rivet-design 0.23.1 → 0.25.0

package/dist/cli/commands/open.d.ts

@@ -44,10 +44,11 @@ export type ProjectRuntimeDependencies = {
     isAuthenticated?: () => boolean;
     env?: NodeJS.ProcessEnv;
 };
-export declare const validateProjectOpen: ({ context, io, isAuthenticated: checkAuthentication, }: {
+export declare const validateProjectOpen: ({ context, io, isAuthenticated: checkAuthentication, signIn, }: {
     context: CommandContext;
     io: CliIO;
     isAuthenticated?: () => boolean;
+    signIn?: () => Promise<CliCommandResult | null>;
 }) => Promise<CliCommandResult | null>;
 export declare const ensureProjectRuntime: (context: CommandContext, io: CliIO, dependencies?: ProjectRuntimeDependencies) => Promise<CliCommandResult>;
 export {};

package/dist/cli/commands/open.js

@@ -39,6 +39,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.ensureProjectRuntime = exports.validateProjectOpen = exports.PROJECT_RUNTIME_FLAG_SPEC = void 0;
 const projectRuntimeUpgrade_1 = require("../projectRuntimeUpgrade");
 const child_process_1 = require("child_process");
+const subprocessEnvironment_1 = require("../../utils/subprocessEnvironment");
 const fs_1 = __importDefault(require("fs"));
 const path_1 = __importDefault(require("path"));
 const envelope_1 = require("../envelope");
@@ -149,7 +150,7 @@ const passthroughServeArgs = (context) => {
     return args;
 };
 const serveEnvFor = (handoff, baseEnv) => ({
-    ...baseEnv,
+    ...(0, subprocessEnvironment_1.subprocessEnvironment)('rivetRuntime', baseEnv),
     ...(0, callerRunnerPaths_1.callerRunnerPathsEnvEntry)(baseEnv),
     ...(handoff
         ? {
@@ -191,7 +192,7 @@ const finishProjectOpen = (data, io) => {
     }
     return (0, envelope_1.okResult)(COMMAND, data);
 };
-const validateProjectOpen = async ({ context, io, isAuthenticated: checkAuthentication, }) => {
+const validateProjectOpen = async ({ context, io, isAuthenticated: checkAuthentication, signIn, }) => {
     const agentSelectionError = (0, runnerSelection_1.explicitRunnerSelectionError)((0, flags_1.stringFlag)(context.flags, 'agent'));
     if (agentSelectionError) {
         return (0, envelope_1.errorResult)(COMMAND, 'USAGE_ERROR', agentSelectionError);
@@ -201,11 +202,12 @@ const validateProjectOpen = async ({ context, io, isAuthenticated: checkAuthenti
         const { getConfigManager } = await Promise.resolve().then(() => __importStar(require('../../services/ConfigManager')));
         isAuthenticated = () => getConfigManager().isAuthenticated();
     }
-    if (!isAuthenticated()) {
-        io.writeProgress('Not signed in. Use the rivet_login MCP tool, or run `rivet login` in a terminal.');
-        return (0, envelope_1.errorResult)(COMMAND, 'AUTH_REQUIRED', 'Authentication required. Call the rivet_login MCP tool if this host has it; otherwise have the user run `rivet login` in a terminal.');
-    }
-    return null;
+    if (isAuthenticated())
+        return null;
+    if (signIn)
+        return signIn();
+    io.writeProgress(envelope_1.AUTH_REQUIRED_MESSAGE);
+    return (0, envelope_1.errorResult)(COMMAND, 'AUTH_REQUIRED', envelope_1.AUTH_REQUIRED_MESSAGE);
 };
 exports.validateProjectOpen = validateProjectOpen;
 const verifyRuntimeReadiness = async (attached, appHealthTimeoutMs) => {

package/dist/cli/commands/profile.js

@@ -15,6 +15,7 @@ const reference_onboarding_1 = require("../../types/reference-onboarding");
 const envelope_1 = require("../envelope");
 const callerRunnerPaths_1 = require("../callerRunnerPaths");
 const errorMessage_1 = require("../../utils/errorMessage");
+const subprocessEnvironment_1 = require("../../utils/subprocessEnvironment");
 const PROFILE_REQUEST_TIMEOUT_MS = 55_000;
 const PROFILE_SEARCH_TIMEOUT_MS = 120_000;
 const handleProfile = async (args) => {
@@ -270,7 +271,7 @@ const handleProfile = async (args) => {
         const hub = await (0, HubClient_1.ensureHub)({
             root: (0, ProjectLibrary_1.currentLibraryRoot)(),
             env: {
-                ...process.env,
+                ...(0, subprocessEnvironment_1.subprocessEnvironment)('rivetRuntime'),
                 [callerRunnerPaths_1.CALLER_RUNNER_PATHS_ENV]: JSON.stringify((0, callerRunnerPaths_1.resolveCallerRunnerPaths)()),
             },
         });

package/dist/cli/commands/reference.js

@@ -120,7 +120,7 @@ const handleReferenceFetch = async (args) => {
     }
     const { getConfigManager } = await Promise.resolve().then(() => __importStar(require('../../services/ConfigManager')));
     if (!getConfigManager().isAuthenticated()) {
-        return (0, envelope_1.errorResult)(COMMAND, 'AUTH_REQUIRED', 'Authentication required. Call the rivet_login MCP tool if this host has it; otherwise have the user run `rivet login` in a terminal.', { provider });
+        return (0, envelope_1.errorResult)(COMMAND, 'AUTH_REQUIRED', envelope_1.AUTH_REQUIRED_MESSAGE, { provider });
     }
     const { IntegrationsClient } = await Promise.resolve().then(() => __importStar(require('../../services/IntegrationsClient')));
     const client = new IntegrationsClient();

package/dist/cli/commands/serve.js

@@ -199,8 +199,6 @@ const handleServe = async (args, io) => {
                     previewPort,
                     agentApplyMode: 'external',
                     rivetPort,
-                    isGitEnabled: flags.values['no-git'] ? false : true,
-                    skipProcessHandlers: retries > 0,
                     resolveLibraryOrigin: () => {
                         const hub = hubDiscovery.read();
                         return hub?.port && (0, pid_1.isPidAlive)(hub.pid)

package/dist/cli/commands/shared.js

@@ -4,6 +4,7 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
 };
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.transportErrorResult = exports.serverErrorResult = exports.isAttached = exports.attachOrUnavailable = exports.serverUnavailableResult = exports.inspectServerAvailability = exports.isCommandResult = exports.parseCommandContext = exports.withSharedFlags = exports.SHARED_FLAG_SPEC = exports.commandErrorResult = void 0;
+const telemetryPolicy_1 = require("../../config/telemetryPolicy");
 const fs_1 = __importDefault(require("fs"));
 const path_1 = __importDefault(require("path"));
 const flags_1 = require("../flags");
@@ -13,7 +14,8 @@ const serverHandshake_1 = require("../serverHandshake");
 const handoff_1 = require("../handoff");
 const errorMessage_1 = require("../../utils/errorMessage");
 const pluginContext_1 = require("../../hosts/pluginContext");
-const commandErrorResult = (command, error) => error instanceof pluginContext_1.PluginContextMismatchError
+const commandErrorResult = (command, error) => error instanceof pluginContext_1.PluginContextMismatchError ||
+    error instanceof telemetryPolicy_1.TelemetryPolicyMismatchError
     ? (0, envelope_1.errorResult)(command, 'SERVER_UNAVAILABLE', error.message, { serverUnavailableReason: error.reason }, { isRecoverable: false })
     : (0, envelope_1.errorResult)(command, 'OPERATION_FAILED', (0, errorMessage_1.errorMessage)(error));
 exports.commandErrorResult = commandErrorResult;
@@ -147,7 +149,8 @@ const serverErrorResult = (command, status, body) => {
 };
 exports.serverErrorResult = serverErrorResult;
 const transportErrorResult = (command, error) => {
-    if (error instanceof pluginContext_1.PluginContextMismatchError) {
+    if (error instanceof pluginContext_1.PluginContextMismatchError ||
+        error instanceof telemetryPolicy_1.TelemetryPolicyMismatchError) {
         return (0, exports.commandErrorResult)(command, error);
     }
     return (0, envelope_1.errorResult)(command, 'SERVER_UNAVAILABLE', `Could not reach the Rivet server: ${(0, errorMessage_1.errorMessage)(error)}`, { serverUnavailableReason: 'transport_failed' }, {

package/dist/cli/commands/status.js

@@ -3,6 +3,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.handleStatus = void 0;
 const envelope_1 = require("../envelope");
 const client_1 = require("../client");
+const callerModel_1 = require("../callerModel");
 const hostWorkNextAction_1 = require("../hostWorkNextAction");
 const serverVersion_1 = require("../serverVersion");
 const shared_1 = require("./shared");
@@ -31,9 +32,11 @@ const handleStatus = async (args, io) => {
             if (response.status !== 200) {
                 return (0, shared_1.serverErrorResult)(COMMAND, response.status, response.body);
             }
+            const handoff = await (0, callerModel_1.withCallerSessionModel)(context.handoff);
             return (0, envelope_1.okResult)(COMMAND, {
                 ...(0, hostWorkNextAction_1.withHostWorkNextAction)(response.body, {
-                    callerAgent: context.handoff?.agent,
+                    callerAgent: handoff?.agent,
+                    callerModel: handoff?.model,
                 }),
                 ...(0, serverVersion_1.versionEnvelopeFields)(attached.handshake),
             });

package/dist/cli/commands/variants.js

@@ -617,7 +617,8 @@ const handleVariantsStart = async (args, options) => {
             return accountChangedResult();
         const nextAction = status
             ? (0, hostWorkNextAction_1.buildHostWorkNextAction)(status, {
-                callerAgent: context.handoff?.agent,
+                callerAgent: handoff?.agent,
+                callerModel: handoff?.model,
             })
             : null;
         return (0, envelope_1.okResult)(START_COMMAND, {

package/dist/cli/editorSession.d.ts

@@ -0,0 +1,27 @@
+import { z } from 'zod';
+declare const EditorSessionSchema: z.ZodObject<{
+    pid: z.ZodNumber;
+    port: z.ZodNumber;
+    projectPath: z.ZodString;
+    startedAt: z.ZodString;
+    token: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    port: number;
+    token: string;
+    pid: number;
+    projectPath: string;
+    startedAt: string;
+}, {
+    port: number;
+    token: string;
+    pid: number;
+    projectPath: string;
+    startedAt: string;
+}>;
+type EditorOwner = Omit<z.infer<typeof EditorSessionSchema>, 'token'>;
+export declare const createEditorAccessToken: () => string;
+export declare const writeEditorSession: (session: z.infer<typeof EditorSessionSchema>) => void;
+export declare const readEditorAccessToken: (owner: EditorOwner) => string | null;
+export declare const removeEditorSession: (owner: EditorOwner, token: string) => void;
+export {};
+//# sourceMappingURL=editorSession.d.ts.map

package/dist/cli/editorSession.js

@@ -0,0 +1,50 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.removeEditorSession = exports.readEditorAccessToken = exports.writeEditorSession = exports.createEditorAccessToken = void 0;
+const crypto_1 = require("crypto");
+const fs_1 = require("fs");
+const os_1 = __importDefault(require("os"));
+const path_1 = __importDefault(require("path"));
+const zod_1 = require("zod");
+const writeFileAtomic_1 = require("../utils/writeFileAtomic");
+const EDITOR_ACCESS_TOKEN_BYTES = 32;
+const EditorSessionSchema = zod_1.z.object({
+    pid: zod_1.z.number().int().positive(),
+    port: zod_1.z.number().int().positive(),
+    projectPath: zod_1.z.string(),
+    startedAt: zod_1.z.string(),
+    token: zod_1.z.string().regex(/^[A-Za-z0-9_-]{43}$/),
+});
+const editorSessionDirectory = () => path_1.default.join(os_1.default.homedir(), '.rivet', 'editor-sessions');
+const editorSessionPath = (owner) => path_1.default.join(editorSessionDirectory(), `${owner.pid}-${owner.port}.json`);
+const createEditorAccessToken = () => (0, crypto_1.randomBytes)(EDITOR_ACCESS_TOKEN_BYTES).toString('base64url');
+exports.createEditorAccessToken = createEditorAccessToken;
+const writeEditorSession = (session) => {
+    (0, fs_1.mkdirSync)(editorSessionDirectory(), { recursive: true, mode: 0o700 });
+    (0, writeFileAtomic_1.writeFileAtomicSync)(editorSessionPath(session), JSON.stringify(EditorSessionSchema.parse(session)), { mode: 0o600 });
+};
+exports.writeEditorSession = writeEditorSession;
+const readEditorAccessToken = (owner) => {
+    try {
+        const session = EditorSessionSchema.parse(JSON.parse((0, fs_1.readFileSync)(editorSessionPath(owner), 'utf8')));
+        return session.pid === owner.pid &&
+            session.port === owner.port &&
+            session.projectPath === owner.projectPath &&
+            session.startedAt === owner.startedAt
+            ? session.token
+            : null;
+    }
+    catch {
+        return null;
+    }
+};
+exports.readEditorAccessToken = readEditorAccessToken;
+const removeEditorSession = (owner, token) => {
+    if ((0, exports.readEditorAccessToken)(owner) === token)
+        (0, fs_1.rmSync)(editorSessionPath(owner), { force: true });
+};
+exports.removeEditorSession = removeEditorSession;
+//# sourceMappingURL=editorSession.js.map

package/dist/cli/entry.js

@@ -37,6 +37,8 @@ exports.runControlPlane = void 0;
 const commandNames_1 = require("./commandNames");
 const pluginContext_1 = require("../hosts/pluginContext");
 const runControlPlane = async (args = process.argv.slice(2)) => {
+    if (args.includes('--no-telemetry'))
+        process.env.RIVET_TELEMETRY_DISABLED = '1';
     const { redirectLogsToStderr } = await Promise.resolve().then(() => __importStar(require('../utils/logger')));
     redirectLogsToStderr();
     if (!(0, commandNames_1.isCliControlCommand)(args[0])) {

package/dist/cli/envelope.d.ts

@@ -13,7 +13,9 @@ export type CliLoginAction = {
     action: 'login';
     command: 'rivet login';
     mcpTool: 'rivet_login';
+    authUrl?: string;
 };
+export declare const AUTH_REQUIRED_MESSAGE = "Authentication required. Run `rivet open` to open Rivet sign-in in the browser, or call the rivet_login MCP tool if this host has it. `rivet login` also works when the user runs it.";
 export type CliOpenProjectAction = {
     action: 'open_project';
     command: 'rivet open';
@@ -55,6 +57,7 @@ export type CliCommandResult = {
     exitCode: CliExitCode;
 };
 export declare const okResult: (command: string, data: unknown) => CliCommandResult;
+export declare const loginRecovery: (authUrl?: string) => CliErrorRecovery;
 export declare const errorResult: (command: string, code: CliErrorCode, message: string, details?: unknown, explicitRecovery?: CliErrorRecovery) => CliCommandResult;
 export declare const serializeEnvelope: (envelope: CliEnvelope) => string;
 //# sourceMappingURL=envelope.d.ts.map

package/dist/cli/envelope.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.serializeEnvelope = exports.errorResult = exports.okResult = exports.CLI_EXIT_CODES = exports.CLI_SCHEMA_VERSION = void 0;
+exports.serializeEnvelope = exports.errorResult = exports.loginRecovery = exports.okResult = exports.AUTH_REQUIRED_MESSAGE = exports.CLI_EXIT_CODES = exports.CLI_SCHEMA_VERSION = void 0;
 exports.CLI_SCHEMA_VERSION = 1;
 exports.CLI_EXIT_CODES = {
     ok: 0,
@@ -10,6 +10,7 @@ exports.CLI_EXIT_CODES = {
     serverUnavailable: 4,
     waitTimeout: 5,
 };
+exports.AUTH_REQUIRED_MESSAGE = 'Authentication required. Run `rivet open` to open Rivet sign-in in the browser, or call the rivet_login MCP tool if this host has it. `rivet login` also works when the user runs it.';
 const okResult = (command, data) => ({
     envelope: { schemaVersion: exports.CLI_SCHEMA_VERSION, ok: true, command, data },
     exitCode: exports.CLI_EXIT_CODES.ok,
@@ -25,18 +26,17 @@ const ERROR_EXIT_CODES = {
     WORK_ITEM_NOT_FOUND: exports.CLI_EXIT_CODES.operationFailed,
     MCP_REMOVED: exports.CLI_EXIT_CODES.usageError,
 };
-const recoveryForError = (code) => {
-    if (code !== 'AUTH_REQUIRED')
-        return undefined;
-    return {
-        isRecoverable: true,
-        nextAction: {
-            action: 'login',
-            command: 'rivet login',
-            mcpTool: 'rivet_login',
-        },
-    };
-};
+const loginRecovery = (authUrl) => ({
+    isRecoverable: true,
+    nextAction: {
+        action: 'login',
+        command: 'rivet login',
+        mcpTool: 'rivet_login',
+        ...(authUrl ? { authUrl } : {}),
+    },
+});
+exports.loginRecovery = loginRecovery;
+const recoveryForError = (code) => code === 'AUTH_REQUIRED' ? (0, exports.loginRecovery)() : undefined;
 const errorResult = (command, code, message, details, explicitRecovery) => {
     const recovery = explicitRecovery ?? recoveryForError(code);
     return {

package/dist/cli/hostWorkNextAction.d.ts

@@ -1,5 +1,4 @@
 import type { HostVariantImplementationWorkItemSnapshot, HostVariantWorkItemSnapshot } from '../agent-variants/contracts';
-import { type HostWorkerProfile } from '../hosts/workerDefaults';
 export type StatusWithHostWork = {
     session?: {
         projectPath?: string;
@@ -15,10 +14,7 @@ export type HostWorkNextActionItem = HostVariantImplementationWorkItemSnapshot &
     workerPrompt: string;
 };
 export type NextActionWorkerHint = {
-    binding: HostWorkerProfile['binding'];
-    agentType?: string;
-    model?: string;
-    effort?: string;
+    binding: 'none';
 };
 export type HostWorkNextAction = {
     action: 'complete_host_variant_work';
@@ -39,9 +35,11 @@ export type HostWorkNextAction = {
 };
 export declare const buildHostWorkNextAction: (status: StatusWithHostWork, options?: {
     callerAgent?: string;
+    callerModel?: string;
 }) => HostWorkNextAction | null;
 export declare const withHostWorkNextAction: <T extends StatusWithHostWork>(status: T, options?: {
     callerAgent?: string;
+    callerModel?: string;
 }) => T & {
     nextAction?: HostWorkNextAction;
 };

package/dist/cli/hostWorkNextAction.js

@@ -3,7 +3,6 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.withHostWorkNextAction = exports.buildHostWorkNextAction = void 0;
 const workItemBriefing_1 = require("../agent-variants/workItemBriefing");
 const WorkerExecutorService_1 = require("../agent-variants/WorkerExecutorService");
-const workerDefaults_1 = require("../hosts/workerDefaults");
 const isImplementationWorkItem = (item) => item.kind === 'static_preview' ||
     item.kind === 'refine_variant' ||
     item.kind === 'code_gen';
@@ -15,6 +14,9 @@ const buildHostWorkNextAction = (status, options) => {
         return null;
     }
     const isSingleItem = hostWork.length === 1;
+    const isDirect = isSingleItem &&
+        (!hostWork[0].workerSelection?.model ||
+            hostWork[0].workerSelection.model === options?.callerModel);
     const sessionId = status.variants?.sessionId;
     const completionCommandContext = {
         ...(status.session?.projectPath
@@ -29,32 +31,14 @@ const buildHostWorkNextAction = (status, options) => {
             ? (0, workItemBriefing_1.workItemWorkerPrompt)(sessionId, item)
             : `You are implementing one Rivet design variant ("${item.direction.label}"). Follow this work item's packet fields exactly (direction, mode, workspace) and finish by running: ${(0, workItemBriefing_1.workItemCompleteCommand)(item.workId, completionCommandContext)}`,
     }));
-    const effectiveFidelities = new Set(hostWork.map((item) => item.fidelity ?? workerDefaults_1.DEFAULT_WORKER_FIDELITY));
-    const isSharedFidelity = effectiveFidelities.size === 1;
-    const profile = (0, workerDefaults_1.workerProfileFor)(options?.callerAgent, hostWork[0].fidelity);
-    const worker = {
-        binding: profile.binding,
-        ...(isSharedFidelity && profile.agentType
-            ? { agentType: profile.agentType }
-            : {}),
-        ...(isSharedFidelity && profile.defaults
-            ? { model: profile.defaults.model, effort: profile.defaults.effort }
-            : {}),
-    };
-    let spawnClause = 'as background subagents';
-    if (profile.binding === 'agent_definition') {
-        spawnClause = isSharedFidelity
-            ? `as background subagents of agent type "${profile.agentType}" (with tuned worker model/effort defaults; fall back to your default subagent type if it is not registered)`
-            : `as background subagents; select the agent type from each item's fidelity: low = "${(0, workerDefaults_1.workerProfileFor)(options?.callerAgent, 'low').agentType}", medium = "${(0, workerDefaults_1.workerProfileFor)(options?.callerAgent, 'medium').agentType}", high or omitted = "${(0, workerDefaults_1.workerProfileFor)(options?.callerAgent, 'high').agentType}" (fall back to your default subagent type only when the selected type is not registered)`;
-    }
     return {
         action: 'complete_host_variant_work',
-        message: isSingleItem
+        message: isDirect
             ? 'Complete this variant work item directly in the current host, then run its completeCommand.'
             : 'Complete these independent variant work items concurrently. Each item MUST be reported the moment it finishes via its own completeCommand — never hold completions to batch them.',
         command: 'rivet variants complete',
-        worker,
-        parallelism: isSingleItem
+        worker: { binding: 'none' },
+        parallelism: isDirect
             ? {
                 recommended: false,
                 strategy: 'direct',
@@ -63,7 +47,7 @@ const buildHostWorkNextAction = (status, options) => {
             : {
                 recommended: true,
                 strategy: 'one_worker_per_work_item',
-                instructions: `Spawn every worker NOW, in this same turn, ${spawnClause} — one per item — passing that item's workerPrompt VERBATIM as the entire worker prompt. Do not compose, extend, or re-plan anything: briefs are final and the briefing file the workerPrompt names already contains the full packet and completion command. Each worker self-reports the moment it finishes; the coordinator never batches or defers completion reports.`,
+                instructions: `Spawn every worker in this turn as native background subagents with the current permissions and approvals, one per item, passing that item's workerPrompt VERBATIM as the entire worker prompt. Inherit the current model unless workerSelection specifies a requested model. Use native model selection for that requirement; if unsupported, report that item failed before editing. Do not select a fixed-model agent definition or launch a detached provider CLI. Briefs are final and the briefing file contains the full packet and completion command. Each worker reports completion immediately. Denied or unavailable approval must be reported through the completion command without broader retries or server execution.`,
             },
         ...(status.variants?.sessionId
             ? { sessionId: status.variants.sessionId }

package/dist/cli/router.js

@@ -48,7 +48,7 @@ const COMMAND_USAGE = {
         'Save instructions and library references for every generation in this account on this installation. add --title <title> [--file <Markdown path>] [--references <manifest.json>]; update <id> [--title <title>] [--file <path>] [--references <manifest.json>]; show|enable|disable|remove <id>. Add requires Markdown or nonempty references. Files are copied when saved, not watched. Updates preserve omitted fields; an empty reference array removes references.',
         'Reference manifests contain an array of {kind:"url"|"repository",url,intent,revision?,files?:[{name,path}]} or {kind:"directory",path,intent}. File and directory paths resolve relative to the manifest. Directories must exist; their canonical absolute paths are saved without copying contents. They remain live read-only sources for workers; receipts record the path, not historical folder contents. File names retain safe relative native layout. URLs identify sources and are not fetched. Selected UTF-8 files are limited to 1 MiB each, 5 MiB and 100 files per document, and 32 references.',
         'Requests to add a repository URL to context default to a URL-only reference; use a directory pointer for an existing local repository or installed library. Omit files and additional setup Markdown. Attach source files only for an explicit snapshot request or an approved file selection. The absence of automatic URL fetching does not authorize source ingestion or cloning.',
-        'verifier <id> retrieves one source, sourceDigest and saved verifier without running checks. update <id> --verifier <Markdown path> [--verifier-package <manifest.json>] --source-digest <digest> saves reusable checking instructions and optional trusted local Node code. verify <id> --project <path> --input <target.json> explicitly runs a saved package. Pass exits 0; fail, blocked, or runtime error exits 1 with the full report in error.details. --remove-verifier removes only the verifier. Save separately from source edits. No automatic execution or generation context overhead.',
+        'verifier <id> retrieves one source, sourceDigest and saved verifier without running checks. update <id> --verifier <Markdown path> [--verifier-package <manifest.json>] --source-digest <digest> saves reusable checking instructions and optional trusted local Node code. verify <id> --project <path> --input <target.json> [--output-directory <path>] explicitly runs a saved package under the invoking host permissions. Evidence defaults to <project>/.rivet/verifier-runs. Denied writes fail without fallback. Pass exits 0; fail, blocked, or runtime error exits 1 with the full report in error.details. --remove-verifier removes only the verifier. Save separately from source edits. No automatic execution or generation context overhead.',
         'resolve [--guidance auto|off] [--exclude-guidance <JSON IDs>] returns current effective text and native paths without a model call. inspect <workId> --project <path> reads retained generation context. Guidance above 32 KiB emits an advisory warning, not a truncation or rejection. The HTTP request limit remains 50 MiB.',
     ],
     profile: [
@@ -93,7 +93,7 @@ const COMMAND_USAGE = {
     auth: ['rivet auth status', 'Report signed-in state (server-validated).'],
     mcp: [
         'rivet mcp serve [--project <path>]',
-        'Start the resident stdio MCP server (three deep tools over the CLI control plane). Bare `rivet mcp` — the deleted per-tool server — stays removed.',
+        'Start the resident stdio MCP server (15 intent-centered tools and four supporting operations). Bare `rivet mcp` — the deleted per-tool server — stays removed.',
     ],
 };
 const HANDOFF_USAGE = 'Optional handoff flags on every command: --caller-agent claude|codex|cursor, --caller-model <model>, --caller-session <id>, or --handoff <json>. Human-direct invocations omit them.';
@@ -268,6 +268,8 @@ const runCliControlCommand = async (args, io = io_1.processCliIO) => {
     const { redirectLogsToStderr } = await Promise.resolve().then(() => __importStar(require('../utils/logger')));
     redirectLogsToStderr();
     const [command, ...rest] = args;
+    if (rest.includes('--no-telemetry'))
+        process.env.RIVET_TELEMETRY_DISABLED = '1';
     const startedAt = Date.now();
     if (rest.includes('--help') || rest.includes('-h')) {
         const usage = COMMAND_USAGE[command] ?? [];

package/dist/cli/serverHandshake.d.ts

@@ -12,6 +12,7 @@ export type ServerHandshake = {
     queueAccessToken: string | null;
     rivetVersion?: string;
     pluginName?: string;
+    telemetryMode?: import('../config/telemetryPolicy').TelemetryMode;
 };
 export declare const serverRuntimeDirectory: (projectPath: string, channel?: InstallationChannel) => string;
 export declare const handshakeFilePath: (projectPath: string, channel?: InstallationChannel) => string;

package/dist/cli/serverUnavailable.d.ts

@@ -1,4 +1,4 @@
-declare const SERVER_UNAVAILABLE_REASONS: readonly ["handshake_missing", "handshake_invalid", "process_not_running", "health_check_failed", "plugin_context_mismatch", "server_starting", "transport_failed", "server_shutdown_pending", "server_start_timeout", "server_process_exited", "server_upgrade_required", "replacement_version_mismatch", "replacement_health_failed", "app_health_failed", "dev_server_resolution_failed", "rivet_port_unavailable", "editor_server_start_failed"];
+declare const SERVER_UNAVAILABLE_REASONS: readonly ["handshake_missing", "handshake_invalid", "process_not_running", "health_check_failed", "plugin_context_mismatch", "telemetry_policy_mismatch", "server_starting", "transport_failed", "server_shutdown_pending", "server_start_timeout", "server_process_exited", "server_upgrade_required", "replacement_version_mismatch", "replacement_health_failed", "app_health_failed", "dev_server_resolution_failed", "rivet_port_unavailable", "editor_server_start_failed"];
 export type ServerUnavailableReason = (typeof SERVER_UNAVAILABLE_REASONS)[number];
 export declare const isServerUnavailableReason: (value: unknown) => value is ServerUnavailableReason;
 export {};

package/dist/cli/serverUnavailable.js

@@ -7,6 +7,7 @@ const SERVER_UNAVAILABLE_REASONS = [
     'process_not_running',
     'health_check_failed',
     'plugin_context_mismatch',
+    'telemetry_policy_mismatch',
     'server_starting',
     'transport_failed',
     'server_shutdown_pending',

package/dist/cli/telemetry.js

@@ -6,9 +6,11 @@ const recordOf = (value) => value !== null && typeof value === 'object'
     ? value
     : {};
 const browserMetadataForEnvelope = (envelope) => {
-    if (!envelope.ok || envelope.command !== 'open')
+    if (envelope.command !== 'open')
         return {};
-    const browser = recordOf(recordOf(envelope.data).browser);
+    const browser = recordOf(envelope.ok
+        ? recordOf(envelope.data).browser
+        : recordOf(envelope.error.details).browser);
     if ((browser.action === 'launch_requested' &&
         browser.reason === 'interactive_open') ||
         (browser.action === 'skipped' && browser.reason === 'no_browser_flag') ||

package/dist/config/flags.d.ts

@@ -17,6 +17,9 @@ export declare const FLAG_DEFINITIONS: {
     readonly createProject: {
         readonly default: false;
     };
+    readonly share: {
+        readonly default: false;
+    };
     readonly deployPrototype: {
         readonly default: false;
     };
@@ -32,9 +35,6 @@ export declare const FLAG_DEFINITIONS: {
     readonly refineMode: {
         readonly default: false;
     };
-    readonly designContextViewer: {
-        readonly default: false;
-    };
     readonly inspectorUndoRedo: {
         readonly default: false;
     };

package/dist/config/flags.js

@@ -8,12 +8,12 @@ exports.FLAG_DEFINITIONS = {
     branchDiff: { default: false },
     gitUi: { default: true },
     createProject: { default: false },
+    share: { default: false },
     deployPrototype: { default: false },
     canvasShare: { default: false },
     variantSend: { default: false },
     generativeControls: { default: false },
     refineMode: { default: false },
-    designContextViewer: { default: false },
     inspectorUndoRedo: { default: false },
 };
 exports.DEFAULT_FEATURE_FLAGS = Object.fromEntries(Object.entries(exports.FLAG_DEFINITIONS).map(([key, def]) => [

package/dist/config/pluginMetrics.d.ts

@@ -0,0 +1,2 @@
+export declare const pluginMetricProperties: (event: string, properties: Record<string, unknown>) => Record<string, unknown> | null;
+//# sourceMappingURL=pluginMetrics.d.ts.map