@marver-design/marver 0.10.0 → 0.10.2

package/CHANGELOG.md

@@ -2,6 +2,62 @@
 
 Notable changes to `@marver-design/marver`. Format follows [Keep a Changelog](https://keepachangelog.com); versions follow semver.
 
+## 0.10.2 - 2026-08-24
+
+### Fixed
+
+- **`marver shot` renders content frames at their real size.** The verify-loop screenshot
+  (and the file-drop `design/.local/shots/*.request.json` transport) used to capture every
+  frame at the mobile viewport - a 780x1688 crop - so a `Doc layout="wide"` frame came back
+  squeezed and anything past ~1688px tall was invisible to the verifying agent. A shot now
+  sizes a content frame the way the canvas does: its `contentWidth` (760 document / 1280 wide,
+  or a declared `meta.viewport`'s width) at full measured height. Long frames render in full;
+  past a capture-safe height the shot drops to 1x pixel density and, if still enormous, reports
+  `truncated` with a note rather than producing a gigapixel PNG. The `/api/shot` and file-drop
+  results now include `scale` and, when clipped, `truncated`/`note`.
+- **A slow dev server no longer fails a healthy frame.** A frame that hadn't reported ready
+  within 10s was marked `frame failed` / `frame never reported ready (10s)`, hidden behind a red
+  card that only a per-frame click could clear - but the frame was usually fine, just waiting on
+  a slow module response (Vite re-optimizing dependencies, or the box saturated by parallel Live
+  Jam agents). A genuine failure already reports itself immediately, so silence past the deadline
+  now auto-renavigates the frame once on a fresh revision; if it's still loading it stays visible
+  behind a quiet "still loading" pill (with its own reload) instead of a failure. A late ready
+  clears it, and a stale ready from the superseded document is dropped by generation so it can't
+  mark a reloading frame ready.
+
+### Added
+
+- **`marver dev` warns when your instructions predate the installed package.** Upgrading the
+  package doesn't refresh the managed files in `design/` - so a workspace scaffolded on an
+  older version could run the new daemon against an agent contract that predated it (for
+  example, Live Jam armed with no `jam.md` on disk). Dev now prints one line at boot when a
+  managed instruction file is behind the installed version - `instructions predate marver
+  <version> (jam.md, ...) - run: npx marver init` - comparing the on-disk `marver:managed`
+  hashes against what this version ships. Files you edited or detached are never flagged.
+
+## 0.10.1 - 2026-08-21
+
+### Added
+
+- **Point an agent at anything on the canvas by its location.** Right-click a board, scene,
+  or frame in the sidebar for a Copy path action (the same signpost icon as the floating
+  toolbar): a board copies `board: <b>`, a scene `board: <b> - scene: <s>  (design/scenes/<s>/)`,
+  a frame `board: <b> - frame: <id>  (<file>)`. Laser copy now leads with `[board > scene]`
+  before the file and selector, and the floating toolbar plus Shift+P copy that same frame
+  address (board, frame, file) - all routed through one helper so the three never drift. On a
+  real copy the toolbar signpost flashes to a check. The AGENTS templates and the Live Jam
+  guide explain how to read every pasted address.
+- **Manage boards from the sidebar.** Rename a board inline from its right-click menu; the
+  dev server performs an atomic no-clobber move and refuses a board that has a live connection
+  or a comment log (comment and sync state is board-keyed and cannot follow a file rename).
+  Reorder boards by dragging - a pointer-driven gesture (not native drag-and-drop) that holds
+  a grabbing cursor for the whole drag and marks the landing with a single brand-blue seam per
+  gap, overlaid so the list never shifts. A plain click still switches boards.
+
+### Removed
+
+- The Duplicate-frame button on the floating selection toolbar.
+
 ## 0.10.0 - 2026-08-21
 
 ### Added

package/README.md

@@ -32,7 +32,7 @@ Frames appear on the canvas the moment the files land. That's the loop.
 
 ## The canvas
 
-- **Frames, scenes, boards.** Frames are screens, scenes group them (`design/scenes/<scene>/<frame>.tsx`), boards arrange them. Agents write `design/boards/<name>.json` (a frame list is enough); switch boards at the top of the sidebar. `all-scenes` is auto-managed.
+- **Frames, scenes, boards.** Frames are screens, scenes group them (`design/scenes/<scene>/<frame>.tsx`), boards arrange them. Agents write `design/boards/<name>.json` (a frame list is enough); switch boards at the top of the sidebar. `all-scenes` is auto-managed. Right-click any board, scene, or frame in the sidebar to copy its path - the exact string to paste to your agent - and rename or drag-reorder boards from there too.
 - **Devices view.** Hotkeys `1`-`5` (or the Devices menu) size every frame to mobile / tablet / laptop / monitor / tv to sweep your breakpoints; `0` restores your own layout exactly. Widths live in `design/config.ts`.
 - **Prototype links.** `data-goto="scene/frame"` on any element links frames into a walkable prototype - across boards, too.
 - **Play mode.** Press `p`: the board becomes a full-screen, clickable walkthrough. `data-goto` links navigate, arrow keys step between frames, `[` / `]` cycle variants, `Escape` exits. Publish it and you have a shareable prototype.
@@ -76,7 +76,7 @@ The same glow, driven from the terminal. When your agent takes a request, it cre
 
 **Board & chrome** - `t` tidy · `d` toggle light/dark for the board · `⌘\` (ctrl+\) collapse/open sidebar.
 
-**Selection** - click selects · shift+click (canvas or sidebar) builds a multi-selection · `⌘A` selects every frame on the board · `⇧P` copies the selected frames' file paths · double-click enters interact mode (`esc` or click outside leaves) · drag the title bar to move, edges to resize (widths snap to devices).
+**Selection** - click selects · shift+click (canvas or sidebar) builds a multi-selection · `⌘A` selects every frame on the board · `⇧P` copies the selected frames' paths (board, frame, and file) · double-click enters interact mode (`esc` or click outside leaves) · drag the title bar to move, edges to resize (widths snap to devices).
 
 **Modes** - `c` comment mode · `l` laser mode · `⇧C` hide/show comment pins · `⇧L` laser comment (spotlight a thread's element) · `p` play mode · `h` hide all chrome.
 

package/dist/{build-Dd91jjIg.mjs → build-zUf_kwKp.mjs}

@@ -1,6 +1,6 @@
 import { i as ROUTE, n as NAME } from "./cli.mjs";
 import { l as detectHost, r as scanFrames, s as loadConfig } from "./manifest-DIsp3ldB.mjs";
-import { n as tailwind3Css, r as tailwind4Plugin, t as marverPlugin } from "./plugin-CgLVYTR-.mjs";
+import { n as tailwind3Css, r as tailwind4Plugin, t as marverPlugin } from "./plugin-C1sDewZ3.mjs";
 import { cpSync, existsSync, mkdirSync, readFileSync, readdirSync, realpathSync, writeFileSync } from "node:fs";
 import { basename, dirname, join, sep } from "node:path";
 import { fileURLToPath } from "node:url";

package/dist/cli.mjs

@@ -39,14 +39,14 @@ function version() {
 }
 const cli = cac(NAME);
 cli.command("init", "Scaffold design/ in this repo").option("--mode <mode>", "studio | embedded", { default: "studio" }).option("--no-demo", "Skip the demo scene (the demo ships unless this flag is passed)").option("--root <dir>", "Host repo root", { default: "." }).action(async (opts) => {
-	const { init } = await import("./init-D2EQEbV6.mjs");
+	const { init } = await import("./init-DwV0_d9G.mjs");
 	init(resolve(opts.root), {
 		mode: opts.mode === "embedded" ? "embedded" : "studio",
 		demo: opts.demo !== false
 	});
 });
 for (const [name, desc] of [["dev", "Start the local canvas (everything on: hot reload, comments, Live Jam)"], ["canvas", "Start the local canvas - same as dev"]]) cli.command(name, desc).option("--root <dir>", "Host repo root", { default: "." }).option("--port <port>", "Port (default 5199)").action(async (opts) => {
-	const { dev } = await import("./dev-Dv0GlYQq.mjs");
+	const { dev } = await import("./dev-D2PG6igI.mjs");
 	let port;
 	if (opts.port !== void 0) {
 		const n = Number(opts.port);
@@ -56,7 +56,7 @@ for (const [name, desc] of [["dev", "Start the local canvas (everything on: hot
 	await dev(resolve(opts.root), port);
 });
 cli.command("build", "Static export → design/.dist (what ships comes from design/publish.json - publishing is default-closed)").option("--boards <names>", "Publish only these boards (comma-separated); overrides the publish policy").option("--all-boards", "Publish every board - the loud override for the default-closed policy").option("--root <dir>", "Host repo root", { default: "." }).action(async (opts) => {
-	const { buildSite } = await import("./build-Dd91jjIg.mjs");
+	const { buildSite } = await import("./build-zUf_kwKp.mjs");
 	try {
 		const boards = opts.boards === void 0 ? void 0 : typeof opts.boards === "string" ? opts.boards : "";
 		await buildSite(resolve(opts.root), boards, opts.allBoards === true);

package/dist/{daemon-B_8BmmSJ.mjs → daemon-BpKBJZee.mjs}

@@ -1,9 +1,9 @@
-import { r as deviceId, t as has } from "./ledger-BgA7nQoH.mjs";
 import { n as replay } from "./events-BMtBvvgU.mjs";
 import { appendEvents, listBoards, readLog } from "./comments-BZBKhKRO.mjs";
 import { n as localProfile } from "./profile-BkiWglVE.mjs";
 import { i as toFrameId } from "./manifest-DIsp3ldB.mjs";
 import { workActivity } from "./work-CLrmY-vQ.mjs";
+import { r as deviceId, t as has } from "./ledger-Bu0BjqIe.mjs";
 import { closeSync, existsSync, fsyncSync, mkdirSync, openSync, readFileSync, readdirSync, renameSync, rmSync, statSync, unlinkSync, watch, writeFileSync, writeSync } from "node:fs";
 import { join } from "node:path";
 import { randomBytes, randomUUID } from "node:crypto";

package/dist/{dev-Dv0GlYQq.mjs → dev-D2PG6igI.mjs}

@@ -1,6 +1,6 @@
 import { n as NAME, r as PKG } from "./cli.mjs";
 import { l as detectHost, s as loadConfig } from "./manifest-DIsp3ldB.mjs";
-import { n as tailwind3Css, r as tailwind4Plugin, t as marverPlugin } from "./plugin-CgLVYTR-.mjs";
+import { n as tailwind3Css, r as tailwind4Plugin, t as marverPlugin } from "./plugin-C1sDewZ3.mjs";
 import { basename, dirname, join } from "node:path";
 import { fileURLToPath } from "node:url";
 import { createLogger, createServer, searchForWorkspaceRoot } from "vite";
@@ -141,6 +141,16 @@ async function dev(root, portFlag) {
 	const port = typeof addr === "object" && addr ? addr.port : picked.port;
 	if (picked.fellBack) console.log(`\n  port ${desiredPort} is in use - serving "${projectName}" on ${port} instead`);
 	console.log(`\n  ${NAME} · ${projectName} → http://localhost:${port}/\n`);
+	try {
+		const { staleManagedInstructions } = await import("./managed-HwHVNI3h.mjs");
+		const { installedVersion } = await import("./plugin-C1sDewZ3.mjs").then((n) => n.i);
+		const stale = staleManagedInstructions(root);
+		if (stale.length) {
+			const shown = stale.slice(0, 4).join(", ") + (stale.length > 4 ? `, +${stale.length - 4} more` : "");
+			const v = installedVersion();
+			console.log(`  instructions predate ${v ? NAME + " " + v : "the installed version"} (${shown}) - run: npx ${NAME} init\n`);
+		}
+	} catch {}
 	const { loadCollab, syncOnce } = await import("./sync-BJKKmy1n.mjs");
 	if (loadCollab(root)) console.log(`  comments: syncing with the published canvas (design/.local/collab.json)\n`);
 	let syncing = false;
@@ -171,7 +181,7 @@ async function dev(root, portFlag) {
 		});
 	}
 	if (config.jam) {
-		const { startJam } = await import("./daemon-B_8BmmSJ.mjs");
+		const { startJam } = await import("./daemon-BpKBJZee.mjs");
 		const jam = startJam(root, config.jam, (m) => console.log(m), (board) => server.ws.send("sh:jam-comment", { board }));
 		if (jam) {
 			const close = server.close.bind(server);

package/dist/{init-D2EQEbV6.mjs → init-DwV0_d9G.mjs}

@@ -1,20 +1,9 @@
 import { n as NAME } from "./cli.mjs";
 import { a as writeManifest, c as detectAgent, l as detectHost, o as DEFAULTS, r as scanFrames, u as readJson } from "./manifest-DIsp3ldB.mjs";
+import { MANAGED_PREFIX, enumerateInstructionTemplates, hashBody, managedFile, pkgDir } from "./managed-HwHVNI3h.mjs";
 import { cpSync, existsSync, mkdirSync, readFileSync, readdirSync, renameSync, rmSync, writeFileSync } from "node:fs";
 import { dirname, join, relative } from "node:path";
-import { fileURLToPath } from "node:url";
-import { createHash } from "node:crypto";
 //#region src/cli/init.ts
-/** Package root = the nearest ancestor holding templates/ (one hop from dist/, two
-*  from src/cli/ - the walk serves both, and tests run init from source). */
-const pkgDir = () => {
-	let dir = dirname(fileURLToPath(import.meta.url));
-	for (let i = 0; i < 4; i++) {
-		if (existsSync(join(dir, "templates"))) return dir;
-		dir = dirname(dir);
-	}
-	return join(dirname(fileURLToPath(import.meta.url)), "..");
-};
 /** Idempotent scaffolder: never overwrites existing files; every host-repo touch prints a diff. */
 function init(root, opts) {
 	const host = detectHost(root);
@@ -57,7 +46,7 @@ function init(root, opts) {
 			rmSync(latest, { force: true });
 			return;
 		}
-		if (current.startsWith(MANAGED_PREFIX)) {
+		if (current.startsWith("<!-- marver:managed ")) {
 			const recorded = current.slice(MANAGED_PREFIX.length).split(" ")[0];
 			const nl = current.indexOf("\n");
 			const currentBody = nl >= 0 ? current.slice(nl + 1) : "";
@@ -75,7 +64,7 @@ function init(root, opts) {
 				}
 				console.warn(`  ~ design/${rel}: you customized it and a newer version exists - your edits are untouched. Merge what you want from design/.local/latest/${rel}`);
 			}
-		} else if (current.startsWith(LEGACY_PREFIX)) {
+		} else if (current.startsWith("<!-- generated by marver init")) {
 			writeFileSync(file, next);
 			rmSync(latest, { force: true });
 			created.push(`design/${rel} (updated)`);
@@ -93,7 +82,7 @@ function init(root, opts) {
 	write("providers.tsx", providersTemplate(host.router, host.toaster, host.routerPkg));
 	writeManaged("AGENTS.md", readFileSync(join(templates, `AGENTS-${opts.mode}.md`), "utf8").replaceAll("{{UI_GUIDANCE}}", uiGuidance(host, noApp(host))).replace(/\{\{NEXT_NOTES\}\}\n?/, host.router === "next" ? NEXT_NOTES : ""));
 	const agentsNow = readFileSync(join(design, "AGENTS.md"), "utf8");
-	if (!agentsNow.startsWith(MANAGED_PREFIX) && !agentsNow.startsWith(LEGACY_PREFIX) && agentsNow.includes("# Design canvas - agent contract") && !agentsNow.includes("## The method (binding)")) console.warn(`  note: design/AGENTS.md predates managed regeneration - if you never edited it, delete it and re-run init to get the current contract (incl. the design/instructions routing).`);
+	if (!agentsNow.startsWith("<!-- marver:managed ") && !agentsNow.startsWith("<!-- generated by marver init") && agentsNow.includes("# Design canvas - agent contract") && !agentsNow.includes("## The method (binding)")) console.warn(`  note: design/AGENTS.md predates managed regeneration - if you never edited it, delete it and re-run init to get the current contract (incl. the design/instructions routing).`);
 	const claudeMd = join(root, "CLAUDE.md");
 	const importLine = "@design/AGENTS.md";
 	if (!existsSync(claudeMd)) {
@@ -118,15 +107,12 @@ function init(root, opts) {
 			created.push("AGENTS.md (updated)");
 		}
 	}
-	const instrRoot = join(templates, "instructions");
-	for (const e of readdirSync(instrRoot, { withFileTypes: true })) if (e.isDirectory()) {
-		for (const f of readdirSync(join(instrRoot, e.name))) if (f.endsWith(".md")) writeManaged(`instructions/${e.name}/${f}`, readFileSync(join(instrRoot, e.name, f), "utf8"));
-	} else if (e.name.endsWith(".md")) writeManaged(`instructions/${e.name}`, readFileSync(join(instrRoot, e.name), "utf8"));
+	for (const { rel, body } of enumerateInstructionTemplates(templates)) writeManaged(rel, body);
 	const setupPath = join(design, "instructions", "setup.md");
 	const setupState = () => {
 		if (!existsSync(setupPath)) return "absent";
 		const s = readFileSync(setupPath, "utf8");
-		if (s.startsWith(MANAGED_PREFIX)) {
+		if (s.startsWith("<!-- marver:managed ")) {
 			const recorded = s.slice(MANAGED_PREFIX.length).split(" ")[0];
 			const nl = s.indexOf("\n");
 			return nl >= 0 && hashBody(s.slice(nl + 1)) === recorded ? "ours-pristine" : "ours-edited";
@@ -136,7 +122,7 @@ function init(root, opts) {
 	const setupWas = setupState();
 	const appJustAppeared = !noApp(host) && (setupWas === "ours-pristine" || setupWas === "ours-edited");
 	if (noApp(host)) {
-		if (setupWas === "ours-pristine" && !readFileSync(setupPath, "utf8").startsWith(MANAGED_PREFIX)) rmSync(setupPath);
+		if (setupWas === "ours-pristine" && !readFileSync(setupPath, "utf8").startsWith("<!-- marver:managed ")) rmSync(setupPath);
 		if (setupWas !== "foreign") writeManaged("instructions/setup.md", SETUP_MD);
 	} else if (setupWas === "ours-pristine") {
 		rmSync(setupPath);
@@ -193,13 +179,6 @@ function init(root, opts) {
 	console.log(`\n  next: npx ${NAME} dev   (or: npx ${NAME} canvas - same thing; canvas on http://localhost:${DEFAULTS.port} by default)\n`);
 	if (!noApp(host)) console.log(`  then, to your agent: "Read design/AGENTS.md. This is our first session - follow design/instructions/welcome.md."\n`);
 }
-const MANAGED_PREFIX = "<!-- marver:managed ";
-const LEGACY_PREFIX = "<!-- generated by marver init";
-const hashBody = (s) => createHash("sha256").update(s).digest("hex");
-/** The marker carries a hash of the generated body: edits are DETECTED, not assumed.
-*  Edit freely - init preserves edits and stages upstream updates for merging.
-*  Deleting the marker line detaches the file from updates entirely. */
-const managedFile = (body) => `${MANAGED_PREFIX}${hashBody(body)} - edit freely: init preserves your edits and stages upstream updates at design/.local/latest/ for you to merge. Delete this line to detach this file from updates entirely. -->\n${body}`;
 /** The host's path aliases, re-rooted one level down for design/tsconfig.json.
 *  "./src/*" becomes "../src/*" so `@/` imports resolve from inside design/. */
 function designPaths(root) {

package/dist/{ledger-BgA7nQoH.mjs → ledger-Bu0BjqIe.mjs}

@@ -1,19 +1,8 @@
+import { t as __exportAll } from "./rolldown-runtime-D7D4PA-g.mjs";
 import { closeSync, existsSync, fsyncSync, mkdirSync, openSync, readFileSync, writeSync } from "node:fs";
 import { dirname, join } from "node:path";
 import { createHash } from "node:crypto";
 import { homedir, hostname, userInfo } from "node:os";
-//#region \0rolldown/runtime.js
-var __defProp = Object.defineProperty;
-var __exportAll = (all, no_symbols) => {
-	let target = {};
-	for (var name in all) __defProp(target, name, {
-		get: all[name],
-		enumerable: true
-	});
-	if (!no_symbols) __defProp(target, Symbol.toStringTag, { value: "Module" });
-	return target;
-};
-//#endregion
 //#region src/server/jam/device.ts
 /**
 * The device stamp - what makes "device-bound" true for the two files that decide whether

package/dist/managed-HwHVNI3h.mjs

@@ -0,0 +1,94 @@
+import { existsSync, readFileSync, readdirSync } from "node:fs";
+import { dirname, join } from "node:path";
+import { fileURLToPath } from "node:url";
+import { createHash } from "node:crypto";
+//#region src/server/managed.ts
+/**
+* Managed-file identity - the ONE source of truth for the `marver:managed <hash>` marker,
+* shared by `init` (which WRITES managed files) and `dev`'s boot-time staleness probe (which
+* only READS them). Kept side-effect-free on purpose: dev must learn whether the on-disk
+* instructions are behind the installed package WITHOUT importing the mutating init() path.
+*/
+/** The marker records a HASH of the generated body: edits are DETECTED, not assumed. */
+const MANAGED_PREFIX = "<!-- marver:managed ";
+/** Hashless 0.2.2-dev marker: edits are undetectable, so init unconditionally upgrades it. */
+const LEGACY_PREFIX = "<!-- generated by marver init";
+const hashBody = (s) => createHash("sha256").update(s).digest("hex");
+/** Prepend the managed marker to a generated body. Deleting the marker line detaches the
+*  file from updates entirely. */
+const managedFile = (body) => `${MANAGED_PREFIX}${hashBody(body)} - edit freely: init preserves your edits and stages upstream updates at design/.local/latest/ for you to merge. Delete this line to detach this file from updates entirely. -->\n${body}`;
+/** Package root = the nearest ancestor holding templates/ (one hop from dist/, two from
+*  src/** - the walk serves both, and tests run from source). */
+const pkgDir = () => {
+	let dir = dirname(fileURLToPath(import.meta.url));
+	for (let i = 0; i < 4; i++) {
+		if (existsSync(join(dir, "templates"))) return dir;
+		dir = dirname(dir);
+	}
+	return join(dirname(fileURLToPath(import.meta.url)), "..");
+};
+const templatesDir = () => join(pkgDir(), "templates");
+function classifyManaged(current, shippedBody) {
+	if (current == null) return "absent";
+	if (current.startsWith("<!-- marver:managed ")) {
+		const nl = current.indexOf("\n");
+		if (nl < 0) return "detached";
+		const recorded = current.slice(20).split(" ")[0];
+		if (!/^[0-9a-f]{64}$/.test(recorded)) return "detached";
+		const body = current.slice(nl + 1);
+		const shipped = hashBody(shippedBody);
+		if (hashBody(body) === recorded) return recorded === shipped ? "pristine-current" : "pristine-stale";
+		return recorded === shipped ? "edited-current" : "edited-stale";
+	}
+	if (current.startsWith("<!-- generated by marver init")) return "legacy";
+	return "detached";
+}
+/** The managed INSTRUCTION set init writes, enumerated identically (init.ts): top-level
+*  templates/instructions/*.md plus one level of subdirectory *.md (reference/). setup.md is
+*  the SETUP_MD constant written separately/conditionally - it is not a template file, so it
+*  never appears here. */
+function enumerateInstructionTemplates(templatesRoot) {
+	const instrRoot = join(templatesRoot, "instructions");
+	const out = [];
+	if (!existsSync(instrRoot)) return out;
+	for (const e of readdirSync(instrRoot, { withFileTypes: true })) if (e.isDirectory()) {
+		for (const f of readdirSync(join(instrRoot, e.name))) if (f.endsWith(".md")) out.push({
+			rel: `instructions/${e.name}/${f}`,
+			body: readFileSync(join(instrRoot, e.name, f), "utf8")
+		});
+	} else if (e.name.endsWith(".md") && e.name !== "setup.md") out.push({
+		rel: `instructions/${e.name}`,
+		body: readFileSync(join(instrRoot, e.name), "utf8")
+	});
+	return out;
+}
+const STALE = /* @__PURE__ */ new Set([
+	"absent",
+	"pristine-stale",
+	"edited-stale",
+	"legacy"
+]);
+/**
+* Which managed instruction files on disk are behind the INSTALLED package (distinct from the
+* registry update-check). Returns display names (basenames) of the stale files, AGENTS.md
+* included only when the file is entirely ABSENT (a deleted marker is the documented opt-out,
+* and AGENTS.md is host-substituted so its pristine hash never matches the raw template).
+* Never throws: any read/enumeration failure yields an empty list so a boot can't crash on it.
+*/
+function staleManagedInstructions(root) {
+	try {
+		const design = join(root, "design");
+		const stale = [];
+		for (const { rel, body } of enumerateInstructionTemplates(templatesDir())) {
+			const file = join(design, rel);
+			const current = existsSync(file) ? readFileSync(file, "utf8") : null;
+			if (STALE.has(classifyManaged(current, body))) stale.push(rel.split("/").pop() ?? rel);
+		}
+		if (!existsSync(join(design, "AGENTS.md"))) stale.unshift("AGENTS.md");
+		return stale;
+	} catch {
+		return [];
+	}
+}
+//#endregion
+export { LEGACY_PREFIX, MANAGED_PREFIX, enumerateInstructionTemplates, hashBody, managedFile, pkgDir, staleManagedInstructions };

package/dist/{plugin-CgLVYTR-.mjs → plugin-C1sDewZ3.mjs}

@@ -1,7 +1,8 @@
+import { t as __exportAll } from "./rolldown-runtime-D7D4PA-g.mjs";
 import { i as ROUTE, n as NAME, r as PKG } from "./cli.mjs";
 import { n as localProfile, t as isConnected } from "./profile-BkiWglVE.mjs";
 import { a as writeManifest, n as hash, r as scanFrames, t as affectedFrameIds } from "./manifest-DIsp3ldB.mjs";
-import { copyFileSync, existsSync, mkdirSync, readFileSync, readdirSync, realpathSync, renameSync, rmSync, watch, writeFileSync } from "node:fs";
+import { copyFileSync, existsSync, linkSync, lstatSync, mkdirSync, readFileSync, readdirSync, realpathSync, renameSync, rmSync, watch, writeFileSync } from "node:fs";
 import { basename, dirname, join, resolve, sep } from "node:path";
 import { fileURLToPath } from "node:url";
 import { randomBytes } from "node:crypto";
@@ -90,6 +91,31 @@ function apiMiddleware(root, opts = {}) {
 		const p = resolve(boardsDir, `${name}.json`);
 		return contained(p, boardsDir) ? p : null;
 	};
+	const validName = (n) => typeof n === "string" && n.length >= 1 && n.length <= 64 && BOARD_NAME.test(n);
+	const underRoot = (dir) => {
+		try {
+			const rr = realpathSync(root);
+			const rd = realpathSync(dir);
+			return rd === rr || rd.startsWith(rr + sep);
+		} catch {
+			return false;
+		}
+	};
+	const notSymlink = (p) => {
+		try {
+			return !existsSync(p) || !lstatSync(p).isSymbolicLink();
+		} catch {
+			return false;
+		}
+	};
+	const nodeExists = (p) => {
+		try {
+			lstatSync(p);
+			return true;
+		} catch {
+			return false;
+		}
+	};
 	try {
 		for (const f of readdirSync(boardsDir)) if (f.endsWith(".tmp")) rmSync(join(boardsDir, f), { force: true });
 	} catch {}
@@ -115,6 +141,72 @@ function apiMiddleware(root, opts = {}) {
 					};
 				}));
 			}
+			if (path === "boards/rename" && req.method === "POST") {
+				if (!ownerGated(req)) return json(res, 403, { error: "forbidden" });
+				const raw = await readBody(req);
+				if (raw == null) return json(res, 400, { error: "body too large or unreadable" });
+				let parsed;
+				try {
+					parsed = JSON.parse(raw);
+				} catch {
+					return json(res, 400, { error: "malformed JSON" });
+				}
+				if (!parsed || typeof parsed !== "object") return json(res, 400, { error: "expected an object" });
+				const { from, to } = parsed;
+				if (!validName(from) || !validName(to)) return json(res, 400, { error: "invalid board name" });
+				if (to === "all-scenes" || from === "all-scenes" || to === from) return json(res, 400, { error: "invalid rename" });
+				if (!underRoot(boardsDir)) return json(res, 400, { error: "boards directory escapes the project" });
+				const fromPath = boardPath(from), toPath = boardPath(to);
+				if (!fromPath || !toPath) return json(res, 400, { error: "invalid board name" });
+				if (!existsSync(fromPath)) return json(res, 404, { error: `board "${from}" does not exist` });
+				if (!notSymlink(fromPath)) return json(res, 400, { error: "refusing to rename a symlinked board file" });
+				if (isConnected(root)) return json(res, 409, { error: "disconnect before renaming boards - comment sync is board-keyed" });
+				if (existsSync(join(root, "design", "comments", `${from}.jsonl`))) return json(res, 409, { error: "rename a board before commenting on it - this board has threads" });
+				if (nodeExists(toPath)) return json(res, 409, { error: `a board named "${to}" already exists` });
+				try {
+					linkSync(fromPath, toPath);
+				} catch (err) {
+					const code = err.code;
+					if (code === "EEXIST") return json(res, 409, { error: `a board named "${to}" already exists` });
+					if (code !== "EPERM" && code !== "ENOSYS" && code !== "ENOTSUP" && code !== "EOPNOTSUPP") throw err;
+					if (nodeExists(toPath)) return json(res, 409, { error: `a board named "${to}" already exists` });
+					renameSync(fromPath, toPath);
+					return json(res, 200, { name: to });
+				}
+				rmSync(fromPath);
+				return json(res, 200, { name: to });
+			}
+			if (path === "boards/reorder" && req.method === "POST") {
+				if (!ownerGated(req)) return json(res, 403, { error: "forbidden" });
+				const raw = await readBody(req);
+				if (raw == null) return json(res, 400, { error: "body too large or unreadable" });
+				let parsed;
+				try {
+					parsed = JSON.parse(raw);
+				} catch {
+					return json(res, 400, { error: "malformed JSON" });
+				}
+				if (!parsed || typeof parsed !== "object") return json(res, 400, { error: "expected an object" });
+				const order = parsed.order;
+				if (!Array.isArray(order) || order.length < 1 || order.length > 200) return json(res, 400, { error: "invalid order" });
+				if (!order.every(validName) || order.some((n) => n === "all-scenes")) return json(res, 400, { error: "invalid board name in order" });
+				if (new Set(order).size !== order.length) return json(res, 400, { error: "duplicate board in order" });
+				if (!underRoot(boardsDir)) return json(res, 400, { error: "boards directory escapes the project" });
+				for (let i = 0; i < order.length; i++) {
+					const p = boardPath(order[i]);
+					if (!p || !existsSync(p) || !notSymlink(p)) continue;
+					let obj;
+					try {
+						obj = JSON.parse(readFileSync(p, "utf8"));
+					} catch {
+						continue;
+					}
+					if (!obj || typeof obj !== "object") continue;
+					obj.order = i;
+					atomicWrite(p, JSON.stringify(obj, null, 2) + "\n");
+				}
+				return json(res, 200, { ok: true });
+			}
 			const boardMatch = /^boards\/([^/]+)$/.exec(path);
 			if (boardMatch) {
 				const p = boardPath(boardMatch[1]);
@@ -174,7 +266,7 @@ function apiMiddleware(root, opts = {}) {
 				const frameId = url.searchParams.get("frame") ?? "";
 				const theme = url.searchParams.get("theme") ?? "light";
 				const origin = opts.origin?.() ?? `http://${req.headers.host ?? "localhost"}`;
-				const { shootFrame } = await import("./shot-BRgPaFCs.mjs");
+				const { shootFrame } = await import("./shot-D7I0MCLu.mjs");
 				const r = await shootFrame({
 					root,
 					viewports: opts.viewports ?? {},
@@ -188,7 +280,12 @@ function apiMiddleware(root, opts = {}) {
 					frame: frameId,
 					theme,
 					width: r.width,
-					height: r.height
+					height: r.height,
+					scale: r.scale,
+					...r.truncated ? {
+						truncated: true,
+						note: r.note
+					} : {}
 				});
 			}
 			if (path === "me" && req.method === "GET") return json(res, 200, {
@@ -293,7 +390,7 @@ function apiMiddleware(root, opts = {}) {
 						};
 					});
 					const fresh = appendEvents(dir, cm[1], stamped);
-					const { record } = await import("./ledger-BgA7nQoH.mjs").then((n) => n.n);
+					const { record } = await import("./ledger-Bu0BjqIe.mjs").then((n) => n.n);
 					for (const ev of fresh) if (ev.type === "create" || ev.type === "reply") record(root, cm[1], ev.id);
 					backgroundPush(root);
 					return json(res, 200, { accepted: fresh.length });
@@ -395,6 +492,10 @@ function routesMiddleware(server, clientDir) {
 * firewalled registries degrade to silence. MARVER_NO_UPDATE_CHECK=1 disables it.
 * Published bundles never check anything - viewers are not the owner.
 */
+var update_exports = /* @__PURE__ */ __exportAll({
+	checkUpdate: () => checkUpdate,
+	installedVersion: () => installedVersion
+});
 const TTL = 864e5;
 /** Installed version: walk up from this module to the package's own package.json
 *  (one level from dist/, two from src/server/ - the walk covers both). */
@@ -697,7 +798,7 @@ function marverPlugin(ctx) {
 								});
 								return;
 							}
-							const { shootFrame } = await import("./shot-BRgPaFCs.mjs");
+							const { shootFrame } = await import("./shot-D7I0MCLu.mjs");
 							write(await shootFrame({
 								root,
 								viewports: config.viewports,
@@ -777,4 +878,4 @@ async function tailwind3Css(root) {
 	return null;
 }
 //#endregion
-export { tailwind3Css as n, tailwind4Plugin as r, marverPlugin as t };
+export { update_exports as i, tailwind3Css as n, tailwind4Plugin as r, marverPlugin as t };

package/dist/rolldown-runtime-D7D4PA-g.mjs

@@ -0,0 +1,13 @@
+//#region \0rolldown/runtime.js
+var __defProp = Object.defineProperty;
+var __exportAll = (all, no_symbols) => {
+	let target = {};
+	for (var name in all) __defProp(target, name, {
+		get: all[name],
+		enumerable: true
+	});
+	if (!no_symbols) __defProp(target, Symbol.toStringTag, { value: "Module" });
+	return target;
+};
+//#endregion
+export { __exportAll as t };