blume 1.7.2 → 2.0.0

package/dist/cli/chunk-f2972sbt.js.map

@@ -0,0 +1,10 @@
+{
+  "version": 3,
+  "sources": ["../src/core/component-overrides.ts"],
+  "sourcesContent": [
+    "import { existsSync } from \"node:fs\";\n\nimport { basename, dirname, extname, isAbsolute, join, resolve } from \"pathe\";\nimport ts from \"typescript\";\n\nimport { BlumeError } from \"./diagnostics.ts\";\nimport type { HydrationMode } from \"./schema.ts\";\nimport type { Diagnostic } from \"./types.ts\";\n\n/**\n * Static analysis of a user `components.ts`/`.tsx`.\n *\n * Astro can only hydrate a component it imports *statically by path*, so to honor\n * hydration on overrides Blume needs each override's source path and client mode\n * at generate time — before Vite compiles anything. We read that here by parsing\n * the file with the TypeScript compiler API (never executing it, so `.astro`/React\n * imports don't need a Node loader).\n *\n * Only statically-analyzable authoring is accepted: a default export that is an\n * object literal or a `defineComponents({ ... })` call, whose `mdx`/`layout`\n * groups are object literals with entries that are imported identifiers, path\n * strings, or `{ component, client, media }` object literals, and a relative\n * or absolute path must name a file that exists. Anything else is a config\n * error ({@link ComponentOverridesError}, `BLUME_COMPONENTS_INVALID`) naming the\n * entry, its line, and the accepted forms — there is no runtime fallback, so an\n * override that can't be planned never silently renders without hydration, and\n * a missing file never surfaces as a bundler error inside the generated runtime.\n */\n\nexport type OverrideFramework = \"react\" | \"svelte\" | \"vue\";\n\n/** How a wrapper should import an override's component. */\nexport interface OverrideImport {\n  /** Framework inferred from the file extension, or null (e.g. `.astro`). */\n  framework: OverrideFramework | null;\n  /** Exported name to import: `\"default\"` or a named export. */\n  name: string;\n  /** Absolute path (for relative/absolute specifiers) or a bare specifier. */\n  path: string;\n}\n\n/** A normalized override entry, keyed by its MDX tag / layout-slot name. */\nexport interface NormalizedOverride {\n  /** Present when the override should hydrate; drives the `client:*` directive. */\n  client?: HydrationMode;\n  key: string;\n  /** Media query for `client: \"media\"`. */\n  media?: string;\n  /** How to obtain the component. */\n  source: OverrideImport;\n}\n\nexport interface ComponentOverrideAnalysis {\n  layout: NormalizedOverride[];\n  mdx: NormalizedOverride[];\n  warnings: string[];\n}\n\n/** The analysis of a project with no `components.ts`. */\nexport const emptyComponentOverrides = (): ComponentOverrideAnalysis => ({\n  layout: [],\n  mdx: [],\n  warnings: [],\n});\n\nconst GROUPS = [\"mdx\", \"layout\"] as const;\nconst GROUP_SET = new Set<string>(GROUPS);\ntype Group = (typeof GROUPS)[number];\n\nconst isGroup = (name: string): name is Group => GROUP_SET.has(name);\n\n/** The authoring forms an override accepts; the fix every rejection points at. */\nexport const ACCEPTED_OVERRIDE_FORMS =\n  \"Each override must be an imported identifier, a path string, or a `{ component, client, media }` object literal whose `component` is an imported identifier or a path string.\";\n\nconst FRAMEWORK_BY_EXT = new Map<string, OverrideFramework>([\n  [\"jsx\", \"react\"],\n  [\"svelte\", \"svelte\"],\n  [\"tsx\", \"react\"],\n  [\"vue\", \"vue\"],\n]);\n\nconst FRAMEWORK_LABEL = {\n  react: \"React\",\n  svelte: \"Svelte\",\n  vue: \"Vue\",\n} satisfies Record<OverrideFramework, string>;\n\n/** Extensions probed (in order) when a specifier omits one. */\nconst COMPONENT_EXTS = [\n  \"astro\",\n  \"tsx\",\n  \"ts\",\n  \"jsx\",\n  \"js\",\n  \"mjs\",\n  \"vue\",\n  \"svelte\",\n];\n\nconst HYDRATION_MODES: ReadonlySet<string> = new Set<HydrationMode>([\n  \"idle\",\n  \"load\",\n  \"media\",\n  \"only\",\n  \"visible\",\n]);\n\nconst HYDRATION_MODE_LIST = '\"load\", \"idle\", \"visible\", \"media\", or \"only\"';\n\nconst isHydrationMode = (value: string): value is HydrationMode =>\n  HYDRATION_MODES.has(value);\n\ninterface ImportBinding {\n  /** Exported name: `\"default\"` or a named export. */\n  imported: string;\n  /** The import statement, where a missing file is reported. */\n  node: ts.ImportDeclaration;\n  specifier: string;\n}\n\n/** Why one entry was rejected, and the node it's about (for its line). */\ninterface Rejection {\n  message: string;\n  /** A path that names no file: the fix is the path, not the entry's form. */\n  missingFile?: boolean;\n  node?: ts.Node;\n}\n\n/** An override's declared component before framework/path resolution. */\ninterface RawDescriptor {\n  client?: HydrationMode;\n  media?: string;\n  source: OverrideImport | null;\n}\n\n/** Everything one analysis pass needs to resolve and report an entry. */\ninterface AnalysisContext {\n  dir: string;\n  /** Rejections collected across the file; thrown together at the end. */\n  errors: Rejection[];\n  imports: Map<string, ImportBinding>;\n  warnings: string[];\n}\n\nconst reject = (\n  context: AnalysisContext,\n  message: string,\n  node?: ts.Node,\n  missingFile?: boolean\n): void => {\n  context.errors.push({ message, missingFile, node });\n};\n\nconst propName = (name: ts.PropertyName): string | undefined =>\n  ts.isIdentifier(name) || ts.isStringLiteral(name) ? name.text : undefined;\n\n/** Record the bindings declared by one import statement into `map`. */\nconst addImportBindings = (\n  map: Map<string, ImportBinding>,\n  statement: ts.Statement\n): void => {\n  if (\n    !ts.isImportDeclaration(statement) ||\n    !ts.isStringLiteral(statement.moduleSpecifier)\n  ) {\n    return;\n  }\n  const specifier = statement.moduleSpecifier.text;\n  const clause = statement.importClause;\n  if (!clause) {\n    return;\n  }\n  if (clause.name) {\n    map.set(clause.name.text, {\n      imported: \"default\",\n      node: statement,\n      specifier,\n    });\n  }\n  const named = clause.namedBindings;\n  if (named && ts.isNamedImports(named)) {\n    for (const element of named.elements) {\n      map.set(element.name.text, {\n        imported: (element.propertyName ?? element.name).text,\n        node: statement,\n        specifier,\n      });\n    }\n  }\n};\n\n/** Map each local binding name to the module + exported name it came from. */\nconst collectImports = (\n  sourceFile: ts.SourceFile\n): Map<string, ImportBinding> => {\n  const map = new Map<string, ImportBinding>();\n  for (const statement of sourceFile.statements) {\n    addImportBindings(map, statement);\n  }\n  return map;\n};\n\n/** Unwrap `defineComponents({...})`, `({...})`, or `{...} as T` to the object. */\nconst unwrapObject = (\n  expression: ts.Expression\n): ts.ObjectLiteralExpression | undefined => {\n  if (ts.isObjectLiteralExpression(expression)) {\n    return expression;\n  }\n  if (ts.isCallExpression(expression)) {\n    const [arg] = expression.arguments;\n    return arg && ts.isObjectLiteralExpression(arg) ? arg : undefined;\n  }\n  if (\n    ts.isAsExpression(expression) ||\n    ts.isParenthesizedExpression(expression)\n  ) {\n    return unwrapObject(expression.expression);\n  }\n  return undefined;\n};\n\nconst findDefaultExport = (\n  sourceFile: ts.SourceFile\n): ts.ExportAssignment | undefined =>\n  sourceFile.statements.find(\n    (statement): statement is ts.ExportAssignment =>\n      ts.isExportAssignment(statement) && !statement.isExportEquals\n  );\n\nconst probeExtension = (base: string): string | null => {\n  for (const extension of COMPONENT_EXTS) {\n    const candidate = `${base}.${extension}`;\n    if (existsSync(candidate)) {\n      return candidate;\n    }\n  }\n  return null;\n};\n\n// A `.js` specifier in a TypeScript file may name its `.ts`/`.tsx` source, as\n// Vite resolves it; the same holds for `.jsx` and `.mjs`.\nconst SCRIPT_EXT = /\\.(?:jsx?|mjs)$/u;\nconst TS_SOURCE_EXTS = [\"ts\", \"tsx\", \"mts\"];\n\n/**\n * Whether a local path names something the bundler can import: the file\n * itself, the file with a component extension added, a folder's `index`, or\n * the TypeScript source a `.js` specifier stands for.\n */\nconst resolvesLocally = (absolute: string): boolean => {\n  if (existsSync(absolute) || probeExtension(absolute)) {\n    return true;\n  }\n  if (probeExtension(join(absolute, \"index\"))) {\n    return true;\n  }\n  const base = absolute.replace(SCRIPT_EXT, \"\");\n  return (\n    base !== absolute &&\n    TS_SOURCE_EXTS.some((extension) => existsSync(`${base}.${extension}`))\n  );\n};\n\n/** Resolve a module specifier to a wrapper-importable path + framework. */\nconst toImport = (\n  specifier: string,\n  imported: string,\n  dir: string\n): OverrideImport => {\n  const relative = specifier.startsWith(\".\") || isAbsolute(specifier);\n  let path = specifier;\n  let extension = extname(specifier).slice(1).toLowerCase();\n  if (relative) {\n    const absolute = isAbsolute(specifier)\n      ? specifier\n      : resolve(dir, specifier);\n    if (extension) {\n      path = absolute;\n    } else {\n      const probed = probeExtension(absolute);\n      path = probed ?? absolute;\n      extension = probed ? extname(probed).slice(1).toLowerCase() : \"\";\n    }\n  }\n  return {\n    framework: FRAMEWORK_BY_EXT.get(extension) ?? null,\n    name: imported,\n    path,\n  };\n};\n\n/**\n * Resolve a specifier to its import, or record that the file it names doesn't\n * exist. A bare package specifier is left to the bundler.\n */\nconst sourceFor = (\n  specifier: string,\n  imported: string,\n  label: string,\n  node: ts.Node,\n  context: AnalysisContext\n): OverrideImport | null => {\n  const local = specifier.startsWith(\".\") || isAbsolute(specifier);\n  if (local && !resolvesLocally(resolve(context.dir, specifier))) {\n    reject(\n      context,\n      `${label} points at \"${specifier}\", but no file exists there; fix the path or restore the file.`,\n      node,\n      true\n    );\n    return null;\n  }\n  return toImport(specifier, imported, context.dir);\n};\n\n/**\n * Resolve an identifier to the import it names, or record why it can't be: a\n * local binding (a `const`, a function declared in the file) has no source path\n * a wrapper could import.\n */\nconst resolveIdentifier = (\n  name: string,\n  label: string,\n  node: ts.Node,\n  context: AnalysisContext\n): OverrideImport | null => {\n  const binding = context.imports.get(name);\n  if (binding) {\n    return sourceFor(\n      binding.specifier,\n      binding.imported,\n      label,\n      binding.node,\n      context\n    );\n  }\n  reject(\n    context,\n    `${label} refers to \"${name}\", which isn't imported in this file; import the component from its file.`,\n    node\n  );\n  return null;\n};\n\nconst ALLOWED_FIELDS =\n  \"only `component`, `client`, and `media` are allowed in a descriptor.\";\n\n/** Fold one descriptor-object property into the accumulating descriptor. */\nconst applyDescriptorProperty = (\n  descriptor: RawDescriptor,\n  property: ts.ObjectLiteralElementLike,\n  label: string,\n  context: AnalysisContext\n): void => {\n  if (ts.isShorthandPropertyAssignment(property)) {\n    if (property.name.text === \"component\") {\n      descriptor.source = resolveIdentifier(\n        property.name.text,\n        `${label}'s \\`component\\``,\n        property,\n        context\n      );\n      return;\n    }\n    const shorthand = property.name.text;\n    if (shorthand === \"client\" || shorthand === \"media\") {\n      reject(\n        context,\n        `${label} writes \\`${shorthand}\\` as a shorthand property; only \\`component\\` may be shorthand, \\`${shorthand}\\` must be a string literal.`,\n        property\n      );\n      return;\n    }\n    reject(\n      context,\n      `${label} has a \\`${shorthand}\\` field; ${ALLOWED_FIELDS}`,\n      property\n    );\n    return;\n  }\n  if (!ts.isPropertyAssignment(property)) {\n    reject(\n      context,\n      `${label} contains a spread, method, or accessor; write it as a plain \\`{ component, client, media }\\` object literal.`,\n      property\n    );\n    return;\n  }\n  const name = propName(property.name);\n  const init = property.initializer;\n  if (name === \"component\") {\n    if (ts.isStringLiteral(init)) {\n      descriptor.source = sourceFor(\n        init.text,\n        \"default\",\n        `${label}'s \\`component\\``,\n        init,\n        context\n      );\n    } else if (ts.isIdentifier(init)) {\n      descriptor.source = resolveIdentifier(\n        init.text,\n        `${label}'s \\`component\\``,\n        init,\n        context\n      );\n    } else {\n      reject(\n        context,\n        `${label}'s \\`component\\` must be an imported identifier or a path string.`,\n        init\n      );\n    }\n  } else if (name === \"client\") {\n    if (ts.isStringLiteral(init) && isHydrationMode(init.text)) {\n      descriptor.client = init.text;\n    } else {\n      reject(\n        context,\n        `${label}'s \\`client\\` must be a string literal: ${HYDRATION_MODE_LIST}.`,\n        init\n      );\n    }\n  } else if (name === \"media\") {\n    if (ts.isStringLiteral(init)) {\n      descriptor.media = init.text;\n    } else {\n      reject(context, `${label}'s \\`media\\` must be a string literal.`, init);\n    }\n  } else {\n    reject(\n      context,\n      `${label} has a \\`${name ?? property.name.getText()}\\` field; ${ALLOWED_FIELDS}`,\n      property\n    );\n  }\n};\n\n/**\n * Read a `{ component, client, media }` descriptor. Returns null (after\n * recording the reason) when it can't be planned.\n */\nconst readDescriptor = (\n  object: ts.ObjectLiteralExpression,\n  label: string,\n  context: AnalysisContext\n): RawDescriptor | null => {\n  const descriptor: RawDescriptor = { source: null };\n  const before = context.errors.length;\n  let hadComponent = false;\n  for (const property of object.properties) {\n    if (property.name && propName(property.name) === \"component\") {\n      hadComponent = true;\n    }\n    applyDescriptorProperty(descriptor, property, label, context);\n  }\n  if (!hadComponent) {\n    reject(\n      context,\n      `${label} is an object literal without a \\`component\\` field.`,\n      object\n    );\n  }\n  return context.errors.length === before ? descriptor : null;\n};\n\n/** Apply cross-cutting validation and produce the final normalized override. */\nconst finalize = (\n  key: string,\n  descriptor: RawDescriptor,\n  label: string,\n  warnings: string[]\n): NormalizedOverride | null => {\n  const { client, media, source } = descriptor;\n  if (!source) {\n    return null;\n  }\n\n  if (client === \"media\" && !media) {\n    warnings.push(\n      `Override \"${key}\" uses client: \"media\" but no \\`media\\` query was given; it will hydrate as if \\`client: \"load\"\\`.`\n    );\n  }\n\n  if (client === \"only\" && !source.framework) {\n    warnings.push(\n      `Override \"${key}\" uses client: \"only\" but its framework couldn't be inferred; reference a .tsx/.jsx/.vue/.svelte file.`\n    );\n  }\n\n  if (!client && source.framework) {\n    warnings.push(\n      `Override \"${key}\" points to a ${FRAMEWORK_LABEL[source.framework]} component (${label}) but has no hydration mode, so it renders as static HTML with no interactivity. Add one, e.g. \\`${key}: { component: ${JSON.stringify(label)}, client: \"load\" }\\`.`\n    );\n  }\n\n  const normalized: NormalizedOverride = { key, source };\n  if (client) {\n    normalized.client = client;\n  }\n  if (media) {\n    normalized.media = media;\n  }\n  return normalized;\n};\n\n/** Normalize one `key: value` entry of a group, or record why it's rejected. */\nconst normalizeEntry = (\n  entry: ts.ObjectLiteralElementLike,\n  group: Group,\n  context: AnalysisContext\n): NormalizedOverride | null => {\n  const { warnings } = context;\n\n  if (ts.isShorthandPropertyAssignment(entry)) {\n    const name = entry.name.text;\n    return finalize(\n      name,\n      { source: resolveIdentifier(name, `${group}.${name}`, entry, context) },\n      name,\n      warnings\n    );\n  }\n\n  if (ts.isSpreadAssignment(entry)) {\n    reject(\n      context,\n      `${group} contains a spread (\\`...${entry.expression.getText()}\\`); list each override explicitly.`,\n      entry\n    );\n    return null;\n  }\n  const key = propName(entry.name);\n  if (!key) {\n    reject(\n      context,\n      `${group} has an entry with a computed key (\\`${entry.name.getText()}\\`); keys must be plain names.`,\n      entry\n    );\n    return null;\n  }\n  const label = `${group}.${key}`;\n  if (!ts.isPropertyAssignment(entry)) {\n    reject(\n      context,\n      `${label} is a method or accessor, which Blume can't analyze statically.`,\n      entry\n    );\n    return null;\n  }\n  const value = entry.initializer;\n\n  if (ts.isIdentifier(value)) {\n    return finalize(\n      key,\n      { source: resolveIdentifier(value.text, label, entry, context) },\n      value.text,\n      warnings\n    );\n  }\n  if (ts.isStringLiteral(value)) {\n    return finalize(\n      key,\n      { source: sourceFor(value.text, \"default\", label, value, context) },\n      value.text,\n      warnings\n    );\n  }\n  if (ts.isObjectLiteralExpression(value)) {\n    const descriptor = readDescriptor(value, label, context);\n    return descriptor ? finalize(key, descriptor, key, warnings) : null;\n  }\n\n  reject(\n    context,\n    `${label} is an inline expression, which Blume can't analyze statically.`,\n    entry\n  );\n  return null;\n};\n\n/** Normalize one top-level `{ mdx | layout }` group into `result`. */\nconst collectGroupOverrides = (\n  property: ts.ObjectLiteralElementLike,\n  context: AnalysisContext,\n  result: ComponentOverrideAnalysis\n): void => {\n  if (ts.isSpreadAssignment(property)) {\n    reject(\n      context,\n      `The top-level object contains a spread (\\`...${property.expression.getText()}\\`); list \\`mdx\\` and \\`layout\\` explicitly.`,\n      property\n    );\n    return;\n  }\n  const name = propName(property.name);\n  if (name === \"islands\") {\n    reject(\n      context,\n      'The `islands` group was folded into `mdx`: move each entry there and give it a `client` mode, e.g. `mdx: { Counter: { component: Counter, client: \"visible\" } }`.',\n      property\n    );\n    return;\n  }\n  if (!(name && isGroup(name))) {\n    reject(\n      context,\n      `\\`${name ?? property.name.getText()}\\` isn't an override group; use \\`mdx\\` or \\`layout\\`.`,\n      property\n    );\n    return;\n  }\n  if (\n    !ts.isPropertyAssignment(property) ||\n    !ts.isObjectLiteralExpression(property.initializer)\n  ) {\n    reject(\n      context,\n      `\\`${name}\\` must be an object literal of overrides.`,\n      property\n    );\n    return;\n  }\n  for (const entry of property.initializer.properties) {\n    const normalized = normalizeEntry(entry, name, context);\n    if (normalized) {\n      result[name].push(normalized);\n    }\n  }\n};\n\n/**\n * A `components.ts` Blume can't plan. The diagnostic lists every rejected entry\n * at once (at the first one's line); `issues` holds each on its own, with its\n * line, for a caller that reports them one by one (`blume upgrade`).\n */\nexport class ComponentOverridesError extends BlumeError {\n  readonly issues: Diagnostic[];\n\n  constructor(diagnostic: Diagnostic, issues: Diagnostic[]) {\n    super(diagnostic);\n    this.name = \"ComponentOverridesError\";\n    this.issues = issues;\n  }\n}\n\n/** A rejection as a diagnostic, at its node's line when it has one. */\nconst rejectionDiagnostic = (\n  filePath: string,\n  sourceFile: ts.SourceFile,\n  rejection: Rejection\n): Diagnostic => {\n  const position = rejection.node\n    ? sourceFile.getLineAndCharacterOfPosition(\n        rejection.node.getStart(sourceFile)\n      )\n    : undefined;\n  return {\n    code: \"BLUME_COMPONENTS_INVALID\",\n    column: position && position.character + 1,\n    file: filePath,\n    line: position && position.line + 1,\n    message: rejection.message,\n    severity: \"error\",\n    suggestion: rejection.missingFile ? undefined : ACCEPTED_OVERRIDE_FORMS,\n  };\n};\n\nconst invalidOverrides = (\n  filePath: string,\n  sourceFile: ts.SourceFile,\n  rejections: Rejection[]\n): ComponentOverridesError => {\n  const issues = rejections.map((rejection) =>\n    rejectionDiagnostic(filePath, sourceFile, rejection)\n  );\n  const first = issues.find((issue) => issue.line !== undefined);\n  return new ComponentOverridesError(\n    {\n      code: \"BLUME_COMPONENTS_INVALID\",\n      column: first?.column,\n      file: filePath,\n      line: first?.line,\n      message: `${basename(filePath)} has ${rejections.length} override(s) Blume can't plan:\\n${rejections.map((rejection) => `  - ${rejection.message}`).join(\"\\n\")}`,\n      severity: \"error\",\n      suggestion: rejections.every((rejection) => rejection.missingFile)\n        ? undefined\n        : ACCEPTED_OVERRIDE_FORMS,\n    },\n    issues\n  );\n};\n\n/**\n * Parse a user `components.ts`/`.tsx` and return its normalized overrides. Never\n * executes the file. Throws a `BLUME_COMPONENTS_INVALID`\n * {@link ComponentOverridesError} listing every entry that isn't one of the\n * accepted forms or points at a file that doesn't exist.\n */\nexport const analyzeComponentOverrides = (\n  source: string,\n  filePath: string\n): ComponentOverrideAnalysis => {\n  const result = emptyComponentOverrides();\n  const sourceFile = ts.createSourceFile(\n    filePath,\n    source,\n    ts.ScriptTarget.Latest,\n    true,\n    filePath.endsWith(\"tsx\") ? ts.ScriptKind.TSX : ts.ScriptKind.TS\n  );\n\n  const exported = findDefaultExport(sourceFile);\n  if (!exported) {\n    throw invalidOverrides(filePath, sourceFile, [\n      {\n        message:\n          \"No default export was found; export `defineComponents({ mdx, layout })` (or a plain object literal) as the default.\",\n      },\n    ]);\n  }\n  const object = unwrapObject(exported.expression);\n  if (!object) {\n    throw invalidOverrides(filePath, sourceFile, [\n      {\n        message:\n          \"The default export isn't an object literal or a `defineComponents({ ... })` call.\",\n        node: exported,\n      },\n    ]);\n  }\n\n  const context: AnalysisContext = {\n    dir: dirname(filePath),\n    errors: [],\n    imports: collectImports(sourceFile),\n    warnings: result.warnings,\n  };\n\n  for (const property of object.properties) {\n    collectGroupOverrides(property, context, result);\n  }\n\n  if (context.errors.length > 0) {\n    throw invalidOverrides(filePath, sourceFile, context.errors);\n  }\n  return result;\n};\n"
+  ],
+  "mappings": ";;;;;;AAAA;AAEA;AACA;AAwDO,IAAM,0BAA0B,OAAkC;AAAA,EACvE,QAAQ,CAAC;AAAA,EACT,KAAK,CAAC;AAAA,EACN,UAAU,CAAC;AACb;AAEA,IAAM,SAAS,CAAC,OAAO,QAAQ;AAC/B,IAAM,YAAY,IAAI,IAAY,MAAM;AAGxC,IAAM,UAAU,CAAC,SAAgC,UAAU,IAAI,IAAI;AAG5D,IAAM,0BACX;AAEF,IAAM,mBAAmB,IAAI,IAA+B;AAAA,EAC1D,CAAC,OAAO,OAAO;AAAA,EACf,CAAC,UAAU,QAAQ;AAAA,EACnB,CAAC,OAAO,OAAO;AAAA,EACf,CAAC,OAAO,KAAK;AACf,CAAC;AAED,IAAM,kBAAkB;AAAA,EACtB,OAAO;AAAA,EACP,QAAQ;AAAA,EACR,KAAK;AACP;AAGA,IAAM,iBAAiB;AAAA,EACrB;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAEA,IAAM,kBAAuC,IAAI,IAAmB;AAAA,EAClE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAED,IAAM,sBAAsB;AAE5B,IAAM,kBAAkB,CAAC,UACvB,gBAAgB,IAAI,KAAK;AAkC3B,IAAM,SAAS,CACb,SACA,SACA,MACA,gBACS;AAAA,EACT,QAAQ,OAAO,KAAK,EAAE,SAAS,aAAa,KAAK,CAAC;AAAA;AAGpD,IAAM,WAAW,CAAC,SAChB,GAAG,aAAa,IAAI,KAAK,GAAG,gBAAgB,IAAI,IAAI,KAAK,OAAO;AAGlE,IAAM,oBAAoB,CACxB,KACA,cACS;AAAA,EACT,IACE,CAAC,GAAG,oBAAoB,SAAS,KACjC,CAAC,GAAG,gBAAgB,UAAU,eAAe,GAC7C;AAAA,IACA;AAAA,EACF;AAAA,EACA,MAAM,YAAY,UAAU,gBAAgB;AAAA,EAC5C,MAAM,SAAS,UAAU;AAAA,EACzB,IAAI,CAAC,QAAQ;AAAA,IACX;AAAA,EACF;AAAA,EACA,IAAI,OAAO,MAAM;AAAA,IACf,IAAI,IAAI,OAAO,KAAK,MAAM;AAAA,MACxB,UAAU;AAAA,MACV,MAAM;AAAA,MACN;AAAA,IACF,CAAC;AAAA,EACH;AAAA,EACA,MAAM,QAAQ,OAAO;AAAA,EACrB,IAAI,SAAS,GAAG,eAAe,KAAK,GAAG;AAAA,IACrC,WAAW,WAAW,MAAM,UAAU;AAAA,MACpC,IAAI,IAAI,QAAQ,KAAK,MAAM;AAAA,QACzB,WAAW,QAAQ,gBAAgB,QAAQ,MAAM;AAAA,QACjD,MAAM;AAAA,QACN;AAAA,MACF,CAAC;AAAA,IACH;AAAA,EACF;AAAA;AAIF,IAAM,iBAAiB,CACrB,eAC+B;AAAA,EAC/B,MAAM,MAAM,IAAI;AAAA,EAChB,WAAW,aAAa,WAAW,YAAY;AAAA,IAC7C,kBAAkB,KAAK,SAAS;AAAA,EAClC;AAAA,EACA,OAAO;AAAA;AAIT,IAAM,eAAe,CACnB,eAC2C;AAAA,EAC3C,IAAI,GAAG,0BAA0B,UAAU,GAAG;AAAA,IAC5C,OAAO;AAAA,EACT;AAAA,EACA,IAAI,GAAG,iBAAiB,UAAU,GAAG;AAAA,IACnC,OAAO,OAAO,WAAW;AAAA,IACzB,OAAO,OAAO,GAAG,0BAA0B,GAAG,IAAI,MAAM;AAAA,EAC1D;AAAA,EACA,IACE,GAAG,eAAe,UAAU,KAC5B,GAAG,0BAA0B,UAAU,GACvC;AAAA,IACA,OAAO,aAAa,WAAW,UAAU;AAAA,EAC3C;AAAA,EACA;AAAA;AAGF,IAAM,oBAAoB,CACxB,eAEA,WAAW,WAAW,KACpB,CAAC,cACC,GAAG,mBAAmB,SAAS,KAAK,CAAC,UAAU,cACnD;AAEF,IAAM,iBAAiB,CAAC,SAAgC;AAAA,EACtD,WAAW,aAAa,gBAAgB;AAAA,IACtC,MAAM,YAAY,GAAG,QAAQ;AAAA,IAC7B,IAAI,WAAW,SAAS,GAAG;AAAA,MACzB,OAAO;AAAA,IACT;AAAA,EACF;AAAA,EACA,OAAO;AAAA;AAKT,IAAM,aAAa;AACnB,IAAM,iBAAiB,CAAC,MAAM,OAAO,KAAK;AAO1C,IAAM,kBAAkB,CAAC,aAA8B;AAAA,EACrD,IAAI,WAAW,QAAQ,KAAK,eAAe,QAAQ,GAAG;AAAA,IACpD,OAAO;AAAA,EACT;AAAA,EACA,IAAI,eAAe,KAAK,UAAU,OAAO,CAAC,GAAG;AAAA,IAC3C,OAAO;AAAA,EACT;AAAA,EACA,MAAM,OAAO,SAAS,QAAQ,YAAY,EAAE;AAAA,EAC5C,OACE,SAAS,YACT,eAAe,KAAK,CAAC,cAAc,WAAW,GAAG,QAAQ,WAAW,CAAC;AAAA;AAKzE,IAAM,WAAW,CACf,WACA,UACA,QACmB;AAAA,EACnB,MAAM,WAAW,UAAU,WAAW,GAAG,KAAK,WAAW,SAAS;AAAA,EAClE,IAAI,OAAO;AAAA,EACX,IAAI,YAAY,QAAQ,SAAS,EAAE,MAAM,CAAC,EAAE,YAAY;AAAA,EACxD,IAAI,UAAU;AAAA,IACZ,MAAM,WAAW,WAAW,SAAS,IACjC,YACA,QAAQ,KAAK,SAAS;AAAA,IAC1B,IAAI,WAAW;AAAA,MACb,OAAO;AAAA,IACT,EAAO;AAAA,MACL,MAAM,SAAS,eAAe,QAAQ;AAAA,MACtC,OAAO,UAAU;AAAA,MACjB,YAAY,SAAS,QAAQ,MAAM,EAAE,MAAM,CAAC,EAAE,YAAY,IAAI;AAAA;AAAA,EAElE;AAAA,EACA,OAAO;AAAA,IACL,WAAW,iBAAiB,IAAI,SAAS,KAAK;AAAA,IAC9C,MAAM;AAAA,IACN;AAAA,EACF;AAAA;AAOF,IAAM,YAAY,CAChB,WACA,UACA,OACA,MACA,YAC0B;AAAA,EAC1B,MAAM,QAAQ,UAAU,WAAW,GAAG,KAAK,WAAW,SAAS;AAAA,EAC/D,IAAI,SAAS,CAAC,gBAAgB,QAAQ,QAAQ,KAAK,SAAS,CAAC,GAAG;AAAA,IAC9D,OACE,SACA,GAAG,oBAAoB,2EACvB,MACA,IACF;AAAA,IACA,OAAO;AAAA,EACT;AAAA,EACA,OAAO,SAAS,WAAW,UAAU,QAAQ,GAAG;AAAA;AAQlD,IAAM,oBAAoB,CACxB,MACA,OACA,MACA,YAC0B;AAAA,EAC1B,MAAM,UAAU,QAAQ,QAAQ,IAAI,IAAI;AAAA,EACxC,IAAI,SAAS;AAAA,IACX,OAAO,UACL,QAAQ,WACR,QAAQ,UACR,OACA,QAAQ,MACR,OACF;AAAA,EACF;AAAA,EACA,OACE,SACA,GAAG,oBAAoB,iFACvB,IACF;AAAA,EACA,OAAO;AAAA;AAGT,IAAM,iBACJ;AAGF,IAAM,0BAA0B,CAC9B,YACA,UACA,OACA,YACS;AAAA,EACT,IAAI,GAAG,8BAA8B,QAAQ,GAAG;AAAA,IAC9C,IAAI,SAAS,KAAK,SAAS,aAAa;AAAA,MACtC,WAAW,SAAS,kBAClB,SAAS,KAAK,MACd,GAAG,yBACH,UACA,OACF;AAAA,MACA;AAAA,IACF;AAAA,IACA,MAAM,YAAY,SAAS,KAAK;AAAA,IAChC,IAAI,cAAc,YAAY,cAAc,SAAS;AAAA,MACnD,OACE,SACA,GAAG,kBAAkB,+EAA+E,yCACpG,QACF;AAAA,MACA;AAAA,IACF;AAAA,IACA,OACE,SACA,GAAG,iBAAiB,sBAAsB,kBAC1C,QACF;AAAA,IACA;AAAA,EACF;AAAA,EACA,IAAI,CAAC,GAAG,qBAAqB,QAAQ,GAAG;AAAA,IACtC,OACE,SACA,GAAG,sHACH,QACF;AAAA,IACA;AAAA,EACF;AAAA,EACA,MAAM,OAAO,SAAS,SAAS,IAAI;AAAA,EACnC,MAAM,OAAO,SAAS;AAAA,EACtB,IAAI,SAAS,aAAa;AAAA,IACxB,IAAI,GAAG,gBAAgB,IAAI,GAAG;AAAA,MAC5B,WAAW,SAAS,UAClB,KAAK,MACL,WACA,GAAG,yBACH,MACA,OACF;AAAA,IACF,EAAO,SAAI,GAAG,aAAa,IAAI,GAAG;AAAA,MAChC,WAAW,SAAS,kBAClB,KAAK,MACL,GAAG,yBACH,MACA,OACF;AAAA,IACF,EAAO;AAAA,MACL,OACE,SACA,GAAG,0EACH,IACF;AAAA;AAAA,EAEJ,EAAO,SAAI,SAAS,UAAU;AAAA,IAC5B,IAAI,GAAG,gBAAgB,IAAI,KAAK,gBAAgB,KAAK,IAAI,GAAG;AAAA,MAC1D,WAAW,SAAS,KAAK;AAAA,IAC3B,EAAO;AAAA,MACL,OACE,SACA,GAAG,gDAAgD,wBACnD,IACF;AAAA;AAAA,EAEJ,EAAO,SAAI,SAAS,SAAS;AAAA,IAC3B,IAAI,GAAG,gBAAgB,IAAI,GAAG;AAAA,MAC5B,WAAW,QAAQ,KAAK;AAAA,IAC1B,EAAO;AAAA,MACL,OAAO,SAAS,GAAG,+CAA+C,IAAI;AAAA;AAAA,EAE1E,EAAO;AAAA,IACL,OACE,SACA,GAAG,iBAAiB,QAAQ,SAAS,KAAK,QAAQ,cAAc,kBAChE,QACF;AAAA;AAAA;AAQJ,IAAM,iBAAiB,CACrB,QACA,OACA,YACyB;AAAA,EACzB,MAAM,aAA4B,EAAE,QAAQ,KAAK;AAAA,EACjD,MAAM,SAAS,QAAQ,OAAO;AAAA,EAC9B,IAAI,eAAe;AAAA,EACnB,WAAW,YAAY,OAAO,YAAY;AAAA,IACxC,IAAI,SAAS,QAAQ,SAAS,SAAS,IAAI,MAAM,aAAa;AAAA,MAC5D,eAAe;AAAA,IACjB;AAAA,IACA,wBAAwB,YAAY,UAAU,OAAO,OAAO;AAAA,EAC9D;AAAA,EACA,IAAI,CAAC,cAAc;AAAA,IACjB,OACE,SACA,GAAG,6DACH,MACF;AAAA,EACF;AAAA,EACA,OAAO,QAAQ,OAAO,WAAW,SAAS,aAAa;AAAA;AAIzD,IAAM,WAAW,CACf,KACA,YACA,OACA,aAC8B;AAAA,EAC9B,QAAQ,QAAQ,OAAO,WAAW;AAAA,EAClC,IAAI,CAAC,QAAQ;AAAA,IACX,OAAO;AAAA,EACT;AAAA,EAEA,IAAI,WAAW,WAAW,CAAC,OAAO;AAAA,IAChC,SAAS,KACP,aAAa,uGACf;AAAA,EACF;AAAA,EAEA,IAAI,WAAW,UAAU,CAAC,OAAO,WAAW;AAAA,IAC1C,SAAS,KACP,aAAa,2GACf;AAAA,EACF;AAAA,EAEA,IAAI,CAAC,UAAU,OAAO,WAAW;AAAA,IAC/B,SAAS,KACP,aAAa,oBAAoB,gBAAgB,OAAO,yBAAyB,yGAAyG,qBAAqB,KAAK,UAAU,KAAK,wBACrO;AAAA,EACF;AAAA,EAEA,MAAM,aAAiC,EAAE,KAAK,OAAO;AAAA,EACrD,IAAI,QAAQ;AAAA,IACV,WAAW,SAAS;AAAA,EACtB;AAAA,EACA,IAAI,OAAO;AAAA,IACT,WAAW,QAAQ;AAAA,EACrB;AAAA,EACA,OAAO;AAAA;AAIT,IAAM,iBAAiB,CACrB,OACA,OACA,YAC8B;AAAA,EAC9B,QAAQ,aAAa;AAAA,EAErB,IAAI,GAAG,8BAA8B,KAAK,GAAG;AAAA,IAC3C,MAAM,OAAO,MAAM,KAAK;AAAA,IACxB,OAAO,SACL,MACA,EAAE,QAAQ,kBAAkB,MAAM,GAAG,SAAS,QAAQ,OAAO,OAAO,EAAE,GACtE,MACA,QACF;AAAA,EACF;AAAA,EAEA,IAAI,GAAG,mBAAmB,KAAK,GAAG;AAAA,IAChC,OACE,SACA,GAAG,iCAAiC,MAAM,WAAW,QAAQ,wCAC7D,KACF;AAAA,IACA,OAAO;AAAA,EACT;AAAA,EACA,MAAM,MAAM,SAAS,MAAM,IAAI;AAAA,EAC/B,IAAI,CAAC,KAAK;AAAA,IACR,OACE,SACA,GAAG,6CAA6C,MAAM,KAAK,QAAQ,mCACnE,KACF;AAAA,IACA,OAAO;AAAA,EACT;AAAA,EACA,MAAM,QAAQ,GAAG,SAAS;AAAA,EAC1B,IAAI,CAAC,GAAG,qBAAqB,KAAK,GAAG;AAAA,IACnC,OACE,SACA,GAAG,wEACH,KACF;AAAA,IACA,OAAO;AAAA,EACT;AAAA,EACA,MAAM,QAAQ,MAAM;AAAA,EAEpB,IAAI,GAAG,aAAa,KAAK,GAAG;AAAA,IAC1B,OAAO,SACL,KACA,EAAE,QAAQ,kBAAkB,MAAM,MAAM,OAAO,OAAO,OAAO,EAAE,GAC/D,MAAM,MACN,QACF;AAAA,EACF;AAAA,EACA,IAAI,GAAG,gBAAgB,KAAK,GAAG;AAAA,IAC7B,OAAO,SACL,KACA,EAAE,QAAQ,UAAU,MAAM,MAAM,WAAW,OAAO,OAAO,OAAO,EAAE,GAClE,MAAM,MACN,QACF;AAAA,EACF;AAAA,EACA,IAAI,GAAG,0BAA0B,KAAK,GAAG;AAAA,IACvC,MAAM,aAAa,eAAe,OAAO,OAAO,OAAO;AAAA,IACvD,OAAO,aAAa,SAAS,KAAK,YAAY,KAAK,QAAQ,IAAI;AAAA,EACjE;AAAA,EAEA,OACE,SACA,GAAG,wEACH,KACF;AAAA,EACA,OAAO;AAAA;AAIT,IAAM,wBAAwB,CAC5B,UACA,SACA,WACS;AAAA,EACT,IAAI,GAAG,mBAAmB,QAAQ,GAAG;AAAA,IACnC,OACE,SACA,gDAAgD,SAAS,WAAW,QAAQ,iDAC5E,QACF;AAAA,IACA;AAAA,EACF;AAAA,EACA,MAAM,OAAO,SAAS,SAAS,IAAI;AAAA,EACnC,IAAI,SAAS,WAAW;AAAA,IACtB,OACE,SACA,qKACA,QACF;AAAA,IACA;AAAA,EACF;AAAA,EACA,IAAI,EAAE,QAAQ,QAAQ,IAAI,IAAI;AAAA,IAC5B,OACE,SACA,KAAK,QAAQ,SAAS,KAAK,QAAQ,2DACnC,QACF;AAAA,IACA;AAAA,EACF;AAAA,EACA,IACE,CAAC,GAAG,qBAAqB,QAAQ,KACjC,CAAC,GAAG,0BAA0B,SAAS,WAAW,GAClD;AAAA,IACA,OACE,SACA,KAAK,kDACL,QACF;AAAA,IACA;AAAA,EACF;AAAA,EACA,WAAW,SAAS,SAAS,YAAY,YAAY;AAAA,IACnD,MAAM,aAAa,eAAe,OAAO,MAAM,OAAO;AAAA,IACtD,IAAI,YAAY;AAAA,MACd,OAAO,MAAM,KAAK,UAAU;AAAA,IAC9B;AAAA,EACF;AAAA;AAAA;AAQK,MAAM,gCAAgC,WAAW;AAAA,EAC7C;AAAA,EAET,WAAW,CAAC,YAAwB,QAAsB;AAAA,IACxD,MAAM,UAAU;AAAA,IAChB,KAAK,OAAO;AAAA,IACZ,KAAK,SAAS;AAAA;AAElB;AAGA,IAAM,sBAAsB,CAC1B,UACA,YACA,cACe;AAAA,EACf,MAAM,WAAW,UAAU,OACvB,WAAW,8BACT,UAAU,KAAK,SAAS,UAAU,CACpC,IACA;AAAA,EACJ,OAAO;AAAA,IACL,MAAM;AAAA,IACN,QAAQ,YAAY,SAAS,YAAY;AAAA,IACzC,MAAM;AAAA,IACN,MAAM,YAAY,SAAS,OAAO;AAAA,IAClC,SAAS,UAAU;AAAA,IACnB,UAAU;AAAA,IACV,YAAY,UAAU,cAAc,YAAY;AAAA,EAClD;AAAA;AAGF,IAAM,mBAAmB,CACvB,UACA,YACA,eAC4B;AAAA,EAC5B,MAAM,SAAS,WAAW,IAAI,CAAC,cAC7B,oBAAoB,UAAU,YAAY,SAAS,CACrD;AAAA,EACA,MAAM,QAAQ,OAAO,KAAK,CAAC,UAAU,MAAM,SAAS,SAAS;AAAA,EAC7D,OAAO,IAAI,wBACT;AAAA,IACE,MAAM;AAAA,IACN,QAAQ,OAAO;AAAA,IACf,MAAM;AAAA,IACN,MAAM,OAAO;AAAA,IACb,SAAS,GAAG,SAAS,QAAQ,SAAS,WAAW;AAAA,EAAyC,WAAW,IAAI,CAAC,cAAc,OAAO,UAAU,SAAS,EAAE,KAAK;AAAA,CAAI;AAAA,IAC7J,UAAU;AAAA,IACV,YAAY,WAAW,MAAM,CAAC,cAAc,UAAU,WAAW,IAC7D,YACA;AAAA,EACN,GACA,MACF;AAAA;AASK,IAAM,4BAA4B,CACvC,QACA,aAC8B;AAAA,EAC9B,MAAM,SAAS,wBAAwB;AAAA,EACvC,MAAM,aAAa,GAAG,iBACpB,UACA,QACA,GAAG,aAAa,QAChB,MACA,SAAS,SAAS,KAAK,IAAI,GAAG,WAAW,MAAM,GAAG,WAAW,EAC/D;AAAA,EAEA,MAAM,WAAW,kBAAkB,UAAU;AAAA,EAC7C,IAAI,CAAC,UAAU;AAAA,IACb,MAAM,iBAAiB,UAAU,YAAY;AAAA,MAC3C;AAAA,QACE,SACE;AAAA,MACJ;AAAA,IACF,CAAC;AAAA,EACH;AAAA,EACA,MAAM,SAAS,aAAa,SAAS,UAAU;AAAA,EAC/C,IAAI,CAAC,QAAQ;AAAA,IACX,MAAM,iBAAiB,UAAU,YAAY;AAAA,MAC3C;AAAA,QACE,SACE;AAAA,QACF,MAAM;AAAA,MACR;AAAA,IACF,CAAC;AAAA,EACH;AAAA,EAEA,MAAM,UAA2B;AAAA,IAC/B,KAAK,QAAQ,QAAQ;AAAA,IACrB,QAAQ,CAAC;AAAA,IACT,SAAS,eAAe,UAAU;AAAA,IAClC,UAAU,OAAO;AAAA,EACnB;AAAA,EAEA,WAAW,YAAY,OAAO,YAAY;AAAA,IACxC,sBAAsB,UAAU,SAAS,MAAM;AAAA,EACjD;AAAA,EAEA,IAAI,QAAQ,OAAO,SAAS,GAAG;AAAA,IAC7B,MAAM,iBAAiB,UAAU,YAAY,QAAQ,MAAM;AAAA,EAC7D;AAAA,EACA,OAAO;AAAA;",
+  "debugId": "D84ED7D5A5A4CC7064756E2164756E21",
+  "names": []
+}

package/dist/cli/{chunk-exeeb35e.js → chunk-f7t03s3g.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   resolveRuntimeDir
-} from "./chunk-61j18dwk.js";
+} from "./chunk-xaz13gwg.js";
 import {
   logger
 } from "./index.js";
@@ -133,4 +133,4 @@ var refuseIfDevRunning = (root, action, options = {}) => {
 export { readDevLock, DevLockHeldError, acquireDevLock, updateDevLockPort, describeDevLock, refuseIfDevRunning };
 
 //# debugId=1007843429DAE30664756E2164756E21
-//# sourceMappingURL=chunk-exeeb35e.js.map
+//# sourceMappingURL=chunk-f7t03s3g.js.map

package/dist/cli/{chunk-2z47ypj8.js → chunk-fa25z98p.js}

@@ -51,10 +51,11 @@ var runAgentHeadless = (bin, args, options) => new Promise((resolve, reject) =>
   child.stderr?.on("data", (chunk) => {
     stderr += chunk.toString("utf-8");
   });
+  let hardKill;
   const deadline = setTimeout(() => {
     timedOut = true;
     child.kill("SIGTERM");
-    const hardKill = setTimeout(() => child.kill("SIGKILL"), KILL_GRACE_MS);
+    hardKill = setTimeout(() => child.kill("SIGKILL"), options.killGraceMs ?? KILL_GRACE_MS);
     hardKill.unref();
   }, options.timeoutMs);
   deadline.unref();
@@ -67,6 +68,7 @@ var runAgentHeadless = (bin, args, options) => new Promise((resolve, reject) =>
     resolve({ code: code ?? 1, stderr, stdout, timedOut });
   });
   child.once("exit", (code) => {
+    clearTimeout(hardKill);
     if (timedOut) {
       clearTimeout(deadline);
       resolve({ code: code ?? 1, stderr, stdout, timedOut });
@@ -118,6 +120,16 @@ var claudeArgs = (context) => {
     CLAUDE_JUDGE_MAX_TURNS
   ];
 };
+var CODEX_LOCKDOWN = [
+  "-c",
+  "features.shell_tool=false",
+  "-c",
+  "features.unified_exec=false",
+  "-c",
+  "tools.view_image=false",
+  "-c",
+  'shell_environment_policy.inherit="none"'
+];
 var codexArgs = (context) => {
   const base = [
     "exec",
@@ -126,6 +138,7 @@ var codexArgs = (context) => {
     "--ephemeral",
     "--sandbox",
     "read-only",
+    ...CODEX_LOCKDOWN,
     "--output-last-message",
     context.lastMessagePath
   ];
@@ -223,5 +236,5 @@ var parseVerdict = (text) => {
 
 export { seconds, money, duration, DISALLOWED_TOOLS, runAgentHeadless, writeMcpConfig, agentArgs, readAgentOutput, parseVerdict };
 
-//# debugId=4B8025B7FB4CE67464756E2164756E21
-//# sourceMappingURL=chunk-2z47ypj8.js.map
+//# debugId=FE1BEE26F1BB6F4964756E2164756E21
+//# sourceMappingURL=chunk-fa25z98p.js.map

package/dist/cli/chunk-fa25z98p.js.map

@@ -0,0 +1,11 @@
+{
+  "version": 3,
+  "sources": ["../src/cli/report-format.ts", "../src/eval/agents.ts"],
+  "sourcesContent": [
+    "/**\n * Number formatting shared by the translate and eval report renderers. The\n * `1.5s` / `4m 12s` shapes are asserted in both suites — change them in both\n * minds at once.\n */\n\n/** Milliseconds as `1.5s`. */\nexport const seconds = (ms: number): string => `${(ms / 1000).toFixed(1)}s`;\n\n/** A dollar cost as `$1.23`, or nothing when the run reported none. */\nexport const money = (cost: number | undefined): string =>\n  cost === undefined ? \"\" : `$${cost.toFixed(2)}`;\n\n/** Milliseconds as `12.3s` under a minute, `4m 12s` from there up. */\nexport const duration = (ms: number): string => {\n  if (ms < 60_000) {\n    return seconds(ms);\n  }\n  const minutes = Math.floor(ms / 60_000);\n  const rest = Math.round((ms % 60_000) / 1000);\n  return `${minutes}m ${rest}s`;\n};\n",
+    "import { readFile, writeFile } from \"node:fs/promises\";\n\nimport spawn from \"cross-spawn\";\nimport { join } from \"pathe\";\nimport { z } from \"zod\";\n\nimport type { AgentKind } from \"../audit/agent.ts\";\n\n/** How long the SIGTERM on timeout gets to work before SIGKILL follows. */\nconst KILL_GRACE_MS = 5000;\n\n/** The MCP tools a reader run may use — nothing else. */\nexport const MCP_TOOL_NAMES = [\n  \"search_docs\",\n  \"get_page\",\n  \"list_pages\",\n  \"get_navigation\",\n] as const;\n\n/** The MCP server name in the generated config; tool ids derive from it. */\nconst MCP_SERVER_NAME = \"docs\";\n\n/**\n * Claude Code built-ins that would let the agent escape the docs-only\n * sandbox: the reader must not read the repo, run commands, or search the\n * web — it sees the documentation the way a stranger does, through MCP.\n */\nexport const DISALLOWED_TOOLS = [\n  \"Bash\",\n  \"Read\",\n  \"Glob\",\n  \"Grep\",\n  \"Write\",\n  \"Edit\",\n  \"NotebookEdit\",\n  \"WebFetch\",\n  \"WebSearch\",\n  \"Task\",\n];\n\n/** The captured outcome of one headless agent invocation. */\nexport interface HeadlessResult {\n  code: number;\n  stderr: string;\n  stdout: string;\n  timedOut: boolean;\n}\n\nexport interface HeadlessOptions {\n  cwd: string;\n  /** How long the SIGTERM gets before SIGKILL follows (default 5s). */\n  killGraceMs?: number;\n  prompt: string;\n  timeoutMs: number;\n}\n\n/**\n * Run an agent CLI headlessly: prompt over stdin (dodging argv limits and\n * cmd.exe newline quoting alike), stdout and stderr captured, SIGTERM at the\n * deadline with a SIGKILL follow-up. Resolves with the captured result;\n * rejects only when the executable cannot be spawned at all (ENOENT).\n *\n * Spawned through cross-spawn, which runs npm's `.cmd` shims on Windows with\n * its own cmd.exe escaping — under the old `shell: true` launch, cmd.exe was\n * free to mangle the JSON carried by codex's `-c` arguments, and a missing\n * executable surfaced as exit code 9009 instead of an ENOENT rejection.\n * execa was evaluated and rejected here: it waits for the stdio streams to\n * close, and the `exit`-beats-`close` resolution below exists precisely\n * because a killed agent's own children (an MCP server, a shell) hold the\n * pipes open past the SIGTERM.\n */\nexport const runAgentHeadless = (\n  bin: string,\n  args: string[],\n  options: HeadlessOptions\n): Promise<HeadlessResult> =>\n  // oxlint-disable-next-line promise/avoid-new -- adapt spawn's event callbacks\n  new Promise((resolve, reject) => {\n    const child = spawn(bin, args, {\n      cwd: options.cwd,\n      stdio: [\"pipe\", \"pipe\", \"pipe\"],\n    });\n\n    let stdout = \"\";\n    let stderr = \"\";\n    let timedOut = false;\n    child.stdout?.on(\"data\", (chunk: Buffer) => {\n      stdout += chunk.toString(\"utf-8\");\n    });\n    child.stderr?.on(\"data\", (chunk: Buffer) => {\n      stderr += chunk.toString(\"utf-8\");\n    });\n\n    let hardKill: ReturnType<typeof setTimeout> | undefined;\n    const deadline = setTimeout(() => {\n      timedOut = true;\n      child.kill(\"SIGTERM\");\n      hardKill = setTimeout(\n        () => child.kill(\"SIGKILL\"),\n        options.killGraceMs ?? KILL_GRACE_MS\n      );\n      hardKill.unref();\n    }, options.timeoutMs);\n    deadline.unref();\n\n    child.once(\"error\", (error) => {\n      clearTimeout(deadline);\n      reject(error);\n    });\n    child.once(\"close\", (code) => {\n      clearTimeout(deadline);\n      resolve({ code: code ?? 1, stderr, stdout, timedOut });\n    });\n    // `close` waits for the stdio pipes, which a killed agent's own children\n    // (an MCP server, a shell) can hold open past the SIGTERM. A timed-out\n    // run's output is discarded anyway, so the process dying is enough.\n    child.once(\"exit\", (code) => {\n      // Once the process is gone the SIGKILL follow-up has nothing to do, and\n      // firing it later could signal an unrelated process that reused the pid.\n      clearTimeout(hardKill);\n      if (timedOut) {\n        clearTimeout(deadline);\n        resolve({ code: code ?? 1, stderr, stdout, timedOut });\n      }\n    });\n\n    child.stdin?.end(options.prompt);\n  });\n\n/** The spawn signature `runEval` accepts, injectable for tests. */\nexport type HeadlessRunner = typeof runAgentHeadless;\n\n/** How the eval reaches the MCP stdio bridge from a spawned agent. */\nexport interface McpLaunch {\n  /** The generated MCP config file (claude's `--mcp-config`). */\n  configPath: string;\n  /** argv for the bridge process (codex's `-c mcp_servers` override). */\n  serverArgs: string[];\n  /** The executable launching the bridge. */\n  serverCommand: string;\n}\n\n/**\n * Write the MCP config a reader run points its agent CLI at. The bridge is\n * this same CLI relaunched (`blume mcp-stdio`), which resolves correctly from\n * both a source checkout (bun + src/cli/index.ts) and an installed package\n * (node + bin/blume.mjs).\n */\nexport const writeMcpConfig = async (\n  dir: string,\n  snapshotPath: string,\n  launcher?: { args: string[]; command: string }\n): Promise<McpLaunch> => {\n  const resolved = launcher ?? {\n    args: [process.argv[1] ?? \"\", \"mcp-stdio\", \"--data\", snapshotPath],\n    command: process.execPath,\n  };\n  const configPath = join(dir, \"mcp-config.json\");\n  const config = {\n    mcpServers: {\n      [MCP_SERVER_NAME]: { args: resolved.args, command: resolved.command },\n    },\n  };\n  await writeFile(configPath, JSON.stringify(config, null, 2));\n  return {\n    configPath,\n    serverArgs: resolved.args,\n    serverCommand: resolved.command,\n  };\n};\n\nexport interface InvocationContext {\n  /** Where codex writes its final message; unused by claude. */\n  lastMessagePath: string;\n  /** The MCP bridge for reader runs; omitted for the judge. */\n  mcp?: McpLaunch;\n}\n\nconst CLAUDE_READER_MAX_TURNS = \"25\";\nconst CLAUDE_JUDGE_MAX_TURNS = \"1\";\n\nconst claudeArgs = (context: InvocationContext): string[] => {\n  const base = [\"-p\", \"--output-format\", \"json\", \"--strict-mcp-config\"];\n  if (context.mcp) {\n    const allowed = MCP_TOOL_NAMES.map(\n      (tool) => `mcp__${MCP_SERVER_NAME}__${tool}`\n    ).join(\",\");\n    return [\n      ...base,\n      \"--mcp-config\",\n      context.mcp.configPath,\n      \"--allowedTools\",\n      allowed,\n      \"--disallowedTools\",\n      DISALLOWED_TOOLS.join(\",\"),\n      \"--max-turns\",\n      CLAUDE_READER_MAX_TURNS,\n    ];\n  }\n  return [\n    ...base,\n    \"--disallowedTools\",\n    DISALLOWED_TOOLS.join(\",\"),\n    \"--max-turns\",\n    CLAUDE_JUDGE_MAX_TURNS,\n  ];\n};\n\n/**\n * Codex config overrides that leave an eval run nothing but its prompt and the\n * docs MCP tools. `--sandbox read-only` blocks writes and the network but still\n * lets the shell tool read any file the user can, and the docs a reader\n * searches — or the answer a judge grades — can come from a remote source, so\n * an instruction planted there could otherwise pull a local secret into the\n * transcript sent to the model provider. With both command tools and the\n * local-image tool off, and any subprocess started with no inherited\n * environment, there is nothing on the machine for a run to read.\n */\nconst CODEX_LOCKDOWN = [\n  \"-c\",\n  \"features.shell_tool=false\",\n  \"-c\",\n  \"features.unified_exec=false\",\n  \"-c\",\n  \"tools.view_image=false\",\n  \"-c\",\n  'shell_environment_policy.inherit=\"none\"',\n];\n\nconst codexArgs = (context: InvocationContext): string[] => {\n  const base = [\n    \"exec\",\n    \"--skip-git-repo-check\",\n    \"--ignore-user-config\",\n    \"--ephemeral\",\n    \"--sandbox\",\n    \"read-only\",\n    ...CODEX_LOCKDOWN,\n    \"--output-last-message\",\n    context.lastMessagePath,\n  ];\n  if (context.mcp) {\n    // `-c` values parse as TOML; JSON string/array literals are valid TOML\n    // values, so JSON.stringify produces exactly the quoting codex expects.\n    return [\n      ...base,\n      \"-c\",\n      `mcp_servers.${MCP_SERVER_NAME}.command=${JSON.stringify(\n        context.mcp.serverCommand\n      )}`,\n      \"-c\",\n      `mcp_servers.${MCP_SERVER_NAME}.args=${JSON.stringify(\n        context.mcp.serverArgs\n      )}`,\n      \"-\",\n    ];\n  }\n  return [...base, \"-\"];\n};\n\n/** Build the argv for one headless run; pass `mcp` for the reader role. */\nexport const agentArgs = (\n  kind: AgentKind,\n  context: InvocationContext\n): string[] => (kind === \"claude\" ? claudeArgs(context) : codexArgs(context));\n\n/** What one headless run produced, normalized across agent CLIs. */\nexport interface AgentOutput {\n  costUsd?: number;\n  detail?: string;\n  isError: boolean;\n  text: string;\n}\n\nconst claudeResultSchema = z.object({\n  is_error: z.boolean().default(false),\n  result: z.string().default(\"\"),\n  total_cost_usd: z.number().optional(),\n});\n\nconst tail = (value: string, max = 300): string => {\n  const trimmed = value.trim();\n  return trimmed.length > max ? trimmed.slice(-max) : trimmed;\n};\n\n/**\n * Normalize a finished run into the answer text. Claude prints one JSON\n * object on stdout (`--output-format json`); codex writes the final message\n * to `--output-last-message` because its stdout interleaves progress.\n */\nexport const readAgentOutput = async (\n  kind: AgentKind,\n  result: HeadlessResult,\n  lastMessagePath: string\n): Promise<AgentOutput> => {\n  if (result.timedOut) {\n    return { detail: \"timed out\", isError: true, text: \"\" };\n  }\n  if (result.code !== 0) {\n    return {\n      detail: tail(result.stderr) || `exited with code ${result.code}`,\n      isError: true,\n      text: \"\",\n    };\n  }\n\n  if (kind === \"claude\") {\n    let parsed: unknown;\n    try {\n      parsed = JSON.parse(result.stdout);\n    } catch {\n      return {\n        detail: \"unparseable --output-format json payload\",\n        isError: true,\n        text: \"\",\n      };\n    }\n    const payload = claudeResultSchema.safeParse(parsed);\n    if (!payload.success) {\n      return {\n        detail: \"unexpected --output-format json shape\",\n        isError: true,\n        text: \"\",\n      };\n    }\n    return {\n      costUsd: payload.data.total_cost_usd,\n      isError: payload.data.is_error,\n      text: payload.data.result,\n    };\n  }\n\n  let text: string;\n  try {\n    const raw = await readFile(lastMessagePath, \"utf-8\");\n    text = raw.trim();\n  } catch {\n    return { detail: \"no last message written\", isError: true, text: \"\" };\n  }\n  if (text === \"\") {\n    return { detail: \"empty last message\", isError: true, text: \"\" };\n  }\n  return { isError: false, text };\n};\n\nconst verdictSchema = z.object({\n  missing: z.array(z.string()).default([]),\n  notes: z.string().default(\"\"),\n  pass: z.boolean(),\n  score: z.number().min(0).max(1).optional(),\n});\n\n/** The judge's grade for one answer. */\nexport type Verdict = z.infer<typeof verdictSchema>;\n\n/**\n * Extract the verdict JSON from a judge reply. Tolerates markdown fences and\n * surrounding prose; returns undefined when no valid verdict can be found.\n */\nexport const parseVerdict = (text: string): Verdict | undefined => {\n  const start = text.indexOf(\"{\");\n  const end = text.lastIndexOf(\"}\");\n  if (start === -1 || end <= start) {\n    return;\n  }\n  let parsed: unknown;\n  try {\n    parsed = JSON.parse(text.slice(start, end + 1));\n  } catch {\n    return;\n  }\n  const result = verdictSchema.safeParse(parsed);\n  return result.success ? result.data : undefined;\n};\n"
+  ],
+  "mappings": ";;;AAOO,IAAM,UAAU,CAAC,OAAuB,IAAI,KAAK,MAAM,QAAQ,CAAC;AAGhE,IAAM,QAAQ,CAAC,SACpB,SAAS,YAAY,KAAK,IAAI,KAAK,QAAQ,CAAC;AAGvC,IAAM,WAAW,CAAC,OAAuB;AAAA,EAC9C,IAAI,KAAK,OAAQ;AAAA,IACf,OAAO,QAAQ,EAAE;AAAA,EACnB;AAAA,EACA,MAAM,UAAU,KAAK,MAAM,KAAK,KAAM;AAAA,EACtC,MAAM,OAAO,KAAK,MAAO,KAAK,QAAU,IAAI;AAAA,EAC5C,OAAO,GAAG,YAAY;AAAA;;;ACpBxB;AAEA;AACA;AACA;AAKA,IAAM,gBAAgB;AAGf,IAAM,iBAAiB;AAAA,EAC5B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAGA,IAAM,kBAAkB;AAOjB,IAAM,mBAAmB;AAAA,EAC9B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAiCO,IAAM,mBAAmB,CAC9B,KACA,MACA,YAGA,IAAI,QAAQ,CAAC,SAAS,WAAW;AAAA,EAC/B,MAAM,QAAQ,MAAM,KAAK,MAAM;AAAA,IAC7B,KAAK,QAAQ;AAAA,IACb,OAAO,CAAC,QAAQ,QAAQ,MAAM;AAAA,EAChC,CAAC;AAAA,EAED,IAAI,SAAS;AAAA,EACb,IAAI,SAAS;AAAA,EACb,IAAI,WAAW;AAAA,EACf,MAAM,QAAQ,GAAG,QAAQ,CAAC,UAAkB;AAAA,IAC1C,UAAU,MAAM,SAAS,OAAO;AAAA,GACjC;AAAA,EACD,MAAM,QAAQ,GAAG,QAAQ,CAAC,UAAkB;AAAA,IAC1C,UAAU,MAAM,SAAS,OAAO;AAAA,GACjC;AAAA,EAED,IAAI;AAAA,EACJ,MAAM,WAAW,WAAW,MAAM;AAAA,IAChC,WAAW;AAAA,IACX,MAAM,KAAK,SAAS;AAAA,IACpB,WAAW,WACT,MAAM,MAAM,KAAK,SAAS,GAC1B,QAAQ,eAAe,aACzB;AAAA,IACA,SAAS,MAAM;AAAA,KACd,QAAQ,SAAS;AAAA,EACpB,SAAS,MAAM;AAAA,EAEf,MAAM,KAAK,SAAS,CAAC,UAAU;AAAA,IAC7B,aAAa,QAAQ;AAAA,IACrB,OAAO,KAAK;AAAA,GACb;AAAA,EACD,MAAM,KAAK,SAAS,CAAC,SAAS;AAAA,IAC5B,aAAa,QAAQ;AAAA,IACrB,QAAQ,EAAE,MAAM,QAAQ,GAAG,QAAQ,QAAQ,SAAS,CAAC;AAAA,GACtD;AAAA,EAID,MAAM,KAAK,QAAQ,CAAC,SAAS;AAAA,IAG3B,aAAa,QAAQ;AAAA,IACrB,IAAI,UAAU;AAAA,MACZ,aAAa,QAAQ;AAAA,MACrB,QAAQ,EAAE,MAAM,QAAQ,GAAG,QAAQ,QAAQ,SAAS,CAAC;AAAA,IACvD;AAAA,GACD;AAAA,EAED,MAAM,OAAO,IAAI,QAAQ,MAAM;AAAA,CAChC;AAqBI,IAAM,iBAAiB,OAC5B,KACA,cACA,aACuB;AAAA,EACvB,MAAM,WAAW,YAAY;AAAA,IAC3B,MAAM,CAAC,QAAQ,KAAK,MAAM,IAAI,aAAa,UAAU,YAAY;AAAA,IACjE,SAAS,QAAQ;AAAA,EACnB;AAAA,EACA,MAAM,aAAa,KAAK,KAAK,iBAAiB;AAAA,EAC9C,MAAM,SAAS;AAAA,IACb,YAAY;AAAA,OACT,kBAAkB,EAAE,MAAM,SAAS,MAAM,SAAS,SAAS,QAAQ;AAAA,IACtE;AAAA,EACF;AAAA,EACA,MAAM,UAAU,YAAY,KAAK,UAAU,QAAQ,MAAM,CAAC,CAAC;AAAA,EAC3D,OAAO;AAAA,IACL;AAAA,IACA,YAAY,SAAS;AAAA,IACrB,eAAe,SAAS;AAAA,EAC1B;AAAA;AAUF,IAAM,0BAA0B;AAChC,IAAM,yBAAyB;AAE/B,IAAM,aAAa,CAAC,YAAyC;AAAA,EAC3D,MAAM,OAAO,CAAC,MAAM,mBAAmB,QAAQ,qBAAqB;AAAA,EACpE,IAAI,QAAQ,KAAK;AAAA,IACf,MAAM,UAAU,eAAe,IAC7B,CAAC,SAAS,QAAQ,oBAAoB,MACxC,EAAE,KAAK,GAAG;AAAA,IACV,OAAO;AAAA,MACL,GAAG;AAAA,MACH;AAAA,MACA,QAAQ,IAAI;AAAA,MACZ;AAAA,MACA;AAAA,MACA;AAAA,MACA,iBAAiB,KAAK,GAAG;AAAA,MACzB;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAAA,EACA,OAAO;AAAA,IACL,GAAG;AAAA,IACH;AAAA,IACA,iBAAiB,KAAK,GAAG;AAAA,IACzB;AAAA,IACA;AAAA,EACF;AAAA;AAaF,IAAM,iBAAiB;AAAA,EACrB;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAEA,IAAM,YAAY,CAAC,YAAyC;AAAA,EAC1D,MAAM,OAAO;AAAA,IACX;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,GAAG;AAAA,IACH;AAAA,IACA,QAAQ;AAAA,EACV;AAAA,EACA,IAAI,QAAQ,KAAK;AAAA,IAGf,OAAO;AAAA,MACL,GAAG;AAAA,MACH;AAAA,MACA,eAAe,2BAA2B,KAAK,UAC7C,QAAQ,IAAI,aACd;AAAA,MACA;AAAA,MACA,eAAe,wBAAwB,KAAK,UAC1C,QAAQ,IAAI,UACd;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAAA,EACA,OAAO,CAAC,GAAG,MAAM,GAAG;AAAA;AAIf,IAAM,YAAY,CACvB,MACA,YACc,SAAS,WAAW,WAAW,OAAO,IAAI,UAAU,OAAO;AAU3E,IAAM,qBAAqB,EAAE,OAAO;AAAA,EAClC,UAAU,EAAE,QAAQ,EAAE,QAAQ,KAAK;AAAA,EACnC,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE;AAAA,EAC7B,gBAAgB,EAAE,OAAO,EAAE,SAAS;AACtC,CAAC;AAED,IAAM,OAAO,CAAC,OAAe,MAAM,QAAgB;AAAA,EACjD,MAAM,UAAU,MAAM,KAAK;AAAA,EAC3B,OAAO,QAAQ,SAAS,MAAM,QAAQ,MAAM,CAAC,GAAG,IAAI;AAAA;AAQ/C,IAAM,kBAAkB,OAC7B,MACA,QACA,oBACyB;AAAA,EACzB,IAAI,OAAO,UAAU;AAAA,IACnB,OAAO,EAAE,QAAQ,aAAa,SAAS,MAAM,MAAM,GAAG;AAAA,EACxD;AAAA,EACA,IAAI,OAAO,SAAS,GAAG;AAAA,IACrB,OAAO;AAAA,MACL,QAAQ,KAAK,OAAO,MAAM,KAAK,oBAAoB,OAAO;AAAA,MAC1D,SAAS;AAAA,MACT,MAAM;AAAA,IACR;AAAA,EACF;AAAA,EAEA,IAAI,SAAS,UAAU;AAAA,IACrB,IAAI;AAAA,IACJ,IAAI;AAAA,MACF,SAAS,KAAK,MAAM,OAAO,MAAM;AAAA,MACjC,MAAM;AAAA,MACN,OAAO;AAAA,QACL,QAAQ;AAAA,QACR,SAAS;AAAA,QACT,MAAM;AAAA,MACR;AAAA;AAAA,IAEF,MAAM,UAAU,mBAAmB,UAAU,MAAM;AAAA,IACnD,IAAI,CAAC,QAAQ,SAAS;AAAA,MACpB,OAAO;AAAA,QACL,QAAQ;AAAA,QACR,SAAS;AAAA,QACT,MAAM;AAAA,MACR;AAAA,IACF;AAAA,IACA,OAAO;AAAA,MACL,SAAS,QAAQ,KAAK;AAAA,MACtB,SAAS,QAAQ,KAAK;AAAA,MACtB,MAAM,QAAQ,KAAK;AAAA,IACrB;AAAA,EACF;AAAA,EAEA,IAAI;AAAA,EACJ,IAAI;AAAA,IACF,MAAM,MAAM,MAAM,SAAS,iBAAiB,OAAO;AAAA,IACnD,OAAO,IAAI,KAAK;AAAA,IAChB,MAAM;AAAA,IACN,OAAO,EAAE,QAAQ,2BAA2B,SAAS,MAAM,MAAM,GAAG;AAAA;AAAA,EAEtE,IAAI,SAAS,IAAI;AAAA,IACf,OAAO,EAAE,QAAQ,sBAAsB,SAAS,MAAM,MAAM,GAAG;AAAA,EACjE;AAAA,EACA,OAAO,EAAE,SAAS,OAAO,KAAK;AAAA;AAGhC,IAAM,gBAAgB,EAAE,OAAO;AAAA,EAC7B,SAAS,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,QAAQ,CAAC,CAAC;AAAA,EACvC,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE;AAAA,EAC5B,MAAM,EAAE,QAAQ;AAAA,EAChB,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,CAAC,EAAE,SAAS;AAC3C,CAAC;AASM,IAAM,eAAe,CAAC,SAAsC;AAAA,EACjE,MAAM,QAAQ,KAAK,QAAQ,GAAG;AAAA,EAC9B,MAAM,MAAM,KAAK,YAAY,GAAG;AAAA,EAChC,IAAI,UAAU,MAAM,OAAO,OAAO;AAAA,IAChC;AAAA,EACF;AAAA,EACA,IAAI;AAAA,EACJ,IAAI;AAAA,IACF,SAAS,KAAK,MAAM,KAAK,MAAM,OAAO,MAAM,CAAC,CAAC;AAAA,IAC9C,MAAM;AAAA,IACN;AAAA;AAAA,EAEF,MAAM,SAAS,cAAc,UAAU,MAAM;AAAA,EAC7C,OAAO,OAAO,UAAU,OAAO,OAAO;AAAA;",
+  "debugId": "FE1BEE26F1BB6F4964756E2164756E21",
+  "names": []
+}

package/dist/cli/{chunk-12dxjqk7.js → chunk-fh5hj5jt.js}

@@ -1,42 +1,46 @@
 #!/usr/bin/env node
-import"./chunk-tqa1s0k8.js";
-import"./chunk-88by27n5.js";
+import"./chunk-jts8mvcz.js";
+import {
+  resolveRuntimeDir
+} from "./chunk-xaz13gwg.js";
 import {
   refreshBlumeContent,
   showBlumeErrorOverlay,
   generateRuntime
-} from "./chunk-5n7t497w.js";
-import"./chunk-wjt80jps.js";
-import {
-  scanProject
-} from "./chunk-hdm2dkd2.js";
+} from "./chunk-z1f5arsg.js";
 import {
   commandMeta,
   normalizeHost,
+  BlumeError,
   logger,
   reportDiagnostics
 } from "./index.js";
+import"./chunk-a9kptbw5.js";
 import {
-  resolveRuntimeDir
-} from "./chunk-61j18dwk.js";
-import"./chunk-450a7rcr.js";
+  scanProject
+} from "./chunk-zg2gtj10.js";
+import"./chunk-f2972sbt.js";
 import"./chunk-jq5n4avg.js";
-import"./chunk-ejjx8znq.js";
-import"./chunk-688e0dde.js";
-import"./chunk-vrfp10qk.js";
+import"./chunk-mnqj32sj.js";
+import"./chunk-88cpgt6h.js";
+import"./chunk-bnbmcwfb.js";
+import"./chunk-nk3ts2xk.js";
 import {
   DevLockHeldError,
   acquireDevLock,
   updateDevLockPort,
   describeDevLock
-} from "./chunk-exeeb35e.js";
+} from "./chunk-f7t03s3g.js";
 import {
-  parsePort
-} from "./chunk-ppfvdcd4.js";
+  refuseIfEjected
+} from "./chunk-d1tadaw7.js";
 import {
   prepareProject
-} from "./chunk-vkrsvbr5.js";
-import"./chunk-jbj4qhfw.js";
+} from "./chunk-41za066z.js";
+import {
+  parsePort
+} from "./chunk-zxccj738.js";
+import"./chunk-2q1dwty4.js";
 
 // src/cli/commands/dev.ts
 import { dev } from "astro";
@@ -45,6 +49,19 @@ import { defineCommand } from "citty";
 import { debounce } from "perfect-debounce";
 var routeSignature = (routes) => routes.map((route) => `${route.path} ${route.entryId}`).toSorted().join(`
 `);
+var boundPortOf = (server, requested) => {
+  const address = server.address;
+  if (address) {
+    return address.port;
+  }
+  for (const url of server.resolvedUrls.local) {
+    const port = Number(new URL(url).port);
+    if (port > 0) {
+      return port;
+    }
+  }
+  return requested;
+};
 var devCommand = defineCommand({
   args: {
     "content-dir": {
@@ -67,6 +84,7 @@ var devCommand = defineCommand({
   meta: commandMeta.dev,
   async run({ args }) {
     const root = process.cwd();
+    await refuseIfEjected(root, "dev");
     const preview = args.preview ?? false;
     const overrides = args["content-dir"] ? { contentRoot: args["content-dir"] } : undefined;
     const explicitPort = parsePort(args.port);
@@ -98,7 +116,7 @@ var devCommand = defineCommand({
       server: { host: normalizeHost(args.host), open, port: listenPort }
     });
     let server = await createServer(explicitPort, args.open ?? false);
-    const boundPort = server.address.port;
+    const boundPort = boundPortOf(server, port);
     if (boundPort !== port) {
       updateDevLockPort(outDir, boundPort);
       devServerUrl = `http://localhost:${boundPort}`;
@@ -124,6 +142,11 @@ var devCommand = defineCommand({
         reportDiagnostics(next.diagnostics, root);
         showBlumeErrorOverlay(next.diagnostics);
       } catch (error) {
+        if (error instanceof BlumeError) {
+          reportDiagnostics([error.diagnostic], root);
+          showBlumeErrorOverlay([error.diagnostic]);
+          return;
+        }
         logger.error(`Regeneration failed: ${error.message}`);
       }
     }, 80);
@@ -161,5 +184,5 @@ export {
   devCommand
 };
 
-//# debugId=350EDAE5A410927464756E2164756E21
-//# sourceMappingURL=chunk-12dxjqk7.js.map
+//# debugId=DAFEE5DB6B0E8A0164756E2164756E21
+//# sourceMappingURL=chunk-fh5hj5jt.js.map

package/dist/cli/chunk-fh5hj5jt.js.map

@@ -0,0 +1,10 @@
+{
+  "version": 3,
+  "sources": ["../src/cli/commands/dev.ts"],
+  "sourcesContent": [
+    "import { dev } from \"astro\";\nimport { watch } from \"chokidar\";\nimport { defineCommand } from \"citty\";\nimport { debounce } from \"perfect-debounce\";\n\nimport { generateRuntime } from \"../../astro/generate.ts\";\nimport {\n  refreshBlumeContent,\n  showBlumeErrorOverlay,\n} from \"../../astro/integration.ts\";\nimport { BlumeError } from \"../../core/diagnostics.ts\";\nimport { scanProject } from \"../../core/project-graph.ts\";\nimport { resolveRuntimeDir } from \"../../core/project.ts\";\nimport { parsePort } from \"../args.ts\";\nimport { commandMeta } from \"../command-meta.ts\";\nimport {\n  acquireDevLock,\n  describeDevLock,\n  DevLockHeldError,\n  updateDevLockPort,\n} from \"../dev-lock.ts\";\nimport { refuseIfEjected } from \"../eject-scripts.ts\";\nimport { normalizeHost } from \"../host-args.ts\";\nimport { logger, reportDiagnostics } from \"../log.ts\";\nimport { prepareProject } from \"../prepare.ts\";\n\n/**\n * A fingerprint of the route set: the sorted `path entryId` pairs. It changes\n * when a page is added, removed, or renamed (a folder rename shifts many at\n * once) but stays equal across pure body edits — so the dev loop can tell a\n * \"structural\" change (needs a content re-sync) from a hot-reloadable one.\n */\nconst routeSignature = (\n  routes: readonly { entryId: string; path: string }[]\n): string =>\n  routes\n    .map((route) => `${route.path} ${route.entryId}`)\n    .toSorted()\n    .join(\"\\n\");\n\n/**\n * The port the dev server actually bound. Astro snapshots `address` when the\n * server first listens, but a config restart that lands during startup leaves\n * that snapshot null: the `astro.config.mjs` written just before the server\n * started can reach Astro's watcher late, and Astro restarts in place before\n * it ever listens. The live resolved URLs follow the restarted server, so read\n * the port from those, then fall back to the one that was asked for.\n */\nconst boundPortOf = (\n  server: Awaited<ReturnType<typeof dev>>,\n  requested: number\n): number => {\n  // SAFETY: Astro types `address` as always set, but it is null at runtime\n  // when a restart replaced the server before its first listen (see above).\n  const address = server.address as typeof server.address | null;\n  if (address) {\n    return address.port;\n  }\n  for (const url of server.resolvedUrls.local) {\n    const port = Number(new URL(url).port);\n    if (port > 0) {\n      return port;\n    }\n  }\n  return requested;\n};\n\nexport const devCommand = defineCommand({\n  args: {\n    \"content-dir\": {\n      description: \"Content folder to scan, overriding config (content.root).\",\n      type: \"string\",\n    },\n    debug: {\n      description: \"Verbose Astro/Vite logging for troubleshooting.\",\n      type: \"boolean\",\n    },\n    host: { description: \"Network host to bind.\", type: \"string\" },\n    open: { description: \"Open the browser on start.\", type: \"boolean\" },\n    port: { description: \"Port to listen on.\", type: \"string\" },\n    preview: {\n      description: \"Include drafts and unpublished CMS content.\",\n      type: \"boolean\",\n    },\n    strict: { description: \"Fail on diagnostics.\", type: \"boolean\" },\n  },\n  meta: commandMeta.dev,\n  async run({ args }) {\n    const root = process.cwd();\n    await refuseIfEjected(root, \"dev\");\n    const preview = args.preview ?? false;\n    const overrides = args[\"content-dir\"]\n      ? { contentRoot: args[\"content-dir\"] }\n      : undefined;\n    // Astro's dev server defaults to 4321 when no port is passed. Feeding the\n    // resolved URL in as the `deployment.site` fallback lets site-gated features\n    // (OG images, canonicals, sitemap) work locally without configuring a site.\n    const explicitPort = parsePort(args.port);\n    const port = explicitPort ?? 4321;\n    let devServerUrl = `http://localhost:${port}`;\n\n    // Claim the shared `.blume` dir BEFORE preparing: `prepareProject`\n    // regenerates the runtime, so even a refused second dev server would\n    // otherwise clobber the running one's generated tree (with this\n    // invocation's port baked in) on its way out. The claim is atomic, so two\n    // simultaneous starts can't both win. Dev never relocates the runtime dir,\n    // so the lock always lives at `<root>/.blume`.\n    const outDir = resolveRuntimeDir(root);\n    let releaseLock: () => void;\n    try {\n      releaseLock = acquireDevLock(outDir, port);\n    } catch (error) {\n      if (error instanceof DevLockHeldError) {\n        logger.error(\n          `A \\`blume dev\\` server is already running${describeDevLock(error.lock)} in this project. Reuse that server instead of starting a second one — two dev servers would corrupt the shared .blume dir. If it crashed, delete .blume/dev.lock.`\n        );\n        process.exit(1);\n      }\n      throw error;\n    }\n    process.on(\"exit\", releaseLock);\n\n    const project = await prepareProject({\n      devServerUrl,\n      mode: \"dev\",\n      overrides,\n      preview,\n      root,\n      strict: args.strict,\n    });\n\n    // A factory so the regenerate loop can recreate the server when a\n    // structural (route-set) change can't be re-synced in place (see below).\n    // `open` is honored on first boot only — a restart must not reopen the\n    // browser.\n    const createServer = (listenPort: number | undefined, open: boolean) =>\n      dev({\n        logLevel: args.debug ? \"debug\" : \"info\",\n        root: project.context.outDir,\n        server: { host: normalizeHost(args.host), open, port: listenPort },\n      });\n\n    let server = await createServer(explicitPort, args.open ?? false);\n\n    // Vite bumps to the next free port when the default is taken, so record\n    // the port the server actually bound — the lock's URL is what a refused\n    // second invocation tells its caller to reuse. The site fallback baked\n    // into the runtime also carries the port, so it must follow suit (below,\n    // once the regeneration closure exists).\n    const boundPort = boundPortOf(server, port);\n    if (boundPort !== port) {\n      updateDevLockPort(outDir, boundPort);\n      devServerUrl = `http://localhost:${boundPort}`;\n    }\n\n    // Mirror any initial diagnostics into the browser overlay now the server\n    // (and its HMR channel) is up.\n    showBlumeErrorOverlay(project.diagnostics);\n\n    let lastSignature = routeSignature(project.manifest.routes);\n\n    // Watch user inputs and regenerate the runtime data on change. A body edit\n    // hot-reloads via Vite (fast path). A route-set change also needs Astro's\n    // content store re-synced: its glob watcher misses directory renames, so a\n    // renamed page would 404 (`getEntry` reads a stale store). Astro hands the\n    // integration `refreshContent` for exactly that — a full loader run\n    // against the live server, after which Astro's own store watcher clears\n    // the route cache and reloads the browser. Only a server that registered\n    // no refresh (none since Astro 5) falls back to a cold restart: stop,\n    // then bring up a fresh container whose cold sync re-globs everything.\n    // perfect-debounce both debounces the watch burst (80ms) and\n    // single-flights the scan: a\n    // trigger during a run never starts a second run, only marks one trailing\n    // rerun after the current settles. Both halves are load-bearing — a plain\n    // debounce once let bursts stack overlapping scans until the heap was\n    // exhausted (observed as an OOM after minutes of looping). The contract is\n    // pinned by test/dev-debounce.test.ts. The task must not reject (the\n    // library re-invokes it from an unhandled .finally), so the body catches\n    // its own errors and always resolves.\n    const regenerate = debounce(async () => {\n      try {\n        const next = await scanProject(root, {\n          devServerUrl,\n          mode: \"dev\",\n          overrides,\n          preview,\n        });\n        const nextSignature = routeSignature(next.manifest.routes);\n        const structural = nextSignature !== lastSignature;\n        // Generate first: the new runtime data (and any staged remote content)\n        // is on disk and published before the store re-syncs against it.\n        await generateRuntime(next);\n        if (structural && !(await refreshBlumeContent())) {\n          await server.stop();\n          server = await createServer(boundPort, false);\n        }\n        // Commit the signature only after the (re)generation succeeded. If the\n        // re-sync or restart above throws mid-sequence, the signature stays\n        // stale so the next watch event retries the structural path.\n        lastSignature = nextSignature;\n        // Surface any content/config errors in the terminal AND the browser\n        // overlay. The terminal report is not redundant: the overlay only\n        // shows once the browser has connected, and it clears on the next HMR\n        // update.\n        reportDiagnostics(next.diagnostics, root);\n        showBlumeErrorOverlay(next.diagnostics);\n      } catch (error) {\n        // A config error the generator raised (an unplannable `components.ts`\n        // override, a missing font file) is a diagnostic: report it in the\n        // terminal and the browser overlay like a scan-time error, so the fix\n        // is visible where the edit happened.\n        if (error instanceof BlumeError) {\n          reportDiagnostics([error.diagnostic], root);\n          showBlumeErrorOverlay([error.diagnostic]);\n          return;\n        }\n        // SAFETY: regeneration failures come from the generator and Astro's\n        // server API, which raise Error instances; only the message is shown.\n        logger.error(`Regeneration failed: ${(error as Error).message}`);\n      }\n    }, 80);\n\n    // The runtime prepared above baked the *requested* port into the site\n    // fallback; if Vite bumped it, regenerate so OG images, canonicals, and\n    // other site-gated URLs point at the port actually serving.\n    if (boundPort !== port) {\n      void regenerate();\n    }\n\n    // Content is watched per source (filesystem uses fs.watch; remote sources\n    // are frozen for the session). The remaining project inputs — user pages,\n    // config, theme, and component overrides — are watched directly.\n    const dirTargets = [project.context.pagesRoot].filter(\n      (target) => target !== null\n    );\n    const fileTargets = [\n      project.context.configFile,\n      project.context.themeFile,\n      project.context.componentsFile,\n    ].filter((target) => target !== null);\n\n    // chokidar handles what raw fs.watch made us hand-roll: recursive\n    // directory watching on every platform, and single files surviving a\n    // rename-replace save (vim and most \"atomic save\" editors), which orphans\n    // an inode-tracking fs.watch watcher after the first write.\n    const projectWatcher = watch([...dirTargets, ...fileTargets], {\n      ignoreInitial: true,\n    }).on(\"all\", regenerate);\n    const disposers = [\n      ...project.sources.map((source) => source.watch?.(regenerate)),\n      () => {\n        void projectWatcher.close();\n      },\n    ].filter((dispose) => dispose !== undefined);\n\n    const shutdown = async () => {\n      for (const dispose of disposers) {\n        dispose();\n      }\n      releaseLock();\n      await server.stop();\n      process.exit(0);\n    };\n\n    process.on(\"SIGINT\", shutdown);\n    process.on(\"SIGTERM\", shutdown);\n  },\n});\n"
+  ],
+  "mappings": ";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AACA;AACA;AACA;AA6BA,IAAM,iBAAiB,CACrB,WAEA,OACG,IAAI,CAAC,UAAU,GAAG,MAAM,QAAQ,MAAM,SAAS,EAC/C,SAAS,EACT,KAAK;AAAA,CAAI;AAUd,IAAM,cAAc,CAClB,QACA,cACW;AAAA,EAGX,MAAM,UAAU,OAAO;AAAA,EACvB,IAAI,SAAS;AAAA,IACX,OAAO,QAAQ;AAAA,EACjB;AAAA,EACA,WAAW,OAAO,OAAO,aAAa,OAAO;AAAA,IAC3C,MAAM,OAAO,OAAO,IAAI,IAAI,GAAG,EAAE,IAAI;AAAA,IACrC,IAAI,OAAO,GAAG;AAAA,MACZ,OAAO;AAAA,IACT;AAAA,EACF;AAAA,EACA,OAAO;AAAA;AAGF,IAAM,aAAa,cAAc;AAAA,EACtC,MAAM;AAAA,IACJ,eAAe;AAAA,MACb,aAAa;AAAA,MACb,MAAM;AAAA,IACR;AAAA,IACA,OAAO;AAAA,MACL,aAAa;AAAA,MACb,MAAM;AAAA,IACR;AAAA,IACA,MAAM,EAAE,aAAa,yBAAyB,MAAM,SAAS;AAAA,IAC7D,MAAM,EAAE,aAAa,8BAA8B,MAAM,UAAU;AAAA,IACnE,MAAM,EAAE,aAAa,sBAAsB,MAAM,SAAS;AAAA,IAC1D,SAAS;AAAA,MACP,aAAa;AAAA,MACb,MAAM;AAAA,IACR;AAAA,IACA,QAAQ,EAAE,aAAa,wBAAwB,MAAM,UAAU;AAAA,EACjE;AAAA,EACA,MAAM,YAAY;AAAA,OACZ,IAAG,GAAG,QAAQ;AAAA,IAClB,MAAM,OAAO,QAAQ,IAAI;AAAA,IACzB,MAAM,gBAAgB,MAAM,KAAK;AAAA,IACjC,MAAM,UAAU,KAAK,WAAW;AAAA,IAChC,MAAM,YAAY,KAAK,iBACnB,EAAE,aAAa,KAAK,eAAe,IACnC;AAAA,IAIJ,MAAM,eAAe,UAAU,KAAK,IAAI;AAAA,IACxC,MAAM,OAAO,gBAAgB;AAAA,IAC7B,IAAI,eAAe,oBAAoB;AAAA,IAQvC,MAAM,SAAS,kBAAkB,IAAI;AAAA,IACrC,IAAI;AAAA,IACJ,IAAI;AAAA,MACF,cAAc,eAAe,QAAQ,IAAI;AAAA,MACzC,OAAO,OAAO;AAAA,MACd,IAAI,iBAAiB,kBAAkB;AAAA,QACrC,OAAO,MACL,4CAA4C,gBAAgB,MAAM,IAAI,qKACxE;AAAA,QACA,QAAQ,KAAK,CAAC;AAAA,MAChB;AAAA,MACA,MAAM;AAAA;AAAA,IAER,QAAQ,GAAG,QAAQ,WAAW;AAAA,IAE9B,MAAM,UAAU,MAAM,eAAe;AAAA,MACnC;AAAA,MACA,MAAM;AAAA,MACN;AAAA,MACA;AAAA,MACA;AAAA,MACA,QAAQ,KAAK;AAAA,IACf,CAAC;AAAA,IAMD,MAAM,eAAe,CAAC,YAAgC,SACpD,IAAI;AAAA,MACF,UAAU,KAAK,QAAQ,UAAU;AAAA,MACjC,MAAM,QAAQ,QAAQ;AAAA,MACtB,QAAQ,EAAE,MAAM,cAAc,KAAK,IAAI,GAAG,MAAM,MAAM,WAAW;AAAA,IACnE,CAAC;AAAA,IAEH,IAAI,SAAS,MAAM,aAAa,cAAc,KAAK,QAAQ,KAAK;AAAA,IAOhE,MAAM,YAAY,YAAY,QAAQ,IAAI;AAAA,IAC1C,IAAI,cAAc,MAAM;AAAA,MACtB,kBAAkB,QAAQ,SAAS;AAAA,MACnC,eAAe,oBAAoB;AAAA,IACrC;AAAA,IAIA,sBAAsB,QAAQ,WAAW;AAAA,IAEzC,IAAI,gBAAgB,eAAe,QAAQ,SAAS,MAAM;AAAA,IAoB1D,MAAM,aAAa,SAAS,YAAY;AAAA,MACtC,IAAI;AAAA,QACF,MAAM,OAAO,MAAM,YAAY,MAAM;AAAA,UACnC;AAAA,UACA,MAAM;AAAA,UACN;AAAA,UACA;AAAA,QACF,CAAC;AAAA,QACD,MAAM,gBAAgB,eAAe,KAAK,SAAS,MAAM;AAAA,QACzD,MAAM,aAAa,kBAAkB;AAAA,QAGrC,MAAM,gBAAgB,IAAI;AAAA,QAC1B,IAAI,cAAc,CAAE,MAAM,oBAAoB,GAAI;AAAA,UAChD,MAAM,OAAO,KAAK;AAAA,UAClB,SAAS,MAAM,aAAa,WAAW,KAAK;AAAA,QAC9C;AAAA,QAIA,gBAAgB;AAAA,QAKhB,kBAAkB,KAAK,aAAa,IAAI;AAAA,QACxC,sBAAsB,KAAK,WAAW;AAAA,QACtC,OAAO,OAAO;AAAA,QAKd,IAAI,iBAAiB,YAAY;AAAA,UAC/B,kBAAkB,CAAC,MAAM,UAAU,GAAG,IAAI;AAAA,UAC1C,sBAAsB,CAAC,MAAM,UAAU,CAAC;AAAA,UACxC;AAAA,QACF;AAAA,QAGA,OAAO,MAAM,wBAAyB,MAAgB,SAAS;AAAA;AAAA,OAEhE,EAAE;AAAA,IAKL,IAAI,cAAc,MAAM;AAAA,MACjB,WAAW;AAAA,IAClB;AAAA,IAKA,MAAM,aAAa,CAAC,QAAQ,QAAQ,SAAS,EAAE,OAC7C,CAAC,WAAW,WAAW,IACzB;AAAA,IACA,MAAM,cAAc;AAAA,MAClB,QAAQ,QAAQ;AAAA,MAChB,QAAQ,QAAQ;AAAA,MAChB,QAAQ,QAAQ;AAAA,IAClB,EAAE,OAAO,CAAC,WAAW,WAAW,IAAI;AAAA,IAMpC,MAAM,iBAAiB,MAAM,CAAC,GAAG,YAAY,GAAG,WAAW,GAAG;AAAA,MAC5D,eAAe;AAAA,IACjB,CAAC,EAAE,GAAG,OAAO,UAAU;AAAA,IACvB,MAAM,YAAY;AAAA,MAChB,GAAG,QAAQ,QAAQ,IAAI,CAAC,WAAW,OAAO,QAAQ,UAAU,CAAC;AAAA,MAC7D,MAAM;AAAA,QACC,eAAe,MAAM;AAAA;AAAA,IAE9B,EAAE,OAAO,CAAC,YAAY,YAAY,SAAS;AAAA,IAE3C,MAAM,WAAW,YAAY;AAAA,MAC3B,WAAW,WAAW,WAAW;AAAA,QAC/B,QAAQ;AAAA,MACV;AAAA,MACA,YAAY;AAAA,MACZ,MAAM,OAAO,KAAK;AAAA,MAClB,QAAQ,KAAK,CAAC;AAAA;AAAA,IAGhB,QAAQ,GAAG,UAAU,QAAQ;AAAA,IAC7B,QAAQ,GAAG,WAAW,QAAQ;AAAA;AAElC,CAAC;",
+  "debugId": "DAFEE5DB6B0E8A0164756E2164756E21",
+  "names": []
+}