@marver-design/marver 0.11.0 → 0.12.0

package/dist/{build-Cr_ZLMdq.mjs → build-DmfxJc6L.mjs}

@@ -1,10 +1,10 @@
 import { i as ROUTE, n as NAME } from "./cli.mjs";
-import { i as detectHost, n as loadConfig } from "./config-t9coJ-Pq.mjs";
-import { r as scanFrames } from "./manifest-C2tzkNaC.mjs";
-import { n as tailwind3Css, r as tailwind4Plugin, t as marverPlugin } from "./plugin-vE7sxEeT.mjs";
-import { cpSync, existsSync, mkdirSync, readFileSync, readdirSync, realpathSync, writeFileSync } from "node:fs";
+import { l as detectHost, r as scanFrames, s as loadConfig } from "./manifest-CS6krOTe.mjs";
+import { n as tailwind3Css, r as tailwind4Plugin, t as marverPlugin } from "./plugin-Boy7I_JH.mjs";
+import { cpSync, existsSync, mkdirSync, readFileSync, readdirSync, realpathSync, rmSync, writeFileSync } from "node:fs";
 import { basename, dirname, join, sep } from "node:path";
 import { fileURLToPath } from "node:url";
+import { createHash, randomBytes } from "node:crypto";
 import { build } from "vite";
 import react from "@vitejs/plugin-react";
 //#region src/server/build.ts
@@ -44,19 +44,47 @@ function scanAssetRefs(src, moduleId) {
 }
 /** Same shape the client's assetUrl accepts: relative, inside design/assets/, no tricks. */
 const isLocalAssetRef = (p) => !!p && !p.includes(":") && !p.startsWith("/") && !p.startsWith("\\") && !p.split("/").some((s) => s === ".." || s === "");
-/** The publish policy: design/publish.json names what ships and with what
-*  rights. Publishing is default-CLOSED - no policy and no explicit flag = no build.
-*  Returns name -> 'read' | 'comment'. Boards absent from the result do not ship. */
-function resolvePublish(root, allBoards, boardsFlag, allBoardsFlag) {
+const ARTIFACT_TYPES = [
+	"doc",
+	"slides",
+	"design",
+	"sketch",
+	"refs",
+	"mix"
+];
+const VIEW_MODES = [
+	"canvas",
+	"board",
+	"present",
+	"focus",
+	"slides"
+];
+/** Publishing is default-CLOSED - no policy and no explicit flag = no build.
+*  Boards absent from the result do not ship. */
+function resolvePolicy(root, allBoards, boardsFlag, allBoardsFlag) {
 	const known = (n) => n === "all-scenes" || !!allBoards[n];
+	const reveal = {
+		structure: true,
+		source: false
+	};
+	const row = (max) => ({
+		max,
+		type: "mix"
+	});
 	if (boardsFlag !== void 0) {
 		const names = boardsFlag.split(",").map((s) => s.trim()).filter(Boolean);
 		if (!names.length) throw new Error("--boards was given but named no boards");
 		const missing = names.filter((n) => !known(n));
 		if (missing.length) throw new Error(`--boards names not found in design/boards/: ${missing.join(", ")}`);
-		return Object.fromEntries(names.map((n) => [n, "comment"]));
+		return {
+			boards: Object.fromEntries(names.map((n) => [n, row("comment")])),
+			reveal
+		};
 	}
-	if (allBoardsFlag) return Object.fromEntries(["all-scenes", ...Object.keys(allBoards).filter((n) => n !== "all-scenes")].map((n) => [n, "comment"]));
+	if (allBoardsFlag) return {
+		boards: Object.fromEntries(["all-scenes", ...Object.keys(allBoards).filter((n) => n !== "all-scenes")].map((n) => [n, row("comment")])),
+		reveal
+	};
 	const policyFile = join(root, "design", "publish.json");
 	if (!existsSync(policyFile)) throw new Error("publishing is default-closed and no publish policy exists.\n  Either declare one in design/publish.json:  { \"boards\": { \"<board>\": \"read\" | \"comment\" } }\n  or be explicit:  --boards a,b  (publish just those)  ·  --all-boards  (publish everything)");
 	let policy;
@@ -70,10 +98,33 @@ function resolvePublish(root, allBoards, boardsFlag, allBoardsFlag) {
 	const out = {};
 	for (const [n, level] of entries) {
 		if (!known(n)) throw new Error(`design/publish.json names an unknown board: ${n}`);
-		if (level !== "read" && level !== "comment") throw new Error(`design/publish.json: board "${n}" has level "${level}" - use "read" or "comment"`);
-		out[n] = level;
+		if (level === "read" || level === "comment") {
+			out[n] = row(level);
+			continue;
+		}
+		if (typeof level !== "object" || level === null) throw new Error(`design/publish.json: board "${n}" has level "${level}" - use "read" or "comment", or a v2 object`);
+		const p = level;
+		if (p.max !== "read" && p.max !== "comment") throw new Error(`design/publish.json: board "${n}" needs "max": "read" | "comment"`);
+		const type = p.type ?? "mix";
+		if (!ARTIFACT_TYPES.includes(type)) throw new Error(`design/publish.json: board "${n}" has type "${type}" - use ${ARTIFACT_TYPES.join(" | ")}`);
+		if (p.open !== void 0 && !VIEW_MODES.includes(p.open)) throw new Error(`design/publish.json: board "${n}" has open "${p.open}" - use ${VIEW_MODES.join(" | ")}`);
+		if (p.lock && p.open === void 0) throw new Error(`design/publish.json: board "${n}" sets "lock" without "open" - name the mode the lock freezes`);
+		out[n] = {
+			max: p.max,
+			type,
+			...p.open ? { open: p.open } : {},
+			...p.lock ? { lock: true } : {}
+		};
 	}
-	return out;
+	if (policy.reveal !== void 0) {
+		if (typeof policy.reveal !== "object" || policy.reveal === null) throw new Error("design/publish.json: \"reveal\" must be an object");
+		if (policy.reveal.structure !== void 0) reveal.structure = policy.reveal.structure === true;
+		if (policy.reveal.source !== void 0) reveal.source = policy.reveal.source === true;
+	}
+	return {
+		boards: out,
+		reveal
+	};
 }
 /** Read every board file; returns name -> parsed json. Bad JSON fails the build loudly. */
 function readBoards(root) {
@@ -91,6 +142,58 @@ function readBoards(root) {
 	}
 	return out;
 }
+/**
+* The generated registry with OPAQUE keys - the source strip's half of the
+* bundle (01-sharing §6.2). Object keys are string literals that survive
+* bundling verbatim, so with `reveal.source` off they must not be repo paths.
+* The real paths appear only inside import() arguments, which rollup rewrites
+* to chunk imports - they never reach the output. Layout chains are
+* precomputed per key, because the path-walking logic needs the very strings
+* being hidden.
+*/
+function registrySourceOpaque(root, frames, salt) {
+	const bases = ["/design/scenes", "/design/components"];
+	const opaque = (s) => "k" + createHash("sha256").update(salt).update(s).digest("hex").slice(0, 10);
+	const layoutFiles = /* @__PURE__ */ new Set();
+	const chainFor = (key) => {
+		const base = bases.find((b) => key.startsWith(b + "/")) ?? bases[0];
+		const chain = [];
+		let dir = key.slice(0, key.lastIndexOf("/"));
+		while (dir.length >= base.length) {
+			for (const ext of ["tsx", "jsx"]) {
+				const lk = `${dir}/_layout.${ext}`;
+				if (existsSync(join(root, lk.slice(1)))) {
+					chain.unshift(lk);
+					layoutFiles.add(lk);
+					break;
+				}
+			}
+			if (dir === base) break;
+			dir = dir.slice(0, dir.lastIndexOf("/"));
+		}
+		return chain;
+	};
+	const rows = frames.map((f) => {
+		const key = "/" + posix(f.file);
+		return {
+			id: f.id,
+			key,
+			ok: opaque(key),
+			chain: []
+		};
+	});
+	for (const r of rows) r.chain = chainFor(r.key).map(opaque);
+	const providers = ["tsx", "jsx"].map((e) => `/design/providers.${e}`).filter((p) => existsSync(join(root, p.slice(1))));
+	return `// generated by \`${NAME} build\` - source paths are opaque (reveal.source is off)
+export const frames = { ${rows.map((r) => `'${r.ok}': () => import('${r.key}')`).join(", ")} }
+export const layouts = { ${[...layoutFiles].map((lk) => `'${opaque(lk)}': () => import('${lk}')`).join(", ")} }
+export const providers = { ${providers.map((p, i) => `'p${i}': () => import('${p}')`).join(", ")} }
+const idToKey = { ${rows.map((r) => `'${r.id}': '${r.ok}'`).join(", ")} }
+export function frameFile(frameId) { return idToKey[frameId] ?? null }
+const chains = { ${rows.map((r) => `'${r.ok}': ${JSON.stringify(r.chain)}`).join(", ")} }
+export function layoutChain(fileKey) { return chains[fileKey] ?? [] }
+`;
+}
 /** The generated registry for filtered builds: explicit imports only, same exports. */
 function registrySource(root, frameKeys) {
 	const bases = ["/design/scenes", "/design/components"];
@@ -136,7 +239,7 @@ export function layoutChain(fileKey) {
 }
 `;
 }
-async function buildSite(root, boardsFlag, allBoardsFlag) {
+async function buildSite(root, boardsFlag, allBoardsFlag, embedSeeds) {
 	const config = await loadConfig(root);
 	const host = detectHost(root);
 	const pkgDir = packageDir();
@@ -144,7 +247,11 @@ async function buildSite(root, boardsFlag, allBoardsFlag) {
 	const outDir = join(root, "design", ".dist");
 	const manifest = scanFrames(root);
 	const allBoards = readBoards(root);
-	const rights = resolvePublish(root, allBoards, boardsFlag, allBoardsFlag);
+	const policy = resolvePolicy(root, allBoards, boardsFlag, allBoardsFlag);
+	const rights = Object.fromEntries(Object.entries(policy.boards).map(([n, p]) => [n, p.max]));
+	const strip = !policy.reveal.source;
+	const buildSalt = randomBytes(16).toString("hex");
+	const opaquePath = (id, ext) => `__mv/f/mv${createHash("sha256").update(buildSalt).update(id).digest("hex").slice(0, 12)}${ext}`;
 	const boardOrder = (n) => {
 		const o = allBoards[n]?.order;
 		return typeof o === "number" && Number.isFinite(o) ? o : Infinity;
@@ -159,29 +266,64 @@ async function buildSite(root, boardsFlag, allBoardsFlag) {
 		for (const b of Object.values(boards)) for (const node of Array.isArray(b?.nodes) ? b.nodes : []) if (typeof node?.frame === "string") wanted.add(node.frame);
 		frames = manifest.frames.filter((f) => wanted.has(f.id));
 	}
+	const pubFrames = strip ? frames.map((f) => ({
+		...f,
+		file: opaquePath(f.id, f.kind === "html" ? ".html" : "")
+	})) : frames;
+	const pubManifest = {
+		frames: pubFrames,
+		scenes: [...new Set(pubFrames.map((f) => f.scene))].sort().map((name) => ({
+			name,
+			frames: pubFrames.filter((f) => f.scene === name).length
+		}))
+	};
+	const boardsMeta = Object.fromEntries(publishedNames.filter((n) => policy.boards[n]).map((n) => {
+		const p = policy.boards[n];
+		return [n, {
+			type: p.type,
+			...p.open ? { open: p.open } : {},
+			...p.lock ? { lock: true } : {}
+		}];
+	}));
+	const lockedShell = publishedNames.length > 0 && publishedNames.every((n) => {
+		const p = policy.boards[n];
+		return !!p?.lock && !!p.open && [
+			"present",
+			"focus",
+			"slides"
+		].includes(p.open);
+	});
 	const data = {
-		manifest: {
-			frames,
-			scenes: [...new Set(frames.map((f) => f.scene))].sort().map((name) => ({
-				name,
-				frames: frames.filter((f) => f.scene === name).length
-			}))
-		},
+		manifest: pubManifest,
 		boards,
 		names: publishedNames,
 		default: publishedNames.find((n) => n !== "all-scenes") ?? publishedNames[0],
-		rights
+		rights,
+		policy: {
+			boards: boardsMeta,
+			reveal: policy.reveal,
+			...lockedShell ? { lockedShell: true } : {}
+		}
 	};
 	const registryFile = posix(join(clientDir, "frame-host", "registry.ts"));
+	const lockedFile = posix(join(clientDir, "shell", "LockedApp.tsx"));
+	const tsxFrames = frames.filter((f) => f.kind === "tsx");
 	const plugins = [{
 		name: "marver-build",
 		enforce: "pre",
-		resolveId(id) {
+		resolveId(id, importer) {
 			if (id === "virtual:sh-data") return "\0sh-data-build";
+			if (lockedShell && (id === "./App.tsx" || id.endsWith("/shell/App.tsx")) && importer && posix(importer).endsWith("/shell/main.tsx")) return lockedFile;
 		},
 		load(id) {
 			if (id === "\0sh-data-build") return `export default ${JSON.stringify(data)}`;
-			if (!includeAll && posix(id) === registryFile) return registrySource(root, frames.filter((f) => f.kind === "tsx").map((f) => "/" + posix(f.file)));
+			if (posix(id) === registryFile) {
+				if (strip) return registrySourceOpaque(root, tsxFrames.map((f) => ({
+					id: f.id,
+					file: posix(f.file)
+				})), buildSalt);
+				if (!includeAll) return registrySource(root, tsxFrames.map((f) => "/" + posix(f.file)));
+			}
 		}
 	}, react()];
 	if (host.tailwind === 4) {
@@ -196,8 +338,10 @@ async function buildSite(root, boardsFlag, allBoardsFlag) {
 		config,
 		detectedThemeCss: host.themeCss
 	}));
+	process.env.NODE_ENV = "production";
 	const result = await build({
 		configFile: false,
+		mode: "production",
 		root,
 		css,
 		plugins,
@@ -218,8 +362,8 @@ async function buildSite(root, boardsFlag, allBoardsFlag) {
 				},
 				output: {
 					entryFileNames: "assets/[name]-[hash].js",
-					chunkFileNames: "assets/[name]-[hash].js",
-					assetFileNames: "assets/[name]-[hash][extname]"
+					chunkFileNames: strip ? "assets/c-[hash].js" : "assets/[name]-[hash].js",
+					assetFileNames: strip ? "assets/a-[hash][extname]" : "assets/[name]-[hash][extname]"
 				}
 			}
 		},
@@ -258,8 +402,9 @@ async function buildSite(root, boardsFlag, allBoardsFlag) {
 		let html = src.includes("</head>") ? src.replace("</head>", `${inject}</head>`) : inject + src;
 		const shim = `<script>(function(){var a=Element.prototype.attachShadow;if(a)Element.prototype.attachShadow=function(i){if(i&&i.mode==='closed')window.__mvClosedShadow=1;return a.call(this,i)};})();<\/script>`;
 		html = /<head[^>]*>/i.test(html) ? html.replace(/<head[^>]*>/i, (m) => m + shim) : shim + html;
-		mkdirSync(dirname(join(outDir, f.file)), { recursive: true });
-		writeFileSync(join(outDir, f.file), html);
+		const dest = strip ? opaquePath(f.id, ".html") : f.file;
+		mkdirSync(dirname(join(outDir, dest)), { recursive: true });
+		writeFileSync(join(outDir, dest), html);
 	}
 	const assetsDir = join(root, "design", "assets");
 	const rootP = posix(root);
@@ -293,16 +438,22 @@ async function buildSite(root, boardsFlag, allBoardsFlag) {
 		copiedAssets++;
 	}
 	const commentsDir = join(root, "design", "comments");
+	const seedOut = embedSeeds ? join(outDir, "design", "comments") : join(root, "design", ".dist-seeds");
+	if (!embedSeeds) rmSync(seedOut, {
+		recursive: true,
+		force: true
+	});
 	if (existsSync(commentsDir)) {
 		let seeded = 0;
 		for (const n of publishedNames) {
 			const f = join(commentsDir, `${n}.jsonl`);
 			if (!existsSync(f)) continue;
-			mkdirSync(join(outDir, "design", "comments"), { recursive: true });
-			cpSync(f, join(outDir, "design", "comments", `${n}.jsonl`));
+			mkdirSync(seedOut, { recursive: true });
+			cpSync(f, join(seedOut, `${n}.jsonl`));
 			seeded++;
 		}
-		if (seeded) console.log(`  comments: ${seeded} board log${seeded === 1 ? "" : "s"} seeded`);
+		if (seeded) console.log(`  comments: ${seeded} board log${seeded === 1 ? "" : "s"} seeded${embedSeeds ? "" : " (design/.dist-seeds, outside the web root)"}`);
+		if (seeded && embedSeeds) console.log("  WARNING: --embed-seeds put comment history in the web root - every event carries\n  its author's email, readable by anyone who can reach the deployed files.");
 	}
 	let name = basename(root);
 	try {
@@ -329,7 +480,11 @@ async function buildSite(root, boardsFlag, allBoardsFlag) {
 		name,
 		branding: config.share.branding,
 		logo,
-		rights
+		rights,
+		boards: boardsMeta,
+		reveal: policy.reveal,
+		...config.share.frontDoor === false ? { frontDoor: false } : {},
+		...config.share.notify === false ? { notify: false } : {}
 	}));
 	console.log(`\n  ${NAME} build → design/.dist`);
 	console.log(`  boards: ${publishedNames.map((n) => `${n} (${rights[n]})`).join(", ")}`);

package/dist/cli.mjs

@@ -39,14 +39,14 @@ function version() {
 }
 const cli = cac(NAME);
 cli.command("init", "Scaffold design/ in this repo").option("--mode <mode>", "studio | embedded", { default: "studio" }).option("--no-demo", "Skip the demo scene (the demo ships unless this flag is passed)").option("--root <dir>", "Host repo root", { default: "." }).action(async (opts) => {
-	const { init } = await import("./init-BSclDg4I.mjs");
+	const { init } = await import("./init-BpitOqRQ.mjs");
 	init(resolve(opts.root), {
 		mode: opts.mode === "embedded" ? "embedded" : "studio",
 		demo: opts.demo !== false
 	});
 });
 for (const [name, desc] of [["dev", "Start the local canvas (everything on: hot reload, comments, Live Jam)"], ["canvas", "Start the local canvas - same as dev"]]) cli.command(name, desc).option("--root <dir>", "Host repo root", { default: "." }).option("--port <port>", "Port (default 5199)").action(async (opts) => {
-	const { dev } = await import("./dev-CLBjRs0J.mjs");
+	const { dev } = await import("./dev-BXq7yE1p.mjs");
 	let port;
 	if (opts.port !== void 0) {
 		const n = Number(opts.port);
@@ -55,18 +55,18 @@ for (const [name, desc] of [["dev", "Start the local canvas (everything on: hot
 	}
 	await dev(resolve(opts.root), port);
 });
-cli.command("build", "Static export → design/.dist (what ships comes from design/publish.json - publishing is default-closed)").option("--boards <names>", "Publish only these boards (comma-separated); overrides the publish policy").option("--all-boards", "Publish every board - the loud override for the default-closed policy").option("--root <dir>", "Host repo root", { default: "." }).action(async (opts) => {
-	const { buildSite } = await import("./build-Cr_ZLMdq.mjs");
+cli.command("build", "Static export → design/.dist (what ships comes from design/publish.json - publishing is default-closed)").option("--boards <names>", "Publish only these boards (comma-separated); overrides the publish policy").option("--all-boards", "Publish every board - the loud override for the default-closed policy").option("--embed-seeds", "Copy comment history INTO the web root (identifying - every event carries its author's email)").option("--root <dir>", "Host repo root", { default: "." }).action(async (opts) => {
+	const { buildSite } = await import("./build-DmfxJc6L.mjs");
 	try {
 		const boards = opts.boards === void 0 ? void 0 : typeof opts.boards === "string" ? opts.boards : "";
-		await buildSite(resolve(opts.root), boards, opts.allBoards === true);
+		await buildSite(resolve(opts.root), boards, opts.allBoards === true, opts.embedSeeds === true);
 	} catch (err) {
 		console.error(`[${NAME}] build failed: ${err.message}`);
 		process.exit(1);
 	}
 });
 cli.command("serve", "Serve design/.dist (set MARVER_PASSWORD to gate it)").option("--root <dir>", "Host repo root", { default: "." }).option("--port <port>", "Port (default $PORT or 4199)").action(async (opts) => {
-	const { serve } = await import("./serve-CZ1KEQxd.mjs");
+	const { serve } = await import("./serve-BeLLizNg.mjs");
 	let port;
 	if (opts.port !== void 0) {
 		const n = Number(opts.port);
@@ -75,7 +75,7 @@ cli.command("serve", "Serve design/.dist (set MARVER_PASSWORD to gate it)").opti
 	serve(resolve(opts.root), port);
 });
 cli.command("comments <action> [value]", "Comment collaboration: connect <url> · sync · list · reply <thread> · resolve <thread> · invite <email> · revoke <email>").option("--root <dir>", "Host repo root", { default: "." }).option("--token <token>", "connect: the canvas's MARVER_CLI_TOKEN (default $MARVER_CLI_TOKEN) - the identity-mode path").option("--invite <token>", "connect: claim this invite instead of signing in").option("--canvas-password <password>", "connect: the canvas gate password (default $MARVER_PASSWORD or prompt)").option("--email <email>", "connect: account email (skips the prompt)").option("--password <password>", "connect: account password (skips the prompt - mind your shell history)").option("--name <name>", "connect --invite: display name for the new account").option("--open", "list: only unresolved threads").option("--json", "list: machine-readable output").option("--board <board>", "scope to one board").option("--body <text>", "reply: the reply text").option("--addressed-in <frame>", "resolve: the variant frame that answered the feedback").action(async (action, value, opts) => {
-	const { commentsCommand } = await import("./comments-CRqaO2MH.mjs");
+	const { commentsCommand } = await import("./comments-pNxjTrGN.mjs");
 	try {
 		await commentsCommand(resolve(opts.root), action, value, opts);
 	} catch (err) {
@@ -83,6 +83,15 @@ cli.command("comments <action> [value]", "Comment collaboration: connect <url>
 		process.exit(1);
 	}
 });
+cli.command("share <action> [value]", "Sharing roster (owner): add <who> · remove <who> · block/unblock <email> · general <mode> · list · requests · explain <who> · who").option("--root <dir>", "Host repo root", { default: "." }).option("--role <role>", "add / requests --approve: view (default) or comment").option("--expires <iso>", "add: expiry timestamp, e.g. 2026-12-31T00:00:00Z").option("--approve <email>", "requests: approve this pending request (canvas-wide in v1)").option("--decline <email>", "requests: decline this pending request (silent to the asker)").option("--json", "list: machine-readable output").action(async (action, value, opts) => {
+	const { shareCommand } = await import("./share-C64b1tdN.mjs");
+	try {
+		await shareCommand(resolve(opts.root), action, value, opts);
+	} catch (err) {
+		console.error(`[${NAME}] ${err.message}`);
+		process.exit(1);
+	}
+});
 cli.command("work <action> [...frames]", "Working state on the canvas: start <scene/frame ...> · done <scene/frame ...> | --all · list").option("--root <dir>", "Host repo root", { default: "." }).option("--ttl <minutes>", "start: minutes before the glow self-expires (default 10, max 30)").option("--all", "done: clear every working frame").action(async (action, frames, opts) => {
 	const { workCommand } = await import("./work-lzC-lPY0.mjs");
 	try {