@bitmagic/asset-core 0.1.1 → 0.1.3

package/dist/favicon.d.ts

@@ -0,0 +1,74 @@
+/**
+ * The published game's browser-tab icon: the one `<link>` element, the one storage-key
+ * derivation, and the one function that swaps the default out for a game's own.
+ *
+ * Import path matters: this module is published as the `@bitmagic/asset-core/favicon`
+ * subpath so its consumers do not drag in the root barrel's zod / three / forger client.
+ * It is node-only (`node:crypto`) — the three consumers are game-play-agent (web publish
+ * lane), api-server (CLI publish lane) and the CLI itself. The Creator never imports it;
+ * it uploads a source image and lets publish do the deriving.
+ *
+ * Why this lives in a shared package rather than being duplicated per lane: the two
+ * publish lanes must agree on the marker id and on the exact `<link>` they emit, or a
+ * game's icon silently reverts to the Bitmagic mark in whichever lane drifted. The pieces
+ * where drift breaks correctness are shared here; the sharp resize is NOT (it would drag
+ * a heavy native dep into a package the browser-facing subpaths live beside), and is
+ * deliberately mirrored in each lane instead.
+ */
+/**
+ * The id on the default `<link rel="icon">` baked into every game bundle — `game/index.html`
+ * for the web lane, `renderIndexHtml()` for CLI projects. Publish finds the element by this
+ * id and replaces it wholesale.
+ *
+ * Replacing rather than appending a second link is deliberate. Two `sizes`-less `rel="icon"`
+ * links is ambiguous input: "the last one wins" is browser convention, not spec, and Safari
+ * has historically picked differently from Chrome. After `applyFaviconLink` the document
+ * carries exactly one icon link, which is something a test can assert.
+ */
+export declare const FAVICON_LINK_ID = "bm-favicon";
+/**
+ * Edge length of the derived icon. A retina browser tab renders a 32 CSS px icon at 2x, so
+ * 64 is the real ceiling that matters; it also covers bookmark and taskbar use at 48.
+ * Browsers downscale cleanly, so a single size beats emitting several `sizes=` variants.
+ */
+export declare const FAVICON_PX = 64;
+/**
+ * 32 hex chars of sha256 over the SOURCE URL — not over the source bytes.
+ *
+ * Hashing the URL is what makes the cache free: the storage key is computable without
+ * fetching anything, so a cache hit costs one existence probe and no download. It is sound
+ * because every cover/upload URL in both lanes is already timestamp-unique per upload, so
+ * new art always produces a new URL and therefore a new key.
+ */
+export declare function faviconContentHash(sourceUrl: string): string;
+/**
+ * Where the web lane stores an icon derived from `sourceUrl`, relative to the storage
+ * prefix (`worlds/v3`). The CLI lane composes its own game-scoped key from
+ * `faviconContentHash` instead, because its bucket layout is per-game rather than shared.
+ *
+ * The `v1` segment and the `-64` suffix are load-bearing: changing the crop or the size
+ * must produce a NEW key rather than silently serving the old bytes from an immutable
+ * `max-age=31536000` object. Same reasoning as the hand-rolled `-v2` on the watermark logo.
+ */
+export declare function faviconStorageKey(sourceUrl: string): string;
+/** The exact element every lane emits. One definition so the lanes cannot disagree. */
+export declare function renderFaviconLink(href: string): string;
+/**
+ * Point the document's icon at `href`.
+ *
+ * Replaces the element carrying `id="bm-favicon"`. When that marker is absent — an older
+ * cached bundle, or a CLI project that has not run `bitmagic upgrade` since the marker
+ * shipped — falls back to inserting before `</head>`, which is best-effort but never worse
+ * than the un-marked status quo.
+ *
+ * Returns `html` unchanged when `href` is missing or not an allowed scheme, and never
+ * throws: a tab icon must not be able to fail a publish.
+ *
+ * `indexOf` rather than a regex on purpose. The default href is a ~700-char base64 data URI
+ * sitting inside a bundle that reaches 20 MB, and the surrounding code (`injectIntoHtml`)
+ * is string-insertion for the same reason. Anchored `indexOf` scans are O(n) with tiny
+ * constants and have obvious failure semantics; a backtracking regex over that string does
+ * not.
+ */
+export declare function applyFaviconLink(html: string, href: string | null | undefined): string;
+//# sourceMappingURL=favicon.d.ts.map

package/dist/favicon.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"favicon.d.ts","sourceRoot":"","sources":["../src/favicon.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAIH;;;;;;;;;GASG;AACH,eAAO,MAAM,eAAe,eAAe,CAAC;AAE5C;;;;GAIG;AACH,eAAO,MAAM,UAAU,KAAK,CAAC;AAqB7B;;;;;;;GAOG;AACH,wBAAgB,kBAAkB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAE5D;AAED;;;;;;;;GAQG;AACH,wBAAgB,iBAAiB,CAAC,SAAS,EAAE,MAAM,GAAG,MAAM,CAE3D;AAED,uFAAuF;AACvF,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAEtD;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,MAAM,CAuBtF"}

package/dist/favicon.js

@@ -0,0 +1,130 @@
+/**
+ * The published game's browser-tab icon: the one `<link>` element, the one storage-key
+ * derivation, and the one function that swaps the default out for a game's own.
+ *
+ * Import path matters: this module is published as the `@bitmagic/asset-core/favicon`
+ * subpath so its consumers do not drag in the root barrel's zod / three / forger client.
+ * It is node-only (`node:crypto`) — the three consumers are game-play-agent (web publish
+ * lane), api-server (CLI publish lane) and the CLI itself. The Creator never imports it;
+ * it uploads a source image and lets publish do the deriving.
+ *
+ * Why this lives in a shared package rather than being duplicated per lane: the two
+ * publish lanes must agree on the marker id and on the exact `<link>` they emit, or a
+ * game's icon silently reverts to the Bitmagic mark in whichever lane drifted. The pieces
+ * where drift breaks correctness are shared here; the sharp resize is NOT (it would drag
+ * a heavy native dep into a package the browser-facing subpaths live beside), and is
+ * deliberately mirrored in each lane instead.
+ */
+import { createHash } from 'node:crypto';
+/**
+ * The id on the default `<link rel="icon">` baked into every game bundle — `game/index.html`
+ * for the web lane, `renderIndexHtml()` for CLI projects. Publish finds the element by this
+ * id and replaces it wholesale.
+ *
+ * Replacing rather than appending a second link is deliberate. Two `sizes`-less `rel="icon"`
+ * links is ambiguous input: "the last one wins" is browser convention, not spec, and Safari
+ * has historically picked differently from Chrome. After `applyFaviconLink` the document
+ * carries exactly one icon link, which is something a test can assert.
+ */
+export const FAVICON_LINK_ID = 'bm-favicon';
+/**
+ * Edge length of the derived icon. A retina browser tab renders a 32 CSS px icon at 2x, so
+ * 64 is the real ceiling that matters; it also covers bookmark and taskbar use at 48.
+ * Browsers downscale cleanly, so a single size beats emitting several `sizes=` variants.
+ */
+export const FAVICON_PX = 64;
+/** Attribute-safe. The href reaches a public page's `<head>` and may be creator-supplied. */
+function escapeAttr(value) {
+    return value
+        .replace(/&/g, '&amp;')
+        .replace(/"/g, '&quot;')
+        .replace(/</g, '&lt;')
+        .replace(/>/g, '&gt;');
+}
+/**
+ * Only these two forms may become an icon href. Escaping alone is not the whole guard — a
+ * `javascript:` URL in a `<link href>` is inert in modern browsers, but this string is
+ * assembled from creator-controlled data and baked into a public page, so the allowlist is
+ * the guard and the escaping is defence in depth.
+ */
+function isAllowedHref(href) {
+    return /^https:\/\//i.test(href) || /^data:image\//i.test(href);
+}
+/**
+ * 32 hex chars of sha256 over the SOURCE URL — not over the source bytes.
+ *
+ * Hashing the URL is what makes the cache free: the storage key is computable without
+ * fetching anything, so a cache hit costs one existence probe and no download. It is sound
+ * because every cover/upload URL in both lanes is already timestamp-unique per upload, so
+ * new art always produces a new URL and therefore a new key.
+ */
+export function faviconContentHash(sourceUrl) {
+    return createHash('sha256').update(sourceUrl).digest('hex').slice(0, 32);
+}
+/**
+ * Where the web lane stores an icon derived from `sourceUrl`, relative to the storage
+ * prefix (`worlds/v3`). The CLI lane composes its own game-scoped key from
+ * `faviconContentHash` instead, because its bucket layout is per-game rather than shared.
+ *
+ * The `v1` segment and the `-64` suffix are load-bearing: changing the crop or the size
+ * must produce a NEW key rather than silently serving the old bytes from an immutable
+ * `max-age=31536000` object. Same reasoning as the hand-rolled `-v2` on the watermark logo.
+ */
+export function faviconStorageKey(sourceUrl) {
+    return `assets/favicons/v1/${faviconContentHash(sourceUrl)}-${FAVICON_PX}.png`;
+}
+/** The exact element every lane emits. One definition so the lanes cannot disagree. */
+export function renderFaviconLink(href) {
+    return `<link id="${FAVICON_LINK_ID}" rel="icon" type="image/png" href="${escapeAttr(href)}">`;
+}
+/**
+ * Point the document's icon at `href`.
+ *
+ * Replaces the element carrying `id="bm-favicon"`. When that marker is absent — an older
+ * cached bundle, or a CLI project that has not run `bitmagic upgrade` since the marker
+ * shipped — falls back to inserting before `</head>`, which is best-effort but never worse
+ * than the un-marked status quo.
+ *
+ * Returns `html` unchanged when `href` is missing or not an allowed scheme, and never
+ * throws: a tab icon must not be able to fail a publish.
+ *
+ * `indexOf` rather than a regex on purpose. The default href is a ~700-char base64 data URI
+ * sitting inside a bundle that reaches 20 MB, and the surrounding code (`injectIntoHtml`)
+ * is string-insertion for the same reason. Anchored `indexOf` scans are O(n) with tiny
+ * constants and have obvious failure semantics; a backtracking regex over that string does
+ * not.
+ */
+export function applyFaviconLink(html, href) {
+    if (!href || !isAllowedHref(href))
+        return html;
+    const link = renderFaviconLink(href);
+    const needle = `id="${FAVICON_LINK_ID}"`;
+    for (let at = html.indexOf(needle); at !== -1; at = html.indexOf(needle, at + needle.length)) {
+        const open = html.lastIndexOf('<', at);
+        const close = html.indexOf('>', at);
+        // A marker with no enclosing element is malformed input, not something to guess at.
+        if (open === -1 || close === -1)
+            continue;
+        // It has to be an actual <link> element. The id is also NAMED in prose — the explanatory
+        // comment above the default link in game/index.html, this doc block, docs — and matching the
+        // first occurrence anywhere replaced a comment instead of the link, which left the real
+        // default in place and shipped a page with two icon links. Verified the hard way.
+        if (!/^<link[\s/>]/i.test(html.slice(open, open + 6)))
+            continue;
+        if (isInsideComment(html, open))
+            continue;
+        return html.slice(0, open) + link + html.slice(close + 1);
+    }
+    const headClose = html.indexOf('</head>');
+    if (headClose === -1)
+        return html;
+    return html.slice(0, headClose) + link + '\n' + html.slice(headClose);
+}
+/** Is `at` inside an HTML comment? True when the nearest `<!--` behind it is not yet closed. */
+function isInsideComment(html, at) {
+    const open = html.lastIndexOf('<!--', at);
+    if (open === -1)
+        return false;
+    return html.lastIndexOf('-->', at) < open;
+}
+//# sourceMappingURL=favicon.js.map

package/dist/favicon.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"favicon.js","sourceRoot":"","sources":["../src/favicon.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,YAAY,CAAC;AAE5C;;;;GAIG;AACH,MAAM,CAAC,MAAM,UAAU,GAAG,EAAE,CAAC;AAE7B,6FAA6F;AAC7F,SAAS,UAAU,CAAC,KAAa;IAC/B,OAAO,KAAK;SACT,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC;SACtB,OAAO,CAAC,IAAI,EAAE,QAAQ,CAAC;SACvB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;SACrB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;AAC3B,CAAC;AAED;;;;;GAKG;AACH,SAAS,aAAa,CAAC,IAAY;IACjC,OAAO,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAClE,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,kBAAkB,CAAC,SAAiB;IAClD,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AAC3E,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,iBAAiB,CAAC,SAAiB;IACjD,OAAO,sBAAsB,kBAAkB,CAAC,SAAS,CAAC,IAAI,UAAU,MAAM,CAAC;AACjF,CAAC;AAED,uFAAuF;AACvF,MAAM,UAAU,iBAAiB,CAAC,IAAY;IAC5C,OAAO,aAAa,eAAe,uCAAuC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC;AACjG,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAAY,EAAE,IAA+B;IAC5E,IAAI,CAAC,IAAI,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAE/C,MAAM,IAAI,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC;IAErC,MAAM,MAAM,GAAG,OAAO,eAAe,GAAG,CAAC;IACzC,KAAK,IAAI,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC,EAAE,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;QAC7F,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QACvC,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;QACpC,oFAAoF;QACpF,IAAI,IAAI,KAAK,CAAC,CAAC,IAAI,KAAK,KAAK,CAAC,CAAC;YAAE,SAAS;QAC1C,yFAAyF;QACzF,6FAA6F;QAC7F,wFAAwF;QACxF,kFAAkF;QAClF,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,IAAI,GAAG,CAAC,CAAC,CAAC;YAAE,SAAS;QAChE,IAAI,eAAe,CAAC,IAAI,EAAE,IAAI,CAAC;YAAE,SAAS;QAC1C,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;IAC5D,CAAC;IAED,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAC1C,IAAI,SAAS,KAAK,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAClC,OAAO,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,GAAG,IAAI,GAAG,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;AACxE,CAAC;AAED,gGAAgG;AAChG,SAAS,eAAe,CAAC,IAAY,EAAE,EAAU;IAC/C,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC1C,IAAI,IAAI,KAAK,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IAC9B,OAAO,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,EAAE,CAAC,GAAG,IAAI,CAAC;AAC5C,CAAC"}

package/dist/generators/prop.d.ts

@@ -0,0 +1,43 @@
+import { z } from 'zod';
+import type { AssetResultBase, GenerateDeps } from '../types.js';
+/**
+ * A 3D prop mesh, from a prompt.
+ *
+ * The odd one out among the generators: it returns NO world.json patches. Every other generator
+ * produces a finished asset the host can write straight away, but a prop is only half made when
+ * the Asset Forger hands back a GLB — the engine still has to voxelize it, and voxelizing happens
+ * in a browser with the game loaded, which is the caller's side of the seam in both lanes. So this
+ * returns the GLB URL and stops, and the host decides what to do with it.
+ *
+ * That is what makes the same code serve the CLI's `bitmagic generate prop` (voxelize in a
+ * headless Chrome, upsert the asset locally) and, in principle, the web lane's HQ job — which
+ * today reimplements this call inline in `hq-asset-jobs.ts`.
+ *
+ * The generation is billable the moment the Forger accepts the job: the vendor charges on
+ * acceptance, so a downstream failure to produce a URL still costs.
+ */
+export declare const propParamsSchema: z.ZodObject<{
+    prompt: z.ZodString;
+    /**
+     * `prop` matches what the HQ path has always sent. Named rather than hardcoded because the
+     * Forger distinguishes props from characters, and a mis-typed model produces a rigged humanoid
+     * where a rock was wanted.
+     */
+    modelType: z.ZodDefault<z.ZodOptional<z.ZodEnum<["prop"]>>>;
+}, "strict", z.ZodTypeAny, {
+    prompt: string;
+    modelType: "prop";
+}, {
+    prompt: string;
+    modelType?: "prop" | undefined;
+}>;
+export type PropParams = z.input<typeof propParamsSchema>;
+export type PropResult = AssetResultBase & {
+    /** Where the generated mesh landed. The host voxelizes this. */
+    glbUrl?: string;
+    billable?: boolean;
+};
+export declare function generateProp(params: PropParams, deps: GenerateDeps & {
+    imageToMeshModel?: string;
+}): Promise<PropResult>;
+//# sourceMappingURL=prop.d.ts.map

package/dist/generators/prop.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"prop.d.ts","sourceRoot":"","sources":["../../src/generators/prop.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,KAAK,EAAE,eAAe,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAIjE;;;;;;;;;;;;;;;GAeG;AAEH,eAAO,MAAM,gBAAgB;;IAI3B;;;;OAIG;;;;;;;;EAEM,CAAC;AAEZ,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAE1D,MAAM,MAAM,UAAU,GAAG,eAAe,GAAG;IACzC,gEAAgE;IAChE,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB,CAAC;AAcF,wBAAsB,YAAY,CAChC,MAAM,EAAE,UAAU,EAClB,IAAI,EAAE,YAAY,GAAG;IAAE,gBAAgB,CAAC,EAAE,MAAM,CAAA;CAAE,GACjD,OAAO,CAAC,UAAU,CAAC,CAsDrB"}

package/dist/generators/prop.js

@@ -0,0 +1,80 @@
+import { z } from 'zod';
+import { fail, ok } from '../result.js';
+import { formatZodIssues } from '../validation.js';
+/**
+ * A 3D prop mesh, from a prompt.
+ *
+ * The odd one out among the generators: it returns NO world.json patches. Every other generator
+ * produces a finished asset the host can write straight away, but a prop is only half made when
+ * the Asset Forger hands back a GLB — the engine still has to voxelize it, and voxelizing happens
+ * in a browser with the game loaded, which is the caller's side of the seam in both lanes. So this
+ * returns the GLB URL and stops, and the host decides what to do with it.
+ *
+ * That is what makes the same code serve the CLI's `bitmagic generate prop` (voxelize in a
+ * headless Chrome, upsert the asset locally) and, in principle, the web lane's HQ job — which
+ * today reimplements this call inline in `hq-asset-jobs.ts`.
+ *
+ * The generation is billable the moment the Forger accepts the job: the vendor charges on
+ * acceptance, so a downstream failure to produce a URL still costs.
+ */
+export const propParamsSchema = z.object({
+    prompt: z.string()
+        .min(1)
+        .describe('What the object should be (e.g. "a weathered stone archway covered in moss")'),
+    /**
+     * `prop` matches what the HQ path has always sent. Named rather than hardcoded because the
+     * Forger distinguishes props from characters, and a mis-typed model produces a rigged humanoid
+     * where a rock was wanted.
+     */
+    modelType: z.enum(['prop']).optional().default('prop'),
+}).strict();
+const ENDPOINT = '/ai/v1/forge3d/jobs';
+/**
+ * Kept in step with `hq-asset-jobs.ts`, which is the proven configuration for this endpoint.
+ * `rigging: 'false'` is a STRING because that is what the Forger's API accepts.
+ */
+const DEFAULT_IMAGE_TO_MESH_MODEL = 'unified-trellis';
+export async function generateProp(params, deps) {
+    const { forger, logger, onProgress } = deps;
+    const parsed = propParamsSchema.safeParse(params);
+    if (!parsed.success) {
+        logger.warn({ err: parsed.error }, '[prop] Invalid parameters');
+        return fail(formatZodIssues(parsed.error));
+    }
+    const input = parsed.data;
+    if (!forger.hasCredentials()) {
+        logger.error('[prop] Missing Asset Forger credentials');
+        return fail(forger.getMissingCredentialsMessage());
+    }
+    onProgress(`Generating a mesh for: ${input.prompt}`);
+    logger.info(`[prop] Starting forge3d for "${input.prompt}"`);
+    let response;
+    try {
+        response = await forger.postJobAndWait(ENDPOINT, {
+            model: 'lab',
+            prompt: input.prompt,
+            parameters: {
+                imageToMeshModel: deps.imageToMeshModel ?? DEFAULT_IMAGE_TO_MESH_MODEL,
+                modelType: input.modelType,
+                rigging: 'false',
+            },
+        }, 'prop');
+    }
+    catch (error) {
+        const message = error instanceof Error ? error.message : 'Unknown error occurred';
+        logger.error({ err: error }, '[prop] Error during generation');
+        return fail(message);
+    }
+    const glbUrl = response.data?.fileUrl;
+    if (!glbUrl) {
+        // Billable: the Forger accepted and ran the job, and was paid for it, whatever it answered.
+        return { ...fail('Asset Forger returned no file URL for the generated mesh'), billable: true };
+    }
+    logger.info(`[prop] Generated ${glbUrl}`);
+    return ok(`Mesh generated: ${glbUrl}`, 
+    // Deliberately empty — see the file header. The asset does not exist until the host has
+    // voxelized this, and writing a half-made entry would leave world.json describing an asset the
+    // engine cannot load.
+    [], { glbUrl, billable: true });
+}
+//# sourceMappingURL=prop.js.map

package/dist/generators/prop.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"prop.js","sourceRoot":"","sources":["../../src/generators/prop.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,cAAc,CAAC;AACxC,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAEnD;;;;;;;;;;;;;;;GAeG;AAEH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE;SACf,GAAG,CAAC,CAAC,CAAC;SACN,QAAQ,CAAC,8EAA8E,CAAC;IAC3F;;;;OAIG;IACH,SAAS,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC;CACvD,CAAC,CAAC,MAAM,EAAE,CAAC;AAcZ,MAAM,QAAQ,GAAG,qBAAqB,CAAC;AAEvC;;;GAGG;AACH,MAAM,2BAA2B,GAAG,iBAAiB,CAAC;AAEtD,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,MAAkB,EAClB,IAAkD;IAElD,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,IAAI,CAAC;IAE5C,MAAM,MAAM,GAAG,gBAAgB,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IAClD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,KAAK,EAAE,EAAE,2BAA2B,CAAC,CAAC;QAChE,OAAO,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IAC7C,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC;IAE1B,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,EAAE,CAAC;QAC7B,MAAM,CAAC,KAAK,CAAC,yCAAyC,CAAC,CAAC;QACxD,OAAO,IAAI,CAAC,MAAM,CAAC,4BAA4B,EAAE,CAAC,CAAC;IACrD,CAAC;IAED,UAAU,CAAC,0BAA0B,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;IACrD,MAAM,CAAC,IAAI,CAAC,gCAAgC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC;IAE7D,IAAI,QAAyB,CAAC;IAC9B,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,MAAM,CAAC,cAAc,CACpC,QAAQ,EACR;YACE,KAAK,EAAE,KAAK;YACZ,MAAM,EAAE,KAAK,CAAC,MAAM;YACpB,UAAU,EAAE;gBACV,gBAAgB,EAAE,IAAI,CAAC,gBAAgB,IAAI,2BAA2B;gBACtE,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,OAAO,EAAE,OAAO;aACjB;SACF,EACD,MAAM,CACP,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,wBAAwB,CAAC;QAClF,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,gCAAgC,CAAC,CAAC;QAC/D,OAAO,IAAI,CAAC,OAAO,CAAC,CAAC;IACvB,CAAC;IAED,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IACtC,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,4FAA4F;QAC5F,OAAO,EAAE,GAAG,IAAI,CAAC,0DAA0D,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;IACjG,CAAC;IAED,MAAM,CAAC,IAAI,CAAC,oBAAoB,MAAM,EAAE,CAAC,CAAC;IAC1C,OAAO,EAAE,CACP,mBAAmB,MAAM,EAAE;IAC3B,wFAAwF;IACxF,+FAA+F;IAC/F,sBAAsB;IACtB,EAAE,EACF,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,CAC3B,CAAC;AACJ,CAAC"}

package/dist/index.d.ts

@@ -11,6 +11,8 @@ export { generateImageAsset, imageAssetParamsSchema } from './generators/image.j
 export type { ImageAssetParams, ImageAssetResult } from './generators/image.js';
 export { generateCharacter, characterParamsSchema } from './generators/character.js';
 export type { CharacterParams, CharacterResult } from './generators/character.js';
+export { generateProp, propParamsSchema } from './generators/prop.js';
+export type { PropParams, PropResult } from './generators/prop.js';
 export { generateAnimationAsset, animationParamsSchema, getConfiguredAnimationModel, ANIMATION_MODEL_TEXT_TO_MOTION_3, ANIMATION_MODEL_TEXT_TO_MOTION_2, ANIMATION_MODEL_OLDER, } from './generators/animation.js';
 export type { AnimationParams, AnimationResult } from './generators/animation.js';
 export { fetchContentLength } from './http.js';

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,YAAY,EACV,eAAe,EACf,UAAU,EACV,cAAc,EACd,YAAY,EACZ,YAAY,EACZ,eAAe,EACf,UAAU,GACX,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAC/F,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC;AACvC,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AACvD,YAAY,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAC;AACjE,OAAO,EAAE,cAAc,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAC5E,YAAY,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AACzE,OAAO,EAAE,mBAAmB,EAAE,uBAAuB,EAAE,MAAM,8BAA8B,CAAC;AAC5F,YAAY,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,8BAA8B,CAAC;AACzF,OAAO,EAAE,kBAAkB,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AACnF,YAAY,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAChF,OAAO,EAAE,iBAAiB,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAC;AACrF,YAAY,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAC;AAClF,OAAO,EACL,sBAAsB,EACtB,qBAAqB,EACrB,2BAA2B,EAC3B,gCAAgC,EAChC,gCAAgC,EAChC,qBAAqB,GACtB,MAAM,2BAA2B,CAAC;AACnC,YAAY,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAC;AAClF,OAAO,EAAE,kBAAkB,EAAE,MAAM,WAAW,CAAC;AAC/C,OAAO,EAAE,iBAAiB,EAAE,sBAAsB,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAMnG,OAAO,EACL,sBAAsB,EACtB,wBAAwB,EACxB,oBAAoB,EACpB,qBAAqB,EACrB,kBAAkB,EAClB,oBAAoB,GACrB,MAAM,uBAAuB,CAAC;AAC/B,YAAY,EACV,yBAAyB,EACzB,eAAe,EACf,eAAe,EACf,mBAAmB,EACnB,qBAAqB,GACtB,MAAM,uBAAuB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,YAAY,EACV,eAAe,EACf,UAAU,EACV,cAAc,EACd,YAAY,EACZ,YAAY,EACZ,eAAe,EACf,UAAU,GACX,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAC/F,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC;AACvC,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AACvD,YAAY,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAC;AACjE,OAAO,EAAE,cAAc,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAC5E,YAAY,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,wBAAwB,CAAC;AACzE,OAAO,EAAE,mBAAmB,EAAE,uBAAuB,EAAE,MAAM,8BAA8B,CAAC;AAC5F,YAAY,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,8BAA8B,CAAC;AACzF,OAAO,EAAE,kBAAkB,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AACnF,YAAY,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAChF,OAAO,EAAE,iBAAiB,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAC;AACrF,YAAY,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAC;AAClF,OAAO,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AACtE,YAAY,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AACnE,OAAO,EACL,sBAAsB,EACtB,qBAAqB,EACrB,2BAA2B,EAC3B,gCAAgC,EAChC,gCAAgC,EAChC,qBAAqB,GACtB,MAAM,2BAA2B,CAAC;AACnC,YAAY,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAC;AAClF,OAAO,EAAE,kBAAkB,EAAE,MAAM,WAAW,CAAC;AAC/C,OAAO,EAAE,iBAAiB,EAAE,sBAAsB,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAMnG,OAAO,EACL,sBAAsB,EACtB,wBAAwB,EACxB,oBAAoB,EACpB,qBAAqB,EACrB,kBAAkB,EAClB,oBAAoB,GACrB,MAAM,uBAAuB,CAAC;AAC/B,YAAY,EACV,yBAAyB,EACzB,eAAe,EACf,eAAe,EACf,mBAAmB,EACnB,qBAAqB,GACtB,MAAM,uBAAuB,CAAC"}

package/dist/index.js

@@ -5,6 +5,7 @@ export { generateSkybox, skyboxParamsSchema } from './generators/skybox.js';
 export { generateSoundEffect, soundEffectParamsSchema } from './generators/sound-effect.js';
 export { generateImageAsset, imageAssetParamsSchema } from './generators/image.js';
 export { generateCharacter, characterParamsSchema } from './generators/character.js';
+export { generateProp, propParamsSchema } from './generators/prop.js';
 export { generateAnimationAsset, animationParamsSchema, getConfiguredAnimationModel, ANIMATION_MODEL_TEXT_TO_MOTION_3, ANIMATION_MODEL_TEXT_TO_MOTION_2, ANIMATION_MODEL_OLDER, } from './generators/animation.js';
 export { fetchContentLength } from './http.js';
 export { PIXAR_VOXEL_STYLE, MAX_COVER_DESIGN_CHARS, buildCoverArtPrompt } from './cover-prompt.js';

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AASA,OAAO,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAC/F,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC;AACvC,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAEvD,OAAO,EAAE,cAAc,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAE5E,OAAO,EAAE,mBAAmB,EAAE,uBAAuB,EAAE,MAAM,8BAA8B,CAAC;AAE5F,OAAO,EAAE,kBAAkB,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAEnF,OAAO,EAAE,iBAAiB,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAC;AAErF,OAAO,EACL,sBAAsB,EACtB,qBAAqB,EACrB,2BAA2B,EAC3B,gCAAgC,EAChC,gCAAgC,EAChC,qBAAqB,GACtB,MAAM,2BAA2B,CAAC;AAEnC,OAAO,EAAE,kBAAkB,EAAE,MAAM,WAAW,CAAC;AAC/C,OAAO,EAAE,iBAAiB,EAAE,sBAAsB,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAEnG,oEAAoE;AACpE,gFAAgF;AAChF,gFAAgF;AAChF,oEAAoE;AACpE,OAAO,EACL,sBAAsB,EACtB,wBAAwB,EACxB,oBAAoB,EACpB,qBAAqB,EACrB,kBAAkB,EAClB,oBAAoB,GACrB,MAAM,uBAAuB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AASA,OAAO,EAAE,oBAAoB,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAC/F,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,MAAM,aAAa,CAAC;AACvC,OAAO,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAC;AAEvD,OAAO,EAAE,cAAc,EAAE,kBAAkB,EAAE,MAAM,wBAAwB,CAAC;AAE5E,OAAO,EAAE,mBAAmB,EAAE,uBAAuB,EAAE,MAAM,8BAA8B,CAAC;AAE5F,OAAO,EAAE,kBAAkB,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AAEnF,OAAO,EAAE,iBAAiB,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAC;AAErF,OAAO,EAAE,YAAY,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AAEtE,OAAO,EACL,sBAAsB,EACtB,qBAAqB,EACrB,2BAA2B,EAC3B,gCAAgC,EAChC,gCAAgC,EAChC,qBAAqB,GACtB,MAAM,2BAA2B,CAAC;AAEnC,OAAO,EAAE,kBAAkB,EAAE,MAAM,WAAW,CAAC;AAC/C,OAAO,EAAE,iBAAiB,EAAE,sBAAsB,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAEnG,oEAAoE;AACpE,gFAAgF;AAChF,gFAAgF;AAChF,oEAAoE;AACpE,OAAO,EACL,sBAAsB,EACtB,wBAAwB,EACxB,oBAAoB,EACpB,qBAAqB,EACrB,kBAAkB,EAClB,oBAAoB,GACrB,MAAM,uBAAuB,CAAC"}

package/dist/publish-source.d.ts

@@ -0,0 +1,260 @@
+/**
+ * What "the source of a published game" means, shared by the two sides that must agree on it.
+ *
+ * The CLI walks a creator's project to produce a fingerprint and a source archive; api-server
+ * re-derives the fingerprint from that archive's manifest to check the two describe the same
+ * tree. If the exclusion lists, the path normalisation or the fold ever differ between them, a
+ * perfectly honest publish reports a mismatch. So they live here, once.
+ *
+ * Import path matters, twice over:
+ *
+ *  - Published as the `@bitmagic/asset-core/publish-source` subpath, following `./favicon`'s
+ *    precedent, so consumers do not drag in the root barrel's zod/three/forger client. This is
+ *    not cosmetic: `api-server/src/cli/cli-routes.ts` documents that eagerly importing the
+ *    three.js graph into api-server's tests OOM-killed the CI worker. Nothing here may import
+ *    from `./index.js`.
+ *  - No zip library, no `fs`. Zip *format* handling stays in each consumer (the CLI writes an
+ *    archive, api-server streams one apart) and only the pure logic is shared, which keeps this
+ *    package dependency-clean and keeps the npm blast radius of a change small.
+ *
+ * The CLI ships to npm with this package pinned, while api-server runs from `main`, so the two
+ * routinely run DIFFERENT copies of this file. That is why the fingerprint is versioned — see
+ * `SOURCE_INDEX_ALGO`.
+ */
+/**
+ * The fingerprint algorithm's identity, sent by the CLI and dispatched on by the server.
+ *
+ * Without it, adding one entry to `EXCLUDED_FILES` — which has happened three times, each for a
+ * good reason documented below — would make every publish from an already-installed CLI report a
+ * fingerprint mismatch, because that CLI is still hashing the old file set. The server keeps every
+ * algorithm it has ever shipped and picks by this value; an unknown or absent one is reported as
+ * "cannot check", never as "mismatch". Bump it in lockstep with any change to the two sets below
+ * or to `fingerprintFromIndex`.
+ */
+export declare const SOURCE_INDEX_ALGO = "v1";
+/**
+ * Directories whose contents never change what the bundle contains: our own artifacts
+ * (`.bitmagic/`, `dist/`), the dependency tree (`node_modules/` — pinned by the lockfile the
+ * scaffold writes), vite's cache, and git's object store. Including any of them would make the
+ * fingerprint change on something other than an edit, which would make the staleness gate reject
+ * a publish of an unchanged project.
+ *
+ * `.git` is the one that bit in practice. Hashing it means an EMPTY `git commit` — no source
+ * change at all — flips the fingerprint, because the commit writes new objects, a new ref value
+ * and a new reflog entry. That turns the ordinary `bitmagic verify` → `git commit` →
+ * `bitmagic publish` sequence into exit 3 ("The project has changed since it was last verified"),
+ * and `bitmagic upgrade` actively pushes creators into git by refusing a dirty tree. The
+ * scaffolded AGENTS.md's "do not edit any tracked file between verifying and publishing" cannot
+ * prevent it either: committing is not editing. It also made every publish rebuild, since the
+ * build manifest's own recorded fingerprint could never still match by the time publish ran.
+ */
+export declare const EXCLUDED_DIRS: ReadonlySet<string>;
+/**
+ * Files that can never change what the bundle contains, excluded at basename granularity.
+ *
+ * `.DS_Store`: on macOS, Finder writes it merely for opening the project folder, and no build tool
+ * ever reads it — so it is another way to flip the fingerprint without editing anything.
+ *
+ * `mechanics-plan.md`: the agent is told to rewrite it after every slice — moving shipped items
+ * out of the backlog and re-ranking the rest is the whole point of the file. Left in, the ordinary
+ * `bitmagic verify` → update the backlog → `bitmagic publish` sequence exits 3 over prose, which
+ * teaches agents to reach for `--force`, the one flag that also waves through a genuinely stale
+ * verify.
+ *
+ * `GAME-DESIGN.md`: same "no build tool reads it" test — nothing imports it,
+ * `vite.publish.config.js` cannot put prose in the bundle, and it exists to be REWRITTEN as the
+ * game evolves (it is the input `bitmagic cover` reads).
+ *
+ * The list is deliberately not a general ignore mechanism, because a false "fresh" ships an
+ * unverified bundle while a false "stale" only costs one `bitmagic verify`.
+ *
+ * NOTE the asymmetry with `SECRET_FILE_PATTERNS` below: these files are excluded from the
+ * FINGERPRINT but still travel in the source archive, because they are exactly what a human
+ * reading the archive wants. Secrets are the other way round.
+ */
+export declare const EXCLUDED_FILES: ReadonlySet<string>;
+/**
+ * Excluded from the fingerprint, but still carried in the source archive.
+ *
+ * The two sets answer different questions. The fingerprint asks "would changing this change the
+ * bundle?" — for a design document, no, which is why editing one must not invalidate a verify. The
+ * archive asks "would a human opening this want it?" — for a design document, emphatically yes: it
+ * is the single most useful file for understanding what the game was trying to be.
+ *
+ * `.DS_Store` is in neither, so it is deliberately absent here: nobody wants it and it is not
+ * evidence of anything.
+ */
+export declare const ARCHIVED_UNFINGERPRINTED_FILES: ReadonlySet<string>;
+/**
+ * Files that must never travel inside the source archive, however the fingerprint treats them.
+ *
+ * The archive lands in the portal bucket, and that bucket carries a BUCKET-level
+ * `allUsers:objectViewer` grant (see `.github/workflows/README.md`) — every object in it is
+ * world-readable. A creator's project is their working directory, and working directories collect
+ * credentials. Shipping one to a public URL because nobody thought about it is how an incident
+ * starts.
+ *
+ * These files are still hashed and still listed in the manifest (path + hash, no content), so the
+ * server can reconcile the fingerprint without ever receiving the bytes. That is the whole reason
+ * the manifest is separate from the payload.
+ *
+ * Deliberately a deny-list of shapes rather than an allow-list of known-good paths: an allow-list
+ * would silently drop a creator's own source file the first time someone used an unusual layout,
+ * and dropping game code from the archive is a quieter failure than including a stray dotfile.
+ * The trade is accepted knowingly — this list will never be complete, which is why the archive's
+ * storage key is also unguessable rather than relying on this alone.
+ */
+export declare const SECRET_FILE_PATTERNS: readonly RegExp[];
+/** Would including this path in the archive payload risk publishing a credential? */
+export declare function isSecretPath(posixPath: string): boolean;
+/**
+ * A relative path as the fingerprint hashes it: always forward-slashed.
+ *
+ * `sep` is a parameter rather than a direct `path.sep` read so this is testable on any
+ * platform — the Windows behaviour that makes normalization necessary cannot otherwise be
+ * exercised on the POSIX runners CI uses, which is exactly how a vacuous test gets written.
+ */
+export declare function toPosixPath(relativePath: string, sep?: string): string;
+/** One file as both sides see it: the project-relative posix path and the hash of its bytes. */
+export interface SourceIndexEntry {
+    path: string;
+    sha256: string;
+    bytes: number;
+    /**
+     * For vendored engine files only: the same content hashed with line endings normalised, used
+     * exclusively to compare against the official release. See `engineComparisonHash` for why the
+     * raw `sha256` above cannot serve — in short, a Windows checkout rewrites LF to CRLF in the
+     * committed `engine/` tree and would otherwise report every engine file as modified.
+     *
+     * Computed here, by the side that actually has the bytes: the archive carries hashes rather than
+     * engine content, so the server can never normalise after the fact.
+     */
+    engineSha256?: string;
+}
+/**
+ * Every fingerprinted file in a project, plus the fingerprint they roll up to.
+ *
+ * Produced once per publish by the CLI (which owns the filesystem walk) and reconstructed by
+ * api-server from the archive's manifest. `files` is sorted by path — `fingerprintFromIndex`
+ * depends on it and sorts defensively rather than trusting the caller.
+ */
+export interface SourceIndex {
+    algo: string;
+    files: SourceIndexEntry[];
+    fingerprint: string;
+    /**
+     * Files the archive carries but the fingerprint ignores — see
+     * `ARCHIVED_UNFINGERPRINTED_FILES`. Kept apart from `files` so they can never reach
+     * `fingerprintFromIndex`, which is the whole reason they were excluded in the first place.
+     */
+    archivedOnly: SourceIndexEntry[];
+}
+/**
+ * The fingerprint: a hash of everything that determines the published bundle.
+ *
+ * This is what lets `publish` decide whether a `verify` is too stale to trust, by CONTENT
+ * rather than by clock: a timestamp policy would accept an edit made one second after
+ * verifying and reject an untouched project that merely sat overnight.
+ *
+ * The path is hashed alongside the content so that moving a file — which changes what the
+ * bundle imports — changes the fingerprint even though no byte of any file did.
+ *
+ * Kept deliberately coarse (every tracked file, not a module graph): a false "stale" costs one
+ * `bitmagic verify`, while a false "fresh" ships an unverified bundle.
+ *
+ * The exact byte sequence folded here is load-bearing across two independently-released
+ * packages. Do not "clean up" the trailing newline or the separator without bumping
+ * `SOURCE_INDEX_ALGO`.
+ */
+export declare function fingerprintFromIndex(files: readonly SourceIndexEntry[]): string;
+/** Where the archive's manifest lives inside the zip. */
+export declare const SOURCE_MANIFEST_NAME = "bitmagic-source.json";
+/**
+ * The archive's manifest: enough for the server to re-derive the fingerprint and to check the
+ * vendored engine, without the archive having to carry either the engine or any secret.
+ *
+ * `omitted` lists the paths that are in `files` but deliberately absent from the payload, so a
+ * reader (human or server) can tell "not shipped, on purpose" from "the archive is truncated".
+ *
+ * Deliberately NO `publishVersion`. The archive has to be built and hashed BEFORE `publish/begin`
+ * — that hash is what `begin` bakes into the meta block — and the version is not allocated until
+ * `begin` returns. A field that cannot be known when the file is written cannot be in the file.
+ * The version is recorded where it is actually available: in the archive's storage key and in the
+ * meta block's own `bm:publish-version`.
+ */
+export interface SourceManifest {
+    algo: string;
+    gameId: string;
+    engineVersion: string;
+    genre: string;
+    exportedAt: string;
+    fingerprint: string;
+    files: Record<string, string>;
+    omitted: string[];
+    /**
+     * Line-ending-normalised hashes for the vendored engine paths only, keyed the same way as
+     * `files`. Separate from `files` because the two answer different questions: `files` must stay
+     * byte-exact for the fingerprint, while this exists to survive a platform's checkout rules.
+     */
+    engineHashes: Record<string, string>;
+}
+/**
+ * Project-relative prefix of the vendored engine. `bitmagic init`/`upgrade` unpack the release
+ * tarball's `game/src/<root>` into `engine/<root>`, so every vendored file lives under this.
+ */
+export declare const VENDORED_ENGINE_PREFIX = "engine/";
+/**
+ * Map a path as it appears in the engine release tarball to where it lands in a scaffolded
+ * project, or null when the tarball entry is not vendored into projects at all.
+ *
+ * The tarball stores three shapes at different depths (see `cli/src/scaffold/engine-download.ts`):
+ * `game/src/<root>/…` → `engine/<root>/…`, `game/agent-docs/…` → `engine/agent-docs/…`, and
+ * `game/sw-cache-buster.js` → `sw-cache-buster.js` at the project root. `templates/` ships in the
+ * tarball for the scaffolder to read and is never vendored, so it maps to null.
+ *
+ * Lives here rather than in api-server because it is a statement about what the CLI did to the
+ * tarball, and the CLI is the other consumer that has to agree.
+ */
+export declare function tarballPathToProjectPath(tarballPath: string): string | null;
+/**
+ * Bytes every genuine published bundle carries, used to refuse a publish that is not an engine
+ * build at all.
+ *
+ * These survive the toolchain verbatim, which is the entire reason they were chosen over anything
+ * cleverer. The scaffold's `index.html` emits `<div id="game-container">` and a
+ * `<script type="importmap">` whose body Vite only RELOCATES (its import-map hook lifts the tag
+ * out and reinserts the matched text unchanged before the first module script) — so both land, byte
+ * for byte, a few KB into the single-file bundle, well inside the head range `complete` already
+ * reads for the meta block. Verified against a real `vite build` with `vite-plugin-singlefile`,
+ * not inferred.
+ *
+ * Why a SUBSET of the alias entries rather than all of them. A creator's installed CLI is an older
+ * npm release than the running server, so the server must only require markers that both agree on.
+ * The CDN entries are disqualified outright — they embed the pinned three.js version, which moves
+ * whenever the CLI bumps it. Of the local aliases these three are the ones that have to exist for
+ * a project to resolve its entry module at all, so requiring more would buy nothing and would turn
+ * any future alias change into a spurious refusal for every not-yet-upgraded project.
+ *
+ * What this is worth: it stops bitmagic.ai being used to host arbitrary HTML by someone who has an
+ * account and a game id. It is trivially copy-pasteable by anyone who looks, and is not claimed to
+ * be more than that.
+ */
+export declare const ENGINE_BUILD_MARKERS: readonly string[];
+/** Does this bundle's head carry every marker a genuine engine build has? */
+export declare function hasEngineBuildMarkers(head: string): boolean;
+/**
+ * Hash used ONLY when comparing a vendored engine file against the official release.
+ *
+ * Line endings are normalised first, which the fingerprint deliberately never does. The reason is
+ * Windows: `renderGitignore()` does not ignore `engine/`, so the vendored tree is committed, and
+ * AGENTS.md pushes creators into git (`bitmagic upgrade` refuses a dirty tree). A Windows checkout
+ * with the default `core.autocrlf=true` rewrites LF to CRLF in every `.ts` file it restores — so
+ * without this, every Windows creator would see 100% of their engine files reported as modified,
+ * forever, on every publish. That is a false alarm about the one check most likely to be believed.
+ *
+ * Confined to this comparison on purpose. Normalising inside the fingerprint would instead make
+ * the fingerprint disagree with itself across platforms in the staleness gate, where a false
+ * "fresh" is the dangerous direction.
+ */
+export declare function engineComparisonHash(content: Uint8Array): string;
+//# sourceMappingURL=publish-source.d.ts.map

package/dist/publish-source.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"publish-source.d.ts","sourceRoot":"","sources":["../src/publish-source.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAQH;;;;;;;;;GASG;AACH,eAAO,MAAM,iBAAiB,OAAO,CAAC;AAEtC;;;;;;;;;;;;;;;GAeG;AACH,eAAO,MAAM,aAAa,EAAE,WAAW,CAAC,MAAM,CAM5C,CAAC;AAEH;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,eAAO,MAAM,cAAc,EAAE,WAAW,CAAC,MAAM,CAI7C,CAAC;AAEH;;;;;;;;;;GAUG;AACH,eAAO,MAAM,8BAA8B,EAAE,WAAW,CAAC,MAAM,CAG7D,CAAC;AAEH;;;;;;;;;;;;;;;;;;GAkBG;AACH,eAAO,MAAM,oBAAoB,EAAE,SAAS,MAAM,EASjD,CAAC;AAEF,qFAAqF;AACrF,wBAAgB,YAAY,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAEvD;AAED;;;;;;GAMG;AACH,wBAAgB,WAAW,CAAC,YAAY,EAAE,MAAM,EAAE,GAAG,GAAE,MAAY,GAAG,MAAM,CAE3E;AAED,gGAAgG;AAChG,MAAM,WAAW,gBAAgB;IAC/B,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd;;;;;;;;OAQG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED;;;;;;GAMG;AACH,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,gBAAgB,EAAE,CAAC;IAC1B,WAAW,EAAE,MAAM,CAAC;IACpB;;;;OAIG;IACH,YAAY,EAAE,gBAAgB,EAAE,CAAC;CAClC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,SAAS,gBAAgB,EAAE,GAAG,MAAM,CAO/E;AAED,yDAAyD;AACzD,eAAO,MAAM,oBAAoB,yBAAyB,CAAC;AAE3D;;;;;;;;;;;;GAYG;AACH,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,aAAa,EAAE,MAAM,CAAC;IACtB,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC9B,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB;;;;OAIG;IACH,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACtC;AAED;;;GAGG;AACH,eAAO,MAAM,sBAAsB,YAAY,CAAC;AAEhD;;;;;;;;;;;GAWG;AACH,wBAAgB,wBAAwB,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAW3E;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,eAAO,MAAM,oBAAoB,EAAE,SAAS,MAAM,EAIjD,CAAC;AAEF,6EAA6E;AAC7E,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAE3D;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,UAAU,GAAG,MAAM,CAMhE"}

package/dist/publish-source.js

@@ -0,0 +1,258 @@
+/**
+ * What "the source of a published game" means, shared by the two sides that must agree on it.
+ *
+ * The CLI walks a creator's project to produce a fingerprint and a source archive; api-server
+ * re-derives the fingerprint from that archive's manifest to check the two describe the same
+ * tree. If the exclusion lists, the path normalisation or the fold ever differ between them, a
+ * perfectly honest publish reports a mismatch. So they live here, once.
+ *
+ * Import path matters, twice over:
+ *
+ *  - Published as the `@bitmagic/asset-core/publish-source` subpath, following `./favicon`'s
+ *    precedent, so consumers do not drag in the root barrel's zod/three/forger client. This is
+ *    not cosmetic: `api-server/src/cli/cli-routes.ts` documents that eagerly importing the
+ *    three.js graph into api-server's tests OOM-killed the CI worker. Nothing here may import
+ *    from `./index.js`.
+ *  - No zip library, no `fs`. Zip *format* handling stays in each consumer (the CLI writes an
+ *    archive, api-server streams one apart) and only the pure logic is shared, which keeps this
+ *    package dependency-clean and keeps the npm blast radius of a change small.
+ *
+ * The CLI ships to npm with this package pinned, while api-server runs from `main`, so the two
+ * routinely run DIFFERENT copies of this file. That is why the fingerprint is versioned — see
+ * `SOURCE_INDEX_ALGO`.
+ */
+import { createHash } from 'node:crypto';
+// Imported rather than taken from the ambient global, matching `node:crypto` above: this file's
+// eslint config enumerates its globals deliberately, and an explicit import says "node-only" as
+// clearly as the crypto one does.
+import { TextDecoder } from 'node:util';
+/**
+ * The fingerprint algorithm's identity, sent by the CLI and dispatched on by the server.
+ *
+ * Without it, adding one entry to `EXCLUDED_FILES` — which has happened three times, each for a
+ * good reason documented below — would make every publish from an already-installed CLI report a
+ * fingerprint mismatch, because that CLI is still hashing the old file set. The server keeps every
+ * algorithm it has ever shipped and picks by this value; an unknown or absent one is reported as
+ * "cannot check", never as "mismatch". Bump it in lockstep with any change to the two sets below
+ * or to `fingerprintFromIndex`.
+ */
+export const SOURCE_INDEX_ALGO = 'v1';
+/**
+ * Directories whose contents never change what the bundle contains: our own artifacts
+ * (`.bitmagic/`, `dist/`), the dependency tree (`node_modules/` — pinned by the lockfile the
+ * scaffold writes), vite's cache, and git's object store. Including any of them would make the
+ * fingerprint change on something other than an edit, which would make the staleness gate reject
+ * a publish of an unchanged project.
+ *
+ * `.git` is the one that bit in practice. Hashing it means an EMPTY `git commit` — no source
+ * change at all — flips the fingerprint, because the commit writes new objects, a new ref value
+ * and a new reflog entry. That turns the ordinary `bitmagic verify` → `git commit` →
+ * `bitmagic publish` sequence into exit 3 ("The project has changed since it was last verified"),
+ * and `bitmagic upgrade` actively pushes creators into git by refusing a dirty tree. The
+ * scaffolded AGENTS.md's "do not edit any tracked file between verifying and publishing" cannot
+ * prevent it either: committing is not editing. It also made every publish rebuild, since the
+ * build manifest's own recorded fingerprint could never still match by the time publish ran.
+ */
+export const EXCLUDED_DIRS = new Set([
+    '.bitmagic',
+    'node_modules',
+    'dist',
+    '.vite-cache',
+    '.git',
+]);
+/**
+ * Files that can never change what the bundle contains, excluded at basename granularity.
+ *
+ * `.DS_Store`: on macOS, Finder writes it merely for opening the project folder, and no build tool
+ * ever reads it — so it is another way to flip the fingerprint without editing anything.
+ *
+ * `mechanics-plan.md`: the agent is told to rewrite it after every slice — moving shipped items
+ * out of the backlog and re-ranking the rest is the whole point of the file. Left in, the ordinary
+ * `bitmagic verify` → update the backlog → `bitmagic publish` sequence exits 3 over prose, which
+ * teaches agents to reach for `--force`, the one flag that also waves through a genuinely stale
+ * verify.
+ *
+ * `GAME-DESIGN.md`: same "no build tool reads it" test — nothing imports it,
+ * `vite.publish.config.js` cannot put prose in the bundle, and it exists to be REWRITTEN as the
+ * game evolves (it is the input `bitmagic cover` reads).
+ *
+ * The list is deliberately not a general ignore mechanism, because a false "fresh" ships an
+ * unverified bundle while a false "stale" only costs one `bitmagic verify`.
+ *
+ * NOTE the asymmetry with `SECRET_FILE_PATTERNS` below: these files are excluded from the
+ * FINGERPRINT but still travel in the source archive, because they are exactly what a human
+ * reading the archive wants. Secrets are the other way round.
+ */
+export const EXCLUDED_FILES = new Set([
+    '.DS_Store',
+    'GAME-DESIGN.md',
+    'mechanics-plan.md',
+]);
+/**
+ * Excluded from the fingerprint, but still carried in the source archive.
+ *
+ * The two sets answer different questions. The fingerprint asks "would changing this change the
+ * bundle?" — for a design document, no, which is why editing one must not invalidate a verify. The
+ * archive asks "would a human opening this want it?" — for a design document, emphatically yes: it
+ * is the single most useful file for understanding what the game was trying to be.
+ *
+ * `.DS_Store` is in neither, so it is deliberately absent here: nobody wants it and it is not
+ * evidence of anything.
+ */
+export const ARCHIVED_UNFINGERPRINTED_FILES = new Set([
+    'GAME-DESIGN.md',
+    'mechanics-plan.md',
+]);
+/**
+ * Files that must never travel inside the source archive, however the fingerprint treats them.
+ *
+ * The archive lands in the portal bucket, and that bucket carries a BUCKET-level
+ * `allUsers:objectViewer` grant (see `.github/workflows/README.md`) — every object in it is
+ * world-readable. A creator's project is their working directory, and working directories collect
+ * credentials. Shipping one to a public URL because nobody thought about it is how an incident
+ * starts.
+ *
+ * These files are still hashed and still listed in the manifest (path + hash, no content), so the
+ * server can reconcile the fingerprint without ever receiving the bytes. That is the whole reason
+ * the manifest is separate from the payload.
+ *
+ * Deliberately a deny-list of shapes rather than an allow-list of known-good paths: an allow-list
+ * would silently drop a creator's own source file the first time someone used an unusual layout,
+ * and dropping game code from the archive is a quieter failure than including a stray dotfile.
+ * The trade is accepted knowingly — this list will never be complete, which is why the archive's
+ * storage key is also unguessable rather than relying on this alone.
+ */
+export const SECRET_FILE_PATTERNS = [
+    /(^|\/)\.env($|\.)/,
+    /\.pem$/,
+    /\.key$/,
+    /(^|\/)id_rsa/,
+    /(^|\/)\.npmrc$/,
+    /(^|\/)\.git-credentials$/,
+    /service-account[^/]*\.json$/,
+    /(^|\/)\.claude\/settings\.local\.json$/,
+];
+/** Would including this path in the archive payload risk publishing a credential? */
+export function isSecretPath(posixPath) {
+    return SECRET_FILE_PATTERNS.some((pattern) => pattern.test(posixPath));
+}
+/**
+ * A relative path as the fingerprint hashes it: always forward-slashed.
+ *
+ * `sep` is a parameter rather than a direct `path.sep` read so this is testable on any
+ * platform — the Windows behaviour that makes normalization necessary cannot otherwise be
+ * exercised on the POSIX runners CI uses, which is exactly how a vacuous test gets written.
+ */
+export function toPosixPath(relativePath, sep = '/') {
+    return relativePath.split(sep).join('/');
+}
+/**
+ * The fingerprint: a hash of everything that determines the published bundle.
+ *
+ * This is what lets `publish` decide whether a `verify` is too stale to trust, by CONTENT
+ * rather than by clock: a timestamp policy would accept an edit made one second after
+ * verifying and reject an untouched project that merely sat overnight.
+ *
+ * The path is hashed alongside the content so that moving a file — which changes what the
+ * bundle imports — changes the fingerprint even though no byte of any file did.
+ *
+ * Kept deliberately coarse (every tracked file, not a module graph): a false "stale" costs one
+ * `bitmagic verify`, while a false "fresh" ships an unverified bundle.
+ *
+ * The exact byte sequence folded here is load-bearing across two independently-released
+ * packages. Do not "clean up" the trailing newline or the separator without bumping
+ * `SOURCE_INDEX_ALGO`.
+ */
+export function fingerprintFromIndex(files) {
+    const sorted = [...files].sort((a, b) => (a.path < b.path ? -1 : a.path > b.path ? 1 : 0));
+    const hash = createHash('sha256');
+    for (const entry of sorted) {
+        hash.update(`${entry.path}:${entry.sha256}\n`);
+    }
+    return hash.digest('hex');
+}
+/** Where the archive's manifest lives inside the zip. */
+export const SOURCE_MANIFEST_NAME = 'bitmagic-source.json';
+/**
+ * Project-relative prefix of the vendored engine. `bitmagic init`/`upgrade` unpack the release
+ * tarball's `game/src/<root>` into `engine/<root>`, so every vendored file lives under this.
+ */
+export const VENDORED_ENGINE_PREFIX = 'engine/';
+/**
+ * Map a path as it appears in the engine release tarball to where it lands in a scaffolded
+ * project, or null when the tarball entry is not vendored into projects at all.
+ *
+ * The tarball stores three shapes at different depths (see `cli/src/scaffold/engine-download.ts`):
+ * `game/src/<root>/…` → `engine/<root>/…`, `game/agent-docs/…` → `engine/agent-docs/…`, and
+ * `game/sw-cache-buster.js` → `sw-cache-buster.js` at the project root. `templates/` ships in the
+ * tarball for the scaffolder to read and is never vendored, so it maps to null.
+ *
+ * Lives here rather than in api-server because it is a statement about what the CLI did to the
+ * tarball, and the CLI is the other consumer that has to agree.
+ */
+export function tarballPathToProjectPath(tarballPath) {
+    if (tarballPath.startsWith('game/src/')) {
+        return `${VENDORED_ENGINE_PREFIX}${tarballPath.slice('game/src/'.length)}`;
+    }
+    if (tarballPath.startsWith('game/agent-docs/')) {
+        return `${VENDORED_ENGINE_PREFIX}agent-docs/${tarballPath.slice('game/agent-docs/'.length)}`;
+    }
+    if (tarballPath === 'game/sw-cache-buster.js') {
+        return 'sw-cache-buster.js';
+    }
+    return null;
+}
+/**
+ * Bytes every genuine published bundle carries, used to refuse a publish that is not an engine
+ * build at all.
+ *
+ * These survive the toolchain verbatim, which is the entire reason they were chosen over anything
+ * cleverer. The scaffold's `index.html` emits `<div id="game-container">` and a
+ * `<script type="importmap">` whose body Vite only RELOCATES (its import-map hook lifts the tag
+ * out and reinserts the matched text unchanged before the first module script) — so both land, byte
+ * for byte, a few KB into the single-file bundle, well inside the head range `complete` already
+ * reads for the meta block. Verified against a real `vite build` with `vite-plugin-singlefile`,
+ * not inferred.
+ *
+ * Why a SUBSET of the alias entries rather than all of them. A creator's installed CLI is an older
+ * npm release than the running server, so the server must only require markers that both agree on.
+ * The CDN entries are disqualified outright — they embed the pinned three.js version, which moves
+ * whenever the CLI bumps it. Of the local aliases these three are the ones that have to exist for
+ * a project to resolve its entry module at all, so requiring more would buy nothing and would turn
+ * any future alias change into a spurious refusal for every not-yet-upgraded project.
+ *
+ * What this is worth: it stops bitmagic.ai being used to host arbitrary HTML by someone who has an
+ * account and a game id. It is trivially copy-pasteable by anyone who looks, and is not claimed to
+ * be more than that.
+ */
+export const ENGINE_BUILD_MARKERS = [
+    'id="game-container"',
+    '"engine/": "/dist/engine/engine/"',
+    '"types/": "/dist/engine/types/"',
+];
+/** Does this bundle's head carry every marker a genuine engine build has? */
+export function hasEngineBuildMarkers(head) {
+    return ENGINE_BUILD_MARKERS.every((marker) => head.includes(marker));
+}
+/**
+ * Hash used ONLY when comparing a vendored engine file against the official release.
+ *
+ * Line endings are normalised first, which the fingerprint deliberately never does. The reason is
+ * Windows: `renderGitignore()` does not ignore `engine/`, so the vendored tree is committed, and
+ * AGENTS.md pushes creators into git (`bitmagic upgrade` refuses a dirty tree). A Windows checkout
+ * with the default `core.autocrlf=true` rewrites LF to CRLF in every `.ts` file it restores — so
+ * without this, every Windows creator would see 100% of their engine files reported as modified,
+ * forever, on every publish. That is a false alarm about the one check most likely to be believed.
+ *
+ * Confined to this comparison on purpose. Normalising inside the fingerprint would instead make
+ * the fingerprint disagree with itself across platforms in the staleness gate, where a false
+ * "fresh" is the dangerous direction.
+ */
+export function engineComparisonHash(content) {
+    // TextDecoder rather than Buffer: this module is imported by an npm-published CLI as well as by
+    // the server, and keeping Node's Buffer out of it means the file has no ambient-global
+    // dependency beyond `node:crypto`, which it imports explicitly.
+    const text = new TextDecoder('utf-8').decode(content);
+    return createHash('sha256').update(text.replace(/\r\n/g, '\n'), 'utf8').digest('hex');
+}
+//# sourceMappingURL=publish-source.js.map

package/dist/publish-source.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"publish-source.js","sourceRoot":"","sources":["../src/publish-source.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,gGAAgG;AAChG,gGAAgG;AAChG,kCAAkC;AAClC,OAAO,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAExC;;;;;;;;;GASG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,IAAI,CAAC;AAEtC;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,MAAM,aAAa,GAAwB,IAAI,GAAG,CAAC;IACxD,WAAW;IACX,cAAc;IACd,MAAM;IACN,aAAa;IACb,MAAM;CACP,CAAC,CAAC;AAEH;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,CAAC,MAAM,cAAc,GAAwB,IAAI,GAAG,CAAC;IACzD,WAAW;IACX,gBAAgB;IAChB,mBAAmB;CACpB,CAAC,CAAC;AAEH;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAwB,IAAI,GAAG,CAAC;IACzE,gBAAgB;IAChB,mBAAmB;CACpB,CAAC,CAAC;AAEH;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAsB;IACrD,mBAAmB;IACnB,QAAQ;IACR,QAAQ;IACR,cAAc;IACd,gBAAgB;IAChB,0BAA0B;IAC1B,6BAA6B;IAC7B,wCAAwC;CACzC,CAAC;AAEF,qFAAqF;AACrF,MAAM,UAAU,YAAY,CAAC,SAAiB;IAC5C,OAAO,oBAAoB,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;AACzE,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,WAAW,CAAC,YAAoB,EAAE,MAAc,GAAG;IACjE,OAAO,YAAY,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC3C,CAAC;AAsCD;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,UAAU,oBAAoB,CAAC,KAAkC;IACrE,MAAM,MAAM,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3F,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;IAClC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,MAAM,IAAI,CAAC,CAAC;IACjD,CAAC;IACD,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC5B,CAAC;AAED,yDAAyD;AACzD,MAAM,CAAC,MAAM,oBAAoB,GAAG,sBAAsB,CAAC;AAgC3D;;;GAGG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,SAAS,CAAC;AAEhD;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,wBAAwB,CAAC,WAAmB;IAC1D,IAAI,WAAW,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;QACxC,OAAO,GAAG,sBAAsB,GAAG,WAAW,CAAC,KAAK,CAAC,WAAW,CAAC,MAAM,CAAC,EAAE,CAAC;IAC7E,CAAC;IACD,IAAI,WAAW,CAAC,UAAU,CAAC,kBAAkB,CAAC,EAAE,CAAC;QAC/C,OAAO,GAAG,sBAAsB,cAAc,WAAW,CAAC,KAAK,CAAC,kBAAkB,CAAC,MAAM,CAAC,EAAE,CAAC;IAC/F,CAAC;IACD,IAAI,WAAW,KAAK,yBAAyB,EAAE,CAAC;QAC9C,OAAO,oBAAoB,CAAC;IAC9B,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAsB;IACrD,qBAAqB;IACrB,mCAAmC;IACnC,iCAAiC;CAClC,CAAC;AAEF,6EAA6E;AAC7E,MAAM,UAAU,qBAAqB,CAAC,IAAY;IAChD,OAAO,oBAAoB,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;AACvE,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,oBAAoB,CAAC,OAAmB;IACtD,gGAAgG;IAChG,uFAAuF;IACvF,gEAAgE;IAChE,MAAM,IAAI,GAAG,IAAI,WAAW,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACtD,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACxF,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bitmagic/asset-core",
-  "version": "0.1.1",
+  "version": "0.1.3",
   "type": "module",
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",
@@ -13,6 +13,14 @@
       "types": "./dist/terminal-failure.d.ts",
       "default": "./dist/terminal-failure.js"
     },
+    "./favicon": {
+      "types": "./dist/favicon.d.ts",
+      "default": "./dist/favicon.js"
+    },
+    "./publish-source": {
+      "types": "./dist/publish-source.d.ts",
+      "default": "./dist/publish-source.js"
+    },
     "./animation/*": {
       "default": "./src/animation/*"
     },