rewritable 0.3.0 → 0.5.0

package/src/skin.mjs

@@ -0,0 +1,350 @@
+// `rwa skin <file> NAME` — the deterministic, model-free theme-swap command.
+// It applies a preset's <style data-rwa-skin> block to an existing rewritable
+// through the canonical applyPlan write path, so it inherits atomic write,
+// frozen-zone safety, and the file-error surface (not_found/read_error/
+// not_a_rewritable, exit 2) identically to `rwa edit` / `rwa doc`.
+//
+// Envelope choice is forced by the structural-shape guard (apply_edits rejects a
+// change to the <style>/<script> count):
+//   - block ABSENT  → INSERT: adding a <style> changes the count, so route the
+//                     first skin through replace_document (the shape-exempt path),
+//                     block prepended as the leading child of INLINE_DOC.
+//   - block PRESENT → SWAP: rewrite the one block's bytes; <style> count is
+//                     unchanged, so a surgical apply_edits (find=old, replace=new).
+//   - reset         → remove the one block (count drops) via replace_document.
+// Every write lands as ONE commit tagged actor `skin:NAME` / `skin:reset`.
+// This is v1 (theme-only); the always-on content-aware L1 restyle is a later
+// phase (see docs/plans/2026-06-03-skinning-design.md).
+
+import { readFile } from 'node:fs/promises';
+import { extractInlineDoc } from './seed.mjs';
+import { applyPlan, CliError } from './edit.mjs';
+import { skinByName, RWA_SKIN_RECIPES } from './skins.mjs';
+import { applyEdits, RwaEditError, findFrozenZones } from './apply-edits.mjs';
+import { compileDslPlan } from './dsl-compiler.mjs';
+
+// The single skin block (any data-rwa-skin value). CSS cannot contain a literal
+// </style>, so the non-greedy match is exact; the `data-rwa-skin=` requirement
+// means an author's own <style> is never matched. These mirror the seed's
+// RWA_SKIN_BLOCK_RE / RWA_SKIN_BLOCK_TRAIL_RE (seeds/rewritable.html ~:2729).
+const SKIN_BLOCK_RE = /<style\b[^>]*\bdata-rwa-skin=["'][^"']*["'][^>]*>[\s\S]*?<\/style>/i;
+// Same, plus an optional trailing newline, so reset removes the block cleanly.
+const SKIN_BLOCK_TRAIL_RE = /<style\b[^>]*\bdata-rwa-skin=["'][^"']*["'][^>]*>[\s\S]*?<\/style>\n?/i;
+
+// ── deskin + splice (MANUAL MIRROR of seeds/rewritable.html ~:2731–2851) ──────
+// spliceSkinBlock / deskinDoc (+ its parser-free helpers) are copied
+// BYTE-IDENTICAL from the seed (the canonical site for the browser ✦ gallery's
+// L1). No cmp gate; the pin test cli/tests/skin-l1-seed-mirror.test.mjs extracts
+// the function bodies from the seed and compares them against these so drift
+// fails the suite loudly. When the seed changes, re-copy here. The seed names
+// the two regexes RWA_SKIN_BLOCK_RE / RWA_SKIN_BLOCK_TRAIL_RE; the CLI declares
+// them above without the RWA_ prefix — the mirror test normalizes that prefix.
+
+// spliceSkinBlock — swap an existing <style data-rwa-skin> block for `theme`, or
+// prepend it. Splice-based (not String.replace) so theme bytes land verbatim
+// (a $-sequence in CSS would otherwise be mangled). Shared by the L1 compose
+// transform in applySkinL1; mirrors applySkin's deterministic L0 swap/insert.
+function spliceSkinBlock(doc, theme) {
+  const m = doc.match(SKIN_BLOCK_RE);
+  if (!m) return theme + '\n' + doc;
+  const i = doc.indexOf(m[0]);
+  return doc.slice(0, i) + theme + doc.slice(i + m[0].length);
+}
+// deskinDoc — deterministically strip a PRIOR skin so a re-skin/reset starts clean,
+// regardless of model compliance (closes the v2 best-effort de-skin limitation):
+//   1. remove the <style data-rwa-skin> block; 2. balanced-tag UNWRAP pure sk-*
+//   div/span wrappers (keep inner — handles nesting like sk-stat-row > sk-stat);
+//   3. strip sk-* tokens from mixed class attrs. Parser-free, idempotent, byte-exact
+//   for non-sk content. applySkinL1 runs the agent on deskinDoc(cur); resetSkin
+//   commits deskinDoc(doc). (Stat-tile recipes split text, so their unwrap joins it —
+//   a known minor lossiness, far better than orphan-wrapper accumulation.)
+const SK_TOKEN_RE = /^sk-[a-z][a-z0-9-]*$/;
+const isSkToken = (tok) => SK_TOKEN_RE.test(tok);
+function readClassAttr(tagInner) {
+  const m = /(^|\s)class\s*=\s*("([^"]*)"|'([^']*)')/i.exec(tagInner);
+  if (!m) return null;
+  return m[3] !== undefined ? m[3] : m[4];
+}
+function classIsPureSk(classValue) {
+  const toks = classValue.trim().split(/\s+/).filter(Boolean);
+  return toks.length > 0 && toks.every(isSkToken);
+}
+// quote-aware: a `>` inside a quoted attr value is skipped. Returns index past `>`.
+function skEndOfTag(s, lt) {
+  let quote = null;
+  for (let i = lt + 1; i < s.length; i++) {
+    const c = s[i];
+    if (quote) { if (c === quote) quote = null; }
+    else if (c === '"' || c === "'") quote = c;
+    else if (c === '>') return i + 1;
+  }
+  return -1;
+}
+function skReadTagName(s, start) {
+  let i = start, name = '';
+  while (i < s.length) {
+    const c = s[i];
+    if (/[a-zA-Z0-9]/.test(c) || c === '-' || c === ':') { name += c; i++; } else break;
+  }
+  return name === '' ? null : name;
+}
+// balanced same-name close, accounting for nested same-name opens.
+function skFindMatchingClose(s, openTagEnd, tag) {
+  let depth = 1, i = openTagEnd;
+  const tlc = tag.toLowerCase();
+  while (i < s.length) {
+    const lt = s.indexOf('<', i);
+    if (lt === -1) return null;
+    const after = s[lt + 1];
+    if (after === '/') {
+      const name = skReadTagName(s, lt + 2);
+      const tagEnd = skEndOfTag(s, lt);
+      if (tagEnd === -1) return null;
+      if (name !== null && name.toLowerCase() === tlc) { depth--; if (depth === 0) return { closeStart: lt, closeEnd: tagEnd }; }
+      i = tagEnd;
+    } else if (after === '!') {
+      if (s.startsWith('<!--', lt)) { const ce = s.indexOf('-->', lt + 4); i = ce === -1 ? s.length : ce + 3; }
+      else { const tagEnd = skEndOfTag(s, lt); i = tagEnd === -1 ? s.length : tagEnd; }
+    } else {
+      const name = skReadTagName(s, lt + 1);
+      const tagEnd = skEndOfTag(s, lt);
+      if (tagEnd === -1) return null;
+      if (name !== null && name.toLowerCase() === tlc) depth++;
+      i = tagEnd;
+    }
+  }
+  return null;
+}
+function unwrapPureSkWrappers(doc) {
+  let s = doc, i = 0;
+  while (i < s.length) {
+    const lt = s.indexOf('<', i);
+    if (lt === -1) break;
+    const after = s[lt + 1];
+    if (after === '/' || after === '!' || after === '?') {
+      if (s.startsWith('<!--', lt)) { const ce = s.indexOf('-->', lt + 4); i = ce === -1 ? s.length : ce + 3; }
+      else { const te = skEndOfTag(s, lt); i = te === -1 ? s.length : te; }
+      continue;
+    }
+    const name = skReadTagName(s, lt + 1);
+    const tagEnd = skEndOfTag(s, lt);
+    if (name === null || tagEnd === -1) { i = lt + 1; continue; }
+    const lname = name.toLowerCase();
+    if (lname === 'div' || lname === 'span') {
+      const tagInner = s.slice(lt + 1 + name.length, tagEnd - 1);
+      const classValue = readClassAttr(tagInner);
+      if (classValue !== null && classIsPureSk(classValue)) {
+        const match = skFindMatchingClose(s, tagEnd, lname);
+        if (match) {
+          s = s.slice(0, lt) + s.slice(tagEnd, match.closeStart) + s.slice(match.closeEnd);
+          i = lt; // restart at exposed inner (may begin with a nested wrapper)
+          continue;
+        }
+      }
+    }
+    i = tagEnd;
+  }
+  return s;
+}
+function stripSkClassTokens(doc) {
+  return doc.replace(/(\s*)class\s*=\s*("([^"]*)"|'([^']*)')/gi, (full, lead, quoted, dq, sq) => {
+    const quoteChar = dq !== undefined ? '"' : "'";
+    const value = dq !== undefined ? dq : sq;
+    const kept = value.split(/\s+/).filter(Boolean).filter((t) => !isSkToken(t));
+    return kept.length === 0 ? '' : lead + 'class=' + quoteChar + kept.join(' ') + quoteChar;
+  });
+}
+export function deskinDoc(doc) {
+  if (typeof doc !== 'string') return doc;
+  let s = doc.replace(SKIN_BLOCK_TRAIL_RE, '');
+  s = unwrapPureSkWrappers(s);
+  s = stripSkClassTokens(s);
+  return s;
+}
+
+/**
+ * Apply a named preset (or `reset`) to a rewritable on disk, deterministically.
+ *
+ * @param {string} filePath — path to the target .html
+ * @param {string} action — a skin name (see cli/src/skins.mjs) or the literal `reset`
+ * @returns {Promise<{exitCode:0, mode:'insert'|'swap'|'reset'|'noop', skin:string|null}>}
+ * @throws {CliError} exit 2 on file / non-rewritable / unknown-skin errors
+ */
+export async function skinCmd(filePath, action) {
+  // Read + validate the target identically to edit.mjs/doc.mjs (file errors first).
+  let fileText;
+  try {
+    fileText = await readFile(filePath, 'utf8');
+  } catch (e) {
+    if (e && e.code === 'ENOENT') throw new CliError(2, 'not_found', { path: filePath });
+    throw new CliError(2, 'read_error', { path: filePath, errno: e && e.code, message: e && e.message });
+  }
+  let currentDoc;
+  try {
+    currentDoc = extractInlineDoc(fileText);
+  } catch (_e) {
+    throw new CliError(2, 'not_a_rewritable', { path: filePath });
+  }
+
+  const existing = currentDoc.match(SKIN_BLOCK_RE);
+
+  if (action === 'reset') {
+    // reset now mirrors the seed's resetSkin: deskinDoc clears the theme block
+    // AND any sk-* wrappers/classes a prior L1 restyle left, regardless of the
+    // --l1 flag. A doc with no theme block and no sk-* hooks is byte-unchanged
+    // by deskinDoc → noop (no write), preserving the idempotent reset contract.
+    const newDoc = deskinDoc(currentDoc);
+    if (newDoc === currentDoc) return { exitCode: 0, mode: 'noop', skin: null };
+    await applyPlan(filePath, { version: 'rwa-edit/1', doc: newDoc, reason: 'skin:reset' });
+    return { exitCode: 0, mode: 'reset', skin: null };
+  }
+
+  const skin = skinByName(action); // throws exit-2 on unknown name
+
+  if (existing) {
+    await applyPlan(filePath, {
+      version: 'rwa-edit/1',
+      edits: [{ find: existing[0], replace: skin.theme }],
+    });
+    return { exitCode: 0, mode: 'swap', skin: skin.name };
+  }
+
+  const newDoc = skin.theme + '\n' + currentDoc;
+  await applyPlan(filePath, { version: 'rwa-edit/1', doc: newDoc, reason: `skin:${skin.name}` });
+  return { exitCode: 0, mode: 'insert', skin: skin.name };
+}
+
+/**
+ * Apply a named preset with the opt-in L1 (agent-driven, content-aware) restyle.
+ * Mirrors the seed's applySkinL1 (seeds/rewritable.html ~:2908) but adapted to
+ * the CLI's no-mid-stream-tool-call agent loop (runAgentLoop returns the
+ * envelope WITHOUT writing — that IS the seed's noCommit accumulate seam):
+ *
+ *   1. deskinDoc(currentDoc) → cleanBase  (deterministic, so a re-skin starts
+ *      clean regardless of model compliance).
+ *   2. runAgentLoop(recipe, cleanBase) → an apply_edits / DSL envelope (additive
+ *      sk-* hooks). Applied IN MEMORY against cleanBase via applyEdits — NOT
+ *      applyPlan, so nothing is written yet. replace_document is refused (the
+ *      agent must not rewrite wholesale), mirroring the seed's
+ *      compose_requires_apply_edits guard.
+ *   3. spliceSkinBlock(agentDoc, theme) → finalDoc.
+ *   4. ONE applyPlan(filePath, {doc: finalDoc, reason}) — a single replace_document
+ *      commit (theme + wrappers land together; one undo frame in the browser).
+ *
+ * Graceful fallback: if the agent declines / produces nothing usable, the theme
+ * is still spliced onto cleanBase and committed once (theme-only), so a skin
+ * always lands. The ONLY loud failure is a missing/unreachable backend — that is
+ * surfaced to the caller (bin maps it to exit 4) rather than silently degrading,
+ * matching how `rwa edit`'s instruction path treats a missing backend.
+ *
+ * @param {string} filePath — path to the target .html
+ * @param {string} name — a skin name (see cli/src/skins.mjs); `reset` is not an L1 action
+ * @param {object} agentOpts — { systemPrompt, toolSchemas, backend, frozenZoneNames?, onRetry? }
+ *   — the same shape bin/rwa.mjs builds for `rwa edit`'s instruction path.
+ * @returns {Promise<{exitCode:0, mode:'l1'|'theme-only', skin:string, degraded?:boolean}>}
+ * @throws {CliError} exit 2 (file / non-rewritable / unknown-skin); exit 4 (backend)
+ */
+export async function skinCmdL1(filePath, name, agentOpts) {
+  // File + non-rewritable validation, same surface as skinCmd.
+  let fileText;
+  try {
+    fileText = await readFile(filePath, 'utf8');
+  } catch (e) {
+    if (e && e.code === 'ENOENT') throw new CliError(2, 'not_found', { path: filePath });
+    throw new CliError(2, 'read_error', { path: filePath, errno: e && e.code, message: e && e.message });
+  }
+  let currentDoc;
+  try {
+    currentDoc = extractInlineDoc(fileText);
+  } catch (_e) {
+    throw new CliError(2, 'not_a_rewritable', { path: filePath });
+  }
+
+  const skin = skinByName(name);           // throws exit-2 on unknown name
+  const recipe = RWA_SKIN_RECIPES[name];   // every shipped preset has one
+
+  // Deterministically de-skin any PRIOR skin first, so re-skin starts clean
+  // (the seed runs deskinDoc on the base before driving the agent).
+  const cleanBase = deskinDoc(currentDoc);
+
+  // Drive the agent over cleanBase. runAgentLoop does NOT write — it returns the
+  // first valid envelope. Frozen-zone names come from the CURRENT doc so the
+  // model sees the same list the apply guard enforces.
+  const { runAgentLoop, AgentError } = await import('./agent-loop.mjs');
+  let agentDoc = null;     // the agent's restyled doc (in memory), or null on decline/failure
+  let degraded = false;    // true when we fell back to theme-only
+  try {
+    const { envelope, toolName } = await runAgentLoop({
+      systemPrompt: agentOpts.systemPrompt,
+      toolSchemas: agentOpts.toolSchemas,
+      currentDoc: cleanBase,
+      instruction: recipe,
+      frozenZoneNames: agentOpts.frozenZoneNames || findFrozenZones(cleanBase).map(z => z.name),
+      backend: agentOpts.backend,
+      onRetry: agentOpts.onRetry,
+    });
+    agentDoc = composeAgentDoc(envelope, toolName, cleanBase);
+  } catch (e) {
+    // Split the two failure classes the way the task spec (and CLI convention)
+    // requires:
+    //   - backend_error (no key handled upstream / unreachable host / HTTP error)
+    //     → LOUD. Propagate so bin maps it to exit 4. The seed can degrade an
+    //     unreachable backend to theme-only because it has a bridge fallback; the
+    //     CLI has none, so "L1 with no usable backend" is a real error, matching
+    //     how `rwa edit`'s instruction path treats a missing/unreachable backend.
+    //   - no_envelope_after_retries (backend WAS reached but the model never
+    //     produced a usable envelope — declined / invalid JSON every turn) → the
+    //     "agent declines / produces nothing usable" case: GRACEFUL theme-only,
+    //     so the skin still lands. Mirrors the seed's model_declined degrade.
+    if (e && e.subcode === 'backend_error') {
+      throw new CliError(4, e.subcode, e.details);
+    }
+    if (e && e.subcode === 'no_envelope_after_retries') { agentDoc = null; degraded = true; }
+    else if (e instanceof CliError) throw e;
+    // A compose-stage RwaEditError (agent edits invalid against cleanBase) is a
+    // graceful theme-only fallback — the skin still lands. Mirrors the seed,
+    // where an invalid agent edit degrades to a theme-only commit.
+    else if (e instanceof RwaEditError) { agentDoc = null; degraded = true; }
+    else throw e;
+  }
+  if (agentDoc === null) degraded = true;
+
+  // compose-then-commit: splice the deterministic theme block onto the agent's
+  // output (or onto cleanBase when degraded) and commit ONCE. replace_document
+  // is shape-exempt so the runtime-added <style> is allowed (the agent's
+  // in-memory apply_edits could not add one — structuralShape blocked it).
+  const finalDoc = spliceSkinBlock(agentDoc !== null ? agentDoc : cleanBase, skin.theme);
+  await applyPlan(filePath, {
+    version: 'rwa-edit/1',
+    doc: finalDoc,
+    reason: `skin:${skin.name} (theme+L1)`,
+  });
+  return { exitCode: 0, mode: degraded ? 'theme-only' : 'l1', skin: skin.name, degraded };
+}
+
+// composeAgentDoc — apply the agent's envelope IN MEMORY against cleanBase
+// (no write). Mirrors the seed's compose-mode dispatch in modify(): apply_edits
+// and the DSL's apply_edits compile path are allowed; replace_document (raw or a
+// DSL escape op) is refused with compose_requires_apply_edits so the agent can't
+// rewrite wholesale and bypass the additive / structural-shape guard. Returns
+// the restyled doc string. Throws RwaEditError on an invalid edit (caught by the
+// caller → graceful theme-only fallback) or compose_requires_apply_edits.
+function composeAgentDoc(envelope, toolName, cleanBase) {
+  if (toolName === 'apply_dsl_plan') {
+    let compiled;
+    try {
+      compiled = compileDslPlan(envelope, cleanBase);
+    } catch (e) {
+      throw new RwaEditError(e.code || 'dsl_compile_error', null, { message: e.message });
+    }
+    if (compiled.tool === 'replace_document') {
+      throw new RwaEditError('compose_requires_apply_edits');
+    }
+    return applyEdits(cleanBase, compiled.envelope.edits);
+  }
+  if (toolName === 'apply_edits') {
+    return applyEdits(cleanBase, envelope.edits);
+  }
+  // replace_document (or any other tool) — refused in compose mode.
+  throw new RwaEditError('compose_requires_apply_edits');
+}

package/src/skins.mjs

@@ -0,0 +1,274 @@
+// The canonical preset library — the SINGLE SOURCE the CLI reads skins from
+// (and, later, the runtime gallery + service `/import` mirror, pinned by test).
+// Zero-dep, pure data, so the in-package CLI reads it offline and a mirror can
+// embed just the bytes. See docs/plans/2026-06-03-skinning-design.md.
+//
+// A skin's `theme` is ONE self-contained `<style data-rwa-skin="NAME">` block:
+// CSS-variable + element rules scoped to `#rwa-doc-mount` (NOT `:root`, so the
+// runtime chrome keeps the frozen light palette — a dark skin re-tints only the
+// document). System fonts only; no web fonts, no external refs (self-contained).
+//
+// v1 is deterministic THEME-ONLY: the blocks below carry no `sk-*` L1 hook
+// rules — those land with the always-on content-aware restyle (v2), when the
+// markup pass actually attaches the hook classes. Keeping v1 hook-free avoids
+// shipping dead CSS. Values mirror docs/plans/2026-06-03-skinning-design.md
+// (Preset Library), re-scoped from the illustrative `.rwa-skin-NAME` form to the
+// canonical `#rwa-doc-mount` model.
+
+export const SKINS = Object.freeze({
+  'notion-clean': {
+    name: 'notion-clean',
+    label: 'Notion Clean',
+    swatch: ['#ffffff', '#37352f', '#2383e2'],
+    theme: `<style data-rwa-skin="notion-clean">
+#rwa-doc-mount{
+  --nc-ink:#37352f; --nc-soft:#6b6b6b; --nc-faint:#9b9a97; --nc-line:#ededec;
+  --nc-bg:#ffffff; --nc-tint:#f7f6f3; --nc-accent:#2383e2;
+  font-family:-apple-system,BlinkMacSystemFont,'Segoe UI',Roboto,sans-serif;
+  color:var(--nc-ink); line-height:1.7;
+}
+#rwa-doc-mount article{max-width:740px;margin:72px auto;padding:0 40px;}
+#rwa-doc-mount h1{font-size:2.5rem;font-weight:700;letter-spacing:-.02em;line-height:1.15;margin:1.4em 0 .3em;color:var(--nc-ink);}
+#rwa-doc-mount h2{font-size:1.5rem;font-weight:600;letter-spacing:-.01em;margin:2em 0 .3em;color:var(--nc-ink);}
+#rwa-doc-mount h3{font-size:1.2rem;font-weight:600;margin:1.6em 0 .25em;color:var(--nc-ink);}
+#rwa-doc-mount h4,#rwa-doc-mount h5,#rwa-doc-mount h6{font-weight:600;color:var(--nc-soft);margin:1.3em 0 .2em;}
+#rwa-doc-mount p{font-size:1rem;color:var(--nc-ink);margin:0 0 .9em;}
+#rwa-doc-mount a{color:var(--nc-ink);text-decoration:underline;text-decoration-color:var(--nc-faint);text-underline-offset:3px;}
+#rwa-doc-mount a:hover{text-decoration-color:var(--nc-accent);color:var(--nc-accent);}
+#rwa-doc-mount ul,#rwa-doc-mount ol{margin:0 0 .9em;padding-left:1.6em;color:var(--nc-ink);}
+#rwa-doc-mount li{margin:.25em 0;}
+#rwa-doc-mount blockquote{margin:1.2em 0;padding:.2em 0 .2em 1em;border-left:3px solid var(--nc-ink);color:var(--nc-soft);font-style:normal;}
+#rwa-doc-mount hr{border:0;border-top:1px solid var(--nc-line);margin:2.4em 0;}
+#rwa-doc-mount code{font-family:'SF Mono',Menlo,Monaco,ui-monospace,monospace;font-size:.85em;background:var(--nc-tint);color:#eb5757;padding:.15em .4em;border-radius:4px;}
+#rwa-doc-mount pre{background:var(--nc-tint);border:1px solid var(--nc-line);border-radius:8px;padding:16px 18px;}
+#rwa-doc-mount table{font-size:.95em;}
+#rwa-doc-mount th,#rwa-doc-mount td{border-bottom:1px solid var(--nc-line);padding:.55em .8em;}
+#rwa-doc-mount th{background:var(--nc-tint);color:var(--nc-soft);font-weight:600;}
+#rwa-doc-mount .sk-eyebrow{font-size:.8rem;font-weight:600;letter-spacing:.04em;text-transform:uppercase;color:var(--nc-accent);margin:0 0 .4em;}
+#rwa-doc-mount .sk-callout{margin:1.4em 0;padding:14px 18px;background:var(--nc-tint);border:1px solid var(--nc-line);border-radius:8px;color:var(--nc-soft);}
+</style>`,
+  },
+
+  'linear-dark': {
+    name: 'linear-dark',
+    label: 'Linear Dark',
+    swatch: ['#08090d', '#e9eaee', '#7c6cff'],
+    theme: `<style data-rwa-skin="linear-dark">
+#rwa-doc-mount{
+  --ld-bg:#08090d; --ld-surf:#101117; --ld-line:#23252f;
+  --ld-ink:#e9eaee; --ld-soft:#a0a3ad; --ld-faint:#6a6d78;
+  --ld-accent:#7c6cff; --ld-accent-2:#5e6ad2;
+  background:var(--ld-bg); color:var(--ld-ink);
+  font-family:-apple-system,BlinkMacSystemFont,'Segoe UI',Roboto,sans-serif;
+  line-height:1.65;
+}
+#rwa-doc-mount article{max-width:720px;margin:56px auto;padding:0 36px;}
+#rwa-doc-mount h1{font-size:2.2rem;font-weight:600;letter-spacing:-.025em;line-height:1.15;color:#fff;margin:1.3em 0 .35em;}
+#rwa-doc-mount h2{font-size:1.4rem;font-weight:600;letter-spacing:-.01em;color:var(--ld-ink);margin:2em 0 .35em;}
+#rwa-doc-mount h3{font-size:1.12rem;font-weight:600;color:var(--ld-soft);margin:1.6em 0 .3em;}
+#rwa-doc-mount h4,#rwa-doc-mount h5,#rwa-doc-mount h6{font-family:'SF Mono',Menlo,monospace;font-size:.78rem;font-weight:600;letter-spacing:.08em;text-transform:uppercase;color:var(--ld-faint);margin:1.4em 0 .3em;}
+#rwa-doc-mount p{color:var(--ld-soft);margin:0 0 1em;}
+#rwa-doc-mount a{color:var(--ld-accent);text-decoration:none;}
+#rwa-doc-mount a:hover{color:#9b8eff;text-decoration:underline;text-underline-offset:3px;}
+#rwa-doc-mount ul,#rwa-doc-mount ol{color:var(--ld-soft);padding-left:1.5em;margin:0 0 1em;}
+#rwa-doc-mount li{margin:.3em 0;}
+#rwa-doc-mount li::marker{color:var(--ld-faint);}
+#rwa-doc-mount blockquote{margin:1.2em 0;padding:.4em 0 .4em 1em;border-left:2px solid var(--ld-accent);color:var(--ld-soft);font-style:normal;}
+#rwa-doc-mount hr{border:0;border-top:1px solid var(--ld-line);margin:2.2em 0;}
+#rwa-doc-mount code{font-family:'SF Mono',Menlo,monospace;font-size:.85em;background:var(--ld-surf);color:#c9c4ff;border:1px solid var(--ld-line);padding:.12em .4em;border-radius:5px;}
+#rwa-doc-mount pre{background:var(--ld-surf);border:1px solid var(--ld-line);border-radius:10px;padding:16px 18px;color:var(--ld-ink);}
+#rwa-doc-mount pre code{background:transparent;border:0;color:inherit;}
+#rwa-doc-mount table{font-size:.92em;}
+#rwa-doc-mount th{background:var(--ld-surf);color:var(--ld-soft);font-weight:600;border-bottom:1px solid var(--ld-line);padding:.55em .8em;}
+#rwa-doc-mount td{border-bottom:1px solid var(--ld-line);padding:.55em .8em;color:var(--ld-soft);}
+#rwa-doc-mount .sk-eyebrow{font-family:'SF Mono',Menlo,monospace;font-size:.72rem;font-weight:600;letter-spacing:.12em;text-transform:uppercase;color:var(--ld-accent);margin:0 0 .6em;}
+#rwa-doc-mount .sk-stat-row{display:flex;flex-wrap:wrap;gap:14px;margin:1.6em 0;}
+#rwa-doc-mount .sk-stat{display:flex;flex-direction:column;gap:2px;padding:12px 16px;background:var(--ld-surf);border:1px solid var(--ld-line);border-radius:10px;}
+#rwa-doc-mount .sk-stat b{font-size:1.45rem;font-weight:600;color:#fff;}
+#rwa-doc-mount .sk-stat span{font-family:'SF Mono',Menlo,monospace;font-size:.68rem;letter-spacing:.08em;text-transform:uppercase;color:var(--ld-faint);}
+</style>`,
+  },
+
+  'editorial-serif': {
+    name: 'editorial-serif',
+    label: 'Editorial Serif',
+    swatch: ['#fbfaf7', '#1c1a17', '#9a1b1b'],
+    theme: `<style data-rwa-skin="editorial-serif">
+#rwa-doc-mount{
+  --es-paper:#fbfaf7; --es-ink:#1c1a17; --es-soft:#4a463f; --es-faint:#857f74;
+  --es-line:#e0dbd0; --es-accent:#9a1b1b; --es-rule:#c8c0b2;
+  background:var(--es-paper);
+  font-family:Georgia,Cambria,'Times New Roman',Times,serif;
+  color:var(--es-ink); line-height:1.7;
+}
+#rwa-doc-mount article{max-width:680px;margin:80px auto;padding:0 36px;background:var(--es-paper);}
+#rwa-doc-mount h1{font-size:3rem;font-weight:700;line-height:1.08;letter-spacing:-.01em;color:var(--es-ink);margin:.3em 0 .35em;}
+#rwa-doc-mount h2{font-size:1.7rem;font-weight:700;color:var(--es-ink);margin:2em 0 .4em;line-height:1.2;}
+#rwa-doc-mount h3{font-size:1.3rem;font-weight:700;font-style:italic;color:var(--es-soft);margin:1.6em 0 .3em;}
+#rwa-doc-mount p{font-size:1.12rem;color:var(--es-ink);margin:0 0 1.1em;hyphens:auto;}
+#rwa-doc-mount a{color:var(--es-accent);text-decoration:underline;text-underline-offset:2px;text-decoration-thickness:1px;}
+#rwa-doc-mount a:hover{text-decoration-thickness:2px;}
+#rwa-doc-mount ul,#rwa-doc-mount ol{color:var(--es-ink);padding-left:1.4em;margin:0 0 1.1em;}
+#rwa-doc-mount li{margin:.35em 0;}
+#rwa-doc-mount blockquote{margin:1.5em 0;padding:.8em 1.2em;border-left:0;border-top:1px solid var(--es-rule);border-bottom:1px solid var(--es-rule);font-size:1.45rem;line-height:1.4;font-style:italic;color:var(--es-soft);text-align:center;}
+#rwa-doc-mount hr{border:0;border-top:1px solid var(--es-rule);margin:2.4em auto;width:120px;}
+#rwa-doc-mount code{font-family:'SF Mono',Menlo,monospace;font-size:.85em;background:#f1ede4;color:var(--es-accent);padding:.1em .35em;border-radius:3px;}
+#rwa-doc-mount pre{font-family:'SF Mono',Menlo,monospace;background:#f1ede4;border:1px solid var(--es-line);border-radius:4px;padding:14px 16px;font-size:.85rem;}
+#rwa-doc-mount table{font-size:.98em;}
+#rwa-doc-mount th{font-family:Georgia,serif;font-variant:small-caps;letter-spacing:.04em;color:var(--es-soft);border-bottom:2px solid var(--es-ink);background:transparent;padding:.5em .7em;}
+#rwa-doc-mount td{border-bottom:1px solid var(--es-line);padding:.5em .7em;}
+#rwa-doc-mount .sk-kicker{font-size:.8rem;font-weight:700;letter-spacing:.1em;text-transform:uppercase;color:var(--es-accent);margin:0 0 .5em;}
+#rwa-doc-mount .sk-byline{font-style:italic;color:var(--es-faint);font-size:.95rem;margin:0 0 1.4em;}
+#rwa-doc-mount .sk-lede p::first-letter{float:left;font-size:3.4em;line-height:.82;font-weight:700;padding:.04em .1em 0 0;color:var(--es-ink);}
+#rwa-doc-mount .sk-pull{margin:1.5em 0;font-size:1.45rem;line-height:1.4;font-style:italic;text-align:center;color:var(--es-soft);}
+</style>`,
+  },
+
+  'stripe-docs': {
+    name: 'stripe-docs',
+    label: 'Stripe Docs',
+    swatch: ['#ffffff', '#1a1f36', '#635bff'],
+    theme: `<style data-rwa-skin="stripe-docs">
+#rwa-doc-mount{
+  --sd-ink:#1a1f36; --sd-soft:#3c4257; --sd-faint:#697386; --sd-line:#e3e8ee;
+  --sd-bg:#ffffff; --sd-tint:#f6f9fc; --sd-accent:#635bff; --sd-accent-2:#0073e6;
+  font-family:-apple-system,BlinkMacSystemFont,'Segoe UI',Roboto,sans-serif;
+  color:var(--sd-ink); line-height:1.65;
+}
+#rwa-doc-mount article{max-width:760px;margin:64px auto;padding:0 36px;}
+#rwa-doc-mount h1{font-size:2.3rem;font-weight:700;letter-spacing:-.02em;line-height:1.15;color:var(--sd-ink);margin:1.4em 0 .4em;}
+#rwa-doc-mount h2{font-size:1.45rem;font-weight:600;color:var(--sd-ink);margin:2em 0 .4em;padding-bottom:.3em;border-bottom:1px solid var(--sd-line);}
+#rwa-doc-mount h3{font-size:1.15rem;font-weight:600;color:var(--sd-soft);margin:1.6em 0 .3em;}
+#rwa-doc-mount p{color:var(--sd-soft);margin:0 0 1em;}
+#rwa-doc-mount a{color:var(--sd-accent);text-decoration:none;font-weight:500;}
+#rwa-doc-mount a:hover{color:var(--sd-accent-2);text-decoration:underline;text-underline-offset:2px;}
+#rwa-doc-mount ul,#rwa-doc-mount ol{color:var(--sd-soft);padding-left:1.5em;margin:0 0 1em;}
+#rwa-doc-mount li{margin:.3em 0;}
+#rwa-doc-mount blockquote{margin:1.2em 0;padding:12px 16px;background:var(--sd-tint);border-left:3px solid var(--sd-accent);border-radius:0 6px 6px 0;color:var(--sd-soft);font-style:normal;}
+#rwa-doc-mount hr{border:0;border-top:1px solid var(--sd-line);margin:2.2em 0;}
+#rwa-doc-mount code{font-family:'SF Mono',Menlo,Monaco,ui-monospace,monospace;font-size:.85em;background:var(--sd-tint);color:var(--sd-accent);border:1px solid var(--sd-line);padding:.1em .4em;border-radius:5px;}
+#rwa-doc-mount pre{background:#0a2540;color:#f6f9fc;border:0;border-radius:10px;padding:18px 20px;box-shadow:0 2px 6px rgba(10,37,64,.18);}
+#rwa-doc-mount pre code{background:transparent;border:0;color:inherit;}
+#rwa-doc-mount table{font-size:.92em;border:1px solid var(--sd-line);border-radius:8px;overflow:hidden;}
+#rwa-doc-mount th{background:var(--sd-tint);color:var(--sd-faint);font-weight:600;text-transform:uppercase;letter-spacing:.04em;font-size:.78rem;border-bottom:1px solid var(--sd-line);padding:.55em .85em;}
+#rwa-doc-mount td{border-bottom:1px solid var(--sd-line);padding:.55em .85em;color:var(--sd-soft);}
+#rwa-doc-mount .sk-hero{margin:0 0 2em;padding:0 0 1.4em;border-bottom:1px solid var(--sd-line);}
+#rwa-doc-mount .sk-hero h1{margin-top:0;}
+#rwa-doc-mount .sk-pill{display:inline-block;font-size:.72rem;font-weight:600;letter-spacing:.04em;text-transform:uppercase;color:var(--sd-accent);background:var(--sd-tint);border:1px solid var(--sd-line);border-radius:999px;padding:.25em .7em;margin:0 0 .8em;}
+</style>`,
+  },
+
+  'terminal-mono': {
+    name: 'terminal-mono',
+    label: 'Terminal',
+    swatch: ['#080a08', '#9ee69e', '#39ff14'],
+    theme: `<style data-rwa-skin="terminal-mono">
+#rwa-doc-mount{
+  --gray-50:#0c0f0c;--gray-100:#101410;--gray-200:#1b241b;--gray-300:#2c3b2c;
+  --gray-400:#4f7a4f;--gray-500:#6fae6f;--gray-600:#86cd86;--gray-700:#9ee69e;
+  --gray-800:#b6f5b6;--gray-900:#d6ffd6;--white:#080a08;
+  --green:#39ff14;--yellow:#e8e84a;--red:#ff5f56;--blue:#5fd7ff;
+  --radius:0px;--radius-sm:0px;
+  background:#080a08;color:#9ee69e;
+  font-family:var(--font-mono);
+  font-size:15px;line-height:1.55;
+}
+#rwa-doc-mount article{max-width:74ch;margin:40px auto;padding:0 28px;}
+#rwa-doc-mount h1,#rwa-doc-mount h2,#rwa-doc-mount h3,#rwa-doc-mount h4,#rwa-doc-mount h5,#rwa-doc-mount h6{font-family:var(--font-mono);font-weight:700;letter-spacing:0;color:#d6ffd6;text-transform:none;}
+#rwa-doc-mount h1{font-size:1.7rem;}
+#rwa-doc-mount h1::before{content:"# ";color:#4f7a4f;}
+#rwa-doc-mount h2{font-size:1.35rem;}
+#rwa-doc-mount h2::before{content:"## ";color:#4f7a4f;}
+#rwa-doc-mount h3::before{content:"### ";color:#4f7a4f;}
+#rwa-doc-mount p{color:#9ee69e;}
+#rwa-doc-mount a{color:#5fd7ff;text-decoration:underline;text-underline-offset:3px;}
+#rwa-doc-mount a:hover{background:#5fd7ff;color:#080a08;text-decoration:none;}
+#rwa-doc-mount ul,#rwa-doc-mount ol{padding-left:2ch;}
+#rwa-doc-mount ul li{list-style:none;}
+#rwa-doc-mount ul li::before{content:"\\203A ";color:#39ff14;margin-left:-2ch;}
+#rwa-doc-mount blockquote{border-left:0;padding:.4em 1ch;color:#86cd86;font-style:normal;background:#101410;border:1px solid #2c3b2c;}
+#rwa-doc-mount hr{border-top:1px dashed #2c3b2c;}
+#rwa-doc-mount code{background:#101410;color:#39ff14;border-radius:0;padding:.05em .4ch;}
+#rwa-doc-mount pre{background:#0c0f0c;border:1px solid #2c3b2c;border-radius:0;color:#9ee69e;box-shadow:inset 0 0 0 1px #101410;}
+#rwa-doc-mount table{font-size:.95em;}
+#rwa-doc-mount th,#rwa-doc-mount td{border-bottom:1px solid #2c3b2c;}
+#rwa-doc-mount th{background:#101410;color:#39ff14;text-transform:uppercase;letter-spacing:.08em;font-weight:700;}
+#rwa-doc-mount .sk-hero{margin:0 0 1.6em;padding:.6em 1ch;border:1px solid #2c3b2c;background:#0c0f0c;}
+#rwa-doc-mount .sk-byline{color:#6fae6f;font-size:.85em;}
+#rwa-doc-mount .sk-stat-row{display:flex;flex-wrap:wrap;gap:1ch;margin:1.4em 0;}
+#rwa-doc-mount .sk-stat{display:flex;flex-direction:column;border:1px solid #2c3b2c;padding:.5em 1ch;background:#101410;}
+#rwa-doc-mount .sk-stat-num{font-size:1.4rem;font-weight:700;color:#39ff14;}
+#rwa-doc-mount .sk-stat-label{font-size:.7rem;text-transform:uppercase;letter-spacing:.08em;color:#6fae6f;}
+#rwa-doc-mount .sk-blink{color:#39ff14;animation:sk-blink 1s step-end infinite;}
+@keyframes sk-blink{50%{opacity:0;}}
+@media (prefers-reduced-motion:reduce){#rwa-doc-mount .sk-blink{animation:none;}}
+</style>`,
+  },
+});
+
+export const SKIN_NAMES = Object.keys(SKINS);
+
+// RWA_SKIN_L1_PREAMBLE + RECIPES — per-preset L1 (content-aware) restyle
+// instructions, surfaced by `rwa skin <file> NAME --l1`. The opt-in L1 path
+// de-skins the doc, drives the agent with the recipe over a multi-turn backend
+// to add additive sk-* class hooks + wrapper elements, then splices the preset
+// theme block and commits ONCE (mirrors the seed's applySkinL1).
+//
+// MANUAL MIRROR (no cmp gate): these are copied BYTE-IDENTICAL from
+// seeds/rewritable.html (RWA_SKIN_L1_PREAMBLE + RWA_SKIN_RECIPES, ~line 2862).
+// The seed is the canonical site (the browser ✦ gallery's always-on L1 reads
+// it). When the seed changes, re-copy here; the pin test
+// cli/tests/skin-l1-seed-mirror.test.mjs extracts both blocks from the seed and
+// deep-equals them against these, so drift fails the suite loudly.
+//
+// Every recipe is additive-only + 1:1-invertible (wrap + add class, never
+// re-tag/move/merge) so de-skin is a clean sk-* strip and data-rwa-id is never
+// renumbered.
+export const RWA_SKIN_L1_PREAMBLE =
+`Apply a visual restyle to this document by adding sk-* class hooks and additive wrapper elements. STRICT RULES: only ADD wrapper <div>/<span> elements and ADD class attributes; never delete, move, merge, reorder, re-tag, or rewrite existing content; never change any data-rwa-id; never add <style> or <script>; never touch frozen zones. If the document already contains sk-* wrappers or sk-* classes from a previous skin, first remove those wrappers (keeping their inner content) and strip the sk-* classes, then apply the restyle below. Use apply_edits with surgical (find,replace) pairs.
+
+Restyle:
+`;
+
+export const RWA_SKIN_RECIPES = {
+  'notion-clean': RWA_SKIN_L1_PREAMBLE +
+`1. If a short subtitle or dek paragraph sits directly under the H1, add class="sk-eyebrow" to it.
+2. Convert any paragraph that begins with "Note:", "Tip:", or "Important:" into a <div class="sk-callout"> wrapping that paragraph.
+3. Leave lists and tables unchanged.`,
+  'linear-dark': RWA_SKIN_L1_PREAMBLE +
+`1. If a short kicker or category line opens the document (above or right after the H1), wrap it as <div class="sk-eyebrow">…</div>.
+2. If you find a contiguous run of 2 to 4 short metric lines (for example "MRR $48k", "Churn 1.2%"), wrap each as <div class="sk-stat"><b>$48k</b><span>MRR</span></div> and group them in one <div class="sk-stat-row">…</div>.
+3. Leave all other structure unchanged.`,
+  'editorial-serif': RWA_SKIN_L1_PREAMBLE +
+`1. A category or section word before the title becomes <div class="sk-kicker">…</div> above the H1.
+2. A byline or dateline under the H1 (for example "By …", a date, "5 min read") gets class="sk-byline".
+3. Wrap the first body paragraph (the lede) as <div class="sk-lede">…</div>.
+4. A standalone single-sentence emphatic paragraph becomes <div class="sk-pull">…</div> (do NOT re-tag it to a blockquote).`,
+  'stripe-docs': RWA_SKIN_L1_PREAMBLE +
+`1. Wrap the leading H1 and its dek paragraph together in <div class="sk-hero">…</div>.
+2. A one-word kicker or category before the H1 becomes <span class="sk-pill">…</span> at the top of the hero.
+3. Leave code blocks, lists, and tables unchanged.`,
+  'terminal-mono': RWA_SKIN_L1_PREAMBLE +
+`1. Wrap the leading H1 (and a following byline or subtitle paragraph) in <div class="sk-hero">…</div>; add class="sk-byline" to that paragraph.
+2. A contiguous run of metric lines (number plus short label, for example "42 commits") becomes a <div class="sk-stat-row"> with each metric as <div class="sk-stat"><span class="sk-stat-num">42</span><span class="sk-stat-label">commits</span></div>.
+3. Append <span class="sk-blink">▋</span> after the final paragraph.`,
+};
+
+/**
+ * Look up a preset by name. Throws an exit-2 error (listing known skins) on an
+ * unknown name, mirroring the CLI's `not_found`-class file errors so the bin
+ * dispatcher and tests get a consistent, actionable failure.
+ *
+ * @param {string} name
+ * @returns {{name:string,label:string,swatch:string[],theme:string}}
+ */
+export function skinByName(name) {
+  const s = SKINS[name];
+  if (!s) {
+    const e = new Error(`unknown skin "${name}". Known skins: ${SKIN_NAMES.join(', ')}`);
+    e.exitCode = 2;
+    e.subcode = 'unknown_skin';
+    throw e;
+  }
+  return s;
+}