@genex-ai/cli-demo 1.36.5-dev.858 → 1.36.6-dev.861

package/dist/index.js

@@ -2149,6 +2149,401 @@ async function countOutcomes(kind, cwd = process.cwd()) {
 import fs13 from "fs/promises";
 import path14 from "path";
 
+// ../../packages/mobile-scan/src/image-dims.ts
+function u32be(b, o) {
+  return (b[o] << 24 | b[o + 1] << 16 | b[o + 2] << 8 | b[o + 3]) >>> 0;
+}
+function u32le(b, o) {
+  return (b[o] | b[o + 1] << 8 | b[o + 2] << 16 | b[o + 3] << 24) >>> 0;
+}
+function u16be(b, o) {
+  return b[o] << 8 | b[o + 1];
+}
+function u16le(b, o) {
+  return b[o] | b[o + 1] << 8;
+}
+function isPng(b) {
+  return b.length > 24 && b[0] === 137 && b[1] === 80 && b[2] === 78 && b[3] === 71 && b[4] === 13 && b[5] === 10 && b[6] === 26 && b[7] === 10;
+}
+var KTX2_MAGIC = [171, 75, 84, 88, 32, 50, 48, 187, 13, 10, 26, 10];
+function parseImageDims(bytes) {
+  if (bytes.length < 30) return null;
+  if (isPng(bytes)) {
+    return { width: u32be(bytes, 16), height: u32be(bytes, 20) };
+  }
+  if (bytes[0] === 255 && bytes[1] === 216) {
+    let i = 2;
+    while (i + 9 < bytes.length) {
+      if (bytes[i] !== 255) {
+        i++;
+        continue;
+      }
+      const marker = bytes[i + 1];
+      if (marker === 255) {
+        i++;
+        continue;
+      }
+      if (marker === 216 || marker >= 208 && marker <= 217) {
+        i += 2;
+        continue;
+      }
+      const isSof = marker >= 192 && marker <= 195 || marker >= 197 && marker <= 199 || marker >= 201 && marker <= 203 || marker >= 205 && marker <= 207;
+      if (isSof) {
+        return { width: u16be(bytes, i + 7), height: u16be(bytes, i + 5) };
+      }
+      i += 2 + u16be(bytes, i + 2);
+    }
+    return null;
+  }
+  if (bytes[0] === 82 && // RIFF….WEBP
+  bytes[1] === 73 && bytes[2] === 70 && bytes[3] === 70 && bytes[8] === 87 && bytes[9] === 69 && bytes[10] === 66 && bytes[11] === 80) {
+    const fourcc = String.fromCharCode(bytes[12], bytes[13], bytes[14], bytes[15]);
+    if (fourcc === "VP8X" && bytes.length >= 30) {
+      const w = 1 + (bytes[24] | bytes[25] << 8 | bytes[26] << 16);
+      const h = 1 + (bytes[27] | bytes[28] << 8 | bytes[29] << 16);
+      return { width: w, height: h };
+    }
+    if (fourcc === "VP8 " && bytes.length >= 30) {
+      return { width: u16le(bytes, 26) & 16383, height: u16le(bytes, 28) & 16383 };
+    }
+    if (fourcc === "VP8L" && bytes.length >= 25 && bytes[20] === 47) {
+      const b0 = bytes[21];
+      const b1 = bytes[22];
+      const b2 = bytes[23];
+      const b3 = bytes[24];
+      const width = 1 + ((b1 & 63) << 8 | b0);
+      const height = 1 + ((b3 & 15) << 10 | b2 << 2 | (b1 & 192) >> 6);
+      return { width, height };
+    }
+    return null;
+  }
+  if (KTX2_MAGIC.every((v, idx) => bytes[idx] === v)) {
+    return { width: u32le(bytes, 20), height: u32le(bytes, 24), ktx2: true };
+  }
+  return null;
+}
+
+// ../../packages/mobile-scan/src/glb.ts
+function u32le2(b, o) {
+  return (b[o] | b[o + 1] << 8 | b[o + 2] << 16 | b[o + 3] << 24) >>> 0;
+}
+function scanGlb(bytes) {
+  if (bytes.length < 20 || u32le2(bytes, 0) !== 1179937895) return null;
+  try {
+    const jsonLen = u32le2(bytes, 12);
+    if (u32le2(bytes, 16) !== 1313821514) return null;
+    const json = JSON.parse(new TextDecoder().decode(bytes.subarray(20, 20 + jsonLen)));
+    let bin = null;
+    const binHeader = 20 + jsonLen;
+    if (binHeader + 8 <= bytes.length && u32le2(bytes, binHeader + 4) === 5130562) {
+      bin = bytes.subarray(binHeader + 8, binHeader + 8 + u32le2(bytes, binHeader));
+    }
+    const images = [];
+    for (const img of json.images ?? []) {
+      if (img.bufferView == null || !bin) continue;
+      const view = json.bufferViews?.[img.bufferView];
+      if (!view?.byteLength) continue;
+      const slice = bin.subarray(view.byteOffset ?? 0, (view.byteOffset ?? 0) + view.byteLength);
+      const dims = parseImageDims(slice);
+      if (dims) images.push({ ...dims, mimeType: img.mimeType, bytes: view.byteLength });
+    }
+    let triangles = 0;
+    for (const mesh of json.meshes ?? []) {
+      for (const prim of mesh.primitives ?? []) {
+        const accessor = prim.indices != null ? json.accessors?.[prim.indices] : json.accessors?.[prim.attributes?.POSITION ?? -1];
+        if (accessor?.count) triangles += Math.floor(accessor.count / 3);
+      }
+    }
+    return {
+      triangles,
+      binBytes: bin?.byteLength ?? 0,
+      images,
+      extensions: json.extensionsUsed ?? []
+    };
+  } catch {
+    return null;
+  }
+}
+
+// ../../packages/mobile-scan/src/scan.ts
+var GENEX_GENERATION_URL_RE = /https:\/\/[A-Za-z0-9.-]+\/generations\/([A-Za-z0-9._-]+)\/([A-Za-z0-9._@-]+)/g;
+var SKYBOX_ROLE = "skybox-equirect";
+var MOBILE_RUNG_SUFFIX_RE = /@(\d+)$/;
+var MOBILE_BUDGET_MB = { broad: 300, modern: 700 };
+var KNOWN_CAPABILITIES = ["microphone", "camera", "geolocation"];
+var CAPABILITY_LITERALS = {
+  microphone: ["__GENEX_VOICE__", "__GENEX_CAP_MICROPHONE__"],
+  camera: ["__GENEX_CAP_CAMERA__"],
+  geolocation: ["__GENEX_CAP_GEOLOCATION__"]
+};
+var CONSTRAINTS_MAX_CHARS = 4e3;
+var MEDIA_CALL = "getUserMedia";
+var KEY_START = /[A-Za-z_$]/;
+var KEY_PART = /[\w$]/;
+var SPACE = /\s/;
+function mediaRequestsInText(text) {
+  const out = [];
+  let from = 0;
+  for (let at = text.indexOf(MEDIA_CALL); at !== -1; at = text.indexOf(MEDIA_CALL, from)) {
+    from = at + MEDIA_CALL.length;
+    if (at > 0 && KEY_PART.test(text[at - 1])) continue;
+    const paren = skipSpace(text, from, text.length);
+    if (text[paren] !== "(") continue;
+    const open = skipSpace(text, paren + 1, text.length);
+    if (text[open] !== "{") {
+      out.push({ index: at, audio: false, video: false, read: false });
+      continue;
+    }
+    const { stop: stop2, ...constraints } = readConstraints(text, open);
+    out.push({ index: at, ...constraints });
+    from = Math.max(from, stop2);
+  }
+  return out;
+}
+function skipSpace(text, from, end) {
+  let at = from;
+  while (at < end && SPACE.test(text[at])) at++;
+  return at;
+}
+function indexWithin(text, needle, from, end) {
+  for (let at = from; at + needle.length <= end; at++) {
+    if (text.startsWith(needle, at)) return at;
+  }
+  return -1;
+}
+function readConstraints(text, open) {
+  const end = Math.min(text.length, open + 1 + CONSTRAINTS_MAX_CHARS);
+  const seen = { audio: false, video: false, read: true };
+  const afterKey = (key, at) => {
+    const colon = skipSpace(text, at, end);
+    if (text[colon] !== ":") {
+      seen.read = false;
+      return;
+    }
+    if (key !== "audio" && key !== "video") return;
+    const value = skipSpace(text, colon + 1, end);
+    if (text[value] === "{" || text.startsWith("!0", value) || /^true\b/.test(text.slice(value, value + 5))) {
+      seen[key] = true;
+    } else if (!text.startsWith("!1", value) && !/^false\b/.test(text.slice(value, value + 6))) {
+      seen.read = false;
+    }
+  };
+  let depth = 1;
+  let keyNext = true;
+  for (let i = open + 1; i < end; i++) {
+    const ch = text[i];
+    if (ch === '"' || ch === "'" || ch === "`") {
+      let close = i + 1;
+      while (close < end && text[close] !== ch) close += text[close] === "\\" ? 2 : 1;
+      if (close >= end) break;
+      if (depth === 1 && keyNext) {
+        keyNext = false;
+        afterKey(text.slice(i + 1, close), close + 1);
+      }
+      i = close;
+    } else if (ch === "/" && (text[i + 1] === "/" || text[i + 1] === "*")) {
+      const line = text[i + 1] === "/";
+      const close = indexWithin(text, line ? "\n" : "*/", i + 2, end);
+      if (close === -1) break;
+      i = line ? close : close + 1;
+    } else if (ch === "{" || ch === "[" || ch === "(") {
+      depth++;
+    } else if (ch === "}" || ch === "]" || ch === ")") {
+      if (--depth === 0) return { ...seen, stop: i + 1 };
+    } else if (depth === 1 && ch === ",") {
+      keyNext = true;
+    } else if (depth === 1 && keyNext && !SPACE.test(ch)) {
+      keyNext = false;
+      if (!KEY_START.test(ch)) {
+        seen.read = false;
+        continue;
+      }
+      let stop2 = i + 1;
+      while (stop2 < end && KEY_PART.test(text[stop2])) stop2++;
+      afterKey(text.slice(i, stop2), stop2);
+      i = stop2 - 1;
+    }
+  }
+  return { ...seen, read: false, stop: end };
+}
+var CAPABILITY_PATTERNS = {
+  camera: [/\bfacingMode\b/],
+  geolocation: [
+    /\bnavigator\??\.geolocation\b/,
+    /\.geolocation\??\.(?:getCurrentPosition|watchPosition)\b/
+  ]
+};
+function capabilitiesInText(text) {
+  const opensCamera = mediaRequestsInText(text).some((request) => request.video);
+  return KNOWN_CAPABILITIES.filter(
+    (capability) => CAPABILITY_LITERALS[capability].some((literal) => text.includes(literal)) || (CAPABILITY_PATTERNS[capability] ?? []).some((pattern) => pattern.test(text)) || capability === "camera" && opensCamera
+  );
+}
+function knownCapabilities(input) {
+  if (!Array.isArray(input)) return [];
+  return KNOWN_CAPABILITIES.filter((capability) => input.includes(capability));
+}
+var TEXT_EXT = /\.(js|mjs|cjs|html|css|json|txt)$/i;
+var CAPABILITY_FILE_RE = /\.(js|mjs|cjs|html)$/i;
+var TEXT_HEAD_BYTES = 8 * 1024 * 1024;
+var CAPABILITY_WINDOW_BYTES = TEXT_HEAD_BYTES;
+var CAPABILITY_OVERLAP_BYTES = 64 * 1024;
+var IMAGE_EXT = /\.(png|jpe?g|webp|ktx2)$/i;
+var VIDEO_EXT = /\.(mp4|webm|mov)$/i;
+var AUDIO_EXT = /\.(mp3|ogg|wav|m4a)$/i;
+var GLB_EXT = /\.(glb|gltf)$/i;
+function scanBundle(files) {
+  const images = [];
+  const glbs = [];
+  const videos = [];
+  const audio = [];
+  const urls = /* @__PURE__ */ new Set();
+  const declared = /* @__PURE__ */ new Set();
+  let capabilitiesIncomplete = false;
+  const decoder = new TextDecoder();
+  let text = "";
+  let totalBytes = 0;
+  for (const f of files) {
+    totalBytes += f.bytes.byteLength;
+    if (IMAGE_EXT.test(f.relPath)) {
+      const dims = parseImageDims(f.bytes);
+      if (dims) images.push({ path: f.relPath, bytes: f.bytes.byteLength, ...dims });
+      continue;
+    }
+    if (GLB_EXT.test(f.relPath)) {
+      glbs.push({ path: f.relPath, bytes: f.bytes.byteLength, scan: scanGlb(f.bytes) });
+      continue;
+    }
+    if (VIDEO_EXT.test(f.relPath)) {
+      videos.push({ path: f.relPath, bytes: f.bytes.byteLength });
+      continue;
+    }
+    if (AUDIO_EXT.test(f.relPath)) {
+      audio.push({ path: f.relPath, bytes: f.bytes.byteLength });
+      continue;
+    }
+    if (TEXT_EXT.test(f.relPath)) {
+      const head = decoder.decode(f.bytes.subarray(0, TEXT_HEAD_BYTES));
+      text += head;
+      text += "\n";
+      if (!CAPABILITY_FILE_RE.test(f.relPath)) continue;
+      try {
+        for (const capability of capabilitiesInText(head)) declared.add(capability);
+        for (let start = CAPABILITY_WINDOW_BYTES - CAPABILITY_OVERLAP_BYTES; start < f.bytes.byteLength - CAPABILITY_OVERLAP_BYTES && declared.size < KNOWN_CAPABILITIES.length; start += CAPABILITY_WINDOW_BYTES) {
+          const window = f.bytes.subarray(start, start + CAPABILITY_WINDOW_BYTES + CAPABILITY_OVERLAP_BYTES);
+          for (const capability of capabilitiesInText(decoder.decode(window))) declared.add(capability);
+        }
+      } catch {
+        capabilitiesIncomplete = true;
+      }
+    }
+  }
+  for (const m of text.matchAll(GENEX_GENERATION_URL_RE)) urls.add(m[0]);
+  const capabilities = KNOWN_CAPABILITIES.filter((capability) => declared.has(capability));
+  const dprMatch = text.match(/setPixelRatio\(\s*Math\.min\([^,)]+,\s*([\d.]+)\s*\)/);
+  const markers = {
+    rendererBackend: text.includes("WebGPURenderer") || text.includes("getContext('webgpu')") || text.includes('"webgpu"') ? "webgpu" : "webgl",
+    postStack: /EffectComposer|postprocessing|PostProcessing|RenderPipeline/.test(text),
+    dprCapLiteral: dprMatch?.[1] ? Number(dprMatch[1]) : null,
+    contextLossHandler: text.includes("webglcontextlost") || text.includes("device.lost"),
+    ktx2Loader: text.includes("KTX2Loader") || text.includes(".ktx2"),
+    touchHints: /joystick/i.test(text) || text.includes("touchstart") && text.includes("touch-action"),
+    adaptiveQuality: text.includes("__GENEX_QUALITY__"),
+    modelRungs: text.includes("__GENEX_MODEL_RUNGS__"),
+    voice: capabilities.includes("microphone")
+  };
+  return {
+    images,
+    glbs,
+    videos,
+    audio,
+    genexAssetUrls: [...urls],
+    markers,
+    capabilities,
+    capabilitiesIncomplete,
+    totalBytes,
+    fileCount: files.length
+  };
+}
+
+// ../../packages/mobile-scan/src/estimate.ts
+var MB = 1024 * 1024;
+var CSS_W = 430;
+var CSS_H = 932;
+var WORST_SKYBOX_BYTES = 8192 * 4096 * 4 * 1.33;
+var WORST_IMAGE_BYTES = 2048 * 2048 * 4 * 1.33;
+var KTX2_DISCOUNT = 6;
+function textureBytes(w, h, ktx2) {
+  const raw = w * h * 4 * 1.33;
+  return ktx2 ? raw / KTX2_DISCOUNT : raw;
+}
+function estimateVram(scan, externalDims) {
+  let bundled = 0;
+  let maxDim = 0;
+  for (const img of scan.images) {
+    bundled += textureBytes(img.width, img.height, img.ktx2);
+    maxDim = Math.max(maxDim, img.width, img.height);
+  }
+  let glbTex = 0;
+  let geometry = 0;
+  for (const glb of scan.glbs) {
+    if (!glb.scan) {
+      geometry += glb.bytes;
+      continue;
+    }
+    const ktx2 = glb.scan.extensions.some((e) => e.includes("KHR_texture_basisu"));
+    for (const img of glb.scan.images) {
+      glbTex += textureBytes(img.width, img.height, img.ktx2 || ktx2);
+      maxDim = Math.max(maxDim, img.width, img.height);
+    }
+    geometry += Math.max(0, glb.scan.binBytes - glb.scan.images.reduce((s, i) => s + i.bytes, 0));
+  }
+  let external = 0;
+  const unresolved = [];
+  for (const url of scan.genexAssetUrls) {
+    const role = url.split("/").pop() ?? "";
+    if (MOBILE_RUNG_SUFFIX_RE.test(role)) continue;
+    const dims = externalDims.get(url);
+    if (dims) {
+      const ktx2 = dims.ktx2 || dims.ktx2Available === true && scan.markers.ktx2Loader;
+      if (dims.glb) {
+        external += textureBytes(dims.width, dims.height, ktx2) + (dims.bytes ?? 0);
+        maxDim = Math.max(maxDim, dims.width);
+      } else {
+        external += textureBytes(dims.width, dims.height, ktx2);
+        maxDim = Math.max(maxDim, dims.width, dims.height);
+      }
+    } else {
+      unresolved.push(url);
+      external += role === SKYBOX_ROLE ? WORST_SKYBOX_BYTES : WORST_IMAGE_BYTES;
+      maxDim = Math.max(maxDim, role === SKYBOX_ROLE ? 8192 : 2048);
+    }
+  }
+  const dpr = Math.min(scan.markers.dprCapLiteral ?? 2, 3);
+  const surface = CSS_W * CSS_H * dpr * dpr * 4;
+  const framebuffers = surface * (3 + (scan.markers.postStack ? 4 : 0));
+  const shadow = 2048 * 2048 * 4;
+  const total = bundled + glbTex + external + framebuffers + shadow + geometry;
+  return {
+    estVramMb: Math.round(total / MB),
+    breakdown: {
+      bundledTexturesMb: Math.round(bundled / MB),
+      glbTexturesMb: Math.round(glbTex / MB),
+      externalTexturesMb: Math.round(external / MB),
+      framebuffersMb: Math.round(framebuffers / MB),
+      shadowDefaultMb: Math.round(shadow / MB),
+      geometryMb: Math.round(geometry / MB)
+    },
+    unresolvedExternals: unresolved,
+    textureMaxDim: maxDim
+  };
+}
+function tierFor(estVramMb) {
+  if (estVramMb < MOBILE_BUDGET_MB.broad) return "mobile-broad";
+  if (estVramMb < MOBILE_BUDGET_MB.modern) return "mobile-modern";
+  return "over-budget";
+}
+
 // src/lib/download-assets.ts
 import fs12 from "fs/promises";
 import path13 from "path";
@@ -2345,7 +2740,54 @@ function splitArgs(text) {
 }
 var lineOf = (content, index) => content.slice(0, index).split("\n").length;
 function blankComments(raw) {
-  return raw.replace(/\/\*[\s\S]*?\*\//g, (m) => m.replace(/[^\n]/g, " ")).replace(/(^|[^:])\/\/[^\n]*/gm, (m, p1) => p1 + " ".repeat(m.length - p1.length));
+  const out = [];
+  let kept = 0;
+  const blank = (from, to) => {
+    out.push(raw.slice(kept, from), raw.slice(from, to).replace(/[^\n]/g, " "));
+    kept = to;
+  };
+  const templates = [];
+  let depth = 0;
+  let i = 0;
+  while (i < raw.length) {
+    const ch = raw[i];
+    if (ch === '"' || ch === "'") {
+      i++;
+      while (i < raw.length && raw[i] !== ch && raw[i] !== "\n") i += raw[i] === "\\" ? 2 : 1;
+      i++;
+    } else if (ch === "`" || ch === "}" && templates.at(-1) === depth) {
+      if (ch === "}") templates.pop();
+      i++;
+      while (i < raw.length && raw[i] !== "`" && !(raw[i] === "$" && raw[i + 1] === "{")) {
+        i += raw[i] === "\\" ? 2 : 1;
+      }
+      if (raw[i] === "$") {
+        templates.push(depth);
+        i += 2;
+      } else {
+        i++;
+      }
+    } else if (ch === "{") {
+      depth++;
+      i++;
+    } else if (ch === "}") {
+      depth--;
+      i++;
+    } else if (ch === "/" && raw[i + 1] === "*" && raw.indexOf("*/", i + 2) !== -1) {
+      const end = raw.indexOf("*/", i + 2) + 2;
+      blank(i, end);
+      i = end;
+    } else if (ch === "/" && raw[i + 1] === "/" && raw[i - 1] !== ":") {
+      const eol = raw.indexOf("\n", i);
+      const end = eol === -1 ? raw.length : eol;
+      blank(i, end);
+      i = end;
+    } else {
+      i++;
+    }
+  }
+  out.push(raw.slice(kept));
+  return out.join("");
 }
 var IDENTITY_AWAIT = /\bawait\s+(waitForPlayer|waitForAuth)\s*\(/;
 var RENDERER_CTOR = /\bnew\s+(?:THREE\.)?(?:WebGLRenderer|WebGPURenderer)\s*\(/;
@@ -2406,8 +2848,10 @@ async function detectEmbedBoot(cwd = process.cwd()) {
 }
 var CONTROL_HEADS = /* @__PURE__ */ new Set(["if", "for", "while", "switch", "catch", "with", "await"]);
 function isFunctionBrace(tail) {
-  const t = tail.trimEnd();
+  let t = tail.trimEnd();
   if (t.endsWith("=>")) return true;
+  const typed = /^([\s\S]*\))[ \t]*:[ \t]*[^\s;=?()][^;=?()\n]*$/.exec(t);
+  if (typed) t = typed[1];
   if (!t.endsWith(")")) return false;
   let depth = 0;
   let i = t.length - 1;
@@ -2618,6 +3062,199 @@ async function detectGenerationAudit(cwd = process.cwd()) {
     musicNoSlider: audited.some((e) => e.kind === "music" && e.status === "completed") && !/type\s*=\s*["'`]range["'`]/.test(haystack)
   };
 }
+async function readOwnSource(cwd) {
+  const out = [];
+  const page = await fs13.readFile(path14.join(cwd, "index.html"), "utf8").catch(() => "");
+  if (page) {
+    out.push({
+      rel: "index.html",
+      content: page.replace(/<!--[\s\S]*?-->/g, (m) => m.replace(/[^\n]/g, " "))
+    });
+  }
+  const srcDir = path14.join(cwd, "src");
+  let entries;
+  try {
+    entries = await fs13.readdir(srcDir, { recursive: true });
+  } catch {
+    return out;
+  }
+  for (const nativeRel of entries.sort()) {
+    if (nativeRel.includes("node_modules")) continue;
+    if (nativeRel.split(path14.sep)[0] === "controllers") continue;
+    if (!/\.(ts|js|mts|mjs|tsx|jsx)$/.test(nativeRel)) continue;
+    const raw = await fs13.readFile(path14.join(srcDir, nativeRel), "utf8").catch(() => "");
+    if (!raw) continue;
+    out.push({ rel: nativeRel.split(path14.sep).join("/"), content: blankComments(raw) });
+  }
+  return out;
+}
+async function readManifestCapabilities(cwd) {
+  try {
+    const pkg = JSON.parse(await fs13.readFile(path14.join(cwd, "package.json"), "utf8"));
+    const raw = pkg.genex?.capabilities;
+    if (raw === void 0 || raw === null) return { entries: [], notAList: false };
+    return Array.isArray(raw) ? { entries: raw, notAList: false } : { entries: [], notAList: true };
+  } catch {
+    return { entries: [], notAList: false };
+  }
+}
+var SOURCE_MICROPHONE = [
+  /\.voice\s*\??\.\s*join\s*\(\s*(?:\)|\{)/,
+  /\b(?:webkit)?SpeechRecognition\b/
+];
+function opensMicrophone(content) {
+  return SOURCE_MICROPHONE.some((evidence) => evidence.test(content)) || mediaRequestsInText(content).some((request) => request.audio);
+}
+async function detectCapabilities(cwd = process.cwd()) {
+  const found = [...(await readManifestCapabilities(cwd)).entries];
+  for (const { content } of await readOwnSource(cwd)) {
+    found.push(...capabilitiesInText(content));
+    if (opensMicrophone(content)) found.push("microphone");
+  }
+  return knownCapabilities(found);
+}
+var SHARE_CALL = /\bnavigator\s*\??\.\s*share\s*\(/g;
+var CLIPBOARD_USE = /\bnavigator\s*\??\.\s*clipboard\b/g;
+var WAKE_LOCK_USE = /\bnavigator\s*\??\.\s*wakeLock\b/g;
+var NEW_WINDOW = /\bwindow\s*\??\.\s*open\s*\(|["'`]_blank["'`]/g;
+var DOWNLOAD_ASSIGN = /\.download\s*=(?!=)/g;
+var DOWNLOAD_ATTR = /<a\b[^>]*\sdownload\b|\bsetAttribute\(\s*["'`]download["'`]/g;
+var MAKES_A_LINK = /\bcreateElement\(\s*["'`]a["'`]\s*\)|\bcreateObjectURL\b|\btoDataURL\b|\btoBlob\b|<a\b/;
+var SERVICE_WORKER = /\bserviceWorker\s*\??\.\s*register\s*\(/g;
+var MOTION_USE = /\b(?:DeviceOrientationEvent|DeviceMotionEvent)\b|["'`]device(?:orientation(?:absolute)?|motion)["'`]|\bondevice(?:orientation(?:absolute)?|motion)\b/g;
+var HASH_READ = /(?<![\w$.])(?:(?:window|document|globalThis|self)\s*\.\s*)?location\s*\.\s*hash\b(?!\s*(?:=(?!=)|\+=))/g;
+var DIALOG_CALL = /(?<![\w$.])((?:window|globalThis|self)\s*\.\s*)?(alert|confirm|prompt)\(/g;
+var MEMBER_HEAD = /^(?:(?:export|declare|abstract|async|public|private|protected|static|readonly|override|get|set)\s+|\*\s*)*$/;
+function afterCloseParen(content, from) {
+  let depth = 1;
+  let i = from;
+  while (i < content.length && depth > 0) {
+    const ch = content[i];
+    if (ch === "(") depth++;
+    else if (ch === ")") depth--;
+    i++;
+  }
+  return i;
+}
+function dialogCalls(content) {
+  const out = [];
+  for (const m of content.matchAll(DIALOG_CALL)) {
+    const index = m.index;
+    const name = m[2];
+    if (!m[1]) {
+      const own = new RegExp(
+        [
+          `\\b(?:function\\*?|const|let|var|class)\\s+${name}\\b`,
+          `\\bimport\\s+${name}\\s+from\\b`,
+          // `{ prompt, toast }`, `(text, confirm)`, `(confirm: () => void)`,
+          // `{ prompt: text }`: a named import, a destructuring, a parameter.
+          `[{,(]\\s*${name}\\s*(?:[,}):]|=(?!=))`
+        ].join("|")
+      );
+      if (own.test(content)) continue;
+      const head = content.slice(content.lastIndexOf("\n", index) + 1, index).trimStart();
+      const next = content.slice(afterCloseParen(content, index + m[0].length)).trimStart()[0];
+      if (MEMBER_HEAD.test(head) && (next === "{" || next === ":")) continue;
+    }
+    out.push({ index, name });
+  }
+  return out;
+}
+function inBracelessArrow(content, index) {
+  let start = index;
+  while (start > 0 && !";{}".includes(content[start - 1])) start--;
+  const span = content.slice(start, index);
+  const arrow = span.lastIndexOf("=>");
+  if (arrow === -1) return false;
+  let depth = 0;
+  let begun = false;
+  for (const ch of span.slice(arrow + 2)) {
+    if (ch === "(" || ch === "[") depth++;
+    else if (ch === ")" || ch === "]") depth--;
+    if (ch === "\n") {
+      if (begun && depth <= 0) return false;
+    } else if (ch.trim()) {
+      begun = true;
+    }
+  }
+  return true;
+}
+function hashReadsBeforeInit(content) {
+  const reads = [...content.matchAll(HASH_READ)].map((m) => m.index);
+  if (reads.length === 0) return [];
+  const inits = [...content.matchAll(new RegExp(INIT_EMBED_CALL.source, "g"))].map((m) => ({
+    index: m.index,
+    flowEnd: enclosingFlowEnd(content, m.index)
+  }));
+  let depth = 0;
+  let scanned = 0;
+  return reads.filter((at) => {
+    for (; scanned < at; scanned++) {
+      const ch = content[scanned];
+      if (ch === "{") depth++;
+      else if (ch === "}") depth--;
+    }
+    if (depth <= 0) {
+      return !inBracelessArrow(content, at) && !inits.some((init2) => init2.index < at);
+    }
+    const flowEnd = enclosingFlowEnd(content, at);
+    return flowEnd !== content.length && inits.some((init2) => init2.flowEnd === flowEnd && init2.index > at);
+  });
+}
+async function detectShellApis(cwd = process.cwd()) {
+  const manifest = await readManifestCapabilities(cwd);
+  const found = {
+    share: [],
+    clipboard: [],
+    wakeLock: [],
+    newWindow: [],
+    download: [],
+    dialogs: [],
+    serviceWorker: [],
+    motionNoPermission: [],
+    hashBeforeInit: [],
+    capture: [],
+    manifestCapabilities: knownCapabilities(manifest.entries),
+    unknownCapabilities: manifest.entries.filter((entry) => !KNOWN_CAPABILITIES.includes(entry)).map((entry) => {
+      const quoted = JSON.stringify(entry).replace(
+        /[^\x20-\x7e]/g,
+        (ch) => `\\u${ch.charCodeAt(0).toString(16).padStart(4, "0")}`
+      );
+      return quoted.length > 40 ? `${quoted.slice(0, 40)}\u2026` : quoted;
+    }),
+    capabilitiesNotAList: manifest.notAList
+  };
+  let asksMotionPermission = false;
+  for (const file of await readOwnSource(cwd)) {
+    const { rel, content } = file;
+    const add = (into, index, detail) => {
+      const where = `${rel}:${lineOf(content, index)}`;
+      if (!into.some((d) => d.where === where)) into.push({ where, detail });
+    };
+    for (const m of content.matchAll(SHARE_CALL)) add(found.share, m.index, "navigator.share");
+    for (const m of content.matchAll(CLIPBOARD_USE)) add(found.clipboard, m.index, "navigator.clipboard");
+    for (const m of content.matchAll(WAKE_LOCK_USE)) add(found.wakeLock, m.index, "navigator.wakeLock");
+    for (const m of content.matchAll(NEW_WINDOW)) {
+      add(found.newWindow, m.index, m[0].includes("open") ? "window.open" : 'target "_blank"');
+    }
+    if (MAKES_A_LINK.test(content)) {
+      for (const m of content.matchAll(DOWNLOAD_ASSIGN)) add(found.download, m.index, "a.download");
+    }
+    for (const m of content.matchAll(DOWNLOAD_ATTR)) add(found.download, m.index, "a download link");
+    for (const call of dialogCalls(content)) add(found.dialogs, call.index, `${call.name}()`);
+    for (const m of content.matchAll(SERVICE_WORKER)) {
+      add(found.serviceWorker, m.index, "serviceWorker.register");
+    }
+    for (const m of content.matchAll(MOTION_USE)) add(found.motionNoPermission, m.index, "device motion");
+    if (/\brequestPermission\b/.test(content)) asksMotionPermission = true;
+    for (const at of hashReadsBeforeInit(content)) add(found.hashBeforeInit, at, "location.hash");
+    for (const request of mediaRequestsInText(content)) {
+      if (!request.read) add(found.capture, request.index, "getUserMedia");
+    }
+  }
+  if (asksMotionPermission) found.motionNoPermission = [];
+  return found;
+}
 async function detectFeatures(log, cwd = process.cwd()) {
   return {
     embedSdkVersion: await detectEmbedSdkVersion(cwd),
@@ -2627,7 +3264,9 @@ async function detectFeatures(log, cwd = process.cwd()) {
     mobileControls: await detectMobileControls(cwd),
     surfaces: await detectSurfaceScan(cwd),
     generations: await detectGenerationAudit(cwd),
-    embedBoot: await detectEmbedBoot(cwd)
+    embedBoot: await detectEmbedBoot(cwd),
+    capabilities: await detectCapabilities(cwd),
+    shellApis: await detectShellApis(cwd)
   };
 }
 function advisoryNudges(log, d) {
@@ -2641,14 +3280,98 @@ function advisoryNudges(log, d) {
       "Multiplayer will NOT work: @genex-ai/multiplayer needs the embed-sdk token (getColyseusAuth) \u2014 the relay rejects tokenless joins. Wire genex-threejs-embed-auth first."
     );
   }
-  if (d.matchmaking && !d.multiplayer) {
+  if (d.matchmaking && !d.multiplayer) {
+    log.warn(
+      "package.json declares genex.matchmaking but @genex-ai/multiplayer is not installed \u2014 matchmaking cannot work. Install the SDK and use matchmake() (see genex-threejs-multiplayer)."
+    );
+  }
+  embedBootNudges(log, d);
+  shellNudges(log, d);
+  surfaceNudges(log, d.surfaces);
+  generationNudges(log, d.generations);
+}
+function places(found, withDetail = false) {
+  const shown = found.slice(0, 4).map((d) => withDetail ? `${d.where} (${d.detail})` : d.where);
+  const rest = found.length - shown.length;
+  return shown.join(", ") + (rest > 0 ? ` (+${rest} more)` : "");
+}
+function shellNudges(log, d) {
+  const s = d.shellApis;
+  const helper = "from @genex-ai/embed-sdk";
+  let namedHelper = false;
+  if (s.capabilitiesNotAList) {
+    log.warn(
+      `package.json \`genex.capabilities\` is not a list, so it declares nothing. Write the names in a list: "genex": { "capabilities": ["camera"] } \u2014 the names are ${KNOWN_CAPABILITIES.join(", ")}.`
+    );
+  }
+  if (s.unknownCapabilities.length) {
+    log.warn(
+      `package.json \`genex.capabilities\` lists ${s.unknownCapabilities.slice(0, 6).join(", ")}, which Genex does not know, so it gives the game nothing. The names are ${KNOWN_CAPABILITIES.join(", ")}, spelled exactly so.`
+    );
+  }
+  const mediaDeclared = ["microphone", "camera"].filter((name) => d.capabilities.includes(name));
+  if (s.capture.length && mediaDeclared.length < 2 && !s.manifestCapabilities.some((name) => name === "microphone" || name === "camera")) {
+    const declared = mediaDeclared.length ? `only the ${mediaDeclared[0]} is declared for this build` : "nothing in this game declares the microphone or the camera";
+    log.warn(
+      `${places(s.capture)} calls getUserMedia, and ${declared}: the constraints are not written out at the call, so the scan cannot tell which it opens. On the game's Genex page an undeclared microphone or camera is refused without the player being asked, while the same build works on its own link. Say which the game uses in package.json: "genex": { "capabilities": ["microphone"] } (or "camera", or both).`
+    );
+  }
+  if (s.share.length) {
+    namedHelper = true;
+    log.warn(
+      `${places(s.share)} calls navigator.share. It shares whatever the game hands it, and on the game's Genex page \`location.href\` is the bare game address, never the page players should be sent to; some shells have no share sheet at all. share({ text, params }) ${helper} builds the link to the game's page itself, opens the sheet where there is one and copies the link where there is not. Call it inside the click or tap.`
+    );
+  }
+  if (s.clipboard.length) {
+    namedHelper = true;
+    log.warn(
+      `${places(s.clipboard)} uses navigator.clipboard. The game's Genex page gives a framed game clipboard writing and never reading, and a write is still refused without a tap behind it, or in a frame on a page that does not pass it on. copyText(text) ${helper} tries it and falls back to the older copy a frame is allowed after a tap; call it inside the click. To read text, let the player paste into an <input>.`
+    );
+  }
+  if (s.wakeLock.length) {
+    namedHelper = true;
+    log.warn(
+      `${places(s.wakeLock)} uses navigator.wakeLock. The game's Genex page gives it to every framed game, but the browser drops the lock every time the tab is hidden and some browsers have none to give. keepAwake(true) ${helper} takes the lock again when the player comes back, says so where there is none, and answers ok in the Genex app, where the screen already stays on.`
+    );
+  }
+  if (s.newWindow.length) {
+    namedHelper = true;
+    log.warn(
+      `${places(s.newWindow, true)} opens a new window. The game's Genex page gives a game no new windows and the Genex app blocks links out of a game, so there the click does nothing. openExternal(url) ${helper}, called inside the click, is the one call for every shell: on the game's page Genex asks the player and opens the link, on the game's own link it is a new tab, and where links out are not available it answers \`unsupported\` \u2014 show the address instead.`
+    );
+  }
+  if (s.download.length) {
+    namedHelper = true;
+    log.warn(
+      `${places(s.download)} saves a file through a download link. The game's Genex page drops a download started inside a game, with no error. saveFile(blob, name) ${helper}, called inside the click, saves an image, a video, JSON or plain text wherever a shell can: on the game's page Genex asks the player first, and where saving is not available it answers \`unsupported\`.`
+    );
+  }
+  if (s.hashBeforeInit.length && d.embedSdkVersion) {
+    namedHelper = true;
+    log.warn(
+      `${places(s.hashBeforeInit)} reads location.hash where it can run before initEmbed(). On the game's own link the address bar still holds Genex's sign-in fragment at that point, and initEmbed() puts the game's own fragment back without a hashchange event, so that first read is wrong and nothing corrects it. Read the link with getEntry() ${helper}: getEntry().hash and getEntry().params answer the same in every shell, whenever they are asked.`
+    );
+  }
+  if (namedHelper) {
+    log.dim(
+      "  share, copyText, keepAwake, openExternal, saveFile and getEntry ship in the current @genex-ai/embed-sdk. If an import is missing: npm i @genex-ai/embed-sdk@latest"
+    );
+  }
+  if (s.dialogs.length) {
+    log.warn(
+      `${places(s.dialogs, true)} calls a browser dialog. The game's Genex page shows none for a game: alert() does nothing, confirm() answers false and prompt() answers null, with no error, while the same build works on its own link. Draw the dialog in the game's own interface (genex-threejs-game-ui).`
+    );
+  }
+  if (s.motionNoPermission.length) {
+    log.warn(
+      `${places(s.motionNoPermission)} uses device tilt or motion, and nothing in the game calls requestPermission(). An iPhone sends no motion events until the player allows them, and it asks only when DeviceOrientationEvent.requestPermission() is called from a tap inside the game. Ask in the Start tap, treat a refusal or no events at all as "no sensor", and keep the on-screen controls as the fallback (genex-threejs-touch-controls).`
+    );
+  }
+  if (s.serviceWorker.length) {
     log.warn(
-      "package.json declares genex.matchmaking but @genex-ai/multiplayer is not installed \u2014 matchmaking cannot work. Install the SDK and use matchmake() (see genex-threejs-multiplayer)."
+      `${places(s.serviceWorker)} registers a service worker. A returning player's browser then serves the copy it kept: an older build after an update, or a game that has since been taken down, and no deploy reaches it. A Genex game does not register one.`
     );
   }
-  embedBootNudges(log, d);
-  surfaceNudges(log, d.surfaces);
-  generationNudges(log, d.generations);
 }
 function embedBootNudges(log, d) {
   const boot = d.embedBoot;
@@ -2868,403 +3591,142 @@ function auditGenerationPlan(input) {
   if (design.trim().length === 0) return [];
   const assetRows = sectionRows(design, /^##\s+Assets\b/i);
   const proceduralRows = sectionRows(design, /^##\s+Procedural assets\b/i);
-  const rows = [
-    ...assetRows.map(classify),
-    ...proceduralRows.map((c2) => {
-      const r = classify(c2);
-      return r === null ? null : { ...r, lane: null, procedural: true };
-    })
-  ].filter((r) => r !== null);
-  const declaredLanes = /* @__PURE__ */ new Set();
-  for (const m of design.matchAll(LANE_TOKEN)) {
-    const lane = m[1] ? LANE_OF_SKILL[m[1]] : void 0;
-    if (lane) declaredLanes.add(lane);
-  }
-  const lanesRun = new Set(
-    ledger.filter((e) => e.status === "completed").map((e) => LANE_OF_KIND[e.kind] ?? e.kind)
-  );
-  const lanesPending = new Set(
-    ledger.filter((e) => e.status === "queued").map((e) => LANE_OF_KIND[e.kind] ?? e.kind).filter((lane) => !lanesRun.has(lane))
-  );
-  const warnings = [];
-  const noneMarker = GENERATION_NONE.exec(design);
-  const explained = noneMarker !== null && isFilledReason(noneMarker[1]);
-  const reconciled = /* @__PURE__ */ new Set();
-  for (const row of rows) {
-    const reason = /\bReason:\s*(.+)/i.exec(row.detail)?.[1];
-    if (row.procedural) {
-      if (/\b(replaced|substitut\w*|fallback|instead of)\b/i.test(row.detail) && !explained && !isFilledReason(reason)) {
-        warnings.push(`DESIGN.md substitutes procedural work for ${row.name} without a recorded reason. Record why this choice fits (including budget limits or declined generation); no purchase is required.`);
-      }
-      continue;
-    }
-    const tokens2 = new Set(row.detail.split(/[^a-zA-Z0-9_-]+/));
-    const explicit = ledger.filter((entry) => tokens2.has(entry.id));
-    const exact = explicit.length ? explicit : ledger.filter((entry) => entry.prompt.trim().toLowerCase() === row.name.toLowerCase() && (LANE_OF_KIND[entry.kind] ?? entry.kind) === row.lane);
-    if (!exact.length) continue;
-    reconciled.add(row);
-    for (const entry of exact) {
-      if (entry.status === "queued") warnings.push(`DESIGN.md asset ${row.name} (${entry.id}) is pending. Check the existing request; do not enqueue a duplicate.`);
-      else if (entry.status === "failed") warnings.push(`DESIGN.md asset ${row.name} (${entry.id}) failed. Record a recovery or substitution decision; budget limits and declined generation are valid reasons.`);
-      else if (input.unreferencedIds?.has(entry.id)) warnings.push(`DESIGN.md asset ${row.name} (${entry.id}) completed but its output is not referenced by the source audit. Check delivery/integration or record why it was omitted. A reference alone does not prove visible use.`);
-    }
-  }
-  const owed = /* @__PURE__ */ new Map();
-  for (const row of rows) {
-    if (row.procedural || row.lane === null || reconciled.has(row)) continue;
-    if (row.status !== "planned" && row.status !== "generating") continue;
-    if (lanesRun.has(row.lane)) {
-      if (rows.filter((other) => other.lane === row.lane).length > 1) warnings.push(`DESIGN.md asset ${row.name} has no matched generation id. Other ${row.lane} work completed, but that does not establish this asset's delivery. Record its id or the substitution reason.`);
-      continue;
-    }
-    if (lanesPending.has(row.lane)) {
-      warnings.push(`DESIGN.md plans ${row.name}; its ${row.lane} lane has pending work. Check the existing request and record its id; do not enqueue a duplicate.`);
-      continue;
-    }
-    if (row.lane === "skybox") continue;
-    const held = owed.get(row.lane) ?? [];
-    held.push(row.status === "generating" ? `${row.name} (says generating, not in this project's ledger)` : row.name);
-    owed.set(row.lane, held);
-  }
-  for (const lane of declaredLanes) {
-    if (lanesRun.has(lane) || lanesPending.has(lane) || owed.has(lane) || lane === "skybox") continue;
-    if (!rows.some((r) => r.lane === lane)) owed.set(lane, ["declared as this subsystem's lane"]);
-  }
-  for (const [lane, names2] of owed) {
-    const shown = names2.slice(0, 3).join(", ") + (names2.length > 3 ? `, +${names2.length - 3} more` : "");
-    warnings.push(
-      `DESIGN.md plans generated ${lane} work (${shown}) and this project has no ${lane} generation that landed \u2014 the plan says so and the generation ledger has nothing completed. Generate it (${LANE_COMMAND[lane] ?? `npx genex ${lane}`} "<prompt>" --no-wait), or change the row to say what happens instead and why.`
-    );
-  }
-  const paidRows = rows.filter((r) => !r.procedural);
-  const codeRows = rows.filter((r) => r.procedural);
-  if (paidRows.length === 0 && codeRows.length >= 1 && ledger.length === 0 && !explained) {
-    warnings.push(
-      "DESIGN.md's asset plan is all code-built rows and this project has never run a generation. What the player sees must read as the thing it is (build contract, law 22): a coloured box or a capsule is not a finished building, person, or prop. Generate what the request names and what the player looks at up close (npx genex model / texture / music \u2026 --no-wait), or write a `Generation: none \u2014` line beside the table ending in your own sentence about why code alone reaches the bar in THIS game. " + (noneMarker ? "The line is there but its reason is still the unfilled template \u2014 replace it with the actual reason." : "")
-    );
-  }
-  return warnings;
-}
-
-// src/lib/deploy.ts
-import crypto2 from "crypto";
-import fs17 from "fs/promises";
-import os5 from "os";
-import path17 from "path";
-
-// src/lib/source-size.ts
-import fs14 from "fs/promises";
-import path15 from "path";
-var FALLBACK_SOURCE_LIMITS = {
-  maxTotalBytes: 2 * 1024 * 1024 * 1024,
-  maxFiles: 5e3
-};
-function isOversized(p, limits) {
-  return p.bytes >= limits.maxTotalBytes || p.files >= limits.maxFiles;
-}
-function formatBytes2(n) {
-  if (n >= 1024 ** 3) return `${(n / 1024 ** 3).toFixed(1)} GB`;
-  if (n >= 1024 ** 2) return `${Math.round(n / 1024 ** 2)} MB`;
-  if (n >= 1024) return `${Math.round(n / 1024)} KB`;
-  return `${n} B`;
-}
-function groupByDir(entries, limit = 5) {
-  const acc = /* @__PURE__ */ new Map();
-  for (const [file, bytes] of entries) {
-    const dirParts = file.split("/").slice(0, -1).slice(0, 2);
-    const dir = dirParts.length > 0 ? dirParts.join("/") : "(root)";
-    const row = acc.get(dir) ?? { dir, files: 0, bytes: 0 };
-    row.files += 1;
-    row.bytes += bytes;
-    acc.set(dir, row);
-  }
-  return [...acc.values()].sort((a, b) => b.bytes - a.bytes).slice(0, limit);
-}
-function oversizedLines(p, limits) {
-  return [
-    `This is ${formatBytes2(p.bytes)} across ${p.files} files, past the ${formatBytes2(limits.maxTotalBytes)} / ${limits.maxFiles} file limit on this account.`,
-    "Heaviest directories:",
-    ...p.top.map((d) => `  ${formatBytes2(d.bytes).padStart(8)}  ${String(d.files).padStart(6)} files  ${d.dir}`),
-    "Screenshots, traces and reports made while building are not part of the game \u2014",
-    "put them in .genex/scratch/ (already ignored), or add the folders above to .gitignore.",
-    "If this really is the game, ask an admin to raise the source limit on your account."
-  ];
-}
-async function measurePayload(cwd, staged) {
-  const entries = [];
-  let bytes = 0;
-  for (const file of staged) {
-    let size = 0;
-    try {
-      size = (await fs14.stat(path15.join(cwd, file))).size;
-    } catch {
-      size = 0;
-    }
-    bytes += size;
-    entries.push([file, size]);
-  }
-  return { files: staged.length, bytes, top: groupByDir(entries) };
-}
-
-// ../../packages/mobile-scan/src/image-dims.ts
-function u32be(b, o) {
-  return (b[o] << 24 | b[o + 1] << 16 | b[o + 2] << 8 | b[o + 3]) >>> 0;
-}
-function u32le(b, o) {
-  return (b[o] | b[o + 1] << 8 | b[o + 2] << 16 | b[o + 3] << 24) >>> 0;
-}
-function u16be(b, o) {
-  return b[o] << 8 | b[o + 1];
-}
-function u16le(b, o) {
-  return b[o] | b[o + 1] << 8;
-}
-function isPng(b) {
-  return b.length > 24 && b[0] === 137 && b[1] === 80 && b[2] === 78 && b[3] === 71 && b[4] === 13 && b[5] === 10 && b[6] === 26 && b[7] === 10;
-}
-var KTX2_MAGIC = [171, 75, 84, 88, 32, 50, 48, 187, 13, 10, 26, 10];
-function parseImageDims(bytes) {
-  if (bytes.length < 30) return null;
-  if (isPng(bytes)) {
-    return { width: u32be(bytes, 16), height: u32be(bytes, 20) };
-  }
-  if (bytes[0] === 255 && bytes[1] === 216) {
-    let i = 2;
-    while (i + 9 < bytes.length) {
-      if (bytes[i] !== 255) {
-        i++;
-        continue;
-      }
-      const marker = bytes[i + 1];
-      if (marker === 255) {
-        i++;
-        continue;
-      }
-      if (marker === 216 || marker >= 208 && marker <= 217) {
-        i += 2;
-        continue;
-      }
-      const isSof = marker >= 192 && marker <= 195 || marker >= 197 && marker <= 199 || marker >= 201 && marker <= 203 || marker >= 205 && marker <= 207;
-      if (isSof) {
-        return { width: u16be(bytes, i + 7), height: u16be(bytes, i + 5) };
-      }
-      i += 2 + u16be(bytes, i + 2);
-    }
-    return null;
-  }
-  if (bytes[0] === 82 && // RIFF….WEBP
-  bytes[1] === 73 && bytes[2] === 70 && bytes[3] === 70 && bytes[8] === 87 && bytes[9] === 69 && bytes[10] === 66 && bytes[11] === 80) {
-    const fourcc = String.fromCharCode(bytes[12], bytes[13], bytes[14], bytes[15]);
-    if (fourcc === "VP8X" && bytes.length >= 30) {
-      const w = 1 + (bytes[24] | bytes[25] << 8 | bytes[26] << 16);
-      const h = 1 + (bytes[27] | bytes[28] << 8 | bytes[29] << 16);
-      return { width: w, height: h };
-    }
-    if (fourcc === "VP8 " && bytes.length >= 30) {
-      return { width: u16le(bytes, 26) & 16383, height: u16le(bytes, 28) & 16383 };
-    }
-    if (fourcc === "VP8L" && bytes.length >= 25 && bytes[20] === 47) {
-      const b0 = bytes[21];
-      const b1 = bytes[22];
-      const b2 = bytes[23];
-      const b3 = bytes[24];
-      const width = 1 + ((b1 & 63) << 8 | b0);
-      const height = 1 + ((b3 & 15) << 10 | b2 << 2 | (b1 & 192) >> 6);
-      return { width, height };
-    }
-    return null;
-  }
-  if (KTX2_MAGIC.every((v, idx) => bytes[idx] === v)) {
-    return { width: u32le(bytes, 20), height: u32le(bytes, 24), ktx2: true };
-  }
-  return null;
-}
-
-// ../../packages/mobile-scan/src/glb.ts
-function u32le2(b, o) {
-  return (b[o] | b[o + 1] << 8 | b[o + 2] << 16 | b[o + 3] << 24) >>> 0;
-}
-function scanGlb(bytes) {
-  if (bytes.length < 20 || u32le2(bytes, 0) !== 1179937895) return null;
-  try {
-    const jsonLen = u32le2(bytes, 12);
-    if (u32le2(bytes, 16) !== 1313821514) return null;
-    const json = JSON.parse(new TextDecoder().decode(bytes.subarray(20, 20 + jsonLen)));
-    let bin = null;
-    const binHeader = 20 + jsonLen;
-    if (binHeader + 8 <= bytes.length && u32le2(bytes, binHeader + 4) === 5130562) {
-      bin = bytes.subarray(binHeader + 8, binHeader + 8 + u32le2(bytes, binHeader));
-    }
-    const images = [];
-    for (const img of json.images ?? []) {
-      if (img.bufferView == null || !bin) continue;
-      const view = json.bufferViews?.[img.bufferView];
-      if (!view?.byteLength) continue;
-      const slice = bin.subarray(view.byteOffset ?? 0, (view.byteOffset ?? 0) + view.byteLength);
-      const dims = parseImageDims(slice);
-      if (dims) images.push({ ...dims, mimeType: img.mimeType, bytes: view.byteLength });
-    }
-    let triangles = 0;
-    for (const mesh of json.meshes ?? []) {
-      for (const prim of mesh.primitives ?? []) {
-        const accessor = prim.indices != null ? json.accessors?.[prim.indices] : json.accessors?.[prim.attributes?.POSITION ?? -1];
-        if (accessor?.count) triangles += Math.floor(accessor.count / 3);
-      }
-    }
-    return {
-      triangles,
-      binBytes: bin?.byteLength ?? 0,
-      images,
-      extensions: json.extensionsUsed ?? []
-    };
-  } catch {
-    return null;
+  const rows = [
+    ...assetRows.map(classify),
+    ...proceduralRows.map((c2) => {
+      const r = classify(c2);
+      return r === null ? null : { ...r, lane: null, procedural: true };
+    })
+  ].filter((r) => r !== null);
+  const declaredLanes = /* @__PURE__ */ new Set();
+  for (const m of design.matchAll(LANE_TOKEN)) {
+    const lane = m[1] ? LANE_OF_SKILL[m[1]] : void 0;
+    if (lane) declaredLanes.add(lane);
   }
-}
-
-// ../../packages/mobile-scan/src/scan.ts
-var GENEX_GENERATION_URL_RE = /https:\/\/[A-Za-z0-9.-]+\/generations\/([A-Za-z0-9._-]+)\/([A-Za-z0-9._@-]+)/g;
-var SKYBOX_ROLE = "skybox-equirect";
-var MOBILE_RUNG_SUFFIX_RE = /@(\d+)$/;
-var MOBILE_BUDGET_MB = { broad: 300, modern: 700 };
-var TEXT_EXT = /\.(js|mjs|cjs|html|css|json|txt)$/i;
-var IMAGE_EXT = /\.(png|jpe?g|webp|ktx2)$/i;
-var VIDEO_EXT = /\.(mp4|webm|mov)$/i;
-var AUDIO_EXT = /\.(mp3|ogg|wav|m4a)$/i;
-var GLB_EXT = /\.(glb|gltf)$/i;
-function scanBundle(files) {
-  const images = [];
-  const glbs = [];
-  const videos = [];
-  const audio = [];
-  const urls = /* @__PURE__ */ new Set();
-  let text = "";
-  let totalBytes = 0;
-  for (const f of files) {
-    totalBytes += f.bytes.byteLength;
-    if (IMAGE_EXT.test(f.relPath)) {
-      const dims = parseImageDims(f.bytes);
-      if (dims) images.push({ path: f.relPath, bytes: f.bytes.byteLength, ...dims });
+  const lanesRun = new Set(
+    ledger.filter((e) => e.status === "completed").map((e) => LANE_OF_KIND[e.kind] ?? e.kind)
+  );
+  const lanesPending = new Set(
+    ledger.filter((e) => e.status === "queued").map((e) => LANE_OF_KIND[e.kind] ?? e.kind).filter((lane) => !lanesRun.has(lane))
+  );
+  const warnings = [];
+  const noneMarker = GENERATION_NONE.exec(design);
+  const explained = noneMarker !== null && isFilledReason(noneMarker[1]);
+  const reconciled = /* @__PURE__ */ new Set();
+  for (const row of rows) {
+    const reason = /\bReason:\s*(.+)/i.exec(row.detail)?.[1];
+    if (row.procedural) {
+      if (/\b(replaced|substitut\w*|fallback|instead of)\b/i.test(row.detail) && !explained && !isFilledReason(reason)) {
+        warnings.push(`DESIGN.md substitutes procedural work for ${row.name} without a recorded reason. Record why this choice fits (including budget limits or declined generation); no purchase is required.`);
+      }
       continue;
     }
-    if (GLB_EXT.test(f.relPath)) {
-      glbs.push({ path: f.relPath, bytes: f.bytes.byteLength, scan: scanGlb(f.bytes) });
-      continue;
+    const tokens2 = new Set(row.detail.split(/[^a-zA-Z0-9_-]+/));
+    const explicit = ledger.filter((entry) => tokens2.has(entry.id));
+    const exact = explicit.length ? explicit : ledger.filter((entry) => entry.prompt.trim().toLowerCase() === row.name.toLowerCase() && (LANE_OF_KIND[entry.kind] ?? entry.kind) === row.lane);
+    if (!exact.length) continue;
+    reconciled.add(row);
+    for (const entry of exact) {
+      if (entry.status === "queued") warnings.push(`DESIGN.md asset ${row.name} (${entry.id}) is pending. Check the existing request; do not enqueue a duplicate.`);
+      else if (entry.status === "failed") warnings.push(`DESIGN.md asset ${row.name} (${entry.id}) failed. Record a recovery or substitution decision; budget limits and declined generation are valid reasons.`);
+      else if (input.unreferencedIds?.has(entry.id)) warnings.push(`DESIGN.md asset ${row.name} (${entry.id}) completed but its output is not referenced by the source audit. Check delivery/integration or record why it was omitted. A reference alone does not prove visible use.`);
     }
-    if (VIDEO_EXT.test(f.relPath)) {
-      videos.push({ path: f.relPath, bytes: f.bytes.byteLength });
+  }
+  const owed = /* @__PURE__ */ new Map();
+  for (const row of rows) {
+    if (row.procedural || row.lane === null || reconciled.has(row)) continue;
+    if (row.status !== "planned" && row.status !== "generating") continue;
+    if (lanesRun.has(row.lane)) {
+      if (rows.filter((other) => other.lane === row.lane).length > 1) warnings.push(`DESIGN.md asset ${row.name} has no matched generation id. Other ${row.lane} work completed, but that does not establish this asset's delivery. Record its id or the substitution reason.`);
       continue;
     }
-    if (AUDIO_EXT.test(f.relPath)) {
-      audio.push({ path: f.relPath, bytes: f.bytes.byteLength });
+    if (lanesPending.has(row.lane)) {
+      warnings.push(`DESIGN.md plans ${row.name}; its ${row.lane} lane has pending work. Check the existing request and record its id; do not enqueue a duplicate.`);
       continue;
     }
-    if (TEXT_EXT.test(f.relPath)) {
-      text += new TextDecoder().decode(f.bytes.subarray(0, 8 * 1024 * 1024));
-      text += "\n";
-    }
+    if (row.lane === "skybox") continue;
+    const held = owed.get(row.lane) ?? [];
+    held.push(row.status === "generating" ? `${row.name} (says generating, not in this project's ledger)` : row.name);
+    owed.set(row.lane, held);
   }
-  for (const m of text.matchAll(GENEX_GENERATION_URL_RE)) urls.add(m[0]);
-  const dprMatch = text.match(/setPixelRatio\(\s*Math\.min\([^,)]+,\s*([\d.]+)\s*\)/);
-  const markers = {
-    rendererBackend: text.includes("WebGPURenderer") || text.includes("getContext('webgpu')") || text.includes('"webgpu"') ? "webgpu" : "webgl",
-    postStack: /EffectComposer|postprocessing|PostProcessing|RenderPipeline/.test(text),
-    dprCapLiteral: dprMatch?.[1] ? Number(dprMatch[1]) : null,
-    contextLossHandler: text.includes("webglcontextlost") || text.includes("device.lost"),
-    ktx2Loader: text.includes("KTX2Loader") || text.includes(".ktx2"),
-    touchHints: /joystick/i.test(text) || text.includes("touchstart") && text.includes("touch-action"),
-    adaptiveQuality: text.includes("__GENEX_QUALITY__"),
-    modelRungs: text.includes("__GENEX_MODEL_RUNGS__"),
-    voice: text.includes("__GENEX_VOICE__")
-  };
-  return {
-    images,
-    glbs,
-    videos,
-    audio,
-    genexAssetUrls: [...urls],
-    markers,
-    totalBytes,
-    fileCount: files.length
-  };
+  for (const lane of declaredLanes) {
+    if (lanesRun.has(lane) || lanesPending.has(lane) || owed.has(lane) || lane === "skybox") continue;
+    if (!rows.some((r) => r.lane === lane)) owed.set(lane, ["declared as this subsystem's lane"]);
+  }
+  for (const [lane, names2] of owed) {
+    const shown = names2.slice(0, 3).join(", ") + (names2.length > 3 ? `, +${names2.length - 3} more` : "");
+    warnings.push(
+      `DESIGN.md plans generated ${lane} work (${shown}) and this project has no ${lane} generation that landed \u2014 the plan says so and the generation ledger has nothing completed. Generate it (${LANE_COMMAND[lane] ?? `npx genex ${lane}`} "<prompt>" --no-wait), or change the row to say what happens instead and why.`
+    );
+  }
+  const paidRows = rows.filter((r) => !r.procedural);
+  const codeRows = rows.filter((r) => r.procedural);
+  if (paidRows.length === 0 && codeRows.length >= 1 && ledger.length === 0 && !explained) {
+    warnings.push(
+      "DESIGN.md's asset plan is all code-built rows and this project has never run a generation. What the player sees must read as the thing it is (build contract, law 22): a coloured box or a capsule is not a finished building, person, or prop. Generate what the request names and what the player looks at up close (npx genex model / texture / music \u2026 --no-wait), or write a `Generation: none \u2014` line beside the table ending in your own sentence about why code alone reaches the bar in THIS game. " + (noneMarker ? "The line is there but its reason is still the unfilled template \u2014 replace it with the actual reason." : "")
+    );
+  }
+  return warnings;
 }
 
-// ../../packages/mobile-scan/src/estimate.ts
-var MB = 1024 * 1024;
-var CSS_W = 430;
-var CSS_H = 932;
-var WORST_SKYBOX_BYTES = 8192 * 4096 * 4 * 1.33;
-var WORST_IMAGE_BYTES = 2048 * 2048 * 4 * 1.33;
-var KTX2_DISCOUNT = 6;
-function textureBytes(w, h, ktx2) {
-  const raw = w * h * 4 * 1.33;
-  return ktx2 ? raw / KTX2_DISCOUNT : raw;
+// src/lib/deploy.ts
+import crypto2 from "crypto";
+import fs17 from "fs/promises";
+import os5 from "os";
+import path17 from "path";
+
+// src/lib/source-size.ts
+import fs14 from "fs/promises";
+import path15 from "path";
+var FALLBACK_SOURCE_LIMITS = {
+  maxTotalBytes: 2 * 1024 * 1024 * 1024,
+  maxFiles: 5e3
+};
+function isOversized(p, limits) {
+  return p.bytes >= limits.maxTotalBytes || p.files >= limits.maxFiles;
 }
-function estimateVram(scan, externalDims) {
-  let bundled = 0;
-  let maxDim = 0;
-  for (const img of scan.images) {
-    bundled += textureBytes(img.width, img.height, img.ktx2);
-    maxDim = Math.max(maxDim, img.width, img.height);
-  }
-  let glbTex = 0;
-  let geometry = 0;
-  for (const glb of scan.glbs) {
-    if (!glb.scan) {
-      geometry += glb.bytes;
-      continue;
-    }
-    const ktx2 = glb.scan.extensions.some((e) => e.includes("KHR_texture_basisu"));
-    for (const img of glb.scan.images) {
-      glbTex += textureBytes(img.width, img.height, img.ktx2 || ktx2);
-      maxDim = Math.max(maxDim, img.width, img.height);
-    }
-    geometry += Math.max(0, glb.scan.binBytes - glb.scan.images.reduce((s, i) => s + i.bytes, 0));
+function formatBytes2(n) {
+  if (n >= 1024 ** 3) return `${(n / 1024 ** 3).toFixed(1)} GB`;
+  if (n >= 1024 ** 2) return `${Math.round(n / 1024 ** 2)} MB`;
+  if (n >= 1024) return `${Math.round(n / 1024)} KB`;
+  return `${n} B`;
+}
+function groupByDir(entries, limit = 5) {
+  const acc = /* @__PURE__ */ new Map();
+  for (const [file, bytes] of entries) {
+    const dirParts = file.split("/").slice(0, -1).slice(0, 2);
+    const dir = dirParts.length > 0 ? dirParts.join("/") : "(root)";
+    const row = acc.get(dir) ?? { dir, files: 0, bytes: 0 };
+    row.files += 1;
+    row.bytes += bytes;
+    acc.set(dir, row);
   }
-  let external = 0;
-  const unresolved = [];
-  for (const url of scan.genexAssetUrls) {
-    const role = url.split("/").pop() ?? "";
-    if (MOBILE_RUNG_SUFFIX_RE.test(role)) continue;
-    const dims = externalDims.get(url);
-    if (dims) {
-      const ktx2 = dims.ktx2 || dims.ktx2Available === true && scan.markers.ktx2Loader;
-      if (dims.glb) {
-        external += textureBytes(dims.width, dims.height, ktx2) + (dims.bytes ?? 0);
-        maxDim = Math.max(maxDim, dims.width);
-      } else {
-        external += textureBytes(dims.width, dims.height, ktx2);
-        maxDim = Math.max(maxDim, dims.width, dims.height);
-      }
-    } else {
-      unresolved.push(url);
-      external += role === SKYBOX_ROLE ? WORST_SKYBOX_BYTES : WORST_IMAGE_BYTES;
-      maxDim = Math.max(maxDim, role === SKYBOX_ROLE ? 8192 : 2048);
+  return [...acc.values()].sort((a, b) => b.bytes - a.bytes).slice(0, limit);
+}
+function oversizedLines(p, limits) {
+  return [
+    `This is ${formatBytes2(p.bytes)} across ${p.files} files, past the ${formatBytes2(limits.maxTotalBytes)} / ${limits.maxFiles} file limit on this account.`,
+    "Heaviest directories:",
+    ...p.top.map((d) => `  ${formatBytes2(d.bytes).padStart(8)}  ${String(d.files).padStart(6)} files  ${d.dir}`),
+    "Screenshots, traces and reports made while building are not part of the game \u2014",
+    "put them in .genex/scratch/ (already ignored), or add the folders above to .gitignore.",
+    "If this really is the game, ask an admin to raise the source limit on your account."
+  ];
+}
+async function measurePayload(cwd, staged) {
+  const entries = [];
+  let bytes = 0;
+  for (const file of staged) {
+    let size = 0;
+    try {
+      size = (await fs14.stat(path15.join(cwd, file))).size;
+    } catch {
+      size = 0;
     }
+    bytes += size;
+    entries.push([file, size]);
   }
-  const dpr = Math.min(scan.markers.dprCapLiteral ?? 2, 3);
-  const surface = CSS_W * CSS_H * dpr * dpr * 4;
-  const framebuffers = surface * (3 + (scan.markers.postStack ? 4 : 0));
-  const shadow = 2048 * 2048 * 4;
-  const total = bundled + glbTex + external + framebuffers + shadow + geometry;
-  return {
-    estVramMb: Math.round(total / MB),
-    breakdown: {
-      bundledTexturesMb: Math.round(bundled / MB),
-      glbTexturesMb: Math.round(glbTex / MB),
-      externalTexturesMb: Math.round(external / MB),
-      framebuffersMb: Math.round(framebuffers / MB),
-      shadowDefaultMb: Math.round(shadow / MB),
-      geometryMb: Math.round(geometry / MB)
-    },
-    unresolvedExternals: unresolved,
-    textureMaxDim: maxDim
-  };
-}
-function tierFor(estVramMb) {
-  if (estVramMb < MOBILE_BUDGET_MB.broad) return "mobile-broad";
-  if (estVramMb < MOBILE_BUDGET_MB.modern) return "mobile-modern";
-  return "over-budget";
+  return { files: staged.length, bytes, top: groupByDir(entries) };
 }
 
 // src/commands/ui.ts
@@ -5093,9 +5555,25 @@ async function uiAudit(opts, log) {
 }
 
 // src/lib/deploy.ts
+function goLiveCapabilities(declared, scanned) {
+  const own = knownCapabilities(declared ?? []);
+  if (scanned === void 0) return own.length > 0 ? own : void 0;
+  return knownCapabilities([...own, ...scanned]);
+}
+function printCapabilityPreflight(capabilities, log) {
+  if (capabilities === void 0) return;
+  if (capabilities.length > 0) {
+    log.info(`On its Genex page this build is given: ${capabilities.join(", ")}.`);
+  } else {
+    log.dim(
+      `  On its Genex page this build is given nothing that needs a permission (${KNOWN_CAPABILITIES.join(", ")}).`
+    );
+  }
+}
 function printMobilePreflight(files, log) {
+  let scan = null;
   try {
-    const scan = scanBundle(files.map((f) => ({ relPath: f.relPath, bytes: f.bytes })));
+    scan = scanBundle(files.map((f) => ({ relPath: f.relPath, bytes: f.bytes })));
     const externalDims = /* @__PURE__ */ new Map();
     for (const url of scan.genexAssetUrls) {
       const role = url.split("/").pop() ?? "";
@@ -5112,7 +5590,7 @@ function printMobilePreflight(files, log) {
     const line = `Mobile preflight: ~${est.estVramMb} MB est. GPU memory on phones (budget: <${MOBILE_BUDGET_MB.broad} MB broad, <${MOBILE_BUDGET_MB.modern} MB modern) \u2014 ${tier}.`;
     if (tier === "mobile-broad") {
       log.dim(`  ${line}`);
-      return;
+      return scan;
     }
     log.warn(line);
     for (const url of est.unresolvedExternals) {
@@ -5140,6 +5618,7 @@ function printMobilePreflight(files, log) {
     }
   } catch {
   }
+  return scan;
 }
 async function printUiAuditPreflight(log) {
   try {
@@ -5246,7 +5725,9 @@ async function deployGame(ctx, opts, log) {
     if (lfsPointers.length > 8) log.dim(`  \u2026and ${lfsPointers.length - 8} more`);
     return false;
   }
-  printMobilePreflight(files, log);
+  const scan = printMobilePreflight(files, log);
+  const capabilities = scan?.capabilitiesIncomplete ? goLiveCapabilities([...opts.capabilities ?? [], ...scan.capabilities], void 0) : goLiveCapabilities(opts.capabilities, scan?.capabilities);
+  printCapabilityPreflight(capabilities, log);
   await printUiAuditPreflight(log);
   if (await workspaceMode(cwd) === "game") await printPipelineStatePreflight(log);
   const commit = contentCommit(files);
@@ -5293,7 +5774,7 @@ async function deployGame(ctx, opts, log) {
   );
   if (pushed !== true) return false;
   log.step("Publishing\u2026");
-  const published = await callPublish(ctx, commit, opts, log, sourceCommitSha);
+  const published = await callPublish(ctx, commit, opts, log, sourceCommitSha, capabilities);
   if (!published) return false;
   if (opts.channel === "staging") {
     const tree = await sourceTreeHash(cwd);
@@ -5515,7 +5996,7 @@ async function uploadPartWithRetry(base, encoded, auth, uploadId, partNumber, by
     await new Promise((resolve) => setTimeout(resolve, attempt === 0 ? 500 : 2e3));
   }
 }
-async function callPublish(ctx, commit, opts, log, sourceCommitSha) {
+async function callPublish(ctx, commit, opts, log, sourceCommitSha, capabilities) {
   let res;
   try {
     res = await apiFetch(`${ctx.apiUrl}/api/games/${ctx.projectId}/publish`, {
@@ -5531,6 +6012,11 @@ async function callPublish(ctx, commit, opts, log, sourceCommitSha) {
         ...opts.embedSdkVersion ? { embedSdkVersion: opts.embedSdkVersion } : {},
         ...opts.multiplayer !== void 0 ? { multiplayer: opts.multiplayer } : {},
         ...opts.mobileControls !== void 0 ? { mobileControls: opts.mobileControls } : {},
+        // The build's declared capabilities, on both channels: a preview's list
+        // is what the owner's own preview frame is given, and a promotion
+        // carries it to production with the build. An API from before the
+        // field strips it, so the two can deploy in either order.
+        ...capabilities !== void 0 ? { capabilities } : {},
         // Recorded into the release history and acted on by nothing. Absent when
         // the source push produced no commit (a user's own repo, or a failure
         // that already stopped the deploy), which the server accepts as null.
@@ -6147,6 +6633,9 @@ async function runPreview(opts) {
     // declared preset doesn't silently run the default (null clears a removed
     // config), embedSdkVersion/multiplayer so the dashboard's Publish button can
     // list the draft without wrongly treating it as a pre-embed-auth bundle.
+    // Capabilities ride the preview for a different reason: the staging build's
+    // own list is what the owner's preview frame is given, so a microphone or
+    // camera can be tried before anything is published.
     {
       // Preview goes to the STAGING channel — the whole point of the release
       // cycle. Before channels this same call replaced the build every player
@@ -6157,7 +6646,8 @@ async function runPreview(opts) {
       matchmaking: detections.matchmaking,
       embedSdkVersion: detections.embedSdkVersion,
       multiplayer: detections.multiplayer,
-      mobileControls: detections.mobileControls
+      mobileControls: detections.mobileControls,
+      capabilities: detections.capabilities
     },
     log
   );
@@ -7968,7 +8458,10 @@ async function runPublish(opts) {
         matchmaking: detections.matchmaking,
         embedSdkVersion: detections.embedSdkVersion,
         multiplayer: detections.multiplayer,
-        mobileControls: detections.mobileControls
+        mobileControls: detections.mobileControls,
+        // Declared on the staging go-live; the promotion below copies that
+        // build's own list to production with it.
+        capabilities: detections.capabilities
       },
       log
     );