orizu 0.5.30 → 0.5.32

package/dist/hosted-tool-hints.js

@@ -0,0 +1,105 @@
+const OPENCODE = 'opencode';
+const CLAUDE_AGENT_SDK = 'claude-agent-sdk';
+/** What kind of thing a tool does — the renderer picks an icon/layout from
+ *  this, never from the tool name. */
+export const TOOL_CATEGORIES = {
+    file: 'file',
+    command: 'command',
+    search: 'search',
+    network: 'network',
+    question: 'question',
+    subAgent: 'sub-agent',
+    list: 'list',
+    plug: 'plug',
+    other: 'other',
+};
+/** How the tool's output text should be shown. */
+export const TOOL_OUTPUT_KINDS = {
+    text: 'text',
+    diff: 'diff',
+    markdown: 'markdown',
+    json: 'json',
+    list: 'list',
+};
+// Argument names that look like they hold a credential. Redacted for every
+// tool, and never used as the fallback summary.
+const SECRET_LOOKING_KEY = /token|secret|password|passwd|api[_-]?key|authorization|credential/i;
+/**
+ * Look a tool up in a driver's hint table. A tool the table does not know (an
+ * MCP tool, a plug-in) falls back to the `plug` category, summarized by its
+ * first non-empty string argument that does not look like a secret.
+ */
+export function resolveToolHint(table, tool, args = {}) {
+    const known = Object.hasOwn(table, tool) ? table[tool] : undefined;
+    const secretKeys = Object.keys(args).filter(key => SECRET_LOOKING_KEY.test(key));
+    const redactKeys = [...new Set([...(known?.redactKeys ?? []), ...secretKeys])];
+    if (known)
+        return { ...known, redactKeys };
+    const summaryKey = Object.keys(args).find(key => {
+        const value = args[key];
+        return typeof value === 'string' && value.length > 0 && !redactKeys.includes(key);
+    }) ?? null;
+    return { category: TOOL_CATEGORIES.plug, summaryKey, outputKind: TOOL_OUTPUT_KINDS.text, redactKeys };
+}
+// OpenCode's built-in tools, as the pinned opencode-ai@1.14.41 tool registry
+// lists them, with the input key that summarizes each call. Tools not listed
+// here (MCP tools, plug-ins) resolve to `plug` through resolveToolHint.
+export const OPENCODE_TOOL_HINTS = {
+    read: { category: 'file', label: 'Read', summaryKey: 'filePath', outputKind: 'text', redactKeys: [] },
+    edit: { category: 'file', label: 'Edited', summaryKey: 'filePath', outputKind: 'diff', redactKeys: ['oldString', 'newString'] },
+    write: { category: 'file', label: 'Wrote', summaryKey: 'filePath', outputKind: 'text', redactKeys: ['content'] },
+    apply_patch: { category: 'file', label: 'Edited', summaryKey: 'patchText', outputKind: 'diff', redactKeys: [] },
+    lsp: { category: 'file', label: 'Checked', summaryKey: 'filePath', outputKind: 'json', redactKeys: [] },
+    bash: { category: 'command', label: 'Ran', summaryKey: 'command', outputKind: 'text', redactKeys: [] },
+    glob: { category: 'search', label: 'Listed', summaryKey: 'pattern', outputKind: 'list', redactKeys: [] },
+    grep: { category: 'search', label: 'Searched', summaryKey: 'pattern', outputKind: 'text', redactKeys: [] },
+    webfetch: { category: 'network', label: 'Fetched', summaryKey: 'url', outputKind: 'markdown', redactKeys: [] },
+    websearch: { category: 'network', label: 'Searched', summaryKey: 'query', outputKind: 'text', redactKeys: [] },
+    question: { category: 'question', label: 'Asked', summaryKey: 'questions', outputKind: 'text', redactKeys: [] },
+    plan_exit: { category: 'question', label: 'Asked', summaryKey: null, outputKind: 'text', redactKeys: [] },
+    task: { category: 'sub-agent', label: 'Sub-agent', summaryKey: 'description', outputKind: 'markdown', redactKeys: [] },
+    todowrite: { category: 'list', label: 'Planned', summaryKey: 'todos', outputKind: 'json', redactKeys: [] },
+    skill: { category: 'other', label: 'Loaded', summaryKey: 'name', outputKind: 'markdown', redactKeys: [] },
+    invalid: { category: 'other', label: 'Invalid', summaryKey: 'tool', outputKind: 'text', redactKeys: [] },
+};
+// The Claude Agent SDK's built-in tools (SDK 0.3.201: input types in
+// sdk-tools.d.ts, names from the SDK; `Task` is the older name of `Agent`),
+// with the input key that summarizes each call. MCP tools
+// (`mcp__<server>__<tool>`) are not listed and resolve to `plug` through
+// resolveToolHint. This driver sends no `title` or `metadata`: the SDK has no
+// equivalent of OpenCode's.
+export const CLAUDE_TOOL_HINTS = {
+    Read: { category: 'file', label: 'Read', summaryKey: 'file_path', outputKind: 'text', redactKeys: [] },
+    Edit: { category: 'file', label: 'Edited', summaryKey: 'file_path', outputKind: 'text', redactKeys: ['old_string', 'new_string'] },
+    Write: { category: 'file', label: 'Wrote', summaryKey: 'file_path', outputKind: 'text', redactKeys: ['content'] },
+    NotebookEdit: { category: 'file', label: 'Edited', summaryKey: 'notebook_path', outputKind: 'text', redactKeys: ['new_source'] },
+    Bash: { category: 'command', label: 'Ran', summaryKey: 'command', outputKind: 'text', redactKeys: [] },
+    TaskOutput: { category: 'command', label: 'Checked', summaryKey: 'task_id', outputKind: 'text', redactKeys: [] },
+    TaskStop: { category: 'command', label: 'Stopped', summaryKey: 'task_id', outputKind: 'text', redactKeys: [] },
+    Glob: { category: 'search', label: 'Listed', summaryKey: 'pattern', outputKind: 'list', redactKeys: [] },
+    Grep: { category: 'search', label: 'Searched', summaryKey: 'pattern', outputKind: 'text', redactKeys: [] },
+    WebFetch: { category: 'network', label: 'Fetched', summaryKey: 'url', outputKind: 'markdown', redactKeys: [] },
+    WebSearch: { category: 'network', label: 'Searched', summaryKey: 'query', outputKind: 'text', redactKeys: [] },
+    AskUserQuestion: { category: 'question', label: 'Asked', summaryKey: 'questions', outputKind: 'text', redactKeys: [] },
+    ExitPlanMode: { category: 'question', label: 'Asked', summaryKey: null, outputKind: 'markdown', redactKeys: [] },
+    Agent: { category: 'sub-agent', label: 'Sub-agent', summaryKey: 'description', outputKind: 'markdown', redactKeys: [] },
+    Task: { category: 'sub-agent', label: 'Sub-agent', summaryKey: 'description', outputKind: 'markdown', redactKeys: [] },
+    TodoWrite: { category: 'list', label: 'Planned', summaryKey: 'todos', outputKind: 'text', redactKeys: [] },
+    ListMcpResourcesTool: { category: 'plug', label: 'Listed', summaryKey: 'server', outputKind: 'json', redactKeys: [] },
+    ReadMcpResourceTool: { category: 'plug', label: 'Read', summaryKey: 'uri', outputKind: 'text', redactKeys: [] },
+    Skill: { category: 'other', label: 'Loaded', summaryKey: 'skill', outputKind: 'markdown', redactKeys: [] },
+};
+const NO_HINTS = {};
+/**
+ * The hint table for the harness that produced an event. Events recorded
+ * before the seam named its harness came from OpenCode, the default driver.
+ * A harness with no table here (a future pi driver, say) gets none, so every
+ * tool falls back to its own name and first string argument.
+ */
+export function toolHintsFor(harness) {
+    if (harness === undefined || harness === OPENCODE)
+        return OPENCODE_TOOL_HINTS;
+    if (harness === CLAUDE_AGENT_SDK)
+        return CLAUDE_TOOL_HINTS;
+    return NO_HINTS;
+}

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAsLA,OAAO,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAA;AAEhE,eAAO,MAAM,wBAAwB,GAAI,iBAAiB,MAAM;;;EACJ,CAAA;AAE5D,OAAO,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAA;AAC5E,OAAO,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAA;AA+tCtD,wBAAgB,kBAAkB,CAAC,SAAS,EAAE,MAAM,GAAG;IAAE,OAAO,EAAE,MAAM,EAAE,CAAC;IAAC,kBAAkB,CAAC,EAAE,MAAM,EAAE,CAAA;CAAE,CA0B1G;AAED,eAAO,MAAM,iBAAiB,SAAU,CAAA;AACxC,eAAO,MAAM,uBAAuB,QAAkB,CAAA;AACtD,wBAAgB,mBAAmB,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,iBAAiB,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC,UAAU,CAexH;AAmMD,wBAAsB,IAAI,CAAC,OAAO,WAAwB,iBAyhBzD;AA6DD,OAAO,EAAE,kBAAkB,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAA;AAEhF,OAAO,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AAsLA,OAAO,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAA;AAEhE,eAAO,MAAM,wBAAwB,GAAI,iBAAiB,MAAM;;;EACJ,CAAA;AAE5D,OAAO,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAA;AAC5E,OAAO,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAA;AA4tCtD,wBAAgB,kBAAkB,CAAC,SAAS,EAAE,MAAM,GAAG;IAAE,OAAO,EAAE,MAAM,EAAE,CAAC;IAAC,kBAAkB,CAAC,EAAE,MAAM,EAAE,CAAA;CAAE,CA0B1G;AAED,eAAO,MAAM,iBAAiB,SAAU,CAAA;AACxC,eAAO,MAAM,uBAAuB,QAAkB,CAAA;AACtD,wBAAgB,mBAAmB,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,iBAAiB,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC,UAAU,CAexH;AAmMD,wBAAsB,IAAI,CAAC,OAAO,WAAwB,iBAyhBzD;AA6DD,OAAO,EAAE,kBAAkB,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAA;AAEhF,OAAO,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAA"}

package/dist/index.js

@@ -31,7 +31,7 @@ import { resolveAuthTokenForBaseUrl } from './credentials.js';
 import { applyHostedInstructionSetProfileOverride, dispatchHostedCommands } from './hosted-commands.js';
 import { dispatchGepaEngine } from './gepa-engine-dispatch.js';
 import { getGepaPythonPathEntries } from './gepa-python-paths.js';
-import { resolveGepaInstructionSetProfileVersion } from './instruction-set-gepa-launch.js';
+import { resolveGepaSeedFromEnvironment } from './instruction-set-gepa-launch.js';
 import { prepareSkilledProposerLaunch, spawnSkilledProposerChild } from './skilled-proposer-launch.js';
 import { reportCommentsCommand, throwDeprecatedPromptCommentsCommand } from './report-comments-cli.js';
 import { getCapabilities, renderHelpForArgs } from './help.js';
@@ -997,10 +997,7 @@ async function runGepaOptimization() {
             PYTHONPATH: getGepaPythonPathEntries(process.env.PYTHONPATH).join(delimiter),
             PYTHONUNBUFFERED: process.env.PYTHONUNBUFFERED || '1',
         }));
-        const instructionSetName = dispatch.environment.ORIZU_INSTRUCTION_SET_NAME;
-        const modelConfigIdentity = dispatch.environment.ORIZU_MODEL_CONFIG_IDENTITY;
-        const instructionSetProfileVersionId = instructionSetName && modelConfigIdentity
-            ? await resolveGepaInstructionSetProfileVersion(instructionSetName, modelConfigIdentity, project) : undefined;
+        const instructionSetProfileVersionId = await resolveGepaSeedFromEnvironment(dispatch.environment, project, 'production');
         if (instructionSetProfileVersionId)
             dispatch.environment.ORIZU_INSTRUCTION_SET_PROFILE_VERSION_ID = instructionSetProfileVersionId;
         selectedEngine = dispatch.engine;

package/dist/instruction-set-gepa-launch.d.ts

@@ -1,3 +1,22 @@
-/** Resolve the requested Profile's Production tuple for optimization. */
-export declare function resolveGepaInstructionSetProfileVersion(instructionSetName: string, modelConfigIdentity: string, project: string): Promise<string>;
+/** The Seed a run-gepa launch names: set reference, profile, and optional version. */
+export interface GepaSeedSelector {
+    instructionSetName: string;
+    modelConfigIdentity?: string;
+    versionNumber?: number;
+}
+/**
+ * Combine `--instruction-set`, `--model-config` and `--profile-version` into
+ * one Seed. A value with `/` or `@` is a specifier (`set/profile@vN`); any
+ * other value is a set slug or exact name, passed through unchanged. Values
+ * named twice must agree, the same rule `sync` applies to `--version`.
+ */
+export declare function gepaSeedSelector(instructionSetArg: string, modelConfigFlag: string | undefined, versionFlag: string | undefined): GepaSeedSelector;
+/**
+ * Resolve the Seed that dispatch normalised into the connector environment.
+ * Returns undefined when no instruction set was selected. When no version is
+ * named, `unversioned: 'production'` resolves the profile's Production here
+ * (local runs); `unversioned: 'server'` leaves it to the hosted launch route,
+ * which resolves Production itself in the same call that queues the run.
+ */
+export declare function resolveGepaSeedFromEnvironment(environment: NodeJS.ProcessEnv, project: string, unversioned: 'production' | 'server'): Promise<string | undefined>;
 //# sourceMappingURL=instruction-set-gepa-launch.d.ts.map

package/dist/instruction-set-gepa-launch.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"instruction-set-gepa-launch.d.ts","sourceRoot":"","sources":["../src/instruction-set-gepa-launch.ts"],"names":[],"mappings":"AAYA,yEAAyE;AACzE,wBAAsB,uCAAuC,CAC3D,kBAAkB,EAAE,MAAM,EAC1B,mBAAmB,EAAE,MAAM,EAC3B,OAAO,EAAE,MAAM,GACd,OAAO,CAAC,MAAM,CAAC,CAUjB"}
+{"version":3,"file":"instruction-set-gepa-launch.d.ts","sourceRoot":"","sources":["../src/instruction-set-gepa-launch.ts"],"names":[],"mappings":"AAsFA,sFAAsF;AACtF,MAAM,WAAW,gBAAgB;IAC/B,kBAAkB,EAAE,MAAM,CAAA;IAC1B,mBAAmB,CAAC,EAAE,MAAM,CAAA;IAC5B,aAAa,CAAC,EAAE,MAAM,CAAA;CACvB;AAWD;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAC9B,iBAAiB,EAAE,MAAM,EACzB,eAAe,EAAE,MAAM,GAAG,SAAS,EACnC,WAAW,EAAE,MAAM,GAAG,SAAS,GAC9B,gBAAgB,CAiBlB;AAqCD;;;;;;GAMG;AACH,wBAAsB,8BAA8B,CAClD,WAAW,EAAE,MAAM,CAAC,UAAU,EAC9B,OAAO,EAAE,MAAM,EACf,WAAW,EAAE,YAAY,GAAG,QAAQ,GACnC,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAQ7B"}

package/dist/instruction-set-gepa-launch.js

@@ -1,17 +1,137 @@
 import { authedFetch } from './http.js';
+import { MAX_VERSION_NUMBER, parseSpecifier } from './instruction-set-lock/index.js';
 import { parseJsonResponse } from './json-response.js';
-/** Resolve the requested Profile's Production tuple for optimization. */
-export async function resolveGepaInstructionSetProfileVersion(instructionSetName, modelConfigIdentity, project) {
+/**
+ * A version runs and promotes only when its component keys equal the set's
+ * current shape exactly: promotion refuses any other key set
+ * (instruction_set_candidate_shape_mismatch). Returns null when they match.
+ */
+function shapeDifference(shape, version) {
+    const keys = new Set(version.componentKeys ?? []);
+    const shapeKeys = new Set(shape);
+    const missing = shape.filter(key => !keys.has(key));
+    const extra = [...keys].filter(key => !shapeKeys.has(key)).sort();
+    return missing.length === 0 && extra.length === 0 ? null : { missing, extra };
+}
+function describeDifference({ missing, extra }) {
+    const quote = (keys) => keys.map(key => `"${key}"`).join(', ');
+    return [
+        ...(missing.length > 0 ? [`missing ${quote(missing)}`] : []),
+        ...(extra.length > 0 ? [`extra ${quote(extra)}`] : []),
+    ].join('; ');
+}
+function newestMatchingVersion(shape, versions) {
+    return versions
+        .filter(candidate => Array.isArray(candidate.componentKeys) && shapeDifference(shape, candidate) === null)
+        .reduce((max, candidate) => {
+        const number = candidate.versionNumber ?? 0;
+        return max === null || number > max ? number : max;
+    }, null);
+}
+/**
+ * ORI-2128: a version made before a shape change can lack a component of the
+ * set's current shape, or carry one the set has since removed. The runner or
+ * promotion would refuse it later; refuse it here, before a run is spawned or
+ * queued. A server that predates per-version component keys sends none; the
+ * runner remains the backstop.
+ */
+function requireMatchingSeed(shape, versions, version, modelConfigIdentity, role) {
+    if (!Array.isArray(shape) || !Array.isArray(version.componentKeys))
+        return;
+    const difference = shapeDifference(shape, version);
+    if (difference === null)
+        return;
+    const newest = newestMatchingVersion(shape, versions);
+    const detail = describeDifference(difference);
+    if (role === 'production') {
+        const newestNote = newest === null ? 'no version of this profile matches it yet' : `newest matching: v${newest}`;
+        throw new Error(`instruction_set_profile_production_incomplete: ${modelConfigIdentity} production v${version.versionNumber} does not match the current shape (${detail}); promote a version that matches it, or name one with @vN (${newestNote})`);
+    }
+    const advice = newest === null
+        ? 'no version of this profile matches the current shape yet'
+        : `pick v${newest}`;
+    throw new Error(`instruction_set_profile_version_incomplete: ${modelConfigIdentity} v${version.versionNumber} does not match the current shape (${detail}); ${advice}`);
+}
+function profileVersionNumber(value) {
+    const match = /^v?([1-9][0-9]*)$/u.exec(value);
+    const versionNumber = match ? Number(match[1]) : Number.NaN;
+    if (!Number.isSafeInteger(versionNumber) || versionNumber > MAX_VERSION_NUMBER) {
+        throw new Error(`--profile-version must be a version number such as 3 or v3; received ${value}`);
+    }
+    return versionNumber;
+}
+/**
+ * Combine `--instruction-set`, `--model-config` and `--profile-version` into
+ * one Seed. A value with `/` or `@` is a specifier (`set/profile@vN`); any
+ * other value is a set slug or exact name, passed through unchanged. Values
+ * named twice must agree, the same rule `sync` applies to `--version`.
+ */
+export function gepaSeedSelector(instructionSetArg, modelConfigFlag, versionFlag) {
+    const flagVersion = versionFlag === undefined ? undefined : profileVersionNumber(versionFlag);
+    if (!instructionSetArg.includes('/') && !instructionSetArg.includes('@')) {
+        return { instructionSetName: instructionSetArg, modelConfigIdentity: modelConfigFlag, versionNumber: flagVersion };
+    }
+    const parsed = parseSpecifier(instructionSetArg);
+    if (parsed.profile !== undefined && modelConfigFlag !== undefined && parsed.profile !== modelConfigFlag) {
+        throw new Error(`instruction_set_seed_conflict: specifier names profile ${parsed.profile} but --model-config is ${modelConfigFlag}`);
+    }
+    if (parsed.versionNumber !== undefined && flagVersion !== undefined && parsed.versionNumber !== flagVersion) {
+        throw new Error(`instruction_set_seed_conflict: specifier names v${parsed.versionNumber} but --profile-version is v${flagVersion}`);
+    }
+    return {
+        instructionSetName: parsed.set,
+        modelConfigIdentity: parsed.profile ?? modelConfigFlag,
+        versionNumber: parsed.versionNumber ?? flagVersion,
+    };
+}
+/**
+ * Resolve the Seed's profile version id: the named version when one is
+ * given, otherwise the requested Profile's Production.
+ */
+async function resolveGepaInstructionSetProfileVersion(instructionSetName, modelConfigIdentity, project, versionNumber) {
     const response = await authedFetch(`/api/cli/instruction-sets/${encodeURIComponent(instructionSetName)}?project=${encodeURIComponent(project)}`);
     if (!response.ok)
         throw new Error(`Instruction set resolution failed: ${await response.text()}`);
     const payload = await parseJsonResponse(response, 'Instruction set resolution');
     const instructionSet = payload.instructionSet;
     const profile = instructionSet?.profiles?.find(candidate => candidate.modelConfigIdentity === modelConfigIdentity);
-    if (!profile)
+    // An archived model config's profile is not resolvable: the same refusal
+    // the server's resolve_instruction_set gives hosted runs.
+    if (!profile || profile.modelConfigArchivedAt)
         throw new Error(`instruction_set_profile_not_found: ${modelConfigIdentity}`);
+    const versions = profile.versions ?? [];
+    if (versionNumber !== undefined) {
+        const version = versions.find(candidate => candidate.versionNumber === versionNumber);
+        if (version?.profileVersionId) {
+            requireMatchingSeed(instructionSet?.shape, versions, version, modelConfigIdentity, 'named');
+            return version.profileVersionId;
+        }
+        const newest = versions.reduce((max, candidate) => Math.max(max, candidate.versionNumber ?? 0), 0);
+        throw new Error(`instruction_set_profile_version_not_found: ${modelConfigIdentity} has no v${versionNumber}; ${newest > 0 ? `newest is v${newest}` : 'it has no versions'}`);
+    }
     const profileVersionId = profile.production?.profileVersionId;
     if (!profileVersionId)
         throw new Error(`instruction_set_profile_not_promoted: ${modelConfigIdentity}`);
+    const production = versions.find(candidate => candidate.profileVersionId === profileVersionId);
+    if (production)
+        requireMatchingSeed(instructionSet?.shape, versions, production, modelConfigIdentity, 'production');
     return profileVersionId;
 }
+/**
+ * Resolve the Seed that dispatch normalised into the connector environment.
+ * Returns undefined when no instruction set was selected. When no version is
+ * named, `unversioned: 'production'` resolves the profile's Production here
+ * (local runs); `unversioned: 'server'` leaves it to the hosted launch route,
+ * which resolves Production itself in the same call that queues the run.
+ */
+export async function resolveGepaSeedFromEnvironment(environment, project, unversioned) {
+    const instructionSetName = environment.ORIZU_INSTRUCTION_SET_NAME;
+    const modelConfigIdentity = environment.ORIZU_MODEL_CONFIG_IDENTITY;
+    if (!instructionSetName || !modelConfigIdentity)
+        return undefined;
+    const rawVersion = environment.ORIZU_INSTRUCTION_SET_PROFILE_VERSION_NUMBER;
+    const versionNumber = rawVersion === undefined ? undefined : profileVersionNumber(rawVersion);
+    if (versionNumber === undefined && unversioned === 'server')
+        return undefined;
+    return resolveGepaInstructionSetProfileVersion(instructionSetName, modelConfigIdentity, project, versionNumber);
+}

package/dist/markdown-report-input.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"markdown-report-input.d.ts","sourceRoot":"","sources":["../src/markdown-report-input.ts"],"names":[],"mappings":"AAKA,eAAO,MAAM,yBAAyB,QAAkB,CAAA;AAsCxD,MAAM,WAAW,mBAAmB;IAClC,QAAQ,EAAE,MAAM,CAAA;IAChB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;CAC1B;AAED,wBAAgB,uBAAuB,CACrC,IAAI,EAAE,SAAS,MAAM,EAAE,EACvB,WAAW,EAAE,cAAc,GAAG,QAAQ,GAAG,MAAM,GAC9C,mBAAmB,GAAG,IAAI,CA8C5B"}
+{"version":3,"file":"markdown-report-input.d.ts","sourceRoot":"","sources":["../src/markdown-report-input.ts"],"names":[],"mappings":"AAKA,eAAO,MAAM,yBAAyB,QAAkB,CAAA;AAsCxD,MAAM,WAAW,mBAAmB;IAClC,QAAQ,EAAE,MAAM,CAAA;IAChB,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;CAC1B;AAED,wBAAgB,uBAAuB,CACrC,IAAI,EAAE,SAAS,MAAM,EAAE,EACvB,WAAW,EAAE,cAAc,GAAG,QAAQ,GAAG,MAAM,GAC9C,mBAAmB,GAAG,IAAI,CAgD5B"}

package/dist/markdown-report-input.js

@@ -72,7 +72,7 @@ export function readMarkdownReportInput(args, reportLabel) {
         sourceName = 'inline';
     }
     if (!hasCanonicalReportMarkdownContent(markdown)) {
-        throw new Error(`${reportLabel} report markdown must not be blank`);
+        throw new Error(`${reportLabel} report has no visible content: it is empty or contains only whitespace`);
     }
     if (Buffer.byteLength(markdown, 'utf8') > MARKDOWN_REPORT_MAX_BYTES) {
         throw new Error(`${reportLabel} report exceeds ${MARKDOWN_REPORT_MAX_BYTES} bytes`);

package/dist/optimizations-promote-cli.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"optimizations-promote-cli.d.ts","sourceRoot":"","sources":["../src/optimizations-promote-cli.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAA;AAEpD,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,OAAO,CAAA;IACb,MAAM,EAAE,WAAW,CAAA;IACnB,KAAK,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAA;IAC7B,QAAQ,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAA;IAChC,kBAAkB,EAAE,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,KAAK,OAAO,CAAC,MAAM,CAAC,CAAA;IAClE,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,WAAW,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAA;CACjE;AA0DD,wBAAsB,0BAA0B,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,sBAAsB,GAAG,OAAO,CAAC,IAAI,CAAC,CAiD1G"}
+{"version":3,"file":"optimizations-promote-cli.d.ts","sourceRoot":"","sources":["../src/optimizations-promote-cli.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAA;AAGpD,MAAM,WAAW,sBAAsB;IACrC,IAAI,EAAE,OAAO,CAAA;IACb,MAAM,EAAE,WAAW,CAAA;IACnB,KAAK,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAA;IAC7B,QAAQ,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAA;IAChC,kBAAkB,EAAE,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,KAAK,OAAO,CAAC,MAAM,CAAC,CAAA;IAClE,OAAO,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,WAAW,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAA;CACjE;AAqED,wBAAsB,0BAA0B,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,sBAAsB,GAAG,OAAO,CAAC,IAAI,CAAC,CAuD1G"}

package/dist/optimizations-promote-cli.js

@@ -54,6 +54,17 @@ function productionPromotionReplay(runId, candidateId, project, origin) {
             : '';
     return `Promote this profile with: orizu${originArguments} optimizations promote ${shellArgument(runId)} --candidate ${shellArgument(candidateId)} --label production --project ${shellArgument(project)}`;
 }
+/**
+ * ORI-2128: a candidate grown from a Seed older than Production does not
+ * contain the changes made since that Seed. Warn; never refuse (ORI-2132).
+ */
+function staleSeedWarningFor(data) {
+    const seed = data.runSeedVersionNumber;
+    const production = data.productionVersionNumber;
+    if (typeof seed !== 'number' || typeof production !== 'number' || seed >= production)
+        return null;
+    return `Warning: this run started from v${seed}; production is v${production}. Changes made since v${seed} are not in this candidate.`;
+}
 export async function promoteOptimizationCommand(args, io) {
     const runId = args.find(arg => !arg.startsWith('--') && arg !== option(args, '--candidate') && arg !== option(args, '--label') && arg !== option(args, '--project'));
     const candidateId = option(args, '--candidate');
@@ -72,15 +83,21 @@ export async function promoteOptimizationCommand(args, io) {
     const replay = isProfilePromotion && data.appliedLabel !== 'production'
         ? productionPromotionReplay(runId, candidateId, project, io.origin)
         : null;
+    const staleSeedWarning = isProfilePromotion ? staleSeedWarningFor(data) : null;
     if (io.json) {
         io.print(JSON.stringify(isProfilePromotion
             ? {
                 profileVersionId: data.profileVersionId,
                 versionNumber: data.versionNumber,
                 appliedLabel: data.appliedLabel,
+                // JSON.stringify omits these when an older server did not send them.
+                runSeedVersionNumber: data.runSeedVersionNumber,
+                productionVersionNumber: data.productionVersionNumber,
                 components: data.components,
             }
             : { promptVersionId: data.promptVersionId }));
+        if (staleSeedWarning)
+            io.printErr(staleSeedWarning);
         if (isProfilePromotion && data.appliedLabel === undefined) {
             io.printErr(APPLIED_LABEL_VERSION_SKEW_NOTE);
             io.printErr(replay);
@@ -88,6 +105,8 @@ export async function promoteOptimizationCommand(args, io) {
         return;
     }
     if (isProfilePromotion) {
+        if (staleSeedWarning)
+            io.printErr(staleSeedWarning);
         io.print(`Promoted profile version ${sanitizeTerminalText(data.profileVersionId)}`);
         if (data.appliedLabel === undefined) {
             io.printErr(APPLIED_LABEL_VERSION_SKEW_NOTE);

package/dist/preview-runtime.d.ts

@@ -47,6 +47,13 @@ interface PreviewPage {
     on?: (event: string, listener: () => void) => unknown;
     off?: (event: string, listener: () => void) => unknown;
 }
+/**
+ * Removes line and block comments, walking left to right so a `//` or `/*`
+ * inside a quoted string or template literal is left alone. A block comment
+ * keeps its newlines, so line numbers in later messages stay true.
+ * Regex literals are not tracked; a quote inside one can hide a comment.
+ */
+export declare function stripComments(code: string): string;
 export declare function validatePreviewInputs(options: AppPreviewOptions): Issue[];
 export declare function runLocalAppPreview(options: AppPreviewOptions): Promise<AppPreviewResult>;
 /**

package/dist/preview-runtime.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"preview-runtime.d.ts","sourceRoot":"","sources":["../src/preview-runtime.ts"],"names":[],"mappings":"AAeA,eAAO,MAAM,gCAAgC,IAAI,CAAA;AAGjD,eAAO,MAAM,uBAAuB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CA+C5D,CAAA;AAGD,MAAM,WAAW,iBAAiB;IAChC,QAAQ,EAAE,MAAM,CAAA;IAChB,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IACpC,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IACrC,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAClC,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,MAAM,CAAC,EAAE,OAAO,CAAA;IAChB,QAAQ,CAAC,EAAE,OAAO,CAAA;IAClB,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,aAAa,CAAC,EAAE,OAAO,CAAA;IACvB,UAAU,CAAC,EAAE,iBAAiB,CAAA;IAC9B,sBAAsB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CACvC;AAED,MAAM,WAAW,gBAAgB;IAC/B,GAAG,EAAE,MAAM,CAAA;IACX,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,QAAQ,EAAE,MAAM,EAAE,CAAA;CACnB;AAED,UAAU,KAAK;IACb,KAAK,EAAE,OAAO,GAAG,MAAM,CAAA;IACvB,OAAO,EAAE,MAAM,CAAA;CAChB;AAED,UAAU,iBAAiB;IACzB,QAAQ,EAAE;QACR,MAAM,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,OAAO,CAAC,cAAc,CAAC,CAAA;KACtE,CAAA;CACF;AAED,UAAU,cAAc;IACtB,OAAO,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,OAAO,CAAC,WAAW,CAAC,CAAA;IACnE,KAAK,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAA;IAC1B,IAAI,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,IAAI,KAAK,OAAO,CAAA;IACvD,EAAE,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,IAAI,KAAK,OAAO,CAAA;IACrD,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,IAAI,KAAK,OAAO,CAAA;CACvD;AAED,UAAU,WAAW;IACnB,IAAI,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,OAAO,CAAC,OAAO,CAAC,CAAA;IACzE,eAAe,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,OAAO,CAAC,OAAO,CAAC,CAAA;IACzF,UAAU,EAAE,CAAC,OAAO,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,OAAO,CAAA;KAAE,KAAK,OAAO,CAAC,OAAO,CAAC,CAAA;IAC9E,cAAc,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAA;IACrD,IAAI,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,IAAI,KAAK,OAAO,CAAA;IACvD,EAAE,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,IAAI,KAAK,OAAO,CAAA;IACrD,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,IAAI,KAAK,OAAO,CAAA;CACvD;AAQD,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,iBAAiB,GAAG,KAAK,EAAE,CASzE;AAED,wBAAsB,kBAAkB,CAAC,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CA0G9F;AAwSD;;;;;;GAMG;AACH,wBAAgB,6BAA6B,CAAC,cAAc,EAAE,MAAM,EAAE,GAAG,MAAM,EAAE,CAIhF;AAuED,wBAAsB,eAAe,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,EAAE,OAAO,EAAE,MAAM,mBA6B7E;AAyWD,wBAAgB,6BAA6B,IAAI,MAAM,EAAE,CAExD"}
+{"version":3,"file":"preview-runtime.d.ts","sourceRoot":"","sources":["../src/preview-runtime.ts"],"names":[],"mappings":"AAeA,eAAO,MAAM,gCAAgC,IAAI,CAAA;AAGjD,eAAO,MAAM,uBAAuB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,CA+C5D,CAAA;AAGD,MAAM,WAAW,iBAAiB;IAChC,QAAQ,EAAE,MAAM,CAAA;IAChB,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IACpC,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IACrC,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAClC,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,MAAM,CAAC,EAAE,OAAO,CAAA;IAChB,QAAQ,CAAC,EAAE,OAAO,CAAA;IAClB,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,aAAa,CAAC,EAAE,OAAO,CAAA;IACvB,UAAU,CAAC,EAAE,iBAAiB,CAAA;IAC9B,sBAAsB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CACvC;AAED,MAAM,WAAW,gBAAgB;IAC/B,GAAG,EAAE,MAAM,CAAA;IACX,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,QAAQ,EAAE,MAAM,EAAE,CAAA;CACnB;AAED,UAAU,KAAK;IACb,KAAK,EAAE,OAAO,GAAG,MAAM,CAAA;IACvB,OAAO,EAAE,MAAM,CAAA;CAChB;AAED,UAAU,iBAAiB;IACzB,QAAQ,EAAE;QACR,MAAM,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,OAAO,CAAC,cAAc,CAAC,CAAA;KACtE,CAAA;CACF;AAED,UAAU,cAAc;IACtB,OAAO,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,OAAO,CAAC,WAAW,CAAC,CAAA;IACnE,KAAK,EAAE,MAAM,OAAO,CAAC,IAAI,CAAC,CAAA;IAC1B,IAAI,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,IAAI,KAAK,OAAO,CAAA;IACvD,EAAE,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,IAAI,KAAK,OAAO,CAAA;IACrD,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,IAAI,KAAK,OAAO,CAAA;CACvD;AAED,UAAU,WAAW;IACnB,IAAI,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,OAAO,CAAC,OAAO,CAAC,CAAA;IACzE,eAAe,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,OAAO,CAAC,OAAO,CAAC,CAAA;IACzF,UAAU,EAAE,CAAC,OAAO,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,OAAO,CAAA;KAAE,KAAK,OAAO,CAAC,OAAO,CAAC,CAAA;IAC9E,cAAc,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAA;IACrD,IAAI,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,IAAI,KAAK,OAAO,CAAA;IACvD,EAAE,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,IAAI,KAAK,OAAO,CAAA;IACrD,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,IAAI,KAAK,OAAO,CAAA;CACvD;AAQD;;;;;GAKG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAkClD;AAED,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,iBAAiB,GAAG,KAAK,EAAE,CASzE;AAED,wBAAsB,kBAAkB,CAAC,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CA0G9F;AAqSD;;;;;;GAMG;AACH,wBAAgB,6BAA6B,CAAC,cAAc,EAAE,MAAM,EAAE,GAAG,MAAM,EAAE,CAIhF;AAuED,wBAAsB,eAAe,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,EAAE,OAAO,EAAE,MAAM,mBA6B7E;AAyWD,wBAAgB,6BAA6B,IAAI,MAAM,EAAE,CAExD"}

package/dist/preview-runtime.js

@@ -57,9 +57,56 @@ function isNodeError(error) {
     return error instanceof Error;
 }
 const SUPPORTED_SCHEMA_KEYS = new Set(['type', 'required', 'properties', 'items', 'enum']);
+/**
+ * Removes line and block comments, walking left to right so a `//` or `/*`
+ * inside a quoted string or template literal is left alone. A block comment
+ * keeps its newlines, so line numbers in later messages stay true.
+ * Regex literals are not tracked; a quote inside one can hide a comment.
+ */
+export function stripComments(code) {
+    let out = '';
+    let quote = '';
+    let i = 0;
+    while (i < code.length) {
+        const char = code[i];
+        const next = code[i + 1];
+        if (quote) {
+            out += char;
+            if (char === '\\' && next !== undefined) {
+                out += next;
+                i += 2;
+                continue;
+            }
+            // Single and double quoted strings end at the line's end; templates may span lines.
+            if (char === quote || (char === '\n' && quote !== '`'))
+                quote = '';
+            i++;
+        }
+        else if (char === '"' || char === "'" || char === '`') {
+            quote = char;
+            out += char;
+            i++;
+        }
+        else if (char === '/' && next === '/' && code[i - 1] !== ':') {
+            while (i < code.length && code[i] !== '\n')
+                i++;
+        }
+        else if (char === '/' && next === '*') {
+            const close = code.indexOf('*/', i + 2);
+            const end = close === -1 ? code.length : close + 2;
+            out += code.slice(i, end).replace(/[^\n]/g, ' ');
+            i = end;
+        }
+        else {
+            out += char;
+            i++;
+        }
+    }
+    return out;
+}
 export function validatePreviewInputs(options) {
     const issues = [];
-    const source = readFileSync(options.filePath, 'utf8');
+    const source = stripComments(readFileSync(options.filePath, 'utf8'));
     validateImports(source, issues);
     validateDefaultExport(source, options.componentName, issues);
     validateSchema(options.inputSchema, 'input schema', issues);
@@ -296,10 +343,7 @@ function resolveDefaultExport(source) {
     return null;
 }
 function unwrapDefaultExportExpression(expression) {
-    const trimmed = expression
-        .replace(/\/\*[\s\S]*?\*\/\s*$/, '')
-        .replace(/\/\/.*$/, '')
-        .trim();
+    const trimmed = expression.trim();
     if (/^[A-Za-z_$][A-Za-z0-9_$]*$/.test(trimmed)) {
         return trimmed;
     }

package/dist/provider-refusals.js

@@ -13,11 +13,11 @@ export const RESERVED_CREDENTIAL_ENVS = new Set([
     'GEMINI_API_KEY', // Historical SQL reservation; removing local forwarding does not release this name.
     'GOOGLE_API_KEY', // Historical SQL reservation for the Google alias, independent of run providers.
     'ALI_1505_ENDPOINT_OVERRIDE_API_KEY', // hosted-optimization.ts: runner-injected secret.
-    'BRAINTRUST_API_KEY', // app/api/chat/route.ts: workbench connector.
+    'BRAINTRUST_API_KEY', // lib/hosted-connectors.ts: workbench connector.
     'CF_API_KEY', // test/with-cloudflare-env.test.ts: Cloudflare spelling.
     'CLOUDFLARE_API_KEY', // test/with-cloudflare-env.test.ts: Cloudflare spelling.
     'DAYTONA_API_KEY', // scripts/daytona-workbench-slice.mjs: hosted sandbox.
-    'INTERNAL_API_KEY', // app/api/compile/route.ts: internal compilation.
+    'INTERNAL_API_KEY', // Historical SQL reservation; the internal compile route is gone (ORI-2305).
     'LINEAR_API_KEY', // lib/services/linear-feedback.ts: issue service.
     'RESEND_API_KEY', // lib/services/email.ts: email delivery.
 ]);

package/dist/report-markdown-blankness.d.ts

@@ -1,2 +1,8 @@
+/**
+ * Matches any content character. `\uXXXX` names each code point, so
+ * JavaScript (with the `u` flag) and PostgreSQL's `~` read it identically and
+ * no locale is involved.
+ */
+export declare const REPORT_MARKDOWN_CONTENT_PATTERN: string;
 export declare function hasCanonicalReportMarkdownContent(markdown: string): boolean;
 //# sourceMappingURL=report-markdown-blankness.d.ts.map

package/dist/report-markdown-blankness.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"report-markdown-blankness.d.ts","sourceRoot":"","sources":["../src/report-markdown-blankness.ts"],"names":[],"mappings":"AAGA,wBAAgB,iCAAiC,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAE3E"}
+{"version":3,"file":"report-markdown-blankness.d.ts","sourceRoot":"","sources":["../src/report-markdown-blankness.ts"],"names":[],"mappings":"AA+CA;;;;GAIG;AACH,eAAO,MAAM,+BAA+B,QAE/B,CAAA;AAIb,wBAAgB,iCAAiC,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAE3E"}

package/dist/report-markdown-blankness.js

@@ -1,6 +1,49 @@
-// JavaScript's \s is broader than the database locale's POSIX [:space:]
-// predicate. These four code points are content in the measured PostgreSQL
-// boundary, so retain them explicitly when validating CLI report input.
+// ADR-036: the one definition of an empty report, shared by the CLI, the web
+// app's readers and upload route, and the timeline's Data API filter. The
+// database writer and comment trigger use private.report_markdown_has_content,
+// whose pattern is REPORT_MARKDOWN_CONTENT_PATTERN verbatim (a database test
+// pins that). Before ADR-036 these sites copied PostgreSQL 15's locale answer
+// while production ran 17, so the CLI accepted reports the writer rejected.
+/**
+ * The characters a report may consist of and still be empty: Unicode's
+ * White_Space property plus the four C0 information separators. Everything
+ * else, including invisible format characters such as U+FEFF, is content.
+ */
+const REPORT_BLANK_CODE_POINTS = [
+    // Tab, line feed, vertical tab, form feed, carriage return.
+    { first: 0x0009, last: 0x000d },
+    // File, group, record and unit separators: not Unicode whitespace, but
+    // invisible, and blank in production since it has run PostgreSQL 17.
+    { first: 0x001c, last: 0x001f },
+    // Space.
+    { first: 0x0020, last: 0x0020 },
+    // Next line.
+    { first: 0x0085, last: 0x0085 },
+    // No-break space.
+    { first: 0x00a0, last: 0x00a0 },
+    // Ogham space mark.
+    { first: 0x1680, last: 0x1680 },
+    // En quad through hair space, including figure space U+2007.
+    { first: 0x2000, last: 0x200a },
+    // Line separator and paragraph separator.
+    { first: 0x2028, last: 0x2029 },
+    // Narrow no-break space.
+    { first: 0x202f, last: 0x202f },
+    // Medium mathematical space.
+    { first: 0x205f, last: 0x205f },
+    // Ideographic space.
+    { first: 0x3000, last: 0x3000 },
+];
+function escapeCodePoint(codePoint) {
+    return `\\u${codePoint.toString(16).padStart(4, '0')}`;
+}
+/**
+ * Matches any content character. `\uXXXX` names each code point, so
+ * JavaScript (with the `u` flag) and PostgreSQL's `~` read it identically and
+ * no locale is involved.
+ */
+export const REPORT_MARKDOWN_CONTENT_PATTERN = `[^${REPORT_BLANK_CODE_POINTS.map(({ first, last }) => first === last ? escapeCodePoint(first) : `${escapeCodePoint(first)}-${escapeCodePoint(last)}`).join('')}]`;
+const REPORT_MARKDOWN_CONTENT = new RegExp(REPORT_MARKDOWN_CONTENT_PATTERN, 'u');
 export function hasCanonicalReportMarkdownContent(markdown) {
-    return /(?:[^\s]|[\u00a0\u2007\u202f\ufeff])/u.test(markdown);
+    return REPORT_MARKDOWN_CONTENT.test(markdown);
 }

package/dist/seed-against-production.d.ts

@@ -0,0 +1,11 @@
+/**
+ * ORI-2128: what `optimizations promote` needs to warn about a stale seed.
+ * The run's seed version number, and its profile's production version number
+ * as it stood before this promotion (null when the profile had none).
+ * Shared by the promote handler, both promote routes, and the CLI.
+ */
+export interface SeedAgainstProduction {
+    runSeedVersionNumber: number;
+    productionVersionNumber: number | null;
+}
+//# sourceMappingURL=seed-against-production.d.ts.map

package/dist/seed-against-production.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"seed-against-production.d.ts","sourceRoot":"","sources":["../src/seed-against-production.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,MAAM,WAAW,qBAAqB;IACpC,oBAAoB,EAAE,MAAM,CAAA;IAC5B,uBAAuB,EAAE,MAAM,GAAG,IAAI,CAAA;CACvC"}

package/dist/seed-against-production.js

@@ -0,0 +1 @@
+export {};

package/dist/setup-and-skills-commands.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"setup-and-skills-commands.d.ts","sourceRoot":"","sources":["../src/setup-and-skills-commands.ts"],"names":[],"mappings":"AA0EA,OAAO,KAAK,EAAE,IAAI,EAAE,oBAAoB,EAAW,MAAM,wBAAwB,CAAA;AAMjF,iBAAe,QAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAY/E;AAkcD,iBAAe,mBAAmB,kBAuBjC;AAUD,iBAAS,mBAAmB,SA+B3B;AAED,iBAAe,mBAAmB,kBAuDjC;AAED,iBAAS,iBAAiB,SAgBzB;AAMD,iBAAe,gBAAgB,CAC7B,WAAW,EAAE,MAAM,GAAG,IAAI,EAC1B,cAAc,EAAE,MAAM,GAAG,IAAI,EAC7B,OAAO,EAAE,OAAO,EAChB,MAAM,EAAE,OAAO,EACf,iBAAiB,EAAE,MAAM,GAAG,IAAI,EAChC,OAAO,GAAE,oBAAkC,GAC1C,OAAO,CAAC,IAAI,CAAC,CAiDf;AAmHD,iBAAe,YAAY,kBAyW1B;AAED,iBAAS,kBAAkB,SAS1B;AAED,OAAO,EACL,kBAAkB,EAClB,YAAY,EACZ,mBAAmB,EACnB,iBAAiB,EACjB,mBAAmB,EACnB,mBAAmB,EACnB,gBAAgB,EAChB,QAAQ,GACT,CAAA"}
+{"version":3,"file":"setup-and-skills-commands.d.ts","sourceRoot":"","sources":["../src/setup-and-skills-commands.ts"],"names":[],"mappings":"AA+EA,OAAO,KAAK,EAAE,IAAI,EAAE,oBAAoB,EAAW,MAAM,wBAAwB,CAAA;AAMjF,iBAAe,QAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAY/E;AA0cD,iBAAe,mBAAmB,kBA+BjC;AAwFD,iBAAS,mBAAmB,SAmD3B;AAED,iBAAe,mBAAmB,kBA0DjC;AAED,iBAAS,iBAAiB,SAgBzB;AAMD,iBAAe,gBAAgB,CAC7B,WAAW,EAAE,MAAM,GAAG,IAAI,EAC1B,cAAc,EAAE,MAAM,GAAG,IAAI,EAC7B,OAAO,EAAE,OAAO,EAChB,MAAM,EAAE,OAAO,EACf,iBAAiB,EAAE,MAAM,GAAG,IAAI,EAChC,OAAO,GAAE,oBAAkC,GAC1C,OAAO,CAAC,IAAI,CAAC,CAiDf;AAqID,iBAAe,YAAY,kBAqX1B;AAED,iBAAS,kBAAkB,SAS1B;AAED,OAAO,EACL,kBAAkB,EAClB,YAAY,EACZ,mBAAmB,EACnB,iBAAiB,EACjB,mBAAmB,EACnB,mBAAmB,EACnB,gBAAgB,EAChB,QAAQ,GACT,CAAA"}