@marver-design/marver 0.16.1 → 0.18.0

package/dist/{marver-id-gate-D6By7XHj.mjs → marver-id-gate-B_idGdHm.mjs}

@@ -1,6 +1,6 @@
 import { i as avatarSourceFor, n as attachAvatar, p as provisionFromMarverId } from "./auth-DdUKeVKt.mjs";
 import { TransactionStore, browserBinding, verifyAssertion } from "./marver-id-CVCoaMGI.mjs";
-import { t as poweredByUrl } from "./serve-Bcwfpvhl.mjs";
+import { t as poweredByUrl } from "./serve-z5qtj_wJ.mjs";
 import { randomBytes } from "node:crypto";
 import { isIP } from "node:net";
 import { lookup } from "node:dns/promises";

package/dist/{plugin-BeBGu3gH.mjs → plugin-Cai5C1WV.mjs}

@@ -1,8 +1,8 @@
 import { t as __exportAll } from "./rolldown-runtime-D7D4PA-g.mjs";
-import { i as ROUTE, n as NAME, r as PKG } from "./cli.mjs";
+import { a as ROUTE, i as PKG, r as NAME } from "./cli.mjs";
 import { a as listBoardFiles, c as BOARD_NAME, g as hash, h as validateWire, i as isRegularFile, l as FOLDERS_FILE, m as readTitle, n as checkBoardsDir, o as nodeExists, p as readDescription, s as readRegistry, t as boardFields } from "./boards-BmxcT3Lc.mjs";
 import { n as localProfile, t as isConnected } from "./profile-BjAPAJSb.mjs";
-import { a as writeManifest, n as scanFrames, r as setSceneTitle, s as loadConfig, t as affectedFrameIds } from "./manifest-CaslQIAO.mjs";
+import { a as writeManifest, n as scanFrames, r as setSceneTitle, s as loadConfig, t as affectedFrameIds } from "./manifest-DAnEL8_a.mjs";
 import { copyFileSync, existsSync, linkSync, mkdirSync, readFileSync, readdirSync, realpathSync, renameSync, rmSync, watch, writeFileSync } from "node:fs";
 import { basename, dirname, join, resolve, sep } from "node:path";
 import { fileURLToPath } from "node:url";
@@ -422,7 +422,7 @@ function apiMiddleware(root, opts = {}) {
 				};
 				const asPng = url.searchParams.get("format") === "png";
 				const origin = opts.origin?.() ?? `http://${req.headers.host ?? "localhost"}`;
-				const { shootFrame } = await import("./shot-z-d-zMzf.mjs");
+				const { shootFrame } = await import("./shot-iicees2e.mjs");
 				const r = await shootFrame({
 					root,
 					viewports: opts.viewports ?? {},
@@ -441,6 +441,7 @@ function apiMiddleware(root, opts = {}) {
 					height: r.height,
 					scale: r.scale,
 					...r.truncated ? { truncated: true } : {},
+					...r.unsettled ? { unsettled: true } : {},
 					...r.note ? { note: r.note } : {}
 				};
 				if (!asPng) return json(res, 200, summary);
@@ -453,11 +454,98 @@ function apiMiddleware(root, opts = {}) {
 				});
 				return res.end(png);
 			}
+			if (path === "shots" && req.method === "POST") {
+				const { readDevInfo } = await import("./work-CLrmY-vQ.mjs");
+				const token = readDevInfo(root)?.token;
+				if (!ownerGated(req) && !(token && req.headers["x-mv-work"] === token)) return json(res, 403, { error: "forbidden" });
+				const raw = await readBody(req);
+				if (raw == null) return json(res, 400, { error: "body too large or unreadable" });
+				let parsed;
+				try {
+					parsed = JSON.parse(raw);
+				} catch {
+					return json(res, 400, { error: "malformed JSON" });
+				}
+				if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) return json(res, 400, { error: "expected an object" });
+				const body = parsed;
+				const theme = body.theme === void 0 ? "light" : body.theme;
+				if (typeof theme !== "string" || !/^[a-z0-9-]+$/i.test(theme)) return json(res, 400, { error: "invalid theme" });
+				const scale = body.scale === void 0 ? void 0 : body.scale;
+				if (scale !== void 0 && !(Number.isInteger(scale) && scale >= 1 && scale <= 4)) return json(res, 400, { error: "invalid scale" });
+				const { resolveFrames, shootBatch } = await import("./shot-iicees2e.mjs");
+				const sel = resolveFrames(root, body);
+				if (!sel.ok) return json(res, sel.status, { error: sel.error });
+				const origin = opts.origin?.() ?? `http://${req.headers.host ?? "localhost"}`;
+				try {
+					return json(res, 200, { results: await shootBatch({
+						root,
+						viewports: opts.viewports ?? {},
+						frames: sel.frames,
+						theme,
+						origin,
+						scale
+					}) });
+				} catch (err) {
+					return json(res, 503, { error: err.message });
+				}
+			}
+			if (path === "bakes" && req.method === "POST") {
+				if (!ownerGated(req)) return json(res, 403, { error: "forbidden" });
+				const raw = await readBody(req);
+				if (raw == null) return json(res, 400, { error: "body too large or unreadable" });
+				let body;
+				try {
+					body = JSON.parse(raw);
+				} catch {
+					return json(res, 400, { error: "malformed JSON" });
+				}
+				if (!body || typeof body !== "object" || !Array.isArray(body.asks) || !body.asks.length || body.asks.length > 200) return json(res, 400, { error: "asks must list 1-200 frames" });
+				const { bakeBatch, ASK_MAX } = await import("./bake-jr38C_pX.mjs");
+				let manifest = {};
+				try {
+					manifest = JSON.parse(readFileSync(join(root, "design", "manifest.json"), "utf8"));
+				} catch {}
+				const frames = new Map((manifest.frames ?? []).map((f) => [f.id, f]));
+				const asks = [];
+				for (const a of body.asks) {
+					const frame = typeof a?.frame === "string" ? a.frame : "";
+					const theme = typeof a?.theme === "string" && /^[a-z0-9-]{1,32}$/i.test(a.theme) ? a.theme : "";
+					const w = Math.round(Number(a?.w)), h = Math.round(Number(a?.h));
+					if (!frames.has(frame) || !theme || !(w >= 120 && h >= 80 && w <= ASK_MAX.side && h <= ASK_MAX.side && w * h <= ASK_MAX.area)) return json(res, 400, { error: `invalid ask for "${frame}"` });
+					asks.push({
+						frame,
+						theme,
+						w,
+						h
+					});
+				}
+				const origin = opts.origin?.() ?? `http://${req.headers.host ?? "localhost"}`;
+				const { ROUTE } = await import("./cli.mjs").then((n) => n.t);
+				const gen = opts.bakeGen?.() ?? 0;
+				return json(res, 200, {
+					gen,
+					answers: await bakeBatch({
+						root,
+						gen,
+						asks,
+						live: () => opts.bakeGen?.() ?? 0,
+						log: (a) => {
+							if (a.ok) console.log(`  bake: ${a.frame} ${a.theme} ${a.w}x${a.h} - ${a.targets.length} effects, ${a.rejected} stay live, ${a.ms} ms`);
+							else console.log(`  bake: ${a.frame} ${a.theme} ${a.w}x${a.h} - stays live: ${a.error}`);
+						},
+						urlFor: (ask) => {
+							const f = frames.get(ask.frame);
+							return f.kind === "html" ? `${origin}/${f.file}?theme=${encodeURIComponent(ask.theme)}` : `${origin}${ROUTE}/frame/?id=${encodeURIComponent(ask.frame)}&theme=${encodeURIComponent(ask.theme)}`;
+						},
+						urlBase: `${ROUTE}/bakes`
+					})
+				});
+			}
 			if (path === "poster" && req.method === "GET") {
 				if (!ownerGated(req)) return json(res, 403, { error: "forbidden" });
 				const src = url.searchParams.get("src") ?? "";
-				const { ensurePoster, isLocalClip } = await import("./poster-CoyobbGW.mjs");
-				const { isLocalAssetRef } = await import("./build-B4yPgFNF.mjs");
+				const { ensurePoster, isLocalClip } = await import("./poster-CIuz_PwH.mjs");
+				const { isLocalAssetRef } = await import("./build-ER_7T6Cw.mjs");
 				if (!isLocalAssetRef(src) || !isLocalClip(src)) return json(res, 400, { error: "src must be a clip under design/assets/" });
 				const r = await ensurePoster(join(root, "design", "assets"), src);
 				if (!r.ok) return json(res, r.error.includes("does not exist") ? 404 : 503, { error: r.error });
@@ -645,6 +733,24 @@ function routesMiddleware(server, clientDir) {
 			} catch {
 				return next();
 			}
+		} else if (path.startsWith(`/__mv/bakes/`)) {
+			const m = /^\/(\d+)\/([a-f0-9]{16})\/(\d+)\.png$/.exec(path.slice(`${ROUTE}/bakes`.length));
+			if (!m) {
+				res.statusCode = 404;
+				return res.end();
+			}
+			try {
+				const base = realpathSync(join(server.config.root, "design", ".local", "bakes"));
+				const file = realpathSync(join(base, m[1], m[2], `${m[3]}.png`));
+				if (!file.startsWith(base + sep)) throw new Error("outside the cache");
+				const png = readFileSync(file);
+				res.setHeader("content-type", "image/png");
+				res.setHeader("cache-control", "public, max-age=31536000, immutable");
+				return res.end(png);
+			} catch {
+				res.statusCode = 404;
+				return res.end();
+			}
 		} else if (path === `/__mv/bridge.js`) {
 			res.setHeader("content-type", "text/javascript");
 			return res.end(readFileSync(join(clientDir, "frame-host", "bridge.js"), "utf8"));
@@ -810,27 +916,19 @@ function marverPlugin(ctx) {
 				const bridge = "/@fs/" + join(clientDir, "frame-host", "bridge.js").split("\\").join("/") + "?html=1";
 				return {
 					html,
-					tags: [
-						{
-							tag: "script",
-							children: `(function(){var a=Element.prototype.attachShadow;if(a)Element.prototype.attachShadow=function(i){if(i&&i.mode==='closed')window.__mvClosedShadow=1;return a.call(this,i)};})();`,
-							injectTo: "head-prepend"
+					tags: [{
+						tag: "script",
+						attrs: { type: "module" },
+						children: `import '${VIRTUAL_THEME}'`,
+						injectTo: "head-prepend"
+					}, {
+						tag: "script",
+						attrs: {
+							type: "module",
+							src: bridge
 						},
-						{
-							tag: "script",
-							attrs: { type: "module" },
-							children: `import '${VIRTUAL_THEME}'`,
-							injectTo: "head-prepend"
-						},
-						{
-							tag: "script",
-							attrs: {
-								type: "module",
-								src: bridge
-							},
-							injectTo: "head-prepend"
-						}
-					]
+						injectTo: "head-prepend"
+					}]
 				};
 			}
 		},
@@ -852,6 +950,7 @@ function marverPlugin(ctx) {
 			return [];
 		},
 		configureServer(server) {
+			let bakeGen = Date.now();
 			server.middlewares.use((req, res, next) => {
 				if (req.url && req.url.includes("/frame-host/registry.ts")) {
 					const orig = res.setHeader.bind(res);
@@ -881,7 +980,8 @@ function marverPlugin(ctx) {
 			};
 			server.middlewares.use(apiMiddleware(root, {
 				viewports: config.viewports,
-				origin: listeningOrigin
+				origin: listeningOrigin,
+				bakeGen: () => bakeGen
 			}));
 			server.middlewares.use(routesMiddleware(server, clientDir));
 			devServer = server;
@@ -919,6 +1019,21 @@ function marverPlugin(ctx) {
 				for (const mod of themeModules()) server.moduleGraph.invalidateModule(mod);
 				pushTheme();
 			};
+			const localDir = join(root, "design", ".local"), boardsDirGen = join(root, "design", "boards"), manifestPath = join(root, "design", "manifest.json");
+			const bumpGen = (f) => {
+				if (f.startsWith(localDir) || f.startsWith(boardsDirGen) || f === manifestPath || f.includes("/node_modules/")) return;
+				bakeGen++;
+				prune();
+			};
+			const prune = () => setTimeout(async () => {
+				try {
+					(await import("./bake-jr38C_pX.mjs")).pruneBakes(root, bakeGen);
+				} catch {}
+			}, 500);
+			prune();
+			server.watcher.on("add", bumpGen);
+			server.watcher.on("unlink", bumpGen);
+			server.watcher.on("change", bumpGen);
 			server.watcher.on("add", (f) => {
 				if (inScope(f)) {
 					regen();
@@ -982,23 +1097,68 @@ function marverPlugin(ctx) {
 					if (!existsSync(reqPath)) return;
 					inFlight.add(file);
 					setTimeout(async () => {
+						const base = file.replace(/\.request\.json$/, "");
+						const resultPath = join(inbox, `${base}.result.json`);
+						const claimed = join(inbox, `.${base}.${process.pid}.${Date.now().toString(36)}.claimed`);
 						try {
+							renameSync(reqPath, claimed);
+						} catch {
+							inFlight.delete(file);
+							return;
+						}
+						try {
+							const write = (r) => {
+								const tmp = join(inbox, `.${base}.${process.pid}.tmp`);
+								try {
+									writeFileSync(tmp, JSON.stringify(r, null, 2));
+									renameSync(tmp, resultPath);
+								} catch {
+									try {
+										rmSync(tmp, { force: true });
+									} catch {}
+								}
+							};
 							let spec;
 							try {
-								spec = JSON.parse(readFileSync(reqPath, "utf8"));
-							} catch {
+								spec = JSON.parse(readFileSync(claimed, "utf8"));
+								if (!spec || typeof spec !== "object" || Array.isArray(spec)) throw new Error("expected an object");
+							} catch (err) {
+								write({
+									ok: false,
+									error: `malformed request - ${err.message}`
+								});
+								return;
+							}
+							const theme = spec.theme === void 0 ? "light" : spec.theme;
+							if (typeof theme !== "string" || !/^[a-z0-9-]+$/i.test(theme)) {
+								write({
+									ok: false,
+									error: "invalid theme"
+								});
+								return;
+							}
+							const scale = spec.scale === void 0 ? void 0 : spec.scale;
+							if (scale !== void 0 && !(Number.isInteger(scale) && scale >= 1 && scale <= 4)) {
+								write({
+									ok: false,
+									error: "invalid scale"
+								});
+								return;
+							}
+							const ways = [
+								"frame",
+								"frames",
+								"scene",
+								"all"
+							].filter((k) => spec[k] !== void 0);
+							if (ways.length !== 1) {
+								write({
+									ok: false,
+									error: "name the frames one way: frame (an id), frames (an array of ids), scene (a name) or all (true)"
+								});
 								return;
 							}
-							const base = file.replace(/\.request\.json$/, "");
-							const resultPath = join(inbox, `${base}.result.json`);
-							const frameId = typeof spec.frame === "string" ? spec.frame : "";
-							const theme = typeof spec.theme === "string" ? spec.theme : "light";
 							const o = origin();
-							const write = (r) => {
-								try {
-									writeFileSync(resultPath, JSON.stringify(r, null, 2));
-								} catch {}
-							};
 							if (!o) {
 								write({
 									ok: false,
@@ -1006,18 +1166,55 @@ function marverPlugin(ctx) {
 								});
 								return;
 							}
-							const { shootFrame } = await import("./shot-z-d-zMzf.mjs");
-							write(await shootFrame({
-								root,
-								viewports: config.viewports,
-								frameId,
-								theme,
-								origin: o
-							}));
+							const { shootFrame, shootBatch, resolveFrames } = await import("./shot-iicees2e.mjs");
+							if (ways[0] === "frame") {
+								if (typeof spec.frame !== "string") {
+									write({
+										ok: false,
+										error: "frame must be a frame id"
+									});
+									return;
+								}
+								write(await shootFrame({
+									root,
+									viewports: config.viewports,
+									frameId: spec.frame,
+									theme,
+									origin: o,
+									scale
+								}));
+								return;
+							}
+							const sel = resolveFrames(root, spec);
+							if (!sel.ok) {
+								write({
+									ok: false,
+									error: sel.error
+								});
+								return;
+							}
 							try {
-								rmSync(reqPath, { force: true });
-							} catch {}
+								write({
+									ok: true,
+									results: await shootBatch({
+										root,
+										viewports: config.viewports,
+										frames: sel.frames,
+										theme,
+										origin: o,
+										scale
+									})
+								});
+							} catch (err) {
+								write({
+									ok: false,
+									error: err.message
+								});
+							}
 						} finally {
+							try {
+								rmSync(claimed, { force: true });
+							} catch {}
 							inFlight.delete(file);
 						}
 					}, 60);

package/dist/{poster-CoyobbGW.mjs → poster-CIuz_PwH.mjs}

@@ -1,4 +1,4 @@
-import { capture, findChrome } from "./shot-z-d-zMzf.mjs";
+import { capture, t as findChrome } from "./shot-iicees2e.mjs";
 import { constants, copyFileSync, existsSync, mkdtempSync, realpathSync, rmSync, writeFileSync } from "node:fs";
 import { basename, dirname, join, sep } from "node:path";
 import { pathToFileURL } from "node:url";
@@ -52,15 +52,23 @@ html,body{margin:0;background:#000}#root video{display:block}
   setTimeout(function(){ if (!done && v.readyState >= 2) show() }, 4000);
 })();
 <\/script></body></html>`;
-/** Render `<clip>.poster.png` for a clip under design/assets/. Idempotent: an existing
-*  poster (authored or generated) is left alone. */
-async function ensurePoster(assetsDir, src) {
+/** Single-flight by output path: N frames of one batch referencing the same clip ask at the
+*  same moment, and each would otherwise pass the "exists" check and render the same poster. */
+const rendering = /* @__PURE__ */ new Map();
+function ensurePoster(assetsDir, src) {
+	const out = join(assetsDir, posterNameFor(src));
+	const live = rendering.get(out);
+	if (live) return live;
+	const run = ensurePosterNow(assetsDir, src, out).finally(() => rendering.delete(out));
+	rendering.set(out, run);
+	return run;
+}
+async function ensurePosterNow(assetsDir, src, out) {
 	if (!isLocalClip(src)) return {
 		ok: false,
 		error: `not a local clip: ${src}`
 	};
 	const clip = join(assetsDir, src);
-	const out = join(assetsDir, posterNameFor(src));
 	if (existsSync(out)) return {
 		ok: true,
 		path: out,

package/dist/publish-bakes-D0LhbQQ3.mjs

@@ -0,0 +1,216 @@
+import { planShot, t as findChrome } from "./shot-iicees2e.mjs";
+import { ASK_MAX, bakeBatch } from "./bake-jr38C_pX.mjs";
+import { MIME } from "./serve-z5qtj_wJ.mjs";
+import { copyFileSync, lstatSync, mkdirSync, readFileSync, realpathSync, rmSync, statSync, writeFileSync } from "node:fs";
+import { extname, isAbsolute, join, relative, resolve } from "node:path";
+import { createServer } from "node:http";
+//#region src/server/publish-bakes.ts
+/**
+* Textures at publish time (spec 16, published canvases).
+*
+* A published canvas is a static site with no compiler, so its glass stayed live and a shared hi-fi
+* board flashed on pan and zoom as before 0.18.0. Everything the compiler needs is known when the
+* site is built: the published boards, every node's frame and size on them, and the themes a
+* visitor can flip to. So the build serves design/.dist to itself on a loopback port, compiles every
+* (frame, theme, size) against the PUBLISHED document - the one visitors get, not the dev one - with
+* the same certification as the dev server (bake.ts), ships the certified textures under
+* design/.dist/__mv/bakes/<build>/ and writes one static index the shell reads instead of asking a
+* server. Anything the compiler refuses is simply absent from the index: that frame sleeps with the
+* pause alone, glass live, as today. No Chrome on the build machine: the note is printed and the
+* site ships without textures.
+*/
+/** The shell's plain key for an ask (sleep.ts keyOf): frame|theme|w|h. */
+const indexKey = (a) => `${a.frame}|${a.theme}|${Math.round(a.w)}|${Math.round(a.h)}`;
+/** Every (frame, theme, size) a visitor can rest on: each published board's nodes, sized the way
+*  the shell sizes them (the node's own size, else the frame's default), each theme; the published
+*  `all-scenes` board shows every frame at its default size. Sizes are rounded first, then held to
+*  the compiler's limits: an oversize node is skipped, never clamped to a document of another size. */
+function publishedAsks(boards, themes, frames, viewports, allScenes = false) {
+	const byId = new Map(frames.map((f) => [f.id, f]));
+	const seen = /* @__PURE__ */ new Map();
+	const add = (frame, w, h) => {
+		w = Math.round(w);
+		h = Math.round(h);
+		if (!(w >= 120) || !(h >= 80) || w > ASK_MAX.side || h > ASK_MAX.side || w * h > ASK_MAX.area) return;
+		for (const theme of themes.length ? themes : ["light"]) {
+			const ask = {
+				frame,
+				theme,
+				w,
+				h
+			};
+			seen.set(indexKey(ask), ask);
+		}
+	};
+	const size = (f, n) => {
+		const nw = n && typeof n.w === "number" && n.w > 0 ? n.w : void 0, nh = n && typeof n.h === "number" && n.h > 0 ? n.h : void 0;
+		const p = planShot(f, viewports, {});
+		if (p.fullHeight && !nh) return null;
+		return {
+			w: nw ?? p.width,
+			h: nh ?? p.initialHeight
+		};
+	};
+	for (const b of Object.values(boards)) for (const n of b?.nodes ?? []) {
+		const f = typeof n?.frame === "string" ? byId.get(n.frame) : void 0;
+		const s = f && size(f, n);
+		if (s) add(f.id, s.w, s.h);
+	}
+	if (allScenes) for (const f of frames) {
+		const s = size(f);
+		if (s) add(f.id, s.w, s.h);
+	}
+	return [...seen.values()];
+}
+/** The index: only answers that certified at least one texture, and only their certified targets
+*  (a refused target's selector ships nothing); everything else is absent. */
+function publishedIndex(gen, answers) {
+	const out = {
+		gen,
+		answers: {}
+	};
+	for (const a of answers) {
+		if (!a.ok) continue;
+		const targets = a.targets.filter((t) => t.verified && t.texture);
+		if (targets.length) out.answers[indexKey(a)] = {
+			ok: true,
+			targets
+		};
+	}
+	return out;
+}
+/** Serve `dir` on a loopback port the way `marver serve` does (extensionless = index.html). */
+function serveDir(dir) {
+	const real = realpathSync(dir);
+	const server = createServer((req, res) => {
+		let path = "";
+		try {
+			path = decodeURIComponent(new URL(req.url ?? "/", "http://x").pathname);
+		} catch {
+			res.statusCode = 400;
+			return res.end();
+		}
+		if (path.endsWith("/")) path += "index.html";
+		let file = resolve(dir, path.slice(1));
+		try {
+			const r = realpathSync(file);
+			if (relative(real, r).startsWith("..") || isAbsolute(relative(real, r))) throw 0;
+			file = r;
+		} catch {
+			file = join(dir, "index.html");
+		}
+		if (!extname(file)) file = join(dir, "index.html");
+		try {
+			const c = readFileSync(file);
+			res.setHeader("content-type", MIME[extname(file)] ?? "application/octet-stream");
+			res.end(c);
+		} catch {
+			res.statusCode = 404;
+			res.end();
+		}
+	});
+	return new Promise((ok) => server.listen(0, "127.0.0.1", () => {
+		ok({
+			origin: `http://127.0.0.1:${server.address().port}`,
+			close: () => server.close()
+		});
+	}));
+}
+/** Compile the published boards' frames against the built site and ship the textures with it.
+*  Returns null when there is no Chrome to compile with. */
+async function bakePublished(opts) {
+	const { root, outDir, gen, boards, themes, frames, viewports, allScenes, urlFor, log } = opts;
+	if (!findChrome()) return null;
+	const t0 = Date.now();
+	const asks = publishedAsks(boards, themes, frames, viewports, allScenes).filter((a) => urlFor(a.frame, a.theme));
+	const stats = {
+		asked: asks.length,
+		asleep: 0,
+		live: 0,
+		plain: 0,
+		bytes: 0,
+		ms: 0
+	};
+	if (!asks.length) return stats;
+	const cache = join(root, "design", ".local", "bakes", String(gen));
+	const site = await serveDir(outDir);
+	let answers;
+	try {
+		answers = await bakeBatch({
+			root,
+			gen,
+			asks,
+			urlBase: "/__mv/bakes",
+			urlFor: (a) => site.origin + urlFor(a.frame, a.theme)
+		});
+		const index = publishedIndex(gen, answers);
+		const to = join(outDir, "__mv", "bakes");
+		rmSync(to, {
+			recursive: true,
+			force: true
+		});
+		const grammar = new RegExp(`^/__mv/bakes/${gen}/[0-9a-f]{16}/\\d+\\.png$`);
+		const realCache = (() => {
+			try {
+				return realpathSync(cache);
+			} catch {
+				return null;
+			}
+		})();
+		for (const [key, a] of Object.entries(index.answers)) {
+			const files = [];
+			if (!(realCache !== null && a.targets.every((t) => {
+				if (!grammar.test(t.texture)) return false;
+				const from = join(root, "design", ".local", "bakes", t.texture.replace(/^\/__mv\/bakes\//, ""));
+				try {
+					if (!lstatSync(from).isFile()) return false;
+					if (!realpathSync(from).startsWith(realCache + "/")) return false;
+				} catch {
+					return false;
+				}
+				files.push([from, join(outDir, t.texture.slice(1))]);
+				return true;
+			}))) {
+				delete index.answers[key];
+				continue;
+			}
+			for (const [from, dest] of files) {
+				mkdirSync(join(dest, ".."), { recursive: true });
+				copyFileSync(from, dest);
+				stats.bytes += statSync(dest).size;
+			}
+		}
+		mkdirSync(join(to, String(gen)), { recursive: true });
+		writeFileSync(join(to, String(gen), "index.json"), JSON.stringify(index));
+		for (const a of answers) {
+			if (!a.ok) {
+				stats.live++;
+				log?.(`  bake: ${a.frame} ${a.theme} ${a.w}x${a.h} - stays live: ${a.error}`);
+				continue;
+			}
+			if (!(a.effects ?? a.targets.length)) {
+				stats.plain++;
+				continue;
+			}
+			if (!a.targets.length) {
+				stats.live++;
+				log?.(`  bake: ${a.frame} ${a.theme} ${a.w}x${a.h} - ${a.effects} effects, all nested, stay live`);
+				continue;
+			}
+			const shipped = index.answers[indexKey(a)]?.targets.length ?? 0;
+			if (shipped) stats.asleep++;
+			else stats.live++;
+			log?.(`  bake: ${a.frame} ${a.theme} ${a.w}x${a.h} - ${a.targets.length} effects, ${a.targets.length - shipped} stay live, ${a.ms} ms`);
+		}
+	} finally {
+		site.close();
+		rmSync(cache, {
+			recursive: true,
+			force: true
+		});
+	}
+	stats.ms = Date.now() - t0;
+	return stats;
+}
+//#endregion
+export { bakePublished };

package/dist/{serve-Bcwfpvhl.mjs → serve-z5qtj_wJ.mjs}

@@ -1,4 +1,4 @@
-import { n as NAME } from "./cli.mjs";
+import { r as NAME } from "./cli.mjs";
 import { t as secureSuffix } from "./secure-cookie-_K1Hsx8H.mjs";
 import { existsSync, readFileSync, readdirSync, realpathSync } from "node:fs";
 import { extname, isAbsolute, join, relative, resolve } from "node:path";
@@ -147,7 +147,7 @@ async function serve(root, portFlag) {
 			console.error(`[${NAME}] MARVER_ID_ISSUER is set but MARVER_PUBLIC_ORIGIN is not.\n  Every assertion is bound to this canvas's exact origin, and it cannot be\n  inferred from request headers - a proxy can make any request look local.\n  Set it to the origin people actually reach this canvas on:\n    MARVER_PUBLIC_ORIGIN=https://canvas.example.com\n    MARVER_PUBLIC_ORIGIN=http://localhost:${portFlag ?? (Number(process.env.PORT) || 4199)} (development)`);
 			process.exit(1);
 		}
-		const { marverIdHandler } = await import("./marver-id-gate-D6By7XHj.mjs");
+		const { marverIdHandler } = await import("./marver-id-gate-B_idGdHm.mjs");
 		const { dataDir } = await import("./comments-DZyobpxG.mjs").then((n) => n.n);
 		const canvasName = humanName(meta.name);
 		const { ceilingsFromRights } = await import("./auth-DdUKeVKt.mjs").then((n) => n.R);
@@ -659,4 +659,4 @@ ${collabOn ? `
 }
 const esc = (s) => s.replace(/[&<>"']/g, (c) => `&#${c.charCodeAt(0)};`);
 //#endregion
-export { serve, poweredByUrl as t };
+export { MIME, serve, poweredByUrl as t };

package/dist/{share-Gqo_Ygqw.mjs → share--bdSc4G5.mjs}

@@ -1,4 +1,4 @@
-import { n as NAME } from "./cli.mjs";
+import { r as NAME } from "./cli.mjs";
 import { M as resolveAccess } from "./auth-DdUKeVKt.mjs";
 import { i as loadCollab } from "./sync-BZaCWqK-.mjs";
 //#region src/cli/share.ts