humanish 0.68.0 → 0.69.0

package/dist/export.d.ts

@@ -0,0 +1,42 @@
+import { type VerifyResult } from "./run.js";
+export declare const EXPORT_SCHEMA = "humanish.export-result.v1";
+/** Past this the file stops being a thing you attach to an email. Declared, never silent. */
+export declare const DEFAULT_EXPORT_MAX_BYTES: number;
+export interface ExportResult {
+    schema: typeof EXPORT_SCHEMA;
+    ok: true;
+    cwd: string;
+    runId: string;
+    /** Repo-relative path of the file written. */
+    path: string;
+    bytes: number;
+    embeddedImages: number;
+    shareSafety: VerifyResult["shareSafety"];
+    /** True when --local-only exported a bundle that is not share_ready; the file carries a banner. */
+    watermarked: boolean;
+    warnings: string[];
+}
+export interface ExportFailure {
+    schema: typeof EXPORT_SCHEMA;
+    ok: false;
+    cwd: string;
+    run: string;
+    shareSafety?: VerifyResult["shareSafety"];
+    error: {
+        code: "HUMANISH_EXPORT_RUN_NOT_FOUND" | "HUMANISH_EXPORT_VERIFY_FAILED" | "HUMANISH_EXPORT_SHARE_SAFETY_BLOCKED" | "HUMANISH_EXPORT_NO_OBSERVER" | "HUMANISH_EXPORT_TOO_LARGE";
+        message: string;
+    };
+}
+export interface ExportOptions {
+    out?: string;
+    localOnly?: boolean;
+    maxBytes?: number;
+}
+export interface ExportDeps {
+    /** Injected in tests: a fake verify with a chosen shareSafety, no full bundle needed. */
+    verify?: (cwd: string, run: string) => Promise<VerifyResult>;
+}
+/** The banner a --local-only export carries. Plain HTML, before the app root, so it renders with JS off. */
+export declare function localOnlyBanner(reasons: string[]): string;
+export declare function exportRun(cwdInput: string, runInput: string, options?: ExportOptions, deps?: ExportDeps): Promise<ExportResult | ExportFailure>;
+export declare function formatExportHuman(result: ExportResult | ExportFailure): string;

package/dist/export.js

@@ -0,0 +1,169 @@
+// `humanish export`: one file a coworker can open (#471).
+//
+// A run is a directory. Sharing it meant a tunnel (`serve --expose`) or a hand-zipped bundle,
+// neither of which is "send one thing". The Observer is already a single-file artifact with the
+// run's data inlined; what keeps it from travelling is the screenshots it references by path.
+// Export inlines those as data URIs and writes ONE .html that opens from a mail attachment.
+//
+// Share safety is the point, not a step: export runs verify inside the flow and refuses a bundle
+// that is not share_ready. A local_only bundle (raw screenshots) exports only with an explicit
+// --local-only, and the file it writes says so in a banner nothing can miss.
+import { mkdir, readFile, stat, writeFile } from "node:fs/promises";
+import path from "node:path";
+import { resolveRunPath, verifyRun } from "./run.js";
+export const EXPORT_SCHEMA = "humanish.export-result.v1";
+/** Past this the file stops being a thing you attach to an email. Declared, never silent. */
+export const DEFAULT_EXPORT_MAX_BYTES = 25 * 1024 * 1024;
+const OBSERVER_DATA_SLOT = /<script id="observer-data" type="application\/json">([\s\S]*?)<\/script>/;
+const IMAGE_MIME = {
+    ".png": "image/png",
+    ".jpg": "image/jpeg",
+    ".jpeg": "image/jpeg",
+    ".webp": "image/webp",
+    ".gif": "image/gif"
+};
+function escapeJsonScript(json) {
+    return json
+        .replace(/</g, "\\u003c")
+        .replace(/>/g, "\\u003e")
+        .replace(/&/g, "\\u0026")
+        .replace(/\u2028/g, "\\u2028")
+        .replace(/\u2029/g, "\\u2029");
+}
+/** The banner a --local-only export carries. Plain HTML, before the app root, so it renders with JS off. */
+export function localOnlyBanner(reasons) {
+    const why = reasons.length === 0 ? "" : ` (${reasons.join(", ")})`;
+    return `<div id="humanish-local-only" role="alert" style="position:sticky;top:0;z-index:2147483647;background:#7a1f1f;color:#fff;font:600 14px/1.4 system-ui,sans-serif;padding:10px 16px;text-align:center">`
+        + `LOCAL ONLY. This export was made from a bundle that is not share-safe${why}. Do not forward it outside the team that owns the run.`
+        + `</div>`;
+}
+async function isInside(root, candidate) {
+    const rel = path.relative(root, candidate);
+    return rel !== "" && !rel.startsWith("..") && !path.isAbsolute(rel);
+}
+export async function exportRun(cwdInput, runInput, options = {}, deps = {}) {
+    const cwd = path.resolve(cwdInput);
+    const runPaths = await resolveRunPath(cwd, runInput).catch(() => null);
+    if (runPaths === null) {
+        return { schema: EXPORT_SCHEMA, ok: false, cwd, run: runInput, error: { code: "HUMANISH_EXPORT_RUN_NOT_FOUND", message: `No run resolves from "${runInput}" under ${cwd}.` } };
+    }
+    const runRoot = runPaths.absoluteRunRoot;
+    const runId = path.basename(runRoot);
+    const verified = await (deps.verify ?? verifyRun)(cwd, runInput);
+    if (!verified.ok) {
+        return {
+            schema: EXPORT_SCHEMA, ok: false, cwd, run: runInput, shareSafety: verified.shareSafety,
+            error: { code: "HUMANISH_EXPORT_VERIFY_FAILED", message: `Run ${runId} does not verify; export refuses to package evidence that fails its own checks.` }
+        };
+    }
+    const shareReady = verified.shareSafety.status === "share_ready";
+    if (!shareReady && options.localOnly !== true) {
+        return {
+            schema: EXPORT_SCHEMA, ok: false, cwd, run: runInput, shareSafety: verified.shareSafety,
+            error: {
+                code: "HUMANISH_EXPORT_SHARE_SAFETY_BLOCKED",
+                message: `Run ${runId} is ${verified.shareSafety.status}, not share_ready: ${verified.shareSafety.reasons.map((r) => r.code).join(", ")}. Re-run with policies.redactScreenshots: true, or pass --local-only to export a watermarked file for people who may see raw screenshots.`
+            }
+        };
+    }
+    const observerPath = path.join(runRoot, "observer", "index.html");
+    let html;
+    try {
+        html = await readFile(observerPath, "utf8");
+    }
+    catch {
+        return { schema: EXPORT_SCHEMA, ok: false, cwd, run: runInput, shareSafety: verified.shareSafety, error: { code: "HUMANISH_EXPORT_NO_OBSERVER", message: `Run ${runId} has no observer/index.html to export.` } };
+    }
+    const slot = OBSERVER_DATA_SLOT.exec(html);
+    if (slot === null) {
+        return { schema: EXPORT_SCHEMA, ok: false, cwd, run: runInput, shareSafety: verified.shareSafety, error: { code: "HUMANISH_EXPORT_NO_OBSERVER", message: `Run ${runId}'s Observer carries no inline data slot; rebuild the run's Observer first.` } };
+    }
+    // Every string in the data that names an image file inside the run becomes a data URI. Paths are
+    // run-root-relative in the data; a path that resolves outside the run is left alone, never read.
+    const data = JSON.parse(slot[1]);
+    const cache = new Map();
+    let embedded = 0;
+    let imageBytes = 0;
+    const warnings = [];
+    const inline = async (value) => {
+        const ext = path.extname(value).toLowerCase();
+        const mime = IMAGE_MIME[ext];
+        if (mime === undefined || value.startsWith("data:") || /^[a-z]+:\/\//i.test(value))
+            return value;
+        const cached = cache.get(value);
+        if (cached !== undefined)
+            return cached ?? value;
+        const candidates = [path.resolve(runRoot, value), path.resolve(runRoot, "observer", value)];
+        for (const candidate of candidates) {
+            if (!(await isInside(runRoot, candidate)))
+                continue;
+            const info = await stat(candidate).catch(() => null);
+            if (info === null || !info.isFile())
+                continue;
+            const bytes = await readFile(candidate);
+            imageBytes += bytes.byteLength;
+            embedded += 1;
+            const uri = `data:${mime};base64,${bytes.toString("base64")}`;
+            cache.set(value, uri);
+            return uri;
+        }
+        cache.set(value, null);
+        warnings.push(`image not found inside the run, left as a path: ${value}`);
+        return value;
+    };
+    const walk = async (node) => {
+        if (typeof node === "string")
+            return inline(node);
+        if (Array.isArray(node))
+            return Promise.all(node.map(walk));
+        if (node !== null && typeof node === "object") {
+            const out = {};
+            for (const [key, value] of Object.entries(node))
+                out[key] = await walk(value);
+            return out;
+        }
+        return node;
+    };
+    const inlined = await walk(data);
+    let output = html.replace(OBSERVER_DATA_SLOT, () => `<script id="observer-data" type="application/json">${escapeJsonScript(JSON.stringify(inlined))}</script>`);
+    const watermarked = !shareReady;
+    if (watermarked) {
+        const banner = localOnlyBanner(verified.shareSafety.reasons.map((r) => r.code));
+        output = output.includes("<body>") ? output.replace("<body>", `<body>${banner}`) : `${banner}${output}`;
+    }
+    const bytes = Buffer.byteLength(output, "utf8");
+    const maxBytes = options.maxBytes ?? DEFAULT_EXPORT_MAX_BYTES;
+    if (bytes > maxBytes) {
+        return {
+            schema: EXPORT_SCHEMA, ok: false, cwd, run: runInput, shareSafety: verified.shareSafety,
+            error: { code: "HUMANISH_EXPORT_TOO_LARGE", message: `Export would be ${bytes} bytes (${embedded} images, ${imageBytes} image bytes), over the ${maxBytes}-byte cap. Raise --max-bytes deliberately, or export a run with fewer frames.` }
+        };
+    }
+    const outPath = path.resolve(cwd, options.out ?? path.join(".humanish", "exports", `${runId}.html`));
+    await mkdir(path.dirname(outPath), { recursive: true });
+    await writeFile(outPath, output, "utf8");
+    return {
+        schema: EXPORT_SCHEMA,
+        ok: true,
+        cwd,
+        runId,
+        path: path.relative(cwd, outPath),
+        bytes,
+        embeddedImages: embedded,
+        shareSafety: verified.shareSafety,
+        watermarked,
+        warnings
+    };
+}
+export function formatExportHuman(result) {
+    if (!result.ok)
+        return `${result.error.code}: ${result.error.message}\n`;
+    const lines = [
+        `humanish export ${result.runId}`,
+        `file: ${result.path} (${(result.bytes / 1024).toFixed(0)} KB, ${result.embeddedImages} image(s) embedded)`,
+        `share safety: ${result.shareSafety.status}${result.watermarked ? " — WATERMARKED LOCAL ONLY" : ""}`,
+        ...result.warnings.map((warning) => `warning: ${warning}`)
+    ];
+    return `${lines.join("\n")}\n`;
+}
+//# sourceMappingURL=export.js.map

package/dist/export.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"export.js","sourceRoot":"","sources":["../src/export.ts"],"names":[],"mappings":"AAAA,0DAA0D;AAC1D,EAAE;AACF,8FAA8F;AAC9F,gGAAgG;AAChG,8FAA8F;AAC9F,4FAA4F;AAC5F,EAAE;AACF,iGAAiG;AACjG,+FAA+F;AAC/F,6EAA6E;AAE7E,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACpE,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,cAAc,EAAE,SAAS,EAAqB,MAAM,UAAU,CAAC;AAExE,MAAM,CAAC,MAAM,aAAa,GAAG,2BAA2B,CAAC;AACzD,6FAA6F;AAC7F,MAAM,CAAC,MAAM,wBAAwB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAEzD,MAAM,kBAAkB,GAAG,0EAA0E,CAAC;AACtG,MAAM,UAAU,GAA2B;IACzC,MAAM,EAAE,WAAW;IACnB,MAAM,EAAE,YAAY;IACpB,OAAO,EAAE,YAAY;IACrB,OAAO,EAAE,YAAY;IACrB,MAAM,EAAE,WAAW;CACpB,CAAC;AA6CF,SAAS,gBAAgB,CAAC,IAAY;IACpC,OAAO,IAAI;SACR,OAAO,CAAC,IAAI,EAAE,SAAS,CAAC;SACxB,OAAO,CAAC,IAAI,EAAE,SAAS,CAAC;SACxB,OAAO,CAAC,IAAI,EAAE,SAAS,CAAC;SACxB,OAAO,CAAC,SAAS,EAAE,SAAS,CAAC;SAC7B,OAAO,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;AACnC,CAAC;AAED,4GAA4G;AAC5G,MAAM,UAAU,eAAe,CAAC,OAAiB;IAC/C,MAAM,GAAG,GAAG,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC;IACnE,OAAO,uMAAuM;UAC1M,wEAAwE,GAAG,yDAAyD;UACpI,QAAQ,CAAC;AACf,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,IAAY,EAAE,SAAiB;IACrD,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;IAC3C,OAAO,GAAG,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;AACtE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,QAAgB,EAChB,QAAgB,EAChB,UAAyB,EAAE,EAC3B,OAAmB,EAAE;IAErB,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACnC,MAAM,QAAQ,GAAG,MAAM,cAAc,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;IACvE,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;QACtB,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,+BAA+B,EAAE,OAAO,EAAE,yBAAyB,QAAQ,WAAW,GAAG,GAAG,EAAE,EAAE,CAAC;IACjL,CAAC;IACD,MAAM,OAAO,GAAG,QAAQ,CAAC,eAAe,CAAC;IACzC,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IAErC,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,IAAI,SAAS,CAAC,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;IACjE,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,OAAO;YACL,MAAM,EAAE,aAAa,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,QAAQ,EAAE,WAAW,EAAE,QAAQ,CAAC,WAAW;YACvF,KAAK,EAAE,EAAE,IAAI,EAAE,+BAA+B,EAAE,OAAO,EAAE,OAAO,KAAK,iFAAiF,EAAE;SACzJ,CAAC;IACJ,CAAC;IACD,MAAM,UAAU,GAAG,QAAQ,CAAC,WAAW,CAAC,MAAM,KAAK,aAAa,CAAC;IACjE,IAAI,CAAC,UAAU,IAAI,OAAO,CAAC,SAAS,KAAK,IAAI,EAAE,CAAC;QAC9C,OAAO;YACL,MAAM,EAAE,aAAa,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,QAAQ,EAAE,WAAW,EAAE,QAAQ,CAAC,WAAW;YACvF,KAAK,EAAE;gBACL,IAAI,EAAE,sCAAsC;gBAC5C,OAAO,EAAE,OAAO,KAAK,OAAO,QAAQ,CAAC,WAAW,CAAC,MAAM,sBAAsB,QAAQ,CAAC,WAAW,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,2IAA2I;aACnR;SACF,CAAC;IACJ,CAAC;IAED,MAAM,YAAY,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,UAAU,EAAE,YAAY,CAAC,CAAC;IAClE,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QACH,IAAI,GAAG,MAAM,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;IAC9C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,QAAQ,EAAE,WAAW,EAAE,QAAQ,CAAC,WAAW,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,6BAA6B,EAAE,OAAO,EAAE,OAAO,KAAK,wCAAwC,EAAE,EAAE,CAAC;IACpN,CAAC;IACD,MAAM,IAAI,GAAG,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC3C,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;QAClB,OAAO,EAAE,MAAM,EAAE,aAAa,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,QAAQ,EAAE,WAAW,EAAE,QAAQ,CAAC,WAAW,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,6BAA6B,EAAE,OAAO,EAAE,OAAO,KAAK,4EAA4E,EAAE,EAAE,CAAC;IACxP,CAAC;IAED,iGAAiG;IACjG,iGAAiG;IACjG,MAAM,IAAI,GAAY,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAE,CAAC,CAAC;IAC3C,MAAM,KAAK,GAAG,IAAI,GAAG,EAAyB,CAAC;IAC/C,IAAI,QAAQ,GAAG,CAAC,CAAC;IACjB,IAAI,UAAU,GAAG,CAAC,CAAC;IACnB,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,MAAM,MAAM,GAAG,KAAK,EAAE,KAAa,EAAmB,EAAE;QACtD,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;QAC9C,MAAM,IAAI,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;QAC7B,IAAI,IAAI,KAAK,SAAS,IAAI,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC,IAAI,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;QACjG,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAChC,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO,MAAM,IAAI,KAAK,CAAC;QACjD,MAAM,UAAU,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,UAAU,EAAE,KAAK,CAAC,CAAC,CAAC;QAC5F,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;YACnC,IAAI,CAAC,CAAC,MAAM,QAAQ,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;gBAAE,SAAS;YACpD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;YACrD,IAAI,IAAI,KAAK,IAAI,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE;gBAAE,SAAS;YAC9C,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,SAAS,CAAC,CAAC;YACxC,UAAU,IAAI,KAAK,CAAC,UAAU,CAAC;YAC/B,QAAQ,IAAI,CAAC,CAAC;YACd,MAAM,GAAG,GAAG,QAAQ,IAAI,WAAW,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC9D,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;YACtB,OAAO,GAAG,CAAC;QACb,CAAC;QACD,KAAK,CAAC,GAAG,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;QACvB,QAAQ,CAAC,IAAI,CAAC,mDAAmD,KAAK,EAAE,CAAC,CAAC;QAC1E,OAAO,KAAK,CAAC;IACf,CAAC,CAAC;IACF,MAAM,IAAI,GAAG,KAAK,EAAE,IAAa,EAAoB,EAAE;QACrD,IAAI,OAAO,IAAI,KAAK,QAAQ;YAAE,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC;QAClD,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;YAAE,OAAO,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;QAC5D,IAAI,IAAI,KAAK,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC9C,MAAM,GAAG,GAA4B,EAAE,CAAC;YACxC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC;gBAAE,GAAG,CAAC,GAAG,CAAC,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,CAAC;YAC9E,OAAO,GAAG,CAAC;QACb,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC,CAAC;IACF,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,CAAC;IAEjC,IAAI,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,kBAAkB,EAAE,GAAG,EAAE,CAAC,sDAAsD,gBAAgB,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,WAAW,CAAC,CAAC;IAChK,MAAM,WAAW,GAAG,CAAC,UAAU,CAAC;IAChC,IAAI,WAAW,EAAE,CAAC;QAChB,MAAM,MAAM,GAAG,eAAe,CAAC,QAAQ,CAAC,WAAW,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QAChF,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,MAAM,GAAG,MAAM,EAAE,CAAC;IAC1G,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,CAAC,UAAU,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChD,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,wBAAwB,CAAC;IAC9D,IAAI,KAAK,GAAG,QAAQ,EAAE,CAAC;QACrB,OAAO;YACL,MAAM,EAAE,aAAa,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,QAAQ,EAAE,WAAW,EAAE,QAAQ,CAAC,WAAW;YACvF,KAAK,EAAE,EAAE,IAAI,EAAE,2BAA2B,EAAE,OAAO,EAAE,mBAAmB,KAAK,WAAW,QAAQ,YAAY,UAAU,2BAA2B,QAAQ,+EAA+E,EAAE;SAC3O,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,SAAS,EAAE,GAAG,KAAK,OAAO,CAAC,CAAC,CAAC;IACrG,MAAM,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACxD,MAAM,SAAS,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;IACzC,OAAO;QACL,MAAM,EAAE,aAAa;QACrB,EAAE,EAAE,IAAI;QACR,GAAG;QACH,KAAK;QACL,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,OAAO,CAAC;QACjC,KAAK;QACL,cAAc,EAAE,QAAQ;QACxB,WAAW,EAAE,QAAQ,CAAC,WAAW;QACjC,WAAW;QACX,QAAQ;KACT,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,MAAoC;IACpE,IAAI,CAAC,MAAM,CAAC,EAAE;QAAE,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,KAAK,MAAM,CAAC,KAAK,CAAC,OAAO,IAAI,CAAC;IACzE,MAAM,KAAK,GAAG;QACZ,mBAAmB,MAAM,CAAC,KAAK,EAAE;QACjC,SAAS,MAAM,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,QAAQ,MAAM,CAAC,cAAc,qBAAqB;QAC3G,iBAAiB,MAAM,CAAC,WAAW,CAAC,MAAM,GAAG,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,2BAA2B,CAAC,CAAC,CAAC,EAAE,EAAE;QACpG,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,YAAY,OAAO,EAAE,CAAC;KAC3D,CAAC;IACF,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;AACjC,CAAC"}

package/dist/program.js

@@ -11,6 +11,7 @@ import { redactText } from "./redaction.js";
 import { draftFeedback, listFeedback, renderIssueMarkdown, renderIssueUrl, verifyFeedback } from "./feedback.js";
 import { runInit } from "./init.js";
 import { computeStats, formatStatsHuman } from "./stats.js";
+import { DEFAULT_EXPORT_MAX_BYTES, exportRun, formatExportHuman } from "./export.js";
 import { buildPayload, disabledByEnvironment, inHumanishCheckout, durationBucket, readTelemetryState, sendTelemetry, telemetryStatePath, deriveStudyFacts, TELEMETRY_NOTICE, writeTelemetryState } from "./telemetry.js";
 import { inspectLabManifest, listLabManifests, resolveLabManifest } from "./labs.js";
 import { runLabPreflight } from "./lab-preflight.js";
@@ -352,6 +353,7 @@ export function createProgram(io = {}) {
     registerReviewCommand(program, cliIo);
     registerRunsCommand(program, cliIo);
     registerStatsCommand(program, cliIo);
+    registerExportCommand(program, cliIo);
     registerCommsCommands(program, cliIo);
     registerReclaimCommand(program, cliIo);
     registerWatchCommand(program, cliIo);
@@ -893,6 +895,28 @@ function registerReviewCommand(parent, io) {
         io.setExitCode("ok" in result && result.ok === false ? 2 : 0);
     });
 }
+function registerExportCommand(parent, io) {
+    parent
+        .command("export")
+        .description("Write one self-contained .html of a run's Observer with screenshots inlined (#471). Verify and the share_ready gate run inside; a local_only bundle exports only with --local-only, watermarked.")
+        .summary("Export one run as a single shareable .html file.")
+        .option("--run <id>", "Run id or 'latest'.", "latest")
+        .option("--out <path>", "Where to write the file. Defaults to .humanish/exports/<runId>.html.")
+        .option("--local-only", "Export a bundle that is not share_ready, with a LOCAL ONLY banner in the file.")
+        .option("--max-bytes <n>", "Refuse an export larger than this.", String(DEFAULT_EXPORT_MAX_BYTES))
+        .option("--cwd <path>", "Target project directory.", ".")
+        .option("--json", JSON_OPTION_DESCRIPTION)
+        .action(async (options, command) => {
+        const maxBytes = Number.parseInt(options.maxBytes, 10);
+        const result = await exportRun(options.cwd, options.run, {
+            ...(options.out === undefined ? {} : { out: options.out }),
+            ...(options.localOnly === undefined ? {} : { localOnly: options.localOnly }),
+            ...(Number.isFinite(maxBytes) && maxBytes > 0 ? { maxBytes } : {})
+        });
+        writeResult(command, io, result, formatExportHuman);
+        io.setExitCode(result.ok ? 0 : 2);
+    });
+}
 function registerStatsCommand(parent, io) {
     parent
         .command("stats")