@marver-design/marver 0.17.0 → 0.18.0

package/dist/{plugin-D2msH1cj.mjs → plugin-Cai5C1WV.mjs}

@@ -1,8 +1,8 @@
 import { t as __exportAll } from "./rolldown-runtime-D7D4PA-g.mjs";
-import { i as ROUTE, n as NAME, r as PKG } from "./cli.mjs";
+import { a as ROUTE, i as PKG, r as NAME } from "./cli.mjs";
 import { a as listBoardFiles, c as BOARD_NAME, g as hash, h as validateWire, i as isRegularFile, l as FOLDERS_FILE, m as readTitle, n as checkBoardsDir, o as nodeExists, p as readDescription, s as readRegistry, t as boardFields } from "./boards-BmxcT3Lc.mjs";
 import { n as localProfile, t as isConnected } from "./profile-BjAPAJSb.mjs";
-import { a as writeManifest, n as scanFrames, r as setSceneTitle, s as loadConfig, t as affectedFrameIds } from "./manifest-CaslQIAO.mjs";
+import { a as writeManifest, n as scanFrames, r as setSceneTitle, s as loadConfig, t as affectedFrameIds } from "./manifest-DAnEL8_a.mjs";
 import { copyFileSync, existsSync, linkSync, mkdirSync, readFileSync, readdirSync, realpathSync, renameSync, rmSync, watch, writeFileSync } from "node:fs";
 import { basename, dirname, join, resolve, sep } from "node:path";
 import { fileURLToPath } from "node:url";
@@ -422,7 +422,7 @@ function apiMiddleware(root, opts = {}) {
 				};
 				const asPng = url.searchParams.get("format") === "png";
 				const origin = opts.origin?.() ?? `http://${req.headers.host ?? "localhost"}`;
-				const { shootFrame } = await import("./shot-DlmTO8AF.mjs");
+				const { shootFrame } = await import("./shot-iicees2e.mjs");
 				const r = await shootFrame({
 					root,
 					viewports: opts.viewports ?? {},
@@ -472,7 +472,7 @@ function apiMiddleware(root, opts = {}) {
 				if (typeof theme !== "string" || !/^[a-z0-9-]+$/i.test(theme)) return json(res, 400, { error: "invalid theme" });
 				const scale = body.scale === void 0 ? void 0 : body.scale;
 				if (scale !== void 0 && !(Number.isInteger(scale) && scale >= 1 && scale <= 4)) return json(res, 400, { error: "invalid scale" });
-				const { resolveFrames, shootBatch } = await import("./shot-DlmTO8AF.mjs");
+				const { resolveFrames, shootBatch } = await import("./shot-iicees2e.mjs");
 				const sel = resolveFrames(root, body);
 				if (!sel.ok) return json(res, sel.status, { error: sel.error });
 				const origin = opts.origin?.() ?? `http://${req.headers.host ?? "localhost"}`;
@@ -489,11 +489,63 @@ function apiMiddleware(root, opts = {}) {
 					return json(res, 503, { error: err.message });
 				}
 			}
+			if (path === "bakes" && req.method === "POST") {
+				if (!ownerGated(req)) return json(res, 403, { error: "forbidden" });
+				const raw = await readBody(req);
+				if (raw == null) return json(res, 400, { error: "body too large or unreadable" });
+				let body;
+				try {
+					body = JSON.parse(raw);
+				} catch {
+					return json(res, 400, { error: "malformed JSON" });
+				}
+				if (!body || typeof body !== "object" || !Array.isArray(body.asks) || !body.asks.length || body.asks.length > 200) return json(res, 400, { error: "asks must list 1-200 frames" });
+				const { bakeBatch, ASK_MAX } = await import("./bake-jr38C_pX.mjs");
+				let manifest = {};
+				try {
+					manifest = JSON.parse(readFileSync(join(root, "design", "manifest.json"), "utf8"));
+				} catch {}
+				const frames = new Map((manifest.frames ?? []).map((f) => [f.id, f]));
+				const asks = [];
+				for (const a of body.asks) {
+					const frame = typeof a?.frame === "string" ? a.frame : "";
+					const theme = typeof a?.theme === "string" && /^[a-z0-9-]{1,32}$/i.test(a.theme) ? a.theme : "";
+					const w = Math.round(Number(a?.w)), h = Math.round(Number(a?.h));
+					if (!frames.has(frame) || !theme || !(w >= 120 && h >= 80 && w <= ASK_MAX.side && h <= ASK_MAX.side && w * h <= ASK_MAX.area)) return json(res, 400, { error: `invalid ask for "${frame}"` });
+					asks.push({
+						frame,
+						theme,
+						w,
+						h
+					});
+				}
+				const origin = opts.origin?.() ?? `http://${req.headers.host ?? "localhost"}`;
+				const { ROUTE } = await import("./cli.mjs").then((n) => n.t);
+				const gen = opts.bakeGen?.() ?? 0;
+				return json(res, 200, {
+					gen,
+					answers: await bakeBatch({
+						root,
+						gen,
+						asks,
+						live: () => opts.bakeGen?.() ?? 0,
+						log: (a) => {
+							if (a.ok) console.log(`  bake: ${a.frame} ${a.theme} ${a.w}x${a.h} - ${a.targets.length} effects, ${a.rejected} stay live, ${a.ms} ms`);
+							else console.log(`  bake: ${a.frame} ${a.theme} ${a.w}x${a.h} - stays live: ${a.error}`);
+						},
+						urlFor: (ask) => {
+							const f = frames.get(ask.frame);
+							return f.kind === "html" ? `${origin}/${f.file}?theme=${encodeURIComponent(ask.theme)}` : `${origin}${ROUTE}/frame/?id=${encodeURIComponent(ask.frame)}&theme=${encodeURIComponent(ask.theme)}`;
+						},
+						urlBase: `${ROUTE}/bakes`
+					})
+				});
+			}
 			if (path === "poster" && req.method === "GET") {
 				if (!ownerGated(req)) return json(res, 403, { error: "forbidden" });
 				const src = url.searchParams.get("src") ?? "";
-				const { ensurePoster, isLocalClip } = await import("./poster-BEjUcQP3.mjs");
-				const { isLocalAssetRef } = await import("./build-D_g53Bp2.mjs");
+				const { ensurePoster, isLocalClip } = await import("./poster-CIuz_PwH.mjs");
+				const { isLocalAssetRef } = await import("./build-ER_7T6Cw.mjs");
 				if (!isLocalAssetRef(src) || !isLocalClip(src)) return json(res, 400, { error: "src must be a clip under design/assets/" });
 				const r = await ensurePoster(join(root, "design", "assets"), src);
 				if (!r.ok) return json(res, r.error.includes("does not exist") ? 404 : 503, { error: r.error });
@@ -681,6 +733,24 @@ function routesMiddleware(server, clientDir) {
 			} catch {
 				return next();
 			}
+		} else if (path.startsWith(`/__mv/bakes/`)) {
+			const m = /^\/(\d+)\/([a-f0-9]{16})\/(\d+)\.png$/.exec(path.slice(`${ROUTE}/bakes`.length));
+			if (!m) {
+				res.statusCode = 404;
+				return res.end();
+			}
+			try {
+				const base = realpathSync(join(server.config.root, "design", ".local", "bakes"));
+				const file = realpathSync(join(base, m[1], m[2], `${m[3]}.png`));
+				if (!file.startsWith(base + sep)) throw new Error("outside the cache");
+				const png = readFileSync(file);
+				res.setHeader("content-type", "image/png");
+				res.setHeader("cache-control", "public, max-age=31536000, immutable");
+				return res.end(png);
+			} catch {
+				res.statusCode = 404;
+				return res.end();
+			}
 		} else if (path === `/__mv/bridge.js`) {
 			res.setHeader("content-type", "text/javascript");
 			return res.end(readFileSync(join(clientDir, "frame-host", "bridge.js"), "utf8"));
@@ -846,27 +916,19 @@ function marverPlugin(ctx) {
 				const bridge = "/@fs/" + join(clientDir, "frame-host", "bridge.js").split("\\").join("/") + "?html=1";
 				return {
 					html,
-					tags: [
-						{
-							tag: "script",
-							children: `(function(){var a=Element.prototype.attachShadow;if(a)Element.prototype.attachShadow=function(i){if(i&&i.mode==='closed')window.__mvClosedShadow=1;return a.call(this,i)};})();`,
-							injectTo: "head-prepend"
+					tags: [{
+						tag: "script",
+						attrs: { type: "module" },
+						children: `import '${VIRTUAL_THEME}'`,
+						injectTo: "head-prepend"
+					}, {
+						tag: "script",
+						attrs: {
+							type: "module",
+							src: bridge
 						},
-						{
-							tag: "script",
-							attrs: { type: "module" },
-							children: `import '${VIRTUAL_THEME}'`,
-							injectTo: "head-prepend"
-						},
-						{
-							tag: "script",
-							attrs: {
-								type: "module",
-								src: bridge
-							},
-							injectTo: "head-prepend"
-						}
-					]
+						injectTo: "head-prepend"
+					}]
 				};
 			}
 		},
@@ -888,6 +950,7 @@ function marverPlugin(ctx) {
 			return [];
 		},
 		configureServer(server) {
+			let bakeGen = Date.now();
 			server.middlewares.use((req, res, next) => {
 				if (req.url && req.url.includes("/frame-host/registry.ts")) {
 					const orig = res.setHeader.bind(res);
@@ -917,7 +980,8 @@ function marverPlugin(ctx) {
 			};
 			server.middlewares.use(apiMiddleware(root, {
 				viewports: config.viewports,
-				origin: listeningOrigin
+				origin: listeningOrigin,
+				bakeGen: () => bakeGen
 			}));
 			server.middlewares.use(routesMiddleware(server, clientDir));
 			devServer = server;
@@ -955,6 +1019,21 @@ function marverPlugin(ctx) {
 				for (const mod of themeModules()) server.moduleGraph.invalidateModule(mod);
 				pushTheme();
 			};
+			const localDir = join(root, "design", ".local"), boardsDirGen = join(root, "design", "boards"), manifestPath = join(root, "design", "manifest.json");
+			const bumpGen = (f) => {
+				if (f.startsWith(localDir) || f.startsWith(boardsDirGen) || f === manifestPath || f.includes("/node_modules/")) return;
+				bakeGen++;
+				prune();
+			};
+			const prune = () => setTimeout(async () => {
+				try {
+					(await import("./bake-jr38C_pX.mjs")).pruneBakes(root, bakeGen);
+				} catch {}
+			}, 500);
+			prune();
+			server.watcher.on("add", bumpGen);
+			server.watcher.on("unlink", bumpGen);
+			server.watcher.on("change", bumpGen);
 			server.watcher.on("add", (f) => {
 				if (inScope(f)) {
 					regen();
@@ -1087,7 +1166,7 @@ function marverPlugin(ctx) {
 								});
 								return;
 							}
-							const { shootFrame, shootBatch, resolveFrames } = await import("./shot-DlmTO8AF.mjs");
+							const { shootFrame, shootBatch, resolveFrames } = await import("./shot-iicees2e.mjs");
 							if (ways[0] === "frame") {
 								if (typeof spec.frame !== "string") {
 									write({

package/dist/{poster-BEjUcQP3.mjs → poster-CIuz_PwH.mjs}

@@ -1,4 +1,4 @@
-import { capture, t as findChrome } from "./shot-DlmTO8AF.mjs";
+import { capture, t as findChrome } from "./shot-iicees2e.mjs";
 import { constants, copyFileSync, existsSync, mkdtempSync, realpathSync, rmSync, writeFileSync } from "node:fs";
 import { basename, dirname, join, sep } from "node:path";
 import { pathToFileURL } from "node:url";

package/dist/publish-bakes-D0LhbQQ3.mjs

@@ -0,0 +1,216 @@
+import { planShot, t as findChrome } from "./shot-iicees2e.mjs";
+import { ASK_MAX, bakeBatch } from "./bake-jr38C_pX.mjs";
+import { MIME } from "./serve-z5qtj_wJ.mjs";
+import { copyFileSync, lstatSync, mkdirSync, readFileSync, realpathSync, rmSync, statSync, writeFileSync } from "node:fs";
+import { extname, isAbsolute, join, relative, resolve } from "node:path";
+import { createServer } from "node:http";
+//#region src/server/publish-bakes.ts
+/**
+* Textures at publish time (spec 16, published canvases).
+*
+* A published canvas is a static site with no compiler, so its glass stayed live and a shared hi-fi
+* board flashed on pan and zoom as before 0.18.0. Everything the compiler needs is known when the
+* site is built: the published boards, every node's frame and size on them, and the themes a
+* visitor can flip to. So the build serves design/.dist to itself on a loopback port, compiles every
+* (frame, theme, size) against the PUBLISHED document - the one visitors get, not the dev one - with
+* the same certification as the dev server (bake.ts), ships the certified textures under
+* design/.dist/__mv/bakes/<build>/ and writes one static index the shell reads instead of asking a
+* server. Anything the compiler refuses is simply absent from the index: that frame sleeps with the
+* pause alone, glass live, as today. No Chrome on the build machine: the note is printed and the
+* site ships without textures.
+*/
+/** The shell's plain key for an ask (sleep.ts keyOf): frame|theme|w|h. */
+const indexKey = (a) => `${a.frame}|${a.theme}|${Math.round(a.w)}|${Math.round(a.h)}`;
+/** Every (frame, theme, size) a visitor can rest on: each published board's nodes, sized the way
+*  the shell sizes them (the node's own size, else the frame's default), each theme; the published
+*  `all-scenes` board shows every frame at its default size. Sizes are rounded first, then held to
+*  the compiler's limits: an oversize node is skipped, never clamped to a document of another size. */
+function publishedAsks(boards, themes, frames, viewports, allScenes = false) {
+	const byId = new Map(frames.map((f) => [f.id, f]));
+	const seen = /* @__PURE__ */ new Map();
+	const add = (frame, w, h) => {
+		w = Math.round(w);
+		h = Math.round(h);
+		if (!(w >= 120) || !(h >= 80) || w > ASK_MAX.side || h > ASK_MAX.side || w * h > ASK_MAX.area) return;
+		for (const theme of themes.length ? themes : ["light"]) {
+			const ask = {
+				frame,
+				theme,
+				w,
+				h
+			};
+			seen.set(indexKey(ask), ask);
+		}
+	};
+	const size = (f, n) => {
+		const nw = n && typeof n.w === "number" && n.w > 0 ? n.w : void 0, nh = n && typeof n.h === "number" && n.h > 0 ? n.h : void 0;
+		const p = planShot(f, viewports, {});
+		if (p.fullHeight && !nh) return null;
+		return {
+			w: nw ?? p.width,
+			h: nh ?? p.initialHeight
+		};
+	};
+	for (const b of Object.values(boards)) for (const n of b?.nodes ?? []) {
+		const f = typeof n?.frame === "string" ? byId.get(n.frame) : void 0;
+		const s = f && size(f, n);
+		if (s) add(f.id, s.w, s.h);
+	}
+	if (allScenes) for (const f of frames) {
+		const s = size(f);
+		if (s) add(f.id, s.w, s.h);
+	}
+	return [...seen.values()];
+}
+/** The index: only answers that certified at least one texture, and only their certified targets
+*  (a refused target's selector ships nothing); everything else is absent. */
+function publishedIndex(gen, answers) {
+	const out = {
+		gen,
+		answers: {}
+	};
+	for (const a of answers) {
+		if (!a.ok) continue;
+		const targets = a.targets.filter((t) => t.verified && t.texture);
+		if (targets.length) out.answers[indexKey(a)] = {
+			ok: true,
+			targets
+		};
+	}
+	return out;
+}
+/** Serve `dir` on a loopback port the way `marver serve` does (extensionless = index.html). */
+function serveDir(dir) {
+	const real = realpathSync(dir);
+	const server = createServer((req, res) => {
+		let path = "";
+		try {
+			path = decodeURIComponent(new URL(req.url ?? "/", "http://x").pathname);
+		} catch {
+			res.statusCode = 400;
+			return res.end();
+		}
+		if (path.endsWith("/")) path += "index.html";
+		let file = resolve(dir, path.slice(1));
+		try {
+			const r = realpathSync(file);
+			if (relative(real, r).startsWith("..") || isAbsolute(relative(real, r))) throw 0;
+			file = r;
+		} catch {
+			file = join(dir, "index.html");
+		}
+		if (!extname(file)) file = join(dir, "index.html");
+		try {
+			const c = readFileSync(file);
+			res.setHeader("content-type", MIME[extname(file)] ?? "application/octet-stream");
+			res.end(c);
+		} catch {
+			res.statusCode = 404;
+			res.end();
+		}
+	});
+	return new Promise((ok) => server.listen(0, "127.0.0.1", () => {
+		ok({
+			origin: `http://127.0.0.1:${server.address().port}`,
+			close: () => server.close()
+		});
+	}));
+}
+/** Compile the published boards' frames against the built site and ship the textures with it.
+*  Returns null when there is no Chrome to compile with. */
+async function bakePublished(opts) {
+	const { root, outDir, gen, boards, themes, frames, viewports, allScenes, urlFor, log } = opts;
+	if (!findChrome()) return null;
+	const t0 = Date.now();
+	const asks = publishedAsks(boards, themes, frames, viewports, allScenes).filter((a) => urlFor(a.frame, a.theme));
+	const stats = {
+		asked: asks.length,
+		asleep: 0,
+		live: 0,
+		plain: 0,
+		bytes: 0,
+		ms: 0
+	};
+	if (!asks.length) return stats;
+	const cache = join(root, "design", ".local", "bakes", String(gen));
+	const site = await serveDir(outDir);
+	let answers;
+	try {
+		answers = await bakeBatch({
+			root,
+			gen,
+			asks,
+			urlBase: "/__mv/bakes",
+			urlFor: (a) => site.origin + urlFor(a.frame, a.theme)
+		});
+		const index = publishedIndex(gen, answers);
+		const to = join(outDir, "__mv", "bakes");
+		rmSync(to, {
+			recursive: true,
+			force: true
+		});
+		const grammar = new RegExp(`^/__mv/bakes/${gen}/[0-9a-f]{16}/\\d+\\.png$`);
+		const realCache = (() => {
+			try {
+				return realpathSync(cache);
+			} catch {
+				return null;
+			}
+		})();
+		for (const [key, a] of Object.entries(index.answers)) {
+			const files = [];
+			if (!(realCache !== null && a.targets.every((t) => {
+				if (!grammar.test(t.texture)) return false;
+				const from = join(root, "design", ".local", "bakes", t.texture.replace(/^\/__mv\/bakes\//, ""));
+				try {
+					if (!lstatSync(from).isFile()) return false;
+					if (!realpathSync(from).startsWith(realCache + "/")) return false;
+				} catch {
+					return false;
+				}
+				files.push([from, join(outDir, t.texture.slice(1))]);
+				return true;
+			}))) {
+				delete index.answers[key];
+				continue;
+			}
+			for (const [from, dest] of files) {
+				mkdirSync(join(dest, ".."), { recursive: true });
+				copyFileSync(from, dest);
+				stats.bytes += statSync(dest).size;
+			}
+		}
+		mkdirSync(join(to, String(gen)), { recursive: true });
+		writeFileSync(join(to, String(gen), "index.json"), JSON.stringify(index));
+		for (const a of answers) {
+			if (!a.ok) {
+				stats.live++;
+				log?.(`  bake: ${a.frame} ${a.theme} ${a.w}x${a.h} - stays live: ${a.error}`);
+				continue;
+			}
+			if (!(a.effects ?? a.targets.length)) {
+				stats.plain++;
+				continue;
+			}
+			if (!a.targets.length) {
+				stats.live++;
+				log?.(`  bake: ${a.frame} ${a.theme} ${a.w}x${a.h} - ${a.effects} effects, all nested, stay live`);
+				continue;
+			}
+			const shipped = index.answers[indexKey(a)]?.targets.length ?? 0;
+			if (shipped) stats.asleep++;
+			else stats.live++;
+			log?.(`  bake: ${a.frame} ${a.theme} ${a.w}x${a.h} - ${a.targets.length} effects, ${a.targets.length - shipped} stay live, ${a.ms} ms`);
+		}
+	} finally {
+		site.close();
+		rmSync(cache, {
+			recursive: true,
+			force: true
+		});
+	}
+	stats.ms = Date.now() - t0;
+	return stats;
+}
+//#endregion
+export { bakePublished };

package/dist/{serve-Bcwfpvhl.mjs → serve-z5qtj_wJ.mjs}

@@ -1,4 +1,4 @@
-import { n as NAME } from "./cli.mjs";
+import { r as NAME } from "./cli.mjs";
 import { t as secureSuffix } from "./secure-cookie-_K1Hsx8H.mjs";
 import { existsSync, readFileSync, readdirSync, realpathSync } from "node:fs";
 import { extname, isAbsolute, join, relative, resolve } from "node:path";
@@ -147,7 +147,7 @@ async function serve(root, portFlag) {
 			console.error(`[${NAME}] MARVER_ID_ISSUER is set but MARVER_PUBLIC_ORIGIN is not.\n  Every assertion is bound to this canvas's exact origin, and it cannot be\n  inferred from request headers - a proxy can make any request look local.\n  Set it to the origin people actually reach this canvas on:\n    MARVER_PUBLIC_ORIGIN=https://canvas.example.com\n    MARVER_PUBLIC_ORIGIN=http://localhost:${portFlag ?? (Number(process.env.PORT) || 4199)} (development)`);
 			process.exit(1);
 		}
-		const { marverIdHandler } = await import("./marver-id-gate-D6By7XHj.mjs");
+		const { marverIdHandler } = await import("./marver-id-gate-B_idGdHm.mjs");
 		const { dataDir } = await import("./comments-DZyobpxG.mjs").then((n) => n.n);
 		const canvasName = humanName(meta.name);
 		const { ceilingsFromRights } = await import("./auth-DdUKeVKt.mjs").then((n) => n.R);
@@ -659,4 +659,4 @@ ${collabOn ? `
 }
 const esc = (s) => s.replace(/[&<>"']/g, (c) => `&#${c.charCodeAt(0)};`);
 //#endregion
-export { serve, poweredByUrl as t };
+export { MIME, serve, poweredByUrl as t };

package/dist/{share-Gqo_Ygqw.mjs → share--bdSc4G5.mjs}

@@ -1,4 +1,4 @@
-import { n as NAME } from "./cli.mjs";
+import { r as NAME } from "./cli.mjs";
 import { M as resolveAccess } from "./auth-DdUKeVKt.mjs";
 import { i as loadCollab } from "./sync-BZaCWqK-.mjs";
 //#region src/cli/share.ts

package/dist/{shot-BzQ0PXKH.mjs → shot-BFEuYbaz.mjs}

@@ -1,4 +1,4 @@
-import { n as NAME } from "./cli.mjs";
+import { r as NAME } from "./cli.mjs";
 import { readDevInfo } from "./work-CLrmY-vQ.mjs";
 //#region src/cli/shot.ts
 /**

package/dist/{shot-DlmTO8AF.mjs → shot-iicees2e.mjs}

@@ -1,4 +1,4 @@
-import { a as slideSize, i as ROUTE } from "./cli.mjs";
+import { a as ROUTE, o as slideSize } from "./cli.mjs";
 import { copyFileSync, existsSync, mkdirSync, mkdtempSync, readFileSync, readdirSync, renameSync, rmSync, statSync, writeFileSync } from "node:fs";
 import { join } from "node:path";
 import { randomBytes } from "node:crypto";
@@ -36,12 +36,19 @@ function findChrome() {
 }
 /** Profile directories marver has ever created (the sweep in shot.ts looks for both). */
 const PROFILE_PREFIXES = ["mv-shot-", "mv-browser-"];
+/** What a Linux container needs and a desktop must not get: Chrome refuses to run as root with its
+*  sandbox on (a build image runs as root), and a container's /dev/shm is too small for its tiles. */
+function containerFlags(platform, uid) {
+	return platform === "linux" && uid === 0 ? ["--no-sandbox", "--disable-dev-shm-usage"] : [];
+}
 const FLAGS = [
-	"--headless=new",
+	...process.env.MV_CHROME_HEADED ? [] : ["--headless=new"],
 	"--hide-scrollbars",
 	"--no-first-run",
 	"--no-default-browser-check",
-	"--disable-extensions"
+	"--disable-extensions",
+	...containerFlags(process.platform, process.getuid?.()),
+	...process.env.MV_CHROME_FLAGS?.split(" ").filter(Boolean) ?? []
 ];
 const HANDSHAKE_MS = 15e3;
 const MAX_MESSAGE = 1 << 30;
@@ -50,9 +57,9 @@ const MAX_MESSAGE = 1 << 30;
 *  and concatenated ONCE per delimiter (a screenshot answer is many chunks; re-concatenating
 *  the remainder per chunk would be quadratic). The size guard runs BEFORE a segment is held. */
 var Frames = class {
-	max;
 	chunks = [];
 	held = 0;
+	max;
 	constructor(max = MAX_MESSAGE) {
 		this.max = max;
 	}
@@ -330,8 +337,8 @@ async function shootFrame(opts) {
 	};
 	const plan = planShot(frame, viewports, size);
 	if (frame.kind !== "html") try {
-		const { scanAssetRefs } = await import("./build-D_g53Bp2.mjs");
-		const { ensurePoster } = await import("./poster-BEjUcQP3.mjs");
+		const { scanAssetRefs } = await import("./build-ER_7T6Cw.mjs");
+		const { ensurePoster } = await import("./poster-CIuz_PwH.mjs");
 		const refs = scanAssetRefs(readFileSync(join(root, frame.file), "utf8"), frame.file);
 		for (const r of refs) if (r.endsWith(".poster.png")) await ensurePoster(join(root, "design", "assets"), r.slice(0, -11));
 	} catch {}
@@ -923,4 +930,4 @@ async function captureIn({ url, width, height, out, fullHeight = false, timeoutM
 	}
 }
 //#endregion
-export { capture, resolveFrames, shootBatch, shootFrame, sweepGhosts, findChrome as t };
+export { AREA, SURFACE, capture, planShot, pool, resolveFrames, shootBatch, shootFrame, shotConcurrency, sweepGhosts, findChrome as t, withBrowser };

package/dist/{work-lzC-lPY0.mjs → work-0YopuMt9.mjs}

@@ -1,4 +1,4 @@
-import { n as NAME } from "./cli.mjs";
+import { r as NAME } from "./cli.mjs";
 import { WORK_TTL_DEFAULT, WORK_TTL_MAX, readDevInfo } from "./work-CLrmY-vQ.mjs";
 //#region src/cli/work.ts
 /**

package/docs/publish.md

@@ -36,6 +36,20 @@ only around published boards (a folder with nothing published never reaches the
 and `title`s and `description`s ship only for published things - the project's, the
 published boards', their folders', scenes' and frames'.
 
+**Glass at rest.** `marver build` compiles the textures a hi-fi frame rests under (the same
+certified compile as the dev canvas, spec 16) against the site it just built - every published
+node, at its size on its board, in every theme - and ships them with it under `__mv/bakes/`. A
+visitor's browser reads one static index; the shell is the same. Whatever the compiler cannot
+certify (glass inside glass, blend modes, a frame whose paint is not a function of its URL) rests
+with its glass live, as before. The compile needs Chrome on the machine that builds: without one
+the build says so and ships without textures; `--no-textures` (or `MARVER_NO_TEXTURES=1` in CI)
+skips it on purpose. A visitor who resizes a frame to a device preset sees it live at that size
+(no texture was compiled for it). The textures are certified as the build machine renders the
+frame, so bundle the fonts your frames use (`@fontsource-*`, or files under `public/`): a font
+that exists only on a designer's laptop renders differently in a build container, and the
+visitor's browser then refuses those textures and rests the frame live. A republish mints new
+textures; a tab already open keeps the old shell and rests its glass live until it reloads.
+
 ## Who can open your canvas
 
 Three choices, and the canvas is public until you make one.
@@ -246,10 +260,13 @@ containerised canvas reports as one campaign.
 
 ## Railway (the one-pager)
 
-1. Push your repo to GitHub and create a Railway service from it.
-2. Build command: `npm ci && npx marver build`
-3. Start command: `npx marver serve`  (Railway's `$PORT` is picked up automatically)
-4. Variables: `MARVER_PASSWORD=<your password>`
+1. Push your repo to GitHub with the Dockerfile below at its root, and create a Railway
+   service from it (Railway detects the Dockerfile; a Nixpacks build has no browser and ships
+   the hi-fi frames with live glass).
+2. Start command: `npx marver serve`  (Railway's `$PORT` is picked up automatically)
+3. Variables: `MARVER_PASSWORD=<your password>`, or the identity gate from the table above.
+4. Read the build log: `textures: N frame views asleep under certified glass ...` is the line
+   that says the glass compiled; `textures: none - no Chrome` means the image has no browser.
 
 Deploy. The repo itself is the deployable - nothing to export, nothing to sync.
 
@@ -257,14 +274,19 @@ Deploy. The repo itself is the deployable - nothing to export, nothing to sync.
 
 ```dockerfile
 FROM node:22-slim
+RUN apt-get update && apt-get install -y --no-install-recommends chromium fonts-liberation \
+  && rm -rf /var/lib/apt/lists/*          # the browser `marver build` compiles the glass textures with
 WORKDIR /app                      # set share.name in design/config.ts - the fallback name is this directory
 COPY . .
-RUN npm ci && npx marver build
+RUN npm ci && npx marver build    # as root in a container: marver adds Chrome's --no-sandbox itself
 ENV PORT=8080
 EXPOSE 8080
 CMD ["npx", "marver", "serve"]
 ```
 
+Without a browser in the image the build still succeeds, says so, and ships every feature but the
+textures; `npx marver build --no-textures` skips the compile on purpose.
+
 ## Cloudflare Pages + Access (email/domain allowlists)
 
 For teams that want per-email policies instead of one password: build in CI

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@marver-design/marver",
-  "version": "0.17.0",
+  "version": "0.18.0",
   "description": "The agent-native design canvas. A design/ folder, one command, a canvas of live frames built from your repo's real components - comment @marver and your own coding agent does the work. The tool ships no AI.",
   "type": "module",
   "private": false,

package/src/client/frame-host/bridge.js

@@ -12,20 +12,15 @@ const isHtmlFrame = new URL(import.meta.url).searchParams.get('html') === '1'
 const post = (msg) => { if (window.parent !== window) window.parent.postMessage(msg, location.origin) }
 const id = new URLSearchParams(location.search).get('id') ?? location.pathname
 
-// The shell serialises this frame's DOM (same origin) for the lean facade. Open shadow roots
-// are walkable, but a CLOSED root is invisible after the fact - flag it at creation so the serialiser
-// degrades the frame (keeps it live) instead of shipping a lean copy missing its shadow content.
-const _attachShadow = Element.prototype.attachShadow
-if (_attachShadow) Element.prototype.attachShadow = function (init) {
-  if (init && init.mode === 'closed') window.__mvClosedShadow = true
-  return _attachShadow.call(this, init)
-}
-
 // theme lands as BOTH signals: [data-theme] plus the `dark` class Tailwind/shadcn key on
 const setTheme = (theme) => {
   document.documentElement.dataset.theme = theme
   document.documentElement.classList.toggle('dark', theme === 'dark')
+  // the shell sleeps a frame only under the theme it has actually painted: report it, two frames later
+  requestAnimationFrame(() => requestAnimationFrame(() => post({ type: 'sh:theme-applied', id, theme })))
 }
+// the theme this document booted with (the URL's) counts as applied
+requestAnimationFrame(() => requestAnimationFrame(() => post({ type: 'sh:theme-applied', id, theme: new URLSearchParams(location.search).get('theme') ?? 'light' })))
 
 if (isHtmlFrame) {
   const theme = new URLSearchParams(location.search).get('theme')