@userreason/wizard 0.3.0 → 0.3.2

package/dist/{chunk-77SK7TKZ.js → chunk-7AAH6C4L.js}

@@ -8,7 +8,7 @@ import {
 // node_modules/typescript/lib/typescript.js
 var require_typescript = __commonJS({
   "node_modules/typescript/lib/typescript.js"(exports, module) {
-    var ts2 = {};
+    var ts3 = {};
     ((module2) => {
       "use strict";
       var __defProp = Object.defineProperty;
@@ -2271,7 +2271,7 @@ var require_typescript = __commonJS({
         walkUpParenthesizedTypesAndGetParentAndChild: () => walkUpParenthesizedTypesAndGetParentAndChild,
         whitespaceOrMapCommentRegExp: () => whitespaceOrMapCommentRegExp,
         writeCommentRange: () => writeCommentRange,
-        writeFile: () => writeFile4,
+        writeFile: () => writeFile3,
         writeFileEnsuringDirectories: () => writeFileEnsuringDirectories,
         zipWith: () => zipWith
       });
@@ -20914,7 +20914,7 @@ ${lanes.join("\n")}
         sourceFilePath = isSourceFileInCommonSourceDirectory ? sourceFilePath.substring(commonSourceDirectory.length) : sourceFilePath;
         return combinePaths(newDirPath, sourceFilePath);
       }
-      function writeFile4(host, diagnostics, fileName, text2, writeByteOrderMark, sourceFiles, data) {
+      function writeFile3(host, diagnostics, fileName, text2, writeByteOrderMark, sourceFiles, data) {
         host.writeFile(
           fileName,
           text2,
@@ -33436,8 +33436,8 @@ ${lanes.join("\n")}
         return void 0;
       }
       function tryRenameExternalModule(factory2, moduleName, sourceFile3) {
-        const rename7 = sourceFile3.renamedDependencies && sourceFile3.renamedDependencies.get(moduleName.text);
-        return rename7 ? factory2.createStringLiteral(rename7) : void 0;
+        const rename6 = sourceFile3.renamedDependencies && sourceFile3.renamedDependencies.get(moduleName.text);
+        return rename6 ? factory2.createStringLiteral(rename6) : void 0;
       }
       function tryGetModuleNameFromFile(factory2, file, host, options) {
         if (!file) {
@@ -36865,8 +36865,8 @@ ${lanes.join("\n")}
         function isMissingList(arr) {
           return !!arr.isMissingList;
         }
-        function parseBracketedList(kind, parseElement, open10, close) {
-          if (parseExpected(open10)) {
+        function parseBracketedList(kind, parseElement, open9, close) {
+          if (parseExpected(open9)) {
             const result = parseDelimitedList(kind, parseElement);
             parseExpected(close);
             return result;
@@ -39301,7 +39301,7 @@ ${lanes.join("\n")}
           );
           return finishNode(factory2.createJsxSpreadAttribute(expression), pos);
         }
-        function parseJsxClosingElement(open10, inExpressionContext) {
+        function parseJsxClosingElement(open9, inExpressionContext) {
           const pos = getNodePos();
           parseExpected(
             31
@@ -39315,7 +39315,7 @@ ${lanes.join("\n")}
             /*shouldAdvance*/
             false
           )) {
-            if (inExpressionContext || !tagNamesAreEquivalent(open10.tagName, tagName)) {
+            if (inExpressionContext || !tagNamesAreEquivalent(open9.tagName, tagName)) {
               nextToken();
             } else {
               scanJsxText();
@@ -129665,7 +129665,7 @@ ${lanes.join("\n")}
             return;
           }
           const buildInfo = host.getBuildInfo() || { version };
-          writeFile4(
+          writeFile3(
             host,
             emitterDiagnostics,
             buildInfoPath,
@@ -129877,7 +129877,7 @@ ${lanes.join("\n")}
             }
             if (sourceMapFilePath) {
               const sourceMap = sourceMapGenerator.toString();
-              writeFile4(
+              writeFile3(
                 host,
                 emitterDiagnostics,
                 sourceMapFilePath,
@@ -129892,7 +129892,7 @@ ${lanes.join("\n")}
           }
           const text2 = writer.getText();
           const data = { sourceMapUrlPos, diagnostics: transform2.diagnostics };
-          writeFile4(host, emitterDiagnostics, jsFilePath, text2, !!compilerOptions.emitBOM, sourceFiles, data);
+          writeFile3(host, emitterDiagnostics, jsFilePath, text2, !!compilerOptions.emitBOM, sourceFiles, data);
           writer.clear();
           return !data.skippedDtsWrite;
         }
@@ -167558,19 +167558,19 @@ ${newComment.split("\n").map((c) => ` * ${c}`).join("\n")}
       }
       function convertNamedExport(sourceFile3, assignment, changes, exports2) {
         const { text: text2 } = assignment.left.name;
-        const rename7 = exports2.get(text2);
-        if (rename7 !== void 0) {
+        const rename6 = exports2.get(text2);
+        if (rename6 !== void 0) {
           const newNodes = [
             makeConst(
               /*modifiers*/
               void 0,
-              rename7,
+              rename6,
               assignment.right
             ),
             makeExportDeclaration([factory.createExportSpecifier(
               /*isTypeOnly*/
               false,
-              rename7,
+              rename6,
               text2
             )])
           ];
@@ -188111,18 +188111,18 @@ ${content}
             /* Code */
           );
         }
-        function spanForObjectOrArrayLiteral(node, open10 = 19) {
+        function spanForObjectOrArrayLiteral(node, open9 = 19) {
           return spanForNode(
             node,
             /*autoCollapse*/
             false,
             /*useFullStart*/
             !isArrayLiteralExpression(node.parent) && !isCallExpression(node.parent),
-            open10
+            open9
           );
         }
-        function spanForNode(hintSpanNode, autoCollapse = false, useFullStart = true, open10 = 19, close = open10 === 19 ? 20 : 24) {
-          const openToken = findChildOfKind(n, open10, sourceFile3);
+        function spanForNode(hintSpanNode, autoCollapse = false, useFullStart = true, open9 = 19, close = open9 === 19 ? 20 : 24) {
+          const openToken = findChildOfKind(n, open9, sourceFile3);
           const closeToken = findChildOfKind(n, close, sourceFile3);
           return openToken && closeToken && spanBetweenTokens(openToken, closeToken, hintSpanNode, sourceFile3, autoCollapse, useFullStart);
         }
@@ -190913,9 +190913,9 @@ ${options.prefix}` : "\n" : options.prefix
         return end;
       }
       function getClassOrObjectBraceEnds(cls, sourceFile3) {
-        const open10 = findChildOfKind(cls, 19, sourceFile3);
+        const open9 = findChildOfKind(cls, 19, sourceFile3);
         const close = findChildOfKind(cls, 20, sourceFile3);
-        return [open10 == null ? void 0 : open10.end, close == null ? void 0 : close.end];
+        return [open9 == null ? void 0 : open9.end, close == null ? void 0 : close.end];
       }
       function getMembersOrProperties(node) {
         return isObjectLiteralExpression(node) ? node.properties : node.members;
@@ -197774,7 +197774,7 @@ ${options.prefix}` : "\n" : options.prefix
         walkUpParenthesizedTypesAndGetParentAndChild: () => walkUpParenthesizedTypesAndGetParentAndChild,
         whitespaceOrMapCommentRegExp: () => whitespaceOrMapCommentRegExp,
         writeCommentRange: () => writeCommentRange,
-        writeFile: () => writeFile4,
+        writeFile: () => writeFile3,
         writeFileEnsuringDirectories: () => writeFileEnsuringDirectories,
         zipWith: () => zipWith
       });
@@ -210736,9 +210736,9 @@ Additional information: BADCLIENT: Bad error code, ${badCode} not found in range
         };
       }
     })({ get exports() {
-      return ts2;
+      return ts3;
     }, set exports(v) {
-      ts2 = v;
+      ts3 = v;
       if (typeof module !== "undefined" && module.exports) {
         module.exports = v;
       }
@@ -211799,8 +211799,8 @@ var productionProfile = {
   kind: "production",
   apiEnvironment: "production",
   docsUrl: PRODUCTION_DOCS,
-  sdkVersion: "0.5.0",
-  cliVersion: "0.2.0"
+  sdkVersion: "0.5.3",
+  cliVersion: "0.2.1"
 };
 function parsePackageProfile(value) {
   const data = object(value, "package profile");
@@ -211874,14 +211874,14 @@ async function discoverAuthConfig(url, development = false, fetcher = fetch) {
   if (!response.headers.get("content-type")?.toLowerCase().startsWith("application/json") || !response.body)
     throw new Error("Invalid UserReason authentication configuration response");
   const reader = response.body.getReader(), chunks = [];
-  let bytes = 0;
+  let bytes2 = 0;
   try {
     while (true) {
       const part = await reader.read();
       if (part.done)
         break;
-      bytes += part.value.byteLength;
-      if (bytes > 4096) {
+      bytes2 += part.value.byteLength;
+      if (bytes2 > 4096) {
         await reader.cancel();
         throw new Error("UserReason authentication configuration response is too large");
       }
@@ -211890,7 +211890,7 @@ async function discoverAuthConfig(url, development = false, fetcher = fetch) {
   } finally {
     reader.releaseLock();
   }
-  const buffer = new Uint8Array(bytes);
+  const buffer = new Uint8Array(bytes2);
   let offset = 0;
   for (const chunk of chunks) {
     buffer.set(chunk, offset);
@@ -212618,8 +212618,8 @@ function detectAgentHarness(env = process.env) {
 function createUiKit({ level, light = false, ascii = false, stream = process.stdout } = {}) {
   const lv = level ?? detectColorLevel({ stream });
   const rgb = light ? LIGHT : DARK, p256 = light ? LIGHT256 : DARK256, p16 = light ? LIGHT16 : DARK16;
-  const open10 = (role) => lv === 3 ? `${ESC}38;2;${rgb[role].join(";")}m` : lv === 2 ? `${ESC}38;5;${p256[role]}m` : `${ESC}${p16[role]}m`;
-  const paint = (role) => (text2) => lv === 0 ? String(text2) : `${open10(role)}${text2}${ESC}39m`;
+  const open9 = (role) => lv === 3 ? `${ESC}38;2;${rgb[role].join(";")}m` : lv === 2 ? `${ESC}38;5;${p256[role]}m` : `${ESC}${p16[role]}m`;
+  const paint = (role) => (text2) => lv === 0 ? String(text2) : `${open9(role)}${text2}${ESC}39m`;
   const c = {
     accent: paint("accent"),
     good: paint("good"),
@@ -212786,18 +212786,18 @@ async function telemetryEnabled() {
 function validRecord(value) {
   if (!value || typeof value !== "object" || Array.isArray(value))
     return false;
-  const record3 = value;
+  const record2 = value;
   const common = ["event_id", "occurred_at", "run_id", "surface", "release_version", "execution_mode", "workspace_id", "site_id", "source_site_environment"];
-  const allowed = record3.event === "ur.wizard.step" ? [...common, "event", "flow_version", "content_version", "step_id", "phase", "duration_ms", "reason", "selection_source", "framework", "package_manager", "resumed", "guidance_file"] : [...common, "event", "command", "success_count", "failure_count", "total_duration_ms", "max_duration_ms"];
-  if (Object.keys(record3).some((key) => !allowed.includes(key)) || !idPattern.test(record3.event_id) || !idPattern.test(record3.run_id) || !versionPattern.test(record3.release_version) || !["interactive", "agent", "ci", "noninteractive"].includes(record3.execution_mode))
+  const allowed = record2.event === "ur.wizard.step" ? [...common, "event", "flow_version", "content_version", "step_id", "phase", "duration_ms", "reason", "selection_source", "framework", "package_manager", "resumed", "guidance_file"] : [...common, "event", "command", "success_count", "failure_count", "total_duration_ms", "max_duration_ms"];
+  if (Object.keys(record2).some((key) => !allowed.includes(key)) || !idPattern.test(record2.event_id) || !idPattern.test(record2.run_id) || !versionPattern.test(record2.release_version) || !["interactive", "agent", "ci", "noninteractive"].includes(record2.execution_mode))
     return false;
-  if (!Number.isFinite(Date.parse(record3.occurred_at)) || Date.now() - Date.parse(record3.occurred_at) > ttl || Date.parse(record3.occurred_at) > Date.now() + 3e5)
+  if (!Number.isFinite(Date.parse(record2.occurred_at)) || Date.now() - Date.parse(record2.occurred_at) > ttl || Date.parse(record2.occurred_at) > Date.now() + 3e5)
     return false;
-  if (record3.workspace_id && !idPattern.test(record3.workspace_id) || record3.site_id && (!record3.workspace_id || !idPattern.test(record3.site_id)) || record3.source_site_environment && !["development", "production"].includes(record3.source_site_environment))
+  if (record2.workspace_id && !idPattern.test(record2.workspace_id) || record2.site_id && (!record2.workspace_id || !idPattern.test(record2.site_id)) || record2.source_site_environment && !["development", "production"].includes(record2.source_site_environment))
     return false;
-  if (record3.event === "ur.wizard.step")
-    return record3.surface === "wizard" && WIZARD_STEPS.includes(record3.step_id) && WIZARD_PHASES.includes(record3.phase) && versionPattern.test(record3.flow_version) && versionPattern.test(record3.content_version) && (record3.duration_ms === void 0 || number(record3.duration_ms)) && (record3.reason === void 0 || TELEMETRY_REASONS.includes(record3.reason)) && (record3.selection_source === void 0 || ["prompt", "flag", "default"].includes(record3.selection_source)) && (record3.framework === void 0 || ["react", "next", "vue", "vanilla"].includes(record3.framework)) && (record3.package_manager === void 0 || ["npm", "pnpm", "yarn"].includes(record3.package_manager)) && (record3.resumed === void 0 || typeof record3.resumed === "boolean") && (record3.guidance_file === void 0 || ["AGENTS.md", "CLAUDE.md"].includes(record3.guidance_file));
-  return record3.event === "ur.cli.usage" && record3.surface === "cli" && commands.has(record3.command) && Number.isSafeInteger(record3.success_count) && number(record3.success_count, 1e4) && Number.isSafeInteger(record3.failure_count) && number(record3.failure_count, 1e4) && record3.success_count + record3.failure_count > 0 && number(record3.total_duration_ms, 864e9) && number(record3.max_duration_ms) && record3.total_duration_ms >= record3.max_duration_ms;
+  if (record2.event === "ur.wizard.step")
+    return record2.surface === "wizard" && WIZARD_STEPS.includes(record2.step_id) && WIZARD_PHASES.includes(record2.phase) && versionPattern.test(record2.flow_version) && versionPattern.test(record2.content_version) && (record2.duration_ms === void 0 || number(record2.duration_ms)) && (record2.reason === void 0 || TELEMETRY_REASONS.includes(record2.reason)) && (record2.selection_source === void 0 || ["prompt", "flag", "default"].includes(record2.selection_source)) && (record2.framework === void 0 || ["react", "next", "vue", "vanilla"].includes(record2.framework)) && (record2.package_manager === void 0 || ["npm", "pnpm", "yarn"].includes(record2.package_manager)) && (record2.resumed === void 0 || typeof record2.resumed === "boolean") && (record2.guidance_file === void 0 || ["AGENTS.md", "CLAUDE.md"].includes(record2.guidance_file));
+  return record2.event === "ur.cli.usage" && record2.surface === "cli" && commands.has(record2.command) && Number.isSafeInteger(record2.success_count) && number(record2.success_count, 1e4) && Number.isSafeInteger(record2.failure_count) && number(record2.failure_count, 1e4) && record2.success_count + record2.failure_count > 0 && number(record2.total_duration_ms, 864e9) && number(record2.max_duration_ms) && record2.total_duration_ms >= record2.max_duration_ms;
 }
 var ToolTelemetry = class {
   options;
@@ -212861,18 +212861,18 @@ var ToolTelemetry = class {
   step(step_id, phase, details = {}) {
     if (!this.active || this.options.surface !== "wizard" || this.pending.length >= maximumRecords)
       return;
-    const record3 = { ...this.common(), ...this.wizardContext, ...details, event: "ur.wizard.step", flow_version: WIZARD_FLOW_VERSION, content_version: WIZARD_CONTENT_VERSION, step_id, phase };
-    if (record3.duration_ms !== void 0)
-      record3.duration_ms = duration(record3.duration_ms);
-    if (validRecord(record3))
-      this.pending.push({ scope: this.scope(), record: record3 });
+    const record2 = { ...this.common(), ...this.wizardContext, ...details, event: "ur.wizard.step", flow_version: WIZARD_FLOW_VERSION, content_version: WIZARD_CONTENT_VERSION, step_id, phase };
+    if (record2.duration_ms !== void 0)
+      record2.duration_ms = duration(record2.duration_ms);
+    if (validRecord(record2))
+      this.pending.push({ scope: this.scope(), record: record2 });
   }
   command(command2, success, durationMs) {
     if (!this.active || this.options.surface !== "cli")
       return;
-    const record3 = { ...this.common(), event: "ur.cli.usage", command: commands.has(command2) ? command2 : "unknown", success_count: success ? 1 : 0, failure_count: success ? 0 : 1, total_duration_ms: duration(durationMs), max_duration_ms: duration(durationMs) };
-    if (validRecord(record3))
-      this.pending.push({ scope: this.scope(), record: record3 });
+    const record2 = { ...this.common(), event: "ur.cli.usage", command: commands.has(command2) ? command2 : "unknown", success_count: success ? 1 : 0, failure_count: success ? 0 : 1, total_duration_ms: duration(durationMs), max_duration_ms: duration(durationMs) };
+    if (validRecord(record2))
+      this.pending.push({ scope: this.scope(), record: record2 });
   }
   /** Save a bounded checkpoint without introducing a network call into a wizard step. */
   checkpoint() {
@@ -212915,29 +212915,29 @@ ${scope2}`).digest("hex");
           } catch {
           }
           state.records = this.aggregate([...state.records, ...queued], new Set(state.frozen_ids)).slice(-maximumRecords);
-          state.frozen_ids = state.frozen_ids.filter((id) => state.records.some((record3) => record3.event_id === id));
+          state.frozen_ids = state.frozen_ids.filter((id) => state.records.some((record2) => record2.event_id === id));
           await atomicJson(path, state);
           this.pending = this.pending.filter((item) => item.scope !== scope2);
           if (!state.records.length || storeOnly || this.options.offline || !authorized || !force && Date.now() - state.last_attempt < (this.options.minimumIntervalMs ?? 6e4))
             continue;
           const records = [];
-          for (const record3 of state.records.slice(0, 50)) {
-            const candidate = { schema_version: 1, installation_id: state.installation_id, records: [...records, record3] };
+          for (const record2 of state.records.slice(0, 50)) {
+            const candidate = { schema_version: 1, installation_id: state.installation_id, records: [...records, record2] };
             if (Buffer.byteLength(JSON.stringify(candidate)) > 3e4)
               break;
-            records.push(record3);
+            records.push(record2);
           }
           if (!records.length)
             continue;
           state.last_attempt = Date.now();
-          state.frozen_ids = [.../* @__PURE__ */ new Set([...state.frozen_ids, ...records.map((record3) => record3.event_id)])];
+          state.frozen_ids = [.../* @__PURE__ */ new Set([...state.frozen_ids, ...records.map((record2) => record2.event_id)])];
           await atomicJson(path, state);
           const response = await this.fetcher(`${this.origin}/v1/telemetry/developer-tools`, { method: "POST", headers: { "Content-Type": "application/json", ...scope2 !== "anonymous" && this.session ? { Authorization: `Bearer ${this.session.accessToken}` } : {} }, redirect: "error", signal: AbortSignal.timeout(scope2 === "anonymous" ? 500 : 1500), body: JSON.stringify({ schema_version: 1, installation_id: state.installation_id, records }) });
           await response.body?.cancel().catch(() => {
           });
           if (response.ok) {
             state.records = state.records.slice(records.length);
-            state.frozen_ids = state.frozen_ids.filter((id) => state.records.some((record3) => record3.event_id === id));
+            state.frozen_ids = state.frozen_ids.filter((id) => state.records.some((record2) => record2.event_id === id));
             await atomicJson(path, state);
           }
         } catch {
@@ -212953,22 +212953,22 @@ ${scope2}`).digest("hex");
   }
   aggregate(records, frozen) {
     const result = [], aggregates = /* @__PURE__ */ new Map();
-    for (const record3 of records) {
-      if (record3.event !== "ur.cli.usage" || frozen.has(record3.event_id)) {
-        result.push(record3);
+    for (const record2 of records) {
+      if (record2.event !== "ur.cli.usage" || frozen.has(record2.event_id)) {
+        result.push(record2);
         continue;
       }
-      const key = JSON.stringify([record3.command, record3.release_version, record3.execution_mode, record3.workspace_id, record3.site_id, record3.source_site_environment]);
+      const key = JSON.stringify([record2.command, record2.release_version, record2.execution_mode, record2.workspace_id, record2.site_id, record2.source_site_environment]);
       const previous = aggregates.get(key);
-      if (!previous || previous.success_count + record3.success_count > 1e4 || previous.failure_count + record3.failure_count > 1e4 || previous.total_duration_ms + record3.total_duration_ms > 864e9) {
-        const next = { ...record3 };
+      if (!previous || previous.success_count + record2.success_count > 1e4 || previous.failure_count + record2.failure_count > 1e4 || previous.total_duration_ms + record2.total_duration_ms > 864e9) {
+        const next = { ...record2 };
         aggregates.set(key, next);
         result.push(next);
       } else {
-        previous.success_count += record3.success_count;
-        previous.failure_count += record3.failure_count;
-        previous.total_duration_ms += record3.total_duration_ms;
-        previous.max_duration_ms = Math.max(previous.max_duration_ms, record3.max_duration_ms);
+        previous.success_count += record2.success_count;
+        previous.failure_count += record2.failure_count;
+        previous.total_duration_ms += record2.total_duration_ms;
+        previous.max_duration_ms = Math.max(previous.max_duration_ms, record2.max_duration_ms);
       }
     }
     return result;
@@ -213024,6 +213024,235 @@ import { createHash as createHash4, randomUUID as randomUUID5 } from "node:crypt
 import { lstat as lstat2, realpath, readdir as readdir2, open as open4, readFile as readFile4 } from "node:fs/promises";
 import { isAbsolute, relative, resolve, sep } from "node:path";
 import { execFile } from "node:child_process";
+
+// node_modules/@userreason/cli/dist/recommendation-source.js
+var import_typescript = __toESM(require_typescript(), 1);
+import { posix } from "node:path";
+var bytes = (text2) => Buffer.byteLength(text2);
+var limits = { roots: 64, total: 164e3, file: 26e3, span: 16e3, workflow: 38e3, support: 8e3, shared: 5e3, excerpts: 200 };
+function analyze(file) {
+  const ast = import_typescript.default.createSourceFile(file.path, file.text, import_typescript.default.ScriptTarget.Latest, true, /\.[cm]?jsx?$/.test(file.path) ? import_typescript.default.ScriptKind.JSX : /\.tsx$/.test(file.path) ? import_typescript.default.ScriptKind.TSX : import_typescript.default.ScriptKind.TS);
+  const imports = [], tags = /* @__PURE__ */ new Set(), handlers = /* @__PURE__ */ new Set(), templates = [];
+  const walk = (node) => {
+    if (import_typescript.default.isImportDeclaration(node) && import_typescript.default.isStringLiteral(node.moduleSpecifier)) {
+      const names = [], bindings = node.importClause?.namedBindings;
+      if (node.importClause?.name)
+        names.push(node.importClause.name.text);
+      if (bindings && import_typescript.default.isNamedImports(bindings))
+        names.push(...bindings.elements.map((element) => element.name.text));
+      imports.push({ specifier: node.moduleSpecifier.text, names });
+    }
+    if (import_typescript.default.isExportDeclaration(node) && node.moduleSpecifier && import_typescript.default.isStringLiteral(node.moduleSpecifier))
+      imports.push({ specifier: node.moduleSpecifier.text, names: [] });
+    if (import_typescript.default.isJsxOpeningElement(node) || import_typescript.default.isJsxSelfClosingElement(node))
+      tags.add(node.tagName.getText(ast).split(".")[0]);
+    if (import_typescript.default.isJsxAttribute(node) && /^on[A-Z]/.test(node.name.getText(ast))) {
+      const ids = (child) => {
+        if (import_typescript.default.isIdentifier(child))
+          handlers.add(child.text);
+        import_typescript.default.forEachChild(child, ids);
+      };
+      import_typescript.default.forEachChild(node, ids);
+    }
+    if (import_typescript.default.isPropertyAssignment(node) && node.name.getText(ast) === "templateUrl" && import_typescript.default.isStringLiteral(node.initializer))
+      templates.push(node.initializer.text);
+    import_typescript.default.forEachChild(node, walk);
+  };
+  walk(ast);
+  if (/\.(?:vue|svelte|html)$/.test(file.path))
+    for (const match of file.text.matchAll(/(?:\([\w.:-]+\)|@[\w.:-]+)\s*=\s*["']([^"']+)["']/g))
+      for (const call of match[1].matchAll(/([A-Za-z_$][\w$]*)\s*\(/g))
+        handlers.add(call[1]);
+  return { ast, imports, rendered: new Set(imports.filter((item) => item.names.some((name) => tags.has(name))).map((item) => item.specifier)), handlers, templates };
+}
+function recommendationSourceWindows(file, requiredHandlers = []) {
+  const lines = file.text.split("\n");
+  const make = (start, end) => ({ path: file.path, start, end, text: lines.slice(start - 1, end).join("\n") });
+  if (bytes(file.text) <= limits.file)
+    return [make(1, lines.length)];
+  if (!/\.[cm]?[jt]sx?$/.test(file.path))
+    return [];
+  const a = analyze(file), units = [];
+  for (const handler of requiredHandlers)
+    a.handlers.add(handler);
+  const add = (node, priority) => units.push({ start: a.ast.getLineAndCharacterOfPosition(node.getStart(a.ast)).line + 1, end: a.ast.getLineAndCharacterOfPosition(node.end).line + 1, priority });
+  const inspect = (node) => {
+    if (import_typescript.default.isImportDeclaration(node) || import_typescript.default.isExportDeclaration(node)) {
+      add(node, 2);
+      return;
+    }
+    if ((import_typescript.default.isFunctionDeclaration(node) || import_typescript.default.isArrowFunction(node) || import_typescript.default.isFunctionExpression(node)) && node.body && import_typescript.default.isBlock(node.body)) {
+      for (const statement of node.body.statements) {
+        const raw = statement.getText(a.ast);
+        const names = import_typescript.default.isVariableStatement(statement) ? statement.declarationList.declarations.map((declaration) => declaration.name.getText(a.ast)) : import_typescript.default.isFunctionDeclaration(statement) && statement.name ? [statement.name.text] : [];
+        add(statement, /return\s*\(?\s*</.test(raw) || /useEffect|useState|useCallback|useMemo/.test(raw) || names.some((name) => a.handlers.has(name)) ? 0 : 1);
+      }
+      return;
+    }
+    if (import_typescript.default.isClassDeclaration(node)) {
+      for (const member of node.members)
+        add(member, member.name && a.handlers.has(member.name.getText(a.ast)) ? 0 : 1);
+      return;
+    }
+    if (import_typescript.default.isVariableStatement(node)) {
+      let expanded = false;
+      for (const declaration of node.declarationList.declarations)
+        if (declaration.initializer && (import_typescript.default.isArrowFunction(declaration.initializer) || import_typescript.default.isFunctionExpression(declaration.initializer))) {
+          inspect(declaration.initializer);
+          expanded = true;
+        }
+      if (!expanded)
+        add(node, 2);
+      return;
+    }
+    add(node, 2);
+  };
+  for (const node of a.ast.statements)
+    inspect(node);
+  const selected = [];
+  let retained = 0;
+  for (const unit of units.sort((a2, b) => a2.priority - b.priority || a2.start - b.start)) {
+    if (selected.some((window2) => window2.start <= unit.start && window2.end >= unit.end))
+      continue;
+    const window = make(unit.start, unit.end), length = bytes(window.text);
+    if (length > limits.span || retained + length > limits.file)
+      continue;
+    selected.push(window);
+    retained += length;
+  }
+  return selected.sort((a2, b) => a2.start - b.start);
+}
+var shell = (path) => /^(?:app|main|router|routes|layout)\.[cm]?[jt]sx?$/i.test(posix.basename(path)) || /\/app\.component\.(?:ts|html)$/.test(path);
+var rank = (path) => /\/(?:routes|pages|screens|views)\//.test("/" + path) ? 0 : /\.component\.html$/.test(path) ? 1 : 2;
+var family = (path) => {
+  const parts = path.split("/"), index = parts.findIndex((part) => ["routes", "pages", "screens", "views"].includes(part));
+  return index >= 0 ? parts.slice(0, index + 2).join("/") : posix.dirname(path);
+};
+function connectedRecommendationSource(candidates, maxPacketBytes = 262144) {
+  const files2 = new Map(candidates.map((file) => [file.path, file])), analyses = /* @__PURE__ */ new Map();
+  const record2 = (path) => {
+    if (!analyses.has(path))
+      analyses.set(path, analyze(files2.get(path)));
+    return analyses.get(path);
+  };
+  const resolve3 = (from, specifier) => {
+    const base = specifier.startsWith(".") ? posix.normalize(posix.join(posix.dirname(from), specifier)) : specifier.startsWith("@/") ? `src/${specifier.slice(2)}` : "";
+    if (!base)
+      return void 0;
+    return [base, ...[".tsx", ".ts", ".jsx", ".js", ".vue", ".svelte", ".html", "/index.tsx", "/index.ts", "/index.jsx", "/index.js"].map((ext) => base + ext)].find((path) => files2.has(path));
+  };
+  const references = (path) => {
+    const a = record2(path);
+    return [
+      ...a.imports.flatMap((item) => {
+        const target = resolve3(path, item.specifier);
+        return target ? [{ target, rendered: a.rendered.has(item.specifier), template: false }] : [];
+      }),
+      ...a.templates.flatMap((template) => {
+        const target = resolve3(path, template);
+        return target ? [{ target, rendered: true, template: true }] : [];
+      }),
+      .../\.component\.html$/.test(path) && files2.has(path.replace(/\.html$/, ".ts")) ? [{ target: path.replace(/\.html$/, ".ts"), rendered: true, template: true }] : []
+    ].sort((a2, b) => Number(b.rendered) - Number(a2.rendered) || a2.target.localeCompare(b.target));
+  };
+  const buckets = /* @__PURE__ */ new Map();
+  for (const file of candidates.filter((file2) => rank(file2.path) < 2 && !shell(file2.path))) {
+    const key = family(file.path);
+    buckets.set(key, [...buckets.get(key) ?? [], file]);
+  }
+  for (const bucket of buckets.values())
+    bucket.sort((a, b) => a.path.split("/").length - b.path.split("/").length || a.path.localeCompare(b.path));
+  const queues = [...buckets].sort((a, b) => a[0].localeCompare(b[0])), seeds = [];
+  for (let i = 0; seeds.length < Math.min(limits.roots, [...buckets.values()].reduce((n, values) => n + values.length, 0)); i++)
+    for (const [, bucket] of queues)
+      if (bucket[i] && seeds.length < limits.roots)
+        seeds.push(bucket[i].path);
+  if (!seeds.length)
+    seeds.push(...candidates.filter((file) => shell(file.path)).map((file) => file.path).slice(0, limits.roots));
+  if (!seeds.length)
+    seeds.push(...candidates.filter((file) => /\.(?:[cm]?[jt]sx?|vue|svelte|html)$/.test(file.path)).map((file) => file.path).slice(0, limits.roots));
+  const rootSet = new Set(seeds), owner = new Map(seeds.map((path) => [path, path]));
+  const find = (path) => {
+    const seen2 = /* @__PURE__ */ new Set();
+    while (owner.get(path) !== path && !seen2.has(path)) {
+      seen2.add(path);
+      path = owner.get(path);
+    }
+    return path;
+  };
+  for (const seed of seeds)
+    for (const edge of references(seed))
+      if (edge.rendered && rootSet.has(edge.target) && find(seed) !== find(edge.target))
+        owner.set(find(edge.target), find(seed));
+  const groups = /* @__PURE__ */ new Map();
+  for (const seed of seeds) {
+    const key = find(seed);
+    groups.set(key, [...groups.get(key) ?? [], seed]);
+  }
+  const workflows = [];
+  for (const roots of groups.values()) {
+    const windows = [], seen2 = /* @__PURE__ */ new Set(), queue = roots.map((path) => ({ path, depth: 0 }));
+    let retained2 = 0, support = 0;
+    const append2 = (path, supporting, handlers = []) => {
+      for (const window of recommendationSourceWindows(files2.get(path), handlers)) {
+        const key = `${path}:${window.start}:${window.end}`, length = bytes(window.text);
+        if (seen2.has(key) || retained2 + length > limits.workflow || supporting && support + length > limits.support)
+          continue;
+        seen2.add(key);
+        windows.push(window);
+        retained2 += length;
+        if (supporting)
+          support += length;
+      }
+    };
+    for (const root of roots)
+      append2(root, false);
+    const visited = /* @__PURE__ */ new Set();
+    while (queue.length) {
+      const item = queue.shift();
+      if (visited.has(item.path) || item.depth > 2)
+        continue;
+      visited.add(item.path);
+      for (const edge of references(item.path).slice(0, 12)) {
+        if (rootSet.has(edge.target) && !roots.includes(edge.target))
+          continue;
+        append2(edge.target, !roots.includes(edge.target), edge.template ? [...record2(item.path).handlers] : []);
+        if (edge.rendered || edge.template)
+          queue.push({ path: edge.target, depth: item.depth + 1 });
+      }
+    }
+    if (windows.length)
+      workflows.push(windows);
+  }
+  const selected = [], seen = /* @__PURE__ */ new Set();
+  let retained = 0, wireBytes = 512;
+  const append = (window) => {
+    const key = `${window.path}:${window.start}:${window.end}`, length = bytes(window.text);
+    if (seen.has(key) || selected.length >= limits.excerpts || retained + length > limits.total)
+      return;
+    const encoded = bytes(JSON.stringify({ kind: "local_source", id: `source_${selected.length + 1}`, path: window.path, file_hash: "0".repeat(64), excerpt_hash: "0".repeat(64), snapshot_id: "00000000-0000-4000-8000-000000000000", start_line: window.start, end_line: window.end, excerpt: window.text })) + 1;
+    if (wireBytes + encoded > maxPacketBytes)
+      return;
+    seen.add(key);
+    selected.push(window);
+    retained += length;
+    wireBytes += encoded;
+  };
+  let shared = 0;
+  for (const file of candidates.filter((file2) => shell(file2.path)).slice(0, 8))
+    for (const window of recommendationSourceWindows(file))
+      if (shared + bytes(window.text) <= limits.shared) {
+        append(window);
+        shared += bytes(window.text);
+      }
+  for (let i = 0; i < Math.max(0, ...workflows.map((windows) => windows.length)); i++)
+    for (const windows of workflows)
+      if (windows[i])
+        append(windows[i]);
+  return selected;
+}
+
+// node_modules/@userreason/cli/dist/first-survey-source.js
 var sourceHash = (value) => createHash4("sha256").update(value).digest("hex");
 var forbidden = /(^|\/)(?:\.git|\.env(?:\..*)?|node_modules|vendor|dist|build|coverage|\.next|\.nuxt|\.cache|\.output|public|uploads?|datasets?|fixtures?|__fixtures__|backups?|credentials?|secrets?)(\/|$)|(?:\.min\.[cm]?js|\.map|\.lock|\.(?:pem|key|p12|pfx|sqlite|db|csv|parquet|log|snap))$|(^|\/)(?:package-lock\.json|yarn\.lock|pnpm-lock\.yaml|\.npmrc|\.netrc|id_rsa|id_ed25519)$/i;
 var sourceFile = /(?:\.(?:[cm]?[jt]sx?|vue|svelte|json|md))$/i;
@@ -213044,12 +213273,12 @@ async function collectFirstSurveySource(input) {
   const root = await realpath(input.root);
   if (root !== input.root || !(await lstat2(root)).isDirectory())
     throw new Error("Application root must be a canonical directory, not a symlink");
-  const maxFiles = safeLimits(input.maxFiles, 200, 200);
-  const maxBytes = safeLimits(input.maxBytes, input.recommendations ? 2 * 1024 * 1024 : 500 * 1024, input.recommendations ? 2 * 1024 * 1024 : 500 * 1024);
-  const maxPacketBytes = safeLimits(input.maxPacketBytes, 1e4, 1e4);
+  const maxFiles = safeLimits(input.maxFiles, input.benchmark ? 1200 : 200, input.benchmark ? 1200 : 200);
+  const maxBytes = safeLimits(input.maxBytes, input.benchmark ? 12 * 1024 * 1024 : input.recommendations ? 2 * 1024 * 1024 : 500 * 1024, input.benchmark ? 12 * 1024 * 1024 : input.recommendations ? 2 * 1024 * 1024 : 500 * 1024);
+  const maxPacketBytes = safeLimits(input.maxPacketBytes, input.benchmark ? 262144 : 1e4, input.benchmark ? 262144 : 1e4);
   const snapshot_id = input.snapshotId ?? randomUUID5();
   const omitted = [], evidence = [];
-  let inspected = 0, bytes = 0, packetBytes = 0, truncated = false, entries = 0;
+  let inspected = 0, bytes2 = 0, packetBytes = 0, truncated = false, entries = 0;
   const candidates = [];
   const rootIgnore = (0, import_ignore.default)();
   for (const name of [".gitignore", ".ignore", ".userreasonignore"]) {
@@ -213071,7 +213300,7 @@ async function collectFirstSurveySource(input) {
   const check = () => input.signal?.throwIfAborted();
   async function walk(directory2, inherited) {
     check();
-    if (entries >= 2e3 || inspected >= maxFiles || bytes >= maxBytes) {
+    if (entries >= (input.benchmark ? 2e4 : 2e3) || inspected >= maxFiles || bytes2 >= maxBytes) {
       truncated = true;
       return;
     }
@@ -213087,18 +213316,20 @@ async function collectFirstSurveySource(input) {
       }
     }
     const names = (await readdir2(directory2)).sort((a, b) => {
-      const rank = (s) => /^(package\.json|README\.md)$/.test(s) ? 0 : /init|route|page|screen|state|event|app|main/i.test(s) ? 1 : 2;
-      return rank(a) - rank(b) || a.localeCompare(b);
+      const rank2 = (s) => /^(package\.json|README\.md)$/.test(s) ? 0 : /init|route|page|screen|state|event|app|main/i.test(s) ? 1 : 2;
+      return rank2(a) - rank2(b) || a.localeCompare(b);
     });
     for (const name of names) {
       check();
-      if (++entries > 2e3 || inspected >= maxFiles || bytes >= maxBytes) {
+      if (++entries > (input.benchmark ? 2e4 : 2e3) || inspected >= maxFiles || bytes2 >= maxBytes) {
         truncated = true;
         break;
       }
       const absolute = resolve(directory2, name), path = relative(root, absolute).split(sep).join("/");
       if (forbidden.test(path))
         continue;
+      if (input.benchmark && /(?:^|\/)(?:scripts|tools|test|tests|__tests__|e2e|docs|examples|storybook|\.storybook)(?:\/|$)/i.test(path))
+        continue;
       if (input.recommendations && /^(?:\.agents|\.cursor|\.codex)(?:\/|$)/.test(path))
         continue;
       const stat = await lstat2(absolute);
@@ -213124,13 +213355,13 @@ async function collectFirstSurveySource(input) {
         continue;
       inspected++;
       const fileBudget = input.recommendations ? 256e3 : 32768;
-      if (stat.size > fileBudget || stat.size + bytes > maxBytes) {
+      if (stat.size > fileBudget || stat.size + bytes2 > maxBytes) {
         omitted.push({ path, reason: "size budget" });
         truncated = true;
         continue;
       }
-      const { constants: constants6 } = await import("node:fs");
-      const handle = await open4(absolute, constants6.O_RDONLY | constants6.O_NOFOLLOW);
+      const { constants: constants5 } = await import("node:fs");
+      const handle = await open4(absolute, constants5.O_RDONLY | constants5.O_NOFOLLOW);
       let data;
       try {
         const opened = await handle.stat();
@@ -213144,7 +213375,7 @@ async function collectFirstSurveySource(input) {
       } finally {
         await handle.close();
       }
-      bytes += data.length;
+      bytes2 += data.length;
       let text2;
       try {
         text2 = new TextDecoder("utf-8", { fatal: true }).decode(data);
@@ -213183,10 +213414,15 @@ async function collectFirstSurveySource(input) {
     }
   }
   await walk(root, [{ base: root, rules: rootIgnore }]);
-  if (input.recommendations) {
-    const rank = (p) => /\/(?:pages|screens|views)\//i.test("/" + p) ? 0 : /\/(?:app|routes?)\.[^.]+$/i.test(p) ? 1 : /components\//.test(p) ? 2 : 3;
+  if (input.benchmark) {
+    for (const file of connectedRecommendationSource(candidates, maxPacketBytes)) {
+      evidence.push({ kind: "local_source", id: `source_${evidence.length + 1}`, path: file.path, file_hash: sourceHash(candidates.find((c) => c.path === file.path).text), excerpt_hash: sourceHash(file.text), snapshot_id, start_line: file.start, end_line: file.end, excerpt: file.text });
+    }
+    truncated = candidates.length > evidence.length || evidence.some((e) => e.start_line !== 1 || e.excerpt !== candidates.find((c) => c.path === e.path)?.text);
+  } else if (input.recommendations) {
+    const rank2 = (p) => /\/(?:pages|screens|views)\//i.test("/" + p) ? 0 : /\/(?:app|routes?)\.[^.]+$/i.test(p) ? 1 : /components\//.test(p) ? 2 : 3;
     const interactions = (f) => (f.text.match(/onClick|onSubmit|onChange|const handle[A-Z]|function handle[A-Z]/g) ?? []).length;
-    candidates.sort((a, b) => rank(a.path) - rank(b.path) || a.path.split("/").length - b.path.split("/").length || interactions(b) - interactions(a) || a.path.localeCompare(b.path));
+    candidates.sort((a, b) => rank2(a.path) - rank2(b.path) || a.path.split("/").length - b.path.split("/").length || interactions(b) - interactions(a) || a.path.localeCompare(b.path));
     const areas = /* @__PURE__ */ new Map();
     for (const file of candidates) {
       const key = file.path.split("/").slice(0, -1).join("/");
@@ -213389,7 +213625,7 @@ async function firstSurvey(client, root, workspace2, site2, ui, mode = "start")
       state = { ...state, id: randomUUID6(), state: "source_review", plan: void 0, digest: void 0, saves: {} };
     }
     const metadata = object(await client.request("/onboarding/v1/planning/describe", lookup()), "planning destination");
-    const limits = { input_tokens: 12e3, output_tokens: 4e3, deadline_ms: 35e3 };
+    const limits2 = { input_tokens: 12e3, output_tokens: 4e3, deadline_ms: 35e3 };
     if (!state.plan) {
       if (state.state === "analyzing") {
         const existing = object(await client.request("/onboarding/v1/planning/get", lookup()), "plan");
@@ -213405,7 +213641,7 @@ async function firstSurvey(client, root, workspace2, site2, ui, mode = "start")
         ui.show("Only the chosen application root is inspected. No sibling packages are included. Secret detection is best effort; review every excerpt.");
         const selection = await ui.answer("Relative files/directories to include, comma separated (blank: bounded application root; no siblings)");
         const preview = await collectFirstSurveySource({ root, signal: ui.signal, selected: selection.trim() ? selection.split(",").map((p) => p.trim()) : void 0 });
-        ui.show(JSON.stringify({ root, packages: preview.packages, installed_sdk: preview.packages.length ? "metadata found, runtime unverified" : "unknown: verify using installed skill", manifest: preview.evidence.map(({ excerpt, ...rest }) => rest), omitted: preview.omitted, truncated: preview.truncated, destination: metadata.destination, provider_model: metadata.model, provider_prices: metadata.prices, provider_policy: metadata.policy, configuration_fingerprint: metadata.configuration_fingerprint, retention: "Receipt and private plan: seven days, deleted on next planning activity; submitted source packets are not stored by UserReason; generated plans can quote source. Provider policy must be reviewed separately.", budget: `${limits.input_tokens} input / ${limits.output_tokens} completion tokens (including reasoning); ${limits.deadline_ms / 1e3} seconds`, capabilities: preview.capabilities, capability_status: preview.capability_status }));
+        ui.show(JSON.stringify({ root, packages: preview.packages, installed_sdk: preview.packages.length ? "metadata found, runtime unverified" : "unknown: verify using installed skill", manifest: preview.evidence.map(({ excerpt, ...rest }) => rest), omitted: preview.omitted, truncated: preview.truncated, destination: metadata.destination, provider_model: metadata.model, provider_prices: metadata.prices, provider_policy: metadata.policy, configuration_fingerprint: metadata.configuration_fingerprint, retention: "Receipt and private plan: seven days, deleted on next planning activity; submitted source packets are not stored by UserReason; generated plans can quote source. Provider policy must be reviewed separately.", budget: `${limits2.input_tokens} input / ${limits2.output_tokens} completion tokens (including reasoning); ${limits2.deadline_ms / 1e3} seconds`, capabilities: preview.capabilities, capability_status: preview.capability_status }));
         ui.show(JSON.stringify(preview.evidence));
         if (!await ui.confirm("Approve uploading exactly this source packet to the displayed provider?")) {
           ui.show("Manual path: use prompt validate with your own evidence-labelled definition, then explicitly approve prompt create. No source processing is required.");
@@ -213428,7 +213664,7 @@ async function firstSurvey(client, root, workspace2, site2, ui, mode = "start")
           check();
           state.state = "analyzing";
           await save();
-          const response = object(await client.request("/onboarding/v1/planning/analyze", { schema_version: 1, session_id: state.id, request_id: randomUUID6(), scope: lookup().scope, packages: preview.packages, capabilities: preview.capabilities, evidence, previous_plan_digest: state.digest ?? null, limits, consent: { packet_digest: sourceHash(JSON.stringify(evidence)), destination: metadata.destination, policy_version: "first-survey-v1", configuration_fingerprint: metadata.configuration_fingerprint, authorized_at: (/* @__PURE__ */ new Date()).toISOString(), git_authorized: git } }, ui.signal), "analysis");
+          const response = object(await client.request("/onboarding/v1/planning/analyze", { schema_version: 1, session_id: state.id, request_id: randomUUID6(), scope: lookup().scope, packages: preview.packages, capabilities: preview.capabilities, evidence, previous_plan_digest: state.digest ?? null, limits: limits2, consent: { packet_digest: sourceHash(JSON.stringify(evidence)), destination: metadata.destination, policy_version: "first-survey-v1", configuration_fingerprint: metadata.configuration_fingerprint, authorized_at: (/* @__PURE__ */ new Date()).toISOString(), git_authorized: git } }, ui.signal), "analysis");
           check();
           state.plan = response.result;
           state.digest = sourceHash(JSON.stringify(state.plan));
@@ -213512,227 +213748,11 @@ async function firstSurvey(client, root, workspace2, site2, ui, mode = "start")
   }
 }
 
-// node_modules/@userreason/cli/dist/first-survey-preparation.js
-function prepareFirstSurveyLocally(root) {
-  const controller = new AbortController();
-  const prepared = collectFirstSurveySource({ root, signal: controller.signal, recommendations: true }).then((preview) => ({ preview }), () => ({ preview: void 0 }));
-  return {
-    root,
-    async take(signal) {
-      signal?.throwIfAborted();
-      const cached = await prepared;
-      signal?.throwIfAborted();
-      if (cached.preview) {
-        try {
-          await verifyFirstSurveySource(root, cached.preview.evidence);
-          return cached.preview;
-        } catch {
-          signal?.throwIfAborted();
-        }
-      }
-      return collectFirstSurveySource({ root, signal, recommendations: true });
-    },
-    cancel() {
-      controller.abort();
-    }
-  };
-}
-
-// node_modules/@userreason/cli/dist/recommended-surveys.js
-import { randomUUID as randomUUID7 } from "node:crypto";
+// node_modules/@userreason/cli/dist/setup-store.js
+import { createHash as createHash5, randomUUID as randomUUID7 } from "node:crypto";
 import { constants as constants2 } from "node:fs";
-import { mkdir as mkdir6, open as open6, rename as rename4, unlink as unlink3, writeFile as writeFile3 } from "node:fs/promises";
+import { lstat as lstat4, mkdir as mkdir6, open as open6, opendir, readFile as readFile6, realpath as realpath2, rename as rename4, rm as rm3 } from "node:fs/promises";
 import { join as join6 } from "node:path";
-var record2 = (v) => v && typeof v === "object" && !Array.isArray(v) ? v : {};
-async function recommendedSurveys(client, root, workspace2, site2, ui, options = {}) {
-  if (!options.sourceConsent)
-    return { state: "skipped" };
-  if (!ui.chooseMany)
-    throw Error("Survey selection requires a checkbox interface");
-  const scope2 = {
-    api: client.config.apiUrl,
-    workspace_id: workspace2,
-    site_id: site2
-  };
-  const scopeKey = sourceHash(JSON.stringify([root, scope2]));
-  const dir = join6(configDirectory(), "recommended-surveys");
-  await mkdir6(dir, { recursive: true, mode: 448 });
-  const path = join6(dir, scopeKey + ".json");
-  const lock = await open6(path + ".lock", "wx", 384);
-  const preparation = options.preparation ?? prepareFirstSurveyLocally(root);
-  let state = {
-    version: 1,
-    scope: scopeKey,
-    expires: Date.now() + 7 * 864e5,
-    candidates: [],
-    sources: [],
-    receipts: {}
-  };
-  const save = async () => {
-    const tmp = path + "." + randomUUID7() + ".tmp";
-    await writeFile3(tmp, JSON.stringify(state), { flag: "wx", mode: 384 });
-    await rename4(tmp, path);
-  };
-  const check = () => ui.signal?.throwIfAborted();
-  try {
-    try {
-      const file = await open6(path, constants2.O_RDONLY | constants2.O_NOFOLLOW);
-      try {
-        if ((await file.stat()).size > 128e3)
-          throw Error("Invalid recommendation cache");
-        const old = JSON.parse(await file.readFile("utf8"));
-        if (old.version !== 1 || old.scope !== scopeKey)
-          throw Error("Recommendation scope changed");
-        if (old.expires > Date.now())
-          state = old;
-      } finally {
-        await file.close();
-      }
-    } catch (e) {
-      if (e.code !== "ENOENT")
-        throw e;
-    }
-    check();
-    if (!state.selected) {
-      if (state.candidates.length) {
-        try {
-          await verifyFirstSurveySource(root, state.sources);
-        } catch {
-          state.candidates = [];
-          state.sources = [];
-        }
-      }
-      if (!state.candidates.length) {
-        const generate = async () => {
-          const preview = await preparation.take(ui.signal);
-          if (!preview.evidence.length)
-            throw Error("No product source available");
-          const metadata = record2(await client.request("/onboarding/v1/planning/describe", { schema_version: 1, session_id: randomUUID7(), scope: scope2 }, ui.signal));
-          if (!record2(metadata.recommendations).version)
-            throw Error("Development recommendation pipeline is unavailable");
-          await verifyFirstSurveySource(root, preview.evidence);
-          const response = record2(await client.request("/onboarding/v1/planning/analyze", {
-            schema_version: 1,
-            session_id: randomUUID7(),
-            request_id: randomUUID7(),
-            scope: scope2,
-            packages: preview.packages,
-            capabilities: [
-              ...preview.capabilities,
-              "recommended_surveys:v1"
-            ],
-            evidence: preview.evidence,
-            previous_plan_digest: null,
-            limits: {
-              input_tokens: 12e3,
-              output_tokens: 4e3,
-              deadline_ms: 4e4
-            },
-            consent: {
-              packet_digest: sourceHash(JSON.stringify(preview.evidence)),
-              destination: metadata.destination,
-              configuration_fingerprint: metadata.configuration_fingerprint,
-              policy_version: "first-survey-v1",
-              authorized_at: (/* @__PURE__ */ new Date()).toISOString(),
-              git_authorized: false
-            }
-          }, ui.signal));
-          await verifyFirstSurveySource(root, preview.evidence);
-          const candidates = record2(response.result).candidates;
-          if (!Array.isArray(candidates))
-            throw Error("Invalid recommendations");
-          state.candidates = candidates.slice(0, 3);
-          state.sources = preview.evidence.map(({ path: path2, file_hash }) => ({
-            path: path2,
-            file_hash
-          }));
-          await save();
-        };
-        try {
-          if (ui.loading)
-            await ui.loading("Finding recommended surveys", generate);
-          else
-            await generate();
-        } catch (error) {
-          check();
-          ui.show("Recommendations are unavailable right now. Setup is complete; rerun the wizard to try again.");
-          return {
-            state: "unavailable",
-            error: error instanceof Error ? error.message : "unavailable"
-          };
-        }
-      }
-      if (!state.candidates.length) {
-        ui.show("No supported survey recommendations yet. Setup is complete.");
-        return { state: "empty" };
-      }
-      ui.show("Select surveys to get started. We\u2019ll create drafts in your workspace. Nothing will be published.");
-      const selected = await ui.chooseMany("Recommended surveys", state.candidates.map((c) => ({
-        value: c.id,
-        label: `${String(c.definition.name)} \u2014 ${c.question}`,
-        hint: `${c.opportunity.claim} Delivery can be configured later.`
-      })), []);
-      check();
-      if (!selected.length)
-        return { state: "skipped" };
-      if (new Set(selected).size !== selected.length || selected.some((id) => !state.candidates.some((c) => c.id === id)))
-        throw Error("Invalid survey selection");
-      await verifyFirstSurveySource(root, state.sources);
-      for (const id of selected) {
-        const c = state.candidates.find((c2) => c2.id === id);
-        const validation = record2(await client.read("prompts.validate", {
-          workspaceId: workspace2,
-          siteId: site2,
-          definition: c.definition
-        }));
-        if (validation.valid !== true)
-          throw Error("A recommended draft did not validate");
-      }
-      state.selected = selected;
-      for (const id of selected)
-        state.receipts[id] = {
-          prompt: randomUUID7(),
-          request: randomUUID7(),
-          definition: state.candidates.find((c) => c.id === id).definition
-        };
-      await save();
-    }
-    let count = 0;
-    for (const id of state.selected) {
-      check();
-      const receipt = state.receipts[id];
-      if (!receipt)
-        throw Error("Missing draft receipt");
-      if (!receipt.result) {
-        receipt.result = await client.promptCommand({
-          workspaceId: workspace2,
-          siteId: site2,
-          action: "create",
-          promptId: receipt.prompt,
-          requestId: receipt.request,
-          definition: receipt.definition
-        });
-        await save();
-      }
-      const saved = record2(receipt.result), link = record2(saved.links).edit;
-      ui.show(`Draft saved: ${String(receipt.definition.name)}${typeof link === "string" ? `
-${link}` : ""}`);
-      count++;
-    }
-    ui.show(`${count} survey draft${count === 1 ? "" : "s"} saved. Nothing was published.`);
-    return { state: "saved", count, receipts: state.receipts };
-  } finally {
-    preparation.cancel();
-    await lock.close();
-    await unlink3(path + ".lock");
-  }
-}
-
-// node_modules/@userreason/cli/dist/setup-store.js
-import { createHash as createHash5, randomUUID as randomUUID8 } from "node:crypto";
-import { constants as constants3 } from "node:fs";
-import { lstat as lstat4, mkdir as mkdir7, open as open7, opendir, readFile as readFile6, realpath as realpath2, rename as rename5, rm as rm3 } from "node:fs/promises";
-import { join as join7 } from "node:path";
 var SetupError = class extends Error {
   code;
   constructor(code, message) {
@@ -213755,7 +213775,7 @@ function parseStoredSetup(value) {
 function storePath(origin2, setupId) {
   const key = createHash5("sha256").update(`${apiUrl(origin2)}
 ${uuid(setupId)}`).digest("hex");
-  return join7(configDirectory(), "setup-v1", `${key}.json`);
+  return join6(configDirectory(), "setup-v1", `${key}.json`);
 }
 var retentionMs = 7 * 24 * 60 * 60 * 1e3;
 var pruneBatch = 128;
@@ -213763,7 +213783,7 @@ async function readSetupRecord(path) {
   const before = await lstat4(path);
   if (!before.isFile() || before.isSymbolicLink() || before.size > 65536)
     throw new Error("invalid setup file");
-  const file = await open7(path, constants3.O_RDONLY | (constants3.O_NOFOLLOW ?? 0));
+  const file = await open6(path, constants2.O_RDONLY | (constants2.O_NOFOLLOW ?? 0));
   try {
     const info = await file.stat();
     if (!info.isFile() || info.ino !== before.ino || info.dev !== before.dev || info.size > 65536)
@@ -213799,7 +213819,7 @@ async function pruneSetupSessions(now = Date.now()) {
     return { scanned: 0, removed: 0 };
   let directory2;
   try {
-    const path = join7(configDirectory(), "setup-v1"), info = await lstat4(path);
+    const path = join6(configDirectory(), "setup-v1"), info = await lstat4(path);
     if (!info.isDirectory() || info.isSymbolicLink())
       return { scanned: 0, removed: 0 };
     directory2 = await opendir(path);
@@ -213815,7 +213835,7 @@ async function pruneSetupSessions(now = Date.now()) {
       }
       if (!entry.isFile() || !/^[a-f0-9]{64}\.json$/.test(entry.name))
         continue;
-      const path = join7(configDirectory(), "setup-v1", entry.name);
+      const path = join6(configDirectory(), "setup-v1", entry.name);
       try {
         const { data, info } = await readSetupRecord(path);
         if (storePath(data.api_url, data.setup_id) !== path || Date.parse(data.created_at) > now - retentionMs)
@@ -213831,22 +213851,22 @@ async function pruneSetupSessions(now = Date.now()) {
 }
 async function saveSetupSession(value) {
   const data = parseStoredSetup(value), path = storePath(data.api_url, data.setup_id);
-  const temporary = `${path}.${randomUUID8()}.tmp`;
+  const temporary = `${path}.${randomUUID7()}.tmp`;
   try {
-    const directory2 = join7(configDirectory(), "setup-v1");
-    await mkdir7(directory2, { recursive: true, mode: 448 });
+    const directory2 = join6(configDirectory(), "setup-v1");
+    await mkdir6(directory2, { recursive: true, mode: 448 });
     const info = await lstat4(directory2);
     if (!info.isDirectory() || info.isSymbolicLink())
       throw new SetupError("setup_store_failed", "The setup store must be a regular private directory, not a symbolic link.");
     await pruneSetupSessions();
-    const file = await open7(temporary, "wx", 384);
+    const file = await open6(temporary, "wx", 384);
     try {
       await file.writeFile(JSON.stringify(data) + "\n");
       await file.sync();
     } finally {
       await file.close();
     }
-    await rename5(temporary, path);
+    await rename4(temporary, path);
   } catch (error) {
     if (error instanceof SetupError)
       throw error;
@@ -213861,7 +213881,7 @@ async function loadSetupSession(origin2, setupId, directory2, now = Date.now())
   let info;
   const path = storePath(origin2, setupId);
   try {
-    const parent = await lstat4(join7(configDirectory(), "setup-v1"));
+    const parent = await lstat4(join6(configDirectory(), "setup-v1"));
     if (!parent.isDirectory() || parent.isSymbolicLink())
       throw new Error("invalid setup directory");
     ({ data, info } = await readSetupRecord(path));
@@ -213880,11 +213900,11 @@ async function loadSetupSession(origin2, setupId, directory2, now = Date.now())
 }
 async function setupPrivateDirectory(...parts) {
   let path = configDirectory();
-  await mkdir7(path, { recursive: true, mode: 448 });
+  await mkdir6(path, { recursive: true, mode: 448 });
   for (const part of ["", "setup-v1", ...parts]) {
     if (part) {
-      path = join7(path, part);
-      await mkdir7(path, { mode: 448 }).catch((error) => {
+      path = join6(path, part);
+      await mkdir6(path, { mode: 448 }).catch((error) => {
         if (error.code !== "EEXIST")
           throw error;
       });
@@ -213895,17 +213915,59 @@ async function setupPrivateDirectory(...parts) {
   }
   return path;
 }
+async function recoverSetupProjectLock(directory2) {
+  const locks = await setupPrivateDirectory("project-locks");
+  const path = join6(locks, `${await setupProjectFingerprint(directory2)}.lock`);
+  let info;
+  try {
+    info = await lstat4(path);
+  } catch (error) {
+    if (error.code === "ENOENT")
+      return false;
+    throw error;
+  }
+  if (!info.isFile() || info.isSymbolicLink() || info.nlink !== 1 || info.size > 1024)
+    throw new SetupError("setup_lock_failed", "The project lock needs manual review.");
+  const file = await open6(path, constants2.O_RDONLY | (constants2.O_NOFOLLOW ?? 0));
+  try {
+    const now = await file.stat();
+    if (now.ino !== info.ino || now.dev !== info.dev)
+      throw new Error("changed lock");
+    const value = JSON.parse(await file.readFile("utf8"));
+    if (!Number.isInteger(value.pid) || value.pid < 1 || typeof value.owner !== "string")
+      throw new Error("invalid lock");
+    try {
+      process.kill(value.pid, 0);
+      throw new SetupError("setup_project_locked", `Another wizard is still running for this project (PID ${value.pid}). Return to its terminal and finish or stop that run before retrying.`);
+    } catch (error) {
+      if (error.code !== "ESRCH")
+        throw error;
+    }
+    return removeSameRecord(path, info);
+  } finally {
+    await file.close();
+  }
+}
 async function withSetupProjectLock(directory2, operation) {
   const fingerprint = await setupProjectFingerprint(directory2);
   const locks = await setupPrivateDirectory("project-locks");
-  const path = join7(locks, `${fingerprint}.lock`), owner = randomUUID8();
+  const path = join6(locks, `${fingerprint}.lock`), owner = randomUUID7();
   let file;
   try {
-    file = await open7(path, "wx", 384);
+    file = await open6(path, "wx", 384);
   } catch (error) {
-    if (error.code === "EEXIST")
-      throw new SetupError("setup_project_locked", "Another setup owns this project. Reconcile its local results before retrying; an expired server lease does not release this lock.");
-    throw new SetupError("setup_lock_failed", "Unable to lock this project for setup. Check local configuration-directory access.");
+    if (error.code !== "EEXIST")
+      throw new SetupError("setup_lock_failed", "Unable to lock this project for setup. Check local configuration-directory access.");
+    try {
+      await recoverSetupProjectLock(directory2);
+      file = await open6(path, "wx", 384);
+    } catch (recoveryError) {
+      if (recoveryError instanceof SetupError)
+        throw recoveryError;
+      if (recoveryError.code === "EEXIST")
+        throw new SetupError("setup_project_locked", "Another wizard acquired this project. Return to its terminal and finish or stop that run before retrying.");
+      throw new SetupError("setup_lock_failed", "The existing project lock could not be verified safely. No lock or installation receipt was removed.");
+    }
   }
   const lockInfo = await file.stat();
   try {
@@ -213923,7 +213985,7 @@ async function withSetupProjectLock(directory2, operation) {
 }
 
 // node_modules/@userreason/cli/dist/setup.js
-import { createHash as createHash6, randomBytes, randomUUID as randomUUID9 } from "node:crypto";
+import { createHash as createHash6, randomBytes, randomUUID as randomUUID8 } from "node:crypto";
 
 // node_modules/@userreason/cli/dist/setup-wire.js
 var fail = () => {
@@ -213983,6 +214045,22 @@ var revision = refine(text(1, 19, /^[1-9][0-9]*$/), (value) => BigInt(value) <=
 var generation = integer(1, 2147483647);
 var shortText = (value) => text(1, 240, /^[^\u0000-\u001f\u007f]*$/)(typeof value === "string" ? value.trim() : value);
 var identifier = text(1, 80, /^[A-Za-z0-9_-]+$/);
+var canonicalOrigin = refine(text(1, 2048), (value) => {
+  try {
+    const url = new URL(value);
+    return ["https:", "http:"].includes(url.protocol) && !url.username && !url.password && !url.hostname.includes("*") && url.origin === value;
+  } catch {
+    return false;
+  }
+});
+var localRegistry = refine(text(1, 200), (value) => {
+  try {
+    const url = new URL(value);
+    return url.protocol === "http:" && ["127.0.0.1", "localhost", "[::1]"].includes(url.hostname) && !url.username && !url.password && url.pathname === "/" && !url.search && !url.hash;
+  } catch {
+    return false;
+  }
+});
 var relativePath = refine(text(1, 240), (value) => !value.startsWith("/") && !/[\\:\u0000-\u001f\u007f]/.test(value) && value.split("/").every((part) => !["", ".", ".."].includes(part)));
 var scope = { schema_version: literal(1), setup_id: uuid2 };
 var setupPhases = ["configuring", "awaiting_local_approval", "applying", "ready_for_recommendations", "analyzing", "selecting_drafts", "creating_drafts", "agent_test", "complete", "cancelled", "expired"];
@@ -213998,7 +214076,9 @@ var parseSetupCapabilities = shape({
   insert_footer: bool,
   source_review: bool,
   sample_read: bool,
+  onboarding_v2: optional(bool),
   project_name: optional(refine(shortText, (value) => value.length <= 120 && !/[\/\\]/.test(value))),
+  launcher: optional(shape({ wizard_version: text(1, 80, /^\d+\.\d+\.\d+(?:-[A-Za-z0-9.-]+)?(?:\+[A-Za-z0-9.-]+)?$/), api_origin: canonicalOrigin, registry: optional(localRegistry) })),
   terminal: optional(shape({ platform: oneOf(["macos", "windows", "linux", "other"]), app: oneOf(["apple_terminal", "iterm2", "windows_terminal", "vscode", "cursor", "warp", "ghostty", "wezterm", "alacritty", "kitty", "generic"]) }))
 });
 var choices = shape({ install_sdk: bool, install_skill: bool, footer_badge: bool });
@@ -214045,14 +214125,14 @@ function parseSetupLocalPlan(value) {
 var sampleState = refine(shape({ status: oneOf(["not_started", "waiting", "received", "skipped"]), first_received_at: nullable(timestamp), latest_received_at: nullable(timestamp), latest_request_id: nullable(uuid2) }), (value) => value.first_received_at === null === (value.latest_received_at === null) && value.latest_received_at === null === (value.latest_request_id === null) && (value.status !== "received" || value.first_received_at !== null));
 var draftOutcome = refine(shape({ candidate_id: identifier, status: oneOf(["pending", "succeeded", "failed"]), prompt_id: uuid2, request_id: uuid2, revision: nullable(revision), code: nullable(oneOf(resultCodes)) }), (value) => value.status !== "succeeded" || value.revision !== null);
 var sourceErrors = ["planning_unavailable", "planning_paused", "planning_daily_budget", "planning_allowance_exhausted", "planning_provider_unavailable", "planning_policy_changed", "planning_consent_expired", "planning_input_budget", "planning_invalid_output", "planning_timeout", "source_changed", "source_unavailable", "recommendations_no_source", "operation_failed"];
-var sourceState = refine(shape({ preparation_id: uuid2, status: oneOf(["pending", "approved", "analyzing", "ready", "failed", "skipped"]), packet_digest: hash, provider_fingerprint: hash, authorized_at: nullable(timestamp), expires_at: timestamp, error_code: nullable(oneOf(sourceErrors)) }), (value) => (!["approved", "analyzing", "ready"].includes(value.status) || value.authorized_at !== null) && (value.authorized_at === null || Date.parse(value.expires_at) > Date.parse(value.authorized_at) && Date.parse(value.expires_at) - Date.parse(value.authorized_at) <= 6e5));
-var sourceFile2 = refine(shape({ path: relativePath, file_hash: hash, excerpt_hash: hash, bytes: integer(0, 12e3), start_line: integer(1, Number.MAX_SAFE_INTEGER), end_line: integer(1, Number.MAX_SAFE_INTEGER) }), (value) => value.end_line >= value.start_line);
-var parseSetupSourceManifest = refine(bounded(shape({ packet_digest: hash, snapshot_id: uuid2, files: array(sourceFile2, 0, 200, (value) => value.path), omitted_files: integer(0, 1e6), truncated: bool, git_included: literal(false) })), (value) => value.files.reduce((sum, file) => sum + file.bytes, 0) <= 12e3);
+var sourceState = refine(shape({ preparation_id: uuid2, status: oneOf(["pending", "approved", "analyzing", "ready", "failed", "skipped"]), packet_digest: hash, provider_fingerprint: hash, authorized_at: nullable(timestamp), expires_at: timestamp, error_code: nullable(oneOf(sourceErrors)), analysis_id: optional(uuid2), analysis_started_at: optional(timestamp), analysis_completed_at: optional(timestamp), deadline_at: optional(timestamp), timings: optional(shape({ extraction_ms: optional(integer(0, Number.MAX_SAFE_INTEGER)), consolidation_ms: optional(integer(0, Number.MAX_SAFE_INTEGER)), authoring_ms: optional(integer(0, Number.MAX_SAFE_INTEGER)), total_ms: optional(integer(0, Number.MAX_SAFE_INTEGER)) })) }), (value) => (!["approved", "analyzing", "ready"].includes(value.status) || value.authorized_at !== null) && (!value.deadline_at || Boolean(value.analysis_started_at && Date.parse(value.deadline_at) > Date.parse(value.analysis_started_at) && Date.parse(value.deadline_at) - Date.parse(value.analysis_started_at) <= 24e4)) && (!value.analysis_completed_at || Boolean(value.analysis_started_at && Date.parse(value.analysis_completed_at) >= Date.parse(value.analysis_started_at))) && (value.authorized_at === null || Date.parse(value.expires_at) > Date.parse(value.authorized_at) && Date.parse(value.expires_at) - Date.parse(value.authorized_at) <= 6e5));
+var sourceFile2 = refine(shape({ path: relativePath, file_hash: hash, excerpt_hash: hash, bytes: integer(0, 262144), start_line: integer(1, Number.MAX_SAFE_INTEGER), end_line: integer(1, Number.MAX_SAFE_INTEGER) }), (value) => value.end_line >= value.start_line);
+var parseSetupSourceManifest = refine(bounded(shape({ packet_digest: hash, snapshot_id: uuid2, files: array(sourceFile2, 0, 200, (value) => `${value.path}:${value.start_line}:${value.end_line}`), omitted_files: integer(0, 1e6), truncated: bool, git_included: literal(false) })), (value) => value.files.reduce((sum, file) => sum + file.bytes, 0) <= 262144);
 var sourcePackage = shape({ name: (value) => text(1, 100)(typeof value === "string" ? value.trim() : value), version: (value) => text(1, 100)(typeof value === "string" ? value.trim() : value) });
 var sourcePackages = array(sourcePackage, 0, 30, (value) => value.name);
 var evidencePath = refine(text(1, 500), (value) => !value.startsWith("/") && !value.includes("\\") && !value.split("/").some((part) => ["", ".", ".."].includes(part)));
-var sourceEvidence = refine(shape({ kind: literal("local_source"), id: identifier, path: evidencePath, file_hash: hash, excerpt_hash: hash, snapshot_id: uuid2, start_line: integer(1, Number.MAX_SAFE_INTEGER), end_line: integer(1, Number.MAX_SAFE_INTEGER), excerpt: text(0, 12e3) }), (value) => value.end_line >= value.start_line && value.excerpt.split("\n").length === value.end_line - value.start_line + 1);
-var planningLimits = shape({ input_tokens: integer(256, 12e3), output_tokens: integer(256, 4e3), deadline_ms: integer(1e3, 4e4) });
+var sourceEvidence = refine(shape({ kind: literal("local_source"), id: identifier, path: evidencePath, file_hash: hash, excerpt_hash: hash, snapshot_id: uuid2, start_line: integer(1, Number.MAX_SAFE_INTEGER), end_line: integer(1, Number.MAX_SAFE_INTEGER), excerpt: text(0, 3e4) }), (value) => value.end_line >= value.start_line && value.excerpt.split("\n").length === value.end_line - value.start_line + 1);
+var planningLimits = shape({ input_tokens: integer(256, 262144), output_tokens: integer(256, 32768), deadline_ms: integer(1e3, 24e4) });
 var providerDestination = refine(text(1, 200), (value) => {
   try {
     const url = new URL(value);
@@ -214112,7 +214192,7 @@ var parseSetupPollInput = shape(scope);
 var parseSetupLocalPlanInput = bounded(shape({ ...scope, request_id: uuid2, expected_revision: revision, plan: localPlan }));
 var parseSetupSourceInfoInput = shape(scope);
 var parseSetupSourcePlanInput = refine(bounded(shape({ ...scope, request_id: uuid2, expected_revision: revision, manifest: parseSetupSourceManifest, packages: sourcePackages })), (value) => value.request_id === value.manifest.snapshot_id);
-var parseSetupSourceUploadInput = refine(bounded(shape({ ...scope, preparation_id: uuid2, project_fingerprint: hash, evidence: array(sourceEvidence, 0, 220, (value) => value.id) })), (value) => new Set(value.evidence.map((item) => item.path)).size === value.evidence.length && Buffer.byteLength(JSON.stringify(value.evidence)) <= 12e3 && value.evidence.every((item) => item.snapshot_id === value.preparation_id));
+var parseSetupSourceUploadInput = refine(shape({ ...scope, preparation_id: uuid2, project_fingerprint: hash, evidence: array(sourceEvidence, 0, 220, (value) => value.id) }), (value) => Buffer.byteLength(JSON.stringify(value)) <= 3e5 && new Set(value.evidence.map((item) => `${item.path}:${item.start_line}:${item.end_line}`)).size === value.evidence.length && Buffer.byteLength(JSON.stringify(value.evidence)) <= 262144 && value.evidence.every((item) => item.snapshot_id === value.preparation_id));
 var parseSetupSourceInfo = refine(bounded(shape({ schema_version: literal(1), session: parseSetupSession, preparation: nullable(shape({ preparation_id: uuid2, manifest: parseSetupSourceManifest, packages: sourcePackages, configuration: planningConfiguration })) })), (value) => value.preparation === null || value.preparation.preparation_id === value.preparation.manifest.snapshot_id);
 var parseSetupClaimInput = shape({ ...scope, request_id: uuid2, executor_generation: generation });
 var parseSetupClaimResult = bounded(shape({ schema_version: literal(1), command: nullable(command), session: parseSetupSession }));
@@ -214196,7 +214276,7 @@ async function request(origin2, operation, body, token, options, retries = 0) {
   if (!["discovery", "start", "exchange", "poll", "plan", "claim", "start-command", "report", "heartbeat", "reconcile", "sample-read", "source-info", "source-plan", "source-upload"].includes(operation))
     throw new SetupError("invalid_setup_operation", "Unsupported setup operation.");
   const encoded = body === void 0 ? void 0 : JSON.stringify(body);
-  if (encoded && Buffer.byteLength(encoded) > 65536)
+  if (encoded && Buffer.byteLength(encoded) > (operation === "source-upload" ? 3e5 : 65536))
     throw new SetupError("setup_request_too_large", "Setup request exceeds 64 KiB.");
   const url = `${apiUrl(origin2)}${operation === "discovery" ? "/onboarding/v1/auth-config?setup=1" : `/onboarding/v1/setup/${operation}`}`;
   const measurementDisabled = options.measurementDisabled === true || !await telemetryEnabled().catch(() => false);
@@ -214209,7 +214289,7 @@ async function request(origin2, operation, body, token, options, retries = 0) {
         redirect: "error",
         headers: { Accept: "application/json", ...encoded === void 0 ? {} : { "Content-Type": "application/json" }, ...token ? { Authorization: `Bearer ${token}` } : {}, ...measurementDisabled ? { "x-ur-measurement-disabled": "1" } : {} },
         ...encoded === void 0 ? {} : { body: encoded },
-        signal: AbortSignal.any([AbortSignal.timeout(operation === "source-upload" ? 5e4 : 1e4), ...options.signal ? [options.signal] : []])
+        signal: AbortSignal.any([AbortSignal.timeout(operation === "source-upload" ? 25e4 : 1e4), ...options.signal ? [options.signal] : []])
       });
     } catch (error) {
       options.signal?.throwIfAborted();
@@ -214296,7 +214376,9 @@ async function finishBrowserSetup(pending, options) {
         throw new SetupError("invalid_setup_response", "The approved setup response does not match this project or active session.");
       const connected = { schema_version: 1, state: "connected", setup_id: pending.setup_id, api_url: pending.api_url, project_fingerprint: pending.project_fingerprint, created_at: new Date(now()).toISOString(), expires_at: result.expires_at, access_token: result.access_token };
       await saveSetupSession(connected);
-      return { client: new BrowserSetupClient(connected, options), session: result.session };
+      const client = new BrowserSetupClient(connected, options);
+      const session2 = await client.heartbeat({ schema_version: 1, setup_id: connected.setup_id, executor_generation: result.session.executor_generation, operation_id: null, lease_generation: null });
+      return { client, session: session2 };
     }
     options.onProgress?.("waiting");
     await delay(Math.max(0, Math.min(2e3, deadline - now())), options);
@@ -214308,9 +214390,11 @@ async function resumeBrowserSetup(origin2, setupId, directory2, options = {}) {
   if (saved.state === "pending")
     return finishBrowserSetup(saved, options);
   const client = new BrowserSetupClient(saved, options);
-  return { client, session: await client.poll() };
+  const current = await client.poll();
+  const session2 = terminal.has(current.phase) ? current : await client.heartbeat({ schema_version: 1, setup_id: saved.setup_id, executor_generation: current.executor_generation, operation_id: null, lease_generation: null });
+  return { client, session: session2 };
 }
-var BrowserSetupClient = class {
+var BrowserSetupClient = class _BrowserSetupClient {
   #stored;
   #options;
   constructor(stored, options = {}) {
@@ -214325,6 +214409,10 @@ var BrowserSetupClient = class {
     const { setup_id, api_url, project_fingerprint, expires_at } = this.#stored;
     return { setup_id, api_url, project_fingerprint, expires_at };
   }
+  /** Share the same saved capability while binding requests to one run's lifetime. */
+  withSignal(signal) {
+    return new _BrowserSetupClient(this.#stored, { ...this.#options, signal: AbortSignal.any([signal, ...this.#options.signal ? [this.#options.signal] : []]) });
+  }
   async call(operation, body, retries = 0) {
     if (Date.parse(this.#stored.expires_at) <= (this.#options.now ?? Date.now)())
       throw new SetupError("setup_expired", "Setup access expired. Start a new setup; it cannot be refreshed into ordinary CLI access.");
@@ -214395,7 +214483,7 @@ var BrowserSetupClient = class {
     this.scoped(body);
     return this.view(await this.call("reconcile", body));
   }
-  async sample(requestId = randomUUID9()) {
+  async sample(requestId = randomUUID8()) {
     const active = await this.poll();
     if (active.phase !== "agent_test" || !["waiting", "received"].includes(active.sample.status))
       throw new SetupError("setup_sample_unavailable", "This setup is not waiting for its optional sample read. Open that step in the browser first.");
@@ -214406,17 +214494,177 @@ var BrowserSetupClient = class {
   }
 };
 
+// node_modules/@userreason/cli/dist/setup-diagnostics.js
+function sanitizeSetupDiagnostic(value, secrets = []) {
+  let text2 = value.replace(/\x1b\[[0-?]*[ -/]*[@-~]/g, "").replace(/[\x00-\x08\x0b-\x1f\x7f]/g, "");
+  const environmentSecrets = Object.entries(process.env).filter(([key, value2]) => /token|secret|password|api[_-]?key|authorization/i.test(key) && value2 && value2.length >= 4).map(([, value2]) => value2);
+  for (const secret2 of [...secrets, ...environmentSecrets].filter((value2) => value2.length >= 4).sort((a, b) => b.length - a.length))
+    text2 = text2.split(secret2).join("[redacted]");
+  text2 = text2.replace(/\b(Bearer|Basic)\s+[^\s]+/gi, "$1 [redacted]");
+  text2 = text2.replace(/((?:_authToken|_password|password|access_token|refresh_token|api_key|authorization)\s*[:=]\s*)[^\s]+/gi, "$1[redacted]");
+  text2 = text2.replace(/\b(?:gh[pousr]_[A-Za-z0-9_]+|github_pat_[A-Za-z0-9_]+|npm_[A-Za-z0-9]+|sk-[A-Za-z0-9_-]{16,})\b/g, "[redacted]");
+  text2 = text2.replace(/https?:\/\/[^\s<>"']+/g, (value2) => {
+    try {
+      const url = new URL(value2);
+      url.username = "";
+      url.password = "";
+      url.search = "";
+      url.hash = "";
+      return url.toString();
+    } catch {
+      return "[invalid URL]";
+    }
+  });
+  return text2.trim().slice(0, 8e3);
+}
+
 // node_modules/@userreason/cli/dist/setup-executor.js
-import { randomUUID as randomUUID10 } from "node:crypto";
-import { constants as constants5 } from "node:fs";
-import { lstat as lstat6, open as open9, opendir as opendir2, rename as rename6, rm as rm4 } from "node:fs/promises";
-import { join as join9 } from "node:path";
+import { randomUUID as randomUUID9 } from "node:crypto";
+import { constants as constants4 } from "node:fs";
+import { lstat as lstat6, open as open8, opendir as opendir2, rename as rename5, rm as rm4 } from "node:fs/promises";
+import { join as join8 } from "node:path";
+
+// node_modules/@userreason/cli/dist/setup-heartbeat.js
+var terminal2 = /* @__PURE__ */ new Set(["complete", "cancelled", "expired"]);
+function setupAbortable(work, signal) {
+  if (!signal)
+    return work;
+  signal.throwIfAborted();
+  return new Promise((resolve3, reject) => {
+    const abort = () => reject(signal.reason);
+    signal.addEventListener("abort", abort, { once: true });
+    work.then(resolve3, reject).finally(() => signal.removeEventListener("abort", abort));
+  });
+}
+var SetupHeartbeat = class {
+  client;
+  options;
+  session;
+  timer;
+  pending;
+  stopped = false;
+  paused = 0;
+  failure;
+  lease;
+  lifetime = new AbortController();
+  signal;
+  constructor(client, options = {}) {
+    this.client = client;
+    this.options = options;
+    this.signal = AbortSignal.any([this.lifetime.signal, ...options.signal ? [options.signal] : []]);
+  }
+  observe(next) {
+    const current = this.session;
+    if (!current || BigInt(next.revision) >= BigInt(current.revision)) {
+      const heartbeat = current?.heartbeat_at && (!next.heartbeat_at || Date.parse(current.heartbeat_at) > Date.parse(next.heartbeat_at)) ? current.heartbeat_at : next.heartbeat_at;
+      this.session = { ...next, heartbeat_at: heartbeat };
+    }
+    if (terminal2.has(this.session.phase) && !this.signal.aborted)
+      this.lifetime.abort(new Error("Setup ended"));
+    if (!this.stopped && !this.timer && !this.pending && !this.paused && !terminal2.has(this.session.phase))
+      this.schedule(0);
+    return this.session;
+  }
+  get current() {
+    return this.session;
+  }
+  setLease(lease) {
+    this.lease = lease;
+  }
+  latest(fallback) {
+    return this.observe(fallback);
+  }
+  check() {
+    this.options.signal?.throwIfAborted();
+    if (this.failure)
+      throw this.failure;
+  }
+  schedule(delay2 = this.options.heartbeatMs ?? 1e4) {
+    if (this.stopped || this.paused || !this.session || terminal2.has(this.session.phase) || this.signal.aborted)
+      return;
+    this.timer = setTimeout(() => {
+      this.timer = void 0;
+      void this.pulse();
+    }, delay2);
+  }
+  async pulse() {
+    if (this.pending)
+      return this.pending;
+    if (this.stopped || this.paused || this.signal.aborted || !this.session || terminal2.has(this.session.phase))
+      return;
+    if (this.timer) {
+      clearTimeout(this.timer);
+      this.timer = void 0;
+    }
+    const session2 = this.session;
+    this.pending = setupAbortable(this.client.heartbeat({
+      schema_version: 1,
+      setup_id: this.client.identity.setup_id,
+      executor_generation: session2.executor_generation,
+      operation_id: this.lease?.operation_id ?? null,
+      lease_generation: this.lease?.lease_generation ?? null
+    }), this.signal).then((value) => {
+      this.observe(value);
+    }).catch((error) => {
+      if (!this.stopped && !this.options.signal?.aborted) {
+        this.failure = error;
+        this.lifetime.abort(error);
+      }
+    }).finally(() => {
+      this.pending = void 0;
+      this.schedule();
+    });
+    return this.pending;
+  }
+  /** Finish the old lease's in-flight heartbeat before closing it in a report. */
+  async duringReport(operation) {
+    this.paused++;
+    if (this.timer) {
+      clearTimeout(this.timer);
+      this.timer = void 0;
+    }
+    try {
+      await this.pending;
+      this.lease = void 0;
+      return await operation();
+    } finally {
+      this.paused--;
+      this.schedule();
+    }
+  }
+  async stop() {
+    this.stopped = true;
+    if (this.timer)
+      clearTimeout(this.timer);
+    this.lifetime.abort(new Error("Setup run ended"));
+    await this.pending;
+  }
+};
+function observeSetupClient(client, heartbeat, signal) {
+  return new Proxy(client, { get(target, key, receiver) {
+    const value = Reflect.get(target, key, target);
+    if (typeof value !== "function")
+      return value;
+    if (key === "withSignal")
+      return value.bind(target);
+    return async (...args) => {
+      if (key !== "report")
+        signal?.throwIfAborted();
+      const requestSignal = ["poll", "discovery", "sourceInfo", "sourceUpload"].includes(String(key)) ? signal : void 0;
+      const result = await setupAbortable(Reflect.apply(value, target, args), requestSignal);
+      const view = result && typeof result === "object" && "session" in result ? result.session : result;
+      if (view && typeof view === "object" && "phase" in view && "revision" in view && typeof view.phase === "string" && typeof view.revision === "string")
+        heartbeat.observe(view);
+      return result;
+    };
+  } });
+}
 
 // node_modules/@userreason/cli/dist/setup-files.js
 import { createHash as createHash7 } from "node:crypto";
-import { constants as constants4 } from "node:fs";
-import { lstat as lstat5, mkdir as mkdir8, open as open8, realpath as realpath3 } from "node:fs/promises";
-import { join as join8, relative as relative2, resolve as resolve2, sep as sep2 } from "node:path";
+import { constants as constants3 } from "node:fs";
+import { lstat as lstat5, mkdir as mkdir7, open as open7, realpath as realpath3 } from "node:fs/promises";
+import { join as join7, relative as relative2, resolve as resolve2, sep as sep2 } from "node:path";
 var setupHash = (value) => createHash7("sha256").update(value).digest("hex");
 function setupCanonical(value) {
   if (Array.isArray(value))
@@ -214435,14 +214683,14 @@ async function checkedPath(directory2, name, createParents = false) {
     throw new SetupError("setup_path_unsafe", "The reviewed path escapes the project.");
   let parent = root;
   for (const part of name.split("/").slice(0, -1)) {
-    parent = join8(parent, part);
+    parent = join7(parent, part);
     let info = await lstat5(parent).catch((error) => {
       if (error.code === "ENOENT")
         return null;
       throw error;
     });
     if (!info && createParents) {
-      await mkdir8(parent);
+      await mkdir7(parent);
       info = await lstat5(parent);
     }
     if (!info)
@@ -214464,15 +214712,15 @@ async function readSetupFile(directory2, path) {
   }
   if (!before.isFile() || before.isSymbolicLink() || before.nlink !== 1 || before.size > 2e6)
     throw new SetupError("setup_path_unsafe", "A reviewed file is not a bounded ordinary file.");
-  const handle = await open8(target, constants4.O_RDONLY | (constants4.O_NOFOLLOW ?? 0));
+  const handle = await open7(target, constants3.O_RDONLY | (constants3.O_NOFOLLOW ?? 0));
   try {
     const current = await handle.stat();
     if (before.dev !== current.dev || before.ino !== current.ino || current.nlink !== 1 || current.size > 2e6)
       throw new SetupError("setup_path_unsafe", "A reviewed file changed while reading.");
-    const bytes = await handle.readFile();
-    if (bytes.length > 2e6)
+    const bytes2 = await handle.readFile();
+    if (bytes2.length > 2e6)
       throw new SetupError("setup_path_unsafe", "A reviewed file exceeds the size limit.");
-    return new TextDecoder("utf-8", { fatal: true }).decode(bytes);
+    return new TextDecoder("utf-8", { fatal: true }).decode(bytes2);
   } finally {
     await handle.close();
   }
@@ -214486,7 +214734,7 @@ async function writeSetupFile(directory2, file) {
   if (file.before === file.after)
     return;
   const info = file.before === null ? null : await lstat5(target);
-  const handle = await open8(target, info ? constants4.O_WRONLY | (constants4.O_NOFOLLOW ?? 0) : constants4.O_WRONLY | constants4.O_CREAT | constants4.O_EXCL | (constants4.O_NOFOLLOW ?? 0), 420);
+  const handle = await open7(target, info ? constants3.O_WRONLY | (constants3.O_NOFOLLOW ?? 0) : constants3.O_WRONLY | constants3.O_CREAT | constants3.O_EXCL | (constants3.O_NOFOLLOW ?? 0), 420);
   try {
     const now = await handle.stat();
     if (!now.isFile() || now.nlink !== 1 || info && (now.dev !== info.dev || now.ino !== info.ino))
@@ -214508,7 +214756,7 @@ async function verifySetupFiles(directory2, files2, state) {
 }
 
 // node_modules/@userreason/cli/dist/setup-executor.js
-var terminal2 = /* @__PURE__ */ new Set(["complete", "cancelled", "expired"]);
+var terminal3 = /* @__PURE__ */ new Set(["complete", "cancelled", "expired"]);
 var stopped = /* @__PURE__ */ new Set(["ready_for_recommendations", "analyzing", "selecting_drafts", "creating_drafts", "agent_test"]);
 var limit = 8e6;
 var retention = 7 * 864e5;
@@ -214539,27 +214787,27 @@ function validatePrepared(value) {
 async function journalPath(client) {
   const directory2 = await setupPrivateDirectory("receipts");
   await pruneSetupExecutionReceipts();
-  return join9(directory2, `${setupHash(`${client.identity.api_url}
+  return join8(directory2, `${setupHash(`${client.identity.api_url}
 ${client.identity.setup_id}`)}.json`);
 }
 async function pruneSetupExecutionReceipts(now = Date.now()) {
   const directory2 = await setupPrivateDirectory("receipts");
-  let removed = 0, scanned = 0, bytes = 0;
+  let removed = 0, scanned = 0, bytes2 = 0;
   for await (const entry of await opendir2(directory2)) {
     if (++scanned > 128)
       break;
     if (!entry.isFile() || !/^[a-f0-9]{64}\.json$/.test(entry.name))
       continue;
-    const path = join9(directory2, entry.name);
+    const path = join8(directory2, entry.name);
     let handle;
     try {
       const info = await lstat6(path);
       if (!info.isFile() || info.isSymbolicLink() || info.nlink !== 1 || info.size > limit)
         continue;
-      bytes += info.size;
-      if (bytes > 16e6)
+      bytes2 += info.size;
+      if (bytes2 > 16e6)
         break;
-      handle = await open9(path, constants5.O_RDONLY | (constants5.O_NOFOLLOW ?? 0));
+      handle = await open8(path, constants4.O_RDONLY | (constants4.O_NOFOLLOW ?? 0));
       const opened = await handle.stat();
       if (opened.ino !== info.ino || opened.dev !== info.dev)
         continue;
@@ -214589,7 +214837,7 @@ function validateJournal(data, identity, active = true) {
   if (data.plan)
     data.plan = validatePrepared(data.plan);
   for (const [operationId, receipt] of Object.entries(data.receipts)) {
-    if (!uuid3(operationId) || !receipt || typeof receipt !== "object" || Array.isArray(receipt) || Object.keys(receipt).some((key) => !["input_digest", "stage", "outcome", "outputs", "request_id"].includes(key)) || !/^[a-f0-9]{64}$/.test(receipt.input_digest) || !["claimed", "running", "settled"].includes(receipt.stage) || !uuid3(receipt.request_id) || receipt.stage === "settled" !== Boolean(receipt.outcome))
+    if (!uuid3(operationId) || !receipt || typeof receipt !== "object" || Array.isArray(receipt) || Object.keys(receipt).some((key) => !["input_digest", "stage", "outcome", "diagnostic", "outputs", "request_id"].includes(key)) || receipt.diagnostic !== void 0 && (typeof receipt.diagnostic !== "string" || receipt.diagnostic.length > 8e3) || !/^[a-f0-9]{64}$/.test(receipt.input_digest) || !["claimed", "running", "settled"].includes(receipt.stage) || !uuid3(receipt.request_id) || receipt.stage === "settled" !== Boolean(receipt.outcome))
       throw new Error("invalid operation receipt");
     const operation = data.plan?.operations.find((item) => setupDigest(item.effect) === receipt.input_digest);
     if (!operation)
@@ -214614,19 +214862,19 @@ async function loadJournal(path, client) {
     const info = await lstat6(path);
     if (!info.isFile() || info.isSymbolicLink() || info.nlink !== 1 || info.size > limit)
       throw new Error("unsafe receipt");
-    handle = await open9(path, constants5.O_RDONLY | (constants5.O_NOFOLLOW ?? 0));
+    handle = await open8(path, constants4.O_RDONLY | (constants4.O_NOFOLLOW ?? 0));
     const current = await handle.stat();
     if (info.ino !== current.ino || info.dev !== current.dev || current.size > limit)
       throw new Error("changed receipt");
-    const bytes = await handle.readFile();
-    if (bytes.length > limit)
+    const bytes2 = await handle.readFile();
+    if (bytes2.length > limit)
       throw new Error("large receipt");
-    const data = JSON.parse(bytes.toString());
+    const data = JSON.parse(bytes2.toString());
     return validateJournal(data, client.identity);
   } catch (error) {
     if (error.code === "ENOENT") {
       const now = Date.now();
-      return { version: 1, setup_id: client.identity.setup_id, api_url: client.identity.api_url, project_fingerprint: client.identity.project_fingerprint, created_at: new Date(now).toISOString(), retain_until: new Date(now + retention).toISOString(), plan_request_id: randomUUID10(), claim_request_id: randomUUID10(), receipts: {} };
+      return { version: 1, setup_id: client.identity.setup_id, api_url: client.identity.api_url, project_fingerprint: client.identity.project_fingerprint, created_at: new Date(now).toISOString(), retain_until: new Date(now + retention).toISOString(), plan_request_id: randomUUID9(), claim_request_id: randomUUID9(), receipts: {} };
     }
     throw new SetupError("setup_receipt_invalid", "The local receipt needs review. No local effects were repeated.");
   } finally {
@@ -214637,16 +214885,16 @@ async function saveJournal(path, journal) {
   const contents = JSON.stringify(journal);
   if (Buffer.byteLength(contents) > limit)
     throw new SetupError("setup_plan_too_large", "The prepared local plan exceeds the private receipt limit.");
-  const temporary = `${path}.${randomUUID10()}.tmp`;
+  const temporary = `${path}.${randomUUID9()}.tmp`;
   try {
-    const handle = await open9(temporary, "wx", 384);
+    const handle = await open8(temporary, "wx", 384);
     try {
       await handle.writeFile(contents);
       await handle.sync();
     } finally {
       await handle.close();
     }
-    await rename6(temporary, path);
+    await rename5(temporary, path);
   } finally {
     await rm4(temporary, { force: true }).catch(() => {
     });
@@ -214669,167 +214917,176 @@ async function verified(directory2, operation, runtime, receipt) {
     return false;
   return runtime.verify ? runtime.verify(operation) : operation.effect.kind !== "install_packages";
 }
-async function runSetupExecutor(client, directory2, runtime, options = {}) {
+async function runSetupExecutor(client, directory2, runtime, options = {}, sharedHeartbeat) {
   if (await setupProjectFingerprint(directory2) !== client.identity.project_fingerprint)
     throw new SetupError("setup_binding_mismatch", "This executor belongs to another project.");
-  return withSetupProjectLock(directory2, async () => {
-    const path = await journalPath(client), journal = await loadJournal(path, client);
-    let session2 = await client.poll(), polls = 0;
-    const scope2 = { schema_version: 1, setup_id: client.identity.setup_id };
-    const pause2 = async () => {
-      if (options.sleep)
-        await options.sleep(options.pollMs ?? 2e3);
-      else
-        await new Promise((resolve3, reject) => {
-          const timer = setTimeout(done, options.pollMs ?? 2e3);
-          function done() {
-            options.signal?.removeEventListener("abort", abort);
-            resolve3();
+  const heartbeat = sharedHeartbeat ?? new SetupHeartbeat(client, options);
+  client = observeSetupClient(client, heartbeat, options.signal);
+  try {
+    return await withSetupProjectLock(directory2, async () => {
+      const path = await journalPath(client), journal = await loadJournal(path, client);
+      const shownErrors = /* @__PURE__ */ new Set();
+      const showError = (id, receipt) => {
+        if (!receipt.diagnostic || shownErrors.has(id))
+          return;
+        const operation = journal.plan?.operations.find((item) => setupDigest(item.effect) === receipt.input_digest);
+        if (!operation)
+          return;
+        shownErrors.add(id);
+        try {
+          options.onOperationError?.({ kind: operation.effect.kind, message: sanitizeSetupDiagnostic(receipt.diagnostic), receiptPath: path });
+        } catch {
+        }
+      };
+      for (const [id, receipt] of Object.entries(journal.receipts))
+        showError(id, receipt);
+      let session2 = await client.poll(), polls = 0;
+      const scope2 = { schema_version: 1, setup_id: client.identity.setup_id };
+      const pause2 = async () => {
+        if (options.sleep)
+          await options.sleep(options.pollMs ?? 2e3);
+        else
+          await new Promise((resolve3, reject) => {
+            const timer = setTimeout(done, options.pollMs ?? 2e3);
+            function done() {
+              options.signal?.removeEventListener("abort", abort);
+              resolve3();
+            }
+            function abort() {
+              clearTimeout(timer);
+              reject(options.signal?.reason);
+            }
+            options.signal?.addEventListener("abort", abort, { once: true });
+          });
+      };
+      while (true) {
+        heartbeat.check();
+        session2 = heartbeat.latest(session2);
+        options.onSession?.(session2);
+        if (terminal3.has(session2.phase) || stopped.has(session2.phase) || options.maxPolls !== void 0 && polls++ >= options.maxPolls) {
+          if (session2.phase === "cancelled") {
+            const known = session2.commands.find((command3) => command3.status === "running" && journal.receipts[command3.operation_id]?.outcome);
+            if (known)
+              session2 = await client.report({ ...scope2, operation_id: known.operation_id, executor_generation: known.executor_generation, lease_generation: known.lease_generation, ...journal.receipts[known.operation_id].outcome });
+          }
+          return session2;
+        }
+        if (session2.phase === "configuring") {
+          if (!session2.site_id || !session2.workspace_id) {
+            await heartbeat.pulse();
+            heartbeat.check();
+            session2 = heartbeat.latest(session2);
+            await pause2();
+            session2 = await client.poll();
+            continue;
           }
-          function abort() {
-            clearTimeout(timer);
-            reject(options.signal?.reason);
+          const targetDigest = setupDigest({ workspace_id: session2.workspace_id, site_id: session2.site_id, api_url: client.identity.api_url });
+          if (!journal.plan || journal.plan.wire.choices_digest !== setupDigest(session2.choices) || journal.target_digest !== targetDigest) {
+            if (Object.keys(journal.receipts).length)
+              throw new SetupError("setup_plan_changed", "A completed local plan cannot be replaced without a new setup.");
+            journal.plan = validatePrepared(await setupAbortable(runtime.prepare(session2), heartbeat.signal));
+            journal.target_digest = targetDigest;
+            journal.plan_request_id = randomUUID9();
+            await saveJournal(path, journal);
           }
-          options.signal?.addEventListener("abort", abort, { once: true });
-        });
-    };
-    while (true) {
-      options.signal?.throwIfAborted();
-      options.onSession?.(session2);
-      if (terminal2.has(session2.phase) || stopped.has(session2.phase) || options.maxPolls !== void 0 && polls++ >= options.maxPolls) {
-        if (session2.phase === "cancelled") {
-          const known = session2.commands.find((command3) => command3.status === "running" && journal.receipts[command3.operation_id]?.outcome);
-          if (known)
-            session2 = await client.report({ ...scope2, operation_id: known.operation_id, executor_generation: known.executor_generation, lease_generation: known.lease_generation, ...journal.receipts[known.operation_id].outcome });
+          try {
+            session2 = await client.plan({ ...scope2, request_id: journal.plan_request_id, expected_revision: session2.revision, plan: journal.plan.wire });
+          } catch (error) {
+            if (!(error instanceof SetupError) || error.code !== "revision_conflict")
+              throw error;
+            session2 = await client.poll();
+          }
+          continue;
         }
-        return session2;
-      }
-      if (session2.phase === "configuring") {
-        if (!session2.site_id || !session2.workspace_id) {
-          session2 = await client.heartbeat({ ...scope2, executor_generation: session2.executor_generation, operation_id: null, lease_generation: null });
+        if (!journal.plan || !session2.local_plan || setupDigest(session2.local_plan) !== setupDigest(journal.plan.wire))
+          throw new SetupError("setup_plan_missing", "The browser-approved local plan is unavailable on this computer. No effects were applied.");
+        if (session2.phase !== "applying") {
+          await heartbeat.pulse();
+          heartbeat.check();
+          session2 = heartbeat.latest(session2);
           await pause2();
           session2 = await client.poll();
           continue;
         }
-        const targetDigest = setupDigest({ workspace_id: session2.workspace_id, site_id: session2.site_id, api_url: client.identity.api_url });
-        if (!journal.plan || journal.plan.wire.choices_digest !== setupDigest(session2.choices) || journal.target_digest !== targetDigest) {
-          if (Object.keys(journal.receipts).length)
-            throw new SetupError("setup_plan_changed", "A completed local plan cannot be replaced without a new setup.");
-          journal.plan = validatePrepared(await runtime.prepare(session2));
-          journal.target_digest = targetDigest;
-          journal.plan_request_id = randomUUID10();
+        const unknown = session2.commands.find((command3) => command3.status === "outcome_unknown" || command3.status === "running" || command3.status === "leased" && journal.receipts[command3.operation_id]);
+        if (unknown) {
+          const operation2 = journal.plan.operations.find((item) => setupDigest(item.effect) === unknown.input_digest);
+          if (!operation2)
+            throw new SetupError("setup_command_mismatch", "The command does not match the local reviewed plan.");
+          const receipt2 = journal.receipts[unknown.operation_id];
+          if (unknown.status !== "outcome_unknown") {
+            await pause2();
+            session2 = await client.poll();
+            continue;
+          }
+          const stillVerified = await verified(directory2, operation2, runtime, receipt2);
+          const outcome = receipt2?.outcome && receipt2.outcome.status !== "succeeded" ? receipt2.outcome : stillVerified ? { status: "succeeded", result: { code: "already_present", verified: true } } : { status: "manual", result: { code: receipt2?.outcome?.status === "succeeded" ? "review_required" : "outcome_unknown" } };
+          const requestId = receipt2?.request_id ?? randomUUID9();
+          journal.receipts[unknown.operation_id] = { input_digest: unknown.input_digest, stage: "settled", outcome, diagnostic: receipt2?.diagnostic, outputs: receipt2?.outputs, request_id: requestId };
           await saveJournal(path, journal);
+          session2 = await client.reconcile({ ...scope2, request_id: requestId, project_fingerprint: client.identity.project_fingerprint, executor_generation: session2.executor_generation, operation_id: unknown.operation_id, input_digest: unknown.input_digest, ...outcome });
+          continue;
         }
-        session2 = await client.plan({ ...scope2, request_id: journal.plan_request_id, expected_revision: session2.revision, plan: journal.plan.wire });
-        continue;
-      }
-      if (!journal.plan || !session2.local_plan || setupDigest(session2.local_plan) !== setupDigest(journal.plan.wire))
-        throw new SetupError("setup_plan_missing", "The browser-approved local plan is unavailable on this computer. No effects were applied.");
-      if (session2.phase !== "applying") {
-        session2 = await client.heartbeat({ ...scope2, executor_generation: session2.executor_generation, operation_id: null, lease_generation: null });
-        await pause2();
-        session2 = await client.poll();
-        continue;
-      }
-      const unknown = session2.commands.find((command3) => command3.status === "outcome_unknown" || command3.status === "running" || command3.status === "leased" && journal.receipts[command3.operation_id]);
-      if (unknown) {
-        const operation2 = journal.plan.operations.find((item) => setupDigest(item.effect) === unknown.input_digest);
-        if (!operation2)
-          throw new SetupError("setup_command_mismatch", "The command does not match the local reviewed plan.");
-        const receipt2 = journal.receipts[unknown.operation_id];
-        if (unknown.status !== "outcome_unknown") {
+        const claimed = await client.claim({ ...scope2, request_id: journal.claim_request_id, executor_generation: session2.executor_generation });
+        session2 = claimed.session;
+        const command2 = claimed.command;
+        if (!command2) {
           await pause2();
           session2 = await client.poll();
           continue;
         }
-        const stillVerified = await verified(directory2, operation2, runtime, receipt2);
-        const outcome = receipt2?.outcome && receipt2.outcome.status !== "succeeded" ? receipt2.outcome : stillVerified ? { status: "succeeded", result: { code: "already_present", verified: true } } : { status: "manual", result: { code: receipt2?.outcome?.status === "succeeded" ? "review_required" : "outcome_unknown" } };
-        const requestId = receipt2?.request_id ?? randomUUID10();
-        journal.receipts[unknown.operation_id] = { input_digest: unknown.input_digest, stage: "settled", outcome, outputs: receipt2?.outputs, request_id: requestId };
+        if (command2.status !== "leased")
+          continue;
+        const operation = journal.plan.operations.find((item) => item.effect.effect_id === command2.input.effect_id);
+        if (!operation || setupDigest(operation.effect) !== command2.input_digest || setupDigest(operation.effect) !== setupDigest(command2.input))
+          throw new SetupError("setup_command_mismatch", "The command differs from the approved local plan.");
+        const lease = { ...scope2, operation_id: command2.operation_id, executor_generation: command2.executor_generation, lease_generation: command2.lease_generation };
+        if (journal.receipts[command2.operation_id])
+          throw new SetupError("setup_replay_refused", "A local receipt already exists. Reconcile before attempting this command again.");
+        const receipt = { input_digest: command2.input_digest, stage: "claimed", request_id: randomUUID9() };
+        journal.receipts[command2.operation_id] = receipt;
         await saveJournal(path, journal);
-        session2 = await client.reconcile({ ...scope2, request_id: requestId, project_fingerprint: client.identity.project_fingerprint, executor_generation: session2.executor_generation, operation_id: unknown.operation_id, input_digest: unknown.input_digest, ...outcome });
-        continue;
-      }
-      const claimed = await client.claim({ ...scope2, request_id: journal.claim_request_id, executor_generation: session2.executor_generation });
-      session2 = claimed.session;
-      const command2 = claimed.command;
-      if (!command2) {
-        await pause2();
-        session2 = await client.poll();
-        continue;
-      }
-      if (command2.status !== "leased")
-        continue;
-      const operation = journal.plan.operations.find((item) => item.effect.effect_id === command2.input.effect_id);
-      if (!operation || setupDigest(operation.effect) !== command2.input_digest || setupDigest(operation.effect) !== setupDigest(command2.input))
-        throw new SetupError("setup_command_mismatch", "The command differs from the approved local plan.");
-      const lease = { ...scope2, operation_id: command2.operation_id, executor_generation: command2.executor_generation, lease_generation: command2.lease_generation };
-      if (journal.receipts[command2.operation_id])
-        throw new SetupError("setup_replay_refused", "A local receipt already exists. Reconcile before attempting this command again.");
-      const receipt = { input_digest: command2.input_digest, stage: "claimed", request_id: randomUUID10() };
-      journal.receipts[command2.operation_id] = receipt;
-      await saveJournal(path, journal);
-      session2 = await client.startCommand(lease);
-      receipt.stage = "running";
-      await saveJournal(path, journal);
-      const controller = new AbortController();
-      const abort = () => controller.abort(options.signal?.reason);
-      options.signal?.addEventListener("abort", abort, { once: true });
-      if (options.signal?.aborted)
-        abort();
-      if (terminal2.has(session2.phase))
-        controller.abort(new Error("Setup ended before local execution"));
-      let heartbeatFailure, heartbeatBusy = false;
-      let inFlightHeartbeat;
-      const timer = setInterval(() => {
-        if (heartbeatBusy)
-          return;
-        heartbeatBusy = true;
-        inFlightHeartbeat = client.heartbeat(lease).then((value) => {
-          session2 = value;
-          if (terminal2.has(value.phase))
-            controller.abort(new Error("Setup ended"));
-        }, (error) => {
-          heartbeatFailure = error;
-          controller.abort(error);
-        }).finally(() => {
-          heartbeatBusy = false;
-        });
-      }, options.heartbeatMs ?? 1e4);
-      try {
-        controller.signal.throwIfAborted();
-        if (!await verifySetupFiles(directory2, operation.files, "before"))
-          throw new SetupError("setup_files_changed", "Files changed after browser approval.");
-        for (const guard of operation.guards ?? []) {
-          const content = await readSetupFile(directory2, guard.path);
-          if ((content === null ? null : setupHash(content)) !== guard.before_hash)
-            throw new SetupError("setup_files_changed", "A package configuration changed after review.");
-        }
-        if (operation.effect.kind === "install_packages")
-          for (const file of operation.effect.managed_outputs ?? []) {
-            const content = await readSetupFile(directory2, file.path);
-            if ((content === null ? null : setupHash(content)) !== file.before_hash)
-              throw new SetupError("setup_files_changed", "Package-manager outputs changed after approval.");
-          }
-        const code = await runtime.apply(operation, controller.signal);
-        controller.signal.throwIfAborted();
-        receipt.outputs = await outputs(directory2, operation);
-        if (!await verified(directory2, operation, runtime, receipt))
-          throw new SetupError("setup_verification_failed", "The completed effect did not match the reviewed files.");
-        receipt.outcome = { status: "succeeded", result: { code, verified: true } };
-      } catch (error) {
-        receipt.outcome = { status: error instanceof SetupError && error.code === "setup_files_changed" ? "manual" : "failed", result: { code: controller.signal.aborted || heartbeatFailure ? "outcome_unknown" : error instanceof SetupError && error.code === "setup_files_changed" ? "review_required" : "operation_failed" } };
-      } finally {
-        clearInterval(timer);
-        await inFlightHeartbeat;
-        options.signal?.removeEventListener("abort", abort);
+        heartbeat.setLease(lease);
+        session2 = await client.startCommand(lease);
+        receipt.stage = "running";
+        await saveJournal(path, journal);
+        const operationSignal = heartbeat.signal;
+        try {
+          operationSignal.throwIfAborted();
+          if (!await verifySetupFiles(directory2, operation.files, "before"))
+            throw new SetupError("setup_files_changed", "Files changed after browser approval.");
+          for (const guard of operation.guards ?? []) {
+            const content = await readSetupFile(directory2, guard.path);
+            if ((content === null ? null : setupHash(content)) !== guard.before_hash)
+              throw new SetupError("setup_files_changed", "A package configuration changed after review.");
+          }
+          if (operation.effect.kind === "install_packages")
+            for (const file of operation.effect.managed_outputs ?? []) {
+              const content = await readSetupFile(directory2, file.path);
+              if ((content === null ? null : setupHash(content)) !== file.before_hash)
+                throw new SetupError("setup_files_changed", "Package-manager outputs changed after approval.");
+            }
+          const code = await runtime.apply(operation, operationSignal);
+          operationSignal.throwIfAborted();
+          receipt.outputs = await outputs(directory2, operation);
+          if (!await verified(directory2, operation, runtime, receipt))
+            throw new SetupError("setup_verification_failed", "The completed effect did not match the reviewed files.");
+          receipt.outcome = { status: "succeeded", result: { code, verified: true } };
+        } catch (error) {
+          receipt.outcome = { status: error instanceof SetupError && error.code === "setup_files_changed" ? "manual" : "failed", result: { code: operationSignal.aborted ? "outcome_unknown" : error instanceof SetupError && error.code === "setup_files_changed" ? "review_required" : "operation_failed" } };
+          receipt.diagnostic = sanitizeSetupDiagnostic(error instanceof Error ? error.message : "Local operation failed without an error message.");
+        }
+        receipt.stage = "settled";
+        journal.claim_request_id = randomUUID9();
+        await saveJournal(path, journal);
+        showError(command2.operation_id, receipt);
+        session2 = await heartbeat.duringReport(() => client.report({ ...lease, ...receipt.outcome }));
       }
-      receipt.stage = "settled";
-      journal.claim_request_id = randomUUID10();
-      await saveJournal(path, journal);
-      session2 = await client.report({ ...lease, ...receipt.outcome });
-    }
-  });
+    });
+  } finally {
+    if (!sharedHeartbeat)
+      await heartbeat.stop();
+  }
 }
 
 // node_modules/@userreason/cli/dist/setup-terminal.js
@@ -214840,20 +215097,21 @@ function detectSetupTerminal(platform = process.platform, environment = process.
 }
 
 // node_modules/@userreason/cli/dist/setup-runner.js
-import { randomUUID as randomUUID12 } from "node:crypto";
+import { randomUUID as randomUUID11 } from "node:crypto";
 import { realpath as realpath4 } from "node:fs/promises";
 
 // node_modules/@userreason/cli/dist/setup-source.js
-import { randomUUID as randomUUID11 } from "node:crypto";
-async function prepareSetupSource(directory2, preparationId = randomUUID11(), signal) {
+import { randomUUID as randomUUID10 } from "node:crypto";
+async function prepareSetupSource(directory2, preparationId = randomUUID10(), signal, expanded = false) {
   signal?.throwIfAborted();
-  const preview = await collectFirstSurveySource({ root: directory2, snapshotId: preparationId, recommendations: true, signal });
+  const preview = await collectFirstSurveySource({ root: directory2, snapshotId: preparationId, recommendations: true, benchmark: expanded, signal });
   await verifyFirstSurveySource(directory2, preview.evidence);
   const evidence = preview.evidence, packages = preview.packages;
   const prepared = {
     preparation_id: preparationId,
     evidence,
     packages,
+    expanded,
     manifest: {
       packet_digest: setupDigest({ evidence, packages }),
       snapshot_id: preparationId,
@@ -214880,8 +215138,8 @@ async function prepareSetupSource(directory2, preparationId = randomUUID11(), si
   });
   return prepared;
 }
-async function restoreSetupSource(directory2, approved, signal) {
-  const prepared = await prepareSetupSource(directory2, approved.preparation_id, signal);
+async function restoreSetupSource(directory2, approved, signal, expanded) {
+  const prepared = await prepareSetupSource(directory2, approved.preparation_id, signal, expanded ?? approved.manifest.files.reduce((n, file) => n + file.bytes, 0) > 1e4);
   if (setupDigest(prepared.manifest) !== setupDigest(approved.manifest) || setupDigest(prepared.packages) !== setupDigest(approved.packages))
     throw new SetupError("setup_source_changed", "Application source or installed package metadata changed. Review a new source packet in the browser before analysis.");
   return prepared;
@@ -214895,12 +215153,12 @@ async function verifySetupSource(directory2, packet, signal) {
   } catch {
     throw new SetupError("setup_source_changed", "Application files changed. Review a new source packet before analysis.");
   }
-  await restoreSetupSource(directory2, packet, signal);
+  await restoreSetupSource(directory2, packet, signal, packet.expanded);
   signal?.throwIfAborted();
 }
 
 // node_modules/@userreason/cli/dist/setup-runner.js
-var terminal3 = /* @__PURE__ */ new Set(["complete", "cancelled", "expired"]);
+var terminal4 = /* @__PURE__ */ new Set(["complete", "cancelled", "expired"]);
 var localPhases = /* @__PURE__ */ new Set(["configuring", "awaiting_local_approval", "applying"]);
 function pause(milliseconds, options) {
   options.signal?.throwIfAborted();
@@ -214918,133 +215176,173 @@ function pause(milliseconds, options) {
     options.signal?.addEventListener("abort", abort, { once: true });
   });
 }
-async function runBrowserSetup(client, directory2, runtime, options = {}) {
-  directory2 = await realpath4(directory2);
-  let polls = 0;
-  while (true) {
-    let session2 = await runSetupExecutor(client, directory2, runtime, options);
-    if (terminal3.has(session2.phase) || localPhases.has(session2.phase))
-      return session2;
-    const result = await withSetupProjectLock(directory2, async () => {
-      let packet, observedPreparation;
-      let preparationAttempted = false, failedPreparationRevision, notifiedSample = false, heartbeatError;
-      const uploadAttempts = /* @__PURE__ */ new Set(), issues = /* @__PURE__ */ new Set();
-      const scope2 = { schema_version: 1, setup_id: client.identity.setup_id };
-      const accept = (next) => {
-        if (BigInt(next.revision) >= BigInt(session2.revision))
-          session2 = next;
-      };
-      const issue = (code) => {
-        if (!issues.has(code)) {
-          issues.add(code);
-          options.onSourceIssue?.(code);
-        }
-      };
-      let sourceAvailable = false;
+async function prepareEarly(client, directory2, options) {
+  const scope2 = { schema_version: 1, setup_id: client.identity.setup_id };
+  try {
+    let session2 = await client.poll();
+    if (session2.source || !(await client.discovery()).browser_setup.source_analysis)
+      return;
+    const packet = options.preparedSource ? await setupAbortable(options.preparedSource, options.signal) ?? await prepareSetupSource(directory2, randomUUID11(), options.signal, true) : await prepareSetupSource(directory2, randomUUID11(), options.signal, true);
+    let conflicts = 0;
+    while (true) {
+      session2 = await client.poll();
+      if (session2.source || terminal4.has(session2.phase))
+        return;
       try {
-        sourceAvailable = (await client.discovery()).browser_setup.source_analysis && session2.capabilities.source_review;
+        session2 = await client.sourcePlan({ ...scope2, request_id: packet.preparation_id, expected_revision: session2.revision, manifest: packet.manifest, packages: packet.packages });
+        break;
       } catch (error) {
-        if (!(error instanceof BrowserSetupUnavailable))
+        if (!(error instanceof SetupError) || error.code !== "revision_conflict" || ++conflicts >= 5)
           throw error;
       }
-      let heartbeat;
-      const timer = setInterval(() => {
-        if (heartbeat)
-          return;
-        heartbeat = client.heartbeat({ ...scope2, executor_generation: session2.executor_generation, operation_id: null, lease_generation: null }).then(accept, (error) => {
-          heartbeatError = error;
-        }).finally(() => {
-          heartbeat = void 0;
-        });
-      }, options.heartbeatMs ?? 1e4);
-      try {
-        while (true) {
-          options.signal?.throwIfAborted();
-          if (heartbeatError)
-            throw heartbeatError;
-          options.onSession?.(session2);
-          if (terminal3.has(session2.phase) || localPhases.has(session2.phase) || options.maxPolls !== void 0 && polls++ >= options.maxPolls)
-            return session2;
-          if (session2.phase === "agent_test" && session2.sample.status === "waiting" && !notifiedSample) {
-            notifiedSample = true;
-            options.onSample?.(session2);
-          }
-          const source = session2.source;
-          if (!source && failedPreparationRevision && session2.revision !== failedPreparationRevision) {
-            preparationAttempted = false;
-            failedPreparationRevision = void 0;
-            issues.clear();
-          }
-          if (source?.preparation_id !== observedPreparation) {
-            if (observedPreparation && !source)
-              preparationAttempted = false;
-            packet = void 0;
-            observedPreparation = source?.preparation_id;
-            issues.clear();
+    }
+    if (session2.source?.status !== "approved" || session2.source.preparation_id !== packet.preparation_id)
+      return;
+    await verifySetupSource(directory2, packet, options.signal);
+    options.onSession?.(session2);
+    await client.sourceUpload({ ...scope2, preparation_id: packet.preparation_id, project_fingerprint: client.identity.project_fingerprint, evidence: packet.evidence });
+  } catch (error) {
+    options.signal?.throwIfAborted();
+    options.onSourceIssue?.(error instanceof SetupError ? error.code : "source_unavailable");
+  }
+}
+async function runBrowserSetup(client, directory2, runtime, options = {}) {
+  directory2 = await realpath4(directory2);
+  const lifetime = new AbortController();
+  const runSignal = AbortSignal.any([lifetime.signal, ...options.signal ? [options.signal] : []]);
+  const base = client.withSignal?.(runSignal) ?? client;
+  const heartbeat = new SetupHeartbeat(base, { ...options, signal: runSignal });
+  client = observeSetupClient(base.withSignal?.(heartbeat.signal) ?? base, heartbeat, heartbeat.signal);
+  const suppliedSignal = options.signal;
+  options = { ...options, signal: heartbeat.signal };
+  let polls = 0;
+  const early = options.automaticSetup ? prepareEarly(client, directory2, options) : Promise.resolve();
+  void early.catch(() => {
+  });
+  try {
+    while (true) {
+      let session2;
+      session2 = await runSetupExecutor(client, directory2, runtime, options, heartbeat);
+      await early;
+      if (options.automaticSetup)
+        session2 = await client.poll();
+      if (terminal4.has(session2.phase) || localPhases.has(session2.phase))
+        return session2;
+      const result = await withSetupProjectLock(directory2, async () => {
+        let packet, observedPreparation;
+        let preparationAttempted = false, failedPreparationRevision, notifiedSample = false;
+        const uploadAttempts = /* @__PURE__ */ new Set(), issues = /* @__PURE__ */ new Set();
+        const scope2 = { schema_version: 1, setup_id: client.identity.setup_id };
+        const accept = (next) => {
+          if (BigInt(next.revision) >= BigInt(session2.revision))
+            session2 = next;
+        };
+        const issue = (code) => {
+          if (!issues.has(code)) {
+            issues.add(code);
+            options.onSourceIssue?.(code);
           }
-          if (session2.phase === "ready_for_recommendations" && !source && sourceAvailable && !preparationAttempted) {
-            preparationAttempted = true;
-            try {
-              packet = await prepareSetupSource(directory2, randomUUID12(), options.signal);
-              options.onSourcePrepared?.(packet);
-              accept(await client.sourcePlan({
-                ...scope2,
-                request_id: packet.preparation_id,
-                expected_revision: session2.revision,
-                manifest: packet.manifest,
-                packages: packet.packages
-              }));
-              observedPreparation = session2.source?.preparation_id;
-            } catch (error) {
-              options.signal?.throwIfAborted();
-              failedPreparationRevision = session2.revision;
-              issue(error instanceof SetupError ? error.code : "source_unavailable");
-            }
-          } else if (source?.status === "approved" && sourceAvailable && !uploadAttempts.has(source.preparation_id)) {
-            uploadAttempts.add(source.preparation_id);
-            try {
-              const info = await client.sourceInfo();
-              accept(info.session);
-              const approved = info.preparation, current = session2.source;
-              if (!approved || current?.status !== "approved" || approved.preparation_id !== source.preparation_id || approved.manifest.packet_digest !== current.packet_digest || approved.configuration.configuration_fingerprint !== current.provider_fingerprint)
-                throw new SetupError("setup_source_changed", "Review a new source packet in the browser.");
-              if (Date.parse(current.expires_at) <= Date.now())
-                throw new SetupError("planning_consent_expired", "Review source consent again in the browser.");
-              packet = packet?.preparation_id === approved.preparation_id ? packet : await restoreSetupSource(directory2, approved, options.signal);
-              options.onSourcePrepared?.(packet);
-              await verifySetupSource(directory2, packet, options.signal);
-              if (heartbeatError)
-                throw heartbeatError;
-              if (terminal3.has(session2.phase) || session2.source?.preparation_id !== approved.preparation_id || session2.source.status !== "approved")
-                throw new SetupError("setup_source_changed", "Source approval changed before upload.");
-              accept(await client.sourceUpload({
-                ...scope2,
-                preparation_id: packet.preparation_id,
-                project_fingerprint: client.identity.project_fingerprint,
-                evidence: packet.evidence
-              }));
+        };
+        let sourceAvailable = false;
+        try {
+          sourceAvailable = (await client.discovery()).browser_setup.source_analysis && session2.capabilities.source_review;
+        } catch (error) {
+          if (!(error instanceof BrowserSetupUnavailable))
+            throw error;
+        }
+        try {
+          while (true) {
+            heartbeat.check();
+            session2 = heartbeat.latest(session2);
+            options.onSession?.(session2);
+            if (terminal4.has(session2.phase) || localPhases.has(session2.phase) || options.maxPolls !== void 0 && polls++ >= options.maxPolls)
+              return session2;
+            if (session2.phase === "agent_test" && session2.sample.status === "waiting" && !notifiedSample) {
+              notifiedSample = true;
+              options.onSample?.(session2);
+            }
+            const source = session2.source;
+            if (!source && failedPreparationRevision && session2.revision !== failedPreparationRevision) {
+              preparationAttempted = false;
+              failedPreparationRevision = void 0;
+              issues.clear();
+            }
+            if (source?.preparation_id !== observedPreparation) {
+              if (observedPreparation && !source)
+                preparationAttempted = false;
               packet = void 0;
-            } catch (error) {
-              options.signal?.throwIfAborted();
-              issue(error instanceof SetupError ? error.code : "source_unavailable");
+              observedPreparation = source?.preparation_id;
+              issues.clear();
+            }
+            if (session2.phase === "ready_for_recommendations" && !source && sourceAvailable && !preparationAttempted) {
+              preparationAttempted = true;
+              try {
+                packet = await prepareSetupSource(directory2, randomUUID11(), options.signal, options.automaticSetup);
+                options.onSourcePrepared?.(packet);
+                accept(await client.sourcePlan({
+                  ...scope2,
+                  request_id: packet.preparation_id,
+                  expected_revision: session2.revision,
+                  manifest: packet.manifest,
+                  packages: packet.packages
+                }));
+                observedPreparation = session2.source?.preparation_id;
+              } catch (error) {
+                options.signal?.throwIfAborted();
+                failedPreparationRevision = session2.revision;
+                issue(error instanceof SetupError ? error.code : "source_unavailable");
+              }
+            } else if (source?.status === "approved" && sourceAvailable && !uploadAttempts.has(source.preparation_id)) {
+              uploadAttempts.add(source.preparation_id);
+              try {
+                const info = await client.sourceInfo();
+                accept(info.session);
+                const approved = info.preparation, current = session2.source;
+                if (!approved || current?.status !== "approved" || approved.preparation_id !== source.preparation_id || approved.manifest.packet_digest !== current.packet_digest || approved.configuration.configuration_fingerprint !== current.provider_fingerprint)
+                  throw new SetupError("setup_source_changed", "Review a new source packet in the browser.");
+                if (Date.parse(current.expires_at) <= Date.now())
+                  throw new SetupError("planning_consent_expired", "Review source consent again in the browser.");
+                packet = packet?.preparation_id === approved.preparation_id ? packet : await restoreSetupSource(directory2, approved, options.signal, options.automaticSetup);
+                options.onSourcePrepared?.(packet);
+                await verifySetupSource(directory2, packet, options.signal);
+                heartbeat.check();
+                if (terminal4.has(session2.phase) || session2.source?.preparation_id !== approved.preparation_id || session2.source.status !== "approved")
+                  throw new SetupError("setup_source_changed", "Source approval changed before upload.");
+                accept(await client.sourceUpload({
+                  ...scope2,
+                  preparation_id: packet.preparation_id,
+                  project_fingerprint: client.identity.project_fingerprint,
+                  evidence: packet.evidence
+                }));
+                packet = void 0;
+              } catch (error) {
+                options.signal?.throwIfAborted();
+                issue(error instanceof SetupError ? error.code : "source_unavailable");
+              }
             }
+            await pause(options.pollMs ?? 2e3, options);
+            accept(await client.poll());
           }
-          await pause(options.pollMs ?? 2e3, options);
-          accept(await client.poll());
+        } finally {
+          packet = void 0;
         }
-      } finally {
-        clearInterval(timer);
-        await heartbeat;
-        packet = void 0;
-      }
-    });
-    if (!localPhases.has(result.phase) || options.maxPolls !== void 0)
-      return result;
+      });
+      if (!localPhases.has(result.phase) || options.maxPolls !== void 0)
+        return result;
+    }
+  } catch (error) {
+    const current = heartbeat.current;
+    if (!suppliedSignal?.aborted && current && terminal4.has(current.phase))
+      return current;
+    throw error;
+  } finally {
+    lifetime.abort(new Error("Setup run ended"));
+    await Promise.allSettled([early, heartbeat.stop()]);
   }
 }
 
 // node_modules/@userreason/cli/dist/project.js
-var import_typescript = __toESM(require_typescript(), 1);
+var import_typescript2 = __toESM(require_typescript(), 1);
 
 // node_modules/@userreason/cli/dist/help.js
 var GROUPS = [
@@ -215088,8 +215386,6 @@ export {
   ToolTelemetry,
   firstSurveyHandoff,
   firstSurvey,
-  prepareFirstSurveyLocally,
-  recommendedSurveys,
   SetupError,
   withSetupProjectLock,
   BrowserSetupUnavailable,
@@ -215100,6 +215396,7 @@ export {
   readSetupFile,
   writeSetupFile,
   verifySetupFiles,
+  sanitizeSetupDiagnostic,
   runSetupExecutor,
   detectSetupTerminal,
   runBrowserSetup