revyse 0.1.0 → 0.2.1

package/dist/headless.js

@@ -3116,9 +3116,9 @@ Expecting one of '${allowedValues.join("', '")}'`);
    * @param {string} [path]
    * @return {(string|null|Command)}
    */
-  executableDir(path29) {
-    if (path29 === void 0) return this._executableDir;
-    this._executableDir = path29;
+  executableDir(path31) {
+    if (path31 === void 0) return this._executableDir;
+    this._executableDir = path31;
     return this;
   }
   /**
@@ -3374,8 +3374,8 @@ function useColor() {
 var program = new Command();
 
 // src/commands/change.ts
-import { readFileSync as readFileSync12 } from "fs";
-import path28 from "path";
+import { readFileSync as readFileSync13 } from "fs";
+import path30 from "path";
 
 // ../agent-core/src/path-policy.ts
 import { realpathSync } from "fs";
@@ -4292,10 +4292,10 @@ function mergeDefs(...defs) {
 function cloneDef(schema) {
   return mergeDefs(schema._zod.def);
 }
-function getElementAtPath(obj, path29) {
-  if (!path29)
+function getElementAtPath(obj, path31) {
+  if (!path31)
     return obj;
-  return path29.reduce((acc, key) => acc?.[key], obj);
+  return path31.reduce((acc, key) => acc?.[key], obj);
 }
 function promiseAllObject(promisesObj) {
   const keys = Object.keys(promisesObj);
@@ -4635,11 +4635,11 @@ function explicitlyAborted(x, startIndex = 0) {
   }
   return false;
 }
-function prefixIssues(path29, issues) {
+function prefixIssues(path31, issues) {
   return issues.map((iss) => {
     var _a3;
     (_a3 = iss).path ?? (_a3.path = []);
-    iss.path.unshift(path29);
+    iss.path.unshift(path31);
     return iss;
   });
 }
@@ -5101,16 +5101,16 @@ function flattenError(error62, mapper = (issue2) => issue2.message) {
 }
 function formatError(error62, mapper = (issue2) => issue2.message) {
   const fieldErrors = { _errors: [] };
-  const processError = (error63, path29 = []) => {
+  const processError = (error63, path31 = []) => {
     for (const issue2 of error63.issues) {
       if (issue2.code === "invalid_union" && issue2.errors.length) {
-        issue2.errors.map((issues) => processError({ issues }, [...path29, ...issue2.path]));
+        issue2.errors.map((issues) => processError({ issues }, [...path31, ...issue2.path]));
       } else if (issue2.code === "invalid_key") {
-        processError({ issues: issue2.issues }, [...path29, ...issue2.path]);
+        processError({ issues: issue2.issues }, [...path31, ...issue2.path]);
       } else if (issue2.code === "invalid_element") {
-        processError({ issues: issue2.issues }, [...path29, ...issue2.path]);
+        processError({ issues: issue2.issues }, [...path31, ...issue2.path]);
       } else {
-        const fullpath = [...path29, ...issue2.path];
+        const fullpath = [...path31, ...issue2.path];
         if (fullpath.length === 0) {
           fieldErrors._errors.push(mapper(issue2));
         } else {
@@ -5149,17 +5149,17 @@ function formatError(error62, mapper = (issue2) => issue2.message) {
 }
 function treeifyError(error62, mapper = (issue2) => issue2.message) {
   const result = { errors: [] };
-  const processError = (error63, path29 = []) => {
+  const processError = (error63, path31 = []) => {
     var _a3;
     for (const issue2 of error63.issues) {
       if (issue2.code === "invalid_union" && issue2.errors.length) {
-        issue2.errors.map((issues) => processError({ issues }, [...path29, ...issue2.path]));
+        issue2.errors.map((issues) => processError({ issues }, [...path31, ...issue2.path]));
       } else if (issue2.code === "invalid_key") {
-        processError({ issues: issue2.issues }, [...path29, ...issue2.path]);
+        processError({ issues: issue2.issues }, [...path31, ...issue2.path]);
       } else if (issue2.code === "invalid_element") {
-        processError({ issues: issue2.issues }, [...path29, ...issue2.path]);
+        processError({ issues: issue2.issues }, [...path31, ...issue2.path]);
       } else {
-        const fullpath = [...path29, ...issue2.path];
+        const fullpath = [...path31, ...issue2.path];
         if (fullpath.length === 0) {
           result.errors.push(mapper(issue2));
           continue;
@@ -5198,8 +5198,8 @@ function treeifyError(error62, mapper = (issue2) => issue2.message) {
 }
 function toDotPath(_path) {
   const segs = [];
-  const path29 = _path.map((seg) => typeof seg === "object" ? seg.key : seg);
-  for (const seg of path29) {
+  const path31 = _path.map((seg) => typeof seg === "object" ? seg.key : seg);
+  for (const seg of path31) {
     if (typeof seg === "number")
       segs.push(`[${seg}]`);
     else if (typeof seg === "symbol")
@@ -6301,9 +6301,9 @@ var asciiTabOrNewline = /[\t\n\r]/g;
 function stripTabAndNewline(value) {
   return value.replace(asciiTabOrNewline, "");
 }
-function urlHostnameOk(url2, hostname3) {
-  hostname3.lastIndex = 0;
-  return hostname3.test(url2.hostname);
+function urlHostnameOk(url2, hostname4) {
+  hostname4.lastIndex = 0;
+  return hostname4.test(url2.hostname);
 }
 function urlProtocolOk(url2, protocol) {
   protocol.lastIndex = 0;
@@ -22337,13 +22337,13 @@ function resolveRef(ref, ctx) {
   if (!ref.startsWith("#")) {
     throw new Error("External $ref is not supported, only local refs (#/...) are allowed");
   }
-  const path29 = ref.slice(1).split("/").filter(Boolean);
-  if (path29.length === 0) {
+  const path31 = ref.slice(1).split("/").filter(Boolean);
+  if (path31.length === 0) {
     return ctx.rootSchema;
   }
   const defsKey = ctx.version === "draft-2020-12" ? "$defs" : "definitions";
-  if (path29[0] === defsKey) {
-    const key = path29[1] === void 0 ? void 0 : decodeJSONPointerSegment(path29[1]);
+  if (path31[0] === defsKey) {
+    const key = path31[1] === void 0 ? void 0 : decodeJSONPointerSegment(path31[1]);
     if (!key || !ctx.defs[key]) {
       throw new Error(`Reference not found: ${ref}`);
     }
@@ -23647,6 +23647,14 @@ var agentEventSchema = external_exports.object({
   event: external_exports.string(),
   data: external_exports.unknown().optional()
 });
+var changedFileSchema = external_exports.object({
+  path: external_exports.string(),
+  additions: external_exports.number().int(),
+  deletions: external_exports.number().int(),
+  explanation: external_exports.string().optional(),
+  /** Agent engine: whether the file was created, modified or deleted. */
+  kind: external_exports.enum(["create", "modify", "delete"]).optional()
+});
 var agentChangeEventSchema = external_exports.discriminatedUnion("type", [
   external_exports.object({ type: external_exports.literal("planning"), changeId: external_exports.uuid() }),
   external_exports.object({
@@ -23654,6 +23662,8 @@ var agentChangeEventSchema = external_exports.discriminatedUnion("type", [
     changeId: external_exports.uuid(),
     plan: changePlanSchema,
     model: external_exports.string(),
+    /** Models tried first that couldn't run (A7, A11): the plan says it ran on another. */
+    fellBackFrom: external_exports.array(external_exports.string()).optional(),
     /** Credits the change has cost so far (B1). */
     cost: external_exports.number().nonnegative().optional()
   }),
@@ -23673,22 +23683,23 @@ var agentChangeEventSchema = external_exports.discriminatedUnion("type", [
   external_exports.object({
     type: external_exports.literal("checking"),
     changeId: external_exports.uuid(),
-    checks: external_exports.array(external_exports.object({ kind: checkKindSchema, status: checkStatusSchema }))
+    checks: external_exports.array(
+      external_exports.object({
+        kind: checkKindSchema,
+        status: checkStatusSchema,
+        /** How long a finished check took (L16). */
+        durationMs: external_exports.number().int().nonnegative().optional()
+      })
+    ),
+    /** The change as written, shown while its checks run (L17, ADR 0042). */
+    files: external_exports.array(changedFileSchema).optional(),
+    diff: external_exports.string().optional()
   }),
   external_exports.object({
     type: external_exports.literal("result"),
     changeId: external_exports.uuid(),
     state: changeStateSchema,
-    files: external_exports.array(
-      external_exports.object({
-        path: external_exports.string(),
-        additions: external_exports.number().int(),
-        deletions: external_exports.number().int(),
-        explanation: external_exports.string().optional(),
-        /** Agent engine: whether the file was created, modified or deleted. */
-        kind: external_exports.enum(["create", "modify", "delete"]).optional()
-      })
-    ),
+    files: external_exports.array(changedFileSchema),
     diff: external_exports.string(),
     checks: external_exports.array(checkResultSchema),
     /** Credits the change has cost so far (B1). */
@@ -24641,16 +24652,16 @@ var Diff = class {
       }
     }
   }
-  addToPath(path29, added, removed, oldPosInc, options) {
-    const last = path29.lastComponent;
+  addToPath(path31, added, removed, oldPosInc, options) {
+    const last = path31.lastComponent;
     if (last && !options.oneChangePerToken && last.added === added && last.removed === removed) {
       return {
-        oldPos: path29.oldPos + oldPosInc,
+        oldPos: path31.oldPos + oldPosInc,
         lastComponent: { count: last.count + 1, added, removed, previousComponent: last.previousComponent }
       };
     } else {
       return {
-        oldPos: path29.oldPos + oldPosInc,
+        oldPos: path31.oldPos + oldPosInc,
         lastComponent: { count: 1, added, removed, previousComponent: last }
       };
     }
@@ -30455,17 +30466,17 @@ var writeToFiles = (chunks, stdioItems, outputFiles) => {
   const writtenPaths = /* @__PURE__ */ new Set();
   for (const stdioItem of fileItems) {
     const { type, append } = stdioItem;
-    const path29 = type === "fileNumber" ? stdioItem.path : getFileTarget(stdioItem);
-    if (writtenPaths.has(path29)) {
+    const path31 = type === "fileNumber" ? stdioItem.path : getFileTarget(stdioItem);
+    if (writtenPaths.has(path31)) {
       continue;
     }
-    writtenPaths.add(path29);
-    if (append || outputFiles.has(path29)) {
-      appendFileSync(path29, contents);
+    writtenPaths.add(path31);
+    if (append || outputFiles.has(path31)) {
+      appendFileSync(path31, contents);
     } else {
-      writeFileSync2(path29, contents);
+      writeFileSync2(path31, contents);
     }
-    outputFiles.add(path29);
+    outputFiles.add(path31);
   }
 };
 
@@ -33447,6 +33458,71 @@ ${summary}` : summary
 // ../agent-core/src/checks/browser.ts
 import { mkdirSync as mkdirSync2, writeFileSync as writeFileSync3 } from "fs";
 import path21 from "path";
+var LOC_ATTRIBUTE = "data-revyse-loc";
+var FRAME_PADDING = 24;
+var FRAME_MIN_WIDTH = 480;
+var FRAME_MAX_RATIO = 2;
+function frameAround(box, viewport) {
+  const width = Math.min(Math.max(box.width + 2 * FRAME_PADDING, FRAME_MIN_WIDTH), viewport.width);
+  const height = Math.min(
+    Math.max(box.height + 2 * FRAME_PADDING, width / FRAME_MAX_RATIO),
+    viewport.height
+  );
+  const place = (start, size, frame, limit) => Math.round(Math.min(Math.max(start + size / 2 - frame / 2, 0), limit - frame));
+  return {
+    x: place(box.x, box.width, width, viewport.width),
+    y: place(box.y, box.height, height, viewport.height),
+    width: Math.round(width),
+    height: Math.round(height)
+  };
+}
+function nearestLoc(locs, source) {
+  const distance = (loc) => {
+    const [line, column] = loc.split(":").slice(-2).map(Number);
+    if (!Number.isFinite(line) || source.line === void 0) return Infinity;
+    return Math.abs(line - source.line) * 1e4 + Math.abs((column ?? 0) - (source.column ?? 0));
+  };
+  let best = 0;
+  for (let i2 = 1; i2 < locs.length; i2++) if (distance(locs[i2]) < distance(locs[best])) best = i2;
+  return best;
+}
+async function findSelected(page, selector, source) {
+  const bySelector = page.locator(selector).first();
+  const selectorFound = await page.locator(selector).count().catch(() => 0) > 0;
+  if (source?.line) {
+    const exact = source.column === void 0 ? `${source.file}:${source.line}:` : `${source.file}:${source.line}:${source.column}`;
+    const isExact = (loc) => source.column === void 0 ? !!loc?.startsWith(exact) : loc === exact;
+    if (selectorFound) {
+      const loc = await bySelector.evaluate((el, attr) => el.closest(`[${attr}]`)?.getAttribute(attr) ?? null, LOC_ATTRIBUTE).catch(() => null);
+      if (isExact(loc)) return bySelector;
+    }
+    const op = source.column === void 0 ? "^=" : "=";
+    const byLoc = page.locator(`[${LOC_ATTRIBUTE}${op}${JSON.stringify(exact)}]`);
+    if (await byLoc.count().catch(() => 0) > 0) return byLoc.first();
+  }
+  if (selectorFound) return bySelector;
+  if (!source) return null;
+  const fromFile = page.locator(`[${LOC_ATTRIBUTE}^=${JSON.stringify(`${source.file}:`)}]`);
+  const locs = await fromFile.evaluateAll((els, attr) => els.map((el) => el.getAttribute(attr) ?? ""), LOC_ATTRIBUTE).catch(() => []);
+  return locs.length > 0 ? fromFile.nth(nearestLoc(locs, source)) : null;
+}
+async function frameSelected(page, target) {
+  await target.scrollIntoViewIfNeeded({ timeout: 2e3 }).catch(() => {
+  });
+  await page.evaluate(
+    () => Promise.race([
+      Promise.all(
+        Array.from(document.images).filter((img) => !img.complete).map((img) => new Promise((done) => img.addEventListener("loadend", done)))
+      ),
+      new Promise((done) => setTimeout(done, 2e3))
+    ])
+  ).catch(() => {
+  });
+  const box = await target.boundingBox().catch(() => null);
+  const viewport = page.viewportSize();
+  if (!box || !viewport || box.width <= 0 || box.height <= 0) return null;
+  return frameAround(box, viewport);
+}
 var BrowserUnavailableError = class extends Error {
 };
 var MAX_ERRORS = 10;
@@ -33474,7 +33550,7 @@ async function createPlaywrightDriver(env = process.env) {
   if (!browser) throw new BrowserUnavailableError(`No Chromium could be started. ${NOT_RUN_HINT}`);
   const b = browser;
   return {
-    async capture({ url: url2, selector, sourceFile, timeoutMs }) {
+    async capture({ url: url2, selector, source, timeoutMs }) {
       const context = await b.newContext({ viewport: { width: 1280, height: 800 } });
       const page = await context.newPage();
       const errors = [];
@@ -33494,9 +33570,15 @@ async function createPlaywrightDriver(env = process.env) {
         let found = null;
         if (await page.locator(selector).count().catch(() => 0) > 0)
           found = "selector";
-        else if (sourceFile && await page.locator(`[data-revyse-loc^="${sourceFile}:"]`).count() > 0)
+        else if (source && await page.locator(`[${LOC_ATTRIBUTE}^=${JSON.stringify(`${source.file}:`)}]`).count() > 0)
           found = "source";
-        const screenshot = await page.screenshot({ type: "png" });
+        const target = await findSelected(page, selector, source);
+        const clip = target ? await frameSelected(page, target) : null;
+        const screenshot = await page.screenshot({
+          type: "png",
+          animations: "disabled",
+          ...clip ? { clip } : {}
+        });
         return { status: res?.status() ?? null, found, screenshot, errors };
       } finally {
         await context.close();
@@ -33611,7 +33693,7 @@ function createAgentApi(opts) {
   const f = opts.fetch ?? fetch;
   const base = opts.apiUrl.replace(/\/+$/, "");
   const auth = { authorization: `Bearer ${opts.token}` };
-  const call = (path29, body, signal) => f(`${base}${path29}`, {
+  const call = (path31, body, signal) => f(`${base}${path31}`, {
     method: "POST",
     headers: { "content-type": "application/json", ...auth },
     body: JSON.stringify(body),
@@ -33627,18 +33709,18 @@ function createAgentApi(opts) {
   }
   return {
     baseUrl: base,
-    async get(path29) {
-      const res = await f(`${base}${path29}`, { headers: auth });
+    async get(path31) {
+      const res = await f(`${base}${path31}`, { headers: auth });
       if (!res.ok) throw await failure2(res);
       return await res.json();
     },
-    async post(path29, body) {
-      const res = await call(path29, body);
+    async post(path31, body) {
+      const res = await call(path31, body);
       if (!res.ok) throw await failure2(res);
       return await res.json();
     },
-    async *stream(path29, body, signal) {
-      const res = await call(path29, body, signal);
+    async *stream(path31, body, signal) {
+      const res = await call(path31, body, signal);
       if (!res.ok) throw await failure2(res);
       if (!res.body) return;
       const reader = res.body.pipeThrough(new TextDecoderStream()).getReader();
@@ -33671,11 +33753,51 @@ function parseBlock(block) {
 
 // ../agent-core/src/change/runner.ts
 import { readFileSync as readFileSync8, rmSync as rmSync2, writeFileSync as writeFileSync4 } from "fs";
-import path24 from "path";
+import path25 from "path";
+
+// ../agent-core/src/patch/originals.ts
+import { existsSync as existsSync4 } from "fs";
+import path22 from "path";
+async function withOriginals(opts) {
+  const io = opts.io ?? nodeIO;
+  const dir = changeDir(opts.projectRoot, opts.changeId);
+  const manifest = JSON.parse(io.readFile(path22.join(dir, "manifest.json")));
+  const files = manifest.files.map((f) => ({
+    ...f,
+    real: resolveProjectPath(opts.projectRoot, f.path),
+    pre: f.preHash === null ? null : io.readFile(path22.join(dir, "pre", f.path)),
+    post: f.postHash === null ? null : io.readFile(path22.join(dir, "post", f.path))
+  }));
+  const hashOf = (real) => existsSync4(real) ? hashContent(io.readFile(real)) : null;
+  const put = (real, content) => {
+    if (content === null) io.unlink(real);
+    else {
+      io.mkdir(path22.dirname(real));
+      io.writeFile(real, content);
+    }
+  };
+  const changed = files.filter((f) => hashOf(f.real) !== f.postHash).map((f) => f.path);
+  if (changed.length > 0) return { status: "changed", paths: changed };
+  for (const f of files) put(f.real, f.pre);
+  const putBack = () => {
+    const kept2 = files.filter((f) => hashOf(f.real) !== f.preHash).map((f) => f.path);
+    for (const f of files) if (!kept2.includes(f.path)) put(f.real, f.post);
+    return kept2;
+  };
+  let value;
+  try {
+    value = await opts.work();
+  } catch (err) {
+    putBack();
+    throw err;
+  }
+  const kept = putBack();
+  return kept.length > 0 ? { status: "kept-edit", value, paths: kept } : { status: "done", value };
+}
 
 // ../agent-core/src/tools/file-host.ts
 import { readdirSync as readdirSync3, readFileSync as readFileSync7, statSync as statSync5 } from "fs";
-import path22 from "path";
+import path23 from "path";
 var SKIPPED_DIRS = /* @__PURE__ */ new Set([
   "node_modules",
   ".git",
@@ -33691,7 +33813,7 @@ var SKIPPED_DIRS = /* @__PURE__ */ new Set([
 ]);
 var MAX_HOST_FILE_BYTES = 1e6;
 var MAX_LISTED = 2e4;
-var toPosix2 = (p) => p.split(path22.sep).join("/");
+var toPosix2 = (p) => p.split(path23.sep).join("/");
 function localFileHost(projectRoot) {
   return {
     async read(relativePath) {
@@ -33719,12 +33841,12 @@ function localFileHost(projectRoot) {
         if (out.length >= MAX_LISTED) return;
         let entries;
         try {
-          entries = readdirSync3(path22.join(projectRoot, dir), { withFileTypes: true });
+          entries = readdirSync3(path23.join(projectRoot, dir), { withFileTypes: true });
         } catch {
           return;
         }
         for (const e of entries.sort((a2, b) => a2.name.localeCompare(b.name))) {
-          const rel = toPosix2(path22.join(dir, e.name));
+          const rel = toPosix2(path23.join(dir, e.name));
           if (e.isDirectory()) {
             if (!SKIPPED_DIRS.has(e.name) && !isSensitivePath(rel)) walk(rel);
           } else if (e.isFile() && !isSensitivePath(rel)) {
@@ -33740,7 +33862,7 @@ function localFileHost(projectRoot) {
 }
 
 // ../agent-core/src/tools/integrations.ts
-import path23 from "path";
+import path24 from "path";
 var CODE = /\.(tsx?|jsx?|mjs|cjs)$/;
 var ENV_TEMPLATE = /^\.env\.(example|sample|template)$/;
 var ENV_IN_CODE = /process\.env\.([A-Z][A-Z0-9_]*)|process\.env\[\s*["']([A-Z][A-Z0-9_]*)["']\s*\]|import\.meta\.env\.([A-Z][A-Z0-9_]*)/g;
@@ -33763,7 +33885,7 @@ async function projectSignals(read, paths) {
     for (const m of text.matchAll(ENV_IN_CODE)) env.add(m[1] ?? m[2] ?? m[3]);
     for (const m of text.matchAll(IMPORT)) imports.add(packageOf(m[1] ?? m[2]));
   }
-  for (const p of paths.filter((p2) => ENV_TEMPLATE.test(path23.posix.basename(p2)))) {
+  for (const p of paths.filter((p2) => ENV_TEMPLATE.test(path24.posix.basename(p2)))) {
     for (const line of (await read(p) ?? "").split("\n")) {
       const name = line.match(/^\s*(?:export\s+)?([A-Z][A-Z0-9_]*)\s*=/)?.[1];
       if (name) env.add(name);
@@ -33823,27 +33945,27 @@ var StagedFiles = class {
   /** Paths written by the package manager (I7), not by the model: the write rules don't apply. */
   fromPackageManager = /* @__PURE__ */ new Set();
   /** Current content as the agent sees it: staged if written, else the project's. */
-  async read(path29) {
-    const s = this.staged.get(path29);
+  async read(path31) {
+    const s = this.staged.get(path31);
     if (s) return s.content;
-    const content = await this.host.read(path29);
-    if (!this.seen.has(path29)) this.seen.set(path29, content === null ? null : hashContent(content));
+    const content = await this.host.read(path31);
+    if (!this.seen.has(path31)) this.seen.set(path31, content === null ? null : hashContent(content));
     return content;
   }
   /** Like `read`, without recording a snapshot: for searching, which only looks. */
-  async peek(path29) {
-    const s = this.staged.get(path29);
-    return s ? s.content : this.host.read(path29);
+  async peek(path31) {
+    const s = this.staged.get(path31);
+    return s ? s.content : this.host.read(path31);
   }
   /** Writes `content` (or deletes, with null) in the staging layer. */
-  async write(path29, content) {
-    const existing = this.staged.get(path29);
+  async write(path31, content) {
+    const existing = this.staged.get(path31);
     if (existing) {
       existing.content = content;
       return;
     }
-    const before = await this.read(path29);
-    this.staged.set(path29, {
+    const before = await this.read(path31);
+    this.staged.set(path31, {
       content,
       existed: before !== null,
       baseHash: before === null ? null : hashContent(before)
@@ -33854,9 +33976,9 @@ var StagedFiles = class {
    * a supported SDK). The patch engine applies it with the rest, so it lands, is checked and is
    * reverted together; the write rules that keep the model out of these files don't apply.
    */
-  async writeFromPackageManager(path29, content) {
-    await this.write(path29, content);
-    this.fromPackageManager.add(path29);
+  async writeFromPackageManager(path31, content) {
+    await this.write(path31, content);
+    this.fromPackageManager.add(path31);
   }
   /** The paths the package manager wrote. */
   packageManagerPaths() {
@@ -33874,18 +33996,18 @@ var StagedFiles = class {
   /** What the apply phase changed, net: a file created then deleted is no change at all. */
   changes() {
     const out = [];
-    for (const [path29, s] of [...this.staged].sort(([a2], [b]) => a2.localeCompare(b))) {
+    for (const [path31, s] of [...this.staged].sort(([a2], [b]) => a2.localeCompare(b))) {
       if (!s.existed && s.content === null) continue;
-      if (!s.existed) out.push({ path: path29, kind: "create", content: s.content });
-      else if (s.content === null) out.push({ path: path29, kind: "delete", baseHash: s.baseHash });
+      if (!s.existed) out.push({ path: path31, kind: "create", content: s.content });
+      else if (s.content === null) out.push({ path: path31, kind: "delete", baseHash: s.baseHash });
       else if (hashContent(s.content) !== s.baseHash)
-        out.push({ path: path29, kind: "modify", content: s.content, baseHash: s.baseHash });
+        out.push({ path: path31, kind: "modify", content: s.content, baseHash: s.baseHash });
     }
     return out;
   }
   /** Every file the agent read or wrote, with its hash when first seen (null: didn't exist). */
   snapshots() {
-    return [...this.seen].map(([path29, hash2]) => ({ path: path29, hash: hash2 })).sort((a2, b) => a2.path.localeCompare(b.path));
+    return [...this.seen].map(([path31, hash2]) => ({ path: path31, hash: hash2 })).sort((a2, b) => a2.path.localeCompare(b.path));
   }
 };
 
@@ -33922,7 +34044,7 @@ var ok = (callId, output2) => ({
   output: output2,
   isError: false
 });
-var secretFile = (path29) => `Can't change ${path29}: it looks like it contains a secret. Leave it, and name it in notDone so the developer moves the secret to an environment variable.`;
+var secretFile = (path31) => `Can't change ${path31}: it looks like it contains a secret. Leave it, and name it in notDone so the developer moves the secret to an environment variable.`;
 var fail = (callId, output2) => ({
   callId,
   output: output2,
@@ -33965,12 +34087,12 @@ function createToolRuntime(opts) {
       const found = [];
       let withheld = 0;
       let stopped = false;
-      for (const path29 of await visible(input2.path, input2.glob)) {
+      for (const path31 of await visible(input2.path, input2.glob)) {
         if (found.length >= max || Date.now() - started > budget) {
           stopped = true;
           break;
         }
-        const content = await staging.peek(path29);
+        const content = await staging.peek(path31);
         if (content === null) continue;
         if (containsSecret(content)) {
           withheld++;
@@ -33982,7 +34104,7 @@ function createToolRuntime(opts) {
           if (line.length > MAX_SEARCH_LINE || !matches(line)) continue;
           const text = line.trim();
           found.push(
-            `${path29}:${i2 + 1}: ${text.length > MAX_LINE ? `${text.slice(0, MAX_LINE)}\u2026` : text}`
+            `${path31}:${i2 + 1}: ${text.length > MAX_LINE ? `${text.slice(0, MAX_LINE)}\u2026` : text}`
           );
         }
       }
@@ -34183,25 +34305,27 @@ function createChangeRunner(opts) {
     log(`change ${changeId ?? "(new)"} failed: ${err.message}`);
     fail2(session, changeId, {
       code: "internal",
-      message: "Something went wrong in the Revyse agent. Check the `revyse dev` output.",
+      message: "Something went wrong in the Revyse agent. Check your dev server's output.",
       retryable: true
     });
   }
   function run(session, work) {
     if (session.busy) throw new Busy("Revyse is still working on this change");
     session.busy = true;
-    session.abort = new AbortController();
-    const signal = session.abort.signal;
+    const controller = new AbortController();
+    session.abort = controller;
+    const signal = controller.signal;
     void work(signal).catch((err) => {
       if (!signal.aborted) report(session.id, err);
     }).finally(() => {
+      if (session.abort !== controller) return;
       session.busy = false;
       session.abort = void 0;
     });
   }
   function sessionOf(changeId) {
     const s = sessions.get(changeId);
-    if (!s) throw new Error("This change isn't open in this `revyse dev` session");
+    if (!s) throw new Error("This change isn't open in this session of your dev server");
     return s;
   }
   function readFiles(paths) {
@@ -34222,9 +34346,9 @@ function createChangeRunner(opts) {
     const stored = [];
     for (const key of localKeys) {
       try {
-        const bytes2 = readFileSync8(path24.join(opts.projectRoot, key));
+        const bytes2 = readFileSync8(path25.join(opts.projectRoot, key));
         const { artifact, upload } = await opts.api.post(`/api/changes/${changeId}/artifacts`, {
-          name: path24.basename(key),
+          name: path25.basename(key),
           contentType: "image/png",
           size: bytes2.length
         });
@@ -34269,7 +34393,7 @@ function createChangeRunner(opts) {
     const before = await driver.capture({
       url: url2,
       selector: session.element.selector,
-      sourceFile: session.element.source?.file,
+      source: session.element.source,
       timeoutMs: 3e4
     }).catch((err) => {
       log(`browser check: before-capture failed: ${err.message}`);
@@ -34302,7 +34426,7 @@ function createChangeRunner(opts) {
       `/api/changes/${session.id}/plan`,
       {
         element: session.element,
-        files: gathered.files.map(({ path: path29, content, hash: hash2 }) => ({ path: path29, content, hash: hash2 })),
+        files: gathered.files.map(({ path: path31, content, hash: hash2 }) => ({ path: path31, content, hash: hash2 })),
         modelTier: session.tier,
         model: session.model,
         ...extra
@@ -34314,16 +34438,24 @@ function createChangeRunner(opts) {
       const {
         plan: result,
         model,
-        cost
+        cost,
+        fellBackFrom
       } = ev.data;
-      onPlan(session, result, model, cost);
+      onPlan(session, result, model, cost, void 0, fellBackFrom);
     }
   }
-  function onPlan(session, result, model, cost, connectPath) {
+  function onPlan(session, result, model, cost, connectPath, fellBackFrom) {
     session.plan = result;
     if (cost !== void 0) session.cost = cost;
     if (result.decision === "proceed")
-      opts.emit({ type: "plan", changeId: session.id, plan: result, model, cost: session.cost });
+      opts.emit({
+        type: "plan",
+        changeId: session.id,
+        plan: result,
+        model,
+        ...fellBackFrom?.length ? { fellBackFrom } : {},
+        cost: session.cost
+      });
     else if (result.decision === "clarify")
       opts.emit({
         type: "clarification",
@@ -34353,19 +34485,23 @@ function createChangeRunner(opts) {
   }
   async function apply(session, signal) {
     const browser = prepareBrowser(session);
-    const baseline = hasLocalChecks() ? runChecks(session.contextPaths).catch((err) => {
-      log(`baseline checks failed to run: ${err.message}`);
-      return [];
-    }) : Promise.resolve([]);
     try {
-      await applyWithBrowser(session, signal, browser, baseline);
+      await applyWithBrowser(session, signal, browser);
     } finally {
       void browser.then((b) => b.driver?.close()).catch(() => {
       });
     }
   }
-  const hasLocalChecks = () => ["typecheck", "lint", "test"].some((k) => opts.config.scripts[k]);
-  async function applyWithBrowser(session, signal, browserPrep, baselinePrep) {
+  async function beforePage(prep) {
+    const late = /* @__PURE__ */ Symbol("late");
+    const ready = await Promise.race([
+      prep,
+      new Promise((r) => setTimeout(() => r(late), opts.beforeWaitMs ?? 3e3))
+    ]);
+    if (ready !== late) return ready;
+    return { before: null, reason: "The page took too long to load before the change." };
+  }
+  async function applyWithBrowser(session, signal, browserPrep) {
     const { files, missing } = readFiles(session.contextPaths);
     const stale = [
       ...missing,
@@ -34382,10 +34518,16 @@ function createChangeRunner(opts) {
       return conflict(session.id, "changed_since_plan", stale);
     }
     session.stage = "patching";
+    const planned = new Set(session.plan?.steps.flatMap((s) => s.files) ?? []);
+    const toPatch = planned.size > 0 ? files.filter((f) => planned.has(f.path)) : files;
     let patch;
-    for await (const ev of opts.api.stream(`/api/changes/${session.id}/patch`, { files }, signal)) {
+    for await (const ev of opts.api.stream(
+      `/api/changes/${session.id}/patch`,
+      { files: toPatch },
+      signal
+    )) {
       if (ev.event === "progress" && ev.data.stage === "patching")
-        opts.emit({ type: "applying", changeId: session.id, files: files.length });
+        opts.emit({ type: "applying", changeId: session.id, files: toPatch.length });
       if (ev.event === "error") return emitStreamError(session, ev.data);
       if (ev.event === "result") {
         const data = ev.data;
@@ -34394,13 +34536,13 @@ function createChangeRunner(opts) {
       }
     }
     if (!patch) return;
-    const [browser, baseline] = await Promise.all([browserPrep, baselinePrep]);
+    const browser = await beforePage(browserPrep);
     session.stage = "applying";
-    const snapshots = files.map(({ path: path29, hash: hash2 }) => ({ path: path29, hash: hash2 }));
+    const snapshots = files.map(({ path: path31, hash: hash2 }) => ({ path: path31, hash: hash2 }));
     const applied = applyPatch({
       projectRoot: opts.projectRoot,
       changeId: session.id,
-      patch: { files: patch.files.map(({ path: path29, edits }) => ({ path: path29, edits })) },
+      patch: { files: patch.files.map(({ path: path31, edits }) => ({ path: path31, edits })) },
       snapshots
     });
     if (applied.status === "conflict") {
@@ -34423,23 +34565,56 @@ function createChangeRunner(opts) {
     }
     session.applied = true;
     const explanations = new Map(patch.files.map((f) => [f.path, f.explanation]));
-    await checkAndReport(session, applied, browser, baseline, { explanations });
+    await checkAndReport(session, applied, browser, signal, { explanations });
   }
-  async function checkAndReport(session, applied, browser, baseline, extras = {}) {
+  async function checkAndReport(session, applied, browser, signal, extras = {}) {
     session.stage = "checking";
-    const configured = [
-      ...["typecheck", "lint", "test", "build"].filter((k) => opts.config.scripts[k]),
-      ...browser.driver ? ["browser"] : []
-    ];
-    opts.emit({
-      type: "checking",
-      changeId: session.id,
-      checks: configured.map((kind) => ({ kind, status: "running" }))
-    });
+    const ALL = ["typecheck", "lint", "test", "build"];
+    const kinds = ALL.filter((k) => opts.config.scripts[k]);
+    const files = applied.files.map((f) => ({
+      path: f.path,
+      additions: f.additions,
+      deletions: f.deletions,
+      explanation: extras.explanations?.get(f.path),
+      ...f.kind ? { kind: f.kind } : {}
+    }));
+    const progress = new Map([
+      ...kinds.map((k) => [k, { status: "running" }]),
+      ...browser.driver ? [["browser", { status: "running" }]] : []
+    ]);
+    const report2 = () => {
+      if (signal.aborted) return;
+      opts.emit({
+        type: "checking",
+        changeId: session.id,
+        checks: [...progress].map(([kind, p]) => ({
+          kind,
+          status: p.status,
+          ...p.ms !== void 0 ? { durationMs: p.ms } : {}
+        })),
+        files,
+        diff: applied.diff
+      });
+    };
+    const finished7 = (c3) => {
+      progress.set(c3.kind, { status: c3.status, ms: c3.durationMs });
+      report2();
+      return c3;
+    };
+    report2();
     const changed = applied.files.filter((f) => f.kind !== "delete").map((f) => f.path);
     const startedBrowser = performance.now();
     const [local, browserRaw] = await Promise.all([
-      runChecks(changed),
+      Promise.all(
+        ALL.map(async (kind) => {
+          const [r] = await runChecks(changed, [kind]);
+          if (!r) {
+            if (progress.delete(kind)) report2();
+            return null;
+          }
+          return progress.has(kind) ? finished7(r) : r;
+        })
+      ).then((results) => results.filter((r) => r !== null)),
       browser.driver && browser.url ? runBrowserCheck({
         projectRoot: opts.projectRoot,
         changeId: session.id,
@@ -34451,26 +34626,45 @@ function createChangeRunner(opts) {
           return browser.driver.capture({
             url: browser.url,
             selector: session.element.selector,
-            sourceFile: session.element.source?.file,
+            source: session.element.source,
             timeoutMs: 6e4
           });
         },
         durationMs: () => performance.now() - startedBrowser
-      }) : Promise.resolve(browserNotRun(browser.reason ?? "The browser check didn't run."))
+      }).then((r) => finished7(redactCheck(r))) : Promise.resolve(browserNotRun(browser.reason ?? "The browser check didn't run."))
     ]);
-    const browserResult = redactCheck(browserRaw);
+    if (signal.aborted) return;
+    const browserResult = browserRaw;
     const localKeys = browserResult.evidence?.artifactKeys ?? [];
     if (localKeys.length > 0) {
       const stored = await uploadArtifacts(session.id, localKeys);
       browserResult.evidence.artifactKeys = [...localKeys, ...stored];
     }
-    const checks = [
-      ...compareWithBaseline(
-        local.filter((c3) => c3.kind !== "browser"),
-        baseline
-      ),
-      browserResult
-    ];
+    const failed = local.filter((c3) => c3.status === "failed").map((c3) => c3.kind);
+    let baseline = [];
+    if (failed.length > 0) {
+      const before = await withOriginals({
+        projectRoot: opts.projectRoot,
+        changeId: session.id,
+        work: () => runChecks(changed, failed)
+      }).catch((err) => {
+        log(`couldn't re-run the failed checks on the original files: ${err.message}`);
+        return null;
+      });
+      if (signal.aborted) return;
+      if (before?.status === "kept-edit") {
+        await transition(
+          session.id,
+          "failed",
+          `Files changed while Revyse was checking: ${before.paths.join(", ")}`,
+          "conflict"
+        ).catch(() => {
+        });
+        return conflict(session.id, "changed_while_applying", before.paths);
+      }
+      if (before?.status === "done") baseline = before.value;
+    }
+    const checks = [...compareWithBaseline(local, baseline), browserResult];
     session.stage = "reporting";
     const { change } = await opts.api.post(
       `/api/changes/${session.id}/result`,
@@ -34492,13 +34686,7 @@ function createChangeRunner(opts) {
       type: "result",
       changeId: session.id,
       state: change.state,
-      files: applied.files.map((f) => ({
-        path: f.path,
-        additions: f.additions,
-        deletions: f.deletions,
-        explanation: extras.explanations?.get(f.path),
-        ...f.kind ? { kind: f.kind } : {}
-      })),
+      files,
       diff: applied.diff,
       checks,
       cost: session.cost,
@@ -34624,21 +34812,19 @@ function createChangeRunner(opts) {
     const planned = new Set(session.plan?.steps.flatMap((s) => s.files) ?? []);
     opts.emit({ type: "applying", changeId: session.id, files: planned.size });
     const browserPrep = prepareBrowser(session);
-    const baselinePrep = hasLocalChecks() ? runChecks([]).catch((err) => {
-      log(`baseline checks failed to run: ${err.message}`);
-      return [];
-    }) : Promise.resolve([]);
     try {
-      await agentApplyWith(session, signal, browserPrep, baselinePrep);
+      await agentApplyWith(session, signal, browserPrep);
     } finally {
       void browserPrep.then((b) => b.driver?.close()).catch(() => {
       });
     }
   }
-  async function agentApplyWith(session, signal, browserPrep, baselinePrep) {
+  async function agentApplyWith(session, signal, browserPrep) {
+    let ready;
+    const browserReady = () => ready ??= beforePage(browserPrep);
     const stop = {};
     const flush = async () => {
-      await Promise.all([browserPrep, baselinePrep]);
+      await browserReady();
       if (session.applied) {
         const undone = revertChange({ projectRoot: opts.projectRoot, changeId: session.id });
         if (undone.status === "conflict")
@@ -34702,21 +34888,20 @@ ${detail}` : "."}`,
       });
     }
     if (final.status !== "applied") return landingFailed(session, final);
-    const [browser, baseline] = await Promise.all([browserPrep, baselinePrep]);
-    await checkAndReport(session, final, browser, baseline, { summary: done.summary });
+    await checkAndReport(session, final, await browserReady(), signal, { summary: done.summary });
   }
   async function addDependency(rt, pkg, version2) {
     const pm = opts.config.packageManager;
     const files = ["package.json", LOCKFILE[pm]];
     const disk = (rel) => {
       try {
-        return readFileSync8(path24.join(opts.projectRoot, rel), "utf8");
+        return readFileSync8(path25.join(opts.projectRoot, rel), "utf8");
       } catch {
         return null;
       }
     };
     const put = (rel, content) => {
-      const file2 = path24.join(opts.projectRoot, rel);
+      const file2 = path25.join(opts.projectRoot, rel);
       if (content === null) rmSync2(file2, { force: true });
       else writeFileSync4(file2, content);
     };
@@ -34928,6 +35113,11 @@ ${r.output.slice(-3e3)}`,
     },
     revert(changeId) {
       const s = sessionOf(changeId);
+      if (s.busy && s.stage === "checking") {
+        s.abort?.abort();
+        s.abort = void 0;
+        s.busy = false;
+      }
       run(s, async () => {
         s.stage = "reverting";
         const files = restore(s);
@@ -34978,13 +35168,113 @@ ${r.output.slice(-3e3)}`,
   };
 }
 
+// src/api-client.ts
+var DEFAULT_API_URL = "https://revyse.dev";
+function resolveApiUrl(flag, env = process.env) {
+  return (flag || env.REVYSE_API_URL || DEFAULT_API_URL).replace(/\/+$/, "");
+}
+var ApiError = class extends Error {
+  constructor(status, code2, message) {
+    super(message);
+    this.status = status;
+    this.code = code2;
+    this.name = "ApiError";
+  }
+  status;
+  code;
+};
+function createApiClient({ apiUrl, token, fetch: f = fetch }) {
+  async function request(method, path31, body) {
+    const res = await f(`${apiUrl}${path31}`, {
+      method,
+      headers: {
+        "content-type": "application/json",
+        ...token ? { authorization: `Bearer ${token}` } : {}
+      },
+      body: body === void 0 ? void 0 : JSON.stringify(body)
+    });
+    const data = await res.json().catch(() => ({}));
+    if (!res.ok) {
+      const code2 = data.error?.code ?? "error";
+      throw new ApiError(res.status, code2, data.error?.message ?? `Request failed (${res.status})`);
+    }
+    return data;
+  }
+  return {
+    get: (path31) => request("GET", path31),
+    post: (path31, body) => request("POST", path31, body ?? {})
+  };
+}
+
+// src/connect.ts
+import { spawn as spawn2 } from "child_process";
+import { hostname as hostname3 } from "os";
+
+// src/credentials.ts
+import { chmodSync, existsSync as existsSync5, mkdirSync as mkdirSync3, readFileSync as readFileSync9, writeFileSync as writeFileSync5 } from "fs";
+import { homedir } from "os";
+import path26 from "path";
+function credentialsPath(env = process.env) {
+  const base = env.XDG_CONFIG_HOME || path26.join(homedir(), ".config");
+  return path26.join(base, "revyse", "credentials.json");
+}
+function readAll(file2) {
+  if (!existsSync5(file2)) return {};
+  return JSON.parse(readFileSync9(file2, "utf8"));
+}
+function writeAll(file2, data) {
+  mkdirSync3(path26.dirname(file2), { recursive: true, mode: 448 });
+  writeFileSync5(file2, `${JSON.stringify(data, null, 2)}
+`, { mode: 384 });
+  chmodSync(file2, 384);
+}
+function loadCredential(projectRoot, file2 = credentialsPath()) {
+  return readAll(file2)[path26.resolve(projectRoot)] ?? null;
+}
+function saveCredential(projectRoot, cred, file2 = credentialsPath()) {
+  writeAll(file2, { ...readAll(file2), [path26.resolve(projectRoot)]: cred });
+}
+
+// src/device-login.ts
+var defaultSleep = (ms) => new Promise((r) => setTimeout(r, ms));
+async function deviceLogin({
+  client,
+  clientName,
+  onCode,
+  sleep = defaultSleep
+}) {
+  const start = await client.post("/api/cli/device", { clientName });
+  onCode(start);
+  let interval = start.interval;
+  const deadline = Date.now() + start.expiresIn * 1e3;
+  while (Date.now() < deadline) {
+    await sleep(interval * 1e3);
+    try {
+      return await client.post("/api/cli/token", { deviceCode: start.deviceCode });
+    } catch (err) {
+      if (!(err instanceof ApiError)) throw err;
+      if (err.code === "authorization_pending") continue;
+      if (err.code === "slow_down") {
+        interval += 5;
+        continue;
+      }
+      if (err.code === "access_denied") {
+        throw new Error("Login was denied in the browser.", { cause: err });
+      }
+      if (err.code === "expired_token") break;
+      throw err;
+    }
+  }
+  throw new Error("Login code expired. Run `revyse login` again.");
+}
+
 // src/init-flow.ts
-import { existsSync as existsSync6, readFileSync as readFileSync11, writeFileSync as writeFileSync5 } from "fs";
-import path27 from "path";
+import { existsSync as existsSync8, readFileSync as readFileSync12, writeFileSync as writeFileSync6 } from "fs";
+import path29 from "path";
 
 // src/detect.ts
-import { existsSync as existsSync4, readdirSync as readdirSync4, readFileSync as readFileSync9, statSync as statSync6 } from "fs";
-import path25 from "path";
+import { existsSync as existsSync6, readdirSync as readdirSync4, readFileSync as readFileSync10, statSync as statSync6 } from "fs";
+import path27 from "path";
 var LOCKFILES2 = [
   ["pnpm-lock.yaml", "pnpm"],
   ["yarn.lock", "yarn"],
@@ -34994,11 +35284,11 @@ var LOCKFILES2 = [
 ];
 var SOURCE_DIR_CANDIDATES = ["src", "app", "pages", "components", "lib"];
 function detectProject(root) {
-  const pkgPath = path25.join(root, "package.json");
-  if (!existsSync4(pkgPath)) {
+  const pkgPath = path27.join(root, "package.json");
+  if (!existsSync6(pkgPath)) {
     throw new Error(`No package.json found in ${root}. Run revyse init from your project root.`);
   }
-  const pkg = JSON.parse(readFileSync9(pkgPath, "utf8"));
+  const pkg = JSON.parse(readFileSync10(pkgPath, "utf8"));
   const deps = { ...pkg.dependencies, ...pkg.devDependencies };
   const warnings = [];
   const framework = detectFramework(deps);
@@ -35007,13 +35297,13 @@ function detectProject(root) {
   } else if (framework !== "nextjs") {
     warnings.push(`${framework} support is experimental; Next.js is the supported target.`);
   }
-  const managers = LOCKFILES2.filter(([file2]) => existsSync4(path25.join(root, file2)));
+  const managers = LOCKFILES2.filter(([file2]) => existsSync6(path27.join(root, file2)));
   const packageManager = managers[0]?.[1] ?? "npm";
   if (managers.length === 0) warnings.push("No lockfile found; defaulting to npm.");
   if (new Set(managers.map(([, m]) => m)).size > 1) {
     warnings.push(`Multiple lockfiles found; using ${packageManager}.`);
   }
-  const sourceDirs = SOURCE_DIR_CANDIDATES.filter((d) => existsSync4(path25.join(root, d)));
+  const sourceDirs = SOURCE_DIR_CANDIDATES.filter((d) => existsSync6(path27.join(root, d)));
   for (const d of aliasedDirs(root)) if (!sourceDirs.includes(d)) sourceDirs.push(d);
   if (sourceDirs.length === 0) {
     warnings.push("No source directories found; edit sourceDirs in revyse.config.json.");
@@ -35031,14 +35321,16 @@ function detectProject(root) {
         dev: pick2("dev"),
         typecheck: pick2("typecheck", "type-check", "tsc"),
         lint: pick2("lint"),
-        test: pick2("test"),
+        // Tests are opt-in (L19, ADR 0042): a suite can take minutes, and a local change should
+        // take seconds. The build stays: it only ever runs in cloud workspaces.
         build: pick2("build")
       },
       exclude: [],
       agentPort: 4545,
       appOrigins: devOrigins(scripts.dev)
     },
-    warnings
+    warnings,
+    optional: { test: pick2("test") }
   };
 }
 function detectFramework(deps) {
@@ -35086,17 +35378,17 @@ function hasSource(dir, depth = 3) {
   for (const entry of readdirSync4(dir, { withFileTypes: true })) {
     if (entry.isFile() && SOURCE_FILE.test(entry.name)) return true;
     if (entry.isDirectory() && depth > 1 && !NOT_SOURCE.has(entry.name)) {
-      if (hasSource(path25.join(dir, entry.name), depth - 1)) return true;
+      if (hasSource(path27.join(dir, entry.name), depth - 1)) return true;
     }
   }
   return false;
 }
 function aliasedDirs(root) {
-  const file2 = ["tsconfig.json", "jsconfig.json"].map((f) => path25.join(root, f)).find((f) => existsSync4(f));
+  const file2 = ["tsconfig.json", "jsconfig.json"].map((f) => path27.join(root, f)).find((f) => existsSync6(f));
   if (!file2) return [];
   let compilerOptions;
   try {
-    compilerOptions = parseJsonc(readFileSync9(file2, "utf8")).compilerOptions;
+    compilerOptions = parseJsonc(readFileSync10(file2, "utf8")).compilerOptions;
   } catch {
     return [];
   }
@@ -35104,15 +35396,15 @@ function aliasedDirs(root) {
   const baseUrl = compilerOptions?.baseUrl ?? ".";
   const dirs = /* @__PURE__ */ new Set();
   for (const target of Object.values(paths).flat()) {
-    const rel = path25.relative(root, path25.join(root, baseUrl, target)).split(path25.sep).join("/");
+    const rel = path27.relative(root, path27.join(root, baseUrl, target)).split(path27.sep).join("/");
     const top = rel.split("/")[0];
     if (rel.startsWith("..") || NOT_SOURCE.has(top)) continue;
     if (top === "*" || top === "") {
       for (const entry of readdirSync4(root, { withFileTypes: true }))
         if (entry.isDirectory() && !NOT_SOURCE.has(entry.name) && !entry.name.startsWith(".")) {
-          if (hasSource(path25.join(root, entry.name))) dirs.add(entry.name);
+          if (hasSource(path27.join(root, entry.name))) dirs.add(entry.name);
         }
-    } else if (existsSync4(path25.join(root, top)) && statSync6(path25.join(root, top)).isDirectory()) {
+    } else if (existsSync6(path27.join(root, top)) && statSync6(path27.join(root, top)).isDirectory()) {
       dirs.add(top);
     }
   }
@@ -35154,8 +35446,8 @@ Full policy: ${DATA_HANDLING_URL}
 `;
 
 // src/next-config.ts
-import { existsSync as existsSync5, readFileSync as readFileSync10 } from "fs";
-import path26 from "path";
+import { existsSync as existsSync7, readFileSync as readFileSync11 } from "fs";
+import path28 from "path";
 
 // ../../node_modules/.pnpm/@babel+parser@8.0.7/node_modules/@babel/parser/lib/index.js
 var Position = class {
@@ -50913,7 +51205,7 @@ var NEXT_CONFIG_FILES = [
 ];
 function findNextConfig(root) {
   for (const name of NEXT_CONFIG_FILES) {
-    if (existsSync5(path26.join(root, name))) return name;
+    if (existsSync7(path28.join(root, name))) return name;
   }
   return null;
 }
@@ -50968,28 +51260,80 @@ ${importLine}`);
   return { status: "unsupported", reason: "it has no `export default` or `module.exports`" };
 }
 function readNextConfig(root, file2) {
-  return readFileSync10(path26.join(root, file2), "utf8");
+  return readFileSync11(path28.join(root, file2), "utf8");
 }
 
+// src/version.ts
+import { createRequire } from "module";
+var VERSION = createRequire(import.meta.url)("../package.json").version;
+
 // src/init-flow.ts
 var CONFIG_FILE = "revyse.config.json";
 var GITIGNORE_ENTRY = ".revyse/";
+var PACKAGES = ["revyse", "@revyse/next"];
+var INSTALL = {
+  npm: ["npm", "install", "--save-dev", "--no-audit", "--no-fund"],
+  pnpm: ["pnpm", "add", "--save-dev"],
+  yarn: ["yarn", "add", "--dev"],
+  bun: ["bun", "add", "--dev"]
+};
+var installCommand = (pm, specs) => [
+  ...INSTALL[pm],
+  ...specs
+];
+var runScript = (pm, script) => pm === "npm" ? `npm run ${script}` : `${pm} ${script}`;
 async function runInit(opts, io) {
   const { root } = opts;
-  const now = opts.now ?? (() => /* @__PURE__ */ new Date());
   const ask = (q) => opts.yes ? Promise.resolve(true) : io.confirm(q);
-  if (existsSync6(path27.join(root, CONFIG_FILE)) && !opts.force) {
-    io.warn(`${CONFIG_FILE} already exists. Use --force to re-run init.`);
-    return { status: "exists" };
+  let configured;
+  let status;
+  if (existsSync8(path29.join(root, CONFIG_FILE)) && !opts.force) {
+    const config3 = projectConfigSchema.parse(
+      JSON.parse(readFileSync12(path29.join(root, CONFIG_FILE), "utf8"))
+    );
+    io.log(`${CONFIG_FILE} is already here; checking the rest of the setup.`);
+    if (!config3.dataDisclosure || config3.dataDisclosure.version < DISCLOSURE_VERSION)
+      io.warn(
+        "How Revyse handles your code has changed: run `npx revyse init --force` to review it."
+      );
+    configured = { config: config3, nextConfigEdited: false };
+    status = "exists";
+  } else {
+    configured = await configure(opts, io, ask);
+    if (!configured) return { status: "declined" };
+    status = "initialized";
+  }
+  const { config: config2 } = configured;
+  const nextjs = config2.framework === "nextjs";
+  let installed = !nextjs;
+  if (nextjs && opts.setup) installed = await installPackages(root, config2, opts.setup, io, ask);
+  let connection = null;
+  if (opts.setup && opts.connect !== false)
+    connection = await connectProject(root, config2, opts.setup, io, ask);
+  if (nextjs) {
+    const steps = [
+      ...installed ? [] : [`install ${PACKAGES.join(" and ")} as dev dependencies`],
+      ...connection ? [] : ["connect it to Revyse with `npx revyse login`"]
+    ];
+    io.log(
+      steps.length === 0 ? `
+Done. Start your app as usual (\`${runScript(config2.packageManager, config2.scripts.dev ?? "dev")}\`) and click the Revyse button.` : `
+Next: ${steps.join(", then ")}. Then start your app as usual.`
+    );
   }
-  const { config: config2, warnings } = detectProject(root);
+  return { status, ...configured, connection };
+}
+async function configure(opts, io, ask) {
+  const { root } = opts;
+  const now = opts.now ?? (() => /* @__PURE__ */ new Date());
+  const { config: config2, warnings, optional: optional2 } = detectProject(root);
   io.log(`Detected ${config2.framework} (${config2.packageManager})`);
   io.log(`Source directories: ${config2.sourceDirs.join(", ")}`);
   for (const w of warnings) io.warn(`warning: ${w}`);
   io.log(DISCLOSURE_TEXT);
   if (!await ask("Do you accept how Revyse handles your code?")) {
     io.log("Nothing was changed. Run `revyse init` again if you change your mind.");
-    return { status: "declined" };
+    return null;
   }
   const accepted = {
     ...config2,
@@ -51022,46 +51366,187 @@ Revyse needs this change to ${file2} (it only has an effect in \`next dev\`):
         );
         if (await ask(`Apply this change to ${file2}?`))
           nextConfigEdit = { file: file2, code: result.code };
-        else
-          io.log(
-            `Skipped. Wrap the export of ${file2} with withRevyse() yourself before \`revyse dev\`.`
-          );
+        else io.log(`Skipped. Wrap the export of ${file2} with withRevyse() yourself.`);
       }
     }
   }
-  writeFileSync5(path27.join(root, CONFIG_FILE), `${JSON.stringify(accepted, null, 2)}
+  writeFileSync6(path29.join(root, CONFIG_FILE), `${JSON.stringify(accepted, null, 2)}
 `);
-  if (nextConfigEdit) writeFileSync5(path27.join(root, nextConfigEdit.file), nextConfigEdit.code);
+  if (nextConfigEdit) writeFileSync6(path29.join(root, nextConfigEdit.file), nextConfigEdit.code);
   if (ensureGitignored(root))
     io.log(`Added ${GITIGNORE_ENTRY} to .gitignore (local change history).`);
   io.log(`
 Wrote ${CONFIG_FILE}.`);
-  if (config2.framework === "nextjs") {
+  const checks = [
+    ...config2.scripts.typecheck ? ["typecheck"] : [],
+    ...config2.scripts.lint ? ["lint"] : [],
+    ...config2.framework === "nextjs" ? ["the page in a browser"] : []
+  ];
+  if (checks.length > 0)
     io.log(
-      hasDependency(root, "@revyse/next") ? "Next: run `revyse dev`, then start your app's dev server as usual." : `Next: add the dev dependency \`@revyse/next\` with ${config2.packageManager}, then run \`revyse dev\`.`
+      `After each change, Revyse checks ${checks.join(", ").replace(/, ([^,]*)$/, " and $1")}.`
     );
+  if (optional2.test)
+    io.log(
+      `Your tests (\`${optional2.test}\`) don't run on each change, so changes stay fast. To run them too, add "test": "${optional2.test}" to scripts in ${CONFIG_FILE}.`
+    );
+  return { config: accepted, nextConfigEdited: Boolean(nextConfigEdit) };
+}
+function olderThan(a2, b) {
+  const parse4 = (v) => /^(\d+)\.(\d+)\.(\d+)/.exec(v)?.slice(1).map(Number);
+  const [x, y] = [parse4(a2), parse4(b)];
+  if (!x || !y) return false;
+  for (let i2 = 0; i2 < 3; i2++) if (x[i2] !== y[i2]) return x[i2] < y[i2];
+  return false;
+}
+function installedVersion(root, name) {
+  try {
+    const pkg = JSON.parse(
+      readFileSync12(path29.join(root, "node_modules", name, "package.json"), "utf8")
+    );
+    return pkg.version ?? null;
+  } catch {
+    return null;
   }
-  return { status: "initialized", config: accepted, nextConfigEdited: Boolean(nextConfigEdit) };
+}
+async function installPackages(root, config2, setup2, io, ask) {
+  const listed2 = devDependencies(root);
+  const todo = PACKAGES.flatMap((name) => {
+    const installed = installedVersion(root, name);
+    if (!listed2[name] || !installed) return [{ name, from: null }];
+    return olderThan(installed, VERSION) ? [{ name, from: installed }] : [];
+  });
+  if (todo.length === 0) return true;
+  const specs = todo.map(({ name }) => `${name}@${VERSION}`);
+  const command = installCommand(config2.packageManager, specs).join(" ");
+  const installs = todo.filter((t) => !t.from).map((t) => t.name);
+  const updates = todo.filter((t) => t.from).map((t) => `${t.name} from ${t.from} to ${VERSION}`);
+  const what = [
+    ...installs.length ? [`install ${installs.join(" and ")} as dev dependencies`] : [],
+    ...updates.length ? [`update ${updates.join(" and ")}`] : []
+  ].join(", and ");
+  if (!await ask(`${what[0].toUpperCase()}${what.slice(1)} (${command})?`)) {
+    io.log(`Skipped. Run it yourself: ${command}`);
+    return false;
+  }
+  try {
+    await setup2.install(root, config2.packageManager, specs);
+    io.log(`Revyse's packages are at ${VERSION}.`);
+    return true;
+  } catch (err) {
+    io.warn(`Couldn't install them (${err.message}). Run: ${command}`);
+    return false;
+  }
+}
+async function connectProject(root, config2, setup2, io, ask) {
+  const existing = await setup2.connection(root).catch(() => null);
+  if (existing) {
+    io.log(`Connected to Revyse: project "${existing.project}" (${existing.email}).`);
+    return existing;
+  }
+  if (!await ask(
+    "Connect this app to Revyse? Your browser opens to sign in and create the project."
+  ))
+    return null;
+  try {
+    const connection = await setup2.connect(root, {
+      name: projectName(root),
+      framework: config2.framework,
+      packageManager: config2.packageManager
+    });
+    io.log(`Connected to Revyse: project "${connection.project}" (${connection.email}).`);
+    return connection;
+  } catch (err) {
+    io.warn(`Couldn't connect to Revyse (${err.message}).`);
+    return null;
+  }
+}
+function projectName(root) {
+  const name = readPackageJson(root)?.name?.replace(/^@[^/]+\//, "").trim();
+  return (name || path29.basename(root)).slice(0, 100);
 }
 function ensureGitignored(root) {
-  const file2 = path27.join(root, ".gitignore");
-  const current = existsSync6(file2) ? readFileSync11(file2, "utf8") : "";
+  const file2 = path29.join(root, ".gitignore");
+  const current = existsSync8(file2) ? readFileSync12(file2, "utf8") : "";
   const lines = current.split(/\r?\n/).map((l) => l.trim());
   if (lines.includes(GITIGNORE_ENTRY) || lines.includes(".revyse")) return false;
   const separator = current === "" ? "" : current.endsWith("\n") ? "\n" : "\n\n";
-  writeFileSync5(file2, `${current}${separator}# Revyse local state
+  writeFileSync6(file2, `${current}${separator}# Revyse local state
 ${GITIGNORE_ENTRY}
 `);
   return true;
 }
-function hasDependency(root, name) {
+function readPackageJson(root) {
   try {
-    const pkg = JSON.parse(readFileSync11(path27.join(root, "package.json"), "utf8"));
-    return Boolean(pkg.dependencies?.[name] ?? pkg.devDependencies?.[name]);
+    return JSON.parse(readFileSync12(path29.join(root, "package.json"), "utf8"));
   } catch {
-    return false;
+    return null;
+  }
+}
+var devDependencies = (root) => readPackageJson(root)?.devDependencies ?? {};
+
+// src/connect.ts
+function openBrowser(url2) {
+  if (process.env.BROWSER === "none") return;
+  const [command, args] = process.platform === "darwin" ? ["open", [url2]] : process.platform === "win32" ? ["cmd", ["/c", "start", "", url2.replace(/&/g, "^&")]] : ["xdg-open", [url2]];
+  try {
+    const child = spawn2(command, args, { stdio: "ignore", detached: true });
+    child.on("error", () => {
+    });
+    child.unref();
+  } catch {
+  }
+}
+function activationUrl(verificationUriComplete, suggestion) {
+  if (!suggestion) return verificationUriComplete;
+  const url2 = new URL(verificationUriComplete);
+  url2.searchParams.set("name", suggestion.name);
+  url2.searchParams.set("framework", suggestion.framework);
+  url2.searchParams.set("pm", suggestion.packageManager);
+  return url2.toString();
+}
+async function connectInBrowser(opts) {
+  const { token, projectId } = await deviceLogin({
+    client: createApiClient({ apiUrl: opts.apiUrl }),
+    clientName: `revyse-cli on ${hostname3()}`,
+    onCode: ({ userCode, verificationUriComplete }) => {
+      const url2 = activationUrl(verificationUriComplete, opts.suggestion);
+      opts.log(`
+Your browser is opening to connect this app to Revyse. If it doesn't, go to:
+`);
+      opts.log(`  ${url2}
+`);
+      opts.log(`and check the code matches: ${userCode}
+`);
+      opts.log("Waiting for you to approve it\u2026");
+      (opts.open ?? openBrowser)(url2);
+    }
+  });
+  saveCredential(opts.root, { apiUrl: opts.apiUrl, token, projectId });
+  const me = await createApiClient({ apiUrl: opts.apiUrl, token }).get("/api/cli/whoami");
+  return { email: me.user.email, project: me.project.name };
+}
+async function currentConnection(root) {
+  const cred = loadCredential(root);
+  if (!cred) return null;
+  try {
+    const me = await createApiClient(cred).get("/api/cli/whoami");
+    return { email: me.user.email, project: me.project.name };
+  } catch (err) {
+    if (err instanceof ApiError && (err.status === 401 || err.status === 404)) return null;
+    throw err;
   }
 }
+function initSetup(apiUrl, log) {
+  return {
+    install: async (root, pm, specs) => {
+      const [command, ...args] = installCommand(pm, specs);
+      await execa(command, args, { cwd: root, stdio: "inherit" });
+    },
+    connection: currentConnection,
+    connect: (root, suggestion) => connectInBrowser({ root, apiUrl, suggestion, log })
+  };
+}
 
 // src/prompt.ts
 import { createInterface } from "readline";
@@ -51092,18 +51577,29 @@ function createPrompter(input2 = process.stdin, output2 = process.stdout) {
 }
 
 // src/commands/init.ts
-var initCommand = new Command("init").description("Detect your project, review the data disclosure, and set up Revyse").option("--force", "re-run init when revyse.config.json exists").option("-y, --yes", "accept the disclosure and proposed edits without prompting").action(async (options) => {
-  const prompter = createPrompter();
-  try {
-    const outcome = await runInit(
-      { root: process.cwd(), force: options.force, yes: options.yes },
-      { log: (m) => console.log(m), warn: (m) => console.warn(m), confirm: prompter.confirm }
-    );
-    if (outcome.status !== "initialized") process.exitCode = 1;
-  } finally {
-    prompter.close();
+var initCommand = new Command("init").description(
+  "Set Revyse up in this app: the data disclosure, next.config, the packages, and the project on Revyse"
+).option("--force", "re-run the disclosure and next.config steps when revyse.config.json exists").option("-y, --yes", "accept the disclosure and proposed edits without prompting").option("--no-connect", "set up without connecting to Revyse (CI, offline)").option("--api-url <url>", "Revyse API URL (default: $REVYSE_API_URL or https://revyse.dev)").action(
+  async (options) => {
+    const prompter = createPrompter();
+    const log = (m) => console.log(m);
+    try {
+      const outcome = await runInit(
+        {
+          root: process.cwd(),
+          force: options.force,
+          yes: options.yes,
+          connect: options.connect,
+          setup: initSetup(resolveApiUrl(options.apiUrl), log)
+        },
+        { log, warn: (m) => console.warn(m), confirm: prompter.confirm }
+      );
+      if (outcome.status === "declined") process.exitCode = 1;
+    } finally {
+      prompter.close();
+    }
   }
-});
+);
 
 // src/commands/change.ts
 var changeCommand = new Command("change").description("Headless change operations");
@@ -51117,7 +51613,7 @@ var common2 = (cmd) => cmd.requiredOption("--api-url <url>", "Revyse API URL").r
 function setup(opts) {
   const root = process.cwd();
   const config2 = projectConfigSchema.parse(
-    JSON.parse(readFileSync12(path28.join(root, CONFIG_FILE), "utf8"))
+    JSON.parse(readFileSync13(path30.join(root, CONFIG_FILE), "utf8"))
   );
   const token = opts.token ?? process.env.REVYSE_TOKEN;
   if (!token) throw new Error("A project token is required (--token or REVYSE_TOKEN)");