@hyperframes/studio-server 0.8.81 → 0.8.83

package/dist/index.js

@@ -13,7 +13,7 @@ import {
   splitElementInHtml,
   unwrapElementsFromHtml,
   wrapElementsInHtml
-} from "./chunk-P5EJPIH3.js";
+} from "./chunk-W6TFBTP2.js";
 import {
   getElementScreenshotClip
 } from "./chunk-W2SBTCO2.js";
@@ -22,18 +22,21 @@ import {
   isAutoProxyEnabled,
   proxyEtagSalt,
   resolvePreviewMediaCodecProbeCache
-} from "./chunk-FTDTO3QP.js";
+} from "./chunk-HWBORC2U.js";
 import {
   ProxyCapacityError,
   ProxyTranscodeError,
   resolveProxy
-} from "./chunk-G6IIFKXY.js";
+} from "./chunk-EL3UQI46.js";
 import {
   PROXY_VARIANT_CONFIG,
   decideMediaProxyEligibility,
+  folderGone,
   isInHiddenOrVendorDir,
+  isProjectRootMissing,
   isProxyVariantRequest,
   isSafePath,
+  mkdirWithinProject,
   pinWithinProject,
   probeAssetCodec,
   probeMediaMetadata,
@@ -43,7 +46,7 @@ import {
   resolveProxyVariantRequest,
   resolveWithinProject,
   walkDir
-} from "./chunk-TJQ76IEA.js";
+} from "./chunk-WQ2WF2YJ.js";
 import {
   STUDIO_MANUAL_EDITS_PATH,
   createStudioManualEditsRenderBodyScript,
@@ -64,15 +67,7 @@ import { join as join2 } from "path";
 // src/helpers/hfIdPersist.ts
 import { ensureHfIds } from "@hyperframes/parsers/hf-ids";
 import { createHash } from "crypto";
-import {
-  closeSync,
-  constants,
-  fstatSync,
-  mkdirSync,
-  openSync,
-  readFileSync,
-  writeFileSync
-} from "fs";
+import { closeSync, constants, fstatSync, openSync, readFileSync, writeFileSync } from "fs";
 import { dirname, join } from "path";
 
 // src/helpers/atomicFile.ts
@@ -123,7 +118,7 @@ function stampProjectHfIds(projectDir) {
     next[file] = hash;
   }
   try {
-    mkdirSync(dirname(recordPath), { recursive: true });
+    mkdirWithinProject(projectDir, dirname(recordPath));
     writeFileSync(recordPath, JSON.stringify(next));
   } catch {
   }
@@ -408,7 +403,6 @@ import {
   readlinkSync,
   writeFileSync as writeFileSync5,
   writeSync,
-  mkdirSync as mkdirSync4,
   unlinkSync as unlinkSync2,
   rmSync as rmSync3,
   statSync as statSync3,
@@ -469,7 +463,7 @@ import { spawn } from "child_process";
 import {
   existsSync,
   writeFileSync as writeFileSync2,
-  mkdirSync as mkdirSync2,
+  mkdirSync,
   lstatSync as lstatSync2,
   mkdtempSync,
   renameSync,
@@ -558,7 +552,7 @@ function isWaveformCacheDirectory(cacheDir) {
 function writeWaveformCache(cachePath, peaks) {
   const cacheDir = dirname2(cachePath);
   try {
-    mkdirSync2(cacheDir, { mode: 448 });
+    mkdirSync(cacheDir, { mode: 448 });
   } catch (error) {
     if (!(error instanceof Error && "code" in error && error.code === "EEXIST")) throw error;
   }
@@ -583,27 +577,41 @@ import { spawnSync } from "child_process";
 import { mkdtempSync as mkdtempSync2, rmSync as rmSync2, writeFileSync as writeFileSync3 } from "fs";
 import { tmpdir } from "os";
 import { basename, join as join4 } from "path";
+import { FFPROBE_PATH_ENV, findFfBinary as findFfBinary2 } from "@hyperframes/parsers/ff-binaries";
 var VIDEO_EXT = /\.(mp4|webm|mov|mkv|avi|m4v|mxf|mts|m2ts|ts)$/i;
-var AUDIO_EXT = /\.(mp3|wav|ogg|m4a|aac)$/i;
-function validateUploadedMedia(filePath, runner = spawnSync) {
+var AUDIO_EXT = /\.(mp3|wav|ogg|m4a|aac|flac)$/i;
+var defaultRunner = spawnSync;
+var FFPROBE_MISSING = "not checked: ffprobe was not found. Install FFmpeg or set HYPERFRAMES_FFPROBE_PATH.";
+function validateUploadedMedia(filePath, runner = defaultRunner) {
   const isVideo = VIDEO_EXT.test(filePath);
   const isAudio = AUDIO_EXT.test(filePath);
   if (!isVideo && !isAudio) {
     return { ok: true };
   }
+  const ffprobe = findFfBinary2("ffprobe") ?? (runner === defaultRunner ? void 0 : "ffprobe");
+  if (!ffprobe) return { ok: true, unchecked: FFPROBE_MISSING };
   const result = runner(
-    "ffprobe",
+    ffprobe,
     ["-v", "error", "-show_entries", "stream=codec_type", "-of", "json", "--", filePath],
     { windowsHide: true }
   );
+  if (result.error && process.env[FFPROBE_PATH_ENV]?.trim()) {
+    return {
+      ok: false,
+      reason: `${FFPROBE_PATH_ENV} names "${ffprobe}", which cannot run: fix it or unset it`
+    };
+  }
   if (result.error?.code === "ENOENT") {
-    return { ok: true };
+    return { ok: true, unchecked: FFPROBE_MISSING };
   }
   if (result.status !== 0) {
     return { ok: false, reason: "ffprobe failed to read the media file" };
   }
+  return checkStreams(String(result.stdout || "{}"), isVideo, isAudio);
+}
+function checkStreams(stdout, isVideo, isAudio) {
   try {
-    const parsed = JSON.parse(String(result.stdout || "{}"));
+    const parsed = JSON.parse(stdout);
     const streams = parsed.streams ?? [];
     const hasVideo = streams.some((stream) => stream.codec_type === "video");
     const hasAudio = streams.some((stream) => stream.codec_type === "audio");
@@ -618,7 +626,7 @@ function validateUploadedMedia(filePath, runner = spawnSync) {
     return { ok: false, reason: "ffprobe returned unreadable media metadata" };
   }
 }
-function validateUploadedMediaBuffer(fileName, buffer, runner = spawnSync) {
+function validateUploadedMediaBuffer(fileName, buffer, runner = defaultRunner) {
   const tempDir = mkdtempSync2(join4(tmpdir(), "hyperframes-upload-"));
   const tempPath = join4(tempDir, basename(fileName));
   try {
@@ -630,7 +638,7 @@ function validateUploadedMediaBuffer(fileName, buffer, runner = spawnSync) {
 }
 
 // src/helpers/backupJournal.ts
-import { mkdirSync as mkdirSync3, readdirSync as readdirSync2, readFileSync as readFileSync3, unlinkSync, writeFileSync as writeFileSync4 } from "fs";
+import { readdirSync as readdirSync2, readFileSync as readFileSync3, unlinkSync, writeFileSync as writeFileSync4 } from "fs";
 import { Buffer as Buffer2 } from "buffer";
 import { join as join5, relative as relative2 } from "path";
 var DEFAULT_KEEP_PER_FILE = 10;
@@ -652,13 +660,14 @@ function snapshotBeforeWrite(projectDir, absPath, options = {}) {
     const content = readFileSync3(absPath);
     const relativePath = relative2(projectDir, absPath);
     const backupDir = join5(projectDir, ".hyperframes", "backup");
-    mkdirSync3(backupDir, { recursive: true });
+    mkdirWithinProject(projectDir, backupDir);
     const backupKey = backupKeyForPath(relativePath);
     const backupPath = nextBackupPath(backupDir, backupKey);
     writeFileSync4(backupPath, content);
     pruneBackups(backupDir, backupKey, options.keepPerFile ?? DEFAULT_KEEP_PER_FILE);
     return { backupPath };
   } catch (error) {
+    if (isProjectRootMissing(error)) throw error;
     if (error && typeof error === "object" && "code" in error && (error.code === "ENOENT" || error.code === "EISDIR")) {
       return { backupPath: null };
     }
@@ -697,6 +706,15 @@ function pruneBackups(backupDir, backupKey, keepPerFile) {
   }
 }
 
+// src/helpers/projectDirMissing.ts
+var PROJECT_DIR_MISSING = { error: "not found", why: "project_dir_missing" };
+var projectDirMissing = (c) => c.json(PROJECT_DIR_MISSING, 404);
+function replaceWithProjectDirMissing(c, hostHeaders) {
+  hostHeaders.delete("content-type");
+  c.res = void 0;
+  c.res = Response.json(PROJECT_DIR_MISSING, { status: 404, headers: hostHeaders });
+}
+
 // src/helpers/fileVersion.ts
 import { createHash as createHash3, randomUUID as randomUUID2 } from "crypto";
 var RECEIPT_TTL_MS = 1e4;
@@ -891,6 +909,7 @@ import { existsSync as existsSync2, readFileSync as readFileSync5 } from "fs";
 import { randomUUID as randomUUID3 } from "crypto";
 import { dirname as dirname3, relative as relative3, resolve as resolve2, sep as sep2 } from "path";
 import { parseHTML } from "linkedom";
+import { ProjectRootMissingError } from "@hyperframes/core";
 var CompositionInsertionError = class extends Error {
   constructor(message, status) {
     super(message);
@@ -920,6 +939,7 @@ function positiveAttribute(root, ...names) {
 }
 function canonicalProjectPath(projectDir, candidate) {
   if (!candidate) {
+    if (folderGone(projectDir)) throw new ProjectRootMissingError(projectDir);
     throw new CompositionInsertionError("Composition source escapes the project", 400);
   }
   if (!existsSync2(candidate)) {
@@ -1172,10 +1192,8 @@ async function resolveProjectPath(c, adapter, route, opts) {
   if (!project) {
     return { error: c.json({ error: "not found" }, 404) };
   }
-  if (!existsSync3(project.dir)) {
-    return {
-      error: c.json({ error: "not found", why: "project_dir_missing" }, 404)
-    };
+  if (folderGone(project.dir)) {
+    return { error: projectDirMissing(c) };
   }
   const filePath = requestSubPath(c.req.url, `projects/:id/${route}`);
   if (filePath.includes("\0")) {
@@ -1379,9 +1397,8 @@ async function parseMutationBody(c) {
   }
   return { target: body.target, body };
 }
-function ensureDir(filePath) {
-  const dir = dirname4(filePath);
-  if (!existsSync3(dir)) mkdirSync4(dir, { recursive: true });
+function ensureDir(projectDir, filePath) {
+  mkdirWithinProject(projectDir, dirname4(filePath));
 }
 function generateCopyPath(projectDir, originalPath) {
   const ext = originalPath.includes(".") ? "." + originalPath.split(".").pop() : "";
@@ -2502,6 +2519,7 @@ async function processUploadedFiles(formData, targetDir, projectDir) {
   const uploaded = [];
   const skipped = [];
   const invalid = [];
+  const unchecked = [];
   const entries = formData.entries();
   const subDir = targetDir === projectDir ? "" : targetDir.slice(projectDir.length + 1);
   for (const [, value] of entries) {
@@ -2564,12 +2582,13 @@ async function processUploadedFiles(formData, targetDir, projectDir) {
     }
     const relativePath = subDir ? join6(subDir, finalName) : finalName;
     uploaded.push(relativePath);
+    if (validation.unchecked) unchecked.push({ name: finalName, reason: validation.unchecked });
     if (isAudioFile(finalName)) {
       generateWaveformCache(projectDir, relativePath).catch(() => {
       });
     }
   }
-  return { uploaded, skipped, invalid };
+  return { uploaded, skipped, invalid, unchecked };
 }
 function registerFileRoutes(api, adapter) {
   api.get("/projects/:id/files/*", async (c) => {
@@ -2629,7 +2648,7 @@ function registerFileRoutes(api, adapter) {
     let backup = { backupPath: null };
     let overwrote;
     if (createOnly) {
-      ensureDir(res.absPath);
+      ensureDir(res.project.dir, res.absPath);
       let fd;
       try {
         fd = openSync2(res.absPath, "wx");
@@ -2711,7 +2730,7 @@ function registerFileRoutes(api, adapter) {
   api.post("/projects/:id/files/*", async (c) => {
     const res = await resolveProjectFile(c, adapter);
     if ("error" in res) return res.error;
-    ensureDir(res.absPath);
+    ensureDir(res.project.dir, res.absPath);
     const body = Buffer.from(await c.req.arrayBuffer());
     try {
       writeFileSync5(res.absPath, body, { flag: "wx" });
@@ -3252,7 +3271,7 @@ function registerFileRoutes(api, adapter) {
     if (existsSync3(newAbs)) {
       return c.json({ error: "already exists" }, 409);
     }
-    ensureDir(newAbs);
+    ensureDir(res.project.dir, newAbs);
     renameSync2(res.absPath, newAbs);
     const updatedFiles = updateReferences(res.project.dir, res.filePath, body.newPath);
     return c.json({ ok: true, path: body.newPath, updatedReferences: updatedFiles });
@@ -3273,7 +3292,7 @@ function registerFileRoutes(api, adapter) {
     if (!destAbs) {
       return c.json({ error: "forbidden" }, 403);
     }
-    ensureDir(destAbs);
+    ensureDir(project.dir, destAbs);
     try {
       writeFileSync5(destAbs, readFileSync6(srcAbs), { flag: "wx" });
     } catch (error) {
@@ -3294,14 +3313,22 @@ function registerFileRoutes(api, adapter) {
     async (c) => {
       const project = await adapter.resolveProject(c.req.param("id"));
       if (!project) return c.json({ error: "not found" }, 404);
+      if (folderGone(project.dir)) return projectDirMissing(c);
       const subDir = c.req.query("dir") ?? "";
       const targetDir = subDir ? resolveWithinProject(project.dir, subDir) : project.dir;
       if (!targetDir) return c.json({ error: "forbidden" }, 403);
-      if (subDir && !existsSync3(targetDir)) mkdirSync4(targetDir, { recursive: true });
       const formData = await c.req.formData();
+      mkdirWithinProject(project.dir, targetDir);
       const result = await processUploadedFiles(formData, targetDir, project.dir);
+      if (folderGone(project.dir)) return projectDirMissing(c);
       return c.json(
-        { ok: true, files: result.uploaded, skipped: result.skipped, invalid: result.invalid },
+        {
+          ok: true,
+          files: result.uploaded,
+          skipped: result.skipped,
+          invalid: result.invalid,
+          unchecked: result.unchecked
+        },
         201
       );
     }
@@ -3387,6 +3414,8 @@ import {
   insertBeforeCloseTag as insertBeforeCloseTag2,
   stripEmbeddedRuntimeScripts as stripEmbeddedRuntimeScripts2
 } from "@hyperframes/core/compiler";
+import { STUDIO_PREVIEW_MARK_META } from "@hyperframes/core/studio-preview-mark";
+import { injectTagsAtHeadStart } from "@hyperframes/core/compiler/html-document";
 import { isWithinProjectRoot } from "@hyperframes/parsers/asset-resolution";
 
 // src/helpers/subComposition.ts
@@ -3671,6 +3700,34 @@ function injectPreviewVariables(html, values) {
   return tag + html;
 }
 
+// src/helpers/lazyPreviewImages.ts
+import { findStartTags } from "@hyperframes/core/compiler/html-document";
+import { parseHTML as parseHTML4 } from "linkedom";
+import { STUDIO_PREVIEW_LAZY_ATTR } from "@hyperframes/core/studio-preview-mark";
+function startsAfterZero(el) {
+  for (let node = el; node; node = node.parentElement) {
+    if (Number(node.getAttribute("data-start")) > 0) return true;
+  }
+  return false;
+}
+var hasLoading = (img) => Array.from(img.attributes).some((attr) => attr.name.toLowerCase() === "loading");
+function lazyPreviewImages(html) {
+  if (!/<!doctype|<html[\s>]/i.test(html)) return html;
+  const images = [...parseHTML4(html).document.querySelectorAll("img")];
+  const tags = findStartTags(html, "img");
+  if (tags.length !== images.length) return html;
+  const parts = [];
+  let from = 0;
+  images.forEach((img, i) => {
+    if (hasLoading(img) || !startsAfterZero(img)) return;
+    const at = (tags[i] ?? 0) + 4;
+    parts.push(html.slice(from, at), ` loading="lazy" ${STUDIO_PREVIEW_LAZY_ATTR}`);
+    from = at;
+  });
+  parts.push(html.slice(from));
+  return parts.join("");
+}
+
 // src/routes/preview.ts
 var PROJECT_SIGNATURE_META = "hyperframes-project-signature";
 var GSAP_CDN_VERSION = "3.15.0";
@@ -3763,7 +3820,8 @@ function injectStudioMotionScript(html, projectDir, activeCompositionPath) {
     false
   );
 }
-var GSAP_CDN_FALLBACK_SCRIPT = `<script data-hf-gsap-fallback>
+var GSAP_FALLBACK_ATTR = "data-hf-gsap-fallback";
+var GSAP_CDN_FALLBACK_SCRIPT = `<script ${GSAP_FALLBACK_ATTR}>
 (function(){
   var cdnBase="https://cdn.jsdelivr.net/npm/gsap@${GSAP_CDN_VERSION}/dist/";
   var loaded={};
@@ -3784,7 +3842,7 @@ var GSAP_CDN_FALLBACK_SCRIPT = `<script data-hf-gsap-fallback>
 })();
 </script>`;
 function injectGsapCdnFallback(html) {
-  if (html.includes("data-hf-gsap-fallback")) return html;
+  if (html.includes(GSAP_FALLBACK_ATTR)) return html;
   if (html.includes("<head>")) return html.replace("<head>", "<head>" + GSAP_CDN_FALLBACK_SCRIPT);
   return GSAP_CDN_FALLBACK_SCRIPT + html;
 }
@@ -3810,11 +3868,13 @@ function previewVariablesFromRequest(rawVariables) {
   if (!parse2.ok) return { error: parse2.error };
   return { raw: rawVariables, values: parse2.values };
 }
-function injectStudioPreviewAugmentations(html, adapter, projectDir, activeCompositionPath) {
+var PREVIEW_CAPTURE_PARAM = "hf-capture";
+function injectStudioPreviewAugmentations(html, adapter, projectDir, activeCompositionPath, capture) {
+  const marked = capture ? html : injectTagsAtHeadStart(lazyPreviewImages(html), `<meta name="${STUDIO_PREVIEW_MARK_META}">`);
   return injectStudioMotionScript(
     injectMotionPathPluginIfNeeded(
       injectGsapCdnFallback(
-        injectProjectSignature(html, resolveProjectSignature(adapter, projectDir))
+        injectProjectSignature(marked, resolveProjectSignature(adapter, projectDir))
       )
     ),
     projectDir,
@@ -3872,7 +3932,7 @@ function registerPreviewRoutes(api, adapter) {
     if (builtPreviews.size > 4) builtPreviews.delete(builtPreviews.keys().next().value);
   };
   const previewBuilds = /* @__PURE__ */ new Map();
-  async function buildPreview(project, previewVariables, builtKey) {
+  async function buildPreview(project, previewVariables, builtKey, capture) {
     const diskMain = resolveProjectMainHtml(project.dir, project.id);
     const normalizedDisk = diskMain ? ensureHfIds3(diskMain.html) : null;
     try {
@@ -3902,7 +3962,8 @@ ${runtimeTag}`;
         ensureHfIds3(await transformPreviewHtml(bundled, adapter, project, mainCompositionPath)),
         adapter,
         project.dir,
-        mainCompositionPath
+        mainCompositionPath,
+        capture
       );
       if (previewVariables) bundled = injectPreviewVariables(bundled, previewVariables);
       bundled = await injectMediaCodecMap(
@@ -3914,7 +3975,7 @@ ${runtimeTag}`;
       );
       bundled = addScenePartsManifest(bundled, [`meta[name="${PROJECT_SIGNATURE_META}"]`]);
       rememberPreview(builtKey, bundled);
-      adapter.previewDocuments?.write(builtKey, bundled);
+      if (!capture) adapter.previewDocuments?.write(builtKey, bundled);
       return bundled;
     } catch {
       const fallback = resolveProjectMainHtml(project.dir, project.id);
@@ -3924,7 +3985,8 @@ ${runtimeTag}`;
           await transformPreviewHtml(fallbackHtml, adapter, project, fallback.compositionPath),
           adapter,
           project.dir,
-          fallback.compositionPath
+          fallback.compositionPath,
+          capture
         );
         if (previewVariables) {
           fallbackAugmented = injectPreviewVariables(fallbackAugmented, previewVariables);
@@ -3948,7 +4010,8 @@ ${runtimeTag}`;
     const vars = previewVariablesFromRequest(c.req.query("variables"));
     if (vars.error !== void 0) return c.json({ error: vars.error }, 400);
     const previewVariables = vars.values;
-    const etag = `"preview:${signature}${variablesEtagSalt(vars.raw)}"`;
+    const capture = c.req.query(PREVIEW_CAPTURE_PARAM) !== void 0;
+    const etag = `"preview:${signature}${variablesEtagSalt(vars.raw)}${capture ? ":capture" : ""}"`;
     const ifNoneMatch = c.req.header("If-None-Match");
     if (ifNoneMatch === etag) {
       return new Response(null, {
@@ -3965,7 +4028,7 @@ ${etag}`;
     }
     let pending = previewBuilds.get(builtKey);
     if (!pending) {
-      pending = buildPreview(project, previewVariables, builtKey).finally(
+      pending = buildPreview(project, previewVariables, builtKey, capture).finally(
         () => previewBuilds.delete(builtKey)
       );
       previewBuilds.set(builtKey, pending);
@@ -3997,7 +4060,8 @@ ${etag}`;
       return c.text("not found", 404);
     }
     const compPathHash = createHash4("sha1").update(compPath).digest("hex");
-    const etag = `"comp:v2:${compPathHash}:${signature}${variablesEtagSalt(vars.raw)}"`;
+    const capture = c.req.query(PREVIEW_CAPTURE_PARAM) !== void 0;
+    const etag = `"comp:v2:${compPathHash}:${signature}${variablesEtagSalt(vars.raw)}${capture ? ":capture" : ""}"`;
     const ifNoneMatch = c.req.header("If-None-Match");
     if (ifNoneMatch === etag) {
       return new Response(null, {
@@ -4018,7 +4082,7 @@ ${etag}`;
     if (!html) return c.text("not found", 404);
     recordPreviewReferences(project.dir, html);
     html = ensureHfIds3(await transformPreviewHtml(html, adapter, project, compPath));
-    html = injectStudioPreviewAugmentations(html, adapter, project.dir, compPath);
+    html = injectStudioPreviewAugmentations(html, adapter, project.dir, compPath, capture);
     if (previewVariables) html = injectPreviewVariables(html, previewVariables);
     html = await injectMediaCodecMap(html, adapter, project.dir, compPath, mediaCodecProbeCache);
     return c.html(html, 200, previewCacheHeaders(etag));
@@ -4075,6 +4139,7 @@ ${etag}`;
         if (err instanceof ProxyCapacityError) {
           return c.text(err.message, 503, { "Retry-After": "5" });
         }
+        if (isProjectRootMissing(err)) throw err;
         const message = err instanceof ProxyTranscodeError ? err.message : "proxy transcode failed";
         return c.text(message, 502);
       }
@@ -4176,7 +4241,7 @@ function registerLintRoutes(api, adapter) {
 
 // src/routes/render.ts
 import { streamSSE } from "hono/streaming";
-import { existsSync as existsSync6, readFileSync as readFileSync10, mkdirSync as mkdirSync5, unlinkSync as unlinkSync3, readdirSync as readdirSync4, statSync as statSync5 } from "fs";
+import { existsSync as existsSync6, readFileSync as readFileSync10, unlinkSync as unlinkSync3, readdirSync as readdirSync4, statSync as statSync5 } from "fs";
 import { join as join11 } from "path";
 import { VALID_CANVAS_RESOLUTIONS } from "@hyperframes/parsers";
 import { formatRenderOutputTimestamp, parseFps } from "@hyperframes/core";
@@ -4229,6 +4294,7 @@ function registerRenderRoutes(api, adapter) {
     let composition;
     if (typeof body.composition === "string" && body.composition.length > 0) {
       if (!resolveWithinProject(project.dir, body.composition)) {
+        if (folderGone(project.dir)) return projectDirMissing(c);
         return c.json({ error: "composition path must be within the project directory" }, 400);
       }
       composition = body.composition;
@@ -4243,7 +4309,7 @@ function registerRenderRoutes(api, adapter) {
     const now = /* @__PURE__ */ new Date();
     const jobId = `${project.id}_${formatRenderOutputTimestamp(now)}`;
     const rendersDir = adapter.rendersDir(project);
-    if (!existsSync6(rendersDir)) mkdirSync5(rendersDir, { recursive: true });
+    mkdirWithinProject(project.dir, rendersDir);
     const ext = FORMAT_EXT[format] ?? ".mp4";
     const outputPath = join11(rendersDir, `${jobId}${ext}`);
     const jobState = adapter.startRender({
@@ -4624,7 +4690,6 @@ import {
   closeSync as closeSync3,
   fstatSync as fstatSync3,
   openSync as openSync3,
-  mkdirSync as mkdirSync6,
   readFileSync as readFileSync12,
   readdirSync as readdirSync5,
   renameSync as renameSync3,
@@ -4817,7 +4882,8 @@ function registerThumbnailRoutes(api, adapter) {
     const motion = manifestKey(join12(project.dir, STUDIO_MOTION_PATH));
     sourceMtime = Math.max(sourceMtime, manualEdits.mtimeMs, motion.mtimeMs);
     const projectUrl = `http://${c.req.header("host")}/api/projects/${encodeURIComponent(project.id)}`;
-    const previewUrl = compPath === "index.html" ? `${projectUrl}/preview` : `${projectUrl}/preview/comp/${compPath.split("/").map(encodeURIComponent).join("/")}`;
+    const previewPath = compPath === "index.html" ? `${projectUrl}/preview` : `${projectUrl}/preview/comp/${compPath.split("/").map(encodeURIComponent).join("/")}`;
+    const previewUrl = `${previewPath}?${PREVIEW_CAPTURE_PARAM}=1`;
     const cacheDir = join12(project.dir, ".thumbnails");
     const selectorKey = selector ? `_${selector.replace(/[^a-zA-Z0-9_-]+/g, "_").slice(0, 80)}_${selectorIndex ?? 0}` : "";
     const urlVersionKey = urlVersion ? `_${urlVersion.replace(/[^a-zA-Z0-9_-]+/g, "_").slice(0, 32)}` : "";
@@ -4840,7 +4906,8 @@ function registerThumbnailRoutes(api, adapter) {
         headers: { "Content-Type": contentType, "Cache-Control": "no-cache" }
       });
     }
-    if (url.searchParams.get("cached") === "1") return c.body(null, 404);
+    if (url.searchParams.get("cached") === "1")
+      return c.body(null, 204, { "Cache-Control": "no-cache" });
     try {
       const buffer = await thumbnailGenerationCoordinator.acquire(
         cachePath,
@@ -4866,7 +4933,7 @@ function registerThumbnailRoutes(api, adapter) {
           if (afterGeneration?.project.dir !== project.dir || !inputsUnchanged(afterGeneration.signature) || !inputsUnchanged(createProjectSignature(project.dir))) {
             return generated;
           }
-          mkdirSync6(cacheDir, { recursive: true });
+          mkdirWithinProject(project.dir, cacheDir);
           writeThumbnailAtomically(cachePath, generated);
           return generated;
         }
@@ -4885,6 +4952,7 @@ function registerThumbnailRoutes(api, adapter) {
       if (err instanceof DOMException && err.name === "AbortError") {
         return new Response(null, { status: 499 });
       }
+      if (isProjectRootMissing(err)) throw err;
       const msg = err instanceof Error ? err.message : String(err);
       return c.json({ error: `Thumbnail generation failed: ${msg}` }, 500);
     }
@@ -5079,6 +5147,7 @@ function registerRegistryRoutes(api, adapter) {
     }
     const project = await adapter.resolveProject(c.req.param("id"));
     if (!project) return c.json({ error: "Project not found" }, 404);
+    if (folderGone(project.dir)) return projectDirMissing(c);
     const body = await c.req.json().catch(() => null);
     if (!body?.blockName) {
       return c.json({ error: "blockName is required" }, 400);
@@ -5087,6 +5156,7 @@ function registerRegistryRoutes(api, adapter) {
       const result = await adapter.installRegistryBlock({ project, blockName: body.blockName });
       return c.json(result);
     } catch (err) {
+      if (isProjectRootMissing(err)) return projectDirMissing(c);
       const message = err instanceof Error ? err.message : "Install failed";
       return c.json({ error: message }, 500);
     }
@@ -5193,8 +5263,8 @@ function registerSelectionRoutes(api, adapter) {
 
 // src/routes/media.ts
 import { streamSSE as streamSSE2 } from "hono/streaming";
-import { existsSync as existsSync8, mkdirSync as mkdirSync7 } from "fs";
-import { basename as basename2, dirname as dirname6, extname as extname2, join as join14 } from "path";
+import { existsSync as existsSync8 } from "fs";
+import { basename as basename2, dirname as dirname6, extname as extname2, join as join14, posix } from "path";
 var VIDEO_EXTENSIONS = /* @__PURE__ */ new Set([
   ".mp4",
   ".mov",
@@ -5227,21 +5297,31 @@ function slugFileBase(path) {
   const name = basename2(path, extname2(path)).replace(/[^a-zA-Z0-9._-]+/g, "-").replace(/^-+|-+$/g, "");
   return name || "media";
 }
-function uniqueAssetPath(projectDir, assetPath) {
+function uniqueAssetPath(projectDir, assetPath, taken) {
   const ext = extname2(assetPath);
   const withoutExt = assetPath.slice(0, -ext.length);
   let candidate = assetPath;
-  for (let index = 2; existsSync8(join14(projectDir, candidate)); index++) {
+  for (let index = 2; taken.has(candidate) || existsSync8(join14(projectDir, candidate)); index++) {
     candidate = `${withoutExt}-${index}${ext}`;
   }
   return candidate;
 }
-function defaultOutputPath(projectDir, inputPath) {
+function defaultOutputPath(projectDir, inputPath, taken) {
   const ext = isImagePath(inputPath) ? ".png" : ".webm";
-  return uniqueAssetPath(projectDir, `assets/cutouts/${slugFileBase(inputPath)}-cutout${ext}`);
+  return uniqueAssetPath(
+    projectDir,
+    `assets/cutouts/${slugFileBase(inputPath)}-cutout${ext}`,
+    taken
+  );
+}
+function defaultPlatePath(projectDir, inputPath, taken) {
+  return uniqueAssetPath(projectDir, `assets/cutouts/${slugFileBase(inputPath)}-plate.webm`, taken);
 }
-function defaultPlatePath(projectDir, inputPath) {
-  return uniqueAssetPath(projectDir, `assets/cutouts/${slugFileBase(inputPath)}-plate.webm`);
+function outputsInFlight(mediaJobs) {
+  const running = [...mediaJobs.values()].filter((job) => job.status === "processing");
+  return new Set(
+    running.flatMap((job) => [job.outputAssetPath, job.backgroundOutputAssetPath ?? ""])
+  );
 }
 function makeJobId(projectId, mediaJobs) {
   const stamp = (/* @__PURE__ */ new Date()).toISOString().replace(/[-:.TZ]/g, "").slice(0, 14);
@@ -5310,15 +5390,16 @@ function registerMediaRoutes(api, adapter, options = {}) {
       if (!inputIsVideo && !inputIsImage) {
         return c.json({ error: "background removal supports video or image assets only" }, 400);
       }
-      const requestedOutput = body.outputPath ? normalizeProjectAssetPath(body.outputPath) : "";
+      const requestedOutput = body.outputPath ? posix.normalize(normalizeProjectAssetPath(body.outputPath)) : "";
       if (requestedOutput && containsNullByte(requestedOutput)) {
         return c.json({ error: "forbidden" }, 403);
       }
       if (requestedOutput && !resolveWithinProject(project.dir, requestedOutput)) {
         return c.json({ error: "forbidden" }, 403);
       }
-      const outputAssetPath = requestedOutput ? uniqueAssetPath(project.dir, requestedOutput) : defaultOutputPath(project.dir, inputAssetPath);
-      const outputPath = resolveWithinProject(project.dir, outputAssetPath);
+      const taken = outputsInFlight(mediaJobs);
+      const outputAssetPath = requestedOutput ? uniqueAssetPath(project.dir, requestedOutput, taken) : defaultOutputPath(project.dir, inputAssetPath, taken);
+      const outputPath = pinWithinProject(project.dir, outputAssetPath);
       if (!outputPath) return c.json({ error: "forbidden" }, 403);
       if (inputIsVideo && !VIDEO_OUTPUT_EXTENSIONS.has(extname2(outputAssetPath).toLowerCase())) {
         return c.json({ error: "video background removal output must be .webm or .mov" }, 400);
@@ -5332,14 +5413,15 @@ function registerMediaRoutes(api, adapter, options = {}) {
         if (!inputIsVideo) {
           return c.json({ error: "background plates are only supported for video inputs" }, 400);
         }
-        backgroundOutputAssetPath = defaultPlatePath(project.dir, inputAssetPath);
-        backgroundOutputPath = resolveWithinProject(project.dir, backgroundOutputAssetPath) ?? void 0;
+        taken.add(outputAssetPath);
+        backgroundOutputAssetPath = defaultPlatePath(project.dir, inputAssetPath, taken);
+        backgroundOutputPath = pinWithinProject(project.dir, backgroundOutputAssetPath) ?? void 0;
         if (!backgroundOutputPath) {
           return c.json({ error: "forbidden" }, 403);
         }
       }
-      mkdirSync7(dirname6(outputPath), { recursive: true });
-      if (backgroundOutputPath) mkdirSync7(dirname6(backgroundOutputPath), { recursive: true });
+      mkdirWithinProject(project.dir, dirname6(outputPath));
+      if (backgroundOutputPath) mkdirWithinProject(project.dir, dirname6(backgroundOutputPath));
       const jobId = makeJobId(project.id, mediaJobs);
       const state = adapter.startBackgroundRemoval({
         project,
@@ -5421,20 +5503,20 @@ function registerGlobalAssetRoutes(api) {
 }
 
 // src/history/projectHistory.ts
-import { randomUUID as randomUUID8 } from "crypto";
-import { readdir as readdir2, rm as rm2, rmdir, writeFile } from "fs/promises";
+import { randomUUID as randomUUID9 } from "crypto";
+import { readdir as readdir3, rm as rm3, rmdir, writeFile } from "fs/promises";
 import {
   existsSync as existsSync11,
   lstatSync as lstatSync4,
-  statSync as statSync9,
-  mkdirSync as mkdirSync11,
-  readdirSync as readdirSync6,
-  readFileSync as readFileSync18,
+  statSync as statSync10,
+  mkdirSync as mkdirSync5,
+  readdirSync as readdirSync7,
+  readFileSync as readFileSync19,
   realpathSync,
   rmSync as rmSync6
 } from "fs";
 import { homedir as homedir2 } from "os";
-import { dirname as dirname9, isAbsolute as isAbsolute2, join as join19, relative as relative5, resolve as resolve8, sep as sep3 } from "path";
+import { dirname as dirname10, isAbsolute as isAbsolute2, join as join20, relative as relative5, resolve as resolve8, sep as sep3 } from "path";
 
 // src/history/blobStore.ts
 import { createHash as createHash7, randomUUID as randomUUID5 } from "crypto";
@@ -5503,12 +5585,20 @@ async function openBlobStore(dir) {
   };
 }
 
+// src/history/pruneHistories.ts
+import { randomUUID as randomUUID8 } from "crypto";
+import { readdirSync as readdirSync6, readFileSync as readFileSync17, renameSync as renameSync5, statSync as statSync9, writeFileSync as writeFileSync9 } from "fs";
+import { lstat, readdir as readdir2, rm as rm2 } from "fs/promises";
+import { tmpdir as tmpdir2 } from "os";
+import { dirname as dirname8, join as join19 } from "path";
+
 // src/history/historyId.ts
 import { randomUUID as randomUUID6 } from "crypto";
-import { existsSync as existsSync10, mkdirSync as mkdirSync8, readFileSync as readFileSync15, statSync as statSync8, writeFileSync as writeFileSync7 } from "fs";
+import { existsSync as existsSync10, mkdirSync as mkdirSync2, readFileSync as readFileSync15, statSync as statSync8, writeFileSync as writeFileSync7 } from "fs";
 import { basename as basename3, join as join17, resolve as resolve7 } from "path";
 var ID_PATH = join17(".hyperframes", "history-id");
 var ID_SHAPE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/;
+var isHistoryId = (name) => ID_SHAPE.test(name);
 function readId(projectDir) {
   try {
     const id = readFileSync15(join17(projectDir, ID_PATH), "utf-8").trim();
@@ -5552,7 +5642,7 @@ function projectHistoryId(projectDir, historyRoot) {
     );
   if (!id || existsSync10(join17(historyRoot, id)) && !isRecordedFolder(join17(historyRoot, id), folder)) {
     id = randomUUID6();
-    mkdirSync8(join17(dir, ".hyperframes"), { recursive: true });
+    mkdirWithinProject(dir, join17(dir, ".hyperframes"));
     writeFileSync7(join17(dir, ID_PATH), `${id}
 `);
   }
@@ -5566,14 +5656,14 @@ var HistoryIdError = class extends Error {
   }
 };
 function recordProject(historyDir, dir, folder) {
-  const record = { dir, ino: folder.ino, born: folder.birthtimeMs };
-  mkdirSync8(historyDir, { recursive: true });
+  const record = { dir, ino: folder.ino, born: folder.birthtimeMs, dev: folder.dev };
+  mkdirSync2(historyDir, { recursive: true });
   replaceFileAtomically(join17(historyDir, "project.json"), JSON.stringify(record), 420);
 }
 
 // src/history/ownerLock.ts
 import { randomUUID as randomUUID7 } from "crypto";
-import { linkSync, mkdirSync as mkdirSync9, readFileSync as readFileSync16, rmSync as rmSync5, writeFileSync as writeFileSync8 } from "fs";
+import { linkSync, mkdirSync as mkdirSync3, readFileSync as readFileSync16, rmSync as rmSync5, writeFileSync as writeFileSync8 } from "fs";
 import { join as join18 } from "path";
 var HistoryBusyError = class extends Error {
   constructor(pid) {
@@ -5635,7 +5725,7 @@ function evictDeadOwner(file) {
 async function takeHistoryOwnership(home, waitMs) {
   const file = join18(home, "owner.pid");
   const deadline = Date.now() + waitMs;
-  mkdirSync9(home, { recursive: true });
+  mkdirSync3(home, { recursive: true });
   for (; ; ) {
     if (claim(file)) {
       let held = true;
@@ -5652,9 +5742,155 @@ async function takeHistoryOwnership(home, waitMs) {
   }
 }
 
+// src/history/pruneHistories.ts
+var DAY_MS = 24 * 60 * 60 * 1e3;
+var KEEP_GONE_PROJECT_HISTORY_MS = 14 * DAY_MS;
+var PRUNED_PREFIX = ".pruned-";
+var LAST_PRUNE_FILE = ".last-prune";
+function listProjectHistories(historyRoot) {
+  return namesIn(historyRoot).filter(isHistoryId).flatMap((id) => {
+    const home = join19(historyRoot, id);
+    const projectDir = readRecord(home)?.dir;
+    if (typeof projectDir !== "string" || readId(projectDir) !== id) return [];
+    return [{ id, projectDir, lastUsedMs: lastUsed(home) }];
+  });
+}
+function namesIn(historyRoot) {
+  try {
+    return readdirSync6(historyRoot);
+  } catch (error) {
+    if (error.code === "ENOENT") return [];
+    throw error;
+  }
+}
+async function pruneGoneProjectHistories(historyRoot, options = {}) {
+  return (await pruneWithin(historyRoot, options)).pruned;
+}
+async function pruneWithin(historyRoot, {
+  now = Date.now(),
+  dryRun = false,
+  tempDir = tmpdir2(),
+  onError = (error) => console.warn("[history] could not prune a history:", error),
+  budgetMs = Infinity,
+  measure = true
+}) {
+  const started = performance.now();
+  const names = namesIn(historyRoot);
+  const pruned = [];
+  for (const name of names) {
+    if (performance.now() - started >= budgetMs) return { pruned, finished: false };
+    try {
+      const gone = await pruneEntry(historyRoot, name, { now, dryRun, tempDir, measure });
+      if (gone) pruned.push(gone);
+    } catch (error) {
+      onError(error);
+    }
+  }
+  return { pruned, finished: true };
+}
+async function pruneEntry(historyRoot, name, run) {
+  if (name.startsWith(PRUNED_PREFIX)) {
+    if (!run.dryRun) await rm2(join19(historyRoot, name), { recursive: true, force: true });
+    return null;
+  }
+  return isHistoryId(name) ? pruneOne(historyRoot, name, run) : null;
+}
+async function pruneOne(historyRoot, id, run) {
+  const home = join19(historyRoot, id);
+  if (abandonedProject(home, id, run.now, run.tempDir) === null) return null;
+  const release = await takeUnlessBusy(home);
+  if (!release) return null;
+  let taken;
+  try {
+    taken = recheckAndMoveAway(historyRoot, id, run);
+  } catch (error) {
+    release();
+    throw error;
+  }
+  if (!taken?.trash) release();
+  if (!taken) return null;
+  const bytes = await clearAway(taken.trash, home, run.measure);
+  return { id, projectDir: taken.projectDir, bytes };
+}
+async function clearAway(trash, home, measure) {
+  const bytes = measure ? await bytesIn(trash ?? home) : 0;
+  if (trash) await rm2(trash, { recursive: true, force: true });
+  return bytes;
+}
+async function takeUnlessBusy(home) {
+  try {
+    return await takeHistoryOwnership(home, 0);
+  } catch (error) {
+    if (error instanceof HistoryBusyError) return null;
+    throw error;
+  }
+}
+function recheckAndMoveAway(historyRoot, id, { now, dryRun, tempDir }) {
+  const home = join19(historyRoot, id);
+  const projectDir = abandonedProject(home, id, now, tempDir);
+  if (projectDir === null) return null;
+  if (dryRun) return { projectDir, trash: null };
+  const trash = join19(historyRoot, `${PRUNED_PREFIX}${id}-${randomUUID8()}`);
+  renameSync5(home, trash);
+  return { projectDir, trash };
+}
+function abandonedProject(home, id, now, tempDir) {
+  const record = readRecord(home);
+  const dir = record?.dir;
+  if (typeof dir !== "string") return null;
+  if (now - lastUsed(home) < KEEP_GONE_PROJECT_HISTORY_MS && !isSafePath(tempDir, dir)) return null;
+  return projectGone(dir, id, record?.dev, tempDir) ? dir : null;
+}
+function projectGone(dir, id, dev, tempDir) {
+  if (!statSync9(join19(dir, ID_PATH), { throwIfNoEntry: false }))
+    return diskStillHere(dir, dev, tempDir);
+  const there = readId(dir);
+  return there !== null && there !== id;
+}
+function diskStillHere(dir, dev, tempDir) {
+  let at = dir;
+  let stat3 = statSync9(at, { throwIfNoEntry: false });
+  while (!stat3) {
+    if (dirname8(at) === at) return false;
+    at = dirname8(at);
+    stat3 = statSync9(at, { throwIfNoEntry: false });
+  }
+  if (typeof dev === "number") return stat3.dev === dev;
+  return at === dir || isSafePath(tempDir, at);
+}
+function lastUsed(home) {
+  const mtime = (file) => statSync9(join19(home, file), { throwIfNoEntry: false })?.mtimeMs ?? 0;
+  return Math.max(mtime("project.json"), mtime("log.jsonl"));
+}
+async function bytesIn(dir) {
+  let total = 0;
+  for (const entry of await readdir2(dir, { withFileTypes: true })) {
+    const path = join19(dir, entry.name);
+    total += entry.isDirectory() ? await bytesIn(path) : (await lstat(path)).size;
+  }
+  return total;
+}
+function prunedWithinADay(stamp, now) {
+  try {
+    const last = Number(readFileSync17(stamp, "utf-8"));
+    return last <= now && now - last < DAY_MS;
+  } catch {
+    return false;
+  }
+}
+var pruning = /* @__PURE__ */ new Set();
+function pruneGoneProjectHistoriesDaily(historyRoot, now, { onError, budgetMs } = {}) {
+  const stamp = join19(historyRoot, LAST_PRUNE_FILE);
+  if (pruning.has(historyRoot) || prunedWithinADay(stamp, now)) return;
+  pruning.add(historyRoot);
+  setImmediate(() => {
+    pruneWithin(historyRoot, { now, onError, budgetMs, measure: false }).then(({ finished }) => finished && writeFileSync9(stamp, String(now))).catch((error) => onError?.(error)).finally(() => pruning.delete(historyRoot));
+  });
+}
+
 // src/history/historyLog.ts
-import { closeSync as closeSync5, constants as constants4, mkdirSync as mkdirSync10, openSync as openSync5, readFileSync as readFileSync17, writeSync as writeSync2 } from "fs";
-import { dirname as dirname8 } from "path";
+import { closeSync as closeSync5, constants as constants4, mkdirSync as mkdirSync4, openSync as openSync5, readFileSync as readFileSync18, writeSync as writeSync2 } from "fs";
+import { dirname as dirname9 } from "path";
 var START = "start";
 function parseRecord(line) {
   try {
@@ -5666,7 +5902,7 @@ function parseRecord(line) {
 function readLog(file, onUnreadable) {
   let text2;
   try {
-    text2 = readFileSync17(file, "utf-8");
+    text2 = readFileSync18(file, "utf-8");
   } catch {
     return null;
   }
@@ -5706,7 +5942,7 @@ function writeLog(file, log) {
     ...log.entries.map((entry) => ({ type: "entry", entry })),
     ...[...log.pins].map((id) => ({ type: "pin", id, pinned: true }))
   ];
-  mkdirSync10(dirname8(file), { recursive: true });
+  mkdirSync4(dirname9(file), { recursive: true });
   replaceFileAtomically(file, records.map((r) => `${JSON.stringify(r)}
 `).join(""), 420);
 }
@@ -5779,7 +6015,7 @@ function referencedHashes(log, current) {
 }
 
 // src/history/projectHistory.ts
-var DEFAULT_HISTORY_ROOT = join19(homedir2(), ".cache", "hyperframes", "history");
+var DEFAULT_HISTORY_ROOT = join20(homedir2(), ".cache", "hyperframes", "history");
 var MAX_WINDOW_IDLE_MS = 10 * 6e4;
 var UNDO_MODES = ["just-this", "back-to-before", "keep-later-edits"];
 var OUTSIDE = { kind: "outside", name: "Outside" };
@@ -5799,26 +6035,26 @@ var isMissingFolder = (error) => ["ENOENT", "ENOTDIR"].includes(error.code ?? ""
 async function removeEmptyFolders(dir) {
   let entries;
   try {
-    entries = await readdir2(dir, { withFileTypes: true });
+    entries = await readdir3(dir, { withFileTypes: true });
   } catch (error) {
     if (isMissingFolder(error)) return;
     throw error;
   }
   for (const entry of entries)
-    if (entry.isDirectory()) await removeEmptyFolders(join19(dir, entry.name));
+    if (entry.isDirectory()) await removeEmptyFolders(join20(dir, entry.name));
   await rmdir(dir);
 }
 function fileLeftIn(dir, at, deleted) {
-  for (const entry of readdirSync6(dir, { withFileTypes: true })) {
+  for (const entry of readdirSync7(dir, { withFileTypes: true })) {
     const path = `${at}/${entry.name}`;
-    const left = entry.isDirectory() ? fileLeftIn(join19(dir, entry.name), path, deleted) : deleted.has(path) ? void 0 : path;
+    const left = entry.isDirectory() ? fileLeftIn(join20(dir, entry.name), path, deleted) : deleted.has(path) ? void 0 : path;
     if (left) return left;
   }
   return void 0;
 }
 function ignoresCase(dir) {
-  const self = statSync9(join19(dir, ID_PATH), { throwIfNoEntry: false });
-  const other = statSync9(join19(dir, ID_PATH.toUpperCase()), { throwIfNoEntry: false });
+  const self = statSync10(join20(dir, ID_PATH), { throwIfNoEntry: false });
+  const other = statSync10(join20(dir, ID_PATH.toUpperCase()), { throwIfNoEntry: false });
   return self !== void 0 && other?.ino === self.ino && other.dev === self.dev;
 }
 var blocks = (removed, added) => added.startsWith(`${removed}/`) || removed.startsWith(`${added}/`);
@@ -5835,9 +6071,9 @@ var Engine = class {
     this.projectId = projectId;
     this.blobs = blobs;
     this.dir = resolve8(options.projectDir);
-    this.home = join19(options.historyRoot, projectId);
+    this.home = join20(options.historyRoot, projectId);
     this.foldsCase = ignoresCase(this.dir);
-    const folder = statSync9(this.dir, { throwIfNoEntry: false });
+    const folder = statSync10(this.dir, { throwIfNoEntry: false });
     if (!folder || readId(this.dir) !== projectId || !isRecordedFolder(this.home, folder))
       throw this.replaced();
     this.folder = { dev: folder.dev, ino: folder.ino, birthtimeMs: folder.birthtimeMs };
@@ -5868,7 +6104,7 @@ var Engine = class {
     return this.foldsCase ? path.toLowerCase() : path;
   }
   get logFile() {
-    return join19(this.home, "log.jsonl");
+    return join20(this.home, "log.jsonl");
   }
   now() {
     return (this.options.now ?? Date.now)();
@@ -5883,7 +6119,7 @@ var Engine = class {
   }
   /** Another project if the folder or its id changed, or the id is gone: a recreated folder may reuse the inode. */
   whereFolder() {
-    const now = statSync9(this.dir, { throwIfNoEntry: false });
+    const now = statSync10(this.dir, { throwIfNoEntry: false });
     if (!now) return "gone";
     const same = now.dev === this.folder.dev && sameFolder(now, this.folder);
     return same && readId(this.dir) === this.projectId ? "here" : "replaced";
@@ -5896,7 +6132,7 @@ var Engine = class {
   persistLog(record) {
     if (record) saveRecord(this.logFile, this.log, record);
     else writeLog(this.logFile, this.log);
-    if (!existsSync11(join19(this.home, "project.json")))
+    if (!existsSync11(join20(this.home, "project.json")))
       recordProject(this.home, this.dir, this.folder);
   }
   replaced() {
@@ -5946,7 +6182,7 @@ var Engine = class {
   }
   readStatCache() {
     try {
-      const files = JSON.parse(readFileSync18(join19(this.home, "stat.json"), "utf-8"));
+      const files = JSON.parse(readFileSync19(join20(this.home, "stat.json"), "utf-8"));
       return new Map(Object.entries(files));
     } catch {
       return /* @__PURE__ */ new Map();
@@ -5954,8 +6190,8 @@ var Engine = class {
   }
   saveStatCache() {
     const files = JSON.stringify(Object.fromEntries(this.tracked));
-    mkdirSync11(this.home, { recursive: true });
-    replaceFileAtomically(join19(this.home, "stat.json"), files, 420);
+    mkdirSync5(this.home, { recursive: true });
+    replaceFileAtomically(join20(this.home, "stat.json"), files, 420);
   }
   /**
    * Takes in every write since the last sweep and files each change to its writer. ponytail: always the whole
@@ -5995,7 +6231,7 @@ var Engine = class {
   /** The file's hash once copied in; null when it was removed before the copy (the next sweep records that). */
   async storeIfPresent(path) {
     try {
-      return await this.blobs.put(join19(this.dir, path));
+      return await this.blobs.put(join20(this.dir, path));
     } catch (error) {
       if (error.code === "ENOENT") return null;
       throw error;
@@ -6082,7 +6318,7 @@ var Engine = class {
     }
     hits.forEach(
       ({ change }, i) => forgetOverwrittenBytes(
-        join19(this.dir, change.path),
+        join20(this.dir, change.path),
         new Set([...walked[i]].map(hashVersion))
       )
     );
@@ -6090,7 +6326,7 @@ var Engine = class {
   }
   /** Walks the server's writes back from `change.after` to the bytes they replaced, stored so an undo restores them. */
   async overwrittenBy(change, told, seen) {
-    const absPath = join19(this.dir, change.path);
+    const absPath = join20(this.dir, change.path);
     let bytes;
     for (let hash = change.after; hash; ) {
       if (seen.has(hash)) return void 0;
@@ -6102,12 +6338,12 @@ var Engine = class {
       if (hash === change.before || hash === told) return hash;
     }
     if (bytes === void 0) return void 0;
-    const staged = join19(this.home, `overwrote-${randomUUID8()}`);
+    const staged = join20(this.home, `overwrote-${randomUUID9()}`);
     await writeFile(staged, bytes);
     try {
       return await this.blobs.put(staged);
     } finally {
-      await rm2(staged, { force: true });
+      await rm3(staged, { force: true });
     }
   }
   cutOut(group, change, cut) {
@@ -6157,7 +6393,7 @@ var Engine = class {
     return this.outside;
   }
   newGroup(who, label) {
-    return { id: randomUUID8(), who, label, startedAt: this.now(), changes: /* @__PURE__ */ new Map() };
+    return { id: randomUUID9(), who, label, startedAt: this.now(), changes: /* @__PURE__ */ new Map() };
   }
   async commitOutside() {
     if (this.outside?.changes.size) await this.commitClaim();
@@ -6274,7 +6510,7 @@ var Engine = class {
     const parts = path.split("/");
     for (let depth = 1; depth <= parts.length; depth += 1) {
       const at = parts.slice(0, depth).join("/");
-      const stat3 = lstatSync4(join19(this.dir, at), { throwIfNoEntry: false });
+      const stat3 = lstatSync4(join20(this.dir, at), { throwIfNoEntry: false });
       if (!stat3) return void 0;
       if (at === path || !stat3.isDirectory()) return { at, stat: stat3 };
     }
@@ -6286,7 +6522,7 @@ var Engine = class {
     if (!standing) return void 0;
     if (standing.stat.isSymbolicLink()) return standing.at;
     if (standing.at === path && !standing.stat.isDirectory()) return void 0;
-    const real = realpathSync.native(join19(this.dir, standing.at));
+    const real = realpathSync.native(join20(this.dir, standing.at));
     const at = relative5(realpathSync.native(this.dir), real).split(sep3).join("/");
     if (standing.at !== path) return deleted.has(at) ? void 0 : at;
     return fileLeftIn(real, at, deleted);
@@ -6311,7 +6547,7 @@ var Engine = class {
   /** Writes one project file (null deletes it), first leaving the running operation's receipt for its echo. */
   async writeProjectFile(path, hash) {
     this.assertWritable();
-    const absPath = join19(this.dir, path);
+    const absPath = join20(this.dir, path);
     const { writeToken } = this;
     if (writeToken) {
       const version = hash === null ? DELETED_VERSION : hashVersion(hash);
@@ -6445,14 +6681,14 @@ var Engine = class {
         const dest = resolve8(emptyDir);
         if (isWithin(this.dir, dest))
           throw new Error(`Checkout writes outside the project only: ${dest}`);
-        if ((await readdir2(dest).catch(missingIsEmpty)).length > 0)
+        if ((await readdir3(dest).catch(missingIsEmpty)).length > 0)
           throw new Error(`Checkout writes into an empty folder only: ${dest}`);
         const files = manifestAround(this.log, entryId, side);
         try {
-          for (const [path, hash] of files) await this.blobs.writeTo(hash, join19(dest, path));
+          for (const [path, hash] of files) await this.blobs.writeTo(hash, join20(dest, path));
         } catch (error) {
-          for (const name of await readdir2(dest).catch(() => []))
-            await rm2(join19(dest, name), { recursive: true, force: true });
+          for (const name of await readdir3(dest).catch(() => []))
+            await rm3(join20(dest, name), { recursive: true, force: true });
           throw error;
         }
       }),
@@ -6488,7 +6724,7 @@ var Engine = class {
 };
 function isWithin(dir, path) {
   let probe = resolve8(path);
-  while (!existsSync11(probe) && dirname9(probe) !== probe) probe = dirname9(probe);
+  while (!existsSync11(probe) && dirname10(probe) !== probe) probe = dirname10(probe);
   const rel = relative5(realpathSync.native(dir), realpathSync.native(probe));
   return rel === "" || rel !== ".." && !rel.startsWith(`..${sep3}`) && !isAbsolute2(rel);
 }
@@ -6507,13 +6743,17 @@ async function openProjectHistory(options) {
     throw new HistoryClosedError(`${options.projectDir} is gone or now another project.`);
   const projectId = projectHistoryId(options.projectDir, options.historyRoot);
   const release = await takeHistoryOwnership(
-    join19(options.historyRoot, projectId),
+    join20(options.historyRoot, projectId),
     options.ownerWaitMs ?? 5e3
   );
   try {
-    const blobs = await openBlobStore(join19(options.historyRoot, projectId, "blobs"));
+    const blobs = await openBlobStore(join20(options.historyRoot, projectId, "blobs"));
     const engine = new Engine(options, projectId, blobs);
     await engine.queue(() => engine.start());
+    pruneGoneProjectHistoriesDaily(options.historyRoot, engine.now(), {
+      onError: options.onError,
+      budgetMs: options.pruneGoneProjectsBudgetMs
+    });
     const api = engine.api();
     return {
       ...api,
@@ -6664,6 +6904,21 @@ function registerHistoryRoutes(api, adapter) {
 // src/createStudioApi.ts
 function createStudioApi(adapter) {
   const api = new Hono();
+  api.use(async function answerProjectDirMissingAfterErrorHandlers(c, next) {
+    const hostHeaders = new Headers(c.res.headers);
+    await next();
+    if (isProjectRootMissing(c.error)) replaceWithProjectDirMissing(c, hostHeaders);
+  });
+  api.use("/projects/:id/*", async function answerProjectDirMissingForVanishedFolder(c, next) {
+    const hostHeaders = new Headers(c.res.headers);
+    const dirBeforeRoute = await Promise.resolve().then(() => adapter.resolveProject(c.req.param("id"))).then(
+      (project) => project?.dir,
+      () => void 0
+    );
+    await next();
+    if (c.res.status >= 403 && dirBeforeRoute && folderGone(dirBeforeRoute))
+      replaceWithProjectDirMissing(c, hostHeaders);
+  });
   registerProjectRoutes(api, adapter);
   registerFileRoutes(api, adapter);
   registerPreviewRoutes(api, adapter);
@@ -6760,26 +7015,27 @@ function numericAttribute(element, name) {
 
 // src/helpers/previewDocumentStore.ts
 import { createHash as createHash8 } from "crypto";
-import { mkdirSync as mkdirSync12, readFileSync as readFileSync19, readdirSync as readdirSync7, rmSync as rmSync7 } from "fs";
-import { join as join20 } from "path";
-function createPreviewDocumentStore(dir, salt) {
-  const fileFor = (key) => join20(dir, `${createHash8("sha256").update(`${salt}
+import { readFileSync as readFileSync20, readdirSync as readdirSync8, rmSync as rmSync7 } from "fs";
+import { join as join21 } from "path";
+function createPreviewDocumentStore(projectDir, salt) {
+  const dir = join21(projectDir, ".hyperframes", "preview");
+  const fileFor = (key) => join21(dir, `${createHash8("sha256").update(`${salt}
 ${key}`).digest("hex").slice(0, 32)}.html`);
   return {
     read(key) {
       try {
-        return readFileSync19(fileFor(key), "utf-8");
+        return readFileSync20(fileFor(key), "utf-8");
       } catch {
         return null;
       }
     },
     write(key, html) {
       try {
-        mkdirSync12(dir, { recursive: true });
+        mkdirWithinProject(projectDir, dir);
         const file = fileFor(key);
         replaceFileAtomically(file, html, 420);
-        for (const name of readdirSync7(dir)) {
-          if (join20(dir, name) !== file) rmSync7(join20(dir, name), { force: true });
+        for (const name of readdirSync8(dir)) {
+          if (join21(dir, name) !== file) rmSync7(join21(dir, name), { force: true });
         }
       } catch {
       }
@@ -6889,9 +7145,11 @@ export {
   historyCache,
   identifyFileWrite,
   isSafePath,
+  listProjectHistories,
   openProjectHistory,
   parseSourceDocument,
   patchElementInHtml,
+  pruneGoneProjectHistories,
   removeElementFromHtml,
   requestSubPath,
   settledFileTag,