rivet-design 0.26.2 → 0.27.0

package/dist/services/ProjectPackageManager.js

@@ -3,7 +3,7 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
     return (mod && mod.__esModule) ? mod : { "default": mod };
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.resolveProjectPackageManager = exports.readProjectFile = exports.isInstallOutputPath = exports.forEveryPackageManager = exports.INSTALL_CONTENT_GLOBS = exports.INSTALL_ARTIFACTS = exports.INSTALL_CONFIG_FILES = exports.LOCKFILES = void 0;
+exports.resolveProjectPackageManager = exports.readProjectFile = exports.isInstallOutputPath = exports.forEveryPackageManager = exports.INSTALL_CONTENT_GLOBS = exports.INSTALL_ARTIFACTS = exports.INSTALL_CONFIG_FILES = exports.LOCKFILES = exports.PackageManagerError = void 0;
 const promises_1 = __importDefault(require("fs/promises"));
 const path_1 = __importDefault(require("path"));
 const glob_1 = require("glob");
@@ -11,6 +11,15 @@ const js_yaml_1 = require("js-yaml");
 const package_manager_detector_1 = require("package-manager-detector");
 const errnoCode_1 = require("../utils/errnoCode");
 const pathContainment_1 = require("../utils/pathContainment");
+class PackageManagerError extends Error {
+    reasonCode;
+    constructor(reasonCode, message) {
+        super(message);
+        this.reasonCode = reasonCode;
+        this.name = 'PackageManagerError';
+    }
+}
+exports.PackageManagerError = PackageManagerError;
 exports.LOCKFILES = {
     npm: ['package-lock.json', 'npm-shrinkwrap.json'],
     yarn: ['yarn.lock'],
@@ -79,13 +88,26 @@ const readProjectFile = async (file) => {
 exports.readProjectFile = readProjectFile;
 const readManifest = async (root) => {
     const source = await (0, exports.readProjectFile)(path_1.default.join(root, 'package.json'));
-    return source === null ? null : JSON.parse(source);
+    if (source === null)
+        return null;
+    try {
+        return JSON.parse(source);
+    }
+    catch {
+        throw new PackageManagerError('invalid_manifest', 'package.json is not valid JSON');
+    }
+};
+const readPnpmWorkspace = (source) => {
+    try {
+        return (0, js_yaml_1.load)(source, { schema: js_yaml_1.JSON_SCHEMA });
+    }
+    catch {
+        throw new PackageManagerError('invalid_workspace', 'pnpm-workspace.yaml is not valid YAML');
+    }
 };
 const packagePathsFor = async (root, manifest) => {
     const pnpmSource = await (0, exports.readProjectFile)(path_1.default.join(root, 'pnpm-workspace.yaml'));
-    const pnpmConfig = pnpmSource === null
-        ? null
-        : (0, js_yaml_1.load)(pnpmSource, { schema: js_yaml_1.JSON_SCHEMA });
+    const pnpmConfig = pnpmSource === null ? null : readPnpmWorkspace(pnpmSource);
     const patterns = pnpmConfig?.packages ??
         (Array.isArray(manifest.workspaces)
             ? manifest.workspaces
@@ -93,7 +115,7 @@ const packagePathsFor = async (root, manifest) => {
         [];
     if (!Array.isArray(patterns) ||
         patterns.some((pattern) => typeof pattern !== 'string')) {
-        throw new Error('Workspace packages must be an array of directory patterns');
+        throw new PackageManagerError('invalid_workspace', 'Workspace packages must be an array of directory patterns');
     }
     const included = patterns.filter((pattern) => !pattern.startsWith('!'));
     const excluded = patterns
@@ -107,7 +129,7 @@ const packagePathsFor = async (root, manifest) => {
     });
     const members = await Promise.all(files.map((file) => promises_1.default.realpath(path_1.default.dirname(file))));
     if (members.some((member) => !(0, pathContainment_1.isPathWithinRoot)(root, member))) {
-        throw new Error('A workspace package resolves outside the preview workspace');
+        throw new PackageManagerError('path_outside_workspace', 'A workspace package resolves outside the preview workspace');
     }
     return [...new Set([root, ...members.sort()])];
 };
@@ -115,7 +137,7 @@ const resolveProjectPackageManager = async (options) => {
     const cwd = await promises_1.default.realpath(options.cwd);
     const boundary = await promises_1.default.realpath(options.workspaceRoot);
     if (!(0, pathContainment_1.isPathWithinRoot)(boundary, cwd)) {
-        throw new Error('Dependency preparation directory is outside the preview workspace');
+        throw new PackageManagerError('path_outside_workspace', 'Dependency preparation directory is outside the preview workspace');
     }
     let rootPath = cwd;
     let manifest = await readManifest(cwd);
@@ -139,7 +161,7 @@ const resolveProjectPackageManager = async (options) => {
     const declared = manifest.packageManager;
     const declaration = declared ? parsePackageManagerDeclaration(declared) : null;
     if (declared && !declaration) {
-        throw new Error(`Unsupported packageManager declaration: ${declared}. Preview preparation supports pinned npm, Yarn, and pnpm versions.`);
+        throw new PackageManagerError('invalid_package_manager_field', `Unsupported packageManager declaration: ${declared}. Preview preparation supports pinned npm, Yarn, and pnpm versions.`);
     }
     const managersWithLockfiles = [];
     for (const name of Object.keys(exports.LOCKFILES)) {
@@ -164,7 +186,7 @@ const resolveProjectPackageManager = async (options) => {
         !manifest.devEngines?.packageManager &&
         managersWithLockfiles.length > 1 &&
         !selectedManager) {
-        throw new Error('Multiple package manager lockfiles found. Set package.json packageManager to select the project tool.');
+        throw new PackageManagerError('multiple_lockfiles', 'Multiple package manager lockfiles found. Set package.json packageManager to select the project tool.');
     }
     const detected = selectedManager
         ? null
@@ -175,7 +197,7 @@ const resolveProjectPackageManager = async (options) => {
         });
     const name = selectedManager ?? detected?.name ?? 'npm';
     if (name !== 'npm' && name !== 'yarn' && name !== 'pnpm') {
-        throw new Error(`Preview dependency preparation does not support ${name}`);
+        throw new PackageManagerError('unsupported_package_manager', `Preview dependency preparation does not support ${name}`);
     }
     let agent = selectedManager ?? detected?.agent ?? name;
     if (name === 'yarn' &&

package/dist/services/TelemetryService.d.ts

@@ -1,5 +1,5 @@
 import { type AccountIdentity } from './ConfigManager';
-import type { BrowserMetadata, DesignContextKind, ServerUnavailableReason, VariantContextMetadata } from '../cli/telemetry';
+import type { BrowserMetadata, DesignContextKind, ServerUnavailableReason, VariantContextMetadata, VerificationMetadata } from '../cli/telemetry';
 import type { GuidanceErrorCode, GuidanceSelection } from '../types/guidance';
 import type { MCPAuthMethod, MCPAuthState, MCPOnboardingCorrelation, MCPOAuthCallbackResult } from './MCPOnboardingTelemetry';
 import { type MCPVariantsTelemetryMetadata } from './MCPVariantsTelemetry';
@@ -17,6 +17,7 @@ export interface LibraryOperation {
     operation: 'project_open' | 'project_rename' | 'project_remove' | 'project_pin' | 'project_unpin' | 'folder_select' | 'workspace_open' | 'preview_open' | 'thumbnail_capture' | 'direction_update' | 'navigation';
     outcome: 'completed' | 'failed';
     durationMs: number;
+    error?: unknown;
 }
 export interface ProfileOperation {
     stage: 'action' | 'import' | 'preparation' | 'maintenance';
@@ -25,6 +26,7 @@ export interface ProfileOperation {
     durationMs: number;
     referenceCount?: number;
     status?: 'selected' | 'empty' | 'off' | 'unavailable' | 'timeout';
+    error?: unknown;
 }
 export interface GuidanceOperation {
     operation: 'add' | 'update' | 'remove' | 'resolve' | 'delivery' | 'verifier';
@@ -70,9 +72,10 @@ export declare class TelemetryService {
         callerAgent?: string;
         callerModel?: string;
         callerAgentSource?: 'handoff' | 'env';
+        callerRunId?: string;
         designContextKind?: DesignContextKind;
         source?: 'cli' | 'mcp';
-    } & VariantContextMetadata & BrowserMetadata): void;
+    } & VariantContextMetadata & BrowserMetadata & VerificationMetadata): void;
     trackAuthStarted(data: {
         surface: AuthTelemetrySurface;
         authAttemptId: string;
@@ -128,6 +131,7 @@ export declare class TelemetryService {
         stage: 'resolve_dev_server' | 'start_editor_server' | 'port_exhausted';
         failureReason: 'operation_failed' | 'port_unavailable';
         durationMs: number;
+        error?: unknown;
     }): void;
     trackServerStarted(data: {
         mode: 'attached' | 'static';
@@ -265,6 +269,7 @@ export declare class TelemetryService {
         exitCode?: number | null;
         signal?: string | null;
         missingDeps?: boolean;
+        error?: unknown;
     }): void;
     trackAgentVariantsPreviewStarted(data: {
         sessionId: string;
@@ -293,6 +298,7 @@ export declare class TelemetryService {
         exitCode?: number | null;
         signal?: string | null;
         missingDeps?: boolean;
+        error?: unknown;
     }): void;
     trackAgentVariantsPreviewSwitchStarted(data: {
         sessionId: string;

package/dist/services/TelemetryService.js

@@ -10,6 +10,7 @@ const telemetry_1 = require("../config/telemetry");
 const telemetryPolicy_1 = require("../config/telemetryPolicy");
 const pluginMetrics_1 = require("../config/pluginMetrics");
 const telemetryContract_1 = require("../config/telemetryContract");
+const failureReason_1 = require("../utils/failureReason");
 const proxy_1 = require("../config/proxy");
 const MCPVariantsTelemetry_1 = require("./MCPVariantsTelemetry");
 const errorMessage_1 = require("../utils/errorMessage");
@@ -53,11 +54,13 @@ class TelemetryService {
                 ? { reference_count: data.referenceCount }
                 : {}),
             ...(data.status ? { status: data.status } : {}),
+            ...(0, failureReason_1.failureReasonCodeProperties)(data.error),
         });
     }
     trackLibraryOperation(data) {
         this.track(`library_${data.operation}_${data.outcome}`, {
             duration_ms: data.durationMs,
+            ...(0, failureReason_1.failureReasonCodeProperties)(data.error),
         });
     }
     hashTelemetryValue(value) {
@@ -290,6 +293,10 @@ class TelemetryService {
             caller_agent: data.callerAgent,
             caller_model: data.callerModel,
             caller_agent_source: data.callerAgentSource,
+            caller_run_id: data.callerRunId,
+            verification_outcome: data.verificationOutcome,
+            verification_check_count: data.verificationCheckCount,
+            verification_duration_ms: data.verificationDurationMs,
             design_context_kind: data.designContextKind,
             design_context_kinds: data.contextKinds,
             context_image_count: data.contextImageCount,
@@ -372,6 +379,7 @@ class TelemetryService {
             stage: data.stage,
             failure_reason: data.failureReason,
             duration_ms: data.durationMs,
+            ...(0, failureReason_1.failureReasonCodeProperties)(data.error),
         });
     }
     trackServerStarted(data) {
@@ -652,6 +660,7 @@ class TelemetryService {
             exit_code: data.exitCode,
             term_signal: data.signal,
             missing_deps: data.missingDeps,
+            ...(0, failureReason_1.failureReasonProperties)(data.error),
             source: 'mcp',
         });
     }
@@ -689,6 +698,7 @@ class TelemetryService {
             exit_code: data.exitCode,
             term_signal: data.signal,
             missing_deps: data.missingDeps,
+            ...(0, failureReason_1.failureReasonProperties)(data.error),
             source: 'mcp',
         });
     }

package/dist/services/WorktreeManager.js

@@ -22,6 +22,7 @@ const ProjectPackageManager_1 = require("./ProjectPackageManager");
 const OperatingSystemServices_1 = require("./OperatingSystemServices");
 const errnoCode_1 = require("../utils/errnoCode");
 const errorMessage_1 = require("../utils/errorMessage");
+const failureReason_1 = require("../utils/failureReason");
 const log = (0, logger_1.createLogger)('WorktreeManager');
 const DEV_SERVER_READY_INACTIVITY_MS = 30_000;
 const DEV_SERVER_READY_MAX_MS = 120_000;
@@ -403,6 +404,10 @@ class WorktreeManager {
                 detail,
                 exitCode: term.exited?.code ?? null,
                 signal: term.exited?.signal ?? null,
+                reasonCode: term.spawnError
+                    ? (0, failureReason_1.failureReasonCode)(term.spawnError)
+                    : undefined,
+                summary: term.spawnError ? message : undefined,
             });
         };
         const hardDeadline = Date.now() + DEV_SERVER_READY_MAX_MS;

package/dist/services/profiles/DesignProfiles.js

@@ -417,18 +417,25 @@ class DesignProfiles {
                         instructions: `The source changed after this verifier was saved. ${VERIFICATION_TARGET_INSTRUCTIONS} Revise and execute a temporary recipe against the supplied source before offering to replace the saved verifier.`,
                     },
                 };
+            if (!verifier.package) {
+                return {
+                    ...resolved,
+                    verifier,
+                    verifierState: 'ready',
+                    nextAction: {
+                        action: 'execute_context_recipe',
+                        instructions: `This saved verifier is a Markdown recipe without an executable package, so \`rivet context verify\` cannot run it. Follow the recipe once with the host's own tools against this source and the user-selected target. ${VERIFICATION_TARGET_INSTRUCTIONS} Report pass, fail, or unable to verify with evidence. Retrieval has not executed any checks.`,
+                    },
+                };
+            }
             return {
                 ...resolved,
                 verifier,
                 verifierState: 'ready',
-                ...(verifier.package
-                    ? {
-                        packageDirectory: await (0, retainedTextFiles_1.materializeTextFiles)({
-                            files: verifier.package.files,
-                            directory: path_1.default.join(records.directory, 'guidance-verifiers'),
-                        }),
-                    }
-                    : {}),
+                packageDirectory: await (0, retainedTextFiles_1.materializeTextFiles)({
+                    files: verifier.package.files,
+                    directory: path_1.default.join(records.directory, 'guidance-verifiers'),
+                }),
                 nextAction: {
                     action: 'run_context_verifier',
                     instructions: `Execute the saved verifier against this source and the user-selected target. ${VERIFICATION_TARGET_INSTRUCTIONS} Report pass, fail, or unable to verify with evidence. Retrieval has not executed any checks.`,
@@ -1388,6 +1395,7 @@ class DesignProfiles {
                 operation: 'import',
                 outcome: 'failed',
                 durationMs: Date.now() - started,
+                error,
             });
             if (!context.abort.signal.aborted &&
                 context.records.jobs().find((item) => item.id === id)?.state ===

package/dist/types/guidance-verifier.d.ts

@@ -23,8 +23,8 @@ export declare const GuidanceVerifierResultSchema: z.ZodObject<{
             mediaType: z.ZodString;
             label: z.ZodString;
             role: z.ZodEnum<{
-                reference: "reference";
                 observed: "observed";
+                reference: "reference";
             }>;
         }, z.core.$strict>>;
         comparison: z.ZodOptional<z.ZodObject<{
@@ -49,8 +49,8 @@ export declare const GuidanceVerifierResultSchema: z.ZodObject<{
             mediaType: z.ZodString;
             label: z.ZodString;
             role: z.ZodEnum<{
-                reference: "reference";
                 observed: "observed";
+                reference: "reference";
             }>;
         }, z.core.$strict>>;
         comparison: z.ZodOptional<z.ZodObject<{
@@ -75,8 +75,8 @@ export declare const GuidanceVerifierResultSchema: z.ZodObject<{
             mediaType: z.ZodString;
             label: z.ZodString;
             role: z.ZodEnum<{
-                reference: "reference";
                 observed: "observed";
+                reference: "reference";
             }>;
         }, z.core.$strict>>;
         comparison: z.ZodOptional<z.ZodObject<{
@@ -90,6 +90,8 @@ export declare const GuidanceVerifierResultSchema: z.ZodObject<{
     }, z.core.$strict>], "status">>;
 }, z.core.$strict>;
 export type GuidanceVerifierResult = z.infer<typeof GuidanceVerifierResultSchema>;
+export declare const GUIDANCE_VERIFIER_ERROR_REASONS: readonly ["package_required", "verifier_missing", "verifier_stale", "cancelled", "timeout", "output_limit", "process_failed", "invalid_result", "invalid_evidence", "cleanup_failed", "setup_failed"];
+export type GuidanceVerifierErrorReason = (typeof GUIDANCE_VERIFIER_ERROR_REASONS)[number];
 export type GuidanceVerifierRun = {
     schemaVersion: 1;
     verifier: {
@@ -105,7 +107,7 @@ export type GuidanceVerifierRun = {
     checks: GuidanceVerifierResult['checks'];
 } | {
     execution: 'error';
-    reason: 'package_required' | 'verifier_missing' | 'verifier_stale' | 'cancelled' | 'timeout' | 'output_limit' | 'process_failed' | 'invalid_result' | 'invalid_evidence' | 'cleanup_failed' | 'setup_failed';
+    reason: GuidanceVerifierErrorReason;
 });
 export interface GuidanceVerifierInput {
     source: GuidanceDocument;
@@ -156,7 +158,7 @@ export type GuidanceVerification = GuidanceVerificationSource & ({
     verifierState: 'ready';
     verifier: GuidanceVerifier;
     nextAction: {
-        action: 'run_context_verifier';
+        action: 'run_context_verifier' | 'execute_context_recipe';
         instructions: string;
     };
 });

package/dist/types/guidance-verifier.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.isSeparateVerifierUpdate = exports.GuidanceVerifierSummarySchema = exports.GuidanceVerifierSchema = exports.GuidanceVerifierResultSchema = exports.GuidanceVerifierPackageSchema = void 0;
+exports.isSeparateVerifierUpdate = exports.GuidanceVerifierSummarySchema = exports.GuidanceVerifierSchema = exports.GUIDANCE_VERIFIER_ERROR_REASONS = exports.GuidanceVerifierResultSchema = exports.GuidanceVerifierPackageSchema = void 0;
 const zod_1 = require("zod");
 const guidance_references_1 = require("./guidance-references");
 exports.GuidanceVerifierPackageSchema = zod_1.z
@@ -72,6 +72,19 @@ exports.GuidanceVerifierResultSchema = zod_1.z
     .strict()
     .refine((value) => new Set(value.checks.map((check) => check.id)).size ===
     value.checks.length, 'Check IDs must be unique');
+exports.GUIDANCE_VERIFIER_ERROR_REASONS = [
+    'package_required',
+    'verifier_missing',
+    'verifier_stale',
+    'cancelled',
+    'timeout',
+    'output_limit',
+    'process_failed',
+    'invalid_result',
+    'invalid_evidence',
+    'cleanup_failed',
+    'setup_failed',
+];
 exports.GuidanceVerifierSchema = zod_1.z
     .object({
     markdown: zod_1.z

package/dist/utils/devServerError.d.ts

@@ -1,3 +1,4 @@
+import type { FailureReasonCode } from './failureReason';
 export type DevServerFailureReason = 'spawn_error' | 'exited' | 'timeout' | 'missing_dev_script' | 'compile_error' | 'dependency_install_failed';
 export declare const isCompilationFailureOutput: (output: string) => boolean;
 export declare function isPortInUseOutput(output: string): boolean;
@@ -8,6 +9,8 @@ export declare class DevServerStartError extends Error {
     readonly detail: string;
     readonly exitCode: number | null;
     readonly signal: NodeJS.Signals | null;
+    readonly reasonCode?: FailureReasonCode;
+    readonly summary?: string;
     constructor(opts: {
         message: string;
         reason: DevServerFailureReason;
@@ -15,6 +18,8 @@ export declare class DevServerStartError extends Error {
         detail: string;
         exitCode?: number | null;
         signal?: NodeJS.Signals | null;
+        reasonCode?: FailureReasonCode;
+        summary?: string;
     });
 }
 export declare function isDevServerStartError(err: unknown): err is DevServerStartError;

package/dist/utils/devServerError.js

@@ -21,6 +21,8 @@ class DevServerStartError extends Error {
     detail;
     exitCode;
     signal;
+    reasonCode;
+    summary;
     constructor(opts) {
         super(opts.message);
         this.name = 'DevServerStartError';
@@ -29,6 +31,8 @@ class DevServerStartError extends Error {
         this.detail = opts.detail;
         this.exitCode = opts.exitCode ?? null;
         this.signal = opts.signal ?? null;
+        this.reasonCode = opts.reasonCode;
+        this.summary = opts.summary;
     }
 }
 exports.DevServerStartError = DevServerStartError;

package/dist/utils/failureReason.d.ts

@@ -0,0 +1,16 @@
+export declare const FAILURE_REASON_CODES: readonly ["multiple_lockfiles", "unsupported_package_manager", "invalid_package_manager_field", "invalid_manifest", "invalid_workspace", "path_outside_workspace", "dangling_symlink", "version_unreadable", "version_mismatch", "no_install_command", "install_failed", "installer_unstoppable", "inputs_changed", "ENOENT", "EACCES", "EPERM", "EEXIST", "ENOTDIR", "EISDIR", "ELOOP", "ENOSPC", "EMFILE", "EADDRINUSE", "ECONNREFUSED", "ECONNRESET", "ETIMEDOUT", "EBUSY", "ENOTSUP", "EINVAL", "ENOTEMPTY", "EROFS", "EAI_AGAIN", "timeout", "aborted", "unknown"];
+export type FailureReasonCode = (typeof FAILURE_REASON_CODES)[number];
+export interface FailureReason {
+    reasonCode: FailureReasonCode;
+    reasonDetail?: string;
+}
+export declare const failureReasonCode: (error: unknown) => FailureReasonCode;
+export declare const failureReason: (error: unknown) => FailureReason;
+export declare const failureReasonProperties: (error: unknown) => {
+    reason_code?: FailureReasonCode;
+    reason_detail?: string;
+};
+export declare const failureReasonCodeProperties: (error: unknown) => {
+    reason_code?: FailureReasonCode;
+};
+//# sourceMappingURL=failureReason.d.ts.map

package/dist/utils/failureReason.js

@@ -0,0 +1,106 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.failureReasonCodeProperties = exports.failureReasonProperties = exports.failureReason = exports.failureReasonCode = exports.FAILURE_REASON_CODES = void 0;
+const errnoCode_1 = require("./errnoCode");
+const errorMessage_1 = require("./errorMessage");
+const devServerError_1 = require("./devServerError");
+const hostedLogPrivacy_1 = require("./hostedLogPrivacy");
+const DEPENDENCY_REASON_CODES = [
+    'multiple_lockfiles',
+    'unsupported_package_manager',
+    'invalid_package_manager_field',
+    'invalid_manifest',
+    'invalid_workspace',
+    'path_outside_workspace',
+    'dangling_symlink',
+    'version_unreadable',
+    'version_mismatch',
+    'no_install_command',
+    'install_failed',
+    'installer_unstoppable',
+    'inputs_changed',
+];
+const ERRNO_REASON_CODES = [
+    'ENOENT',
+    'EACCES',
+    'EPERM',
+    'EEXIST',
+    'ENOTDIR',
+    'EISDIR',
+    'ELOOP',
+    'ENOSPC',
+    'EMFILE',
+    'EADDRINUSE',
+    'ECONNREFUSED',
+    'ECONNRESET',
+    'ETIMEDOUT',
+    'EBUSY',
+    'ENOTSUP',
+    'EINVAL',
+    'ENOTEMPTY',
+    'EROFS',
+    'EAI_AGAIN',
+];
+const GENERAL_REASON_CODES = ['timeout', 'aborted', 'unknown'];
+exports.FAILURE_REASON_CODES = [
+    ...DEPENDENCY_REASON_CODES,
+    ...ERRNO_REASON_CODES,
+    ...GENERAL_REASON_CODES,
+];
+const REASON_DETAIL_LIMIT = 400;
+const REDACTION_INPUT_LIMIT = 4_000;
+const ABSOLUTE_PATH = /(?<![\w.:/\\])\/(?:[\w.@+~-]+\/)+[\w.@+~-]*/g;
+const REASON_CODES = new Set(exports.FAILURE_REASON_CODES);
+const ERRNO_CODES = new Set(ERRNO_REASON_CODES);
+const ERROR_NAME_REASON_CODES = new Map([
+    ['AbortError', 'aborted'],
+    ['TimeoutError', 'timeout'],
+]);
+const propertyOf = (error, key) => typeof error === 'object' && error !== null
+    ? Reflect.get(error, key)
+    : undefined;
+const isFailureReasonCode = (value) => typeof value === 'string' && REASON_CODES.has(value);
+const isErrnoReasonCode = (value) => value !== undefined && ERRNO_CODES.has(value);
+const failureReasonCode = (error) => {
+    const declared = propertyOf(error, 'reasonCode');
+    if (isFailureReasonCode(declared))
+        return declared;
+    const code = (0, errnoCode_1.errnoCode)(error);
+    if (isErrnoReasonCode(code))
+        return code;
+    return (ERROR_NAME_REASON_CODES.get(String(propertyOf(error, 'name'))) ?? 'unknown');
+};
+exports.failureReasonCode = failureReasonCode;
+const failureText = (error) => {
+    if (!(0, devServerError_1.isDevServerStartError)(error))
+        return (0, errorMessage_1.errorMessage)(error);
+    return error.summary ?? '';
+};
+const failureDetail = (error) => (0, hostedLogPrivacy_1.redactSensitiveText)(failureText(error)
+    .slice(-REDACTION_INPUT_LIMIT)
+    .replace(/\s+/g, ' ')
+    .trim())
+    .replace(ABSOLUTE_PATH, '[redacted]')
+    .slice(-REASON_DETAIL_LIMIT)
+    .trim() || undefined;
+const failureReason = (error) => {
+    const reasonDetail = failureDetail(error);
+    return {
+        reasonCode: (0, exports.failureReasonCode)(error),
+        ...(reasonDetail ? { reasonDetail } : {}),
+    };
+};
+exports.failureReason = failureReason;
+const failureReasonProperties = (error) => {
+    if (error === undefined)
+        return {};
+    const { reasonCode, reasonDetail } = (0, exports.failureReason)(error);
+    return {
+        reason_code: reasonCode,
+        ...(reasonDetail ? { reason_detail: reasonDetail } : {}),
+    };
+};
+exports.failureReasonProperties = failureReasonProperties;
+const failureReasonCodeProperties = (error) => error === undefined ? {} : { reason_code: (0, exports.failureReasonCode)(error) };
+exports.failureReasonCodeProperties = failureReasonCodeProperties;
+//# sourceMappingURL=failureReason.js.map

package/dist/utils/hostedLogPrivacy.d.ts

@@ -1,2 +1,3 @@
+export declare const redactSensitiveText: (text: string) => string;
 export declare const hostedLogValues: (message: unknown, values: unknown[]) => unknown[];
 //# sourceMappingURL=hostedLogPrivacy.d.ts.map

package/dist/utils/hostedLogPrivacy.js

@@ -1,19 +1,25 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.hostedLogValues = void 0;
+exports.hostedLogValues = exports.redactSensitiveText = void 0;
 const DETAILS_OMITTED = '[details omitted]';
 const MAX_LABEL_LENGTH = 2_048;
 const HOSTED_LABEL_REDACTIONS = [
     /(?:https?|wss?):\/\/[^\s"'<>]+/gi,
     /\bBearer\s+[^\s,;"']+/gi,
     /\b[A-Z0-9._%+-]+@[A-Z0-9.-]+\.[A-Z]{2,}\b/gi,
-    /(?:[A-Z]:[\\/]|\/)(?:Users|home|private|tmp|var|opt|workspace)[\\/][^\s"'<>]+/gi,
-    /\b(?:sk-|sb_secret_|phx_|ghp_|gho_)[A-Za-z0-9_-]+/g,
+    /(?:[A-Z]:[\\/]|\/)(?:Users|home|private|tmp|var|opt|workspace|Volumes|root|mnt|srv)[\\/][^\s"'<>]+/gi,
+    /\b[A-Z]:[\\/][^\s"'<>]+/gi,
+    /\b[\w.-]{0,32}(?:token|secret|password|passwd|api[_-]?key)[\w.-]{0,32}["']?\s{0,3}[=:]\s{0,3}["']?[^\s,;"'<>]{1,256}/gi,
+    /\b(?:sk-|sk_live_|sk_test_|rk_live_|rk_test_|sb_secret_|phx_|ghp_|gho_|ghs_|ghu_|github_pat_|glpat-|xox[abprs]-)[A-Za-z0-9_-]+/g,
+    /\bnpm_[A-Za-z0-9]{36}\b/g,
+    /\bAKIA[0-9A-Z]{16}\b/g,
     /\beyJ[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+\.[A-Za-z0-9_-]+/g,
 ];
+const redactSensitiveText = (text) => HOSTED_LABEL_REDACTIONS.reduce((current, pattern) => current.replace(pattern, '[redacted]'), text);
+exports.redactSensitiveText = redactSensitiveText;
 const hostedLogValues = (message, values) => {
     const label = typeof message === 'string' ? message : DETAILS_OMITTED;
-    const redacted = HOSTED_LABEL_REDACTIONS.reduce((current, pattern) => current.replace(pattern, '[redacted]'), label).slice(0, MAX_LABEL_LENGTH);
+    const redacted = (0, exports.redactSensitiveText)(label).slice(0, MAX_LABEL_LENGTH);
     return [
         redacted,
         ...values.map((value) => {

package/dist/utils/skills/claude-skill.d.ts

@@ -1,4 +1,4 @@
-export declare const CLAUDE_SKILL_VERSION = 61;
+export declare const CLAUDE_SKILL_VERSION = 62;
 export declare const CLAUDE_SKILL_DIR = "rivet";
 export declare const CLAUDE_SKILL_FILENAME = "SKILL.md";
 export declare const CLAUDE_SKILL_CONTENT: string;

package/dist/utils/skills/claude-skill.js

@@ -2,7 +2,7 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.CLAUDE_SKILL_CONTENT = exports.CLAUDE_SKILL_FILENAME = exports.CLAUDE_SKILL_DIR = exports.CLAUDE_SKILL_VERSION = void 0;
 const cli_guidance_1 = require("./cli-guidance");
-exports.CLAUDE_SKILL_VERSION = 61;
+exports.CLAUDE_SKILL_VERSION = 62;
 const CLAUDE_SKILL_VERSION_MARKER = `[//]: # (rivet-skill-version: ${exports.CLAUDE_SKILL_VERSION})`;
 exports.CLAUDE_SKILL_DIR = 'rivet';
 exports.CLAUDE_SKILL_FILENAME = 'SKILL.md';

package/dist/utils/skills/cli-guidance.d.ts

@@ -1,4 +1,4 @@
-export declare const CLI_GUIDANCE_VERSION = 57;
+export declare const CLI_GUIDANCE_VERSION = 58;
 export declare const CLI_GUIDANCE_BODY: string;
 export declare const CLI_GUIDANCE_DESCRIPTION = "Rivet \u2014 open the visual editor or explore design directions for a web app.";
 //# sourceMappingURL=cli-guidance.d.ts.map

package/dist/utils/skills/cli-guidance.js

@@ -2,7 +2,7 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.CLI_GUIDANCE_DESCRIPTION = exports.CLI_GUIDANCE_BODY = exports.CLI_GUIDANCE_VERSION = void 0;
 const displayLocale_1 = require("../displayLocale");
-exports.CLI_GUIDANCE_VERSION = 57;
+exports.CLI_GUIDANCE_VERSION = 58;
 const DISPLAY_LOCALE = (0, displayLocale_1.resolveDisplayLocale)();
 exports.CLI_GUIDANCE_BODY = `Rivet helps you **explore multiple design directions** for a web app. You drive it by running \`rivet\` CLI commands. Every command prints exactly one JSON envelope on stdout (\`{ schemaVersion, ok, command, data | error }\`), routes progress to stderr, and never prompts for input.
 
@@ -75,9 +75,9 @@ Translate "ignore my motion principles for this run" into \`--exclude-guidance '
 
 Every generation resolves current saved instructions once and supplies the same text to its planner and workers. Editing defaults affects the next generation; retries retain their original text. For "what instructions did this run receive?", use \`rivet context inspect <workId> --project <path>\` or \`rivet_get_exploration\` with \`workId\` and \`project\`. Use the retained text rather than resolving today's defaults. If \`isRecorded\` is false, historical evidence is unavailable. Delivery is evidence of supplied context; it does not establish that the generated design followed every principle.
 
-**Custom verification on demand.** When asked to check a property such as "verify this used my motion principles," locate its existing context document with \`context list\`/\`show\`. Save missing user-provided principles or pointers through \`context add\` when the user wants them in context; do not invent principles or ingest source snapshots. Retrieve only the selected document with \`rivet context verifier <id>\` (MCP: \`rivet_get_design_context\` with \`instructionIds: ["<id>"]\` and \`includeChecks: true\`). Its \`sourceDigest\` binds the saved text and reference metadata; URL and directory contents remain live and are not frozen by this digest. Inspect the actual relevant references without copying them into persistent context. The CLI packet has \`execution: "host_required"\`. The MCP read returns the saved checking recipe and metadata. Neither read has checked the output.
+**Custom verification on demand.** First bind the user-selected page, screen, or components and the requested rules or properties to the target from the user's app or \`variants get\`. When asked to check a property such as "verify this used my motion principles," locate its existing context document with \`context list\`/\`show\`. Save missing user-provided principles or pointers through \`context add\` when the user wants them in context; do not invent principles or ingest source snapshots. Retrieve only the selected document with \`rivet context verifier <id>\` (MCP: \`rivet_get_design_context\` with \`instructionIds: ["<id>"]\` and \`includeChecks: true\`). Its \`sourceDigest\` binds the saved text and reference metadata; URL and directory contents remain live and are not frozen by this digest. Inspect only source files and actual references directly needed for those bound assertions, without copying them into persistent context. Expand inspection only to resolve a concrete unresolved assertion. Do not scan the whole project or unrelated routes unless the user explicitly requests broader verification. The CLI packet has \`execution: "host_required"\`. The MCP read returns the saved checking recipe and metadata. Neither read has checked the output.
 
-Identify the target from the user's app or \`variants get\`. Choose verification tools for the actual browser, simulator, or other target. Do not assume a URL, DOM, CSS, or Playwright. Use the host's available tools for that target; unavailable tools or inaccessible targets mean unable to verify. Keep reusable assertions separate from target-specific bindings and execution steps, and record applicability when a rule requires a particular platform. For an earlier generation, read \`context inspect <workId>\` before claiming the source was delivered. Disclose missing receipts, changed principles, and live-source limitations. A current-source assessment does not establish historical compliance. For CLI packets follow \`nextAction\`. For MCP use the returned source digest and saved recipe to determine whether to create or revise a recipe. Execute a recipe only when the user requests verification and authorizes its required privileges. Keep recipes short and specific about applicability, actions, observable assertions, and evidence. Use code inspection for source-level rules and real interaction for behavioral rules; a screenshot alone cannot verify motion timing or reduced-motion behavior. Execute the recipe once and write a uniquely named local report containing target identity, context ID/digest, each check, evidence locations, and pass/fail/unable-to-verify outcomes. Missing evidence is unable to verify, not a pass. Report failures without silently repairing the app.
+Choose verification tools for the actual browser, simulator, or other target. Do not assume a URL, DOM, CSS, or Playwright. Use the host's available tools for that target; unavailable tools or inaccessible targets mean unable to verify. Keep reusable assertions separate from target-specific bindings and execution steps, and record applicability when a rule requires a particular platform. For an earlier generation, read \`context inspect <workId>\` before claiming the source was delivered. Disclose missing receipts, changed principles, and live-source limitations. A current-source assessment does not establish historical compliance. For CLI packets follow \`nextAction\`. For a Markdown-only recipe, use the host's tools directly; never call \`context verify\` or \`rivet_run_design_check\`. Do not automatically author, prove, or save an executable package for a one-off check. For MCP use the returned source digest and saved recipe to determine whether to create or revise a recipe. Execute a recipe only when the user requests verification and authorizes its required privileges. Keep recipes short and specific about applicability, actions, observable assertions, and evidence. Use code inspection for source-level rules and real interaction for behavioral rules; a screenshot alone cannot verify motion timing or reduced-motion behavior. Execute the recipe once and write a uniquely named local report containing target identity, context ID/digest, each check, evidence locations, and pass/fail/unable-to-verify outcomes. Missing evidence is unable to verify, not a pass. Report failures without silently repairing the app. If a tool or runtime fails, stop and report the actual error, including its normalized reason when available. Do not retry an unchanged check or automatically regenerate its recipe or package.
 
 After showing the actual result, offer to save a reusable recipe unless the user already requested reuse. With that agreement, run \`rivet context update <id> --verifier <Markdown path> --source-digest <packet digest>\` (MCP: \`rivet_save_design_check\` with \`contextId\`, \`recipeFile\`, and \`sourceDigest\`). A source-change conflict requires retrieving the source and revising the recipe before saving. Source edits and verifier saves are separate updates. Remove just the recipe with \`context update <id> --remove-verifier\` (MCP: \`rivet_remove_design_check\` with \`contextId\`). Saved verifiers run only when requested; saving does not schedule checks or enable automatic reruns. The source retains its existing generation defaults, while recipe text stays out of planning and worker context.
 

package/dist/utils/skills/cursor-rules.d.ts

@@ -1,4 +1,4 @@
-export declare const CURSOR_RULES_VERSION = 57;
+export declare const CURSOR_RULES_VERSION = 58;
 export declare const CURSOR_RULES_FILENAME = "rivet.mdc";
 export declare const CURSOR_RULES_CONTENT: string;
 //# sourceMappingURL=cursor-rules.d.ts.map

package/dist/utils/skills/cursor-rules.js

@@ -2,7 +2,7 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.CURSOR_RULES_CONTENT = exports.CURSOR_RULES_FILENAME = exports.CURSOR_RULES_VERSION = void 0;
 const cli_guidance_1 = require("./cli-guidance");
-exports.CURSOR_RULES_VERSION = 57;
+exports.CURSOR_RULES_VERSION = 58;
 exports.CURSOR_RULES_FILENAME = 'rivet.mdc';
 const CURSOR_RULES_VERSION_MARKER = `rivet-rules-version: ${exports.CURSOR_RULES_VERSION}`;
 exports.CURSOR_RULES_CONTENT = `---