ripplo 0.7.19 → 0.7.21

package/dist/index.js

@@ -1,35 +1,35 @@
 #!/usr/bin/env node
-import{$ as xt,A as ae,B as Wr,C as le,D as v,E as nt,G as ot,H as it,I as st,J as at,L as lt,M as dt,N as rr,O as K,P as tr,Q as mt,R as ft,S as gt,T as ht,U as yt,V as kt,W as wt,X as vt,Y as bt,Z as St,_ as Re,a as Ir,aa as Rt,b as V,c as jr,d as Ar,e as P,f as we,g as O,ga as ce,h as Tr,ha as Ct,i as S,ia as nr,j as c,k as Dr,ka as Pt,l as x,m as Or,ma as Et,n as _r,o as Fr,oa as $t,p as Nr,q as j,qa as It,r as A,ra as jt,s as Ur,sa as At,t as w,ta as Lt,u as ve,ua as Tt,va as Dt,x as N,xa as Ot,y as Mr,z as Hr}from"./chunk-APGFYCJC.js";import{$ as pt,D as Xr,F as Ze,G as er,H as Yr,I as Zr,J as xe,P as et,R as rt,S as tt,Z as ct,_ as de,aa as ut,c as z,d as Lr,g as M,j as L,l as qr,m as Ye,n as Br,o as J,p as Vr,q as Gr,r as be,s as C,t as zr,u as Jr,v as Kr,x as Qr,y as Se}from"./chunk-7R7PWDYF.js";import{a as vr,b as br,c as Sr,d as u,e as $,g as ke,h as xr,k as F,l as Rr,m as Cr,n as Xe,o as Pr,p as Er,q as $r}from"./chunk-Y5IXMRSB.js";import"./chunk-SB7H6IAS.js";import Ac from"update-notifier";import Lc from"yargs";import{hideBin as Tc}from"yargs/helpers";function Ce({current:e,latest:r}){return r==null?`ripplo v${e} (latest: unknown)`:r===e?`ripplo v${e} (latest)`:`ripplo v${e} (latest: v${r} \u2014 run \`npx ripplo update\`)`}function _t(){return"Update available {currentVersion} \u2192 {latestVersion}\nRun `npx ripplo update`"}import{graphql as ji}from"gql.tada";import{exec as wi}from"child_process";import{createAuthClient as yi}from"better-auth/client";import{deviceAuthorizationClient as ki}from"better-auth/client/plugins";function Ft({baseURL:e}){return yi({baseURL:e,fetchOptions:{headers:{"User-Agent":"Ripplo CLI"}},plugins:[ki()]})}import{err as Nt,ok as vi}from"neverthrow";var bi=5e3,Ut="ripplo-cli";async function Mt({onDeviceCode:e,url:r}){let t=r??Ur().RIPPLO_SERVER_URL,n=Ft({baseURL:t}),o=await n.device.code({client_id:Ut});if(o.error!=null)return Nt({description:o.error.error_description,kind:"oauth-device-code-failed"});let{device_code:i,user_code:a,verification_uri_complete:s}=o.data;return e({userCode:a,verificationUrl:s}),Ei(s),(await Si({authClient:n,deviceCode:i})).map(d=>(Rr({serverUrl:t,token:d}),d))}async function Si({authClient:e,deviceCode:r}){for(;;){await Ci(bi);let t=await e.device.token({client_id:Ut,device_code:r,grant_type:"urn:ietf:params:oauth:grant-type:device_code"});if(t.data?.access_token!=null)return vi(t.data.access_token);if(t.error==null)continue;if(!Ri(t.error.error))return Nt({code:t.error.error,description:t.error.error_description,kind:"oauth-authorization-failed"})}}var xi=new Set(["authorization_pending","slow_down"]);function Ri(e){return xi.has(e)}function Ci(e){return new Promise(r=>{setTimeout(r,e)})}function Pi(){return process.platform==="darwin"?"open":process.platform==="win32"?"start":"xdg-open"}function Ei(e){let r=Pi();wi(`${r} "${e}"`,()=>{})}function H({serverUrl:e,token:r}){return{appUrl:"",cwd:process.cwd(),engineUrl:"",projectId:"",ripploServerUrl:e,token:r,tunnelAuth:void 0,webhookSecret:""}}import $i from"fs";import Ii from"path";function m(e){return $i.existsSync(Ii.join(e,".ripplo"))}var Ai=ji(`
+import{$ as Ln,A as le,B as Wr,C as de,D as b,E as mn,G as fn,H as gn,I as hn,J as yn,L as kn,M as wn,N as nr,O as X,P as tr,Q as Rn,R as xn,S as Cn,T as Pn,U as En,V as $n,W as In,X as An,Y as jn,Z as Tn,_ as Ce,a as Ar,aa as Dn,b as B,c as jr,d as Tr,e as P,f as z,g as D,ga as pe,h as ve,ha as On,i as R,ia as or,j as c,k as Dr,ka as _n,l as v,m as Or,ma as Fn,n as _r,o as Fr,oa as Nn,p as Nr,q as E,qa as Un,r as j,ra as Mn,s as Ur,sa as Hn,t as k,ta as Wn,u as be,ua as qn,va as Bn,x as F,xa as Vn,y as Mr,z as Hr}from"./chunk-OX6IWNCA.js";import{$ as un,A as Zr,B as en,C as rn,D as nn,E as tn,F as on,G as sn,I as Re,N as an,P as er,Q as rr,R as ln,S as dn,T as xe,Y as cn,_ as pn,c as G,d as Lr,g as U,ha as vn,ia as ce,ja as bn,k as _,ka as Sn,l as qr,m as Br,n as Ze,o as Se,p as J,q as Vr,r as Gr,s as K,t as C,u as zr,v as Jr,w as Kr,x as Xr,y as Qr,z as Yr}from"./chunk-R7CQWEBF.js";import{a as br,b as Sr,c as Rr,d as m,e as I,g as we,h as xr,k as O,l as Cr,m as Pr,n as Ye,o as Er,p as $r,q as Ir}from"./chunk-EVYYSTR7.js";import"./chunk-IHSHBPJY.js";import"./chunk-7UWDMECF.js";import Tc from"update-notifier";import Lc from"yargs";import{hideBin as Dc}from"yargs/helpers";function Pe({current:e,latest:r}){return r==null?`ripplo v${e} (latest: unknown)`:r===e?`ripplo v${e} (latest)`:`ripplo v${e} (latest: v${r} \u2014 run \`npx ripplo update\`)`}function Gn(){return"Update available {currentVersion} \u2192 {latestVersion}\nRun `npx ripplo update`"}import{graphql as Hi}from"gql.tada";import{exec as Ai}from"child_process";import{createAuthClient as $i}from"better-auth/client";import{deviceAuthorizationClient as Ii}from"better-auth/client/plugins";function zn({baseURL:e}){return $i({baseURL:e,fetchOptions:{headers:{"User-Agent":"Ripplo CLI"}},plugins:[Ii()]})}import{err as Jn,ok as ji}from"neverthrow";var Ti=5e3,Kn="ripplo-cli";async function Xn({onDeviceCode:e,url:r}){let n=r??Ur().RIPPLO_SERVER_URL,t=zn({baseURL:n}),o=await t.device.code({client_id:Kn});if(o.error!=null)return Jn({description:o.error.error_description,kind:"oauth-device-code-failed"});let{device_code:i,user_code:a,verification_uri_complete:s}=o.data;return e({userCode:a,verificationUrl:s}),Ni(s),(await Li({authClient:t,deviceCode:i})).map(d=>(Cr({serverUrl:n,token:d}),d))}async function Li({authClient:e,deviceCode:r}){for(;;){await _i(Ti);let n=await e.device.token({client_id:Kn,device_code:r,grant_type:"urn:ietf:params:oauth:grant-type:device_code"});if(n.data?.access_token!=null)return ji(n.data.access_token);if(n.error==null)continue;if(!Oi(n.error.error))return Jn({code:n.error.error,description:n.error.error_description,kind:"oauth-authorization-failed"})}}var Di=new Set(["authorization_pending","slow_down"]);function Oi(e){return Di.has(e)}function _i(e){return new Promise(r=>{setTimeout(r,e)})}function Fi(){return process.platform==="darwin"?"open":process.platform==="win32"?"start":"xdg-open"}function Ni(e){let r=Fi();Ai(`${r} "${e}"`,()=>{})}function M({serverUrl:e,token:r}){return{appUrl:"",cwd:process.cwd(),engineUrl:"",projectId:"",ripploServerUrl:e,token:r,tunnelAuth:void 0,webhookSecret:""}}import Ui from"fs";import Mi from"path";function f(e){return Ui.existsSync(Mi.join(e,".ripplo"))}var Wi=Hi(`
   query AuthViewer {
     currentUser {
       name
       email
     }
   }
-`);async function Ht(){let e=A(),r=F(e);if(r!=null&&await Li(e,r))return;let n=(await Mt({url:e,onDeviceCode:s=>{process.stdout.write(`Opening your browser to finish sign-in.
+`);async function Qn(){let e=j(),r=O(e);if(r!=null&&await qi(e,r))return;let t=(await Xn({url:e,onDeviceCode:s=>{process.stdout.write(`Opening your browser to finish sign-in.
 `),process.stdout.write(`If it didn't open, visit: ${s.verificationUrl}
 `),process.stdout.write(`Verification code: ${s.userCode}
 
 `),process.stdout.write(`Waiting for approval...
-`)}})).match(s=>s,s=>{process.stderr.write(`${j(s)}
-`),process.exit(1)}),o=await or({serverUrl:e,token:n}),i=m(process.cwd()),a=i?"Welcome back":"Welcome to Ripplo";process.stdout.write(`
-`),process.stdout.write(o.kind==="ok"?`${a}, ${Ti(o.viewer)}.
+`)}})).match(s=>s,s=>{process.stderr.write(`${E(s)}
+`),process.exit(1)}),o=await ir({serverUrl:e,token:t}),i=f(process.cwd()),a=i?"Welcome back":"Welcome to Ripplo";process.stdout.write(`
+`),process.stdout.write(o.kind==="ok"?`${a}, ${Bi(o.viewer)}.
 `:`${a}.
-`),process.stdout.write(`Session saved to ${Xe(e)}.
-`),i||(process.stdout.write("\nNext: run `/ripplo:setup` in Claude Code to wire Ripplo into this project,\n"),process.stdout.write("or `npx ripplo init` to set it up by hand.\n"))}async function Li(e,r){let t=await or({serverUrl:e,token:r});return t.kind==="ok"?(process.stdout.write(`Already signed in as ${t.viewer.email}. Run \`npx ripplo auth logout\` to switch accounts.
-`),!0):(t.kind==="unreachable"&&(process.stdout.write(`Could not reach the Ripplo server at ${e} (${t.message}). Your saved session may still be valid \u2014 fix connectivity and retry.
+`),process.stdout.write(`Session saved to ${Ye(e)}.
+`),i||(process.stdout.write("\nNext: run `/ripplo:setup` in Claude Code to wire Ripplo into this project,\n"),process.stdout.write("or `npx ripplo init` to set it up by hand.\n"))}async function qi(e,r){let n=await ir({serverUrl:e,token:r});return n.kind==="ok"?(process.stdout.write(`Already signed in as ${n.viewer.email}. Run \`npx ripplo auth logout\` to switch accounts.
+`),!0):(n.kind==="unreachable"&&(process.stdout.write(`Could not reach the Ripplo server at ${e} (${n.message}). Your saved session may still be valid \u2014 fix connectivity and retry.
 `),process.exit(1)),process.stdout.write(`Your session expired \u2014 signing you back in.
 
-`),!1)}async function Wt(){let e=A(),r=F(e);r==null&&(process.stdout.write("Not signed in. Run `npx ripplo auth login`.\n"),process.exit(1));let t=await or({serverUrl:e,token:r});t.kind==="unreachable"&&(process.stdout.write(`Could not reach the Ripplo server at ${e} (${t.message}). The token may still be valid \u2014 check the server / network and retry.
-`),process.exit(1)),t.kind==="rejected"&&(process.stdout.write("Token rejected by the server. Run `npx ripplo auth login` to sign in again.\n"),process.stdout.write(`(Claude Code: run it yourself in the background \u2014 the user just approves in the browser.)
-`),process.exit(1)),process.stdout.write(`Signed in as ${t.viewer.name} <${t.viewer.email}> (${e})
-`)}function qt(){let e=A();if(!Cr(e)){process.stdout.write(`Already signed out.
-`);return}process.stdout.write(`Signed out. Removed ${Xe(e)}.
-`)}async function or({serverUrl:e,token:r}){try{let n=(await u({config:H({serverUrl:e,token:r}),document:Ai,variables:void 0})).currentUser;return n==null?{kind:"rejected"}:{kind:"ok",viewer:{email:n.email,name:n.name}}}catch(t){return Sr(t)==="UNAUTHENTICATED"?{kind:"rejected"}:{kind:"unreachable",message:t instanceof Error?t.message:String(t)}}}function Ti(e){let r=e.name.trim().split(/\s+/)[0];return r!=null&&r.length>0?r:e.email}import{readFile as Di,writeFile as Oi}from"fs/promises";import _i from"path";async function Bt(e){let r=process.cwd(),t=await S(r);t.isErr()&&(process.stderr.write(`${x(t.error)}
-`),process.exit(1));let n=z(M,t.value),o=_i.join(r,O);if(e.check){let i=await Di(o,"utf8").catch(()=>null);if(i===n){process.stdout.write(`${Or()}
+`),!1)}async function Yn(){let e=j(),r=O(e);r==null&&(process.stdout.write("Not signed in. Run `npx ripplo auth login`.\n"),process.exit(1));let n=await ir({serverUrl:e,token:r});n.kind==="unreachable"&&(process.stdout.write(`Could not reach the Ripplo server at ${e} (${n.message}). The token may still be valid \u2014 check the server / network and retry.
+`),process.exit(1)),n.kind==="rejected"&&(process.stdout.write("Token rejected by the server. Run `npx ripplo auth login` to sign in again.\n"),process.stdout.write(`(Claude Code: run it yourself in the background \u2014 the user just approves in the browser.)
+`),process.exit(1)),process.stdout.write(`Signed in as ${n.viewer.name} <${n.viewer.email}> (${e})
+`)}function Zn(){let e=j();if(!Pr(e)){process.stdout.write(`Already signed out.
+`);return}process.stdout.write(`Signed out. Removed ${Ye(e)}.
+`)}async function ir({serverUrl:e,token:r}){try{let t=(await m({config:M({serverUrl:e,token:r}),document:Wi,variables:void 0})).currentUser;return t==null?{kind:"rejected"}:{kind:"ok",viewer:{email:t.email,name:t.name}}}catch(n){return Rr(n)==="UNAUTHENTICATED"?{kind:"rejected"}:{kind:"unreachable",message:n instanceof Error?n.message:String(n)}}}function Bi(e){let r=e.name.trim().split(/\s+/)[0];return r!=null&&r.length>0?r:e.email}import{readFile as Vi,writeFile as Gi}from"fs/promises";import zi from"path";async function et(e){let r=process.cwd(),n=await R(r);n.isErr()&&(process.stderr.write(`${v(n.error)}
+`),process.exit(1));let t=G(U,n.value),o=zi.join(r,D);if(e.check){let i=await Vi(o,"utf8").catch(()=>null);if(i===t){process.stdout.write(`${Or()}
 `);return}process.stderr.write(`${_r(i==null?"missing":"stale")}
-`),process.exit(1)}await Oi(o,n),process.stdout.write(`${Fr()}
-`)}import{graphql as Vt}from"gql.tada";function ir(e){return e==null?"Max local concurrent runs: unknown (not signed in?)":`Max local concurrent runs: ${String(e)} (the daemon applies changes live)`}import{graphql as Fi}from"gql.tada";var Ni=Fi(`
+`),process.exit(1)}await Gi(o,t),process.stdout.write(`${Fr()}
+`)}import{graphql as rt}from"gql.tada";function sr(e){return e==null?"Max local concurrent runs: unknown (not signed in?)":`Max local concurrent runs: ${String(e)} (the daemon applies changes live)`}import{graphql as Ji}from"gql.tada";var Ki=Ji(`
   query DevSessionCheckPreflight($projectId: String!, $cwd: String!) {
     project(id: $projectId) {
       id
@@ -38,26 +38,26 @@ import{$ as xt,A as ae,B as Wr,C as le,D as v,E as nt,G as ot,H as it,I as st,J
       }
     }
   }
-`);function T(){return w(process.cwd()).match(e=>e,e=>{process.stderr.write(`${j(e)}
+`);function T(){return k(process.cwd()).match(e=>e,e=>{process.stderr.write(`${E(e)}
 `),process.stderr.write(`${c("setup")}
-`),process.exit(1)})}async function pe(e){(await u({config:e,document:Ni,variables:{cwd:e.cwd,projectId:e.projectId}})).project?.devSession==null&&(process.stderr.write("No active dev session. Start `npx ripplo daemon` as a background process (your app's dev server must also be running), then retry. Or run `/ripplo:start` in Claude Code.\n"),process.stderr.write(`${c("setup")}
-`),process.exit(1))}var Ui=Vt(`
+`),process.exit(1)})}async function ue(e){(await m({config:e,document:Ki,variables:{cwd:e.cwd,projectId:e.projectId}})).project?.devSession==null&&(process.stderr.write("No active dev session. Start `npx ripplo daemon` as a background process (your app's dev server must also be running), then retry. Or run `/ripplo:start` in Claude Code.\n"),process.stderr.write(`${c("setup")}
+`),process.exit(1))}var Xi=rt(`
   mutation CliUpdateMaxLocalConcurrentRuns($value: Int!) {
     updateMaxLocalConcurrentRuns(value: $value) {
       id
       maxLocalConcurrentRuns
     }
   }
-`),Mi=Vt(`
+`),Qi=rt(`
   query CliMaxLocalConcurrentRuns {
     currentUser {
       id
       maxLocalConcurrentRuns
     }
   }
-`);async function Gt({value:e}){let r=T();if(e==null){let n=await u({config:r,document:Mi,variables:{}});process.stdout.write(`${ir(n.currentUser?.maxLocalConcurrentRuns)}
-`);return}let t=await u({config:r,document:Ui,variables:{value:e}});process.stdout.write(`${ir(t.updateMaxLocalConcurrentRuns?.maxLocalConcurrentRuns)}
-`)}import{graphql as Hi}from"gql.tada";var Wi=Hi(`
+`);async function nt({value:e}){let r=T();if(e==null){let t=await m({config:r,document:Qi,variables:{}});process.stdout.write(`${sr(t.currentUser?.maxLocalConcurrentRuns)}
+`);return}let n=await m({config:r,document:Xi,variables:{value:e}});process.stdout.write(`${sr(n.updateMaxLocalConcurrentRuns?.maxLocalConcurrentRuns)}
+`)}import{graphql as Yi}from"gql.tada";var Zi=Yi(`
   query DevSessionCheckHealth($projectId: String!, $cwd: String!) {
     project(id: $projectId) {
       id
@@ -66,46 +66,46 @@ import{$ as xt,A as ae,B as Wr,C as le,D as v,E as nt,G as ot,H as it,I as st,J
       }
     }
   }
-`);function zt(e){switch(e.status){case"active":return e.gitMidOperation?"\u2713 Dev session: ripplo daemon is live (hooks auto-paused while git is mid-merge/rebase/cherry-pick \u2014 they resume when the operation ends)":"\u2713 Dev session: ripplo daemon is live for this directory";case"starting":return"! Dev session: the daemon is running locally but hasn't registered with the server yet. Wait a few seconds and re-run `npx ripplo doctor`. If it persists, check the daemon output for auth or network errors.";case"missing":return"\u2717 Dev session: no daemon running. Start `npx ripplo daemon` as a background process (separate from your app's dev server). Without it, `npx ripplo run` refuses to dispatch and scope/coverage hooks won't arm."}}async function Jt(e){let r=ve(e),t=Mr(e),n=w(e).unwrapOr(void 0);return n==null?{gitMidOperation:t,status:r?"starting":"missing",type:"dev-session"}:(await u({config:n,document:Wi,variables:{cwd:n.cwd,projectId:n.projectId}}).catch(()=>null))?.project?.devSession!=null?{gitMidOperation:t,status:"active",type:"dev-session"}:{gitMidOperation:t,status:r?"starting":"missing",type:"dev-session"}}function Kt(e){switch(e.type){case"settings":return qi(e);case"env-files":return Bi(e);case"token":return Vi(e);case"dev-server":return Gi(e);case"dev-session":return zt(e);case"preconditions":return zi(e);case"webhook-verification":return Ji(e);case"preconditions-validation":return Ki(e);case"workflows":return Qi(e);case"browser":return Yi(e);case"engine-endpoint":return e.reachable?`\u2713 Engine endpoint: ${e.url} is reachable`:`\u2717 Engine endpoint: ${e.url} is not reachable`;case"adapter-enabled":return Zi(e);case"lockfile":return es(e);case"pre-commit-hook":return rs(e);case"plugin-version":return ts(e)}}function qi(e){return e.valid?"\u2713 Settings: project configured":`\u2717 Settings: missing fields: ${e.missingFields.join(", ")}`}function Bi(e){return e.missing.length===0?"\u2713 Env files: declared files present":`\u2717 Env files: declared in .ripplo/project.json but missing:
-${e.missing.map(t=>`    ${t}`).join(`
+`);function tt(e){switch(e.status){case"active":return e.gitMidOperation?"\u2713 Dev session: ripplo daemon is live (hooks auto-paused while git is mid-merge/rebase/cherry-pick \u2014 they resume when the operation ends)":"\u2713 Dev session: ripplo daemon is live for this directory";case"starting":return"! Dev session: the daemon is running locally but hasn't registered with the server yet. Wait a few seconds and re-run `npx ripplo doctor`. If it persists, check the daemon output for auth or network errors.";case"missing":return"\u2717 Dev session: no daemon running. Start `npx ripplo daemon` as a background process (separate from your app's dev server). Without it, `npx ripplo run` refuses to dispatch and scope/coverage hooks won't arm."}}async function ot(e){let r=be(e),n=Mr(e),t=k(e).unwrapOr(void 0);return t==null?{gitMidOperation:n,status:r?"starting":"missing",type:"dev-session"}:(await m({config:t,document:Zi,variables:{cwd:t.cwd,projectId:t.projectId}}).catch(()=>null))?.project?.devSession!=null?{gitMidOperation:n,status:"active",type:"dev-session"}:{gitMidOperation:n,status:r?"starting":"missing",type:"dev-session"}}function it(e){switch(e.type){case"settings":return es(e);case"env-files":return rs(e);case"token":return ns(e);case"dev-server":return ts(e);case"dev-session":return tt(e);case"preconditions":return os(e);case"webhook-verification":return is(e);case"preconditions-validation":return ss(e);case"workflows":return as(e);case"browser":return ds(e);case"engine-endpoint":return e.reachable?`\u2713 Engine endpoint: ${e.url} is reachable`:`\u2717 Engine endpoint: ${e.url} is not reachable`;case"adapter-enabled":return cs(e);case"lockfile":return ps(e);case"pre-commit-hook":return us(e);case"plugin-version":return ms(e)}}function es(e){return e.valid?"\u2713 Settings: project configured":`\u2717 Settings: missing fields: ${e.missingFields.join(", ")}`}function rs(e){return e.missing.length===0?"\u2713 Env files: declared files present":`\u2717 Env files: declared in .ripplo/project.json but missing:
+${e.missing.map(n=>`    ${n}`).join(`
 `)}
-  In a git worktree? Copy the env file from the main checkout, or symlink to a shared file outside the working tree.`}function Vi(e){switch(e.status){case"valid":return`\u2713 Auth: signed in as ${e.email??"unknown"}`;case"missing":return"\u2717 Auth: not signed in. Run `npx ripplo auth login`.\n  (Claude Code: run it yourself in the background \u2014 the user just approves in the browser.)";case"invalid":return"\u2717 Auth: saved token rejected by the server. Run `npx ripplo auth login` to sign in again.\n  (Claude Code: run it yourself in the background \u2014 the user just approves in the browser.)";case"unreachable":return`! Auth: could not reach ${A()} to validate the token.`}}function Gi(e){return e.reachable?`\u2713 Dev server: ${e.appUrl} is reachable`:`\u2717 Dev server: ${e.appUrl} is not responding. Start your dev server.`}function zi(e){return e.count===0?"! Entities: none defined":e.configured?e.endpointReachable===void 0?`! Entities: ${String(e.count)} defined (could not verify engine endpoint)`:`\u2713 Entities: ${String(e.count)} defined, engine configured`:`\u2717 Entities: ${String(e.count)} defined but RIPPLO_ENGINE_URL is not set in your env file`}function Ji(e){return e.rejectsUnsigned?"\u2713 Webhook verification: unsigned requests rejected":"\u2717 Webhook verification: endpoint accepted an unsigned request \u2014 signature verification may be missing or misconfigured."}function Ki(e){if(!e.found)return"\u2717 Model: DSL failed to compile";if(e.valid)return"\u2713 Model: valid";let r=e.errors.map(t=>`  - ${t.path===""?"":t.path+": "}${t.message}`);return`\u2717 Model: ${String(e.errorCount)} validation error${e.errorCount===1?"":"s"}
+  In a git worktree? Copy the env file from the main checkout, or symlink to a shared file outside the working tree.`}function ns(e){switch(e.status){case"valid":return`\u2713 Auth: signed in as ${e.email??"unknown"}`;case"missing":return"\u2717 Auth: not signed in. Run `npx ripplo auth login`.\n  (Claude Code: run it yourself in the background \u2014 the user just approves in the browser.)";case"invalid":return"\u2717 Auth: saved token rejected by the server. Run `npx ripplo auth login` to sign in again.\n  (Claude Code: run it yourself in the background \u2014 the user just approves in the browser.)";case"unreachable":return`! Auth: could not reach ${j()} to validate the token.`}}function ts(e){return e.reachable?`\u2713 Dev server: ${e.appUrl} is reachable`:`\u2717 Dev server: ${e.appUrl} is not responding. Start your dev server.`}function os(e){return e.count===0?"! Entities: none defined":e.configured?e.endpointReachable===void 0?`! Entities: ${String(e.count)} defined (could not verify engine endpoint)`:`\u2713 Entities: ${String(e.count)} defined, engine configured`:`\u2717 Entities: ${String(e.count)} defined but RIPPLO_ENGINE_URL is not set in your env file`}function is(e){return e.rejectsUnsigned?"\u2713 Webhook verification: unsigned requests rejected":"\u2717 Webhook verification: endpoint accepted an unsigned request \u2014 signature verification may be missing or misconfigured."}function ss(e){if(!e.found)return"\u2717 Model: DSL failed to compile";if(e.valid)return"\u2713 Model: valid";let r=e.errors.map(n=>`  - ${n.path===""?"":n.path+": "}${n.message}`);return`\u2717 Model: ${String(e.errorCount)} validation error${e.errorCount===1?"":"s"}
 ${r.join(`
-`)}`}function Qi(e){if(e.total===0)return"! Tests: none defined";if(e.invalidNames.length===0)return`\u2713 Tests: ${String(e.total)} valid`;let r=e.invalidWorkflows.map(t=>Xi(t));return`\u2717 Tests: ${String(e.invalidNames.length)} invalid
+`)}`}function as(e){if(e.total===0)return"! Tests: none defined";if(e.invalidNames.length===0)return`\u2713 Tests: ${String(e.total)} valid`;let r=e.invalidWorkflows.map(n=>ls(n));return`\u2717 Tests: ${String(e.invalidNames.length)} invalid
 ${r.join(`
-`)}`}function Xi(e){let r=e.errors.map(t=>"    - "+(t.path===""?"":t.path+": ")+t.message);return"  "+e.name+`:
+`)}`}function ls(e){let r=e.errors.map(n=>"    - "+(n.path===""?"":n.path+": ")+n.message);return"  "+e.name+`:
 `+r.join(`
-`)}function Yi(e){return e.installed?"\u2713 Browser: Chromium installed":"\u2717 Browser: Chromium not installed. Run `npx playwright install chromium`."}function Zi(e){switch(e.status){case"enabled":return`\u2713 Adapter: enabled at ${e.url}`;case"disabled":return"\u2717 Adapter: disabled (handler returned 404). Set ENABLE_RIPPLO_TESTING=true in your app's env (e.g. apps/<app>/.env.local for Next.js) and restart the dev server.";case"bad-secret":return"\u2717 Adapter: webhook signature rejected. RIPPLO_WEBHOOK_SECRET seen by your dev server does not match the one in your env file.";case"unreachable":return`\u2717 Adapter: ${e.url} could not be reached for signed probe.`;case"no-secret":return"\u2717 Adapter: RIPPLO_WEBHOOK_SECRET is not set in your env file (declared in .ripplo/project.json)."}}function es(e){switch(e.status){case"match":return`\u2713 Lockfile: ${O} is up to date`;case"missing":return`\u2717 Lockfile: ${O} is missing \u2014 run \`npx ripplo compile\` and commit it`;case"stale":return`\u2717 Lockfile: ${O} is out of date \u2014 run \`npx ripplo compile\` and commit it`}}function rs(e){return e.installed?"\u2713 Pre-commit hook: .git/hooks/pre-commit runs `ripplo compile --check`":"! Pre-commit hook: .git/hooks/pre-commit does not run `ripplo compile --check` \u2014 see the setup skill for the snippet"}function ts(e){return e.installed===e.cliVersion?`\u2713 Claude plugin: v${e.installed} matches CLI`:`! Claude plugin: installed v${e.installed}, CLI v${e.cliVersion} \u2014 run \`npx ripplo update\` (or /plugin in Claude Code)`}import Q from"fs";import ls from"os";import sr from"path";import{z as B}from"zod";import ns from"latest-version";import Qt from"semver";async function Pe(e){try{return await Promise.race([ns("ripplo"),new Promise(r=>setTimeout(()=>{r(void 0)},e))])}catch{return}}function Xt(e){return e.filter(r=>Qt.valid(r)!=null).toSorted(Qt.rcompare)[0]}function W(e){let r=J(e),t=Qr(e);return[...Gr(r,t.dataRules).map(n=>({gap:n,kind:"cascade-gap"})),...Vr(t.pageRules).map(n=>({conflict:n,kind:"page-rule-conflict"}))]}function b(e,r,t){let n=e===1?r:t??`${r}s`;return`${String(e)} ${n}`}function Yt(e){return`${C.good("ok")} \u2014 no static model violations (${b(e,"test")})`}function q(e){return[`${C.bad("fail")} \u2014 ${b(e.length,"static model violation")}:`,...e.map(r=>Jr(r))].join(`
+`)}function ds(e){return e.installed?"\u2713 Browser: Chromium installed":"\u2717 Browser: Chromium not installed. Run `npx playwright install chromium`."}function cs(e){switch(e.status){case"enabled":return`\u2713 Adapter: enabled at ${e.url}`;case"disabled":return"\u2717 Adapter: disabled (handler returned 404). Set ENABLE_RIPPLO_TESTING=true in your app's env (e.g. apps/<app>/.env.local for Next.js) and restart the dev server.";case"bad-secret":return"\u2717 Adapter: webhook signature rejected. RIPPLO_WEBHOOK_SECRET seen by your dev server does not match the one in your env file.";case"unreachable":return`\u2717 Adapter: ${e.url} could not be reached for signed probe.`;case"no-secret":return"\u2717 Adapter: RIPPLO_WEBHOOK_SECRET is not set in your env file (declared in .ripplo/project.json)."}}function ps(e){switch(e.status){case"match":return`\u2713 Lockfile: ${D} is up to date`;case"missing":return`\u2717 Lockfile: ${D} is missing \u2014 run \`npx ripplo compile\` and commit it`;case"stale":return`\u2717 Lockfile: ${D} is out of date \u2014 run \`npx ripplo compile\` and commit it`}}function us(e){return e.installed?"\u2713 Pre-commit hook: .git/hooks/pre-commit runs `ripplo compile --check`":"! Pre-commit hook: .git/hooks/pre-commit does not run `ripplo compile --check` \u2014 see the setup skill for the snippet"}function ms(e){return e.installed===e.cliVersion?`\u2713 Claude plugin: v${e.installed} matches CLI`:`! Claude plugin: installed v${e.installed}, CLI v${e.cliVersion} \u2014 run \`npx ripplo update\` (or /plugin in Claude Code)`}import Q from"fs";import ws from"os";import ar from"path";import{z as q}from"zod";import fs from"latest-version";import st from"semver";async function Ee(e){try{return await Promise.race([fs("ripplo"),new Promise(r=>setTimeout(()=>{r(void 0)},e))])}catch{return}}function at(e){return e.filter(r=>st.valid(r)!=null).toSorted(st.rcompare)[0]}function H(e){let r=J(e),n=on(e);return[...Gr(r,n.dataRules).map(t=>({gap:t,kind:"cascade-gap"})),...Vr(n.pageRules).map(t=>({conflict:t,kind:"page-rule-conflict"}))]}function S(e,r,n){let t=e===1?r:n??`${r}s`;return`${String(e)} ${t}`}function lt(e){return`${C.good("ok")} \u2014 no static model violations (${S(e,"test")})`}function W(e){return[`${C.bad("fail")} \u2014 ${S(e.length,"static model violation")}:`,...e.map(r=>Kr(r))].join(`
 
-`)}function Ee(e){return[`${C.warn("warn")} \u2014 ${b(e.length,"model coverage gap")} (not blocking):`,...e.map(r=>`  ${os(r)}`),`Coverage gaps mean the model can't catch regressions there. Stub the missing flows. ${c("discover")}`].join(`
-`)}function os(e){switch(e.kind){case"entity-never-given":return`${e.entity} \u2014 declared but no implemented test seeds it, so no flow exercises this state`;case"entity-never-mutated":return`${e.entity} \u2014 seeded but never asserted created/updated/deleted, so mutations to it ship unchecked`;case"unmatchable-delete-key":return`test ${e.workflow}/${e.testSlug} asserts ${e.entity} deleted with a literal ${e.field} but no seeded ${e.entity} sets ${e.field} \u2014 the solver treats it as no-match, so counts may mispredict`}}import{graphql as is}from"gql.tada";var ss=is(`
+`)}function $e(e){return[`${C.warn("warn")} \u2014 ${S(e.length,"model coverage gap")} (not blocking):`,...e.map(r=>`  ${gs(r)}`),`Coverage gaps mean the model can't catch regressions there. Stub the missing flows. ${c("discover")}`].join(`
+`)}function gs(e){switch(e.kind){case"entity-never-given":return`${e.entity} \u2014 declared but no implemented test seeds it, so no flow exercises this state`;case"entity-never-mutated":return`${e.entity} \u2014 seeded but never asserted created/updated/deleted, so mutations to it ship unchecked`;case"unmatchable-delete-key":return`test ${e.workflow}/${e.testSlug} asserts ${e.entity} deleted with a literal ${e.field} but no seeded ${e.entity} sets ${e.field} \u2014 the solver treats it as no-match, so counts may mispredict`}}import{graphql as hs}from"gql.tada";var ys=hs(`
   query DoctorAuthViewer {
     currentUser {
       name
       email
     }
   }
-`),as="Failed to connect to Ripplo server";async function Zt({serverUrl:e,token:r}){try{let t=await u({config:H({serverUrl:e,token:r}),document:ss,variables:void 0});return t.currentUser==null?{kind:"invalid"}:{email:t.currentUser.email,kind:"valid"}}catch(t){return(t instanceof Error?t.message:String(t)).startsWith(as)?{kind:"unreachable"}:{kind:"invalid"}}}function en(e){switch(e.type){case"settings":return!e.valid;case"env-files":return e.missing.length>0;case"token":return e.status==="missing"||e.status==="invalid";case"dev-server":return!e.reachable;case"dev-session":return e.status!=="active";case"preconditions":return e.count>0&&!e.configured;case"engine-endpoint":return!e.reachable;case"adapter-enabled":return e.status!=="enabled";case"webhook-verification":return!e.rejectsUnsigned;case"preconditions-validation":return!e.valid;case"workflows":return e.invalidNames.length>0;case"browser":return!e.installed;case"lockfile":return e.status!=="match";case"pre-commit-hook":return!e.installed;case"plugin-version":return!1}}async function rn(e){let r=await ps(e),t={missing:Ar(e),type:"env-files"},n=await us(),o=await ms(),i=await S(e),a=fs(i),s=gs(i),l=await hs(e,i),d=ks(e),g=cs(e),p=await ws(r,i);return[r,t,n,...p,a,s,l,d,o,...g==null?[]:[g]]}var ds=B.object({plugins:B.record(B.string(),B.array(B.object({projectPath:B.string().optional(),scope:B.string().optional(),version:B.string()})))});function cs(e){let r=sr.join(ls.homedir(),".claude","plugins","installed_plugins.json"),t=Q.existsSync(r)?Q.readFileSync(r,"utf8"):null;if(t==null)return null;let n=ds.safeParse(JSON.parse(t));if(!n.success)return null;let o=Object.entries(n.data.plugins).filter(([a])=>a.startsWith("ripplo@")).flatMap(([,a])=>a).filter(a=>a.scope==="user"||a.projectPath===e).map(a=>a.version),i=Xt(o);return i==null?null:{cliVersion:P(),installed:i,type:"plugin-version"}}async function ps(e){let r=await Hr(e);return r.valid?{missingFields:[],type:"settings",valid:!0}:{missingFields:r.errors.map(n=>n.path).filter(n=>n.length>0),type:"settings",valid:!1}}async function us(){let e=A(),r=F(e);if(r==null||r.length===0)return{email:void 0,status:"missing",type:"token"};let t=await Zt({serverUrl:e,token:r});return t.kind==="valid"?{email:t.email,status:"valid",type:"token"}:{email:void 0,status:t.kind,type:"token"}}async function ms(){let{chromium:e}=await import("playwright"),r=e.executablePath();return{installed:Q.existsSync(r),type:"browser"}}function fs(e){if(e.isErr())return{errorCount:1,errors:[{message:x(e.error),path:".ripplo/"}],found:!1,type:"preconditions-validation",valid:!1};let r=W(e.value);return{errorCount:r.length,errors:r.length===0?[]:[{message:q(r),path:""}],found:!0,type:"preconditions-validation",valid:r.length===0}}function gs(e){if(e.isErr())return{invalidNames:[],invalidWorkflows:[],total:0,type:"workflows",valid:0};let r=e.value.workflows.length;return{invalidNames:[],invalidWorkflows:[],total:r,type:"workflows",valid:r}}async function hs(e,r){if(r.isErr())return{status:"missing",type:"lockfile"};let t=z(M,r.value),n=await Q.promises.readFile(sr.join(e,O),"utf8").catch(()=>null);return{status:ys(n,t),type:"lockfile"}}function ys(e,r){return e==null?"missing":e===r?"match":"stale"}function ks(e){let r=sr.join(e,".git","hooks","pre-commit");return Q.existsSync(r)?{installed:Q.readFileSync(r,"utf8").includes("ripplo compile --check"),type:"pre-commit-hook"}:{installed:!1,type:"pre-commit-hook"}}async function ws(e,r){if(!e.valid||r.isErr())return[];let t=jr().map(s=>({appUrl:s.appUrl,engineUrl:s.engineUrl,webhookSecret:s.webhookSecret})).unwrapOr(void 0);if(t==null)return[];let n=[],o=await ae(t.appUrl)==null;n.push({appUrl:t.appUrl,reachable:o,type:"dev-server"});let i=await Jt(process.cwd());n.push(i);let a=await vs(t,r);return n.push(...a),n}async function vs(e,r){let t=r.isOk()?r.value.entities.length:0,n=e.engineUrl.length>0,o={configured:n,count:t,endpointReachable:void 0,type:"preconditions"};if(t===0||!n)return[o];let i=Ss(e.appUrl,e.engineUrl);if(i==null)return[o];let a=await ae(i)==null,s=[];if(s.push({configured:!0,count:t,endpointReachable:a,type:"preconditions"}),tn(e.engineUrl)&&s.push({reachable:a,type:"engine-endpoint",url:i}),!a)return s;let l=await Wr({appUrl:e.appUrl,engineUrl:e.engineUrl});s.push({rejectsUnsigned:l==null,type:"webhook-verification"});let d=await bs({engineUrl:i,webhookSecret:e.webhookSecret});return s.push({status:d,type:"adapter-enabled",url:i}),s}async function bs({engineUrl:e,webhookSecret:r}){if(r.length===0)return"no-secret";let t=JSON.stringify({});try{let n=await fetch(`${e}/setup`,{body:t,headers:{"Content-Type":"application/json",...Er({body:t,secret:r})},method:"PUT",signal:AbortSignal.timeout(5e3)});return n.status===404?"disabled":n.status===401||n.status===403?"bad-secret":"enabled"}catch{return"unreachable"}}function tn(e){return e.startsWith("http://")||e.startsWith("https://")}function Ss(e,r){return tn(r)?r:`${e}${r}`}var xs=3e3;async function nn(){let e=process.cwd(),[r,t]=await Promise.all([Pe(xs),rn(e)]);process.stdout.write(`${Ce({current:P(),latest:r})}
-`);let n=t.map(i=>Kt(i));process.stdout.write(n.join(`
+`),ks="Failed to connect to Ripplo server";async function dt({serverUrl:e,token:r}){try{let n=await m({config:M({serverUrl:e,token:r}),document:ys,variables:void 0});return n.currentUser==null?{kind:"invalid"}:{email:n.currentUser.email,kind:"valid"}}catch(n){return(n instanceof Error?n.message:String(n)).startsWith(ks)?{kind:"unreachable"}:{kind:"invalid"}}}function ct(e){switch(e.type){case"settings":return!e.valid;case"env-files":return e.missing.length>0;case"token":return e.status==="missing"||e.status==="invalid";case"dev-server":return!e.reachable;case"dev-session":return e.status!=="active";case"preconditions":return e.count>0&&!e.configured;case"engine-endpoint":return!e.reachable;case"adapter-enabled":return e.status!=="enabled";case"webhook-verification":return!e.rejectsUnsigned;case"preconditions-validation":return!e.valid;case"workflows":return e.invalidNames.length>0;case"browser":return!e.installed;case"lockfile":return e.status!=="match";case"pre-commit-hook":return!e.installed;case"plugin-version":return!1}}async function pt(e){let r=await Ss(e),n={missing:Tr(e),type:"env-files"},t=await Rs(),o=await xs(),i=await R(e),a=Cs(i),s=Ps(i),l=await Es(e,i),d=Is(e),u=bs(e),p=await As(r,i);return[r,n,t,...p,a,s,l,d,o,...u==null?[]:[u]]}var vs=q.object({plugins:q.record(q.string(),q.array(q.object({projectPath:q.string().optional(),scope:q.string().optional(),version:q.string()})))});function bs(e){let r=ar.join(ws.homedir(),".claude","plugins","installed_plugins.json"),n=Q.existsSync(r)?Q.readFileSync(r,"utf8"):null;if(n==null)return null;let t=vs.safeParse(JSON.parse(n));if(!t.success)return null;let o=Object.entries(t.data.plugins).filter(([a])=>a.startsWith("ripplo@")).flatMap(([,a])=>a).filter(a=>a.scope==="user"||a.projectPath===e).map(a=>a.version),i=at(o);return i==null?null:{cliVersion:P(),installed:i,type:"plugin-version"}}async function Ss(e){let r=await Hr(e);return r.valid?{missingFields:[],type:"settings",valid:!0}:{missingFields:r.errors.map(t=>t.path).filter(t=>t.length>0),type:"settings",valid:!1}}async function Rs(){let e=j(),r=O(e);if(r==null||r.length===0)return{email:void 0,status:"missing",type:"token"};let n=await dt({serverUrl:e,token:r});return n.kind==="valid"?{email:n.email,status:"valid",type:"token"}:{email:void 0,status:n.kind,type:"token"}}async function xs(){let{chromium:e}=await import("playwright"),r=e.executablePath();return{installed:Q.existsSync(r),type:"browser"}}function Cs(e){if(e.isErr())return{errorCount:1,errors:[{message:v(e.error),path:".ripplo/"}],found:!1,type:"preconditions-validation",valid:!1};let r=H(e.value);return{errorCount:r.length,errors:r.length===0?[]:[{message:W(r),path:""}],found:!0,type:"preconditions-validation",valid:r.length===0}}function Ps(e){if(e.isErr())return{invalidNames:[],invalidWorkflows:[],total:0,type:"workflows",valid:0};let r=e.value.workflows.length;return{invalidNames:[],invalidWorkflows:[],total:r,type:"workflows",valid:r}}async function Es(e,r){if(r.isErr())return{status:"missing",type:"lockfile"};let n=G(U,r.value),t=await Q.promises.readFile(ar.join(e,D),"utf8").catch(()=>null);return{status:$s(t,n),type:"lockfile"}}function $s(e,r){return e==null?"missing":e===r?"match":"stale"}function Is(e){let r=ar.join(e,".git","hooks","pre-commit");return Q.existsSync(r)?{installed:Q.readFileSync(r,"utf8").includes("ripplo compile --check"),type:"pre-commit-hook"}:{installed:!1,type:"pre-commit-hook"}}async function As(e,r){if(!e.valid||r.isErr())return[];let n=jr().map(s=>({appUrl:s.appUrl,engineUrl:s.engineUrl,webhookSecret:s.webhookSecret})).unwrapOr(void 0);if(n==null)return[];let t=[],o=await le(n.appUrl)==null;t.push({appUrl:n.appUrl,reachable:o,type:"dev-server"});let i=await ot(process.cwd());t.push(i);let a=await js(n,r);return t.push(...a),t}async function js(e,r){let n=r.isOk()?r.value.entities.length:0,t=e.engineUrl.length>0,o={configured:t,count:n,endpointReachable:void 0,type:"preconditions"};if(n===0||!t)return[o];let i=Ls(e.appUrl,e.engineUrl);if(i==null)return[o];let a=await le(i)==null,s=[];if(s.push({configured:!0,count:n,endpointReachable:a,type:"preconditions"}),ut(e.engineUrl)&&s.push({reachable:a,type:"engine-endpoint",url:i}),!a)return s;let l=await Wr({appUrl:e.appUrl,engineUrl:e.engineUrl});s.push({rejectsUnsigned:l==null,type:"webhook-verification"});let d=await Ts({engineUrl:i,webhookSecret:e.webhookSecret});return s.push({status:d,type:"adapter-enabled",url:i}),s}async function Ts({engineUrl:e,webhookSecret:r}){if(r.length===0)return"no-secret";let n=JSON.stringify({});try{let t=await fetch(`${e}/setup`,{body:n,headers:{"Content-Type":"application/json",...$r({body:n,secret:r})},method:"PUT",signal:AbortSignal.timeout(5e3)});return t.status===404?"disabled":t.status===401||t.status===403?"bad-secret":"enabled"}catch{return"unreachable"}}function ut(e){return e.startsWith("http://")||e.startsWith("https://")}function Ls(e,r){return ut(r)?r:`${e}${r}`}var Ds=3e3;async function mt(){let e=process.cwd(),[r,n]=await Promise.all([Ee(Ds),pt(e)]);process.stdout.write(`${Pe({current:P(),latest:r})}
+`);let t=n.map(i=>it(i));process.stdout.write(t.join(`
 `)+`
-`);let o=t.some(i=>en(i));process.exit(o?1:0)}import $e from"fs";import{graphql as Rs}from"gql.tada";var Cs=Rs(`
+`);let o=n.some(i=>ct(i));process.exit(o?1:0)}import Ie from"fs";import{graphql as Os}from"gql.tada";var _s=Os(`
   mutation CliSetHooksPaused($projectId: String!, $paused: Boolean!) {
     setHooksPaused(projectId: $projectId, paused: $paused) {
       id
     }
   }
-`);async function on(){process.stdin.isTTY||(process.stderr.write("`ripplo hooks pause` only runs interactively from a terminal. Bypassing the gate is a human decision, not an agent decision.\n"),process.exit(1));let e=process.cwd();ke(e);let r=le(e);if($e.existsSync(r)){process.stdout.write("Hooks already paused. Run `npx ripplo hooks resume` to re-enable.\n");return}$e.writeFileSync(r,""),await an(e,!0),process.stdout.write("Hooks paused. Pre-edit gates and stop enforcement are off until you run `npx ripplo hooks resume`.\n")}async function sn(){let e=process.cwd(),r=le(e);if(!$e.existsSync(r)){process.stdout.write(`Hooks already active.
-`);return}$e.unlinkSync(r),await an(e,!1),process.stdout.write(`Hooks resumed.
-`)}async function an(e,r){let t=w(e).unwrapOr(void 0);t!=null&&await u({config:t,document:Cs,variables:{paused:r,projectId:t.projectId}}).catch(n=>{process.stderr.write(`Warning: could not push hook-pause state to the server (${n instanceof Error?n.message:String(n)}) \u2014 the dashboard may show stale hook status.
-`)})}import Z from"fs";import ee from"path";import{input as fn,select as gn}from"@inquirer/prompts";import{graphql as ta}from"gql.tada";import{exec as $s,execFile as Is}from"child_process";import{err as js,ok as ln}from"neverthrow";import k from"fs";import{createRequire as As}from"module";import h from"path";import{promisify as cn}from"util";import{writeFile as Ps}from"fs/promises";import Es from"path";async function X(e){let r=await S(e);return r.isOk()&&await Ps(Es.join(e,O),z(M,r.value)),r}function U(e){return e.workflows.filter(r=>r.stub).map(r=>r.name)}var Ls=["@ripplo/testing","@ripplo/instrument"],dn=".ripplo/ripplo.lock linguist-generated=true",Ts=[".ripplo/debug/",".ripplo/.local/"],Ds=cn($s),Os=cn(Is);async function pn({cwd:e,onStep:r}){r("Scaffolding project files..."),Gs({cwd:e}),r("Updating .gitignore..."),zs(e),r("Marking ripplo.lock as generated..."),Us(e),r("Installing dependencies...");let t=await Fs(e),n=[];if(t.ok||n.push({manualCommand:t.cmd,message:`Couldn't auto-install dev dependencies (${t.reason}). Run the command below, then run \`npx ripplo lint\` to compile the lockfile.`}),t.ok){r("Compiling initial lockfile...");let i=await Ns(e);i!=null&&n.push({manualCommand:void 0,message:i})}return r("Setting up browser..."),(await _s()).map(()=>n)}async function _s(){let{chromium:e}=await import("playwright"),r=e.executablePath();if(k.existsSync(r))return ln(void 0);$.info("Chromium not found. Installing via Playwright...");let t=As(import.meta.url),n=h.dirname(t.resolve("playwright/package.json")),o=h.join(n,"cli.js");return await Os(process.execPath,[o,"install","chromium"]),k.existsSync(r)?ln(void 0):js({kind:"playwright-install-failed"})}async function Fs(e){let r=Ms({cwd:e,pm:Vs(e)});$.info("Installing dependencies: %s",r);try{return await Ds(r,{cwd:e}),{ok:!0}}catch(t){let n=t instanceof Error?t.message.split(`
-`)[0]??t.message:String(t);return $.warn("Install failed (%s): %s",r,n),{cmd:r,ok:!1,reason:n}}}async function Ns(e){try{await X(e);return}catch(r){return`Couldn't compile initial lockfile: ${r instanceof Error?r.message:String(r)}.`}}function Us(e){let r=h.join(e,".gitattributes"),t=k.existsSync(r)?k.readFileSync(r,"utf8"):"";if(t.includes(dn))return;let n=t.length===0||t.endsWith(`
+`);async function ft(){process.stdin.isTTY||(process.stderr.write("`ripplo hooks pause` only runs interactively from a terminal. Bypassing the gate is a human decision, not an agent decision.\n"),process.exit(1));let e=process.cwd();we(e);let r=de(e);if(Ie.existsSync(r)){process.stdout.write("Hooks already paused. Run `npx ripplo hooks resume` to re-enable.\n");return}Ie.writeFileSync(r,""),await ht(e,!0),process.stdout.write("Hooks paused. Pre-edit gates and stop enforcement are off until you run `npx ripplo hooks resume`.\n")}async function gt(){let e=process.cwd(),r=de(e);if(!Ie.existsSync(r)){process.stdout.write(`Hooks already active.
+`);return}Ie.unlinkSync(r),await ht(e,!1),process.stdout.write(`Hooks resumed.
+`)}async function ht(e,r){let n=k(e).unwrapOr(void 0);n!=null&&await m({config:n,document:_s,variables:{paused:r,projectId:n.projectId}}).catch(t=>{process.stderr.write(`Warning: could not push hook-pause state to the server (${t instanceof Error?t.message:String(t)}) \u2014 the dashboard may show stale hook status.
+`)})}import ee from"fs";import re from"path";import{input as Rt,select as xt}from"@inquirer/prompts";import{graphql as ma}from"gql.tada";import{exec as Us,execFile as Ms}from"child_process";import{err as Hs,ok as yt}from"neverthrow";import w from"fs";import{createRequire as Ws}from"module";import h from"path";import{promisify as wt}from"util";import{writeFile as Fs}from"fs/promises";import Ns from"path";async function Y(e){let r=await R(e);return r.isOk()&&await Fs(Ns.join(e,D),G(U,r.value)),r}function N(e){return e.workflows.filter(r=>r.stub).map(r=>r.name)}var qs=["@ripplo/testing","@ripplo/instrument"],kt=".ripplo/ripplo.lock linguist-generated=true",Bs=[".ripplo/debug/",".ripplo/.local/"],Vs=wt(Us),Gs=wt(Ms);async function vt({cwd:e,onStep:r}){r("Scaffolding project files..."),ta({cwd:e}),r("Updating .gitignore..."),oa(e),r("Marking ripplo.lock as generated..."),Xs(e),r("Installing dependencies...");let n=await Js(e),t=[];if(n.ok||t.push({manualCommand:n.cmd,message:`Couldn't auto-install dev dependencies (${n.reason}). Run the command below, then run \`npx ripplo lint\` to compile the lockfile.`}),n.ok){r("Compiling initial lockfile...");let i=await Ks(e);i!=null&&t.push({manualCommand:void 0,message:i})}return r("Setting up browser..."),(await zs()).map(()=>t)}async function zs(){let{chromium:e}=await import("playwright"),r=e.executablePath();if(w.existsSync(r))return yt(void 0);I.info("Chromium not found. Installing via Playwright...");let n=Ws(import.meta.url),t=h.dirname(n.resolve("playwright/package.json")),o=h.join(t,"cli.js");return await Gs(process.execPath,[o,"install","chromium"]),w.existsSync(r)?yt(void 0):Hs({kind:"playwright-install-failed"})}async function Js(e){let r=Qs({cwd:e,pm:na(e)});I.info("Installing dependencies: %s",r);try{return await Vs(r,{cwd:e}),{ok:!0}}catch(n){let t=n instanceof Error?n.message.split(`
+`)[0]??n.message:String(n);return I.warn("Install failed (%s): %s",r,t),{cmd:r,ok:!1,reason:t}}}async function Ks(e){try{await Y(e);return}catch(r){return`Couldn't compile initial lockfile: ${r instanceof Error?r.message:String(r)}.`}}function Xs(e){let r=h.join(e,".gitattributes"),n=w.existsSync(r)?w.readFileSync(r,"utf8"):"";if(n.includes(kt))return;let t=n.length===0||n.endsWith(`
 `)?"":`
-`;k.writeFileSync(r,`${t}${n}${dn}
-`)}function Ms({cwd:e,pm:r}){let t=Ls.join(" ");return r==="pnpm"?Hs(e)?`pnpm add -wD ${t}`:`pnpm add -D ${t}`:r==="yarn"?Ws({cwd:e,deps:t}):r==="bun"?`bun add -d ${t}`:`npm install -D ${t}`}function Hs(e){return k.existsSync(h.join(e,"pnpm-workspace.yaml"))||k.existsSync(h.join(e,"pnpm-workspace.yml"))}function Ws({cwd:e,deps:r}){return qs(e)?`yarn add -D ${r}`:Bs(e)?`yarn add -WD ${r}`:`yarn add -D ${r}`}function qs(e){if(k.existsSync(h.join(e,".yarnrc.yml"))||k.existsSync(h.join(e,".pnp.cjs"))||k.existsSync(h.join(e,".pnp.js")))return!0;let r=h.join(e,"package.json");if(!k.existsSync(r))return!1;try{let t=JSON.parse(k.readFileSync(r,"utf8"));if(t==null||typeof t!="object"||!("packageManager"in t))return!1;let n=t.packageManager;if(typeof n!="string")return!1;let o=/^yarn@(\d+)/.exec(n);return o!=null&&Number(o[1])>=2}catch{return!1}}function Bs(e){let r=h.join(e,"package.json");if(!k.existsSync(r))return!1;try{let t=JSON.parse(k.readFileSync(r,"utf8"));if(t==null||typeof t!="object"||!("workspaces"in t))return!1;let n=t.workspaces;return Array.isArray(n)||n!=null&&typeof n=="object"}catch{return!1}}function Vs(e){return k.existsSync(h.join(e,"pnpm-lock.yaml"))?"pnpm":k.existsSync(h.join(e,"yarn.lock"))?"yarn":k.existsSync(h.join(e,"bun.lockb"))||k.existsSync(h.join(e,"bun.lock"))?"bun":"npm"}function Gs({cwd:e}){let r=h.join(e,".ripplo"),t=h.join(r,"entities"),n=h.join(r,"singletons"),o=h.join(r,"worlds"),i=h.join(r,"workflows");[t,n,o,i].forEach(a=>{k.mkdirSync(a,{recursive:!0})}),Y(h.join(r,"index.ts"),Js),Y(h.join(t,"index.ts"),Ks),Y(h.join(n,"index.ts"),Qs),Y(h.join(o,"index.ts"),Xs),Y(h.join(i,"index.ts"),Ys),Y(h.join(r,"tsconfig.json"),Zs)}function Y(e,r){k.existsSync(e)||k.writeFileSync(e,r)}function zs(e){let r=h.join(e,".gitignore");if(!k.existsSync(r))return;let t=k.readFileSync(r,"utf8"),n=Ts.filter(i=>!t.includes(i));if(n.length===0)return;let o=t.endsWith(`
+`;w.writeFileSync(r,`${n}${t}${kt}
+`)}function Qs({cwd:e,pm:r}){let n=qs.join(" ");return r==="pnpm"?Ys(e)?`pnpm add -wD ${n}`:`pnpm add -D ${n}`:r==="yarn"?Zs({cwd:e,deps:n}):r==="bun"?`bun add -d ${n}`:`npm install -D ${n}`}function Ys(e){return w.existsSync(h.join(e,"pnpm-workspace.yaml"))||w.existsSync(h.join(e,"pnpm-workspace.yml"))}function Zs({cwd:e,deps:r}){return ea(e)?`yarn add -D ${r}`:ra(e)?`yarn add -WD ${r}`:`yarn add -D ${r}`}function ea(e){if(w.existsSync(h.join(e,".yarnrc.yml"))||w.existsSync(h.join(e,".pnp.cjs"))||w.existsSync(h.join(e,".pnp.js")))return!0;let r=h.join(e,"package.json");if(!w.existsSync(r))return!1;try{let n=JSON.parse(w.readFileSync(r,"utf8"));if(n==null||typeof n!="object"||!("packageManager"in n))return!1;let t=n.packageManager;if(typeof t!="string")return!1;let o=/^yarn@(\d+)/.exec(t);return o!=null&&Number(o[1])>=2}catch{return!1}}function ra(e){let r=h.join(e,"package.json");if(!w.existsSync(r))return!1;try{let n=JSON.parse(w.readFileSync(r,"utf8"));if(n==null||typeof n!="object"||!("workspaces"in n))return!1;let t=n.workspaces;return Array.isArray(t)||t!=null&&typeof t=="object"}catch{return!1}}function na(e){return w.existsSync(h.join(e,"pnpm-lock.yaml"))?"pnpm":w.existsSync(h.join(e,"yarn.lock"))?"yarn":w.existsSync(h.join(e,"bun.lockb"))||w.existsSync(h.join(e,"bun.lock"))?"bun":"npm"}function ta({cwd:e}){let r=h.join(e,".ripplo"),n=h.join(r,"entities"),t=h.join(r,"singletons"),o=h.join(r,"worlds"),i=h.join(r,"workflows");[n,t,o,i].forEach(a=>{w.mkdirSync(a,{recursive:!0})}),Z(h.join(r,"index.ts"),ia),Z(h.join(n,"index.ts"),sa),Z(h.join(t,"index.ts"),aa),Z(h.join(o,"index.ts"),la),Z(h.join(i,"index.ts"),da),Z(h.join(r,"tsconfig.json"),ca)}function Z(e,r){w.existsSync(e)||w.writeFileSync(e,r)}function oa(e){let r=h.join(e,".gitignore");if(!w.existsSync(r))return;let n=w.readFileSync(r,"utf8"),t=Bs.filter(i=>!n.includes(i));if(t.length===0)return;let o=n.endsWith(`
 `)?"":`
-`;k.writeFileSync(r,t+o+n.join(`
+`;w.writeFileSync(r,n+o+t.join(`
 `)+`
-`)}var Js=`import { createRipplo } from "@ripplo/testing";
+`)}var ia=`import { createRipplo } from "@ripplo/testing";
 import { entities } from "./entities/index";
 import { singletons } from "./singletons/index";
 import { workflows } from "./workflows/index";
@@ -115,7 +115,7 @@ export default createRipplo({
   singletons,
   workflows,
 });
-`,Ks=`// Model the app's state as entities. Each entity gets a \`seed\`/\`read\` impl in your
+`,sa=`// Model the app's state as entities. Each entity gets a \`seed\`/\`read\` impl in your
 // app's engine funnel (createEngine). See /ripplo:create "Adding an entity".
 //
 // Example:
@@ -131,7 +131,7 @@ export default createRipplo({
 //   export const entities = [Project] as const;
 
 export const entities = [] as const;
-`,Qs=`// Client/global state (e.g. localStorage flags) modeled as singletons.
+`,aa=`// Client/global state (e.g. localStorage flags) modeled as singletons.
 //
 // Example:
 //   import { singleton, v } from "@ripplo/testing";
@@ -146,7 +146,7 @@ export const entities = [] as const;
 //   export const singletons = [onboardingDismissed];
 
 export const singletons = [];
-`,Xs=`// Pure builder functions returning a flat record of entity handles \u2014 the starting state
+`,la=`// Pure builder functions returning a flat record of entity handles \u2014 the starting state
 // for workflows. Compose from other worlds. See /ripplo:create "Adding a world".
 //
 // Example:
@@ -158,7 +158,7 @@ export const singletons = [];
 //     const project = Project.of({ name: arbitrary(Project.field.name), ownerId: me.id });
 //     return { me, project };
 //   };
-`,Ys=`// Each file under ./workflows exports a workflow. Import them here and add to the
+`,da=`// Each file under ./workflows exports a workflow. Import them here and add to the
 // \`workflows\` array \u2014 that's what createRipplo({ ..., workflows }) receives. Stub with
 // \`workflow("Intent")\` (no body); implement later with \`workflow("Intent", () => ({ given, steps }))\`.
 //
@@ -167,7 +167,7 @@ export const singletons = [];
 //   export const workflows = [createProject] as const;
 
 export const workflows = [] as const;
-`,Zs=`{
+`,ca=`{
   "compilerOptions": {
     "strict": true,
     "noUncheckedIndexedAccess": true,
@@ -183,82 +183,81 @@ export const workflows = [] as const;
   "include": ["*.ts", "entities/**/*.ts", "singletons/**/*.ts", "worlds/**/*.ts", "workflows/**/*.ts"],
   "exclude": ["node_modules"]
 }
-`;import Ie from"fs";import un from"path";import{z as ar}from"zod";var ea={autoUpdate:!0,source:{repo:"ripplo/claude-plugin",source:"github"}},mn=ar.record(ar.string(),ar.unknown());function je(e){let r=un.join(e,".claude","settings.json"),t=ra(r);if(t==null)return"unparseable";let n=mn.safeParse(t.extraKnownMarketplaces??{});if(!n.success)return"unparseable";if(n.data.ripplo!=null)return"already-present";let o={...t,extraKnownMarketplaces:{...n.data,ripplo:ea}};return Ie.mkdirSync(un.dirname(r),{recursive:!0}),Ie.writeFileSync(r,`${JSON.stringify(o,null,2)}
-`),"written"}function ra(e){if(!Ie.existsSync(e))return{};try{let r=mn.safeParse(JSON.parse(Ie.readFileSync(e,"utf8")));return r.success?r.data:void 0}catch{return}}function Ae(e){switch(e){case"written":return"  registered ripplo plugin marketplace in .claude/settings.json (autoUpdate: true \u2014 Claude Code keeps the plugin current)";case"already-present":return"  ripplo plugin marketplace already registered in .claude/settings.json";case"unparseable":return"  ! .claude/settings.json could not be parsed \u2014 add the ripplo marketplace to extraKnownMarketplaces manually"}}var na=ta(`
+`;import Ae from"fs";import bt from"path";import{z as lr}from"zod";var pa={autoUpdate:!0,source:{repo:"ripplo/claude-plugin",source:"github"}},St=lr.record(lr.string(),lr.unknown());function je(e){let r=bt.join(e,".claude","settings.json"),n=ua(r);if(n==null)return"unparseable";let t=St.safeParse(n.extraKnownMarketplaces??{});if(!t.success)return"unparseable";if(t.data.ripplo!=null)return"already-present";let o={...n,extraKnownMarketplaces:{...t.data,ripplo:pa}};return Ae.mkdirSync(bt.dirname(r),{recursive:!0}),Ae.writeFileSync(r,`${JSON.stringify(o,null,2)}
+`),"written"}function ua(e){if(!Ae.existsSync(e))return{};try{let r=St.safeParse(JSON.parse(Ae.readFileSync(e,"utf8")));return r.success?r.data:void 0}catch{return}}function Te(e){switch(e){case"written":return"  registered ripplo plugin marketplace in .claude/settings.json (autoUpdate: true \u2014 Claude Code keeps the plugin current)";case"already-present":return"  ripplo plugin marketplace already registered in .claude/settings.json";case"unparseable":return"  ! .claude/settings.json could not be parsed \u2014 add the ripplo marketplace to extraKnownMarketplaces manually"}}var fa=ma(`
   query InitProjects {
     projects {
       id
       name
     }
   }
-`),lr=["../.env.local","../.env"];async function hn(e=sa()){let r=process.cwd(),t=A(),n=F(t);n==null&&(process.stdout.write("Not signed in. Run `npx ripplo auth login` first.\n"),process.exit(1)),oa(r)&&(process.stdout.write(`\`.ripplo/index.ts\` already exists at ${r}. To re-init, delete it first.
-`),process.exit(1));let o=await ia({serverUrl:t,token:n});o.length===0&&(process.stdout.write("No projects found. Create one in the dashboard first, then re-run `npx ripplo init`.\n"),process.exit(1));let i=await la(o,e.projectId),a=await da(r,e.envFile),s=await pa(e.appUrl),l=aa(s,e.engineUrl),d=ee.resolve(ee.join(r,".ripplo"),a);Ir({cwd:r,envFiles:[a],projectId:i}),ma({appUrl:s,engineUrl:l,filePath:d}),process.stdout.write(`${Ae(je(r))}
-`);let p=(await pn({cwd:r,onStep:y=>{process.stdout.write(`  ${y}
-`)}})).match(y=>y,y=>{process.stderr.write(`${j(y)}
+`),dr=["../.env.local","../.env"];async function Ct(e=ya()){let r=process.cwd(),n=j(),t=O(n);t==null&&(process.stdout.write("Not signed in. Run `npx ripplo auth login` first.\n"),process.exit(1)),ga(r)&&(process.stdout.write(`\`.ripplo/index.ts\` already exists at ${r}. To re-init, delete it first.
+`),process.exit(1));let o=await ha({serverUrl:n,token:t});o.length===0&&(process.stdout.write("No projects found. Create one in the dashboard first, then re-run `npx ripplo init`.\n"),process.exit(1));let i=await wa(o,e.projectId),a=await va(r,e.envFile),s=await Sa(e.appUrl),l=ka(s,e.engineUrl),d=re.resolve(re.join(r,".ripplo"),a);Ar({cwd:r,envFiles:[a],projectId:i}),xa({appUrl:s,engineUrl:l,filePath:d}),process.stdout.write(`${Te(je(r))}
+`);let p=(await vt({cwd:r,onStep:y=>{process.stdout.write(`  ${y}
+`)}})).match(y=>y,y=>{process.stderr.write(`${E(y)}
 `),process.exit(1)});if(p.length>0){process.stdout.write(`Done with warnings:
 `),p.forEach(y=>{process.stdout.write(`  - ${y.message}
 `),y.manualCommand!=null&&process.stdout.write(`    run: ${y.manualCommand}
-`)});return}process.stdout.write("Ready. Start `npx ripplo daemon` as a background process (or run `/ripplo:start` in Claude Code), then write workflows in `.ripplo/workflows/`.\n")}function oa(e){return Z.existsSync(ee.join(e,".ripplo","index.ts"))}async function ia({serverUrl:e,token:r}){return((await u({config:H({serverUrl:e,token:r}),document:na,variables:void 0})).projects??[]).map(n=>({id:n.id,name:n.name}))}function sa(){return{appUrl:void 0,engineUrl:void 0,envFile:void 0,projectId:void 0}}function aa(e,r){if(r!=null){try{new URL(r)}catch{process.stdout.write(`--engine-url is not a valid URL: ${r}
-`),process.exit(1)}return r}return`${e.replace(/\/$/,"")}/ripplo`}async function la(e,r){if(r!=null){let t=e.find(n=>n.id===r);return t==null&&(process.stdout.write(`Unknown project id: ${r}
-`),process.exit(1)),process.stdout.write(`Using project: ${t.name} (${t.id})
-`),t.id}if(e.length===1){let t=e[0];if(t==null)throw new Error("unreachable");return process.stdout.write(`Using project: ${t.name} (${t.id})
-`),t.id}return gn({choices:e.map(t=>({name:t.name,value:t.id})),message:"Select a project"})}async function da(e,r){return r!=null?(r.trim().length===0&&(process.stdout.write(`--env must not be empty
-`),process.exit(1)),r):ca(e)}async function ca(e){let r=ee.join(e,".ripplo"),t=lr.find(o=>Z.existsSync(ee.resolve(r,o))),n=await gn({choices:[...lr.map(o=>({name:t===o?`${o} (detected)`:o,value:o})),{name:"custom path",value:"__custom__"}],default:t??lr[0],message:"Which env file should ripplo write RIPPLO_APP_URL, RIPPLO_ENGINE_URL, RIPPLO_WEBHOOK_SECRET, and ENABLE_RIPPLO_TESTING to?"});return n!=="__custom__"?n:fn({message:"Path to env file (relative to .ripplo/, e.g. ../apps/server/.env)",validate:o=>o.trim().length>0?!0:"required"})}async function pa(e){if(e!=null){try{new URL(e)}catch{process.stdout.write(`--app-url is not a valid URL: ${e}
-`),process.exit(1)}return e}return ua()}async function ua(){return fn({default:"http://localhost:3000",message:"Where does your dev server run? (RIPPLO_APP_URL)",validate:e=>{try{return new URL(e),!0}catch{return"must be a valid URL"}}})}function ma({appUrl:e,engineUrl:r,filePath:t}){Z.mkdirSync(ee.dirname(t),{recursive:!0});let n=Z.existsSync(t)?Z.readFileSync(t,"utf8"):"",o=[];if(/^RIPPLO_APP_URL=/m.test(n)||o.push(`RIPPLO_APP_URL=${e}`),/^RIPPLO_ENGINE_URL=/m.test(n)||o.push(`RIPPLO_ENGINE_URL=${r}`),/^RIPPLO_WEBHOOK_SECRET=/m.test(n)||o.push(`RIPPLO_WEBHOOK_SECRET=${$r()}`),/^ENABLE_RIPPLO_TESTING=/m.test(n)||o.push("ENABLE_RIPPLO_TESTING=true"),o.length===0)return;let i=n.length===0||n.endsWith(`
+`)});return}process.stdout.write("Ready. Start `npx ripplo daemon` as a background process (or run `/ripplo:start` in Claude Code), then write workflows in `.ripplo/workflows/`.\n")}function ga(e){return ee.existsSync(re.join(e,".ripplo","index.ts"))}async function ha({serverUrl:e,token:r}){return((await m({config:M({serverUrl:e,token:r}),document:fa,variables:void 0})).projects??[]).map(t=>({id:t.id,name:t.name}))}function ya(){return{appUrl:void 0,engineUrl:void 0,envFile:void 0,projectId:void 0}}function ka(e,r){if(r!=null){try{new URL(r)}catch{process.stdout.write(`--engine-url is not a valid URL: ${r}
+`),process.exit(1)}return r}return`${e.replace(/\/$/,"")}/ripplo`}async function wa(e,r){if(r!=null){let n=e.find(t=>t.id===r);return n==null&&(process.stdout.write(`Unknown project id: ${r}
+`),process.exit(1)),process.stdout.write(`Using project: ${n.name} (${n.id})
+`),n.id}if(e.length===1){let n=e[0];if(n==null)throw new Error("unreachable");return process.stdout.write(`Using project: ${n.name} (${n.id})
+`),n.id}return xt({choices:e.map(n=>({name:n.name,value:n.id})),message:"Select a project"})}async function va(e,r){return r!=null?(r.trim().length===0&&(process.stdout.write(`--env must not be empty
+`),process.exit(1)),r):ba(e)}async function ba(e){let r=re.join(e,".ripplo"),n=dr.find(o=>ee.existsSync(re.resolve(r,o))),t=await xt({choices:[...dr.map(o=>({name:n===o?`${o} (detected)`:o,value:o})),{name:"custom path",value:"__custom__"}],default:n??dr[0],message:"Which env file should ripplo write RIPPLO_APP_URL, RIPPLO_ENGINE_URL, RIPPLO_WEBHOOK_SECRET, and ENABLE_RIPPLO_TESTING to?"});return t!=="__custom__"?t:Rt({message:"Path to env file (relative to .ripplo/, e.g. ../apps/server/.env)",validate:o=>o.trim().length>0?!0:"required"})}async function Sa(e){if(e!=null){try{new URL(e)}catch{process.stdout.write(`--app-url is not a valid URL: ${e}
+`),process.exit(1)}return e}return Ra()}async function Ra(){return Rt({default:"http://localhost:3000",message:"Where does your dev server run? (RIPPLO_APP_URL)",validate:e=>{try{return new URL(e),!0}catch{return"must be a valid URL"}}})}function xa({appUrl:e,engineUrl:r,filePath:n}){ee.mkdirSync(re.dirname(n),{recursive:!0});let t=ee.existsSync(n)?ee.readFileSync(n,"utf8"):"",o=[];if(/^RIPPLO_APP_URL=/m.test(t)||o.push(`RIPPLO_APP_URL=${e}`),/^RIPPLO_ENGINE_URL=/m.test(t)||o.push(`RIPPLO_ENGINE_URL=${r}`),/^RIPPLO_WEBHOOK_SECRET=/m.test(t)||o.push(`RIPPLO_WEBHOOK_SECRET=${Ir()}`),/^ENABLE_RIPPLO_TESTING=/m.test(t)||o.push("ENABLE_RIPPLO_TESTING=true"),o.length===0)return;let i=t.length===0||t.endsWith(`
 `)?"":`
-`;Z.writeFileSync(t,`${n}${i}${o.join(`
+`;ee.writeFileSync(n,`${t}${i}${o.join(`
 `)}
-`)}function Le(e){let r=e.workflows.filter(o=>!o.stub);if(r.length===0)return[];let t=new Set(r.flatMap(o=>fa(o))),n=new Set(r.flatMap(o=>ga(o)));return[...e.entities.filter(o=>!t.has(o.name)).map(o=>({entity:o.name,kind:"entity-never-given"})),...e.entities.filter(o=>t.has(o.name)&&!n.has(o.name)).map(o=>({entity:o.name,kind:"entity-never-mutated"})),...r.flatMap(o=>o.tests.flatMap(i=>ha(i)))]}function fa(e){return[...e.world,...e.maybe].map(r=>r.entity)}function ga(e){return e.steps.flatMap(r=>r.expect.flatMap(t=>ue(t))).map(r=>r.entity)}function ha(e){let r=e.steps.flatMap(t=>t.expect.flatMap(n=>ue(n)));return ya({states:r,test:e})}function ya({states:e,test:r}){let t=e.filter(n=>n.assertion.kind==="deleted").flatMap(n=>ka({predicate:n,test:r})).map(({entity:n,field:o})=>({entity:n,field:o,kind:"unmatchable-delete-key",testSlug:r.slug,workflow:r.workflow}));return ba(t)}function ka({predicate:e,test:r}){let t=r.world.filter(n=>n.entity===e.entity);return t.length===0?[]:Object.entries(e.key).filter(([n,o])=>va(o)&&!wa({field:n,setups:t})).map(([n])=>({entity:e.entity,field:n}))}function wa({field:e,setups:r}){return r.some(t=>Object.keys(t.set).includes(e))}function va(e){return e===null||typeof e!="object"}function ba(e){return e.filter((r,t)=>e.findIndex(n=>JSON.stringify(n)===JSON.stringify(r))===t)}function ue(e){return e.kind==="state"?[e]:e.kind==="not"?ue(e.predicate):e.kind==="and"?e.predicates.flatMap(r=>ue(r)):e.kind==="when"?e.branches.flatMap(r=>r.consequence.flatMap(t=>ue(t))):[]}async function yn(){let e=process.cwd(),t=(await S(e)).match(o=>o,o=>Sa(x(o))),n=W(t);if(n.length===0){let o=Le(t);o.length>0&&process.stdout.write(`${Ee(o)}
-`);let i=t.workflows.reduce((a,s)=>a+s.tests.length,0);process.stdout.write(`${Yt(i)}
-`);return}process.stderr.write(`${q(n)}
-`),process.exit(1)}function Sa(e){process.stderr.write(`${e}
-`),process.exit(1)}import{CancellationTokenSource as sl}from"vscode-jsonrpc/node";import Aa from"path";import{randomUUID as xa}from"crypto";import kn from"path";async function Te({assign:e,config:r,headed:t,lockfile:n,report:o,session:i,signal:a}){let s=J(n),l=await Ia({assign:e,corpus:s,lockfile:n});if(l==null)return{kind:"error",reason:"base-state-arrange-failed",rows:[],trail:[]};if(l.stepRuns.length===0)return{kind:"error",reason:"empty-trail",rows:[],trail:[]};let d=$a(s,l.stepRuns),g=await tt({baseState:{name:Ye(e.baseStateTest),test:e.baseStateTest},corpus:s,lensId:e.lensId,lockfile:n,lockfileHash:e.lockfileHash,options:{baseUrl:r.appUrl,engineUrl:r.engineUrl,fixturesDir:kn.join(r.cwd,we),generate:be,headed:t,secret:r.webhookSecret,tunnelAuth:void 0},session:i,shrinkBudget:e.shrinkBudget,trail:l,now:()=>new Date().toISOString(),runIdFor:p=>`explore-${xa()}-${String(p)}`},a);return o&&await Ca({baseStateTest:e.baseStateTest,config:r,lockfileHash:e.lockfileHash,outcome:g,stepSources:Ra(d)}),ja(g,d)}function Ra(e){return e.flatMap(r=>{let t=r.label.split("#")[0]??r.label;return r.actions.map(()=>t)})}async function Ca({baseStateTest:e,config:r,lockfileHash:t,outcome:n,stepSources:o}){n.kind!=="finding"||n.captureEvents.length===0||await ot({baseState:n.finding.baseState,branchName:void 0,category:Pa(n.finding.verifierLayer),commitSha:void 0,config:r,debugDir:kn.join(r.cwd,".ripplo","debug"),devSessionId:void 0,events:n.captureEvents,lockfileHash:t,runId:n.runId,signature:n.finding.signature,spec:Ea(e,n.captureEvents),stepSources:o}).catch(i=>{$.warn({error:i},"explore finding report failed")})}function Pa(e){return e==="data-rule"?"dataRule":e==="page-rule"?"pageRule":e}function Ea(e,r){let t=r.flatMap(o=>o.kind==="step"?[o.source]:[]),n={absent:e.absent,exclusive:e.exclusive,intent:e.intent,maybe:[],name:e.name,params:e.params,singletons:e.singletons,steps:t,stub:!1,tests:[],world:e.world};return JSON.stringify(n)}function $a(e,r){return r.flatMap(t=>{let n=e[t.idx];return n==null?[]:[{actions:[...n.nav,...n.steps].map(o=>Kr(o.action)),label:`${n.test}#${String(n.index)}`}]})}async function Ia({assign:e,corpus:r,lockfile:t}){return(await rt(t,{name:Ye(e.baseStateTest),test:e.baseStateTest},{generate:be,materialize:qr(be,t.valueSpaces),params:void 0})).match(o=>et({actionHashes:r.map(i=>xe(t,i)),baseStateSnapshot:o.snapshot,corpus:r,covered:new Set,lens:at(t),lensId:e.lensId,maxLength:e.maxLength,witnessTrail:e.stepRuns}),()=>null)}function ja(e,r){return e.kind==="error"?{kind:e.kind,reason:`runtime:${e.error.kind}`,rows:[],trail:[]}:e.kind==="aborted"?{kind:e.kind,rows:[],trail:[]}:{kind:e.kind,rows:[...e.rows],trail:[...r]}}var La={covered:0,deferred:0,findings:0,saturated:!1,total:0};async function wn(e){let r=w(e.cwd).match(d=>({config:d}),d=>({failure:d}));if("failure"in r)return{failure:r.failure,kind:"config-failed"};let t=r.config,n=await Tr(e.cwd);if(n.result.isErr())return{error:n.result.error,kind:"compile-failed"};let o={fingerprint:n.fingerprint,lockfile:n.result.value},i=st({onChange:()=>{}});if(!i.holder())return i.stop(),{kind:"explorer-busy"};let a=Se({clientVersion:P(),debugDir:Aa.join(e.cwd,".ripplo","debug"),headed:e.headed,writeOtlpPortFile:!1}),s={executed:0,status:()=>La},l=lt({cwd:e.cwd,maxTrailLength:e.maxLength,executeTrail:(d,g)=>Te({assign:d,config:t,headed:e.headed,lockfile:o.lockfile,report:!0,session:a,signal:g}),loadLockfile:()=>Promise.resolve(o),notifyWork:()=>{},onTrailDone:d=>{s.executed+=1,e.onTrail(s.executed,d,s.status())},probeApp:async()=>await ae(t.appUrl)==null});s.status=()=>l.status();try{await l.ready(),e.onReady(l.status());let d=await Ta(l,e),g=l.status();return await l.stop(),await a.close(),d===0&&g.total===0?{kind:"no-work"}:{executed:d,kind:"completed",progress:g}}finally{i.stop()}}async function Ta(e,r){let t=new AbortController().signal,n=async o=>{if(o>=r.trails)return o;let i=e.next();return i==null?o:(await i.run(t),n(o+1))};return n(0)}import{okAsync as Da}from"neverthrow";function vn(e,r,t){let n=rr(e);return er(n).andThen(o=>{let i=Oa(o,r);return i==null?Da({id:r,kind:"not-found"}):Yr(n,[{at:t,kind:"resolution",signature:i}]).map(()=>({id:r,kind:"dismissed",signature:i}))})}function bn(e,r){let t=rr(e);return er(t).andThen(n=>{let o=new Set(J(r).map(d=>xe(r,d))),i=new Set(_a(n).filter(d=>!o.has(d.actionHash)).map(d=>d.signature)),a=Fa(n),s=n.filter(d=>Na(d,o,a)),l=[...a].filter(d=>!i.has(d)).length;return Zr(t,s).map(()=>({kept:s.length,removedResolved:l,removedStale:i.size}))})}function Oa(e,r){return[...Ze(e).findings.entries()].find(([n,o])=>o.resolvedAt==null&&Xr(n)===r)?.[0]}function _a(e){return e.filter(r=>r.kind==="finding")}function Fa(e){return new Set([...Ze(e).findings.entries()].filter(([,r])=>r.resolvedAt!=null).map(([r])=>r))}function Na(e,r,t){return e.kind==="resolution"?!1:e.kind==="finding"?r.has(e.actionHash)&&!t.has(e.signature):!0}function Sn(e){if(e.pending.length===0&&e.recurrentFlaky.length===0)return"explore: no pending findings";let r=e.pending.length===0?[]:[`explore: ${b(e.pending.length,"pending finding")} \u2014 triage in layer order, top first`,...e.pending.map(o=>Ua(o))],t=e.recurrentFlaky.length===0?[]:[`recurrent flaky-candidates (same failure ${String(e.recurrentFlaky.length)}x, no deterministic repro \u2014 triage after findings):`,...e.recurrentFlaky.map(o=>Wa(o))],n=c("fuzz","triaging each finding (evidence -> classify -> fix -> replay)");return[...r,...t,"","replay after a fix: npx ripplo explore replay <id>",n].join(`
-`).trim()}function xn(e,r){switch(r.kind){case"resolved":return`explore: ${e} replayed clean \u2014 finding resolved, its targets covered under the current workflows`;case"unreachable":return`explore: ${e}'s trail is no longer plannable under the current workflows \u2014 finding resolved (if you narrowed a given/when, make sure a test covers the excluded state)`;case"still-failing":{let t=r.runId==null?"":` (fresh evidence: run ${r.runId})`;return`explore: ${e} still reproduces \u2014 same failure signature${t}`}case"diverged":{let t=r.runId==null?"":` (captured run ${r.runId})`;return`explore: ${e} failed with a different failure signature \u2014 new finding recorded${t}`}case"flaky":return`explore: ${e} did not reproduce deterministically \u2014 recorded as flaky-candidate, finding stays pending`;case"aborted":return`explore: replay of ${e} was aborted`;case"finding-not-found":return`explore: no pending finding ${e} \u2014 check ids with: npx ripplo explore findings`;case"unreplayable":return`explore: ${e} cannot be replayed (${r.reason})`;case"error":return`explore: replay of ${e} failed (${r.reason})`}}function Rn({executed:e,progress:r,trail:t}){let n=t.trail.flatMap(o=>[`      ${o.label}`,...o.actions.map(i=>`        ${i}`)]);return[`trail ${String(e)} ${t.kind} \u2014 ${de(r)}`,...n,`      state: ${t.label}`].join(`
-`)}function Cn(e){switch(e.kind){case"config-failed":return j(e.failure);case"compile-failed":return x(e.error);case"no-work":return"explore: nothing to explore \u2014 no runnable actions found in your workflows";case"explorer-busy":return"explore: another explorer holds the machine lock (likely the daemon's background explorer) \u2014 watch it with `npx ripplo status`, or stop it to explore in the foreground";case"completed":return`${`explore: ${String(e.executed)} trails executed`}
-${de(e.progress)}
-findings land in .ripplo/.local/explore-ledger.jsonl`}}function Pn(e){let r=e.evidence.map(n=>`    ${n}`),t=e.runId==null?["  no captured run \u2014 replay to capture one"]:[`  run: ${e.runId}`,`  behavior: .ripplo/debug/${e.runId}/behavior.jsonl`];return[`${e.id}  layer=${e.verifierLayer}  start=${e.baseState}`,`  seen ${String(e.occurrences)}x between ${dr(e.firstSeen)} and ${dr(e.lastSeen)}`,`  trail: ${e.trail.join(" -> ")}`,"  evidence:",...r,...t,`  replay after a fix: npx ripplo explore replay ${e.id}`].join(`
-`)}function cr(e){return`explore: no pending finding ${e} \u2014 check ids with: npx ripplo explore findings`}function En(e){return e.kind==="not-found"?cr(e.id):`explore: dismissed finding ${e.id}. Prune the log to drop it: npx ripplo explore prune`}function $n(e){if(e.removedStale+e.removedResolved===0)return"explore: nothing to prune \u2014 the findings log has no stale or dismissed entries.";let t=b(e.removedStale,"stale finding"),n=b(e.removedResolved,"dismissed finding");return`explore: pruned ${t} and ${n}, ${b(e.kept,"row")} kept.`}function Ua(e){let r=e.runId==null?"no captured run":`run ${e.runId}`;return[`  ${e.id}  layer=${e.verifierLayer}  seen ${String(e.occurrences)}x (last ${dr(e.lastSeen)})  start=${e.baseState}  ${r}`,`      mismatch: ${Ma(e.parts)}`,`      trail: ${e.trail.join(" -> ")}`].join(`
-`)}function dr(e){return e.slice(0,16).replace("T"," ")}function Ma(e){let r=e.at(0);if(r==null)return"no parts recorded";let t=e.length>1?` (+${String(e.length-1)} more)`:"";return`${Ha(r)}${t}`}function Ha(e){switch(e.kind){case"consistency":{let r="entity"in e.mismatch?e.mismatch.entity:e.mismatch.singleton,t=e.step==null?"":` at "${e.step.intent}"`;return`${e.mismatch.kind} on ${r}${t}`}case"pending-check":return`${e.source} check failed at "${e.step.intent}"`;case"unrunnable":return`step "${e.intent}" could not run (${e.reason})`;case"driver-error":return`${e.error} at "${e.step}"`;case"impossible-action":return`impossible action at "${e.step}"`}}function Wa(e){let r=e.trail.map(t=>t.split("|").at(0)??t);return`  ${e.id}  seen ${String(e.occurrences)}x  start=${e.baseState}
-      trail: ${r.join(" -> ")}`}import{spawn as qa}from"child_process";import In from"fs";import Ba from"net";import{setTimeout as pr}from"timers/promises";import{err as re,ok as me}from"neverthrow";import{ResponseError as Va}from"vscode-jsonrpc/node";var An=12e4,Ln=300,jn=5e3;async function te({cliEntry:e,cwd:r}){let t=K(r),n=await G(t);return n!=null?Ga({cliEntry:e,connection:_e(n,!1),cwd:r}):Tn({cliEntry:e,cwd:r,versionNote:void 0})}async function Tn({cliEntry:e,cwd:r,versionNote:t}){let n=Ya({cliEntry:e,cwd:r});if(n!=null)return re(n);let o=await Za(K(r));return o==null?re({deadlineMs:An,kind:"connect-timeout",logPath:tr(r)}):me({..._e(o,!0),versionNote:t})}async function Ga({cliEntry:e,connection:r,cwd:t}){let n=await _n(r);if(n==null||n.version===P())return me(r);let o={daemonVersion:n.version};return await za(r)?(r.socket.destroy(),await Ka(K(t))?Tn({cliEntry:e,cwd:t,versionNote:{...o,kind:"restarted"}}):re({kind:"connection-lost"})):me({...r,versionNote:{...o,kind:"stale-busy"}})}async function za(e){try{return await e.rpc.sendRequest(Re)}catch{return!1}}var Ja=1e4;async function Ka(e){let r=Date.now()+Ja,t=await G(e);for(;t!=null&&Date.now()<r;)t.destroy(),await pr(Ln),t=await G(e);return t?.destroy(),t==null}async function De({connection:e,onEvent:r,request:t,token:n}){let o=await Qa({connection:e,onEvent:r,request:t,token:n});return o.kind==="transport"?re(o.error):me(o)}async function Dn({connection:e,findingId:r,token:t}){try{let n=await e.rpc.sendRequest(vt,{findingId:r},t),o=wt.safeParse(n);return o.success?me(o.data):re({kind:"bad-frame"})}catch{return re({kind:"connection-lost"})}}async function On(e){let r=await G(K(e));if(r==null)return!1;let t=_e(r,!1);try{return await t.rpc.sendRequest(Re)}catch{return!1}finally{r.destroy()}}async function ne(e){try{await e.rpc.sendRequest(Re)}catch{}}async function Oe(e){let r=await G(K(e));if(r==null)return{kind:"not-running"};let t=_e(r,!1),n=await Promise.race([_n(t),pr(jn).then(()=>null)]);return r.destroy(),n==null?{kind:"unresponsive",timeoutMs:jn}:{kind:"running",status:n}}async function _n(e){try{let r=await e.rpc.sendRequest(St),t=gt.safeParse(r);return t.success?t.data:null}catch{return null}}function Qa({connection:e,onEvent:r,request:t,token:n}){let{rpc:o}=e;return new Promise(i=>{let a=s=>{i(s)};o.onNotification(xt,s=>{let l=ht.safeParse(s);if(!l.success){a({error:{kind:"bad-frame"},kind:"transport"});return}r(l.data.event)}),o.onNotification(Rt,s=>{let l=yt.safeParse(s);if(!l.success){a({error:{kind:"bad-frame"},kind:"transport"});return}a({failed:l.data.failed,kind:"done",notRun:l.data.notRun,passed:l.data.passed})}),o.onClose(()=>{a({error:{kind:"connection-lost"},kind:"transport"})}),o.sendRequest(bt,t,n).then(s=>{ft.safeParse(s).success||a({error:{kind:"bad-frame"},kind:"transport"})}).catch(s=>{a(Xa(s))})})}function Xa(e){if(e instanceof Va){let r=kt.safeParse(e.data);return r.success?{error:r.data,kind:"daemon-error"}:{error:{kind:"bad-frame"},kind:"transport"}}return{error:{kind:"connection-lost"},kind:"transport"}}function _e(e,r){let t=mt(e);return t.listen(),{rpc:t,socket:e,spawned:r,versionNote:void 0}}function G(e){return new Promise(r=>{let t=Ba.connect(e);t.once("connect",()=>{r(t)}),t.once("error",()=>{r(null)})})}function Ya({cliEntry:e,cwd:r}){try{ke(r);let t=In.openSync(tr(r),"a");return qa(process.execPath,[e,"daemon"],{cwd:r,detached:!0,stdio:["ignore",t,t]}).unref(),In.closeSync(t),null}catch(t){return{kind:"spawn-failed",message:t instanceof Error?t.message:String(t)}}}async function Za(e){let r=Date.now()+An,t=await G(e);for(;t==null&&Date.now()<r;)await pr(Ln),t=await G(e);return t}import rl from"fuse.js";var el=3e3;async function Fe(e){V(e);let r=w(e).unwrapOr(void 0);if(r==null)return null;try{return await fetch(`${r.ripploServerUrl}/health`,{signal:AbortSignal.timeout(el)}),null}catch(t){return{detail:t instanceof Error?t.message:String(t),serverUrl:r.ripploServerUrl}}}function Ne(e){return e.includes("localhost")||e.includes("127.0.0.1")}function ur(e){switch(e.kind){case"conflicting-flags":return"Pass either --all or test ids, not both.";case"nothing-selected":return`No tests selected \u2014 scope is empty and no .ripplo/workflows files are dirty. Pass test ids, add workflows to scope (${c("run")}), or use --all.`;case"unknown-ids":{let r=e.known,t=e.unknown.flatMap(o=>il(o,r)),n=t.length>0?[`Did you mean: ${[...new Set(t)].join(", ")}`]:[];return[`Unknown ${e.unknown.length===1?"id":"ids"}: ${e.unknown.join(", ")}`,...n,"Pass a workflow slug to run all its tests, or workflow/test for one. Known workflows:",...r.map(o=>`  ${o}`)].join(`
-`)}}}function Fn({failed:e,notRun:r,passed:t}){let n=r>0?`, ${String(r)} not run`:"",o=e>0?`
-${c("run")}`:"";return`${String(t)} passed, ${String(e)} failed${n} (${String(t+e+r)} total)${o}`}function Ue({debugDir:e,event:r}){let t=`${r.workflowName} \u2192 ${r.testName}`;if(r.kind==="test-started")return`${C.dim("run ")} ${t}`;switch(r.outcome.kind){case"pass":return`${C.good("pass")} ${t}`;case"findings":return[`${C.bad("fail")} ${t} \u2014 ${b(r.outcome.findingLines.length,"finding")}`,...r.outcome.findingLines,zr({debugDir:e,runId:r.runId})].join(`
-`);case"error":return`${C.bad("error")} ${t} \u2014 ${r.outcome.detail}`;case"dispatch-error":return`${C.bad("error")} ${t} \u2014 ${ol(r.outcome.reason)}`;case"dispatch-timeout":return`${C.bad("error")} ${t} \u2014 not run: dispatch timed out (transient): ${r.outcome.detail}`;case"infra-error":return`${C.bad("error")} ${t} \u2014 not run: Ripplo server unreachable (server-side, not local): ${r.outcome.detail}`}}var tl={MAX_AGENTS:"agent limit reached for your plan \u2014 upgrade to add more",MAX_CONCURRENT_RUNS:"concurrent run limit reached for your plan \u2014 upgrade or wait for runs to finish",MAX_PROJECTS:"project limit reached for your plan \u2014 upgrade to add more",MAX_RUNS:"run limit reached for your plan \u2014 enable overage or upgrade",OVERAGE_CAP:"overage cap reached \u2014 raise the cap or upgrade"};function Me({detail:e,serverUrl:r}){return Ne(r)?`Ripplo server at ${r} is not running (${e}). Tests were not started. Start the dev server (\`pnpm dev\`) and re-run.`:`Ripplo server at ${r} is unreachable (${e}). Tests were not started. This is a server-side issue, not your local environment \u2014 wait a moment and re-run.`}function He(e){switch(e.code){case"compile-failed":{let r=e.diagnostics.length===0?[]:["",...e.diagnostics];return[`Compilation failed in the daemon (${e.detail}). Run \`npx ripplo compile\` for the full output.`,...r].join(`
-`)}case"selection-conflicting-flags":return ur({kind:"conflicting-flags"});case"selection-nothing-selected":return ur({kind:"nothing-selected"});case"selection-unknown-ids":return ur({kind:"unknown-ids",known:e.known,unknown:e.unknown});case"app-unreachable":return`Your dev server is not responding at ${e.url} (${e.detail}). Tests were not started \u2014 start your app and re-run. This is your local environment, not the Ripplo server.`;case"scope-failed":return`Could not resolve the dev-session scope: ${e.detail}
-Verify the dev session is live (\`npx ripplo doctor\`, ${c("start")}), or pass test ids / --all explicitly.`;case"sync-failed":{let r=/401|unauthor/i.test(e.detail)?"\nLooks like an auth failure \u2014 run `npx ripplo auth login` and retry.":"";return`Sync to the Ripplo server failed: ${e.detail}${r}`}case"bad-message":return"Daemon rejected the request (protocol mismatch \u2014 rebuild/update the CLI and restart the daemon)."}}function D(e){switch(e.kind){case"spawn-failed":return`Failed to start \`npx ripplo daemon\`: ${nl(e.message)}`;case"connect-timeout":return[`Daemon did not come up within ${String(Math.round(e.deadlineMs/1e3))}s.`,`Check ${e.logPath} for startup errors.`,"Common causes: a stale socket (`rm .ripplo/.local/daemon.sock`), another daemon holding the dev lock, or the Ripplo server unreachable."].join(`
+`)}function Le(e){let r=e.workflows.filter(o=>!o.stub);if(r.length===0)return[];let n=new Set(r.flatMap(o=>Ca(o))),t=new Set(r.flatMap(o=>Pa(o)));return[...e.entities.filter(o=>!n.has(o.name)).map(o=>({entity:o.name,kind:"entity-never-given"})),...e.entities.filter(o=>n.has(o.name)&&!t.has(o.name)).map(o=>({entity:o.name,kind:"entity-never-mutated"})),...r.flatMap(o=>o.tests.flatMap(i=>Ea(i)))]}function Ca(e){return[...e.world,...e.maybe].map(r=>r.entity)}function Pa(e){return e.steps.flatMap(r=>r.expect.flatMap(n=>me(n))).map(r=>r.entity)}function Ea(e){let r=e.steps.flatMap(n=>n.expect.flatMap(t=>me(t)));return $a({states:r,test:e})}function $a({states:e,test:r}){let n=e.filter(t=>t.assertion.kind==="deleted").flatMap(t=>Ia({predicate:t,test:r})).map(({entity:t,field:o})=>({entity:t,field:o,kind:"unmatchable-delete-key",testSlug:r.slug,workflow:r.workflow}));return Ta(n)}function Ia({predicate:e,test:r}){let n=r.world.filter(t=>t.entity===e.entity);return n.length===0?[]:Object.entries(e.key).filter(([t,o])=>ja(o)&&!Aa({field:t,setups:n})).map(([t])=>({entity:e.entity,field:t}))}function Aa({field:e,setups:r}){return r.some(n=>Object.keys(n.set).includes(e))}function ja(e){return e===null||typeof e!="object"}function Ta(e){return e.filter((r,n)=>e.findIndex(t=>JSON.stringify(t)===JSON.stringify(r))===n)}function me(e){return e.kind==="state"?[e]:e.kind==="not"?me(e.predicate):e.kind==="and"?e.predicates.flatMap(r=>me(r)):e.kind==="when"?e.branches.flatMap(r=>r.consequence.flatMap(n=>me(n))):[]}async function Pt(){let e=process.cwd(),n=(await R(e)).match(o=>o,o=>La(v(o))),t=H(n);if(t.length===0){let o=Le(n);o.length>0&&process.stdout.write(`${$e(o)}
+`);let i=n.workflows.reduce((a,s)=>a+s.tests.length,0);process.stdout.write(`${lt(i)}
+`);return}process.stderr.write(`${W(t)}
+`),process.exit(1)}function La(e){process.stderr.write(`${e}
+`),process.exit(1)}import{CancellationTokenSource as yl}from"vscode-jsonrpc/node";import Wa from"path";import{randomUUID as Da}from"crypto";import Et from"path";async function De({assign:e,config:r,headed:n,lockfile:t,report:o,session:i,signal:a}){let s=J(t),l=await Ma({assign:e,corpus:s,lockfile:t});if(l==null)return{kind:"error",reason:"base-state-arrange-failed",rows:[],trail:[]};if(l.stepRuns.length===0)return{kind:"error",reason:"empty-trail",rows:[],trail:[]};let d=Ua(s,l.stepRuns),u=await un({baseState:{name:Ze(e.baseStateTest),test:e.baseStateTest},corpus:s,lensId:e.lensId,lockfile:t,lockfileHash:e.lockfileHash,options:{baseUrl:r.appUrl,engineUrl:r.engineUrl,fixturesDir:Et.join(r.cwd,z),generate:K,headed:n,secret:r.webhookSecret,tunnelAuth:void 0},session:i,shrinkBudget:e.shrinkBudget,trail:l,now:()=>new Date().toISOString(),runIdFor:p=>`explore-${Da()}-${String(p)}`},a);return o&&await _a({baseStateTest:e.baseStateTest,config:r,lockfileHash:e.lockfileHash,outcome:u,stepSources:Oa(d)}),Ha(u,d)}function Oa(e){return e.flatMap(r=>{let n=r.label.split("#")[0]??r.label;return r.actions.map(()=>n)})}async function _a({baseStateTest:e,config:r,lockfileHash:n,outcome:t,stepSources:o}){t.kind!=="finding"||t.captureEvents.length===0||await fn({baseState:t.finding.baseState,branchName:void 0,category:Fa(t.finding.verifierLayer),commitSha:void 0,config:r,debugDir:Et.join(r.cwd,".ripplo","debug"),devSessionId:void 0,events:t.captureEvents,lockfileHash:n,runId:t.runId,signature:t.finding.signature,spec:Na(e,t.captureEvents),stepSources:o}).catch(i=>{I.warn({error:i},"explore finding report failed")})}function Fa(e){return e==="data-rule"?"dataRule":e==="page-rule"?"pageRule":e}function Na(e,r){let n=r.flatMap(o=>o.kind==="step"?[o.source]:[]),t={absent:e.absent,exclusive:e.exclusive,intent:e.intent,maybe:[],name:e.name,params:e.params,singletons:e.singletons,steps:n,stub:!1,tests:[],world:e.world};return JSON.stringify(t)}function Ua(e,r){return r.flatMap(n=>{let t=e[n.idx];return t==null?[]:[{actions:[...t.nav,...t.steps].map(o=>Xr(o.action)),label:`${t.test}#${String(t.index)}`}]})}async function Ma({assign:e,corpus:r,lockfile:n}){return(await pn(n,{name:Ze(e.baseStateTest),test:e.baseStateTest},{generate:K,materialize:Br(K,n.valueSpaces),params:void 0})).match(o=>cn({actionHashes:r.map(i=>xe(n,i)),baseStateSnapshot:o.snapshot,corpus:r,covered:new Set,lens:yn(n),lensId:e.lensId,maxLength:e.maxLength,witnessTrail:e.stepRuns}),()=>null)}function Ha(e,r){return e.kind==="error"?{kind:e.kind,reason:`runtime:${e.error.kind}`,rows:[],trail:[]}:e.kind==="aborted"?{kind:e.kind,rows:[],trail:[]}:{kind:e.kind,rows:[...e.rows],trail:[...r]}}var qa={covered:0,deferred:0,findings:0,saturated:!1,total:0};async function $t(e){let r=k(e.cwd).match(d=>({config:d}),d=>({failure:d}));if("failure"in r)return{failure:r.failure,kind:"config-failed"};let n=r.config,t=await ve(e.cwd);if(t.result.isErr())return{error:t.result.error,kind:"compile-failed"};let o={fingerprint:t.fingerprint,lockfile:t.result.value},i=hn({onChange:()=>{}});if(!i.holder())return i.stop(),{kind:"explorer-busy"};let a=Re({clientVersion:P(),debugDir:Wa.join(e.cwd,".ripplo","debug"),headed:e.headed,writeOtlpPortFile:!1}),s={executed:0,status:()=>qa},l=kn({cwd:e.cwd,maxTrailLength:e.maxLength,executeTrail:(d,u)=>De({assign:d,config:n,headed:e.headed,lockfile:o.lockfile,report:!0,session:a,signal:u}),loadLockfile:()=>Promise.resolve(o),notifyWork:()=>{},onTrailDone:d=>{s.executed+=1,e.onTrail(s.executed,d,s.status())},probeApp:async()=>await le(n.appUrl)==null});s.status=()=>l.status();try{await l.ready(),e.onReady(l.status());let d=await Ba(l,e),u=l.status();return await l.stop(),await a.close(),d===0&&u.total===0?{kind:"no-work"}:{executed:d,kind:"completed",progress:u}}finally{i.stop()}}async function Ba(e,r){let n=new AbortController().signal,t=async o=>{if(o>=r.trails)return o;let i=e.next();return i==null?o:(await i.run(n),t(o+1))};return t(0)}import{okAsync as Va}from"neverthrow";function It(e,r,n){let t=nr(e);return rr(t).andThen(o=>{let i=Ga(o,r);return i==null?Va({id:r,kind:"not-found"}):ln(t,[{at:n,kind:"resolution",signature:i}]).map(()=>({id:r,kind:"dismissed",signature:i}))})}function At(e,r){let n=nr(e);return rr(n).andThen(t=>{let o=new Set(J(r).map(d=>xe(r,d))),i=new Set(za(t).filter(d=>!o.has(d.actionHash)).map(d=>d.signature)),a=Ja(t),s=t.filter(d=>Ka(d,o,a)),l=[...a].filter(d=>!i.has(d)).length;return dn(n,s).map(()=>({kept:s.length,removedResolved:l,removedStale:i.size}))})}function Ga(e,r){return[...er(e).findings.entries()].find(([t,o])=>o.resolvedAt==null&&an(t)===r)?.[0]}function za(e){return e.filter(r=>r.kind==="finding")}function Ja(e){return new Set([...er(e).findings.entries()].filter(([,r])=>r.resolvedAt!=null).map(([r])=>r))}function Ka(e,r,n){return e.kind==="resolution"?!1:e.kind==="finding"?r.has(e.actionHash)&&!n.has(e.signature):!0}function jt(e){if(e.pending.length===0&&e.recurrentFlaky.length===0)return"explore: no pending findings";let r=e.pending.length===0?[]:[`explore: ${S(e.pending.length,"pending finding")} \u2014 triage in layer order, top first`,...e.pending.map(o=>Xa(o))],n=e.recurrentFlaky.length===0?[]:[`recurrent flaky-candidates (same failure ${String(e.recurrentFlaky.length)}x, no deterministic repro \u2014 triage after findings):`,...e.recurrentFlaky.map(o=>Za(o))],t=c("fuzz","triaging each finding (evidence -> classify -> fix -> replay)");return[...r,...n,"","replay after a fix: npx ripplo explore replay <id>",t].join(`
+`).trim()}function Tt(e,r){switch(r.kind){case"resolved":return`explore: ${e} replayed clean \u2014 finding resolved, its targets covered under the current workflows`;case"unreachable":return`explore: ${e}'s trail is no longer plannable under the current workflows \u2014 finding resolved (if you narrowed a given/when, make sure a test covers the excluded state)`;case"still-failing":{let n=r.runId==null?"":` (fresh evidence: run ${r.runId})`;return`explore: ${e} still reproduces \u2014 same failure signature${n}`}case"diverged":{let n=r.runId==null?"":` (captured run ${r.runId})`;return`explore: ${e} failed with a different failure signature \u2014 new finding recorded${n}`}case"flaky":return`explore: ${e} did not reproduce deterministically \u2014 recorded as flaky-candidate, finding stays pending`;case"aborted":return`explore: replay of ${e} was aborted`;case"finding-not-found":return`explore: no pending finding ${e} \u2014 check ids with: npx ripplo explore findings`;case"unreplayable":return`explore: ${e} cannot be replayed (${r.reason})`;case"error":return`explore: replay of ${e} failed (${r.reason})`}}function Lt({executed:e,progress:r,trail:n}){let t=n.trail.flatMap(o=>[`      ${o.label}`,...o.actions.map(i=>`        ${i}`)]);return[`trail ${String(e)} ${n.kind} \u2014 ${ce(r)}`,...t,`      state: ${n.label}`].join(`
+`)}function Dt(e){switch(e.kind){case"config-failed":return E(e.failure);case"compile-failed":return v(e.error);case"no-work":return"explore: nothing to explore \u2014 no runnable actions found in your workflows";case"explorer-busy":return"explore: another explorer holds the machine lock (likely the daemon's background explorer) \u2014 watch it with `npx ripplo status`, or stop it to explore in the foreground";case"completed":return`${`explore: ${String(e.executed)} trails executed`}
+${ce(e.progress)}
+findings land in .ripplo/.local/explore-ledger.jsonl`}}function Ot(e){let r=e.evidence.map(t=>`    ${t}`),n=e.runId==null?["  no captured run \u2014 replay to capture one"]:[`  run: ${e.runId}`,`  behavior: .ripplo/debug/${e.runId}/behavior.jsonl`];return[`${e.id}  layer=${e.verifierLayer}  start=${e.baseState}`,`  seen ${String(e.occurrences)}x between ${cr(e.firstSeen)} and ${cr(e.lastSeen)}`,`  trail: ${e.trail.join(" -> ")}`,"  evidence:",...r,...n,`  replay after a fix: npx ripplo explore replay ${e.id}`].join(`
+`)}function pr(e){return`explore: no pending finding ${e} \u2014 check ids with: npx ripplo explore findings`}function _t(e){return e.kind==="not-found"?pr(e.id):`explore: dismissed finding ${e.id}. Prune the log to drop it: npx ripplo explore prune`}function Ft(e){if(e.removedStale+e.removedResolved===0)return"explore: nothing to prune \u2014 the findings log has no stale or dismissed entries.";let n=S(e.removedStale,"stale finding"),t=S(e.removedResolved,"dismissed finding");return`explore: pruned ${n} and ${t}, ${S(e.kept,"row")} kept.`}function Xa(e){let r=e.runId==null?"no captured run":`run ${e.runId}`;return[`  ${e.id}  layer=${e.verifierLayer}  seen ${String(e.occurrences)}x (last ${cr(e.lastSeen)})  start=${e.baseState}  ${r}`,`      mismatch: ${Qa(e.parts)}`,`      trail: ${e.trail.join(" -> ")}`].join(`
+`)}function cr(e){return e.slice(0,16).replace("T"," ")}function Qa(e){let r=e.at(0);if(r==null)return"no parts recorded";let n=e.length>1?` (+${String(e.length-1)} more)`:"";return`${Ya(r)}${n}`}function Ya(e){switch(e.kind){case"consistency":{let r="entity"in e.mismatch?e.mismatch.entity:e.mismatch.singleton,n=e.step==null?"":` at "${e.step.intent}"`;return`${e.mismatch.kind} on ${r}${n}`}case"pending-check":return`${e.source} check failed at "${e.step.intent}"`;case"unrunnable":return`step "${e.intent}" could not run (${e.reason})`;case"driver-error":return`${e.error} at "${e.step}"`;case"impossible-action":return`impossible action at "${e.step}"`}}function Za(e){let r=e.trail.map(n=>n.split("|").at(0)??n);return`  ${e.id}  seen ${String(e.occurrences)}x  start=${e.baseState}
+      trail: ${r.join(" -> ")}`}import{spawn as el}from"child_process";import Nt from"fs";import rl from"net";import{setTimeout as ur}from"timers/promises";import{err as ne,ok as fe}from"neverthrow";import{ResponseError as nl}from"vscode-jsonrpc/node";var Mt=12e4,Ht=300,Ut=5e3;async function te({cliEntry:e,cwd:r}){let n=X(r),t=await V(n);return t!=null?tl({cliEntry:e,connection:Fe(t,!1),cwd:r}):Wt({cliEntry:e,cwd:r,versionNote:void 0})}async function Wt({cliEntry:e,cwd:r,versionNote:n}){let t=dl({cliEntry:e,cwd:r});if(t!=null)return ne(t);let o=await cl(X(r));return o==null?ne({deadlineMs:Mt,kind:"connect-timeout",logPath:tr(r)}):fe({...Fe(o,!0),versionNote:n})}async function tl({cliEntry:e,connection:r,cwd:n}){let t=await Vt(r);if(t==null||t.version===P())return fe(r);let o={daemonVersion:t.version};return await ol(r)?(r.socket.destroy(),await sl(X(n))?Wt({cliEntry:e,cwd:n,versionNote:{...o,kind:"restarted"}}):ne({kind:"connection-lost"})):fe({...r,versionNote:{...o,kind:"stale-busy"}})}async function ol(e){try{return await e.rpc.sendRequest(Ce)}catch{return!1}}var il=1e4;async function sl(e){let r=Date.now()+il,n=await V(e);for(;n!=null&&Date.now()<r;)n.destroy(),await ur(Ht),n=await V(e);return n?.destroy(),n==null}async function Oe({connection:e,onEvent:r,request:n,token:t}){let o=await al({connection:e,onEvent:r,request:n,token:t});return o.kind==="transport"?ne(o.error):fe(o)}async function qt({connection:e,findingId:r,token:n}){try{let t=await e.rpc.sendRequest(An,{findingId:r},n),o=In.safeParse(t);return o.success?fe(o.data):ne({kind:"bad-frame"})}catch{return ne({kind:"connection-lost"})}}async function Bt(e){let r=await V(X(e));if(r==null)return!1;let n=Fe(r,!1);try{return await n.rpc.sendRequest(Ce)}catch{return!1}finally{r.destroy()}}async function oe(e){try{await e.rpc.sendRequest(Ce)}catch{}}async function _e(e){let r=await V(X(e));if(r==null)return{kind:"not-running"};let n=Fe(r,!1),t=await Promise.race([Vt(n),ur(Ut).then(()=>null)]);return r.destroy(),t==null?{kind:"unresponsive",timeoutMs:Ut}:{kind:"running",status:t}}async function Vt(e){try{let r=await e.rpc.sendRequest(Tn),n=Cn.safeParse(r);return n.success?n.data:null}catch{return null}}function al({connection:e,onEvent:r,request:n,token:t}){let{rpc:o}=e;return new Promise(i=>{let a=s=>{i(s)};o.onNotification(Ln,s=>{let l=Pn.safeParse(s);if(!l.success){a({error:{kind:"bad-frame"},kind:"transport"});return}r(l.data.event)}),o.onNotification(Dn,s=>{let l=En.safeParse(s);if(!l.success){a({error:{kind:"bad-frame"},kind:"transport"});return}a({failed:l.data.failed,kind:"done",notRun:l.data.notRun,passed:l.data.passed})}),o.onClose(()=>{a({error:{kind:"connection-lost"},kind:"transport"})}),o.sendRequest(jn,n,t).then(s=>{xn.safeParse(s).success||a({error:{kind:"bad-frame"},kind:"transport"})}).catch(s=>{a(ll(s))})})}function ll(e){if(e instanceof nl){let r=$n.safeParse(e.data);return r.success?{error:r.data,kind:"daemon-error"}:{error:{kind:"bad-frame"},kind:"transport"}}return{error:{kind:"connection-lost"},kind:"transport"}}function Fe(e,r){let n=Rn(e);return n.listen(),{rpc:n,socket:e,spawned:r,versionNote:void 0}}function V(e){return new Promise(r=>{let n=rl.connect(e);n.once("connect",()=>{r(n)}),n.once("error",()=>{r(null)})})}function dl({cliEntry:e,cwd:r}){try{we(r);let n=Nt.openSync(tr(r),"a");return el(process.execPath,[e,"daemon"],{cwd:r,detached:!0,stdio:["ignore",n,n]}).unref(),Nt.closeSync(n),null}catch(n){return{kind:"spawn-failed",message:n instanceof Error?n.message:String(n)}}}async function cl(e){let r=Date.now()+Mt,n=await V(e);for(;n==null&&Date.now()<r;)await ur(Ht),n=await V(e);return n}import ul from"fuse.js";var pl=3e3;async function Ne(e){B(e);let r=k(e).unwrapOr(void 0);if(r==null)return null;try{return await fetch(`${r.ripploServerUrl}/health`,{signal:AbortSignal.timeout(pl)}),null}catch(n){return{detail:n instanceof Error?n.message:String(n),serverUrl:r.ripploServerUrl}}}function Ue(e){return e.includes("localhost")||e.includes("127.0.0.1")}function mr(e){switch(e.kind){case"conflicting-flags":return"Pass either --all or test ids, not both.";case"nothing-selected":return`No tests selected \u2014 scope is empty and no .ripplo/workflows files are dirty. Pass test ids, add workflows to scope (${c("run")}), or use --all.`;case"unknown-ids":{let r=e.known,n=e.unknown.flatMap(o=>hl(o,r)),t=n.length>0?[`Did you mean: ${[...new Set(n)].join(", ")}`]:[];return[`Unknown ${e.unknown.length===1?"id":"ids"}: ${e.unknown.join(", ")}`,...t,"Pass a workflow slug to run all its tests, or workflow/test for one. Known workflows:",...r.map(o=>`  ${o}`)].join(`
+`)}}}function Gt({failed:e,notRun:r,passed:n}){let t=r>0?`, ${String(r)} not run`:"",o=e>0?`
+${c("run")}`:"";return`${String(n)} passed, ${String(e)} failed${t} (${String(n+e+r)} total)${o}`}function Me({debugDir:e,event:r}){let n=`${r.workflowName} \u2192 ${r.testName}`;if(r.kind==="test-started")return`${C.dim("run ")} ${n}`;switch(r.outcome.kind){case"pass":return`${C.good("pass")} ${n}`;case"findings":return[`${C.bad("fail")} ${n} \u2014 ${S(r.outcome.findingLines.length,"finding")}`,...r.outcome.findingLines,Jr({debugDir:e,runId:r.runId})].join(`
+`);case"error":return`${C.bad("error")} ${n} \u2014 ${r.outcome.detail}`;case"dispatch-error":return`${C.bad("error")} ${n} \u2014 ${gl(r.outcome.reason)}`;case"dispatch-timeout":return`${C.bad("error")} ${n} \u2014 not run: dispatch timed out (transient): ${r.outcome.detail}`;case"infra-error":return`${C.bad("error")} ${n} \u2014 not run: Ripplo server unreachable (server-side, not local): ${r.outcome.detail}`}}var ml={MAX_AGENTS:"agent limit reached for your plan \u2014 upgrade to add more",MAX_CONCURRENT_RUNS:"concurrent run limit reached for your plan \u2014 upgrade or wait for runs to finish",MAX_PROJECTS:"project limit reached for your plan \u2014 upgrade to add more",MAX_RUNS:"run limit reached for your plan \u2014 enable overage or upgrade",OVERAGE_CAP:"overage cap reached \u2014 raise the cap or upgrade"};function He({detail:e,serverUrl:r}){return Ue(r)?`Ripplo server at ${r} is not running (${e}). Tests were not started. Start the dev server (\`pnpm dev\`) and re-run.`:`Ripplo server at ${r} is unreachable (${e}). Tests were not started. This is a server-side issue, not your local environment \u2014 wait a moment and re-run.`}function We(e){switch(e.code){case"compile-failed":{let r=e.diagnostics.length===0?[]:["",...e.diagnostics];return[`Compilation failed in the daemon (${e.detail}). Run \`npx ripplo compile\` for the full output.`,...r].join(`
+`)}case"selection-conflicting-flags":return mr({kind:"conflicting-flags"});case"selection-nothing-selected":return mr({kind:"nothing-selected"});case"selection-unknown-ids":return mr({kind:"unknown-ids",known:e.known,unknown:e.unknown});case"app-unreachable":return`Your dev server is not responding at ${e.url} (${e.detail}). Tests were not started \u2014 start your app and re-run. This is your local environment, not the Ripplo server.`;case"scope-failed":return`Could not resolve the dev-session scope: ${e.detail}
+Verify the dev session is live (\`npx ripplo doctor\`, ${c("start")}), or pass test ids / --all explicitly.`;case"sync-failed":{let r=/401|unauthor/i.test(e.detail)?"\nLooks like an auth failure \u2014 run `npx ripplo auth login` and retry.":"";return`Sync to the Ripplo server failed: ${e.detail}${r}`}case"bad-message":return"Daemon rejected the request (protocol mismatch \u2014 rebuild/update the CLI and restart the daemon)."}}function L(e){switch(e.kind){case"spawn-failed":return`Failed to start \`npx ripplo daemon\`: ${fl(e.message)}`;case"connect-timeout":return[`Daemon did not come up within ${String(Math.round(e.deadlineMs/1e3))}s.`,`Check ${e.logPath} for startup errors.`,"Common causes: a stale socket (`rm .ripplo/.local/daemon.sock`), another daemon holding the dev lock, or the Ripplo server unreachable."].join(`
 `);case"connection-lost":return["Lost the daemon connection mid-run \u2014 it likely crashed or was killed.","Check .ripplo/.local/daemon.log, then rerun (`npx ripplo run` auto-starts the daemon)."].join(`
-`);case"bad-frame":return"Received a malformed frame from the daemon (version mismatch \u2014 rebuild/update the CLI and restart the daemon)."}}function nl(e){return e.includes("ENOENT")?`${e} \u2014 the node executable or CLI entry was not found on PATH.`:e.includes("EACCES")?`${e} \u2014 permission denied executing the CLI entry.`:e}function ol(e){return e.type==="limit"?tl[e.code]:`failed to dispatch (${e.detail})`}function il(e,r){return new rl(r,{includeScore:!0,threshold:.5}).search(L(e)).slice(0,3).map(n=>n.item)}async function Nn({findingId:e,json:r}){await dt(process.cwd()).match(t=>{if(e==null){let i=r?JSON.stringify(t,null,2):Sn(t);process.stdout.write(`${i}
-`);return}let n=t.pending.find(i=>i.id===e);n==null&&(process.stderr.write(`${cr(e)}
-`),process.exit(1));let o=r?JSON.stringify(n,null,2):Pn(n);process.stdout.write(`${o}
-`)},t=>{process.stderr.write(`explore: findings log unreadable (${t.kind})
-`),process.exit(1)})}async function Un({findingId:e}){let r=process.argv[1];r==null&&(process.stderr.write(`${D({kind:"spawn-failed",message:"process.argv[1] missing"})}
-`),process.exit(1));let t=await te({cliEntry:r,cwd:process.cwd()});t.isErr()&&(process.stderr.write(`${D(t.error)}
-`),process.exit(1));let n=t.value,o=new sl;process.once("SIGINT",()=>{o.cancel(),n.socket.destroy(),process.exit(130)});let a=await(await Dn({connection:n,findingId:e,token:o.token})).match(async s=>(process.stdout.write(`${xn(e,s)}
-`),n.spawned&&await ne(n),s.kind==="resolved"||s.kind==="unreachable"?0:1),s=>(process.stderr.write(`${D(s)}
-`),Promise.resolve(1)));n.socket.destroy(),process.exit(a)}async function Mn({findingId:e}){let r=new Date().toISOString();await vn(process.cwd(),e,r).match(async t=>{t.kind==="dismissed"&&await al(t.signature),process.stdout.write(`${En(t)}
-`),process.exit(t.kind==="dismissed"?0:1)},t=>{process.stderr.write(`explore: findings log unreadable (${t.kind})
-`),process.exit(1)})}async function Hn(){let e=await S(process.cwd());e.isErr()&&(process.stderr.write(`${x(e.error)}
-`),process.exit(1)),await bn(process.cwd(),e.value).match(r=>{process.stdout.write(`${$n(r)}
+`);case"bad-frame":return"Received a malformed frame from the daemon (version mismatch \u2014 rebuild/update the CLI and restart the daemon)."}}function fl(e){return e.includes("ENOENT")?`${e} \u2014 the node executable or CLI entry was not found on PATH.`:e.includes("EACCES")?`${e} \u2014 permission denied executing the CLI entry.`:e}function gl(e){return e.type==="limit"?ml[e.code]:`failed to dispatch (${e.detail})`}function hl(e,r){return new ul(r,{includeScore:!0,threshold:.5}).search(_(e)).slice(0,3).map(t=>t.item)}async function zt({findingId:e,json:r}){await wn(process.cwd()).match(n=>{if(e==null){let i=r?JSON.stringify(n,null,2):jt(n);process.stdout.write(`${i}
+`);return}let t=n.pending.find(i=>i.id===e);t==null&&(process.stderr.write(`${pr(e)}
+`),process.exit(1));let o=r?JSON.stringify(t,null,2):Ot(t);process.stdout.write(`${o}
+`)},n=>{process.stderr.write(`explore: findings log unreadable (${n.kind})
+`),process.exit(1)})}async function Jt({findingId:e}){let r=process.argv[1];r==null&&(process.stderr.write(`${L({kind:"spawn-failed",message:"process.argv[1] missing"})}
+`),process.exit(1));let n=await te({cliEntry:r,cwd:process.cwd()});n.isErr()&&(process.stderr.write(`${L(n.error)}
+`),process.exit(1));let t=n.value,o=new yl;process.once("SIGINT",()=>{o.cancel(),t.socket.destroy(),process.exit(130)});let a=await(await qt({connection:t,findingId:e,token:o.token})).match(async s=>(process.stdout.write(`${Tt(e,s)}
+`),t.spawned&&await oe(t),s.kind==="resolved"||s.kind==="unreachable"?0:1),s=>(process.stderr.write(`${L(s)}
+`),Promise.resolve(1)));t.socket.destroy(),process.exit(a)}async function Kt({findingId:e}){let r=new Date().toISOString();await It(process.cwd(),e,r).match(async n=>{n.kind==="dismissed"&&await kl(n.signature),process.stdout.write(`${_t(n)}
+`),process.exit(n.kind==="dismissed"?0:1)},n=>{process.stderr.write(`explore: findings log unreadable (${n.kind})
+`),process.exit(1)})}async function Xt(){let e=await R(process.cwd());e.isErr()&&(process.stderr.write(`${v(e.error)}
+`),process.exit(1)),await At(process.cwd(),e.value).match(r=>{process.stdout.write(`${Ft(r)}
 `)},r=>{process.stderr.write(`explore: findings log unreadable (${r.kind})
-`),process.exit(1)})}async function al(e){await w(process.cwd()).match(r=>it(r,e,"dismissed").catch(t=>{$.warn({error:t},"explore finding status push failed")}),r=>{$.warn({failure:r},"explore finding dismiss not synced: config unavailable")})}async function Wn(e){let r=await wn({cwd:process.cwd(),headed:e.headed,maxLength:e.maxLength,trails:e.trails,onReady:t=>{process.stdout.write(`${de(t)}
-`)},onTrail:(t,n,o)=>{process.stdout.write(`${Rn({executed:t,progress:o,trail:n})}
-`)}});process.stdout.write(`${Cn(r)}
-`),(r.kind==="config-failed"||r.kind==="compile-failed")&&process.exit(1)}import{graphql as ll}from"gql.tada";var dl=ll(`
+`),process.exit(1)})}async function kl(e){await k(process.cwd()).match(r=>gn(r,e,"dismissed").catch(n=>{I.warn({error:n},"explore finding status push failed")}),r=>{I.warn({failure:r},"explore finding dismiss not synced: config unavailable")})}async function Qt(e){let r=await $t({cwd:process.cwd(),headed:e.headed,maxLength:e.maxLength,trails:e.trails,onReady:n=>{process.stdout.write(`${ce(n)}
+`)},onTrail:(n,t,o)=>{process.stdout.write(`${Lt({executed:n,progress:o,trail:t})}
+`)}});process.stdout.write(`${Dt(r)}
+`),(r.kind==="config-failed"||r.kind==="compile-failed")&&process.exit(1)}import{graphql as wl}from"gql.tada";var vl=wl(`
   query ProjectsList {
     projects {
       id
       name
     }
   }
-`);async function qn(){let e=A(),r=F(e);r==null&&(process.stderr.write("Not signed in. Run `npx ripplo auth login` first.\n"),process.exit(1));let n=((await u({config:H({serverUrl:e,token:r}),document:dl,variables:void 0})).projects??[]).map(o=>({id:o.id,name:o.name}));process.stdout.write(`${JSON.stringify({projects:n},null,2)}
-`)}import{graphql as cl}from"gql.tada";function Bn({id:e,kind:r,title:t}){return`Caught bug reported (${r}): "${t}" [${e}]`}var pl=cl(`
+`);async function Yt(){let e=j(),r=O(e);r==null&&(process.stderr.write("Not signed in. Run `npx ripplo auth login` first.\n"),process.exit(1));let t=((await m({config:M({serverUrl:e,token:r}),document:vl,variables:void 0})).projects??[]).map(o=>({id:o.id,name:o.name}));process.stdout.write(`${JSON.stringify({projects:t},null,2)}
+`)}import{graphql as bl}from"gql.tada";function Zt({id:e,kind:r,title:n}){return`Caught bug reported (${r}): "${n}" [${e}]`}var Sl=bl(`
   mutation ReportCaughtBug(
     $projectId: String!
     $kind: CaughtBugKind!
     $title: String!
     $rootCause: String!
     $surfacedBy: String!
-    $runId: String
-    $workflowSlug: String
+    $runId: String!
   ) {
     reportCaughtBug(
       projectId: $projectId
@@ -267,7 +266,6 @@ Verify the dev session is live (\`npx ripplo doctor\`, ${c("start")}), or pass t
       rootCause: $rootCause
       surfacedBy: $surfacedBy
       runId: $runId
-      workflowSlug: $workflowSlug
     ) {
       __typename
       ... on CaughtBug {
@@ -275,38 +273,26 @@ Verify the dev session is live (\`npx ripplo doctor\`, ${c("start")}), or pass t
         kind
         title
       }
-      ... on WorkflowNotFoundError {
+      ... on RunNotFoundError {
         message
       }
     }
   }
-`);async function Vn(e){let r=T(),n=(await u({config:r,document:pl,variables:{kind:e.kind,projectId:r.projectId,rootCause:e.rootCause,runId:e.runId,surfacedBy:e.surfacedBy,title:e.title,workflowSlug:e.testId==null?null:L(e.testId)}})).reportCaughtBug;if(n?.__typename!=="CaughtBug"){let o=n?.__typename==="WorkflowNotFoundError"?n.message:null;process.stderr.write(`${o??"reportCaughtBug failed"}
-`),process.exit(1)}process.stdout.write(`${Bn({id:n.id,kind:e.kind,title:e.title})}
-`)}import ul from"path";import{CancellationTokenSource as ml}from"vscode-jsonrpc/node";async function Gn({all:e,headed:r,ids:t,keepAlive:n}){let o=process.cwd(),i=process.argv[1];i==null&&fe(D({kind:"spawn-failed",message:"process.argv[1] missing"}));let a=await Fe(o);a!=null&&fe(Me(a));let l=(await te({cliEntry:i,cwd:o})).match(I=>I,I=>fe(D(I)));l.versionNote!=null&&process.stderr.write(`${pt(l.versionNote)}
-`);let d=new ml;process.once("SIGINT",()=>{d.cancel(),l.socket.destroy(),process.exit(130)});let g=ul.join(o,".ripplo","debug"),y=(await De({connection:l,request:{all:e,headed:r,tests:[...t]},token:d.token,onEvent:I=>{let E=Ue({debugDir:g,event:I});E!=null&&process.stdout.write(`${E}
-`)}})).match(I=>I,I=>fe(D(I)));await fl({connection:l,keepAlive:n,result:y})}async function fl({connection:e,keepAlive:r,result:t}){e.spawned&&!r&&await ne(e),await new Promise(n=>{e.socket.end(n)}),t.kind==="daemon-error"&&fe(He(t.error)),process.stdout.write(`${Fn(t)}
-`),t.failed>0&&process.exit(1),process.exit(t.notRun>0?2:0)}function fe(e){process.stderr.write(`${e}
-`),process.exit(1)}import zn from"path";import{err as qe,ok as mr}from"neverthrow";async function Jn(){let e=process.cwd(),r=$.child({worker:process.pid}),t=Ot(),n=Se({clientVersion:P(),debugDir:zn.join(e,".ripplo","debug"),headed:!1,writeOtlpPortFile:!1}),o={entry:void 0},i=a=>{n.close().catch(()=>{}).then(()=>{process.exit(a)})};process.on("disconnect",()=>{i(1)}),process.on("unhandledRejection",a=>{r.error({err:a},"worker unhandled rejection")}),process.on("uncaughtException",a=>{r.error({err:a},"worker uncaught exception"),i(1)}),t.onRequest(jt,async(a,s)=>{let l=Pt.safeParse(a);if(!l.success)return We("bad-run-assign");let d=l.data;V(e);let g=w(e).match(E=>E,E=>E.kind);if(typeof g=="string")return We(`config:${g}`);let p=await Kn(d.lockfileFingerprint,o,t);if(p.isErr())return We(`lockfile-unavailable:${p.error}`);let y=p.value,I=Br(y).find(E=>E.ref===d.testRef);if(I==null)return We(`no-test:${d.testRef}`);try{let E=await nt({config:g,cwd:e,fixturesDir:zn.join(e,we),headed:d.headed,lockfile:y,runId:d.runId,session:n,signal:nr(s),test:I.test});return{outcome:ut(E),serverNotified:!0}}catch(E){if(E instanceof br)return{outcome:{detail:E.message,kind:"infra-error"},serverNotified:!1};throw E}}),t.onRequest(Lt,(a,s)=>gl({cache:o,connection:t,cwd:e,raw:a,session:n,token:s})),t.onNotification(Tt,a=>{let s=Et.safeParse(a);s.success&&n.injectSpan(s.data.runId,s.data.span)}),t.onNotification(Dt,()=>{i(0)}),t.sendNotification(It),await new Promise(()=>{})}function We(e){return{outcome:{detail:e,kind:"error"},serverNotified:!1}}async function gl({cache:e,connection:r,cwd:t,raw:n,session:o,token:i}){let a=$t.safeParse(n);if(!a.success)return{kind:"error",reason:"bad-assign",rows:[],trail:[]};let s=a.data;V(t);let l=w(t).match(p=>p,p=>p.kind);if(typeof l=="string")return{kind:"error",reason:`config:${l}`,rows:[],trail:[]};let d=await Kn(s.lockfileFingerprint,e,r);if(d.isErr())return{kind:"error",reason:`lockfile:${d.error}`,rows:[],trail:[]};let g=d.value;return Te({assign:s,config:l,headed:!1,lockfile:g,report:!0,session:o,signal:nr(i)})}async function Kn(e,r,t){return r.entry!=null&&r.entry.fingerprint===e?mr(r.entry.lockfile):(await hl(t,e)).andThen(o=>o.unavailable!=null?qe(o.unavailable):o.lockfileJson==null?qe("empty-reply"):yl(o.lockfileJson).map(i=>(r.entry={fingerprint:e,lockfile:i},i)))}async function hl(e,r){try{return mr(await e.sendRequest(At,{fingerprint:r}))}catch(t){return qe(`transport:${t instanceof Error?t.message:"unknown"}`)}}function yl(e){try{return mr(Lr(M,e))}catch(r){return qe(`worker-decode-failed:${r instanceof Error?r.message.slice(0,200):"unknown"}`)}}async function Qn(){await Jn()}import to from"path";import{createRequire as kl}from"module";import{existsSync as wl}from"fs";import{readFile as eo,writeFile as Xn}from"fs/promises";import{fileURLToPath as vl}from"url";import Yn from"path";import{err as ge,ok as bl}from"neverthrow";import{z as _}from"zod";var Sl={height:800,width:1280};async function ro({jsonlPath:e,moment:r,outDir:t,runId:n}){if(!wl(e))return ge({kind:"run-not-found",runId:n});let o=await Rl(e),i=o[0],a=o.at(-1);if(i==null||a==null)return ge({kind:"no-rrweb-events",runId:n});let s=a.timestamp-i.timestamp,l=r.kind==="offset"?r.offsetMs:r.at-i.timestamp;if(l<0)return ge({durationMs:s,firstTimestamp:i.timestamp,kind:"moment-out-of-range",lastTimestamp:a.timestamp,moment:r});let d=Math.min(l,s),g=String(Math.round(d)),p=Yn.join(t,`snapshot-${g}ms.png`),y=Yn.join(t,`snapshot-${g}ms.html`);return(await jl({events:o,htmlPath:y,offsetMs:d,pngPath:p})).map(()=>({durationMs:s,htmlPath:y,offsetMs:d,pngPath:p}))}var xl=_.object({event:_.looseObject({timestamp:_.number(),type:_.number()}),kind:_.literal("rrweb")});async function Rl(e){return(await eo(e,"utf8")).split(`
-`).filter(t=>t.length>0).map(t=>Cl(t)).map(t=>xl.safeParse(t)).flatMap(t=>t.success?[t.data.event]:[])}function Cl(e){try{return JSON.parse(e)}catch{return null}}var Pl=_.object({data:_.looseObject({height:_.number(),width:_.number()}),type:_.literal(4)});function El(e){let r=e.flatMap(t=>{let n=Pl.safeParse(t);return n.success?[n.data]:[]})[0];return r==null?Sl:{height:r.data.height,width:r.data.width}}var $l=`<!doctype html><html><head><style>
-html, body { margin: 0; padding: 0; }
-.replayer-wrapper { position: relative; }
-.replayer-mouse, .replayer-mouse-tail { display: none; }
-iframe { border: none; }
-</style></head><body></body></html>`,Il="*, *::before, *::after { animation-duration: 0s !important; animation-delay: 0s !important; transition-duration: 0s !important; transition-delay: 0s !important; }";async function jl({events:e,htmlPath:r,offsetMs:t,pngPath:n}){let o=await import("playwright").then(({chromium:i})=>i.launch({args:["--no-sandbox"],headless:!0})).catch(()=>null);if(o==null)return ge({detail:"chromium launch",kind:"browser-failed"});try{let{html:i,png:a}=await Al({browser:o,events:e,offsetMs:t});return await Xn(n,a),await Xn(r,i,"utf8"),bl(void 0)}catch(i){return ge({detail:i instanceof Error?i.message:String(i),kind:"browser-failed"})}finally{await o.close()}}async function Al({browser:e,events:r,offsetMs:t}){let n=El(r),o=await e.newPage({viewport:n});await o.setContent($l),await o.addScriptTag({content:await Ol()}),await o.evaluate(Ll({events:r,offsetMs:t})),await o.evaluate(Tl());let i=o.locator(".replayer-wrapper iframe").first(),s=await(await i.count()>0?i:o).screenshot({type:"png"});return{html:await o.evaluate(Dl()),png:s}}function Ll({events:e,offsetMs:r}){return`(() => {
+`);async function eo(e){let r=T(),t=(await m({config:r,document:Sl,variables:{kind:e.kind,projectId:r.projectId,rootCause:e.rootCause,runId:e.runId,surfacedBy:e.surfacedBy,title:e.title}})).reportCaughtBug;if(t?.__typename!=="CaughtBug"){let o=t?.__typename==="RunNotFoundError"?t.message:null;process.stderr.write(`${o??"reportCaughtBug failed"}
+`),process.exit(1)}process.stdout.write(`${Zt({id:t.id,kind:e.kind,title:e.title})}
+`)}import Rl from"path";import{CancellationTokenSource as xl}from"vscode-jsonrpc/node";async function ro({all:e,headed:r,ids:n,keepAlive:t}){let o=process.cwd(),i=process.argv[1];i==null&&ge(L({kind:"spawn-failed",message:"process.argv[1] missing"}));let a=await Ne(o);a!=null&&ge(He(a));let l=(await te({cliEntry:i,cwd:o})).match(A=>A,A=>ge(L(A)));l.versionNote!=null&&process.stderr.write(`${bn(l.versionNote)}
+`);let d=new xl;process.once("SIGINT",()=>{d.cancel(),l.socket.destroy(),process.exit(130)});let u=Rl.join(o,".ripplo","debug"),y=(await Oe({connection:l,request:{all:e,headed:r,tests:[...n]},token:d.token,onEvent:A=>{let $=Me({debugDir:u,event:A});$!=null&&process.stdout.write(`${$}
+`)}})).match(A=>A,A=>ge(L(A)));await Cl({connection:l,keepAlive:t,result:y})}async function Cl({connection:e,keepAlive:r,result:n}){e.spawned&&!r&&await oe(e),await new Promise(t=>{e.socket.end(t)}),n.kind==="daemon-error"&&ge(We(n.error)),process.stdout.write(`${Gt(n)}
+`),n.failed>0&&process.exit(1),process.exit(n.notRun>0?2:0)}function ge(e){process.stderr.write(`${e}
+`),process.exit(1)}import no from"path";import{err as Be,ok as fr}from"neverthrow";async function to(){let e=process.cwd(),r=I.child({worker:process.pid}),n=Vn(),t=Re({clientVersion:P(),debugDir:no.join(e,".ripplo","debug"),headed:!1,writeOtlpPortFile:!1}),o={entry:void 0},i=a=>{t.close().catch(()=>{}).then(()=>{process.exit(a)})};process.on("disconnect",()=>{i(1)}),process.on("unhandledRejection",a=>{r.error({err:a},"worker unhandled rejection")}),process.on("uncaughtException",a=>{r.error({err:a},"worker uncaught exception"),i(1)}),n.onRequest(Mn,async(a,s)=>{let l=_n.safeParse(a);if(!l.success)return qe("bad-run-assign");let d=l.data;B(e);let u=k(e).match($=>$,$=>$.kind);if(typeof u=="string")return qe(`config:${u}`);let p=await oo(d.lockfileFingerprint,o,n);if(p.isErr())return qe(`lockfile-unavailable:${p.error}`);let y=p.value,A=Se(y).find($=>$.ref===d.testRef);if(A==null)return qe(`no-test:${d.testRef}`);try{let $=await mn({config:u,cwd:e,fixturesDir:no.join(e,z),headed:d.headed,lockfile:y,runId:d.runId,session:t,signal:or(s),test:A.test});return{outcome:Sn($),serverNotified:!0}}catch($){if($ instanceof Sr)return{outcome:{detail:$.message,kind:"infra-error"},serverNotified:!1};throw $}}),n.onRequest(Wn,(a,s)=>Pl({cache:o,connection:n,cwd:e,raw:a,session:t,token:s})),n.onNotification(qn,a=>{let s=Fn.safeParse(a);s.success&&t.injectSpan(s.data.runId,s.data.span)}),n.onNotification(Bn,()=>{i(0)}),n.sendNotification(Un),await new Promise(()=>{})}function qe(e){return{outcome:{detail:e,kind:"error"},serverNotified:!1}}async function Pl({cache:e,connection:r,cwd:n,raw:t,session:o,token:i}){let a=Nn.safeParse(t);if(!a.success)return{kind:"error",reason:"bad-assign",rows:[],trail:[]};let s=a.data;B(n);let l=k(n).match(p=>p,p=>p.kind);if(typeof l=="string")return{kind:"error",reason:`config:${l}`,rows:[],trail:[]};let d=await oo(s.lockfileFingerprint,e,r);if(d.isErr())return{kind:"error",reason:`lockfile:${d.error}`,rows:[],trail:[]};let u=d.value;return De({assign:s,config:l,headed:!1,lockfile:u,report:!0,session:o,signal:or(i)})}async function oo(e,r,n){return r.entry!=null&&r.entry.fingerprint===e?fr(r.entry.lockfile):(await El(n,e)).andThen(o=>o.unavailable!=null?Be(o.unavailable):o.lockfileJson==null?Be("empty-reply"):$l(o.lockfileJson).map(i=>(r.entry={fingerprint:e,lockfile:i},i)))}async function El(e,r){try{return fr(await e.sendRequest(Hn,{fingerprint:r}))}catch(n){return Be(`transport:${n instanceof Error?n.message:"unknown"}`)}}function $l(e){try{return fr(Lr(U,e))}catch(r){return Be(`worker-decode-failed:${r instanceof Error?r.message.slice(0,200):"unknown"}`)}}async function io(){await to()}import co from"path";import{existsSync as Il}from"fs";import{writeFile as so}from"fs/promises";import ao from"path";import{err as he,ok as Al}from"neverthrow";async function lo({jsonlPath:e,moment:r,outDir:n,runId:t}){if(!Il(e))return he({kind:"run-not-found",runId:t});let o=await Qr(e),i=o[0],a=o.at(-1);if(i==null||a==null)return he({kind:"no-rrweb-events",runId:t});let s=a.timestamp-i.timestamp,l=r.kind==="offset"?r.offsetMs:r.at-i.timestamp;if(l<0)return he({durationMs:s,firstTimestamp:i.timestamp,kind:"moment-out-of-range",lastTimestamp:a.timestamp,moment:r});let d=Math.min(l,s),u=String(Math.round(d)),p=ao.join(n,`snapshot-${u}ms.png`),y=ao.join(n,`snapshot-${u}ms.html`);return(await jl({events:o,htmlPath:y,offsetMs:d,pngPath:p})).map(()=>({durationMs:s,htmlPath:y,offsetMs:d,pngPath:p}))}async function jl({events:e,htmlPath:r,offsetMs:n,pngPath:t}){let o=await nn();if(o==null)return he({detail:"chromium launch",kind:"browser-failed"});try{let{html:i,png:a}=await Tl({browser:o,events:e,offsetMs:n});return await so(t,a),await so(r,i,"utf8"),Al(void 0)}catch(i){return he({detail:i instanceof Error?i.message:String(i),kind:"browser-failed"})}finally{await o.close()}}async function Tl({browser:e,events:r,offsetMs:n}){let t=Yr(r),o=await e.newPage({viewport:t});await o.setContent(Zr(!1)),await o.addScriptTag({content:await tn()}),await o.evaluate(Ll({events:r,offsetMs:n})),await o.evaluate(rn());let i=o.locator(".replayer-wrapper iframe").first(),s=await(await i.count()>0?i:o).screenshot({type:"png"});return{html:await o.evaluate(Dl()),png:s}}function Ll({events:e,offsetMs:r}){return`(() => {
     const replayer = new globalThis.__RipploReplayer(${JSON.stringify(e)}, {
-      insertStyleRules: [${JSON.stringify(Il)}],
+      insertStyleRules: [${JSON.stringify(en)}],
       mouseTail: false,
       root: document.body,
       showWarning: false,
     });
     replayer.pause(${String(r+.5)});
     globalThis.__ripploSnapshotReplayer = replayer;
-  })()`}function Tl(){return`(async () => {
-    const doc = document.querySelector(".replayer-wrapper iframe")?.contentDocument;
-    if (doc?.fonts != null) {
-      await doc.fonts.ready;
-    }
-    await new Promise((resolve) => requestAnimationFrame(() => requestAnimationFrame(resolve)));
   })()`}function Dl(){return`(() => {
     const replayer = globalThis.__ripploSnapshotReplayer;
     if (replayer == null) {
@@ -325,28 +311,33 @@ iframe { border: none; }
       }
     });
     return "<!doctype html>\\n" + doc.documentElement.outerHTML;
-  })()`}var Zn;function Ol(){return Zn??=eo(_l(),"utf8"),Zn}function _l(){let e=kl(import.meta.url);try{return e.resolve("@ripplo/rrweb-bundle/replay")}catch{return vl(new URL("assets/rrweb-replay.js",import.meta.url))}}function no({cwd:e,moment:r,runId:t}){let n=to.join(e,".ripplo","debug",t);return ro({jsonlPath:to.join(n,"behavior.jsonl"),moment:r,outDir:n,runId:t})}function oo(e){return[`${C.good("ok")} \u2014 rendered the page at ${String(Math.round(e.offsetMs))}ms into the recording (duration ${String(Math.round(e.durationMs))}ms)`,e.pngPath,"Read the PNG above to see the page state. Layout and text are faithful \u2014 URL-referenced images may be blank if the dev server is down."].join(`
-`)}function io(e){return`${C.bad("fail")} \u2014 ${Fl(e)}`}function so(){return`${C.bad("fail")} \u2014 pass exactly one of --at <epoch-ms from behavior.jsonl> or --offset <ms from the start of the recording>.`}function Fl(e){switch(e.kind){case"run-not-found":return`no debug artifacts for run ${e.runId} (.ripplo/debug/${e.runId}/behavior.jsonl missing). ${c("run")}`;case"no-rrweb-events":return`run ${e.runId} has a behavior.jsonl but no rrweb events \u2014 nothing to replay.`;case"moment-out-of-range":return`${e.moment.kind==="offset"?"--offset":"--at"} is outside the recording, which spans ${String(e.firstTimestamp)}\u2013${String(e.lastTimestamp)} (duration ${String(e.durationMs)}ms). Pass --at <epoch-ms from behavior.jsonl> or --offset <0\u2013${String(e.durationMs)}>.`;case"browser-failed":return`replay browser failed (${e.detail}). Is chromium installed? Try \`npx playwright install chromium\`.`}}async function ao({at:e,offset:r,runId:t}){let n=Nl({at:e,offset:r});n==null&&(process.stderr.write(`${so()}
-`),process.exit(1)),(await no({cwd:process.cwd(),moment:n,runId:t})).match(i=>{process.stdout.write(`${oo(i)}
-`)},i=>{process.stderr.write(`${io(i)}
-`),process.exit(1)})}function Nl({at:e,offset:r}){if(e!=null&&r==null)return{at:e,kind:"absolute"};if(r!=null&&e==null)return{kind:"offset",offsetMs:r}}async function lo(){let e=T();try{let t=(await ce(e.cwd,e)).match(i=>i,i=>{process.stderr.write(`${j(i)}
-`),process.exit(1)}),n=t.lockfile.workflows.length,o=t.lockfile.entities.length;process.stdout.write(`Synced ${b(n,"workflow")} and ${b(o,"entity","entities")} to dev session ${t.devSessionId}
-`)}catch(r){let t=r instanceof Error?r.message:String(r);process.stderr.write(`ripplo sync failed: ${t}
+  })()`}function po({cwd:e,moment:r,runId:n}){let t=co.join(e,".ripplo","debug",n);return lo({jsonlPath:co.join(t,"behavior.jsonl"),moment:r,outDir:t,runId:n})}function uo(e){return[`${C.good("ok")} \u2014 rendered the page at ${String(Math.round(e.offsetMs))}ms into the recording (duration ${String(Math.round(e.durationMs))}ms)`,e.pngPath,"Read the PNG above to see the page state. Layout and text are faithful \u2014 URL-referenced images may be blank if the dev server is down."].join(`
+`)}function mo(e){return`${C.bad("fail")} \u2014 ${Ol(e)}`}function fo(){return`${C.bad("fail")} \u2014 pass exactly one of --at <epoch-ms from behavior.jsonl> or --offset <ms from the start of the recording>.`}function Ol(e){switch(e.kind){case"run-not-found":return`no debug artifacts for run ${e.runId} (.ripplo/debug/${e.runId}/behavior.jsonl missing). ${c("run")}`;case"no-rrweb-events":return`run ${e.runId} has a behavior.jsonl but no rrweb events \u2014 nothing to replay.`;case"moment-out-of-range":return`${e.moment.kind==="offset"?"--offset":"--at"} is outside the recording, which spans ${String(e.firstTimestamp)}\u2013${String(e.lastTimestamp)} (duration ${String(e.durationMs)}ms). Pass --at <epoch-ms from behavior.jsonl> or --offset <0\u2013${String(e.durationMs)}>.`;case"browser-failed":return`replay browser failed (${e.detail}). Is chromium installed? Try \`npx playwright install chromium\`.`}}async function go({at:e,offset:r,runId:n}){let t=_l({at:e,offset:r});t==null&&(process.stderr.write(`${fo()}
+`),process.exit(1)),(await po({cwd:process.cwd(),moment:t,runId:n})).match(i=>{process.stdout.write(`${uo(i)}
+`)},i=>{process.stderr.write(`${mo(i)}
+`),process.exit(1)})}function _l({at:e,offset:r}){if(e!=null&&r==null)return{at:e,kind:"absolute"};if(r!=null&&e==null)return{kind:"offset",offsetMs:r}}import Fl from"path";import{randomUUID as Nl}from"crypto";async function ho({cwd:e,ref:r,signal:n,step:t}){let o=k(e).match(u=>({config:u}),u=>({failure:u}));if("failure"in o)return{failure:o.failure,kind:"config-failed"};let i=o.config,a=await ve(e);if(a.result.isErr())return{error:a.result.error,kind:"compile-failed"};let s=a.result.value,l=Se(s).find(u=>u.ref===r);return l==null?{kind:"no-test",ref:r}:(await sn({lockfile:s,options:{baseUrl:i.appUrl,engineUrl:i.engineUrl,fixturesDir:Fl.join(i.cwd,z),generate:K,headed:!0,secret:i.webhookSecret,tunnelAuth:i.tunnelAuth},params:void 0,runId:`teleport-${Nl()}`,stopAfterStep:t,test:l.test},n)).match(u=>({kind:"done",result:u}),u=>({error:u,kind:"run-failed"}))}function yo(e,r){switch(e.kind){case"config-failed":return E(e.failure);case"compile-failed":return v(e.error);case"no-test":return`test "${e.ref}" not found \u2014 run npx ripplo lint to see available tests`;case"run-failed":return`teleport failed before reaching the step: ${qr(e.error)}`;case"done":return Ul(e.result,r)}}function ko(e){return e.kind==="done"&&e.result.kind==="handed-over"}function Ul(e,r){return e.kind==="failed"?`couldn't reach the step \u2014 the run failed first.
+
+${e.findings.map(t=>zr({evidencePath:void 0,finding:t})).join(`
+
+`)}`:`landed at step ${String(e.ran)} of ${r} \u2014 the browser is yours, close the window to tear down`}async function wo({ref:e,step:r}){let n=new AbortController;process.once("SIGINT",()=>{n.abort()});let t=await ho({cwd:process.cwd(),ref:e,signal:n.signal,step:r});process.stdout.write(`${yo(t,e)}
+`),process.exit(ko(t)?0:1)}async function vo(){let e=T();try{let n=(await pe(e.cwd,e)).match(i=>i,i=>{process.stderr.write(`${E(i)}
+`),process.exit(1)}),t=n.lockfile.workflows.length,o=n.lockfile.entities.length;process.stdout.write(`Synced ${S(t,"workflow")} and ${S(o,"entity","entities")} to dev session ${n.devSessionId}
+`)}catch(r){let n=r instanceof Error?r.message:String(r);process.stderr.write(`ripplo sync failed: ${n}
 `),process.stderr.write(`${c("setup","verify auth + server reachability")}
-`),process.exit(1)}}import{spawnSync as Hl}from"child_process";import Wl from"fs";import ql from"path";import Bl from"semver";import Be from"fs";import Ul from"os";import he from"path";function co(e){return e.split(he.sep).includes("_npx")?"npx":e.includes(he.join("packages","cli"))?"workspace":"global"}function po(){let e=he.join(Ul.homedir(),".npm","_npx");return Be.existsSync(e)?Be.readdirSync(e).map(r=>he.join(e,r)).filter(r=>Be.existsSync(he.join(r,"node_modules","ripplo"))).map(r=>(Be.rmSync(r,{force:!0,recursive:!0}),r)):[]}import{spawnSync as uo}from"child_process";var Ml=["user","project","local"];function fr(){return uo("claude",["--version"],{stdio:"ignore"}).error!=null?"claude-missing":Ml.find(t=>uo("claude",["plugin","update","ripplo","--scope",t],{stdio:"ignore"}).status===0)==null?"not-installed":"updated"}function mo(e){return`ripplo v${e} is already the latest version.`}function fo(e){return`ripplo v${e}: could not reach the npm registry to check for updates.`}function gr({evicted:e,latest:r,mode:t}){return t==="npx"?`ripplo: ${e===0?"npx cache had no stale copy":`cleared ${b(e,"stale npx cache entry","stale npx cache entries")}`} \u2014 the next \`npx ripplo\` command runs v${r}.`:`ripplo: updated global install to v${r}.`}function go(){return"ripplo: this is a workspace build (packages/cli/dist) \u2014 update via git pull + `pnpm --filter ripplo build`."}function ho(e){return`ripplo: \`npm install -g ripplo@latest\` failed: ${e}`}function hr(e){switch(e){case"updated":return"ripplo: Claude plugin updated \u2014 restart Claude Code (or /reload-plugins) to apply.";case"not-installed":return"ripplo: Claude plugin not installed in this project \u2014 skipped.";case"claude-missing":return"ripplo: claude binary not found \u2014 skipped plugin update."}}function yo(e){return e?"ripplo: idle daemon stopped \u2014 the next `npx ripplo run` restarts it on the new version.":"ripplo: daemon is busy \u2014 it picks up the new version once idle (the next `npx ripplo run` handles it)."}var Vl=1e4;async function ko(){let e=P(),r=process.argv[1];Gl(process.cwd());let t=await Pe(Vl);process.stdout.write(`${Ce({current:e,latest:t})}
-`),t==null&&(process.stderr.write(`${fo(e)}
-`),process.exit(1)),Bl.gt(t,e)||(process.stdout.write(`${mo(e)}
-`),process.stdout.write(`${hr(fr())}
-`),process.exit(0));let n=r==null?"global":co(r);zl({latest:t,mode:n}),process.stdout.write(`${hr(fr())}
-`),await Kl(process.cwd()),process.exit(0)}function Gl(e){if(!Wl.existsSync(ql.join(e,".ripplo")))return;let r=je(e);r==="written"&&process.stdout.write(`${Ae(r).trim()}
-`)}function zl({latest:e,mode:r}){if(r==="workspace"&&(process.stdout.write(`${go()}
-`),process.exit(0)),r==="npx"){let t=po();process.stdout.write(`${gr({evicted:t.length,latest:e,mode:r})}
-`);return}Jl(e)}function Jl(e){let r=`ripplo@${e}`,t=Hl("npm",["install","-g",r],{stdio:"inherit"});if(t.status!==0){let n=`exit ${String(t.status)}`;process.stderr.write(`${ho(n)}
-`),process.exit(1)}process.stdout.write(`${gr({evicted:0,latest:e,mode:"global"})}
-`)}async function Kl(e){if((await Oe(e)).kind==="not-running")return;let t=await On(e);process.stdout.write(`${yo(t)}
-`)}async function wo({executor:e,explore:r,exploreConcurrency:t}){let{runDaemon:n}=await import("./daemon-EUZ4KVQP.js"),{TunnelProvisionFailedError:o}=await import("./daemon-tunnel-MOYCRSSC.js"),{renderTunnelProvisionFailed:i}=await import("./daemon-EQZROAKJ.js");try{await n({executor:e,explore:r,exploreConcurrency:t})}catch(a){throw a instanceof o&&(process.stderr.write(`${i(a.failure)}
-`),process.exit(1)),a}}import{graphql as Ve}from"gql.tada";function vo(){return"No scope items added \u2014 the matched tests are already in scope (check `npx ripplo scope status`)."}function bo(e){return[`No test found for: ${e.join(", ")}`,"Pass a test id (kebab-case slug of the test name) or the exact intent string.","List known tests with `npx ripplo status`. To add one, stub it first via the testing DSL.",c("create")].join(`
-`)}import{graphql as Ql}from"gql.tada";var So=Ql(`
+`),process.exit(1)}}import{spawnSync as Wl}from"child_process";import ql from"fs";import Bl from"path";import Vl from"semver";import Ve from"fs";import Ml from"os";import ye from"path";function bo(e){return e.split(ye.sep).includes("_npx")?"npx":e.includes(ye.join("packages","cli"))?"workspace":"global"}function So(){let e=ye.join(Ml.homedir(),".npm","_npx");return Ve.existsSync(e)?Ve.readdirSync(e).map(r=>ye.join(e,r)).filter(r=>Ve.existsSync(ye.join(r,"node_modules","ripplo"))).map(r=>(Ve.rmSync(r,{force:!0,recursive:!0}),r)):[]}import{spawnSync as Ro}from"child_process";var Hl=["user","project","local"];function gr(){return Ro("claude",["--version"],{stdio:"ignore"}).error!=null?"claude-missing":Hl.find(n=>Ro("claude",["plugin","update","ripplo","--scope",n],{stdio:"ignore"}).status===0)==null?"not-installed":"updated"}function xo(e){return`ripplo v${e} is already the latest version.`}function Co(e){return`ripplo v${e}: could not reach the npm registry to check for updates.`}function hr({evicted:e,latest:r,mode:n}){return n==="npx"?`ripplo: ${e===0?"npx cache had no stale copy":`cleared ${S(e,"stale npx cache entry","stale npx cache entries")}`} \u2014 the next \`npx ripplo\` command runs v${r}.`:`ripplo: updated global install to v${r}.`}function Po(){return"ripplo: this is a workspace build (packages/cli/dist) \u2014 update via git pull + `pnpm --filter ripplo build`."}function Eo(e){return`ripplo: \`npm install -g ripplo@latest\` failed: ${e}`}function yr(e){switch(e){case"updated":return"ripplo: Claude plugin updated \u2014 restart Claude Code (or /reload-plugins) to apply.";case"not-installed":return"ripplo: Claude plugin not installed in this project \u2014 skipped.";case"claude-missing":return"ripplo: claude binary not found \u2014 skipped plugin update."}}function $o(e){return e?"ripplo: idle daemon stopped \u2014 the next `npx ripplo run` restarts it on the new version.":"ripplo: daemon is busy \u2014 it picks up the new version once idle (the next `npx ripplo run` handles it)."}var Gl=1e4;async function Io(){let e=P(),r=process.argv[1];zl(process.cwd());let n=await Ee(Gl);process.stdout.write(`${Pe({current:e,latest:n})}
+`),n==null&&(process.stderr.write(`${Co(e)}
+`),process.exit(1)),Vl.gt(n,e)||(process.stdout.write(`${xo(e)}
+`),process.stdout.write(`${yr(gr())}
+`),process.exit(0));let t=r==null?"global":bo(r);Jl({latest:n,mode:t}),process.stdout.write(`${yr(gr())}
+`),await Xl(process.cwd()),process.exit(0)}function zl(e){if(!ql.existsSync(Bl.join(e,".ripplo")))return;let r=je(e);r==="written"&&process.stdout.write(`${Te(r).trim()}
+`)}function Jl({latest:e,mode:r}){if(r==="workspace"&&(process.stdout.write(`${Po()}
+`),process.exit(0)),r==="npx"){let n=So();process.stdout.write(`${hr({evicted:n.length,latest:e,mode:r})}
+`);return}Kl(e)}function Kl(e){let r=`ripplo@${e}`,n=Wl("npm",["install","-g",r],{stdio:"inherit"});if(n.status!==0){let t=`exit ${String(n.status)}`;process.stderr.write(`${Eo(t)}
+`),process.exit(1)}process.stdout.write(`${hr({evicted:0,latest:e,mode:"global"})}
+`)}async function Xl(e){if((await _e(e)).kind==="not-running")return;let n=await Bt(e);process.stdout.write(`${$o(n)}
+`)}async function Ao({executor:e,explore:r,exploreConcurrency:n}){let{runDaemon:t}=await import("./daemon-2E6MKBO7.js"),{TunnelProvisionFailedError:o}=await import("./daemon-tunnel-AG6FGNXC.js"),{renderTunnelProvisionFailed:i}=await import("./daemon-APJHNVIG.js");try{await t({executor:e,explore:r,exploreConcurrency:n})}catch(a){throw a instanceof o&&(process.stderr.write(`${i(a.failure)}
+`),process.exit(1)),a}}import{graphql as Ge}from"gql.tada";function jo(){return"No scope items added \u2014 the matched tests are already in scope (check `npx ripplo scope status`)."}function To(e){return[`No test found for: ${e.join(", ")}`,"Pass a test id (kebab-case slug of the test name) or the exact intent string.","List known tests with `npx ripplo status`. To add one, stub it first via the testing DSL.",c("create")].join(`
+`)}import{graphql as Ql}from"gql.tada";var Lo=Ql(`
   query ScopeStatus($projectId: String!, $cwd: String!) {
     project(id: $projectId) {
       id
@@ -366,7 +357,7 @@ iframe { border: none; }
       }
     }
   }
-`);var Xl=Ve(`
+`);var Yl=Ge(`
   query ScopeWorkflowBySlug($projectId: String!, $cwd: String!, $slug: String!) {
     project(id: $projectId) {
       id
@@ -379,7 +370,7 @@ iframe { border: none; }
       }
     }
   }
-`),Yl=Ve(`
+`),Zl=Ge(`
   mutation ScopeAddDirtyTests($projectId: String!, $cwd: String!, $workflowSlugs: [String!]!) {
     addDirtyTestsToScope(projectId: $projectId, cwd: $cwd, workflowSlugs: $workflowSlugs) {
       __typename
@@ -401,38 +392,38 @@ iframe { border: none; }
       }
     }
   }
-`),Zl=Ve(`
+`),ed=Ge(`
   mutation ScopeLink($id: ID!, $workflowId: String!) {
     linkScopeItem(id: $id, workflowId: $workflowId) {
       id
     }
   }
-`),ed=Ve(`
+`),rd=Ge(`
   mutation ScopeRemoveMany($ids: [ID!]!) {
     removeScopeItems(ids: $ids)
   }
-`);async function xo(e){let r=T();await pe(r);let n=(await u({config:r,document:So,variables:{cwd:r.cwd,projectId:r.projectId}})).project?.devSession?.scopeItems??[];if(e.format==="json"){process.stdout.write(`${JSON.stringify(n,null,2)}
-`);return}if(n.length===0){process.stdout.write("No scope items. Add some with `npx ripplo scope add <test-ids..>` or from the dashboard.\n");return}n.forEach(o=>{let i=o.workflow;if(i==null){process.stdout.write(`  [intent] (${o.id}) ${o.label??""}
+`);async function Do(e){let r=T();await ue(r);let t=(await m({config:r,document:Lo,variables:{cwd:r.cwd,projectId:r.projectId}})).project?.devSession?.scopeItems??[];if(e.format==="json"){process.stdout.write(`${JSON.stringify(t,null,2)}
+`);return}if(t.length===0){process.stdout.write("No scope items. Add some with `npx ripplo scope add <test-ids..>` or from the dashboard.\n");return}t.forEach(o=>{let i=o.workflow;if(i==null){process.stdout.write(`  [intent] (${o.id}) ${o.label??""}
 `);return}let a=i.spec==null?"stub":"implemented";process.stdout.write(`  [${a}] (${o.id}) ${i.slug} \u2014 ${i.name}
-`)})}async function Ro({testIds:e}){let r=T();await pe(r),(await ce(r.cwd,r)).match(()=>{},s=>{process.stderr.write(`${j(s)}
-`),process.exit(1)});let o=(await u({config:r,document:Yl,variables:{cwd:r.cwd,projectId:r.projectId,workflowSlugs:e.map(s=>L(s))}})).addDirtyTestsToScope;o?.__typename==="NoActiveDevSessionError"&&(process.stderr.write(`${o.message}
-`),process.exit(1)),o?.__typename==="UnknownWorkflowSlugsError"&&(process.stderr.write(`${bo(o.slugs)}
-`),process.exit(1));let i=o?.__typename==="MutationAddDirtyTestsToScopeSuccess"?o.data:[];if(i.length===0){process.stdout.write(`${vo()}
-`);return}let a=i.map(s=>s.workflow?.slug??"?").join(", ");process.stdout.write(`Added ${b(i.length,"scope item")}: ${a}
-`)}async function Co({id:e,testId:r}){let t=T();await pe(t),(await ce(t.cwd,t)).match(()=>{},i=>{process.stderr.write(`${j(i)}
-`),process.exit(1)});let o=await rd({cfg:t,slug:r});await u({config:t,document:Zl,variables:{id:e,workflowId:o}}),process.stdout.write(`Linked scope item ${e} to ${r}
-`)}async function Po({ids:e}){let r=T();await pe(r);let n=(await u({config:r,document:ed,variables:{ids:[...e]}})).removeScopeItems??0;process.stdout.write(`Removed ${b(n,"scope item")}
-`)}async function rd({cfg:e,slug:r}){let n=(await u({config:e,document:Xl,variables:{cwd:e.cwd,projectId:e.projectId,slug:r}})).project?.devSession?.workflows?.[0];return n==null&&(process.stderr.write(`No workflow found with id "${r}". Create a stub first via the testing DSL.
+`)})}async function Oo({testIds:e}){let r=T();await ue(r),(await pe(r.cwd,r)).match(()=>{},s=>{process.stderr.write(`${E(s)}
+`),process.exit(1)});let o=(await m({config:r,document:Zl,variables:{cwd:r.cwd,projectId:r.projectId,workflowSlugs:e.map(s=>_(s))}})).addDirtyTestsToScope;o?.__typename==="NoActiveDevSessionError"&&(process.stderr.write(`${o.message}
+`),process.exit(1)),o?.__typename==="UnknownWorkflowSlugsError"&&(process.stderr.write(`${To(o.slugs)}
+`),process.exit(1));let i=o?.__typename==="MutationAddDirtyTestsToScopeSuccess"?o.data:[];if(i.length===0){process.stdout.write(`${jo()}
+`);return}let a=i.map(s=>s.workflow?.slug??"?").join(", ");process.stdout.write(`Added ${S(i.length,"scope item")}: ${a}
+`)}async function _o({id:e,testId:r}){let n=T();await ue(n),(await pe(n.cwd,n)).match(()=>{},i=>{process.stderr.write(`${E(i)}
+`),process.exit(1)});let o=await nd({cfg:n,slug:r});await m({config:n,document:ed,variables:{id:e,workflowId:o}}),process.stdout.write(`Linked scope item ${e} to ${r}
+`)}async function Fo({ids:e}){let r=T();await ue(r);let t=(await m({config:r,document:rd,variables:{ids:[...e]}})).removeScopeItems??0;process.stdout.write(`Removed ${S(t,"scope item")}
+`)}async function nd({cfg:e,slug:r}){let t=(await m({config:e,document:Yl,variables:{cwd:e.cwd,projectId:e.projectId,slug:r}})).project?.devSession?.workflows?.[0];return t==null&&(process.stderr.write(`No workflow found with id "${r}". Create a stub first via the testing DSL.
 `),process.stderr.write(`${c("create")}
-`),process.exit(1)),n.id}async function Eo(e){let r=process.cwd(),t=await S(r);t.isErr()&&(process.stderr.write(`${x(t.error)}
-`),process.exit(1));let n=U(t.value),o=await Oe(r);if(e.format==="summary"){n.length>0&&process.stdout.write(`stub workflows: ${n.join(", ")}
-`),process.stdout.write(`${ct(o)}
-`);return}let i={daemon:o.kind==="running"?{active:o.status.active,explorer:o.status.explorer,exploring:o.status.exploring,progress:o.status.progress,queued:o.status.queued,running:!0}:{running:o.kind==="unresponsive",state:o.kind},tests:n.map(a=>({id:a,implemented:!1}))};process.stdout.write(`${JSON.stringify(i,null,2)}
-`)}import Ge from"fs";import nd from"os";import $o from"path";import{z as td}from"zod";function f(e,r){let t=td.custom(n=>typeof n=="object"&&n!==null&&"hook_event_name"in n&&n.hook_event_name===e);return{event:e,run:async n=>await r(t.parse(n))??void 0}}var Io=f("PreToolUse",e=>{if(e.tool_name!=="ExitPlanMode"||!v(e.cwd))return;let r=od();if(r==null)return{hookSpecificOutput:{additionalContext:`Ripplo plan gate: no plan file found \u2014 the "Tests to implement" requirement was not checked. Before implementing, stub a .ripplo/workflows/ workflow per affected flow. ${c("discover")}`,hookEventName:"PreToolUse"}};let t=Ge.readFileSync(r,"utf8");if(!/\.ripplo\/tests|Tests to implement|No e2e coverage needed/.test(t))return{hookSpecificOutput:{hookEventName:"PreToolUse",permissionDecision:"deny",permissionDecisionReason:`Plan must cite ripplo test stubs. Add a "Tests to implement" section listing .ripplo/workflows/<id>.ts per affected flow, OR add "No e2e coverage needed: <reason>" if this plan touches no user-facing behavior. ${c("discover")}`}}});function od(){let e=$o.join(nd.homedir(),".claude","plans");return Ge.existsSync(e)?Ge.readdirSync(e).filter(t=>t.endsWith(".md")).map(t=>$o.join(e,t)).map(t=>({full:t,mtime:Ge.statSync(t).mtimeMs})).sort((t,n)=>n.mtime-t.mtime)[0]?.full??null:null}var jo=f("UserPromptSubmit",async e=>{if(e.permission_mode!=="plan"||!m(e.cwd)||!v(e.cwd))return;let r=await S(e.cwd);if(r.isErr())return;let t=U(r.value),n=['Plan must include "Tests to implement" with a .ripplo/workflows/ file per affected flow (ExitPlanMode blocks otherwise). Stub each with `workflow("Intent")` (no body).'];return t.length>0&&n.push(`Existing stubs: ${t.join(", ")}`),{hookSpecificOutput:{additionalContext:n.join(`
-`),hookEventName:"UserPromptSubmit"}}});import yd from"path";import Uo from"picomatch";import{z as Mo}from"zod";import{mkdirSync as dd,readFileSync as cd,writeFileSync as pd}from"fs";import ud from"path";import{z as R}from"zod";import{createHash as Uh}from"crypto";import ze from"picomatch";function id(e){return N(["diff","--name-only","HEAD"],e).split(`
-`).filter(r=>r.length>0)}function Ao({cwd:e,ignoreGlobs:r,watchGlobs:t}){let n=ze([...t]),o=ze([...r]);return id(e).filter(i=>n(i)&&!o(i))}function sd(e){return N(["ls-files","--others","--exclude-standard"],e).split(`
-`).filter(r=>r.length>0)}function Lo({cwd:e,ignoreGlobs:r,watchGlobs:t}){let n=ze([...t]),o=ze([...r]);return sd(e).filter(i=>n(i)&&!o(i))}var ad=["**/src/**","**/app/**","**/apps/**","**/pages/**","**/routes/**","**/components/**","**/server/**","**/api/**","**/backend/**","**/features/**","**/modules/**","**/views/**","**/ui/**","**/hooks/**","**/contexts/**","**/providers/**","**/controllers/**","**/handlers/**","**/resolvers/**","**/services/**","**/middleware/**","**/lib/**"],ld=["**/*.gen.*","**/generated/**","**/*.d.ts","**/*.test.*","**/*.spec.*","**/node_modules/**","**/dist/**","**/build/**",".ripplo/**","**/*.md","**/.next/**","**/.turbo/**","**/.vercel/**","**/.svelte-kit/**","**/.nuxt/**","**/.astro/**","**/coverage/**","**/storybook-static/**","**/*.stories.*","**/*.story.*","**/cli/**","**/scripts/**","**/tools/**","**/__tests__/**","**/__mocks__/**","**/__fixtures__/**","**/*.config.*","**/*.setup.*","**/public/**","**/static/**","**/assets/**","**/migrations/**","**/prisma/migrations/**"];function oe(){return{ignorePaths:ld,watchPaths:ad}}var md=R.object({label:R.string().nullable(),slug:R.string().nullable(),status:R.enum(["intent","stub","implemented"])}),fd=R.object({intent:R.string(),name:R.string(),sourcePath:R.string().nullable(),stub:R.boolean()}),gd=R.object({changedAppFiles:R.array(R.string()).readonly(),scope:R.object({available:R.boolean(),items:R.array(md).readonly()}),tests:R.array(fd).readonly().default([]),untrackedAppFiles:R.array(R.string()).readonly()});function To({cwd:e,scope:r}){let t=Oo(e);Fo(e,{...No(e),scope:r,tests:t?.tests??[]})}function Do({cwd:e,tests:r}){let t=Oo(e);Fo(e,{...No(e),scope:t?.scope??{available:!1,items:[]},tests:r??t?.tests??[]})}function Oo(e){let r=gd.safeParse(hd(_o(e)));return r.success?r.data:null}function hd(e){try{return JSON.parse(cd(e,"utf8"))}catch{return null}}function _o(e){return xr(e,"coverage-context.json")}function Fo(e,r){let t=_o(e);dd(ud.dirname(t),{recursive:!0}),pd(t,JSON.stringify(r,null,2))}function No(e){let{ignorePaths:r,watchPaths:t}=oe(),n={cwd:e,ignoreGlobs:r,watchGlobs:t};return{changedAppFiles:Ao(n),untrackedAppFiles:Lo(n)}}var kd=Mo.looseObject({file_path:Mo.string()}),Ho=f("PostToolUse",async e=>{let r=kd.safeParse(e.tool_input);if(!r.success)return;let t=r.data.file_path,{cwd:n}=e;if(!m(n)||!v(n))return;let o=yd.relative(n,t);if(o.startsWith(".."))return;let{ignorePaths:i,watchPaths:a}=oe(),s=Uo([...a]),l=Uo([...i]);if(!s(o)||l(o))return;let d=await S(n);if(Do({cwd:n,tests:d.isOk()?d.value.workflows.map(p=>({intent:p.intent,name:p.name,sourcePath:p.sourcePath??null,stub:p.stub})):void 0}),d.isErr())return;let g=U(d.value);if(g.length!==0)return{hookSpecificOutput:{additionalContext:`Reminder: stub workflows still unimplemented \u2014 ${g.join(", ")}. Implement with \`workflow("Intent", () => ({ given, steps }))\`.`,hookEventName:"PostToolUse"}}});import{createHash as $d}from"crypto";import{z as Go}from"zod";import{createHash as wd}from"crypto";import{mkdirSync as vd,readFileSync as Wo,writeFileSync as bd}from"fs";import yr from"path";var Sd=[".ts",".tsx",".js",".jsx"];function Je(e){let r=wd("sha256");return r.update(N(["rev-parse","HEAD"],e)),r.update("\0"),r.update(N(["diff","HEAD"],e)),r.update("\0"),N(["ls-files","--others","--exclude-standard"],e).split(`
-`).filter(n=>n.length>0).filter(n=>Sd.some(o=>n.endsWith(o))).toSorted((n,o)=>n.localeCompare(o)).forEach(n=>{r.update(n),r.update("\0"),r.update(xd(yr.join(e,n))),r.update("\0")}),r.digest("hex")}function ie(e,r){try{return Wo(qo(e,r),"utf8").trim()}catch{return null}}function se(e,r,t){let n=qo(e,r);vd(yr.dirname(n),{recursive:!0}),bd(n,t)}function xd(e){try{return Wo(e)}catch{return Buffer.alloc(0)}}function qo(e,r){return yr.join(e,".ripplo",".local",`${r}.hash`)}import{graphql as Rd}from"gql.tada";var Cd=Rd(`
+`),process.exit(1)),t.id}async function No(e){let r=process.cwd(),n=await R(r);n.isErr()&&(process.stderr.write(`${v(n.error)}
+`),process.exit(1));let t=N(n.value),o=await _e(r);if(e.format==="summary"){t.length>0&&process.stdout.write(`stub workflows: ${t.join(", ")}
+`),process.stdout.write(`${vn(o)}
+`);return}let i={daemon:o.kind==="running"?{active:o.status.active,explorer:o.status.explorer,exploring:o.status.exploring,progress:o.status.progress,queued:o.status.queued,running:!0}:{running:o.kind==="unresponsive",state:o.kind},tests:t.map(a=>({id:a,implemented:!1}))};process.stdout.write(`${JSON.stringify(i,null,2)}
+`)}import ze from"fs";import od from"os";import Uo from"path";import{z as td}from"zod";function g(e,r){let n=td.custom(t=>typeof t=="object"&&t!==null&&"hook_event_name"in t&&t.hook_event_name===e);return{event:e,run:async t=>await r(n.parse(t))??void 0}}var Mo=g("PreToolUse",e=>{if(e.tool_name!=="ExitPlanMode"||!b(e.cwd))return;let r=id();if(r==null)return{hookSpecificOutput:{additionalContext:`Ripplo plan gate: no plan file found \u2014 the "Tests to implement" requirement was not checked. Before implementing, stub a .ripplo/workflows/ workflow per affected flow. ${c("discover")}`,hookEventName:"PreToolUse"}};let n=ze.readFileSync(r,"utf8");if(!/\.ripplo\/tests|Tests to implement|No e2e coverage needed/.test(n))return{hookSpecificOutput:{hookEventName:"PreToolUse",permissionDecision:"deny",permissionDecisionReason:`Plan must cite ripplo test stubs. Add a "Tests to implement" section listing .ripplo/workflows/<id>.ts per affected flow, OR add "No e2e coverage needed: <reason>" if this plan touches no user-facing behavior. ${c("discover")}`}}});function id(){let e=Uo.join(od.homedir(),".claude","plans");return ze.existsSync(e)?ze.readdirSync(e).filter(n=>n.endsWith(".md")).map(n=>Uo.join(e,n)).map(n=>({full:n,mtime:ze.statSync(n).mtimeMs})).sort((n,t)=>t.mtime-n.mtime)[0]?.full??null:null}var Ho=g("UserPromptSubmit",async e=>{if(e.permission_mode!=="plan"||!f(e.cwd)||!b(e.cwd))return;let r=await R(e.cwd);if(r.isErr())return;let n=N(r.value),t=['Plan must include "Tests to implement" with a .ripplo/workflows/ file per affected flow (ExitPlanMode blocks otherwise). Stub each with `workflow("Intent")` (no body).'];return n.length>0&&t.push(`Existing stubs: ${n.join(", ")}`),{hookSpecificOutput:{additionalContext:t.join(`
+`),hookEventName:"UserPromptSubmit"}}});import kd from"path";import Xo from"picomatch";import{z as Qo}from"zod";import{mkdirSync as cd,readFileSync as pd,writeFileSync as ud}from"fs";import md from"path";import{z as x}from"zod";import{createHash as Yh}from"crypto";import Je from"picomatch";function sd(e){return F(["diff","--name-only","HEAD"],e).split(`
+`).filter(r=>r.length>0)}function Wo({cwd:e,ignoreGlobs:r,watchGlobs:n}){let t=Je([...n]),o=Je([...r]);return sd(e).filter(i=>t(i)&&!o(i))}function ad(e){return F(["ls-files","--others","--exclude-standard"],e).split(`
+`).filter(r=>r.length>0)}function qo({cwd:e,ignoreGlobs:r,watchGlobs:n}){let t=Je([...n]),o=Je([...r]);return ad(e).filter(i=>t(i)&&!o(i))}var ld=["**/src/**","**/app/**","**/apps/**","**/pages/**","**/routes/**","**/components/**","**/server/**","**/api/**","**/backend/**","**/features/**","**/modules/**","**/views/**","**/ui/**","**/hooks/**","**/contexts/**","**/providers/**","**/controllers/**","**/handlers/**","**/resolvers/**","**/services/**","**/middleware/**","**/lib/**"],dd=["**/*.gen.*","**/generated/**","**/*.d.ts","**/*.test.*","**/*.spec.*","**/node_modules/**","**/dist/**","**/build/**",".ripplo/**","**/*.md","**/.next/**","**/.turbo/**","**/.vercel/**","**/.svelte-kit/**","**/.nuxt/**","**/.astro/**","**/coverage/**","**/storybook-static/**","**/*.stories.*","**/*.story.*","**/cli/**","**/scripts/**","**/tools/**","**/__tests__/**","**/__mocks__/**","**/__fixtures__/**","**/*.config.*","**/*.setup.*","**/public/**","**/static/**","**/assets/**","**/migrations/**","**/prisma/migrations/**"];function ie(){return{ignorePaths:dd,watchPaths:ld}}var fd=x.object({label:x.string().nullable(),slug:x.string().nullable(),status:x.enum(["intent","stub","implemented"])}),gd=x.object({intent:x.string(),name:x.string(),sourcePath:x.string().nullable(),stub:x.boolean()}),hd=x.object({changedAppFiles:x.array(x.string()).readonly(),scope:x.object({available:x.boolean(),items:x.array(fd).readonly()}),tests:x.array(gd).readonly().default([]),untrackedAppFiles:x.array(x.string()).readonly()});function Bo({cwd:e,scope:r}){let n=Go(e);Jo(e,{...Ko(e),scope:r,tests:n?.tests??[]})}function Vo({cwd:e,tests:r}){let n=Go(e);Jo(e,{...Ko(e),scope:n?.scope??{available:!1,items:[]},tests:r??n?.tests??[]})}function Go(e){let r=hd.safeParse(yd(zo(e)));return r.success?r.data:null}function yd(e){try{return JSON.parse(pd(e,"utf8"))}catch{return null}}function zo(e){return xr(e,"coverage-context.json")}function Jo(e,r){let n=zo(e);cd(md.dirname(n),{recursive:!0}),ud(n,JSON.stringify(r,null,2))}function Ko(e){let{ignorePaths:r,watchPaths:n}=ie(),t={cwd:e,ignoreGlobs:r,watchGlobs:n};return{changedAppFiles:Wo(t),untrackedAppFiles:qo(t)}}var wd=Qo.looseObject({file_path:Qo.string()}),Yo=g("PostToolUse",async e=>{let r=wd.safeParse(e.tool_input);if(!r.success)return;let n=r.data.file_path,{cwd:t}=e;if(!f(t)||!b(t))return;let o=kd.relative(t,n);if(o.startsWith(".."))return;let{ignorePaths:i,watchPaths:a}=ie(),s=Xo([...a]),l=Xo([...i]);if(!s(o)||l(o))return;let d=await R(t);if(Vo({cwd:t,tests:d.isOk()?d.value.workflows.map(p=>({intent:p.intent,name:p.name,sourcePath:p.sourcePath??null,stub:p.stub})):void 0}),d.isErr())return;let u=N(d.value);if(u.length!==0)return{hookSpecificOutput:{additionalContext:`Reminder: stub workflows still unimplemented \u2014 ${u.join(", ")}. Implement with \`workflow("Intent", () => ({ given, steps }))\`.`,hookEventName:"PostToolUse"}}});import{createHash as Id}from"crypto";import{z as ti}from"zod";import{createHash as vd}from"crypto";import{mkdirSync as bd,readFileSync as Zo,writeFileSync as Sd}from"fs";import kr from"path";var Rd=[".ts",".tsx",".js",".jsx"];function Ke(e){let r=vd("sha256");return r.update(F(["rev-parse","HEAD"],e)),r.update("\0"),r.update(F(["diff","HEAD"],e)),r.update("\0"),F(["ls-files","--others","--exclude-standard"],e).split(`
+`).filter(t=>t.length>0).filter(t=>Rd.some(o=>t.endsWith(o))).toSorted((t,o)=>t.localeCompare(o)).forEach(t=>{r.update(t),r.update("\0"),r.update(xd(kr.join(e,t))),r.update("\0")}),r.digest("hex")}function se(e,r){try{return Zo(ei(e,r),"utf8").trim()}catch{return null}}function ae(e,r,n){let t=ei(e,r);bd(kr.dirname(t),{recursive:!0}),Sd(t,n)}function xd(e){try{return Zo(e)}catch{return Buffer.alloc(0)}}function ei(e,r){return kr.join(e,".ripplo",".local",`${r}.hash`)}import{graphql as Cd}from"gql.tada";var Pd=Cd(`
   mutation AutoScopeAddDirty($projectId: String!, $cwd: String!, $workflowSlugs: [String!]!) {
     addDirtyTestsToScope(projectId: $projectId, cwd: $cwd, workflowSlugs: $workflowSlugs) {
       __typename
@@ -443,11 +434,11 @@ iframe { border: none; }
       }
     }
   }
-`);async function Vo({cwd:e,lockfile:r}){if(!v(e))return{addedSlugs:[]};let t=Ed(e);if(t.length===0)return{addedSlugs:[]};let n=new Set(t),o=r.workflows.filter(l=>l.sourcePath!=null&&n.has(l.sourcePath)).map(l=>L(l.name));if(o.length===0)return{addedSlugs:[]};let i=w(e).unwrapOr(void 0);return i==null?{addedSlugs:[]}:await Ct({config:i,cwd:e,lockfile:r}).catch(l=>($.warn("auto-sync failed: %s",l instanceof Error?l.message:String(l)),null))==null?{addedSlugs:[]}:{addedSlugs:await Pd({cfg:i,slugs:o})?o:[]}}async function Pd({cfg:e,slugs:r}){let n=(await u({config:e,document:Cd,variables:{cwd:e.cwd,projectId:e.projectId,workflowSlugs:[...r]}}).catch(o=>($.warn("auto-scope failed: %s",o instanceof Error?o.message:String(o)),null)))?.addDirtyTestsToScope;return n?.__typename!=="MutationAddDirtyTestsToScopeSuccess"?!1:n.data.length>0}var Bo=".ripplo/workflows/";function Ed(e){let r;try{r=N(["status","--porcelain","--",".ripplo/workflows"],e)}catch{return[]}return r.split(`
-`).map(t=>t.slice(3).trim()).filter(t=>t.startsWith(Bo)&&t.endsWith(".ts")).map(t=>t.slice(Bo.length)).filter(t=>t!=="index.ts"&&!t.endsWith("/index.ts"))}var Id=Go.looseObject({file_path:Go.string()}),zo=f("PostToolUse",async e=>{let r=Id.safeParse(e.tool_input);if(!r.success||!/\/\.ripplo\/.*\.ts$/.test(r.data.file_path))return;let{cwd:t}=e;if(!m(t))return;if(!v(t))return{hookSpecificOutput:{additionalContext:"Ripplo hooks are paused \u2014 DSL lint and lockfile sync did not run for this edit. Resume with `npx ripplo hooks resume` when ready.",hookEventName:"PostToolUse"}};let n=await X(t);if(n.isErr())return{decision:"block",reason:`${x(n.error)}
-${c("create","DSL authoring + lint rules")}`};let o=W(n.value);if(o.length>0)return{decision:"block",reason:`${q(o)}
-${c("create")}`};let{addedSlugs:i}=await Vo({cwd:t,lockfile:n.value});return jd([...i.length>0?[`Auto-scoped ${i.join(", ")} (dirty tests).`]:[],...Ad(t,n.value)])});function jd(e){if(e.length!==0)return{hookSpecificOutput:{additionalContext:e.join(`
-`),hookEventName:"PostToolUse"}}}function Ad(e,r){let t=Le(r),n=$d("sha256").update(JSON.stringify(t)).digest("hex");return ie(e,"coverage-warn")===n?[]:(se(e,"coverage-warn",n),t.length===0?[]:[Ee(t)])}import{z as Jo}from"zod";var Ld=Jo.looseObject({command:Jo.string()}),Td=/\bripplo\s+hooks\s+pause\b/,Ko=f("PreToolUse",e=>{if(e.tool_name!=="Bash")return;let r=Ld.safeParse(e.tool_input);if(!r.success||!Td.test(r.data.command))return;let{cwd:t}=e;if(m(t))return{hookSpecificOutput:{hookEventName:"PreToolUse",permissionDecision:"deny",permissionDecisionReason:"`ripplo hooks pause` is a human-only escape hatch \u2014 agents can't bypass Ripplo guardrails on their own. If the daemon genuinely can't start (auth, server down, intentional offline work), surface the blocker to the user and ask them to run `npx ripplo hooks pause` themselves from their terminal."}}});import{parse as Nd}from"shell-quote";import{z as Xo}from"zod";import{existsSync as Dd,mkdirSync as Od,rmSync as My,writeFileSync as _d}from"fs";import kr from"path";function Ke(e,r,t){let n=Qo(e,r,t);Od(kr.dirname(n),{recursive:!0}),_d(n,"")}function Qe(e,r,t){return Dd(Qo(e,r,t))}function Qo(e,r,t){return kr.join(Fd(e,r),t)}function Fd(e,r){return kr.join(e,".ripplo",".local","skills-loaded",r)}var Ud=Xo.looseObject({command:Xo.string()}),Md="run",Hd=new Set(["tail","head","less","more","wc","sort","uniq","awk","sed","grep"]),Zo=f("PreToolUse",e=>{if(e.tool_name!=="Bash")return;let r=Ud.safeParse(e.tool_input);if(!r.success)return;let t=Vd(r.data.command),n=Wd(t);if(n==null)return;let{cwd:o}=e;if(!m(o)||!v(o))return;if(!Qe(o,e.session_id,n.skill))return Yo(n.reason);let i=n.kind==="run"?zd(t):null;if(i!=null)return Yo(`Don't pipe \`ripplo run\` through \`${i}\` \u2014 buffering filters hide live progress, and killing the pipeline mid-run orphans the run on the server. Redirect to a file instead (\`npx ripplo run <id> > /tmp/run.log 2>&1\` and Read it), or use \`run_in_background: true\`.`)});function Wd(e){return qd(e)?{kind:"replay",reason:"Running `ripplo explore replay` requires the `/ripplo:fuzz` skill loaded first. Load `/ripplo:fuzz` then retry \u2014 it carries the triage loop and the add-vs-weaken guardrail for resolving findings.",skill:"fuzz"}:Bd(e)?{kind:"run",reason:"Running `ripplo run` requires the `/ripplo:run` skill loaded first. Load `/ripplo:run` then retry \u2014 it carries the artifact-read order, the no-grep-piping guidance, the failure decision tree, and the caught-bug filing contract.",skill:Md}:null}function qd(e){return e.some((r,t)=>r==="ripplo"&&e[t+1]==="explore"&&e[t+2]==="replay")}function Bd(e){return e.some((r,t)=>r==="ripplo"&&e[t+1]==="run")}function Vd(e){try{return Nd(e)}catch{return[]}}function Gd(e){return typeof e=="object"&&"op"in e&&e.op==="|"}function zd(e){let r=e.find((t,n)=>{let o=e[n-1];return o!=null&&Gd(o)&&typeof t=="string"&&Hd.has(t)});return typeof r=="string"?r:null}function Yo(e){return{hookSpecificOutput:{hookEventName:"PreToolUse",permissionDecision:"deny",permissionDecisionReason:e}}}import Jd from"path";import{z as ei}from"zod";var Kd=new Set(["Edit","Write","NotebookEdit"]),Qd=ei.looseObject({file_path:ei.string()}),Xd="create",ri=f("PreToolUse",e=>{if(!Kd.has(e.tool_name))return;let r=Qd.safeParse(e.tool_input);if(!r.success)return;let{cwd:t}=e;if(!m(t)||!v(t))return;let n=Jd.relative(t,r.data.file_path);if(!(n.startsWith("..")||n!==".ripplo"&&!n.startsWith(".ripplo/"))&&!Qe(t,e.session_id,Xd))return{hookSpecificOutput:{hookEventName:"PreToolUse",permissionDecision:"deny",permissionDecisionReason:`Editing \`.ripplo/\` files (${n}) requires the \`/ripplo:create\` skill loaded first. Load \`/ripplo:create\` then retry \u2014 it carries the DSL builder shape, lint rules, and the parallelization guidance you'll need.`}}});import Yd from"path";import ti from"picomatch";import{graphql as Zd}from"gql.tada";import{z as ni}from"zod";var ec=new Set(["Edit","Write","NotebookEdit"]),rc=ni.looseObject({file_path:ni.string()}),tc=Zd(`
+`);async function ni({cwd:e,lockfile:r}){if(!b(e))return{addedSlugs:[]};let n=$d(e);if(n.length===0)return{addedSlugs:[]};let t=new Set(n),o=r.workflows.filter(l=>l.sourcePath!=null&&t.has(l.sourcePath)).map(l=>_(l.name));if(o.length===0)return{addedSlugs:[]};let i=k(e).unwrapOr(void 0);return i==null?{addedSlugs:[]}:await On({config:i,cwd:e,lockfile:r}).catch(l=>(I.warn("auto-sync failed: %s",l instanceof Error?l.message:String(l)),null))==null?{addedSlugs:[]}:{addedSlugs:await Ed({cfg:i,slugs:o})?o:[]}}async function Ed({cfg:e,slugs:r}){let t=(await m({config:e,document:Pd,variables:{cwd:e.cwd,projectId:e.projectId,workflowSlugs:[...r]}}).catch(o=>(I.warn("auto-scope failed: %s",o instanceof Error?o.message:String(o)),null)))?.addDirtyTestsToScope;return t?.__typename!=="MutationAddDirtyTestsToScopeSuccess"?!1:t.data.length>0}var ri=".ripplo/workflows/";function $d(e){let r;try{r=F(["status","--porcelain","--",".ripplo/workflows"],e)}catch{return[]}return r.split(`
+`).map(n=>n.slice(3).trim()).filter(n=>n.startsWith(ri)&&n.endsWith(".ts")).map(n=>n.slice(ri.length)).filter(n=>n!=="index.ts"&&!n.endsWith("/index.ts"))}var Ad=ti.looseObject({file_path:ti.string()}),oi=g("PostToolUse",async e=>{let r=Ad.safeParse(e.tool_input);if(!r.success||!/\/\.ripplo\/.*\.ts$/.test(r.data.file_path))return;let{cwd:n}=e;if(!f(n))return;if(!b(n))return{hookSpecificOutput:{additionalContext:"Ripplo hooks are paused \u2014 DSL lint and lockfile sync did not run for this edit. Resume with `npx ripplo hooks resume` when ready.",hookEventName:"PostToolUse"}};let t=await Y(n);if(t.isErr())return{decision:"block",reason:`${v(t.error)}
+${c("create","DSL authoring + lint rules")}`};let o=H(t.value);if(o.length>0)return{decision:"block",reason:`${W(o)}
+${c("create")}`};let{addedSlugs:i}=await ni({cwd:n,lockfile:t.value});return jd([...i.length>0?[`Auto-scoped ${i.join(", ")} (dirty tests).`]:[],...Td(n,t.value)])});function jd(e){if(e.length!==0)return{hookSpecificOutput:{additionalContext:e.join(`
+`),hookEventName:"PostToolUse"}}}function Td(e,r){let n=Le(r),t=Id("sha256").update(JSON.stringify(n)).digest("hex");return se(e,"coverage-warn")===t?[]:(ae(e,"coverage-warn",t),n.length===0?[]:[$e(n)])}import{z as ii}from"zod";var Ld=ii.looseObject({command:ii.string()}),Dd=/\bripplo\s+hooks\s+pause\b/,si=g("PreToolUse",e=>{if(e.tool_name!=="Bash")return;let r=Ld.safeParse(e.tool_input);if(!r.success||!Dd.test(r.data.command))return;let{cwd:n}=e;if(f(n))return{hookSpecificOutput:{hookEventName:"PreToolUse",permissionDecision:"deny",permissionDecisionReason:"`ripplo hooks pause` is a human-only escape hatch \u2014 agents can't bypass Ripplo guardrails on their own. If the daemon genuinely can't start (auth, server down, intentional offline work), surface the blocker to the user and ask them to run `npx ripplo hooks pause` themselves from their terminal."}}});import{parse as Ud}from"shell-quote";import{z as li}from"zod";import{existsSync as Od,mkdirSync as _d,rmSync as Zy,writeFileSync as Fd}from"fs";import wr from"path";function Xe(e,r,n){let t=ai(e,r,n);_d(wr.dirname(t),{recursive:!0}),Fd(t,"")}function Qe(e,r,n){return Od(ai(e,r,n))}function ai(e,r,n){return wr.join(Nd(e,r),n)}function Nd(e,r){return wr.join(e,".ripplo",".local","skills-loaded",r)}var Md=li.looseObject({command:li.string()}),Hd="run",Wd=new Set(["tail","head","less","more","wc","sort","uniq","awk","sed","grep"]),ci=g("PreToolUse",e=>{if(e.tool_name!=="Bash")return;let r=Md.safeParse(e.tool_input);if(!r.success)return;let n=Gd(r.data.command),t=qd(n);if(t==null)return;let{cwd:o}=e;if(!f(o)||!b(o))return;if(!Qe(o,e.session_id,t.skill))return di(t.reason);let i=t.kind==="run"?Jd(n):null;if(i!=null)return di(`Don't pipe \`ripplo run\` through \`${i}\` \u2014 buffering filters hide live progress, and killing the pipeline mid-run orphans the run on the server. Redirect to a file instead (\`npx ripplo run <id> > /tmp/run.log 2>&1\` and Read it), or use \`run_in_background: true\`.`)});function qd(e){return Bd(e)?{kind:"replay",reason:"Running `ripplo explore replay` requires the `/ripplo:fuzz` skill loaded first. Load `/ripplo:fuzz` then retry \u2014 it carries the triage loop and the add-vs-weaken guardrail for resolving findings.",skill:"fuzz"}:Vd(e)?{kind:"run",reason:"Running `ripplo run` requires the `/ripplo:run` skill loaded first. Load `/ripplo:run` then retry \u2014 it carries the artifact-read order, the no-grep-piping guidance, the failure decision tree, and the caught-bug filing contract.",skill:Hd}:null}function Bd(e){return e.some((r,n)=>r==="ripplo"&&e[n+1]==="explore"&&e[n+2]==="replay")}function Vd(e){return e.some((r,n)=>r==="ripplo"&&e[n+1]==="run")}function Gd(e){try{return Ud(e)}catch{return[]}}function zd(e){return typeof e=="object"&&"op"in e&&e.op==="|"}function Jd(e){let r=e.find((n,t)=>{let o=e[t-1];return o!=null&&zd(o)&&typeof n=="string"&&Wd.has(n)});return typeof r=="string"?r:null}function di(e){return{hookSpecificOutput:{hookEventName:"PreToolUse",permissionDecision:"deny",permissionDecisionReason:e}}}import Kd from"path";import{z as pi}from"zod";var Xd=new Set(["Edit","Write","NotebookEdit"]),Qd=pi.looseObject({file_path:pi.string()}),Yd="create",ui=g("PreToolUse",e=>{if(!Xd.has(e.tool_name))return;let r=Qd.safeParse(e.tool_input);if(!r.success)return;let{cwd:n}=e;if(!f(n)||!b(n))return;let t=Kd.relative(n,r.data.file_path);if(!(t.startsWith("..")||t!==".ripplo"&&!t.startsWith(".ripplo/"))&&!Qe(n,e.session_id,Yd))return{hookSpecificOutput:{hookEventName:"PreToolUse",permissionDecision:"deny",permissionDecisionReason:`Editing \`.ripplo/\` files (${t}) requires the \`/ripplo:create\` skill loaded first. Load \`/ripplo:create\` then retry \u2014 it carries the DSL builder shape, lint rules, and the parallelization guidance you'll need.`}}});import Zd from"path";import mi from"picomatch";import{graphql as ec}from"gql.tada";import{z as fi}from"zod";var rc=new Set(["Edit","Write","NotebookEdit"]),nc=fi.looseObject({file_path:fi.string()}),tc=ec(`
   query PreEditScopeGate($projectId: String!, $cwd: String!) {
     project(id: $projectId) {
       id
@@ -459,9 +450,9 @@ ${c("create")}`};let{addedSlugs:i}=await Vo({cwd:t,lockfile:n.value});return jd(
       }
     }
   }
-`),oi=f("PreToolUse",async e=>{if(!ec.has(e.tool_name))return;let r=rc.safeParse(e.tool_input);if(!r.success)return;let{cwd:t}=e;if(!m(t)||!v(t))return;let n=Yd.relative(t,r.data.file_path);if(n.startsWith("..")||n===".ripplo"||n.startsWith(".ripplo/")||!nc(n))return;let o=await oc(t);return o.populated?o.degradedReason!=null?{hookSpecificOutput:{additionalContext:`Scope check skipped (${o.degradedReason}) \u2014 edit allowed through, but the scope guardrail isn't enforcing on this edit.`,hookEventName:"PreToolUse"}}:void 0:{hookSpecificOutput:{hookEventName:"PreToolUse",permissionDecision:"deny",permissionDecisionReason:`Scope is empty but this edit touches app code (${n}). Stub a test or \`scope add\` an existing one before proceeding \u2014 or acknowledge "no user-facing behavior" if pure refactor. Hook re-fires until scope is populated (or hooks paused via the web UI). ${Dr(["run","create"])}`}}});function nc(e){let{ignorePaths:r,watchPaths:t}=oe(),n=ti([...t]),o=ti([...r]);return n(e)&&!o(e)}async function oc(e){let r=w(e).unwrapOr(void 0);if(r==null)return{degradedReason:"no project config \u2014 `npx ripplo init` not run here",populated:!0};let t=await u({config:r,document:tc,variables:{cwd:r.cwd,projectId:r.projectId}}).catch(()=>null);return t==null?{degradedReason:"server unreachable",populated:!0}:{degradedReason:null,populated:(t.project?.devSession?.scopeItems??[]).length>0}}import ic from"fs";import sc from"path";import{z as ii}from"zod";var ac=new Set(["Edit","Write","NotebookEdit"]),lc=ii.looseObject({file_path:ii.string()}),si=f("PreToolUse",async e=>{if(!ac.has(e.tool_name))return;let r=dc(e);if(r==null)return;let{cwd:t}=e;if(ic.existsSync(le(t))||ve(t))return;let n=await S(t);return n.isErr()?{hookSpecificOutput:{additionalContext:`\`ripplo daemon\` isn't running and the DSL is currently failing to compile, so the daemon gate is letting this edit through \u2014 fix the compile error before relying on dev-mode guardrails. Compile error:
-${x(n.error)}
-${c("create","DSL authoring + lint rules")}`,hookEventName:"PreToolUse"}}:{hookSpecificOutput:{hookEventName:"PreToolUse",permissionDecision:"deny",permissionDecisionReason:`\`ripplo daemon\` is not running \u2014 this edit to \`${r}\` won't sync and dev-mode guardrails won't fire. Run \`/ripplo:start\`, then retry (\`npx ripplo doctor\` checks the daemon and dev server). If the daemon can't start, the user can bypass with \`npx ripplo hooks pause\`. ${c("start")}`}}});function dc(e){let r=lc.safeParse(e.tool_input);if(!r.success||!m(e.cwd))return null;let t=sc.relative(e.cwd,r.data.file_path);return t.startsWith("..")||t!==".ripplo"&&!t.startsWith(".ripplo/")?null:t}import{graphql as cc}from"gql.tada";var pc=cc(`
+`),gi=g("PreToolUse",async e=>{if(!rc.has(e.tool_name))return;let r=nc.safeParse(e.tool_input);if(!r.success)return;let{cwd:n}=e;if(!f(n)||!b(n))return;let t=Zd.relative(n,r.data.file_path);if(t.startsWith("..")||t===".ripplo"||t.startsWith(".ripplo/")||!oc(t))return;let o=await ic(n);return o.populated?o.degradedReason!=null?{hookSpecificOutput:{additionalContext:`Scope check skipped (${o.degradedReason}) \u2014 edit allowed through, but the scope guardrail isn't enforcing on this edit.`,hookEventName:"PreToolUse"}}:void 0:{hookSpecificOutput:{hookEventName:"PreToolUse",permissionDecision:"deny",permissionDecisionReason:`Scope is empty but this edit touches app code (${t}). Stub a test or \`scope add\` an existing one before proceeding \u2014 or acknowledge "no user-facing behavior" if pure refactor. Hook re-fires until scope is populated (or hooks paused via the web UI). ${Dr(["run","create"])}`}}});function oc(e){let{ignorePaths:r,watchPaths:n}=ie(),t=mi([...n]),o=mi([...r]);return t(e)&&!o(e)}async function ic(e){let r=k(e).unwrapOr(void 0);if(r==null)return{degradedReason:"no project config \u2014 `npx ripplo init` not run here",populated:!0};let n=await m({config:r,document:tc,variables:{cwd:r.cwd,projectId:r.projectId}}).catch(()=>null);return n==null?{degradedReason:"server unreachable",populated:!0}:{degradedReason:null,populated:(n.project?.devSession?.scopeItems??[]).length>0}}import sc from"fs";import ac from"path";import{z as hi}from"zod";var lc=new Set(["Edit","Write","NotebookEdit"]),dc=hi.looseObject({file_path:hi.string()}),yi=g("PreToolUse",async e=>{if(!lc.has(e.tool_name))return;let r=cc(e);if(r==null)return;let{cwd:n}=e;if(sc.existsSync(de(n))||be(n))return;let t=await R(n);return t.isErr()?{hookSpecificOutput:{additionalContext:`\`ripplo daemon\` isn't running and the DSL is currently failing to compile, so the daemon gate is letting this edit through \u2014 fix the compile error before relying on dev-mode guardrails. Compile error:
+${v(t.error)}
+${c("create","DSL authoring + lint rules")}`,hookEventName:"PreToolUse"}}:{hookSpecificOutput:{hookEventName:"PreToolUse",permissionDecision:"deny",permissionDecisionReason:`\`ripplo daemon\` is not running \u2014 this edit to \`${r}\` won't sync and dev-mode guardrails won't fire. Run \`/ripplo:start\`, then retry (\`npx ripplo doctor\` checks the daemon and dev server). If the daemon can't start, the user can bypass with \`npx ripplo hooks pause\`. ${c("start")}`}}});function cc(e){let r=dc.safeParse(e.tool_input);if(!r.success||!f(e.cwd))return null;let n=ac.relative(e.cwd,r.data.file_path);return n.startsWith("..")||n!==".ripplo"&&!n.startsWith(".ripplo/")?null:n}import{graphql as pc}from"gql.tada";var uc=pc(`
   query ScopeReminder($projectId: String!, $cwd: String!) {
     project(id: $projectId) {
       id
@@ -478,16 +469,16 @@ ${c("create","DSL authoring + lint rules")}`,hookEventName:"PreToolUse"}}:{hookS
       }
     }
   }
-`),ai=f("UserPromptSubmit",async e=>{let{cwd:r}=e;if(!m(r)||!v(r))return;let t=Je(r);if(ie(r,"scope-reminder")===t)return;let n=w(r).unwrapOr(void 0);if(n==null)return;let o=await u({config:n,document:pc,variables:{cwd:n.cwd,projectId:n.projectId}}).catch(()=>null);se(r,"scope-reminder",t);let i=o?.project?.devSession?.scopeItems??[];return To({cwd:r,scope:{available:o!=null,items:i.map(s=>uc(s))}}),o==null?{hookSpecificOutput:{additionalContext:`Ripplo scope: unknown \u2014 server unreachable, scope guardrails are not enforcing. Check the dev session (\`npx ripplo doctor\`). ${c("start")}`,hookEventName:"UserPromptSubmit"}}:{hookSpecificOutput:{additionalContext:i.length===0?`Ripplo scope: empty. ${c("run")}`:`Ripplo scope (${String(i.length)}):
+`),ki=g("UserPromptSubmit",async e=>{let{cwd:r}=e;if(!f(r)||!b(r))return;let n=Ke(r);if(se(r,"scope-reminder")===n)return;let t=k(r).unwrapOr(void 0);if(t==null)return;let o=await m({config:t,document:uc,variables:{cwd:t.cwd,projectId:t.projectId}}).catch(()=>null);ae(r,"scope-reminder",n);let i=o?.project?.devSession?.scopeItems??[];return Bo({cwd:r,scope:{available:o!=null,items:i.map(s=>mc(s))}}),o==null?{hookSpecificOutput:{additionalContext:`Ripplo scope: unknown \u2014 server unreachable, scope guardrails are not enforcing. Check the dev session (\`npx ripplo doctor\`). ${c("start")}`,hookEventName:"UserPromptSubmit"}}:{hookSpecificOutput:{additionalContext:i.length===0?`Ripplo scope: empty. ${c("run")}`:`Ripplo scope (${String(i.length)}):
 ${i.map(s=>{let l=s.workflow;return l==null?`  [intent] (${s.id}) ${s.label??""}`:`  [${l.spec==null?"stub":"implemented"}] (${s.id}) ${l.slug}`}).join(`
-`)}`,hookEventName:"UserPromptSubmit"}}});function uc(e){let r=e.workflow;return r==null?{label:e.label,slug:null,status:"intent"}:{label:e.label,slug:r.slug,status:r.spec==null?"stub":"implemented"}}var mc="# Ripplo \u2014 always-on session context\n\nEvery user-facing change in this repo ships with a deterministic, backend-aware test that proves it works end-to-end.\n\n## Load the right skill before acting \u2014 this is critical\n\nThe skills below carry the procedural detail you need to do Ripplo work correctly: entity/world modeling, parallel-isolation in engine impls, backend state assertions, scope discipline, artifact-read order on failures, parallelization patterns. **None of that is reproduced in this preamble** \u2014 only the always-on guardrails are. If you act on a Ripplo task without loading the matching skill, you will skip rules that exist to prevent specific past failure modes (cross-run data leakage, \"passing\" tests that never asserted backend state, etc.).\n\nMatch the task to a skill from the triage table \u2014 if unsure between two, load both. If completely unsure, load `/ripplo:discover` or `/ripplo:create`. Loading is cheap. Acting under-informed is not.\n\n## Skill triage\n\n- Load `/ripplo:setup` skill for instructions on initializing Ripplo in a project; `npx ripplo doctor` reports the engine endpoint missing.\n- Load `/ripplo:discover` skill for instructions on planning/stubbing test coverage for a new project or new feature area.\n- Load `/ripplo:create` skill for instructions on authoring a single test spec for a user flow.\n- Load `/ripplo:run` skill for instructions on executing tests, managing the testing scope this session is responsible for, diagnosing a failed run (read artifacts in `.ripplo/debug/<runId>/` before re-running), and filing caught app bugs.\n- Load `/ripplo:fuzz` skill for instructions on triaging findings from the background explorer's findings log.\n\n## Universal rules\n\n- **Two background processes must be running before feature work.** (1) The app's dev server, so the app is reachable; (2) `npx ripplo daemon` (run `/ripplo:start` to spawn it, or invoke it directly via Bash with `run_in_background`), so the dev session is live. Without the daemon, dev-mode hooks don't arm (`ripplo run` will auto-start one if absent). Without the dev server, runs fail when they try to hit the app. `npx ripplo doctor` reports both.\n- **Two funnels.** Definitions \u2192 `createRipplo({ entities, singletons, tests })` in `.ripplo/index.ts`. Implementations \u2192 `createEngine(ripplo, { entities: impls, singletons })` in your app server's `test/engine.ts` \u2014 one `seed`/`read` impl per entity. Never call either elsewhere. TS enforces exhaustiveness across both.\n- **\"Done\" = app code delivers the behavior AND a passing test proves it.** Both halves. Shipping without a test isn't done; writing a test against broken UI/API isn't done.\n- **Scope is your job.** For any non-trivial change, enumerate every flow it could affect and either `scope add` existing tests or stub new ones with `test(\"Intent\")` (no body). Don't wait to be told.\n- **`scope remove` is never for size/effort.** Valid only when an item is genuinely out of scope (wrong flow, duplicate, user said \"not this session,\" feature cut). \"Too many stubs\" \u2192 parallelize with subagents. Don't present \"implement vs. remove\" as a neutral A/B.\n- **Stub gates are not a question.** When `stop-enforce` blocks on unimplemented stubs, implement them \u2014 don't ask the user \"implement or defer?\", don't propose pausing hooks as option B. The fix isn't done until the test is. New scaffolding (entity, world, engine impl) is in-scope work, not follow-up.\n- **Backend assertions are mandatory on mutations.** Every mutation step carries an `Entity.created/updated/deleted` in its `.expect(...)` \u2014 Ripplo checks your app's state against what the test expected. A UI-only check on a mutation ships the bug as green.\n- **Never weaken a test to make it pass.** No `contains`/regex for exact text, no removed assertions, no fabricated locators. App lacks an accessible name \u2192 add one to the app, don't fall back to `testId()`. App bug \u2192 report with evidence.\n- **Artifacts first, re-run last.** Failed runs write `.ripplo/debug/<runId>/behavior.jsonl` \u2014 a causal stream of actions, assertions, rrweb DOM, console, network, and server spans \u2014 and the run output renders the findings. Read them. Never pipe `ripplo run` through `grep`/`tail`/`head`. Form a hypothesis citing an event, make one change, re-run once.\n- **`.ripplo/ripplo.lock` is committed, never hand-edited.** `ripplo lint` / `ripplo compile` regenerates it. Pre-commit runs `ripplo compile --check`.\n- **Scratch files live in `.ripplo/.local/`.** Never loose in `.ripplo/`.\n- **Worktrees are self-contained.** Each worktree has its own `.ripplo/` checkout, DevSession, scope, and debug artifacts. Auth and projectId are shared globally. Env files (typically gitignored) won't carry over to a fresh worktree \u2014 copy from main or point at a shared file. **If sibling worktrees run dev servers on different ports, the worktree's env file must update both `RIPPLO_APP_URL` and `RIPPLO_ENGINE_URL` to match the port that worktree's dev server is bound to** (e.g. main on `:3000`, this worktree on `:3001` \u2192 set `RIPPLO_APP_URL=http://localhost:3001` and `RIPPLO_ENGINE_URL=http://localhost:3001/ripplo` in the worktree's env file). Mismatched ports = `npx ripplo daemon` talks to the wrong server, runs silently fail or hit the sibling worktree's app.\n- **DSL locators are semantic.** Use `role`/`button`/`textbox`/`heading`/`link`; `testId` only when no ARIA role exists.\n- **New backend state?** Add an `entity(...)` in `.ripplo/entities/` and a `seed`/`read` impl in your app's engine funnel (TS flags the missing impl).\n\n## Key files\n\n- `.ripplo/index.ts` \u2014 `createRipplo` call.\n- `.ripplo/{entities,singletons,worlds,tests}/index.ts` \u2014 registry aggregators.\n- `.ripplo/project.json` \u2014 project id + env-file pointers.\n- `<app>/src/test/engine.ts` \u2014 single impl funnel via `createEngine`.\n- `/ripplo:create` skill \u2014 DSL reference (entities, worlds, tests, backend assertions). Full primitive catalog at `node_modules/@ripplo/testing/DSL.md`.\n",li=f("SessionStart",e=>{if(m(e.cwd))return{hookSpecificOutput:{additionalContext:mc,hookEventName:"SessionStart"}}});import fc from"path";import gc from"process";import{CancellationTokenSource as hc}from"vscode-jsonrpc/node";import{graphql as yc}from"gql.tada";function di(e){return`--- Ripplo Run Failures (scope) ---
+`)}`,hookEventName:"UserPromptSubmit"}}});function mc(e){let r=e.workflow;return r==null?{label:e.label,slug:null,status:"intent"}:{label:e.label,slug:r.slug,status:r.spec==null?"stub":"implemented"}}var fc="# Ripplo \u2014 always-on session context\n\nEvery user-facing change in this repo ships with a deterministic, backend-aware test that proves it works end-to-end.\n\n## Load the right skill before acting \u2014 this is critical\n\nThe skills below carry the procedural detail you need to do Ripplo work correctly: entity/world modeling, parallel-isolation in engine impls, backend state assertions, scope discipline, artifact-read order on failures, parallelization patterns. **None of that is reproduced in this preamble** \u2014 only the always-on guardrails are. If you act on a Ripplo task without loading the matching skill, you will skip rules that exist to prevent specific past failure modes (cross-run data leakage, \"passing\" tests that never asserted backend state, etc.).\n\nMatch the task to a skill from the triage table \u2014 if unsure between two, load both. If completely unsure, load `/ripplo:discover` or `/ripplo:create`. Loading is cheap. Acting under-informed is not.\n\n## Skill triage\n\n- Load `/ripplo:setup` skill for instructions on initializing Ripplo in a project; `npx ripplo doctor` reports the engine endpoint missing.\n- Load `/ripplo:discover` skill for instructions on planning/stubbing test coverage for a new project or new feature area.\n- Load `/ripplo:create` skill for instructions on authoring a single test spec for a user flow.\n- Load `/ripplo:run` skill for instructions on executing tests, managing the testing scope this session is responsible for, diagnosing a failed run (read artifacts in `.ripplo/debug/<runId>/` before re-running), and filing caught app bugs.\n- Load `/ripplo:fuzz` skill for instructions on triaging findings from the background explorer's findings log.\n\n## Universal rules\n\n- **Two background processes must be running before feature work.** (1) The app's dev server, so the app is reachable; (2) `npx ripplo daemon` (run `/ripplo:start` to spawn it, or invoke it directly via Bash with `run_in_background`), so the dev session is live. Without the daemon, dev-mode hooks don't arm (`ripplo run` will auto-start one if absent). Without the dev server, runs fail when they try to hit the app. `npx ripplo doctor` reports both.\n- **Two funnels.** Definitions \u2192 `createRipplo({ entities, singletons, tests })` in `.ripplo/index.ts`. Implementations \u2192 `createEngine(ripplo, { entities: impls, singletons })` in your app server's `test/engine.ts` \u2014 one `seed`/`read` impl per entity. Never call either elsewhere. TS enforces exhaustiveness across both.\n- **\"Done\" = app code delivers the behavior AND a passing test proves it.** Both halves. Shipping without a test isn't done; writing a test against broken UI/API isn't done.\n- **Scope is your job.** For any non-trivial change, enumerate every flow it could affect and either `scope add` existing tests or stub new ones with `test(\"Intent\")` (no body). Don't wait to be told.\n- **`scope remove` is never for size/effort.** Valid only when an item is genuinely out of scope (wrong flow, duplicate, user said \"not this session,\" feature cut). \"Too many stubs\" \u2192 parallelize with subagents. Don't present \"implement vs. remove\" as a neutral A/B.\n- **Stub gates are not a question.** When `stop-enforce` blocks on unimplemented stubs, implement them \u2014 don't ask the user \"implement or defer?\", don't propose pausing hooks as option B. The fix isn't done until the test is. New scaffolding (entity, world, engine impl) is in-scope work, not follow-up.\n- **Backend assertions are mandatory on mutations.** Every mutation step carries an `Entity.created/updated/deleted` in its `.expect(...)` \u2014 Ripplo checks your app's state against what the test expected. A UI-only check on a mutation ships the bug as green.\n- **Never weaken a test to make it pass.** No `contains`/regex for exact text, no removed assertions, no fabricated locators. App lacks an accessible name \u2192 add one to the app, don't fall back to `testId()`. App bug \u2192 report with evidence.\n- **Artifacts first, re-run last.** Failed runs write `.ripplo/debug/<runId>/behavior.jsonl` \u2014 a causal stream of actions, assertions, rrweb DOM, console, network, and server spans \u2014 and the run output renders the findings. Read them. Never pipe `ripplo run` through `grep`/`tail`/`head`. Form a hypothesis citing an event, make one change, re-run once.\n- **`.ripplo/ripplo.lock` is committed, never hand-edited.** `ripplo lint` / `ripplo compile` regenerates it. Pre-commit runs `ripplo compile --check`.\n- **Scratch files live in `.ripplo/.local/`.** Never loose in `.ripplo/`.\n- **Worktrees are self-contained.** Each worktree has its own `.ripplo/` checkout, DevSession, scope, and debug artifacts. Auth and projectId are shared globally. Env files (typically gitignored) won't carry over to a fresh worktree \u2014 copy from main or point at a shared file. **If sibling worktrees run dev servers on different ports, the worktree's env file must update both `RIPPLO_APP_URL` and `RIPPLO_ENGINE_URL` to match the port that worktree's dev server is bound to** (e.g. main on `:3000`, this worktree on `:3001` \u2192 set `RIPPLO_APP_URL=http://localhost:3001` and `RIPPLO_ENGINE_URL=http://localhost:3001/ripplo` in the worktree's env file). Mismatched ports = `npx ripplo daemon` talks to the wrong server, runs silently fail or hit the sibling worktree's app.\n- **DSL locators are semantic.** Use `role`/`button`/`textbox`/`heading`/`link`; `testId` only when no ARIA role exists.\n- **New backend state?** Add an `entity(...)` in `.ripplo/entities/` and a `seed`/`read` impl in your app's engine funnel (TS flags the missing impl).\n\n## Key files\n\n- `.ripplo/index.ts` \u2014 `createRipplo` call.\n- `.ripplo/{entities,singletons,worlds,tests}/index.ts` \u2014 registry aggregators.\n- `.ripplo/project.json` \u2014 project id + env-file pointers.\n- `<app>/src/test/engine.ts` \u2014 single impl funnel via `createEngine`.\n- `/ripplo:create` skill \u2014 DSL reference (entities, worlds, tests, backend assertions). Full primitive catalog at `node_modules/@ripplo/testing/DSL.md`.\n",wi=g("SessionStart",e=>{if(f(e.cwd))return{hookSpecificOutput:{additionalContext:fc,hookEventName:"SessionStart"}}});import gc from"path";import hc from"process";import{CancellationTokenSource as yc}from"vscode-jsonrpc/node";import{graphql as kc}from"gql.tada";function vi(e){return`--- Ripplo Run Failures (scope) ---
 ${e.join(`
 `)}
-Artifacts: .ripplo/debug/<runId>/. ${c("run")}`}function wr({lines:e,retried:r}){let t=r?"Already retried once inside this gate \u2014 still unreachable.":"";return["--- Ripplo Run Not Verified (Ripplo server unreachable) ---",...e,"The Ripplo server was unreachable during these runs \u2014 a server-side transient. Don't debug the daemon, dev server, or auth (`npx ripplo doctor` will be green).",t,"Wait a moment, then stop again to re-verify."].filter(n=>n.length>0).join(`
-`)}function ci(e){return["--- Ripplo Run Rejected (server declined) ---",...e,"The server rejected these runs \u2014 not transient. Retrying won't clear it, and `npx ripplo doctor` will be green. Resolve the stated cause (plan limit, missing test, repo link), not the daemon or dev server."].join(`
-`)}function ye(e){return`--- Ripplo Run Could Not Execute ---
+Artifacts: .ripplo/debug/<runId>/. ${c("run")}`}function vr({lines:e,retried:r}){let n=r?"Already retried once inside this gate \u2014 still unreachable.":"";return["--- Ripplo Run Not Verified (Ripplo server unreachable) ---",...e,"The Ripplo server was unreachable during these runs \u2014 a server-side transient. Don't debug the daemon, dev server, or auth (`npx ripplo doctor` will be green).",n,"Wait a moment, then stop again to re-verify."].filter(t=>t.length>0).join(`
+`)}function bi(e){return["--- Ripplo Run Rejected (server declined) ---",...e,"The server rejected these runs \u2014 not transient. Retrying won't clear it, and `npx ripplo doctor` will be green. Resolve the stated cause (plan limit, missing test, repo link), not the daemon or dev server."].join(`
+`)}function ke(e){return`--- Ripplo Run Could Not Execute ---
 ${e}
-Fix the run environment (daemon, dev server, auth \u2014 \`npx ripplo doctor\`) and re-run before declaring work done. ${c("start")}`}var kc=yc(`
+Fix the run environment (daemon, dev server, auth \u2014 \`npx ripplo doctor\`) and re-run before declaring work done. ${c("start")}`}var wc=kc(`
   query ScopeEnforce($projectId: String!, $cwd: String!) {
     project(id: $projectId) {
       id
@@ -506,26 +497,26 @@ Fix the run environment (daemon, dev server, auth \u2014 \`npx ripplo doctor\`)
       }
     }
   }
-`),ui=f("Stop",async e=>{let{cwd:r}=e;if(!m(r)||!v(r))return;let t=Je(r),n=ie(r,"stop-enforce")===t;if(n&&!e.stop_hook_active)return;let o=await wc(r);if(se(r,"stop-enforce",t),o.errors.length!==0)return n&&e.stop_hook_active&&!o.infraOnly?{continue:!1,stopReason:`Stop-enforce: same repo state across consecutive stop attempts \u2014 agent appears stuck. Errors:
+`),Ri=g("Stop",async e=>{let{cwd:r}=e;if(!f(r)||!b(r))return;let n=Ke(r),t=se(r,"stop-enforce")===n;if(t&&!e.stop_hook_active)return;let o=await vc(r);if(ae(r,"stop-enforce",n),o.errors.length!==0)return t&&e.stop_hook_active&&!o.infraOnly?{continue:!1,stopReason:`Stop-enforce: same repo state across consecutive stop attempts \u2014 agent appears stuck. Errors:
 ${o.errors.join(`
 
 `)}`}:{decision:"block",reason:o.errors.join(`
 
-`)}});async function wc(e){let r=await X(e);if(r.isErr())return{errors:[`--- Compilation failed ---
-${x(r.error)}
-${c("create")}`],infraOnly:!1};let t=r.value,n=await Sc(e,t),o=vc(t),i=bc(t),a=n.runnableSlugs.length>0?await Rc(e):null,s=[o,i,a?.error??null,n.error].filter(d=>d!=null),l=s.length>0&&o==null&&i==null&&n.error==null&&(a?.infra??!1);return{errors:s,infraOnly:l}}function vc(e){let r=W(e);return r.length===0?null:`--- Ripplo Lint ---
-${q(r)}
-${c("create")}`}function bc(e){let r=U(e);return r.length===0?null:`--- Unimplemented stubs ---
+`)}});async function vc(e){let r=await Y(e);if(r.isErr())return{errors:[`--- Compilation failed ---
+${v(r.error)}
+${c("create")}`],infraOnly:!1};let n=r.value,t=await Rc(e,n),o=bc(n),i=Sc(n),a=t.runnableSlugs.length>0?await Cc(e):null,s=[o,i,a?.error??null,t.error].filter(d=>d!=null),l=s.length>0&&o==null&&i==null&&t.error==null&&(a?.infra??!1);return{errors:s,infraOnly:l}}function bc(e){let r=H(e);return r.length===0?null:`--- Ripplo Lint ---
+${W(r)}
+${c("create")}`}function Sc(e){let r=N(e);return r.length===0?null:`--- Unimplemented stubs ---
 ${r.join(", ")}
 Implement the stub now with \`workflow("Intent", () => ({ given, steps }))\`. Do not ask the user "implement or defer?" \u2014 that framing is forbidden by /ripplo:create. New scaffolding (entity, world, engine impl) is in-scope, not follow-up.
-${c("create")}`}async function Sc(e,r){let t=new Set(U(r).map(p=>L(p))),n=new Set(r.workflows.map(p=>L(p.name))),o=(p,y)=>n.has(p)?t.has(p):xc(y),i=w(e).unwrapOr(void 0);if(i==null)return{error:`--- Testing Scope (not checked) ---
-No project config \u2014 \`npx ripplo init\` hasn't run here, so scope/stub done-checks are not enforcing. ${c("setup")}`,runnableSlugs:[]};let a=await u({config:i,document:kc,variables:{cwd:i.cwd,projectId:i.projectId}}).catch(()=>null);if(a==null)return{error:`--- Testing Scope (not checked) ---
+${c("create")}`}async function Rc(e,r){let n=new Set(N(r).map(p=>_(p))),t=new Set(r.workflows.map(p=>_(p.name))),o=(p,y)=>t.has(p)?n.has(p):xc(y),i=k(e).unwrapOr(void 0);if(i==null)return{error:`--- Testing Scope (not checked) ---
+No project config \u2014 \`npx ripplo init\` hasn't run here, so scope/stub done-checks are not enforcing. ${c("setup")}`,runnableSlugs:[]};let a=await m({config:i,document:wc,variables:{cwd:i.cwd,projectId:i.projectId}}).catch(()=>null);if(a==null)return{error:`--- Testing Scope (not checked) ---
 Ripplo server unreachable \u2014 scope/stub done-checks are not enforcing. Verify the dev session is live (\`npx ripplo doctor\`, ${c("start")}) before declaring work done.`,runnableSlugs:[]};let s=a.project?.devSession?.scopeItems??[],l=s.flatMap(p=>{let y=p.workflow;return y==null?[`  [intent] ${p.label??"(no label)"} \u2014 write a test for this flow`]:o(y.slug,y.spec)?[`  [stub] ${y.slug} \u2014 implement \`${y.name}\``]:[]}),d=s.flatMap(p=>p.workflow!=null&&!o(p.workflow.slug,p.workflow.spec)?[p.workflow.slug]:[]);return{error:l.length===0?null:`--- Testing Scope ---
 ${l.join(`
 `)}
-${c("create")}`,runnableSlugs:d}}function xc(e){return typeof e=="object"&&e!=null&&Reflect.get(e,"stub")===!0}async function Rc(e){let r=gc.argv[1];if(r==null)return{error:ye("CLI entry missing (process.argv[1])"),infra:!1};let t=await Fe(e);if(t!=null){let i=Me(t);return Ne(t.serverUrl)?{error:ye(i),infra:!1}:{error:wr({lines:[i],retried:!1}),infra:!0}}let n=await te({cliEntry:r,cwd:e});if(n.isErr())return{error:ye(D(n.error)),infra:!1};let o=n.value;try{return await Cc({connection:o,cwd:e})}finally{o.spawned&&await ne(o),o.socket.destroy()}}async function Cc({connection:e,cwd:r}){let t=await pi({connection:e,cwd:r,tests:[]});if(t.kind==="transport")return{error:ye(t.message),infra:!1};let n=t.notRun.length>0?await pi({connection:e,cwd:r,tests:t.notRun.map(l=>l.id)}):null,o=n==null||n.kind==="transport"?t.notRun:n.notRun,i=n!=null&&n.kind==="done",a=[...t.failedLines,...i?n.failedLines:[]],s=[...t.rejected,...i?n.rejected:[]];return Pc({failedLines:a,notRun:o,rejected:s,retried:n!=null})}function Pc({failedLines:e,notRun:r,rejected:t,retried:n}){if(e.length===0&&r.length===0&&t.length===0)return{error:null,infra:!1};let o=e.length>0?di(e):null,i=t.length>0?ci(t):null,a=r.length>0?wr({lines:r.map(s=>s.line),retried:n}):null;return{error:[o,i,a].filter(s=>s!=null).join(`
+${c("create")}`,runnableSlugs:d}}function xc(e){return typeof e=="object"&&e!=null&&Reflect.get(e,"stub")===!0}async function Cc(e){let r=hc.argv[1];if(r==null)return{error:ke("CLI entry missing (process.argv[1])"),infra:!1};let n=await Ne(e);if(n!=null){let i=He(n);return Ue(n.serverUrl)?{error:ke(i),infra:!1}:{error:vr({lines:[i],retried:!1}),infra:!0}}let t=await te({cliEntry:r,cwd:e});if(t.isErr())return{error:ke(L(t.error)),infra:!1};let o=t.value;try{return await Pc({connection:o,cwd:e})}finally{o.spawned&&await oe(o),o.socket.destroy()}}async function Pc({connection:e,cwd:r}){let n=await Si({connection:e,cwd:r,tests:[]});if(n.kind==="transport")return{error:ke(n.message),infra:!1};let t=n.notRun.length>0?await Si({connection:e,cwd:r,tests:n.notRun.map(l=>l.id)}):null,o=t==null||t.kind==="transport"?n.notRun:t.notRun,i=t!=null&&t.kind==="done",a=[...n.failedLines,...i?t.failedLines:[]],s=[...n.rejected,...i?t.rejected:[]];return Ec({failedLines:a,notRun:o,rejected:s,retried:t!=null})}function Ec({failedLines:e,notRun:r,rejected:n,retried:t}){if(e.length===0&&r.length===0&&n.length===0)return{error:null,infra:!1};let o=e.length>0?vi(e):null,i=n.length>0?bi(n):null,a=r.length>0?vr({lines:r.map(s=>s.line),retried:t}):null;return{error:[o,i,a].filter(s=>s!=null).join(`
 
-`),infra:o==null}}async function pi({connection:e,cwd:r,tests:t}){let n=[],o=[],i=[],a=fc.join(r,".ripplo","debug"),s=new hc;return(await De({connection:e,request:{all:!1,headed:!1,tests:[...t]},token:s.token,onEvent:d=>{Ec({debugDir:a,event:d,failedLines:n,notRun:o,rejected:i})}})).match(d=>d.kind==="daemon-error"?{kind:"transport",message:He(d.error)}:{failedLines:n,kind:"done",notRun:o,rejected:i},d=>({kind:"transport",message:D(d)}))}function Ec({debugDir:e,event:r,failedLines:t,notRun:n,rejected:o}){if(r.kind!=="test-outcome"||r.outcome.kind==="pass")return;let i=Ue({debugDir:e,event:r})??r.testName;if(r.outcome.kind==="dispatch-error"){o.push(i);return}if(r.outcome.kind==="dispatch-timeout"||r.outcome.kind==="infra-error"){n.push({id:`${r.workflowName}/${r.testName}`,line:i});return}t.push(i)}import{z as mi}from"zod";var $c=mi.looseObject({skill:mi.string()}),fi=f("PostToolUse",e=>{if(e.tool_name!=="Skill")return;let r=$c.safeParse(e.tool_input);if(!r.success)return;let t=/^ripplo:(.+)$/.exec(r.data.skill);if(t==null)return;let n=t[1];n!=null&&m(e.cwd)&&Ke(e.cwd,e.session_id,n)});var Ic=/(?:^|\s)\/ripplo:([a-z][a-z0-9-]*)\b/gi,gi=f("UserPromptSubmit",e=>{m(e.cwd)&&[...e.prompt.matchAll(Ic)].map(r=>r[1]).filter(r=>r!=null).forEach(r=>{Ke(e.cwd,e.session_id,r)})});Gc();V(process.cwd());Pr();var hi={"exit-plan-gate":Io,"plan-reminder":jo,"post-edit-flag-stubs":Ho,"post-edit-lint":zo,"pre-bash-hooks-pause-gate":Ko,"pre-bash-run-gate":Zo,"pre-edit-ripplo-skill-gate":ri,"pre-edit-scope-gate":oi,"pre-edit-watch-gate":si,"scope-reminder":ai,"session-preamble":li,"stop-enforce":ui,"track-skill-load":fi,"track-skill-prompt":gi};async function Dc(){Ac({pkg:{name:"ripplo",version:P()}}).notify({message:_t()}),await Lc(Tc(process.argv)).scriptName("ripplo").version(P()).command(Nc()).command("concurrency [value]","Show or set max local concurrent runs (daemon applies live)",e=>e.positional("value",{type:"number"}),e=>Gt({value:e.value})).command("auth <subcommand>","Manage authentication",Vc).command("projects <subcommand>","Inspect Ripplo projects",Bc).command("hooks <subcommand>","Pause or resume Ripplo hooks",qc).command("init","Scaffold .ripplo/ in this project",e=>e.option("project",{type:"string"}).option("env",{type:"string"}).option("app-url",{type:"string"}).option("engine-url",{type:"string"}),e=>hn({appUrl:e["app-url"],engineUrl:e["engine-url"],envFile:e.env,projectId:e.project})).command("run [ids..]","Run tests locally via the daemon (auto-starts it if absent)",Hc,e=>Gn({all:e.all,headed:e.headed,ids:e.ids,keepAlive:e["keep-alive"]})).command(Mc()).command(Fc()).command(Uc()).command("lint","Static model analysis (cascade gaps + law conflicts; no live app)",()=>{},()=>yn()).command("sync","Push the compiled .ripplo/ resources to the server (no run)",()=>{},()=>lo()).command("compile","Compile the DSL and write .ripplo/ripplo.lock",e=>e.option("check",{default:!1,describe:"Exit non-zero if the lockfile is missing or stale (does not write)",type:"boolean"}),e=>Bt({check:e.check})).command("update","Update ripplo to the latest published version (and hand the daemon off to it)",()=>{},()=>ko()).command("doctor","Check project health",()=>{},()=>nn()).command("status","Report stub tests and daemon status",e=>e.option("format",{choices:["json","summary"],default:"json",describe:"Output format"}),e=>Eo({format:e.format})).command("scope <subcommand>","Manage testing scope",Wc).command("run-worker",!1,()=>{},()=>Qn()).command("hook <name>","Internal: run a Claude Code plugin hook",e=>e.positional("name",{choices:Object.keys(hi),demandOption:!0,type:"string"}),e=>Oc(e.name)).strict().help().parse()}async function Oc(e){let r=hi[e];r==null&&(process.stderr.write(`Unknown hook: ${e}
-`),process.exit(1));let t=await _c(),n=t.trim()===""?{}:JSON.parse(t),o=await r.run(n);o!=null&&process.stdout.write(JSON.stringify(o))}function _c(){return new Promise((e,r)=>{if(process.stdin.isTTY){e("");return}let t=[];process.stdin.on("data",n=>t.push(n)),process.stdin.on("end",()=>{e(Buffer.concat(t).toString("utf8"))}),process.stdin.on("error",r)})}Dc().catch(e=>{process.stderr.write(`${Nr(e)}
-`),process.exit(1)});function Fc(){return{command:"report-bug",describe:"Report a critical application bug caught while building or testing",builder:e=>e.option("kind",{choices:["new_feature_bug","regression","latent_bug"],demandOption:!0,describe:"new_feature_bug: broke the new thing being built; regression: broke previously working behavior; latent_bug: pre-existing bug exposed by new test coverage"}).option("title",{demandOption:!0,describe:"Short bug name",type:"string"}).option("root-cause",{demandOption:!0,describe:"What was actually wrong",type:"string"}).option("surfaced-by",{demandOption:!0,describe:"How the test/run exposed it (cite evidence)",type:"string"}).option("run",{demandOption:!0,describe:"Run id where it surfaced \u2014 links the bug to its replay. For an exploration finding, pass its explore-\u2026 id (recorded, but not replay-linkable)",type:"string"}).option("test",{describe:"Test id that surfaced it",type:"string"}),handler:e=>Vn({kind:e.kind,rootCause:e["root-cause"],runId:e.run,surfacedBy:e["surfaced-by"],testId:e.test,title:e.title})}}function Nc(){return{command:"daemon",describe:"Run the long-lived local executor (IPC socket + run subscription)",builder:e=>e.option("executor",{choices:["local","cloud"],default:"local",describe:"Run executor (local pool, or cloud fleet via a per-session tunnel)"}).option("explore",{default:!1,describe:"Opt in to background exploration when idle (experimental)",type:"boolean"}).option("exploreConcurrency",{default:2,describe:"Max concurrent background exploration trails (keeps the machine responsive)",type:"number"}),handler:e=>wo({executor:e.executor,explore:e.explore,exploreConcurrency:e.exploreConcurrency})}}function Uc(){return{command:"explore",describe:"Run state-space exploration trails in the foreground (app + engine must be running)",builder:e=>e.option("trails",{default:10,describe:"Number of trails to execute before stopping (stops early on saturation)",type:"number"}).option("headed",{default:!1,describe:"Watch trails in a visible browser (stop the daemon explorer first if it holds the machine lock)",type:"boolean"}).option("max-length",{describe:"Max steps per trail (default 12 \u2014 lower means shorter, easier-to-watch trails)",type:"number"}).command("findings [findingId]","List pending exploration findings, or show one finding's full detail",r=>r.positional("findingId",{type:"string"}).option("json",{default:!1,describe:"Emit the findings list as JSON",type:"boolean"}),r=>Nn({findingId:r.findingId,json:r.json})).command("replay <findingId>","Replay a finding's minimal trail \u2014 a clean replay resolves the finding and covers its targets",r=>r.positional("findingId",{demandOption:!0,type:"string"}),r=>Un({findingId:r.findingId})).command("dismiss <findingId>","Dismiss a finding you don't intend to act on \u2014 prune later to drop it from the log",r=>r.positional("findingId",{demandOption:!0,type:"string"}),r=>Mn({findingId:r.findingId})).command("prune","Rewrite the findings log, dropping dismissed findings and ones no longer in the model",r=>r,()=>Hn()),handler:e=>Wn({headed:e.headed,maxLength:e["max-length"],trails:e.trails})}}function Mc(){return{command:"snapshot <runId>",describe:"Render a PNG of the page at a point in a run's rrweb recording",builder:e=>e.positional("runId",{demandOption:!0,type:"string"}).option("at",{describe:"Moment to render: epoch-ms timestamp exactly as found in behavior.jsonl",type:"number"}).option("offset",{describe:"Moment to render: ms from the start of the recording (alternative to --at)",type:"number"}).conflicts("at","offset"),handler:e=>ao({at:e.at,offset:e.offset,runId:e.runId})}}function Hc(e){let r=[];return e.positional("ids",{array:!0,default:r,describe:"Test ids to run",type:"string"}).option("all",{default:!1,describe:"Run every test in the suite (expensive)",type:"boolean"}).option("headed",{default:!1,describe:"Run with a visible browser window",type:"boolean"}).option("keep-alive",{default:!1,describe:"Leave an auto-started daemon running after the batch",type:"boolean"})}function Wc(e){return e.command("status","Print the current scope",r=>r.option("format",{choices:["json","text"],default:"text",describe:"Output format"}),r=>xo({format:r.format})).command("add <test-ids..>","Bind one or more existing tests (stubs or implemented) to scope as agent intent",r=>{let t=[];return r.positional("test-ids",{array:!0,default:t,demandOption:!0,describe:"Slugs of existing workflows",type:"string"})},r=>Ro({testIds:r["test-ids"]})).command("link <id> <test-id>","Link an existing scope item to a test",r=>r.positional("id",{demandOption:!0,describe:"Scope item id",type:"string"}).positional("test-id",{demandOption:!0,describe:"Slug of the workflow to link",type:"string"}),r=>Co({id:r.id,testId:r["test-id"]})).command("remove <ids..>","Remove one or more scope items by id",r=>{let t=[];return r.positional("ids",{array:!0,default:t,demandOption:!0,describe:"Scope item ids",type:"string"})},r=>Po({ids:r.ids})).demandCommand(1)}function qc(e){return e.command("pause","Disable all Ripplo pre-edit gates and stop enforcement until resumed",()=>{},()=>on()).command("resume","Re-enable Ripplo hooks paused via `ripplo hooks pause`",()=>{},()=>sn()).demandCommand(1)}function Bc(e){return e.command("list","List projects you have access to (JSON)",()=>{},()=>qn()).demandCommand(1)}function Vc(e){return e.command("login","Authenticate via device flow",()=>{},()=>Ht()).command("status","Show authentication status",()=>{},()=>Wt()).command("logout","Remove the saved token",()=>{},()=>{qt()}).demandCommand(1)}function Gc(){let e=process.cwd(),r=vr(e);r!=null&&r!==e&&(process.chdir(r),process.stderr.write(`ripplo: resolved .ripplo/ at ${r}
-`))}export{Dc as main};
+`),infra:o==null}}async function Si({connection:e,cwd:r,tests:n}){let t=[],o=[],i=[],a=gc.join(r,".ripplo","debug"),s=new yc;return(await Oe({connection:e,request:{all:!1,headed:!1,tests:[...n]},token:s.token,onEvent:d=>{$c({debugDir:a,event:d,failedLines:t,notRun:o,rejected:i})}})).match(d=>d.kind==="daemon-error"?{kind:"transport",message:We(d.error)}:{failedLines:t,kind:"done",notRun:o,rejected:i},d=>({kind:"transport",message:L(d)}))}function $c({debugDir:e,event:r,failedLines:n,notRun:t,rejected:o}){if(r.kind!=="test-outcome"||r.outcome.kind==="pass")return;let i=Me({debugDir:e,event:r})??r.testName;if(r.outcome.kind==="dispatch-error"){o.push(i);return}if(r.outcome.kind==="dispatch-timeout"||r.outcome.kind==="infra-error"){t.push({id:`${r.workflowName}/${r.testName}`,line:i});return}n.push(i)}import{z as xi}from"zod";var Ic=xi.looseObject({skill:xi.string()}),Ci=g("PostToolUse",e=>{if(e.tool_name!=="Skill")return;let r=Ic.safeParse(e.tool_input);if(!r.success)return;let n=/^ripplo:(.+)$/.exec(r.data.skill);if(n==null)return;let t=n[1];t!=null&&f(e.cwd)&&Xe(e.cwd,e.session_id,t)});var Ac=/(?:^|\s)\/ripplo:([a-z][a-z0-9-]*)\b/gi,Pi=g("UserPromptSubmit",e=>{f(e.cwd)&&[...e.prompt.matchAll(Ac)].map(r=>r[1]).filter(r=>r!=null).forEach(r=>{Xe(e.cwd,e.session_id,r)})});Jc();B(process.cwd());Er();var Ei={"exit-plan-gate":Mo,"plan-reminder":Ho,"post-edit-flag-stubs":Yo,"post-edit-lint":oi,"pre-bash-hooks-pause-gate":si,"pre-bash-run-gate":ci,"pre-edit-ripplo-skill-gate":ui,"pre-edit-scope-gate":gi,"pre-edit-watch-gate":yi,"scope-reminder":ki,"session-preamble":wi,"stop-enforce":Ri,"track-skill-load":Ci,"track-skill-prompt":Pi};async function Oc(){Tc({pkg:{name:"ripplo",version:P()}}).notify({message:Gn()}),await Lc(Dc(process.argv)).scriptName("ripplo").version(P()).command(Uc()).command("concurrency [value]","Show or set max local concurrent runs (daemon applies live)",e=>e.positional("value",{type:"number"}),e=>nt({value:e.value})).command("auth <subcommand>","Manage authentication",zc).command("projects <subcommand>","Inspect Ripplo projects",Gc).command("hooks <subcommand>","Pause or resume Ripplo hooks",Vc).command("init","Scaffold .ripplo/ in this project",e=>e.option("project",{type:"string"}).option("env",{type:"string"}).option("app-url",{type:"string"}).option("engine-url",{type:"string"}),e=>Ct({appUrl:e["app-url"],engineUrl:e["engine-url"],envFile:e.env,projectId:e.project})).command("run [ids..]","Run tests locally via the daemon (auto-starts it if absent)",qc,e=>ro({all:e.all,headed:e.headed,ids:e.ids,keepAlive:e["keep-alive"]})).command(Hc()).command(Wc()).command(Nc()).command(Mc()).command("lint","Static model analysis (cascade gaps + law conflicts; no live app)",()=>{},()=>Pt()).command("sync","Push the compiled .ripplo/ resources to the server (no run)",()=>{},()=>vo()).command("compile","Compile the DSL and write .ripplo/ripplo.lock",e=>e.option("check",{default:!1,describe:"Exit non-zero if the lockfile is missing or stale (does not write)",type:"boolean"}),e=>et({check:e.check})).command("update","Update ripplo to the latest published version (and hand the daemon off to it)",()=>{},()=>Io()).command("doctor","Check project health",()=>{},()=>mt()).command("status","Report stub tests and daemon status",e=>e.option("format",{choices:["json","summary"],default:"json",describe:"Output format"}),e=>No({format:e.format})).command("scope <subcommand>","Manage testing scope",Bc).command("run-worker",!1,()=>{},()=>io()).command("hook <name>","Internal: run a Claude Code plugin hook",e=>e.positional("name",{choices:Object.keys(Ei),demandOption:!0,type:"string"}),e=>_c(e.name)).strict().help().parse()}async function _c(e){let r=Ei[e];r==null&&(process.stderr.write(`Unknown hook: ${e}
+`),process.exit(1));let n=await Fc(),t=n.trim()===""?{}:JSON.parse(n),o=await r.run(t);o!=null&&process.stdout.write(JSON.stringify(o))}function Fc(){return new Promise((e,r)=>{if(process.stdin.isTTY){e("");return}let n=[];process.stdin.on("data",t=>n.push(t)),process.stdin.on("end",()=>{e(Buffer.concat(n).toString("utf8"))}),process.stdin.on("error",r)})}Oc().catch(e=>{process.stderr.write(`${Nr(e)}
+`),process.exit(1)});function Nc(){return{command:"report-bug",describe:"Report a critical application bug caught while building or testing",builder:e=>e.option("kind",{choices:["new_feature_bug","regression","latent_bug"],demandOption:!0,describe:"new_feature_bug: broke the new thing being built; regression: broke previously working behavior; latent_bug: pre-existing bug exposed by new test coverage"}).option("title",{demandOption:!0,describe:"Short bug name",type:"string"}).option("root-cause",{demandOption:!0,describe:"What was actually wrong",type:"string"}).option("surfaced-by",{demandOption:!0,describe:"How the test/run exposed it (cite evidence)",type:"string"}).option("run",{demandOption:!0,describe:"Run id where it surfaced \u2014 links the bug to its replay. For an exploration finding, pass the explore-\u2026 run id shown by npx ripplo explore findings",type:"string"}),handler:e=>eo({kind:e.kind,rootCause:e["root-cause"],runId:e.run,surfacedBy:e["surfaced-by"],title:e.title})}}function Uc(){return{command:"daemon",describe:"Run the long-lived local executor (IPC socket + run subscription)",builder:e=>e.option("executor",{choices:["local","cloud"],default:"local",describe:"Run executor (local pool, or cloud fleet via a per-session tunnel)"}).option("explore",{default:!1,describe:"Opt in to background exploration when idle (experimental)",type:"boolean"}).option("exploreConcurrency",{default:2,describe:"Max concurrent background exploration trails (keeps the machine responsive)",type:"number"}),handler:e=>Ao({executor:e.executor,explore:e.explore,exploreConcurrency:e.exploreConcurrency})}}function Mc(){return{command:"explore",describe:"Run state-space exploration trails in the foreground (app + engine must be running)",builder:e=>e.option("trails",{default:10,describe:"Number of trails to execute before stopping (stops early on saturation)",type:"number"}).option("headed",{default:!1,describe:"Watch trails in a visible browser (stop the daemon explorer first if it holds the machine lock)",type:"boolean"}).option("max-length",{describe:"Max steps per trail (default 12 \u2014 lower means shorter, easier-to-watch trails)",type:"number"}).command("findings [findingId]","List pending exploration findings, or show one finding's full detail",r=>r.positional("findingId",{type:"string"}).option("json",{default:!1,describe:"Emit the findings list as JSON",type:"boolean"}),r=>zt({findingId:r.findingId,json:r.json})).command("replay <findingId>","Replay a finding's minimal trail \u2014 a clean replay resolves the finding and covers its targets",r=>r.positional("findingId",{demandOption:!0,type:"string"}),r=>Jt({findingId:r.findingId})).command("dismiss <findingId>","Dismiss a finding you don't intend to act on \u2014 prune later to drop it from the log",r=>r.positional("findingId",{demandOption:!0,type:"string"}),r=>Kt({findingId:r.findingId})).command("prune","Rewrite the findings log, dropping dismissed findings and ones no longer in the model",r=>r,()=>Xt()),handler:e=>Qt({headed:e.headed,maxLength:e["max-length"],trails:e.trails})}}function Hc(){return{command:"snapshot <runId>",describe:"Render a PNG of the page at a point in a run's rrweb recording",builder:e=>e.positional("runId",{demandOption:!0,type:"string"}).option("at",{describe:"Moment to render: epoch-ms timestamp exactly as found in behavior.jsonl",type:"number"}).option("offset",{describe:"Moment to render: ms from the start of the recording (alternative to --at)",type:"number"}).conflicts("at","offset"),handler:e=>go({at:e.at,offset:e.offset,runId:e.runId})}}function Wc(){return{command:"teleport <ref>",describe:"Open a live browser at a step in a test, seeded with the run up to that point",builder:e=>e.positional("ref",{demandOption:!0,describe:"Test ref: <workflow-slug>/<test-slug>",type:"string"}).option("step",{demandOption:!0,describe:"Step to land on \u2014 runs the test up to and including this step, then hands over",type:"number"}),handler:e=>wo({ref:e.ref,step:e.step})}}function qc(e){let r=[];return e.positional("ids",{array:!0,default:r,describe:"Test ids to run",type:"string"}).option("all",{default:!1,describe:"Run every test in the suite (expensive)",type:"boolean"}).option("headed",{default:!1,describe:"Run with a visible browser window",type:"boolean"}).option("keep-alive",{default:!1,describe:"Leave an auto-started daemon running after the batch",type:"boolean"})}function Bc(e){return e.command("status","Print the current scope",r=>r.option("format",{choices:["json","text"],default:"text",describe:"Output format"}),r=>Do({format:r.format})).command("add <test-ids..>","Bind one or more existing tests (stubs or implemented) to scope as agent intent",r=>{let n=[];return r.positional("test-ids",{array:!0,default:n,demandOption:!0,describe:"Slugs of existing workflows",type:"string"})},r=>Oo({testIds:r["test-ids"]})).command("link <id> <test-id>","Link an existing scope item to a test",r=>r.positional("id",{demandOption:!0,describe:"Scope item id",type:"string"}).positional("test-id",{demandOption:!0,describe:"Slug of the workflow to link",type:"string"}),r=>_o({id:r.id,testId:r["test-id"]})).command("remove <ids..>","Remove one or more scope items by id",r=>{let n=[];return r.positional("ids",{array:!0,default:n,demandOption:!0,describe:"Scope item ids",type:"string"})},r=>Fo({ids:r.ids})).demandCommand(1)}function Vc(e){return e.command("pause","Disable all Ripplo pre-edit gates and stop enforcement until resumed",()=>{},()=>ft()).command("resume","Re-enable Ripplo hooks paused via `ripplo hooks pause`",()=>{},()=>gt()).demandCommand(1)}function Gc(e){return e.command("list","List projects you have access to (JSON)",()=>{},()=>Yt()).demandCommand(1)}function zc(e){return e.command("login","Authenticate via device flow",()=>{},()=>Qn()).command("status","Show authentication status",()=>{},()=>Yn()).command("logout","Remove the saved token",()=>{},()=>{Zn()}).demandCommand(1)}function Jc(){let e=process.cwd(),r=br(e);r!=null&&r!==e&&(process.chdir(r),process.stderr.write(`ripplo: resolved .ripplo/ at ${r}
+`))}export{Oc as main};