rivet-design 0.12.3 → 0.13.0

package/dist/cli/client.js

@@ -0,0 +1,109 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.callerSessionOf = exports.editorUrlFor = exports.requestServer = exports.attachToServer = exports.invalidateAttachCache = exports.enableAttachCache = exports.isServerHealthy = void 0;
+const serverHandshake_1 = require("./serverHandshake");
+const queueAccess_1 = require("../utils/queueAccess");
+/**
+ * HTTP client for a project's running Rivet server. Attaches through the
+ * per-project handshake: read `.rivet/cli/server.json`, health-ping the
+ * advertised port, and talk to the existing `/api` surface with the control
+ * access token from the handshake.
+ */
+const HEALTH_PING_TIMEOUT_MS = 2_000;
+const REQUEST_TIMEOUT_MS = 30_000;
+/** True when the advertised server answers its health endpoint. */
+const isServerHealthy = async (rivetPort) => {
+    try {
+        const response = await fetch(`http://127.0.0.1:${rivetPort}/api/health`, {
+            signal: AbortSignal.timeout(HEALTH_PING_TIMEOUT_MS),
+        });
+        return response.ok;
+    }
+    catch {
+        return false;
+    }
+};
+exports.isServerHealthy = isServerHealthy;
+/**
+ * Attach cache for resident processes (`rivet mcp serve`): a one-shot CLI
+ * invocation pays handshake-read + pid-check + health-ping once by
+ * construction, but a long-lived process would pay it on every tool call.
+ * Off by default so single-shot CLI behavior is unchanged. Callers that
+ * enable it must invalidate on a SERVER_UNAVAILABLE result and retry once —
+ * a cached attach skips the liveness checks, so a restarted server is only
+ * discovered by the request failing.
+ */
+let attachCache = null;
+const enableAttachCache = () => {
+    attachCache ??= new Map();
+};
+exports.enableAttachCache = enableAttachCache;
+const invalidateAttachCache = () => {
+    attachCache?.clear();
+};
+exports.invalidateAttachCache = invalidateAttachCache;
+/**
+ * Attach to the project's live server, or return null when none is
+ * reachable. A handshake whose process is dead or whose port no longer
+ * answers is treated as stale.
+ */
+const attachToServer = async (projectPath) => {
+    const cached = attachCache?.get(projectPath);
+    if (cached) {
+        return cached;
+    }
+    const handshake = (0, serverHandshake_1.readHandshake)(projectPath);
+    if (!handshake) {
+        return null;
+    }
+    if (!(0, serverHandshake_1.isPidAlive)(handshake.pid)) {
+        return null;
+    }
+    if (!(await (0, exports.isServerHealthy)(handshake.rivetPort))) {
+        return null;
+    }
+    const attached = {
+        baseUrl: `http://127.0.0.1:${handshake.rivetPort}`,
+        handshake,
+    };
+    attachCache?.set(projectPath, attached);
+    return attached;
+};
+exports.attachToServer = attachToServer;
+/**
+ * Issue one JSON request against the attached server, carrying the control
+ * access token from the handshake when the server requires one.
+ */
+const requestServer = async (attached, path, options = {}) => {
+    const headers = {
+        'Content-Type': 'application/json',
+    };
+    if (attached.handshake.queueAccessToken) {
+        headers[queueAccess_1.QUEUE_ACCESS_TOKEN_HEADER] = attached.handshake.queueAccessToken;
+    }
+    if (options.callerSession) {
+        headers[queueAccess_1.CALLER_SESSION_HEADER] = options.callerSession;
+    }
+    const response = await fetch(`${attached.baseUrl}${path}`, {
+        method: options.method ?? 'GET',
+        headers,
+        ...(options.body === undefined
+            ? {}
+            : { body: JSON.stringify(options.body) }),
+        signal: AbortSignal.timeout(REQUEST_TIMEOUT_MS),
+    });
+    const body = (await response.json().catch(() => ({})));
+    return { status: response.status, body };
+};
+exports.requestServer = requestServer;
+/**
+ * Editor URL for an attached server (static projects serve the UI at `/`).
+ * `baseUrl` stays on loopback (127.0.0.1) for internal API/health requests,
+ * but the browser-facing URL uses `localhost` for a cleaner address bar.
+ */
+const editorUrlFor = (attached) => `http://localhost:${attached.handshake.rivetPort}/rivet`;
+exports.editorUrlFor = editorUrlFor;
+/** Caller-session header value for direct variant requests, when a handoff has one. */
+const callerSessionOf = (handoff) => handoff?.session ?? undefined;
+exports.callerSessionOf = callerSessionOf;
+//# sourceMappingURL=client.js.map

package/dist/cli/client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../../src/cli/client.ts"],"names":[],"mappings":";;;AAAA,uDAI2B;AAC3B,sDAG8B;AAG9B;;;;;GAKG;AAEH,MAAM,sBAAsB,GAAG,KAAK,CAAC;AACrC,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAYlC,mEAAmE;AAC5D,MAAM,eAAe,GAAG,KAAK,EAAE,SAAiB,EAAoB,EAAE;IAC3E,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,oBAAoB,SAAS,aAAa,EAAE;YACvE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,sBAAsB,CAAC;SACpD,CAAC,CAAC;QACH,OAAO,QAAQ,CAAC,EAAE,CAAC;IACrB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC,CAAC;AATW,QAAA,eAAe,mBAS1B;AAEF;;;;;;;;GAQG;AACH,IAAI,WAAW,GAAuC,IAAI,CAAC;AAEpD,MAAM,iBAAiB,GAAG,GAAS,EAAE;IAC1C,WAAW,KAAK,IAAI,GAAG,EAAE,CAAC;AAC5B,CAAC,CAAC;AAFW,QAAA,iBAAiB,qBAE5B;AAEK,MAAM,qBAAqB,GAAG,GAAS,EAAE;IAC9C,WAAW,EAAE,KAAK,EAAE,CAAC;AACvB,CAAC,CAAC;AAFW,QAAA,qBAAqB,yBAEhC;AAEF;;;;GAIG;AACI,MAAM,cAAc,GAAG,KAAK,EACjC,WAAmB,EACa,EAAE;IAClC,MAAM,MAAM,GAAG,WAAW,EAAE,GAAG,CAAC,WAAW,CAAC,CAAC;IAC7C,IAAI,MAAM,EAAE,CAAC;QACX,OAAO,MAAM,CAAC;IAChB,CAAC;IACD,MAAM,SAAS,GAAG,IAAA,+BAAa,EAAC,WAAW,CAAC,CAAC;IAC7C,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,CAAC,IAAA,4BAAU,EAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/B,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,CAAC,CAAC,MAAM,IAAA,uBAAe,EAAC,SAAS,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC;QAClD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,QAAQ,GAAmB;QAC/B,OAAO,EAAE,oBAAoB,SAAS,CAAC,SAAS,EAAE;QAClD,SAAS;KACV,CAAC;IACF,WAAW,EAAE,GAAG,CAAC,WAAW,EAAE,QAAQ,CAAC,CAAC;IACxC,OAAO,QAAQ,CAAC;AAClB,CAAC,CAAC;AAvBW,QAAA,cAAc,kBAuBzB;AAYF;;;GAGG;AACI,MAAM,aAAa,GAAG,KAAK,EAChC,QAAwB,EACxB,IAAY,EACZ,UAAgC,EAAE,EACN,EAAE;IAC9B,MAAM,OAAO,GAA2B;QACtC,cAAc,EAAE,kBAAkB;KACnC,CAAC;IACF,IAAI,QAAQ,CAAC,SAAS,CAAC,gBAAgB,EAAE,CAAC;QACxC,OAAO,CAAC,uCAAyB,CAAC,GAAG,QAAQ,CAAC,SAAS,CAAC,gBAAgB,CAAC;IAC3E,CAAC;IACD,IAAI,OAAO,CAAC,aAAa,EAAE,CAAC;QAC1B,OAAO,CAAC,mCAAqB,CAAC,GAAG,OAAO,CAAC,aAAa,CAAC;IACzD,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,QAAQ,CAAC,OAAO,GAAG,IAAI,EAAE,EAAE;QACzD,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,KAAK;QAC/B,OAAO;QACP,GAAG,CAAC,OAAO,CAAC,IAAI,KAAK,SAAS;YAC5B,CAAC,CAAC,EAAE;YACJ,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QAC3C,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,kBAAkB,CAAC;KAChD,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAM,CAAC;IAC5D,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC;AAC3C,CAAC,CAAC;AAxBW,QAAA,aAAa,iBAwBxB;AAEF;;;;GAIG;AACI,MAAM,YAAY,GAAG,CAAC,QAAwB,EAAU,EAAE,CAC/D,oBAAoB,QAAQ,CAAC,SAAS,CAAC,SAAS,QAAQ,CAAC;AAD9C,QAAA,YAAY,gBACkC;AAE3D,uFAAuF;AAChF,MAAM,eAAe,GAAG,CAC7B,OAA6B,EACT,EAAE,CAAC,OAAO,EAAE,OAAO,IAAI,SAAS,CAAC;AAF1C,QAAA,eAAe,mBAE2B"}

package/dist/cli/commandNames.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Control-plane subcommand names, split out with zero imports so
+ * `bin/rivet.js` can load this module (and route to the lean CLI entry)
+ * without paying for `dist/index.js`'s static import graph. Keep this file
+ * dependency-free.
+ */
+export declare const CLI_CONTROL_COMMANDS: ReadonlySet<string>;
+export declare const isCliControlCommand: (command: string | undefined) => boolean;
+//# sourceMappingURL=commandNames.d.ts.map

package/dist/cli/commandNames.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"commandNames.d.ts","sourceRoot":"","sources":["../../src/cli/commandNames.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,eAAO,MAAM,oBAAoB,EAAE,WAAW,CAAC,MAAM,CAWnD,CAAC;AAEH,eAAO,MAAM,mBAAmB,GAAI,SAAS,MAAM,GAAG,SAAS,KAAG,OACN,CAAC"}

package/dist/cli/commandNames.js

@@ -0,0 +1,24 @@
+"use strict";
+/**
+ * Control-plane subcommand names, split out with zero imports so
+ * `bin/rivet.js` can load this module (and route to the lean CLI entry)
+ * without paying for `dist/index.js`'s static import graph. Keep this file
+ * dependency-free.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.isCliControlCommand = exports.CLI_CONTROL_COMMANDS = void 0;
+exports.CLI_CONTROL_COMMANDS = new Set([
+    'open',
+    'stop',
+    'status',
+    'wait',
+    'variants',
+    'evidence',
+    'reference',
+    'auth',
+    'mcp',
+    '__serve',
+]);
+const isCliControlCommand = (command) => command !== undefined && exports.CLI_CONTROL_COMMANDS.has(command);
+exports.isCliControlCommand = isCliControlCommand;
+//# sourceMappingURL=commandNames.js.map

package/dist/cli/commandNames.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"commandNames.js","sourceRoot":"","sources":["../../src/cli/commandNames.ts"],"names":[],"mappings":";AAAA;;;;;GAKG;;;AAEU,QAAA,oBAAoB,GAAwB,IAAI,GAAG,CAAC;IAC/D,MAAM;IACN,MAAM;IACN,QAAQ;IACR,MAAM;IACN,UAAU;IACV,UAAU;IACV,WAAW;IACX,MAAM;IACN,KAAK;IACL,SAAS;CACV,CAAC,CAAC;AAEI,MAAM,mBAAmB,GAAG,CAAC,OAA2B,EAAW,EAAE,CAC1E,OAAO,KAAK,SAAS,IAAI,4BAAoB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;AADhD,QAAA,mBAAmB,uBAC6B"}

package/dist/cli/commands/auth.d.ts

@@ -0,0 +1,10 @@
+import { type CliCommandResult } from '../envelope';
+/**
+ * Report whether this machine is signed in to Rivet (server-validated,
+ * refreshing a stale token when possible). Never prompts: a logged-out
+ * state is a successful report, not an error.
+ */
+export declare const handleAuthStatus: (args: string[]) => Promise<CliCommandResult>;
+/** Route `rivet auth <action>` to its handler. */
+export declare const handleAuth: (args: string[]) => Promise<CliCommandResult>;
+//# sourceMappingURL=auth.d.ts.map

package/dist/cli/commands/auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/auth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAyB,KAAK,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAK3E;;;;GAIG;AACH,eAAO,MAAM,gBAAgB,GAC3B,MAAM,MAAM,EAAE,KACb,OAAO,CAAC,gBAAgB,CA8B1B,CAAC;AAEF,kDAAkD;AAClD,eAAO,MAAM,UAAU,GAAU,MAAM,MAAM,EAAE,KAAG,OAAO,CAAC,gBAAgB,CAUzE,CAAC"}

package/dist/cli/commands/auth.js

@@ -0,0 +1,81 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.handleAuth = exports.handleAuthStatus = void 0;
+const envelope_1 = require("../envelope");
+const shared_1 = require("./shared");
+const COMMAND = 'auth.status';
+/**
+ * Report whether this machine is signed in to Rivet (server-validated,
+ * refreshing a stale token when possible). Never prompts: a logged-out
+ * state is a successful report, not an error.
+ */
+const handleAuthStatus = async (args) => {
+    const context = (0, shared_1.parseCommandContext)(COMMAND, args);
+    if ((0, shared_1.isCommandResult)(context)) {
+        return context;
+    }
+    const { getConfigManager } = await Promise.resolve().then(() => __importStar(require('../../services/ConfigManager')));
+    const configManager = getConfigManager();
+    if (!configManager.isAuthenticated()) {
+        return (0, envelope_1.okResult)(COMMAND, { authenticated: false });
+    }
+    const { AuthService } = await Promise.resolve().then(() => __importStar(require('../../services/AuthService')));
+    try {
+        const profile = await new AuthService().getValidatedProfile();
+        if (!profile) {
+            return (0, envelope_1.okResult)(COMMAND, { authenticated: false });
+        }
+        return (0, envelope_1.okResult)(COMMAND, {
+            authenticated: true,
+            email: configManager.getEmail(),
+            userId: configManager.getUserId(),
+        });
+    }
+    catch (error) {
+        return (0, envelope_1.errorResult)(COMMAND, 'OPERATION_FAILED', error instanceof Error ? error.message : 'Auth status check failed');
+    }
+};
+exports.handleAuthStatus = handleAuthStatus;
+/** Route `rivet auth <action>` to its handler. */
+const handleAuth = async (args) => {
+    const action = args[0];
+    if (action === 'status') {
+        return (0, exports.handleAuthStatus)(args.slice(1));
+    }
+    return (0, envelope_1.errorResult)('auth', 'USAGE_ERROR', 'Usage: rivet auth status (use `rivet login` / `rivet logout` to change auth state)');
+};
+exports.handleAuth = handleAuth;
+//# sourceMappingURL=auth.js.map

package/dist/cli/commands/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../../src/cli/commands/auth.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,0CAA2E;AAC3E,qCAAgE;AAEhE,MAAM,OAAO,GAAG,aAAa,CAAC;AAE9B;;;;GAIG;AACI,MAAM,gBAAgB,GAAG,KAAK,EACnC,IAAc,EACa,EAAE;IAC7B,MAAM,OAAO,GAAG,IAAA,4BAAmB,EAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IACnD,IAAI,IAAA,wBAAe,EAAC,OAAO,CAAC,EAAE,CAAC;QAC7B,OAAO,OAAO,CAAC;IACjB,CAAC;IAED,MAAM,EAAE,gBAAgB,EAAE,GAAG,wDAAa,8BAA8B,GAAC,CAAC;IAC1E,MAAM,aAAa,GAAG,gBAAgB,EAAE,CAAC;IACzC,IAAI,CAAC,aAAa,CAAC,eAAe,EAAE,EAAE,CAAC;QACrC,OAAO,IAAA,mBAAQ,EAAC,OAAO,EAAE,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC,CAAC;IACrD,CAAC;IAED,MAAM,EAAE,WAAW,EAAE,GAAG,wDAAa,4BAA4B,GAAC,CAAC;IACnE,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,IAAI,WAAW,EAAE,CAAC,mBAAmB,EAAE,CAAC;QAC9D,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,OAAO,IAAA,mBAAQ,EAAC,OAAO,EAAE,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC,CAAC;QACrD,CAAC;QACD,OAAO,IAAA,mBAAQ,EAAC,OAAO,EAAE;YACvB,aAAa,EAAE,IAAI;YACnB,KAAK,EAAE,aAAa,CAAC,QAAQ,EAAE;YAC/B,MAAM,EAAE,aAAa,CAAC,SAAS,EAAE;SAClC,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO,IAAA,sBAAW,EAChB,OAAO,EACP,kBAAkB,EAClB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,0BAA0B,CACpE,CAAC;IACJ,CAAC;AACH,CAAC,CAAC;AAhCW,QAAA,gBAAgB,oBAgC3B;AAEF,kDAAkD;AAC3C,MAAM,UAAU,GAAG,KAAK,EAAE,IAAc,EAA6B,EAAE;IAC5E,MAAM,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;IACvB,IAAI,MAAM,KAAK,QAAQ,EAAE,CAAC;QACxB,OAAO,IAAA,wBAAgB,EAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IACzC,CAAC;IACD,OAAO,IAAA,sBAAW,EAChB,MAAM,EACN,aAAa,EACb,oFAAoF,CACrF,CAAC;AACJ,CAAC,CAAC;AAVW,QAAA,UAAU,cAUrB"}

package/dist/cli/commands/elementSelector.d.ts

@@ -0,0 +1,10 @@
+import type { ElementRef } from '../../types/change-request-types';
+/**
+ * Build the minimal element identity for a CLI-supplied selector. `#id` and
+ * `.class` selectors map onto their dedicated fields (component search and
+ * variant targeting key on them); anything else rides on `xpath`, which the
+ * variants target derivation uses verbatim as a selector ref.
+ */
+export declare const elementRefFromSelector: (selector: string) => ElementRef;
+export declare const wholePageElement: () => ElementRef;
+//# sourceMappingURL=elementSelector.d.ts.map

package/dist/cli/commands/elementSelector.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"elementSelector.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/elementSelector.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kCAAkC,CAAC;AAWnE;;;;;GAKG;AACH,eAAO,MAAM,sBAAsB,GAAI,UAAU,MAAM,KAAG,UAmBzD,CAAC;AAEF,eAAO,MAAM,gBAAgB,QAAO,UAAyC,CAAC"}

package/dist/cli/commands/elementSelector.js

@@ -0,0 +1,41 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.wholePageElement = exports.elementRefFromSelector = void 0;
+/** Element targeted when a request names none: the whole page. */
+const WHOLE_PAGE_ELEMENT = {
+    xpath: '/html/body',
+    tagName: 'body',
+    className: '',
+    id: '',
+    filePaths: [],
+};
+/**
+ * Build the minimal element identity for a CLI-supplied selector. `#id` and
+ * `.class` selectors map onto their dedicated fields (component search and
+ * variant targeting key on them); anything else rides on `xpath`, which the
+ * variants target derivation uses verbatim as a selector ref.
+ */
+const elementRefFromSelector = (selector) => {
+    const trimmed = selector.trim();
+    if (trimmed.startsWith('#') && trimmed.length > 1) {
+        return {
+            ...WHOLE_PAGE_ELEMENT,
+            tagName: '',
+            id: trimmed.slice(1),
+            xpath: '',
+        };
+    }
+    if (trimmed.startsWith('.') && trimmed.length > 1) {
+        return {
+            ...WHOLE_PAGE_ELEMENT,
+            tagName: '',
+            className: trimmed.slice(1),
+            xpath: '',
+        };
+    }
+    return { ...WHOLE_PAGE_ELEMENT, tagName: '', xpath: trimmed };
+};
+exports.elementRefFromSelector = elementRefFromSelector;
+const wholePageElement = () => ({ ...WHOLE_PAGE_ELEMENT });
+exports.wholePageElement = wholePageElement;
+//# sourceMappingURL=elementSelector.js.map

package/dist/cli/commands/elementSelector.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"elementSelector.js","sourceRoot":"","sources":["../../../src/cli/commands/elementSelector.ts"],"names":[],"mappings":";;;AAEA,kEAAkE;AAClE,MAAM,kBAAkB,GAAe;IACrC,KAAK,EAAE,YAAY;IACnB,OAAO,EAAE,MAAM;IACf,SAAS,EAAE,EAAE;IACb,EAAE,EAAE,EAAE;IACN,SAAS,EAAE,EAAE;CACd,CAAC;AAEF;;;;;GAKG;AACI,MAAM,sBAAsB,GAAG,CAAC,QAAgB,EAAc,EAAE;IACrE,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC;IAChC,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAClD,OAAO;YACL,GAAG,kBAAkB;YACrB,OAAO,EAAE,EAAE;YACX,EAAE,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;YACpB,KAAK,EAAE,EAAE;SACV,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAClD,OAAO;YACL,GAAG,kBAAkB;YACrB,OAAO,EAAE,EAAE;YACX,SAAS,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;YAC3B,KAAK,EAAE,EAAE;SACV,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,GAAG,kBAAkB,EAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;AAChE,CAAC,CAAC;AAnBW,QAAA,sBAAsB,0BAmBjC;AAEK,MAAM,gBAAgB,GAAG,GAAe,EAAE,CAAC,CAAC,EAAE,GAAG,kBAAkB,EAAE,CAAC,CAAC;AAAjE,QAAA,gBAAgB,oBAAiD"}

package/dist/cli/commands/evidence.d.ts

@@ -0,0 +1,9 @@
+import { type CliCommandResult } from '../envelope';
+/**
+ * Capture rendered design evidence (root variables, element styles, fonts)
+ * for a URL via the Rivet browser agent. Talks to the proxy directly — no
+ * project server attach required. Screenshots are opt-in to keep envelopes
+ * small.
+ */
+export declare const handleEvidenceCapture: (args: string[]) => Promise<CliCommandResult>;
+//# sourceMappingURL=evidence.d.ts.map

package/dist/cli/commands/evidence.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"evidence.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/evidence.ts"],"names":[],"mappings":"AAAA,OAAO,EAAyB,KAAK,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAa3E;;;;;GAKG;AACH,eAAO,MAAM,qBAAqB,GAChC,MAAM,MAAM,EAAE,KACb,OAAO,CAAC,gBAAgB,CAyC1B,CAAC"}

package/dist/cli/commands/evidence.js

@@ -0,0 +1,85 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.handleEvidenceCapture = void 0;
+const envelope_1 = require("../envelope");
+const flags_1 = require("../flags");
+const shared_1 = require("./shared");
+const COMMAND = 'evidence.capture';
+const EVIDENCE_FLAG_SPEC = {
+    url: { takesValue: true },
+    screenshot: { takesValue: false },
+    width: { takesValue: true },
+    height: { takesValue: true },
+};
+/**
+ * Capture rendered design evidence (root variables, element styles, fonts)
+ * for a URL via the Rivet browser agent. Talks to the proxy directly — no
+ * project server attach required. Screenshots are opt-in to keep envelopes
+ * small.
+ */
+const handleEvidenceCapture = async (args) => {
+    const context = (0, shared_1.parseCommandContext)(COMMAND, args, EVIDENCE_FLAG_SPEC);
+    if ((0, shared_1.isCommandResult)(context)) {
+        return context;
+    }
+    const url = (0, flags_1.stringFlag)(context.flags, 'url');
+    if (!url?.trim()) {
+        return (0, envelope_1.errorResult)(COMMAND, 'USAGE_ERROR', 'Usage: rivet evidence capture --url <url> [--screenshot] [--width N --height N]');
+    }
+    const width = (0, flags_1.integerFlag)(context.flags, 'width');
+    const height = (0, flags_1.integerFlag)(context.flags, 'height');
+    if (context.flags.errors.length > 0) {
+        return (0, envelope_1.errorResult)(COMMAND, 'USAGE_ERROR', context.flags.errors.join('; '));
+    }
+    const { getConfigManager } = await Promise.resolve().then(() => __importStar(require('../../services/ConfigManager')));
+    if (!getConfigManager().isAuthenticated()) {
+        return (0, envelope_1.errorResult)(COMMAND, 'AUTH_REQUIRED', 'Authentication required. Run `rivet login` first.');
+    }
+    const { BrowserAgentClient } = await Promise.resolve().then(() => __importStar(require('../../services/BrowserAgentClient')));
+    const client = new BrowserAgentClient();
+    const result = await client.captureDesignEvidence(url, {
+        screenshot: (0, flags_1.booleanFlag)(context.flags, 'screenshot'),
+        ...(width && height ? { viewport: { width, height } } : {}),
+    });
+    if (!result.ok) {
+        return (0, envelope_1.errorResult)(COMMAND, 'OPERATION_FAILED', result.reason, {
+            available: result.available,
+        });
+    }
+    return (0, envelope_1.okResult)(COMMAND, { evidence: result.evidence });
+};
+exports.handleEvidenceCapture = handleEvidenceCapture;
+//# sourceMappingURL=evidence.js.map

package/dist/cli/commands/evidence.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"evidence.js","sourceRoot":"","sources":["../../../src/cli/commands/evidence.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,0CAA2E;AAC3E,oCAAgE;AAChE,qCAAgE;AAEhE,MAAM,OAAO,GAAG,kBAAkB,CAAC;AAEnC,MAAM,kBAAkB,GAAG;IACzB,GAAG,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE;IACzB,UAAU,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE;IACjC,KAAK,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE;IAC3B,MAAM,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE;CAC7B,CAAC;AAEF;;;;;GAKG;AACI,MAAM,qBAAqB,GAAG,KAAK,EACxC,IAAc,EACa,EAAE;IAC7B,MAAM,OAAO,GAAG,IAAA,4BAAmB,EAAC,OAAO,EAAE,IAAI,EAAE,kBAAkB,CAAC,CAAC;IACvE,IAAI,IAAA,wBAAe,EAAC,OAAO,CAAC,EAAE,CAAC;QAC7B,OAAO,OAAO,CAAC;IACjB,CAAC;IACD,MAAM,GAAG,GAAG,IAAA,kBAAU,EAAC,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IAC7C,IAAI,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,CAAC;QACjB,OAAO,IAAA,sBAAW,EAChB,OAAO,EACP,aAAa,EACb,iFAAiF,CAClF,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,IAAA,mBAAW,EAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IAClD,MAAM,MAAM,GAAG,IAAA,mBAAW,EAAC,OAAO,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;IACpD,IAAI,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACpC,OAAO,IAAA,sBAAW,EAAC,OAAO,EAAE,aAAa,EAAE,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAC9E,CAAC;IAED,MAAM,EAAE,gBAAgB,EAAE,GAAG,wDAAa,8BAA8B,GAAC,CAAC;IAC1E,IAAI,CAAC,gBAAgB,EAAE,CAAC,eAAe,EAAE,EAAE,CAAC;QAC1C,OAAO,IAAA,sBAAW,EAChB,OAAO,EACP,eAAe,EACf,mDAAmD,CACpD,CAAC;IACJ,CAAC;IAED,MAAM,EAAE,kBAAkB,EAAE,GAC1B,wDAAa,mCAAmC,GAAC,CAAC;IACpD,MAAM,MAAM,GAAG,IAAI,kBAAkB,EAAE,CAAC;IACxC,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,qBAAqB,CAAC,GAAG,EAAE;QACrD,UAAU,EAAE,IAAA,mBAAW,EAAC,OAAO,CAAC,KAAK,EAAE,YAAY,CAAC;QACpD,GAAG,CAAC,KAAK,IAAI,MAAM,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC5D,CAAC,CAAC;IACH,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;QACf,OAAO,IAAA,sBAAW,EAAC,OAAO,EAAE,kBAAkB,EAAE,MAAM,CAAC,MAAM,EAAE;YAC7D,SAAS,EAAE,MAAM,CAAC,SAAS;SAC5B,CAAC,CAAC;IACL,CAAC;IACD,OAAO,IAAA,mBAAQ,EAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;AAC1D,CAAC,CAAC;AA3CW,QAAA,qBAAqB,yBA2ChC"}

package/dist/cli/commands/mcpServe.d.ts

@@ -0,0 +1,40 @@
+import { type CliCommandResult, type CliEnvelope } from '../envelope';
+import type { CliIO } from '../io';
+/**
+ * `rivet mcp serve` — resident stdio MCP server over the CLI control plane.
+ *
+ * Three deep tools (read plane / write plane / design context), each calling
+ * the router's `dispatch()` in-process and passing the schemaVersion-1
+ * envelope through. Design doc: `docs/perf-mcp-design.md`.
+ *
+ * Latency contract: everything expensive happens once at startup — command
+ * handler modules are pre-imported and the server attach is cached — so a
+ * warm tool call is one loopback HTTP round trip. A cached attach can go
+ * stale (server restarted); stale-attach failures invalidate the cache and
+ * retry the dispatch once before surfacing the error.
+ */
+type McpServeOptions = {
+    /** Serve-level project root; tool-level `project` params override it. */
+    projectPath?: string;
+    /** Caller-attribution flags appended to every dispatch (`--caller-agent`, …). */
+    handoffArgs?: string[];
+    noTelemetry?: boolean;
+};
+/** Hosts whose URLs route to `reference fetch` instead of `evidence capture`. */
+export declare const isReferenceHost: (hostname: string) => boolean;
+export declare const isStaleAttachError: (envelope: CliEnvelope) => boolean;
+/**
+ * Build the MCP server without connecting a transport. Exported so tests can
+ * drive it over an in-memory transport pair.
+ */
+export declare const buildMcpServer: (options?: McpServeOptions) => Promise<{
+    mcp: import("@modelcontextprotocol/sdk/server/mcp.js").McpServer;
+    telemetry: import("../../services/TelemetryService").TelemetryService | null;
+}>;
+/**
+ * `rivet mcp serve [--project <path>]` — never resolves on success (the
+ * envelope contract is suspended: stdout belongs to the MCP transport).
+ */
+export declare const handleMcpServe: (rest: string[], io: CliIO) => Promise<CliCommandResult>;
+export {};
+//# sourceMappingURL=mcpServe.d.ts.map

package/dist/cli/commands/mcpServe.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mcpServe.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/mcpServe.ts"],"names":[],"mappings":"AAIA,OAAO,EAGL,KAAK,gBAAgB,EACrB,KAAK,WAAW,EACjB,MAAM,aAAa,CAAC;AACrB,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,OAAO,CAAC;AASnC;;;;;;;;;;;;GAYG;AAEH,KAAK,eAAe,GAAG;IACrB,yEAAyE;IACzE,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,iFAAiF;IACjF,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IACvB,WAAW,CAAC,EAAE,OAAO,CAAC;CACvB,CAAC;AAaF,iFAAiF;AACjF,eAAO,MAAM,eAAe,GAAI,UAAU,MAAM,KAAG,OASlD,CAAC;AAEF,eAAO,MAAM,kBAAkB,GAAI,UAAU,WAAW,KAAG,OAgB1D,CAAC;AA8BF;;;GAGG;AACH,eAAO,MAAM,cAAc,GAAU,UAAS,eAAoB;;;EAwUjE,CAAC;AAgBF;;;GAGG;AACH,eAAO,MAAM,cAAc,GACzB,MAAM,MAAM,EAAE,EACd,IAAI,KAAK,KACR,OAAO,CAAC,gBAAgB,CAqD1B,CAAC"}