@marver-design/marver 0.10.2 → 0.11.1

package/dist/{comments-J06jqCVV.mjs → comments-CRqaO2MH.mjs}

@@ -1,8 +1,7 @@
 import { n as NAME } from "./cli.mjs";
-import { n as replay } from "./events-BMtBvvgU.mjs";
-import { appendEvents, listBoards, readLog } from "./comments-BZBKhKRO.mjs";
-import { connect, connectClaim, loadCollab, syncOnce } from "./sync-BJKKmy1n.mjs";
-import { n as localProfile } from "./profile-BkiWglVE.mjs";
+import { a as syncOnce, i as loadCollab, n as connectClaim, r as connectToken, s as replay, t as connect } from "./sync-DELGomPk.mjs";
+import { i as readLog, r as listBoards, t as appendEvents } from "./comments-DZyobpxG.mjs";
+import { n as localProfile } from "./profile-DcsJyppw.mjs";
 import { join } from "node:path";
 import { createInterface } from "node:readline";
 import { randomUUID } from "node:crypto";
@@ -10,8 +9,11 @@ import { randomUUID } from "node:crypto";
 /**
 * `marver comments <action>` - the collaboration CLI.
 *
-* connect <url>   sign in (or --invite <token> to claim) against a published canvas;
-*                 stores the device credential in design/.local/collab.json
+* connect <url>   sign in against a published canvas and store the device credential
+*                 in ~/.marver/canvases/ (outside the repo - `dev` serves the repo).
+*                 Three ways in: --token <t>, the
+*                 canvas's MARVER_CLI_TOKEN (the only one an identity-mode canvas
+*                 has), --invite <t> to claim an invite, or email + password.
 * sync            one full exchange with the publish target (agent/CI path)
 * list            threads from design/comments/ (--open, --board, --json)
 * reply <thread>  append a reply (--body) - the agent's voice in the loop
@@ -53,6 +55,13 @@ async function commentsCommand(root, action, value, opts) {
 	switch (action) {
 		case "connect": {
 			if (!value) throw new Error("usage: comments connect <published-url>");
+			const cliToken = opts.token ?? process.env.MARVER_CLI_TOKEN;
+			if (cliToken) {
+				await connectToken(root, value, String(cliToken));
+				console.log(`[${NAME}] connected - the device credential is in ~/.marver/canvases/, outside this repo`);
+				console.log(`[${NAME}] \`${NAME} dev\` now syncs comments every 30s; \`${NAME} comments sync\` does one exchange`);
+				return;
+			}
 			const canvasPassword = opts.canvasPassword ?? process.env.MARVER_PASSWORD ?? await ask("canvas password (blank if the canvas is ungated): ", true);
 			if (opts.invite) {
 				const name = opts.name ?? await ask("display name: ");
@@ -66,7 +75,7 @@ async function commentsCommand(root, action, value, opts) {
 				const password = opts.password ?? await ask("password: ", true);
 				await connect(root, value, email, password, canvasPassword || void 0);
 			}
-			console.log(`[${NAME}] connected - design/.local/collab.json holds the device credential (gitignored)`);
+			console.log(`[${NAME}] connected - the device credential is in ~/.marver/canvases/, outside this repo`);
 			console.log(`[${NAME}] \`${NAME} dev\` now syncs comments every 30s; \`${NAME} comments sync\` does one exchange`);
 			return;
 		}
@@ -123,12 +132,18 @@ async function commentsCommand(root, action, value, opts) {
 		}
 		case "invite": {
 			if (!value || !/^[^@\s]+@[^@\s]+\.[^@\s]+$/.test(value)) throw new Error("usage: comments invite <email>");
-			const { token } = await ownerApi(root, "invite", { email: value });
+			const { token, idMode } = await ownerApi(root, "invite", { email: value });
 			const url = loadCollab(root).url.replace(/\/+$/, "");
 			console.log(`  invite for ${value} (single-use, 7 days):`);
-			console.log(`    ${url}/#/i/${token}`);
-			console.log(`  send them that link (plus the canvas password) - it opens straight into`);
-			console.log(`  "pick your name and password".`);
+			if (idMode) {
+				console.log(`    ${url}`);
+				console.log(`  send them that address - they sign in with ${value} and they are in.`);
+				console.log(`  no link to forward, no password: the invitation IS the email address.`);
+			} else {
+				console.log(`    ${url}/#/i/${token}`);
+				console.log(`  send them that link (plus the canvas password) - it opens straight into`);
+				console.log(`  "pick your name and password".`);
+			}
 			return;
 		}
 		case "revoke":

package/dist/{comments-BZBKhKRO.mjs → comments-DZyobpxG.mjs}

@@ -1,4 +1,4 @@
-import "./events-BMtBvvgU.mjs";
+import { t as __exportAll } from "./rolldown-runtime-D7D4PA-g.mjs";
 import { closeSync, existsSync, fsyncSync, mkdirSync, openSync, readFileSync, readSync, readdirSync, statSync, writeSync } from "node:fs";
 import { join } from "node:path";
 //#region src/server/comments.ts
@@ -11,6 +11,12 @@ import { join } from "node:path";
 * state is derived by replaying events (ordered by ts then id, last writer wins per
 * field). Files, not a database - tens to low hundreds of events per board.
 */
+var comments_exports = /* @__PURE__ */ __exportAll({
+	appendEvents: () => appendEvents,
+	dataDir: () => dataDir,
+	listBoards: () => listBoards,
+	readLog: () => readLog
+});
 const BOARD_RE = /^[a-z0-9][a-z0-9-]*$/;
 const boardFile = (dir, board) => {
 	if (!BOARD_RE.test(board)) throw new Error(`bad board name: ${board}`);
@@ -81,4 +87,4 @@ function dataDir() {
 	return dir;
 }
 //#endregion
-export { appendEvents, dataDir, listBoards, readLog };
+export { readLog as i, comments_exports as n, listBoards as r, appendEvents as t };

package/dist/{manifest-DIsp3ldB.mjs → config-t9coJ-Pq.mjs}

@@ -1,8 +1,6 @@
-import { r as PKG, t as CONTENT_WIDTH } from "./cli.mjs";
-import { accessSync, constants, existsSync, mkdirSync, readFileSync, readdirSync, statSync, writeFileSync } from "node:fs";
-import { delimiter, isAbsolute, join, relative, sep } from "node:path";
+import { accessSync, constants, existsSync, readFileSync, statSync } from "node:fs";
+import { delimiter, isAbsolute, join } from "node:path";
 import { pathToFileURL } from "node:url";
-import { createHash } from "node:crypto";
 //#region src/server/detect.ts
 function readJson(file) {
 	try {
@@ -368,232 +366,4 @@ function validViewports(v) {
 	return Object.keys(out).length ? out : null;
 }
 //#endregion
-//#region src/server/manifest.ts
-const FRAME_EXT = /\.(tsx|jsx|html)$/;
-const RESERVED_SCENES = /* @__PURE__ */ new Set(["components", "screens"]);
-/** Extract `export const meta = {...}` with literal string values only. Anything else is silently omitted. */
-function extractMeta(src) {
-	const m = /export\s+const\s+meta\s*=\s*\{([\s\S]*?)\}/.exec(src);
-	if (!m) return {};
-	const body = m[1];
-	const pick = (key) => {
-		const r = new RegExp(`(?:^|[{,])\\s*${key}\\s*:\\s*(['"\`])([^'"\`]*)\\1`).exec(body);
-		return r ? r[2] : void 0;
-	};
-	const out = {};
-	const title = pick("title");
-	if (title) out.title = title;
-	const viewport = pick("viewport");
-	if (viewport) out.viewport = viewport;
-	const theme = pick("theme");
-	if (theme) out.theme = theme;
-	const of = pick("of");
-	if (of) out.of = of;
-	const variant = pick("variant");
-	if (variant) out.variant = variant;
-	const intent = pick("intent");
-	if (intent) out.intent = intent;
-	return out;
-}
-/** Content-frame detection: LEXICAL by convention - the frame file
-*  itself imports PKG/content (an import specifier scan, so "<Diagram" inside a
-*  string in a UI frame can never misbadge it; barrels/re-exports are not
-*  detected - meta.intent is the taught path and always works). Returns the
-*  inferred intent + natural width, or null for UI frames. */
-const CONTENT_IMPORT = new RegExp(`from\\s+['"]${PKG}/content['"]`);
-const WIDE_DOC = /<Doc\b[^>]*\blayout\s*=\s*["']wide["']/;
-const contentWidthOf = (src) => WIDE_DOC.test(src) ? CONTENT_WIDTH.wide : CONTENT_WIDTH.document;
-function contentScan(src) {
-	if (!CONTENT_IMPORT.test(src)) return null;
-	const count = (re) => (src.match(re) ?? []).length;
-	const diagrams = count(/<Diagram[\s>/]/g);
-	const imgs = count(/<Img[\s>/]/g);
-	const mds = count(/<Md[\s>/]/g);
-	return {
-		intent: diagrams > 0 ? "diagram" : imgs > mds ? "moodboard" : "spec",
-		width: contentWidthOf(src)
-	};
-}
-/** id = path relative to design/, extension dropped, `scenes/` prefix dropped. Always `/`-separated. */
-function toFrameId(designRelPath) {
-	const noExt = designRelPath.split(sep).join("/").replace(FRAME_EXT, "");
-	return noExt.startsWith("scenes/") ? noExt.slice(7) : noExt;
-}
-/**
-* A7: which frames does a changed `design/**` file affect? Manifest + directory conventions,
-* NOT a module-graph walk (deterministic, cheap, may over-reload but never misses a
-* conventionally-affected frame). Returns:
-*   null  -> uncontrolled: leave to default Vite HMR (src/** deps, theme.css, config, assets)
-*   []    -> controlled but affects no current frame (e.g. a layout in an empty dir)
-*   [ids] -> controlled: the shell drives a rev-stamped reload of these frames
-*/
-function affectedFrameIds(absFile, root, manifest) {
-	const design = join(root, "design");
-	if (absFile !== design && !absFile.startsWith(design + sep)) return null;
-	const rel = relative(design, absFile).split(sep).join("/");
-	const name = rel.split("/").pop() ?? rel;
-	const designRel = `design/${rel}`;
-	const tsxFrames = manifest.frames.filter((f) => f.kind === "tsx");
-	if (name === "theme.css") return null;
-	if (rel === "providers.tsx" || rel === "providers.jsx") return tsxFrames.map((f) => f.id);
-	if (/(^|\/)(_layout\.(tsx|jsx)|_fixtures\.(ts|tsx|js|jsx|json))$/.test(rel)) {
-		const prefix = `design/${rel.slice(0, rel.length - name.length)}`;
-		return tsxFrames.filter((f) => f.file.startsWith(prefix)).map((f) => f.id);
-	}
-	const direct = manifest.frames.find((f) => f.file === designRel);
-	if (direct) return [direct.id];
-	return null;
-}
-function walk(dir, out = []) {
-	if (!existsSync(dir)) return out;
-	for (const e of readdirSync(dir, { withFileTypes: true })) {
-		if (e.name.startsWith(".")) continue;
-		const p = join(dir, e.name);
-		if (e.isDirectory()) walk(p, out);
-		else out.push(p);
-	}
-	return out;
-}
-function scanFrames(root) {
-	const design = join(root, "design");
-	const frames = [];
-	for (const base of ["scenes", "components"]) for (const abs of walk(join(design, base))) {
-		const name = abs.split(sep).pop();
-		if (name.startsWith("_") || !FRAME_EXT.test(name)) continue;
-		const rel = relative(design, abs).split(sep).join("/");
-		const id = toFrameId(rel);
-		const scene = id.includes("/") ? id.split("/")[0] : "";
-		if (base === "scenes" && RESERVED_SCENES.has(scene)) {
-			console.error(`[marver] scene "${scene}" is a reserved name - "${rel}" skipped. Rename the scene.`);
-			continue;
-		}
-		const kind = name.endsWith(".html") ? "html" : "tsx";
-		const entry = {
-			id,
-			file: `design/${rel}`,
-			kind,
-			scene
-		};
-		if (kind === "tsx") {
-			const src = readFileSync(abs, "utf8");
-			const meta = extractMeta(src);
-			if (meta.title) entry.title = meta.title;
-			if (meta.viewport) entry.viewport = meta.viewport;
-			if (meta.theme) entry.theme = meta.theme;
-			if (meta.of) entry.variantGroup = meta.of;
-			if (meta.variant) entry.variant = meta.variant;
-			const content = contentScan(src);
-			if (content || meta.intent) {
-				entry.intent = meta.intent ?? content.intent;
-				entry.contentWidth = content?.width ?? contentWidthOf(src);
-			}
-		}
-		frames.push(entry);
-	}
-	const extRank = (file) => file.endsWith(".tsx") ? 0 : file.endsWith(".jsx") ? 1 : 2;
-	frames.sort((a, b) => a.id.localeCompare(b.id) || extRank(a.file) - extRank(b.file) || a.file.localeCompare(b.file));
-	const seen = /* @__PURE__ */ new Map();
-	const deduped = frames.filter((f) => {
-		const prev = seen.get(f.id);
-		if (prev) {
-			console.error(`[marver] duplicate frame id "${f.id}" (${prev} vs ${f.file}) - keeping ${prev}.`);
-			return false;
-		}
-		seen.set(f.id, f.file);
-		return true;
-	});
-	frames.length = 0;
-	frames.push(...deduped);
-	inferVariantGroups(frames);
-	const sceneCounts = /* @__PURE__ */ new Map();
-	for (const f of frames) sceneCounts.set(f.scene, (sceneCounts.get(f.scene) ?? 0) + 1);
-	return {
-		frames,
-		scenes: [...sceneCounts.entries()].map(([name, n]) => ({
-			name,
-			frames: n
-		})).sort((a, b) => a.name.localeCompare(b.name))
-	};
-}
-/** Variant groups. A group = 2+ frames in one DIRECTORY whose basenames
-*  are letter-prefixed (`a-terminal`), or frames declaring `meta.of`. Group id = the
-*  directory's id prefix (or meta.of); variant key = the letter (or meta.variant).
-*  Nested directories scope alternatives inside a busy scene (checkout/payment/a-card).
-*  States (empty.tsx, error.tsx) never letter-prefix, so they never misgroup.
-*  Mutates entries in place: only frames whose group materializes keep the fields. */
-function inferVariantGroups(frames) {
-	const dirOf = (id) => {
-		const i = id.lastIndexOf("/");
-		return i >= 0 ? id.slice(0, i) : "";
-	};
-	const candidates = /* @__PURE__ */ new Map();
-	for (const f of frames) {
-		if (f.kind !== "tsx") {
-			delete f.variantGroup;
-			delete f.variant;
-			continue;
-		}
-		let group = f.variantGroup;
-		let key = f.variant;
-		if (!group) {
-			const base = f.id.slice(f.id.lastIndexOf("/") + 1);
-			const m = /^([a-z])-.+$/.exec(base);
-			if (!m) continue;
-			group = dirOf(f.id);
-			if (!group) continue;
-			key = key ?? m[1];
-		} else if (!key) {
-			const m = /^([a-z])-.+$/.exec(f.id.slice(f.id.lastIndexOf("/") + 1));
-			if (!m) {
-				console.warn(`[marver] ${f.file} declares of:"${group}" but no variant key (add meta.variant or a letter prefix) - not grouped.`);
-				delete f.variantGroup;
-				delete f.variant;
-				continue;
-			}
-			key = m[1];
-		}
-		f.variantGroup = group;
-		f.variant = key;
-		candidates.set(group, [...candidates.get(group) ?? [], f]);
-	}
-	for (const [group, members] of candidates) {
-		if (new Set(members.map((m) => dirOf(m.id))).size > 1) {
-			console.warn(`[marver] group "${group}" spans directories - variants must be siblings; not grouped.`);
-			for (const m of members) {
-				delete m.variantGroup;
-				delete m.variant;
-			}
-			continue;
-		}
-		const seen = /* @__PURE__ */ new Set();
-		const kept = [];
-		for (const m of members.sort((a, b) => (a.variant ?? "").localeCompare(b.variant ?? ""))) {
-			if (seen.has(m.variant)) {
-				console.warn(`[marver] duplicate variant "${m.variant}" in group "${group}" (${m.file}) - not grouped.`);
-				delete m.variantGroup;
-				delete m.variant;
-				continue;
-			}
-			seen.add(m.variant);
-			kept.push(m);
-		}
-		if (kept.length < 2) for (const m of kept) {
-			delete m.variantGroup;
-			delete m.variant;
-		}
-	}
-	for (const f of frames) if (f.variant && !f.variantGroup) delete f.variant;
-}
-/** Write design/manifest.json only when content changed. Returns the manifest either way. */
-function writeManifest(root, manifest) {
-	const file = join(root, "design", "manifest.json");
-	const next = JSON.stringify(manifest, null, 2) + "\n";
-	const prev = existsSync(file) ? readFileSync(file, "utf8") : "";
-	if (hash(prev) === hash(next)) return false;
-	mkdirSync(join(root, "design"), { recursive: true });
-	writeFileSync(file, next);
-	return true;
-}
-const hash = (s) => createHash("sha256").update(s).digest("hex");
-//#endregion
-export { writeManifest as a, detectAgent as c, toFrameId as i, detectHost as l, hash as n, DEFAULTS as o, scanFrames as r, loadConfig as s, affectedFrameIds as t, readJson as u };
+export { readJson as a, detectHost as i, loadConfig as n, detectAgent as r, DEFAULTS as t };

package/dist/{daemon-BpKBJZee.mjs → daemon-DSmaS453.mjs}

@@ -1,7 +1,7 @@
-import { n as replay } from "./events-BMtBvvgU.mjs";
-import { appendEvents, listBoards, readLog } from "./comments-BZBKhKRO.mjs";
-import { n as localProfile } from "./profile-BkiWglVE.mjs";
-import { i as toFrameId } from "./manifest-DIsp3ldB.mjs";
+import { s as replay } from "./sync-DELGomPk.mjs";
+import { i as readLog, r as listBoards, t as appendEvents } from "./comments-DZyobpxG.mjs";
+import { n as localProfile } from "./profile-DcsJyppw.mjs";
+import { i as toFrameId } from "./manifest-C2tzkNaC.mjs";
 import { workActivity } from "./work-CLrmY-vQ.mjs";
 import { r as deviceId, t as has } from "./ledger-Bu0BjqIe.mjs";
 import { closeSync, existsSync, fsyncSync, mkdirSync, openSync, readFileSync, readdirSync, renameSync, rmSync, statSync, unlinkSync, watch, writeFileSync, writeSync } from "node:fs";
@@ -938,6 +938,24 @@ const fenceGroup = (pid) => {
 		if (pid) process.kill(-pid, "SIGKILL");
 	} catch {}
 };
+/**
+* What a spawned agent is allowed to inherit.
+*
+* Agents get the environment because they need it - PATH, HOME, the API key
+* their own CLI signs in with. `MARVER_CLI_TOKEN` is the exception: it is the
+* operator's credential for the PUBLISHED canvas, it is accepted as a shell
+* fallback by `comments connect`, and an agent is the one process on this machine
+* that is running somebody else's instructions. Handing it over would let a
+* prompt-injected agent take the published canvas, which is a much larger blast
+* radius than the frames it was asked to edit.
+*
+* Exported so the removal is testable: a spawn option nobody asserts is a spawn
+* option that quietly grows back.
+*/
+function agentEnv(from = process.env) {
+	const { MARVER_CLI_TOKEN: _withheld, ...rest } = from;
+	return rest;
+}
 const FRAME_FILE = /\.(tsx|jsx|html)$/;
 /** Every frame FILE under design/scenes, as `frame id -> mtimeMs`. Used to see which frames the
 *  agent creates or edits mid-job (so the working glow can follow the work, not sit on the frame
@@ -987,7 +1005,7 @@ function createJam(root, cfg, adapter, log = () => {}, hooks = {}) {
 					"ignore"
 				],
 				env: {
-					...process.env,
+					...agentEnv(),
 					...env,
 					PWD: root
 				}

package/dist/{dev-D2PG6igI.mjs → dev-BWIL2ewj.mjs}

@@ -1,7 +1,8 @@
 import { n as NAME, r as PKG } from "./cli.mjs";
-import { l as detectHost, s as loadConfig } from "./manifest-DIsp3ldB.mjs";
-import { n as tailwind3Css, r as tailwind4Plugin, t as marverPlugin } from "./plugin-C1sDewZ3.mjs";
-import { basename, dirname, join } from "node:path";
+import { i as detectHost, n as loadConfig } from "./config-t9coJ-Pq.mjs";
+import { n as tailwind3Css, r as tailwind4Plugin, t as marverPlugin } from "./plugin-DjBFxEQ7.mjs";
+import { realpathSync } from "node:fs";
+import { basename, dirname, isAbsolute, join, relative, resolve } from "node:path";
 import { fileURLToPath } from "node:url";
 import { createLogger, createServer, searchForWorkspaceRoot } from "vite";
 import react from "@vitejs/plugin-react";
@@ -44,6 +45,106 @@ async function pickPort(root, desired) {
 		fellBack: true
 	};
 }
+/**
+* What the dev server must never hand out, however deep in the repo it sits.
+*
+* `marver dev` puts the whole repository on the web so frames can import from it.
+* The collaboration credential no longer lives in there - it moved to
+* ~/.marver/canvases/ precisely because guarding it here could not be finished -
+* but design/.local still holds the local profile and whatever a previous version
+* left behind, and none of that is anybody's business but the author's.
+*
+* Vite's own defaults are restated rather than assumed. `fs.deny` REPLACES the
+* default list, so an array containing only our own rule quietly re-exposes
+* `.env`, private keys, `.npmrc` and `.git` - a much larger hole than the one
+* being closed, opened by closing it. Kept as an exported constant so a test can
+* hold both halves.
+*/
+const FS_DENY = [
+	".env",
+	".env.*",
+	"*.{crt,pem,key,p12,pfx,cer,der}",
+	".npmrc",
+	".yarnrc.yml",
+	"**/.git/**",
+	".dev.vars",
+	".dev.vars.*",
+	"**/design/.local/**"
+];
+/**
+* The half of the credential guard that globs cannot do.
+*
+* `fs.deny` matches the REQUEST path, lexically, and then Vite stats and streams
+* whatever that path resolves to. So a repository containing
+* `leak.json -> design/.local/anything` serves that file at `/leak.json` to any
+* authored frame that asks - the deny rule never sees the name it is looking for.
+* Verified against a real dev server before this existed.
+*
+* More patterns cannot fix that; only resolving can. This runs BEFORE Vite's own
+* middlewares (a `configureServer` hook that does not return a function is
+* installed first) and refuses any request whose real file lands inside
+* design/.local, whatever route it took to get there.
+*
+* "Whatever route" means every place Vite would look, not just the project root.
+* `public/` is mapped onto `/`, so `public/leak.json -> ../design/.local/x` is
+* served at `/leak.json` - and Vite skips its own deny checks entirely for public
+* files, so that spelling was reachable even with the root candidate guarded.
+* Each candidate is resolved; if any lands in design/.local, the request is
+* refused.
+*
+* The boundary this does NOT claim: a repository that can write symlinks can also
+* write `design/config.ts`, which `marver dev` imports and RUNS in this process
+* before any of the above exists. Running `dev` on a repository you do not trust
+* hands it your machine long before it hands it a file, so a symlink is not the
+* interesting way in. What this closes is the frame-in-a-trusted-repo case: a
+* component that runs in the browser, same-origin, that can only ask for URLs and
+* cannot create a file to ask for.
+*/
+function denyLocalSecrets(root) {
+	const guardedAt = join(root, "design", ".local");
+	const publicAt = join(root, "public");
+	const inside = (real, dir) => {
+		const rel = relative(dir, real);
+		return rel === "" || !rel.startsWith("..") && !isAbsolute(rel);
+	};
+	return {
+		name: "marver:deny-local-secrets",
+		configureServer(server) {
+			server.middlewares.use((req, res, next) => {
+				let pathname;
+				try {
+					pathname = decodeURIComponent((req.url ?? "/").split("?")[0].split("#")[0]);
+				} catch {
+					return next();
+				}
+				const rel = "." + (pathname.startsWith("/") ? pathname : `/${pathname}`);
+				const derived = (base) => [
+					base,
+					`${base}.html`,
+					join(base, "index"),
+					join(base, "index.html")
+				];
+				const candidates = pathname.startsWith("/@fs/") ? derived(pathname.slice(4)) : [...derived(resolve(root, rel)), ...derived(resolve(publicAt, rel))];
+				let guarded;
+				try {
+					guarded = realpathSync(guardedAt);
+				} catch {
+					return next();
+				}
+				if (!candidates.some((c) => {
+					try {
+						return inside(realpathSync(c), guarded);
+					} catch {
+						return false;
+					}
+				})) return next();
+				res.statusCode = 403;
+				res.setHeader("content-type", "text/plain; charset=utf-8");
+				res.end("design/.local holds this canvas's credentials and is never served");
+			});
+		}
+	};
+}
 async function dev(root, portFlag) {
 	const config = await loadConfig(root);
 	const host = detectHost(root);
@@ -52,7 +153,7 @@ async function dev(root, portFlag) {
 	const projectName = basename(root);
 	const desiredPort = portFlag ?? (config.port !== 5199 ? config.port : void 0) ?? projectPort(root);
 	const picked = await pickPort(root, desiredPort);
-	const plugins = [react()];
+	const plugins = [denyLocalSecrets(root), react()];
 	if (host.tailwind === 4) {
 		const tw = await tailwind4Plugin(root);
 		if (tw) plugins.push(...tw);
@@ -85,11 +186,14 @@ async function dev(root, portFlag) {
 		server: {
 			port: picked.port,
 			strictPort: false,
-			fs: { allow: [.../* @__PURE__ */ new Set([
-				root,
-				pkgDir,
-				searchForWorkspaceRoot(root)
-			])] },
+			fs: {
+				allow: [.../* @__PURE__ */ new Set([
+					root,
+					pkgDir,
+					searchForWorkspaceRoot(root)
+				])],
+				deny: FS_DENY
+			},
 			watch: { ignored: [
 				"**/design/manifest.json",
 				"**/design/boards/**",
@@ -143,7 +247,7 @@ async function dev(root, portFlag) {
 	console.log(`\n  ${NAME} · ${projectName} → http://localhost:${port}/\n`);
 	try {
 		const { staleManagedInstructions } = await import("./managed-HwHVNI3h.mjs");
-		const { installedVersion } = await import("./plugin-C1sDewZ3.mjs").then((n) => n.i);
+		const { installedVersion } = await import("./update-DuWDj5nR.mjs").then((n) => n.r);
 		const stale = staleManagedInstructions(root);
 		if (stale.length) {
 			const shown = stale.slice(0, 4).join(", ") + (stale.length > 4 ? `, +${stale.length - 4} more` : "");
@@ -151,8 +255,8 @@ async function dev(root, portFlag) {
 			console.log(`  instructions predate ${v ? NAME + " " + v : "the installed version"} (${shown}) - run: npx ${NAME} init\n`);
 		}
 	} catch {}
-	const { loadCollab, syncOnce } = await import("./sync-BJKKmy1n.mjs");
-	if (loadCollab(root)) console.log(`  comments: syncing with the published canvas (design/.local/collab.json)\n`);
+	const { loadCollab, syncOnce } = await import("./sync-DELGomPk.mjs").then((n) => n.o);
+	if (loadCollab(root)) console.log(`  comments: syncing with the published canvas\n`);
 	let syncing = false;
 	const tick = async () => {
 		if (syncing) return;
@@ -181,7 +285,7 @@ async function dev(root, portFlag) {
 		});
 	}
 	if (config.jam) {
-		const { startJam } = await import("./daemon-BpKBJZee.mjs");
+		const { startJam } = await import("./daemon-DSmaS453.mjs");
 		const jam = startJam(root, config.jam, (m) => console.log(m), (board) => server.ws.send("sh:jam-comment", { board }));
 		if (jam) {
 			const close = server.close.bind(server);

package/dist/{init-DwV0_d9G.mjs → init-BSclDg4I.mjs}

@@ -1,5 +1,6 @@
 import { n as NAME } from "./cli.mjs";
-import { a as writeManifest, c as detectAgent, l as detectHost, o as DEFAULTS, r as scanFrames, u as readJson } from "./manifest-DIsp3ldB.mjs";
+import { a as readJson, i as detectHost, r as detectAgent, t as DEFAULTS } from "./config-t9coJ-Pq.mjs";
+import { a as writeManifest, r as scanFrames } from "./manifest-C2tzkNaC.mjs";
 import { MANAGED_PREFIX, enumerateInstructionTemplates, hashBody, managedFile, pkgDir } from "./managed-HwHVNI3h.mjs";
 import { cpSync, existsSync, mkdirSync, readFileSync, readdirSync, renameSync, rmSync, writeFileSync } from "node:fs";
 import { dirname, join, relative } from "node:path";