@tryvitris/website-harness 0.0.0-stage → 0.1.0-beta.6

package/bin/vitris-media-serve.js

@@ -0,0 +1,50 @@
+#!/usr/bin/env node
+import {
+  within
+} from "./chunks/chunk-T6PE4KN4.js";
+
+// scripts/serve-contact-sheet.ts
+import { resolve } from "node:path";
+
+// src/stock/contact-sheet-server.ts
+import { createServer } from "node:http";
+import { existsSync, readFileSync, statSync } from "node:fs";
+function contactSheetServer(siteRoot) {
+  return createServer((request, response) => {
+    try {
+      const path = decodeURIComponent(new URL(request.url || "/", "http://localhost").pathname);
+      const allowed = path === "/" || path === "/onboarding/contact-sheet.html" || path.startsWith("/media/");
+      if (!allowed) {
+        response.writeHead(404);
+        response.end();
+        return;
+      }
+      const relative = path === "/" ? "onboarding/contact-sheet.html" : path.slice(1);
+      const file = within(siteRoot, relative);
+      if (!existsSync(file) || !statSync(file).isFile()) {
+        response.writeHead(404);
+        response.end();
+        return;
+      }
+      const ext = file.split(".").pop()?.toLowerCase();
+      response.setHeader("content-type", { html: "text/html", svg: "image/svg+xml", png: "image/png", jpg: "image/jpeg", jpeg: "image/jpeg", webp: "image/webp", gif: "image/gif", mp4: "video/mp4", webm: "video/webm" }[ext || ""] || "application/octet-stream");
+      response.end(readFileSync(file));
+    } catch {
+      response.writeHead(403);
+      response.end();
+    }
+  });
+}
+
+// scripts/serve-contact-sheet.ts
+var index = process.argv.indexOf("--site");
+if (process.argv.includes("--help")) {
+  console.log("Usage: vitris-media-serve --site SITE\nServe the media contact sheet on loopback only.");
+  process.exit(0);
+}
+var root = resolve(index < 0 ? "." : process.argv[index + 1]);
+var server = contactSheetServer(root);
+server.listen(0, "127.0.0.1", () => {
+  const address = server.address();
+  if (address && typeof address !== "string") console.log("Media contact sheet: http://127.0.0.1:" + address.port + "/onboarding/contact-sheet.html");
+});

package/bin/vitris-migrate-site.js

@@ -0,0 +1,20 @@
+#!/usr/bin/env node
+import {
+  migrateSite
+} from "./chunks/chunk-GVNIL34R.js";
+
+// scripts/migrate-site.ts
+var arg = (flag) => {
+  const i = process.argv.indexOf(flag);
+  return i < 0 ? void 0 : process.argv[i + 1];
+};
+if (process.argv.includes("--help")) {
+  console.log("Usage: vitris-migrate-site --site DIR [--harness SPEC] [--apply]\nDefaults to a read-only plan. --apply backs up configuration before migrating.");
+} else {
+  try {
+    console.log(JSON.stringify(migrateSite({ site: arg("--site") || ".", harnessSpec: arg("--harness"), apply: process.argv.includes("--apply") }), null, 2));
+  } catch (error) {
+    console.error(error instanceof Error ? error.message : error);
+    process.exitCode = 1;
+  }
+}

package/bin/vitris-motion-view.js

@@ -0,0 +1,80 @@
+#!/usr/bin/env node
+import {
+  currentSelectionHash
+} from "./chunks/chunk-3CTBXY5K.js";
+import "./chunks/chunk-DSS2U2OM.js";
+import "./chunks/chunk-M4LNHYYR.js";
+import "./chunks/chunk-DRJQ4OOU.js";
+import "./chunks/chunk-PRLL7B63.js";
+import "./chunks/chunk-5OOPJNGN.js";
+import "./chunks/chunk-BBV7PMFC.js";
+import "./chunks/chunk-TY33XMHW.js";
+import "./chunks/chunk-R7YELY3C.js";
+import "./chunks/chunk-BIEDSEL2.js";
+import {
+  TEMPLATE_MOTION_PATH,
+  templateMotionHash
+} from "./chunks/chunk-T7DGRVTP.js";
+import "./chunks/chunk-AUO5I56E.js";
+import "./chunks/chunk-6H3T46F5.js";
+import "./chunks/chunk-M2ETYSVJ.js";
+import "./chunks/chunk-FOXUQXTV.js";
+import "./chunks/chunk-IKNMBGGD.js";
+import {
+  previewServer
+} from "./chunks/chunk-WEFDVXFX.js";
+import "./chunks/chunk-E5Y46VBX.js";
+import "./chunks/chunk-4GZCAWWK.js";
+import "./chunks/chunk-ANMJRJQ5.js";
+import "./chunks/chunk-HNORQ74T.js";
+import "./chunks/chunk-YCVGD2CG.js";
+import "./chunks/chunk-LKN75JGA.js";
+import "./chunks/chunk-YYPYYOEV.js";
+import "./chunks/chunk-GZDLXYZV.js";
+import "./chunks/chunk-G7MNMULR.js";
+import {
+  fingerprint,
+  within
+} from "./chunks/chunk-T6PE4KN4.js";
+import "./chunks/chunk-7FS67SRF.js";
+
+// scripts/template-motion-view.ts
+import { mkdirSync, copyFileSync, readFileSync, writeFileSync, existsSync, readdirSync } from "node:fs";
+import { join, resolve, basename } from "node:path";
+var arg = (key) => {
+  const i = process.argv.indexOf(key);
+  return i < 0 ? void 0 : process.argv[i + 1];
+};
+if (process.argv.includes("--help")) {
+  console.log("vitris-motion-view --site SITE --out ARTIFACT_DIRECTORY [--report browser|representative-browser] [--port PORT]\nCopy verified comparison evidence and create a paired local video review. Without --port, only write the artifact.");
+  process.exit(0);
+}
+var root = resolve(arg("--site") || ".");
+var out = resolve(arg("--out") || join(root, "artifacts/template-motion-review"));
+var reportName = arg("--report") || "browser";
+if (!["browser", "representative-browser"].includes(reportName)) throw Error("Unsupported report");
+var plan = JSON.parse(readFileSync(join(root, TEMPLATE_MOTION_PATH), "utf8"));
+var evidence = JSON.parse(readFileSync(join(root, "agent/reviews/" + reportName + ".json"), "utf8")).templateMotion;
+if (!evidence || plan.selectionHash !== currentSelectionHash(root) || evidence.selectionHash !== plan.selectionHash || evidence.planHash !== templateMotionHash(plan) || evidence.distHash !== fingerprint(root, ["dist"])) throw Error("Comparison selection/plan/build is stale");
+var hashes = new Map(evidence.files.map((f) => [f.path, f.hash]));
+if (existsSync(out) && readdirSync(out).length) throw Error("Use a fresh comparison output directory; existing evidence is preserved");
+mkdirSync(out, { recursive: true });
+for (const c of evidence.captures) for (const path of [c.video, ...c.frames]) {
+  if (!existsSync(within(root, path)) || hashes.get(path) !== fingerprint(root, [path])) throw Error("Capture bytes changed: " + path);
+  copyFileSync(within(root, path), join(out, basename(path)));
+}
+var escape = (s) => s.replace(/[&<>"']/g, (c) => ({ "&": "&amp;", "<": "&lt;", ">": "&gt;", '"': "&quot;", "'": "&#39;" })[c]);
+var rows = plan.moments.map((m) => `<section><h2>${escape(m.id.replaceAll("-", " "))}</h2><p>${escape(m.intent)}</p>${m.departure ? '<p class="note">Adaptation: ' + escape(m.departure) + "</p>" : ""}<button data-play>Play both from start</button><div class="pair">${["reference", "implementation"].map((side) => {
+  const c = evidence.captures.find((c2) => c2.momentId === m.id && c2.side === side);
+  if (!c || c.failures.length) throw Error("Incomplete comparison " + m.id + "/" + side);
+  return `<figure><figcaption>${side === "reference" ? "Motion Folio" : "Customer site"} \xB7 ${c.width}px</figcaption><video controls muted playsinline preload="metadata" src="${encodeURIComponent(basename(c.video))}"></video><details><summary>Timed frames</summary><div class="frames">${c.frames.map((p, i) => `<figure><img loading="lazy" src="${encodeURIComponent(basename(p))}" alt="${escape(side)} captured frame ${i + 1}"><figcaption>${c.samples[i].at}ms</figcaption></figure>`).join("")}</div></details></figure>`;
+}).join("")}</div></section>`).join("");
+writeFileSync(join(out, "index.html"), `<!doctype html><html lang="en"><meta charset="utf-8"><meta name="viewport" content="width=device-width, initial-scale=1"><title>Template motion comparison</title><style>body{margin:0;background:#f6f5f1;color:#202124;font:16px/1.6 system-ui}main{max-width:1400px;margin:auto;padding:40px 5%}h1{font-size:42px;line-height:1.1}h2{text-transform:capitalize}section{padding:28px 0;border-top:1px solid #ccc}.pair{display:grid;grid-template-columns:1fr 1fr;gap:24px}figure{margin:0}video{display:block;width:100%;height:450px;object-fit:contain;background:#222}figcaption{font-size:13px;margin:8px 0}.note{color:#555}button{background:#282a30;color:white;border:0;border-radius:24px;padding:12px 20px;margin-bottom:16px;cursor:pointer}.frames{display:flex;overflow:auto;gap:12px}.frames img{width:200px;height:180px;object-fit:contain}summary{cursor:pointer}@media(max-width:700px){.pair{grid-template-columns:1fr}video{height:350px}}</style><main><h1>Template motion comparison</h1><p>Paired recordings from the pinned reference and current build. These are browser observations; human design acceptance remains unset. Clips include loading and setup, so use the timed frames to locate the triggered interaction.</p>${rows}</main><script>document.querySelectorAll('[data-play]').forEach(button=>button.addEventListener('click',()=>{button.closest('section').querySelectorAll('video').forEach(video=>{video.currentTime=0;video.play().catch(()=>{});});}));</script></html>`);
+writeFileSync(join(out, "evidence.json"), JSON.stringify({ plan, evidence }, null, 2) + "\n");
+console.log("Comparison artifact: " + out);
+if (arg("--port")) {
+  const port = Number(arg("--port"));
+  if (!Number.isInteger(port) || port < 1 || port > 65535) throw Error("Invalid port");
+  const server = previewServer(out);
+  server.listen(port, "127.0.0.1", () => console.log("Comparison: http://127.0.0.1:" + port + "/"));
+}

package/bin/vitris-prepare-media.js

@@ -0,0 +1,64 @@
+#!/usr/bin/env node
+import {
+  registerRecoveredMedia
+} from "./chunks/chunk-G7MNMULR.js";
+import {
+  files,
+  fingerprint,
+  json,
+  save,
+  within
+} from "./chunks/chunk-T6PE4KN4.js";
+import {
+  escapeHtml
+} from "./chunks/chunk-7FS67SRF.js";
+
+// scripts/prepare-media.ts
+import { existsSync, readFileSync, writeFileSync } from "node:fs";
+import { join, resolve, relative } from "node:path";
+import { createHash } from "node:crypto";
+var siteArg = process.argv.indexOf("--site");
+var root = resolve(siteArg < 0 ? "." : process.argv[siteArg + 1]);
+var arg = (key) => {
+  const index = process.argv.indexOf(key);
+  return index < 0 ? void 0 : process.argv[index + 1];
+};
+if (arg("--register")) {
+  const disposition = arg("--disposition");
+  if (disposition !== "use" && disposition !== "retain") throw new Error("Registration needs --disposition use|retain");
+  const asset = registerRecoveredMedia(root, { path: arg("--register"), source: arg("--source") || "", disposition, id: arg("--id"), description: arg("--description"), role: arg("--role"), poster: arg("--poster") });
+  console.log(`Registered ${asset.id} at ${asset.path} with SHA-256 ${asset.sha256}. Inspect the media and record identity evidence before completing media.`);
+  process.exit(0);
+}
+var previousPath = join(root, "onboarding/media-inventory.json");
+var previous = existsSync(previousPath) ? json(previousPath).assets : [];
+var brief = json(join(root, "onboarding/brief.json"));
+var assets = files(join(root, "media/harvest")).map((file) => {
+  const path = "/media/harvest/" + relative(join(root, "media/harvest"), file).replaceAll("\\", "/");
+  const match = brief.images.filter((i) => i.localPath === path);
+  const id = "media-" + createHash("sha256").update(path).update(readFileSync(file)).digest("hex").slice(0, 16);
+  return {
+    id,
+    path,
+    sources: [...new Set(match.flatMap((i) => i.sourceUrls || [i.sourceUrl]))],
+    description: match[0]?.alt || "Needs visual inspection",
+    role: match[0]?.mediaType || "unknown",
+    disposition: "unresolved",
+    reason: "Needs review",
+    inspected: false,
+    placements: [],
+    origin: "unknown",
+    identity: "uncertain",
+    identityEvidence: [],
+    sha256: createHash("sha256").update(readFileSync(file)).digest("hex"),
+    kind: /\.(mp4|webm|mov)$/i.test(file) ? "video" : "image",
+    ...previous.find((a) => a.id === id && a.path === path)
+  };
+});
+assets.push(...previous.filter((a) => !a.path.startsWith("/media/harvest/") && existsSync(within(root, a.path.replace(/^\//, "")))));
+var priorUnavailable = existsSync(previousPath) ? json(previousPath).unavailable || [] : [];
+var unavailable = brief.images.filter((i) => !assets.some((a) => a.sources.includes(i.sourceUrl))).map((i) => priorUnavailable.find((a) => a.source === i.sourceUrl) || { source: i.sourceUrl, reason: "Needs recovery or explicit disposition", resolution: "unresolved", evidence: "" });
+save(previousPath, { version: 2, harvestHash: fingerprint(root, ["onboarding/brief.json", "media/harvest"]), assets, unavailable });
+var gallery = assets.map((a) => `<figure>${a.kind === "video" ? `<video src="..${escapeHtml(a.path)}" controls preload="metadata"${a.poster ? ` poster="..${escapeHtml(a.poster)}"` : ""}></video>` : `<img src="..${escapeHtml(a.path)}" loading="lazy">`}<figcaption>${escapeHtml(a.id)}<br>${escapeHtml(a.description)}<br>${escapeHtml(a.origin || "unknown")} / ${escapeHtml(a.identity || "uncertain")}</figcaption></figure>`).join("\n");
+writeFileSync(join(root, "onboarding/contact-sheet.html"), `<!doctype html><meta charset="utf-8"><title>Media contact sheet</title><style>body{font:14px system-ui;display:grid;grid-template-columns:repeat(4,1fr);gap:16px}figure{margin:0;border:1px solid #ccc;padding:8px}img,video{width:100%;height:180px;object-fit:contain}figcaption{overflow-wrap:anywhere}</style>${gallery}`);
+console.log(`Indexed ${assets.length} assets; open onboarding/contact-sheet.html, inspect candidates, then complete dispositions.`);

package/bin/vitris-preview.js

@@ -0,0 +1,36 @@
+#!/usr/bin/env node
+import {
+  previewIdentity,
+  previewServer
+} from "./chunks/chunk-WEFDVXFX.js";
+import {
+  save
+} from "./chunks/chunk-T6PE4KN4.js";
+
+// scripts/preview.ts
+import { existsSync } from "node:fs";
+import { join, resolve } from "node:path";
+if (process.argv.includes("--help") || process.argv.includes("-h")) {
+  console.log("vitris-preview --site SITE [--port PORT]\nServe SITE/dist locally. Without --site, SITE is the current directory. --help/-h prints this usage without starting a server or writing preview metadata.");
+  process.exit(0);
+}
+var arg = (key) => {
+  const i = process.argv.indexOf(key);
+  return i < 0 ? void 0 : process.argv[i + 1];
+};
+var root = resolve(arg("--site") || ".");
+var dist = join(root, "dist");
+var port = Number(arg("--port") || 0);
+if (!existsSync(join(dist, "index.html"))) throw new Error("Build a homepage before starting preview");
+if (!Number.isInteger(port) || port < 0 || port > 65535) throw new Error("Invalid port");
+var server = previewServer(dist);
+await new Promise((done, fail) => {
+  server.once("error", fail);
+  server.listen(port, "127.0.0.1", done);
+});
+var url = `http://127.0.0.1:${server.address().port}`;
+save(join(root, "agent/preview-server.json"), { pid: process.pid, url, identity: previewIdentity(dist) });
+console.log(`Local preview: ${url}`);
+var stop = () => server.close(() => process.exit(0));
+process.on("SIGINT", stop);
+process.on("SIGTERM", stop);

package/bin/vitris-references.js

@@ -0,0 +1,173 @@
+#!/usr/bin/env node
+import {
+  REFERENCE_RELEASE,
+  loadReferenceCatalog,
+  loadReferenceStudies,
+  referenceCoverage,
+  referenceHash,
+  referenceReleaseDirectory,
+  referenceSignals,
+  selectReferences,
+  validateReferenceCatalog,
+  validateReferenceDependencies
+} from "./chunks/chunk-R7YELY3C.js";
+import "./chunks/chunk-BIEDSEL2.js";
+import "./chunks/chunk-6H3T46F5.js";
+import {
+  previewServer
+} from "./chunks/chunk-WEFDVXFX.js";
+import {
+  buildVerified
+} from "./chunks/chunk-E5Y46VBX.js";
+import "./chunks/chunk-4GZCAWWK.js";
+import "./chunks/chunk-ANMJRJQ5.js";
+import "./chunks/chunk-HNORQ74T.js";
+import "./chunks/chunk-YCVGD2CG.js";
+import "./chunks/chunk-LKN75JGA.js";
+import "./chunks/chunk-YYPYYOEV.js";
+import "./chunks/chunk-GZDLXYZV.js";
+import "./chunks/chunk-T6PE4KN4.js";
+import "./chunks/chunk-7FS67SRF.js";
+
+// scripts/reference-library.ts
+import { existsSync, mkdirSync as mkdirSync2, readFileSync as readFileSync2, writeFileSync } from "node:fs";
+import { dirname, join as join3, resolve } from "node:path";
+import { fileURLToPath } from "node:url";
+
+// src/agent/reference-gallery.ts
+import { cpSync, mkdirSync } from "node:fs";
+import { join } from "node:path";
+function referenceGallery(kernel2, output2, catalog, coverage2) {
+  const teaching = loadReferenceStudies(kernel2, catalog.release);
+  mkdirSync(join(output2, "previews"), { recursive: true });
+  for (const study of teaching.catalog.studies) for (const view of study.renderEvidence) for (const pin of [view.preview, view.fullPreview].filter(Boolean)) {
+    mkdirSync(join(output2, pin.path, ".."), { recursive: true });
+    cpSync(join(teaching.base, pin.path), join(output2, pin.path));
+  }
+  const json = (value) => JSON.stringify(value).replaceAll("<", "\\u003c");
+  return `<!doctype html><html lang="en"><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1"><title>Vitris reference review</title>
+<style>body{font:16px/1.55 system-ui;margin:0;color:#172230;background:#edf1f5}header,main{max-width:1400px;margin:auto;padding:24px}h1{font-size:36px}label{display:inline-block;margin:0 16px 12px 0}input,select,button{font:inherit;padding:8px;min-height:44px}#cards,#studies{display:grid;grid-template-columns:repeat(auto-fit,minmax(300px,1fr));gap:18px}article{background:white;padding:24px;border:1px solid #abb7c3;min-width:0}a{color:#084ca8}small{display:block}#compare{display:grid;grid-template-columns:repeat(auto-fit,minmax(280px,1fr));gap:20px}details{margin-top:14px}:focus-visible{outline:3px solid #a64216;outline-offset:3px}.pending{color:#8b3106}.previews{display:grid;grid-template-columns:1fr 1fr;gap:8px}.previews figure{margin:0;min-width:0}.previews img{width:100%;height:180px;object-fit:contain;object-position:top;background:#e6e8eb}.previews figcaption{font-size:13px}</style>
+<header><h1>Reference library review</h1><p>${catalog.release} \xB7 ${coverage2.screened}/100 screened \xB7 ${coverage2.deep}/60 deep \xB7 ${teaching.catalog.studies.length}/16 original pairs. Assistant-curated research and technical teaching examples. Human preference labels remain blank.</p>
+<label>Search expression, composition or task <input id="search" type="search"></label><label>Evidence <select id="depth"><option value="">All</option><option>candidate</option><option>live-screened</option><option>deep-reviewed</option><option>unavailable</option><option value="original">Original studies</option></select></label><label>Media <select id="media"><option value="">All</option><option value="none">Sparse / no images required</option><option value="one-image">One image</option><option value="multiple-images">Multiple images required</option><option value="product-ui">Product UI</option></select></label><label>Visual access <select id="visual"><option value="">All</option><option value="original">Pinned originals</option><option value="legacy-observation">Legacy written observations</option><option value="live-only">Fresh live-only views</option><option value="retained-capture">Retained captures</option><option value="accessible-session">Accessible sessions</option></select></label><label>Generation <select id="eligible"><option value="">All</option><option value="yes">Eligible teaching</option><option value="no">Ineligible</option></select></label><p id="count" aria-live="polite"></p><h2>Compare up to four entries</h2><p id="comparison-status" aria-live="polite"></p><div id="compare"></div></header>
+<main><h2>Original Vitris pairs</h2><p>Invented teaching facts stay separate from customer inventories. Open any preview for its recorded viewport; inspect the live compiled pair with <code>vitris-references --release ${catalog.release} --preview STUDY-ID --serve</code>. These are assistant-reviewed technical examples, with human taste review pending.</p><div id="studies"></div><h2>Live-site research</h2><p>Publisher imagery/code is uncleared and is not embedded. Open the source for actual pixel inspection; written observations identify inspected routes and limitations.</p><div id="cards"></div></main>
+<script>const records=${json(catalog.records)},studies=${json(teaching.catalog.studies)};const chosen=new Set();const esc=s=>String(s).replace(/[&<>"']/g,c=>({'&':'&amp;','<':'&lt;','>':'&gt;','"':'&quot;',"'":'&#39;'}[c]));
+const button=id=>'<button data-id="'+esc(id)+'" aria-pressed="'+chosen.has(id)+'">'+(chosen.has(id)?'Remove comparison':'Compare')+'</button>';
+const card=r=>'<article><p class="pending">'+esc((r.visualEvidence?.kind||'legacy-observation')+' \xB7 last verified '+(r.visualEvidence?.lastVerifiedAt||r.inspectedAt||'unknown')+' \xB7 '+(r.visualEvidence?.freshness||'requires-live-view'))+'</p><small>'+esc(r.primaryFamily+' \xB7 '+r.evidenceLevel+' \xB7 '+r.id+'@'+r.revision)+'</small><h2>'+esc(r.title)+'</h2><p>'+esc(r.adds)+'</p><p><a href="'+esc(r.requestedUrl)+'" target="_blank" rel="noopener">Open live source</a></p><p>'+esc(r.visitorTasks.join(' \xB7 '))+'</p><p>Opening: '+esc(r.structure.opening)+'</p><p>'+esc(r.lessons.join(' '))+'</p>'+button(r.id)+'<details><summary>Evidence, fit and limitations</summary><p>Use: '+esc(r.useWhen.join('; '))+'</p><p>Avoid: '+esc(r.avoidWhen.join('; '))+'</p><p>Sequence: '+esc(r.structure.sequence.join(' \u2192 '))+'</p><p>Mobile: '+esc(r.structure.responsive)+'</p><p>'+esc(r.sourcing.basis)+'</p><p>'+esc(r.visualEvidence?.note||'No retained external pixels; a current live view is required.')+'</p><p>Durable related originals: '+(r.visualEvidence?.durableOriginalIds||r.relatedExamples).map(id=>'<a href="#study-'+esc(id)+'">'+esc(id)+'</a>').join(', ')+'</p><p class="pending">'+esc(r.limitations.join('; '))+'</p>'+r.views.map(v=>'<p>'+esc(v.viewport.width+'\xD7'+v.viewport.height+' \xB7 '+v.route+' \xB7 '+v.scope+' \xB7 '+v.state+': '+v.observation+' Evidence '+v.evidencePointer)+'</p>').join('')+'</details></article>';
+const studyCard=s=>'<article id="study-'+esc(s.id)+'"> <p>'+esc(s.exampleScope||'focused-structural-lesson')+' \xB7 Pinned original pixels</p><small>'+esc(s.primaryFamily+' \xB7 original \xB7 '+s.id+'@'+s.revision)+'</small><h2>'+esc(s.title)+'</h2><p>'+esc(s.organizingIdea)+'</p><div class="previews">'+s.renderEvidence.map(v=>'<figure><a href="'+esc(v.fullPreview?.path||v.preview.path)+'" target="_blank" rel="noopener"><img loading="lazy" src="'+esc(v.preview.path)+'" alt="'+esc(s.title+' '+v.route+' at '+v.viewport.width+' pixels')+'"></a><figcaption>'+esc(v.route+' \xB7 '+v.viewport.width+'\xD7'+v.viewport.height)+'</figcaption></figure>').join('')+'</div><p class="pending">'+esc(s.status)+'</p>'+button('study:'+s.id)+'<details><summary>Lessons, provenance and review</summary><p>'+esc(s.lessonIds.join(' \xB7 '))+'</p><p>'+esc(s.provenance.content+' '+s.provenance.media+' '+s.provenance.rights)+'</p><p>Facts hash '+esc(s.brief.factsHash)+'; media hash '+esc(s.brief.mediaHash)+'</p>'+s.renderEvidence.map(v=>'<p>'+esc(v.route+' '+v.viewport.width+'px: '+v.visualReview.assessor+' '+v.visualReview.reviewedAt+' '+v.visualReview.assessment)+'</p>').join('')+'</details></article>';
+function draw(){const query=document.querySelector('#search').value.toLowerCase(),depth=document.querySelector('#depth').value,media=document.querySelector('#media').value,elig=document.querySelector('#eligible').value,visual=document.querySelector('#visual').value;const match=r=>(!query||JSON.stringify(r).toLowerCase().includes(query))&&(!media||r.assetMinimum===media);const shown=records.filter(r=>match(r)&&(!visual||(r.visualEvidence?.kind||'legacy-observation')===visual)&&(!depth||r.evidenceLevel===depth)&&(!elig||r.eligible.metadata===(elig==='yes'))),originals=studies.filter(s=>match(s)&&(!visual||visual==='original')&&(!depth||depth==='original')&&elig!=='no');document.querySelector('#count').textContent=shown.length+' live records and '+originals.length+' original pairs shown';document.querySelector('#cards').innerHTML=shown.map(card).join('');document.querySelector('#studies').innerHTML=originals.map(studyCard).join('');document.querySelector('#compare').innerHTML=[...records.filter(r=>chosen.has(r.id)).map(card),...studies.filter(s=>chosen.has('study:'+s.id)).map(studyCard)].join('')}
+document.addEventListener('input',draw);document.addEventListener('click',e=>{const target=e.target.closest('button[data-id]'),id=target?.dataset.id;if(!id)return;const region=target.closest('#compare,#studies,#cards')?.id;let capped=false;if(chosen.has(id))chosen.delete(id);else if(chosen.size<4)chosen.add(id);else capped=true;draw();document.querySelector('#comparison-status').textContent=capped?'Four entries selected. Remove a comparison before adding another.':chosen.size+' of four entries selected';const replacement=[...document.querySelectorAll('#'+region+' button[data-id]')].find(b=>b.dataset.id===id);if(replacement)replacement.focus();else document.querySelector('#depth').focus()});draw();</script></html>`;
+}
+
+// src/agent/reference-exposure.ts
+import { readdirSync, readFileSync, statSync } from "node:fs";
+import { join as join2, relative } from "node:path";
+function referenceExposure(directory) {
+  const delivered = /* @__PURE__ */ new Map();
+  const unreadable = [];
+  let scanned = 0;
+  const walk = (root) => {
+    for (const entry of readdirSync(root, { withFileTypes: true })) {
+      if (entry.isSymbolicLink()) continue;
+      const path = join2(root, entry.name);
+      if (entry.isDirectory()) {
+        if (!["node_modules", ".git", "dist"].includes(entry.name)) walk(path);
+        continue;
+      }
+      if (!entry.name.endsWith(".json")) continue;
+      if (++scanned > 5e3) throw new Error("Exposure scan exceeds 5000 JSON files; use a narrower explicit receipts directory");
+      if (statSync(path).size > 2e6) continue;
+      try {
+        const body = readFileSync(path, "utf8");
+        if (!body.includes('"referenceSelection"') && !body.includes('"teachingSelected"') && !body.includes('"selectorVersion"')) continue;
+        const obj = JSON.parse(body), receipt = obj.manifest?.referenceSelection || obj.referenceSelection || obj.receipt || obj;
+        if (!receipt.manifestHash || !Array.isArray(receipt.selected)) continue;
+        const selected = receipt.selected.map((s) => `${s.id}@${s.revision}`).sort();
+        const teaching = (receipt.teachingSelected || []).map((s) => `${s.id}@${s.revision}`).sort();
+        const signature = referenceHash(JSON.stringify([receipt.manifestHash, receipt.teachingManifestHash, receipt.inputSignalHash, selected, teaching]));
+        const existing = delivered.get(signature);
+        if (existing) {
+          existing.files.push(relative(directory, path));
+          existing.inspected = Math.max(existing.inspected, Array.isArray(receipt.inspectedEvidence) ? receipt.inspectedEvidence.length : 0);
+        } else delivered.set(signature, { files: [relative(directory, path)], selected, teaching, manifestHash: receipt.manifestHash, inputSignalHash: receipt.inputSignalHash, inspected: Array.isArray(receipt.inspectedEvidence) ? receipt.inspectedEvidence.length : 0 });
+      } catch (error) {
+        unreadable.push({ path: relative(directory, path), reason: String(error) });
+      }
+    }
+  };
+  walk(directory);
+  const exposures = [...delivered.values()], count = (values) => [...new Set(values)].map((id) => ({ id, contexts: values.filter((v) => v === id).length })).sort((a, b) => b.contexts - a.contexts || a.id.localeCompare(b.id));
+  return { schemaVersion: 1, scope: "Distinct treatment/signal/selection combinations in the explicit directory; duplicate packet/stage copies collapsed. This is delivery, not proof of inspection or a generation/run count.", selectionHistoryInfluence: "none", scannedJsonFiles: scanned, distinctContexts: exposures.length, references: count(exposures.flatMap((e) => e.selected)), originalStudies: count(exposures.flatMap((e) => e.teaching)), combinations: count(exposures.map((e) => [...e.selected, ...e.teaching].join(" + "))), exposures, unreadable };
+}
+
+// scripts/reference-library.ts
+var kernel = resolve(dirname(fileURLToPath(import.meta.url)), "..");
+var args = process.argv.slice(2);
+var arg = (name, fallback) => args.includes(name) ? args[args.indexOf(name) + 1] : fallback;
+var release = arg("--release", REFERENCE_RELEASE);
+var base = join3(kernel, `design-system/references/${referenceReleaseDirectory(release)}`);
+var catalogPath = join3(base, "catalog.json");
+var manifestPath = join3(base, "manifest.json");
+var save = (path, value) => {
+  mkdirSync2(dirname(path), { recursive: true });
+  writeFileSync(path, JSON.stringify(value, null, 2) + "\n");
+};
+var seal = (catalog) => {
+  const errors = validateReferenceCatalog(catalog);
+  if (errors.length) throw new Error(errors.join("\n"));
+  validateReferenceDependencies(catalog, kernel, base);
+  save(catalogPath, catalog);
+  save(manifestPath, { schemaVersion: 1, release, status: args.includes("--release-ready") ? "curated; technically validated; not human-approved taste data" : "curation-in-progress; not human-approved taste data", catalog: { path: "catalog.json", sha256: referenceHash(readFileSync2(catalogPath)) }, labeledPreferenceData: false });
+};
+if (args.includes("--record")) {
+  const record = JSON.parse(readFileSync2(resolve(arg("--record")), "utf8"));
+  const catalog = existsSync(catalogPath) ? JSON.parse(readFileSync2(catalogPath, "utf8")) : { schemaVersion: 1, release, records: [] };
+  const index = catalog.records.findIndex((r) => r.id === record.id);
+  if (index >= 0) {
+    const old = catalog.records[index];
+    if (record.revision <= old.revision) throw new Error("Replacement must increment revision; previous evidence remains in the research ledger");
+    catalog.records[index] = record;
+  } else catalog.records.push(record);
+  seal(catalog);
+} else if (args.includes("--seal")) seal(JSON.parse(readFileSync2(catalogPath, "utf8")));
+var pack = loadReferenceCatalog(kernel, kernel, release);
+var coverage = referenceCoverage(pack.catalog);
+var output = resolve(arg("--out", release === "2026-10-06.1" ? "artifacts/reference-quality-20261006/gallery" : "artifacts/reference-library-expansion-20261005/gallery"));
+if (args.includes("--exposure")) {
+  const directory = resolve(arg("--receipts", join3(resolve(arg("--site", ".")), "agent")));
+  const report = referenceExposure(directory);
+  save(join3(output, "exposure.json"), report);
+  console.log(JSON.stringify(report, null, 2));
+} else if (args.includes("--select")) {
+  const site = resolve(arg("--site", "."));
+  const receipt = selectReferences(pack, referenceSignals(site, release));
+  save(join3(output, "selection.json"), receipt);
+  console.log(JSON.stringify(receipt, null, 2));
+} else if (args.includes("--gallery")) {
+  mkdirSync2(output, { recursive: true });
+  const html = referenceGallery(kernel, output, pack.catalog, coverage);
+  writeFileSync(join3(output, "index.html"), html);
+  save(join3(output, "coverage.json"), coverage);
+  console.log(`Gallery: ${join3(output, "index.html")}`);
+} else if (!args.includes("--preview")) console.log(JSON.stringify({ manifestHash: pack.manifestHash, errors: [], coverage }, null, 2));
+var serveRoot = output;
+if (args.includes("--preview")) {
+  const teaching = loadReferenceStudies(kernel, release), study = teaching.catalog.studies.find((s) => s.id === arg("--preview"));
+  if (!study) throw new Error("Unknown original study ID");
+  serveRoot = join3(output, "studies", study.id);
+  await buildVerified(join3(teaching.base, study.sourcePath), serveRoot, void 0, study.id);
+  console.log(`Compiled original pair: ${serveRoot}`);
+}
+if (args.includes("--serve")) {
+  if (!existsSync(join3(serveRoot, "index.html"))) throw new Error("Use --gallery or --preview ID with --serve");
+  const port = Number(arg("--port", "0"));
+  if (!Number.isInteger(port) || port < 0 || port > 65535) throw new Error("Invalid port");
+  const server = previewServer(serveRoot);
+  await new Promise((done, fail) => {
+    server.once("error", fail);
+    server.listen(port, "127.0.0.1", done);
+  });
+  console.log(`Local reference preview: http://127.0.0.1:${server.address().port}`);
+  const stop = () => server.close(() => process.exit(0));
+  process.on("SIGINT", stop);
+  process.on("SIGTERM", stop);
+}

package/bin/vitris-refresh.js

@@ -0,0 +1,50 @@
+#!/usr/bin/env node
+import {
+  upgradeSite
+} from "./chunks/chunk-7VLBEAFW.js";
+import "./chunks/chunk-JCRGE6AL.js";
+import "./chunks/chunk-3CTBXY5K.js";
+import "./chunks/chunk-DSS2U2OM.js";
+import "./chunks/chunk-M4LNHYYR.js";
+import "./chunks/chunk-DRJQ4OOU.js";
+import "./chunks/chunk-PRLL7B63.js";
+import "./chunks/chunk-5OOPJNGN.js";
+import "./chunks/chunk-BBV7PMFC.js";
+import "./chunks/chunk-TY33XMHW.js";
+import "./chunks/chunk-R7YELY3C.js";
+import "./chunks/chunk-BIEDSEL2.js";
+import "./chunks/chunk-T7DGRVTP.js";
+import "./chunks/chunk-AUO5I56E.js";
+import "./chunks/chunk-6H3T46F5.js";
+import "./chunks/chunk-M2ETYSVJ.js";
+import "./chunks/chunk-FOXUQXTV.js";
+import "./chunks/chunk-IKNMBGGD.js";
+import "./chunks/chunk-WEFDVXFX.js";
+import "./chunks/chunk-E5Y46VBX.js";
+import "./chunks/chunk-4GZCAWWK.js";
+import "./chunks/chunk-ANMJRJQ5.js";
+import "./chunks/chunk-HNORQ74T.js";
+import "./chunks/chunk-YCVGD2CG.js";
+import "./chunks/chunk-LKN75JGA.js";
+import "./chunks/chunk-YYPYYOEV.js";
+import "./chunks/chunk-GZDLXYZV.js";
+import "./chunks/chunk-G7MNMULR.js";
+import "./chunks/chunk-T6PE4KN4.js";
+import "./chunks/chunk-7FS67SRF.js";
+
+// scripts/refresh-agent.ts
+var args = process.argv.slice(2);
+var value = (name) => {
+  const i = args.indexOf(name);
+  return i < 0 ? void 0 : args[i + 1];
+};
+var opts = { site: value("--site"), target: value("--target"), to: value("--to") };
+var planned = upgradeSite(opts);
+if (!planned.ok || args.includes("--plan")) {
+  console.log(JSON.stringify(planned, null, 2));
+  process.exitCode = planned.exitCode;
+} else {
+  const applied = upgradeSite({ ...opts, apply: true });
+  console.log(JSON.stringify(applied, null, 2));
+  process.exitCode = applied.exitCode;
+}

package/bin/vitris-sign-publish-bundle.js

@@ -0,0 +1,64 @@
+#!/usr/bin/env node
+import {
+  verifyReceipt
+} from "./chunks/chunk-6A3VWYMF.js";
+import {
+  artifactManifest,
+  compareArtifactPaths
+} from "./chunks/chunk-XL2DRAYI.js";
+import {
+  KNOWLEDGE_RELEASE,
+  LAUNCH_POLICY_ID
+} from "./chunks/chunk-BIEDSEL2.js";
+
+// scripts/sign-publish-bundle.ts
+import { spawnSync } from "node:child_process";
+import { existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
+import { dirname, isAbsolute, join, relative, resolve } from "node:path";
+import { fileURLToPath } from "node:url";
+
+// src/knowledge/publish-attestation.ts
+var encoder = new TextEncoder();
+var hex = (bytes) => [...bytes].map((byte) => byte.toString(16).padStart(2, "0")).join("");
+var canonical = (value) => Array.isArray(value) ? value.map(canonical) : value && typeof value === "object" ? Object.fromEntries(Object.entries(value).filter(([, entry]) => entry !== void 0).sort(([a], [b]) => compareArtifactPaths(a, b)).map(([key2, entry]) => [key2, canonical(entry)])) : value;
+var payload = (body2) => encoder.encode(JSON.stringify(canonical(body2)));
+var key = async (secret2) => crypto.subtle.importKey("raw", encoder.encode(secret2), { name: "HMAC", hash: "SHA-256" }, false, ["sign", "verify"]);
+async function signPublishBundle(body2, secret2) {
+  if (secret2.length < 32) throw new Error("Publish attestation secret must contain at least 32 characters");
+  return { ...body2, signature: hex(new Uint8Array(await crypto.subtle.sign("HMAC", await key(secret2), payload(body2)))) };
+}
+
+// scripts/sign-publish-bundle.ts
+var arg = (name) => {
+  const index = process.argv.indexOf(name);
+  return index < 0 ? void 0 : process.argv[index + 1];
+};
+var site = resolve(arg("--site") || ".");
+var output = arg("--out") && resolve(arg("--out"));
+var tenantId = arg("--tenant-id") || "";
+var slug = arg("--slug") || "";
+var project = arg("--project") || "";
+var origin = arg("--origin");
+var secret = process.env.VITRIS_PUBLISH_ATTESTATION_SECRET || "";
+if (!output || !tenantId || !slug || !project || secret.length < 32) throw new Error("--out, --tenant-id, --slug, --project and VITRIS_PUBLISH_ATTESTATION_SECRET (32+ characters) are required");
+var dist = join(site, "dist");
+if (!existsSync(dist)) throw new Error("Build dist/ before signing a publish bundle");
+var relOutput = relative(dist, output);
+if (!relOutput.startsWith("..") && !isAbsolute(relOutput)) throw new Error("Attested bundle output must be outside dist/");
+var siblingBin = join(dirname(fileURLToPath(import.meta.url)), "vitris-launch-preflight.js");
+var sourceScript = join(dirname(fileURLToPath(import.meta.url)), "launch-preflight.ts");
+var preflight = existsSync(siblingBin) ? [siblingBin] : ["--experimental-strip-types", sourceScript];
+var checked = spawnSync(process.execPath, [...preflight, "--site", site, "--environment", "production", ...origin ? ["--origin", origin] : []], { encoding: "utf8", timeout: 18e4 });
+if (checked.status !== 0) throw new Error(`Production preflight rejected this site: ${`${checked.stdout || ""}
+${checked.stderr || ""}`.slice(-1600)}`);
+var report = JSON.parse(readFileSync(join(site, "agent/reviews/launch-preflight.json"), "utf8"));
+var evidence = JSON.parse(readFileSync(join(site, "agent/reviews/launch-evidence.json"), "utf8"));
+var artifact = artifactManifest(dist);
+if (!report.launchAllowed || !evidence.passed || !verifyReceipt(evidence).ok || evidence.policyHash !== LAUNCH_POLICY_ID || evidence.buildHash !== artifact.sha256 || report.buildHash !== artifact.sha256) throw new Error("Fresh preflight evidence does not bind the exact dist bytes");
+var files = Object.fromEntries(artifact.files.map((file) => [file.path, Buffer.from(readFileSync(join(dist, file.path))).toString("base64")]));
+var issuedAt = Date.now();
+var body = { schemaVersion: 1, tenantId, slug, project, knowledgeRelease: KNOWLEDGE_RELEASE, issuedAt, expiresAt: issuedAt + 10 * 6e4, artifact, evidence, files };
+var bundle = await signPublishBundle(body, secret);
+mkdirSync(dirname(output), { recursive: true });
+writeFileSync(output, JSON.stringify(bundle));
+console.log(`Signed ${artifact.files.length} verified files for ${slug}/${project}; expires ${new Date(bundle.expiresAt).toISOString()}`);