ripplo 0.7.25 → 0.7.26

package/dist/index.js

@@ -1,35 +1,35 @@
 #!/usr/bin/env node
-import{$ as Tn,A as oe,B as Hr,C as ie,D as b,E as un,G as mn,H as fn,I as gn,J as hn,L as yn,M as kn,N as er,O as V,P as rr,Q as Sn,R as xn,S as Rn,T as Cn,U as Pn,V as En,W as $n,X as In,Y as jn,Z as An,_ as Se,a as $r,aa as Ln,b as B,ba as Dn,c as Ir,d as jr,da as On,e as P,f as ye,fa as _n,g as L,h as Tr,ha as Fn,i as x,ia as Nn,j as c,ja as Un,k as Lr,ka as Mn,l as v,la as Hn,m as Dr,ma as Wn,n as Or,o as _r,oa as qn,p as Fr,q as E,r as I,s as Nr,t as w,u as ke,ua as ae,va as Bn,wa as nr,x as _,y as Ur,ya as Vn,z as Mr}from"./chunk-D7HOYI2S.js";import{$ as pn,D as Yr,F as Ye,G as Ze,H as Zr,I as en,J as ve,O as rn,Q as nn,R as tn,S as on,T as sn,U as an,V as ln,W as dn,X as cn,_ as be,c as J,d as Ar,g as N,ha as wn,ia as se,ja as vn,k as O,ka as bn,l as Wr,m as qr,n as Xe,o as Br,p as K,q as Vr,r as Gr,s as we,t as C,u as zr,v as Jr,w as Kr,x as Qr,y as Xr}from"./chunk-NXJP3Q4N.js";import{a as wr,b as vr,c as br,d as m,e as $,g as he,h as Sr,k as D,l as xr,m as Rr,n as Qe,o as Cr,p as Pr,q as Er}from"./chunk-EVYYSTR7.js";import"./chunk-IHSHBPJY.js";import"./chunk-7UWDMECF.js";import Ac from"update-notifier";import Tc from"yargs";import{hideBin as Lc}from"yargs/helpers";function xe({current:e,latest:r}){return r==null?`ripplo v${e} (latest: unknown)`:r===e?`ripplo v${e} (latest)`:`ripplo v${e} (latest: v${r} \u2014 run \`npx ripplo update\`)`}function Gn(){return"Update available {currentVersion} \u2192 {latestVersion}\nRun `npx ripplo update`"}import{graphql as Wi}from"gql.tada";import{exec as Ai}from"child_process";import{createAuthClient as Ii}from"better-auth/client";import{deviceAuthorizationClient as ji}from"better-auth/client/plugins";function zn({baseURL:e}){return Ii({baseURL:e,fetchOptions:{headers:{"User-Agent":"Ripplo CLI"}},plugins:[ji()]})}import{err as Jn,ok as Ti}from"neverthrow";var Li=5e3,Kn="ripplo-cli";async function Qn({onDeviceCode:e,url:r}){let n=r??Nr().RIPPLO_SERVER_URL,t=zn({baseURL:n}),o=await t.device.code({client_id:Kn});if(o.error!=null)return Jn({description:o.error.error_description,kind:"oauth-device-code-failed"});let{device_code:i,user_code:a,verification_uri_complete:s}=o.data;return e({userCode:a,verificationUrl:s}),Ui(s),(await Di({authClient:t,deviceCode:i})).map(d=>(xr({serverUrl:n,token:d}),d))}async function Di({authClient:e,deviceCode:r}){for(;;){await Fi(Li);let n=await e.device.token({client_id:Kn,device_code:r,grant_type:"urn:ietf:params:oauth:grant-type:device_code"});if(n.data?.access_token!=null)return Ti(n.data.access_token);if(n.error==null)continue;if(!_i(n.error.error))return Jn({code:n.error.error,description:n.error.error_description,kind:"oauth-authorization-failed"})}}var Oi=new Set(["authorization_pending","slow_down"]);function _i(e){return Oi.has(e)}function Fi(e){return new Promise(r=>{setTimeout(r,e)})}function Ni(){return process.platform==="darwin"?"open":process.platform==="win32"?"start":"xdg-open"}function Ui(e){let r=Ni();Ai(`${r} "${e}"`,()=>{})}function U({serverUrl:e,token:r}){return{appUrl:"",cwd:process.cwd(),engineUrl:"",projectId:"",ripploServerUrl:e,token:r,tunnelAuth:void 0,webhookSecret:""}}import Mi from"fs";import Hi from"path";function f(e){return Mi.existsSync(Hi.join(e,".ripplo"))}var qi=Wi(`
+import{A as Be,B as At,C as re,D as w,E as V,F as Ve,G as Qt,H as Xt,I as Yt,J as Zt,K as er,L as tr,M as rr,N as nr,O as he,P as or,Q as ir,R as dr,T as cr,V as ur,W as pr,X as mr,Y as fr,Z as gr,_ as hr,a as wt,aa as yr,b as B,c as vt,d as bt,e as P,f as qe,g as T,ga as ne,ha as kr,i as S,ia as Ge,j as c,k as Rt,ka as wr,l as R,m as Ct,ma as ze,n as xt,na as vr,o as Pt,oa as br,p as Et,q as E,r as $,s as $t,t as k,u as ge,x as O,y as jt,z as It}from"./chunk-V252IVSN.js";import{B as Wt,C as qt,D as Bt,E as Vt,F as Gt,G as zt,H as Jt,K as Kt,T as sr,V as ar,W as lr,b as z,c as St,e as U,i as _,j as Tt,l as Lt,m as Dt,n as _t,o as Ot,q as C,r as Nt,s as Ut,t as Ft,v as Mt,x as Ht}from"./chunk-MSUK2UBM.js";import{a as ct,b as ut,c as pt,d as m,e as L,g as fe,h as mt,i as D,j as ft,k as gt,l as We,m as ht,n as yt,o as kt}from"./chunk-5VRJXHWH.js";import"./chunk-IHSHBPJY.js";import"./chunk-7UWDMECF.js";import zd from"update-notifier";import Jd from"yargs";import{hideBin as Kd}from"yargs/helpers";function ye({current:e,latest:t}){return t==null?`ripplo v${e} (latest: unknown)`:t===e?`ripplo v${e} (latest)`:`ripplo v${e} (latest: v${t} \u2014 run \`npx ripplo update\`)`}function Sr(){return"Update available {currentVersion} \u2192 {latestVersion}\nRun `npx ripplo update`"}import{graphql as gi}from"gql.tada";import{exec as oi}from"child_process";import{createAuthClient as ri}from"better-auth/client";import{deviceAuthorizationClient as ni}from"better-auth/client/plugins";function Rr({baseURL:e}){return ri({baseURL:e,fetchOptions:{headers:{"User-Agent":"Ripplo CLI"}},plugins:[ni()]})}import{err as Cr,ok as ii}from"neverthrow";var si=5e3,xr="ripplo-cli";async function Pr({onDeviceCode:e,url:t}){let r=t??$t().RIPPLO_SERVER_URL,n=Rr({baseURL:r}),o=await n.device.code({client_id:xr});if(o.error!=null)return Cr({description:o.error.error_description,kind:"oauth-device-code-failed"});let{device_code:i,user_code:s,verification_uri_complete:a}=o.data;return e({userCode:s,verificationUrl:a}),pi(a),(await ai({authClient:n,deviceCode:i})).map(d=>(ft({serverUrl:r,token:d}),d))}async function ai({authClient:e,deviceCode:t}){for(;;){await ci(si);let r=await e.device.token({client_id:xr,device_code:t,grant_type:"urn:ietf:params:oauth:grant-type:device_code"});if(r.data?.access_token!=null)return ii(r.data.access_token);if(r.error==null)continue;if(!di(r.error.error))return Cr({code:r.error.error,description:r.error.error_description,kind:"oauth-authorization-failed"})}}var li=new Set(["authorization_pending","slow_down"]);function di(e){return li.has(e)}function ci(e){return new Promise(t=>{setTimeout(t,e)})}function ui(){return process.platform==="darwin"?"open":process.platform==="win32"?"start":"xdg-open"}function pi(e){let t=ui();oi(`${t} "${e}"`,()=>{})}function F({serverUrl:e,token:t}){return{appUrl:"",cwd:process.cwd(),engineUrl:"",projectId:"",ripploServerUrl:e,token:t,tunnelAuth:void 0,webhookSecret:""}}import mi from"fs";import fi from"path";function f(e){return mi.existsSync(fi.join(e,".ripplo"))}var hi=gi(`
   query AuthViewer {
     currentUser {
       name
       email
     }
   }
-`);async function Xn(){let e=I(),r=D(e);if(r!=null&&await Bi(e,r))return;let t=(await Qn({url:e,onDeviceCode:s=>{process.stdout.write(`Opening your browser to finish sign-in.
-`),process.stdout.write(`If it didn't open, visit: ${s.verificationUrl}
-`),process.stdout.write(`Verification code: ${s.userCode}
+`);async function Er(){let e=$(),t=D(e);if(t!=null&&await yi(e,t))return;let n=(await Pr({url:e,onDeviceCode:a=>{process.stdout.write(`Opening your browser to finish sign-in.
+`),process.stdout.write(`If it didn't open, visit: ${a.verificationUrl}
+`),process.stdout.write(`Verification code: ${a.userCode}
 
 `),process.stdout.write(`Waiting for approval...
-`)}})).match(s=>s,s=>{process.stderr.write(`${E(s)}
-`),process.exit(1)}),o=await tr({serverUrl:e,token:t}),i=f(process.cwd()),a=i?"Welcome back":"Welcome to Ripplo";process.stdout.write(`
-`),process.stdout.write(o.kind==="ok"?`${a}, ${Vi(o.viewer)}.
-`:`${a}.
-`),process.stdout.write(`Session saved to ${Qe(e)}.
-`),i||(process.stdout.write("\nNext: run `/ripplo:setup` in Claude Code to wire Ripplo into this project,\n"),process.stdout.write("or `npx ripplo init` to set it up by hand.\n"))}async function Bi(e,r){let n=await tr({serverUrl:e,token:r});return n.kind==="ok"?(process.stdout.write(`Already signed in as ${n.viewer.email}. Run \`npx ripplo auth logout\` to switch accounts.
-`),!0):(n.kind==="unreachable"&&(process.stdout.write(`Could not reach the Ripplo server at ${e} (${n.message}). Your saved session may still be valid \u2014 fix connectivity and retry.
+`)}})).match(a=>a,a=>{process.stderr.write(`${E(a)}
+`),process.exit(1)}),o=await Je({serverUrl:e,token:n}),i=f(process.cwd()),s=i?"Welcome back":"Welcome to Ripplo";process.stdout.write(`
+`),process.stdout.write(o.kind==="ok"?`${s}, ${ki(o.viewer)}.
+`:`${s}.
+`),process.stdout.write(`Session saved to ${We(e)}.
+`),i||(process.stdout.write("\nNext: run `/ripplo:setup` in Claude Code to wire Ripplo into this project,\n"),process.stdout.write("or `npx ripplo init` to set it up by hand.\n"))}async function yi(e,t){let r=await Je({serverUrl:e,token:t});return r.kind==="ok"?(process.stdout.write(`Already signed in as ${r.viewer.email}. Run \`npx ripplo auth logout\` to switch accounts.
+`),!0):(r.kind==="unreachable"&&(process.stdout.write(`Could not reach the Ripplo server at ${e} (${r.message}). Your saved session may still be valid \u2014 fix connectivity and retry.
 `),process.exit(1)),process.stdout.write(`Your session expired \u2014 signing you back in.
 
-`),!1)}async function Yn(){let e=I(),r=D(e);r==null&&(process.stdout.write("Not signed in. Run `npx ripplo auth login`.\n"),process.exit(1));let n=await tr({serverUrl:e,token:r});n.kind==="unreachable"&&(process.stdout.write(`Could not reach the Ripplo server at ${e} (${n.message}). The token may still be valid \u2014 check the server / network and retry.
-`),process.exit(1)),n.kind==="rejected"&&(process.stdout.write("Token rejected by the server. Run `npx ripplo auth login` to sign in again.\n"),process.stdout.write(`(Claude Code: run it yourself in the background \u2014 the user just approves in the browser.)
-`),process.exit(1)),process.stdout.write(`Signed in as ${n.viewer.name} <${n.viewer.email}> (${e})
-`)}function Zn(){let e=I();if(!Rr(e)){process.stdout.write(`Already signed out.
-`);return}process.stdout.write(`Signed out. Removed ${Qe(e)}.
-`)}async function tr({serverUrl:e,token:r}){try{let t=(await m({config:U({serverUrl:e,token:r}),document:qi,variables:void 0})).currentUser;return t==null?{kind:"rejected"}:{kind:"ok",viewer:{email:t.email,name:t.name}}}catch(n){return br(n)==="UNAUTHENTICATED"?{kind:"rejected"}:{kind:"unreachable",message:n instanceof Error?n.message:String(n)}}}function Vi(e){let r=e.name.trim().split(/\s+/)[0];return r!=null&&r.length>0?r:e.email}import{readFile as Gi,writeFile as zi}from"fs/promises";import Ji from"path";async function et(e){let r=process.cwd(),n=await x(r);n.isErr()&&(process.stderr.write(`${v(n.error)}
-`),process.exit(1));let t=J(N,n.value),o=Ji.join(r,L);if(e.check){let i=await Gi(o,"utf8").catch(()=>null);if(i===t){process.stdout.write(`${Dr()}
-`);return}process.stderr.write(`${Or(i==null?"missing":"stale")}
-`),process.exit(1)}await zi(o,t),process.stdout.write(`${_r()}
-`)}import{graphql as rt}from"gql.tada";function or(e){return e==null?"Max local concurrent runs: unknown (not signed in?)":`Max local concurrent runs: ${String(e)} (the daemon applies changes live)`}import{graphql as Ki}from"gql.tada";var Qi=Ki(`
+`),!1)}async function $r(){let e=$(),t=D(e);t==null&&(process.stdout.write("Not signed in. Run `npx ripplo auth login`.\n"),process.exit(1));let r=await Je({serverUrl:e,token:t});r.kind==="unreachable"&&(process.stdout.write(`Could not reach the Ripplo server at ${e} (${r.message}). The token may still be valid \u2014 check the server / network and retry.
+`),process.exit(1)),r.kind==="rejected"&&(process.stdout.write("Token rejected by the server. Run `npx ripplo auth login` to sign in again.\n"),process.stdout.write(`(Claude Code: run it yourself in the background \u2014 the user just approves in the browser.)
+`),process.exit(1)),process.stdout.write(`Signed in as ${r.viewer.name} <${r.viewer.email}> (${e})
+`)}function jr(){let e=$();if(!gt(e)){process.stdout.write(`Already signed out.
+`);return}process.stdout.write(`Signed out. Removed ${We(e)}.
+`)}async function Je({serverUrl:e,token:t}){try{let n=(await m({config:F({serverUrl:e,token:t}),document:hi,variables:void 0})).currentUser;return n==null?{kind:"rejected"}:{kind:"ok",viewer:{email:n.email,name:n.name}}}catch(r){return pt(r)==="UNAUTHENTICATED"?{kind:"rejected"}:{kind:"unreachable",message:r instanceof Error?r.message:String(r)}}}function ki(e){let t=e.name.trim().split(/\s+/)[0];return t!=null&&t.length>0?t:e.email}import{readFile as wi,writeFile as vi}from"fs/promises";import bi from"path";async function Ir(e){let t=process.cwd(),r=await S(t);r.isErr()&&(process.stderr.write(`${R(r.error)}
+`),process.exit(1));let n=z(U,r.value),o=bi.join(t,T);if(e.check){let i=await wi(o,"utf8").catch(()=>null);if(i===n){process.stdout.write(`${Ct()}
+`);return}process.stderr.write(`${xt(i==null?"missing":"stale")}
+`),process.exit(1)}await vi(o,n),process.stdout.write(`${Pt()}
+`)}import{graphql as Ar}from"gql.tada";function Ke(e){return e==null?"Max local concurrent runs: unknown (not signed in?)":`Max local concurrent runs: ${String(e)} (the daemon applies changes live)`}import{graphql as Si}from"gql.tada";var Ri=Si(`
   query DevSessionCheckPreflight($projectId: String!, $cwd: String!) {
     project(id: $projectId) {
       id
@@ -38,26 +38,26 @@ import{$ as Tn,A as oe,B as Hr,C as ie,D as b,E as un,G as mn,H as fn,I as gn,J
       }
     }
   }
-`);function A(){return w(process.cwd()).match(e=>e,e=>{process.stderr.write(`${E(e)}
+`);function I(){return k(process.cwd()).match(e=>e,e=>{process.stderr.write(`${E(e)}
 `),process.stderr.write(`${c("setup")}
-`),process.exit(1)})}async function le(e){(await m({config:e,document:Qi,variables:{cwd:e.cwd,projectId:e.projectId}})).project?.devSession==null&&(process.stderr.write("No active dev session. Start `npx ripplo daemon` as a background process (your app's dev server must also be running), then retry. Or run `/ripplo:start` in Claude Code.\n"),process.stderr.write(`${c("setup")}
-`),process.exit(1))}var Xi=rt(`
+`),process.exit(1)})}async function oe(e){(await m({config:e,document:Ri,variables:{cwd:e.cwd,projectId:e.projectId}})).project?.devSession==null&&(process.stderr.write("No active dev session. Start `npx ripplo daemon` as a background process (your app's dev server must also be running), then retry. Or run `/ripplo:start` in Claude Code.\n"),process.stderr.write(`${c("setup")}
+`),process.exit(1))}var Ci=Ar(`
   mutation CliUpdateMaxLocalConcurrentRuns($value: Int!) {
     updateMaxLocalConcurrentRuns(value: $value) {
       id
       maxLocalConcurrentRuns
     }
   }
-`),Yi=rt(`
+`),xi=Ar(`
   query CliMaxLocalConcurrentRuns {
     currentUser {
       id
       maxLocalConcurrentRuns
     }
   }
-`);async function nt({value:e}){let r=A();if(e==null){let t=await m({config:r,document:Yi,variables:{}});process.stdout.write(`${or(t.currentUser?.maxLocalConcurrentRuns)}
-`);return}let n=await m({config:r,document:Xi,variables:{value:e}});process.stdout.write(`${or(n.updateMaxLocalConcurrentRuns?.maxLocalConcurrentRuns)}
-`)}import{graphql as Zi}from"gql.tada";var es=Zi(`
+`);async function Tr({value:e}){let t=I();if(e==null){let n=await m({config:t,document:xi,variables:{}});process.stdout.write(`${Ke(n.currentUser?.maxLocalConcurrentRuns)}
+`);return}let r=await m({config:t,document:Ci,variables:{value:e}});process.stdout.write(`${Ke(r.updateMaxLocalConcurrentRuns?.maxLocalConcurrentRuns)}
+`)}import{graphql as Pi}from"gql.tada";var Ei=Pi(`
   query DevSessionCheckHealth($projectId: String!, $cwd: String!) {
     activeDevSessions(projectId: $projectId) {
       id
@@ -71,47 +71,47 @@ import{$ as Tn,A as oe,B as Hr,C as ie,D as b,E as un,G as mn,H as fn,I as gn,J
       }
     }
   }
-`);function tt(e){switch(e.status){case"active":return e.gitMidOperation?"\u2713 Dev session: ripplo daemon is live (hooks auto-paused while git is mid-merge/rebase/cherry-pick \u2014 they resume when the operation ends)":"\u2713 Dev session: ripplo daemon is live for this directory";case"starting":return"! Dev session: the daemon is running locally but hasn't registered with the server yet. Wait a few seconds and re-run `npx ripplo doctor`. If it persists, check the daemon output for auth or network errors.";case"missing":{let r="\u2717 Dev session: no daemon running for this directory. Start `npx ripplo daemon` as a background process (separate from your app's dev server). Without it, `npx ripplo run` refuses to dispatch and scope/coverage hooks won't arm.";return e.elsewhere.length===0?r:[r,"  A daemon is running for a different directory:",...rs(e.elsewhere)].join(`
-`)}}}async function ot(e){let r=ke(e),n=Ur(e),t=w(e).unwrapOr(void 0);if(t==null)return{elsewhere:[],gitMidOperation:n,status:r?"starting":"missing",type:"dev-session"};let o=await m({config:t,document:es,variables:{cwd:t.cwd,projectId:t.projectId}}).catch(()=>null);return o?.project?.devSession!=null?{elsewhere:[],gitMidOperation:n,status:"active",type:"dev-session"}:{elsewhere:(o?.activeDevSessions??[]).filter(s=>s.cwd!==t.cwd).map(s=>({branch:s.branch,cwd:s.cwd})),gitMidOperation:n,status:r?"starting":"missing",type:"dev-session"}}function rs(e){return e.map(r=>{let n=r.branch==null?"":` (${r.branch})`;return`  - ${r.cwd}${n}`})}function it(e){switch(e.type){case"settings":return ns(e);case"env-files":return ts(e);case"token":return os(e);case"dev-server":return is(e);case"dev-session":return tt(e);case"preconditions":return ss(e);case"webhook-verification":return as(e);case"preconditions-validation":return ls(e);case"workflows":return ds(e);case"browser":return ps(e);case"engine-endpoint":return e.reachable?`\u2713 Engine endpoint: ${e.url} is reachable`:`\u2717 Engine endpoint: ${e.url} is not reachable`;case"adapter-enabled":return us(e);case"lockfile":return ms(e);case"pre-commit-hook":return fs(e);case"plugin-version":return gs(e)}}function ns(e){return e.valid?"\u2713 Settings: project configured":`\u2717 Settings: missing fields: ${e.missingFields.join(", ")}`}function ts(e){return e.missing.length===0?"\u2713 Env files: declared files present":`\u2717 Env files: declared in .ripplo/project.json but missing:
-${e.missing.map(n=>`    ${n}`).join(`
+`);function Lr(e){switch(e.status){case"active":return e.gitMidOperation?"\u2713 Dev session: ripplo daemon is live (hooks auto-paused while git is mid-merge/rebase/cherry-pick \u2014 they resume when the operation ends)":"\u2713 Dev session: ripplo daemon is live for this directory";case"starting":return"! Dev session: the daemon is running locally but hasn't registered with the server yet. Wait a few seconds and re-run `npx ripplo doctor`. If it persists, check the daemon output for auth or network errors.";case"missing":{let t="\u2717 Dev session: no daemon running for this directory. Start `npx ripplo daemon` as a background process (separate from your app's dev server). Without it, `npx ripplo run` refuses to dispatch and scope/coverage hooks won't arm.";return e.elsewhere.length===0?t:[t,"  A daemon is running for a different directory:",...$i(e.elsewhere)].join(`
+`)}}}async function Dr(e){let t=ge(e),r=jt(e),n=k(e).unwrapOr(void 0);if(n==null)return{elsewhere:[],gitMidOperation:r,status:t?"starting":"missing",type:"dev-session"};let o=await m({config:n,document:Ei,variables:{cwd:n.cwd,projectId:n.projectId}}).catch(()=>null);return o?.project?.devSession!=null?{elsewhere:[],gitMidOperation:r,status:"active",type:"dev-session"}:{elsewhere:(o?.activeDevSessions??[]).filter(a=>a.cwd!==n.cwd).map(a=>({branch:a.branch,cwd:a.cwd})),gitMidOperation:r,status:t?"starting":"missing",type:"dev-session"}}function $i(e){return e.map(t=>{let r=t.branch==null?"":` (${t.branch})`;return`  - ${t.cwd}${r}`})}function _r(e){switch(e.type){case"settings":return ji(e);case"env-files":return Ii(e);case"token":return Ai(e);case"dev-server":return Ti(e);case"dev-session":return Lr(e);case"preconditions":return Li(e);case"webhook-verification":return Di(e);case"preconditions-validation":return _i(e);case"workflows":return Oi(e);case"browser":return Ui(e);case"engine-endpoint":return e.reachable?`\u2713 Engine endpoint: ${e.url} is reachable`:`\u2717 Engine endpoint: ${e.url} is not reachable`;case"adapter-enabled":return Fi(e);case"lockfile":return Mi(e);case"pre-commit-hook":return Hi(e);case"plugin-version":return Wi(e)}}function ji(e){return e.valid?"\u2713 Settings: project configured":`\u2717 Settings: missing fields: ${e.missingFields.join(", ")}`}function Ii(e){return e.missing.length===0?"\u2713 Env files: declared files present":`\u2717 Env files: declared in .ripplo/project.json but missing:
+${e.missing.map(r=>`    ${r}`).join(`
 `)}
-  In a git worktree? Copy the env file from the main checkout, or symlink to a shared file outside the working tree.`}function os(e){switch(e.status){case"valid":return`\u2713 Auth: signed in as ${e.email??"unknown"}`;case"missing":return"\u2717 Auth: not signed in. Run `npx ripplo auth login`.\n  (Claude Code: run it yourself in the background \u2014 the user just approves in the browser.)";case"invalid":return"\u2717 Auth: saved token rejected by the server. Run `npx ripplo auth login` to sign in again.\n  (Claude Code: run it yourself in the background \u2014 the user just approves in the browser.)";case"unreachable":return`! Auth: could not reach ${I()} to validate the token.`}}function is(e){return e.reachable?`\u2713 Dev server: ${e.appUrl} is reachable`:`\u2717 Dev server: ${e.appUrl} is not responding. Start your dev server.`}function ss(e){return e.count===0?"! Entities: none defined":e.configured?e.endpointReachable===void 0?`! Entities: ${String(e.count)} defined (could not verify engine endpoint)`:`\u2713 Entities: ${String(e.count)} defined, engine configured`:`\u2717 Entities: ${String(e.count)} defined but RIPPLO_ENGINE_URL is not set in your env file`}function as(e){return e.rejectsUnsigned?"\u2713 Webhook verification: unsigned requests rejected":"\u2717 Webhook verification: endpoint accepted an unsigned request \u2014 signature verification may be missing or misconfigured."}function ls(e){if(!e.found)return"\u2717 Model: DSL failed to compile";if(e.valid)return"\u2713 Model: valid";let r=e.errors.map(n=>`  - ${n.path===""?"":n.path+": "}${n.message}`);return`\u2717 Model: ${String(e.errorCount)} validation error${e.errorCount===1?"":"s"}
-${r.join(`
-`)}`}function ds(e){if(e.total===0)return"! Tests: none defined";if(e.invalidNames.length===0)return`\u2713 Tests: ${String(e.total)} valid`;let r=e.invalidWorkflows.map(n=>cs(n));return`\u2717 Tests: ${String(e.invalidNames.length)} invalid
-${r.join(`
-`)}`}function cs(e){let r=e.errors.map(n=>"    - "+(n.path===""?"":n.path+": ")+n.message);return"  "+e.name+`:
-`+r.join(`
-`)}function ps(e){return e.installed?"\u2713 Browser: Chromium installed":"\u2717 Browser: Chromium not installed. Run `npx playwright install chromium`."}function us(e){switch(e.status){case"enabled":return`\u2713 Adapter: enabled at ${e.url}`;case"disabled":return"\u2717 Adapter: disabled (handler returned 404). Set ENABLE_RIPPLO_TESTING=true in your app's env (e.g. apps/<app>/.env.local for Next.js) and restart the dev server.";case"bad-secret":return"\u2717 Adapter: webhook signature rejected. RIPPLO_WEBHOOK_SECRET seen by your dev server does not match the one in your env file.";case"unreachable":return`\u2717 Adapter: ${e.url} could not be reached for signed probe.`;case"no-secret":return"\u2717 Adapter: RIPPLO_WEBHOOK_SECRET is not set in your env file (declared in .ripplo/project.json)."}}function ms(e){switch(e.status){case"match":return`\u2713 Lockfile: ${L} is up to date`;case"missing":return`\u2717 Lockfile: ${L} is missing \u2014 run \`npx ripplo compile\` and commit it`;case"stale":return`\u2717 Lockfile: ${L} is out of date \u2014 run \`npx ripplo compile\` and commit it`}}function fs(e){return e.installed?"\u2713 Pre-commit hook: .git/hooks/pre-commit runs `ripplo compile --check`":"! Pre-commit hook: .git/hooks/pre-commit does not run `ripplo compile --check` \u2014 see the setup skill for the snippet"}function gs(e){return e.installed===e.cliVersion?`\u2713 Claude plugin: v${e.installed} matches CLI`:`! Claude plugin: installed v${e.installed}, CLI v${e.cliVersion} \u2014 run \`npx ripplo update\` (or /plugin in Claude Code)`}import Q from"fs";import bs from"os";import ir from"path";import{z as W}from"zod";import hs from"latest-version";import st from"semver";async function Re(e){try{return await Promise.race([hs("ripplo"),new Promise(r=>setTimeout(()=>{r(void 0)},e))])}catch{return}}function at(e){return e.filter(r=>st.valid(r)!=null).toSorted(st.rcompare)[0]}function M(e){let r=K(e),n=Xr(e);return[...Gr(r,n.dataRules).map(t=>({gap:t,kind:"cascade-gap"})),...Vr(n.pageRules).map(t=>({conflict:t,kind:"page-rule-conflict"}))]}function S(e,r,n){let t=e===1?r:n??`${r}s`;return`${String(e)} ${t}`}function lt(e){return`${C.good("ok")} \u2014 no static model violations (${S(e,"test")})`}function H(e){return[`${C.bad("fail")} \u2014 ${S(e.length,"static model violation")}:`,...e.map(r=>Kr(r))].join(`
+  In a git worktree? Copy the env file from the main checkout, or symlink to a shared file outside the working tree.`}function Ai(e){switch(e.status){case"valid":return`\u2713 Auth: signed in as ${e.email??"unknown"}`;case"missing":return"\u2717 Auth: not signed in. Run `npx ripplo auth login`.\n  (Claude Code: run it yourself in the background \u2014 the user just approves in the browser.)";case"invalid":return"\u2717 Auth: saved token rejected by the server. Run `npx ripplo auth login` to sign in again.\n  (Claude Code: run it yourself in the background \u2014 the user just approves in the browser.)";case"unreachable":return`! Auth: could not reach ${$()} to validate the token.`}}function Ti(e){return e.reachable?`\u2713 Dev server: ${e.appUrl} is reachable`:`\u2717 Dev server: ${e.appUrl} is not responding. Start your dev server.`}function Li(e){return e.count===0?"! Entities: none defined":e.configured?e.endpointReachable===void 0?`! Entities: ${String(e.count)} defined (could not verify engine endpoint)`:`\u2713 Entities: ${String(e.count)} defined, engine configured`:`\u2717 Entities: ${String(e.count)} defined but RIPPLO_ENGINE_URL is not set in your env file`}function Di(e){return e.rejectsUnsigned?"\u2713 Webhook verification: unsigned requests rejected":"\u2717 Webhook verification: endpoint accepted an unsigned request \u2014 signature verification may be missing or misconfigured."}function _i(e){if(!e.found)return"\u2717 Model: DSL failed to compile";if(e.valid)return"\u2713 Model: valid";let t=e.errors.map(r=>`  - ${r.path===""?"":r.path+": "}${r.message}`);return`\u2717 Model: ${String(e.errorCount)} validation error${e.errorCount===1?"":"s"}
+${t.join(`
+`)}`}function Oi(e){if(e.total===0)return"! Tests: none defined";if(e.invalidNames.length===0)return`\u2713 Tests: ${String(e.total)} valid`;let t=e.invalidWorkflows.map(r=>Ni(r));return`\u2717 Tests: ${String(e.invalidNames.length)} invalid
+${t.join(`
+`)}`}function Ni(e){let t=e.errors.map(r=>"    - "+(r.path===""?"":r.path+": ")+r.message);return"  "+e.name+`:
+`+t.join(`
+`)}function Ui(e){return e.installed?"\u2713 Browser: Chromium installed":"\u2717 Browser: Chromium not installed. Run `npx playwright install chromium`."}function Fi(e){switch(e.status){case"enabled":return`\u2713 Adapter: enabled at ${e.url}`;case"disabled":return"\u2717 Adapter: disabled (handler returned 404). Set ENABLE_RIPPLO_TESTING=true in your app's env (e.g. apps/<app>/.env.local for Next.js) and restart the dev server.";case"bad-secret":return"\u2717 Adapter: webhook signature rejected. RIPPLO_WEBHOOK_SECRET seen by your dev server does not match the one in your env file.";case"unreachable":return`\u2717 Adapter: ${e.url} could not be reached for signed probe.`;case"no-secret":return"\u2717 Adapter: RIPPLO_WEBHOOK_SECRET is not set in your env file (declared in .ripplo/project.json)."}}function Mi(e){switch(e.status){case"match":return`\u2713 Lockfile: ${T} is up to date`;case"missing":return`\u2717 Lockfile: ${T} is missing \u2014 run \`npx ripplo compile\` and commit it`;case"stale":return`\u2717 Lockfile: ${T} is out of date \u2014 run \`npx ripplo compile\` and commit it`}}function Hi(e){return e.installed?"\u2713 Pre-commit hook: .git/hooks/pre-commit runs `ripplo compile --check`":"! Pre-commit hook: .git/hooks/pre-commit does not run `ripplo compile --check` \u2014 see the setup skill for the snippet"}function Wi(e){return e.installed===e.cliVersion?`\u2713 Claude plugin: v${e.installed} matches CLI`:`! Claude plugin: installed v${e.installed}, CLI v${e.cliVersion} \u2014 run \`npx ripplo update\` (or /plugin in Claude Code)`}import J from"fs";import Ji from"os";import Qe from"path";import{z as W}from"zod";import qi from"latest-version";import Or from"semver";async function ke(e){try{return await Promise.race([qi("ripplo"),new Promise(t=>setTimeout(()=>{t(void 0)},e))])}catch{return}}function Nr(e){return e.filter(t=>Or.valid(t)!=null).toSorted(Or.rcompare)[0]}function M(e){let t=Dt(e),r=Mt(e);return[...Ot(t,r.dataRules).map(n=>({gap:n,kind:"cascade-gap"})),..._t(r.pageRules).map(n=>({conflict:n,kind:"page-rule-conflict"}))]}function x(e,t,r){let n=e===1?t:r??`${t}s`;return`${String(e)} ${n}`}function Ur(e){return`${C.good("ok")} \u2014 no static model violations (${x(e,"test")})`}function H(e){return[`${C.bad("fail")} \u2014 ${x(e.length,"static model violation")}:`,...e.map(t=>Ft(t))].join(`
 
-`)}function Ce(e){return[`${C.warn("warn")} \u2014 ${S(e.length,"model coverage gap")} (not blocking):`,...e.map(r=>`  ${ys(r)}`),`Coverage gaps mean the model can't catch regressions there. Stub the missing flows. ${c("discover")}`].join(`
-`)}function ys(e){switch(e.kind){case"entity-never-given":return`${e.entity} \u2014 declared but no implemented test seeds it, so no flow exercises this state`;case"entity-never-mutated":return`${e.entity} \u2014 seeded but never asserted created/updated/deleted, so mutations to it ship unchecked`;case"unmatchable-delete-key":return`test ${e.workflow}/${e.testSlug} asserts ${e.entity} deleted with a literal ${e.field} but no seeded ${e.entity} sets ${e.field} \u2014 the solver treats it as no-match, so counts may mispredict`}}import{graphql as ks}from"gql.tada";var ws=ks(`
+`)}function we(e){return[`${C.warn("warn")} \u2014 ${x(e.length,"model coverage gap")} (not blocking):`,...e.map(t=>`  ${Bi(t)}`),`Coverage gaps mean the model can't catch regressions there. Stub the missing flows. ${c("discover")}`].join(`
+`)}function Bi(e){switch(e.kind){case"entity-never-given":return`${e.entity} \u2014 declared but no implemented test seeds it, so no flow exercises this state`;case"entity-never-mutated":return`${e.entity} \u2014 seeded but never asserted created/updated/deleted, so mutations to it ship unchecked`;case"unmatchable-delete-key":return`test ${e.workflow}/${e.testSlug} asserts ${e.entity} deleted with a literal ${e.field} but no seeded ${e.entity} sets ${e.field} \u2014 the solver treats it as no-match, so counts may mispredict`}}import{graphql as Vi}from"gql.tada";var Gi=Vi(`
   query DoctorAuthViewer {
     currentUser {
       name
       email
     }
   }
-`),vs="Failed to connect to Ripplo server";async function dt({serverUrl:e,token:r}){try{let n=await m({config:U({serverUrl:e,token:r}),document:ws,variables:void 0});return n.currentUser==null?{kind:"invalid"}:{email:n.currentUser.email,kind:"valid"}}catch(n){return(n instanceof Error?n.message:String(n)).startsWith(vs)?{kind:"unreachable"}:{kind:"invalid"}}}function ct(e){switch(e.type){case"settings":return!e.valid;case"env-files":return e.missing.length>0;case"token":return e.status==="missing"||e.status==="invalid";case"dev-server":return!e.reachable;case"dev-session":return e.status!=="active";case"preconditions":return e.count>0&&!e.configured;case"engine-endpoint":return!e.reachable;case"adapter-enabled":return e.status!=="enabled";case"webhook-verification":return!e.rejectsUnsigned;case"preconditions-validation":return!e.valid;case"workflows":return e.invalidNames.length>0;case"browser":return!e.installed;case"lockfile":return e.status!=="match";case"pre-commit-hook":return!e.installed;case"plugin-version":return!1}}async function pt(e){let r=await Rs(e),n={missing:jr(e),type:"env-files"},t=await Cs(),o=await Ps(),i=await x(e),a=Es(i),s=$s(i),l=await Is(e,i),d=As(e),y=xs(e),p=await Ts(r,i);return[r,n,t,...p,a,s,l,d,o,...y==null?[]:[y]]}var Ss=W.object({plugins:W.record(W.string(),W.array(W.object({projectPath:W.string().optional(),scope:W.string().optional(),version:W.string()})))});function xs(e){let r=ir.join(bs.homedir(),".claude","plugins","installed_plugins.json"),n=Q.existsSync(r)?Q.readFileSync(r,"utf8"):null;if(n==null)return null;let t=Ss.safeParse(JSON.parse(n));if(!t.success)return null;let o=Object.entries(t.data.plugins).filter(([a])=>a.startsWith("ripplo@")).flatMap(([,a])=>a).filter(a=>a.scope==="user"||a.projectPath===e).map(a=>a.version),i=at(o);return i==null?null:{cliVersion:P(),installed:i,type:"plugin-version"}}async function Rs(e){let r=await Mr(e);return r.valid?{missingFields:[],type:"settings",valid:!0}:{missingFields:r.errors.map(t=>t.path).filter(t=>t.length>0),type:"settings",valid:!1}}async function Cs(){let e=I(),r=D(e);if(r==null||r.length===0)return{email:void 0,status:"missing",type:"token"};let n=await dt({serverUrl:e,token:r});return n.kind==="valid"?{email:n.email,status:"valid",type:"token"}:{email:void 0,status:n.kind,type:"token"}}async function Ps(){let{chromium:e}=await import("playwright"),r=e.executablePath();return{installed:Q.existsSync(r),type:"browser"}}function Es(e){if(e.isErr())return{errorCount:1,errors:[{message:v(e.error),path:".ripplo/"}],found:!1,type:"preconditions-validation",valid:!1};let r=M(e.value);return{errorCount:r.length,errors:r.length===0?[]:[{message:H(r),path:""}],found:!0,type:"preconditions-validation",valid:r.length===0}}function $s(e){if(e.isErr())return{invalidNames:[],invalidWorkflows:[],total:0,type:"workflows",valid:0};let r=e.value.workflows.length;return{invalidNames:[],invalidWorkflows:[],total:r,type:"workflows",valid:r}}async function Is(e,r){if(r.isErr())return{status:"missing",type:"lockfile"};let n=J(N,r.value),t=await Q.promises.readFile(ir.join(e,L),"utf8").catch(()=>null);return{status:js(t,n),type:"lockfile"}}function js(e,r){return e==null?"missing":e===r?"match":"stale"}function As(e){let r=ir.join(e,".git","hooks","pre-commit");return Q.existsSync(r)?{installed:Q.readFileSync(r,"utf8").includes("ripplo compile --check"),type:"pre-commit-hook"}:{installed:!1,type:"pre-commit-hook"}}async function Ts(e,r){let n=Ir().map(a=>({appUrl:a.appUrl,engineUrl:a.engineUrl,webhookSecret:a.webhookSecret})).unwrapOr(void 0);if(n==null)return[];let t=[],o=await oe(n.appUrl)==null;t.push({appUrl:n.appUrl,reachable:o,type:"dev-server"});let i=await ot(process.cwd());if(t.push(i),e.valid&&r.isOk()){let a=await Ls(n,r);t.push(...a)}return t}async function Ls(e,r){let n=r.isOk()?r.value.entities.length:0,t=e.engineUrl.length>0,o={configured:t,count:n,endpointReachable:void 0,type:"preconditions"};if(n===0||!t)return[o];let i=Os(e.appUrl,e.engineUrl);if(i==null)return[o];let a=await oe(i)==null,s=[];if(s.push({configured:!0,count:n,endpointReachable:a,type:"preconditions"}),ut(e.engineUrl)&&s.push({reachable:a,type:"engine-endpoint",url:i}),!a)return s;let l=await Hr({appUrl:e.appUrl,engineUrl:e.engineUrl});s.push({rejectsUnsigned:l==null,type:"webhook-verification"});let d=await Ds({engineUrl:i,webhookSecret:e.webhookSecret});return s.push({status:d,type:"adapter-enabled",url:i}),s}async function Ds({engineUrl:e,webhookSecret:r}){if(r.length===0)return"no-secret";let n=JSON.stringify({});try{let t=await fetch(`${e}/setup`,{body:n,headers:{"Content-Type":"application/json",...Pr({body:n,secret:r})},method:"PUT",signal:AbortSignal.timeout(5e3)});return t.status===404?"disabled":t.status===401||t.status===403?"bad-secret":"enabled"}catch{return"unreachable"}}function ut(e){return e.startsWith("http://")||e.startsWith("https://")}function Os(e,r){return ut(r)?r:`${e}${r}`}var _s=3e3;async function mt(){let e=process.cwd(),[r,n]=await Promise.all([Re(_s),pt(e)]);process.stdout.write(`${xe({current:P(),latest:r})}
-`);let t=n.map(i=>it(i));process.stdout.write(t.join(`
+`),zi="Failed to connect to Ripplo server";async function Fr({serverUrl:e,token:t}){try{let r=await m({config:F({serverUrl:e,token:t}),document:Gi,variables:void 0});return r.currentUser==null?{kind:"invalid"}:{email:r.currentUser.email,kind:"valid"}}catch(r){return(r instanceof Error?r.message:String(r)).startsWith(zi)?{kind:"unreachable"}:{kind:"invalid"}}}function Mr(e){switch(e.type){case"settings":return!e.valid;case"env-files":return e.missing.length>0;case"token":return e.status==="missing"||e.status==="invalid";case"dev-server":return!e.reachable;case"dev-session":return e.status!=="active";case"preconditions":return e.count>0&&!e.configured;case"engine-endpoint":return!e.reachable;case"adapter-enabled":return e.status!=="enabled";case"webhook-verification":return!e.rejectsUnsigned;case"preconditions-validation":return!e.valid;case"workflows":return e.invalidNames.length>0;case"browser":return!e.installed;case"lockfile":return e.status!=="match";case"pre-commit-hook":return!e.installed;case"plugin-version":return!1}}async function Hr(e){let t=await Xi(e),r={missing:bt(e),type:"env-files"},n=await Yi(),o=await Zi(),i=await S(e),s=es(i),a=ts(i),l=await rs(e,i),d=os(e),v=Qi(e),p=await is(t,i);return[t,r,n,...p,s,a,l,d,o,...v==null?[]:[v]]}var Ki=W.object({plugins:W.record(W.string(),W.array(W.object({projectPath:W.string().optional(),scope:W.string().optional(),version:W.string()})))});function Qi(e){let t=Qe.join(Ji.homedir(),".claude","plugins","installed_plugins.json"),r=J.existsSync(t)?J.readFileSync(t,"utf8"):null;if(r==null)return null;let n=Ki.safeParse(JSON.parse(r));if(!n.success)return null;let o=Object.entries(n.data.plugins).filter(([s])=>s.startsWith("ripplo@")).flatMap(([,s])=>s).filter(s=>s.scope==="user"||s.projectPath===e).map(s=>s.version),i=Nr(o);return i==null?null:{cliVersion:P(),installed:i,type:"plugin-version"}}async function Xi(e){let t=await It(e);return t.valid?{missingFields:[],type:"settings",valid:!0}:{missingFields:t.errors.map(n=>n.path).filter(n=>n.length>0),type:"settings",valid:!1}}async function Yi(){let e=$(),t=D(e);if(t==null||t.length===0)return{email:void 0,status:"missing",type:"token"};let r=await Fr({serverUrl:e,token:t});return r.kind==="valid"?{email:r.email,status:"valid",type:"token"}:{email:void 0,status:r.kind,type:"token"}}async function Zi(){let{chromium:e}=await import("playwright"),t=e.executablePath();return{installed:J.existsSync(t),type:"browser"}}function es(e){if(e.isErr())return{errorCount:1,errors:[{message:R(e.error),path:".ripplo/"}],found:!1,type:"preconditions-validation",valid:!1};let t=M(e.value);return{errorCount:t.length,errors:t.length===0?[]:[{message:H(t),path:""}],found:!0,type:"preconditions-validation",valid:t.length===0}}function ts(e){if(e.isErr())return{invalidNames:[],invalidWorkflows:[],total:0,type:"workflows",valid:0};let t=e.value.workflows.length;return{invalidNames:[],invalidWorkflows:[],total:t,type:"workflows",valid:t}}async function rs(e,t){if(t.isErr())return{status:"missing",type:"lockfile"};let r=z(U,t.value),n=await J.promises.readFile(Qe.join(e,T),"utf8").catch(()=>null);return{status:ns(n,r),type:"lockfile"}}function ns(e,t){return e==null?"missing":e===t?"match":"stale"}function os(e){let t=Qe.join(e,".git","hooks","pre-commit");return J.existsSync(t)?{installed:J.readFileSync(t,"utf8").includes("ripplo compile --check"),type:"pre-commit-hook"}:{installed:!1,type:"pre-commit-hook"}}async function is(e,t){let r=vt().map(s=>({appUrl:s.appUrl,engineUrl:s.engineUrl,webhookSecret:s.webhookSecret})).unwrapOr(void 0);if(r==null)return[];let n=[],o=await Be(r.appUrl)==null;n.push({appUrl:r.appUrl,reachable:o,type:"dev-server"});let i=await Dr(process.cwd());if(n.push(i),e.valid&&t.isOk()){let s=await ss(r,t);n.push(...s)}return n}async function ss(e,t){let r=t.isOk()?t.value.entities.length:0,n=e.engineUrl.length>0,o={configured:n,count:r,endpointReachable:void 0,type:"preconditions"};if(r===0||!n)return[o];let i=ls(e.appUrl,e.engineUrl);if(i==null)return[o];let s=await Be(i)==null,a=[];if(a.push({configured:!0,count:r,endpointReachable:s,type:"preconditions"}),Wr(e.engineUrl)&&a.push({reachable:s,type:"engine-endpoint",url:i}),!s)return a;let l=await At({appUrl:e.appUrl,engineUrl:e.engineUrl});a.push({rejectsUnsigned:l==null,type:"webhook-verification"});let d=await as({engineUrl:i,webhookSecret:e.webhookSecret});return a.push({status:d,type:"adapter-enabled",url:i}),a}async function as({engineUrl:e,webhookSecret:t}){if(t.length===0)return"no-secret";let r=JSON.stringify({});try{let n=await fetch(`${e}/setup`,{body:r,headers:{"Content-Type":"application/json",...yt({body:r,secret:t})},method:"PUT",signal:AbortSignal.timeout(5e3)});return n.status===404?"disabled":n.status===401||n.status===403?"bad-secret":"enabled"}catch{return"unreachable"}}function Wr(e){return e.startsWith("http://")||e.startsWith("https://")}function ls(e,t){return Wr(t)?t:`${e}${t}`}var ds=3e3;async function qr(){let e=process.cwd(),[t,r]=await Promise.all([ke(ds),Hr(e)]);process.stdout.write(`${ye({current:P(),latest:t})}
+`);let n=r.map(i=>_r(i));process.stdout.write(n.join(`
 `)+`
-`);let o=n.some(i=>ct(i));process.exit(o?1:0)}import Pe from"fs";import{graphql as Fs}from"gql.tada";var Ns=Fs(`
+`);let o=r.some(i=>Mr(i));process.exit(o?1:0)}import ve from"fs";import{graphql as cs}from"gql.tada";var us=cs(`
   mutation CliSetHooksPaused($projectId: String!, $paused: Boolean!) {
     setHooksPaused(projectId: $projectId, paused: $paused) {
       id
     }
   }
-`);async function ft(){process.stdin.isTTY||(process.stderr.write("`ripplo hooks pause` only runs interactively from a terminal. Bypassing the gate is a human decision, not an agent decision.\n"),process.exit(1));let e=process.cwd();he(e);let r=ie(e);if(Pe.existsSync(r)){process.stdout.write("Hooks already paused. Run `npx ripplo hooks resume` to re-enable.\n");return}Pe.writeFileSync(r,""),await ht(e,!0),process.stdout.write("Hooks paused. Pre-edit gates and stop enforcement are off until you run `npx ripplo hooks resume`.\n")}async function gt(){let e=process.cwd(),r=ie(e);if(!Pe.existsSync(r)){process.stdout.write(`Hooks already active.
-`);return}Pe.unlinkSync(r),await ht(e,!1),process.stdout.write(`Hooks resumed.
-`)}async function ht(e,r){let n=w(e).unwrapOr(void 0);n!=null&&await m({config:n,document:Ns,variables:{paused:r,projectId:n.projectId}}).catch(t=>{process.stderr.write(`Warning: could not push hook-pause state to the server (${t instanceof Error?t.message:String(t)}) \u2014 the dashboard may show stale hook status.
-`)})}import Z from"fs";import ee from"path";import{input as xt,select as Rt}from"@inquirer/prompts";import{graphql as ga}from"gql.tada";import{exec as Hs,execFile as Ws}from"child_process";import{err as qs,ok as yt}from"neverthrow";import k from"fs";import{createRequire as Bs}from"module";import h from"path";import{promisify as wt}from"util";import{writeFile as Us}from"fs/promises";import Ms from"path";async function X(e){let r=await x(e);return r.isOk()&&await Us(Ms.join(e,L),J(N,r.value)),r}function F(e){return e.workflows.filter(r=>r.stub).map(r=>r.name)}var Vs=["@ripplo/testing","@ripplo/instrument"],kt=".ripplo/ripplo.lock linguist-generated=true",Gs=[".ripplo/debug/",".ripplo/.local/"],zs=wt(Hs),Js=wt(Ws);async function vt({cwd:e,onStep:r}){r("Scaffolding project files..."),ia({cwd:e}),r("Updating .gitignore..."),sa(e),r("Marking ripplo.lock as generated..."),Ys(e),r("Installing dependencies...");let n=await Qs(e),t=[];if(n.ok||t.push({manualCommand:n.cmd,message:`Couldn't auto-install dev dependencies (${n.reason}). Run the command below, then run \`npx ripplo lint\` to compile the lockfile.`}),n.ok){r("Compiling initial lockfile...");let i=await Xs(e);i!=null&&t.push({manualCommand:void 0,message:i})}return r("Setting up browser..."),(await Ks()).map(()=>t)}async function Ks(){let{chromium:e}=await import("playwright"),r=e.executablePath();if(k.existsSync(r))return yt(void 0);$.info("Chromium not found. Installing via Playwright...");let n=Bs(import.meta.url),t=h.dirname(n.resolve("playwright/package.json")),o=h.join(t,"cli.js");return await Js(process.execPath,[o,"install","chromium"]),k.existsSync(r)?yt(void 0):qs({kind:"playwright-install-failed"})}async function Qs(e){let r=Zs({cwd:e,pm:oa(e)});$.info("Installing dependencies: %s",r);try{return await zs(r,{cwd:e}),{ok:!0}}catch(n){let t=n instanceof Error?n.message.split(`
-`)[0]??n.message:String(n);return $.warn("Install failed (%s): %s",r,t),{cmd:r,ok:!1,reason:t}}}async function Xs(e){try{await X(e);return}catch(r){return`Couldn't compile initial lockfile: ${r instanceof Error?r.message:String(r)}.`}}function Ys(e){let r=h.join(e,".gitattributes"),n=k.existsSync(r)?k.readFileSync(r,"utf8"):"";if(n.includes(kt))return;let t=n.length===0||n.endsWith(`
+`);async function Br(){process.stdin.isTTY||(process.stderr.write("`ripplo hooks pause` only runs interactively from a terminal. Bypassing the gate is a human decision, not an agent decision.\n"),process.exit(1));let e=process.cwd();fe(e);let t=re(e);if(ve.existsSync(t)){process.stdout.write("Hooks already paused. Run `npx ripplo hooks resume` to re-enable.\n");return}ve.writeFileSync(t,""),await Gr(e,!0),process.stdout.write("Hooks paused. Pre-edit gates and stop enforcement are off until you run `npx ripplo hooks resume`.\n")}async function Vr(){let e=process.cwd(),t=re(e);if(!ve.existsSync(t)){process.stdout.write(`Hooks already active.
+`);return}ve.unlinkSync(t),await Gr(e,!1),process.stdout.write(`Hooks resumed.
+`)}async function Gr(e,t){let r=k(e).unwrapOr(void 0);r!=null&&await m({config:r,document:us,variables:{paused:t,projectId:r.projectId}}).catch(n=>{process.stderr.write(`Warning: could not push hook-pause state to the server (${n instanceof Error?n.message:String(n)}) \u2014 the dashboard may show stale hook status.
+`)})}import X from"fs";import Y from"path";import{input as Zr,select as en}from"@inquirer/prompts";import{graphql as Ws}from"gql.tada";import{exec as fs,execFile as gs}from"child_process";import{err as hs,ok as zr}from"neverthrow";import y from"fs";import{createRequire as ys}from"module";import h from"path";import{promisify as Kr}from"util";import{writeFile as ps}from"fs/promises";import ms from"path";async function K(e){let t=await S(e);return t.isOk()&&await ps(ms.join(e,T),z(U,t.value)),t}function N(e){return e.workflows.filter(t=>t.stub).map(t=>t.name)}var ks=["@ripplo/testing","@ripplo/instrument"],Jr=".ripplo/ripplo.lock linguist-generated=true",ws=[".ripplo/debug/",".ripplo/.local/"],vs=Kr(fs),bs=Kr(gs);async function Qr({cwd:e,onStep:t}){t("Scaffolding project files..."),Ts({cwd:e}),t("Updating .gitignore..."),Ls(e),t("Marking ripplo.lock as generated..."),xs(e),t("Installing dependencies...");let r=await Rs(e),n=[];if(r.ok||n.push({manualCommand:r.cmd,message:`Couldn't auto-install dev dependencies (${r.reason}). Run the command below, then run \`npx ripplo lint\` to compile the lockfile.`}),r.ok){t("Compiling initial lockfile...");let i=await Cs(e);i!=null&&n.push({manualCommand:void 0,message:i})}return t("Setting up browser..."),(await Ss()).map(()=>n)}async function Ss(){let{chromium:e}=await import("playwright"),t=e.executablePath();if(y.existsSync(t))return zr(void 0);L.info("Chromium not found. Installing via Playwright...");let r=ys(import.meta.url),n=h.dirname(r.resolve("playwright/package.json")),o=h.join(n,"cli.js");return await bs(process.execPath,[o,"install","chromium"]),y.existsSync(t)?zr(void 0):hs({kind:"playwright-install-failed"})}async function Rs(e){let t=Ps({cwd:e,pm:As(e)});L.info("Installing dependencies: %s",t);try{return await vs(t,{cwd:e}),{ok:!0}}catch(r){let n=r instanceof Error?r.message.split(`
+`)[0]??r.message:String(r);return L.warn("Install failed (%s): %s",t,n),{cmd:t,ok:!1,reason:n}}}async function Cs(e){try{await K(e);return}catch(t){return`Couldn't compile initial lockfile: ${t instanceof Error?t.message:String(t)}.`}}function xs(e){let t=h.join(e,".gitattributes"),r=y.existsSync(t)?y.readFileSync(t,"utf8"):"";if(r.includes(Jr))return;let n=r.length===0||r.endsWith(`
 `)?"":`
-`;k.writeFileSync(r,`${n}${t}${kt}
-`)}function Zs({cwd:e,pm:r}){let n=Vs.join(" ");return r==="pnpm"?ea(e)?`pnpm add -wD ${n}`:`pnpm add -D ${n}`:r==="yarn"?ra({cwd:e,deps:n}):r==="bun"?`bun add -d ${n}`:`npm install -D ${n}`}function ea(e){return k.existsSync(h.join(e,"pnpm-workspace.yaml"))||k.existsSync(h.join(e,"pnpm-workspace.yml"))}function ra({cwd:e,deps:r}){return na(e)?`yarn add -D ${r}`:ta(e)?`yarn add -WD ${r}`:`yarn add -D ${r}`}function na(e){if(k.existsSync(h.join(e,".yarnrc.yml"))||k.existsSync(h.join(e,".pnp.cjs"))||k.existsSync(h.join(e,".pnp.js")))return!0;let r=h.join(e,"package.json");if(!k.existsSync(r))return!1;try{let n=JSON.parse(k.readFileSync(r,"utf8"));if(n==null||typeof n!="object"||!("packageManager"in n))return!1;let t=n.packageManager;if(typeof t!="string")return!1;let o=/^yarn@(\d+)/.exec(t);return o!=null&&Number(o[1])>=2}catch{return!1}}function ta(e){let r=h.join(e,"package.json");if(!k.existsSync(r))return!1;try{let n=JSON.parse(k.readFileSync(r,"utf8"));if(n==null||typeof n!="object"||!("workspaces"in n))return!1;let t=n.workspaces;return Array.isArray(t)||t!=null&&typeof t=="object"}catch{return!1}}function oa(e){return k.existsSync(h.join(e,"pnpm-lock.yaml"))?"pnpm":k.existsSync(h.join(e,"yarn.lock"))?"yarn":k.existsSync(h.join(e,"bun.lockb"))||k.existsSync(h.join(e,"bun.lock"))?"bun":"npm"}function ia({cwd:e}){let r=h.join(e,".ripplo"),n=h.join(r,"entities"),t=h.join(r,"singletons"),o=h.join(r,"worlds"),i=h.join(r,"workflows");[n,t,o,i].forEach(a=>{k.mkdirSync(a,{recursive:!0})}),Y(h.join(r,"index.ts"),aa),Y(h.join(n,"index.ts"),la),Y(h.join(t,"index.ts"),da),Y(h.join(o,"index.ts"),ca),Y(h.join(i,"index.ts"),pa),Y(h.join(r,"tsconfig.json"),ua)}function Y(e,r){k.existsSync(e)||k.writeFileSync(e,r)}function sa(e){let r=h.join(e,".gitignore");if(!k.existsSync(r))return;let n=k.readFileSync(r,"utf8"),t=Gs.filter(i=>!n.includes(i));if(t.length===0)return;let o=n.endsWith(`
+`;y.writeFileSync(t,`${r}${n}${Jr}
+`)}function Ps({cwd:e,pm:t}){let r=ks.join(" ");return t==="pnpm"?Es(e)?`pnpm add -wD ${r}`:`pnpm add -D ${r}`:t==="yarn"?$s({cwd:e,deps:r}):t==="bun"?`bun add -d ${r}`:`npm install -D ${r}`}function Es(e){return y.existsSync(h.join(e,"pnpm-workspace.yaml"))||y.existsSync(h.join(e,"pnpm-workspace.yml"))}function $s({cwd:e,deps:t}){return js(e)?`yarn add -D ${t}`:Is(e)?`yarn add -WD ${t}`:`yarn add -D ${t}`}function js(e){if(y.existsSync(h.join(e,".yarnrc.yml"))||y.existsSync(h.join(e,".pnp.cjs"))||y.existsSync(h.join(e,".pnp.js")))return!0;let t=h.join(e,"package.json");if(!y.existsSync(t))return!1;try{let r=JSON.parse(y.readFileSync(t,"utf8"));if(r==null||typeof r!="object"||!("packageManager"in r))return!1;let n=r.packageManager;if(typeof n!="string")return!1;let o=/^yarn@(\d+)/.exec(n);return o!=null&&Number(o[1])>=2}catch{return!1}}function Is(e){let t=h.join(e,"package.json");if(!y.existsSync(t))return!1;try{let r=JSON.parse(y.readFileSync(t,"utf8"));if(r==null||typeof r!="object"||!("workspaces"in r))return!1;let n=r.workspaces;return Array.isArray(n)||n!=null&&typeof n=="object"}catch{return!1}}function As(e){return y.existsSync(h.join(e,"pnpm-lock.yaml"))?"pnpm":y.existsSync(h.join(e,"yarn.lock"))?"yarn":y.existsSync(h.join(e,"bun.lockb"))||y.existsSync(h.join(e,"bun.lock"))?"bun":"npm"}function Ts({cwd:e}){let t=h.join(e,".ripplo"),r=h.join(t,"entities"),n=h.join(t,"singletons"),o=h.join(t,"worlds"),i=h.join(t,"workflows");[r,n,o,i].forEach(s=>{y.mkdirSync(s,{recursive:!0})}),Q(h.join(t,"index.ts"),Ds),Q(h.join(r,"index.ts"),_s),Q(h.join(n,"index.ts"),Os),Q(h.join(o,"index.ts"),Ns),Q(h.join(i,"index.ts"),Us),Q(h.join(t,"tsconfig.json"),Fs)}function Q(e,t){y.existsSync(e)||y.writeFileSync(e,t)}function Ls(e){let t=h.join(e,".gitignore");if(!y.existsSync(t))return;let r=y.readFileSync(t,"utf8"),n=ws.filter(i=>!r.includes(i));if(n.length===0)return;let o=r.endsWith(`
 `)?"":`
-`;k.writeFileSync(r,n+o+t.join(`
+`;y.writeFileSync(t,r+o+n.join(`
 `)+`
-`)}var aa=`import { createRipplo, entity, field, id, v, singleton, arbitrary } from "@ripplo/testing";
+`)}var Ds=`import { createRipplo, entity, field, id, v, singleton, arbitrary } from "@ripplo/testing";
 import { entities } from "./entities/index";
 import { singletons } from "./singletons/index";
 import { workflows } from "./workflows/index";
@@ -121,7 +121,7 @@ export default createRipplo({
   singletons,
   workflows,
 });
-`,la=`// Model the app's state as entities. Each entity gets a \`seed\`/\`read\` impl in your
+`,_s=`// Model the app's state as entities. Each entity gets a \`seed\`/\`read\` impl in your
 // app's engine funnel (createEngine). See /ripplo:create "Adding an entity".
 //
 // Example:
@@ -136,7 +136,7 @@ export default createRipplo({
 //   export const entities = [Project] as const;
 
 export const entities = [] as const;
-`,da=`// Client/global state (e.g. localStorage flags) modeled as singletons.
+`,Os=`// Client/global state (e.g. localStorage flags) modeled as singletons.
 //
 // Example:
 //   //
@@ -150,7 +150,7 @@ export const entities = [] as const;
 //   export const singletons = [onboardingDismissed];
 
 export const singletons = [];
-`,ca=`// Pure builder functions returning a flat record of entity handles \u2014 the starting state
+`,Ns=`// Pure builder functions returning a flat record of entity handles \u2014 the starting state
 // for workflows. Compose from other worlds. See /ripplo:create "Adding a world".
 //
 // Example:
@@ -161,7 +161,7 @@ export const singletons = [];
 //     const project = Project.of({ name: arbitrary(Project.field.name), ownerId: me.id });
 //     return { me, project };
 //   };
-`,pa=`// Each file under ./workflows exports a workflow. Import them here and add to the
+`,Us=`// Each file under ./workflows exports a workflow. Import them here and add to the
 // \`workflows\` array \u2014 that's what createRipplo({ ..., workflows }) receives. Stub with
 // \`workflow("Intent")\` (no body); implement later with \`workflow("Intent", () => ({ given, steps }))\`.
 //
@@ -170,7 +170,7 @@ export const singletons = [];
 //   export const workflows = [createProject] as const;
 
 export const workflows = [] as const;
-`,ua=`{
+`,Fs=`{
   "compilerOptions": {
     "strict": true,
     "noUncheckedIndexedAccess": true,
@@ -186,75 +186,44 @@ export const workflows = [] as const;
   "include": ["*.ts", "entities/**/*.ts", "singletons/**/*.ts", "worlds/**/*.ts", "workflows/**/*.ts"],
   "exclude": ["node_modules"]
 }
-`;import Ee from"fs";import bt from"path";import{z as sr}from"zod";var ma={autoUpdate:!0,source:{repo:"ripplo/claude-plugin",source:"github"}},St=sr.record(sr.string(),sr.unknown());function $e(e){let r=bt.join(e,".claude","settings.json"),n=fa(r);if(n==null)return"unparseable";let t=St.safeParse(n.extraKnownMarketplaces??{});if(!t.success)return"unparseable";if(t.data.ripplo!=null)return"already-present";let o={...n,extraKnownMarketplaces:{...t.data,ripplo:ma}};return Ee.mkdirSync(bt.dirname(r),{recursive:!0}),Ee.writeFileSync(r,`${JSON.stringify(o,null,2)}
-`),"written"}function fa(e){if(!Ee.existsSync(e))return{};try{let r=St.safeParse(JSON.parse(Ee.readFileSync(e,"utf8")));return r.success?r.data:void 0}catch{return}}function Ie(e){switch(e){case"written":return"  registered ripplo plugin marketplace in .claude/settings.json (autoUpdate: true \u2014 Claude Code keeps the plugin current)";case"already-present":return"  ripplo plugin marketplace already registered in .claude/settings.json";case"unparseable":return"  ! .claude/settings.json could not be parsed \u2014 add the ripplo marketplace to extraKnownMarketplaces manually"}}var ha=ga(`
+`;import be from"fs";import Xr from"path";import{z as Xe}from"zod";var Ms={autoUpdate:!0,source:{repo:"ripplo/claude-plugin",source:"github"}},Yr=Xe.record(Xe.string(),Xe.unknown());function Se(e){let t=Xr.join(e,".claude","settings.json"),r=Hs(t);if(r==null)return"unparseable";let n=Yr.safeParse(r.extraKnownMarketplaces??{});if(!n.success)return"unparseable";if(n.data.ripplo!=null)return"already-present";let o={...r,extraKnownMarketplaces:{...n.data,ripplo:Ms}};return be.mkdirSync(Xr.dirname(t),{recursive:!0}),be.writeFileSync(t,`${JSON.stringify(o,null,2)}
+`),"written"}function Hs(e){if(!be.existsSync(e))return{};try{let t=Yr.safeParse(JSON.parse(be.readFileSync(e,"utf8")));return t.success?t.data:void 0}catch{return}}function Re(e){switch(e){case"written":return"  registered ripplo plugin marketplace in .claude/settings.json (autoUpdate: true \u2014 Claude Code keeps the plugin current)";case"already-present":return"  ripplo plugin marketplace already registered in .claude/settings.json";case"unparseable":return"  ! .claude/settings.json could not be parsed \u2014 add the ripplo marketplace to extraKnownMarketplaces manually"}}var qs=Ws(`
   query InitProjects {
     projects {
       id
       name
     }
   }
-`),ar=["../.env.local","../.env"];async function Ct(e=wa()){let r=process.cwd(),n=I(),t=D(n);t==null&&(process.stdout.write("Not signed in. Run `npx ripplo auth login` first.\n"),process.exit(1)),ya(r)&&(process.stdout.write(`\`.ripplo/index.ts\` already exists at ${r}. To re-init, delete it first.
-`),process.exit(1));let o=await ka({serverUrl:n,token:t});o.length===0&&(process.stdout.write("No projects found. Create one in the dashboard first, then re-run `npx ripplo init`.\n"),process.exit(1));let i=await ba(o,e.projectId),a=await Sa(r,e.envFile),s=await Ra(e.appUrl),l=va(s,e.engineUrl),d=ee.resolve(ee.join(r,".ripplo"),a);$r({cwd:r,envFiles:[a],projectId:i}),Pa({appUrl:s,engineUrl:l,filePath:d}),process.stdout.write(`${Ie($e(r))}
-`);let p=(await vt({cwd:r,onStep:u=>{process.stdout.write(`  ${u}
+`),Ye=["../.env.local","../.env"];async function tn(e=Gs()){let t=process.cwd(),r=$(),n=D(r);n==null&&(process.stdout.write("Not signed in. Run `npx ripplo auth login` first.\n"),process.exit(1)),Bs(t)&&(process.stdout.write(`\`.ripplo/index.ts\` already exists at ${t}. To re-init, delete it first.
+`),process.exit(1));let o=await Vs({serverUrl:r,token:n});o.length===0&&(process.stdout.write("No projects found. Create one in the dashboard first, then re-run `npx ripplo init`.\n"),process.exit(1));let i=await Js(o,e.projectId),s=await Ks(t,e.envFile),a=await Xs(e.appUrl),l=zs(a,e.engineUrl),d=Y.resolve(Y.join(t,".ripplo"),s);wt({cwd:t,envFiles:[s],projectId:i}),Zs({appUrl:a,engineUrl:l,filePath:d}),process.stdout.write(`${Re(Se(t))}
+`);let p=(await Qr({cwd:t,onStep:u=>{process.stdout.write(`  ${u}
 `)}})).match(u=>u,u=>{process.stderr.write(`${E(u)}
 `),process.exit(1)});if(p.length>0){process.stdout.write(`Done with warnings:
 `),p.forEach(u=>{process.stdout.write(`  - ${u.message}
 `),u.manualCommand!=null&&process.stdout.write(`    run: ${u.manualCommand}
-`)});return}process.stdout.write("Ready. Start `npx ripplo daemon` as a background process (or run `/ripplo:start` in Claude Code), then write workflows in `.ripplo/workflows/`.\n")}function ya(e){return Z.existsSync(ee.join(e,".ripplo","index.ts"))}async function ka({serverUrl:e,token:r}){return((await m({config:U({serverUrl:e,token:r}),document:ha,variables:void 0})).projects??[]).map(t=>({id:t.id,name:t.name}))}function wa(){return{appUrl:void 0,engineUrl:void 0,envFile:void 0,projectId:void 0}}function va(e,r){if(r!=null){try{new URL(r)}catch{process.stdout.write(`--engine-url is not a valid URL: ${r}
-`),process.exit(1)}return r}return`${e.replace(/\/$/,"")}/ripplo`}async function ba(e,r){if(r!=null){let n=e.find(t=>t.id===r);return n==null&&(process.stdout.write(`Unknown project id: ${r}
-`),process.exit(1)),process.stdout.write(`Using project: ${n.name} (${n.id})
-`),n.id}if(e.length===1){let n=e[0];if(n==null)throw new Error("unreachable");return process.stdout.write(`Using project: ${n.name} (${n.id})
-`),n.id}return Rt({choices:e.map(n=>({name:n.name,value:n.id})),message:"Select a project"})}async function Sa(e,r){return r!=null?(r.trim().length===0&&(process.stdout.write(`--env must not be empty
-`),process.exit(1)),r):xa(e)}async function xa(e){let r=ee.join(e,".ripplo"),n=ar.find(o=>Z.existsSync(ee.resolve(r,o))),t=await Rt({choices:[...ar.map(o=>({name:n===o?`${o} (detected)`:o,value:o})),{name:"custom path",value:"__custom__"}],default:n??ar[0],message:"Which env file should ripplo write RIPPLO_APP_URL, RIPPLO_ENGINE_URL, RIPPLO_WEBHOOK_SECRET, and ENABLE_RIPPLO_TESTING to?"});return t!=="__custom__"?t:xt({message:"Path to env file (relative to .ripplo/, e.g. ../apps/server/.env)",validate:o=>o.trim().length>0?!0:"required"})}async function Ra(e){if(e!=null){try{new URL(e)}catch{process.stdout.write(`--app-url is not a valid URL: ${e}
-`),process.exit(1)}return e}return Ca()}async function Ca(){return xt({default:"http://localhost:3000",message:"Where does your dev server run? (RIPPLO_APP_URL)",validate:e=>{try{return new URL(e),!0}catch{return"must be a valid URL"}}})}function Pa({appUrl:e,engineUrl:r,filePath:n}){Z.mkdirSync(ee.dirname(n),{recursive:!0});let t=Z.existsSync(n)?Z.readFileSync(n,"utf8"):"",o=[];if(/^RIPPLO_APP_URL=/m.test(t)||o.push(`RIPPLO_APP_URL=${e}`),/^RIPPLO_ENGINE_URL=/m.test(t)||o.push(`RIPPLO_ENGINE_URL=${r}`),/^RIPPLO_WEBHOOK_SECRET=/m.test(t)||o.push(`RIPPLO_WEBHOOK_SECRET=${Er()}`),/^ENABLE_RIPPLO_TESTING=/m.test(t)||o.push("ENABLE_RIPPLO_TESTING=true"),o.length===0)return;let i=t.length===0||t.endsWith(`
+`)});return}process.stdout.write("Ready. Start `npx ripplo daemon` as a background process (or run `/ripplo:start` in Claude Code), then write workflows in `.ripplo/workflows/`.\n")}function Bs(e){return X.existsSync(Y.join(e,".ripplo","index.ts"))}async function Vs({serverUrl:e,token:t}){return((await m({config:F({serverUrl:e,token:t}),document:qs,variables:void 0})).projects??[]).map(n=>({id:n.id,name:n.name}))}function Gs(){return{appUrl:void 0,engineUrl:void 0,envFile:void 0,projectId:void 0}}function zs(e,t){if(t!=null){try{new URL(t)}catch{process.stdout.write(`--engine-url is not a valid URL: ${t}
+`),process.exit(1)}return t}return`${e.replace(/\/$/,"")}/ripplo`}async function Js(e,t){if(t!=null){let r=e.find(n=>n.id===t);return r==null&&(process.stdout.write(`Unknown project id: ${t}
+`),process.exit(1)),process.stdout.write(`Using project: ${r.name} (${r.id})
+`),r.id}if(e.length===1){let r=e[0];if(r==null)throw new Error("unreachable");return process.stdout.write(`Using project: ${r.name} (${r.id})
+`),r.id}return en({choices:e.map(r=>({name:r.name,value:r.id})),message:"Select a project"})}async function Ks(e,t){return t!=null?(t.trim().length===0&&(process.stdout.write(`--env must not be empty
+`),process.exit(1)),t):Qs(e)}async function Qs(e){let t=Y.join(e,".ripplo"),r=Ye.find(o=>X.existsSync(Y.resolve(t,o))),n=await en({choices:[...Ye.map(o=>({name:r===o?`${o} (detected)`:o,value:o})),{name:"custom path",value:"__custom__"}],default:r??Ye[0],message:"Which env file should ripplo write RIPPLO_APP_URL, RIPPLO_ENGINE_URL, RIPPLO_WEBHOOK_SECRET, and ENABLE_RIPPLO_TESTING to?"});return n!=="__custom__"?n:Zr({message:"Path to env file (relative to .ripplo/, e.g. ../apps/server/.env)",validate:o=>o.trim().length>0?!0:"required"})}async function Xs(e){if(e!=null){try{new URL(e)}catch{process.stdout.write(`--app-url is not a valid URL: ${e}
+`),process.exit(1)}return e}return Ys()}async function Ys(){return Zr({default:"http://localhost:3000",message:"Where does your dev server run? (RIPPLO_APP_URL)",validate:e=>{try{return new URL(e),!0}catch{return"must be a valid URL"}}})}function Zs({appUrl:e,engineUrl:t,filePath:r}){X.mkdirSync(Y.dirname(r),{recursive:!0});let n=X.existsSync(r)?X.readFileSync(r,"utf8"):"",o=[];if(/^RIPPLO_APP_URL=/m.test(n)||o.push(`RIPPLO_APP_URL=${e}`),/^RIPPLO_ENGINE_URL=/m.test(n)||o.push(`RIPPLO_ENGINE_URL=${t}`),/^RIPPLO_WEBHOOK_SECRET=/m.test(n)||o.push(`RIPPLO_WEBHOOK_SECRET=${kt()}`),/^ENABLE_RIPPLO_TESTING=/m.test(n)||o.push("ENABLE_RIPPLO_TESTING=true"),o.length===0)return;let i=n.length===0||n.endsWith(`
 `)?"":`
-`;Z.writeFileSync(n,`${t}${i}${o.join(`
+`;X.writeFileSync(r,`${n}${i}${o.join(`
 `)}
-`)}function je(e){let r=e.workflows.filter(o=>!o.stub);if(r.length===0)return[];let n=new Set(r.flatMap(o=>Ea(o))),t=new Set(r.flatMap(o=>$a(o)));return[...e.entities.filter(o=>!n.has(o.name)).map(o=>({entity:o.name,kind:"entity-never-given"})),...e.entities.filter(o=>n.has(o.name)&&!t.has(o.name)).map(o=>({entity:o.name,kind:"entity-never-mutated"})),...r.flatMap(o=>o.tests.flatMap(i=>Ia(i)))]}function Ea(e){return[...e.world,...e.maybe].map(r=>r.entity)}function $a(e){return e.steps.flatMap(r=>r.expect.flatMap(n=>de(n))).map(r=>r.entity)}function Ia(e){let r=e.steps.flatMap(n=>n.expect.flatMap(t=>de(t)));return ja({states:r,test:e})}function ja({states:e,test:r}){let n=e.filter(t=>t.assertion.kind==="deleted").flatMap(t=>Aa({predicate:t,test:r})).map(({entity:t,field:o})=>({entity:t,field:o,kind:"unmatchable-delete-key",testSlug:r.slug,workflow:r.workflow}));return Da(n)}function Aa({predicate:e,test:r}){let n=r.world.filter(t=>t.entity===e.entity);return n.length===0?[]:Object.entries(e.key).filter(([t,o])=>La(o)&&!Ta({field:t,setups:n})).map(([t])=>({entity:e.entity,field:t}))}function Ta({field:e,setups:r}){return r.some(n=>Object.keys(n.set).includes(e))}function La(e){return e===null||typeof e!="object"}function Da(e){return e.filter((r,n)=>e.findIndex(t=>JSON.stringify(t)===JSON.stringify(r))===n)}function de(e){return e.kind==="state"?[e]:e.kind==="not"?de(e.predicate):e.kind==="and"?e.predicates.flatMap(r=>de(r)):e.kind==="when"?e.branches.flatMap(r=>r.consequence.flatMap(n=>de(n))):[]}async function Pt(){let e=process.cwd(),n=(await x(e)).match(o=>o,o=>Oa(v(o))),t=M(n);if(t.length===0){let o=je(n);o.length>0&&process.stdout.write(`${Ce(o)}
-`);let i=n.workflows.reduce((a,s)=>a+s.tests.length,0);process.stdout.write(`${lt(i)}
-`);return}process.stderr.write(`${H(t)}
-`),process.exit(1)}function Oa(e){process.stderr.write(`${e}
-`),process.exit(1)}import{CancellationTokenSource as kl}from"vscode-jsonrpc/node";import Ba from"path";import{randomUUID as _a}from"crypto";import Et from"path";async function Ae({assign:e,config:r,headed:n,lockfile:t,report:o,session:i,signal:a}){let s=K(t),l=await Wa({assign:e,corpus:s,lockfile:t});if(l==null)return{kind:"error",reason:"base-state-arrange-failed",rows:[],trail:[]};if(l.stepRuns.length===0)return{kind:"error",reason:"empty-trail",rows:[],trail:[]};let d=Ha(s,l.stepRuns),y=await pn({baseState:{name:Xe(e.baseStateTest),test:e.baseStateTest},corpus:s,lensId:e.lensId,lockfile:t,lockfileHash:e.lockfileHash,options:{baseUrl:r.appUrl,engineUrl:r.engineUrl,fixturesDir:Et.join(r.cwd,ye),generate:we,headed:n,secret:r.webhookSecret,tunnelAuth:void 0},session:i,shrinkBudget:e.shrinkBudget,trail:l,now:()=>new Date().toISOString(),runIdFor:p=>`explore-${_a()}-${String(p)}`},a);return o&&await Na({baseStateTest:e.baseStateTest,config:r,lockfileHash:e.lockfileHash,outcome:y,stepSources:Fa(d)}),qa(y,d)}function Fa(e){return e.flatMap(r=>{let n=r.label.split("#")[0]??r.label;return r.actions.map(()=>n)})}async function Na({baseStateTest:e,config:r,lockfileHash:n,outcome:t,stepSources:o}){t.kind!=="finding"||t.captureEvents.length===0||await mn({baseState:t.finding.baseState,branchName:void 0,category:Ua(t.finding.verifierLayer),commitSha:void 0,config:r,debugDir:Et.join(r.cwd,".ripplo","debug"),devSessionId:void 0,events:t.captureEvents,lockfileHash:n,runId:t.runId,signature:t.finding.signature,spec:Ma(e,t.captureEvents),stepSources:o}).catch(i=>{$.warn({error:i},"explore finding report failed")})}function Ua(e){return e==="data-rule"?"dataRule":e==="page-rule"?"pageRule":e}function Ma(e,r){let n=r.flatMap(o=>o.kind==="step"?[o.source]:[]),t={absent:e.absent,exclusive:e.exclusive,intent:e.intent,maybe:[],name:e.name,params:e.params,singletons:e.singletons,steps:n,stub:!1,tests:[],world:e.world};return JSON.stringify(t)}function Ha(e,r){return r.flatMap(n=>{let t=e[n.idx];return t==null?[]:[{actions:[...t.nav,...t.steps].map(o=>Qr(o.action)),label:`${t.test}#${String(t.index)}`}]})}async function Wa({assign:e,corpus:r,lockfile:n}){return(await nn(n,{name:Xe(e.baseStateTest),test:e.baseStateTest},{generate:we,materialize:qr(we,n.valueSpaces),params:void 0})).match(o=>rn({actionHashes:r.map(i=>ve(n,i)),baseStateSnapshot:o.snapshot,corpus:r,covered:new Set,lens:hn(n),lensId:e.lensId,maxLength:e.maxLength,witnessTrail:e.stepRuns}),()=>null)}function qa(e,r){return e.kind==="error"?{kind:e.kind,reason:`runtime:${e.error.kind}`,rows:[],trail:[]}:e.kind==="aborted"?{kind:e.kind,rows:[],trail:[]}:{kind:e.kind,rows:[...e.rows],trail:[...r]}}var Va={covered:0,deferred:0,findings:0,saturated:!1,total:0};async function $t(e){let r=w(e.cwd).match(d=>({config:d}),d=>({failure:d}));if("failure"in r)return{failure:r.failure,kind:"config-failed"};let n=r.config,t=await Tr(e.cwd);if(t.result.isErr())return{error:t.result.error,kind:"compile-failed"};let o={fingerprint:t.fingerprint,lockfile:t.result.value},i=gn({onChange:()=>{}});if(!i.holder())return i.stop(),{kind:"explorer-busy"};let a=be({clientVersion:P(),debugDir:Ba.join(e.cwd,".ripplo","debug"),headed:e.headed,writeOtlpPortFile:!1}),s={executed:0,status:()=>Va},l=yn({cwd:e.cwd,maxTrailLength:e.maxLength,executeTrail:(d,y)=>Ae({assign:d,config:n,headed:e.headed,lockfile:o.lockfile,report:!0,session:a,signal:y}),loadLockfile:()=>Promise.resolve(o),notifyWork:()=>{},onTrailDone:d=>{s.executed+=1,e.onTrail(s.executed,d,s.status())},probeApp:async()=>await oe(n.appUrl)==null});s.status=()=>l.status();try{await l.ready(),e.onReady(l.status());let d=await Ga(l,e),y=l.status();return await l.stop(),await a.close(),d===0&&y.total===0?{kind:"no-work"}:{executed:d,kind:"completed",progress:y}}finally{i.stop()}}async function Ga(e,r){let n=new AbortController().signal,t=async o=>{if(o>=r.trails)return o;let i=e.next();return i==null?o:(await i.run(n),t(o+1))};return t(0)}import{okAsync as za}from"neverthrow";function It(e,r,n){let t=er(e);return Ze(t).andThen(o=>{let i=Ja(o,r);return i==null?za({id:r,kind:"not-found"}):Zr(t,[{at:n,kind:"resolution",signature:i}]).map(()=>({id:r,kind:"dismissed",signature:i}))})}function jt(e,r){let n=er(e);return Ze(n).andThen(t=>{let o=new Set(K(r).map(d=>ve(r,d))),i=new Set(Ka(t).filter(d=>!o.has(d.actionHash)).map(d=>d.signature)),a=Qa(t),s=t.filter(d=>Xa(d,o,a)),l=[...a].filter(d=>!i.has(d)).length;return en(n,s).map(()=>({kept:s.length,removedResolved:l,removedStale:i.size}))})}function Ja(e,r){return[...Ye(e).findings.entries()].find(([t,o])=>o.resolvedAt==null&&Yr(t)===r)?.[0]}function Ka(e){return e.filter(r=>r.kind==="finding")}function Qa(e){return new Set([...Ye(e).findings.entries()].filter(([,r])=>r.resolvedAt!=null).map(([r])=>r))}function Xa(e,r,n){return e.kind==="resolution"?!1:e.kind==="finding"?r.has(e.actionHash)&&!n.has(e.signature):!0}function At(e){if(e.pending.length===0&&e.recurrentFlaky.length===0)return"explore: no pending findings";let r=e.pending.length===0?[]:[`explore: ${S(e.pending.length,"pending finding")} \u2014 triage in layer order, top first`,...e.pending.map(o=>Ya(o))],n=e.recurrentFlaky.length===0?[]:[`recurrent flaky-candidates (same failure ${String(e.recurrentFlaky.length)}x, no deterministic repro \u2014 triage after findings):`,...e.recurrentFlaky.map(o=>rl(o))],t=c("fuzz","triaging each finding (evidence -> classify -> fix -> replay)");return[...r,...n,"","replay after a fix: npx ripplo explore replay <id>",t].join(`
-`).trim()}function Tt(e,r){switch(r.kind){case"resolved":return`explore: ${e} replayed clean \u2014 finding resolved, its targets covered under the current workflows`;case"unreachable":return`explore: ${e}'s trail is no longer plannable under the current workflows \u2014 finding resolved (if you narrowed a given/when, make sure a test covers the excluded state)`;case"still-failing":{let n=r.runId==null?"":` (fresh evidence: run ${r.runId})`;return`explore: ${e} still reproduces \u2014 same failure signature${n}`}case"diverged":{let n=r.runId==null?"":` (captured run ${r.runId})`;return`explore: ${e} failed with a different failure signature \u2014 new finding recorded${n}`}case"flaky":return`explore: ${e} did not reproduce deterministically \u2014 recorded as flaky-candidate, finding stays pending`;case"aborted":return`explore: replay of ${e} was aborted`;case"finding-not-found":return`explore: no pending finding ${e} \u2014 check ids with: npx ripplo explore findings`;case"unreplayable":return`explore: ${e} cannot be replayed (${r.reason})`;case"error":return`explore: replay of ${e} failed (${r.reason})`}}function Lt({executed:e,progress:r,trail:n}){let t=n.trail.flatMap(o=>[`      ${o.label}`,...o.actions.map(i=>`        ${i}`)]);return[`trail ${String(e)} ${n.kind} \u2014 ${se(r)}`,...t,`      state: ${n.label}`].join(`
-`)}function Dt(e){switch(e.kind){case"config-failed":return E(e.failure);case"compile-failed":return v(e.error);case"no-work":return"explore: nothing to explore \u2014 no runnable actions found in your workflows";case"explorer-busy":return"explore: another explorer holds the machine lock (likely the daemon's background explorer) \u2014 watch it with `npx ripplo status`, or stop it to explore in the foreground";case"completed":return`${`explore: ${String(e.executed)} trails executed`}
-${se(e.progress)}
-findings land in .ripplo/.local/explore-ledger.jsonl`}}function Ot(e){let r=e.evidence.map(t=>`    ${t}`),n=e.runId==null?["  no captured run \u2014 replay to capture one"]:[`  run: ${e.runId}`,`  behavior: .ripplo/debug/${e.runId}/behavior.jsonl`];return[`${e.id}  layer=${e.verifierLayer}  start=${e.baseState}`,`  seen ${String(e.occurrences)}x between ${lr(e.firstSeen)} and ${lr(e.lastSeen)}`,`  trail: ${e.trail.join(" -> ")}`,"  evidence:",...r,...n,`  replay after a fix: npx ripplo explore replay ${e.id}`].join(`
-`)}function dr(e){return`explore: no pending finding ${e} \u2014 check ids with: npx ripplo explore findings`}function _t(e){return e.kind==="not-found"?dr(e.id):`explore: dismissed finding ${e.id}. Prune the log to drop it: npx ripplo explore prune`}function Ft(e){if(e.removedStale+e.removedResolved===0)return"explore: nothing to prune \u2014 the findings log has no stale or dismissed entries.";let n=S(e.removedStale,"stale finding"),t=S(e.removedResolved,"dismissed finding");return`explore: pruned ${n} and ${t}, ${S(e.kept,"row")} kept.`}function Ya(e){let r=e.runId==null?"no captured run":`run ${e.runId}`;return[`  ${e.id}  layer=${e.verifierLayer}  seen ${String(e.occurrences)}x (last ${lr(e.lastSeen)})  start=${e.baseState}  ${r}`,`      mismatch: ${Za(e.parts)}`,`      trail: ${e.trail.join(" -> ")}`].join(`
-`)}function lr(e){return e.slice(0,16).replace("T"," ")}function Za(e){let r=e.at(0);if(r==null)return"no parts recorded";let n=e.length>1?` (+${String(e.length-1)} more)`:"";return`${el(r)}${n}`}function el(e){switch(e.kind){case"consistency":{let r="entity"in e.mismatch?e.mismatch.entity:e.mismatch.singleton,n=e.step==null?"":` at "${e.step.intent}"`;return`${e.mismatch.kind} on ${r}${n}`}case"pending-check":return`${e.source} check failed at "${e.step.intent}"`;case"unrunnable":return`step "${e.intent}" could not run (${e.reason})`;case"driver-error":return`${e.error} at "${e.step}"`;case"impossible-action":return`impossible action at "${e.step}"`}}function rl(e){let r=e.trail.map(n=>n.split("|").at(0)??n);return`  ${e.id}  seen ${String(e.occurrences)}x  start=${e.baseState}
-      trail: ${r.join(" -> ")}`}import{spawn as nl}from"child_process";import Nt from"fs";import tl from"net";import{setTimeout as cr}from"timers/promises";import{err as G,ok as ce}from"neverthrow";import{ResponseError as ol}from"vscode-jsonrpc/node";var Mt=12e4,Ht=300,Ut=5e3;async function Te({cliEntry:e,cwd:r}){let n=V(r),t=await q(n);return t!=null?Bt({cliEntry:e,connection:pe(t,!1),cwd:r}):qt({cliEntry:e,cwd:r,versionNote:void 0})}async function Wt({cliEntry:e,cwd:r}){let n=await q(V(r));return n==null?G({kind:"not-running"}):Bt({cliEntry:e,connection:pe(n,!1),cwd:r})}async function qt({cliEntry:e,cwd:r,versionNote:n}){let t=cl({cliEntry:e,cwd:r});if(t!=null)return G(t);let o=await pl(V(r));return o==null?G({deadlineMs:Mt,kind:"connect-timeout",logPath:rr(r)}):ce({...pe(o,!0),versionNote:n})}async function Bt({cliEntry:e,connection:r,cwd:n}){let t=await zt(r);if(t==null||t.version===P())return ce(r);let o={daemonVersion:t.version};return await il(r)?(r.socket.destroy(),await al(V(n))?qt({cliEntry:e,cwd:n,versionNote:{...o,kind:"restarted"}}):G({kind:"connection-lost"})):ce({...r,versionNote:{...o,kind:"stale-busy"}})}async function il(e){try{return await e.rpc.sendRequest(Se)}catch{return!1}}var sl=1e4;async function al(e){let r=Date.now()+sl,n=await q(e);for(;n!=null&&Date.now()<r;)n.destroy(),await cr(Ht),n=await q(e);return n?.destroy(),n==null}async function Le({connection:e,onEvent:r,request:n,token:t}){let o=await ll({connection:e,onEvent:r,request:n,token:t});return o.kind==="transport"?G(o.error):ce(o)}async function Vt({connection:e,findingId:r,token:n}){try{let t=await e.rpc.sendRequest(In,{findingId:r},n),o=$n.safeParse(t);return o.success?ce(o.data):G({kind:"bad-frame"})}catch{return G({kind:"connection-lost"})}}async function Gt(e){let r=await q(V(e));if(r==null)return!1;let n=pe(r,!1);try{return await n.rpc.sendRequest(Se)}catch{return!1}finally{r.destroy()}}async function De(e){try{await e.rpc.sendRequest(Se)}catch{}}async function Oe(e){let r=await q(V(e));if(r==null)return{kind:"not-running"};let n=pe(r,!1),t=await Promise.race([zt(n),cr(Ut).then(()=>null)]);return r.destroy(),t==null?{kind:"unresponsive",timeoutMs:Ut}:{kind:"running",status:t}}async function zt(e){try{let r=await e.rpc.sendRequest(An),n=Rn.safeParse(r);return n.success?n.data:null}catch{return null}}function ll({connection:e,onEvent:r,request:n,token:t}){let{rpc:o}=e;return new Promise(i=>{let a=s=>{i(s)};o.onNotification(Tn,s=>{let l=Cn.safeParse(s);if(!l.success){a({error:{kind:"bad-frame"},kind:"transport"});return}r(l.data.event)}),o.onNotification(Ln,s=>{let l=Pn.safeParse(s);if(!l.success){a({error:{kind:"bad-frame"},kind:"transport"});return}a({failed:l.data.failed,kind:"done",notRun:l.data.notRun,passed:l.data.passed})}),o.onClose(()=>{a({error:{kind:"connection-lost"},kind:"transport"})}),o.sendRequest(jn,n,t).then(s=>{xn.safeParse(s).success||a({error:{kind:"bad-frame"},kind:"transport"})}).catch(s=>{a(dl(s))})})}function dl(e){if(e instanceof ol){let r=En.safeParse(e.data);return r.success?{error:r.data,kind:"daemon-error"}:{error:{kind:"bad-frame"},kind:"transport"}}return{error:{kind:"connection-lost"},kind:"transport"}}function pe(e,r){let n=Sn(e);return n.listen(),{rpc:n,socket:e,spawned:r,versionNote:void 0}}function q(e){return new Promise(r=>{let n=tl.connect(e);n.once("connect",()=>{r(n)}),n.once("error",()=>{r(null)})})}function cl({cliEntry:e,cwd:r}){try{he(r);let n=Nt.openSync(rr(r),"a");return nl(process.execPath,[e,"daemon"],{cwd:r,detached:!0,stdio:["ignore",n,n]}).unref(),Nt.closeSync(n),null}catch(n){return{kind:"spawn-failed",message:n instanceof Error?n.message:String(n)}}}async function pl(e){let r=Date.now()+Mt,n=await q(e);for(;n==null&&Date.now()<r;)await cr(Ht),n=await q(e);return n}import ml from"fuse.js";var ul=3e3;async function _e(e){B(e);let r=w(e).unwrapOr(void 0);if(r==null)return null;try{return await fetch(`${r.ripploServerUrl}/health`,{signal:AbortSignal.timeout(ul)}),null}catch(n){return{detail:n instanceof Error?n.message:String(n),serverUrl:r.ripploServerUrl}}}function Fe(e){return e.includes("localhost")||e.includes("127.0.0.1")}function pr(e){switch(e.kind){case"conflicting-flags":return"Pass either --all or test ids, not both.";case"nothing-selected":return`No tests selected \u2014 scope is empty and no .ripplo/workflows files are dirty. Pass test ids, add workflows to scope (${c("run")}), or use --all.`;case"unknown-ids":{let r=e.known,n=e.unknown.flatMap(o=>yl(o,r)),t=n.length>0?[`Did you mean: ${[...new Set(n)].join(", ")}`]:[];return[`Unknown ${e.unknown.length===1?"id":"ids"}: ${e.unknown.join(", ")}`,...t,"Pass a workflow slug to run all its tests, or workflow/test for one. Known workflows:",...r.map(o=>`  ${o}`)].join(`
-`)}}}function Jt({failed:e,notRun:r,passed:n}){let t=r>0?`, ${String(r)} not run`:"",o=e>0?`
-${c("run")}`:"";return`${String(n)} passed, ${String(e)} failed${t} (${String(n+e+r)} total)${o}`}function Ne({debugDir:e,event:r}){let n=`${r.workflowName} \u2192 ${r.testName}`;if(r.kind==="test-started")return`${C.dim("run ")} ${n}`;switch(r.outcome.kind){case"pass":return`${C.good("pass")} ${n}`;case"findings":return[`${C.bad("fail")} ${n} \u2014 ${S(r.outcome.findingLines.length,"finding")}`,...r.outcome.findingLines,Jr({debugDir:e,runId:r.runId})].join(`
-`);case"error":return`${C.bad("error")} ${n} \u2014 ${r.outcome.detail}`;case"dispatch-error":return`${C.bad("error")} ${n} \u2014 ${hl(r.outcome.reason)}`;case"dispatch-timeout":return`${C.bad("error")} ${n} \u2014 not run: dispatch timed out (transient): ${r.outcome.detail}`;case"infra-error":return`${C.bad("error")} ${n} \u2014 not run: Ripplo server unreachable (server-side, not local): ${r.outcome.detail}`}}var fl={MAX_AGENTS:"agent limit reached for your plan \u2014 upgrade to add more",MAX_CONCURRENT_RUNS:"concurrent run limit reached for your plan \u2014 upgrade or wait for runs to finish",MAX_PROJECTS:"project limit reached for your plan \u2014 upgrade to add more",MAX_RUNS:"run limit reached for your plan \u2014 enable overage or upgrade",OVERAGE_CAP:"overage cap reached \u2014 raise the cap or upgrade"};function Ue({detail:e,serverUrl:r}){return Fe(r)?`Ripplo server at ${r} is not running (${e}). Tests were not started. Start the dev server (\`pnpm dev\`) and re-run.`:`Ripplo server at ${r} is unreachable (${e}). Tests were not started. This is a server-side issue, not your local environment \u2014 wait a moment and re-run.`}function Me(e){switch(e.code){case"compile-failed":{let r=e.diagnostics.length===0?[]:["",...e.diagnostics];return[`Compilation failed in the daemon (${e.detail}). Run \`npx ripplo compile\` for the full output.`,...r].join(`
-`)}case"selection-conflicting-flags":return pr({kind:"conflicting-flags"});case"selection-nothing-selected":return pr({kind:"nothing-selected"});case"selection-unknown-ids":return pr({kind:"unknown-ids",known:e.known,unknown:e.unknown});case"app-unreachable":return`Your dev server is not responding at ${e.url} (${e.detail}). Tests were not started \u2014 start your app and re-run. This is your local environment, not the Ripplo server.`;case"scope-failed":return`Could not resolve the dev-session scope: ${e.detail}
-Verify the dev session is live (\`npx ripplo doctor\`, ${c("start")}), or pass test ids / --all explicitly.`;case"sync-failed":{let r=/401|unauthor/i.test(e.detail)?"\nLooks like an auth failure \u2014 run `npx ripplo auth login` and retry.":"";return`Sync to the Ripplo server failed: ${e.detail}${r}`}case"bad-message":return"Daemon rejected the request (protocol mismatch \u2014 rebuild/update the CLI and restart the daemon)."}}function T(e){switch(e.kind){case"spawn-failed":return`Failed to start \`npx ripplo daemon\`: ${gl(e.message)}`;case"connect-timeout":return[`Daemon did not come up within ${String(Math.round(e.deadlineMs/1e3))}s.`,`Check ${e.logPath} for startup errors.`,"Common causes: a stale socket (`rm .ripplo/.local/daemon.sock`), another daemon holding the dev lock, or the Ripplo server unreachable."].join(`
-`);case"connection-lost":return["Lost the daemon connection mid-run \u2014 it likely crashed or was killed.","Check .ripplo/.local/daemon.log, restart `npx ripplo daemon`, then rerun."].join(`
-`);case"not-running":return["No ripplo daemon running for this directory \u2014 nothing to dispatch to.","Start it with `npx ripplo daemon` as a background process (separate from your app's dev server), then rerun.","A run needs a live daemon to dispatch and to register the result to your dev session."].join(`
-`);case"bad-frame":return"Received a malformed frame from the daemon (version mismatch \u2014 rebuild/update the CLI and restart the daemon)."}}function gl(e){return e.includes("ENOENT")?`${e} \u2014 the node executable or CLI entry was not found on PATH.`:e.includes("EACCES")?`${e} \u2014 permission denied executing the CLI entry.`:e}function hl(e){return e.type==="limit"?fl[e.code]:`failed to dispatch (${e.detail})`}function yl(e,r){return new ml(r,{includeScore:!0,threshold:.5}).search(O(e)).slice(0,3).map(t=>t.item)}async function Kt({findingId:e,json:r}){await kn(process.cwd()).match(n=>{if(e==null){let i=r?JSON.stringify(n,null,2):At(n);process.stdout.write(`${i}
-`);return}let t=n.pending.find(i=>i.id===e);t==null&&(process.stderr.write(`${dr(e)}
-`),process.exit(1));let o=r?JSON.stringify(t,null,2):Ot(t);process.stdout.write(`${o}
-`)},n=>{process.stderr.write(`explore: findings log unreadable (${n.kind})
-`),process.exit(1)})}async function Qt({findingId:e}){let r=process.argv[1];r==null&&(process.stderr.write(`${T({kind:"spawn-failed",message:"process.argv[1] missing"})}
-`),process.exit(1));let n=await Te({cliEntry:r,cwd:process.cwd()});n.isErr()&&(process.stderr.write(`${T(n.error)}
-`),process.exit(1));let t=n.value,o=new kl;process.once("SIGINT",()=>{o.cancel(),t.socket.destroy(),process.exit(130)});let a=await(await Vt({connection:t,findingId:e,token:o.token})).match(async s=>(process.stdout.write(`${Tt(e,s)}
-`),t.spawned&&await De(t),s.kind==="resolved"||s.kind==="unreachable"?0:1),s=>(process.stderr.write(`${T(s)}
-`),Promise.resolve(1)));t.socket.destroy(),process.exit(a)}async function Xt({findingId:e}){let r=new Date().toISOString();await It(process.cwd(),e,r).match(async n=>{n.kind==="dismissed"&&await wl(n.signature),process.stdout.write(`${_t(n)}
-`),process.exit(n.kind==="dismissed"?0:1)},n=>{process.stderr.write(`explore: findings log unreadable (${n.kind})
-`),process.exit(1)})}async function Yt(){let e=await x(process.cwd());e.isErr()&&(process.stderr.write(`${v(e.error)}
-`),process.exit(1)),await jt(process.cwd(),e.value).match(r=>{process.stdout.write(`${Ft(r)}
-`)},r=>{process.stderr.write(`explore: findings log unreadable (${r.kind})
-`),process.exit(1)})}async function wl(e){await w(process.cwd()).match(r=>fn(r,e,"dismissed").catch(n=>{$.warn({error:n},"explore finding status push failed")}),r=>{$.warn({failure:r},"explore finding dismiss not synced: config unavailable")})}async function Zt(e){let r=await $t({cwd:process.cwd(),headed:e.headed,maxLength:e.maxLength,trails:e.trails,onReady:n=>{process.stdout.write(`${se(n)}
-`)},onTrail:(n,t,o)=>{process.stdout.write(`${Lt({executed:n,progress:o,trail:t})}
-`)}});process.stdout.write(`${Dt(r)}
-`),(r.kind==="config-failed"||r.kind==="compile-failed")&&process.exit(1)}import{graphql as vl}from"gql.tada";var bl=vl(`
+`)}function Ce(e){let t=e.workflows.filter(o=>!o.stub);if(t.length===0)return[];let r=new Set(t.flatMap(o=>ea(o))),n=new Set(t.flatMap(o=>ta(o)));return[...e.entities.filter(o=>!r.has(o.name)).map(o=>({entity:o.name,kind:"entity-never-given"})),...e.entities.filter(o=>r.has(o.name)&&!n.has(o.name)).map(o=>({entity:o.name,kind:"entity-never-mutated"})),...t.flatMap(o=>o.tests.flatMap(i=>ra(i)))]}function ea(e){return[...e.world,...e.maybe].map(t=>t.entity)}function ta(e){return e.steps.flatMap(t=>t.expect.flatMap(r=>ie(r))).map(t=>t.entity)}function ra(e){let t=e.steps.flatMap(r=>r.expect.flatMap(n=>ie(n)));return na({states:t,test:e})}function na({states:e,test:t}){let r=e.filter(n=>n.assertion.kind==="deleted").flatMap(n=>oa({predicate:n,test:t})).map(({entity:n,field:o})=>({entity:n,field:o,kind:"unmatchable-delete-key",testSlug:t.slug,workflow:t.workflow}));return aa(r)}function oa({predicate:e,test:t}){let r=t.world.filter(n=>n.entity===e.entity);return r.length===0?[]:Object.entries(e.key).filter(([n,o])=>sa(o)&&!ia({field:n,setups:r})).map(([n])=>({entity:e.entity,field:n}))}function ia({field:e,setups:t}){return t.some(r=>Object.keys(r.set).includes(e))}function sa(e){return e===null||typeof e!="object"}function aa(e){return e.filter((t,r)=>e.findIndex(n=>JSON.stringify(n)===JSON.stringify(t))===r)}function ie(e){return e.kind==="state"?[e]:e.kind==="not"?ie(e.predicate):e.kind==="and"?e.predicates.flatMap(t=>ie(t)):e.kind==="when"?e.branches.flatMap(t=>t.consequence.flatMap(r=>ie(r))):[]}async function rn(){let e=process.cwd(),r=(await S(e)).match(o=>o,o=>la(R(o))),n=M(r);if(n.length===0){let o=Ce(r);o.length>0&&process.stdout.write(`${we(o)}
+`);let i=r.workflows.reduce((s,a)=>s+a.tests.length,0);process.stdout.write(`${Ur(i)}
+`);return}process.stderr.write(`${H(n)}
+`),process.exit(1)}function la(e){process.stderr.write(`${e}
+`),process.exit(1)}import{graphql as da}from"gql.tada";var ca=da(`
   query ProjectsList {
     projects {
       id
       name
     }
   }
-`);async function eo(){let e=I(),r=D(e);r==null&&(process.stderr.write("Not signed in. Run `npx ripplo auth login` first.\n"),process.exit(1));let t=((await m({config:U({serverUrl:e,token:r}),document:bl,variables:void 0})).projects??[]).map(o=>({id:o.id,name:o.name}));process.stdout.write(`${JSON.stringify({projects:t},null,2)}
-`)}import{graphql as Sl}from"gql.tada";function ro({id:e,kind:r,title:n}){return`Caught bug reported (${r}): "${n}" [${e}]`}var xl=Sl(`
+`);async function nn(){let e=$(),t=D(e);t==null&&(process.stderr.write("Not signed in. Run `npx ripplo auth login` first.\n"),process.exit(1));let n=((await m({config:F({serverUrl:e,token:t}),document:ca,variables:void 0})).projects??[]).map(o=>({id:o.id,name:o.name}));process.stdout.write(`${JSON.stringify({projects:n},null,2)}
+`)}import{graphql as ua}from"gql.tada";function on({id:e,kind:t,title:r}){return`Caught bug reported (${t}): "${r}" [${e}]`}var pa=ua(`
   mutation ReportCaughtBug(
     $projectId: String!
     $kind: CaughtBugKind!
@@ -282,22 +251,57 @@ Verify the dev session is live (\`npx ripplo doctor\`, ${c("start")}), or pass t
       }
     }
   }
-`);async function no(e){let r=A(),t=(await m({config:r,document:xl,variables:{kind:e.kind,projectId:r.projectId,rootCause:e.rootCause,runId:e.runId,surfacedBy:e.surfacedBy,title:e.title}})).reportCaughtBug;if(t?.__typename!=="CaughtBug"){let o=t?.__typename==="RunNotFoundError"?t.message:null;process.stderr.write(`${o??"reportCaughtBug failed"}
-`),process.exit(1)}process.stdout.write(`${ro({id:t.id,kind:e.kind,title:e.title})}
-`)}import Rl from"path";import{CancellationTokenSource as Cl}from"vscode-jsonrpc/node";async function to({all:e,headed:r,ids:n}){let t=process.cwd(),o=process.argv[1];o==null&&ue(T({kind:"spawn-failed",message:"process.argv[1] missing"}));let i=await _e(t);i!=null&&ue(Ue(i));let s=(await Wt({cliEntry:o,cwd:t})).match(u=>u,u=>ue(T(u)));s.versionNote!=null&&process.stderr.write(`${vn(s.versionNote)}
-`);let l=new Cl;process.once("SIGINT",()=>{l.cancel(),s.socket.destroy(),process.exit(130)});let d=Rl.join(t,".ripplo","debug"),p=(await Le({connection:s,request:{all:e,headed:r,tests:[...n]},token:l.token,onEvent:u=>{let z=Ne({debugDir:d,event:u});z!=null&&process.stdout.write(`${z}
-`)}})).match(u=>u,u=>ue(T(u)));await Pl({connection:s,result:p})}async function Pl({connection:e,result:r}){await new Promise(n=>{e.socket.end(n)}),r.kind==="daemon-error"&&ue(Me(r.error)),process.stdout.write(`${Jt(r)}
-`),r.failed>0&&process.exit(1),process.exit(r.notRun>0?2:0)}function ue(e){process.stderr.write(`${e}
-`),process.exit(1)}import oo from"path";import{err as We,ok as ur}from"neverthrow";async function io(){let e=process.cwd(),r=$.child({worker:process.pid}),n=qn(),t=be({clientVersion:P(),debugDir:oo.join(e,".ripplo","debug"),headed:!1,writeOtlpPortFile:!1}),o={entry:void 0},i=a=>{t.close().catch(()=>{}).then(()=>{process.exit(a)})};process.on("disconnect",()=>{i(1)}),process.on("unhandledRejection",a=>{r.error({err:a},"worker unhandled rejection")}),process.on("uncaughtException",a=>{r.error({err:a},"worker uncaught exception"),i(1)}),n.onRequest(Nn,async(a,s)=>{let l=Dn.safeParse(a);if(!l.success)return He("bad-run-assign");let d=l.data;B(e);let y=w(e).match(j=>j,j=>j.kind);if(typeof y=="string")return He(`config:${y}`);let p=await so(d.lockfileFingerprint,o,n);if(p.isErr())return He(`lockfile-unavailable:${p.error}`);let u=p.value,z=Br(u).find(j=>j.ref===d.testRef);if(z==null)return He(`no-test:${d.testRef}`);try{let j=await un({config:y,cwd:e,fixturesDir:oo.join(e,ye),headed:d.headed,lockfile:u,runId:d.runId,session:t,signal:nr(s),test:z.test});return{outcome:bn(j),serverNotified:!0}}catch(j){if(j instanceof vr)return{outcome:{detail:j.message,kind:"infra-error"},serverNotified:!1};throw j}}),n.onRequest(Mn,(a,s)=>El({cache:o,connection:n,cwd:e,raw:a,session:t,token:s})),n.onNotification(Hn,a=>{let s=On.safeParse(a);s.success&&t.injectSpan(s.data.runId,s.data.span)}),n.onNotification(Wn,()=>{i(0)}),n.sendNotification(Fn),await new Promise(()=>{})}function He(e){return{outcome:{detail:e,kind:"error"},serverNotified:!1}}async function El({cache:e,connection:r,cwd:n,raw:t,session:o,token:i}){let a=_n.safeParse(t);if(!a.success)return{kind:"error",reason:"bad-assign",rows:[],trail:[]};let s=a.data;B(n);let l=w(n).match(p=>p,p=>p.kind);if(typeof l=="string")return{kind:"error",reason:`config:${l}`,rows:[],trail:[]};let d=await so(s.lockfileFingerprint,e,r);if(d.isErr())return{kind:"error",reason:`lockfile:${d.error}`,rows:[],trail:[]};let y=d.value;return Ae({assign:s,config:l,headed:!1,lockfile:y,report:!0,session:o,signal:nr(i)})}async function so(e,r,n){return r.entry!=null&&r.entry.fingerprint===e?ur(r.entry.lockfile):(await $l(n,e)).andThen(o=>o.unavailable!=null?We(o.unavailable):o.lockfileJson==null?We("empty-reply"):Il(o.lockfileJson).map(i=>(r.entry={fingerprint:e,lockfile:i},i)))}async function $l(e,r){try{return ur(await e.sendRequest(Un,{fingerprint:r}))}catch(n){return We(`transport:${n instanceof Error?n.message:"unknown"}`)}}function Il(e){try{return ur(Ar(N,e))}catch(r){return We(`worker-decode-failed:${r instanceof Error?r.message.slice(0,200):"unknown"}`)}}async function ao(){await io()}import uo from"path";import{existsSync as jl}from"fs";import{writeFile as lo}from"fs/promises";import co from"path";import{err as me,ok as Al}from"neverthrow";async function po({jsonlPath:e,moment:r,outDir:n,runId:t}){if(!jl(e))return me({kind:"run-not-found",runId:t});let o=await tn(e),i=o[0],a=o.at(-1);if(i==null||a==null)return me({kind:"no-rrweb-events",runId:t});let s=a.timestamp-i.timestamp,l=r.kind==="offset"?r.offsetMs:r.at-i.timestamp;if(l<0)return me({durationMs:s,firstTimestamp:i.timestamp,kind:"moment-out-of-range",lastTimestamp:a.timestamp,moment:r});let d=Math.min(l,s),y=String(Math.round(d)),p=co.join(n,`snapshot-${y}ms.png`),u=co.join(n,`snapshot-${y}ms.html`);return(await Tl({events:o,htmlPath:u,offsetMs:d,pngPath:p})).map(()=>({durationMs:s,htmlPath:u,offsetMs:d,pngPath:p}))}async function Tl({events:e,htmlPath:r,offsetMs:n,pngPath:t}){let o=await dn();if(o==null)return me({detail:"chromium launch",kind:"browser-failed"});try{let{html:i,png:a}=await Ll({browser:o,events:e,offsetMs:n});return await lo(t,a),await lo(r,i,"utf8"),Al(void 0)}catch(i){return me({detail:i instanceof Error?i.message:String(i),kind:"browser-failed"})}finally{await o.close()}}async function Ll({browser:e,events:r,offsetMs:n}){let t=on(r),o=await e.newPage({viewport:t});await o.setContent(sn(!1)),await o.addScriptTag({content:await cn()}),await o.evaluate(Dl({events:r,offsetMs:n})),await o.evaluate(ln());let i=o.locator(".replayer-wrapper iframe").first(),s=await(await i.count()>0?i:o).screenshot({type:"png"});return{html:await o.evaluate(Ol()),png:s}}function Dl({events:e,offsetMs:r}){return`(() => {
+`);async function sn(e){let t=I(),n=(await m({config:t,document:pa,variables:{kind:e.kind,projectId:t.projectId,rootCause:e.rootCause,runId:e.runId,surfacedBy:e.surfacedBy,title:e.title}})).reportCaughtBug;if(n?.__typename!=="CaughtBug"){let o=n?.__typename==="RunNotFoundError"?n.message:null;process.stderr.write(`${o??"reportCaughtBug failed"}
+`),process.exit(1)}process.stdout.write(`${on({id:n.id,kind:e.kind,title:e.title})}
+`)}import ja from"path";import{CancellationTokenSource as Ia}from"vscode-jsonrpc/node";import{spawn as ma}from"child_process";import an from"fs";import fa from"net";import{setTimeout as Ze}from"timers/promises";import{err as se,ok as xe}from"neverthrow";import{ResponseError as ga}from"vscode-jsonrpc/node";var dn=12e4,cn=300,ln=5e3;async function un({cliEntry:e,cwd:t}){let r=V(t),n=await q(r);return n!=null?fn({cliEntry:e,connection:ae(n,!1),cwd:t}):mn({cliEntry:e,cwd:t,versionNote:void 0})}async function pn({cliEntry:e,cwd:t}){let r=await q(V(t));return r==null?se({kind:"not-running"}):fn({cliEntry:e,connection:ae(r,!1),cwd:t})}async function mn({cliEntry:e,cwd:t,versionNote:r}){let n=ba({cliEntry:e,cwd:t});if(n!=null)return se(n);let o=await Sa(V(t));return o==null?se({deadlineMs:dn,kind:"connect-timeout",logPath:Ve(t)}):xe({...ae(o,!0),versionNote:r})}async function fn({cliEntry:e,connection:t,cwd:r}){let n=await yn(t);if(n==null||n.version===P())return xe(t);let o={daemonVersion:n.version};return await ha(t)?(t.socket.destroy(),await ka(V(r))?mn({cliEntry:e,cwd:r,versionNote:{...o,kind:"restarted"}}):se({kind:"connection-lost"})):xe({...t,versionNote:{...o,kind:"stale-busy"}})}async function ha(e){try{return await e.rpc.sendRequest(he)}catch{return!1}}var ya=1e4;async function ka(e){let t=Date.now()+ya,r=await q(e);for(;r!=null&&Date.now()<t;)r.destroy(),await Ze(cn),r=await q(e);return r?.destroy(),r==null}async function Pe({connection:e,onEvent:t,request:r,token:n}){let o=await wa({connection:e,onEvent:t,request:r,token:n});return o.kind==="transport"?se(o.error):xe(o)}async function gn(e){let t=await q(V(e));if(t==null)return!1;let r=ae(t,!1);try{return await r.rpc.sendRequest(he)}catch{return!1}finally{t.destroy()}}async function hn(e){try{await e.rpc.sendRequest(he)}catch{}}async function Ee(e){let t=await q(V(e));if(t==null)return{kind:"not-running"};let r=ae(t,!1),n=await Promise.race([yn(r),Ze(ln).then(()=>null)]);return t.destroy(),n==null?{kind:"unresponsive",timeoutMs:ln}:{kind:"running",status:n}}async function yn(e){try{let t=await e.rpc.sendRequest(nr),r=Yt.safeParse(t);return r.success?r.data:null}catch{return null}}function wa({connection:e,onEvent:t,request:r,token:n}){let{rpc:o}=e;return new Promise(i=>{let s=a=>{i(a)};o.onNotification(or,a=>{let l=Zt.safeParse(a);if(!l.success){s({error:{kind:"bad-frame"},kind:"transport"});return}t(l.data.event)}),o.onNotification(ir,a=>{let l=er.safeParse(a);if(!l.success){s({error:{kind:"bad-frame"},kind:"transport"});return}s({failed:l.data.failed,kind:"done",notRun:l.data.notRun,passed:l.data.passed})}),o.onClose(()=>{s({error:{kind:"connection-lost"},kind:"transport"})}),o.sendRequest(rr,r,n).then(a=>{Xt.safeParse(a).success||s({error:{kind:"bad-frame"},kind:"transport"})}).catch(a=>{s(va(a))})})}function va(e){if(e instanceof ga){let t=tr.safeParse(e.data);return t.success?{error:t.data,kind:"daemon-error"}:{error:{kind:"bad-frame"},kind:"transport"}}return{error:{kind:"connection-lost"},kind:"transport"}}function ae(e,t){let r=Qt(e);return r.listen(),{rpc:r,socket:e,spawned:t,versionNote:void 0}}function q(e){return new Promise(t=>{let r=fa.connect(e);r.once("connect",()=>{t(r)}),r.once("error",()=>{t(null)})})}function ba({cliEntry:e,cwd:t}){try{fe(t);let r=an.openSync(Ve(t),"a");return ma(process.execPath,[e,"daemon"],{cwd:t,detached:!0,stdio:["ignore",r,r]}).unref(),an.closeSync(r),null}catch(r){return{kind:"spawn-failed",message:r instanceof Error?r.message:String(r)}}}async function Sa(e){let t=Date.now()+dn,r=await q(e);for(;r==null&&Date.now()<t;)await Ze(cn),r=await q(e);return r}var Ra=3e3;async function $e(e){B(e);let t=k(e).unwrapOr(void 0);if(t==null)return null;try{return await fetch(`${t.ripploServerUrl}/health`,{signal:AbortSignal.timeout(Ra)}),null}catch(r){return{detail:r instanceof Error?r.message:String(r),serverUrl:t.ripploServerUrl}}}function je(e){return e.includes("localhost")||e.includes("127.0.0.1")}import Ca from"fuse.js";function et(e){switch(e.kind){case"conflicting-flags":return"Pass either --all or test ids, not both.";case"nothing-selected":return`No tests selected \u2014 scope is empty and no .ripplo/workflows files are dirty. Pass test ids, add workflows to scope (${c("run")}), or use --all.`;case"unknown-ids":{let t=e.known,r=e.unknown.flatMap(o=>$a(o,t)),n=r.length>0?[`Did you mean: ${[...new Set(r)].join(", ")}`]:[];return[`Unknown ${e.unknown.length===1?"id":"ids"}: ${e.unknown.join(", ")}`,...n,"Pass a workflow slug to run all its tests, or workflow/test for one. Known workflows:",...t.map(o=>`  ${o}`)].join(`
+`)}}}function kn({failed:e,notRun:t,passed:r}){let n=t>0?`, ${String(t)} not run`:"",o=e>0?`
+${c("run")}`:"";return`${String(r)} passed, ${String(e)} failed${n} (${String(r+e+t)} total)${o}`}function Ie({debugDir:e,event:t}){let r=`${t.workflowName} \u2192 ${t.testName}`;if(t.kind==="test-started")return`${C.dim("run ")} ${r}`;switch(t.outcome.kind){case"pass":return`${C.good("pass")} ${r}`;case"findings":return[`${C.bad("fail")} ${r} \u2014 ${x(t.outcome.findingLines.length,"finding")}`,...t.outcome.findingLines,Ut({debugDir:e,runId:t.runId})].join(`
+`);case"error":return`${C.bad("error")} ${r} \u2014 ${t.outcome.detail}`;case"dispatch-error":return`${C.bad("error")} ${r} \u2014 ${Ea(t.outcome.reason)}`;case"dispatch-timeout":return`${C.bad("error")} ${r} \u2014 not run: dispatch timed out (transient): ${t.outcome.detail}`;case"infra-error":return`${C.bad("error")} ${r} \u2014 not run: Ripplo server unreachable (server-side, not local): ${t.outcome.detail}`}}var xa={MAX_AGENTS:"agent limit reached for your plan \u2014 upgrade to add more",MAX_CONCURRENT_RUNS:"concurrent run limit reached for your plan \u2014 upgrade or wait for runs to finish",MAX_PROJECTS:"project limit reached for your plan \u2014 upgrade to add more",MAX_RUNS:"run limit reached for your plan \u2014 enable overage or upgrade",OVERAGE_CAP:"overage cap reached \u2014 raise the cap or upgrade"};function Ae({detail:e,serverUrl:t}){return je(t)?`Ripplo server at ${t} is not running (${e}). Tests were not started. Start the dev server (\`pnpm dev\`) and re-run.`:`Ripplo server at ${t} is unreachable (${e}). Tests were not started. This is a server-side issue, not your local environment \u2014 wait a moment and re-run.`}function Te(e){switch(e.code){case"compile-failed":{let t=e.diagnostics.length===0?[]:["",...e.diagnostics];return[`Compilation failed in the daemon (${e.detail}). Run \`npx ripplo compile\` for the full output.`,...t].join(`
+`)}case"selection-conflicting-flags":return et({kind:"conflicting-flags"});case"selection-nothing-selected":return et({kind:"nothing-selected"});case"selection-unknown-ids":return et({kind:"unknown-ids",known:e.known,unknown:e.unknown});case"app-unreachable":return`Your dev server is not responding at ${e.url} (${e.detail}). Tests were not started \u2014 start your app and re-run. This is your local environment, not the Ripplo server.`;case"scope-failed":return`Could not resolve the dev-session scope: ${e.detail}
+Verify the dev session is live (\`npx ripplo doctor\`, ${c("start")}), or pass test ids / --all explicitly.`;case"sync-failed":{let t=/401|unauthor/i.test(e.detail)?"\nLooks like an auth failure \u2014 run `npx ripplo auth login` and retry.":"";return`Sync to the Ripplo server failed: ${e.detail}${t}`}case"bad-message":return"Daemon rejected the request (protocol mismatch \u2014 rebuild/update the CLI and restart the daemon)."}}function G(e){switch(e.kind){case"spawn-failed":return`Failed to start \`npx ripplo daemon\`: ${Pa(e.message)}`;case"connect-timeout":return[`Daemon did not come up within ${String(Math.round(e.deadlineMs/1e3))}s.`,`Check ${e.logPath} for startup errors.`,"Common causes: a stale socket (`rm .ripplo/.local/daemon.sock`), another daemon holding the dev lock, or the Ripplo server unreachable."].join(`
+`);case"connection-lost":return["Lost the daemon connection mid-run \u2014 it likely crashed or was killed.","Check .ripplo/.local/daemon.log, restart `npx ripplo daemon`, then rerun."].join(`
+`);case"not-running":return["No ripplo daemon running for this directory \u2014 nothing to dispatch to.","Start it with `npx ripplo daemon` as a background process (separate from your app's dev server), then rerun.","A run needs a live daemon to dispatch and to register the result to your dev session."].join(`
+`);case"bad-frame":return"Received a malformed frame from the daemon (version mismatch \u2014 rebuild/update the CLI and restart the daemon)."}}function Pa(e){return e.includes("ENOENT")?`${e} \u2014 the node executable or CLI entry was not found on PATH.`:e.includes("EACCES")?`${e} \u2014 permission denied executing the CLI entry.`:e}function Ea(e){return e.type==="limit"?xa[e.code]:`failed to dispatch (${e.detail})`}function $a(e,t){return new Ca(t,{includeScore:!0,threshold:.5}).search(_(e)).slice(0,3).map(n=>n.item)}async function wn({all:e,headed:t,ids:r}){let n=process.cwd(),o=process.argv[1];o==null&&le(G({kind:"spawn-failed",message:"process.argv[1] missing"}));let i=await $e(n);i!=null&&le(Ae(i));let a=(await pn({cliEntry:o,cwd:n})).match(u=>u,u=>le(G(u)));a.versionNote!=null&&process.stderr.write(`${ar(a.versionNote)}
+`);let l=new Ia;process.once("SIGINT",()=>{l.cancel(),a.socket.destroy(),process.exit(130)});let d=ja.join(n,".ripplo","debug"),p=(await Pe({connection:a,request:{all:e,headed:t,tests:[...r]},token:l.token,onEvent:u=>{let A=Ie({debugDir:d,event:u});A!=null&&process.stdout.write(`${A}
+`)}})).match(u=>u,u=>le(G(u)));await Aa({connection:a,result:p})}async function Aa({connection:e,result:t}){await new Promise(r=>{e.socket.end(r)}),t.kind==="daemon-error"&&le(Te(t.error)),process.stdout.write(`${kn(t)}
+`),t.failed>0&&process.exit(1),process.exit(t.notRun>0?2:0)}function le(e){process.stderr.write(`${e}
+`),process.exit(1)}import de from"path";import{err as De,ok as rt}from"neverthrow";import{readdir as Ta,rm as La,stat as Da}from"fs/promises";import vn from"path";async function tt(e,t){let n=(await Ta(e,{withFileTypes:!0}).catch(()=>[])).filter(s=>s.isDirectory()).map(s=>s.name);if(n.length<=t)return;let i=(await Promise.all(n.map(async s=>({mtime:(await Da(vn.join(e,s)).catch(()=>null))?.mtimeMs??0,name:s})))).toSorted((s,a)=>a.mtime-s.mtime).slice(t);await Promise.all(i.map(s=>La(vn.join(e,s.name),{force:!0,recursive:!0}).catch(()=>{})))}var bn=50;async function Sn(){let e=process.cwd(),t=L.child({worker:process.pid}),r=yr(),n=Kt({clientVersion:P(),debugDir:de.join(e,".ripplo","debug"),headed:!1,writeOtlpPortFile:!1}),o={entry:void 0},i=s=>{n.close().catch(()=>{}).then(()=>{process.exit(s)})};process.on("disconnect",()=>{i(1)}),process.on("unhandledRejection",s=>{t.error({err:s},"worker unhandled rejection")}),process.on("uncaughtException",s=>{t.error({err:s},"worker uncaught exception"),i(1)}),r.onRequest(pr,async(s,a)=>{let l=dr.safeParse(s);if(!l.success)return Le("bad-run-assign");let d=l.data;B(e);let v=k(e).match(j=>j,j=>j.kind);if(typeof v=="string")return Le(`config:${v}`);let p=await Rn(d.lockfileFingerprint,o,r);if(p.isErr())return Le(`lockfile-unavailable:${p.error}`);let u=p.value,A=Lt(u).find(j=>j.ref===d.testRef);if(A==null)return Le(`no-test:${d.testRef}`);try{let j=await wr({config:v,cwd:e,fixturesDir:de.join(e,qe),headed:d.headed,lockfile:u,runId:d.runId,session:n,signal:Ge(a),test:A.test}),dt=de.join(e,".ripplo","debug");return await ze({config:v,debugDir:dt,runId:d.runId}),await tt(dt,bn),{outcome:lr(j),serverNotified:!0}}catch(j){if(j instanceof ut)return{outcome:{detail:j.message,kind:"infra-error"},serverNotified:!1};throw j}}),r.onRequest(fr,(s,a)=>_a({cache:o,connection:r,cwd:e,raw:s,session:n,token:a})),r.onNotification(gr,s=>{let a=cr.safeParse(s);a.success&&n.injectSpan(a.data.runId,a.data.span)}),r.onNotification(hr,()=>{i(0)}),r.sendNotification(ur),await new Promise(()=>{})}function Le(e){return{outcome:{detail:e,kind:"error"},serverNotified:!1}}async function _a({cache:e,connection:t,cwd:r,raw:n,session:o,token:i}){let s=Ht.safeParse(n);if(!s.success)return{kind:"error",reason:"bad-assign",trail:[]};let a=s.data;B(r);let l=k(r).match(A=>A,A=>A.kind);if(typeof l=="string")return{kind:"error",reason:`config:${l}`,trail:[]};let d=await Rn(a.lockfileFingerprint,e,t);if(d.isErr())return{kind:"error",reason:`lockfile:${d.error}`,trail:[]};let v=d.value,p=de.join(l.cwd,".ripplo","debug"),u=await vr({assign:a,config:l,debugDir:p,devSessionId:void 0,fixturesDir:de.join(l.cwd,qe),headed:!1,lockfile:v,report:!0,session:o,signal:Ge(i)});return u.kind==="finding"&&u.runId!=null&&await ze({config:l,debugDir:p,runId:u.runId}),await tt(p,bn),u}async function Rn(e,t,r){return t.entry!=null&&t.entry.fingerprint===e?rt(t.entry.lockfile):(await Oa(r,e)).andThen(o=>o.unavailable!=null?De(o.unavailable):o.lockfileJson==null?De("empty-reply"):Na(o.lockfileJson).map(i=>(t.entry={fingerprint:e,lockfile:i},i)))}async function Oa(e,t){try{return rt(await e.sendRequest(mr,{fingerprint:t}))}catch(r){return De(`transport:${r instanceof Error?r.message:"unknown"}`)}}function Na(e){try{return rt(St(U,e))}catch(t){return De(`worker-decode-failed:${t instanceof Error?t.message.slice(0,200):"unknown"}`)}}async function Cn(){await Sn()}import{graphql as Ua}from"gql.tada";import{err as xn,ok as Fa}from"neverthrow";async function Pn(e){let t=k(e).match(n=>n,n=>n.kind);if(typeof t=="string")return xn({detail:t,kind:"config"});let r=await m({config:t,document:Ma,variables:{projectId:t.projectId}}).catch(()=>null);return r==null?xn({kind:"request-failed"}):Fa(r.exploreFindings.map(n=>({baseState:n.baseState,category:n.category,occurrences:n.occurrences,reproRunId:n.reproRun?.id??null,signature:n.signature})))}var Ma=Ua(`
+  query ExploreFindingsList($projectId: String!) {
+    exploreFindings(projectId: $projectId, status: open) {
+      id
+      baseState
+      category
+      occurrences
+      signature
+      reproRun {
+        id
+      }
+    }
+  }
+`);function En(e){if(e.length===0)return"No open findings.";let t=`${x(e.length,"open finding")}. Pull a run's evidence with \`npx ripplo pull <runId>\`.`,r=e.map(n=>Ha(n));return[t,"",...r].join(`
+`)}function $n(e){return e.kind==="config"?`Can't read project config (${e.detail}). Run this from your project root.`:"Couldn't reach the server. Check you're signed in with `npx ripplo auth`."}function Ha(e){let t=`${e.category} x${String(e.occurrences)}`.padEnd(14),r=e.reproRunId??"(no repro run)";return`  ${t}  ${r}
+      ${e.baseState}`}async function jn({json:e}){(await Pn(process.cwd())).match(r=>{process.stdout.write(e?`${JSON.stringify(r,null,2)}
+`:`${En(r)}
+`)},r=>{process.stderr.write(`${$n(r)}
+`),process.exit(1)})}import{mkdir as Wa,writeFile as qa}from"fs/promises";import In from"path";import{graphql as Ba}from"gql.tada";import{err as ce,ok as Va}from"neverthrow";async function An(e,t){let r=k(e).match(s=>s,s=>s.kind);if(typeof r=="string")return ce({detail:r,kind:"config"});let n=await m({config:r,document:Ga,variables:{id:t}}).catch(()=>null);if(n==null)return ce({kind:"request-failed"});if(n.run==null)return ce({kind:"not-found"});if(n.run.behaviorUrl==null)return ce({kind:"not-uploaded"});let o=await fetch(n.run.behaviorUrl);if(!o.ok)return ce({kind:"download-failed",status:o.status});let i=In.join(e,".ripplo","debug",t,"behavior.jsonl");return await Wa(In.dirname(i),{recursive:!0}),await qa(i,Buffer.from(await o.arrayBuffer())),Va({path:i,runId:t})}var Ga=Ba(`
+  query RunBehaviorUrl($id: String!) {
+    run(id: $id) {
+      id
+      behaviorUrl
+    }
+  }
+`);function Tn(e){return`Saved behavior.jsonl to ${e.path}`}function Ln(e){switch(e.kind){case"config":return`Can't read project config (${e.detail}). Run this from your project root.`;case"request-failed":return"Couldn't reach the server. Check you're signed in with `npx ripplo auth`.";case"not-found":return"No run with that id.";case"not-uploaded":return"This run has no uploaded artifacts yet \u2014 it may still be running, or predates artifact upload.";case"download-failed":return`Download failed (HTTP ${String(e.status)}). The link may have expired \u2014 try again.`}}async function Dn({runId:e}){(await An(process.cwd(),e)).match(r=>{process.stdout.write(`${Tn(r)}
+`)},r=>{process.stderr.write(`${Ln(r)}
+`),process.exit(1)})}import Un from"path";import{existsSync as za}from"fs";import{writeFile as _n}from"fs/promises";import On from"path";import{err as ue,ok as Ja}from"neverthrow";async function Nn({jsonlPath:e,moment:t,outDir:r,runId:n}){if(!za(e))return ue({kind:"run-not-found",runId:n});let o=await Wt(e),i=o[0],s=o.at(-1);if(i==null||s==null)return ue({kind:"no-rrweb-events",runId:n});let a=s.timestamp-i.timestamp,l=t.kind==="offset"?t.offsetMs:t.at-i.timestamp;if(l<0)return ue({durationMs:a,firstTimestamp:i.timestamp,kind:"moment-out-of-range",lastTimestamp:s.timestamp,moment:t});let d=Math.min(l,a),v=String(Math.round(d)),p=On.join(r,`snapshot-${v}ms.png`),u=On.join(r,`snapshot-${v}ms.html`);return(await Ka({events:o,htmlPath:u,offsetMs:d,pngPath:p})).map(()=>({durationMs:a,htmlPath:u,offsetMs:d,pngPath:p}))}async function Ka({events:e,htmlPath:t,offsetMs:r,pngPath:n}){let o=await zt();if(o==null)return ue({detail:"chromium launch",kind:"browser-failed"});try{let{html:i,png:s}=await Qa({browser:o,events:e,offsetMs:r});return await _n(n,s),await _n(t,i,"utf8"),Ja(void 0)}catch(i){return ue({detail:i instanceof Error?i.message:String(i),kind:"browser-failed"})}finally{await o.close()}}async function Qa({browser:e,events:t,offsetMs:r}){let n=qt(t),o=await e.newPage({viewport:n});await o.setContent(Bt(!1)),await o.addScriptTag({content:await Jt()}),await o.evaluate(Xa({events:t,offsetMs:r})),await o.evaluate(Gt());let i=o.locator(".replayer-wrapper iframe").first(),a=await(await i.count()>0?i:o).screenshot({type:"png"});return{html:await o.evaluate(Ya()),png:a}}function Xa({events:e,offsetMs:t}){return`(() => {
     const replayer = new globalThis.__RipploReplayer(${JSON.stringify(e)}, {
-      insertStyleRules: [${JSON.stringify(an)}],
+      insertStyleRules: [${JSON.stringify(Vt)}],
       mouseTail: false,
       root: document.body,
       showWarning: false,
     });
-    replayer.pause(${String(r+.5)});
+    replayer.pause(${String(t+.5)});
     globalThis.__ripploSnapshotReplayer = replayer;
-  })()`}function Ol(){return`(() => {
+  })()`}function Ya(){return`(() => {
     const replayer = globalThis.__ripploSnapshotReplayer;
     if (replayer == null) {
       return "";
@@ -315,33 +319,33 @@ Verify the dev session is live (\`npx ripplo doctor\`, ${c("start")}), or pass t
       }
     });
     return "<!doctype html>\\n" + doc.documentElement.outerHTML;
-  })()`}function mo({cwd:e,moment:r,runId:n}){let t=uo.join(e,".ripplo","debug",n);return po({jsonlPath:uo.join(t,"behavior.jsonl"),moment:r,outDir:t,runId:n})}function fo(e){return[`${C.good("ok")} \u2014 rendered the page at ${String(Math.round(e.offsetMs))}ms into the recording (duration ${String(Math.round(e.durationMs))}ms)`,e.pngPath,"Read the PNG above to see the page state. Layout and text are faithful \u2014 URL-referenced images may be blank if the dev server is down."].join(`
-`)}function go(e){return`${C.bad("fail")} \u2014 ${_l(e)}`}function ho(){return`${C.bad("fail")} \u2014 pass exactly one of --at <epoch-ms from behavior.jsonl> or --offset <ms from the start of the recording>.`}function _l(e){switch(e.kind){case"run-not-found":return`no debug artifacts for run ${e.runId} (.ripplo/debug/${e.runId}/behavior.jsonl missing). ${c("run")}`;case"no-rrweb-events":return`run ${e.runId} has a behavior.jsonl but no rrweb events \u2014 nothing to replay.`;case"moment-out-of-range":return`${e.moment.kind==="offset"?"--offset":"--at"} is outside the recording, which spans ${String(e.firstTimestamp)}\u2013${String(e.lastTimestamp)} (duration ${String(e.durationMs)}ms). Pass --at <epoch-ms from behavior.jsonl> or --offset <0\u2013${String(e.durationMs)}>.`;case"browser-failed":return`replay browser failed (${e.detail}). Is chromium installed? Try \`npx playwright install chromium\`.`}}async function yo({at:e,offset:r,runId:n}){let t=Fl({at:e,offset:r});t==null&&(process.stderr.write(`${ho()}
-`),process.exit(1)),(await mo({cwd:process.cwd(),moment:t,runId:n})).match(i=>{process.stdout.write(`${fo(i)}
-`)},i=>{process.stderr.write(`${go(i)}
-`),process.exit(1)})}function Fl({at:e,offset:r}){if(e!=null&&r==null)return{at:e,kind:"absolute"};if(r!=null&&e==null)return{kind:"offset",offsetMs:r}}function ko(e,r){switch(e.kind){case"config-failed":return E(e.failure);case"compile-failed":return v(e.error);case"no-test":return`test "${e.ref}" not found \u2014 run npx ripplo lint to see available tests`;case"run-failed":return`teleport failed before reaching the step: ${Wr(e.error)}`;case"done":return Nl(e.result,r)}}function wo(e){return e.kind==="done"&&e.result.kind==="handed-over"}function Nl(e,r){return e.kind==="failed"?`couldn't reach the step \u2014 the run failed first.
+  })()`}function Fn({cwd:e,moment:t,runId:r}){let n=Un.join(e,".ripplo","debug",r);return Nn({jsonlPath:Un.join(n,"behavior.jsonl"),moment:t,outDir:n,runId:r})}function Mn(e){return[`${C.good("ok")} \u2014 rendered the page at ${String(Math.round(e.offsetMs))}ms into the recording (duration ${String(Math.round(e.durationMs))}ms)`,e.pngPath,"Read the PNG above to see the page state. Layout and text are faithful \u2014 URL-referenced images may be blank if the dev server is down."].join(`
+`)}function Hn(e){return`${C.bad("fail")} \u2014 ${Za(e)}`}function Wn(){return`${C.bad("fail")} \u2014 pass exactly one of --at <epoch-ms from behavior.jsonl> or --offset <ms from the start of the recording>.`}function Za(e){switch(e.kind){case"run-not-found":return`no debug artifacts for run ${e.runId} (.ripplo/debug/${e.runId}/behavior.jsonl missing). ${c("run")}`;case"no-rrweb-events":return`run ${e.runId} has a behavior.jsonl but no rrweb events \u2014 nothing to replay.`;case"moment-out-of-range":return`${e.moment.kind==="offset"?"--offset":"--at"} is outside the recording, which spans ${String(e.firstTimestamp)}\u2013${String(e.lastTimestamp)} (duration ${String(e.durationMs)}ms). Pass --at <epoch-ms from behavior.jsonl> or --offset <0\u2013${String(e.durationMs)}>.`;case"browser-failed":return`replay browser failed (${e.detail}). Is chromium installed? Try \`npx playwright install chromium\`.`}}async function qn({at:e,offset:t,runId:r}){let n=el({at:e,offset:t});n==null&&(process.stderr.write(`${Wn()}
+`),process.exit(1)),(await Fn({cwd:process.cwd(),moment:n,runId:r})).match(i=>{process.stdout.write(`${Mn(i)}
+`)},i=>{process.stderr.write(`${Hn(i)}
+`),process.exit(1)})}function el({at:e,offset:t}){if(e!=null&&t==null)return{at:e,kind:"absolute"};if(t!=null&&e==null)return{kind:"offset",offsetMs:t}}function Bn(e,t){switch(e.kind){case"config-failed":return E(e.failure);case"compile-failed":return R(e.error);case"no-test":return`test "${e.ref}" not found \u2014 run npx ripplo lint to see available tests`;case"run-failed":return`teleport failed before reaching the step: ${Tt(e.error)}`;case"done":return tl(e.result,t)}}function Vn(e){return e.kind==="done"&&e.result.kind==="handed-over"}function tl(e,t){return e.kind==="failed"?`couldn't reach the step \u2014 the run failed first.
 
-${e.findings.map(t=>zr({evidencePath:void 0,finding:t})).join(`
+${e.findings.map(n=>Nt({evidencePath:void 0,finding:n})).join(`
 
-`)}`:`landed at step ${String(e.ran)} of ${r} \u2014 the browser is yours, close the window to tear down`}async function vo({ref:e,step:r}){let n=new AbortController;process.once("SIGINT",()=>{n.abort()});let t=await Vn({cwd:process.cwd(),ref:e,signal:n.signal,step:r});process.stdout.write(`${ko(t,e)}
-`),process.exit(wo(t)?0:1)}async function bo(){let e=A();try{let n=(await ae(e.cwd,e)).match(i=>i,i=>{process.stderr.write(`${E(i)}
-`),process.exit(1)}),t=n.lockfile.workflows.length,o=n.lockfile.entities.length;process.stdout.write(`Synced ${S(t,"workflow")} and ${S(o,"entity","entities")} to dev session ${n.devSessionId}
-`)}catch(r){let n=r instanceof Error?r.message:String(r);process.stderr.write(`ripplo sync failed: ${n}
+`)}`:`landed at step ${String(e.ran)} of ${t} \u2014 the browser is yours, close the window to tear down`}async function Gn({ref:e,step:t}){let r=new AbortController;process.once("SIGINT",()=>{r.abort()});let n=await br({cwd:process.cwd(),ref:e,signal:r.signal,step:t});process.stdout.write(`${Bn(n,e)}
+`),process.exit(Vn(n)?0:1)}async function zn(){let e=I();try{let r=(await ne(e.cwd,e)).match(i=>i,i=>{process.stderr.write(`${E(i)}
+`),process.exit(1)}),n=r.lockfile.workflows.length,o=r.lockfile.entities.length;process.stdout.write(`Synced ${x(n,"workflow")} and ${x(o,"entity","entities")} to dev session ${r.devSessionId}
+`)}catch(t){let r=t instanceof Error?t.message:String(t);process.stderr.write(`ripplo sync failed: ${r}
 `),process.stderr.write(`${c("setup","verify auth + server reachability")}
-`),process.exit(1)}}import{spawnSync as Hl}from"child_process";import Wl from"fs";import ql from"path";import Bl from"semver";import qe from"fs";import Ul from"os";import fe from"path";function So(e){return e.split(fe.sep).includes("_npx")?"npx":e.includes(fe.join("packages","cli"))?"workspace":"global"}function xo(){let e=fe.join(Ul.homedir(),".npm","_npx");return qe.existsSync(e)?qe.readdirSync(e).map(r=>fe.join(e,r)).filter(r=>qe.existsSync(fe.join(r,"node_modules","ripplo"))).map(r=>(qe.rmSync(r,{force:!0,recursive:!0}),r)):[]}import{spawnSync as Ro}from"child_process";var Ml=["user","project","local"];function mr(){return Ro("claude",["--version"],{stdio:"ignore"}).error!=null?"claude-missing":Ml.find(n=>Ro("claude",["plugin","update","ripplo","--scope",n],{stdio:"ignore"}).status===0)==null?"not-installed":"updated"}function Co(e){return`ripplo v${e} is already the latest version.`}function Po(e){return`ripplo v${e}: could not reach the npm registry to check for updates.`}function fr({evicted:e,latest:r,mode:n}){return n==="npx"?`ripplo: ${e===0?"npx cache had no stale copy":`cleared ${S(e,"stale npx cache entry","stale npx cache entries")}`} \u2014 the next \`npx ripplo\` command runs v${r}.`:`ripplo: updated global install to v${r}.`}function Eo(){return"ripplo: this is a workspace build (packages/cli/dist) \u2014 update via git pull + `pnpm --filter ripplo build`."}function $o(e){return`ripplo: \`npm install -g ripplo@latest\` failed: ${e}`}function gr(e){switch(e){case"updated":return"ripplo: Claude plugin updated \u2014 restart Claude Code (or /reload-plugins) to apply.";case"not-installed":return"ripplo: Claude plugin not installed in this project \u2014 skipped.";case"claude-missing":return"ripplo: claude binary not found \u2014 skipped plugin update."}}function Io(e){return e?"ripplo: idle daemon stopped \u2014 the next `npx ripplo run` restarts it on the new version.":"ripplo: daemon is busy \u2014 it picks up the new version once idle (the next `npx ripplo run` handles it)."}var Vl=1e4;async function jo(){let e=P(),r=process.argv[1];Gl(process.cwd());let n=await Re(Vl);process.stdout.write(`${xe({current:e,latest:n})}
-`),n==null&&(process.stderr.write(`${Po(e)}
-`),process.exit(1)),Bl.gt(n,e)||(process.stdout.write(`${Co(e)}
-`),process.stdout.write(`${gr(mr())}
-`),process.exit(0));let t=r==null?"global":So(r);zl({latest:n,mode:t}),process.stdout.write(`${gr(mr())}
-`),await Kl(process.cwd()),process.exit(0)}function Gl(e){if(!Wl.existsSync(ql.join(e,".ripplo")))return;let r=$e(e);r==="written"&&process.stdout.write(`${Ie(r).trim()}
-`)}function zl({latest:e,mode:r}){if(r==="workspace"&&(process.stdout.write(`${Eo()}
-`),process.exit(0)),r==="npx"){let n=xo();process.stdout.write(`${fr({evicted:n.length,latest:e,mode:r})}
-`);return}Jl(e)}function Jl(e){let r=`ripplo@${e}`,n=Hl("npm",["install","-g",r],{stdio:"inherit"});if(n.status!==0){let t=`exit ${String(n.status)}`;process.stderr.write(`${$o(t)}
-`),process.exit(1)}process.stdout.write(`${fr({evicted:0,latest:e,mode:"global"})}
-`)}async function Kl(e){if((await Oe(e)).kind==="not-running")return;let n=await Gt(e);process.stdout.write(`${Io(n)}
-`)}async function Ao({executor:e,explore:r,exploreConcurrency:n}){let{runDaemon:t}=await import("./daemon-C7TOJ236.js"),{TunnelProvisionFailedError:o}=await import("./daemon-tunnel-AG6FGNXC.js"),{renderTunnelProvisionFailed:i}=await import("./daemon-RVYMMUB5.js");try{await t({executor:e,explore:r,exploreConcurrency:n})}catch(a){throw a instanceof o&&(process.stderr.write(`${i(a.failure)}
-`),process.exit(1)),a}}import{graphql as Be}from"gql.tada";function To(){return"No scope items added \u2014 the matched tests are already in scope (check `npx ripplo scope status`)."}function Lo(e){return[`No test found for: ${e.join(", ")}`,"Pass a test id (kebab-case slug of the test name) or the exact intent string.","List known tests with `npx ripplo status`. To add one, stub it first via the testing DSL.",c("create")].join(`
-`)}import{graphql as Ql}from"gql.tada";var Do=Ql(`
+`),process.exit(1)}}import{spawnSync as ol}from"child_process";import il from"fs";import sl from"path";import al from"semver";import _e from"fs";import rl from"os";import pe from"path";function Jn(e){return e.split(pe.sep).includes("_npx")?"npx":e.includes(pe.join("packages","cli"))?"workspace":"global"}function Kn(){let e=pe.join(rl.homedir(),".npm","_npx");return _e.existsSync(e)?_e.readdirSync(e).map(t=>pe.join(e,t)).filter(t=>_e.existsSync(pe.join(t,"node_modules","ripplo"))).map(t=>(_e.rmSync(t,{force:!0,recursive:!0}),t)):[]}import{spawnSync as Qn}from"child_process";var nl=["user","project","local"];function nt(){return Qn("claude",["--version"],{stdio:"ignore"}).error!=null?"claude-missing":nl.find(r=>Qn("claude",["plugin","update","ripplo","--scope",r],{stdio:"ignore"}).status===0)==null?"not-installed":"updated"}function Xn(e){return`ripplo v${e} is already the latest version.`}function Yn(e){return`ripplo v${e}: could not reach the npm registry to check for updates.`}function ot({evicted:e,latest:t,mode:r}){return r==="npx"?`ripplo: ${e===0?"npx cache had no stale copy":`cleared ${x(e,"stale npx cache entry","stale npx cache entries")}`} \u2014 the next \`npx ripplo\` command runs v${t}.`:`ripplo: updated global install to v${t}.`}function Zn(){return"ripplo: this is a workspace build (packages/cli/dist) \u2014 update via git pull + `pnpm --filter ripplo build`."}function eo(e){return`ripplo: \`npm install -g ripplo@latest\` failed: ${e}`}function it(e){switch(e){case"updated":return"ripplo: Claude plugin updated \u2014 restart Claude Code (or /reload-plugins) to apply.";case"not-installed":return"ripplo: Claude plugin not installed in this project \u2014 skipped.";case"claude-missing":return"ripplo: claude binary not found \u2014 skipped plugin update."}}function to(e){return e?"ripplo: idle daemon stopped \u2014 the next `npx ripplo run` restarts it on the new version.":"ripplo: daemon is busy \u2014 it picks up the new version once idle (the next `npx ripplo run` handles it)."}var ll=1e4;async function ro(){let e=P(),t=process.argv[1];dl(process.cwd());let r=await ke(ll);process.stdout.write(`${ye({current:e,latest:r})}
+`),r==null&&(process.stderr.write(`${Yn(e)}
+`),process.exit(1)),al.gt(r,e)||(process.stdout.write(`${Xn(e)}
+`),process.stdout.write(`${it(nt())}
+`),process.exit(0));let n=t==null?"global":Jn(t);cl({latest:r,mode:n}),process.stdout.write(`${it(nt())}
+`),await pl(process.cwd()),process.exit(0)}function dl(e){if(!il.existsSync(sl.join(e,".ripplo")))return;let t=Se(e);t==="written"&&process.stdout.write(`${Re(t).trim()}
+`)}function cl({latest:e,mode:t}){if(t==="workspace"&&(process.stdout.write(`${Zn()}
+`),process.exit(0)),t==="npx"){let r=Kn();process.stdout.write(`${ot({evicted:r.length,latest:e,mode:t})}
+`);return}ul(e)}function ul(e){let t=`ripplo@${e}`,r=ol("npm",["install","-g",t],{stdio:"inherit"});if(r.status!==0){let n=`exit ${String(r.status)}`;process.stderr.write(`${eo(n)}
+`),process.exit(1)}process.stdout.write(`${ot({evicted:0,latest:e,mode:"global"})}
+`)}async function pl(e){if((await Ee(e)).kind==="not-running")return;let r=await gn(e);process.stdout.write(`${to(r)}
+`)}async function no({executor:e}){let{runDaemon:t}=await import("./daemon-G75H2VRS.js"),{TunnelProvisionFailedError:r}=await import("./daemon-tunnel-DYA5LIEG.js"),{renderTunnelProvisionFailed:n}=await import("./daemon-PTZWFEBG.js");try{await t({executor:e})}catch(o){throw o instanceof r&&(process.stderr.write(`${n(o.failure)}
+`),process.exit(1)),o}}import{graphql as Oe}from"gql.tada";function oo(){return"No scope items added \u2014 the matched tests are already in scope (check `npx ripplo scope status`)."}function io(e){return[`No test found for: ${e.join(", ")}`,"Pass a test id (kebab-case slug of the test name) or the exact intent string.","List known tests with `npx ripplo status`. To add one, stub it first via the testing DSL.",c("create")].join(`
+`)}import{graphql as ml}from"gql.tada";var so=ml(`
   query ScopeStatus($projectId: String!, $cwd: String!) {
     project(id: $projectId) {
       id
@@ -361,7 +365,7 @@ ${e.findings.map(t=>zr({evidencePath:void 0,finding:t})).join(`
       }
     }
   }
-`);var Xl=Be(`
+`);var fl=Oe(`
   query ScopeWorkflowBySlug($projectId: String!, $cwd: String!, $slug: String!) {
     project(id: $projectId) {
       id
@@ -374,7 +378,7 @@ ${e.findings.map(t=>zr({evidencePath:void 0,finding:t})).join(`
       }
     }
   }
-`),Yl=Be(`
+`),gl=Oe(`
   mutation ScopeAddDirtyTests($projectId: String!, $cwd: String!, $workflowSlugs: [String!]!) {
     addDirtyTestsToScope(projectId: $projectId, cwd: $cwd, workflowSlugs: $workflowSlugs) {
       __typename
@@ -396,38 +400,38 @@ ${e.findings.map(t=>zr({evidencePath:void 0,finding:t})).join(`
       }
     }
   }
-`),Zl=Be(`
+`),hl=Oe(`
   mutation ScopeLink($id: ID!, $workflowId: String!) {
     linkScopeItem(id: $id, workflowId: $workflowId) {
       id
     }
   }
-`),ed=Be(`
+`),yl=Oe(`
   mutation ScopeRemoveMany($ids: [ID!]!) {
     removeScopeItems(ids: $ids)
   }
-`);async function Oo(e){let r=A();await le(r);let t=(await m({config:r,document:Do,variables:{cwd:r.cwd,projectId:r.projectId}})).project?.devSession?.scopeItems??[];if(e.format==="json"){process.stdout.write(`${JSON.stringify(t,null,2)}
-`);return}if(t.length===0){process.stdout.write("No scope items. Add some with `npx ripplo scope add <test-ids..>` or from the dashboard.\n");return}t.forEach(o=>{let i=o.workflow;if(i==null){process.stdout.write(`  [intent] (${o.id}) ${o.label??""}
-`);return}let a=i.spec==null?"stub":"implemented";process.stdout.write(`  [${a}] (${o.id}) ${i.slug} \u2014 ${i.name}
-`)})}async function _o({testIds:e}){let r=A();await le(r),(await ae(r.cwd,r)).match(()=>{},s=>{process.stderr.write(`${E(s)}
-`),process.exit(1)});let o=(await m({config:r,document:Yl,variables:{cwd:r.cwd,projectId:r.projectId,workflowSlugs:e.map(s=>O(s))}})).addDirtyTestsToScope;o?.__typename==="NoActiveDevSessionError"&&(process.stderr.write(`${o.message}
-`),process.exit(1)),o?.__typename==="UnknownWorkflowSlugsError"&&(process.stderr.write(`${Lo(o.slugs)}
-`),process.exit(1));let i=o?.__typename==="MutationAddDirtyTestsToScopeSuccess"?o.data:[];if(i.length===0){process.stdout.write(`${To()}
-`);return}let a=i.map(s=>s.workflow?.slug??"?").join(", ");process.stdout.write(`Added ${S(i.length,"scope item")}: ${a}
-`)}async function Fo({id:e,testId:r}){let n=A();await le(n),(await ae(n.cwd,n)).match(()=>{},i=>{process.stderr.write(`${E(i)}
-`),process.exit(1)});let o=await rd({cfg:n,slug:r});await m({config:n,document:Zl,variables:{id:e,workflowId:o}}),process.stdout.write(`Linked scope item ${e} to ${r}
-`)}async function No({ids:e}){let r=A();await le(r);let t=(await m({config:r,document:ed,variables:{ids:[...e]}})).removeScopeItems??0;process.stdout.write(`Removed ${S(t,"scope item")}
-`)}async function rd({cfg:e,slug:r}){let t=(await m({config:e,document:Xl,variables:{cwd:e.cwd,projectId:e.projectId,slug:r}})).project?.devSession?.workflows?.[0];return t==null&&(process.stderr.write(`No workflow found with id "${r}". Create a stub first via the testing DSL.
+`);async function ao(e){let t=I();await oe(t);let n=(await m({config:t,document:so,variables:{cwd:t.cwd,projectId:t.projectId}})).project?.devSession?.scopeItems??[];if(e.format==="json"){process.stdout.write(`${JSON.stringify(n,null,2)}
+`);return}if(n.length===0){process.stdout.write("No scope items. Add some with `npx ripplo scope add <test-ids..>` or from the dashboard.\n");return}n.forEach(o=>{let i=o.workflow;if(i==null){process.stdout.write(`  [intent] (${o.id}) ${o.label??""}
+`);return}let s=i.spec==null?"stub":"implemented";process.stdout.write(`  [${s}] (${o.id}) ${i.slug} \u2014 ${i.name}
+`)})}async function lo({testIds:e}){let t=I();await oe(t),(await ne(t.cwd,t)).match(()=>{},a=>{process.stderr.write(`${E(a)}
+`),process.exit(1)});let o=(await m({config:t,document:gl,variables:{cwd:t.cwd,projectId:t.projectId,workflowSlugs:e.map(a=>_(a))}})).addDirtyTestsToScope;o?.__typename==="NoActiveDevSessionError"&&(process.stderr.write(`${o.message}
+`),process.exit(1)),o?.__typename==="UnknownWorkflowSlugsError"&&(process.stderr.write(`${io(o.slugs)}
+`),process.exit(1));let i=o?.__typename==="MutationAddDirtyTestsToScopeSuccess"?o.data:[];if(i.length===0){process.stdout.write(`${oo()}
+`);return}let s=i.map(a=>a.workflow?.slug??"?").join(", ");process.stdout.write(`Added ${x(i.length,"scope item")}: ${s}
+`)}async function co({id:e,testId:t}){let r=I();await oe(r),(await ne(r.cwd,r)).match(()=>{},i=>{process.stderr.write(`${E(i)}
+`),process.exit(1)});let o=await kl({cfg:r,slug:t});await m({config:r,document:hl,variables:{id:e,workflowId:o}}),process.stdout.write(`Linked scope item ${e} to ${t}
+`)}async function uo({ids:e}){let t=I();await oe(t);let n=(await m({config:t,document:yl,variables:{ids:[...e]}})).removeScopeItems??0;process.stdout.write(`Removed ${x(n,"scope item")}
+`)}async function kl({cfg:e,slug:t}){let n=(await m({config:e,document:fl,variables:{cwd:e.cwd,projectId:e.projectId,slug:t}})).project?.devSession?.workflows?.[0];return n==null&&(process.stderr.write(`No workflow found with id "${t}". Create a stub first via the testing DSL.
 `),process.stderr.write(`${c("create")}
-`),process.exit(1)),t.id}async function Uo(e){let r=process.cwd(),n=await x(r);n.isErr()&&(process.stderr.write(`${v(n.error)}
-`),process.exit(1));let t=F(n.value),o=await Oe(r);if(e.format==="summary"){t.length>0&&process.stdout.write(`stub workflows: ${t.join(", ")}
-`),process.stdout.write(`${wn(o)}
-`);return}let i={daemon:o.kind==="running"?{active:o.status.active,explorer:o.status.explorer,exploring:o.status.exploring,progress:o.status.progress,queued:o.status.queued,running:!0}:{running:o.kind==="unresponsive",state:o.kind},tests:t.map(a=>({id:a,implemented:!1}))};process.stdout.write(`${JSON.stringify(i,null,2)}
-`)}import Ve from"fs";import td from"os";import Mo from"path";import{z as nd}from"zod";function g(e,r){let n=nd.custom(t=>typeof t=="object"&&t!==null&&"hook_event_name"in t&&t.hook_event_name===e);return{event:e,run:async t=>await r(n.parse(t))??void 0}}var Ho=g("PreToolUse",e=>{if(e.tool_name!=="ExitPlanMode"||!b(e.cwd))return;let r=od();if(r==null)return{hookSpecificOutput:{additionalContext:`Ripplo plan gate: no plan file found \u2014 the "Tests to implement" requirement was not checked. Before implementing, stub a .ripplo/workflows/ workflow per affected flow. ${c("discover")}`,hookEventName:"PreToolUse"}};let n=Ve.readFileSync(r,"utf8");if(!/\.ripplo\/tests|Tests to implement|No e2e coverage needed/.test(n))return{hookSpecificOutput:{hookEventName:"PreToolUse",permissionDecision:"deny",permissionDecisionReason:`Plan must cite ripplo test stubs. Add a "Tests to implement" section listing .ripplo/workflows/<id>.ts per affected flow, OR add "No e2e coverage needed: <reason>" if this plan touches no user-facing behavior. ${c("discover")}`}}});function od(){let e=Mo.join(td.homedir(),".claude","plans");return Ve.existsSync(e)?Ve.readdirSync(e).filter(n=>n.endsWith(".md")).map(n=>Mo.join(e,n)).map(n=>({full:n,mtime:Ve.statSync(n).mtimeMs})).sort((n,t)=>t.mtime-n.mtime)[0]?.full??null:null}var Wo=g("UserPromptSubmit",async e=>{if(e.permission_mode!=="plan"||!f(e.cwd)||!b(e.cwd))return;let r=await x(e.cwd);if(r.isErr())return;let n=F(r.value),t=['Plan must include "Tests to implement" with a .ripplo/workflows/ file per affected flow (ExitPlanMode blocks otherwise). Stub each with `workflow("Intent")` (no body).'];return n.length>0&&t.push(`Existing stubs: ${n.join(", ")}`),{hookSpecificOutput:{additionalContext:t.join(`
-`),hookEventName:"UserPromptSubmit"}}});import yd from"path";import Xo from"picomatch";import{z as Yo}from"zod";import{mkdirSync as dd,readFileSync as cd,writeFileSync as pd}from"fs";import ud from"path";import{z as R}from"zod";import{createHash as qh}from"crypto";import Ge from"picomatch";function id(e){return _(["diff","--name-only","HEAD"],e).split(`
-`).filter(r=>r.length>0)}function qo({cwd:e,ignoreGlobs:r,watchGlobs:n}){let t=Ge([...n]),o=Ge([...r]);return id(e).filter(i=>t(i)&&!o(i))}function sd(e){return _(["ls-files","--others","--exclude-standard"],e).split(`
-`).filter(r=>r.length>0)}function Bo({cwd:e,ignoreGlobs:r,watchGlobs:n}){let t=Ge([...n]),o=Ge([...r]);return sd(e).filter(i=>t(i)&&!o(i))}var ad=["**/src/**","**/app/**","**/apps/**","**/pages/**","**/routes/**","**/components/**","**/server/**","**/api/**","**/backend/**","**/features/**","**/modules/**","**/views/**","**/ui/**","**/hooks/**","**/contexts/**","**/providers/**","**/controllers/**","**/handlers/**","**/resolvers/**","**/services/**","**/middleware/**","**/lib/**"],ld=["**/*.gen.*","**/generated/**","**/*.d.ts","**/*.test.*","**/*.spec.*","**/node_modules/**","**/dist/**","**/build/**",".ripplo/**","**/*.md","**/.next/**","**/.turbo/**","**/.vercel/**","**/.svelte-kit/**","**/.nuxt/**","**/.astro/**","**/coverage/**","**/storybook-static/**","**/*.stories.*","**/*.story.*","**/cli/**","**/scripts/**","**/tools/**","**/__tests__/**","**/__mocks__/**","**/__fixtures__/**","**/*.config.*","**/*.setup.*","**/public/**","**/static/**","**/assets/**","**/migrations/**","**/prisma/migrations/**"];function re(){return{ignorePaths:ld,watchPaths:ad}}var md=R.object({label:R.string().nullable(),slug:R.string().nullable(),status:R.enum(["intent","stub","implemented"])}),fd=R.object({intent:R.string(),name:R.string(),sourcePath:R.string().nullable(),stub:R.boolean()}),gd=R.object({changedAppFiles:R.array(R.string()).readonly(),scope:R.object({available:R.boolean(),items:R.array(md).readonly()}),tests:R.array(fd).readonly().default([]),untrackedAppFiles:R.array(R.string()).readonly()});function Vo({cwd:e,scope:r}){let n=zo(e);Ko(e,{...Qo(e),scope:r,tests:n?.tests??[]})}function Go({cwd:e,tests:r}){let n=zo(e);Ko(e,{...Qo(e),scope:n?.scope??{available:!1,items:[]},tests:r??n?.tests??[]})}function zo(e){let r=gd.safeParse(hd(Jo(e)));return r.success?r.data:null}function hd(e){try{return JSON.parse(cd(e,"utf8"))}catch{return null}}function Jo(e){return Sr(e,"coverage-context.json")}function Ko(e,r){let n=Jo(e);dd(ud.dirname(n),{recursive:!0}),pd(n,JSON.stringify(r,null,2))}function Qo(e){let{ignorePaths:r,watchPaths:n}=re(),t={cwd:e,ignoreGlobs:r,watchGlobs:n};return{changedAppFiles:qo(t),untrackedAppFiles:Bo(t)}}var kd=Yo.looseObject({file_path:Yo.string()}),Zo=g("PostToolUse",async e=>{let r=kd.safeParse(e.tool_input);if(!r.success)return;let n=r.data.file_path,{cwd:t}=e;if(!f(t)||!b(t))return;let o=yd.relative(t,n);if(o.startsWith(".."))return;let{ignorePaths:i,watchPaths:a}=re(),s=Xo([...a]),l=Xo([...i]);if(!s(o)||l(o))return;let d=await x(t);if(Go({cwd:t,tests:d.isOk()?d.value.workflows.map(p=>({intent:p.intent,name:p.name,sourcePath:p.sourcePath??null,stub:p.stub})):void 0}),d.isErr())return;let y=F(d.value);if(y.length!==0)return{hookSpecificOutput:{additionalContext:`Reminder: stub workflows still unimplemented \u2014 ${y.join(", ")}. Implement with \`workflow("Intent", () => ({ given, steps }))\`.`,hookEventName:"PostToolUse"}}});import{createHash as $d}from"crypto";import{z as oi}from"zod";import{createHash as wd}from"crypto";import{mkdirSync as vd,readFileSync as ei,writeFileSync as bd}from"fs";import hr from"path";var Sd=[".ts",".tsx",".js",".jsx"];function ze(e){let r=wd("sha256");return r.update(_(["rev-parse","HEAD"],e)),r.update("\0"),r.update(_(["diff","HEAD"],e)),r.update("\0"),_(["ls-files","--others","--exclude-standard"],e).split(`
-`).filter(t=>t.length>0).filter(t=>Sd.some(o=>t.endsWith(o))).toSorted((t,o)=>t.localeCompare(o)).forEach(t=>{r.update(t),r.update("\0"),r.update(xd(hr.join(e,t))),r.update("\0")}),r.digest("hex")}function ne(e,r){try{return ei(ri(e,r),"utf8").trim()}catch{return null}}function te(e,r,n){let t=ri(e,r);vd(hr.dirname(t),{recursive:!0}),bd(t,n)}function xd(e){try{return ei(e)}catch{return Buffer.alloc(0)}}function ri(e,r){return hr.join(e,".ripplo",".local",`${r}.hash`)}import{graphql as Rd}from"gql.tada";var Cd=Rd(`
+`),process.exit(1)),n.id}async function po(e){let t=process.cwd(),r=await S(t);r.isErr()&&(process.stderr.write(`${R(r.error)}
+`),process.exit(1));let n=N(r.value),o=await Ee(t);if(e.format==="summary"){n.length>0&&process.stdout.write(`stub workflows: ${n.join(", ")}
+`),process.stdout.write(`${sr(o)}
+`);return}let i={daemon:o.kind==="running"?{active:o.status.active,explorer:o.status.explorer,exploring:o.status.exploring,progress:o.status.progress,queued:o.status.queued,running:!0}:{running:o.kind==="unresponsive",state:o.kind},tests:n.map(s=>({id:s,implemented:!1}))};process.stdout.write(`${JSON.stringify(i,null,2)}
+`)}import Ne from"fs";import vl from"os";import mo from"path";import{z as wl}from"zod";function g(e,t){let r=wl.custom(n=>typeof n=="object"&&n!==null&&"hook_event_name"in n&&n.hook_event_name===e);return{event:e,run:async n=>await t(r.parse(n))??void 0}}var fo=g("PreToolUse",e=>{if(e.tool_name!=="ExitPlanMode"||!w(e.cwd))return;let t=bl();if(t==null)return{hookSpecificOutput:{additionalContext:`Ripplo plan gate: no plan file found \u2014 the "Tests to implement" requirement was not checked. Before implementing, stub a .ripplo/workflows/ workflow per affected flow. ${c("discover")}`,hookEventName:"PreToolUse"}};let r=Ne.readFileSync(t,"utf8");if(!/\.ripplo\/tests|Tests to implement|No e2e coverage needed/.test(r))return{hookSpecificOutput:{hookEventName:"PreToolUse",permissionDecision:"deny",permissionDecisionReason:`Plan must cite ripplo test stubs. Add a "Tests to implement" section listing .ripplo/workflows/<id>.ts per affected flow, OR add "No e2e coverage needed: <reason>" if this plan touches no user-facing behavior. ${c("discover")}`}}});function bl(){let e=mo.join(vl.homedir(),".claude","plans");return Ne.existsSync(e)?Ne.readdirSync(e).filter(r=>r.endsWith(".md")).map(r=>mo.join(e,r)).map(r=>({full:r,mtime:Ne.statSync(r).mtimeMs})).sort((r,n)=>n.mtime-r.mtime)[0]?.full??null:null}var go=g("UserPromptSubmit",async e=>{if(e.permission_mode!=="plan"||!f(e.cwd)||!w(e.cwd))return;let t=await S(e.cwd);if(t.isErr())return;let r=N(t.value),n=['Plan must include "Tests to implement" with a .ripplo/workflows/ file per affected flow (ExitPlanMode blocks otherwise). Stub each with `workflow("Intent")` (no body).'];return r.length>0&&n.push(`Existing stubs: ${r.join(", ")}`),{hookSpecificOutput:{additionalContext:n.join(`
+`),hookEventName:"UserPromptSubmit"}}});import Dl from"path";import Co from"picomatch";import{z as xo}from"zod";import{mkdirSync as Pl,readFileSync as El,writeFileSync as $l}from"fs";import jl from"path";import{z as b}from"zod";import{createHash as Wg}from"crypto";import Ue from"picomatch";function Sl(e){return O(["diff","--name-only","HEAD"],e).split(`
+`).filter(t=>t.length>0)}function ho({cwd:e,ignoreGlobs:t,watchGlobs:r}){let n=Ue([...r]),o=Ue([...t]);return Sl(e).filter(i=>n(i)&&!o(i))}function Rl(e){return O(["ls-files","--others","--exclude-standard"],e).split(`
+`).filter(t=>t.length>0)}function yo({cwd:e,ignoreGlobs:t,watchGlobs:r}){let n=Ue([...r]),o=Ue([...t]);return Rl(e).filter(i=>n(i)&&!o(i))}var Cl=["**/src/**","**/app/**","**/apps/**","**/pages/**","**/routes/**","**/components/**","**/server/**","**/api/**","**/backend/**","**/features/**","**/modules/**","**/views/**","**/ui/**","**/hooks/**","**/contexts/**","**/providers/**","**/controllers/**","**/handlers/**","**/resolvers/**","**/services/**","**/middleware/**","**/lib/**"],xl=["**/*.gen.*","**/generated/**","**/*.d.ts","**/*.test.*","**/*.spec.*","**/node_modules/**","**/dist/**","**/build/**",".ripplo/**","**/*.md","**/.next/**","**/.turbo/**","**/.vercel/**","**/.svelte-kit/**","**/.nuxt/**","**/.astro/**","**/coverage/**","**/storybook-static/**","**/*.stories.*","**/*.story.*","**/cli/**","**/scripts/**","**/tools/**","**/__tests__/**","**/__mocks__/**","**/__fixtures__/**","**/*.config.*","**/*.setup.*","**/public/**","**/static/**","**/assets/**","**/migrations/**","**/prisma/migrations/**"];function Z(){return{ignorePaths:xl,watchPaths:Cl}}var Il=b.object({label:b.string().nullable(),slug:b.string().nullable(),status:b.enum(["intent","stub","implemented"])}),Al=b.object({intent:b.string(),name:b.string(),sourcePath:b.string().nullable(),stub:b.boolean()}),Tl=b.object({changedAppFiles:b.array(b.string()).readonly(),scope:b.object({available:b.boolean(),items:b.array(Il).readonly()}),tests:b.array(Al).readonly().default([]),untrackedAppFiles:b.array(b.string()).readonly()});function ko({cwd:e,scope:t}){let r=vo(e);So(e,{...Ro(e),scope:t,tests:r?.tests??[]})}function wo({cwd:e,tests:t}){let r=vo(e);So(e,{...Ro(e),scope:r?.scope??{available:!1,items:[]},tests:t??r?.tests??[]})}function vo(e){let t=Tl.safeParse(Ll(bo(e)));return t.success?t.data:null}function Ll(e){try{return JSON.parse(El(e,"utf8"))}catch{return null}}function bo(e){return mt(e,"coverage-context.json")}function So(e,t){let r=bo(e);Pl(jl.dirname(r),{recursive:!0}),$l(r,JSON.stringify(t,null,2))}function Ro(e){let{ignorePaths:t,watchPaths:r}=Z(),n={cwd:e,ignoreGlobs:t,watchGlobs:r};return{changedAppFiles:ho(n),untrackedAppFiles:yo(n)}}var _l=xo.looseObject({file_path:xo.string()}),Po=g("PostToolUse",async e=>{let t=_l.safeParse(e.tool_input);if(!t.success)return;let r=t.data.file_path,{cwd:n}=e;if(!f(n)||!w(n))return;let o=Dl.relative(n,r);if(o.startsWith(".."))return;let{ignorePaths:i,watchPaths:s}=Z(),a=Co([...s]),l=Co([...i]);if(!a(o)||l(o))return;let d=await S(n);if(wo({cwd:n,tests:d.isOk()?d.value.workflows.map(p=>({intent:p.intent,name:p.name,sourcePath:p.sourcePath??null,stub:p.stub})):void 0}),d.isErr())return;let v=N(d.value);if(v.length!==0)return{hookSpecificOutput:{additionalContext:`Reminder: stub workflows still unimplemented \u2014 ${v.join(", ")}. Implement with \`workflow("Intent", () => ({ given, steps }))\`.`,hookEventName:"PostToolUse"}}});import{createHash as Vl}from"crypto";import{z as Ao}from"zod";import{createHash as Ol}from"crypto";import{mkdirSync as Nl,readFileSync as Eo,writeFileSync as Ul}from"fs";import st from"path";var Fl=[".ts",".tsx",".js",".jsx"];function Fe(e){let t=Ol("sha256");return t.update(O(["rev-parse","HEAD"],e)),t.update("\0"),t.update(O(["diff","HEAD"],e)),t.update("\0"),O(["ls-files","--others","--exclude-standard"],e).split(`
+`).filter(n=>n.length>0).filter(n=>Fl.some(o=>n.endsWith(o))).toSorted((n,o)=>n.localeCompare(o)).forEach(n=>{t.update(n),t.update("\0"),t.update(Ml(st.join(e,n))),t.update("\0")}),t.digest("hex")}function ee(e,t){try{return Eo($o(e,t),"utf8").trim()}catch{return null}}function te(e,t,r){let n=$o(e,t);Nl(st.dirname(n),{recursive:!0}),Ul(n,r)}function Ml(e){try{return Eo(e)}catch{return Buffer.alloc(0)}}function $o(e,t){return st.join(e,".ripplo",".local",`${t}.hash`)}import{graphql as Hl}from"gql.tada";var Wl=Hl(`
   mutation AutoScopeAddDirty($projectId: String!, $cwd: String!, $workflowSlugs: [String!]!) {
     addDirtyTestsToScope(projectId: $projectId, cwd: $cwd, workflowSlugs: $workflowSlugs) {
       __typename
@@ -438,11 +442,11 @@ ${e.findings.map(t=>zr({evidencePath:void 0,finding:t})).join(`
       }
     }
   }
-`);async function ti({cwd:e,lockfile:r}){if(!b(e))return{addedSlugs:[]};let n=Ed(e);if(n.length===0)return{addedSlugs:[]};let t=new Set(n),o=r.workflows.filter(l=>l.sourcePath!=null&&t.has(l.sourcePath)).map(l=>O(l.name));if(o.length===0)return{addedSlugs:[]};let i=w(e).unwrapOr(void 0);return i==null?{addedSlugs:[]}:await Bn({config:i,cwd:e,lockfile:r}).catch(l=>($.warn("auto-sync failed: %s",l instanceof Error?l.message:String(l)),null))==null?{addedSlugs:[]}:{addedSlugs:await Pd({cfg:i,slugs:o})?o:[]}}async function Pd({cfg:e,slugs:r}){let t=(await m({config:e,document:Cd,variables:{cwd:e.cwd,projectId:e.projectId,workflowSlugs:[...r]}}).catch(o=>($.warn("auto-scope failed: %s",o instanceof Error?o.message:String(o)),null)))?.addDirtyTestsToScope;return t?.__typename!=="MutationAddDirtyTestsToScopeSuccess"?!1:t.data.length>0}var ni=".ripplo/workflows/";function Ed(e){let r;try{r=_(["status","--porcelain","--",".ripplo/workflows"],e)}catch{return[]}return r.split(`
-`).map(n=>n.slice(3).trim()).filter(n=>n.startsWith(ni)&&n.endsWith(".ts")).map(n=>n.slice(ni.length)).filter(n=>n!=="index.ts"&&!n.endsWith("/index.ts"))}var Id=oi.looseObject({file_path:oi.string()}),ii=g("PostToolUse",async e=>{let r=Id.safeParse(e.tool_input);if(!r.success||!/\/\.ripplo\/.*\.ts$/.test(r.data.file_path))return;let{cwd:n}=e;if(!f(n))return;if(!b(n))return{hookSpecificOutput:{additionalContext:"Ripplo hooks are paused \u2014 DSL lint and lockfile sync did not run for this edit. Resume with `npx ripplo hooks resume` when ready.",hookEventName:"PostToolUse"}};let t=await X(n);if(t.isErr())return{decision:"block",reason:`${v(t.error)}
-${c("create","DSL authoring + lint rules")}`};let o=M(t.value);if(o.length>0)return{decision:"block",reason:`${H(o)}
-${c("create")}`};let{addedSlugs:i}=await ti({cwd:n,lockfile:t.value});return jd([...i.length>0?[`Auto-scoped ${i.join(", ")} (dirty tests).`]:[],...Ad(n,t.value)])});function jd(e){if(e.length!==0)return{hookSpecificOutput:{additionalContext:e.join(`
-`),hookEventName:"PostToolUse"}}}function Ad(e,r){let n=je(r),t=$d("sha256").update(JSON.stringify(n)).digest("hex");return ne(e,"coverage-warn")===t?[]:(te(e,"coverage-warn",t),n.length===0?[]:[Ce(n)])}import{z as si}from"zod";var Td=si.looseObject({command:si.string()}),Ld=/\bripplo\s+hooks\s+pause\b/,ai=g("PreToolUse",e=>{if(e.tool_name!=="Bash")return;let r=Td.safeParse(e.tool_input);if(!r.success||!Ld.test(r.data.command))return;let{cwd:n}=e;if(f(n))return{hookSpecificOutput:{hookEventName:"PreToolUse",permissionDecision:"deny",permissionDecisionReason:"`ripplo hooks pause` is a human-only escape hatch \u2014 agents can't bypass Ripplo guardrails on their own. If the daemon genuinely can't start (auth, server down, intentional offline work), surface the blocker to the user and ask them to run `npx ripplo hooks pause` themselves from their terminal."}}});import{parse as Nd}from"shell-quote";import{z as di}from"zod";import{existsSync as Dd,mkdirSync as Od,rmSync as By,writeFileSync as _d}from"fs";import yr from"path";function Je(e,r,n){let t=li(e,r,n);Od(yr.dirname(t),{recursive:!0}),_d(t,"")}function Ke(e,r,n){return Dd(li(e,r,n))}function li(e,r,n){return yr.join(Fd(e,r),n)}function Fd(e,r){return yr.join(e,".ripplo",".local","skills-loaded",r)}var Ud=di.looseObject({command:di.string()}),Md="run",Hd=new Set(["tail","head","less","more","wc","sort","uniq","awk","sed","grep"]),pi=g("PreToolUse",e=>{if(e.tool_name!=="Bash")return;let r=Ud.safeParse(e.tool_input);if(!r.success)return;let n=Vd(r.data.command),t=Wd(n);if(t==null)return;let{cwd:o}=e;if(!f(o)||!b(o))return;if(!Ke(o,e.session_id,t.skill))return ci(t.reason);let i=t.kind==="run"?zd(n):null;if(i!=null)return ci(`Don't pipe \`ripplo run\` through \`${i}\` \u2014 buffering filters hide live progress, and killing the pipeline mid-run orphans the run on the server. Redirect to a file instead (\`npx ripplo run <id> > /tmp/run.log 2>&1\` and Read it), or use \`run_in_background: true\`.`)});function Wd(e){return qd(e)?{kind:"replay",reason:"Running `ripplo explore replay` requires the `/ripplo:fuzz` skill loaded first. Load `/ripplo:fuzz` then retry \u2014 it carries the triage loop and the add-vs-weaken guardrail for resolving findings.",skill:"fuzz"}:Bd(e)?{kind:"run",reason:"Running `ripplo run` requires the `/ripplo:run` skill loaded first. Load `/ripplo:run` then retry \u2014 it carries the artifact-read order, the no-grep-piping guidance, the failure decision tree, and the caught-bug filing contract.",skill:Md}:null}function qd(e){return e.some((r,n)=>r==="ripplo"&&e[n+1]==="explore"&&e[n+2]==="replay")}function Bd(e){return e.some((r,n)=>r==="ripplo"&&e[n+1]==="run")}function Vd(e){try{return Nd(e)}catch{return[]}}function Gd(e){return typeof e=="object"&&"op"in e&&e.op==="|"}function zd(e){let r=e.find((n,t)=>{let o=e[t-1];return o!=null&&Gd(o)&&typeof n=="string"&&Hd.has(n)});return typeof r=="string"?r:null}function ci(e){return{hookSpecificOutput:{hookEventName:"PreToolUse",permissionDecision:"deny",permissionDecisionReason:e}}}import Jd from"path";import{z as ui}from"zod";var Kd=new Set(["Edit","Write","NotebookEdit"]),Qd=ui.looseObject({file_path:ui.string()}),Xd="create",mi=g("PreToolUse",e=>{if(!Kd.has(e.tool_name))return;let r=Qd.safeParse(e.tool_input);if(!r.success)return;let{cwd:n}=e;if(!f(n)||!b(n))return;let t=Jd.relative(n,r.data.file_path);if(!(t.startsWith("..")||t!==".ripplo"&&!t.startsWith(".ripplo/"))&&!Ke(n,e.session_id,Xd))return{hookSpecificOutput:{hookEventName:"PreToolUse",permissionDecision:"deny",permissionDecisionReason:`Editing \`.ripplo/\` files (${t}) requires the \`/ripplo:create\` skill loaded first. Load \`/ripplo:create\` then retry \u2014 it carries the DSL builder shape, lint rules, and the parallelization guidance you'll need.`}}});import Yd from"path";import fi from"picomatch";import{graphql as Zd}from"gql.tada";import{z as gi}from"zod";var ec=new Set(["Edit","Write","NotebookEdit"]),rc=gi.looseObject({file_path:gi.string()}),nc=Zd(`
+`);async function Io({cwd:e,lockfile:t}){if(!w(e))return{addedSlugs:[]};let r=Bl(e);if(r.length===0)return{addedSlugs:[]};let n=new Set(r),o=t.workflows.filter(l=>l.sourcePath!=null&&n.has(l.sourcePath)).map(l=>_(l.name));if(o.length===0)return{addedSlugs:[]};let i=k(e).unwrapOr(void 0);return i==null?{addedSlugs:[]}:await kr({config:i,cwd:e,lockfile:t}).catch(l=>(L.warn("auto-sync failed: %s",l instanceof Error?l.message:String(l)),null))==null?{addedSlugs:[]}:{addedSlugs:await ql({cfg:i,slugs:o})?o:[]}}async function ql({cfg:e,slugs:t}){let n=(await m({config:e,document:Wl,variables:{cwd:e.cwd,projectId:e.projectId,workflowSlugs:[...t]}}).catch(o=>(L.warn("auto-scope failed: %s",o instanceof Error?o.message:String(o)),null)))?.addDirtyTestsToScope;return n?.__typename!=="MutationAddDirtyTestsToScopeSuccess"?!1:n.data.length>0}var jo=".ripplo/workflows/";function Bl(e){let t;try{t=O(["status","--porcelain","--",".ripplo/workflows"],e)}catch{return[]}return t.split(`
+`).map(r=>r.slice(3).trim()).filter(r=>r.startsWith(jo)&&r.endsWith(".ts")).map(r=>r.slice(jo.length)).filter(r=>r!=="index.ts"&&!r.endsWith("/index.ts"))}var Gl=Ao.looseObject({file_path:Ao.string()}),To=g("PostToolUse",async e=>{let t=Gl.safeParse(e.tool_input);if(!t.success||!/\/\.ripplo\/.*\.ts$/.test(t.data.file_path))return;let{cwd:r}=e;if(!f(r))return;if(!w(r))return{hookSpecificOutput:{additionalContext:"Ripplo hooks are paused \u2014 DSL lint and lockfile sync did not run for this edit. Resume with `npx ripplo hooks resume` when ready.",hookEventName:"PostToolUse"}};let n=await K(r);if(n.isErr())return{decision:"block",reason:`${R(n.error)}
+${c("create","DSL authoring + lint rules")}`};let o=M(n.value);if(o.length>0)return{decision:"block",reason:`${H(o)}
+${c("create")}`};let{addedSlugs:i}=await Io({cwd:r,lockfile:n.value});return zl([...i.length>0?[`Auto-scoped ${i.join(", ")} (dirty tests).`]:[],...Jl(r,n.value)])});function zl(e){if(e.length!==0)return{hookSpecificOutput:{additionalContext:e.join(`
+`),hookEventName:"PostToolUse"}}}function Jl(e,t){let r=Ce(t),n=Vl("sha256").update(JSON.stringify(r)).digest("hex");return ee(e,"coverage-warn")===n?[]:(te(e,"coverage-warn",n),r.length===0?[]:[we(r)])}import{z as Lo}from"zod";var Kl=Lo.looseObject({command:Lo.string()}),Ql=/\bripplo\s+hooks\s+pause\b/,Do=g("PreToolUse",e=>{if(e.tool_name!=="Bash")return;let t=Kl.safeParse(e.tool_input);if(!t.success||!Ql.test(t.data.command))return;let{cwd:r}=e;if(f(r))return{hookSpecificOutput:{hookEventName:"PreToolUse",permissionDecision:"deny",permissionDecisionReason:"`ripplo hooks pause` is a human-only escape hatch \u2014 agents can't bypass Ripplo guardrails on their own. If the daemon genuinely can't start (auth, server down, intentional offline work), surface the blocker to the user and ask them to run `npx ripplo hooks pause` themselves from their terminal."}}});import{parse as td}from"shell-quote";import{z as Oo}from"zod";import{existsSync as Xl,mkdirSync as Yl,rmSync as qh,writeFileSync as Zl}from"fs";import at from"path";function Me(e,t,r){let n=_o(e,t,r);Yl(at.dirname(n),{recursive:!0}),Zl(n,"")}function He(e,t,r){return Xl(_o(e,t,r))}function _o(e,t,r){return at.join(ed(e,t),r)}function ed(e,t){return at.join(e,".ripplo",".local","skills-loaded",t)}var rd=Oo.looseObject({command:Oo.string()}),nd="run",od=new Set(["tail","head","less","more","wc","sort","uniq","awk","sed","grep"]),Uo=g("PreToolUse",e=>{if(e.tool_name!=="Bash")return;let t=rd.safeParse(e.tool_input);if(!t.success)return;let r=ld(t.data.command),n=id(r);if(n==null)return;let{cwd:o}=e;if(!f(o)||!w(o))return;if(!He(o,e.session_id,n.skill))return No(n.reason);let i=n.kind==="run"?cd(r):null;if(i!=null)return No(`Don't pipe \`ripplo run\` through \`${i}\` \u2014 buffering filters hide live progress, and killing the pipeline mid-run orphans the run on the server. Redirect to a file instead (\`npx ripplo run <id> > /tmp/run.log 2>&1\` and Read it), or use \`run_in_background: true\`.`)});function id(e){return sd(e)?{kind:"replay",reason:"Running `ripplo explore replay` requires the `/ripplo:fuzz` skill loaded first. Load `/ripplo:fuzz` then retry \u2014 it carries the triage loop and the add-vs-weaken guardrail for resolving findings.",skill:"fuzz"}:ad(e)?{kind:"run",reason:"Running `ripplo run` requires the `/ripplo:run` skill loaded first. Load `/ripplo:run` then retry \u2014 it carries the artifact-read order, the no-grep-piping guidance, the failure decision tree, and the caught-bug filing contract.",skill:nd}:null}function sd(e){return e.some((t,r)=>t==="ripplo"&&e[r+1]==="explore"&&e[r+2]==="replay")}function ad(e){return e.some((t,r)=>t==="ripplo"&&e[r+1]==="run")}function ld(e){try{return td(e)}catch{return[]}}function dd(e){return typeof e=="object"&&"op"in e&&e.op==="|"}function cd(e){let t=e.find((r,n)=>{let o=e[n-1];return o!=null&&dd(o)&&typeof r=="string"&&od.has(r)});return typeof t=="string"?t:null}function No(e){return{hookSpecificOutput:{hookEventName:"PreToolUse",permissionDecision:"deny",permissionDecisionReason:e}}}import ud from"path";import{z as Fo}from"zod";var pd=new Set(["Edit","Write","NotebookEdit"]),md=Fo.looseObject({file_path:Fo.string()}),fd="create",Mo=g("PreToolUse",e=>{if(!pd.has(e.tool_name))return;let t=md.safeParse(e.tool_input);if(!t.success)return;let{cwd:r}=e;if(!f(r)||!w(r))return;let n=ud.relative(r,t.data.file_path);if(!(n.startsWith("..")||n!==".ripplo"&&!n.startsWith(".ripplo/"))&&!He(r,e.session_id,fd))return{hookSpecificOutput:{hookEventName:"PreToolUse",permissionDecision:"deny",permissionDecisionReason:`Editing \`.ripplo/\` files (${n}) requires the \`/ripplo:create\` skill loaded first. Load \`/ripplo:create\` then retry \u2014 it carries the DSL builder shape, lint rules, and the parallelization guidance you'll need.`}}});import gd from"path";import Ho from"picomatch";import{graphql as hd}from"gql.tada";import{z as Wo}from"zod";var yd=new Set(["Edit","Write","NotebookEdit"]),kd=Wo.looseObject({file_path:Wo.string()}),wd=hd(`
   query PreEditScopeGate($projectId: String!, $cwd: String!) {
     project(id: $projectId) {
       id
@@ -454,9 +458,9 @@ ${c("create")}`};let{addedSlugs:i}=await ti({cwd:n,lockfile:t.value});return jd(
       }
     }
   }
-`),hi=g("PreToolUse",async e=>{if(!ec.has(e.tool_name))return;let r=rc.safeParse(e.tool_input);if(!r.success)return;let{cwd:n}=e;if(!f(n)||!b(n))return;let t=Yd.relative(n,r.data.file_path);if(t.startsWith("..")||t===".ripplo"||t.startsWith(".ripplo/")||!tc(t))return;let o=await oc(n);return o.populated?o.degradedReason!=null?{hookSpecificOutput:{additionalContext:`Scope check skipped (${o.degradedReason}) \u2014 edit allowed through, but the scope guardrail isn't enforcing on this edit.`,hookEventName:"PreToolUse"}}:void 0:{hookSpecificOutput:{hookEventName:"PreToolUse",permissionDecision:"deny",permissionDecisionReason:`Scope is empty but this edit touches app code (${t}). Stub a test or \`scope add\` an existing one before proceeding \u2014 or acknowledge "no user-facing behavior" if pure refactor. Hook re-fires until scope is populated (or hooks paused via the web UI). ${Lr(["run","create"])}`}}});function tc(e){let{ignorePaths:r,watchPaths:n}=re(),t=fi([...n]),o=fi([...r]);return t(e)&&!o(e)}async function oc(e){let r=w(e).unwrapOr(void 0);if(r==null)return{degradedReason:"no project config \u2014 `npx ripplo init` not run here",populated:!0};let n=await m({config:r,document:nc,variables:{cwd:r.cwd,projectId:r.projectId}}).catch(()=>null);return n==null?{degradedReason:"server unreachable",populated:!0}:{degradedReason:null,populated:(n.project?.devSession?.scopeItems??[]).length>0}}import ic from"fs";import sc from"path";import{z as yi}from"zod";var ac=new Set(["Edit","Write","NotebookEdit"]),lc=yi.looseObject({file_path:yi.string()}),ki=g("PreToolUse",async e=>{if(!ac.has(e.tool_name))return;let r=dc(e);if(r==null)return;let{cwd:n}=e;if(ic.existsSync(ie(n))||ke(n))return;let t=await x(n);return t.isErr()?{hookSpecificOutput:{additionalContext:`\`ripplo daemon\` isn't running and the DSL is currently failing to compile, so the daemon gate is letting this edit through \u2014 fix the compile error before relying on dev-mode guardrails. Compile error:
-${v(t.error)}
-${c("create","DSL authoring + lint rules")}`,hookEventName:"PreToolUse"}}:{hookSpecificOutput:{hookEventName:"PreToolUse",permissionDecision:"deny",permissionDecisionReason:`\`ripplo daemon\` is not running \u2014 this edit to \`${r}\` won't sync and dev-mode guardrails won't fire. Run \`/ripplo:start\`, then retry (\`npx ripplo doctor\` checks the daemon and dev server). If the daemon can't start, the user can bypass with \`npx ripplo hooks pause\`. ${c("start")}`}}});function dc(e){let r=lc.safeParse(e.tool_input);if(!r.success||!f(e.cwd))return null;let n=sc.relative(e.cwd,r.data.file_path);return n.startsWith("..")||n!==".ripplo"&&!n.startsWith(".ripplo/")?null:n}import{graphql as cc}from"gql.tada";var pc=cc(`
+`),qo=g("PreToolUse",async e=>{if(!yd.has(e.tool_name))return;let t=kd.safeParse(e.tool_input);if(!t.success)return;let{cwd:r}=e;if(!f(r)||!w(r))return;let n=gd.relative(r,t.data.file_path);if(n.startsWith("..")||n===".ripplo"||n.startsWith(".ripplo/")||!vd(n))return;let o=await bd(r);return o.populated?o.degradedReason!=null?{hookSpecificOutput:{additionalContext:`Scope check skipped (${o.degradedReason}) \u2014 edit allowed through, but the scope guardrail isn't enforcing on this edit.`,hookEventName:"PreToolUse"}}:void 0:{hookSpecificOutput:{hookEventName:"PreToolUse",permissionDecision:"deny",permissionDecisionReason:`Scope is empty but this edit touches app code (${n}). Stub a test or \`scope add\` an existing one before proceeding \u2014 or acknowledge "no user-facing behavior" if pure refactor. Hook re-fires until scope is populated (or hooks paused via the web UI). ${Rt(["run","create"])}`}}});function vd(e){let{ignorePaths:t,watchPaths:r}=Z(),n=Ho([...r]),o=Ho([...t]);return n(e)&&!o(e)}async function bd(e){let t=k(e).unwrapOr(void 0);if(t==null)return{degradedReason:"no project config \u2014 `npx ripplo init` not run here",populated:!0};let r=await m({config:t,document:wd,variables:{cwd:t.cwd,projectId:t.projectId}}).catch(()=>null);return r==null?{degradedReason:"server unreachable",populated:!0}:{degradedReason:null,populated:(r.project?.devSession?.scopeItems??[]).length>0}}import Sd from"fs";import Rd from"path";import{z as Bo}from"zod";var Cd=new Set(["Edit","Write","NotebookEdit"]),xd=Bo.looseObject({file_path:Bo.string()}),Vo=g("PreToolUse",async e=>{if(!Cd.has(e.tool_name))return;let t=Pd(e);if(t==null)return;let{cwd:r}=e;if(Sd.existsSync(re(r))||ge(r))return;let n=await S(r);return n.isErr()?{hookSpecificOutput:{additionalContext:`\`ripplo daemon\` isn't running and the DSL is currently failing to compile, so the daemon gate is letting this edit through \u2014 fix the compile error before relying on dev-mode guardrails. Compile error:
+${R(n.error)}
+${c("create","DSL authoring + lint rules")}`,hookEventName:"PreToolUse"}}:{hookSpecificOutput:{hookEventName:"PreToolUse",permissionDecision:"deny",permissionDecisionReason:`\`ripplo daemon\` is not running \u2014 this edit to \`${t}\` won't sync and dev-mode guardrails won't fire. Run \`/ripplo:start\`, then retry (\`npx ripplo doctor\` checks the daemon and dev server). If the daemon can't start, the user can bypass with \`npx ripplo hooks pause\`. ${c("start")}`}}});function Pd(e){let t=xd.safeParse(e.tool_input);if(!t.success||!f(e.cwd))return null;let r=Rd.relative(e.cwd,t.data.file_path);return r.startsWith("..")||r!==".ripplo"&&!r.startsWith(".ripplo/")?null:r}import{graphql as Ed}from"gql.tada";var $d=Ed(`
   query ScopeReminder($projectId: String!, $cwd: String!) {
     project(id: $projectId) {
       id
@@ -473,16 +477,16 @@ ${c("create","DSL authoring + lint rules")}`,hookEventName:"PreToolUse"}}:{hookS
       }
     }
   }
-`),wi=g("UserPromptSubmit",async e=>{let{cwd:r}=e;if(!f(r)||!b(r))return;let n=ze(r);if(ne(r,"scope-reminder")===n)return;let t=w(r).unwrapOr(void 0);if(t==null)return;let o=await m({config:t,document:pc,variables:{cwd:t.cwd,projectId:t.projectId}}).catch(()=>null);te(r,"scope-reminder",n);let i=o?.project?.devSession?.scopeItems??[];return Vo({cwd:r,scope:{available:o!=null,items:i.map(s=>uc(s))}}),o==null?{hookSpecificOutput:{additionalContext:`Ripplo scope: unknown \u2014 server unreachable, scope guardrails are not enforcing. Check the dev session (\`npx ripplo doctor\`). ${c("start")}`,hookEventName:"UserPromptSubmit"}}:{hookSpecificOutput:{additionalContext:i.length===0?`Ripplo scope: empty. ${c("run")}`:`Ripplo scope (${String(i.length)}):
-${i.map(s=>{let l=s.workflow;return l==null?`  [intent] (${s.id}) ${s.label??""}`:`  [${l.spec==null?"stub":"implemented"}] (${s.id}) ${l.slug}`}).join(`
-`)}`,hookEventName:"UserPromptSubmit"}}});function uc(e){let r=e.workflow;return r==null?{label:e.label,slug:null,status:"intent"}:{label:e.label,slug:r.slug,status:r.spec==null?"stub":"implemented"}}var mc="# Ripplo \u2014 always-on session context\n\nEvery user-facing change in this repo ships with a deterministic, backend-aware test that proves it works end-to-end.\n\n## Load the right skill before acting \u2014 this is critical\n\nThe skills below carry the procedural detail you need to do Ripplo work correctly: entity/world modeling, parallel-isolation in engine impls, backend state assertions, scope discipline, artifact-read order on failures, parallelization patterns. **None of that is reproduced in this preamble** \u2014 only the always-on guardrails are. If you act on a Ripplo task without loading the matching skill, you will skip rules that exist to prevent specific past failure modes (cross-run data leakage, \"passing\" tests that never asserted backend state, etc.).\n\nMatch the task to a skill from the triage table \u2014 if unsure between two, load both. If completely unsure, load `/ripplo:discover` or `/ripplo:create`. Loading is cheap. Acting under-informed is not.\n\n## Skill triage\n\n- Load `/ripplo:setup` skill for instructions on initializing Ripplo in a project; `npx ripplo doctor` reports the engine endpoint missing.\n- Load `/ripplo:discover` skill for instructions on planning/stubbing test coverage for a new project or new feature area.\n- Load `/ripplo:create` skill for instructions on authoring a single test spec for a user flow.\n- Load `/ripplo:run` skill for instructions on executing tests, managing the testing scope this session is responsible for, diagnosing a failed run (read artifacts in `.ripplo/debug/<runId>/` before re-running), and filing caught app bugs.\n- Load `/ripplo:fuzz` skill for instructions on triaging findings from the background explorer's findings log.\n\n## Universal rules\n\n- **Two background processes must be running before feature work.** (1) The app's dev server, so the app is reachable; (2) `npx ripplo daemon` (run `/ripplo:start` to spawn it, or invoke it directly via Bash with `run_in_background`), so the dev session is live. Without the daemon, dev-mode hooks don't arm (`ripplo run` will auto-start one if absent). Without the dev server, runs fail when they try to hit the app. `npx ripplo doctor` reports both.\n- **Two funnels.** Definitions \u2192 `createRipplo({ entities, singletons, tests })` in `.ripplo/index.ts`. Implementations \u2192 `createEngine(ripplo, { entities: impls, singletons })` in your app server's `test/engine.ts` \u2014 one `seed`/`read` impl per entity. Never call either elsewhere. TS enforces exhaustiveness across both.\n- **\"Done\" = app code delivers the behavior AND a passing test proves it.** Both halves. Shipping without a test isn't done; writing a test against broken UI/API isn't done.\n- **Scope is your job.** For any non-trivial change, enumerate every flow it could affect and either `scope add` existing tests or stub new ones with `test(\"Intent\")` (no body). Don't wait to be told.\n- **`scope remove` is never for size/effort.** Valid only when an item is genuinely out of scope (wrong flow, duplicate, user said \"not this session,\" feature cut). \"Too many stubs\" \u2192 parallelize with subagents. Don't present \"implement vs. remove\" as a neutral A/B.\n- **Stub gates are not a question.** When `stop-enforce` blocks on unimplemented stubs, implement them \u2014 don't ask the user \"implement or defer?\", don't propose pausing hooks as option B. The fix isn't done until the test is. New scaffolding (entity, world, engine impl) is in-scope work, not follow-up.\n- **Backend assertions are mandatory on mutations.** Every mutation step carries an `Entity.created/updated/deleted` in its `.expect(...)` \u2014 Ripplo checks your app's state against what the test expected. A UI-only check on a mutation ships the bug as green.\n- **Never weaken a test to make it pass.** No `contains`/regex for exact text, no removed assertions, no fabricated locators. App lacks an accessible name \u2192 add one to the app, don't fall back to `testId()`. App bug \u2192 report with evidence.\n- **Artifacts first, re-run last.** Failed runs write `.ripplo/debug/<runId>/behavior.jsonl` \u2014 a causal stream of actions, assertions, rrweb DOM, console, network, and server spans \u2014 and the run output renders the findings. Read them. Never pipe `ripplo run` through `grep`/`tail`/`head`. Form a hypothesis citing an event, make one change, re-run once.\n- **`.ripplo/ripplo.lock` is committed, never hand-edited.** `ripplo lint` / `ripplo compile` regenerates it. Pre-commit runs `ripplo compile --check`.\n- **Scratch files live in `.ripplo/.local/`.** Never loose in `.ripplo/`.\n- **Worktrees are self-contained.** Each worktree has its own `.ripplo/` checkout, DevSession, scope, and debug artifacts. Auth and projectId are shared globally. Env files (typically gitignored) won't carry over to a fresh worktree \u2014 copy from main or point at a shared file. **If sibling worktrees run dev servers on different ports, the worktree's env file must update both `RIPPLO_APP_URL` and `RIPPLO_ENGINE_URL` to match the port that worktree's dev server is bound to** (e.g. main on `:3000`, this worktree on `:3001` \u2192 set `RIPPLO_APP_URL=http://localhost:3001` and `RIPPLO_ENGINE_URL=http://localhost:3001/ripplo` in the worktree's env file). Mismatched ports = `npx ripplo daemon` talks to the wrong server, runs silently fail or hit the sibling worktree's app.\n- **DSL locators are semantic.** Use `role`/`button`/`textbox`/`heading`/`link`; `testId` only when no ARIA role exists.\n- **New backend state?** Add an `entity(...)` in `.ripplo/entities/` and a `seed`/`read` impl in your app's engine funnel (TS flags the missing impl).\n\n## Key files\n\n- `.ripplo/index.ts` \u2014 `createRipplo` call.\n- `.ripplo/{entities,singletons,worlds,tests}/index.ts` \u2014 registry aggregators.\n- `.ripplo/project.json` \u2014 project id + env-file pointers.\n- `<app>/src/test/engine.ts` \u2014 single impl funnel via `createEngine`.\n- `/ripplo:create` skill \u2014 DSL reference (entities, worlds, tests, backend assertions). Full primitive catalog at `node_modules/@ripplo/testing/DSL.md`.\n",vi=g("SessionStart",e=>{if(f(e.cwd))return{hookSpecificOutput:{additionalContext:mc,hookEventName:"SessionStart"}}});import fc from"path";import gc from"process";import{CancellationTokenSource as hc}from"vscode-jsonrpc/node";import{graphql as yc}from"gql.tada";function bi(e){return`--- Ripplo Run Failures (scope) ---
+`),Go=g("UserPromptSubmit",async e=>{let{cwd:t}=e;if(!f(t)||!w(t))return;let r=Fe(t);if(ee(t,"scope-reminder")===r)return;let n=k(t).unwrapOr(void 0);if(n==null)return;let o=await m({config:n,document:$d,variables:{cwd:n.cwd,projectId:n.projectId}}).catch(()=>null);te(t,"scope-reminder",r);let i=o?.project?.devSession?.scopeItems??[];return ko({cwd:t,scope:{available:o!=null,items:i.map(a=>jd(a))}}),o==null?{hookSpecificOutput:{additionalContext:`Ripplo scope: unknown \u2014 server unreachable, scope guardrails are not enforcing. Check the dev session (\`npx ripplo doctor\`). ${c("start")}`,hookEventName:"UserPromptSubmit"}}:{hookSpecificOutput:{additionalContext:i.length===0?`Ripplo scope: empty. ${c("run")}`:`Ripplo scope (${String(i.length)}):
+${i.map(a=>{let l=a.workflow;return l==null?`  [intent] (${a.id}) ${a.label??""}`:`  [${l.spec==null?"stub":"implemented"}] (${a.id}) ${l.slug}`}).join(`
+`)}`,hookEventName:"UserPromptSubmit"}}});function jd(e){let t=e.workflow;return t==null?{label:e.label,slug:null,status:"intent"}:{label:e.label,slug:t.slug,status:t.spec==null?"stub":"implemented"}}var Id="# Ripplo \u2014 always-on session context\n\nEvery user-facing change in this repo ships with a deterministic, backend-aware test that proves it works end-to-end.\n\n## Load the right skill before acting \u2014 this is critical\n\nThe skills below carry the procedural detail you need to do Ripplo work correctly: entity/world modeling, parallel-isolation in engine impls, backend state assertions, scope discipline, artifact-read order on failures, parallelization patterns. **None of that is reproduced in this preamble** \u2014 only the always-on guardrails are. If you act on a Ripplo task without loading the matching skill, you will skip rules that exist to prevent specific past failure modes (cross-run data leakage, \"passing\" tests that never asserted backend state, etc.).\n\nMatch the task to a skill from the triage table \u2014 if unsure between two, load both. If completely unsure, load `/ripplo:discover` or `/ripplo:create`. Loading is cheap. Acting under-informed is not.\n\n## Skill triage\n\n- Load `/ripplo:setup` skill for instructions on initializing Ripplo in a project; `npx ripplo doctor` reports the engine endpoint missing.\n- Load `/ripplo:discover` skill for instructions on planning/stubbing test coverage for a new project or new feature area.\n- Load `/ripplo:create` skill for instructions on authoring a single test spec for a user flow.\n- Load `/ripplo:run` skill for instructions on executing tests, managing the testing scope this session is responsible for, diagnosing a failed run (read artifacts in `.ripplo/debug/<runId>/` before re-running), and filing caught app bugs.\n- Load `/ripplo:fuzz` skill for instructions on triaging findings from the background explorer's findings log.\n\n## Universal rules\n\n- **Two background processes must be running before feature work.** (1) The app's dev server, so the app is reachable; (2) `npx ripplo daemon` (run `/ripplo:start` to spawn it, or invoke it directly via Bash with `run_in_background`), so the dev session is live. Without the daemon, dev-mode hooks don't arm (`ripplo run` will auto-start one if absent). Without the dev server, runs fail when they try to hit the app. `npx ripplo doctor` reports both.\n- **Two funnels.** Definitions \u2192 `createRipplo({ entities, singletons, tests })` in `.ripplo/index.ts`. Implementations \u2192 `createEngine(ripplo, { entities: impls, singletons })` in your app server's `test/engine.ts` \u2014 one `seed`/`read` impl per entity. Never call either elsewhere. TS enforces exhaustiveness across both.\n- **\"Done\" = app code delivers the behavior AND a passing test proves it.** Both halves. Shipping without a test isn't done; writing a test against broken UI/API isn't done.\n- **Scope is your job.** For any non-trivial change, enumerate every flow it could affect and either `scope add` existing tests or stub new ones with `test(\"Intent\")` (no body). Don't wait to be told.\n- **`scope remove` is never for size/effort.** Valid only when an item is genuinely out of scope (wrong flow, duplicate, user said \"not this session,\" feature cut). \"Too many stubs\" \u2192 parallelize with subagents. Don't present \"implement vs. remove\" as a neutral A/B.\n- **Stub gates are not a question.** When `stop-enforce` blocks on unimplemented stubs, implement them \u2014 don't ask the user \"implement or defer?\", don't propose pausing hooks as option B. The fix isn't done until the test is. New scaffolding (entity, world, engine impl) is in-scope work, not follow-up.\n- **Backend assertions are mandatory on mutations.** Every mutation step carries an `Entity.created/updated/deleted` in its `.expect(...)` \u2014 Ripplo checks your app's state against what the test expected. A UI-only check on a mutation ships the bug as green.\n- **Never weaken a test to make it pass.** No `contains`/regex for exact text, no removed assertions, no fabricated locators. App lacks an accessible name \u2192 add one to the app, don't fall back to `testId()`. App bug \u2192 report with evidence.\n- **Artifacts first, re-run last.** Failed runs write `.ripplo/debug/<runId>/behavior.jsonl` \u2014 a causal stream of actions, assertions, rrweb DOM, console, network, and server spans \u2014 and the run output renders the findings. Read them. Never pipe `ripplo run` through `grep`/`tail`/`head`. Form a hypothesis citing an event, make one change, re-run once.\n- **`.ripplo/ripplo.lock` is committed, never hand-edited.** `ripplo lint` / `ripplo compile` regenerates it. Pre-commit runs `ripplo compile --check`.\n- **Scratch files live in `.ripplo/.local/`.** Never loose in `.ripplo/`.\n- **Worktrees are self-contained.** Each worktree has its own `.ripplo/` checkout, DevSession, scope, and debug artifacts. Auth and projectId are shared globally. Env files (typically gitignored) won't carry over to a fresh worktree \u2014 copy from main or point at a shared file. **If sibling worktrees run dev servers on different ports, the worktree's env file must update both `RIPPLO_APP_URL` and `RIPPLO_ENGINE_URL` to match the port that worktree's dev server is bound to** (e.g. main on `:3000`, this worktree on `:3001` \u2192 set `RIPPLO_APP_URL=http://localhost:3001` and `RIPPLO_ENGINE_URL=http://localhost:3001/ripplo` in the worktree's env file). Mismatched ports = `npx ripplo daemon` talks to the wrong server, runs silently fail or hit the sibling worktree's app.\n- **DSL locators are semantic.** Use `role`/`button`/`textbox`/`heading`/`link`; `testId` only when no ARIA role exists.\n- **New backend state?** Add an `entity(...)` in `.ripplo/entities/` and a `seed`/`read` impl in your app's engine funnel (TS flags the missing impl).\n\n## Key files\n\n- `.ripplo/index.ts` \u2014 `createRipplo` call.\n- `.ripplo/{entities,singletons,worlds,tests}/index.ts` \u2014 registry aggregators.\n- `.ripplo/project.json` \u2014 project id + env-file pointers.\n- `<app>/src/test/engine.ts` \u2014 single impl funnel via `createEngine`.\n- `/ripplo:create` skill \u2014 DSL reference (entities, worlds, tests, backend assertions). Full primitive catalog at `node_modules/@ripplo/testing/DSL.md`.\n",zo=g("SessionStart",e=>{if(f(e.cwd))return{hookSpecificOutput:{additionalContext:Id,hookEventName:"SessionStart"}}});import Ad from"path";import Td from"process";import{CancellationTokenSource as Ld}from"vscode-jsonrpc/node";import{graphql as Dd}from"gql.tada";function Jo(e){return`--- Ripplo Run Failures (scope) ---
 ${e.join(`
 `)}
-Artifacts: .ripplo/debug/<runId>/. ${c("run")}`}function kr({lines:e,retried:r}){let n=r?"Already retried once inside this gate \u2014 still unreachable.":"";return["--- Ripplo Run Not Verified (Ripplo server unreachable) ---",...e,"The Ripplo server was unreachable during these runs \u2014 a server-side transient. Don't debug the daemon, dev server, or auth (`npx ripplo doctor` will be green).",n,"Wait a moment, then stop again to re-verify."].filter(t=>t.length>0).join(`
-`)}function Si(e){return["--- Ripplo Run Rejected (server declined) ---",...e,"The server rejected these runs \u2014 not transient. Retrying won't clear it, and `npx ripplo doctor` will be green. Resolve the stated cause (plan limit, missing test, repo link), not the daemon or dev server."].join(`
-`)}function ge(e){return`--- Ripplo Run Could Not Execute ---
+Artifacts: .ripplo/debug/<runId>/. ${c("run")}`}function lt({lines:e,retried:t}){let r=t?"Already retried once inside this gate \u2014 still unreachable.":"";return["--- Ripplo Run Not Verified (Ripplo server unreachable) ---",...e,"The Ripplo server was unreachable during these runs \u2014 a server-side transient. Don't debug the daemon, dev server, or auth (`npx ripplo doctor` will be green).",r,"Wait a moment, then stop again to re-verify."].filter(n=>n.length>0).join(`
+`)}function Ko(e){return["--- Ripplo Run Rejected (server declined) ---",...e,"The server rejected these runs \u2014 not transient. Retrying won't clear it, and `npx ripplo doctor` will be green. Resolve the stated cause (plan limit, missing test, repo link), not the daemon or dev server."].join(`
+`)}function me(e){return`--- Ripplo Run Could Not Execute ---
 ${e}
-Fix the run environment (daemon, dev server, auth \u2014 \`npx ripplo doctor\`) and re-run before declaring work done. ${c("start")}`}var kc=yc(`
+Fix the run environment (daemon, dev server, auth \u2014 \`npx ripplo doctor\`) and re-run before declaring work done. ${c("start")}`}var _d=Dd(`
   query ScopeEnforce($projectId: String!, $cwd: String!) {
     project(id: $projectId) {
       id
@@ -501,26 +505,26 @@ Fix the run environment (daemon, dev server, auth \u2014 \`npx ripplo doctor\`)
       }
     }
   }
-`),Ri=g("Stop",async e=>{let{cwd:r}=e;if(!f(r)||!b(r))return;let n=ze(r),t=ne(r,"stop-enforce")===n;if(t&&!e.stop_hook_active)return;let o=await wc(r);if(te(r,"stop-enforce",n),o.errors.length!==0)return t&&e.stop_hook_active&&!o.infraOnly?{continue:!1,stopReason:`Stop-enforce: same repo state across consecutive stop attempts \u2014 agent appears stuck. Errors:
+`),Xo=g("Stop",async e=>{let{cwd:t}=e;if(!f(t)||!w(t))return;let r=Fe(t),n=ee(t,"stop-enforce")===r;if(n&&!e.stop_hook_active)return;let o=await Od(t);if(te(t,"stop-enforce",r),o.errors.length!==0)return n&&e.stop_hook_active&&!o.infraOnly?{continue:!1,stopReason:`Stop-enforce: same repo state across consecutive stop attempts \u2014 agent appears stuck. Errors:
 ${o.errors.join(`
 
 `)}`}:{decision:"block",reason:o.errors.join(`
 
-`)}});async function wc(e){let r=await X(e);if(r.isErr())return{errors:[`--- Compilation failed ---
-${v(r.error)}
-${c("create")}`],infraOnly:!1};let n=r.value,t=await Sc(e,n),o=vc(n),i=bc(n),a=t.runnableSlugs.length>0?await Rc(e):null,s=[o,i,a?.error??null,t.error].filter(d=>d!=null),l=s.length>0&&o==null&&i==null&&t.error==null&&(a?.infra??!1);return{errors:s,infraOnly:l}}function vc(e){let r=M(e);return r.length===0?null:`--- Ripplo Lint ---
-${H(r)}
-${c("create")}`}function bc(e){let r=F(e);return r.length===0?null:`--- Unimplemented stubs ---
-${r.join(", ")}
+`)}});async function Od(e){let t=await K(e);if(t.isErr())return{errors:[`--- Compilation failed ---
+${R(t.error)}
+${c("create")}`],infraOnly:!1};let r=t.value,n=await Fd(e,r),o=Nd(r),i=Ud(r),s=n.runnableSlugs.length>0?await Hd(e):null,a=[o,i,s?.error??null,n.error].filter(d=>d!=null),l=a.length>0&&o==null&&i==null&&n.error==null&&(s?.infra??!1);return{errors:a,infraOnly:l}}function Nd(e){let t=M(e);return t.length===0?null:`--- Ripplo Lint ---
+${H(t)}
+${c("create")}`}function Ud(e){let t=N(e);return t.length===0?null:`--- Unimplemented stubs ---
+${t.join(", ")}
 Implement the stub now with \`workflow("Intent", () => ({ given, steps }))\`. Do not ask the user "implement or defer?" \u2014 that framing is forbidden by /ripplo:create. New scaffolding (entity, world, engine impl) is in-scope, not follow-up.
-${c("create")}`}async function Sc(e,r){let n=new Set(F(r).map(p=>O(p))),t=new Set(r.workflows.map(p=>O(p.name))),o=(p,u)=>t.has(p)?n.has(p):xc(u),i=w(e).unwrapOr(void 0);if(i==null)return{error:`--- Testing Scope (not checked) ---
-No project config \u2014 \`npx ripplo init\` hasn't run here, so scope/stub done-checks are not enforcing. ${c("setup")}`,runnableSlugs:[]};let a=await m({config:i,document:kc,variables:{cwd:i.cwd,projectId:i.projectId}}).catch(()=>null);if(a==null)return{error:`--- Testing Scope (not checked) ---
-Ripplo server unreachable \u2014 scope/stub done-checks are not enforcing. Verify the dev session is live (\`npx ripplo doctor\`, ${c("start")}) before declaring work done.`,runnableSlugs:[]};let s=a.project?.devSession?.scopeItems??[],l=s.flatMap(p=>{let u=p.workflow;return u==null?[`  [intent] ${p.label??"(no label)"} \u2014 write a test for this flow`]:o(u.slug,u.spec)?[`  [stub] ${u.slug} \u2014 implement \`${u.name}\``]:[]}),d=s.flatMap(p=>p.workflow!=null&&!o(p.workflow.slug,p.workflow.spec)?[p.workflow.slug]:[]);return{error:l.length===0?null:`--- Testing Scope ---
+${c("create")}`}async function Fd(e,t){let r=new Set(N(t).map(p=>_(p))),n=new Set(t.workflows.map(p=>_(p.name))),o=(p,u)=>n.has(p)?r.has(p):Md(u),i=k(e).unwrapOr(void 0);if(i==null)return{error:`--- Testing Scope (not checked) ---
+No project config \u2014 \`npx ripplo init\` hasn't run here, so scope/stub done-checks are not enforcing. ${c("setup")}`,runnableSlugs:[]};let s=await m({config:i,document:_d,variables:{cwd:i.cwd,projectId:i.projectId}}).catch(()=>null);if(s==null)return{error:`--- Testing Scope (not checked) ---
+Ripplo server unreachable \u2014 scope/stub done-checks are not enforcing. Verify the dev session is live (\`npx ripplo doctor\`, ${c("start")}) before declaring work done.`,runnableSlugs:[]};let a=s.project?.devSession?.scopeItems??[],l=a.flatMap(p=>{let u=p.workflow;return u==null?[`  [intent] ${p.label??"(no label)"} \u2014 write a test for this flow`]:o(u.slug,u.spec)?[`  [stub] ${u.slug} \u2014 implement \`${u.name}\``]:[]}),d=a.flatMap(p=>p.workflow!=null&&!o(p.workflow.slug,p.workflow.spec)?[p.workflow.slug]:[]);return{error:l.length===0?null:`--- Testing Scope ---
 ${l.join(`
 `)}
-${c("create")}`,runnableSlugs:d}}function xc(e){return typeof e=="object"&&e!=null&&Reflect.get(e,"stub")===!0}async function Rc(e){let r=gc.argv[1];if(r==null)return{error:ge("CLI entry missing (process.argv[1])"),infra:!1};let n=await _e(e);if(n!=null){let i=Ue(n);return Fe(n.serverUrl)?{error:ge(i),infra:!1}:{error:kr({lines:[i],retried:!1}),infra:!0}}let t=await Te({cliEntry:r,cwd:e});if(t.isErr())return{error:ge(T(t.error)),infra:!1};let o=t.value;try{return await Cc({connection:o,cwd:e})}finally{o.spawned&&await De(o),o.socket.destroy()}}async function Cc({connection:e,cwd:r}){let n=await xi({connection:e,cwd:r,tests:[]});if(n.kind==="transport")return{error:ge(n.message),infra:!1};let t=n.notRun.length>0?await xi({connection:e,cwd:r,tests:n.notRun.map(l=>l.id)}):null,o=t==null||t.kind==="transport"?n.notRun:t.notRun,i=t!=null&&t.kind==="done",a=[...n.failedLines,...i?t.failedLines:[]],s=[...n.rejected,...i?t.rejected:[]];return Pc({failedLines:a,notRun:o,rejected:s,retried:t!=null})}function Pc({failedLines:e,notRun:r,rejected:n,retried:t}){if(e.length===0&&r.length===0&&n.length===0)return{error:null,infra:!1};let o=e.length>0?bi(e):null,i=n.length>0?Si(n):null,a=r.length>0?kr({lines:r.map(s=>s.line),retried:t}):null;return{error:[o,i,a].filter(s=>s!=null).join(`
+${c("create")}`,runnableSlugs:d}}function Md(e){return typeof e=="object"&&e!=null&&Reflect.get(e,"stub")===!0}async function Hd(e){let t=Td.argv[1];if(t==null)return{error:me("CLI entry missing (process.argv[1])"),infra:!1};let r=await $e(e);if(r!=null){let i=Ae(r);return je(r.serverUrl)?{error:me(i),infra:!1}:{error:lt({lines:[i],retried:!1}),infra:!0}}let n=await un({cliEntry:t,cwd:e});if(n.isErr())return{error:me(G(n.error)),infra:!1};let o=n.value;try{return await Wd({connection:o,cwd:e})}finally{o.spawned&&await hn(o),o.socket.destroy()}}async function Wd({connection:e,cwd:t}){let r=await Qo({connection:e,cwd:t,tests:[]});if(r.kind==="transport")return{error:me(r.message),infra:!1};let n=r.notRun.length>0?await Qo({connection:e,cwd:t,tests:r.notRun.map(l=>l.id)}):null,o=n==null||n.kind==="transport"?r.notRun:n.notRun,i=n!=null&&n.kind==="done",s=[...r.failedLines,...i?n.failedLines:[]],a=[...r.rejected,...i?n.rejected:[]];return qd({failedLines:s,notRun:o,rejected:a,retried:n!=null})}function qd({failedLines:e,notRun:t,rejected:r,retried:n}){if(e.length===0&&t.length===0&&r.length===0)return{error:null,infra:!1};let o=e.length>0?Jo(e):null,i=r.length>0?Ko(r):null,s=t.length>0?lt({lines:t.map(a=>a.line),retried:n}):null;return{error:[o,i,s].filter(a=>a!=null).join(`
 
-`),infra:o==null}}async function xi({connection:e,cwd:r,tests:n}){let t=[],o=[],i=[],a=fc.join(r,".ripplo","debug"),s=new hc;return(await Le({connection:e,request:{all:!1,headed:!1,tests:[...n]},token:s.token,onEvent:d=>{Ec({debugDir:a,event:d,failedLines:t,notRun:o,rejected:i})}})).match(d=>d.kind==="daemon-error"?{kind:"transport",message:Me(d.error)}:{failedLines:t,kind:"done",notRun:o,rejected:i},d=>({kind:"transport",message:T(d)}))}function Ec({debugDir:e,event:r,failedLines:n,notRun:t,rejected:o}){if(r.kind!=="test-outcome"||r.outcome.kind==="pass")return;let i=Ne({debugDir:e,event:r})??r.testName;if(r.outcome.kind==="dispatch-error"){o.push(i);return}if(r.outcome.kind==="dispatch-timeout"||r.outcome.kind==="infra-error"){t.push({id:`${r.workflowName}/${r.testName}`,line:i});return}n.push(i)}import{z as Ci}from"zod";var $c=Ci.looseObject({skill:Ci.string()}),Pi=g("PostToolUse",e=>{if(e.tool_name!=="Skill")return;let r=$c.safeParse(e.tool_input);if(!r.success)return;let n=/^ripplo:(.+)$/.exec(r.data.skill);if(n==null)return;let t=n[1];t!=null&&f(e.cwd)&&Je(e.cwd,e.session_id,t)});var Ic=/(?:^|\s)\/ripplo:([a-z][a-z0-9-]*)\b/gi,Ei=g("UserPromptSubmit",e=>{f(e.cwd)&&[...e.prompt.matchAll(Ic)].map(r=>r[1]).filter(r=>r!=null).forEach(r=>{Je(e.cwd,e.session_id,r)})});zc();B(process.cwd());Cr();var $i={"exit-plan-gate":Ho,"plan-reminder":Wo,"post-edit-flag-stubs":Zo,"post-edit-lint":ii,"pre-bash-hooks-pause-gate":ai,"pre-bash-run-gate":pi,"pre-edit-ripplo-skill-gate":mi,"pre-edit-scope-gate":hi,"pre-edit-watch-gate":ki,"scope-reminder":wi,"session-preamble":vi,"stop-enforce":Ri,"track-skill-load":Pi,"track-skill-prompt":Ei};async function Dc(){Ac({pkg:{name:"ripplo",version:P()}}).notify({message:Gn()}),await Tc(Lc(process.argv)).scriptName("ripplo").version(P()).command(Nc()).command("concurrency [value]","Show or set max local concurrent runs (daemon applies live)",e=>e.positional("value",{type:"number"}),e=>nt({value:e.value})).command("auth <subcommand>","Manage authentication",Gc).command("projects <subcommand>","Inspect Ripplo projects",Vc).command("hooks <subcommand>","Pause or resume Ripplo hooks",Bc).command("init","Scaffold .ripplo/ in this project",e=>e.option("project",{type:"string"}).option("env",{type:"string"}).option("app-url",{type:"string"}).option("engine-url",{type:"string"}),e=>Ct({appUrl:e["app-url"],engineUrl:e["engine-url"],envFile:e.env,projectId:e.project})).command("run [ids..]","Run tests locally via the daemon (start it first with `npx ripplo daemon`)",Wc,e=>to({all:e.all,headed:e.headed,ids:e.ids})).command(Mc()).command(Hc()).command(Fc()).command(Uc()).command("lint","Static model analysis (cascade gaps + law conflicts; no live app)",()=>{},()=>Pt()).command("sync","Push the compiled .ripplo/ resources to the server (no run)",()=>{},()=>bo()).command("compile","Compile the DSL and write .ripplo/ripplo.lock",e=>e.option("check",{default:!1,describe:"Exit non-zero if the lockfile is missing or stale (does not write)",type:"boolean"}),e=>et({check:e.check})).command("update","Update ripplo to the latest published version (and hand the daemon off to it)",()=>{},()=>jo()).command("doctor","Check project health",()=>{},()=>mt()).command("status","Report stub tests and daemon status",e=>e.option("format",{choices:["json","summary"],default:"json",describe:"Output format"}),e=>Uo({format:e.format})).command("scope <subcommand>","Manage testing scope",qc).command("run-worker",!1,()=>{},()=>ao()).command("hook <name>","Internal: run a Claude Code plugin hook",e=>e.positional("name",{choices:Object.keys($i),demandOption:!0,type:"string"}),e=>Oc(e.name)).strict().help().parse()}async function Oc(e){let r=$i[e];r==null&&(process.stderr.write(`Unknown hook: ${e}
-`),process.exit(1));let n=await _c(),t=n.trim()===""?{}:JSON.parse(n),o=await r.run(t);o!=null&&process.stdout.write(JSON.stringify(o))}function _c(){return new Promise((e,r)=>{if(process.stdin.isTTY){e("");return}let n=[];process.stdin.on("data",t=>n.push(t)),process.stdin.on("end",()=>{e(Buffer.concat(n).toString("utf8"))}),process.stdin.on("error",r)})}Dc().catch(e=>{process.stderr.write(`${Fr(e)}
-`),process.exit(1)});function Fc(){return{command:"report-bug",describe:"Report a critical application bug caught while building or testing",builder:e=>e.option("kind",{choices:["new_feature_bug","regression","latent_bug"],demandOption:!0,describe:"new_feature_bug: broke the new thing being built; regression: broke previously working behavior; latent_bug: pre-existing bug exposed by new test coverage"}).option("title",{demandOption:!0,describe:"Short bug name",type:"string"}).option("root-cause",{demandOption:!0,describe:"What was actually wrong",type:"string"}).option("surfaced-by",{demandOption:!0,describe:"How the test/run exposed it (cite evidence)",type:"string"}).option("run",{demandOption:!0,describe:"Run id where it surfaced \u2014 links the bug to its replay. For an exploration finding, pass the explore-\u2026 run id shown by npx ripplo explore findings",type:"string"}),handler:e=>no({kind:e.kind,rootCause:e["root-cause"],runId:e.run,surfacedBy:e["surfaced-by"],title:e.title})}}function Nc(){return{command:"daemon",describe:"Run the long-lived local executor (IPC socket + run subscription)",builder:e=>e.option("executor",{choices:["local","cloud"],default:"local",describe:"Run executor (local pool, or cloud fleet via a per-session tunnel)"}).option("explore",{default:!1,describe:"Opt in to background exploration when idle (experimental)",type:"boolean"}).option("exploreConcurrency",{default:2,describe:"Max concurrent background exploration trails (keeps the machine responsive)",type:"number"}),handler:e=>Ao({executor:e.executor,explore:e.explore,exploreConcurrency:e.exploreConcurrency})}}function Uc(){return{command:"explore",describe:"Run state-space exploration trails in the foreground (app + engine must be running)",builder:e=>e.option("trails",{default:10,describe:"Number of trails to execute before stopping (stops early on saturation)",type:"number"}).option("headed",{default:!1,describe:"Watch trails in a visible browser (stop the daemon explorer first if it holds the machine lock)",type:"boolean"}).option("max-length",{describe:"Max steps per trail (default 12 \u2014 lower means shorter, easier-to-watch trails)",type:"number"}).command("findings [findingId]","List pending exploration findings, or show one finding's full detail",r=>r.positional("findingId",{type:"string"}).option("json",{default:!1,describe:"Emit the findings list as JSON",type:"boolean"}),r=>Kt({findingId:r.findingId,json:r.json})).command("replay <findingId>","Replay a finding's minimal trail \u2014 a clean replay resolves the finding and covers its targets",r=>r.positional("findingId",{demandOption:!0,type:"string"}),r=>Qt({findingId:r.findingId})).command("dismiss <findingId>","Dismiss a finding you don't intend to act on \u2014 prune later to drop it from the log",r=>r.positional("findingId",{demandOption:!0,type:"string"}),r=>Xt({findingId:r.findingId})).command("prune","Rewrite the findings log, dropping dismissed findings and ones no longer in the model",r=>r,()=>Yt()),handler:e=>Zt({headed:e.headed,maxLength:e["max-length"],trails:e.trails})}}function Mc(){return{command:"snapshot <runId>",describe:"Render a PNG of the page at a point in a run's rrweb recording",builder:e=>e.positional("runId",{demandOption:!0,type:"string"}).option("at",{describe:"Moment to render: epoch-ms timestamp exactly as found in behavior.jsonl",type:"number"}).option("offset",{describe:"Moment to render: ms from the start of the recording (alternative to --at)",type:"number"}).conflicts("at","offset"),handler:e=>yo({at:e.at,offset:e.offset,runId:e.runId})}}function Hc(){return{command:"teleport <ref>",describe:"Open a live browser at a step in a test, seeded with the run up to that point",builder:e=>e.positional("ref",{demandOption:!0,describe:"Test ref: <workflow-slug>/<test-slug>",type:"string"}).option("step",{demandOption:!0,describe:"Step to land on \u2014 runs the test up to and including this step, then hands over",type:"number"}),handler:e=>vo({ref:e.ref,step:e.step})}}function Wc(e){let r=[];return e.positional("ids",{array:!0,default:r,describe:"Test ids to run",type:"string"}).option("all",{default:!1,describe:"Run every test in the suite (expensive)",type:"boolean"}).option("headed",{default:!1,describe:"Run with a visible browser window",type:"boolean"})}function qc(e){return e.command("status","Print the current scope",r=>r.option("format",{choices:["json","text"],default:"text",describe:"Output format"}),r=>Oo({format:r.format})).command("add <test-ids..>","Bind one or more existing tests (stubs or implemented) to scope as agent intent",r=>{let n=[];return r.positional("test-ids",{array:!0,default:n,demandOption:!0,describe:"Slugs of existing workflows",type:"string"})},r=>_o({testIds:r["test-ids"]})).command("link <id> <test-id>","Link an existing scope item to a test",r=>r.positional("id",{demandOption:!0,describe:"Scope item id",type:"string"}).positional("test-id",{demandOption:!0,describe:"Slug of the workflow to link",type:"string"}),r=>Fo({id:r.id,testId:r["test-id"]})).command("remove <ids..>","Remove one or more scope items by id",r=>{let n=[];return r.positional("ids",{array:!0,default:n,demandOption:!0,describe:"Scope item ids",type:"string"})},r=>No({ids:r.ids})).demandCommand(1)}function Bc(e){return e.command("pause","Disable all Ripplo pre-edit gates and stop enforcement until resumed",()=>{},()=>ft()).command("resume","Re-enable Ripplo hooks paused via `ripplo hooks pause`",()=>{},()=>gt()).demandCommand(1)}function Vc(e){return e.command("list","List projects you have access to (JSON)",()=>{},()=>eo()).demandCommand(1)}function Gc(e){return e.command("login","Authenticate via device flow",()=>{},()=>Xn()).command("status","Show authentication status",()=>{},()=>Yn()).command("logout","Remove the saved token",()=>{},()=>{Zn()}).demandCommand(1)}function zc(){let e=process.cwd(),r=wr(e);r!=null&&r!==e&&(process.chdir(r),process.stderr.write(`ripplo: resolved .ripplo/ at ${r}
-`))}export{Dc as main};
+`),infra:o==null}}async function Qo({connection:e,cwd:t,tests:r}){let n=[],o=[],i=[],s=Ad.join(t,".ripplo","debug"),a=new Ld;return(await Pe({connection:e,request:{all:!1,headed:!1,tests:[...r]},token:a.token,onEvent:d=>{Bd({debugDir:s,event:d,failedLines:n,notRun:o,rejected:i})}})).match(d=>d.kind==="daemon-error"?{kind:"transport",message:Te(d.error)}:{failedLines:n,kind:"done",notRun:o,rejected:i},d=>({kind:"transport",message:G(d)}))}function Bd({debugDir:e,event:t,failedLines:r,notRun:n,rejected:o}){if(t.kind!=="test-outcome"||t.outcome.kind==="pass")return;let i=Ie({debugDir:e,event:t})??t.testName;if(t.outcome.kind==="dispatch-error"){o.push(i);return}if(t.outcome.kind==="dispatch-timeout"||t.outcome.kind==="infra-error"){n.push({id:`${t.workflowName}/${t.testName}`,line:i});return}r.push(i)}import{z as Yo}from"zod";var Vd=Yo.looseObject({skill:Yo.string()}),Zo=g("PostToolUse",e=>{if(e.tool_name!=="Skill")return;let t=Vd.safeParse(e.tool_input);if(!t.success)return;let r=/^ripplo:(.+)$/.exec(t.data.skill);if(r==null)return;let n=r[1];n!=null&&f(e.cwd)&&Me(e.cwd,e.session_id,n)});var Gd=/(?:^|\s)\/ripplo:([a-z][a-z0-9-]*)\b/gi,ei=g("UserPromptSubmit",e=>{f(e.cwd)&&[...e.prompt.matchAll(Gd)].map(t=>t[1]).filter(t=>t!=null).forEach(t=>{Me(e.cwd,e.session_id,t)})});cc();B(process.cwd());ht();var ti={"exit-plan-gate":fo,"plan-reminder":go,"post-edit-flag-stubs":Po,"post-edit-lint":To,"pre-bash-hooks-pause-gate":Do,"pre-bash-run-gate":Uo,"pre-edit-ripplo-skill-gate":Mo,"pre-edit-scope-gate":qo,"pre-edit-watch-gate":Vo,"scope-reminder":Go,"session-preamble":zo,"stop-enforce":Xo,"track-skill-load":Zo,"track-skill-prompt":ei};async function Qd(){zd({pkg:{name:"ripplo",version:P()}}).notify({message:Sr()}),await Jd(Kd(process.argv)).scriptName("ripplo").version(P()).command(ec()).command("concurrency [value]","Show or set max local concurrent runs (daemon applies live)",e=>e.positional("value",{type:"number"}),e=>Tr({value:e.value})).command("auth <subcommand>","Manage authentication",dc).command("projects <subcommand>","Inspect Ripplo projects",lc).command("hooks <subcommand>","Pause or resume Ripplo hooks",ac).command("init","Scaffold .ripplo/ in this project",e=>e.option("project",{type:"string"}).option("env",{type:"string"}).option("app-url",{type:"string"}).option("engine-url",{type:"string"}),e=>tn({appUrl:e["app-url"],engineUrl:e["engine-url"],envFile:e.env,projectId:e.project})).command("run [ids..]","Run tests locally via the daemon (start it first with `npx ripplo daemon`)",ic,e=>wn({all:e.all,headed:e.headed,ids:e.ids})).command(nc()).command(oc()).command(Zd()).command(rc()).command(tc()).command("lint","Static model analysis (cascade gaps + law conflicts; no live app)",()=>{},()=>rn()).command("sync","Push the compiled .ripplo/ resources to the server (no run)",()=>{},()=>zn()).command("compile","Compile the DSL and write .ripplo/ripplo.lock",e=>e.option("check",{default:!1,describe:"Exit non-zero if the lockfile is missing or stale (does not write)",type:"boolean"}),e=>Ir({check:e.check})).command("update","Update ripplo to the latest published version (and hand the daemon off to it)",()=>{},()=>ro()).command("doctor","Check project health",()=>{},()=>qr()).command("status","Report stub tests and daemon status",e=>e.option("format",{choices:["json","summary"],default:"json",describe:"Output format"}),e=>po({format:e.format})).command("scope <subcommand>","Manage testing scope",sc).command("run-worker",!1,()=>{},()=>Cn()).command("hook <name>","Internal: run a Claude Code plugin hook",e=>e.positional("name",{choices:Object.keys(ti),demandOption:!0,type:"string"}),e=>Xd(e.name)).strict().help().parse()}async function Xd(e){let t=ti[e];t==null&&(process.stderr.write(`Unknown hook: ${e}
+`),process.exit(1));let r=await Yd(),n=r.trim()===""?{}:JSON.parse(r),o=await t.run(n);o!=null&&process.stdout.write(JSON.stringify(o))}function Yd(){return new Promise((e,t)=>{if(process.stdin.isTTY){e("");return}let r=[];process.stdin.on("data",n=>r.push(n)),process.stdin.on("end",()=>{e(Buffer.concat(r).toString("utf8"))}),process.stdin.on("error",t)})}Qd().catch(e=>{process.stderr.write(`${Et(e)}
+`),process.exit(1)});function Zd(){return{command:"report-bug",describe:"Report a critical application bug caught while building or testing",builder:e=>e.option("kind",{choices:["new_feature_bug","regression","latent_bug"],demandOption:!0,describe:"new_feature_bug: broke the new thing being built; regression: broke previously working behavior; latent_bug: pre-existing bug exposed by new test coverage"}).option("title",{demandOption:!0,describe:"Short bug name",type:"string"}).option("root-cause",{demandOption:!0,describe:"What was actually wrong",type:"string"}).option("surfaced-by",{demandOption:!0,describe:"How the test/run exposed it (cite evidence)",type:"string"}).option("run",{demandOption:!0,describe:"Run id where it surfaced \u2014 links the bug to its replay. For an exploration finding, pass the explore-\u2026 run id from the finding",type:"string"}),handler:e=>sn({kind:e.kind,rootCause:e["root-cause"],runId:e.run,surfacedBy:e["surfaced-by"],title:e.title})}}function ec(){return{command:"daemon",describe:"Run the long-lived local executor (IPC socket + run subscription)",builder:e=>e.option("executor",{choices:["local","cloud"],default:"local",describe:"Run executor (local pool, or cloud fleet via a per-session tunnel)"}),handler:e=>no({executor:e.executor})}}function tc(){return{command:"findings",describe:"List open explorer findings",builder:e=>e.option("json",{default:!1,describe:"Machine-readable output",type:"boolean"}),handler:e=>jn({json:e.json})}}function rc(){return{command:"pull <runId>",describe:"Download a run's behavior.jsonl from the server",builder:e=>e.positional("runId",{demandOption:!0,type:"string"}),handler:e=>Dn({runId:e.runId})}}function nc(){return{command:"snapshot <runId>",describe:"Render a PNG of the page at a point in a run's rrweb recording",builder:e=>e.positional("runId",{demandOption:!0,type:"string"}).option("at",{describe:"Moment to render: epoch-ms timestamp exactly as found in behavior.jsonl",type:"number"}).option("offset",{describe:"Moment to render: ms from the start of the recording (alternative to --at)",type:"number"}).conflicts("at","offset"),handler:e=>qn({at:e.at,offset:e.offset,runId:e.runId})}}function oc(){return{command:"teleport <ref>",describe:"Open a live browser at a step in a test, seeded with the run up to that point",builder:e=>e.positional("ref",{demandOption:!0,describe:"Test ref: <workflow-slug>/<test-slug>",type:"string"}).option("step",{demandOption:!0,describe:"Step to land on \u2014 runs the test up to and including this step, then hands over",type:"number"}),handler:e=>Gn({ref:e.ref,step:e.step})}}function ic(e){let t=[];return e.positional("ids",{array:!0,default:t,describe:"Test ids to run",type:"string"}).option("all",{default:!1,describe:"Run every test in the suite (expensive)",type:"boolean"}).option("headed",{default:!1,describe:"Run with a visible browser window",type:"boolean"})}function sc(e){return e.command("status","Print the current scope",t=>t.option("format",{choices:["json","text"],default:"text",describe:"Output format"}),t=>ao({format:t.format})).command("add <test-ids..>","Bind one or more existing tests (stubs or implemented) to scope as agent intent",t=>{let r=[];return t.positional("test-ids",{array:!0,default:r,demandOption:!0,describe:"Slugs of existing workflows",type:"string"})},t=>lo({testIds:t["test-ids"]})).command("link <id> <test-id>","Link an existing scope item to a test",t=>t.positional("id",{demandOption:!0,describe:"Scope item id",type:"string"}).positional("test-id",{demandOption:!0,describe:"Slug of the workflow to link",type:"string"}),t=>co({id:t.id,testId:t["test-id"]})).command("remove <ids..>","Remove one or more scope items by id",t=>{let r=[];return t.positional("ids",{array:!0,default:r,demandOption:!0,describe:"Scope item ids",type:"string"})},t=>uo({ids:t.ids})).demandCommand(1)}function ac(e){return e.command("pause","Disable all Ripplo pre-edit gates and stop enforcement until resumed",()=>{},()=>Br()).command("resume","Re-enable Ripplo hooks paused via `ripplo hooks pause`",()=>{},()=>Vr()).demandCommand(1)}function lc(e){return e.command("list","List projects you have access to (JSON)",()=>{},()=>nn()).demandCommand(1)}function dc(e){return e.command("login","Authenticate via device flow",()=>{},()=>Er()).command("status","Show authentication status",()=>{},()=>$r()).command("logout","Remove the saved token",()=>{},()=>{jr()}).demandCommand(1)}function cc(){let e=process.cwd(),t=ct(e);t!=null&&t!==e&&(process.chdir(t),process.stderr.write(`ripplo: resolved .ripplo/ at ${t}
+`))}export{Qd as main};