@hypersocial/decks-cli 0.9.6 → 0.9.8

package/src/init.mjs

@@ -17,7 +17,7 @@ import { createInterface } from "node:readline/promises";
 import { fileURLToPath } from "node:url";
 import * as ops from "./ops.mjs";
 import { ANSWER_MAX, DASH_AVATAR, FIRST_DECK_LAYOUTS, cleanAnswer, fillFirstDeck, firstDeckCopy, firstDeckSlug } from "./firstDeck.mjs";
-import { agentTable, api, chooseAgents, client, CRED_DIR, installHyperdecksSkill, login as runLogin, openBrowser, target } from "./runtime.mjs";
+import { agentTable, api, chooseAgents, client, CRED_DIR, installHyperdecksSkill, linkBase, login as runLogin, openBrowser, target } from "./runtime.mjs";
 import { READING_PASSAGE, voiceClone as runVoiceClone } from "./voice.mjs";
 import { assembleLayoutDeck, deckNew as runDeckNew } from "./scaffold.mjs";
 import { narrate as runNarrate } from "./narrate.mjs";
@@ -450,9 +450,13 @@ async function presenterStep(base, opts, { interactive, ask, log, sub, avatars,
   }
 }
 
+// decks:get answers only for decks the caller owns, so whether the slug is
+// taken at all comes from slugTaken.
 async function deckOwnedBy(base, slug, who) {
-  const deck = await (await client(base)).query(api.decks.get, { slug });
-  return deck ? { exists: true, mine: deck.ownerId === who.subject } : { exists: false, mine: false };
+  const c = await client(base);
+  if (!(await c.query(api.decks.slugTaken, { slug }))) return { exists: false, mine: false };
+  const deck = await c.query(api.decks.get, { slug });
+  return { exists: true, mine: !!deck && deck.ownerId === who.subject };
 }
 
 async function scaffoldStep(base, opts, { state, who, voice, presenter, interactive, ask, deckNew, cwd, home, random, sub, log, save }) {
@@ -544,7 +548,7 @@ async function releaseStep(base, opts, state, { release, sub, save, fetch }) {
   // A run killed after release made its link but before init.json recorded it.
   const mine = !state.releasedAt && shares.find((s) => s.qa && s.recipient === "Me" && s.enabled);
   if (mine) {
-    const url = `${target(base).shareBase}/v/${mine.token}`;
+    const url = `${await linkBase(base)}/v/${mine.token}`;
     save({ releasedAt: new Date().toISOString(), shareUrl: url, shareToken: mine.token });
     return step("release", "done", `released: ${url}`);
   }

package/src/layouts.mjs

@@ -5,8 +5,8 @@ import { packageText } from "./files.mjs";
 
 export const NARRATED_FILES = { "index.html": "narrated-deck.html", "script.md": "script.md", "evidence.md": "evidence.md" };
 // The library, in a sensible deck order; `--layouts` takes any order and repeats.
-export const LAYOUTS = ["hero", "number", "product", "phones", "quote", "compare", "timeline", "features", "chart", "team", "closer"];
-const LAYOUT_ALIASES = { "big-number": "number", "product-shot": "product", "phone-row": "phones", comparison: "compare", "three-up": "features" };
+export const LAYOUTS = ["hero", "number", "product", "split", "phones", "quote", "compare", "timeline", "features", "chart", "team", "closer"];
+const LAYOUT_ALIASES = { "big-number": "number", "product-shot": "product", "phone-row": "phones", comparison: "compare", "three-up": "features", "image-copy": "split", "image-text": "split" };
 
 const escapeHtml = (s) => s.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;");
 
@@ -20,7 +20,7 @@ export function fillTemplate(file, { slug, title, presenterStyle }) {
 }
 
 // One layout file: a leading comment of `key: value` lines (layout, summary,
-// use, slot, presenter, cues, script), its <style> and its <section>.
+// use, slot, presenter, nopresenter, cues, script), its <style> and its <section>.
 export function readLayout(name) {
   const text = packageText(`templates/layouts/${name}.html`);
   const head = /^<!--([\s\S]*?)-->/.exec(text);

package/src/loadingBlock.mjs

@@ -49,24 +49,55 @@ const STYLE = /<style\b[^>]*\sdata-hd-loading(?=[\s>=])[^>]*>[\s\S]*?<\/style>/i
 const HEAD = /<head\b[^>]*>[\s\S]*?<\/head>/i;
 const PLAYER = /<script\b[^>]*\/player\/v\d+\/player\.js"[^>]*>/;
 const LOADING_STYLE = STYLE.exec(LOADING_BLOCK)[0];
+// The block's pieces besides its style, on any player host: the two preloads and
+// the frame flag (each kept once), and its own comment (matched only as a whole
+// comment, so a person's comments in <head> are never touched).
+const PIECES = [
+  /<link rel="modulepreload" href="[^"]*\/player\/v\d+\/player\.js">[ \t]*\n?/g,
+  /<link rel="preload" as="style" href="[^"]*\/player\/v\d+\/player\.css">[ \t]*\n?/g,
+  /<script>if \(self !== top \|\| [^<]*document\.documentElement\.dataset\.hdFrame = "";<\/script>[ \t]*\n?/g,
+  new RegExp(`${STYLE.source}[ \\t]*\\n?`, "gi"),
+];
+const BLOCK_COMMENT = /^<!-- Loading state \(keep verbatim/;
 
-// The page with its loading state put right: inserted after <title> (or at the
-// top of <head>) when <head> has none, or its <style data-hd-loading> replaced
-// when it differs from the template's. Only a page with the player script, as
-// the check asks only those. Returns { html, fixed: "inserted" | "refreshed" | null,
+// <head>'s text with each piece kept `keep` times (0: all out, 1: the first stays),
+// working outside comments only; the block's own comment counts as a piece too.
+function trimPieces(head, keep) {
+  const seen = new Array(PIECES.length + 1).fill(0);
+  return head
+    .split(/(<!--[\s\S]*?-->[ \t]*\n?)/)
+    .map((part, i) => {
+      if (i % 2) return BLOCK_COMMENT.test(part) && ++seen[PIECES.length] > keep ? "" : part;
+      return PIECES.reduce((text, re, k) => text.replace(re, (m) => (++seen[k] > keep ? "" : m)), part);
+    })
+    .join("");
+}
+
+// The page with its loading state put right. Only a page with the player script,
+// as the check asks only those. With no <style data-hd-loading> in <head>, the
+// block goes in after <title> (or at the top of <head>), any of its pieces already
+// there taken out first. With one, it becomes the template's (refreshed) and any
+// second copy of the style or a piece goes (deduped). A person's comments are left
+// alone. Returns { html, fixed: "inserted" | "refreshed" | "deduped" | null,
 // skipped? }: a player page with no <head>…</head> is left alone, with `skipped` saying why.
 export function withLoadingBlock(html) {
   const live = html.replace(/<!--[\s\S]*?-->/g, (c) => " ".repeat(c.length)); // same offsets, comments blanked
   const head = HEAD.exec(live);
   if (!PLAYER.test(live)) return { html, fixed: null };
   if (!head) return { html, fixed: null, skipped: "no <head>…</head> to put the loading state in" };
-  const style = STYLE.exec(head[0]);
-  if (style) {
-    const at = head.index + style.index;
-    if (html.slice(at, at + style[0].length) === LOADING_STYLE) return { html, fixed: null };
-    return { html: html.slice(0, at) + LOADING_STYLE + html.slice(at + style[0].length), fixed: "refreshed" };
+  const rawHead = html.slice(head.index, head.index + head[0].length);
+  const splice = (text) => html.slice(0, head.index) + text + html.slice(head.index + head[0].length);
+  if (!STYLE.test(head[0])) {
+    const cleaned = trimPieces(rawHead, 0);
+    const title = /<\/title>/i.exec(cleaned);
+    const at = title ? title.index + title[0].length : /^<head\b[^>]*>/i.exec(cleaned)[0].length;
+    return { html: splice(`${cleaned.slice(0, at)}\n${LOADING_BLOCK}${cleaned.slice(at)}`), fixed: "inserted" };
   }
-  const title = /<\/title>/i.exec(head[0]);
-  const at = head.index + (title ? title.index + title[0].length : /^<head\b[^>]*>/i.exec(head[0])[0].length);
-  return { html: `${html.slice(0, at)}\n${LOADING_BLOCK}${html.slice(at)}`, fixed: "inserted" };
+  const deduped = trimPieces(rawHead, 1);
+  // The one style left, outside comments, made the template's.
+  const blank = deduped.replace(/<!--[\s\S]*?-->/g, (c) => " ".repeat(c.length));
+  const style = STYLE.exec(blank);
+  const fresh = deduped.slice(0, style.index) + LOADING_STYLE + deduped.slice(style.index + style[0].length);
+  if (fresh === rawHead) return { html, fixed: null };
+  return { html: splice(fresh), fixed: deduped !== rawHead ? "deduped" : "refreshed" };
 }

package/src/ops.mjs

@@ -2,7 +2,7 @@ import { deckPlayer, importPlayerWarning, viewPlayerWarning } from "./deckPlayer
 import { zipSync } from "fflate";
 import { COLOR_KEYS, FONT_PAIRINGS, FONT_ROLES, findPairing, googleFontsUrl } from "./brand.mjs";
 import { MAX_IMPORT_FILE_BYTES, draftArgs, extractFile } from "./brandImport.mjs";
-import { api, client, target, uploadBytes as runtimeUploadBytes } from "./runtime.mjs";
+import { api, client, linkBase, target, uploadBytes as runtimeUploadBytes } from "./runtime.mjs";
 import {
   bytesFromText,
   isTextAsset,
@@ -19,8 +19,9 @@ export async function whoami(opts = {}) {
   return (await client(opts)).query(api.decks.whoami, {});
 }
 
-export async function listDecks(opts = {}) {
-  const rows = await (await client(opts)).query(api.decks.listForViewer, {});
+// Your own decks. `all: true` lists every deck, for admins only (support tools).
+export async function listDecks(opts = {}, { all = false } = {}) {
+  const rows = await (await client(opts)).query(all ? api.decks.listAll : api.decks.listForViewer, {});
   return rows.map((d) => ({
     slug: d.slug,
     title: d.title,
@@ -30,6 +31,8 @@ export async function listDecks(opts = {}) {
     // How it opens (null: as its HTML says) and whether viewers may switch.
     view: d.view ?? null,
     viewToggle: d.viewToggle !== false,
+    // How the player moves on: auto, slide or step (null: as its HTML says, else auto).
+    pace: d.pace ?? null,
     // false: the deck runs its own player, so view/viewToggle do not apply
     // (null: not known yet, treated as on).
     usesPlayer: d.usesPlayer ?? null,
@@ -78,6 +81,7 @@ export async function generateImage(opts, fields = {}) {
   if (fields.format) args.format = String(fields.format);
   if (fields.model) args.model = String(fields.model);
   if (fields.seed != null && fields.seed !== "") args.seed = Number(fields.seed);
+  if (fields.brand) args.brand = true;
   // Returns { images } for fast requests, or { jobId, status, count } for slow ones
   // (high/auto quality, transparent, count>1). The MCP tool returns this as-is so it
   // never blocks; the CLI polls with pollImageJob to stay one-command (see commands).
@@ -179,8 +183,10 @@ export async function renderChart(opts, spec = {}) {
 export async function generateIconSet(opts, fields = {}) {
   const subjects = (fields.subjects || []).map(String).filter(Boolean);
   if (!subjects.length) throw new Error("subjects is required (one or more things to draw)");
-  if (!fields.style) throw new Error("style is required");
-  const args = { subjects, style: String(fields.style) };
+  if (!fields.style && !fields.preset) throw new Error("style or preset is required");
+  const args = { subjects };
+  if (fields.style) args.style = String(fields.style);
+  if (fields.preset) args.preset = String(fields.preset);
   if (fields.palette?.length) args.palette = fields.palette.map(String);
   if (fields.slug) args.slug = String(fields.slug);
   if (fields.name) args.name = String(fields.name);
@@ -229,7 +235,7 @@ export async function requestVideoExport(opts, fields = {}) {
   const c = await client(opts);
   try {
     const out = await c.mutation(api.videoExports.requestVideo, { slug, options });
-    return { ...out, next: `poll check_export { exportId: "${out.exportId}" } (or \`hyperdecks export status ${out.exportId}\`) every 20-30 s; a deck renders in about its own length` };
+    return { ...out, next: `poll check_export { exportId: "${out.exportId}" } (or \`hyperdecks export status ${out.exportId}\`) every 20-30 s; a 4-minute deck takes about 12 minutes` };
   } catch (e) {
     // A backend from before the render worker has no requestVideo.
     if (/Could not find public function/i.test(errorText(e))) throw new Error(videoFromCli(slug));
@@ -261,7 +267,11 @@ export async function ownedDeck(opts, slug) {
   const c = await client(opts);
   const [deck, me] = await Promise.all([c.query(api.decks.get, { slug }), c.query(api.decks.whoami, {})]);
   if (!me) throw new Error("not logged in: run `hyperdecks login` first");
-  if (!deck) throw new Error(`deck not found: ${slug} (register it first, or pass --slug)`);
+  if (!deck) {
+    // get answers only for your own decks; say so when the slug is someone else's.
+    if (await c.query(api.decks.slugTaken, { slug })) throw new Error(`forbidden: ${slug} is not your deck`);
+    throw new Error(`deck not found: ${slug} (register it first, or pass --slug)`);
+  }
   if (!me.isAdmin && deck.ownerId !== me.subject) throw new Error(`forbidden: ${slug} is not your deck`);
   return deck;
 }
@@ -285,7 +295,7 @@ export const VIDEO_RECIPIENT = "Video viewers";
 export async function videoShareLink(opts, slug) {
   const live = (await listShares(opts, slug)).find((s) => s.recipient === VIDEO_RECIPIENT && s.enabled && !s.qa && !s.archived && !s.requireEmail && (s.expiresAt == null || s.expiresAt > Date.now()) && (s.viewLimit == null || s.opens < s.viewLimit));
   const token = live?.token ?? (await createShare(opts, { slug, recipient: VIDEO_RECIPIENT })).token;
-  return `${target(opts).shareBase}/v/${token}`;
+  return `${await linkBase(opts)}/v/${token}`;
 }
 
 // `export --video --upload`: file the MP4 with the deck's exports (30 days).
@@ -425,10 +435,24 @@ export async function checkNarrationJob(opts, jobId) {
   return (await client(opts)).query(api.narration.getJob, { jobId: String(jobId) });
 }
 
+// Your own voices (what clone, rename and delete act on).
 export async function listVoices(opts = {}) {
   return (await client(opts)).query(api.voices.listVoices, {});
 }
 
+// Every voice you can narrate with: yours, then the built-in ones (builtin: true,
+// id stock:<id>), which any account may use. What list_voices shows.
+export async function listAllVoices(opts = {}) {
+  const c = await client(opts);
+  try {
+    return await c.query(api.voices.listVoices, { builtin: true });
+  } catch (e) {
+    // A backend from before built-in voices refuses the argument: your own voices, then.
+    if (!/builtin|extra field|Validator/i.test(errorText(e))) throw e;
+    return c.query(api.voices.listVoices, {});
+  }
+}
+
 // ---- voice cloning (convex/voices.ts) ---------------------------------------
 
 // The text of a backend error: ConvexError data (production redacts the rest), else the message.
@@ -600,18 +624,23 @@ export async function setDeckForwarding(opts, slug, allowForward) {
 
 // How a deck opens in the player and whether viewers may switch: view is
 // "slides", "scroll", or null to follow the deck's own HTML again; viewToggle
-// true/false. Either may be left out; both go in one owner-only mutation, so a
-// failure changes neither.
+// true/false; pace is "auto" (plays itself), "slide" (waits for Next after each
+// slide), "step" (also stops before each [reveal] cue), or null for the deck's
+// own HTML. Any may be left out; all go in one owner-only mutation, so a
+// failure changes none.
 // Applies on every link's next load (the route injects it), with no re-release.
 export const DECK_VIEWS = ["slides", "scroll"];
-export async function setDeckView(opts, slug, { view, viewToggle } = {}) {
+export const DECK_PACES = ["auto", "slide", "step"];
+export async function setDeckView(opts, slug, { view, viewToggle, pace } = {}) {
   if (!slug) throw new Error("slug is required");
-  if (view === undefined && viewToggle === undefined) throw new Error("give a view (slides, scroll or default) and/or a viewToggle");
+  if (view === undefined && viewToggle === undefined && pace === undefined) throw new Error("give a view (slides, scroll or default), a viewToggle and/or a pace (auto, slide, step or default)");
   if (view !== undefined && view !== null && !DECK_VIEWS.includes(view)) throw new Error(`view must be slides, scroll or null (got ${JSON.stringify(view)})`);
+  if (pace !== undefined && pace !== null && !DECK_PACES.includes(pace)) throw new Error(`pace must be auto, slide, step or null (got ${JSON.stringify(pace)})`);
   const res = await (await client(opts)).mutation(api.decks.setViewSettings, {
     slug,
     ...(view !== undefined ? { view } : {}),
     ...(viewToggle !== undefined ? { viewToggle: !!viewToggle } : {}),
+    ...(pace !== undefined ? { pace } : {}),
   });
   // Saved either way; a deck on its own player says the setting won't apply.
   const applies = res?.applies !== false;
@@ -619,6 +648,7 @@ export async function setDeckView(opts, slug, { view, viewToggle } = {}) {
     slug,
     ...(view !== undefined ? { view } : {}),
     ...(viewToggle !== undefined ? { viewToggle: !!viewToggle } : {}),
+    ...(pace !== undefined ? { pace } : {}),
     applies,
     ...(applies ? {} : { warning: viewPlayerWarning(slug, res?.ownScript ?? null) }),
   };
@@ -628,7 +658,7 @@ export async function setDeckView(opts, slug, { view, viewToggle } = {}) {
 // upsert would otherwise reset your own live deck to a draft and rename it.
 export async function createDeck(opts, { slug, title }) {
   const c = await client(opts);
-  if (await c.query(api.decks.get, { slug })) throw new Error(`deck ${slug} already exists; pick another slug`);
+  if (await c.query(api.decks.slugTaken, { slug })) throw new Error(`deck ${slug} already exists; pick another slug`);
   await c.mutation(api.decks.upsert, { slug, title, status: "draft" });
   return { slug, title, status: "draft" };
 }
@@ -1143,7 +1173,7 @@ export async function listNarrators(opts = {}) {
     default: out.defaultId,
     ...(out.unpickedVoice ? { note: `no default narrator yet: decks narrate in your voice "${out.unpickedVoice}"` } : {}),
     narrators: out.narrators.map((n) => ({ id: n.id, name: n.name, spokenName: n.spokenName ?? null, isDefault: n.isDefault, builtin: n.builtin, face: n.face?.name ?? null, voice: n.voice?.name ?? null, voiceReady: !!n.voice?.ready })),
-    voices: out.voices.map((x) => ({ id: x.ref, name: x.name, status: x.status, character: x.character, narrators: x.narrators })),
+    voices: out.voices.map((x) => ({ id: x.ref, name: x.name, status: x.status, character: x.character, builtin: !!x.builtin, narrators: x.narrators })),
   };
 }
 
@@ -1185,7 +1215,8 @@ export async function removeNarrator(opts, ref) {
   return { ...(await (await client(opts)).mutation(api.narrators.remove, { narrator: n.id })), id: n.id };
 }
 
-// voice: one of your ready voices (name or id) or dash.
+// voice: one of your ready voices (name or id), a built-in voice (name or
+// stock:<id>, list_voices), or dash.
 export async function setNarratorVoice(opts, ref, voice) {
   if (!voice) throw new Error("usage: narrator voice <narrator> <voice>");
   const n = await findNarrator(opts, ref);

package/src/presenter.mjs

@@ -12,32 +12,118 @@
 export const DASH_AVATAR = "https://hyperdecks.ai/player/v1/dash-avatar.json";
 export const DASH_PRESENTER = Object.freeze({ avatarUrl: DASH_AVATAR, imageUrl: "https://hyperdecks.ai/avatars/dash.png" });
 
-const PLAYER_TAG = /<script\b[^>]*\bsrc="[^"]*\/player\/v1\/player\.js"[^>]*>/i;
+const PLAYER_TAG = /<script\b[^>]*\bsrc="[^"]*\/player\/v1\/player\.js"[^>]*>/gi;
 
 const attr = (s) => String(s).replace(/&/g, "&amp;").replace(/"/g, "&quot;");
 
-// Whether this tag plays captions only: data-presenter="none", or no presenter
-// at all (the player's default when there is no data-presenter-image either).
-const noPresenter = (tag) => /\sdata-presenter="none"/.test(tag) || (!/\sdata-presenter=/.test(tag) && !/\sdata-presenter-image=/.test(tag));
+// The live player tag: the first one outside an HTML comment (a commented-out
+// copy is not what plays), with where it starts. check's playerScript reads it
+// the same way (closed comments only, so a stray "<!--" in a script hides nothing).
+function playerTag(html) {
+  const comments = [...html.matchAll(/<!--[\s\S]*?-->/g)].map((m) => [m.index, m.index + m[0].length]);
+  for (const m of html.matchAll(PLAYER_TAG)) {
+    if (!comments.some(([a, b]) => m.index >= a && m.index < b)) return { tag: m[0], index: m.index };
+  }
+  return null;
+}
+
+const value = (tag, name) => {
+  const m = new RegExp(`\\s${name}\\s*=\\s*(?:"([^"]*)"|'([^']*)'|([^\\s"'=<>\`]+))`).exec(tag);
+  return m ? (m[1] ?? m[2] ?? m[3]) : null;
+};
+
+// The face this tag shows, decided as packages/player/player.js does: data-presenter
+// head|static|none, else static when there is a still, else none. head draws
+// data-avatar (and falls back to the still without one); static draws the
+// still. Null: the deck plays the voice and captions with no face.
+function tagFace(tag) {
+  const presenter = value(tag, "data-presenter");
+  const avatarUrl = value(tag, "data-avatar") || null;
+  const imageUrl = value(tag, "data-presenter-image") || null;
+  const mode = ["head", "static", "none"].includes(presenter) ? presenter : imageUrl ? "static" : "none";
+  if (mode === "head" && (avatarUrl || imageUrl)) return { avatarUrl, imageUrl };
+  if (mode === "static" && imageUrl) return { avatarUrl: null, imageUrl };
+  return null;
+}
+
+// The face the page's player shows ({ avatarUrl, imageUrl }, either may be
+// null), or null when it plays captions only or has no player tag.
+export function presentedFace(html) {
+  const found = playerTag(html);
+  return found ? tagFace(found.tag) : null;
+}
 
-// Whether the page's player tag names nobody, so without a face it has captions only.
+// Whether the page's player tag shows no face, so it has captions only.
 export function playsCaptionsOnly(html) {
-  const tag = PLAYER_TAG.exec(html)?.[0];
-  return !!tag && !/\sdata-avatar=/.test(tag) && noPresenter(tag);
+  const found = playerTag(html);
+  return !!found && !tagFace(found.tag);
 }
 
 // html with the player tag set to present `avatarUrl` (the /avatar/<token> doc
-// the player loads) and `imageUrl` (its still, for thumbnails and no-WebGL),
-// or html unchanged when there is no such tag or it already has a presenter.
+// the player loads) and `imageUrl` (its still, for thumbnails and no-WebGL), or
+// html unchanged when there is no such tag, the tag already shows a face, or it
+// names a non-empty data-avatar of its own (set by hand: left alone even beside "none").
+// Anything else the player would play captions only (data-presenter none or
+// missing, head with no data-avatar, static with no still) gets the face.
 export function withAvatar(html, { avatarUrl, imageUrl }) {
-  const tag = PLAYER_TAG.exec(html)?.[0];
-  if (!tag || /\sdata-avatar=/.test(tag)) return html;
-  if (!noPresenter(tag)) return html;
-  const none = /\sdata-presenter="none"/.test(tag);
-  const image = imageUrl && !/\sdata-presenter-image=/.test(tag) ? ` data-presenter-image="${attr(imageUrl)}"` : "";
+  const found = playerTag(html);
+  if (!found) return html;
+  const { tag, index } = found;
+  if (tagFace(tag) || value(tag, "data-avatar")) return html;
+  const image = imageUrl && value(tag, "data-presenter-image") === null ? ` data-presenter-image="${attr(imageUrl)}"` : "";
   const face = ` data-presenter="head" data-avatar="${attr(avatarUrl)}"${image}`;
-  const next = none ? tag.replace(/\sdata-presenter="none"/, face) : tag.replace(/>$/, `${face}>`);
-  return html.replace(tag, () => next);
+  const named = /\sdata-presenter\s*=\s*(?:"[^"]*"|'[^']*'|[^\s"'=<>`]+)/;
+  const next = named.test(tag) ? tag.replace(named, face) : tag.replace(/\s*\/?>$/, (end) => `${face}${end}`);
+  return html.slice(0, index) + next + html.slice(index + tag.length);
+}
+
+// What is wrong with the player tag's presenter as written, for check: null, or
+// { kind, presenter }. "unfilled": it asks for a face (head or static) but names
+// none, so it plays captions only until release fills it in. "kept": it has a
+// data-avatar the player ignores (data-presenter="none"), and release leaves it.
+// A plain "none" or no data-presenter is not an issue: release adds the face.
+export function presenterTagIssue(html) {
+  const found = playerTag(html);
+  if (!found || tagFace(found.tag)) return null;
+  const presenter = value(found.tag, "data-presenter");
+  if (value(found.tag, "data-avatar")) return { kind: "kept", presenter };
+  if (presenter === "head" || presenter === "static") return { kind: "unfilled", presenter };
+  return null;
+}
+
+// Why a resolved face did not land on the page: withAvatar leaves a tag with
+// its own data-avatar alone, and a page with no live player tag has nowhere to put it.
+function keptOutReason(html) {
+  const found = playerTag(html);
+  if (!found) return "the page has no live player tag to put the face on";
+  const mode = value(found.tag, "data-presenter");
+  return `the player tag names its own data-avatar, but data-presenter=${mode === null ? " is missing" : `"${mode}"`} so it plays no face, and release leaves a hand-set data-avatar alone: set data-presenter="head", or remove data-avatar`;
+}
+
+// What a release says about the face, from the page as written (`html`), the
+// face it puts on (`presenter`, from avatars.presenterFor; null for none), who
+// the backend says presents (`who`: { narrator, voice, face, reason }) and, when
+// the face lookup itself failed, `lookupError`. Returns the page that ships, a
+// line for the terminal and the summary to report: "presented by" only when
+// that page shows a face, and with no resolved face on it, the tag's own.
+// Both releases use it: release.mjs and convex/deckSources.ts.
+export const TAG_FACE = "the face set on the player tag";
+export function releasedPresenter(html, presenter, who, { lookupError } = {}) {
+  const page = presenter ? withAvatar(html, presenter) : html;
+  const captions = (reason) => ({ page, line: `⚠ releasing captions only: ${reason}`, summary: who ? { ...who, face: null, reason } : null });
+  const shown = presentedFace(page);
+  if (shown) {
+    // Left as written, with no resolved face or another one: whatever the tag names is what shows.
+    if (page === html && shown.avatarUrl !== presenter?.avatarUrl) {
+      return { page, line: `✓ presented by ${TAG_FACE} (${shown.avatarUrl ? "data-avatar" : "data-presenter-image"})`, summary: who ? { ...who, face: TAG_FACE } : null };
+    }
+    return { page, line: `✓ presented by ${who?.face ?? "your avatar"}`, summary: who ?? null };
+  }
+  if (lookupError) return captions(`could not look up your avatar (${lookupError}); release again to try once more`);
+  if (presenter) return captions(keptOutReason(page));
+  if (who && !who.face) return { page, line: `⚠ releasing captions only: ${who.reason ?? "no face"}`, summary: who };
+  if (who?.face) return captions(`no face for "${who.face}" came back to put on the player tag`);
+  return { page, line: "", summary: null };
 }
 
 // One line for who presents a deck, from narrate's or release's `presenter`

package/src/preview.mjs

@@ -1,7 +1,7 @@
 import { mkdir, readFile, writeFile, stat } from "node:fs/promises";
 import { resolve, extname } from "node:path";
 import { randomUUID } from "node:crypto";
-import { api, client, target, uploadBytes } from "./runtime.mjs";
+import { api, client, linkBase, target, uploadBytes } from "./runtime.mjs";
 
 const escapeHtml = (s) => String(s).replace(/[&<>"']/g, c => ({ "&": "&amp;", "<": "&lt;", ">": "&gt;", '"': "&quot;", "'": "&#39;" })[c]);
 export function httpUrl(value) {
@@ -58,7 +58,7 @@ export async function createPreview(pos, opts, adapters = {}) {
     if (opts.share) {
       if (deck.status === 'archived') throw new Error('Archived deck cannot provide a sendable share preview');
       validateShare(await c.query(api.shares.listForDeck, { deckSlug: config.slug }), config.slug, opts.share);
-      shareUrl = httpUrl(`${target(opts).shareBase}/v/${opts.share}`);
+      shareUrl = httpUrl(`${await linkBase(opts)}/v/${opts.share}`);
     }
     html = deck.html;
     if (!html && deck.htmlUrl) {

package/src/release.mjs

@@ -16,8 +16,8 @@ import { readFileSync } from "node:fs";
 import { join } from "node:path";
 import { zipSync } from "fflate";
 import * as ops from "./ops.mjs";
-import { withAvatar } from "./presenter.mjs";
-import { target } from "./runtime.mjs";
+import { releasedPresenter, withAvatar } from "./presenter.mjs";
+import { linkBase } from "./runtime.mjs";
 import { checkDeck, deckFiles, deckFolder, resolveDeckDir } from "./check.mjs";
 import { narrate as runNarrate } from "./narrate.mjs";
 
@@ -112,16 +112,20 @@ export async function release(pos, opts = {}, io = {}) {
   }
   // The released page gets the narrator's face: your avatar, or D.A.S.H.'s for its voice.
   let presenter = null;
+  let lookupError;
   try {
     presenter = await ops.presenterFor(opts, slug, opts.voice);
   } catch (e) {
-    log(`⚠ could not look up your avatar (${ops.errorText(e)}); releasing captions only`);
+    lookupError = ops.errorText(e);
   }
   const released = presenter ? releaseBundle(deckDir, presenter) : bundle;
-  if (presenter) log(`✓ presented by ${job.presenter?.face ?? "your avatar"}`);
+  // Say who presents from the page that ships, never from the lookup alone: a
+  // resolved face that did not land on the player tag must not be claimed, and
+  // a failed lookup is captions only only when the tag names no face of its own.
+  const said = releasedPresenter(readFileSync(join(deckDir, "index.html"), "utf8"), presenter, job.presenter, { lookupError });
   // A terminal user sees this before it ships, so the CLI warns rather than refuses.
-  else if (job.presenter && !job.presenter.face) log(`⚠ releasing captions only: ${job.presenter.reason ?? "no face"}`);
-  return publish({ opts, io: { log, commit }, deckDir, slug, to, checked, bundle, released, summary: job.presenter ?? null });
+  if (said.line) log(said.line);
+  return publish({ opts, io: { log, commit }, deckDir, slug, to, checked, bundle, released, summary: said.summary });
 }
 
 // Import the checked bundle and make the links: the end of every release.
@@ -137,7 +141,7 @@ async function publish({ opts, io: { log, commit }, deckDir, slug, to, checked,
   const sha = commit(deckDir);
   log(`✓ imported "${imported.title}" as ${imported.slug} (${bundle.files.length} file(s), commit ${sha})\n  deck: ${imported.deckUrl}`);
 
-  const base = target(opts).shareBase;
+  const base = await linkBase(opts);
   const shares = [];
   for (const r of to) {
     let token;

package/src/runtime.mjs

@@ -8,7 +8,7 @@ import { fileURLToPath } from "node:url";
 import { ConvexHttpClient } from "convex/browser";
 import { makeFunctionReference } from "convex/server";
 
-export const VERSION = "0.9.6";
+export const VERSION = "0.9.8";
 const UPLOAD_TIMEOUT_MS = 125_000;
 
 // The app's home. HYPERDECKS_HOST points the prod target's broker and share
@@ -117,7 +117,9 @@ export const api = {
   },
   decks: {
     get: makeFunctionReference("decks:get"),
+    slugTaken: makeFunctionReference("decks:slugTaken"),
     listForViewer: makeFunctionReference("decks:listForViewer"),
+    listAll: makeFunctionReference("decks:listAll"),
     remove: makeFunctionReference("decks:remove"),
     setAllowForward: makeFunctionReference("decks:setAllowForward"),
     setView: makeFunctionReference("decks:setView"),
@@ -135,6 +137,7 @@ export const api = {
     setAllowForward: makeFunctionReference("shares:setAllowForward"),
     setEnabled: makeFunctionReference("shares:setEnabled"),
     setNotify: makeFunctionReference("shares:setNotify"),
+    linkOrigins: makeFunctionReference("shares:linkOrigins"),
   },
   imagegen: {
     generateImage: makeFunctionReference("imagegen:generateImage"),
@@ -191,7 +194,7 @@ export const api = {
   },
 };
 
-const BOOL = new Set(["prod", "dev", "admin", "json", "require-email", "qa", "no-notify", "allow-forward", "no-forward", "help", "version", "all-agents", "global", "project", "transparent", "loop", "upload", "dry-run", "narrated", "layout", "strict", "fix", "full-page", "force", "hosted", "yes", "no-voice", "no-skill", "no-release", "no-open", "save-to-minimoji", "captions-only", "no-brand", "no-logo", "pdf", "notes", "mp4", "gif", "video", "no-captions", "no-avatar", "title-card", "end-card"]);
+const BOOL = new Set(["prod", "dev", "admin", "json", "require-email", "qa", "no-notify", "allow-forward", "no-forward", "help", "version", "all-agents", "global", "project", "transparent", "loop", "upload", "dry-run", "narrated", "layout", "strict", "fix", "full-page", "force", "hosted", "yes", "no-voice", "no-skill", "no-release", "no-open", "save-to-minimoji", "captions-only", "no-brand", "brand", "no-logo", "pdf", "notes", "mp4", "gif", "video", "no-captions", "no-avatar", "title-card", "end-card", "backup"]);
 // release's recipients, in order: each --to starts one, and an --email right
 // after it belongs to it (`--to A --email a --to B`). Collected as opts.recipients;
 // opts.email stays the last --email for the other commands (share new).
@@ -259,6 +262,63 @@ export function target(opts = {}) {
   };
 }
 
+// Where recipient links (/v/<token>) are printed: the server says
+// (shares:linkOrigins, RECIPIENT_LINK_ORIGIN in lib/linkOrigin.ts), so links
+// follow the deployment rather than a default baked into this version. Both app
+// hosts serve every link; this only picks the one a new link names.
+// HYPERDECKS_LINK_ORIGIN overrides it; the dev target keeps its share base.
+export const DEFAULT_LINK_ORIGIN = "https://decks.hypersocial.ai";
+const LINK_HOSTS = ["https://decks.hypersocial.ai", "https://hyperdecks.ai"];
+let linkOriginPin = null;
+const linkOriginCache = new Map();
+
+// The hosted MCP pins it to the server's own setting (lib/serverCliHost.ts).
+export function pinLinkOrigin(origin) {
+  linkOriginPin = origin ? normalizeBase(origin) : null;
+  linkOriginCache.clear();
+}
+
+const isLinkHost = (o) => typeof o === "string" && LINK_HOSTS.includes(normalizeBase(o.trim()).toLowerCase());
+
+async function askLinkOrigin(c) {
+  try {
+    const out = await c.query(api.shares.linkOrigins, {});
+    // The server only ever names one of the two app hosts; print nothing else.
+    if (isLinkHost(out?.origin)) return normalizeBase(out.origin.trim()).toLowerCase();
+    console.warn(`warning: the server named no usable link origin; printing links on ${DEFAULT_LINK_ORIGIN}`);
+  } catch (e) {
+    // An older server without shares:linkOrigins stays quiet: links on the
+    // established host open everywhere. Anything else is worth a line.
+    const msg = String(e?.message ?? e);
+    if (!/Could not find public function/.test(msg)) console.warn(`warning: could not ask where to print links (${msg}); printing them on ${DEFAULT_LINK_ORIGIN}`);
+  }
+  return DEFAULT_LINK_ORIGIN;
+}
+
+export async function linkBase(opts = {}) {
+  const t = target(opts);
+  if (t.name === "dev") return t.shareBase;
+  const env = process.env.HYPERDECKS_LINK_ORIGIN?.trim();
+  if (env) {
+    if (isLinkHost(env) || /^http:\/\/(localhost|127\.0\.0\.1)(:\d+)?\/?$/.test(env)) return normalizeBase(env).toLowerCase();
+    console.warn(`warning: HYPERDECKS_LINK_ORIGIN must be ${LINK_HOSTS.join(" or ")} (or a localhost URL); ignoring ${JSON.stringify(env)}`);
+  }
+  if (linkOriginPin) return linkOriginPin;
+  // A caller's own client (the hosted MCP, tests) is asked each time.
+  if (opts.client) return askLinkOrigin(opts.client);
+  if (!linkOriginCache.has(t.convexUrl)) linkOriginCache.set(t.convexUrl, askLinkOrigin(new ConvexHttpClient(t.convexUrl)));
+  return linkOriginCache.get(t.convexUrl);
+}
+
+// The same link on the other app host, for a recipient whose network blocks
+// the printed one; null for a link that is not on an app host (dev).
+export function backupLinkUrl(url) {
+  const m = /^(https?:\/\/[^/]+)(\/.*)$/.exec(String(url || ""));
+  if (!m) return null;
+  const i = LINK_HOSTS.indexOf(m[1].toLowerCase());
+  return i < 0 ? null : `${LINK_HOSTS[1 - i]}${m[2]}`;
+}
+
 export function loadCreds() {
   if (!existsSync(CRED_FILE)) return {};
   try {