
   });
   const fonts = program.command("fonts").description("Font resolution chain: hash-pinned cache, lock verification, requiredFonts manifest.");
   fonts.command("resolve").argument("[family]", 'font family name, e.g. "IBM Plex Sans" (omit when using --set)').option("--set <dir>", "recording set \u2014 resolve every family and weight the set itself declares (nothing is fetched until a recording needs it)").option("--weights <w...>", "weights to resolve", ["400", "500", "600"]).option("--cache <dir>", "cache directory (default: the per-user font cache)").action(async (family, _o, cmd) => {
@@ -21479,9 +22248,24 @@ function buildProgram() {
       ...local["tendrilPrefix"] !== void 0 ? { tendrilPrefix: local["tendrilPrefix"] } : {}
     });
   });
-  program.command("compose").description("Composition opportunities across a workspace's recording sets (ADR-013): --list discovers (read-only); --set persists a HUMAN's confirm/decline decisions into the host manifest. A confirmed pair composes at generation (module identity verified; rendered-mount stamping and region crops are the named next increment).").option("--list", "derive the index and report edges (default)").option("--library <dir...>", "workspace root(s) to scan for recording sets (default: current directory)").option("--set <dir>", "confirmation mode: propose this HOST set's id-backed pairs for a human decision").option("--confirm-compositions", "HUMAN-ONLY: confirm every open pair printed for --set (refused without an interactive terminal; agents surface the proposal instead)").option("--decline <pair-key...>", "HUMAN-ONLY: persistently decline the named pair(s) \u2014 asked once, never re-asked").action(async (_o, cmd) => {
+  program.command("compose").description("Composition opportunities across a workspace's recording sets (ADR-013): --list discovers (read-only); --set persists a HUMAN's confirm/decline decisions into the host manifest. A confirmed pair composes at generation (module identity verified; rendered-mount stamping and region crops are the named next increment).").option("--list", "derive the index and report edges (default)").option("--library <dir...>", "workspace root(s) to scan for recording sets (default: current directory)").option("--set <dir>", "confirmation mode: propose this HOST set's id-backed pairs for a human decision").option("--confirm-compositions", "HUMAN-ONLY: confirm every open pair printed for --set (refused without an interactive terminal; agents surface the proposal instead)").option("--decline <pair-key...>", "HUMAN-ONLY: persistently decline the named pair(s) \u2014 asked once, never re-asked").option("--approve-start", "put ONE open pairing in front of the human's BROWSER (portal session required for this channel only) \u2014 prints the approve link, persists the pending state and exits; the tendril_compose tool's phase one").option("--approve-wait", "resume a pending browser decision: poll, and on Approve record the SAME entry the terminal confirm writes \u2014 phase two").option("--wait-window <seconds>", "with --approve-wait: return after this many undecided seconds (exit 0, status approval-pending, slot kept) \u2014 the MCP bridge's bounded-poll shape").option("--pair <key>", "with --approve-start on a host holding several open pairs: the ONE pairing to request (one card, one decision)").option("--to <url>", "portal origin override for the browser-approve channel").action(async (_o, cmd) => {
     const flags = globalFlags(cmd.parent);
     const local = cmd.opts();
+    const waitWindow = local["waitWindow"] !== void 0 ? Number.parseFloat(local["waitWindow"]) : void 0;
+    if (local["approveStart"] === true || local["approveWait"] === true) {
+      const { runComposeApprove: runComposeApprove2 } = await Promise.resolve().then(() => (init_compose_approve(), compose_approve_exports));
+      await runComposeApprove2({
+        ...flags,
+        ...local["library"] !== void 0 ? { library: local["library"] } : {},
+        ...local["set"] !== void 0 ? { set: local["set"] } : {},
+        ...local["approveStart"] !== void 0 ? { approveStart: local["approveStart"] } : {},
+        ...local["approveWait"] !== void 0 ? { approveWait: local["approveWait"] } : {},
+        ...waitWindow !== void 0 ? { waitWindowSeconds: waitWindow } : {},
+        ...local["pair"] !== void 0 ? { pair: local["pair"] } : {},
+        ...local["to"] !== void 0 ? { to: local["to"] } : {}
+      });
+      return;
+    }
     const { runCompose: runCompose2 } = await Promise.resolve().then(() => (init_compose2(), compose_exports));
     runCompose2({
       ...flags,