blume 2.0.3 → 2.1.1

package/dist/cli/{chunk-ga0pf4aj.js.map → chunk-0n9xkp3d.js.map}

@@ -3,9 +3,9 @@
   "sources": ["../src/cli/report-format.ts", "../src/eval/agents.ts"],
   "sourcesContent": [
     "/**\n * Number formatting shared by the translate and eval report renderers. The\n * `1.5s` / `4m 12s` shapes are asserted in both suites — change them in both\n * minds at once.\n */\n\n/** Milliseconds as `1.5s`. */\nexport const seconds = (ms: number): string => `${(ms / 1000).toFixed(1)}s`;\n\n/** A dollar cost as `$1.23`, or nothing when the run reported none. */\nexport const money = (cost: number | undefined): string =>\n  cost === undefined ? \"\" : `$${cost.toFixed(2)}`;\n\n/**\n * Milliseconds as `12.3s` under a minute, `4m 12s` from there up. Rounding\n * happens before the split, so a value just under a boundary carries over\n * (`59_990` → `1m 0s`, `119_700` → `2m 0s`) instead of printing `60.0s` or\n * `1m 60s`.\n */\nexport const duration = (ms: number): string => {\n  const tenths = Math.round(ms / 100);\n  if (tenths < 600) {\n    return `${(tenths / 10).toFixed(1)}s`;\n  }\n  const total = Math.round(ms / 1000);\n  return `${Math.floor(total / 60)}m ${total % 60}s`;\n};\n",
-    "import { readFile, writeFile } from \"node:fs/promises\";\n\nimport spawn from \"cross-spawn\";\nimport { join } from \"pathe\";\nimport { z } from \"zod\";\n\nimport type { AgentKind } from \"../audit/agent.ts\";\n\n/** How long the SIGTERM on timeout gets to work before SIGKILL follows. */\nconst KILL_GRACE_MS = 5000;\n\n/** The MCP tools a reader run may use — nothing else. */\nexport const MCP_TOOL_NAMES = [\n  \"search_docs\",\n  \"get_page\",\n  \"list_pages\",\n  \"get_navigation\",\n] as const;\n\n/** The MCP server name in the generated config; tool ids derive from it. */\nconst MCP_SERVER_NAME = \"docs\";\n\n/**\n * Claude Code built-ins that would let the agent escape the docs-only\n * sandbox: the reader must not read the repo, run commands, or search the\n * web — it sees the documentation the way a stranger does, through MCP.\n */\nexport const DISALLOWED_TOOLS = [\n  \"Bash\",\n  \"Read\",\n  \"Glob\",\n  \"Grep\",\n  \"Write\",\n  \"Edit\",\n  \"NotebookEdit\",\n  \"WebFetch\",\n  \"WebSearch\",\n  \"Task\",\n];\n\n/** The captured outcome of one headless agent invocation. */\nexport interface HeadlessResult {\n  code: number;\n  stderr: string;\n  stdout: string;\n  timedOut: boolean;\n}\n\nexport interface HeadlessOptions {\n  cwd: string;\n  /** How long the SIGTERM gets before SIGKILL follows (default 5s). */\n  killGraceMs?: number;\n  prompt: string;\n  timeoutMs: number;\n}\n\n/**\n * Run an agent CLI headlessly: prompt over stdin (dodging argv limits and\n * cmd.exe newline quoting alike), stdout and stderr captured, SIGTERM at the\n * deadline with a SIGKILL follow-up. Resolves with the captured result;\n * rejects only when the executable cannot be spawned at all (ENOENT).\n *\n * Spawned through cross-spawn, which runs npm's `.cmd` shims on Windows with\n * its own cmd.exe escaping — under the old `shell: true` launch, cmd.exe was\n * free to mangle the JSON carried by codex's `-c` arguments, and a missing\n * executable surfaced as exit code 9009 instead of an ENOENT rejection.\n * execa was evaluated and rejected here: it waits for the stdio streams to\n * close, and the `exit`-beats-`close` resolution below exists precisely\n * because a killed agent's own children (an MCP server, a shell) hold the\n * pipes open past the SIGTERM.\n */\nexport const runAgentHeadless = (\n  bin: string,\n  args: string[],\n  options: HeadlessOptions\n): Promise<HeadlessResult> =>\n  // oxlint-disable-next-line promise/avoid-new -- adapt spawn's event callbacks\n  new Promise((resolve, reject) => {\n    const child = spawn(bin, args, {\n      cwd: options.cwd,\n      stdio: [\"pipe\", \"pipe\", \"pipe\"],\n    });\n\n    let stdout = \"\";\n    let stderr = \"\";\n    let timedOut = false;\n    child.stdout?.on(\"data\", (chunk: Buffer) => {\n      stdout += chunk.toString(\"utf-8\");\n    });\n    child.stderr?.on(\"data\", (chunk: Buffer) => {\n      stderr += chunk.toString(\"utf-8\");\n    });\n\n    let hardKill: ReturnType<typeof setTimeout> | undefined;\n    const deadline = setTimeout(() => {\n      timedOut = true;\n      child.kill(\"SIGTERM\");\n      hardKill = setTimeout(\n        () => child.kill(\"SIGKILL\"),\n        options.killGraceMs ?? KILL_GRACE_MS\n      );\n      hardKill.unref();\n    }, options.timeoutMs);\n    deadline.unref();\n\n    child.once(\"error\", (error) => {\n      clearTimeout(deadline);\n      reject(error);\n    });\n    child.once(\"close\", (code) => {\n      clearTimeout(deadline);\n      resolve({ code: code ?? 1, stderr, stdout, timedOut });\n    });\n    // `close` waits for the stdio pipes, which a killed agent's own children\n    // (an MCP server, a shell) can hold open past the SIGTERM. A timed-out\n    // run's output is discarded anyway, so the process dying is enough.\n    child.once(\"exit\", (code) => {\n      // Once the process is gone the SIGKILL follow-up has nothing to do, and\n      // firing it later could signal an unrelated process that reused the pid.\n      clearTimeout(hardKill);\n      if (timedOut) {\n        clearTimeout(deadline);\n        resolve({ code: code ?? 1, stderr, stdout, timedOut });\n      }\n    });\n\n    // An agent that exits before reading the whole prompt (it rejected a flag,\n    // say) closes the pipe mid-write, and the resulting EPIPE would otherwise\n    // be an uncaught exception that aborts the run. The exit itself is the\n    // outcome: `close` resolves with the agent's code and stderr, which\n    // `readAgentOutput` reports.\n    child.stdin?.on(\"error\", () => {\n      // Deliberately ignored — see above.\n    });\n    child.stdin?.end(options.prompt);\n  });\n\n/** The spawn signature `runEval` accepts, injectable for tests. */\nexport type HeadlessRunner = typeof runAgentHeadless;\n\n/** How the eval reaches the MCP stdio bridge from a spawned agent. */\nexport interface McpLaunch {\n  /** The generated MCP config file (claude's `--mcp-config`). */\n  configPath: string;\n  /** argv for the bridge process (codex's `-c mcp_servers` override). */\n  serverArgs: string[];\n  /** The executable launching the bridge. */\n  serverCommand: string;\n}\n\n/**\n * Write the MCP config a reader run points its agent CLI at. The bridge is\n * this same CLI relaunched (`blume mcp-stdio`), which resolves correctly from\n * both a source checkout (bun + src/cli/index.ts) and an installed package\n * (node + bin/blume.mjs).\n */\nexport const writeMcpConfig = async (\n  dir: string,\n  snapshotPath: string,\n  launcher?: { args: string[]; command: string }\n): Promise<McpLaunch> => {\n  const resolved = launcher ?? {\n    args: [process.argv[1] ?? \"\", \"mcp-stdio\", \"--data\", snapshotPath],\n    command: process.execPath,\n  };\n  const configPath = join(dir, \"mcp-config.json\");\n  const config = {\n    mcpServers: {\n      [MCP_SERVER_NAME]: { args: resolved.args, command: resolved.command },\n    },\n  };\n  await writeFile(configPath, JSON.stringify(config, null, 2));\n  return {\n    configPath,\n    serverArgs: resolved.args,\n    serverCommand: resolved.command,\n  };\n};\n\nexport interface InvocationContext {\n  /** Where codex writes its final message; unused by claude. */\n  lastMessagePath: string;\n  /** The MCP bridge for reader runs; omitted for the judge. */\n  mcp?: McpLaunch;\n}\n\nconst CLAUDE_READER_MAX_TURNS = \"25\";\nconst CLAUDE_JUDGE_MAX_TURNS = \"1\";\n\nconst claudeArgs = (context: InvocationContext): string[] => {\n  const base = [\"-p\", \"--output-format\", \"json\", \"--strict-mcp-config\"];\n  if (context.mcp) {\n    const allowed = MCP_TOOL_NAMES.map(\n      (tool) => `mcp__${MCP_SERVER_NAME}__${tool}`\n    ).join(\",\");\n    return [\n      ...base,\n      \"--mcp-config\",\n      context.mcp.configPath,\n      \"--allowedTools\",\n      allowed,\n      \"--disallowedTools\",\n      DISALLOWED_TOOLS.join(\",\"),\n      \"--max-turns\",\n      CLAUDE_READER_MAX_TURNS,\n    ];\n  }\n  return [\n    ...base,\n    \"--disallowedTools\",\n    DISALLOWED_TOOLS.join(\",\"),\n    \"--max-turns\",\n    CLAUDE_JUDGE_MAX_TURNS,\n  ];\n};\n\n/**\n * Codex config overrides that leave an eval run nothing but its prompt and the\n * docs MCP tools (and a `blume translate` run nothing but its prompt). `--sandbox read-only` blocks writes and the network but still\n * lets the shell tool read any file the user can, and the docs a reader\n * searches — or the answer a judge grades — can come from a remote source, so\n * an instruction planted there could otherwise pull a local secret into the\n * transcript sent to the model provider. With both command tools and the\n * local-image tool off, and any subprocess started with no inherited\n * environment, there is nothing on the machine for a run to read.\n */\nexport const CODEX_LOCKDOWN = [\n  \"-c\",\n  \"features.shell_tool=false\",\n  \"-c\",\n  \"features.unified_exec=false\",\n  \"-c\",\n  \"tools.view_image=false\",\n  \"-c\",\n  'shell_environment_policy.inherit=\"none\"',\n];\n\nconst codexArgs = (context: InvocationContext): string[] => {\n  const base = [\n    \"exec\",\n    \"--skip-git-repo-check\",\n    \"--ignore-user-config\",\n    \"--ephemeral\",\n    \"--sandbox\",\n    \"read-only\",\n    ...CODEX_LOCKDOWN,\n    \"--output-last-message\",\n    context.lastMessagePath,\n  ];\n  if (context.mcp) {\n    // `-c` values parse as TOML; JSON string/array literals are valid TOML\n    // values, so JSON.stringify produces exactly the quoting codex expects.\n    return [\n      ...base,\n      \"-c\",\n      `mcp_servers.${MCP_SERVER_NAME}.command=${JSON.stringify(\n        context.mcp.serverCommand\n      )}`,\n      \"-c\",\n      `mcp_servers.${MCP_SERVER_NAME}.args=${JSON.stringify(\n        context.mcp.serverArgs\n      )}`,\n      \"-\",\n    ];\n  }\n  return [...base, \"-\"];\n};\n\n/** Build the argv for one headless run; pass `mcp` for the reader role. */\nexport const agentArgs = (\n  kind: AgentKind,\n  context: InvocationContext\n): string[] => (kind === \"claude\" ? claudeArgs(context) : codexArgs(context));\n\n/** What one headless run produced, normalized across agent CLIs. */\nexport interface AgentOutput {\n  costUsd?: number;\n  detail?: string;\n  isError: boolean;\n  text: string;\n}\n\nconst claudeResultSchema = z.object({\n  is_error: z.boolean().default(false),\n  result: z.string().default(\"\"),\n  total_cost_usd: z.number().optional(),\n});\n\nconst tail = (value: string, max = 300): string => {\n  const trimmed = value.trim();\n  return trimmed.length > max ? trimmed.slice(-max) : trimmed;\n};\n\n/**\n * Normalize a finished run into the answer text. Claude prints one JSON\n * object on stdout (`--output-format json`); codex writes the final message\n * to `--output-last-message` because its stdout interleaves progress.\n */\nexport const readAgentOutput = async (\n  kind: AgentKind,\n  result: HeadlessResult,\n  lastMessagePath: string\n): Promise<AgentOutput> => {\n  if (result.timedOut) {\n    return { detail: \"timed out\", isError: true, text: \"\" };\n  }\n  if (result.code !== 0) {\n    return {\n      detail: tail(result.stderr) || `exited with code ${result.code}`,\n      isError: true,\n      text: \"\",\n    };\n  }\n\n  if (kind === \"claude\") {\n    let parsed: unknown;\n    try {\n      parsed = JSON.parse(result.stdout);\n    } catch {\n      return {\n        detail: \"unparseable --output-format json payload\",\n        isError: true,\n        text: \"\",\n      };\n    }\n    const payload = claudeResultSchema.safeParse(parsed);\n    if (!payload.success) {\n      return {\n        detail: \"unexpected --output-format json shape\",\n        isError: true,\n        text: \"\",\n      };\n    }\n    return {\n      costUsd: payload.data.total_cost_usd,\n      isError: payload.data.is_error,\n      text: payload.data.result,\n    };\n  }\n\n  let text: string;\n  try {\n    const raw = await readFile(lastMessagePath, \"utf-8\");\n    text = raw.trim();\n  } catch {\n    return { detail: \"no last message written\", isError: true, text: \"\" };\n  }\n  if (text === \"\") {\n    return { detail: \"empty last message\", isError: true, text: \"\" };\n  }\n  return { isError: false, text };\n};\n\nconst verdictSchema = z.object({\n  missing: z.array(z.string()).default([]),\n  notes: z.string().default(\"\"),\n  pass: z.boolean(),\n  score: z.number().min(0).max(1).optional(),\n});\n\n/** The judge's grade for one answer. */\nexport type Verdict = z.infer<typeof verdictSchema>;\n\n/**\n * Extract the verdict JSON from a judge reply. Tolerates markdown fences and\n * surrounding prose; returns undefined when no valid verdict can be found.\n */\nexport const parseVerdict = (text: string): Verdict | undefined => {\n  const start = text.indexOf(\"{\");\n  const end = text.lastIndexOf(\"}\");\n  if (start === -1 || end <= start) {\n    return;\n  }\n  let parsed: unknown;\n  try {\n    parsed = JSON.parse(text.slice(start, end + 1));\n  } catch {\n    return;\n  }\n  const result = verdictSchema.safeParse(parsed);\n  return result.success ? result.data : undefined;\n};\n"
+    "import { readFile, writeFile } from \"node:fs/promises\";\n\nimport spawn from \"cross-spawn\";\nimport { join } from \"pathe\";\nimport { z } from \"zod\";\n\nimport type { AgentKind } from \"../audit/agent.ts\";\n\n/** How long the SIGTERM on timeout gets to work before SIGKILL follows. */\nconst KILL_GRACE_MS = 5000;\n\n/** The MCP tools a reader run may use — nothing else. */\nexport const MCP_TOOL_NAMES = [\n  \"search_docs\",\n  \"get_page\",\n  \"list_pages\",\n  \"get_navigation\",\n] as const;\n\n/** The MCP server name in the generated config; tool ids derive from it. */\nconst MCP_SERVER_NAME = \"docs\";\n\n/**\n * Claude Code built-ins that would let the agent escape the docs-only\n * sandbox: the reader must not read the repo, run commands, or search the\n * web — it sees the documentation the way a stranger does, through MCP.\n */\nexport const DISALLOWED_TOOLS = [\n  \"Bash\",\n  \"Read\",\n  \"Glob\",\n  \"Grep\",\n  \"Write\",\n  \"Edit\",\n  \"NotebookEdit\",\n  \"WebFetch\",\n  \"WebSearch\",\n  \"Task\",\n];\n\n/** The captured outcome of one headless agent invocation. */\nexport interface HeadlessResult {\n  code: number;\n  stderr: string;\n  stdout: string;\n  timedOut: boolean;\n}\n\nexport interface HeadlessOptions {\n  cwd: string;\n  /** How long the SIGTERM gets before SIGKILL follows (default 5s). */\n  killGraceMs?: number;\n  prompt: string;\n  timeoutMs: number;\n}\n\n/**\n * Run an agent CLI headlessly: prompt over stdin (dodging argv limits and\n * cmd.exe newline quoting alike), stdout and stderr captured, SIGTERM at the\n * deadline with a SIGKILL follow-up. Resolves with the captured result;\n * rejects only when the executable cannot be spawned at all (ENOENT).\n *\n * Spawned through cross-spawn, which runs npm's `.cmd` shims on Windows with\n * its own cmd.exe escaping — under the old `shell: true` launch, cmd.exe was\n * free to mangle the JSON carried by codex's `-c` arguments, and a missing\n * executable surfaced as exit code 9009 instead of an ENOENT rejection.\n * execa was evaluated and rejected here: it waits for the stdio streams to\n * close, and the `exit`-beats-`close` resolution below exists precisely\n * because a killed agent's own children (an MCP server, a shell) hold the\n * pipes open past the SIGTERM.\n */\nexport const runAgentHeadless = (\n  bin: string,\n  args: string[],\n  options: HeadlessOptions\n): Promise<HeadlessResult> =>\n  // oxlint-disable-next-line promise/avoid-new -- adapt spawn's event callbacks\n  new Promise((resolve, reject) => {\n    const child = spawn(bin, args, {\n      cwd: options.cwd,\n      stdio: [\"pipe\", \"pipe\", \"pipe\"],\n    });\n\n    let stdout = \"\";\n    let stderr = \"\";\n    let timedOut = false;\n    child.stdout?.on(\"data\", (chunk: Buffer) => {\n      stdout += chunk.toString(\"utf-8\");\n    });\n    child.stderr?.on(\"data\", (chunk: Buffer) => {\n      stderr += chunk.toString(\"utf-8\");\n    });\n\n    let hardKill: ReturnType<typeof setTimeout> | undefined;\n    const deadline = setTimeout(() => {\n      timedOut = true;\n      child.kill(\"SIGTERM\");\n      hardKill = setTimeout(\n        () => child.kill(\"SIGKILL\"),\n        options.killGraceMs ?? KILL_GRACE_MS\n      );\n      hardKill.unref();\n    }, options.timeoutMs);\n    deadline.unref();\n\n    child.once(\"error\", (error) => {\n      clearTimeout(deadline);\n      reject(error);\n    });\n    child.once(\"close\", (code) => {\n      clearTimeout(deadline);\n      resolve({ code: code ?? 1, stderr, stdout, timedOut });\n    });\n    // `close` waits for the stdio pipes, which a killed agent's own children\n    // (an MCP server, a shell) can hold open past the SIGTERM. A timed-out\n    // run's output is discarded anyway, so the process dying is enough.\n    child.once(\"exit\", (code) => {\n      // Once the process is gone the SIGKILL follow-up has nothing to do, and\n      // firing it later could signal an unrelated process that reused the pid.\n      clearTimeout(hardKill);\n      if (timedOut) {\n        clearTimeout(deadline);\n        resolve({ code: code ?? 1, stderr, stdout, timedOut });\n      }\n    });\n\n    // An agent that exits before reading the whole prompt (it rejected a flag,\n    // say) closes the pipe mid-write, and the resulting EPIPE would otherwise\n    // be an uncaught exception that aborts the run. The exit itself is the\n    // outcome: `close` resolves with the agent's code and stderr, which\n    // `readAgentOutput` reports.\n    child.stdin?.on(\"error\", () => {\n      // Deliberately ignored — see above.\n    });\n    child.stdin?.end(options.prompt);\n  });\n\n/** The spawn signature `runEval` accepts, injectable for tests. */\nexport type HeadlessRunner = typeof runAgentHeadless;\n\n/** How the eval reaches the MCP stdio bridge from a spawned agent. */\nexport interface McpLaunch {\n  /** The generated MCP config file (claude's `--mcp-config`). */\n  configPath: string;\n  /** argv for the bridge process (codex's `-c mcp_servers` override). */\n  serverArgs: string[];\n  /** The executable launching the bridge. */\n  serverCommand: string;\n}\n\n/**\n * Write the MCP config a reader run points its agent CLI at. The bridge is\n * this same CLI relaunched (`blume mcp-stdio`), which resolves correctly from\n * both a source checkout (bun + src/cli/index.ts) and an installed package\n * (node + bin/blume.mjs).\n */\nexport const writeMcpConfig = async (\n  dir: string,\n  snapshotPath: string,\n  launcher?: { args: string[]; command: string }\n): Promise<McpLaunch> => {\n  const resolved = launcher ?? {\n    args: [process.argv[1] ?? \"\", \"mcp-stdio\", \"--data\", snapshotPath],\n    command: process.execPath,\n  };\n  const configPath = join(dir, \"mcp-config.json\");\n  const config = {\n    mcpServers: {\n      [MCP_SERVER_NAME]: { args: resolved.args, command: resolved.command },\n    },\n  };\n  await writeFile(configPath, JSON.stringify(config, null, 2));\n  return {\n    configPath,\n    serverArgs: resolved.args,\n    serverCommand: resolved.command,\n  };\n};\n\nexport interface InvocationContext {\n  /** Where codex writes its final message; unused by claude. */\n  lastMessagePath: string;\n  /** The MCP bridge for reader runs; omitted for the judge. */\n  mcp?: McpLaunch;\n}\n\nconst CLAUDE_READER_MAX_TURNS = \"25\";\nconst CLAUDE_JUDGE_MAX_TURNS = \"1\";\n\nconst claudeArgs = (context: InvocationContext): string[] => {\n  // `--tools \"\"` turns off every Claude Code built-in, including ones the\n  // deny list below doesn't name (`Monitor` runs shell commands, `Skill`\n  // loads the user's skills), so a reader has only the docs MCP tools and the\n  // judge has no tools at all. The deny list stays as a second layer.\n  // `--setting-sources \"\"` is codex's `--ignore-user-config`: no settings\n  // files, so the user's hooks, plugins, and CLAUDE.md can't hand the reader\n  // context the docs never gave it. Not `--bare`, which also stops reading a\n  // subscription login and fails with \"Not logged in\".\n  const base = [\n    \"-p\",\n    \"--output-format\",\n    \"json\",\n    \"--strict-mcp-config\",\n    \"--tools\",\n    \"\",\n    \"--setting-sources\",\n    \"\",\n  ];\n  if (context.mcp) {\n    const allowed = MCP_TOOL_NAMES.map(\n      (tool) => `mcp__${MCP_SERVER_NAME}__${tool}`\n    ).join(\",\");\n    return [\n      ...base,\n      \"--mcp-config\",\n      context.mcp.configPath,\n      \"--allowedTools\",\n      allowed,\n      \"--disallowedTools\",\n      DISALLOWED_TOOLS.join(\",\"),\n      \"--max-turns\",\n      CLAUDE_READER_MAX_TURNS,\n    ];\n  }\n  return [\n    ...base,\n    \"--disallowedTools\",\n    DISALLOWED_TOOLS.join(\",\"),\n    \"--max-turns\",\n    CLAUDE_JUDGE_MAX_TURNS,\n  ];\n};\n\n/**\n * Codex config overrides that leave an eval run nothing but its prompt and the\n * docs MCP tools (and a `blume translate` run nothing but its prompt). `--sandbox read-only` blocks writes and the network but still\n * lets the shell tool read any file the user can, and the docs a reader\n * searches — or the answer a judge grades — can come from a remote source, so\n * an instruction planted there could otherwise pull a local secret into the\n * transcript sent to the model provider. With both command tools and the\n * local-image tool off, and any subprocess started with no inherited\n * environment, there is nothing on the machine for a run to read.\n */\nexport const CODEX_LOCKDOWN = [\n  \"-c\",\n  \"features.shell_tool=false\",\n  \"-c\",\n  \"features.unified_exec=false\",\n  \"-c\",\n  \"tools.view_image=false\",\n  \"-c\",\n  'shell_environment_policy.inherit=\"none\"',\n];\n\nconst codexArgs = (context: InvocationContext): string[] => {\n  const base = [\n    \"exec\",\n    \"--skip-git-repo-check\",\n    \"--ignore-user-config\",\n    \"--ephemeral\",\n    \"--sandbox\",\n    \"read-only\",\n    ...CODEX_LOCKDOWN,\n    \"--output-last-message\",\n    context.lastMessagePath,\n  ];\n  if (context.mcp) {\n    // `-c` values parse as TOML; JSON string/array literals are valid TOML\n    // values, so JSON.stringify produces exactly the quoting codex expects.\n    return [\n      ...base,\n      \"-c\",\n      `mcp_servers.${MCP_SERVER_NAME}.command=${JSON.stringify(\n        context.mcp.serverCommand\n      )}`,\n      \"-c\",\n      `mcp_servers.${MCP_SERVER_NAME}.args=${JSON.stringify(\n        context.mcp.serverArgs\n      )}`,\n      \"-\",\n    ];\n  }\n  return [...base, \"-\"];\n};\n\n/** Build the argv for one headless run; pass `mcp` for the reader role. */\nexport const agentArgs = (\n  kind: AgentKind,\n  context: InvocationContext\n): string[] => (kind === \"claude\" ? claudeArgs(context) : codexArgs(context));\n\n/** What one headless run produced, normalized across agent CLIs. */\nexport interface AgentOutput {\n  costUsd?: number;\n  detail?: string;\n  isError: boolean;\n  text: string;\n}\n\nconst claudeResultSchema = z.object({\n  is_error: z.boolean().default(false),\n  result: z.string().default(\"\"),\n  total_cost_usd: z.number().optional(),\n});\n\nconst tail = (value: string, max = 300): string => {\n  const trimmed = value.trim();\n  return trimmed.length > max ? trimmed.slice(-max) : trimmed;\n};\n\n/**\n * Normalize a finished run into the answer text. Claude prints one JSON\n * object on stdout (`--output-format json`); codex writes the final message\n * to `--output-last-message` because its stdout interleaves progress.\n */\nexport const readAgentOutput = async (\n  kind: AgentKind,\n  result: HeadlessResult,\n  lastMessagePath: string\n): Promise<AgentOutput> => {\n  if (result.timedOut) {\n    return { detail: \"timed out\", isError: true, text: \"\" };\n  }\n  if (result.code !== 0) {\n    return {\n      detail: tail(result.stderr) || `exited with code ${result.code}`,\n      isError: true,\n      text: \"\",\n    };\n  }\n\n  if (kind === \"claude\") {\n    let parsed: unknown;\n    try {\n      parsed = JSON.parse(result.stdout);\n    } catch {\n      return {\n        detail: \"unparseable --output-format json payload\",\n        isError: true,\n        text: \"\",\n      };\n    }\n    const payload = claudeResultSchema.safeParse(parsed);\n    if (!payload.success) {\n      return {\n        detail: \"unexpected --output-format json shape\",\n        isError: true,\n        text: \"\",\n      };\n    }\n    return {\n      costUsd: payload.data.total_cost_usd,\n      isError: payload.data.is_error,\n      text: payload.data.result,\n    };\n  }\n\n  let text: string;\n  try {\n    const raw = await readFile(lastMessagePath, \"utf-8\");\n    text = raw.trim();\n  } catch {\n    return { detail: \"no last message written\", isError: true, text: \"\" };\n  }\n  if (text === \"\") {\n    return { detail: \"empty last message\", isError: true, text: \"\" };\n  }\n  return { isError: false, text };\n};\n\nconst verdictSchema = z.object({\n  missing: z.array(z.string()).default([]),\n  notes: z.string().default(\"\"),\n  pass: z.boolean(),\n  score: z.number().min(0).max(1).optional(),\n});\n\n/** The judge's grade for one answer. */\nexport type Verdict = z.infer<typeof verdictSchema>;\n\n/**\n * Extract the verdict JSON from a judge reply. Tolerates markdown fences and\n * surrounding prose; returns undefined when no valid verdict can be found.\n */\nexport const parseVerdict = (text: string): Verdict | undefined => {\n  const start = text.indexOf(\"{\");\n  const end = text.lastIndexOf(\"}\");\n  if (start === -1 || end <= start) {\n    return;\n  }\n  let parsed: unknown;\n  try {\n    parsed = JSON.parse(text.slice(start, end + 1));\n  } catch {\n    return;\n  }\n  const result = verdictSchema.safeParse(parsed);\n  return result.success ? result.data : undefined;\n};\n"
   ],
-  "mappings": ";;;AAOO,IAAM,UAAU,CAAC,OAAuB,IAAI,KAAK,MAAM,QAAQ,CAAC;AAGhE,IAAM,QAAQ,CAAC,SACpB,SAAS,YAAY,KAAK,IAAI,KAAK,QAAQ,CAAC;AAQvC,IAAM,WAAW,CAAC,OAAuB;AAAA,EAC9C,MAAM,SAAS,KAAK,MAAM,KAAK,GAAG;AAAA,EAClC,IAAI,SAAS,KAAK;AAAA,IAChB,OAAO,IAAI,SAAS,IAAI,QAAQ,CAAC;AAAA,EACnC;AAAA,EACA,MAAM,QAAQ,KAAK,MAAM,KAAK,IAAI;AAAA,EAClC,OAAO,GAAG,KAAK,MAAM,QAAQ,EAAE,MAAM,QAAQ;AAAA;;;ACzB/C;AAEA;AACA;AACA;AAKA,IAAM,gBAAgB;AAGf,IAAM,iBAAiB;AAAA,EAC5B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAGA,IAAM,kBAAkB;AAOjB,IAAM,mBAAmB;AAAA,EAC9B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAiCO,IAAM,mBAAmB,CAC9B,KACA,MACA,YAGA,IAAI,QAAQ,CAAC,SAAS,WAAW;AAAA,EAC/B,MAAM,QAAQ,MAAM,KAAK,MAAM;AAAA,IAC7B,KAAK,QAAQ;AAAA,IACb,OAAO,CAAC,QAAQ,QAAQ,MAAM;AAAA,EAChC,CAAC;AAAA,EAED,IAAI,SAAS;AAAA,EACb,IAAI,SAAS;AAAA,EACb,IAAI,WAAW;AAAA,EACf,MAAM,QAAQ,GAAG,QAAQ,CAAC,UAAkB;AAAA,IAC1C,UAAU,MAAM,SAAS,OAAO;AAAA,GACjC;AAAA,EACD,MAAM,QAAQ,GAAG,QAAQ,CAAC,UAAkB;AAAA,IAC1C,UAAU,MAAM,SAAS,OAAO;AAAA,GACjC;AAAA,EAED,IAAI;AAAA,EACJ,MAAM,WAAW,WAAW,MAAM;AAAA,IAChC,WAAW;AAAA,IACX,MAAM,KAAK,SAAS;AAAA,IACpB,WAAW,WACT,MAAM,MAAM,KAAK,SAAS,GAC1B,QAAQ,eAAe,aACzB;AAAA,IACA,SAAS,MAAM;AAAA,KACd,QAAQ,SAAS;AAAA,EACpB,SAAS,MAAM;AAAA,EAEf,MAAM,KAAK,SAAS,CAAC,UAAU;AAAA,IAC7B,aAAa,QAAQ;AAAA,IACrB,OAAO,KAAK;AAAA,GACb;AAAA,EACD,MAAM,KAAK,SAAS,CAAC,SAAS;AAAA,IAC5B,aAAa,QAAQ;AAAA,IACrB,QAAQ,EAAE,MAAM,QAAQ,GAAG,QAAQ,QAAQ,SAAS,CAAC;AAAA,GACtD;AAAA,EAID,MAAM,KAAK,QAAQ,CAAC,SAAS;AAAA,IAG3B,aAAa,QAAQ;AAAA,IACrB,IAAI,UAAU;AAAA,MACZ,aAAa,QAAQ;AAAA,MACrB,QAAQ,EAAE,MAAM,QAAQ,GAAG,QAAQ,QAAQ,SAAS,CAAC;AAAA,IACvD;AAAA,GACD;AAAA,EAOD,MAAM,OAAO,GAAG,SAAS,MAAM,EAE9B;AAAA,EACD,MAAM,OAAO,IAAI,QAAQ,MAAM;AAAA,CAChC;AAqBI,IAAM,iBAAiB,OAC5B,KACA,cACA,aACuB;AAAA,EACvB,MAAM,WAAW,YAAY;AAAA,IAC3B,MAAM,CAAC,QAAQ,KAAK,MAAM,IAAI,aAAa,UAAU,YAAY;AAAA,IACjE,SAAS,QAAQ;AAAA,EACnB;AAAA,EACA,MAAM,aAAa,KAAK,KAAK,iBAAiB;AAAA,EAC9C,MAAM,SAAS;AAAA,IACb,YAAY;AAAA,OACT,kBAAkB,EAAE,MAAM,SAAS,MAAM,SAAS,SAAS,QAAQ;AAAA,IACtE;AAAA,EACF;AAAA,EACA,MAAM,UAAU,YAAY,KAAK,UAAU,QAAQ,MAAM,CAAC,CAAC;AAAA,EAC3D,OAAO;AAAA,IACL;AAAA,IACA,YAAY,SAAS;AAAA,IACrB,eAAe,SAAS;AAAA,EAC1B;AAAA;AAUF,IAAM,0BAA0B;AAChC,IAAM,yBAAyB;AAE/B,IAAM,aAAa,CAAC,YAAyC;AAAA,EAC3D,MAAM,OAAO,CAAC,MAAM,mBAAmB,QAAQ,qBAAqB;AAAA,EACpE,IAAI,QAAQ,KAAK;AAAA,IACf,MAAM,UAAU,eAAe,IAC7B,CAAC,SAAS,QAAQ,oBAAoB,MACxC,EAAE,KAAK,GAAG;AAAA,IACV,OAAO;AAAA,MACL,GAAG;AAAA,MACH;AAAA,MACA,QAAQ,IAAI;AAAA,MACZ;AAAA,MACA;AAAA,MACA;AAAA,MACA,iBAAiB,KAAK,GAAG;AAAA,MACzB;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAAA,EACA,OAAO;AAAA,IACL,GAAG;AAAA,IACH;AAAA,IACA,iBAAiB,KAAK,GAAG;AAAA,IACzB;AAAA,IACA;AAAA,EACF;AAAA;AAaK,IAAM,iBAAiB;AAAA,EAC5B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAEA,IAAM,YAAY,CAAC,YAAyC;AAAA,EAC1D,MAAM,OAAO;AAAA,IACX;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,GAAG;AAAA,IACH;AAAA,IACA,QAAQ;AAAA,EACV;AAAA,EACA,IAAI,QAAQ,KAAK;AAAA,IAGf,OAAO;AAAA,MACL,GAAG;AAAA,MACH;AAAA,MACA,eAAe,2BAA2B,KAAK,UAC7C,QAAQ,IAAI,aACd;AAAA,MACA;AAAA,MACA,eAAe,wBAAwB,KAAK,UAC1C,QAAQ,IAAI,UACd;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAAA,EACA,OAAO,CAAC,GAAG,MAAM,GAAG;AAAA;AAIf,IAAM,YAAY,CACvB,MACA,YACc,SAAS,WAAW,WAAW,OAAO,IAAI,UAAU,OAAO;AAU3E,IAAM,qBAAqB,EAAE,OAAO;AAAA,EAClC,UAAU,EAAE,QAAQ,EAAE,QAAQ,KAAK;AAAA,EACnC,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE;AAAA,EAC7B,gBAAgB,EAAE,OAAO,EAAE,SAAS;AACtC,CAAC;AAED,IAAM,OAAO,CAAC,OAAe,MAAM,QAAgB;AAAA,EACjD,MAAM,UAAU,MAAM,KAAK;AAAA,EAC3B,OAAO,QAAQ,SAAS,MAAM,QAAQ,MAAM,CAAC,GAAG,IAAI;AAAA;AAQ/C,IAAM,kBAAkB,OAC7B,MACA,QACA,oBACyB;AAAA,EACzB,IAAI,OAAO,UAAU;AAAA,IACnB,OAAO,EAAE,QAAQ,aAAa,SAAS,MAAM,MAAM,GAAG;AAAA,EACxD;AAAA,EACA,IAAI,OAAO,SAAS,GAAG;AAAA,IACrB,OAAO;AAAA,MACL,QAAQ,KAAK,OAAO,MAAM,KAAK,oBAAoB,OAAO;AAAA,MAC1D,SAAS;AAAA,MACT,MAAM;AAAA,IACR;AAAA,EACF;AAAA,EAEA,IAAI,SAAS,UAAU;AAAA,IACrB,IAAI;AAAA,IACJ,IAAI;AAAA,MACF,SAAS,KAAK,MAAM,OAAO,MAAM;AAAA,MACjC,MAAM;AAAA,MACN,OAAO;AAAA,QACL,QAAQ;AAAA,QACR,SAAS;AAAA,QACT,MAAM;AAAA,MACR;AAAA;AAAA,IAEF,MAAM,UAAU,mBAAmB,UAAU,MAAM;AAAA,IACnD,IAAI,CAAC,QAAQ,SAAS;AAAA,MACpB,OAAO;AAAA,QACL,QAAQ;AAAA,QACR,SAAS;AAAA,QACT,MAAM;AAAA,MACR;AAAA,IACF;AAAA,IACA,OAAO;AAAA,MACL,SAAS,QAAQ,KAAK;AAAA,MACtB,SAAS,QAAQ,KAAK;AAAA,MACtB,MAAM,QAAQ,KAAK;AAAA,IACrB;AAAA,EACF;AAAA,EAEA,IAAI;AAAA,EACJ,IAAI;AAAA,IACF,MAAM,MAAM,MAAM,SAAS,iBAAiB,OAAO;AAAA,IACnD,OAAO,IAAI,KAAK;AAAA,IAChB,MAAM;AAAA,IACN,OAAO,EAAE,QAAQ,2BAA2B,SAAS,MAAM,MAAM,GAAG;AAAA;AAAA,EAEtE,IAAI,SAAS,IAAI;AAAA,IACf,OAAO,EAAE,QAAQ,sBAAsB,SAAS,MAAM,MAAM,GAAG;AAAA,EACjE;AAAA,EACA,OAAO,EAAE,SAAS,OAAO,KAAK;AAAA;AAGhC,IAAM,gBAAgB,EAAE,OAAO;AAAA,EAC7B,SAAS,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,QAAQ,CAAC,CAAC;AAAA,EACvC,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE;AAAA,EAC5B,MAAM,EAAE,QAAQ;AAAA,EAChB,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,CAAC,EAAE,SAAS;AAC3C,CAAC;AASM,IAAM,eAAe,CAAC,SAAsC;AAAA,EACjE,MAAM,QAAQ,KAAK,QAAQ,GAAG;AAAA,EAC9B,MAAM,MAAM,KAAK,YAAY,GAAG;AAAA,EAChC,IAAI,UAAU,MAAM,OAAO,OAAO;AAAA,IAChC;AAAA,EACF;AAAA,EACA,IAAI;AAAA,EACJ,IAAI;AAAA,IACF,SAAS,KAAK,MAAM,KAAK,MAAM,OAAO,MAAM,CAAC,CAAC;AAAA,IAC9C,MAAM;AAAA,IACN;AAAA;AAAA,EAEF,MAAM,SAAS,cAAc,UAAU,MAAM;AAAA,EAC7C,OAAO,OAAO,UAAU,OAAO,OAAO;AAAA;",
-  "debugId": "DE4C096172619DD564756E2164756E21",
+  "mappings": ";;;AAOO,IAAM,UAAU,CAAC,OAAuB,IAAI,KAAK,MAAM,QAAQ,CAAC;AAGhE,IAAM,QAAQ,CAAC,SACpB,SAAS,YAAY,KAAK,IAAI,KAAK,QAAQ,CAAC;AAQvC,IAAM,WAAW,CAAC,OAAuB;AAAA,EAC9C,MAAM,SAAS,KAAK,MAAM,KAAK,GAAG;AAAA,EAClC,IAAI,SAAS,KAAK;AAAA,IAChB,OAAO,IAAI,SAAS,IAAI,QAAQ,CAAC;AAAA,EACnC;AAAA,EACA,MAAM,QAAQ,KAAK,MAAM,KAAK,IAAI;AAAA,EAClC,OAAO,GAAG,KAAK,MAAM,QAAQ,EAAE,MAAM,QAAQ;AAAA;;;ACzB/C;AAEA;AACA;AACA;AAKA,IAAM,gBAAgB;AAGf,IAAM,iBAAiB;AAAA,EAC5B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAGA,IAAM,kBAAkB;AAOjB,IAAM,mBAAmB;AAAA,EAC9B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAiCO,IAAM,mBAAmB,CAC9B,KACA,MACA,YAGA,IAAI,QAAQ,CAAC,SAAS,WAAW;AAAA,EAC/B,MAAM,QAAQ,MAAM,KAAK,MAAM;AAAA,IAC7B,KAAK,QAAQ;AAAA,IACb,OAAO,CAAC,QAAQ,QAAQ,MAAM;AAAA,EAChC,CAAC;AAAA,EAED,IAAI,SAAS;AAAA,EACb,IAAI,SAAS;AAAA,EACb,IAAI,WAAW;AAAA,EACf,MAAM,QAAQ,GAAG,QAAQ,CAAC,UAAkB;AAAA,IAC1C,UAAU,MAAM,SAAS,OAAO;AAAA,GACjC;AAAA,EACD,MAAM,QAAQ,GAAG,QAAQ,CAAC,UAAkB;AAAA,IAC1C,UAAU,MAAM,SAAS,OAAO;AAAA,GACjC;AAAA,EAED,IAAI;AAAA,EACJ,MAAM,WAAW,WAAW,MAAM;AAAA,IAChC,WAAW;AAAA,IACX,MAAM,KAAK,SAAS;AAAA,IACpB,WAAW,WACT,MAAM,MAAM,KAAK,SAAS,GAC1B,QAAQ,eAAe,aACzB;AAAA,IACA,SAAS,MAAM;AAAA,KACd,QAAQ,SAAS;AAAA,EACpB,SAAS,MAAM;AAAA,EAEf,MAAM,KAAK,SAAS,CAAC,UAAU;AAAA,IAC7B,aAAa,QAAQ;AAAA,IACrB,OAAO,KAAK;AAAA,GACb;AAAA,EACD,MAAM,KAAK,SAAS,CAAC,SAAS;AAAA,IAC5B,aAAa,QAAQ;AAAA,IACrB,QAAQ,EAAE,MAAM,QAAQ,GAAG,QAAQ,QAAQ,SAAS,CAAC;AAAA,GACtD;AAAA,EAID,MAAM,KAAK,QAAQ,CAAC,SAAS;AAAA,IAG3B,aAAa,QAAQ;AAAA,IACrB,IAAI,UAAU;AAAA,MACZ,aAAa,QAAQ;AAAA,MACrB,QAAQ,EAAE,MAAM,QAAQ,GAAG,QAAQ,QAAQ,SAAS,CAAC;AAAA,IACvD;AAAA,GACD;AAAA,EAOD,MAAM,OAAO,GAAG,SAAS,MAAM,EAE9B;AAAA,EACD,MAAM,OAAO,IAAI,QAAQ,MAAM;AAAA,CAChC;AAqBI,IAAM,iBAAiB,OAC5B,KACA,cACA,aACuB;AAAA,EACvB,MAAM,WAAW,YAAY;AAAA,IAC3B,MAAM,CAAC,QAAQ,KAAK,MAAM,IAAI,aAAa,UAAU,YAAY;AAAA,IACjE,SAAS,QAAQ;AAAA,EACnB;AAAA,EACA,MAAM,aAAa,KAAK,KAAK,iBAAiB;AAAA,EAC9C,MAAM,SAAS;AAAA,IACb,YAAY;AAAA,OACT,kBAAkB,EAAE,MAAM,SAAS,MAAM,SAAS,SAAS,QAAQ;AAAA,IACtE;AAAA,EACF;AAAA,EACA,MAAM,UAAU,YAAY,KAAK,UAAU,QAAQ,MAAM,CAAC,CAAC;AAAA,EAC3D,OAAO;AAAA,IACL;AAAA,IACA,YAAY,SAAS;AAAA,IACrB,eAAe,SAAS;AAAA,EAC1B;AAAA;AAUF,IAAM,0BAA0B;AAChC,IAAM,yBAAyB;AAE/B,IAAM,aAAa,CAAC,YAAyC;AAAA,EAS3D,MAAM,OAAO;AAAA,IACX;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AAAA,EACA,IAAI,QAAQ,KAAK;AAAA,IACf,MAAM,UAAU,eAAe,IAC7B,CAAC,SAAS,QAAQ,oBAAoB,MACxC,EAAE,KAAK,GAAG;AAAA,IACV,OAAO;AAAA,MACL,GAAG;AAAA,MACH;AAAA,MACA,QAAQ,IAAI;AAAA,MACZ;AAAA,MACA;AAAA,MACA;AAAA,MACA,iBAAiB,KAAK,GAAG;AAAA,MACzB;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAAA,EACA,OAAO;AAAA,IACL,GAAG;AAAA,IACH;AAAA,IACA,iBAAiB,KAAK,GAAG;AAAA,IACzB;AAAA,IACA;AAAA,EACF;AAAA;AAaK,IAAM,iBAAiB;AAAA,EAC5B;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF;AAEA,IAAM,YAAY,CAAC,YAAyC;AAAA,EAC1D,MAAM,OAAO;AAAA,IACX;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,GAAG;AAAA,IACH;AAAA,IACA,QAAQ;AAAA,EACV;AAAA,EACA,IAAI,QAAQ,KAAK;AAAA,IAGf,OAAO;AAAA,MACL,GAAG;AAAA,MACH;AAAA,MACA,eAAe,2BAA2B,KAAK,UAC7C,QAAQ,IAAI,aACd;AAAA,MACA;AAAA,MACA,eAAe,wBAAwB,KAAK,UAC1C,QAAQ,IAAI,UACd;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAAA,EACA,OAAO,CAAC,GAAG,MAAM,GAAG;AAAA;AAIf,IAAM,YAAY,CACvB,MACA,YACc,SAAS,WAAW,WAAW,OAAO,IAAI,UAAU,OAAO;AAU3E,IAAM,qBAAqB,EAAE,OAAO;AAAA,EAClC,UAAU,EAAE,QAAQ,EAAE,QAAQ,KAAK;AAAA,EACnC,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE;AAAA,EAC7B,gBAAgB,EAAE,OAAO,EAAE,SAAS;AACtC,CAAC;AAED,IAAM,OAAO,CAAC,OAAe,MAAM,QAAgB;AAAA,EACjD,MAAM,UAAU,MAAM,KAAK;AAAA,EAC3B,OAAO,QAAQ,SAAS,MAAM,QAAQ,MAAM,CAAC,GAAG,IAAI;AAAA;AAQ/C,IAAM,kBAAkB,OAC7B,MACA,QACA,oBACyB;AAAA,EACzB,IAAI,OAAO,UAAU;AAAA,IACnB,OAAO,EAAE,QAAQ,aAAa,SAAS,MAAM,MAAM,GAAG;AAAA,EACxD;AAAA,EACA,IAAI,OAAO,SAAS,GAAG;AAAA,IACrB,OAAO;AAAA,MACL,QAAQ,KAAK,OAAO,MAAM,KAAK,oBAAoB,OAAO;AAAA,MAC1D,SAAS;AAAA,MACT,MAAM;AAAA,IACR;AAAA,EACF;AAAA,EAEA,IAAI,SAAS,UAAU;AAAA,IACrB,IAAI;AAAA,IACJ,IAAI;AAAA,MACF,SAAS,KAAK,MAAM,OAAO,MAAM;AAAA,MACjC,MAAM;AAAA,MACN,OAAO;AAAA,QACL,QAAQ;AAAA,QACR,SAAS;AAAA,QACT,MAAM;AAAA,MACR;AAAA;AAAA,IAEF,MAAM,UAAU,mBAAmB,UAAU,MAAM;AAAA,IACnD,IAAI,CAAC,QAAQ,SAAS;AAAA,MACpB,OAAO;AAAA,QACL,QAAQ;AAAA,QACR,SAAS;AAAA,QACT,MAAM;AAAA,MACR;AAAA,IACF;AAAA,IACA,OAAO;AAAA,MACL,SAAS,QAAQ,KAAK;AAAA,MACtB,SAAS,QAAQ,KAAK;AAAA,MACtB,MAAM,QAAQ,KAAK;AAAA,IACrB;AAAA,EACF;AAAA,EAEA,IAAI;AAAA,EACJ,IAAI;AAAA,IACF,MAAM,MAAM,MAAM,SAAS,iBAAiB,OAAO;AAAA,IACnD,OAAO,IAAI,KAAK;AAAA,IAChB,MAAM;AAAA,IACN,OAAO,EAAE,QAAQ,2BAA2B,SAAS,MAAM,MAAM,GAAG;AAAA;AAAA,EAEtE,IAAI,SAAS,IAAI;AAAA,IACf,OAAO,EAAE,QAAQ,sBAAsB,SAAS,MAAM,MAAM,GAAG;AAAA,EACjE;AAAA,EACA,OAAO,EAAE,SAAS,OAAO,KAAK;AAAA;AAGhC,IAAM,gBAAgB,EAAE,OAAO;AAAA,EAC7B,SAAS,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,QAAQ,CAAC,CAAC;AAAA,EACvC,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE;AAAA,EAC5B,MAAM,EAAE,QAAQ;AAAA,EAChB,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,EAAE,IAAI,CAAC,EAAE,SAAS;AAC3C,CAAC;AASM,IAAM,eAAe,CAAC,SAAsC;AAAA,EACjE,MAAM,QAAQ,KAAK,QAAQ,GAAG;AAAA,EAC9B,MAAM,MAAM,KAAK,YAAY,GAAG;AAAA,EAChC,IAAI,UAAU,MAAM,OAAO,OAAO;AAAA,IAChC;AAAA,EACF;AAAA,EACA,IAAI;AAAA,EACJ,IAAI;AAAA,IACF,SAAS,KAAK,MAAM,KAAK,MAAM,OAAO,MAAM,CAAC,CAAC;AAAA,IAC9C,MAAM;AAAA,IACN;AAAA;AAAA,EAEF,MAAM,SAAS,cAAc,UAAU,MAAM;AAAA,EAC7C,OAAO,OAAO,UAAU,OAAO,OAAO;AAAA;",
+  "debugId": "8D2BC67DC28F6A0064756E2164756E21",
   "names": []
 }

package/dist/cli/chunk-150jk7km.js

@@ -0,0 +1,52 @@
+#!/usr/bin/env node
+
+// src/cli/build-failure.ts
+import { z } from "zod";
+var buildErrorSchema = z.looseObject({
+  errors: z.array(z.instanceof(Error)).optional(),
+  id: z.string().optional(),
+  loc: z.looseObject({
+    column: z.number().optional(),
+    file: z.string().optional(),
+    line: z.number().optional()
+  }).optional()
+});
+var blumeErrorSchema = z.looseObject({
+  diagnostic: z.object({
+    code: z.string(),
+    column: z.number().optional(),
+    docsUrl: z.string().optional(),
+    file: z.string().optional(),
+    line: z.number().optional(),
+    message: z.string(),
+    severity: z.enum(["error", "info", "warning"]),
+    suggestion: z.string().optional()
+  })
+});
+var failureDiagnostic = (error) => {
+  const raised = blumeErrorSchema.safeParse(error);
+  if (raised.success) {
+    return raised.data.diagnostic;
+  }
+  const parsed = buildErrorSchema.safeParse(error);
+  const { id, loc } = parsed.success ? parsed.data : {};
+  const name = error.name === "Error" ? "" : `${error.name}: `;
+  return {
+    code: "BLUME_BUILD_FAILED",
+    column: loc?.column,
+    file: loc?.file ?? id,
+    line: loc?.line,
+    message: `${name}${error.message}`,
+    severity: "error"
+  };
+};
+var astroBuildDiagnostics = (error) => {
+  const parsed = buildErrorSchema.safeParse(error);
+  const failures = parsed.success ? parsed.data.errors ?? [] : [];
+  return (failures.length > 0 ? failures : [error]).map(failureDiagnostic);
+};
+
+export { astroBuildDiagnostics };
+
+//# debugId=1B83F4391B57E32464756E2164756E21
+//# sourceMappingURL=chunk-150jk7km.js.map

package/dist/cli/chunk-150jk7km.js.map

@@ -0,0 +1,10 @@
+{
+  "version": 3,
+  "sources": ["../src/cli/build-failure.ts"],
+  "sourcesContent": [
+    "import { z } from \"zod\";\n\nimport type { Diagnostic } from \"../core/types.ts\";\n\n/**\n * The fields of an `astro build` rejection the report reads. Rolldown bundles\n * every plugin failure (an MDX compile error, say) into one error whose\n * `errors` holds each; a failure carries `loc` where the compiler pinned it,\n * or only `id`, the module that failed.\n */\nconst buildErrorSchema = z.looseObject({\n  errors: z.array(z.instanceof(Error)).optional(),\n  id: z.string().optional(),\n  loc: z\n    .looseObject({\n      column: z.number().optional(),\n      file: z.string().optional(),\n      line: z.number().optional(),\n    })\n    .optional(),\n});\n\n/**\n * The diagnostic a `BlumeError` thrown inside the build carries, such as a\n * failed hosted search sync in `astro:build:done`. The hook runs Blume's\n * source rather than the CLI bundle, so its error is another copy of the class\n * that the command's `instanceof BlumeError` doesn't recognize.\n */\nconst blumeErrorSchema = z.looseObject({\n  diagnostic: z.object({\n    code: z.string(),\n    column: z.number().optional(),\n    docsUrl: z.string().optional(),\n    file: z.string().optional(),\n    line: z.number().optional(),\n    message: z.string(),\n    severity: z.enum([\"error\", \"info\", \"warning\"]),\n    suggestion: z.string().optional(),\n  }),\n});\n\n/** One failure as a diagnostic at the file (and position) it names. */\nconst failureDiagnostic = (error: Error): Diagnostic => {\n  const raised = blumeErrorSchema.safeParse(error);\n  if (raised.success) {\n    return raised.data.diagnostic;\n  }\n  const parsed = buildErrorSchema.safeParse(error);\n  const { id, loc } = parsed.success ? parsed.data : {};\n  // A named error (`MDXError`, `CompilerError`) says which step failed.\n  const name = error.name === \"Error\" ? \"\" : `${error.name}: `;\n  return {\n    code: \"BLUME_BUILD_FAILED\",\n    column: loc?.column,\n    file: loc?.file ?? id,\n    line: loc?.line,\n    message: `${name}${error.message}`,\n    severity: \"error\",\n  };\n};\n\n/**\n * What `astro build` rejected with, as build diagnostics: one per failure\n * Rolldown collected, else the error itself. A page Blume's own checks pass\n * can still fail Astro's compile (MDX that doesn't parse) or render, and that\n * is a problem in the site, reported at its file, rather than an internal\n * error blaming Blume.\n */\nexport const astroBuildDiagnostics = (error: Error): Diagnostic[] => {\n  const parsed = buildErrorSchema.safeParse(error);\n  const failures = parsed.success ? (parsed.data.errors ?? []) : [];\n  return (failures.length > 0 ? failures : [error]).map(failureDiagnostic);\n};\n"
+  ],
+  "mappings": ";;;AAAA;AAUA,IAAM,mBAAmB,EAAE,YAAY;AAAA,EACrC,QAAQ,EAAE,MAAM,EAAE,WAAW,KAAK,CAAC,EAAE,SAAS;AAAA,EAC9C,IAAI,EAAE,OAAO,EAAE,SAAS;AAAA,EACxB,KAAK,EACF,YAAY;AAAA,IACX,QAAQ,EAAE,OAAO,EAAE,SAAS;AAAA,IAC5B,MAAM,EAAE,OAAO,EAAE,SAAS;AAAA,IAC1B,MAAM,EAAE,OAAO,EAAE,SAAS;AAAA,EAC5B,CAAC,EACA,SAAS;AACd,CAAC;AAQD,IAAM,mBAAmB,EAAE,YAAY;AAAA,EACrC,YAAY,EAAE,OAAO;AAAA,IACnB,MAAM,EAAE,OAAO;AAAA,IACf,QAAQ,EAAE,OAAO,EAAE,SAAS;AAAA,IAC5B,SAAS,EAAE,OAAO,EAAE,SAAS;AAAA,IAC7B,MAAM,EAAE,OAAO,EAAE,SAAS;AAAA,IAC1B,MAAM,EAAE,OAAO,EAAE,SAAS;AAAA,IAC1B,SAAS,EAAE,OAAO;AAAA,IAClB,UAAU,EAAE,KAAK,CAAC,SAAS,QAAQ,SAAS,CAAC;AAAA,IAC7C,YAAY,EAAE,OAAO,EAAE,SAAS;AAAA,EAClC,CAAC;AACH,CAAC;AAGD,IAAM,oBAAoB,CAAC,UAA6B;AAAA,EACtD,MAAM,SAAS,iBAAiB,UAAU,KAAK;AAAA,EAC/C,IAAI,OAAO,SAAS;AAAA,IAClB,OAAO,OAAO,KAAK;AAAA,EACrB;AAAA,EACA,MAAM,SAAS,iBAAiB,UAAU,KAAK;AAAA,EAC/C,QAAQ,IAAI,QAAQ,OAAO,UAAU,OAAO,OAAO,CAAC;AAAA,EAEpD,MAAM,OAAO,MAAM,SAAS,UAAU,KAAK,GAAG,MAAM;AAAA,EACpD,OAAO;AAAA,IACL,MAAM;AAAA,IACN,QAAQ,KAAK;AAAA,IACb,MAAM,KAAK,QAAQ;AAAA,IACnB,MAAM,KAAK;AAAA,IACX,SAAS,GAAG,OAAO,MAAM;AAAA,IACzB,UAAU;AAAA,EACZ;AAAA;AAUK,IAAM,wBAAwB,CAAC,UAA+B;AAAA,EACnE,MAAM,SAAS,iBAAiB,UAAU,KAAK;AAAA,EAC/C,MAAM,WAAW,OAAO,UAAW,OAAO,KAAK,UAAU,CAAC,IAAK,CAAC;AAAA,EAChE,QAAQ,SAAS,SAAS,IAAI,WAAW,CAAC,KAAK,GAAG,IAAI,iBAAiB;AAAA;",
+  "debugId": "1B83F4391B57E32464756E2164756E21",
+  "names": []
+}

package/dist/cli/{chunk-9t7a85s3.js → chunk-313vnn40.js}

@@ -18,43 +18,39 @@ import {
   renderRssFeed,
   isOpenApiSource,
   buildRawMarkdown
-} from "./chunk-pv29h0wf.js";
+} from "./chunk-ehweg4fr.js";
 import {
   buildApiSpec,
   buildAskData,
   resolveOgFonts,
-  buildThemeCss,
   buildReferenceFiles,
+  sourcePages,
   tailwindEntryTemplate,
   examplesEntryTemplate,
   rebaseSourceDirectives,
   twoslashCss,
-  EXAMPLE_SCAN_GLOB,
-  exampleScanRoots,
-  discoverExamples,
-  exampleMarkdownLookup,
   detectNeedsReact,
   detectUsesMath,
   collectStaged,
+  playgroundProxyPattern,
   buildRuntimeData,
   PLAYGROUND_PROXY_ENTRY,
-  playgroundProxyPattern,
   specOrigins,
   proxyAllowlistWarnings,
   analyzeComponentsFile,
   languageIconCssFor,
   clientFeaturesFor
-} from "./chunk-c8chx29p.js";
+} from "./chunk-ep6nd0rn.js";
 import {
   packageRoot
 } from "./index.js";
 import {
   buildSearchDocuments,
   buildMcpData
-} from "./chunk-yfyb25rh.js";
+} from "./chunk-n0v7m8ry.js";
 import {
   scanProject
-} from "./chunk-j85vccga.js";
+} from "./chunk-ncj7w596.js";
 import {
   planComponentSlots,
   runtimeDependencies,
@@ -64,6 +60,7 @@ import {
   askComponentTemplate,
   searchEndpointTemplate,
   featuresTemplate,
+  consentClientTemplate,
   searchClientTemplate,
   mixedbreadSearchEndpointTemplate,
   rawMarkdownEndpointTemplate,
@@ -89,10 +86,17 @@ import {
   exampleMapTemplate,
   examplesPageTemplate,
   runtimeTsconfigTemplate
-} from "./chunk-5m5nmvyq.js";
+} from "./chunk-gb420vvz.js";
 import {
-  discoverIslands
-} from "./chunk-b07cmahc.js";
+  discoverIslands,
+  EXAMPLE_SCAN_GLOB,
+  exampleScanRoots,
+  discoverExamples,
+  exampleMarkdownLookup
+} from "./chunk-66w9j7p6.js";
+import {
+  buildThemeCss
+} from "./chunk-cm89scdv.js";
 
 // src/registry/eject.ts
 import { existsSync } from "node:fs";
@@ -133,9 +137,12 @@ var askFiles = async (project, srcDir, genDir) => {
   const files = [
     {
       content: askEndpointTemplate(backend, {
+        captcha: assistant.captcha,
         cors: assistant.cors,
         instructions: assistant.instructions,
-        retrieval: assistant.retrieval
+        rateLimit: project.config.rateLimit,
+        retrieval: assistant.retrieval,
+        tools: assistant.tools ?? backend.toolsByDefault
       }),
       path: join(srcDir, "pages", "api", "ask.ts")
     }
@@ -168,7 +175,7 @@ var playgroundProxyPages = (config) => needsPlaygroundProxy(config) ? [
 ] : [];
 var playgroundProxyFiles = (config, openApiData, srcDir) => needsPlaygroundProxy(config) ? [
   {
-    content: playgroundProxyTemplate(specOrigins(openApiData)),
+    content: playgroundProxyTemplate(specOrigins(openApiData), config.rateLimit),
     path: join(srcDir, PLAYGROUND_PROXY_ENTRY)
   }
 ] : [];
@@ -389,6 +396,7 @@ var eject = async (root) => {
       content: astroConfigTemplate({
         askPath: "./src/generated/Ask.astro",
         config,
+        consentClientPath: "./src/generated/consent-client.ts",
         contentRoot: relContext.contentRoot,
         contentRoutes: project.manifest.routes.map((route) => route.path),
         context: relContext,
@@ -453,7 +461,7 @@ var eject = async (root) => {
         languageIcons,
         sources: [
           blumeSourceGlob(root, genDir),
-          "../../**/*.{astro,mdx,ts,tsx}"
+          "../../**/*.{astro,jsx,mdx,ts,tsx}"
         ],
         twoslashCss: twoslashCss(),
         userTheme
@@ -542,6 +550,9 @@ var eject = async (root) => {
   }, {
     content: searchClientTemplate(config),
     path: join(genDir, "search-client.ts")
+  }, {
+    content: consentClientTemplate(config.consent),
+    path: join(genDir, "consent-client.ts")
   });
   const searchAdapter = config.search.provider;
   if (searchAdapter.mode === "static") {
@@ -557,7 +568,7 @@ var eject = async (root) => {
   }
   if (searchAdapter.kind === "mixedbread") {
     files.push({
-      content: mixedbreadSearchEndpointTemplate(searchAdapter.options),
+      content: mixedbreadSearchEndpointTemplate(searchAdapter.options, sourcePages(project), config.rateLimit),
       path: join(srcDir, "pages", "api", "search.ts")
     });
   }
@@ -624,5 +635,5 @@ var eject = async (root) => {
 
 export { eject };
 
-//# debugId=85A9341CACEEA14864756E2164756E21
-//# sourceMappingURL=chunk-9t7a85s3.js.map
+//# debugId=D33846DF3713FFC264756E2164756E21
+//# sourceMappingURL=chunk-313vnn40.js.map

package/dist/cli/chunk-313vnn40.js.map

@@ -0,0 +1,10 @@
+{
+  "version": 3,
+  "sources": ["../src/registry/eject.ts"],
+  "sourcesContent": [
+    "import { existsSync } from \"node:fs\";\nimport { cp, mkdir, readFile, rm, writeFile } from \"node:fs/promises\";\n\nimport { join, relative } from \"pathe\";\n\nimport { OPENAPI_PATH } from \"../ai/api/paths.ts\";\nimport { buildApiSpec } from \"../ai/api/spec.ts\";\nimport { buildAskData } from \"../ai/ask-data.ts\";\nimport { resolveAskBackend } from \"../ai/ask.ts\";\nimport { buildRawMarkdown } from \"../ai/markdown.ts\";\nimport { buildMcpData } from \"../ai/mcp/data.ts\";\nimport type { McpData } from \"../ai/mcp/data.ts\";\nimport { buildMcpDiscovery, buildMcpServerCard } from \"../ai/mcp/discovery.ts\";\nimport { planComponentSlots } from \"../astro/component-slots.ts\";\nimport {\n  EXAMPLE_SCAN_GLOB,\n  discoverExamples,\n  exampleMarkdownLookup,\n  exampleScanRoots,\n} from \"../astro/examples.ts\";\nimport {\n  analyzeComponentsFile,\n  buildRuntimeData,\n  clientFeaturesFor,\n  collectStaged,\n  detectNeedsReact,\n  detectUsesMath,\n  languageIconCssFor,\n  PLAYGROUND_PROXY_ENTRY,\n  playgroundProxyPattern,\n  proxyAllowlistWarnings,\n  specOrigins,\n} from \"../astro/generate.ts\";\nimport { discoverIslands } from \"../astro/islands.ts\";\nimport { customOgRoutes, discoverPages, routeIsTaken } from \"../astro/pages.ts\";\nimport {\n  apiNavigationTemplate,\n  apiNotFoundTemplate,\n  apiPagesIndexTemplate,\n  apiPageTemplate,\n  apiSearchTemplate,\n  askComponentTemplate,\n  askEndpointTemplate,\n  astroConfigTemplate,\n  catchAllPageTemplate,\n  changelogIndexTemplate,\n  contentAssetsEndpointTemplate,\n  contentConfigTemplate,\n  exampleMapTemplate,\n  exampleSlug,\n  examplesPageTemplate,\n  exampleWrapperTemplate,\n  featuresTemplate,\n  mcpEndpointTemplate,\n  mcpPageFile,\n  mixedbreadSearchEndpointTemplate,\n  notFoundJsonTemplate,\n  notFoundMarkdownTemplate,\n  notFoundPageTemplate,\n  ogEndpointTemplate,\n  playgroundProxyTemplate,\n  rawMarkdownEndpointTemplate,\n  rssEndpointTemplate,\n  runtimeDependencies,\n  runtimeTsconfigTemplate,\n  consentClientTemplate,\n  searchClientTemplate,\n  searchEndpointTemplate,\n  staticJsonEndpointTemplate,\n} from \"../astro/templates.ts\";\nimport { collectContentAssets } from \"../core/content-assets.ts\";\nimport { buildIncludeGraph } from \"../core/includes.ts\";\nimport { packageRoot } from \"../core/package-root.ts\";\nimport { scanProject } from \"../core/project-graph.ts\";\nimport type { BlumeProject } from \"../core/project-graph.ts\";\nimport {\n  resolveDocsCollection,\n  sourcesOfKind,\n} from \"../core/sources/collection.ts\";\nimport type { ProjectContext } from \"../core/types.ts\";\nimport { buildRssFeeds, renderRssFeed } from \"../deploy/rss.ts\";\nimport { resolveOgFonts } from \"../og/derive.ts\";\nimport type { OpenApiData } from \"../openapi/model.ts\";\nimport {\n  hasScalarReferences,\n  needsPlaygroundProxy,\n} from \"../openapi/references.ts\";\nimport { buildReferenceFiles } from \"../openapi/scalar.ts\";\nimport { isOpenApiSource } from \"../openapi/source.ts\";\nimport { buildSearchDocuments } from \"../search/documents.ts\";\nimport { sourcePages } from \"../search/source-pages.ts\";\nimport {\n  examplesEntryTemplate,\n  tailwindEntryTemplate,\n} from \"../theme/entry.ts\";\nimport { fontLocaleCodes } from \"../theme/fonts.ts\";\nimport { buildThemeCss } from \"../theme/palette.ts\";\nimport { rebaseSourceDirectives } from \"../theme/sources.ts\";\nimport { twoslashCss } from \"../theme/twoslash.ts\";\n\nconst toPosix = (path: string): string => path.split(\"\\\\\").join(\"/\");\n\n/** The portable `@source` guess: blume in the project's own node_modules. */\nconst LOCAL_BLUME_SOURCE = \"../../node_modules/blume/src/**/*.{astro,ts,tsx}\";\n\n/**\n * The `@source` glob pointing Tailwind at Blume's own source, relative to the\n * ejected `src/generated/app.css`. The project-local `node_modules/blume` is\n * preferred (portable, and under pnpm the symlink survives version bumps), but\n * hoisted installs (npm/yarn workspaces lift blume into the workspace root's\n * node_modules) would make that guess match nothing and silently drop utility\n * classes — so fall back to the package's real installed location, and when\n * even that fails, warn instead of failing silently.\n *\n * Exported for testing.\n */\nexport const blumeSourceGlob = (\n  root: string,\n  genDir: string,\n  resolveBlumeRoot: () => string = packageRoot\n): string => {\n  if (existsSync(join(root, \"node_modules\", \"blume\"))) {\n    return LOCAL_BLUME_SOURCE;\n  }\n  try {\n    const src = join(resolveBlumeRoot(), \"src\");\n    return `${toPosix(relative(genDir, src))}/**/*.{astro,ts,tsx}`;\n  } catch {\n    console.warn(\n      'blume: could not locate the installed blume package; src/generated/app.css keeps its default `@source \"../../node_modules/blume/...\"` glob. If blume is hoisted elsewhere, point that glob at its install location or Blume\\'s utility classes will be missing.'\n    );\n    return LOCAL_BLUME_SOURCE;\n  }\n};\n\n/** The `blume:openapi` payload for the ejected app (`{}` when none). */\nconst ejectOpenApiData = (project: BlumeProject): OpenApiData => {\n  const source = project.sources.find(isOpenApiSource);\n  return source ? source.openApiData() : {};\n};\n\n/**\n * The assistant endpoint plus, unless the backend runs its own retrieval (Inkeep),\n * its grounding snapshot. Empty when the assistant is disabled.\n */\nconst askFiles = async (\n  project: BlumeProject,\n  srcDir: string,\n  genDir: string\n): Promise<{ content: string; path: string }[]> => {\n  const { assistant } = project.config.ai;\n  if (!(assistant?.enabled && !assistant.endpoint)) {\n    const endpointPath = join(srcDir, \"pages\", \"api\", \"ask.ts\");\n    if (existsSync(endpointPath)) {\n      const content = await readFile(endpointPath, \"utf-8\");\n      if (content.startsWith(\"// Generated by Blume. Do not edit.\")) {\n        await rm(endpointPath, { force: true });\n      }\n    }\n    await rm(join(genDir, \"ask-data.json\"), { force: true });\n    return [];\n  }\n  const backend = resolveAskBackend(assistant.provider);\n  const files = [\n    {\n      content: askEndpointTemplate(backend, {\n        captcha: assistant.captcha,\n        cors: assistant.cors,\n        instructions: assistant.instructions,\n        rateLimit: project.config.rateLimit,\n        retrieval: assistant.retrieval,\n        tools: assistant.tools ?? backend.toolsByDefault,\n      }),\n      path: join(srcDir, \"pages\", \"api\", \"ask.ts\"),\n    },\n  ];\n  if (backend.grounded) {\n    files.push({\n      content: `${JSON.stringify(await buildAskData(project))}\\n`,\n      path: join(genDir, \"ask-data.json\"),\n    });\n  }\n  return files;\n};\n\n/** Whether the ejected app hosts the MCP server (enabled and route free). */\nconst hostsMcp = (\n  project: BlumeProject,\n  userPages: { pattern: string }[]\n): boolean =>\n  project.config.agents.mcp.enabled &&\n  !routeIsTaken(\n    userPages,\n    project.graph.pages,\n    project.config.agents.mcp.route\n  );\n\n/**\n * The `.well-known` MCP discovery routes, injected as prerendered pages\n * alongside the user's own so the ejected Astro config wires them in. Empty\n * when the server is disabled or its route is already owned by a page.\n */\nconst mcpDiscoveryPages = (\n  project: BlumeProject,\n  userPages: { pattern: string }[]\n): { entrypoint: string; pattern: string }[] =>\n  hostsMcp(project, userPages)\n    ? [\n        {\n          entrypoint: \"src/blume-mcp/discovery.ts\",\n          pattern: \"/.well-known/mcp.json\",\n        },\n        {\n          entrypoint: \"src/blume-mcp/server-card.ts\",\n          pattern: \"/.well-known/mcp/server-card.json\",\n        },\n      ]\n    : [];\n\n/**\n * The playground's built-in CORS proxy route (`playground: { proxy: true }`),\n * mirroring `planPlaygroundProxy` in generate.ts: injected like the MCP\n * discovery routes, because Astro treats a `_`-prefixed page file as private,\n * and mounted under `basePath` at the URL the playground sends to. Empty when\n * no reference routes its playground through it.\n */\nconst playgroundProxyPages = (\n  config: BlumeProject[\"config\"]\n): { entrypoint: string; pattern: string }[] =>\n  needsPlaygroundProxy(config)\n    ? [\n        {\n          entrypoint: toPosix(join(\"src\", PLAYGROUND_PROXY_ENTRY)),\n          pattern: playgroundProxyPattern(config),\n        },\n      ]\n    : [];\n\n/**\n * The proxy endpoint behind {@link playgroundProxyPages}, with the origin\n * allowlist baked in from the same parsed specs the reference pages render.\n */\nconst playgroundProxyFiles = (\n  config: BlumeProject[\"config\"],\n  openApiData: OpenApiData,\n  srcDir: string\n): { content: string; path: string }[] =>\n  needsPlaygroundProxy(config)\n    ? [\n        {\n          content: playgroundProxyTemplate(\n            specOrigins(openApiData),\n            config.rateLimit\n          ),\n          path: join(srcDir, PLAYGROUND_PROXY_ENTRY),\n        },\n      ]\n    : [];\n\n/**\n * The agent data snapshot (`blume:mcp-data`) behind the MCP server and the\n * JSON docs API, mirroring `publishAgentData` in generate.ts: built when\n * either is on, null when neither needs it.\n */\nconst ejectAgentData = async (\n  project: BlumeProject,\n  userPages: { pattern: string }[]\n): Promise<McpData | null> =>\n  hostsMcp(project, userPages) || project.config.agents.api\n    ? await buildMcpData(project)\n    : null;\n\n/**\n * The MCP server endpoint and `.well-known` discovery documents, mirroring\n * `writeMcpFiles` in generate.ts. Empty when the server is disabled or its\n * route is already owned by a page.\n */\nconst mcpFiles = (\n  project: BlumeProject,\n  userPages: { pattern: string }[],\n  srcDir: string,\n  data: McpData | null\n): { content: string; path: string }[] => {\n  if (!(data && hostsMcp(project, userPages))) {\n    return [];\n  }\n  const { route } = project.config.agents.mcp;\n  const discoveryInput = {\n    base: data.base,\n    name: data.name,\n    route,\n    site: data.site,\n    version: data.version,\n  };\n  return [\n    {\n      content: mcpEndpointTemplate(),\n      path: join(srcDir, \"pages\", mcpPageFile(route)),\n    },\n    {\n      content: staticJsonEndpointTemplate(buildMcpDiscovery(discoveryInput)),\n      path: join(srcDir, \"blume-mcp\", \"discovery.ts\"),\n    },\n    {\n      content: staticJsonEndpointTemplate(buildMcpServerCard(discoveryInput)),\n      path: join(srcDir, \"blume-mcp\", \"server-card.ts\"),\n    },\n  ];\n};\n\n/**\n * The JSON docs API, mirroring `planApi` and `writeApiFiles` in generate.ts:\n * the prerendered page index, per-page documents, and navigation; on server\n * output the search endpoint and, unless a user page or a content page already\n * lives under `/api/`, the JSON 404 catch-all; and `/openapi.json`, unless a\n * `public/openapi.json` or a page owns that route. The ejected `llms.txt`,\n * homepage `Link` header, and 404 page advertise these routes, so the ejected\n * app serves them. Empty when `agents.api` is off.\n */\nconst apiFiles = (\n  project: BlumeProject,\n  userPages: { pattern: string }[],\n  root: string,\n  srcDir: string,\n  data: McpData | null\n): { content: string; path: string }[] => {\n  const { config } = project;\n  if (!(data && config.agents.api)) {\n    return [];\n  }\n  const server = config.deployment.options.output === \"server\";\n  const apiDir = join(srcDir, \"pages\", \"api\");\n  const files = [\n    {\n      content: apiPagesIndexTemplate(),\n      path: join(apiDir, \"docs\", \"pages.json.ts\"),\n    },\n    {\n      content: apiPageTemplate(),\n      path: join(apiDir, \"docs\", \"pages\", \"[...route].json.ts\"),\n    },\n    {\n      content: apiNavigationTemplate(),\n      path: join(apiDir, \"docs\", \"navigation.json.ts\"),\n    },\n  ];\n  if (server) {\n    files.push({\n      content: apiSearchTemplate(),\n      path: join(apiDir, \"docs\", \"search.ts\"),\n    });\n  }\n  const apiOwned =\n    userPages.some((page) => page.pattern.startsWith(\"/api/[\")) ||\n    project.graph.pages.some(\n      (page) => page.route === \"/api\" || page.route.startsWith(\"/api/\")\n    );\n  if (server && !apiOwned) {\n    files.push({\n      content: apiNotFoundTemplate({ base: data.base, site: data.site }),\n      path: join(apiDir, \"[...path].ts\"),\n    });\n  }\n  if (\n    !(\n      routeIsTaken(userPages, project.graph.pages, OPENAPI_PATH) ||\n      existsSync(join(root, \"public\", \"openapi.json\"))\n    )\n  ) {\n    files.push({\n      content: staticJsonEndpointTemplate(\n        buildApiSpec({\n          agentReadability: config.agents.agentReadability,\n          base: data.base,\n          description: config.description,\n          llmsTxt: config.agents.llmsTxt.enabled,\n          mcpRoute: hostsMcp(project, userPages)\n            ? config.agents.mcp.route\n            : null,\n          name: config.title,\n          search: server,\n          site: data.site,\n          version: data.version,\n        })\n      ),\n      path: join(srcDir, \"pages\", \"openapi.json.ts\"),\n    });\n  }\n  return files;\n};\n\n/**\n * The `/changelog` index page, mirroring `shouldGenerateChangelog` in\n * generate.ts: emitted when `type: changelog` entries or a release-backed\n * changelog source exist, unless a user page already owns the route.\n */\nconst changelogFiles = (\n  project: BlumeProject,\n  userPages: { pattern: string }[],\n  srcDir: string,\n  options: Parameters<typeof changelogIndexTemplate>[0]\n): { content: string; path: string }[] => {\n  const hasChangelog = project.graph.pages.some(\n    (page) =>\n      page.contentType === \"changelog\" &&\n      !(page.meta.draft || page.meta.sidebar.hidden)\n  );\n  const hasChangelogSource =\n    sourcesOfKind(project.config, \"github-releases\").length > 0;\n  if (\n    !(hasChangelog || hasChangelogSource) ||\n    routeIsTaken(userPages, project.graph.pages, \"/changelog\")\n  ) {\n    return [];\n  }\n  return [\n    {\n      content: changelogIndexTemplate(options),\n      path: join(srcDir, \"pages\", \"changelog.astro\"),\n    },\n  ];\n};\n\n/**\n * The colocated-image map and the `/blume-assets/[...asset]` endpoint that\n * serves it, mirroring generate.ts: the ejected raw Markdown points\n * `![x](./diagram.png)` at `/blume-assets/content/…`, and the config aliases\n * `blume:content-assets` to the map. Each original's path is written relative\n * to the project root (the directory `astro dev`/`astro build` run from), so\n * the ejected app builds from any checkout. Remote-source images need no\n * endpoint: eject copies them into the project's own `public/blume-assets`.\n */\nconst contentAssetFiles = async (\n  project: BlumeProject,\n  root: string,\n  srcDir: string,\n  genDir: string\n): Promise<{ content: string; path: string }[]> => {\n  const assets = await collectContentAssets(project);\n  const portable = Object.fromEntries(\n    Object.entries(assets).map(([param, abs]) => [\n      param,\n      toPosix(relative(root, abs)),\n    ])\n  );\n  return [\n    {\n      content: `${JSON.stringify(portable)}\\n`,\n      path: join(genDir, \"content-assets.json\"),\n    },\n    {\n      content: contentAssetsEndpointTemplate(null),\n      path: join(srcDir, \"pages\", \"blume-assets\", \"[...asset].ts\"),\n    },\n  ];\n};\n\n/**\n * The partial → including-pages map with every path relative to the project\n * root, like every other path in the ejected app, so it holds in any checkout.\n * Its readers (`includeHmrPlugin`, `withIncludeRefresh`) resolve each path\n * against the app's root, which after eject is the project itself.\n */\nconst portableIncludeGraph = (\n  project: BlumeProject,\n  root: string\n): Record<string, string[]> =>\n  Object.fromEntries(\n    Object.entries(buildIncludeGraph(project.graph.pages)).map(\n      ([partial, includers]) => [\n        toPosix(relative(root, partial)),\n        includers.map((page) => toPosix(relative(root, page))),\n      ]\n    )\n  );\n\n/** Contents of the configured `examples.css`, or `\"\"` when unset/absent. */\n/**\n * Read a user stylesheet that eject inlines into a generated entry under\n * `genDir`, re-rooting its relative `@source` paths from the user's file.\n * Resolves to an empty string when the file is unset or absent.\n */\nconst readUserCss = async (\n  file: string | null,\n  genDir: string\n): Promise<string> => {\n  if (!(file && existsSync(file))) {\n    return \"\";\n  }\n  const css = await readFile(file, \"utf-8\");\n  return rebaseSourceDirectives(css, { from: file, to: genDir });\n};\n\n/**\n * The per-example preview route `<Component />` iframes embed, nested under\n * `basePath` so it stays reachable behind a proxy that only forwards the\n * base. Empty when the project has no examples.\n */\nconst examplesPreviewFiles = (\n  srcDir: string,\n  basePath: string,\n  hasExamples: boolean\n): { content: string; path: string }[] =>\n  hasExamples\n    ? [\n        {\n          content: examplesPageTemplate(),\n          path: join(\n            srcDir,\n            \"pages\",\n            ...basePath.split(\"/\").filter(Boolean),\n            \"blume-examples\",\n            \"[...path].astro\"\n          ),\n        },\n      ]\n    : [];\n\n/**\n * The packages the ejected app imports by bare name: Astro, Tailwind's Vite\n * plugin, Tailwind and its typography plugin (which the generated `app.css`\n * and `examples.css` import by name), `blume` itself, the integrations the\n * config wires in, whatever the configured adapters declare, and React when\n * islands, examples, or the assistant render with it (Blume ships React, so\n * projects rarely list it). They have to be the project's own dependencies\n * after eject — under a strict linker such as pnpm nothing else makes them\n * resolvable, and `astro build` fails. The hidden runtime reaches the same\n * packages through its `node_modules` junction into Blume's own, so only\n * eject declares the ones its generated files import directly: the AI SDK the\n * assistant route streams through (unless `ai.assistant.endpoint` points\n * elsewhere, when no route is written) and the EPUB generator's browser bundle\n * `features.ts` loads (only named there when `export.epub` is on).\n */\nconst ejectDependencies = (\n  options: Parameters<typeof runtimeDependencies>[0]\n): string[] => {\n  const { assistant } = options.config.ai;\n  return [\n    ...new Set([\n      \"astro\",\n      \"@tailwindcss/vite\",\n      \"tailwindcss\",\n      \"@tailwindcss/typography\",\n      \"blume\",\n      ...runtimeDependencies(options),\n      ...(options.needsReact ? [\"react\", \"react-dom\"] : []),\n      ...(assistant?.enabled && !assistant.endpoint ? [\"ai\"] : []),\n      ...(options.config.export.epub ? [\"epub-gen-memory\"] : []),\n    ]),\n  ];\n};\n\nconst ejectIntegrationBridge = (\n  config: BlumeProject[\"config\"],\n  root: string,\n  configFile: string | null\n): Parameters<typeof astroConfigTemplate>[0][\"integrationBridge\"] =>\n  config.integrations.length > 0 && configFile\n    ? { configFile: toPosix(relative(root, configFile)) }\n    : undefined;\n\n/**\n * Promote the generated runtime into the project as an owned Astro app. After\n * eject the project has a normal `astro.config.mjs` and `src/`, the `blume` CLI\n * is no longer required, and the `blume` package remains importable.\n *\n * Returns the written files plus non-fatal warnings, mirroring the generated\n * runtime (e.g. a Scalar reference spec that wasn't found, or a reference\n * route colliding with a content page), and the packages the ejected app\n * imports by bare name, for the caller to add to package.json.\n */\nexport const eject = async (\n  root: string\n): Promise<{ dependencies: string[]; files: string[]; warnings: string[] }> => {\n  const project = await scanProject(root, { mode: \"build\" });\n  const { context, config } = project;\n\n  const srcDir = join(root, \"src\");\n  const genDir = join(srcDir, \"generated\");\n  const assistantEnabled = config.ai.assistant?.enabled ?? false;\n  const exportPdf = config.export.pdf;\n  const exportEpub = config.export.epub;\n\n  // Discover examples first and expose them on the project, so the agent-facing\n  // Markdown built below (raw `.md`, MCP) downlevels `<Component>` to its source.\n  const examples = await discoverExamples(root, config.examples.source);\n  project.examples = exampleMarkdownLookup(examples.examples);\n\n  const [\n    pages,\n    needsReactRaw,\n    usesMath,\n    userTheme,\n    userExamplesCss,\n    rawMarkdown,\n    islands,\n    overrideAnalysis,\n  ] = await Promise.all([\n    context.pagesRoot ? discoverPages(context.pagesRoot) : Promise.resolve([]),\n    detectNeedsReact(root),\n    detectUsesMath(root),\n    readUserCss(context.themeFile, genDir),\n    readUserCss(\n      config.examples.css ? join(root, config.examples.css) : null,\n      genDir\n    ),\n    buildRawMarkdown(project),\n    discoverIslands(root),\n    analyzeComponentsFile(context.componentsFile),\n  ]);\n  // The `islands/` convention and `components.ts` share the same static plan\n  // the CLI uses, with every import written relative to its generated file so\n  // the ejected app builds from any checkout (like the example wrappers below).\n  const slotPlan = planComponentSlots(islands.islands, overrideAnalysis, {\n    relativeTo: genDir,\n  });\n  // Island/example/override frameworks drive which Astro renderers the ejected\n  // config wires in; React also switches on for project `.tsx`/`.jsx` and the assistant.\n  const frameworks = new Set<string>([\n    ...islands.islands.map((island) => island.framework),\n    ...examples.examples.map((example) => example.framework),\n    ...slotPlan.frameworks,\n  ]);\n  const needsReact =\n    needsReactRaw || assistantEnabled || frameworks.has(\"react\");\n  const needsVue = frameworks.has(\"vue\");\n  const needsSvelte = frameworks.has(\"svelte\");\n\n  // A project-relative context so generated files use portable paths.\n  const relContext: ProjectContext = {\n    ...context,\n    contentRoot: toPosix(relative(root, context.contentRoot)),\n    distDir: \"./dist\",\n    outDir: \".\",\n    pagesRoot: context.pagesRoot\n      ? `./${toPosix(relative(root, context.pagesRoot))}`\n      : null,\n    root: \".\",\n  };\n  // The `docs` collection resolves its base against the real project root and\n  // is then relativized like everything else, so the ejected content config\n  // never bakes in the absolute path `eject` happened to run from.\n  const docsCollection = resolveDocsCollection(config, root);\n  const relCollection = {\n    ...docsCollection,\n    base: toPosix(relative(root, docsCollection.base)),\n  };\n\n  const relPages = [\n    ...pages.map((page) => ({\n      entrypoint: toPosix(relative(root, page.entrypoint)),\n      pattern: page.pattern,\n    })),\n    ...mcpDiscoveryPages(project, pages),\n    ...playgroundProxyPages(config),\n  ];\n  const openApiData = ejectOpenApiData(project);\n\n  // Non-filesystem sources eject their materialized MDX into `<root>/blume-staged`\n  // (a dedicated dir so it never clashes with a content root literally named\n  // `content`; the relative `staged` collection points there).\n  const staged = collectStaged(project);\n  const hasStaged = staged.size > 0;\n  const stagedDir = \"blume-staged\";\n  const features = await clientFeaturesFor(project);\n  const languageIcons = await languageIconCssFor(project);\n\n  const files: {\n    path: string;\n    content: string;\n    /** Don't overwrite a file the user already owns (e.g. a tuned tsconfig). */\n    skipIfExists?: boolean;\n  }[] = [\n    {\n      content: astroConfigTemplate({\n        askPath: \"./src/generated/Ask.astro\",\n        config,\n        consentClientPath: \"./src/generated/consent-client.ts\",\n        contentRoot: relContext.contentRoot,\n        contentRoutes: project.manifest.routes.map((route) => route.path),\n        context: relContext,\n        examplesPath: \"./src/generated/examples.ts\",\n        examplesThemePath: \"./src/generated/examples.css\",\n        features,\n        featuresPath: \"./src/generated/features.ts\",\n        // No CLI publishes the runtime data modules in memory after eject, so\n        // the config aliases each to the JSON snapshot written below.\n        generatedModulesDir: \"./src/generated\",\n        integrationBridge: ejectIntegrationBridge(\n          config,\n          root,\n          context.configFile\n        ),\n        needsReact,\n        needsSvelte,\n        needsVue,\n        pages: relPages,\n        searchClientPath: \"./src/generated/search-client.ts\",\n        themePath: \"./src/generated/app.css\",\n      }),\n      path: join(root, \"astro.config.mjs\"),\n    },\n    {\n      content: runtimeTsconfigTemplate(),\n      path: join(root, \"tsconfig.json\"),\n      // Never clobber a hand-tuned tsconfig; only write ours if none exists.\n      skipIfExists: true,\n    },\n    {\n      content: contentConfigTemplate({\n        collection: relCollection,\n        config,\n        context: relContext,\n        staged: hasStaged,\n        stagedBase: stagedDir,\n      }),\n      path: join(srcDir, \"content.config.ts\"),\n    },\n    {\n      content: catchAllPageTemplate({\n        exportEpub,\n        exportPdf,\n        mathEnabled: usesMath,\n        needsReact,\n      }),\n      path: join(srcDir, \"pages\", \"[...slug].astro\"),\n    },\n    {\n      content: slotPlan.module,\n      path: join(genDir, \"components.ts\"),\n    },\n    // The example map the catch-all imports; written even when empty so the\n    // `blume:examples` alias always resolves.\n    {\n      content: exampleMapTemplate(examples.examples, config.basePath),\n      path: join(genDir, \"examples.ts\"),\n    },\n    {\n      // The isolated Tailwind entry for `<Component />` preview frames.\n      // Relative sources keep the ejected app portable.\n      content: examplesEntryTemplate({\n        configTokens: buildThemeCss(config.theme),\n        sources: exampleScanRoots(root, examples.dir).map(\n          (dir) => `${relative(genDir, dir)}/${EXAMPLE_SCAN_GLOB}`\n        ),\n        userCss: userExamplesCss,\n      }),\n      path: join(genDir, \"examples.css\"),\n    },\n    {\n      content: tailwindEntryTemplate({\n        configTokens: buildThemeCss(config.theme),\n        languageIcons,\n        // Relative paths from src/generated/app.css keep the ejected app\n        // portable; the blume glob resolves the real install location when\n        // the package is hoisted out of the project's own node_modules.\n        sources: [\n          blumeSourceGlob(root, genDir),\n          \"../../**/*.{astro,jsx,mdx,ts,tsx}\",\n        ],\n        twoslashCss: twoslashCss(),\n        userTheme,\n      }),\n      path: join(genDir, \"app.css\"),\n    },\n    { content: buildRuntimeData(project), path: join(genDir, \"data.json\") },\n    // The header's Ask trigger behind the `blume:ask` alias. Always written — it\n    // renders nothing when Ask is off — so the alias always resolves.\n    {\n      content: askComponentTemplate(assistantEnabled),\n      path: join(genDir, \"Ask.astro\"),\n    },\n    {\n      content: `${JSON.stringify(openApiData)}\\n`,\n      path: join(genDir, \"openapi.json\"),\n    },\n    {\n      content: `${JSON.stringify(rawMarkdown)}\\n`,\n      path: join(genDir, \"raw-markdown.json\"),\n    },\n    {\n      // The partial → including-pages map behind `includeHmrPlugin`, which the\n      // ejected astro.config wires at this exact path — without the file every\n      // hot update's read would silently no-op and partial edits would serve\n      // stale pages. A snapshot like the rest of `src/generated`: the ejected\n      // app owns (and may regenerate or prune) it.\n      content: `${JSON.stringify(portableIncludeGraph(project, root))}\\n`,\n      path: join(genDir, \"includes.json\"),\n    },\n    {\n      content: rawMarkdownEndpointTemplate(\"md\"),\n      path: join(srcDir, \"pages\", \"[...slug].md.ts\"),\n    },\n    {\n      content: rawMarkdownEndpointTemplate(\"mdx\"),\n      path: join(srcDir, \"pages\", \"[...slug].mdx.ts\"),\n    },\n  ];\n\n  files.push(...(await contentAssetFiles(project, root, srcDir, genDir)));\n\n  if (assistantEnabled) {\n    files.push(...(await askFiles(project, srcDir, genDir)));\n  }\n\n  // The `/changelog` index, mirrored from the generated runtime (`[]` when\n  // the project has no changelog). The OG endpoint below adds its card.\n  const changelog = changelogFiles(project, pages, srcDir, {\n    exportEpub,\n    exportPdf,\n    needsReact,\n    staged: hasStaged,\n  });\n\n  if (config.seo.og.enabled) {\n    // The default script fallbacks ride along (Google family names, nothing\n    // machine-specific), so a non-Latin card still renders after eject. An\n    // explicit seo.og.fonts replaces them, and isn't carried over.\n    const { fallbacks, families } = resolveOgFonts(\n      {\n        locales: fontLocaleCodes(config.i18n),\n        ogFonts: config.seo.og.fonts,\n        themeFonts: config.theme.fonts,\n        themeFontsConfigured: false,\n      },\n      root\n    );\n    files.push({\n      content: ogEndpointTemplate(\n        customOgRoutes(pages, config.title, config.seo.og.titles),\n        {\n          fallbacks,\n          families,\n          pageDescriptions: config.seo.og.description !== false,\n        },\n        changelog.length > 0\n      ),\n      path: join(srcDir, \"pages\", \"og\", \"[...slug].png.ts\"),\n    });\n  }\n\n  // The hosted MCP server, the JSON docs API, and the playground's built-in\n  // proxy, mirrored from the generated runtime (`[]` when each is off). The\n  // server and the API share one agent data snapshot.\n  const agentData = await ejectAgentData(project, pages);\n  if (agentData) {\n    files.push({\n      content: `${JSON.stringify(agentData)}\\n`,\n      path: join(genDir, \"mcp-data.json\"),\n    });\n  }\n  files.push(\n    ...mcpFiles(project, pages, srcDir, agentData),\n    ...apiFiles(project, pages, root, srcDir, agentData),\n    ...changelog,\n    ...playgroundProxyFiles(config, openApiData, srcDir)\n  );\n\n  // Default 404 page and its Markdown (`/404.md`) and JSON (`/404.json`)\n  // twins, mirroring `writeNotFoundPage` in generate.ts: all three are skipped\n  // when the project already owns `/404` (a custom `pages/404.astro` or a\n  // `404.md` content page). The ejected project owns the files afterwards and\n  // can edit or remove them.\n  if (!routeIsTaken(pages, project.graph.pages, \"/404\")) {\n    files.push(\n      {\n        content: notFoundPageTemplate(),\n        path: join(srcDir, \"pages\", \"404.astro\"),\n      },\n      {\n        content: notFoundMarkdownTemplate(),\n        path: join(srcDir, \"pages\", \"404.md.ts\"),\n      },\n      {\n        content: notFoundJsonTemplate(),\n        path: join(srcDir, \"pages\", \"404.json.ts\"),\n      }\n    );\n  }\n\n  // The client-feature loaders behind the `blume:features` alias, the\n  // provider-specific client loader behind `blume:search-client`, and the\n  // consent adapter's browser module behind `blume:consent-client`.\n  files.push(\n    {\n      content: featuresTemplate(features),\n      path: join(genDir, \"features.ts\"),\n    },\n    {\n      content: searchClientTemplate(config),\n      path: join(genDir, \"search-client.ts\"),\n    },\n    {\n      content: consentClientTemplate(config.consent),\n      path: join(genDir, \"consent-client.ts\"),\n    }\n  );\n\n  const searchAdapter = config.search.provider;\n  if (searchAdapter.mode === \"static\") {\n    const documents = await buildSearchDocuments(project);\n    files.push(\n      {\n        content: `${JSON.stringify(documents)}\\n`,\n        path: join(genDir, \"search.json\"),\n      },\n      {\n        content: searchEndpointTemplate(),\n        path: join(srcDir, \"pages\", \"blume-search.json.ts\"),\n      }\n    );\n  }\n\n  if (searchAdapter.kind === \"mixedbread\") {\n    files.push({\n      content: mixedbreadSearchEndpointTemplate(\n        searchAdapter.options,\n        sourcePages(project),\n        config.rateLimit\n      ),\n      path: join(srcDir, \"pages\", \"api\", \"search.ts\"),\n    });\n  }\n\n  const feeds = buildRssFeeds(project);\n  if (feeds.length > 0) {\n    const feedXml = Object.fromEntries(\n      feeds.map((feed) => [feed.type, renderRssFeed(feed)])\n    );\n    files.push(\n      {\n        content: `${JSON.stringify(feedXml)}\\n`,\n        path: join(genDir, \"rss.json\"),\n      },\n      {\n        content: rssEndpointTemplate(),\n        path: join(srcDir, \"pages\", \"[section]\", \"rss.xml.ts\"),\n      }\n    );\n  }\n\n  // Scalar API/AsyncAPI reference pages, mirrored from the generated runtime so\n  // the ejected app keeps its reference routes — including the warnings (a\n  // missing spec file, a route collision), which the caller surfaces exactly\n  // like the generated-runtime path does.\n  // A proxied spec with no origin to allow gets the generated runtime's\n  // diagnostic too.\n  const warnings: string[] = proxyAllowlistWarnings(config, openApiData);\n  if (hasScalarReferences(config)) {\n    const references = await buildReferenceFiles({\n      config,\n      contentRoutes: new Set(project.graph.pages.map((page) => page.route)),\n      root,\n    });\n    warnings.push(...references.warnings);\n    for (const file of references.files) {\n      files.push({\n        content: file.content,\n        path: join(srcDir, \"pages\", file.pagePath),\n      });\n    }\n  }\n\n  // Per-override and per-example live wrappers referenced by the maps above.\n  files.push(\n    ...slotPlan.wrappers.map((wrapper) => ({\n      content: wrapper.content,\n      path: join(genDir, \"component-slots\", `${wrapper.name}.astro`),\n    })),\n    ...examples.examples.map((example) => ({\n      content: exampleWrapperTemplate(example, join(genDir, \"examples\")),\n      path: join(genDir, \"examples\", `${exampleSlug(example.path)}.astro`),\n    })),\n    ...examplesPreviewFiles(\n      srcDir,\n      config.basePath,\n      examples.examples.length > 0\n    )\n  );\n\n  // Materialize staged source bodies under `<root>/blume-staged/<source>/<ref>`,\n  // matching the relative `staged` collection base in the ejected config.\n  for (const [entryId, content] of staged) {\n    files.push({ content, path: join(root, stagedDir, entryId) });\n  }\n\n  const written = files.filter(\n    (file) => !(file.skipIfExists && existsSync(file.path))\n  );\n  await Promise.all(\n    written.map(async (file) => {\n      await mkdir(join(file.path, \"..\"), { recursive: true });\n      await writeFile(file.path, file.content, \"utf-8\");\n    })\n  );\n\n  // Materialized source assets (e.g. downloaded Notion images) live under the\n  // hidden runtime's public dir; copy them into the owned project's `public/`\n  // so the staged content's `/blume-assets/…` references still resolve.\n  const assetsSrc = join(context.outDir, \"public\", \"blume-assets\");\n  if (existsSync(assetsSrc)) {\n    await cp(assetsSrc, join(root, \"public\", \"blume-assets\"), {\n      recursive: true,\n    });\n  }\n\n  // The hidden runtime is no longer the source of truth.\n  await rm(context.outDir, { force: true, recursive: true });\n\n  return {\n    dependencies: ejectDependencies({\n      config,\n      needsReact,\n      needsSvelte,\n      needsVue,\n    }),\n    files: written.map((file) => file.path),\n    warnings,\n  };\n};\n"
+  ],
+  "mappings": ";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AACA;AAEA;AAiGA,IAAM,UAAU,CAAC,SAAyB,KAAK,MAAM,IAAI,EAAE,KAAK,GAAG;AAGnE,IAAM,qBAAqB;AAapB,IAAM,kBAAkB,CAC7B,MACA,QACA,mBAAiC,gBACtB;AAAA,EACX,IAAI,WAAW,KAAK,MAAM,gBAAgB,OAAO,CAAC,GAAG;AAAA,IACnD,OAAO;AAAA,EACT;AAAA,EACA,IAAI;AAAA,IACF,MAAM,MAAM,KAAK,iBAAiB,GAAG,KAAK;AAAA,IAC1C,OAAO,GAAG,QAAQ,SAAS,QAAQ,GAAG,CAAC;AAAA,IACvC,MAAM;AAAA,IACN,QAAQ,KACN,iQACF;AAAA,IACA,OAAO;AAAA;AAAA;AAKX,IAAM,mBAAmB,CAAC,YAAuC;AAAA,EAC/D,MAAM,SAAS,QAAQ,QAAQ,KAAK,eAAe;AAAA,EACnD,OAAO,SAAS,OAAO,YAAY,IAAI,CAAC;AAAA;AAO1C,IAAM,WAAW,OACf,SACA,QACA,WACiD;AAAA,EACjD,QAAQ,cAAc,QAAQ,OAAO;AAAA,EACrC,IAAI,EAAE,WAAW,WAAW,CAAC,UAAU,WAAW;AAAA,IAChD,MAAM,eAAe,KAAK,QAAQ,SAAS,OAAO,QAAQ;AAAA,IAC1D,IAAI,WAAW,YAAY,GAAG;AAAA,MAC5B,MAAM,UAAU,MAAM,SAAS,cAAc,OAAO;AAAA,MACpD,IAAI,QAAQ,WAAW,qCAAqC,GAAG;AAAA,QAC7D,MAAM,GAAG,cAAc,EAAE,OAAO,KAAK,CAAC;AAAA,MACxC;AAAA,IACF;AAAA,IACA,MAAM,GAAG,KAAK,QAAQ,eAAe,GAAG,EAAE,OAAO,KAAK,CAAC;AAAA,IACvD,OAAO,CAAC;AAAA,EACV;AAAA,EACA,MAAM,UAAU,kBAAkB,UAAU,QAAQ;AAAA,EACpD,MAAM,QAAQ;AAAA,IACZ;AAAA,MACE,SAAS,oBAAoB,SAAS;AAAA,QACpC,SAAS,UAAU;AAAA,QACnB,MAAM,UAAU;AAAA,QAChB,cAAc,UAAU;AAAA,QACxB,WAAW,QAAQ,OAAO;AAAA,QAC1B,WAAW,UAAU;AAAA,QACrB,OAAO,UAAU,SAAS,QAAQ;AAAA,MACpC,CAAC;AAAA,MACD,MAAM,KAAK,QAAQ,SAAS,OAAO,QAAQ;AAAA,IAC7C;AAAA,EACF;AAAA,EACA,IAAI,QAAQ,UAAU;AAAA,IACpB,MAAM,KAAK;AAAA,MACT,SAAS,GAAG,KAAK,UAAU,MAAM,aAAa,OAAO,CAAC;AAAA;AAAA,MACtD,MAAM,KAAK,QAAQ,eAAe;AAAA,IACpC,CAAC;AAAA,EACH;AAAA,EACA,OAAO;AAAA;AAIT,IAAM,WAAW,CACf,SACA,cAEA,QAAQ,OAAO,OAAO,IAAI,WAC1B,CAAC,aACC,WACA,QAAQ,MAAM,OACd,QAAQ,OAAO,OAAO,IAAI,KAC5B;AAOF,IAAM,oBAAoB,CACxB,SACA,cAEA,SAAS,SAAS,SAAS,IACvB;AAAA,EACE;AAAA,IACE,YAAY;AAAA,IACZ,SAAS;AAAA,EACX;AAAA,EACA;AAAA,IACE,YAAY;AAAA,IACZ,SAAS;AAAA,EACX;AACF,IACA,CAAC;AASP,IAAM,uBAAuB,CAC3B,WAEA,qBAAqB,MAAM,IACvB;AAAA,EACE;AAAA,IACE,YAAY,QAAQ,KAAK,OAAO,sBAAsB,CAAC;AAAA,IACvD,SAAS,uBAAuB,MAAM;AAAA,EACxC;AACF,IACA,CAAC;AAMP,IAAM,uBAAuB,CAC3B,QACA,aACA,WAEA,qBAAqB,MAAM,IACvB;AAAA,EACE;AAAA,IACE,SAAS,wBACP,YAAY,WAAW,GACvB,OAAO,SACT;AAAA,IACA,MAAM,KAAK,QAAQ,sBAAsB;AAAA,EAC3C;AACF,IACA,CAAC;AAOP,IAAM,iBAAiB,OACrB,SACA,cAEA,SAAS,SAAS,SAAS,KAAK,QAAQ,OAAO,OAAO,MAClD,MAAM,aAAa,OAAO,IAC1B;AAON,IAAM,WAAW,CACf,SACA,WACA,QACA,SACwC;AAAA,EACxC,IAAI,EAAE,QAAQ,SAAS,SAAS,SAAS,IAAI;AAAA,IAC3C,OAAO,CAAC;AAAA,EACV;AAAA,EACA,QAAQ,UAAU,QAAQ,OAAO,OAAO;AAAA,EACxC,MAAM,iBAAiB;AAAA,IACrB,MAAM,KAAK;AAAA,IACX,MAAM,KAAK;AAAA,IACX;AAAA,IACA,MAAM,KAAK;AAAA,IACX,SAAS,KAAK;AAAA,EAChB;AAAA,EACA,OAAO;AAAA,IACL;AAAA,MACE,SAAS,oBAAoB;AAAA,MAC7B,MAAM,KAAK,QAAQ,SAAS,YAAY,KAAK,CAAC;AAAA,IAChD;AAAA,IACA;AAAA,MACE,SAAS,2BAA2B,kBAAkB,cAAc,CAAC;AAAA,MACrE,MAAM,KAAK,QAAQ,aAAa,cAAc;AAAA,IAChD;AAAA,IACA;AAAA,MACE,SAAS,2BAA2B,mBAAmB,cAAc,CAAC;AAAA,MACtE,MAAM,KAAK,QAAQ,aAAa,gBAAgB;AAAA,IAClD;AAAA,EACF;AAAA;AAYF,IAAM,WAAW,CACf,SACA,WACA,MACA,QACA,SACwC;AAAA,EACxC,QAAQ,WAAW;AAAA,EACnB,IAAI,EAAE,QAAQ,OAAO,OAAO,MAAM;AAAA,IAChC,OAAO,CAAC;AAAA,EACV;AAAA,EACA,MAAM,SAAS,OAAO,WAAW,QAAQ,WAAW;AAAA,EACpD,MAAM,SAAS,KAAK,QAAQ,SAAS,KAAK;AAAA,EAC1C,MAAM,QAAQ;AAAA,IACZ;AAAA,MACE,SAAS,sBAAsB;AAAA,MAC/B,MAAM,KAAK,QAAQ,QAAQ,eAAe;AAAA,IAC5C;AAAA,IACA;AAAA,MACE,SAAS,gBAAgB;AAAA,MACzB,MAAM,KAAK,QAAQ,QAAQ,SAAS,oBAAoB;AAAA,IAC1D;AAAA,IACA;AAAA,MACE,SAAS,sBAAsB;AAAA,MAC/B,MAAM,KAAK,QAAQ,QAAQ,oBAAoB;AAAA,IACjD;AAAA,EACF;AAAA,EACA,IAAI,QAAQ;AAAA,IACV,MAAM,KAAK;AAAA,MACT,SAAS,kBAAkB;AAAA,MAC3B,MAAM,KAAK,QAAQ,QAAQ,WAAW;AAAA,IACxC,CAAC;AAAA,EACH;AAAA,EACA,MAAM,WACJ,UAAU,KAAK,CAAC,SAAS,KAAK,QAAQ,WAAW,QAAQ,CAAC,KAC1D,QAAQ,MAAM,MAAM,KAClB,CAAC,SAAS,KAAK,UAAU,UAAU,KAAK,MAAM,WAAW,OAAO,CAClE;AAAA,EACF,IAAI,UAAU,CAAC,UAAU;AAAA,IACvB,MAAM,KAAK;AAAA,MACT,SAAS,oBAAoB,EAAE,MAAM,KAAK,MAAM,MAAM,KAAK,KAAK,CAAC;AAAA,MACjE,MAAM,KAAK,QAAQ,cAAc;AAAA,IACnC,CAAC;AAAA,EACH;AAAA,EACA,IACE,EACE,aAAa,WAAW,QAAQ,MAAM,OAAO,YAAY,KACzD,WAAW,KAAK,MAAM,UAAU,cAAc,CAAC,IAEjD;AAAA,IACA,MAAM,KAAK;AAAA,MACT,SAAS,2BACP,aAAa;AAAA,QACX,kBAAkB,OAAO,OAAO;AAAA,QAChC,MAAM,KAAK;AAAA,QACX,aAAa,OAAO;AAAA,QACpB,SAAS,OAAO,OAAO,QAAQ;AAAA,QAC/B,UAAU,SAAS,SAAS,SAAS,IACjC,OAAO,OAAO,IAAI,QAClB;AAAA,QACJ,MAAM,OAAO;AAAA,QACb,QAAQ;AAAA,QACR,MAAM,KAAK;AAAA,QACX,SAAS,KAAK;AAAA,MAChB,CAAC,CACH;AAAA,MACA,MAAM,KAAK,QAAQ,SAAS,iBAAiB;AAAA,IAC/C,CAAC;AAAA,EACH;AAAA,EACA,OAAO;AAAA;AAQT,IAAM,iBAAiB,CACrB,SACA,WACA,QACA,YACwC;AAAA,EACxC,MAAM,eAAe,QAAQ,MAAM,MAAM,KACvC,CAAC,SACC,KAAK,gBAAgB,eACrB,EAAE,KAAK,KAAK,SAAS,KAAK,KAAK,QAAQ,OAC3C;AAAA,EACA,MAAM,qBACJ,cAAc,QAAQ,QAAQ,iBAAiB,EAAE,SAAS;AAAA,EAC5D,IACE,EAAE,gBAAgB,uBAClB,aAAa,WAAW,QAAQ,MAAM,OAAO,YAAY,GACzD;AAAA,IACA,OAAO,CAAC;AAAA,EACV;AAAA,EACA,OAAO;AAAA,IACL;AAAA,MACE,SAAS,uBAAuB,OAAO;AAAA,MACvC,MAAM,KAAK,QAAQ,SAAS,iBAAiB;AAAA,IAC/C;AAAA,EACF;AAAA;AAYF,IAAM,oBAAoB,OACxB,SACA,MACA,QACA,WACiD;AAAA,EACjD,MAAM,SAAS,MAAM,qBAAqB,OAAO;AAAA,EACjD,MAAM,WAAW,OAAO,YACtB,OAAO,QAAQ,MAAM,EAAE,IAAI,EAAE,OAAO,SAAS;AAAA,IAC3C;AAAA,IACA,QAAQ,SAAS,MAAM,GAAG,CAAC;AAAA,EAC7B,CAAC,CACH;AAAA,EACA,OAAO;AAAA,IACL;AAAA,MACE,SAAS,GAAG,KAAK,UAAU,QAAQ;AAAA;AAAA,MACnC,MAAM,KAAK,QAAQ,qBAAqB;AAAA,IAC1C;AAAA,IACA;AAAA,MACE,SAAS,8BAA8B,IAAI;AAAA,MAC3C,MAAM,KAAK,QAAQ,SAAS,gBAAgB,eAAe;AAAA,IAC7D;AAAA,EACF;AAAA;AASF,IAAM,uBAAuB,CAC3B,SACA,SAEA,OAAO,YACL,OAAO,QAAQ,kBAAkB,QAAQ,MAAM,KAAK,CAAC,EAAE,IACrD,EAAE,SAAS,eAAe;AAAA,EACxB,QAAQ,SAAS,MAAM,OAAO,CAAC;AAAA,EAC/B,UAAU,IAAI,CAAC,SAAS,QAAQ,SAAS,MAAM,IAAI,CAAC,CAAC;AACvD,CACF,CACF;AAQF,IAAM,cAAc,OAClB,MACA,WACoB;AAAA,EACpB,IAAI,EAAE,QAAQ,WAAW,IAAI,IAAI;AAAA,IAC/B,OAAO;AAAA,EACT;AAAA,EACA,MAAM,MAAM,MAAM,SAAS,MAAM,OAAO;AAAA,EACxC,OAAO,uBAAuB,KAAK,EAAE,MAAM,MAAM,IAAI,OAAO,CAAC;AAAA;AAQ/D,IAAM,uBAAuB,CAC3B,QACA,UACA,gBAEA,cACI;AAAA,EACE;AAAA,IACE,SAAS,qBAAqB;AAAA,IAC9B,MAAM,KACJ,QACA,SACA,GAAG,SAAS,MAAM,GAAG,EAAE,OAAO,OAAO,GACrC,kBACA,iBACF;AAAA,EACF;AACF,IACA,CAAC;AAiBP,IAAM,oBAAoB,CACxB,YACa;AAAA,EACb,QAAQ,cAAc,QAAQ,OAAO;AAAA,EACrC,OAAO;AAAA,IACL,GAAG,IAAI,IAAI;AAAA,MACT;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA,GAAG,oBAAoB,OAAO;AAAA,MAC9B,GAAI,QAAQ,aAAa,CAAC,SAAS,WAAW,IAAI,CAAC;AAAA,MACnD,GAAI,WAAW,WAAW,CAAC,UAAU,WAAW,CAAC,IAAI,IAAI,CAAC;AAAA,MAC1D,GAAI,QAAQ,OAAO,OAAO,OAAO,CAAC,iBAAiB,IAAI,CAAC;AAAA,IAC1D,CAAC;AAAA,EACH;AAAA;AAGF,IAAM,yBAAyB,CAC7B,QACA,MACA,eAEA,OAAO,aAAa,SAAS,KAAK,aAC9B,EAAE,YAAY,QAAQ,SAAS,MAAM,UAAU,CAAC,EAAE,IAClD;AAYC,IAAM,QAAQ,OACnB,SAC6E;AAAA,EAC7E,MAAM,UAAU,MAAM,YAAY,MAAM,EAAE,MAAM,QAAQ,CAAC;AAAA,EACzD,QAAQ,SAAS,WAAW;AAAA,EAE5B,MAAM,SAAS,KAAK,MAAM,KAAK;AAAA,EAC/B,MAAM,SAAS,KAAK,QAAQ,WAAW;AAAA,EACvC,MAAM,mBAAmB,OAAO,GAAG,WAAW,WAAW;AAAA,EACzD,MAAM,YAAY,OAAO,OAAO;AAAA,EAChC,MAAM,aAAa,OAAO,OAAO;AAAA,EAIjC,MAAM,WAAW,MAAM,iBAAiB,MAAM,OAAO,SAAS,MAAM;AAAA,EACpE,QAAQ,WAAW,sBAAsB,SAAS,QAAQ;AAAA,EAE1D;AAAA,IACE;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,MACE,MAAM,QAAQ,IAAI;AAAA,IACpB,QAAQ,YAAY,cAAc,QAAQ,SAAS,IAAI,QAAQ,QAAQ,CAAC,CAAC;AAAA,IACzE,iBAAiB,IAAI;AAAA,IACrB,eAAe,IAAI;AAAA,IACnB,YAAY,QAAQ,WAAW,MAAM;AAAA,IACrC,YACE,OAAO,SAAS,MAAM,KAAK,MAAM,OAAO,SAAS,GAAG,IAAI,MACxD,MACF;AAAA,IACA,iBAAiB,OAAO;AAAA,IACxB,gBAAgB,IAAI;AAAA,IACpB,sBAAsB,QAAQ,cAAc;AAAA,EAC9C,CAAC;AAAA,EAID,MAAM,WAAW,mBAAmB,QAAQ,SAAS,kBAAkB;AAAA,IACrE,YAAY;AAAA,EACd,CAAC;AAAA,EAGD,MAAM,aAAa,IAAI,IAAY;AAAA,IACjC,GAAG,QAAQ,QAAQ,IAAI,CAAC,WAAW,OAAO,SAAS;AAAA,IACnD,GAAG,SAAS,SAAS,IAAI,CAAC,YAAY,QAAQ,SAAS;AAAA,IACvD,GAAG,SAAS;AAAA,EACd,CAAC;AAAA,EACD,MAAM,aACJ,iBAAiB,oBAAoB,WAAW,IAAI,OAAO;AAAA,EAC7D,MAAM,WAAW,WAAW,IAAI,KAAK;AAAA,EACrC,MAAM,cAAc,WAAW,IAAI,QAAQ;AAAA,EAG3C,MAAM,aAA6B;AAAA,OAC9B;AAAA,IACH,aAAa,QAAQ,SAAS,MAAM,QAAQ,WAAW,CAAC;AAAA,IACxD,SAAS;AAAA,IACT,QAAQ;AAAA,IACR,WAAW,QAAQ,YACf,KAAK,QAAQ,SAAS,MAAM,QAAQ,SAAS,CAAC,MAC9C;AAAA,IACJ,MAAM;AAAA,EACR;AAAA,EAIA,MAAM,iBAAiB,sBAAsB,QAAQ,IAAI;AAAA,EACzD,MAAM,gBAAgB;AAAA,OACjB;AAAA,IACH,MAAM,QAAQ,SAAS,MAAM,eAAe,IAAI,CAAC;AAAA,EACnD;AAAA,EAEA,MAAM,WAAW;AAAA,IACf,GAAG,MAAM,IAAI,CAAC,UAAU;AAAA,MACtB,YAAY,QAAQ,SAAS,MAAM,KAAK,UAAU,CAAC;AAAA,MACnD,SAAS,KAAK;AAAA,IAChB,EAAE;AAAA,IACF,GAAG,kBAAkB,SAAS,KAAK;AAAA,IACnC,GAAG,qBAAqB,MAAM;AAAA,EAChC;AAAA,EACA,MAAM,cAAc,iBAAiB,OAAO;AAAA,EAK5C,MAAM,SAAS,cAAc,OAAO;AAAA,EACpC,MAAM,YAAY,OAAO,OAAO;AAAA,EAChC,MAAM,YAAY;AAAA,EAClB,MAAM,WAAW,MAAM,kBAAkB,OAAO;AAAA,EAChD,MAAM,gBAAgB,MAAM,mBAAmB,OAAO;AAAA,EAEtD,MAAM,QAKA;AAAA,IACJ;AAAA,MACE,SAAS,oBAAoB;AAAA,QAC3B,SAAS;AAAA,QACT;AAAA,QACA,mBAAmB;AAAA,QACnB,aAAa,WAAW;AAAA,QACxB,eAAe,QAAQ,SAAS,OAAO,IAAI,CAAC,UAAU,MAAM,IAAI;AAAA,QAChE,SAAS;AAAA,QACT,cAAc;AAAA,QACd,mBAAmB;AAAA,QACnB;AAAA,QACA,cAAc;AAAA,QAGd,qBAAqB;AAAA,QACrB,mBAAmB,uBACjB,QACA,MACA,QAAQ,UACV;AAAA,QACA;AAAA,QACA;AAAA,QACA;AAAA,QACA,OAAO;AAAA,QACP,kBAAkB;AAAA,QAClB,WAAW;AAAA,MACb,CAAC;AAAA,MACD,MAAM,KAAK,MAAM,kBAAkB;AAAA,IACrC;AAAA,IACA;AAAA,MACE,SAAS,wBAAwB;AAAA,MACjC,MAAM,KAAK,MAAM,eAAe;AAAA,MAEhC,cAAc;AAAA,IAChB;AAAA,IACA;AAAA,MACE,SAAS,sBAAsB;AAAA,QAC7B,YAAY;AAAA,QACZ;AAAA,QACA,SAAS;AAAA,QACT,QAAQ;AAAA,QACR,YAAY;AAAA,MACd,CAAC;AAAA,MACD,MAAM,KAAK,QAAQ,mBAAmB;AAAA,IACxC;AAAA,IACA;AAAA,MACE,SAAS,qBAAqB;AAAA,QAC5B;AAAA,QACA;AAAA,QACA,aAAa;AAAA,QACb;AAAA,MACF,CAAC;AAAA,MACD,MAAM,KAAK,QAAQ,SAAS,iBAAiB;AAAA,IAC/C;AAAA,IACA;AAAA,MACE,SAAS,SAAS;AAAA,MAClB,MAAM,KAAK,QAAQ,eAAe;AAAA,IACpC;AAAA,IAGA;AAAA,MACE,SAAS,mBAAmB,SAAS,UAAU,OAAO,QAAQ;AAAA,MAC9D,MAAM,KAAK,QAAQ,aAAa;AAAA,IAClC;AAAA,IACA;AAAA,MAGE,SAAS,sBAAsB;AAAA,QAC7B,cAAc,cAAc,OAAO,KAAK;AAAA,QACxC,SAAS,iBAAiB,MAAM,SAAS,GAAG,EAAE,IAC5C,CAAC,QAAQ,GAAG,SAAS,QAAQ,GAAG,KAAK,mBACvC;AAAA,QACA,SAAS;AAAA,MACX,CAAC;AAAA,MACD,MAAM,KAAK,QAAQ,cAAc;AAAA,IACnC;AAAA,IACA;AAAA,MACE,SAAS,sBAAsB;AAAA,QAC7B,cAAc,cAAc,OAAO,KAAK;AAAA,QACxC;AAAA,QAIA,SAAS;AAAA,UACP,gBAAgB,MAAM,MAAM;AAAA,UAC5B;AAAA,QACF;AAAA,QACA,aAAa,YAAY;AAAA,QACzB;AAAA,MACF,CAAC;AAAA,MACD,MAAM,KAAK,QAAQ,SAAS;AAAA,IAC9B;AAAA,IACA,EAAE,SAAS,iBAAiB,OAAO,GAAG,MAAM,KAAK,QAAQ,WAAW,EAAE;AAAA,IAGtE;AAAA,MACE,SAAS,qBAAqB,gBAAgB;AAAA,MAC9C,MAAM,KAAK,QAAQ,WAAW;AAAA,IAChC;AAAA,IACA;AAAA,MACE,SAAS,GAAG,KAAK,UAAU,WAAW;AAAA;AAAA,MACtC,MAAM,KAAK,QAAQ,cAAc;AAAA,IACnC;AAAA,IACA;AAAA,MACE,SAAS,GAAG,KAAK,UAAU,WAAW;AAAA;AAAA,MACtC,MAAM,KAAK,QAAQ,mBAAmB;AAAA,IACxC;AAAA,IACA;AAAA,MAME,SAAS,GAAG,KAAK,UAAU,qBAAqB,SAAS,IAAI,CAAC;AAAA;AAAA,MAC9D,MAAM,KAAK,QAAQ,eAAe;AAAA,IACpC;AAAA,IACA;AAAA,MACE,SAAS,4BAA4B,IAAI;AAAA,MACzC,MAAM,KAAK,QAAQ,SAAS,iBAAiB;AAAA,IAC/C;AAAA,IACA;AAAA,MACE,SAAS,4BAA4B,KAAK;AAAA,MAC1C,MAAM,KAAK,QAAQ,SAAS,kBAAkB;AAAA,IAChD;AAAA,EACF;AAAA,EAEA,MAAM,KAAK,GAAI,MAAM,kBAAkB,SAAS,MAAM,QAAQ,MAAM,CAAE;AAAA,EAEtE,IAAI,kBAAkB;AAAA,IACpB,MAAM,KAAK,GAAI,MAAM,SAAS,SAAS,QAAQ,MAAM,CAAE;AAAA,EACzD;AAAA,EAIA,MAAM,YAAY,eAAe,SAAS,OAAO,QAAQ;AAAA,IACvD;AAAA,IACA;AAAA,IACA;AAAA,IACA,QAAQ;AAAA,EACV,CAAC;AAAA,EAED,IAAI,OAAO,IAAI,GAAG,SAAS;AAAA,IAIzB,QAAQ,WAAW,aAAa,eAC9B;AAAA,MACE,SAAS,gBAAgB,OAAO,IAAI;AAAA,MACpC,SAAS,OAAO,IAAI,GAAG;AAAA,MACvB,YAAY,OAAO,MAAM;AAAA,MACzB,sBAAsB;AAAA,IACxB,GACA,IACF;AAAA,IACA,MAAM,KAAK;AAAA,MACT,SAAS,mBACP,eAAe,OAAO,OAAO,OAAO,OAAO,IAAI,GAAG,MAAM,GACxD;AAAA,QACE;AAAA,QACA;AAAA,QACA,kBAAkB,OAAO,IAAI,GAAG,gBAAgB;AAAA,MAClD,GACA,UAAU,SAAS,CACrB;AAAA,MACA,MAAM,KAAK,QAAQ,SAAS,MAAM,kBAAkB;AAAA,IACtD,CAAC;AAAA,EACH;AAAA,EAKA,MAAM,YAAY,MAAM,eAAe,SAAS,KAAK;AAAA,EACrD,IAAI,WAAW;AAAA,IACb,MAAM,KAAK;AAAA,MACT,SAAS,GAAG,KAAK,UAAU,SAAS;AAAA;AAAA,MACpC,MAAM,KAAK,QAAQ,eAAe;AAAA,IACpC,CAAC;AAAA,EACH;AAAA,EACA,MAAM,KACJ,GAAG,SAAS,SAAS,OAAO,QAAQ,SAAS,GAC7C,GAAG,SAAS,SAAS,OAAO,MAAM,QAAQ,SAAS,GACnD,GAAG,WACH,GAAG,qBAAqB,QAAQ,aAAa,MAAM,CACrD;AAAA,EAOA,IAAI,CAAC,aAAa,OAAO,QAAQ,MAAM,OAAO,MAAM,GAAG;AAAA,IACrD,MAAM,KACJ;AAAA,MACE,SAAS,qBAAqB;AAAA,MAC9B,MAAM,KAAK,QAAQ,SAAS,WAAW;AAAA,IACzC,GACA;AAAA,MACE,SAAS,yBAAyB;AAAA,MAClC,MAAM,KAAK,QAAQ,SAAS,WAAW;AAAA,IACzC,GACA;AAAA,MACE,SAAS,qBAAqB;AAAA,MAC9B,MAAM,KAAK,QAAQ,SAAS,aAAa;AAAA,IAC3C,CACF;AAAA,EACF;AAAA,EAKA,MAAM,KACJ;AAAA,IACE,SAAS,iBAAiB,QAAQ;AAAA,IAClC,MAAM,KAAK,QAAQ,aAAa;AAAA,EAClC,GACA;AAAA,IACE,SAAS,qBAAqB,MAAM;AAAA,IACpC,MAAM,KAAK,QAAQ,kBAAkB;AAAA,EACvC,GACA;AAAA,IACE,SAAS,sBAAsB,OAAO,OAAO;AAAA,IAC7C,MAAM,KAAK,QAAQ,mBAAmB;AAAA,EACxC,CACF;AAAA,EAEA,MAAM,gBAAgB,OAAO,OAAO;AAAA,EACpC,IAAI,cAAc,SAAS,UAAU;AAAA,IACnC,MAAM,YAAY,MAAM,qBAAqB,OAAO;AAAA,IACpD,MAAM,KACJ;AAAA,MACE,SAAS,GAAG,KAAK,UAAU,SAAS;AAAA;AAAA,MACpC,MAAM,KAAK,QAAQ,aAAa;AAAA,IAClC,GACA;AAAA,MACE,SAAS,uBAAuB;AAAA,MAChC,MAAM,KAAK,QAAQ,SAAS,sBAAsB;AAAA,IACpD,CACF;AAAA,EACF;AAAA,EAEA,IAAI,cAAc,SAAS,cAAc;AAAA,IACvC,MAAM,KAAK;AAAA,MACT,SAAS,iCACP,cAAc,SACd,YAAY,OAAO,GACnB,OAAO,SACT;AAAA,MACA,MAAM,KAAK,QAAQ,SAAS,OAAO,WAAW;AAAA,IAChD,CAAC;AAAA,EACH;AAAA,EAEA,MAAM,QAAQ,cAAc,OAAO;AAAA,EACnC,IAAI,MAAM,SAAS,GAAG;AAAA,IACpB,MAAM,UAAU,OAAO,YACrB,MAAM,IAAI,CAAC,SAAS,CAAC,KAAK,MAAM,cAAc,IAAI,CAAC,CAAC,CACtD;AAAA,IACA,MAAM,KACJ;AAAA,MACE,SAAS,GAAG,KAAK,UAAU,OAAO;AAAA;AAAA,MAClC,MAAM,KAAK,QAAQ,UAAU;AAAA,IAC/B,GACA;AAAA,MACE,SAAS,oBAAoB;AAAA,MAC7B,MAAM,KAAK,QAAQ,SAAS,aAAa,YAAY;AAAA,IACvD,CACF;AAAA,EACF;AAAA,EAQA,MAAM,WAAqB,uBAAuB,QAAQ,WAAW;AAAA,EACrE,IAAI,oBAAoB,MAAM,GAAG;AAAA,IAC/B,MAAM,aAAa,MAAM,oBAAoB;AAAA,MAC3C;AAAA,MACA,eAAe,IAAI,IAAI,QAAQ,MAAM,MAAM,IAAI,CAAC,SAAS,KAAK,KAAK,CAAC;AAAA,MACpE;AAAA,IACF,CAAC;AAAA,IACD,SAAS,KAAK,GAAG,WAAW,QAAQ;AAAA,IACpC,WAAW,QAAQ,WAAW,OAAO;AAAA,MACnC,MAAM,KAAK;AAAA,QACT,SAAS,KAAK;AAAA,QACd,MAAM,KAAK,QAAQ,SAAS,KAAK,QAAQ;AAAA,MAC3C,CAAC;AAAA,IACH;AAAA,EACF;AAAA,EAGA,MAAM,KACJ,GAAG,SAAS,SAAS,IAAI,CAAC,aAAa;AAAA,IACrC,SAAS,QAAQ;AAAA,IACjB,MAAM,KAAK,QAAQ,mBAAmB,GAAG,QAAQ,YAAY;AAAA,EAC/D,EAAE,GACF,GAAG,SAAS,SAAS,IAAI,CAAC,aAAa;AAAA,IACrC,SAAS,uBAAuB,SAAS,KAAK,QAAQ,UAAU,CAAC;AAAA,IACjE,MAAM,KAAK,QAAQ,YAAY,GAAG,YAAY,QAAQ,IAAI,SAAS;AAAA,EACrE,EAAE,GACF,GAAG,qBACD,QACA,OAAO,UACP,SAAS,SAAS,SAAS,CAC7B,CACF;AAAA,EAIA,YAAY,SAAS,YAAY,QAAQ;AAAA,IACvC,MAAM,KAAK,EAAE,SAAS,MAAM,KAAK,MAAM,WAAW,OAAO,EAAE,CAAC;AAAA,EAC9D;AAAA,EAEA,MAAM,UAAU,MAAM,OACpB,CAAC,SAAS,EAAE,KAAK,gBAAgB,WAAW,KAAK,IAAI,EACvD;AAAA,EACA,MAAM,QAAQ,IACZ,QAAQ,IAAI,OAAO,SAAS;AAAA,IAC1B,MAAM,MAAM,KAAK,KAAK,MAAM,IAAI,GAAG,EAAE,WAAW,KAAK,CAAC;AAAA,IACtD,MAAM,UAAU,KAAK,MAAM,KAAK,SAAS,OAAO;AAAA,GACjD,CACH;AAAA,EAKA,MAAM,YAAY,KAAK,QAAQ,QAAQ,UAAU,cAAc;AAAA,EAC/D,IAAI,WAAW,SAAS,GAAG;AAAA,IACzB,MAAM,GAAG,WAAW,KAAK,MAAM,UAAU,cAAc,GAAG;AAAA,MACxD,WAAW;AAAA,IACb,CAAC;AAAA,EACH;AAAA,EAGA,MAAM,GAAG,QAAQ,QAAQ,EAAE,OAAO,MAAM,WAAW,KAAK,CAAC;AAAA,EAEzD,OAAO;AAAA,IACL,cAAc,kBAAkB;AAAA,MAC9B;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF,CAAC;AAAA,IACD,OAAO,QAAQ,IAAI,CAAC,SAAS,KAAK,IAAI;AAAA,IACtC;AAAA,EACF;AAAA;",
+  "debugId": "D33846DF3713FFC264756E2164756E21",
+  "names": []
+}

package/dist/cli/{chunk-tkacnehg.js → chunk-3v3ffbrj.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   commandsFor
-} from "./chunk-pv29h0wf.js";
+} from "./chunk-ehweg4fr.js";
 
 // src/cli/init/install.ts
 import { spawn } from "node:child_process";
@@ -36,4 +36,4 @@ var installDependencies = async (root, pm, { quiet }) => {
 export { installDependencies };
 
 //# debugId=3BBCF1D4B57D128664756E2164756E21
-//# sourceMappingURL=chunk-tkacnehg.js.map
+//# sourceMappingURL=chunk-3v3ffbrj.js.map

package/dist/cli/{chunk-q58y5e6a.js → chunk-3x6x3pph.js}

@@ -1,8 +1,14 @@
 #!/usr/bin/env node
 import {
+  missingExampleDiagnostics,
   discoverIslands,
+  discoverExamples,
   missingDependencyDiagnostic
-} from "./chunk-b07cmahc.js";
+} from "./chunk-66w9j7p6.js";
+import {
+  discoverPages,
+  navTargetRoutes
+} from "./chunk-ehweg4fr.js";
 import {
   packageRoot,
   commandMeta,
@@ -14,23 +20,23 @@ import {
   reportDiagnosticsJson,
   reportDiagnostics
 } from "./index.js";
-import"./chunk-pv29h0wf.js";
 import {
   ComponentOverridesError,
   analyzeComponentOverrides
-} from "./chunk-8ktnccpt.js";
-import"./chunk-3em5wd2y.js";
+} from "./chunk-54ztw1nj.js";
 import {
+  validateNavTargets,
   scanProject
-} from "./chunk-j85vccga.js";
+} from "./chunk-ncj7w596.js";
+import"./chunk-zccbjcj0.js";
 import"./chunk-jq5n4avg.js";
 import {
   unregisteredSnapshotDiagnostics
-} from "./chunk-crgn1q09.js";
+} from "./chunk-sds923fa.js";
 import {
   serverFeatures,
   checkRequiredSecrets
-} from "./chunk-364znk6q.js";
+} from "./chunk-t2m5j4pr.js";
 
 // src/cli/commands/doctor.ts
 import { readFileSync } from "node:fs";
@@ -41,14 +47,14 @@ import { satisfies } from "semver";
 var FALLBACK_NODE_RANGE = ">=22.12.0";
 var componentsDiagnostics = async (componentsFile) => {
   if (!componentsFile) {
-    return [];
+    return { issues: [], mdx: [] };
   }
   try {
-    analyzeComponentOverrides(await readFile(componentsFile, "utf-8"), componentsFile);
-    return [];
+    const { mdx } = analyzeComponentOverrides(await readFile(componentsFile, "utf-8"), componentsFile);
+    return { issues: [], mdx: mdx.map((entry) => entry.key) };
   } catch (error) {
     if (error instanceof ComponentOverridesError) {
-      return error.issues;
+      return { issues: error.issues, mdx: [] };
     }
     throw error;
   }
@@ -61,6 +67,21 @@ var supportedNodeRange = () => {
     return FALLBACK_NODE_RANGE;
   }
 };
+var integrationSummary = (config) => {
+  const { assistant } = config.ai;
+  let assistantSummary = "off";
+  if (assistant?.enabled) {
+    assistantSummary = assistant.endpoint ? "external endpoint" : assistant.provider.kind;
+  }
+  return [
+    `References: ${config.reference.map((adapter) => adapter.kind).join(", ") || "none"}`,
+    `Analytics: ${config.analytics.map((adapter) => adapter.kind).join(", ") || "none"}`,
+    `Consent: ${config.consent?.kind ?? "none"}`,
+    `Rate limiting: ${config.rateLimit?.kind ?? "off"}`,
+    `Sources: ${config.content.sources.map((source) => source.kind).join(", ")}`,
+    `Assistant: ${assistantSummary}`
+  ];
+};
 var doctorCommand = defineCommand({
   args: {
     json: {
@@ -82,15 +103,22 @@ var doctorCommand = defineCommand({
     }
     loadEnvFiles(root);
     try {
-      const project = await scanProject(root, { mode: "build" });
-      diagnostics.push(...project.diagnostics, ...unregisteredSnapshotDiagnostics(project));
+      const project = await scanProject(root, {
+        beforeSources: (config) => {
+          diagnostics.push(...checkRequiredSecrets(config));
+        },
+        mode: "build"
+      });
+      const userPages = project.context.pagesRoot ? await discoverPages(project.context.pagesRoot) : [];
+      diagnostics.push(...project.diagnostics, ...unregisteredSnapshotDiagnostics(project), ...validateNavTargets(project.graph.navigation, navTargetRoutes(project, userPages)));
       const { config } = project;
       const { islands } = await discoverIslands(root);
       const dependencies = await missingDependencyDiagnostic(config, root, "error", islands.map((island) => island.framework));
       if (dependencies) {
         diagnostics.push(dependencies);
       }
-      diagnostics.push(...await componentsDiagnostics(project.context.componentsFile), ...checkRequiredSecrets(config));
+      const overrides = await componentsDiagnostics(project.context.componentsFile);
+      diagnostics.push(...overrides.issues, ...missingExampleDiagnostics(project.graph.pages, await discoverExamples(root, config.examples.source), root, new Set([...islands.map((island) => island.name), ...overrides.mdx])));
       const features = serverFeatures(config);
       if (features.length > 0 && config.deployment.options.output === "static") {
         const { kind } = config.deployment;
@@ -106,15 +134,9 @@ var doctorCommand = defineCommand({
         logger.info(`Output: ${config.deployment.options.output}`);
         logger.info(`Adapter: ${config.deployment.kind}`);
         logger.info(`Search: ${config.search.provider.kind}`);
-        logger.info(`References: ${config.reference.map((adapter) => adapter.kind).join(", ") || "none"}`);
-        logger.info(`Analytics: ${config.analytics.map((adapter) => adapter.kind).join(", ") || "none"}`);
-        logger.info(`Sources: ${config.content.sources.map((source) => source.kind).join(", ")}`);
-        const { assistant } = config.ai;
-        let assistantSummary = "off";
-        if (assistant?.enabled) {
-          assistantSummary = assistant.endpoint ? "external endpoint" : assistant.provider.kind;
+        for (const line of integrationSummary(config)) {
+          logger.info(line);
         }
-        logger.info(`Assistant: ${assistantSummary}`);
       }
     } catch (error) {
       if (error instanceof BlumeError) {
@@ -144,5 +166,5 @@ export {
   doctorCommand
 };
 
-//# debugId=96CD4C43F82F2F6F64756E2164756E21
-//# sourceMappingURL=chunk-q58y5e6a.js.map
+//# debugId=A6107CD821E0AA4B64756E2164756E21
+//# sourceMappingURL=chunk-3x6x3pph.js.map