vibe64 0.1.35 → 0.1.36

package/node_modules/@local/vibe64-genesis/src/server/index.js

@@ -1,101 +1,109 @@
 import { createRequire as __vibe64CreateRequire } from 'node:module';const require=__vibe64CreateRequire(import.meta.url);
-import{createHash as ft}from"node:crypto";import ae from"node:path";var ee=class extends Error{constructor(t,n,s=void 0){
-super(n),this.name="Vibe64StackOperationError",this.code=t,s!==void 0&&(this.details=s)}};function p(e,t,n,s,r={}){throw new ee(
-e,n,{path:t,...s===void 0?{}:{line:s},...r})}function O(e,t,n,s,r){return(typeof e!="string"||!e.trim()||/[\0\r\n]/u.test(
-e))&&p(t,n,`${s} must be one non-empty line.`,r),e.trim()}function ht(e){let t=[...String(e||"").matchAll(/`([^`\r\n]+)`/gu)];
-return t.length===0||t.map(n=>n[0]).join(" ")!==e?null:t.map(n=>n[1])}function C(e,t,n,s,r,{count:i,maximum:o=64}={}){let c=ht(
-e);if(!c||c.length>o||i!==void 0&&c.length!==i||c.some(u=>u.length>4096||/[\0\r\n]/u.test(u))){let u=i===void 0?"separat\
-e non-empty":`exactly ${i}`;p(t,n,`${s} must contain ${u} backticked ${i===1?"value":"values"}.`,r)}return c}function gt(e=""){
-return typeof e=="string"&&!!e&&!/[\s\0{}]/u.test(e)&&!ae.isAbsolute(e)&&!e.split(/[\\/]/u).includes("..")}function _(e,t,n,s,r){
-let i=C(e,t,n,s,r);return gt(i[0])||p(t,n,`${s} must begin with a safe executable.`,r),i}function yt(e=""){return typeof e==
-"string"&&!!e&&!/[\0\r\n\\]/u.test(e)&&!ae.posix.isAbsolute(e)&&ae.posix.normalize(e)===e&&!e.split("/").some(t=>!t||t===
-"..")}function g(e,t,n,s,r,{allowRoot:i=!0}={}){return(!yt(e)||!i&&e===".")&&p(t,n,`${s} must be a canonical project-rel\
-ative path.`,r),e}function R(e,t,n,s,r){let i=C(e,t,n,s,r);return i.some(o=>!/^[a-z0-9]+(?:-[a-z0-9]+)*$/u.test(o))&&p(t,
-n,`${s} must use lowercase technology ids separated into backticked values.`,r),new Set(i).size!==i.length&&p(t,n,`${s} \
-contains a duplicate technology id.`,r),i}function ue(e,t,n,s,r){let i=O(e,t,n,s,r);return(!i.startsWith("/")||i.startsWith(
-"//")||/[\\?#]/u.test(i))&&p(t,n,`${s} must begin with one slash and contain no query or fragment.`,r),i}function te(e,t,n,s,r){
-let i=e.match(/^- Ready when: `GET` `([^`\r\n]+)` returns `([0-9]{3})`$/u);i||p(t,n,`${s} must use \`- Ready when: \`GET\` \
-\`/path\` returns \`200\`\`.`,r);let o=Number(i[2]);return(!Number.isInteger(o)||o<200||o>399)&&p(t,n,`${s} status must \
-be from 200 through 399.`,r),{kind:"http",method:"GET",path:ue(i[1],t,n,`${s} path`,r),status:o}}function ce(e){return Array.
-isArray(e)?e.map(ce):e&&typeof e=="object"?Object.fromEntries(Object.keys(e).sort().map(t=>[t,ce(e[t])])):e}function T(e){
-let t=`${JSON.stringify(ce(e),null,2)}
-`;return`sha256:${ft("sha256").update(t).digest("hex")}`}function G(e={},t={},n="operation"){if(e.stackHash!==t.stackHash)
-throw new ee("VIBE64_STACK_CHANGED",`The Stack changed while Vibe64 inspected its ${n}. Retry the operation.`)}function B(e=[]){
-return[...new Set(e)].sort()}function b(e=[]){let t=e.map(n=>n.trim()).filter(Boolean);return t.length===1&&t[0]==="- No\
-thing."}import{access as bt}from"node:fs/promises";import Se from"node:path";var Te="vibe64.workspace-setup.v1",X="Workspace setup",K="VIBE64_WORKSPACE_SETUP_INVALID",wt=/^- Prepare `([^`\r\n]+)` with (.+?):[ \t]+(.+)$/u,
-Et=/^(.*?)[ \t]+when `([^`\r\n]+)` exists$/u,vt=/^(.*?)[ \t]+if `([^`\r\n]+)` exists$/u,St=/^(.*?)[ \t]+in `([^`\r\n]+)`$/u;
-function pe(e,t,n,s={}){p(K,e,t,n,s)}function F(e,{path:t="genesis/stack.md#Workspace setup"}={}){if(Array.isArray(e)||pe(
-t,"Workspace setup must be supplied as exact Stack section lines."),b(e))return[];let n=[];for(let s=0;s<e.length;s+=1){
-let r=e[s].trim();if(!r)continue;let i=s+1,o=r.match(wt);o||pe(t,"Every Workspace setup entry must use: - Prepare `label\
-` with `runtime` [in `workdir`] [when|if `path` exists]: `command` `argument`...",i,{observed:r});let c=o[2].match(Et),u=c?
-null:o[2].match(vt),a=c?c[1]:u?u[1]:o[2],m=c?.[2]||u?.[2]||"",l=a.match(St),d=l?l[1]:a,h=l?l[2]:".";n.push({label:O(o[1],
-K,t,"Workspace setup step label",i),argv:_(o[3],K,t,"Workspace setup command",i),runtimeRequirements:R(d,K,t,"Workspace \
-setup runtimes",i),workdir:g(h,K,t,"Workspace setup workdir",i),...m?{condition:{pathExists:g(m,K,t,"Workspace setup con\
-dition path",i,{allowRoot:!1}),onMissing:c?"wait":"skip"}}:{}})}return n.length===0&&pe(t,"## Workspace setup needs at l\
-east one Prepare entry or exactly `- Nothing.`."),n}async function Tt(e,t){try{return await bt(Se.join(e,t)),!0}catch(n){
-if(["ENOENT","ENOTDIR"].includes(n?.code))return!1;throw n}}async function Ie({projectRoot:e,section:t={}}={}){let n=[...t.
-diagnostics||[]],s=[];t.status==="ready"&&(s=F(t.lines));let r=[],i=[],o=Se.resolve(e);if(n.length===0)for(let d of s){if(!d.
-condition||await Tt(o,d.condition.pathExists)){r.push(d);continue}d.condition.onMissing==="wait"&&i.push(d.condition.pathExists)}
-if(i.length>0){let d=B(i);n.push({code:"VIBE64_WORKSPACE_SETUP_WAITING",message:`Workspace setup is waiting for project ${d.
-length===1?"path":"paths"}: ${d.join(", ")}.`,details:{paths:d}})}let c=n.some(({code:d})=>d==="VIBE64_WORKSPACE_SETUP_W\
-AITING"),u=n.some(({code:d})=>d!=="VIBE64_WORKSPACE_SETUP_WAITING"),a="unconfigured";u?a="blocked":!c&&r.length>0&&(a="r\
-eady");let m=r.map(({condition:d,...h})=>h),l={version:1,steps:m};return{contract:Te,status:a,stackHash:t.stackHash,recipeHash:a===
-"ready"?T(l):"",components:[...t.components||[]],source:t.source||null,runtimeRequirements:B(m.flatMap(d=>d.runtimeRequirements)),
-steps:m,diagnostics:n}}var It="custom",kt=Object.freeze([Object.freeze({value:"npm",label:"npm (Node.js)"}),Object.freeze({value:"composer",label:"\
-Composer (PHP)"}),Object.freeze({value:"pip",label:"pip (Python)"}),Object.freeze({value:"bundler",label:"Bundler (Ruby)"}),
-Object.freeze({value:"gomod",label:"Go modules"}),Object.freeze({value:"cargo",label:"Cargo (Rust)"}),Object.freeze({value:"\
-maven",label:"Maven"}),Object.freeze({value:"gradle",label:"Gradle"}),Object.freeze({value:"nuget",label:"NuGet (.NET)"}),
-Object.freeze({value:It,label:"custom"})]),ke=Object.freeze(kt.map(e=>e.value));function Oe(e){return typeof e=="string"&&
-ke.includes(e)}function _e(e="or"){let t=ke;return`${t.slice(0,-1).join(", ")} ${e} ${t.at(-1)}`}var Re="Connected development",Ot="vibe64.connected-development.v1",D="VIBE64_CONNECTED_DEVELOPMENT_INVALID",N="genesis/\
-stack.md#Connected development";function Ae(e={}){let t="",n="",s=null,r=[],i=[...e.diagnostics||[]],o=e.status==="ready";
-if(o&&!b(e.lines)){let u=!1;for(let[m,l]of e.lines.entries()){let d=l.trim();if(!d)continue;let h=m+1,y=d.match(/^- Default package type: `([^`\r\n]*)`$/u);
-if(y){n&&p(D,N,"Declare exactly one default package type.",h),Oe(y[1])||p(D,N,`Default package type must be ${_e()}.`,h),
-n=y[1];continue}let q=d.match(/^- Sources file: `([^`\r\n]+)`$/u);if(q){t&&p(D,N,"Declare exactly one Sources file.",h),
-t=g(q[1],D,N,"Connected sources file",h,{allowRoot:!1}),t.split("/").some($=>$.toLowerCase()===".git")&&p(D,N,"The Sourc\
-es file must be outside Git metadata.",h);continue}let k=d.startsWith("- Custom runner "),J=d.match(/^- (Prepare|Verify) /u);
-!k&&!J&&p(D,N,"Declare a Sources file and Prepare/Verify entries using the Workspace setup command grammar.",h);let z=J?.[1]===
-"Verify"?"verify":"prepare";!k&&u&&z==="prepare"&&p(D,N,"All Prepare entries must precede Verify entries.",h),u||=!k&&z===
-"verify";let Z;try{let $=k?d.replace("- Custom runner ","- Prepare `Custom connected source` "):d.replace(/^- Verify /u,
-"- Prepare ");[Z]=F([$],{path:N})}catch($){if($.code!=="VIBE64_WORKSPACE_SETUP_INVALID")throw $;p(D,N,$.message,h)}Z.condition&&
-p(D,N,"Connected development steps must run unconditionally; a skipped step cannot prove source consumption.",h),k?(s&&p(
-D,N,"Declare exactly one Custom runner.",h),s=Z):r.push({...Z,phase:z})}!(n&&!t&&!r.length&&!s)&&(!t||!r.some(m=>m.phase===
-"verify")&&!s)&&p(D,N,"Declare a default package type alone, or a Sources file with Verify entries or a Custom runner; u\
-se `- Nothing.` for no declaration.")}let c=e.status==="blocked"||i.length?"blocked":r.length||s?"ready":"unconfigured";
-return{contract:Ot,declared:o,status:c,stackHash:e.stackHash,recipeHash:c==="ready"?T({version:1,sourcesFile:t,defaultPackageType:n,
-customRunner:s,steps:r}):"",components:[...e.components||[]],source:e.source||null,sourcesFile:t,defaultPackageType:n,customRunner:s,
-steps:r,runtimeRequirements:B([...r,...s?[s]:[]].flatMap(u=>u.runtimeRequirements)),diagnostics:i}}var Ce="Architecture inspection",E="VIBE64_ARCHITECTURE_INSPECTION_INVALID";function _t(e,{path:t="genesis/stack.md#Arch\
-itecture inspection"}={}){if(Array.isArray(e)||p(E,t,"Architecture inspection requires exact Stack section lines."),b(e))
-return[];let n=[],s=new Set,r;function i(){if(r){for(let o of["runtimeRequirements","workdir","argv","timeout","maxBuffe\
-r"])r[o]===void 0&&p(E,t,`${r.id} is missing ${o}.`);n.push(r),r=null}}for(let[o,c]of e.entries()){let u=c.trim();if(!u)
-continue;let a=u.match(/^### Inspector `([a-z0-9]+(?:-[a-z0-9]+)*)`: (.+)$/u);if(a){i(),s.has(a[1])&&p(E,t,"Duplicate in\
-spector id.",o+1),s.add(a[1]),r={id:a[1],title:a[2]};continue}r||p(E,t,"Expected an Inspector heading.",o+1);let m=u.match(
-/^- (Runtime|Directory|Command|Timeout seconds|Max output bytes|Entry files|Required files): (.+)$/u);m||p(E,t,"Unknown \
-architecture inspector field.",o+1);let l={Runtime:"runtimeRequirements",Directory:"workdir",Command:"argv","Timeout sec\
-onds":"timeout","Max output bytes":"maxBuffer","Entry files":"entryFiles","Required files":"requiredFiles"}[m[1]];if(r[l]!==
-void 0&&p(E,t,`Duplicate ${m[1]}.`,o+1),l==="runtimeRequirements")r[l]=R(m[2],E,t,"Inspector runtime",o+1);else if(l==="\
-argv")r[l]=_(m[2],E,t,"Inspector command",o+1);else if(l==="entryFiles"||l==="requiredFiles")r[l]=C(m[2],E,t,m[1],o+1).map(
-d=>g(d,E,t,m[1],o+1));else{let[d]=C(m[2],E,t,m[1],o+1,{count:1});if(l==="workdir")r[l]=g(d,E,t,"Inspector directory",o+1);else{
-let h=Number(d),y=l==="timeout"?60:4*1024*1024;(!/^[1-9][0-9]*$/u.test(d)||!Number.isSafeInteger(h)||h>y)&&p(E,t,`${m[1]}\
- must be from 1 to ${y}.`,o+1),r[l]=l==="timeout"?h*1e3:h}}}return i(),n.length||p(E,t,"Use an Inspector entry or - Noth\
-ing."),n}function Ne(e){let t=e.status==="ready"?_t(e.lines):[];for(let n of t)n.runtimeRequirements.some(s=>!e.components.
-includes(s))&&p(E,"genesis/stack.md#Architecture inspection","Inspector runtimes must be selected in Stack.");return{contract:"\
-vibe64.architecture-inspection.v1",status:e.status,stackHash:e.stackHash,inspectors:t,recipeHash:T(t),diagnostics:e.diagnostics||
-[]}}var De="Architecture layout";function Rt(e,{path:t="genesis/stack.md#Architecture layout"}={}){let n="VIBE64_ARCHITECTUR\
-E_LAYOUT_INVALID";if(Array.isArray(e)||p(n,t,"Expected exact Stack section lines."),b(e))return[];let s=[],r=new Set,i=new Set,
-o;function c(){o&&((!o.kind||!o.purpose||!o.subsystems.length)&&p(n,t,`${o.id} needs Kind, Purpose and at least one Subs\
-ystem.`),s.push(o))}for(let[u,a]of e.entries()){let m=a.trim();if(!m)continue;let l=m.match(/^### Group `([a-z0-9]+(?:-[a-z0-9]+)*)`: (.+)$/u);
-if(l){c(),r.has(l[1])&&p(n,t,"Duplicate group id.",u+1),r.add(l[1]),o={id:l[1],title:l[2],subsystems:[]};continue}let d=m.
-match(/^- (Kind|Purpose|Subsystem): (.+)$/u);(!o||!d)&&p(n,t,"Expected a Group heading or Kind, Purpose, Subsystem field\
-.",u+1);let h=C(d[2],n,t,d[1],u+1,{count:1});if(d[1]==="Subsystem"){let y=g(h[0],n,t,"Subsystem root",u+1);i.has(y)&&p(n,
-t,"Each directory root may be placed only once.",u+1),i.add(y),o.subsystems.push({root:y})}else{let y=d[1].toLowerCase();
-o[y]!==void 0&&p(n,t,`Duplicate ${d[1]}.`,u+1),y==="kind"&&!["layer","libraries","support"].includes(h[0])&&p(n,t,"Kind \
-must be layer, libraries or support.",u+1),o[y]=h[0]}}return c(),s.length||p(n,t,"Use a Group entry or - Nothing."),s}function xe(e){
-return{contract:"vibe64.architecture-layout.v1",status:e.status,stackHash:e.stackHash,groups:e.status==="ready"?Rt(e.lines):
-[],diagnostics:e.diagnostics||[]}}import{existsSync as ct}from"node:fs";import{readFile as Rn}from"node:fs/promises";import{createRequire as An}from"node:module";
-import j from"node:path";var Ve="STACK_PROJECT_CONTRACTS_INCOMPLETE",Pe="STACK_SECTION_AMBIGUOUS",At=Object.freeze([Ve,Pe]);function Ct(e){return At.
-includes(String(e?.code||"").trim())}import*as we from"genesis-compiler";import{mkdir as $t,mkdtemp as Gt,readFile as Lt,rename as Ut,rm as Wt,writeFile as Ht}from"node:fs/promises";import qt from"node:os";
-import de from"node:path";var Nt=Object.freeze(["main","temporary"]),je=Object.freeze(["managedDatabaseRefresh","managedEnvironment","managedGit",
-"managedPreview"]),Dt=64*1024,xt=Object.freeze(["When user input is necessary, ask no more than three concise, high-impa\
+import{createHash as Nt}from"node:crypto";import de from"node:path";var ne=class extends Error{constructor(t,n,s=void 0){
+super(n),this.name="Vibe64StackOperationError",this.code=t,s!==void 0&&(this.details=s)}},Ct=Object.freeze({VIBE64_WORKSPACE_SETUP_INVALID:"\
+workspace-setup",VIBE64_OUTPUTS_INVALID:"outputs",VIBE64_DEPLOYMENT_INVALID:"deployment",VIBE64_RESOURCE_ESTIMATES_INVALID:"\
+resource-estimates",VIBE64_CONNECTED_DEVELOPMENT_INVALID:"connected-development",VIBE64_PROJECT_SERVICES_INVALID:"projec\
+t-services",VIBE64_INTEGRATION_SETUP_INVALID:"integration-setup",VIBE64_ARCHITECTURE_INSPECTION_INVALID:"architecture-in\
+spection",VIBE64_ARCHITECTURE_LAYOUT_INVALID:"architecture-layout"}),Dt=/ Exact grammar: vibe64-helper spec [a-z-]+\.$/u;
+function Vt(e,t){let n=Ct[e],s=String(t).replace(Dt,"");return n?`${s} Exact grammar: vibe64-helper spec ${n}.`:s}function P(e,t,n){
+return`Unknown ${e}: ${t}. Use one of: ${n.join("; ")}.`}function l(e,t,n,s,r={}){throw new ne(e,Vt(e,n),{path:t,...s===
+void 0?{}:{line:s},...r})}function R(e,t,n,s,r){return(typeof e!="string"||!e.trim()||/[\0\r\n]/u.test(e))&&l(t,n,`${s} \
+must be one non-empty line.`,r),e.trim()}function xt(e){let t=[...String(e||"").matchAll(/`([^`\r\n]+)`/gu)];return t.length===
+0||t.map(n=>n[0]).join(" ")!==e?null:t.map(n=>n[1])}function N(e,t,n,s,r,{count:i,maximum:o=64}={}){let c=xt(e);if(!c||c.
+length>o||i!==void 0&&c.length!==i||c.some(u=>u.length>4096||/[\0\r\n]/u.test(u))){let u=i===void 0?"separate non-empty":
+`exactly ${i}`;l(t,n,`${s} must contain ${u} backticked ${i===1?"value":"values"}.`,r)}return c}function Pt(e=""){return typeof e==
+"string"&&!!e&&!/[\s\0{}]/u.test(e)&&!de.isAbsolute(e)&&!e.split(/[\\/]/u).includes("..")}function k(e,t,n,s,r){let i=N(
+e,t,n,s,r);return Pt(i[0])||l(t,n,`${s} must begin with a safe executable.`,r),i}function $t(e=""){return typeof e=="str\
+ing"&&!!e&&!/[\0\r\n\\]/u.test(e)&&!de.posix.isAbsolute(e)&&de.posix.normalize(e)===e&&!e.split("/").some(t=>!t||t==="..")}
+function g(e,t,n,s,r,{allowRoot:i=!0}={}){return(!$t(e)||!i&&e===".")&&l(t,n,`${s} must be a canonical project-relative \
+path.`,r),e}function A(e,t,n,s,r){let i=N(e,t,n,s,r);return i.some(o=>!/^[a-z0-9]+(?:-[a-z0-9]+)*$/u.test(o))&&l(t,n,`${s}\
+ must use lowercase technology ids separated into backticked values.`,r),new Set(i).size!==i.length&&l(t,n,`${s} contain\
+s a duplicate technology id.`,r),i}function fe(e,t,n,s,r){let i=R(e,t,n,s,r);return(!i.startsWith("/")||i.startsWith("//")||
+/[\\?#]/u.test(i))&&l(t,n,`${s} must begin with one slash and contain no query or fragment.`,r),i}function se(e,t,n,s,r){
+let i=e.match(/^- Ready when: `GET` `([^`\r\n]+)` returns `([0-9]{3})`$/u);i||l(t,n,`${s} must use \`- Ready when: \`GET\` \
+\`/path\` returns \`200\`\`.`,r);let o=Number(i[2]);return(!Number.isInteger(o)||o<200||o>399)&&l(t,n,`${s} status must \
+be from 200 through 399.`,r),{kind:"http",method:"GET",path:fe(i[1],t,n,`${s} path`,r),status:o}}function me(e){return Array.
+isArray(e)?e.map(me):e&&typeof e=="object"?Object.fromEntries(Object.keys(e).sort().map(t=>[t,me(e[t])])):e}function I(e){
+let t=`${JSON.stringify(me(e),null,2)}
+`;return`sha256:${Nt("sha256").update(t).digest("hex")}`}function B(e={},t={},n="operation"){if(e.stackHash!==t.stackHash)
+throw new ne("VIBE64_STACK_CHANGED",`The Stack changed while Vibe64 inspected its ${n}. Retry the operation.`)}function j(e=[]){
+return[...new Set(e)].sort()}function y(e=[]){let t=e.map(n=>n.trim()).filter(Boolean);return t.length===1&&t[0]==="- No\
+thing."}import{access as Mt}from"node:fs/promises";import Ve from"node:path";var xe="vibe64.workspace-setup.v1",Q="Workspace setup",F="VIBE64_WORKSPACE_SETUP_INVALID",jt="- Prepare `label` with `ru\
+ntime` [in `workdir`] [when|if `path` exists]: `command` `argument`...",Lt=/^- Prepare `([^`\r\n]+)` with (.+?):[ \t]+(.+)$/u,
+Ut=/^(.*?)[ \t]+when `([^`\r\n]+)` exists$/u,Bt=/^(.*?)[ \t]+if `([^`\r\n]+)` exists$/u,Gt=/^(.*?)[ \t]+in `([^`\r\n]+)`$/u;
+function he(e,t,n,s={}){l(F,e,t,n,s)}function Y(e,{path:t="genesis/stack.md#Workspace setup"}={}){if(Array.isArray(e)||he(
+t,"Workspace setup must be supplied as exact Stack section lines."),y(e))return[];let n=[];for(let s=0;s<e.length;s+=1){
+let r=e[s].trim();if(!r)continue;let i=s+1,o=r.match(Lt);o||he(t,`Every Workspace setup entry must use: ${jt}`,i,{observed:r});
+let c=o[2].match(Ut),u=c?null:o[2].match(Bt),a=c?c[1]:u?u[1]:o[2],m=c?.[2]||u?.[2]||"",d=a.match(Gt),p=d?d[1]:a,h=d?d[2]:
+".";n.push({label:R(o[1],F,t,"Workspace setup step label",i),argv:k(o[3],F,t,"Workspace setup command",i),runtimeRequirements:A(
+p,F,t,"Workspace setup runtimes",i),workdir:g(h,F,t,"Workspace setup workdir",i),...m?{condition:{pathExists:g(m,F,t,"Wo\
+rkspace setup condition path",i,{allowRoot:!1}),onMissing:c?"wait":"skip"}}:{}})}return n.length===0&&he(t,"## Workspace\
+ setup needs at least one Prepare entry or exactly `- Nothing.`."),n}async function Wt(e,t){try{return await Mt(Ve.join(
+e,t)),!0}catch(n){if(["ENOENT","ENOTDIR"].includes(n?.code))return!1;throw n}}async function Pe({projectRoot:e,section:t={}}={}){
+let n=[...t.diagnostics||[]],s=[];t.status==="ready"&&(s=Y(t.lines));let r=[],i=[],o=Ve.resolve(e);if(n.length===0)for(let p of s){
+if(!p.condition||await Wt(o,p.condition.pathExists)){r.push(p);continue}p.condition.onMissing==="wait"&&i.push(p.condition.
+pathExists)}if(i.length>0){let p=j(i);n.push({code:"VIBE64_WORKSPACE_SETUP_WAITING",message:`Workspace setup is waiting \
+for project ${p.length===1?"path":"paths"}: ${p.join(", ")}.`,details:{paths:p}})}let c=n.some(({code:p})=>p==="VIBE64_W\
+ORKSPACE_SETUP_WAITING"),u=n.some(({code:p})=>p!=="VIBE64_WORKSPACE_SETUP_WAITING"),a="unconfigured";u?a="blocked":!c&&r.
+length>0&&(a="ready");let m=r.map(({condition:p,...h})=>h),d={version:1,steps:m};return{contract:xe,status:a,stackHash:t.
+stackHash,recipeHash:a==="ready"?I(d):"",components:[...t.components||[]],source:t.source||null,runtimeRequirements:j(m.
+flatMap(p=>p.runtimeRequirements)),steps:m,diagnostics:n}}var Ht="custom";var qt=Object.freeze([Object.freeze({value:"npm",label:"npm (Node.js)"}),Object.freeze({value:"composer",label:"Composer\
+ (PHP)"}),Object.freeze({value:"pip",label:"pip (Python)"}),Object.freeze({value:"bundler",label:"Bundler (Ruby)"}),Object.
+freeze({value:"gomod",label:"Go modules"}),Object.freeze({value:"cargo",label:"Cargo (Rust)"}),Object.freeze({value:"mav\
+en",label:"Maven"}),Object.freeze({value:"gradle",label:"Gradle"}),Object.freeze({value:"nuget",label:"NuGet (.NET)"}),Object.
+freeze({value:Ht,label:"custom"})]);var $e=Object.freeze(qt.map(e=>e.value));function Me(e){return typeof e=="string"&&$e.includes(e)}function je(e="or"){let t=$e;return`${t.slice(0,-1).join(", ")} ${e} ${t.at(-1)}`}var Le="Connected development",zt="vibe64.connected-development.v1",D="VIBE64_CONNECTED_DEVELOPMENT_INVALID",C="genesis/\
+stack.md#Connected development",ge="with `runtime` [in `workdir`]: `command` `argument`...",Kt=Object.freeze(["- Default\
+ package type: `type`","- Sources file: `path`",`- Prepare \`label\` ${ge}`,`- Verify \`label\` ${ge}`,`- Custom runner ${ge}`]);
+function Ue(e={}){let t="",n="",s=null,r=[],i=[...e.diagnostics||[]],o=e.status==="ready";if(o&&!y(e.lines)){let u=!1;for(let[
+m,d]of e.lines.entries()){let p=d.trim();if(!p)continue;let h=m+1,E=p.match(/^- Default package type: `([^`\r\n]*)`$/u);
+if(E){n&&l(D,C,"Declare exactly one default package type.",h),Me(E[1])||l(D,C,`Default package type must be ${je()}.`,h),
+n=E[1];continue}let z=p.match(/^- Sources file: `([^`\r\n]+)`$/u);if(z){t&&l(D,C,"Declare exactly one Sources file.",h),
+t=g(z[1],D,C,"Connected sources file",h,{allowRoot:!1}),t.split("/").some(U=>U.toLowerCase()===".git")&&l(D,C,"The Sourc\
+es file must be outside Git metadata.",h);continue}let w=p.startsWith("- Custom runner "),X=p.match(/^- (Prepare|Verify) /u);
+!w&&!X&&l(D,C,P("Connected development entry",p,Kt),h);let K=X?.[1]==="Verify"?"verify":"prepare";!w&&u&&K==="prepare"&&
+l(D,C,"All Prepare entries must precede Verify entries.",h),u||=!w&&K==="verify";let te;try{let U=w?p.replace("- Custom \
+runner ","- Prepare `Custom connected source` "):p.replace(/^- Verify /u,"- Prepare ");[te]=Y([U],{path:C})}catch(U){if(U.
+code!=="VIBE64_WORKSPACE_SETUP_INVALID")throw U;l(D,C,U.message,h)}te.condition&&l(D,C,"Connected development steps must\
+ run unconditionally; a skipped step cannot prove source consumption.",h),w?(s&&l(D,C,"Declare exactly one Custom runner\
+.",h),s=te):r.push({...te,phase:K})}!(n&&!t&&!r.length&&!s)&&(!t||!r.some(m=>m.phase==="verify")&&!s)&&l(D,C,"Declare a \
+default package type alone, or a Sources file with Verify entries or a Custom runner; use `- Nothing.` for no declaratio\
+n.")}let c=e.status==="blocked"||i.length?"blocked":r.length||s?"ready":"unconfigured";return{contract:zt,declared:o,status:c,
+stackHash:e.stackHash,recipeHash:c==="ready"?I({version:1,sourcesFile:t,defaultPackageType:n,customRunner:s,steps:r}):"",
+components:[...e.components||[]],source:e.source||null,sourcesFile:t,defaultPackageType:n,customRunner:s,steps:r,runtimeRequirements:j(
+[...r,...s?[s]:[]].flatMap(u=>u.runtimeRequirements)),diagnostics:i}}var Be="Architecture inspection",v="VIBE64_ARCHITECTURE_INSPECTION_INVALID",Ee=Object.freeze({Runtime:["runtimeRequireme\
+nts","`runtime`..."],Directory:["workdir","`path`"],Command:["argv","`command` `argument`..."],"Timeout seconds":["timeo\
+ut","`1` through `60`"],"Max output bytes":["maxBuffer",`\`1\` through \`${4*1024*1024}\``],"Entry files":["entryFiles",
+"`path`... (optional)"],"Required files":["requiredFiles","`path`... (optional)"]}),Ft=new RegExp(`^- (${Object.keys(Ee).
+join("|")}): (.+)$`,"u");function Yt(e,{path:t="genesis/stack.md#Architecture inspection"}={}){if(Array.isArray(e)||l(v,
+t,"Architecture inspection requires exact Stack section lines."),y(e))return[];let n=[],s=new Set,r;function i(){if(r){for(let o of[
+"runtimeRequirements","workdir","argv","timeout","maxBuffer"])r[o]===void 0&&l(v,t,`${r.id} is missing ${o}.`);n.push(r),
+r=null}}for(let[o,c]of e.entries()){let u=c.trim();if(!u)continue;let a=u.match(/^### Inspector `([a-z0-9]+(?:-[a-z0-9]+)*)`: (.+)$/u);
+if(a){i(),s.has(a[1])&&l(v,t,"Duplicate inspector id.",o+1),s.add(a[1]),r={id:a[1],title:a[2]};continue}r||l(v,t,"Expect\
+ed an Inspector heading.",o+1);let m=u.match(Ft);m||l(v,t,`Unknown architecture inspector field. Use one of: ${Object.entries(
+Ee).map(([p,[,h]])=>`- ${p}: ${h}`).join("; ")}.`,o+1);let[d]=Ee[m[1]];if(r[d]!==void 0&&l(v,t,`Duplicate ${m[1]}.`,o+1),
+d==="runtimeRequirements")r[d]=A(m[2],v,t,"Inspector runtime",o+1);else if(d==="argv")r[d]=k(m[2],v,t,"Inspector command",
+o+1);else if(d==="entryFiles"||d==="requiredFiles")r[d]=N(m[2],v,t,m[1],o+1).map(p=>g(p,v,t,m[1],o+1));else{let[p]=N(m[2],
+v,t,m[1],o+1,{count:1});if(d==="workdir")r[d]=g(p,v,t,"Inspector directory",o+1);else{let h=Number(p),E=d==="timeout"?60:
+4*1024*1024;(!/^[1-9][0-9]*$/u.test(p)||!Number.isSafeInteger(h)||h>E)&&l(v,t,`${m[1]} must be from 1 to ${E}.`,o+1),r[d]=
+d==="timeout"?h*1e3:h}}}return i(),n.length||l(v,t,"Use an Inspector entry or - Nothing."),n}function Ge(e){let t=e.status===
+"ready"?Yt(e.lines):[];for(let n of t)n.runtimeRequirements.some(s=>!e.components.includes(s))&&l(v,"genesis/stack.md#Ar\
+chitecture inspection","Inspector runtimes must be selected in Stack.");return{contract:"vibe64.architecture-inspection.\
+v1",status:e.status,stackHash:e.stackHash,inspectors:t,recipeHash:I(t),diagnostics:e.diagnostics||[]}}var We="Architecture layout",ye=Object.freeze(["layer","libraries","support"]);function Jt(e,{path:t="genesis/stack.md#A\
+rchitecture layout"}={}){let n="VIBE64_ARCHITECTURE_LAYOUT_INVALID";if(Array.isArray(e)||l(n,t,"Expected exact Stack sec\
+tion lines."),y(e))return[];let s=[],r=new Set,i=new Set,o;function c(){o&&((!o.kind||!o.purpose||!o.subsystems.length)&&
+l(n,t,`${o.id} needs Kind, Purpose and at least one Subsystem.`),s.push(o))}for(let[u,a]of e.entries()){let m=a.trim();if(!m)
+continue;let d=m.match(/^### Group `([a-z0-9]+(?:-[a-z0-9]+)*)`: (.+)$/u);if(d){c(),r.has(d[1])&&l(n,t,"Duplicate group \
+id.",u+1),r.add(d[1]),o={id:d[1],title:d[2],subsystems:[]};continue}let p=m.match(/^- (Kind|Purpose|Subsystem): (.+)$/u);
+(!o||!p)&&l(n,t,"Expected a Group heading or Kind, Purpose, Subsystem field.",u+1);let h=N(p[2],n,t,p[1],u+1,{count:1});
+if(p[1]==="Subsystem"){let E=g(h[0],n,t,"Subsystem root",u+1);i.has(E)&&l(n,t,"Each directory root may be placed only on\
+ce.",u+1),i.add(E),o.subsystems.push({root:E})}else{let E=p[1].toLowerCase();o[E]!==void 0&&l(n,t,`Duplicate ${p[1]}.`,u+
+1),E==="kind"&&!ye.includes(h[0])&&l(n,t,`Kind must be ${ye.slice(0,-1).join(", ")} or ${ye.at(-1)}.`,u+1),o[E]=h[0]}}return c(),
+s.length||l(n,t,"Use a Group entry or - Nothing."),s}function He(e){return{contract:"vibe64.architecture-layout.v1",status:e.
+status,stackHash:e.stackHash,groups:e.status==="ready"?Jt(e.lines):[],diagnostics:e.diagnostics||[]}}import{existsSync as It}from"node:fs";import{readFile as Yn}from"node:fs/promises";import{createRequire as Jn}from"node:module";
+import M from"node:path";var qe="STACK_PROJECT_CONTRACTS_INCOMPLETE",ze="STACK_SECTION_AMBIGUOUS",Xt=Object.freeze([qe,ze]);function Qt(e){return Xt.
+includes(String(e?.code||"").trim())}import*as Ne from"genesis-compiler";import{mkdir as cn,mkdtemp as un,readFile as pn,rename as ln,rm as dn,writeFile as mn}from"node:fs/promises";import fn from"node:os";
+import we from"node:path";var Zt=Object.freeze(["main","temporary"]),Ke=Object.freeze(["managedDatabaseRefresh","managedEnvironment","managedGit",
+"managedPreview"]),en=64*1024,tn=Object.freeze(["When user input is necessary, ask no more than three concise, high-impa\
 ct questions at once.","Put multiple questions on separate lines as `[1] Question`, `[2] Question`, and so on.","For a s\
 mall fixed set of useful choices, put `Possible answers:` and a short bullet list directly beneath its own question, bef\
 ore the next one; never collect several questions' answers into one trailing list.","Each bullet is one distinct, comple\
@@ -108,86 +116,86 @@ Possible answers:
 [2] Tell the main agent before changes?
 Possible answers:
 - Yes, tell main first
-- No, proceed independently`]),Vt=Object.freeze(["The Vibe64-managed preview is the canonical application server; never \
+- No, proceed independently`]),nn=Object.freeze(["The Vibe64-managed preview is the canonical application server; never \
 start a duplicate or replacement server. If it is unavailable, report that blocker. Describe only rendered browser evide\
 nce.","When adopting an authenticated app, or when its login blocks Preview inspection, inspect identity support/names w\
 ith `vibe64-helper preview status`; prefer `vibe64-helper preview browser identity <configured-name>` to requesting pass\
 words. If unconfigured, ask which existing accounts (email/login/user ID) represent admin and other required roles, and \
 the default. Reuse prior answers; wait for their choices before configuring access. Never infer admin rights from names \
-or the Vibe64 viewer.","Offer the application-owned `vibe64.preview-identity.command.v1` adapter in Outputs Preview iden\
-tity, and guide named selectors through Dashboard > App access > Managed app access. Use existing sessions/permissions, \
-reject missing/disabled accounts, and disable the adapter without Vibe64\u2019s per-run enable flag and secret. Do not create\
- users, change roles, reset passwords or weaken production auth for import. Verify the selected account\u2019s actual Preview\
- access; a saved selector is insufficient. If deferred/declined, explain access remains unconfigured and continue indepe\
-ndent setup work without repeated credential requests. Public/non-web apps need no adapter.","Use `vibe64-helper preview\
- status`, `screenshot`, `logs`, and `browser eval` (Playwright code on stdin) for rendered inspection.","The top Preview\
- toolbar Stop and `vibe64-helper preview stop` stop this session's application and managed browser, not chat or source. \
-Status reports the saved stopped choice. A status read, screenshot, browser inspection, source edit or session reopening\
- is not permission to restart it; use `vibe64-helper preview ensure --wait` only for a deliberate Start. Scoped browser \
-tests restore the prior stopped choice.","For interactive navigation, use the proxy URL from `vibe64-helper preview insp\
-ect-url` or status `currentPage.url` / `endpoints.browser.url`. Inside browser eval, use `await page.goto(new URL('/your\
--path', preview.url).href)`. The direct application endpoint under diagnostics bypasses Preview identity and is not a br\
-owser-navigation URL.","Use the managed preview browser for interactive browsing and `vibe64-helper playwright` only for\
- an existing configured project suite; report a platform or project-test blocker rather than installing another browser \
-or changing its dependencies.","For browser evidence, batch related actions and assertions, return only needed values an\
-d inspect relevant locators or regions; screenshot at meaningful visual checkpoints or failures, not after every click. \
-Reuse the managed browser when test isolation permits. Preserve required viewport, identity and security checks; use exi\
-sting automated cases for repeat verification.","For browser tests that write or reset data, inspect `vibe64-helper prev\
-iew targets --json` and the project's `genesis/stack.md` Outputs. Run `vibe64-helper playwright --target <declared-test-\
-target> test <suite arguments>` or `vibe64-helper playwright --target <declared-test-target> npm-run <script>`. Vibe64 s\
-tarts that web target, waits for readiness, uses its declared application identity, and restores the previous Preview wh\
-en the command finishes or is cancelled; report restoration failures.","A target name is not proof of test isolation. Be\
-fore running a destructive suite, the application must verify the server's actual test database and suppress real email,\
- invoices, payments, and other external effects. Keep managed Env unchanged. The test launcher and its preview-identity \
-command must use the same database. Use a declared BROWSER_TEST_DB_NAME for reusable browser fixtures, separate from dis\
-posable TEST_DB_NAME. Never spoof safety checks by changing DB_NAME only in the test runner.","If no suitable test targe\
-t exists, add one through the project's existing Outputs contract and application-owned test scripts within authorized s\
-cope, keeping normal Preview as default. Validate the exact disposable database before resetting it, prepare fixtures be\
-fore reporting readiness, and make Playwright use PLAYWRIGHT_BASE_URL without starting another server. If the required t\
-est resources or external-effect controls are missing, report that specific blocker. Use `vibe64-helper preview ensure -\
--target <id> --wait --json` only to deliberately select an interactive target; it stays selected until changed.","Keep r\
-outine browser startup incremental: reuse the isolated test schema, apply only pending migrations, and reset fixture dat\
-a deterministically. Do not drop and rebuild the database or run a production frontend build for every focused browser c\
-heck. Keep fresh-schema migration checks separate. If startup is slow, measure migrations, fixtures, and server startup \
-before retrying or extending deadlines.","Keep test output small: run relevant files/cases, save stdout/stderr to local \
-artifacts and preserve exit status. Report counts, duration, failed cases, actionable errors and artifact paths. Read on\
-ly needed failure excerpts, not full passing/JSON/TAP/request/trace/image output. Retain startup, resource and Preview-r\
-estoration errors even if tests pass, and trailing wrapper diagnostics separately from JSON. Do not rerun for output or \
-reread unchanged logs; inspect on new output, changed state or a concrete blocker.","Batch related browser tests in one \
-managed suite (one Preview switch and restore). Suites and live Preview actions are sequential: no browser actions, ensu\
-re/restart or target changes during a suite or restoration. Wait on the original execution, including background runs, t\
-hrough cleanup/restoration (empty polls: yield_time_ms: 30000 where supported; shorter only for interactive input or an \
-immediate check); read-only status/logs stay available. Before live inspection, confirm `vibe64-helper playwright status\
-` has no active run and `vibe64-helper preview status` is ready on the restored target. To stop, read suite status then \
-run `vibe64-helper playwright cancel <run-id>`, which waits for cleanup/restoration; retry it if cleanup needs attention\
-. Never kill individual test/Preview PIDs or change locks. Launcher exit alone does not prove tests stopped. Recheck cur\
-rent status before reporting a busy blocker.","If a managed command reports kernel task denials or a resource incident, \
-retain its diagnostic and incident ID when reporting the blocker. Ask the platform operator to inspect that resource evi\
-dence before retrying; do not increase test timeouts or weaken assertions to work around a process/thread limit. A gener\
-ic browser timeout without resource evidence does not establish a platform cause."]),Pt=Object.freeze(["Each managed she\
-ll command receives current development Env from Vibe64, including declared resource bindings; use them in ordinary comm\
-ands. Do not build environment injection or copy managed credentials into source. Resource provisioning and application \
-migrations remain separate preparation steps.","Use `vibe64-helper env status [development|production|all]` to inspect c\
-onfigured key names without revealing values.","Pipe an available value to `vibe64-helper env set <development|productio\
-n> <KEY> [--secret]`; never put values in arguments, logs, or repository files. Use empty stdin only when the user reque\
-sted an empty value.","Keep development and production values separate. Never invent credentials, copy a value between s\
-copes without explicit direction, or edit Vibe64 runtime/session storage.","After an Env mutation, report only the affec\
-ted scope and key names, never their values, and claim success only when the command succeeded.","When declared, TEST_DB\
-_NAME is the exact disposable integration database and BROWSER_TEST_DB_NAME is a separate reusable browser-fixture datab\
-ase whose migration ledger survives routine runs. Follow the application\u2019s declared test resources; never reset DB_NAME,\
- share these test identities, or invent a database name."]);function Be(e,t){if(!e||typeof e!="object"||Array.isArray(e))throw new TypeError(`${t} must be an object.`);return e}function le(e,t,n){
+or the Vibe64 viewer.","Offer an application-owned adapter declared in the Outputs `#### Preview identity` block (`vibe6\
+4-helper spec outputs` and `vibe64-helper spec preview-identity-command`), and save the named selectors the person gives\
+ or confirms with `vibe64-helper preview identities save` (`vibe64-helper spec preview-identities`); you may propose the\
+m from existing app accounts, then verify each with `vibe64-helper preview browser identity <name>`. Use existing sessio\
+ns/permissions, reject missing/disabled accounts, and disable the adapter without Vibe64\u2019s per-run enable flag and secre\
+t. Do not create users, change roles, reset passwords or weaken production auth for import. Verify the selected account\u2019\
+s actual Preview access; a saved selector is insufficient. If deferred/declined, explain access remains unconfigured and\
+ continue independent setup work without repeated credential requests. Public/non-web apps need no adapter.","Use `vibe6\
+4-helper preview status`, `screenshot`, `logs`, and `browser eval` (Playwright code on stdin) for rendered inspection.",
+"The top Preview toolbar Stop and `vibe64-helper preview stop` stop this session's application and managed browser, not \
+chat or source. Status reports the saved stopped choice. A status read, screenshot, browser inspection, source edit or s\
+ession reopening is not permission to restart it; use `vibe64-helper preview ensure --wait` only for a deliberate Start.\
+ Scoped browser tests restore the prior stopped choice.","For interactive navigation, use the proxy URL from `vibe64-hel\
+per preview inspect-url` or status `currentPage.url` / `endpoints.browser.url`. Inside browser eval, use `await page.got\
+o(new URL('/your-path', preview.url).href)`. The direct application endpoint under diagnostics bypasses Preview identity\
+ and is not a browser-navigation URL.","Use the managed preview browser for interactive browsing and `vibe64-helper play\
+wright` only for an existing configured project suite; report a platform or project-test blocker rather than installing \
+another browser or changing its dependencies.","For browser evidence, batch related actions and assertions, return only \
+needed values and inspect relevant locators or regions; screenshot at meaningful visual checkpoints or failures, not aft\
+er every click. Reuse the managed browser when test isolation permits. Preserve required viewport, identity and security\
+ checks; use existing automated cases for repeat verification.","For browser tests that write or reset data, inspect `vi\
+be64-helper preview targets --json` and the project's `genesis/stack.md` Outputs. Run `vibe64-helper playwright --target\
+ <declared-test-target> test <suite arguments>` or `vibe64-helper playwright --target <declared-test-target> npm-run <sc\
+ript>`. Vibe64 starts that web target, waits for readiness, uses its declared application identity, and restores the pre\
+vious Preview when the command finishes or is cancelled; report restoration failures.","A target name is not proof of te\
+st isolation. Before running a destructive suite, the application must verify the server's actual test database and supp\
+ress real email, invoices, payments, and other external effects. Keep managed Env unchanged. The test launcher and its p\
+review-identity command must use the same database. Follow the application's declared test resources and never invent a \
+database name. Never spoof safety checks by changing only the test runner's environment.","If no suitable test target ex\
+ists, add one through the project's existing Outputs contract and application-owned test scripts within authorized scope\
+, keeping normal Preview as default. Validate the exact disposable database before resetting it, prepare fixtures before\
+ reporting readiness, and make Playwright use the started target's URL, which Vibe64 supplies as PLAYWRIGHT_BASE_URL, wi\
+thout starting another server. If the required test resources or external-effect controls are missing, report that speci\
+fic blocker. Use `vibe64-helper preview ensure --target <id> --wait --json` only to deliberately select an interactive t\
+arget; it stays selected until changed. If browser startup is slow, measure migrations, fixtures and server startup befo\
+re retrying or extending deadlines.","Keep test output small: run relevant files/cases, save stdout/stderr to local arti\
+facts and preserve exit status. Report counts, duration, failed cases, actionable errors and artifact paths. Read only n\
+eeded failure excerpts, not full passing/JSON/TAP/request/trace/image output. Retain startup, resource and Preview-resto\
+ration errors even if tests pass, and trailing wrapper diagnostics separately from JSON. Do not rerun for output or rere\
+ad unchanged logs; inspect on new output, changed state or a concrete blocker.","Batch related browser tests in one mana\
+ged suite (one Preview switch and restore). Suites and live Preview actions are sequential: no browser actions, ensure/r\
+estart or target changes during a suite or restoration. Wait on the original execution, including background runs, throu\
+gh cleanup/restoration (empty polls: yield_time_ms: 30000 where supported; shorter only for interactive input or an imme\
+diate check); read-only status/logs stay available. Before live inspection, confirm `vibe64-helper playwright status` ha\
+s no active run and `vibe64-helper preview status` is ready on the restored target. To stop, read suite status then run \
+`vibe64-helper playwright cancel <run-id>`, which waits for cleanup/restoration; retry it if cleanup needs attention. Ne\
+ver kill individual test/Preview PIDs or change locks. Launcher exit alone does not prove tests stopped. Recheck current\
+ status before reporting a busy blocker.","If a managed command reports kernel task denials or a resource incident, reta\
+in its diagnostic and incident ID when reporting the blocker. Ask the platform operator to inspect that resource evidenc\
+e before retrying; do not increase test timeouts or weaken assertions to work around a process/thread limit. A generic b\
+rowser timeout without resource evidence does not establish a platform cause."]),sn=Object.freeze(["Each managed shell c\
+ommand receives current development Env from Vibe64, including declared resource bindings; use them in ordinary commands\
+. Do not build environment injection or copy managed credentials into source. Resource provisioning and application migr\
+ations remain separate preparation steps.","Use `vibe64-helper env status [development|production|all]` to inspect confi\
+gured key names without revealing values.","Pipe an available value to `vibe64-helper env set <development|production> <\
+KEY> [--secret]`; never put values in arguments, logs, or repository files. Use empty stdin only when the user requested\
+ an empty value.","Keep development and production values separate. Never invent credentials, copy a value between scope\
+s without explicit direction, or edit Vibe64 runtime/session storage.","After an Env mutation, report only the affected \
+scope and key names, never their values, and claim success only when the command succeeded.","Store a secret the applica\
+tion needs generated (such as an application key) by generating it with the framework's own generator and piping it to `\
+vibe64-helper env set <scope> <KEY> --secret`. Never write it into a generated `.env` file: Vibe64 regenerates that file\
+ from Env."]);function Fe(e,t){if(!e||typeof e!="object"||Array.isArray(e))throw new TypeError(`${t} must be an object.`);return e}function be(e,t,n){
 let s=new Set(t),r=Object.keys(e).filter(i=>!s.has(i));if(r.length>0)throw new TypeError(`${n} contains unsupported fiel\
-ds: ${r.join(", ")}.`)}function Me(e){if(le(e,["conversationKind","scope","session","hostGuidance"],"Vibe64 session cont\
+ds: ${r.join(", ")}.`)}function Ye(e){if(be(e,["conversationKind","scope","session","hostGuidance"],"Vibe64 session cont\
 ext"),e.hostGuidance!==void 0&&(typeof e.hostGuidance!="string"||Buffer.byteLength(e.hostGuidance,"utf8")>1024))throw new TypeError(
-"Vibe64 host guidance must be bounded text supplied by the host.");if(!Nt.includes(e.conversationKind))throw new TypeError(
-"Vibe64 session context has an unknown conversationKind.");let t=Be(e.session,"Vibe64 session capabilities");le(t,je,"Vi\
-be64 session capabilities");let n=Object.fromEntries(je.map(s=>{if(typeof t[s]!="boolean")throw new TypeError(`Vibe64 se\
+"Vibe64 host guidance must be bounded text supplied by the host.");if(!Zt.includes(e.conversationKind))throw new TypeError(
+"Vibe64 session context has an unknown conversationKind.");let t=Fe(e.session,"Vibe64 session capabilities");be(t,Ke,"Vi\
+be64 session capabilities");let n=Object.fromEntries(Ke.map(s=>{if(typeof t[s]!="boolean")throw new TypeError(`Vibe64 se\
 ssion capability ${s} must be boolean.`);return[s,t[s]]}));return{conversationKind:e.conversationKind,scope:"session",...e.
-hostGuidance?{hostGuidance:e.hostGuidance}:{},session:n}}function jt(e){le(e,["scope","stableContext"],"Vibe64 ephemeral\
- context");let t=String(e.stableContext||"").trim();if(!t||t.length>Dt)throw new TypeError("Vibe64 ephemeral context req\
-uires bounded stableContext.");return{scope:"ephemeral",stableContext:t}}function Bt(e){if(e.scope==="session")return Me(
-e);if(e.scope==="ephemeral")return jt(e);throw new TypeError("The Vibe64 driver supports session and ephemeral scopes on\
-ly.")}function Mt(e){let{conversationKind:t,session:n,hostGuidance:s=""}=Me(e);return["VIBE64 CONVERSATION CONTEXT","",...t===
+hostGuidance?{hostGuidance:e.hostGuidance}:{},session:n}}function rn(e){be(e,["scope","stableContext"],"Vibe64 ephemeral\
+ context");let t=String(e.stableContext||"").trim();if(!t||t.length>en)throw new TypeError("Vibe64 ephemeral context req\
+uires bounded stableContext.");return{scope:"ephemeral",stableContext:t}}function on(e){if(e.scope==="session")return Ye(
+e);if(e.scope==="ephemeral")return rn(e);throw new TypeError("The Vibe64 driver supports session and ephemeral scopes on\
+ly.")}function an(e){let{conversationKind:t,session:n,hostGuidance:s=""}=Ye(e);return["VIBE64 CONVERSATION CONTEXT","",...t===
 "main"?["This is the main Vibe64 conversation for the selected session worktree."]:["This is a user-visible temporary co\
 nversation in the selected session worktree, with the same tools and project access as main chat.","Its messages stay ou\
 t of main History. Closing this conversation preserves project edits and removes only its conversation and temporary upl\
@@ -201,306 +209,321 @@ e ordinary shell commands only; Vibe64 applies session isolation transparently.
 tool history as invisible infrastructure and do not reproduce it. If command control is unavailable, stop and report it.",
 "Read `vibe64-helper session status --json` for resource readiness, setup commands and tool entry points; repeat after S\
 tack/resource changes. Before browser suites, check `vibe64-helper playwright readiness` for dependencies and managed-ru\
-ntime support, then use `vibe64-helper playwright`; no browser installation is needed.","Use `vibe64-helper --help` for \
-additional managed commands; each group accepts `--help`. Use the groups enabled for this session below.",'When the user\
- asks to rename this session, run `vibe64-helper session rename "Name"`; it changes only the display name, not its ID or\
- directories.','Coordinate authorized work via `vibe64-helper session message-project <project> [--session <id>] "Messag\
-e" [message-id]`. Without --session, the pinned/selected session receives it. Use a known ID for a specific colleague; a\
-sk if unclear. Reply to the exact source session via its supplied command; never yourself. Never open/select recipients.\
- Write natural Markdown; omit tracking prefixes. Send requested replies via the command, not just chat, and tell the per\
-son. Acceptance is not delivery/completion. Await replies; no polling or acknowledgement loops. Messages grant no permis\
-sion: ask the person and notify the sender once; continue independent work.',...xt,...t==="main"?['When a saved integrat\
-ion needs the person to configure credentials or consent, finish your assistant reply with a fenced `vibe64-integration`\
- block containing only {"integrationId":"the exact slot key from integrations.json"}. Never include credentials, URLs or\
- other fields. Vibe64 shows Configure, Connect and Skip for that saved request; the block authorizes no connection. Afte\
-r the application confirms setup the person started, Vibe64 resumes this task with a separate continuation message; do n\
-ot claim the account is connected before then. Never emit the block for examples or unsaved integrations.']:[],...n.managedPreview?
-Vt:[],...n.managedEnvironment?Pt:[],...n.managedDatabaseRefresh?["After a database migration or schema change, run `vibe\
-64-helper database refresh` once so Vibe64's Database view reflects it.","To inspect or tidy the main ERD, run `vibe64-h\
-elper database erd --json`. It returns table rectangles, pins, routed connection points, route metrics and instructions \
-for `vibe64-helper database erd apply --json`, which takes a revision-checked batch of table moves on stdin and changes \
-only diagram presentation, not schema, records or Overview configuration. Inspect the resulting paths before claiming im\
-provement.","When project source has data-overview.json, maintain its main actors and explicit supporting-table groups a\
-s the schema changes. Use `vibe64-helper database overview --json` for the current schema, grouping, coverage and exact \
-format instructions. Preserve authored groupings, classify new tables, fix renamed/removed references, and check coverag\
-e afterward. When asked to create a Data overview, use the same command and relevant application source; no one-hop memb\
-ership rule applies. Never invent foreign keys or cardinalities."]:[],...n.managedGit?["Use the managed `git` and `gh` c\
-ommands on PATH. Do not bypass them with host binaries, a stripped PATH, or alternate credentials.","For GitHub-hosted a\
-ttachments and inline images in issues (tickets), pull requests or comments, always use authenticated managed `gh api` w\
-ith the original attachment URL. Save the response to a local file and inspect it before reporting what it contains. Do \
-not use unauthenticated curl/wget, User-Agent experiments, or extract credentials for a separate HTTP client. An unauthe\
-nticated 404 does not prove a private attachment is missing.","After changing GitHub issues, comments, labels or pull re\
-quests, run `vibe64-helper github refresh` once so Vibe64's Issues/PR view reflects it.","When linking an issue in this \
-project's repository, run `vibe64-helper github issue-link <number>` and use its returned Vibe64 path exactly as the pri\
-mary Markdown link destination, including the /app prefix. Root-relative or same-origin Vibe64 links navigate in-app wit\
-hout reloading. You may include the GitHub URL as a secondary link. Do not guess the project slug or host; issues in oth\
-er repositories keep their GitHub links.","Report authentication or transport failures directly; do not inspect credenti\
-als or invent another login path.","When a managed Git/GitHub command fails, tell the user which requested action failed\
-, which earlier work is confirmed complete, what remains undone or unconfirmed, and the next safe action. Retain the rep\
-orted failure stage, execution budget and execution reference when provided; do not expose credentials or dump raw outpu\
-t unnecessarily.","A timeout or transport failure does not establish invalid authentication, exhausted AI quota, a GitHu\
-b outage or a suspension problem. Separate recorded facts from hypotheses; say the cause is unknown when it is unproven.\
- Recommend reconnection only when the reported error explicitly calls for it.","If the diagnostic says commandSubmitted=\
-false, the requested Git/GitHub action was not attempted. After an execution timeout, lost response or unreadable respon\
-se, its effects remain unconfirmed: use a read-only check of the affected Git/GitHub state before repeating any write. N\
-ever claim that a comment was posted or not posted, or that a push succeeded or failed, solely from those errors. If ver\
-ification is unavailable, report the outcome as unknown and stop; do not repeat the write or claim it was safely rolled \
-back."]:[]].join(`
-`)}function Y(e={}){let t=Be(e,"Vibe64 driver input"),n=Bt(t);return n.scope==="session"?Mt(n):n.stableContext}async function $e(e=""){let t=e||await Gt(de.join(qt.tmpdir(),"vibe64-genesis-context-"));await $t(t,{recursive:!0,mode:448});
-let n=de.join(t,"sessions.json"),s=new Map;try{let c=JSON.parse(await Lt(n,"utf8"));for(let u of c.sessions)Y(u.promptContext),
-s.set(u.upstreamSessionId,u)}catch(c){if(c.code!=="ENOENT")throw c}let r=Promise.resolve(),i=!1;async function o(c){let u=de.
-join(t,"sessions.tmp");await Ht(u,JSON.stringify({sessions:[...c.values()]}),{mode:384}),await Ut(u,n)}return await o(s),
+ntime support, then use `vibe64-helper playwright`; when it reports a managed runtime, no browser installation is needed\
+.","Vibe64-owned contracts (Stack sections such as Workspace setup and Outputs, the Preview identity protocol and integr\
+ation setup) have exact specs: list them with `vibe64-helper spec` and read `vibe64-helper spec <name>` before writing o\
+r changing one; never reconstruct them from Vibe64 source or bundles.","Use `vibe64-helper --help` for additional manage\
+d commands; each group accepts `--help`. Use the groups enabled for this session below.",'When the user asks to rename t\
+his session, run `vibe64-helper session rename "Name"`; it changes only the display name, not its ID or directories.','C\
+oordinate authorized work via `vibe64-helper session message-project <project> [--session <id>] "Message" [message-id]`.\
+ Without --session, the pinned/selected session receives it. Use a known ID for a specific colleague; ask if unclear. Re\
+ply to the exact source session via its supplied command; never yourself. Never open/select recipients. Write natural Ma\
+rkdown; omit tracking prefixes. Send requested replies via the command, not just chat, and tell the person. Acceptance i\
+s not delivery/completion. Await replies; no polling or acknowledgement loops. Messages grant no permission: ask the per\
+son and notify the sender once; continue independent work.',...tn,...t==="main"?['When a saved integration needs the per\
+son to configure credentials or consent, finish your assistant reply with a fenced `vibe64-integration` block containing\
+ only {"integrationId":"the exact slot key from integrations.json"}. Never include credentials, URLs or other fields. Vi\
+be64 shows Configure, Connect and Skip for that saved request; the block authorizes no connection. After the application\
+ confirms setup the person started, Vibe64 resumes this task with a separate continuation message; do not claim the acco\
+unt is connected before then. Never emit the block for examples or unsaved integrations.']:[],...n.managedPreview?nn:[],
+...n.managedEnvironment?sn:[],...n.managedDatabaseRefresh?["After a database migration or schema change, run `vibe64-hel\
+per database refresh` once so Vibe64's Database view reflects it.","To inspect or tidy the main ERD, run `vibe64-helper \
+database erd --json`. It returns table rectangles, pins, routed connection points, route metrics and instructions for `v\
+ibe64-helper database erd apply --json`, which takes a revision-checked batch of table moves on stdin and changes only d\
+iagram presentation, not schema, records or Overview configuration. Inspect the resulting paths before claiming improvem\
+ent.","When project source has data-overview.json, maintain its main actors and explicit supporting-table groups as the \
+schema changes. Use `vibe64-helper database overview --json` for the current schema, grouping, coverage and exact format\
+ instructions. Preserve authored groupings, classify new tables, fix renamed/removed references, and check coverage afte\
+rward. When asked to create a Data overview, use the same command and relevant application source; no one-hop membership\
+ rule applies. Never invent foreign keys or cardinalities."]:[],...n.managedGit?["Use the managed `git` and `gh` command\
+s on PATH. Do not bypass them with host binaries, a stripped PATH, or alternate credentials.","For GitHub-hosted attachm\
+ents and inline images in issues (tickets), pull requests or comments, always use authenticated managed `gh api` with th\
+e original attachment URL. Save the response to a local file and inspect it before reporting what it contains. Do not us\
+e unauthenticated curl/wget, User-Agent experiments, or extract credentials for a separate HTTP client. An unauthenticat\
+ed 404 does not prove a private attachment is missing.","After changing GitHub issues, comments, labels or pull requests\
+, run `vibe64-helper github refresh` once so Vibe64's Issues/PR view reflects it.","When linking an issue in this projec\
+t's repository, run `vibe64-helper github issue-link <number>` and use its returned Vibe64 path exactly as the primary M\
+arkdown link destination, including the /app prefix. Root-relative or same-origin Vibe64 links navigate in-app without r\
+eloading. You may include the GitHub URL as a secondary link. Do not guess the project slug or host; issues in other rep\
+ositories keep their GitHub links.","Report authentication or transport failures directly; do not inspect credentials or\
+ invent another login path.","When a managed Git/GitHub command fails, tell the user which requested action failed, whic\
+h earlier work is confirmed complete, what remains undone or unconfirmed, and the next safe action. Retain the reported \
+failure stage, execution budget and execution reference when provided; do not expose credentials or dump raw output unne\
+cessarily.","A timeout or transport failure does not establish invalid authentication, exhausted AI quota, a GitHub outa\
+ge or a suspension problem. Separate recorded facts from hypotheses; say the cause is unknown when it is unproven. Recom\
+mend reconnection only when the reported error explicitly calls for it.","If the diagnostic says commandSubmitted=false,\
+ the requested Git/GitHub action was not attempted. After an execution timeout, lost response or unreadable response, it\
+s effects remain unconfirmed: use a read-only check of the affected Git/GitHub state before repeating any write. Never c\
+laim that a comment was posted or not posted, or that a push succeeded or failed, solely from those errors. If verificat\
+ion is unavailable, report the outcome as unknown and stop; do not repeat the write or claim it was safely rolled back."]:
+[]].join(`
+`)}function J(e={}){let t=Fe(e,"Vibe64 driver input"),n=on(t);return n.scope==="session"?an(n):n.stableContext}async function Je(e=""){let t=e||await un(we.join(fn.tmpdir(),"vibe64-genesis-context-"));await cn(t,{recursive:!0,mode:448});
+let n=we.join(t,"sessions.json"),s=new Map;try{let c=JSON.parse(await pn(n,"utf8"));for(let u of c.sessions)J(u.promptContext),
+s.set(u.upstreamSessionId,u)}catch(c){if(c.code!=="ENOENT")throw c}let r=Promise.resolve(),i=!1;async function o(c){let u=we.
+join(t,"sessions.tmp");await mn(u,JSON.stringify({sessions:[...c.values()]}),{mode:384}),await ln(u,n)}return await o(s),
 {registryPath:n,get(c){return structuredClone(s.get(c))},async register(c,u,a=""){if(i)throw new Error("The Genesis host\
  context registry is closed.");if(typeof c!="string"||!c.trim())throw new TypeError("Genesis host context requires a nat\
-ive conversation ID.");let m=structuredClone(u);Y(m);let l={upstreamSessionId:c,workdir:a,promptContext:m},d=r.catch(()=>{}).
-then(async()=>{if(JSON.stringify(s.get(c))===JSON.stringify(l))return;let h=new Map(s);h.set(c,l),await o(h),s=h});r=d,await d},
-async close(){i=!0,await r.catch(()=>{}),s.clear(),e||await Wt(t,{recursive:!0,force:!0})}}}var Le="vibe64.application-deployment.v1",Ue="Deployment",M="VIBE64_DEPLOYMENT_INVALID",zt=/^- (Prepare|Build|Migrate|Serve) `([^`\r\n]+)`:[ \t]+(.+)$/u,
-We="- Recreate on restore: ",Ge=Object.freeze({prepare:0,build:1,migrate:2,serve:3});function A(e,t,n,s={}){p(M,e,t,n,s)}
-function Kt(e,t,n){let s=C(e.slice(We.length),M,t,"Deployment Recreate on restore paths",n);return s.some(r=>r.startsWith(
-"/")||r.includes("\\")||r.includes("***")||/[?[\]{}!]/u.test(r)||r.split("/").some(i=>!i||[".",".."].includes(i)))&&A(t,
-"Deployment Recreate on restore paths must be canonical project-relative globs using only * and ** wildcards.",n),new Set(
-s).size!==s.length&&A(t,"Deployment contains a duplicate Recreate on restore path.",n),s}function Ft(e,t,n){return{label:O(
-e[2],M,t,"Deployment step label",n),argv:_(e[3],M,t,"Deployment command",n),role:e[1].toLowerCase()}}function me(){return{
-version:1,artifact:{disposablePaths:[]},workdir:".",runtimeRequirements:[],readiness:null,steps:[]}}function He(e,{path:t="\
-genesis/stack.md#Deployment"}={}){if(Array.isArray(e)||A(t,"Deployment must be supplied as exact Stack section lines."),
-b(e))return me();let n=me(),s=new Set;for(let i=0;i<e.length;i+=1){let o=e[i].trim();if(!o)continue;let c=i+1;if(o.startsWith(
-"- Workdir: ")){s.has("workdir")&&A(t,"Duplicate Deployment Workdir.",c),s.add("workdir");let a=C(o.slice(11),M,t,"Deplo\
-yment Workdir",c,{count:1})[0];n.workdir=g(a,M,t,"Deployment workdir",c);continue}if(o.startsWith("- Runtimes: ")){s.has(
-"runtimes")&&A(t,"Duplicate Deployment Runtimes.",c),s.add("runtimes"),n.runtimeRequirements=R(o.slice(12),M,t,"Deployme\
-nt runtimes",c);continue}if(o.startsWith(We)){s.has("restore-paths")&&A(t,"Duplicate Deployment Recreate on restore entr\
-y.",c),s.add("restore-paths"),n.artifact.disposablePaths=Kt(o,t,c);continue}if(o.startsWith("- Ready when: ")){s.has("re\
-adiness")&&A(t,"Duplicate Deployment Ready when.",c),s.add("readiness"),n.readiness=te(o,M,t,"Deployment readiness",c);continue}
-let u=o.match(zt);if(u){n.steps.push(Ft(u,t,c));continue}A(t,`Unknown Deployment entry: ${o}.`,c)}n.steps.length===0&&A(
-t,"## Deployment needs at least one command or exactly `- Nothing.`."),(n.steps.filter(({role:i})=>i==="serve").length!==
-1||n.steps.at(-1).role!=="serve")&&A(t,"Deployment needs exactly one final Serve step.");for(let i=1;i<n.steps.length;i+=
-1)Ge[n.steps[i].role]<Ge[n.steps[i-1].role]&&A(t,"Deployment steps must be ordered Prepare, Build, Migrate, then Serve.");
-return n.readiness||A(t,"Deployment needs one Ready when entry."),n.artifact.disposablePaths.length>0&&!n.steps.some(({role:i})=>i===
-"prepare")&&A(t,"Deployment may recreate paths on restore only when it declares a Prepare step."),n}function qe({environment:e={},
-section:t={}}={}){G(t,e,"Deployment section");let n=[...t.diagnostics||[]],s=me();t.status==="ready"&&(s=He(t.lines));let r=n.
-length>0?"blocked":s.steps.length>0?"ready":"unconfigured",i={version:s.version,artifact:s.artifact,workdir:s.workdir,runtimeRequirements:s.
-runtimeRequirements,readiness:s.readiness,steps:s.steps};return{contract:Le,status:r,stackHash:t.stackHash,recipeHash:r===
-"ready"?T(i):"",components:[...t.components||[]],source:t.source||null,runtimeRequirements:B(s.runtimeRequirements),resources:structuredClone(
-e.resources||[]),...i,diagnostics:n}}var Fe="vibe64.outputs.v1",ne="Outputs",fe="vibe64.preview-identity.command.v1",w="VIBE64_OUTPUTS_INVALID",Yt=/^[a-z0-9]+(?:-[a-z0-9]+)*$/u,
-he=/\{([a-z][a-z0-9:-]*)\}/gu,Jt=/^### Target `([^`\r\n]+)`:[ \t]+(.+)$/u,Xt=/^#### Parameter `([^`\r\n]+)`:[ \t]+(.+)$/u,
-Qt=/^#### Download `([^`\r\n]+)`$/u,Zt=/^[A-Z_][A-Z0-9_]*$/u,en=/^[a-z0-9!#$&^_.+-]+\/[a-z0-9!#$&^_.+-]+$/u,tn=new Set([
-"HOME","LOGNAME","NODE_OPTIONS","PATH","TMPDIR","USER"]),nn=new Set(["email","login","user-id"]),sn=new Set(["finite","i\
-nteractive"]),rn=new Set(["terminal","web"]),on=[["- Command: ","command","Command"],["- Protocol: ","protocol","Protoco\
-l"],["- Identity types: ","identityTypes","Identity types"],["- Enabled environment: ","enabledEnvironment","Enabled env\
-ironment"],["- Secret environment: ","secretEnvironment","Secret environment"],["- Runtimes: ","runtimes","Runtimes"],["\
-- Timeout ms: ","timeoutMs","Timeout ms"]];function f(e,t,n,s={}){p(w,e,t,n,s)}function ge(e,t,n,s){let r=O(e,w,t,n,s);return Yt.
-test(r)||f(t,`${n} must use lowercase letters, digits, and single hyphens.`,s),r}function Ye(e,t,n,s,r,i){return C(e.slice(
-t.length),w,n,s,r,i)}function P(e,t,n,s,r){return Ye(e,t,n,s,r,{count:1})[0]}function an(e,t,n,s){let r=_(e,w,t,n,s);for(let i of r)
-i.replace(he,"").includes("{parameter:")&&f(t,`${n} has an invalid {parameter:id} placeholder.`,s),[...i.matchAll(he)].some(
+ive conversation ID.");let m=structuredClone(u);J(m);let d={upstreamSessionId:c,workdir:a,promptContext:m},p=r.catch(()=>{}).
+then(async()=>{if(JSON.stringify(s.get(c))===JSON.stringify(d))return;let h=new Map(s);h.set(c,d),await o(h),s=h});r=p,await p},
+async close(){i=!0,await r.catch(()=>{}),s.clear(),e||await dn(t,{recursive:!0,force:!0})}}}var Xe="vibe64.application-deployment.v1",Qe="Deployment",L="VIBE64_DEPLOYMENT_INVALID",hn=/^- (Prepare|Build|Migrate|Serve) `([^`\r\n]+)`:[ \t]+(.+)$/u,
+Ie="- Recreate on restore: ",ve=Object.freeze({prepare:0,build:1,migrate:2,serve:3}),Te=Object.keys(ve).map(e=>e[0].toUpperCase()+
+e.slice(1)),gn=Object.freeze(["- Workdir: `path`","- Runtimes: `runtime`...",`${Ie}\`glob\`...`,"- Ready when: `GET` `/p\
+ath` returns `200`",`- ${Te.join("|")} \`label\`: \`command\` \`argument\`...`]);function O(e,t,n,s={}){l(L,e,t,n,s)}function En(e,t,n){
+let s=N(e.slice(Ie.length),L,t,"Deployment Recreate on restore paths",n);return s.some(r=>r.startsWith("/")||r.includes(
+"\\")||r.includes("***")||/[?[\]{}!]/u.test(r)||r.split("/").some(i=>!i||[".",".."].includes(i)))&&O(t,"Deployment Recre\
+ate on restore paths must be canonical project-relative globs using only * and ** wildcards.",n),new Set(s).size!==s.length&&
+O(t,"Deployment contains a duplicate Recreate on restore path.",n),s}function yn(e,t,n){let s=k(e[3],L,t,"Deployment com\
+mand",n);return s.some(r=>/\{(?:host|port)\}/u.test(r))&&O(t,"Deployment commands take no {host} or {port} placeholders;\
+ Serve reads HOST and PORT from its environment.",n),{label:R(e[2],L,t,"Deployment step label",n),argv:s,role:e[1].toLowerCase()}}
+function Se(){return{version:1,artifact:{disposablePaths:[]},workdir:".",runtimeRequirements:[],readiness:null,steps:[]}}
+function Ze(e,{path:t="genesis/stack.md#Deployment"}={}){if(Array.isArray(e)||O(t,"Deployment must be supplied as exact \
+Stack section lines."),y(e))return Se();let n=Se(),s=new Set;for(let i=0;i<e.length;i+=1){let o=e[i].trim();if(!o)continue;
+let c=i+1;if(o.startsWith("- Workdir: ")){s.has("workdir")&&O(t,"Duplicate Deployment Workdir.",c),s.add("workdir");let a=N(
+o.slice(11),L,t,"Deployment Workdir",c,{count:1})[0];n.workdir=g(a,L,t,"Deployment workdir",c);continue}if(o.startsWith(
+"- Runtimes: ")){s.has("runtimes")&&O(t,"Duplicate Deployment Runtimes.",c),s.add("runtimes"),n.runtimeRequirements=A(o.
+slice(12),L,t,"Deployment runtimes",c);continue}if(o.startsWith(Ie)){s.has("restore-paths")&&O(t,"Duplicate Deployment R\
+ecreate on restore entry.",c),s.add("restore-paths"),n.artifact.disposablePaths=En(o,t,c);continue}if(o.startsWith("- Re\
+ady when: ")){s.has("readiness")&&O(t,"Duplicate Deployment Ready when.",c),s.add("readiness"),n.readiness=se(o,L,t,"Dep\
+loyment readiness",c);continue}let u=o.match(hn);if(u){n.steps.push(yn(u,t,c));continue}O(t,P("Deployment entry",o,gn),c)}
+n.steps.length===0&&O(t,"## Deployment needs at least one command or exactly `- Nothing.`."),(n.steps.filter(({role:i})=>i===
+"serve").length!==1||n.steps.at(-1).role!=="serve")&&O(t,"Deployment needs exactly one final Serve step.");for(let i=1;i<
+n.steps.length;i+=1)ve[n.steps[i].role]<ve[n.steps[i-1].role]&&O(t,`Deployment steps must be ordered ${Te.slice(0,-1).join(
+", ")}, then ${Te.at(-1)}.`);return n.readiness||O(t,"Deployment needs one Ready when entry."),n.artifact.disposablePaths.
+length>0&&!n.steps.some(({role:i})=>i==="prepare")&&O(t,"Deployment may recreate paths on restore only when it declares \
+a Prepare step."),n}function et({environment:e={},section:t={}}={}){B(t,e,"Deployment section");let n=[...t.diagnostics||
+[]],s=Se();t.status==="ready"&&(s=Ze(t.lines));let r=n.length>0?"blocked":s.steps.length>0?"ready":"unconfigured",i={version:s.
+version,artifact:s.artifact,workdir:s.workdir,runtimeRequirements:s.runtimeRequirements,readiness:s.readiness,steps:s.steps};
+return{contract:Xe,status:r,stackHash:t.stackHash,recipeHash:r==="ready"?I(i):"",components:[...t.components||[]],source:t.
+source||null,runtimeRequirements:j(s.runtimeRequirements),resources:structuredClone(e.resources||[]),...i,diagnostics:n}}var rt="vibe64.outputs.v1",ae="Outputs",oe="vibe64.preview-identity.command.v1",b="VIBE64_OUTPUTS_INVALID",bn=/^[a-z0-9]+(?:-[a-z0-9]+)*$/u,
+Oe=/\{([a-z][a-z0-9:-]*)\}/gu,wn=/^### Target `([^`\r\n]+)`:[ \t]+(.+)$/u,vn=/^#### Parameter `([^`\r\n]+)`:[ \t]+(.+)$/u,
+Tn=/^#### Download `([^`\r\n]+)`$/u,Sn=/^[A-Z_][A-Z0-9_]*$/u,In=/^[a-z0-9!#$&^_.+-]+\/[a-z0-9!#$&^_.+-]+$/u,On=new Set([
+"HOME","LOGNAME","NODE_OPTIONS","PATH","TMPDIR","USER"]),it=new Set(["email","login","user-id"]),ot=new Set(["finite","i\
+nteractive"]),_e=new Set(["development","test"]),at=new Set(["terminal","web"]),tt=16,ct=1e4,re=3e4,ie=e=>[...e].map(t=>`\
+\`${t}\``).join(" or "),ut=[["- Command: ","command","Command","`tools/preview-identity` `argument`..."],["- Protocol: ",
+"protocol","Protocol",`\`${oe}\``],["- Identity types: ","identityTypes","Identity types",`one or more of ${[...it].map(
+e=>`\`${e}\``).join(" ")}`],["- Enabled environment: ","enabledEnvironment","Enabled environment","`ENV_NAME`"],["- Secr\
+et environment: ","secretEnvironment","Secret environment","`ENV_NAME`"],["- Runtimes: ","runtimes","Runtimes","`runtime\
+`..."],["- Timeout ms: ","timeoutMs","Timeout ms",`\`1\` through \`${re}\` (default ${ct})`]],_n=Object.freeze(["### Tar\
+get `id`: Label","#### Parameter `id`: Label","#### Presentation","#### Preview identity","#### Download `id`"]),Z=Object.
+freeze({target:["- Default.",`- Mode: ${ie(ot)}`,`- Data: ${ie(_e)}`,"- Workdir: `path`","- Runtimes: `runtime`...","- P\
+repare|Build|Run `label`: `command` `argument`..."],parameter:["- Default: `text`","- Description: `text`","- Required."],
+presentation:[`- Kind: ${ie(at)}`,"- Preferred port: `1024` through `65535`","- URL path: `/path`","- Ready when: `GET` \
+`/path` returns `200`"],previewIdentity:ut.map(([e,,,t])=>`${e}${t}`),download:["- Path: `path`","- Name: `file-name`","\
+- Media type: `type/subtype`"]});function f(e,t,n,s={}){l(b,e,t,n,s)}function Re(e,t,n,s){let r=R(e,b,t,n,s);return bn.test(
+r)||f(t,`${n} must use lowercase letters, digits, and single hyphens.`,s),r}function pt(e,t,n,s,r,i){return N(e.slice(t.
+length),b,n,s,r,i)}function $(e,t,n,s,r){return pt(e,t,n,s,r,{count:1})[0]}function Rn(e,t,n,s){let r=k(e,b,t,n,s);for(let i of r)
+i.replace(Oe,"").includes("{parameter:")&&f(t,`${n} has an invalid {parameter:id} placeholder.`,s),[...i.matchAll(Oe)].some(
 o=>!["host","port"].includes(o[1])&&!/^parameter:[a-z0-9]+(?:-[a-z0-9]+)*$/u.test(o[1]))&&f(t,`${n} supports only {host}\
-, {port}, and {parameter:id} placeholders.`,s);return r}function v(e,t,n,s,r,i){e.seen.has(t)&&f(s,`Duplicate ${i}.`,r),
-e.seen.add(t),e[t]=n}function cn(e,t,n){return{id:ge(e[1],t,"Output target id",n),label:O(e[2],w,t,"Output target label",
+, {port}, and {parameter:id} placeholders.`,s);return r}function T(e,t,n,s,r,i){e.seen.has(t)&&f(s,`Duplicate ${i}.`,r),
+e.seen.add(t),e[t]=n}function kn(e,t,n){return{id:Re(e[1],t,"Output target id",n),label:R(e[2],b,t,"Output target label",
 n),default:!1,mode:"",workdir:".",runtimeRequirements:[],steps:[],presentation:null,previewIdentity:null,downloads:[],parameters:[],
-seen:new Set,line:n}}function un(e,t,n,s){if(t==="- Required."){v(e,"required",!0,n,s,"Parameter Required entry");return}
-for(let[r,i]of[["Default","default"],["Description","description"]]){let o=`- ${r}: `;if(t.startsWith(o)){let c=P(t,o,n,
-`Parameter ${r}`,s);v(e,i,c,n,s,`Parameter ${r} entry`);return}}f(n,`Unknown Outputs parameter entry: ${t}.`,s)}function pn(e,t={}){
-let n=e.parameters||[],s=i=>p("VIBE64_OUTPUT_PARAMETERS_INVALID","Outputs",i);(!t||typeof t!="object"||Array.isArray(t))&&
+seen:new Set,line:n}}function An(e,t,n,s){if(t==="- Required."){T(e,"required",!0,n,s,"Parameter Required entry");return}
+for(let[r,i]of[["Default","default"],["Description","description"]]){let o=`- ${r}: `;if(t.startsWith(o)){let c=$(t,o,n,
+`Parameter ${r}`,s);T(e,i,c,n,s,`Parameter ${r} entry`);return}}f(n,P("Outputs parameter entry",t,Z.parameter),s)}function Nn(e,t={}){
+let n=e.parameters||[],s=i=>l("VIBE64_OUTPUT_PARAMETERS_INVALID","Outputs",i);(!t||typeof t!="object"||Array.isArray(t))&&
 s("Output parameters must be an object of text values.");let r=new Set(n.map(({id:i})=>i));for(let i of Object.keys(t))r.
 has(i)||s(`Unknown output parameter: ${i}.`);return Object.fromEntries(n.map(i=>{let o=Object.hasOwn(t,i.id)?t[i.id]:i.default;
 return(typeof o!="string"||o.length>4096||/[\0\r\n]/u.test(o))&&s(`${i.label} must be a single line of text, at most 409\
-6 characters.`),i.required&&!o.trim()&&s(`${i.label} is required.`),[i.id,o]}))}function ln(e){return{kind:"",preferredPort:null,
-urlPath:"/",readiness:null,seen:new Set,line:e}}function dn(e,t,n){return{id:ge(e[1],t,"Download id",n),path:"",name:"",
-mediaType:"",seen:new Set,line:n}}function mn(e,t,n){/^[0-9]+$/u.test(e)||f(t,"Web presentation preferred port must be a\
+6 characters.`),i.required&&!o.trim()&&s(`${i.label} is required.`),[i.id,o]}))}function Cn(e){return{kind:"",preferredPort:null,
+urlPath:"/",readiness:null,seen:new Set,line:e}}function Dn(e,t,n){return{id:Re(e[1],t,"Download id",n),path:"",name:"",
+mediaType:"",seen:new Set,line:n}}function Vn(e,t,n){/^[0-9]+$/u.test(e)||f(t,"Web presentation preferred port must be a\
 n integer from 1024 through 65535.",n);let s=Number(e);return(!Number.isSafeInteger(s)||s<1024||s>65535)&&f(t,"Web prese\
-ntation preferred port must be an integer from 1024 through 65535.",n),s}function fn(e,t,n,s){if(t.startsWith("- Data: ")){
-let i=P(t,"- Data: ",n,"Output target Data",s);["development","test"].includes(i)||f(n,"Output target Data must be `deve\
-lopment` or `test`.",s),v(e,"dataMode",i,n,s,"output target Data entry");return}if(t==="- Default."){v(e,"default",!0,n,
-s,"output target Default entry");return}if(t.startsWith("- Mode: ")){let i=P(t,"- Mode: ",n,"Output target Mode",s);sn.has(
-i)||f(n,"Output target Mode must be `interactive` or `finite`.",s),v(e,"mode",i,n,s,"output target Mode entry");return}if(t.
-startsWith("- Workdir: ")){v(e,"workdir",g(P(t,"- Workdir: ",n,"Output target Workdir",s),w,n,"Output target workdir",s),
-n,s,"output target Workdir entry");return}if(t.startsWith("- Runtimes: ")){v(e,"runtimeRequirements",R(t.slice(12),w,n,"\
-Output target runtimes",s),n,s,"output target Runtimes entry");return}let r=t.match(/^- (Prepare|Build|Run) `([^`\r\n]+)`:[ \t]+(.+)$/u);
-if(r){let i=r[1].toLowerCase(),o=an(r[3],n,"Output step command",s);i!=="run"&&o.some(c=>/\{(?:host|port)\}/u.test(c))&&
-f(n,"Only a web presentation's Run step may use {host} or {port} placeholders.",s),e.steps.push({label:O(r[2],w,n,"Outpu\
-t step label",s),argv:o,role:i});return}f(n,`Unknown Outputs target entry: ${t}.`,s)}function hn(e,t,n,s){if(t.startsWith(
-"- Kind: ")){let r=P(t,"- Kind: ",n,"Presentation Kind",s);rn.has(r)||f(n,"Presentation Kind must be `terminal` or `web`\
-.",s),v(e,"kind",r,n,s,"Presentation Kind entry");return}if(t.startsWith("- Preferred port: ")){v(e,"preferredPort",mn(P(
-t,"- Preferred port: ",n,"Web presentation Preferred port",s),n,s),n,s,"Presentation Preferred port entry");return}if(t.
-startsWith("- URL path: ")){v(e,"urlPath",ue(P(t,"- URL path: ",n,"Web presentation URL path",s),w,n,"Web presentation U\
-RL path",s),n,s,"Presentation URL path entry");return}if(t.startsWith("- Ready when: ")){v(e,"readiness",te(t,w,n,"Web p\
-resentation readiness",s),n,s,"Presentation Ready when entry");return}f(n,`Unknown Presentation entry: ${t}.`,s)}function gn(e,t,n){
-let s=O(e,w,t,"Download Name",n);return(s.length>255||[".",".."].includes(s)||/[\\/\0]/u.test(s)||s.trim()!==s)&&f(t,"Do\
-wnload Name must be a safe filename without path separators.",n),s}function yn(e,t,n){let s=O(e,w,t,"Download Media type",
-n);return(s.length>127||!en.test(s))&&f(t,"Download Media type must be a lowercase type/subtype value.",n),s}function bn(e,t,n,s){
-if(t.startsWith("- Path: ")){v(e,"path",g(P(t,"- Path: ",n,"Download Path",s),w,n,"Download path",s,{allowRoot:!1}),n,s,
-"Download Path entry");return}if(t.startsWith("- Name: ")){v(e,"name",gn(P(t,"- Name: ",n,"Download Name",s),n,s),n,s,"D\
-ownload Name entry");return}if(t.startsWith("- Media type: ")){v(e,"mediaType",yn(P(t,"- Media type: ",n,"Download Media\
- type",s),n,s),n,s,"Download Media type entry");return}f(n,`Unknown Download entry: ${t}.`,s)}function wn(e,t,n){for(let[
+ntation preferred port must be an integer from 1024 through 65535.",n),s}function xn(e,t,n,s){if(t.startsWith("- Data: ")){
+let i=$(t,"- Data: ",n,"Output target Data",s);_e.has(i)||f(n,`Output target Data must be ${ie(_e)}.`,s),T(e,"dataMode",
+i,n,s,"output target Data entry");return}if(t==="- Default."){T(e,"default",!0,n,s,"output target Default entry");return}
+if(t.startsWith("- Mode: ")){let i=$(t,"- Mode: ",n,"Output target Mode",s);ot.has(i)||f(n,"Output target Mode must be `\
+interactive` or `finite`.",s),T(e,"mode",i,n,s,"output target Mode entry");return}if(t.startsWith("- Workdir: ")){T(e,"w\
+orkdir",g($(t,"- Workdir: ",n,"Output target Workdir",s),b,n,"Output target workdir",s),n,s,"output target Workdir entry");
+return}if(t.startsWith("- Runtimes: ")){T(e,"runtimeRequirements",A(t.slice(12),b,n,"Output target runtimes",s),n,s,"out\
+put target Runtimes entry");return}let r=t.match(/^- (Prepare|Build|Run) `([^`\r\n]+)`:[ \t]+(.+)$/u);if(r){let i=r[1].toLowerCase(),
+o=Rn(r[3],n,"Output step command",s);i!=="run"&&o.some(c=>/\{(?:host|port)\}/u.test(c))&&f(n,"Only a web presentation's \
+Run step may use {host} or {port} placeholders.",s),e.steps.push({label:R(r[2],b,n,"Output step label",s),argv:o,role:i});
+return}f(n,P("Outputs target entry",t,[...Z.target,..._n.slice(1)]),s)}function Pn(e,t,n,s){if(t.startsWith("- Kind: ")){
+let r=$(t,"- Kind: ",n,"Presentation Kind",s);at.has(r)||f(n,"Presentation Kind must be `terminal` or `web`.",s),T(e,"ki\
+nd",r,n,s,"Presentation Kind entry");return}if(t.startsWith("- Preferred port: ")){T(e,"preferredPort",Vn($(t,"- Preferr\
+ed port: ",n,"Web presentation Preferred port",s),n,s),n,s,"Presentation Preferred port entry");return}if(t.startsWith("\
+- URL path: ")){T(e,"urlPath",fe($(t,"- URL path: ",n,"Web presentation URL path",s),b,n,"Web presentation URL path",s),
+n,s,"Presentation URL path entry");return}if(t.startsWith("- Ready when: ")){T(e,"readiness",se(t,b,n,"Web presentation \
+readiness",s),n,s,"Presentation Ready when entry");return}f(n,P("Presentation entry",t,Z.presentation),s)}function $n(e,t,n){
+let s=R(e,b,t,"Download Name",n);return(s.length>255||[".",".."].includes(s)||/[\\/\0]/u.test(s)||s.trim()!==s)&&f(t,"Do\
+wnload Name must be a safe filename without path separators.",n),s}function Mn(e,t,n){let s=R(e,b,t,"Download Media type",
+n);return(s.length>127||!In.test(s))&&f(t,"Download Media type must be a lowercase type/subtype value.",n),s}function jn(e,t,n,s){
+if(t.startsWith("- Path: ")){T(e,"path",g($(t,"- Path: ",n,"Download Path",s),b,n,"Download path",s,{allowRoot:!1}),n,s,
+"Download Path entry");return}if(t.startsWith("- Name: ")){T(e,"name",$n($(t,"- Name: ",n,"Download Name",s),n,s),n,s,"D\
+ownload Name entry");return}if(t.startsWith("- Media type: ")){T(e,"mediaType",Mn($(t,"- Media type: ",n,"Download Media\
+ type",s),n,s),n,s,"Download Media type entry");return}f(n,P("Download entry",t,Z.download),s)}function Ln(e,t,n){for(let[
 s,r]of[["path","Path"],["name","Name"],["mediaType","Media type"]])e[s]||f(t,`Output target ${n} Download ${e.id} needs ${r}\
-.`,e.line);return{id:e.id,path:e.path,name:e.name,mediaType:e.mediaType}}function ze(e,t,n,s){if(e===void 0)return"";let r=O(
-e,w,t,`Preview identity ${n} environment name`,s);return(!Zt.test(r)||tn.has(r)||r.startsWith("XDG_"))&&f(t,`Preview ide\
-ntity ${n} environment name is invalid.`,s),r}function En(e){return{seen:new Set,line:e}}function vn(e,t,n,s){let r=on.find(
-([a])=>t.startsWith(a));r||f(n,`Unknown Preview identity entry: ${t}.`,s);let[i,o,c]=r,u=Ye(t,i,n,`Preview identity ${c}`,
-s);!["command","identityTypes","runtimes"].includes(o)&&u.length!==1&&f(n,`Preview identity ${c} accepts exactly one val\
-ue.`,s),v(e,o,u,n,s,`Preview identity ${c} entry`)}function Sn(e,t,n){for(let[a,m]of[["command","Command"],["protocol","\
-Protocol"],["identityTypes","Identity types"]])e[a]||f(t,`Output target ${n} Preview identity needs ${m}.`,e.line);let s=e.
-command.map(a=>`\`${a}\``).join(" "),r=_(s,w,t,"Preview identity command",e.line);(!r[0].includes("/")||r[0].includes("\\")||
-r[0].split("/").some(a=>!a||[".",".."].includes(a))||r.some(a=>/\{(?:host|port)\}/u.test(a)))&&f(t,"Preview identity com\
-mand must use a literal app-owned project-relative executable.",e.line);let i=e.protocol[0];i!==fe&&f(t,`Preview identit\
-y protocol must be ${fe}.`,e.line);let o=[...new Set(e.identityTypes.map(a=>(nn.has(a)||f(t,`Unsupported preview identit\
-y type: ${a}.`,e.line),a)))];o.length!==e.identityTypes.length&&f(t,"Preview identity types must not contain duplicates.",
-e.line);let c={enabled:ze(e.enabledEnvironment?.[0],t,"enabled",e.line),secret:ze(e.secretEnvironment?.[0],t,"secret",e.
-line)};c.enabled&&c.enabled===c.secret&&f(t,"Preview identity enabled and secret environment names must differ.",e.line);
-let u=1e4;if(e.timeoutMs){let a=e.timeoutMs[0];/^[0-9]+$/u.test(a)||f(t,"Preview identity Timeout ms must be from 1 thro\
-ugh 30000.",e.line),u=Number(a),(!Number.isSafeInteger(u)||u<1||u>3e4)&&f(t,"Preview identity Timeout ms must be from 1 \
-through 30000.",e.line)}return{command:r,environment:c,identityTypes:o,protocol:i,runtimes:e.runtimes?R(e.runtimes.map(a=>`\
-\`${a}\``).join(" "),w,t,"Preview identity runtimes",e.line):[],timeoutMs:u}}function Tn(e,t,n){return e.kind||f(t,`Outp\
-ut target ${n} Presentation needs Kind.`,e.line),e.kind==="terminal"?((e.preferredPort!==null||e.readiness||e.seen.has("\
-urlPath"))&&f(t,`Output target ${n} terminal Presentation accepts only Kind.`,e.line),{kind:"terminal"}):(e.readiness||f(
-t,`Output target ${n} web Presentation needs one Ready when entry.`,e.line),{kind:"web",preferredPort:e.preferredPort,urlPath:e.
-urlPath,readiness:e.readiness})}function Ke(e,t){e.mode||f(t,`Output target ${e.id} needs one Mode entry.`,e.line),e.steps.
-length===0&&f(t,`Output target ${e.id} needs at least one step.`,e.line);let n={prepare:0,build:1,run:2};for(let a=1;a<e.
-steps.length;a+=1)n[e.steps[a].role]<n[e.steps[a-1].role]&&f(t,`Output target ${e.id} steps must be ordered Prepare, Bui\
-ld, then Run.`,e.line);let s=e.steps.filter(({role:a})=>a==="run"),r=e.downloads.map(a=>wn(a,t,e.id));new Set(r.map(({id:a})=>a)).
-size!==r.length&&f(t,`Output target ${e.id} contains a duplicate Download id.`,e.line),e.mode==="finite"?((s.length>0||e.
-presentation||e.previewIdentity)&&f(t,`Finite output target ${e.id} cannot have Run, Presentation, or Preview identity e\
-ntries.`,e.line),r.length===0&&f(t,`Finite output target ${e.id} needs at least one Download.`,e.line)):s.length!==1||e.
-steps.at(-1).role!=="run"?f(t,`Interactive output target ${e.id} needs exactly one final Run step.`,e.line):e.presentation||
-f(t,`Interactive output target ${e.id} needs one Presentation.`,e.line);let i=e.presentation?Tn(e.presentation,t,e.id):null,
-o=e.steps.flatMap(({argv:a})=>a.flatMap(m=>[...m.matchAll(he)].map(l=>l[1])));o.some(a=>["host","port"].includes(a))&&i?.
+.`,e.line);return{id:e.id,path:e.path,name:e.name,mediaType:e.mediaType}}function nt(e,t,n,s){if(e===void 0)return"";let r=R(
+e,b,t,`Preview identity ${n} environment name`,s);return(!Sn.test(r)||On.has(r)||r.startsWith("XDG_"))&&f(t,`Preview ide\
+ntity ${n} environment name is invalid.`,s),r}function Un(e){return{seen:new Set,line:e}}function Bn(e,t,n,s){let r=ut.find(
+([a])=>t.startsWith(a));r||f(n,P("Preview identity entry",t,Z.previewIdentity),s);let[i,o,c]=r,u=pt(t,i,n,`Preview ident\
+ity ${c}`,s);!["command","identityTypes","runtimes"].includes(o)&&u.length!==1&&f(n,`Preview identity ${c} accepts exact\
+ly one value.`,s),T(e,o,u,n,s,`Preview identity ${c} entry`)}function Gn(e,t,n){for(let[a,m]of[["command","Command"],["p\
+rotocol","Protocol"],["identityTypes","Identity types"]])e[a]||f(t,`Output target ${n} Preview identity needs ${m}.`,e.line);
+let s=e.command.map(a=>`\`${a}\``).join(" "),r=k(s,b,t,"Preview identity command",e.line);(!r[0].includes("/")||r[0].includes(
+"\\")||r[0].split("/").some(a=>!a||[".",".."].includes(a))||r.some(a=>/\{(?:host|port)\}/u.test(a)))&&f(t,"Preview ident\
+ity command must use a literal app-owned project-relative executable.",e.line);let i=e.protocol[0];i!==oe&&f(t,`Preview \
+identity protocol must be ${oe}.`,e.line);let o=[...new Set(e.identityTypes.map(a=>(it.has(a)||f(t,`Unsupported preview \
+identity type: ${a}.`,e.line),a)))];o.length!==e.identityTypes.length&&f(t,"Preview identity types must not contain dupl\
+icates.",e.line);let c={enabled:nt(e.enabledEnvironment?.[0],t,"enabled",e.line),secret:nt(e.secretEnvironment?.[0],t,"s\
+ecret",e.line)};c.enabled&&c.enabled===c.secret&&f(t,"Preview identity enabled and secret environment names must differ.",
+e.line);let u=ct;if(e.timeoutMs){let a=e.timeoutMs[0];/^[0-9]+$/u.test(a)||f(t,`Preview identity Timeout ms must be from\
+ 1 through ${re}.`,e.line),u=Number(a),(!Number.isSafeInteger(u)||u<1||u>re)&&f(t,`Preview identity Timeout ms must be f\
+rom 1 through ${re}.`,e.line)}return{command:r,environment:c,identityTypes:o,protocol:i,runtimes:e.runtimes?A(e.runtimes.
+map(a=>`\`${a}\``).join(" "),b,t,"Preview identity runtimes",e.line):[],timeoutMs:u}}function Wn(e,t,n){return e.kind||f(
+t,`Output target ${n} Presentation needs Kind.`,e.line),e.kind==="terminal"?((e.preferredPort!==null||e.readiness||e.seen.
+has("urlPath"))&&f(t,`Output target ${n} terminal Presentation accepts only Kind.`,e.line),{kind:"terminal"}):(e.readiness||
+f(t,`Output target ${n} web Presentation needs one Ready when entry.`,e.line),{kind:"web",preferredPort:e.preferredPort,
+urlPath:e.urlPath,readiness:e.readiness})}function st(e,t){e.mode||f(t,`Output target ${e.id} needs one Mode entry.`,e.line),
+e.steps.length===0&&f(t,`Output target ${e.id} needs at least one step.`,e.line);let n={prepare:0,build:1,run:2};for(let a=1;a<
+e.steps.length;a+=1)n[e.steps[a].role]<n[e.steps[a-1].role]&&f(t,`Output target ${e.id} steps must be ordered Prepare, B\
+uild, then Run.`,e.line);let s=e.steps.filter(({role:a})=>a==="run"),r=e.downloads.map(a=>Ln(a,t,e.id));new Set(r.map(({
+id:a})=>a)).size!==r.length&&f(t,`Output target ${e.id} contains a duplicate Download id.`,e.line),e.mode==="finite"?((s.
+length>0||e.presentation||e.previewIdentity)&&f(t,`Finite output target ${e.id} cannot have Run, Presentation, or Previe\
+w identity entries.`,e.line),r.length===0&&f(t,`Finite output target ${e.id} needs at least one Download.`,e.line)):s.length!==
+1||e.steps.at(-1).role!=="run"?f(t,`Interactive output target ${e.id} needs exactly one final Run step.`,e.line):e.presentation||
+f(t,`Interactive output target ${e.id} needs one Presentation.`,e.line);let i=e.presentation?Wn(e.presentation,t,e.id):null,
+o=e.steps.flatMap(({argv:a})=>a.flatMap(m=>[...m.matchAll(Oe)].map(d=>d[1])));o.some(a=>["host","port"].includes(a))&&i?.
 kind!=="web"&&f(t,"Only a web output target may use {host} or {port} placeholders.",e.line);let c=e.parameters.map(({seen:a,
-...m})=>m),u=new Set(c.map(({id:a})=>a));(c.length>16||u.size!==c.length)&&f(t,`Output target ${e.id} may declare at mos\
-t 16 parameters with unique ids.`,e.line);for(let a of o.filter(m=>m.startsWith("parameter:"))){let m=a.slice(10);u.has(
+...m})=>m),u=new Set(c.map(({id:a})=>a));(c.length>tt||u.size!==c.length)&&f(t,`Output target ${e.id} may declare at mos\
+t ${tt} parameters with unique ids.`,e.line);for(let a of o.filter(m=>m.startsWith("parameter:"))){let m=a.slice(10);u.has(
 m)||f(t,`Undeclared output parameter: ${m}.`,e.line)}for(let a of c)o.includes(`parameter:${a.id}`)||f(t,`Output paramet\
 er ${a.id} must be used in a step command.`,e.line);return e.previewIdentity&&i?.kind!=="web"&&f(t,"Only a web output ta\
 rget may declare Preview identity.",e.line),{id:e.id,label:e.label,default:e.default,mode:e.mode,workdir:e.workdir,runtimeRequirements:e.
 runtimeRequirements,...e.dataMode?{dataMode:e.dataMode}:{},steps:e.steps,presentation:i,downloads:r,...c.length?{parameters:c}:
-{},...e.previewIdentity?{previewIdentity:Sn(e.previewIdentity,t,e.id)}:{}}}function se(e,{path:t="genesis/stack.md#Outpu\
-ts"}={}){if(Array.isArray(e)||f(t,"Outputs must be supplied as exact Stack section lines."),b(e))return{version:1,targets:[]};
-let n=[],s=null,r="target",i=null;for(let c=0;c<e.length;c+=1){let u=e[c].trim();if(!u)continue;let a=c+1,m=u.match(Jt);
-if(m){s&&n.push(Ke(s,t)),s=cn(m,t,a),r="target",i=null;continue}s||f(t,"## Outputs must begin with a Target heading.",a);
-let l=u.match(Xt);if(l){let h={id:ge(l[1],t,"Parameter id",a),label:O(l[2],w,t,"Parameter label",a),default:"",description:"",
+{},...e.previewIdentity?{previewIdentity:Gn(e.previewIdentity,t,e.id)}:{}}}function ce(e,{path:t="genesis/stack.md#Outpu\
+ts"}={}){if(Array.isArray(e)||f(t,"Outputs must be supplied as exact Stack section lines."),y(e))return{version:1,targets:[]};
+let n=[],s=null,r="target",i=null;for(let c=0;c<e.length;c+=1){let u=e[c].trim();if(!u)continue;let a=c+1,m=u.match(wn);
+if(m){s&&n.push(st(s,t)),s=kn(m,t,a),r="target",i=null;continue}s||f(t,"## Outputs must begin with a Target heading.",a);
+let d=u.match(vn);if(d){let h={id:Re(d[1],t,"Parameter id",a),label:R(d[2],b,t,"Parameter label",a),default:"",description:"",
 required:!1,seen:new Set};s.parameters.push(h),r="parameter",i=h;continue}if(u==="#### Presentation"){s.presentation&&f(
-t,"Presentation must appear at most once below an output target.",a),s.presentation=ln(a),r="presentation",i=s.presentation;
+t,"Presentation must appear at most once below an output target.",a),s.presentation=Cn(a),r="presentation",i=s.presentation;
 continue}if(u==="#### Preview identity"){s.previewIdentity&&f(t,"Preview identity must appear at most once below an outp\
-ut target.",a),s.previewIdentity=En(a),r="previewIdentity",i=s.previewIdentity;continue}let d=u.match(Qt);if(d){let h=dn(
-d,t,a);s.downloads.push(h),r="download",i=h;continue}r==="parameter"?un(i,u,t,a):r==="presentation"?hn(i,u,t,a):r==="pre\
-viewIdentity"?vn(i,u,t,a):r==="download"?bn(i,u,t,a):fn(s,u,t,a)}s&&n.push(Ke(s,t)),n.length===0&&f(t,"## Outputs needs \
+ut target.",a),s.previewIdentity=Un(a),r="previewIdentity",i=s.previewIdentity;continue}let p=u.match(Tn);if(p){let h=Dn(
+p,t,a);s.downloads.push(h),r="download",i=h;continue}r==="parameter"?An(i,u,t,a):r==="presentation"?Pn(i,u,t,a):r==="pre\
+viewIdentity"?Bn(i,u,t,a):r==="download"?jn(i,u,t,a):xn(s,u,t,a)}s&&n.push(st(s,t)),n.length===0&&f(t,"## Outputs needs \
 at least one Target or exactly `- Nothing.`.");let o=n.map(({id:c})=>c);return new Set(o).size!==o.length&&f(t,"Outputs \
 contains a duplicate target id."),n.filter(({default:c})=>c).length>1&&f(t,"Outputs may declare at most one default targ\
-et."),{version:1,targets:n}}function Je({environment:e={},section:t={}}={}){G(t,e,"Outputs section");let n=[...t.diagnostics||
-[]],s=[...e.diagnostics||[]],r={version:1,targets:[]};t.status==="ready"&&(r=se(t.lines));let i=s.length===0?null:s.map(
+et."),{version:1,targets:n}}function lt({environment:e={},section:t={}}={}){B(t,e,"Outputs section");let n=[...t.diagnostics||
+[]],s=[...e.diagnostics||[]],r={version:1,targets:[]};t.status==="ready"&&(r=ce(t.lines));let i=s.length===0?null:s.map(
 ({message:a})=>a).join(" "),o=r.targets.map(a=>({...a,source:t.source||null,available:n.length===0&&s.length===0,disabledReason:i})),
-c=[...n,...s],u="ready";return c.length>0?u="blocked":o.length===0&&(u="unconfigured"),{contract:Fe,status:u,stackHash:t.
-stackHash,components:[...t.components||[]],environmentDefaults:structuredClone(e.environmentDefaults||[]),runtimeRequirements:B(
-o.flatMap(a=>a.runtimeRequirements)),resources:structuredClone(e.resources||[]),targets:o,diagnostics:c}}var Xe="Project services",In="vibe64.project-services.v1",L="VIBE64_PROJECT_SERVICES_INVALID",U="genesis/stack.md#Projec\
-t services";function Qe(e){if(Array.isArray(e)||p(L,U,"Expected exact Project services section lines."),b(e))return[];let t=[];
-for(let[n,s]of e.entries()){let r=s.trim();if(!r)continue;let i=n+1,o=r.match(/^- Start `([a-z][a-z0-9-]{0,63})`( per session)? with (.+?): (.+)$/u);
-o||p(L,U,"Use: - Start `service-id` [per session] with `runtime` [in `workdir`]: `command` `argument`...",i),t.some(({id:u})=>u===
-o[1])&&p(L,U,"Duplicate project service id.",i);let c=o[3].match(/^(.*?) in `([^`\r\n]+)`$/u);t.push({id:o[1],...o[2]?{scope:"\
-session"}:{},runtimeRequirements:R(c?c[1]:o[3],L,U,"Service runtimes",i),workdir:g(c?.[2]||".",L,U,"Service workdir",i),
-argv:_(o[4],L,U,"Service command",i)})}return t.length||p(L,U,"Declare a service or exactly `- Nothing.`."),t}function Ze(e={}){
-let t=e.status==="ready"?Qe(e.lines):[];return{contract:In,status:e.status==="blocked"?"blocked":t.length?"ready":"uncon\
-figured",services:t,recipeHash:t.length?T(t):"",diagnostics:e.diagnostics||[]}}var tt="vibe64.resource-estimates.v1",re="Resource estimates",nt="VIBE64_RESOURCE_ESTIMATES_INVALID",kn=1024*1024,et=1024*
-1024,On=new Map([["Startup typical MiB","startupTypical"],["Startup high MiB","startupHigh"],["Running typical MiB","run\
-ningTypical"],["Running high MiB","runningHigh"],["Typical MiB","typical"],["High MiB","high"]]);function x(e,t,n){p(nt,
-e,t,n)}function ye(e,t,n,s,r){let i=e.get(t),o=e.get(n);return(i===void 0||o===void 0||i>o)&&x(s,"Each resource phase re\
-quires typical and high estimates, with typical no greater than high.",r),{typicalBytes:i,highBytes:o}}function st(e,{path:t="\
+c=[...n,...s],u="ready";return c.length>0?u="blocked":o.length===0&&(u="unconfigured"),{contract:rt,status:u,stackHash:t.
+stackHash,components:[...t.components||[]],environmentDefaults:structuredClone(e.environmentDefaults||[]),runtimeRequirements:j(
+o.flatMap(a=>a.runtimeRequirements)),resources:structuredClone(e.resources||[]),targets:o,diagnostics:c}}var dt="Project services",Hn="vibe64.project-services.v1",G="VIBE64_PROJECT_SERVICES_INVALID",W="genesis/stack.md#Projec\
+t services",qn="- Start `service-id` [per session] with `runtime` [in `workdir`]: `command` `argument`...";function mt(e){
+if(Array.isArray(e)||l(G,W,"Expected exact Project services section lines."),y(e))return[];let t=[];for(let[n,s]of e.entries()){
+let r=s.trim();if(!r)continue;let i=n+1,o=r.match(/^- Start `([a-z][a-z0-9-]{0,63})`( per session)? with (.+?): (.+)$/u);
+o||l(G,W,`Use: ${qn}`,i),t.some(({id:u})=>u===o[1])&&l(G,W,"Duplicate project service id.",i);let c=o[3].match(/^(.*?) in `([^`\r\n]+)`$/u);
+t.push({id:o[1],...o[2]?{scope:"session"}:{},runtimeRequirements:A(c?c[1]:o[3],G,W,"Service runtimes",i),workdir:g(c?.[2]||
+".",G,W,"Service workdir",i),argv:k(o[4],G,W,"Service command",i)})}return t.length||l(G,W,"Declare a service or exactly\
+ `- Nothing.`."),t}function ft(e={}){let t=e.status==="ready"?mt(e.lines):[];return{contract:Hn,status:e.status==="block\
+ed"?"blocked":t.length?"ready":"unconfigured",services:t,recipeHash:t.length?I(t):"",diagnostics:e.diagnostics||[]}}var Et="vibe64.resource-estimates.v1",ue="Resource estimates",yt="VIBE64_RESOURCE_ESTIMATES_INVALID",zn=1024*1024,ht=1024*
+1024,gt=new Map([["Startup typical MiB","startupTypical"],["Startup high MiB","startupHigh"],["Running typical MiB","run\
+ningTypical"],["Running high MiB","runningHigh"],["Typical MiB","typical"],["High MiB","high"]]);function V(e,t,n){l(yt,
+e,t,n)}function ke(e,t,n,s,r){let i=e.get(t),o=e.get(n);return(i===void 0||o===void 0||i>o)&&V(s,"Each resource phase re\
+quires typical and high estimates, with typical no greater than high.",r),{typicalBytes:i,highBytes:o}}function bt(e,{path:t="\
 genesis/stack.md#Resource estimates",targets:n=[],hasWorkspaceSetup:s=!1}={}){(!Array.isArray(e)||e.length>2048||e.some(
 a=>typeof a!="string")||Buffer.byteLength(e.join(`
-`),"utf8")>64*1024)&&x(t,"Resource estimates must be exact Stack section lines within 64 KiB and 2048 lines.");let r={version:1,
-outputs:[],workspaceSetup:null};if(b(e))return r;let i=new Map(n.map(a=>[a.id,a])),o=new Set,c=null;function u(){if(!c)return;
-let{targetId:a,mode:m,fields:l,line:d}=c;if(m==="interactive"){(l.has("typical")||l.has("high"))&&x(t,"Interactive outpu\
-ts require separate Startup and Running estimates.",d),r.outputs.push({targetId:a,mode:m,startup:ye(l,"startupTypical","\
-startupHigh",t,d),running:ye(l,"runningTypical","runningHigh",t,d)});return}(l.size!==2||!l.has("typical")||!l.has("high"))&&
-x(t,"Finite outputs and Workspace setup require only Typical MiB and High MiB.",d);let h=ye(l,"typical","high",t,d);a?r.
-outputs.push({targetId:a,mode:m,execution:h}):r.workspaceSetup=h}for(let a=0;a<e.length;a+=1){let m=e[a].trim(),l=a+1;if(!m)
-continue;let d=m.match(/^### Output `([a-z0-9]+(?:-[a-z0-9]+)*)`$/u);if(d||m==="### Workspace setup"){u();let k=d?.[1]||
-"",J=k?`output:${k}`:"workspace-setup";o.has(J)&&x(t,"Resource estimates contains a duplicate operation.",l),o.add(J);let z=i.
-get(k);k&&!["interactive","finite"].includes(z?.mode)&&x(t,`Resource estimate references an undeclared output: ${k}.`,l),
-!k&&!s&&x(t,"Resource estimate references undeclared Workspace setup steps.",l),c={targetId:k,mode:z?.mode||"setup",fields:new Map,
-line:l};continue}let h=m.match(/^- ([A-Za-z ]+): `([1-9][0-9]*)`$/u),y=h&&On.get(h[1]);(!c||!y)&&x(t,"Expected an Output\
- or Workspace setup heading followed by positive integer MiB estimates.",l),c.fields.has(y)&&x(t,`Duplicate resource fie\
-ld: ${h[1]}.`,l);let q=Number(h[2]);(!Number.isSafeInteger(q)||q>et)&&x(t,`Resource estimates must be between 1 and ${et}\
- MiB.`,l),c.fields.set(y,q*kn)}return u(),o.size===0&&x(t,"Resource estimates needs an operation or exactly `- Nothing.`\
-."),r}function ie({section:e={},outputsSection:t={},workspaceSetupSection:n={}}={}){G(e,t,"Resource estimates and Output\
-s"),G(e,n,"Resource estimates and Workspace setup");let s=[...e.diagnostics||[]],r={version:1,outputs:[],workspaceSetup:null};
-if(e.status==="ready"&&s.length===0)try{r=st(e.lines,{targets:t.status==="ready"?se(t.lines).targets:[],hasWorkspaceSetup:n.
-status==="ready"&&F(n.lines).length>0})}catch(o){if(o?.name!=="Vibe64StackOperationError")throw o;s.push({code:nt,message:o.
-message,details:{...o.details,causeCode:o.code}})}let i=s.length>0?"invalid":r.outputs.length>0||r.workspaceSetup?"ready":
-"unconfigured";return{contract:tt,status:i,stackHash:e.stackHash,sectionHash:e.sectionHash||"",estimatesHash:i==="ready"?
-T(r):"",source:e.source||null,outputs:r.outputs,workspaceSetup:r.workspaceSetup,fallbackReason:i==="invalid"?"invalid-es\
-timates":i==="unconfigured"?"not-declared":null,diagnostics:s}}var rt="vibe64.integration-setup.v1",it="Integration setup",Q="VIBE64_INTEGRATION_SETUP_INVALID";function ot(e,{path:t="\
-genesis/stack.md#Integration setup"}={}){if(Array.isArray(e)||p(Q,t,"Integration setup requires exact Stack section line\
-s."),b(e))return null;let n=e.map(r=>r.trim()).filter(Boolean),s=n.length===1&&n[0].match(/^- Command with (.+?) in `([^`\r\n]+)`: (.+)$/u);
-return s||p(Q,t,"Integration setup requires exactly one entry: - Command with `runtime` in `workdir`: `command` `argumen\
-t`...; or - Nothing."),{argv:_(s[3],Q,t,"Integration setup command"),workdir:g(s[2],Q,t,"Integration setup workdir"),runtimeRequirements:R(
-s[1],Q,t,"Integration setup runtimes")}}function at({section:e={}}={}){let t=[...e.diagnostics||[]],n=e.status==="ready"&&
-t.length===0?ot(e.lines):null;return{contract:rt,status:t.length?"blocked":n?"ready":"unconfigured",stackHash:e.stackHash,
-recipeHash:n?T({version:1,command:n}):"",source:e.source||null,components:[...e.components||[]],command:n,diagnostics:t}}var _n=new URL("./index.js",import.meta.url).href,ut=An(_n),oe=new Map;async function Cn(e){if(!j.isAbsolute(e||""))throw new TypeError(
-"Genesis host context requires an absolute runtime root.");let t=j.join(e,"genesis-context");if(!oe.has(t)){let n=$e(t).
-catch(s=>{throw oe.delete(t),s});oe.set(t,n)}return oe.get(t)}async function pr(e){let t=await Cn(e);return{[Dn]:as(),[Nn]:JSON.
-stringify({registryPath:t.registryPath}),GENESIS_TURN_CONTEXT_ENABLED:"0"}}var{GENESIS_CONTRACTS:I,HOST_CONTEXT_RESOLVER_DATA_ENV:Nn,
-HOST_CONTEXT_RESOLVER_ENV:Dn,addStack:xn,applyTemplate:Vn,generatePrompt:be,indexCodebase:Pn,initialize:jn,inspectCollaboration:Bn,
-inspectDerivedArtifacts:Mn,inspectEngineering:$n,inspectEnvironment:Ee,inspectProject:Gn,inspectProjectFormat:Ln,inspectAgentIntegrations:Un,
-inspectSkills:Wn,inspectStackSection:Hn,inspectStackSections:qn,inspectSubsystems:zn,listTemplates:Kn,parserEnvironment:Fn,
-setCollaboration:Yn,setEngineeringProfile:Jn,syncAgentIntegrations:Xn,syncSkills:Qn,withTrustedGitRepository:Zn,SOURCE_EXPLANATION_PROMPT_VERSION:lr,
-sourceExplanationGuidance:dr,sourceExplanationReviewGuidance:mr,validateArchitectureFacts:fr,validateArchitectureObservations:hr,
-mergeArchitectureObservations:gr}=we,yr="genesis/blueprint.md",es=!1,ts=Object.freeze(["vue",...es?[]:["jskit-postgresql",
-"postgresql"]]),ns=Object.freeze(["genesis-stack"]),ss=new Set(["adopt","blueprint","describe","deslop","program","revie\
-w","start","work"]);function W(e=""){return String(e||"").trim()}function pt(e,{required:t=!1}={}){let n=W(e);if(!n&&!t)
-return"";if(!ss.has(n))throw new TypeError(n?`Unknown Genesis prompt task: ${n}.`:"Genesis prompt actions require an exp\
-licit task.");return n}function rs(e={}){return pt(e.genesisTask)||"work"}function is(e={},t={}){return[e.conversationRequest,
-e.feedback,e.request,e.plan,e.description,t.label].map(W).find(Boolean)||"Continue the requested project work."}function br(e={}){
-return Fn(e)}function os(){let e=(ut.resolve.paths("genesis-compiler")||[]).find(t=>ct(j.join(t,"genesis-compiler"))&&ct(
-j.join(t,".bin","genesis")));if(!e)throw new Error("The installed Genesis compiler executable could not be located.");return j.
-join(e,".bin")}function lt(){let e=ut.resolve("@local/vibe64-genesis/server");return j.resolve(j.dirname(e),"../../bin")}
-function as(){return j.resolve(lt(),"vibe64-genesis-host-context")}function wr(e=[]){let t=lt(),n=os();return[...(Array.
-isArray(e)?e:[]).filter(r=>![t,n].includes(W(r))),t]}function cs(e={},{prompt:t=!1}={}){return{...e,...t?{hiddenStackPieces:ts}:
-{},stackPackages:ns}}function Er(e={}){return S(xn,e)}function vr(e={}){return S(jn,e)}function Sr(e={}){return S(Wn,e)}
-function Tr(e={}){return S(Qn,e)}function Ir(e={}){return S(Xn,e)}function kr(e={}){return S(Un,e)}function Or(e={}){return S(
-zn,e)}async function _r(e={}){return Ne(await H(Ce,e))}async function Rr(e={}){return xe(await H(De,e))}function Ar(e={}){
-return S(Pn,e)}function us(){let e=Mn();if(e?.contract!==I.derivedArtifacts)throw new Error(`Genesis returned ${e?.contract||
-"no contract identity"}; expected ${I.derivedArtifacts}.`);let t=Array.isArray(e.artifacts)?e.artifacts:[];if(!t.length||
-t.some(n=>!W(n?.path)))throw new Error("Genesis returned an invalid derived-artifact contract.");return{...e,artifacts:t.
-map(n=>({...n}))}}var dt=us(),Cr=Object.freeze(dt.artifacts.map(e=>e.path)),mt=new Map(dt.artifacts.map(e=>[e.id,e])),ps=mt.
-get("machine-city")?.path,ls=mt.get("program-city")?.path;if(!ps||!ls)throw new Error("Genesis did not declare both City\
- projection artifacts.");async function S(e,t={},n={}){let s=W(t.projectRoot);if(!s||!j.isAbsolute(s))throw new TypeError(
-"Genesis operations require an explicit absolute projectRoot.");return Zn(s,()=>e(cs(t,n)))}async function Nr({workdir:e,
-promptContext:t}){let n=Y(t);return t.scope==="ephemeral"?n:(await S(we.projectSessionContext,{projectRoot:e,hostDriver:Y,
-hostDriverInput:t})).output}async function V(e,t,n={}){let s=await S(e,n);if(s?.contract!==t)throw new Error(`Genesis re\
-turned ${s?.contract||"no contract identity"}; expected ${t}.`);return s}function H(e,t={}){return V(n=>Hn({...n,name:e}),
-I.stackSection,t)}async function ve(e,t={}){let n=await S(s=>qn({...s,names:e}),t);if(!Array.isArray(n)||n.length!==e.length||
-n.some((s,r)=>s?.contract!==I.stackSection||s.name!==e[r]))throw new Error("Genesis returned an invalid Stack section in\
-spection batch.");return n}async function Dr(e={}){if((await ds(e)).status!=="current")throw Object.assign(new Error("Th\
-e project needs a current Genesis format before its Stack can be inspected."),{code:"vibe64_stack_format_required"});await Rn(
-j.join(e.projectRoot,"genesis/stack.md"),"utf8");let n=await H(X,e);return{components:n.components,stackHash:n.stackHash}}
-async function xr(e={}){let[t,n]=await Promise.all([H(Ue,e),V(Ee,I.environment,e)]);return qe({environment:n,section:t})}
-function Vr(e={}){return V(Ee,I.environment,e)}function Pr(e={}){return V(Gn,I.projectInspection,e)}function jr(e={}){return V(
-Kn,I.templates,e)}function Br(e={}){return V(Vn,I.templateApplication,e)}function Mr(e={}){return V($n,I.engineering,e)}
-function $r(e={}){return V(Bn,I.collaboration,e)}async function ds(e={}){let t=await S(Ln,e);if(!W(t?.status))throw new Error(
-"Genesis did not return a project-format status.");return{...t}}function Gr(e={}){return V(Jn,I.engineering,e)}function Lr(e={}){
-return V(Yn,I.collaboration,e)}async function Ur(e={}){let[[t,n,s],r]=await Promise.all([ve([ne,re,X],e),V(Ee,I.environment,
-e)]);return{...Je({environment:r,section:t}),resourceEstimates:ie({section:n,outputsSection:t,workspaceSetupSection:s})}}
-async function Wr(e={}){let t=await H(it,e);return at({section:t})}async function Hr(e={}){return Ae(await H(Re,e))}async function qr(e={}){
-return Ze(await H(Xe,e))}async function zr(e={}){let[t,n,s]=await ve([X,re,ne],e);return{...await Ie({projectRoot:e.projectRoot,
-section:t}),resourceEstimates:ie({section:n,outputsSection:s,workspaceSetupSection:t})}}async function Kr(e={}){let[t,n,
-s]=await ve([re,ne,X],e);return ie({section:t,outputsSection:n,workspaceSetupSection:s})}async function Fr({action:e={},
-environment:t=process.env,input:n={},projectRoot:s}={}){let r=rs(e),i=is(n,e),o=r,c;try{c=await S(be,{environment:t,projectRoot:s,
+`),"utf8")>64*1024)&&V(t,"Resource estimates must be exact Stack section lines within 64 KiB and 2048 lines.");let r={version:1,
+outputs:[],workspaceSetup:null};if(y(e))return r;let i=new Map(n.map(a=>[a.id,a])),o=new Set,c=null;function u(){if(!c)return;
+let{targetId:a,mode:m,fields:d,line:p}=c;if(m==="interactive"){(d.has("typical")||d.has("high"))&&V(t,"Interactive outpu\
+ts require separate Startup and Running estimates.",p),r.outputs.push({targetId:a,mode:m,startup:ke(d,"startupTypical","\
+startupHigh",t,p),running:ke(d,"runningTypical","runningHigh",t,p)});return}(d.size!==2||!d.has("typical")||!d.has("high"))&&
+V(t,"Finite outputs and Workspace setup require only Typical MiB and High MiB.",p);let h=ke(d,"typical","high",t,p);a?r.
+outputs.push({targetId:a,mode:m,execution:h}):r.workspaceSetup=h}for(let a=0;a<e.length;a+=1){let m=e[a].trim(),d=a+1;if(!m)
+continue;let p=m.match(/^### Output `([a-z0-9]+(?:-[a-z0-9]+)*)`$/u);if(p||m==="### Workspace setup"){u();let w=p?.[1]||
+"",X=w?`output:${w}`:"workspace-setup";o.has(X)&&V(t,"Resource estimates contains a duplicate operation.",d),o.add(X);let K=i.
+get(w);w&&!["interactive","finite"].includes(K?.mode)&&V(t,`Resource estimate references an undeclared output: ${w}.`,d),
+!w&&!s&&V(t,"Resource estimate references undeclared Workspace setup steps.",d),c={targetId:w,mode:K?.mode||"setup",fields:new Map,
+line:d};continue}let h=m.match(/^- ([A-Za-z ]+): `([1-9][0-9]*)`$/u),E=h&&gt.get(h[1]);(!c||!E)&&V(t,`Expected an Output\
+ or Workspace setup heading followed by positive integer MiB estimates: ${[...gt.keys()].map(w=>`- ${w}: \`number\``).join(
+"; ")}.`,d),c.fields.has(E)&&V(t,`Duplicate resource field: ${h[1]}.`,d);let z=Number(h[2]);(!Number.isSafeInteger(z)||z>
+ht)&&V(t,`Resource estimates must be between 1 and ${ht} MiB.`,d),c.fields.set(E,z*zn)}return u(),o.size===0&&V(t,"Resou\
+rce estimates needs an operation or exactly `- Nothing.`."),r}function pe({section:e={},outputsSection:t={},workspaceSetupSection:n={}}={}){
+B(e,t,"Resource estimates and Outputs"),B(e,n,"Resource estimates and Workspace setup");let s=[...e.diagnostics||[]],r={
+version:1,outputs:[],workspaceSetup:null};if(e.status==="ready"&&s.length===0)try{r=bt(e.lines,{targets:t.status==="read\
+y"?ce(t.lines).targets:[],hasWorkspaceSetup:n.status==="ready"&&Y(n.lines).length>0})}catch(o){if(o?.name!=="Vibe64Stack\
+OperationError")throw o;s.push({code:yt,message:o.message,details:{...o.details,causeCode:o.code}})}let i=s.length>0?"in\
+valid":r.outputs.length>0||r.workspaceSetup?"ready":"unconfigured";return{contract:Et,status:i,stackHash:e.stackHash,sectionHash:e.
+sectionHash||"",estimatesHash:i==="ready"?I(r):"",source:e.source||null,outputs:r.outputs,workspaceSetup:r.workspaceSetup,
+fallbackReason:i==="invalid"?"invalid-estimates":i==="unconfigured"?"not-declared":null,diagnostics:s}}var wt="vibe64.integration-setup.v1",vt="Integration setup",ee="VIBE64_INTEGRATION_SETUP_INVALID",Kn="- Command with `ru\
+ntime` in `workdir`: `command` `argument`...";function Tt(e,{path:t="genesis/stack.md#Integration setup"}={}){if(Array.isArray(
+e)||l(ee,t,"Integration setup requires exact Stack section lines."),y(e))return null;let n=e.map(r=>r.trim()).filter(Boolean),
+s=n.length===1&&n[0].match(/^- Command with (.+?) in `([^`\r\n]+)`: (.+)$/u);return s||l(ee,t,`Integration setup require\
+s exactly one entry: ${Kn}; or - Nothing.`),{argv:k(s[3],ee,t,"Integration setup command"),workdir:g(s[2],ee,t,"Integrat\
+ion setup workdir"),runtimeRequirements:A(s[1],ee,t,"Integration setup runtimes")}}function St({section:e={}}={}){let t=[
+...e.diagnostics||[]],n=e.status==="ready"&&t.length===0?Tt(e.lines):null;return{contract:wt,status:t.length?"blocked":n?
+"ready":"unconfigured",stackHash:e.stackHash,recipeHash:n?I({version:1,command:n}):"",source:e.source||null,components:[
+...e.components||[]],command:n,diagnostics:t}}var Fn=new URL("./index.js",import.meta.url).href,Ot=Jn(Fn),le=new Map;async function Xn(e){if(!M.isAbsolute(e||""))throw new TypeError(
+"Genesis host context requires an absolute runtime root.");let t=M.join(e,"genesis-context");if(!le.has(t)){let n=Je(t).
+catch(s=>{throw le.delete(t),s});le.set(t,n)}return le.get(t)}async function Cr(e){let t=await Xn(e);return{[Zn]:ks(),[Qn]:JSON.
+stringify({registryPath:t.registryPath}),GENESIS_TURN_CONTEXT_ENABLED:"0"}}var{GENESIS_CONTRACTS:_,HOST_CONTEXT_RESOLVER_DATA_ENV:Qn,
+HOST_CONTEXT_RESOLVER_ENV:Zn,addStack:es,applyTemplate:ts,generatePrompt:Ae,indexCodebase:ns,initialize:ss,inspectCollaboration:rs,
+inspectDerivedArtifacts:is,inspectEngineering:os,inspectEnvironment:Ce,inspectProject:as,inspectProjectFormat:cs,inspectAgentIntegrations:us,
+inspectSkills:ps,inspectStackSection:ls,inspectStackSections:ds,inspectSubsystems:ms,listTemplates:fs,parserEnvironment:hs,
+setCollaboration:gs,setEngineeringProfile:Es,syncAgentIntegrations:ys,syncSkills:bs,withTrustedGitRepository:ws,SOURCE_EXPLANATION_PROMPT_VERSION:Dr,
+sourceExplanationGuidance:Vr,sourceExplanationReviewGuidance:xr,validateArchitectureFacts:Pr,validateArchitectureObservations:$r,
+mergeArchitectureObservations:Mr}=Ne,jr="genesis/blueprint.md",vs=!1,Ts=Object.freeze(["vue",...vs?[]:["jskit-postgresql",
+"postgresql"]]),Ss=Object.freeze(["genesis-stack"]),Is=new Set(["adopt","blueprint","describe","deslop","program","revie\
+w","start","work"]);function H(e=""){return String(e||"").trim()}function _t(e,{required:t=!1}={}){let n=H(e);if(!n&&!t)
+return"";if(!Is.has(n))throw new TypeError(n?`Unknown Genesis prompt task: ${n}.`:"Genesis prompt actions require an exp\
+licit task.");return n}function Os(e={}){return _t(e.genesisTask)||"work"}function _s(e={},t={}){return[e.conversationRequest,
+e.feedback,e.request,e.plan,e.description,t.label].map(H).find(Boolean)||"Continue the requested project work."}function Lr(e={}){
+return hs(e)}function Rs(){let e=(Ot.resolve.paths("genesis-compiler")||[]).find(t=>It(M.join(t,"genesis-compiler"))&&It(
+M.join(t,".bin","genesis")));if(!e)throw new Error("The installed Genesis compiler executable could not be located.");return M.
+join(e,".bin")}function Rt(){let e=Ot.resolve("@local/vibe64-genesis/server");return M.resolve(M.dirname(e),"../../bin")}
+function ks(){return M.resolve(Rt(),"vibe64-genesis-host-context")}function Ur(e=[]){let t=Rt(),n=Rs();return[...(Array.
+isArray(e)?e:[]).filter(r=>![t,n].includes(H(r))),t]}function As(e={},{prompt:t=!1}={}){return{...e,...t?{hiddenStackPieces:Ts}:
+{},stackPackages:Ss}}function Br(e={}){return S(es,e)}function Gr(e={}){return S(ss,e)}function Wr(e={}){return S(ps,e)}
+function Hr(e={}){return S(bs,e)}function qr(e={}){return S(ys,e)}function zr(e={}){return S(us,e)}function Kr(e={}){return S(
+ms,e)}async function Fr(e={}){return Ge(await q(Be,e))}async function Yr(e={}){return He(await q(We,e))}function Jr(e={}){
+return S(ns,e)}function Ns(){let e=is();if(e?.contract!==_.derivedArtifacts)throw new Error(`Genesis returned ${e?.contract||
+"no contract identity"}; expected ${_.derivedArtifacts}.`);let t=Array.isArray(e.artifacts)?e.artifacts:[];if(!t.length||
+t.some(n=>!H(n?.path)))throw new Error("Genesis returned an invalid derived-artifact contract.");return{...e,artifacts:t.
+map(n=>({...n}))}}var kt=Ns(),Xr=Object.freeze(kt.artifacts.map(e=>e.path)),At=new Map(kt.artifacts.map(e=>[e.id,e])),Cs=At.
+get("machine-city")?.path,Ds=At.get("program-city")?.path;if(!Cs||!Ds)throw new Error("Genesis did not declare both City\
+ projection artifacts.");async function S(e,t={},n={}){let s=H(t.projectRoot);if(!s||!M.isAbsolute(s))throw new TypeError(
+"Genesis operations require an explicit absolute projectRoot.");return ws(s,()=>e(As(t,n)))}async function Qr({workdir:e,
+promptContext:t}){let n=J(t);return t.scope==="ephemeral"?n:(await S(Ne.projectSessionContext,{projectRoot:e,hostDriver:J,
+hostDriverInput:t})).output}async function x(e,t,n={}){let s=await S(e,n);if(s?.contract!==t)throw new Error(`Genesis re\
+turned ${s?.contract||"no contract identity"}; expected ${t}.`);return s}function q(e,t={}){return x(n=>ls({...n,name:e}),
+_.stackSection,t)}async function De(e,t={}){let n=await S(s=>ds({...s,names:e}),t);if(!Array.isArray(n)||n.length!==e.length||
+n.some((s,r)=>s?.contract!==_.stackSection||s.name!==e[r]))throw new Error("Genesis returned an invalid Stack section in\
+spection batch.");return n}async function Zr(e={}){if((await Vs(e)).status!=="current")throw Object.assign(new Error("Th\
+e project needs a current Genesis format before its Stack can be inspected."),{code:"vibe64_stack_format_required"});await Yn(
+M.join(e.projectRoot,"genesis/stack.md"),"utf8");let n=await q(Q,e);return{components:n.components,stackHash:n.stackHash}}
+async function ei(e={}){let[t,n]=await Promise.all([q(Qe,e),x(Ce,_.environment,e)]);return et({environment:n,section:t})}
+function ti(e={}){return x(Ce,_.environment,e)}function ni(e={}){return x(as,_.projectInspection,e)}function si(e={}){return x(
+fs,_.templates,e)}function ri(e={}){return x(ts,_.templateApplication,e)}function ii(e={}){return x(os,_.engineering,e)}
+function oi(e={}){return x(rs,_.collaboration,e)}async function Vs(e={}){let t=await S(cs,e);if(!H(t?.status))throw new Error(
+"Genesis did not return a project-format status.");return{...t}}function ai(e={}){return x(Es,_.engineering,e)}function ci(e={}){
+return x(gs,_.collaboration,e)}async function ui(e={}){let[[t,n,s],r]=await Promise.all([De([ae,ue,Q],e),x(Ce,_.environment,
+e)]);return{...lt({environment:r,section:t}),resourceEstimates:pe({section:n,outputsSection:t,workspaceSetupSection:s})}}
+async function pi(e={}){let t=await q(vt,e);return St({section:t})}async function li(e={}){return Ue(await q(Le,e))}async function di(e={}){
+return ft(await q(dt,e))}async function mi(e={}){let[t,n,s]=await De([Q,ue,ae],e);return{...await Pe({projectRoot:e.projectRoot,
+section:t}),resourceEstimates:pe({section:n,outputsSection:s,workspaceSetupSection:t})}}async function fi(e={}){let[t,n,
+s]=await De([ue,ae,Q],e);return pe({section:t,outputsSection:n,workspaceSetupSection:s})}async function hi({action:e={},
+environment:t=process.env,input:n={},projectRoot:s}={}){let r=Os(e),i=_s(n,e),o=r,c;try{c=await S(Ae,{environment:t,projectRoot:s,
 request:i,sessionContextInstalled:!0,task:o},{prompt:!0})}catch(a){if(a?.code==="BLUEPRINT_INVALID"&&r!=="blueprint")o="\
-blueprint",c=await S(be,{environment:t,projectRoot:s,request:i,sessionContextInstalled:!0,task:o},{prompt:!0});else if(a?.
-code==="BLUEPRINT_REQUIRED"&&r!=="start")o="start",c=await S(be,{environment:t,projectRoot:s,request:i,sessionContextInstalled:!0,
-task:o},{prompt:!0});else throw a}let u=pt(c.task)||o;return{context:{genesis:!0,requestedTask:r,task:u,verificationCommands:c.
-verificationCommands,warnings:c.warnings},originalPrompt:i,prompt:c.prompt,promptId:W(e.promptId||e.id)||u}}export{yr as GENESIS_BLUEPRINT_PATH,Cr as GENESIS_DERIVED_ARTIFACT_PATHS,ps as GENESIS_MACHINE_CITY_PATH,ls as GENESIS_PROGRAM_CITY_PATH,
-Ve as GENESIS_STACK_CONTRACTS_INCOMPLETE,Pe as GENESIS_STACK_SECTION_AMBIGUOUS,Nn as HOST_CONTEXT_RESOLVER_DATA_ENV,Dn as HOST_CONTEXT_RESOLVER_ENV,
-lr as SOURCE_EXPLANATION_PROMPT_VERSION,Le as VIBE64_APPLICATION_DEPLOYMENT_CONTRACT,Ue as VIBE64_APPLICATION_DEPLOYMENT_SECTION,
-rt as VIBE64_INTEGRATION_SETUP_CONTRACT,it as VIBE64_INTEGRATION_SETUP_SECTION,Fe as VIBE64_OUTPUTS_CONTRACT,ne as VIBE64_OUTPUTS_SECTION,
-fe as VIBE64_PREVIEW_IDENTITY_COMMAND_PROTOCOL,tt as VIBE64_RESOURCE_ESTIMATES_CONTRACT,re as VIBE64_RESOURCE_ESTIMATES_SECTION,
-Te as VIBE64_WORKSPACE_SETUP_CONTRACT,X as VIBE64_WORKSPACE_SETUP_SECTION,Er as addGenesisStack,Br as applyGenesisTemplate,
-pt as assertGenesisPromptTask,lt as genesisCommandShimDirectory,os as genesisPackageBinDirectory,br as genesisParserEnvironment,
-Ct as genesisProjectContractNeedsAttention,is as genesisPromptRequest,rs as genesisPromptTask,vr as initializeGenesisProject,
-kr as inspectGenesisAgentIntegrations,$r as inspectGenesisCollaboration,us as inspectGenesisDerivedArtifacts,Mr as inspectGenesisEngineering,
-Vr as inspectGenesisEnvironment,Pr as inspectGenesisProject,ds as inspectGenesisProjectFormat,Sr as inspectGenesisSkills,
-Dr as inspectGenesisStackComponents,H as inspectGenesisStackSection,Or as inspectGenesisSubsystems,_r as inspectVibe64ArchitectureInspection,
-Rr as inspectVibe64ArchitectureLayout,Hr as inspectVibe64ConnectedDevelopment,xr as inspectVibe64Deployment,Wr as inspectVibe64IntegrationSetup,
-Ur as inspectVibe64Outputs,qr as inspectVibe64ProjectServices,Kr as inspectVibe64ResourceEstimates,zr as inspectVibe64WorkspaceSetup,
-jr as listGenesisTemplates,gr as mergeArchitectureObservations,He as parseVibe64DeploymentLines,ot as parseVibe64IntegrationSetupLines,
-se as parseVibe64OutputsLines,Qe as parseVibe64ProjectServicesLines,st as parseVibe64ResourceEstimatesLines,F as parseVibe64WorkspaceSetupLines,
-Ar as refreshGenesisCities,Fr as renderGenesisPrompt,pn as resolveVibe64OutputParameters,Lr as setGenesisCollaboration,Gr as setGenesisEngineeringProfile,
-dr as sourceExplanationGuidance,mr as sourceExplanationReviewGuidance,Ir as syncGenesisAgentIntegrations,Tr as syncGenesisSkills,
-fr as validateArchitectureFacts,hr as validateArchitectureObservations,Nr as vibe64ConversationInstructions,Y as vibe64Driver,
-pr as vibe64HostContextEnvironment,Cn as vibe64HostContextRegistry,as as vibe64HostContextResolverPath,wr as withGenesisCommandShim};
+blueprint",c=await S(Ae,{environment:t,projectRoot:s,request:i,sessionContextInstalled:!0,task:o},{prompt:!0});else if(a?.
+code==="BLUEPRINT_REQUIRED"&&r!=="start")o="start",c=await S(Ae,{environment:t,projectRoot:s,request:i,sessionContextInstalled:!0,
+task:o},{prompt:!0});else throw a}let u=_t(c.task)||o;return{context:{genesis:!0,requestedTask:r,task:u,verificationCommands:c.
+verificationCommands,warnings:c.warnings},originalPrompt:i,prompt:c.prompt,promptId:H(e.promptId||e.id)||u}}export{jr as GENESIS_BLUEPRINT_PATH,Xr as GENESIS_DERIVED_ARTIFACT_PATHS,Cs as GENESIS_MACHINE_CITY_PATH,Ds as GENESIS_PROGRAM_CITY_PATH,
+qe as GENESIS_STACK_CONTRACTS_INCOMPLETE,ze as GENESIS_STACK_SECTION_AMBIGUOUS,Qn as HOST_CONTEXT_RESOLVER_DATA_ENV,Zn as HOST_CONTEXT_RESOLVER_ENV,
+Dr as SOURCE_EXPLANATION_PROMPT_VERSION,Xe as VIBE64_APPLICATION_DEPLOYMENT_CONTRACT,Qe as VIBE64_APPLICATION_DEPLOYMENT_SECTION,
+wt as VIBE64_INTEGRATION_SETUP_CONTRACT,vt as VIBE64_INTEGRATION_SETUP_SECTION,rt as VIBE64_OUTPUTS_CONTRACT,ae as VIBE64_OUTPUTS_SECTION,
+oe as VIBE64_PREVIEW_IDENTITY_COMMAND_PROTOCOL,Et as VIBE64_RESOURCE_ESTIMATES_CONTRACT,ue as VIBE64_RESOURCE_ESTIMATES_SECTION,
+xe as VIBE64_WORKSPACE_SETUP_CONTRACT,Q as VIBE64_WORKSPACE_SETUP_SECTION,Br as addGenesisStack,ri as applyGenesisTemplate,
+_t as assertGenesisPromptTask,Rt as genesisCommandShimDirectory,Rs as genesisPackageBinDirectory,Lr as genesisParserEnvironment,
+Qt as genesisProjectContractNeedsAttention,_s as genesisPromptRequest,Os as genesisPromptTask,Gr as initializeGenesisProject,
+zr as inspectGenesisAgentIntegrations,oi as inspectGenesisCollaboration,Ns as inspectGenesisDerivedArtifacts,ii as inspectGenesisEngineering,
+ti as inspectGenesisEnvironment,ni as inspectGenesisProject,Vs as inspectGenesisProjectFormat,Wr as inspectGenesisSkills,
+Zr as inspectGenesisStackComponents,q as inspectGenesisStackSection,Kr as inspectGenesisSubsystems,Fr as inspectVibe64ArchitectureInspection,
+Yr as inspectVibe64ArchitectureLayout,li as inspectVibe64ConnectedDevelopment,ei as inspectVibe64Deployment,pi as inspectVibe64IntegrationSetup,
+ui as inspectVibe64Outputs,di as inspectVibe64ProjectServices,fi as inspectVibe64ResourceEstimates,mi as inspectVibe64WorkspaceSetup,
+si as listGenesisTemplates,Mr as mergeArchitectureObservations,Ze as parseVibe64DeploymentLines,Tt as parseVibe64IntegrationSetupLines,
+ce as parseVibe64OutputsLines,mt as parseVibe64ProjectServicesLines,bt as parseVibe64ResourceEstimatesLines,Y as parseVibe64WorkspaceSetupLines,
+Jr as refreshGenesisCities,hi as renderGenesisPrompt,Nn as resolveVibe64OutputParameters,ci as setGenesisCollaboration,ai as setGenesisEngineeringProfile,
+Vr as sourceExplanationGuidance,xr as sourceExplanationReviewGuidance,qr as syncGenesisAgentIntegrations,Hr as syncGenesisSkills,
+Pr as validateArchitectureFacts,$r as validateArchitectureObservations,Qr as vibe64ConversationInstructions,J as vibe64Driver,
+Cr as vibe64HostContextEnvironment,Xn as vibe64HostContextRegistry,ks as vibe64HostContextResolverPath,Ur as withGenesisCommandShim};