@open-slide/core 1.7.0 → 1.9.0

package/dist/{config-PwUHqZ_X.js → config-BAZeaz2P.js}

@@ -3,7 +3,7 @@ import fs from "node:fs/promises";
 import path from "node:path";
 import { fileURLToPath } from "node:url";
 import { randomUUID } from "node:crypto";
-import { existsSync } from "node:fs";
+import { existsSync, readFileSync } from "node:fs";
 import tailwindcss from "@tailwindcss/vite";
 import react from "@vitejs/plugin-react";
 import * as t$4 from "@babel/types";
@@ -1157,21 +1157,20 @@ function findReferencedAssets(source, assetPaths) {
 	if (!ast) return referenced;
 	const wanted = new Set(assetPaths);
 	const identToPath = new Map();
+	const importLocals = new Set();
 	for (const imp of findImports$1(ast)) {
 		if (!imp.defaultIdent) continue;
-		if (wanted.has(imp.source)) identToPath.set(imp.defaultIdent, imp.source);
+		if (!wanted.has(imp.source)) continue;
+		identToPath.set(imp.defaultIdent, imp.source);
+		for (const spec of imp.node.specifiers) if (t$3.isImportDefaultSpecifier(spec) && spec.local.name === imp.defaultIdent) importLocals.add(spec.local);
 	}
 	if (identToPath.size === 0) return referenced;
-	walkJsx(ast, (n) => {
-		if (!t$3.isJSXElement(n)) return;
-		const opening = n.openingElement;
-		if (!t$3.isJSXIdentifier(opening.name) || opening.name.name !== "img") return;
-		const src = findJsxAttr(opening, "src");
-		if (!src?.value || !t$3.isJSXExpressionContainer(src.value)) return;
-		const expr = src.value.expression;
-		if (!t$3.isIdentifier(expr)) return;
-		const p = identToPath.get(expr.name);
-		if (p) referenced.add(p);
+	walkAll(ast, (n) => {
+		if (!t$3.isIdentifier(n)) return;
+		const p = identToPath.get(n.name);
+		if (!p) return;
+		if (importLocals.has(n)) return;
+		referenced.add(p);
 	});
 	return referenced;
 }
@@ -1245,7 +1244,7 @@ function applyRevertAsset(source, assetPath) {
 
 //#endregion
 //#region src/editing/slide-ops.ts
-const SLIDE_ID_RE$3 = /^[a-z0-9_-]+$/i;
+const SLIDE_ID_RE = /^[a-z0-9_-]+$/i;
 function validateSlideName(v) {
 	if (typeof v !== "string") return null;
 	const trimmed = v.trim();
@@ -1309,7 +1308,7 @@ function readMetaTitleInSource(source) {
 	return { kind: "missing" };
 }
 async function rmSlideDir(slidesRoot, slideId) {
-	if (!SLIDE_ID_RE$3.test(slideId)) return false;
+	if (!SLIDE_ID_RE.test(slideId)) return false;
 	const dir = path.resolve(slidesRoot, slideId);
 	if (!dir.startsWith(slidesRoot + path.sep)) return false;
 	try {
@@ -1323,7 +1322,7 @@ async function rmSlideDir(slidesRoot, slideId) {
 	}
 }
 async function duplicateSlideDir(slidesRoot, slideId, desiredId) {
-	if (!SLIDE_ID_RE$3.test(slideId)) return {
+	if (!SLIDE_ID_RE.test(slideId)) return {
 		ok: false,
 		status: 400,
 		error: "invalid slideId"
@@ -1346,7 +1345,7 @@ async function duplicateSlideDir(slidesRoot, slideId, desiredId) {
 	}
 	let newId;
 	if (desiredId !== void 0) {
-		if (!SLIDE_ID_RE$3.test(desiredId)) return {
+		if (!SLIDE_ID_RE.test(desiredId)) return {
 			ok: false,
 			status: 400,
 			error: "invalid newId"
@@ -1434,7 +1433,7 @@ async function duplicateSlideDir(slidesRoot, slideId, desiredId) {
 	}
 }
 function resolveSlideEntry(slidesRoot, slideId) {
-	if (!SLIDE_ID_RE$3.test(slideId)) return null;
+	if (!SLIDE_ID_RE.test(slideId)) return null;
 	const dir = path.resolve(slidesRoot, slideId);
 	if (!dir.startsWith(slidesRoot + path.sep)) return null;
 	return path.join(dir, "index.tsx");
@@ -1771,7 +1770,7 @@ function validateAssetName(v) {
 	return trimmed;
 }
 function resolveAssetsDir(slidesRoot, slideId) {
-	if (!SLIDE_ID_RE$3.test(slideId)) return null;
+	if (!SLIDE_ID_RE.test(slideId)) return null;
 	const slideDir = path.resolve(slidesRoot, slideId);
 	if (!slideDir.startsWith(slidesRoot + path.sep)) return null;
 	const assetsDir = path.resolve(slideDir, "assets");
@@ -1884,10 +1883,11 @@ function makeContext(opts) {
 		slidesDir,
 		slidesRoot,
 		globalAssetsRoot,
-		manifestPath
+		manifestPath,
+		coreVersion: opts.coreVersion
 	};
 }
-async function readBody$2(req) {
+async function readBody(req) {
 	return await new Promise((resolve, reject) => {
 		const chunks = [];
 		req.on("data", (c) => chunks.push(c));
@@ -1903,17 +1903,21 @@ async function readBody$2(req) {
 		req.on("error", reject);
 	});
 }
-function json$2(res, status, body) {
+function json(res, status, body) {
 	res.statusCode = status;
 	res.setHeader("content-type", "application/json");
 	res.end(JSON.stringify(body));
 }
-function resolveSlideEntryPath(ctx, slideId) {
-	if (!SLIDE_ID_RE$3.test(slideId)) return null;
-	const full = path.resolve(ctx.slidesRoot, slideId, "index.tsx");
-	if (!full.startsWith(ctx.slidesRoot + path.sep)) return null;
+function resolveSlidePath(userCwd, slidesDir, slideId) {
+	if (!SLIDE_ID_RE.test(slideId)) return null;
+	const slidesRoot = path.resolve(userCwd, slidesDir);
+	const full = path.resolve(slidesRoot, slideId, "index.tsx");
+	if (!full.startsWith(slidesRoot + path.sep)) return null;
 	return full;
 }
+function resolveSlideEntryPath(ctx, slideId) {
+	return resolveSlidePath(ctx.userCwd, ctx.slidesDir, slideId);
+}
 
 //#endregion
 //#region src/vite/routes/assets.ts
@@ -1928,18 +1932,18 @@ function registerAssetRoutes(server, ctx) {
 			if (usagesMatch && method === "GET") {
 				const scope = usagesMatch[1];
 				const filename = decodeURIComponent(usagesMatch[2]);
-				if (!validateAssetName(filename)) return json$2(res, 400, { error: "invalid path" });
+				if (!validateAssetName(filename)) return json(res, 400, { error: "invalid path" });
 				const isGlobal = scope === GLOBAL_SCOPE;
 				const assetPath = isGlobal ? `@assets/${filename}` : `./assets/${filename}`;
 				let slideIds;
 				if (isGlobal) try {
 					const entries = await fs.readdir(ctx.slidesRoot, { withFileTypes: true });
-					slideIds = entries.filter((e) => e.isDirectory() && SLIDE_ID_RE$3.test(e.name)).map((e) => e.name);
+					slideIds = entries.filter((e) => e.isDirectory() && SLIDE_ID_RE.test(e.name)).map((e) => e.name);
 				} catch {
 					slideIds = [];
 				}
 				else {
-					if (!SLIDE_ID_RE$3.test(scope)) return json$2(res, 400, { error: "invalid slideId" });
+					if (!SLIDE_ID_RE.test(scope)) return json(res, 400, { error: "invalid slideId" });
 					slideIds = [scope];
 				}
 				const usages = [];
@@ -1962,7 +1966,7 @@ function registerAssetRoutes(server, ctx) {
 						totalCount += count;
 					}
 				}
-				return json$2(res, 200, {
+				return json(res, 200, {
 					usages,
 					totalCount
 				});
@@ -1970,12 +1974,12 @@ function registerAssetRoutes(server, ctx) {
 			if (listMatch && method === "GET") {
 				const slideId = listMatch[1];
 				const scopedDir = resolveScopedAssetsDir(ctx.slidesRoot, ctx.globalAssetsRoot, slideId);
-				if (!scopedDir) return json$2(res, 400, { error: "invalid slideId" });
+				if (!scopedDir) return json(res, 400, { error: "invalid slideId" });
 				let entries;
 				try {
 					entries = await fs.readdir(scopedDir);
 				} catch (err) {
-					if (err.code === "ENOENT") return json$2(res, 200, { assets: [] });
+					if (err.code === "ENOENT") return json(res, 200, { assets: [] });
 					throw err;
 				}
 				const assets = [];
@@ -1998,11 +2002,11 @@ function registerAssetRoutes(server, ctx) {
 					let scanIds;
 					if (isGlobal) try {
 						const dirs = await fs.readdir(ctx.slidesRoot, { withFileTypes: true });
-						scanIds = dirs.filter((e) => e.isDirectory() && SLIDE_ID_RE$3.test(e.name)).map((e) => e.name);
+						scanIds = dirs.filter((e) => e.isDirectory() && SLIDE_ID_RE.test(e.name)).map((e) => e.name);
 					} catch {
 						scanIds = [];
 					}
-					else scanIds = SLIDE_ID_RE$3.test(slideId) ? [slideId] : [];
+					else scanIds = SLIDE_ID_RE.test(slideId) ? [slideId] : [];
 					const paths = assets.map((a) => isGlobal ? `@assets/${a.name}` : `./assets/${a.name}`);
 					const pathToAsset = new Map(paths.map((p, i) => [p, assets[i]]));
 					for (const sid of scanIds) {
@@ -2020,13 +2024,13 @@ function registerAssetRoutes(server, ctx) {
 						}
 					}
 				}
-				return json$2(res, 200, { assets });
+				return json(res, 200, { assets });
 			}
 			if (fileMatch) {
 				const slideId = fileMatch[1];
 				const filename = decodeURIComponent(fileMatch[2]);
 				const file = resolveScopedAssetFile(ctx.slidesRoot, ctx.globalAssetsRoot, slideId, filename);
-				if (!file) return json$2(res, 400, { error: "invalid path" });
+				if (!file) return json(res, 400, { error: "invalid path" });
 				if (method === "GET") try {
 					const buf = await fs.readFile(file);
 					res.statusCode = 200;
@@ -2035,22 +2039,22 @@ function registerAssetRoutes(server, ctx) {
 					res.end(buf);
 					return;
 				} catch (err) {
-					if (err.code === "ENOENT") return json$2(res, 404, { error: "asset not found" });
+					if (err.code === "ENOENT") return json(res, 404, { error: "asset not found" });
 					throw err;
 				}
 				if (method === "POST") {
 					const requestCheck = validateMutationRequest(req);
-					if (!requestCheck.ok) return json$2(res, requestCheck.status, { error: requestCheck.error });
+					if (!requestCheck.ok) return json(res, requestCheck.status, { error: requestCheck.error });
 					const overwrite = url.searchParams.get("overwrite") === "1";
 					const lenHeader = req.headers["content-length"];
 					const len = typeof lenHeader === "string" ? Number(lenHeader) : NaN;
-					if (Number.isFinite(len) && len > ASSET_MAX_BYTES) return json$2(res, 413, { error: "file too large" });
+					if (Number.isFinite(len) && len > ASSET_MAX_BYTES) return json(res, 413, { error: "file too large" });
 					if (!overwrite) try {
 						await fs.access(file);
-						return json$2(res, 409, { error: "asset exists" });
+						return json(res, 409, { error: "asset exists" });
 					} catch {}
 					const scopedDir = resolveScopedAssetsDir(ctx.slidesRoot, ctx.globalAssetsRoot, slideId);
-					if (!scopedDir) return json$2(res, 400, { error: "invalid slideId" });
+					if (!scopedDir) return json(res, 400, { error: "invalid slideId" });
 					await fs.mkdir(scopedDir, { recursive: true });
 					const chunks = [];
 					let total = 0;
@@ -2068,9 +2072,9 @@ function registerAssetRoutes(server, ctx) {
 						req.on("end", () => resolve());
 						req.on("error", reject);
 					});
-					if (oversized) return json$2(res, 413, { error: "file too large" });
+					if (oversized) return json(res, 413, { error: "file too large" });
 					await fs.writeFile(file, Buffer.concat(chunks));
-					return json$2(res, 200, {
+					return json(res, 200, {
 						ok: true,
 						name: filename,
 						size: total,
@@ -2080,46 +2084,46 @@ function registerAssetRoutes(server, ctx) {
 				}
 				if (method === "PATCH") {
 					const requestCheck = validateMutationRequest(req, { requireJsonBody: true });
-					if (!requestCheck.ok) return json$2(res, requestCheck.status, { error: requestCheck.error });
-					const body = await readBody$2(req);
+					if (!requestCheck.ok) return json(res, requestCheck.status, { error: requestCheck.error });
+					const body = await readBody(req);
 					const target = validateAssetName(body.name);
-					if (!target) return json$2(res, 400, { error: "invalid name" });
-					if (target === filename) return json$2(res, 200, {
+					if (!target) return json(res, 400, { error: "invalid name" });
+					if (target === filename) return json(res, 200, {
 						ok: true,
 						name: filename
 					});
 					const dest = resolveScopedAssetFile(ctx.slidesRoot, ctx.globalAssetsRoot, slideId, target);
-					if (!dest) return json$2(res, 400, { error: "invalid name" });
+					if (!dest) return json(res, 400, { error: "invalid name" });
 					try {
 						await fs.access(dest);
-						return json$2(res, 409, { error: "target exists" });
+						return json(res, 409, { error: "target exists" });
 					} catch {}
 					try {
 						await fs.rename(file, dest);
 					} catch (err) {
-						if (err.code === "ENOENT") return json$2(res, 404, { error: "asset not found" });
+						if (err.code === "ENOENT") return json(res, 404, { error: "asset not found" });
 						throw err;
 					}
-					return json$2(res, 200, {
+					return json(res, 200, {
 						ok: true,
 						name: target
 					});
 				}
 				if (method === "DELETE") {
 					const requestCheck = validateMutationRequest(req);
-					if (!requestCheck.ok) return json$2(res, requestCheck.status, { error: requestCheck.error });
+					if (!requestCheck.ok) return json(res, requestCheck.status, { error: requestCheck.error });
 					try {
 						await fs.unlink(file);
 					} catch (err) {
-						if (err.code === "ENOENT") return json$2(res, 404, { error: "asset not found" });
+						if (err.code === "ENOENT") return json(res, 404, { error: "asset not found" });
 						throw err;
 					}
-					return json$2(res, 200, { ok: true });
+					return json(res, 200, { ok: true });
 				}
 			}
 			return next();
 		} catch (err) {
-			json$2(res, 500, { error: String(err.message ?? err) });
+			json(res, 500, { error: String(err.message ?? err) });
 		}
 	});
 }
@@ -2239,32 +2243,32 @@ function registerCommentRoutes(server, ctx) {
 			if (method === "GET" && url.pathname === "/") {
 				const slideId = url.searchParams.get("slideId") ?? "";
 				const file = resolveSlideEntryPath(ctx, slideId);
-				if (!file) return json$2(res, 400, { error: "invalid slideId" });
+				if (!file) return json(res, 400, { error: "invalid slideId" });
 				let source;
 				try {
 					source = await fs.readFile(file, "utf8");
 				} catch {
-					return json$2(res, 404, { error: "slide not found" });
+					return json(res, 404, { error: "slide not found" });
 				}
-				return json$2(res, 200, { comments: parseMarkers(source) });
+				return json(res, 200, { comments: parseMarkers(source) });
 			}
 			if (method === "POST" && url.pathname === "/add") {
 				const requestCheck = validateMutationRequest(req, { requireJsonBody: true });
-				if (!requestCheck.ok) return json$2(res, requestCheck.status, { error: requestCheck.error });
-				const body = await readBody$2(req);
+				if (!requestCheck.ok) return json(res, requestCheck.status, { error: requestCheck.error });
+				const body = await readBody(req);
 				const slideId = body.slideId ?? "";
 				const file = resolveSlideEntryPath(ctx, slideId);
-				if (!file) return json$2(res, 400, { error: "invalid slideId" });
-				if (!body.line || body.line < 1) return json$2(res, 400, { error: "invalid line" });
-				if (!body.text || typeof body.text !== "string") return json$2(res, 400, { error: "missing text" });
+				if (!file) return json(res, 400, { error: "invalid slideId" });
+				if (!body.line || body.line < 1) return json(res, 400, { error: "invalid line" });
+				if (!body.text || typeof body.text !== "string") return json(res, 400, { error: "missing text" });
 				let source;
 				try {
 					source = await fs.readFile(file, "utf8");
 				} catch {
-					return json$2(res, 404, { error: "slide not found" });
+					return json(res, 404, { error: "slide not found" });
 				}
 				const plan = findInsertion(source, body.line, body.column);
-				if (!plan) return json$2(res, 422, { error: `could not find a JSX container around line ${body.line}. Try clicking a different element.` });
+				if (!plan) return json(res, 422, { error: `could not find a JSX container around line ${body.line}. Try clicking a different element.` });
 				const id = newCommentId();
 				const ts = new Date().toISOString();
 				const payload = b64urlEncode(JSON.stringify({
@@ -2275,36 +2279,36 @@ function registerCommentRoutes(server, ctx) {
 				const next$1 = source.slice(0, plan.offset) + marker + source.slice(plan.offset);
 				await fs.writeFile(file, next$1, "utf8");
 				const markerLine = offsetToLine(next$1, plan.offset + 1);
-				return json$2(res, 200, {
+				return json(res, 200, {
 					id,
 					line: markerLine
 				});
 			}
 			if (method === "DELETE" && url.pathname.startsWith("/")) {
 				const requestCheck = validateMutationRequest(req);
-				if (!requestCheck.ok) return json$2(res, requestCheck.status, { error: requestCheck.error });
+				if (!requestCheck.ok) return json(res, requestCheck.status, { error: requestCheck.error });
 				const id = url.pathname.slice(1);
-				if (!/^c-[a-f0-9]+$/.test(id)) return json$2(res, 400, { error: "invalid id" });
+				if (!/^c-[a-f0-9]+$/.test(id)) return json(res, 400, { error: "invalid id" });
 				const slideId = url.searchParams.get("slideId") ?? "";
 				const file = resolveSlideEntryPath(ctx, slideId);
-				if (!file) return json$2(res, 400, { error: "invalid slideId" });
+				if (!file) return json(res, 400, { error: "invalid slideId" });
 				let source;
 				try {
 					source = await fs.readFile(file, "utf8");
 				} catch {
-					return json$2(res, 404, { error: "slide not found" });
+					return json(res, 404, { error: "slide not found" });
 				}
 				const lines = source.split("\n");
 				const idRe = markerDeleteRegex(id);
 				const hit = lines.findIndex((l) => idRe.test(l));
-				if (hit === -1) return json$2(res, 404, { error: "marker not found" });
+				if (hit === -1) return json(res, 404, { error: "marker not found" });
 				lines.splice(hit, 1);
 				await fs.writeFile(file, lines.join("\n"), "utf8");
-				return json$2(res, 200, { ok: true });
+				return json(res, 200, { ok: true });
 			}
 			next();
 		} catch (err) {
-			json$2(res, 500, { error: String(err.message ?? err) });
+			json(res, 500, { error: String(err.message ?? err) });
 		}
 	});
 }
@@ -2317,64 +2321,64 @@ function registerEditRoutes(server, ctx) {
 		const method = req.method ?? "GET";
 		if (method !== "POST") return next();
 		const requestCheck = validateMutationRequest(req, { requireJsonBody: true });
-		if (!requestCheck.ok) return json$2(res, requestCheck.status, { error: requestCheck.error });
+		if (!requestCheck.ok) return json(res, requestCheck.status, { error: requestCheck.error });
 		try {
 			if (url.pathname === "/") {
-				const body = await readBody$2(req);
+				const body = await readBody(req);
 				const slideId = body.slideId ?? "";
 				const file = resolveSlideEntryPath(ctx, slideId);
-				if (!file) return json$2(res, 400, { error: "invalid slideId" });
-				if (!body.line || body.line < 1) return json$2(res, 400, { error: "invalid line" });
-				if (!Array.isArray(body.ops)) return json$2(res, 400, { error: "missing ops" });
+				if (!file) return json(res, 400, { error: "invalid slideId" });
+				if (!body.line || body.line < 1) return json(res, 400, { error: "invalid line" });
+				if (!Array.isArray(body.ops)) return json(res, 400, { error: "missing ops" });
 				let source;
 				try {
 					source = await fs.readFile(file, "utf8");
 				} catch {
-					return json$2(res, 404, { error: "slide not found" });
+					return json(res, 404, { error: "slide not found" });
 				}
 				const result = applyEdit(source, body.line, body.column ?? 0, body.ops);
-				if (!result.ok) return json$2(res, result.status, { error: result.error });
+				if (!result.ok) return json(res, result.status, { error: result.error });
 				const changed = result.source !== source;
 				if (changed) await fs.writeFile(file, result.source, "utf8");
-				return json$2(res, 200, {
+				return json(res, 200, {
 					ok: true,
 					changed
 				});
 			}
 			if (url.pathname === "/revert-asset") {
-				const body = await readBody$2(req);
+				const body = await readBody(req);
 				const slideId = body.slideId ?? "";
 				const assetPath = body.assetPath;
 				const file = resolveSlideEntryPath(ctx, slideId);
-				if (!file) return json$2(res, 400, { error: "invalid slideId" });
-				if (typeof assetPath !== "string" || !assetPath) return json$2(res, 400, { error: "missing assetPath" });
-				if (!assetPath.startsWith("./assets/") && !assetPath.startsWith("@assets/")) return json$2(res, 400, { error: "asset path must start with ./assets/ or @assets/" });
+				if (!file) return json(res, 400, { error: "invalid slideId" });
+				if (typeof assetPath !== "string" || !assetPath) return json(res, 400, { error: "missing assetPath" });
+				if (!assetPath.startsWith("./assets/") && !assetPath.startsWith("@assets/")) return json(res, 400, { error: "asset path must start with ./assets/ or @assets/" });
 				let source;
 				try {
 					source = await fs.readFile(file, "utf8");
 				} catch {
-					return json$2(res, 404, { error: "slide not found" });
+					return json(res, 404, { error: "slide not found" });
 				}
 				const result = applyRevertAsset(source, assetPath);
-				if (!result.ok) return json$2(res, result.status, { error: result.error });
+				if (!result.ok) return json(res, result.status, { error: result.error });
 				const changed = result.source !== source;
 				if (changed) await fs.writeFile(file, result.source, "utf8");
-				return json$2(res, 200, {
+				return json(res, 200, {
 					ok: true,
 					changed
 				});
 			}
 			if (url.pathname === "/batch") {
-				const body = await readBody$2(req);
+				const body = await readBody(req);
 				const slideId = body.slideId ?? "";
 				const file = resolveSlideEntryPath(ctx, slideId);
-				if (!file) return json$2(res, 400, { error: "invalid slideId" });
-				if (!Array.isArray(body.edits)) return json$2(res, 400, { error: "missing edits" });
+				if (!file) return json(res, 400, { error: "invalid slideId" });
+				if (!Array.isArray(body.edits)) return json(res, 400, { error: "missing edits" });
 				let source;
 				try {
 					source = await fs.readFile(file, "utf8");
 				} catch {
-					return json$2(res, 404, { error: "slide not found" });
+					return json(res, 404, { error: "slide not found" });
 				}
 				const original = source;
 				const results = [];
@@ -2397,7 +2401,7 @@ function registerEditRoutes(server, ctx) {
 				}
 				const changed = source !== original;
 				if (changed) await fs.writeFile(file, source, "utf8");
-				return json$2(res, 200, {
+				return json(res, 200, {
 					ok: true,
 					changed,
 					results
@@ -2405,7 +2409,7 @@ function registerEditRoutes(server, ctx) {
 			}
 			return next();
 		} catch (err) {
-			json$2(res, 500, { error: String(err.message ?? err) });
+			json(res, 500, { error: String(err.message ?? err) });
 		}
 	});
 }
@@ -2446,6 +2450,19 @@ function validateName(v) {
 	if (trimmed.length < 1 || trimmed.length > 40) return null;
 	return trimmed;
 }
+function validateReorder(v, current) {
+	if (!Array.isArray(v) || v.length !== current.length) return null;
+	const known = new Set(current.map((f) => f.id));
+	const seen = new Set();
+	const out = [];
+	for (const id of v) {
+		if (typeof id !== "string" || !FOLDER_ID_RE.test(id)) return null;
+		if (!known.has(id) || seen.has(id)) return null;
+		seen.add(id);
+		out.push(id);
+	}
+	return out;
+}
 function validateIcon(v) {
 	if (!v || typeof v !== "object") return null;
 	const icon = v;
@@ -2476,16 +2493,16 @@ function registerFolderRoutes(server, ctx) {
 		try {
 			if (method === "GET" && url.pathname === "/") {
 				const manifest = await readManifest(ctx.manifestPath);
-				return json$2(res, 200, manifest);
+				return json(res, 200, manifest);
 			}
 			if (method === "POST" && url.pathname === "/") {
 				const requestCheck = validateMutationRequest(req, { requireJsonBody: true });
-				if (!requestCheck.ok) return json$2(res, requestCheck.status, { error: requestCheck.error });
-				const body = await readBody$2(req);
+				if (!requestCheck.ok) return json(res, requestCheck.status, { error: requestCheck.error });
+				const body = await readBody(req);
 				const name = validateName(body.name);
-				if (!name) return json$2(res, 400, { error: "invalid name" });
+				if (!name) return json(res, 400, { error: "invalid name" });
 				const icon = validateIcon(body.icon);
-				if (!icon) return json$2(res, 400, { error: "invalid icon" });
+				if (!icon) return json(res, 400, { error: "invalid icon" });
 				const manifest = await readManifest(ctx.manifestPath);
 				const folder = {
 					id: newFolderId(),
@@ -2494,64 +2511,76 @@ function registerFolderRoutes(server, ctx) {
 				};
 				manifest.folders.push(folder);
 				await writeManifest(ctx.manifestPath, manifest);
-				return json$2(res, 200, folder);
+				return json(res, 200, folder);
 			}
 			if (method === "PUT" && url.pathname === "/assign") {
 				const requestCheck = validateMutationRequest(req, { requireJsonBody: true });
-				if (!requestCheck.ok) return json$2(res, requestCheck.status, { error: requestCheck.error });
-				const body = await readBody$2(req);
-				if (typeof body.slideId !== "string" || !SLIDE_ID_RE$3.test(body.slideId)) return json$2(res, 400, { error: "invalid slideId" });
+				if (!requestCheck.ok) return json(res, requestCheck.status, { error: requestCheck.error });
+				const body = await readBody(req);
+				if (typeof body.slideId !== "string" || !SLIDE_ID_RE.test(body.slideId)) return json(res, 400, { error: "invalid slideId" });
 				const slideId = body.slideId;
 				let folderId;
 				if (body.folderId === null) folderId = null;
 				else if (typeof body.folderId === "string" && FOLDER_ID_RE.test(body.folderId)) folderId = body.folderId;
-				else return json$2(res, 400, { error: "invalid folderId" });
+				else return json(res, 400, { error: "invalid folderId" });
 				const manifest = await readManifest(ctx.manifestPath);
-				if (folderId && !manifest.folders.some((f) => f.id === folderId)) return json$2(res, 404, { error: "folder not found" });
+				if (folderId && !manifest.folders.some((f) => f.id === folderId)) return json(res, 404, { error: "folder not found" });
 				if (folderId === null) delete manifest.assignments[slideId];
 				else manifest.assignments[slideId] = folderId;
 				await writeManifest(ctx.manifestPath, manifest);
-				return json$2(res, 200, { ok: true });
+				return json(res, 200, { ok: true });
+			}
+			if (method === "PUT" && url.pathname === "/reorder") {
+				const requestCheck = validateMutationRequest(req, { requireJsonBody: true });
+				if (!requestCheck.ok) return json(res, requestCheck.status, { error: requestCheck.error });
+				const body = await readBody(req);
+				const manifest = await readManifest(ctx.manifestPath);
+				const ids = validateReorder(body.ids, manifest.folders);
+				if (!ids) return json(res, 400, { error: "invalid ids" });
+				const byId = new Map(manifest.folders.map((f) => [f.id, f]));
+				manifest.folders = ids.map((id) => byId.get(id));
+				await writeManifest(ctx.manifestPath, manifest);
+				return json(res, 200, { ok: true });
 			}
 			const idMatch = url.pathname.match(/^\/([^/]+)$/);
 			if (idMatch) {
 				const id = idMatch[1];
-				if (!FOLDER_ID_RE.test(id)) return json$2(res, 400, { error: "invalid id" });
+				if (!FOLDER_ID_RE.test(id)) return json(res, 400, { error: "invalid id" });
 				if (method === "PATCH") {
 					const requestCheck = validateMutationRequest(req, { requireJsonBody: true });
-					if (!requestCheck.ok) return json$2(res, requestCheck.status, { error: requestCheck.error });
-					const body = await readBody$2(req);
+					if (!requestCheck.ok) return json(res, requestCheck.status, { error: requestCheck.error });
+					const body = await readBody(req);
 					const manifest = await readManifest(ctx.manifestPath);
 					const folder = manifest.folders.find((f) => f.id === id);
-					if (!folder) return json$2(res, 404, { error: "folder not found" });
+					if (!folder) return json(res, 404, { error: "folder not found" });
 					if (body.name !== void 0) {
 						const name = validateName(body.name);
-						if (!name) return json$2(res, 400, { error: "invalid name" });
+						if (!name) return json(res, 400, { error: "invalid name" });
 						folder.name = name;
 					}
 					if (body.icon !== void 0) {
 						const icon = validateIcon(body.icon);
-						if (!icon) return json$2(res, 400, { error: "invalid icon" });
+						if (!icon) return json(res, 400, { error: "invalid icon" });
 						folder.icon = icon;
 					}
 					await writeManifest(ctx.manifestPath, manifest);
-					return json$2(res, 200, folder);
+					return json(res, 200, folder);
 				}
 				if (method === "DELETE") {
 					const requestCheck = validateMutationRequest(req);
-					if (!requestCheck.ok) return json$2(res, requestCheck.status, { error: requestCheck.error });
+					if (!requestCheck.ok) return json(res, requestCheck.status, { error: requestCheck.error });
 					const manifest = await readManifest(ctx.manifestPath);
 					const before = manifest.folders.length;
 					manifest.folders = manifest.folders.filter((f) => f.id !== id);
-					if (manifest.folders.length === before) return json$2(res, 404, { error: "folder not found" });
+					if (manifest.folders.length === before) return json(res, 404, { error: "folder not found" });
 					for (const [slideId, folderId] of Object.entries(manifest.assignments)) if (folderId === id) delete manifest.assignments[slideId];
 					await writeManifest(ctx.manifestPath, manifest);
-					return json$2(res, 200, { ok: true });
+					return json(res, 200, { ok: true });
 				}
 			}
 			next();
 		} catch (err) {
-			json$2(res, 500, { error: String(err.message ?? err) });
+			json(res, 500, { error: String(err.message ?? err) });
 		}
 	});
 }
@@ -2566,30 +2595,30 @@ function registerSlideRoutes(server, ctx) {
 			const reorderMatch = url.pathname.match(/^\/([^/]+)\/reorder$/);
 			if (reorderMatch && method === "PUT") {
 				const requestCheck = validateMutationRequest(req, { requireJsonBody: true });
-				if (!requestCheck.ok) return json$2(res, requestCheck.status, { error: requestCheck.error });
+				if (!requestCheck.ok) return json(res, requestCheck.status, { error: requestCheck.error });
 				const slideId$1 = reorderMatch[1];
-				if (!SLIDE_ID_RE$3.test(slideId$1)) return json$2(res, 400, { error: "invalid slideId" });
-				const body = await readBody$2(req);
-				if (!Array.isArray(body.order)) return json$2(res, 400, { error: "invalid order" });
+				if (!SLIDE_ID_RE.test(slideId$1)) return json(res, 400, { error: "invalid slideId" });
+				const body = await readBody(req);
+				if (!Array.isArray(body.order)) return json(res, 400, { error: "invalid order" });
 				const order = [];
 				for (const v of body.order) {
-					if (!Number.isInteger(v)) return json$2(res, 400, { error: "invalid order" });
+					if (!Number.isInteger(v)) return json(res, 400, { error: "invalid order" });
 					order.push(v);
 				}
 				const entry = resolveSlideEntry(ctx.slidesRoot, slideId$1);
-				if (!entry) return json$2(res, 400, { error: "invalid slideId" });
+				if (!entry) return json(res, 400, { error: "invalid slideId" });
 				let source;
 				try {
 					source = await fs.readFile(entry, "utf8");
 				} catch {
-					return json$2(res, 404, { error: "slide not found" });
+					return json(res, 404, { error: "slide not found" });
 				}
 				const reordered = reorderDefaultExportPagesInSource(source, order);
-				if (reordered === null) return json$2(res, 422, { error: "could not reorder pages — order must be a permutation of the existing array" });
+				if (reordered === null) return json(res, 422, { error: "could not reorder pages — order must be a permutation of the existing array" });
 				const withNotes = reorderNotesArrayInSource(reordered, order);
-				if (withNotes === null) return json$2(res, 422, { error: "could not reorder pages — `notes` export has an unexpected shape" });
+				if (withNotes === null) return json(res, 422, { error: "could not reorder pages — `notes` export has an unexpected shape" });
 				if (withNotes !== source) await fs.writeFile(entry, withNotes, "utf8");
-				return json$2(res, 200, {
+				return json(res, 200, {
 					ok: true,
 					slideId: slideId$1,
 					order
@@ -2600,25 +2629,25 @@ function registerSlideRoutes(server, ctx) {
 				const slideId$1 = pageOpMatch[1];
 				const pageIndex = Number.parseInt(pageOpMatch[2], 10);
 				const op = pageOpMatch[3];
-				if (!SLIDE_ID_RE$3.test(slideId$1)) return json$2(res, 400, { error: "invalid slideId" });
-				if (!Number.isInteger(pageIndex) || pageIndex < 0) return json$2(res, 400, { error: "invalid page index" });
+				if (!SLIDE_ID_RE.test(slideId$1)) return json(res, 400, { error: "invalid slideId" });
+				if (!Number.isInteger(pageIndex) || pageIndex < 0) return json(res, 400, { error: "invalid page index" });
 				const isDelete = method === "DELETE" && !op;
 				const isDuplicate = method === "POST" && op === "duplicate";
 				if (!isDelete && !isDuplicate) return next();
 				const requestCheck = validateMutationRequest(req);
-				if (!requestCheck.ok) return json$2(res, requestCheck.status, { error: requestCheck.error });
+				if (!requestCheck.ok) return json(res, requestCheck.status, { error: requestCheck.error });
 				const entry = resolveSlideEntry(ctx.slidesRoot, slideId$1);
-				if (!entry) return json$2(res, 400, { error: "invalid slideId" });
+				if (!entry) return json(res, 400, { error: "invalid slideId" });
 				let source;
 				try {
 					source = await fs.readFile(entry, "utf8");
 				} catch {
-					return json$2(res, 404, { error: "slide not found" });
+					return json(res, 404, { error: "slide not found" });
 				}
 				const updated = isDelete ? removePageFromDefaultExportInSource(source, pageIndex) : duplicatePageInDefaultExportInSource(source, pageIndex);
-				if (updated === null) return json$2(res, 422, { error: isDelete ? "could not delete page — index out of range or default export is not an array" : "could not duplicate page — index out of range or default export is not an array" });
+				if (updated === null) return json(res, 422, { error: isDelete ? "could not delete page — index out of range or default export is not an array" : "could not duplicate page — index out of range or default export is not an array" });
 				if (updated !== source) await fs.writeFile(entry, updated, "utf8");
-				return json$2(res, 200, {
+				return json(res, 200, {
 					ok: true,
 					slideId: slideId$1,
 					index: pageIndex
@@ -2627,20 +2656,20 @@ function registerSlideRoutes(server, ctx) {
 			const duplicateMatch = url.pathname.match(/^\/([^/]+)\/duplicate$/);
 			if (duplicateMatch && method === "POST") {
 				const requestCheck = validateMutationRequest(req);
-				if (!requestCheck.ok) return json$2(res, requestCheck.status, { error: requestCheck.error });
+				if (!requestCheck.ok) return json(res, requestCheck.status, { error: requestCheck.error });
 				const slideId$1 = duplicateMatch[1];
-				if (!SLIDE_ID_RE$3.test(slideId$1)) return json$2(res, 400, { error: "invalid slideId" });
-				const body = await readBody$2(req);
-				if (body.newId !== void 0 && typeof body.newId !== "string") return json$2(res, 400, { error: "invalid newId" });
+				if (!SLIDE_ID_RE.test(slideId$1)) return json(res, 400, { error: "invalid slideId" });
+				const body = await readBody(req);
+				if (body.newId !== void 0 && typeof body.newId !== "string") return json(res, 400, { error: "invalid newId" });
 				const duplicated = await duplicateSlideDir(ctx.slidesRoot, slideId$1, body.newId);
-				if (!duplicated.ok) return json$2(res, duplicated.status, { error: duplicated.error });
+				if (!duplicated.ok) return json(res, duplicated.status, { error: duplicated.error });
 				const manifest = await readManifest(ctx.manifestPath);
 				const folderId = manifest.assignments[slideId$1];
 				if (folderId) {
 					manifest.assignments[duplicated.slideId] = folderId;
 					await writeManifest(ctx.manifestPath, manifest);
 				}
-				return json$2(res, 200, {
+				return json(res, 200, {
 					ok: true,
 					slideId: duplicated.slideId
 				});
@@ -2648,26 +2677,26 @@ function registerSlideRoutes(server, ctx) {
 			const idMatch = url.pathname.match(/^\/([^/]+)$/);
 			if (!idMatch) return next();
 			const slideId = idMatch[1];
-			if (!SLIDE_ID_RE$3.test(slideId)) return json$2(res, 400, { error: "invalid slideId" });
+			if (!SLIDE_ID_RE.test(slideId)) return json(res, 400, { error: "invalid slideId" });
 			if (method === "PATCH") {
 				const requestCheck = validateMutationRequest(req, { requireJsonBody: true });
-				if (!requestCheck.ok) return json$2(res, requestCheck.status, { error: requestCheck.error });
-				const body = await readBody$2(req);
+				if (!requestCheck.ok) return json(res, requestCheck.status, { error: requestCheck.error });
+				const body = await readBody(req);
 				const name = validateSlideName(body.name);
-				if (!name) return json$2(res, 400, { error: "invalid name" });
+				if (!name) return json(res, 400, { error: "invalid name" });
 				const entry = resolveSlideEntry(ctx.slidesRoot, slideId);
-				if (!entry) return json$2(res, 400, { error: "invalid slideId" });
+				if (!entry) return json(res, 400, { error: "invalid slideId" });
 				let source;
 				try {
 					source = await fs.readFile(entry, "utf8");
 				} catch {
-					return json$2(res, 404, { error: "slide not found" });
+					return json(res, 404, { error: "slide not found" });
 				}
 				const updated = updateMetaTitleInSource(source, name);
-				if (updated === null) return json$2(res, 422, { error: "could not locate a safe place to write meta.title in index.tsx" });
+				if (updated === null) return json(res, 422, { error: "could not locate a safe place to write meta.title in index.tsx" });
 				if (updated !== source) await fs.writeFile(entry, updated, "utf8");
 				server.ws.send({ type: "full-reload" });
-				return json$2(res, 200, {
+				return json(res, 200, {
 					ok: true,
 					slideId,
 					name
@@ -2675,17 +2704,17 @@ function registerSlideRoutes(server, ctx) {
 			}
 			if (method === "DELETE") {
 				const requestCheck = validateMutationRequest(req);
-				if (!requestCheck.ok) return json$2(res, requestCheck.status, { error: requestCheck.error });
+				if (!requestCheck.ok) return json(res, requestCheck.status, { error: requestCheck.error });
 				const removed = await rmSlideDir(ctx.slidesRoot, slideId);
-				if (!removed) return json$2(res, 404, { error: "slide not found" });
+				if (!removed) return json(res, 404, { error: "slide not found" });
 				const manifest = await readManifest(ctx.manifestPath);
 				delete manifest.assignments[slideId];
 				await writeManifest(ctx.manifestPath, manifest);
-				return json$2(res, 200, { ok: true });
+				return json(res, 200, { ok: true });
 			}
 			return next();
 		} catch (err) {
-			json$2(res, 500, { error: String(err.message ?? err) });
+			json(res, 500, { error: String(err.message ?? err) });
 		}
 	});
 }
@@ -2709,16 +2738,16 @@ function registerSvglRoutes(server) {
 				target = `https://api.svgl.app/${qs ? `?${qs}` : ""}`;
 			} else if (reqUrl.pathname === "/svg") {
 				const u = reqUrl.searchParams.get("u");
-				if (!u) return json$2(res, 400, { error: "missing u" });
+				if (!u) return json(res, 400, { error: "missing u" });
 				let parsed;
 				try {
 					parsed = new URL(u);
 				} catch {
-					return json$2(res, 400, { error: "invalid u" });
+					return json(res, 400, { error: "invalid u" });
 				}
-				if (parsed.protocol !== "https:") return json$2(res, 400, { error: "https only" });
+				if (parsed.protocol !== "https:") return json(res, 400, { error: "https only" });
 				const host = parsed.hostname.toLowerCase();
-				if (host !== "svgl.app" && !host.endsWith(".svgl.app")) return json$2(res, 400, { error: "host not allowed" });
+				if (host !== "svgl.app" && !host.endsWith(".svgl.app")) return json(res, 400, { error: "host not allowed" });
 				target = parsed.toString();
 			} else return next();
 			const upstream = await fetch(target);
@@ -2729,11 +2758,68 @@ function registerSvglRoutes(server) {
 			const buf = Buffer.from(await upstream.arrayBuffer());
 			res.end(buf);
 		} catch (err) {
-			json$2(res, 502, { error: String(err.message ?? err) });
+			json(res, 502, { error: String(err.message ?? err) });
 		}
 	});
 }
 
+//#endregion
+//#region src/vite/routes/update.ts
+const PKG = "@open-slide/core";
+const CACHE_TTL_MS = 10 * 60 * 1e3;
+let cache = null;
+function parseSemver(v) {
+	const m = /^v?(\d+)\.(\d+)\.(\d+)/.exec(v.trim());
+	if (!m) return null;
+	return [
+		Number(m[1]),
+		Number(m[2]),
+		Number(m[3])
+	];
+}
+function isOutdated(current, latest) {
+	const a = parseSemver(current);
+	const b = parseSemver(latest);
+	if (!a || !b) return false;
+	for (let i = 0; i < 3; i++) {
+		if (b[i] > a[i]) return true;
+		if (b[i] < a[i]) return false;
+	}
+	return false;
+}
+async function fetchLatest(now) {
+	if (cache && now - cache.at < CACHE_TTL_MS) return cache.latest;
+	try {
+		const res = await fetch(`https://registry.npmjs.org/${PKG}/latest`, {
+			signal: AbortSignal.timeout(3e3),
+			headers: { accept: "application/json" }
+		});
+		if (!res.ok) throw new Error(`registry ${res.status}`);
+		const body = await res.json();
+		const latest = typeof body.version === "string" ? body.version : null;
+		cache = {
+			at: now,
+			latest
+		};
+		return latest;
+	} catch {
+		return cache?.latest ?? null;
+	}
+}
+function registerUpdateRoutes(server, current) {
+	server.middlewares.use("/__update-check", async (req, res, next) => {
+		if ((req.method ?? "GET") !== "GET") return next();
+		const latest = await fetchLatest(Date.now());
+		const result = {
+			current,
+			latest,
+			outdated: latest ? isOutdated(current, latest) : false
+		};
+		res.setHeader("cache-control", "no-store");
+		json(res, 200, result);
+	});
+}
+
 //#endregion
 //#region src/vite/routes/watchers.ts
 function registerWatchers(server, ctx) {
@@ -2759,7 +2845,7 @@ function registerWatchers(server, ctx) {
 		const parts = rel.split(path.sep);
 		if (parts.length < 3 || parts[1] !== "assets") return;
 		const slideId = parts[0];
-		if (!SLIDE_ID_RE$3.test(slideId)) return;
+		if (!SLIDE_ID_RE.test(slideId)) return;
 		server.ws.send({
 			type: "custom",
 			event: "open-slide:assets-changed",
@@ -2786,13 +2872,13 @@ function apiPlugin(opts) {
 			registerAssetRoutes(server, ctx);
 			registerSvglRoutes(server);
 			registerFolderRoutes(server, ctx);
+			registerUpdateRoutes(server, ctx.coreVersion);
 		}
 	};
 }
 
 //#endregion
 //#region src/vite/current-plugin.ts
-const SLIDE_ID_RE$2 = /^[a-z0-9_-]+$/i;
 const TEXT_SNIPPET_MAX = 120;
 function parseSelection(raw) {
 	if (raw == null || typeof raw !== "object") return null;
@@ -2831,7 +2917,7 @@ function currentPlugin(opts) {
 					selection: null
 				};
 				if (typeof raw?.slideId === "string") {
-					if (!SLIDE_ID_RE$2.test(raw.slideId)) return;
+					if (!SLIDE_ID_RE.test(raw.slideId)) return;
 					const totalPages = typeof raw.totalPages === "number" && Number.isFinite(raw.totalPages) && raw.totalPages > 0 ? Math.floor(raw.totalPages) : 1;
 					const rawIndex = typeof raw.pageIndex === "number" && Number.isFinite(raw.pageIndex) ? Math.floor(raw.pageIndex) : 0;
 					const pageIndex = Math.max(0, Math.min(totalPages - 1, rawIndex));
@@ -2866,35 +2952,6 @@ function currentPlugin(opts) {
 
 //#endregion
 //#region src/vite/design-plugin.ts
-const SLIDE_ID_RE$1 = /^[a-z0-9_-]+$/i;
-async function readBody$1(req) {
-	return await new Promise((resolve, reject) => {
-		const chunks = [];
-		req.on("data", (c) => chunks.push(c));
-		req.on("end", () => {
-			const raw = Buffer.concat(chunks).toString("utf8");
-			if (!raw) return resolve({});
-			try {
-				resolve(JSON.parse(raw));
-			} catch (e) {
-				reject(e);
-			}
-		});
-		req.on("error", reject);
-	});
-}
-function json$1(res, status, body) {
-	res.statusCode = status;
-	res.setHeader("content-type", "application/json");
-	res.end(JSON.stringify(body));
-}
-function resolveSlidePath$1(userCwd, slidesDir, slideId) {
-	if (!SLIDE_ID_RE$1.test(slideId)) return null;
-	const slidesRoot = path.resolve(userCwd, slidesDir);
-	const full = path.resolve(slidesRoot, slideId, "index.tsx");
-	if (!full.startsWith(`${slidesRoot}${path.sep}`)) return null;
-	return full;
-}
 function parseSource$1(source) {
 	try {
 		return parse(source, {
@@ -3217,28 +3274,28 @@ function designPlugin(opts) {
 				const url = new URL(req.url ?? "/", "http://local");
 				const method = req.method ?? "GET";
 				const slideId = url.searchParams.get("slideId") ?? "";
-				const file = resolveSlidePath$1(userCwd, slidesDir, slideId);
-				if (!file) return json$1(res, 400, { error: "invalid slideId" });
+				const file = resolveSlidePath(userCwd, slidesDir, slideId);
+				if (!file) return json(res, 400, { error: "invalid slideId" });
 				try {
 					if (method === "GET" && url.pathname === "/") {
 						let source;
 						try {
 							source = await fs.readFile(file, "utf8");
 						} catch {
-							return json$1(res, 404, { error: "slide not found" });
+							return json(res, 404, { error: "slide not found" });
 						}
 						const parsed = parseSlideDesign(source);
-						if (parsed.ok) return json$1(res, 200, {
+						if (parsed.ok) return json(res, 200, {
 							design: parsed.design,
 							exists: true,
 							warning: null
 						});
-						if (parsed.exists === false) return json$1(res, 200, {
+						if (parsed.exists === false) return json(res, 200, {
 							design: defaultDesign,
 							exists: false,
 							warning: null
 						});
-						return json$1(res, 200, {
+						return json(res, 200, {
 							design: defaultDesign,
 							exists: true,
 							warning: parsed.error
@@ -3246,24 +3303,24 @@ function designPlugin(opts) {
 					}
 					if (method === "PUT" && url.pathname === "/") {
 						const requestCheck = validateMutationRequest(req, { requireJsonBody: true });
-						if (!requestCheck.ok) return json$1(res, requestCheck.status, { error: requestCheck.error });
-						const body = await readBody$1(req);
+						if (!requestCheck.ok) return json(res, requestCheck.status, { error: requestCheck.error });
+						const body = await readBody(req);
 						const patch = body.patch;
-						if (!patch || typeof patch !== "object") return json$1(res, 400, { error: "missing patch object" });
+						if (!patch || typeof patch !== "object") return json(res, 400, { error: "missing patch object" });
 						let source;
 						try {
 							source = await fs.readFile(file, "utf8");
 						} catch {
-							return json$1(res, 404, { error: "slide not found" });
+							return json(res, 404, { error: "slide not found" });
 						}
 						const parsed = parseSlideDesign(source);
 						const baseDesign = parsed.ok ? parsed.design : defaultDesign;
-						if (!parsed.ok && parsed.exists) return json$1(res, 422, { error: parsed.error });
+						if (!parsed.ok && parsed.exists) return json(res, 422, { error: parsed.error });
 						const merged = mergeDesign(baseDesign, patch);
 						const written = applyDesignWrite(source, merged);
-						if (!written.ok) return json$1(res, written.status, { error: written.error });
+						if (!written.ok) return json(res, written.status, { error: written.error });
 						if (written.source !== source) await fs.writeFile(file, written.source, "utf8");
-						return json$1(res, 200, {
+						return json(res, 200, {
 							ok: true,
 							design: merged,
 							created: written.created
@@ -3271,17 +3328,17 @@ function designPlugin(opts) {
 					}
 					if (method === "POST" && url.pathname === "/reset") {
 						const requestCheck = validateMutationRequest(req);
-						if (!requestCheck.ok) return json$1(res, requestCheck.status, { error: requestCheck.error });
+						if (!requestCheck.ok) return json(res, requestCheck.status, { error: requestCheck.error });
 						let source;
 						try {
 							source = await fs.readFile(file, "utf8");
 						} catch {
-							return json$1(res, 404, { error: "slide not found" });
+							return json(res, 404, { error: "slide not found" });
 						}
 						const written = applyDesignWrite(source, defaultDesign);
-						if (!written.ok) return json$1(res, written.status, { error: written.error });
+						if (!written.ok) return json(res, written.status, { error: written.error });
 						if (written.source !== source) await fs.writeFile(file, written.source, "utf8");
-						return json$1(res, 200, {
+						return json(res, 200, {
 							ok: true,
 							design: defaultDesign,
 							created: written.created
@@ -3289,7 +3346,7 @@ function designPlugin(opts) {
 					}
 					return next();
 				} catch (err) {
-					json$1(res, 500, { error: String(err.message ?? err) });
+					json(res, 500, { error: String(err.message ?? err) });
 				}
 			});
 		}
@@ -3334,19 +3391,22 @@ function injectLocTags(code) {
 	for (const ins of insertions) next = next.slice(0, ins.offset) + ins.text + next.slice(ins.offset);
 	return next;
 }
+function isSlideSourceFile(id, slidesRootPosix) {
+	const filePath = id.split(/[?#]/)[0].replace(/\\/g, "/");
+	if (!filePath.startsWith(`${slidesRootPosix}/`)) return false;
+	if (!filePath.endsWith(".tsx")) return false;
+	if (filePath.endsWith(".d.ts") || filePath.endsWith(".test.tsx")) return false;
+	const rel = filePath.slice(slidesRootPosix.length + 1);
+	return rel.includes("/");
+}
 function locTagsPlugin(opts) {
-	const slidesRoot = path.resolve(opts.userCwd, opts.slidesDir ?? "slides");
+	const slidesRoot = path.resolve(opts.userCwd, opts.slidesDir ?? "slides").replace(/\\/g, "/");
 	return {
 		name: "open-slide:loc-tags",
 		apply: "serve",
 		enforce: "pre",
 		transform(code, id) {
-			const filePath = id.split("?")[0];
-			if (!filePath.startsWith(slidesRoot + path.sep)) return null;
-			if (!filePath.endsWith(".tsx")) return null;
-			if (filePath.endsWith(".d.ts") || filePath.endsWith(".test.tsx")) return null;
-			const rel = filePath.slice(slidesRoot.length + path.sep.length);
-			if (!rel.includes(path.sep)) return null;
+			if (!isSlideSourceFile(id, slidesRoot)) return null;
 			const next = injectLocTags(code);
 			if (next === null) return null;
 			return {
@@ -3359,35 +3419,6 @@ function locTagsPlugin(opts) {
 
 //#endregion
 //#region src/vite/notes-plugin.ts
-const SLIDE_ID_RE = /^[a-z0-9_-]+$/i;
-async function readBody(req) {
-	return await new Promise((resolve, reject) => {
-		const chunks = [];
-		req.on("data", (c) => chunks.push(c));
-		req.on("end", () => {
-			const raw = Buffer.concat(chunks).toString("utf8");
-			if (!raw) return resolve({});
-			try {
-				resolve(JSON.parse(raw));
-			} catch (e) {
-				reject(e);
-			}
-		});
-		req.on("error", reject);
-	});
-}
-function json(res, status, body) {
-	res.statusCode = status;
-	res.setHeader("content-type", "application/json");
-	res.end(JSON.stringify(body));
-}
-function resolveSlidePath(userCwd, slidesDir, slideId) {
-	if (!SLIDE_ID_RE.test(slideId)) return null;
-	const slidesRoot = path.resolve(userCwd, slidesDir);
-	const full = path.resolve(slidesRoot, slideId, "index.tsx");
-	if (!full.startsWith(slidesRoot + path.sep)) return null;
-	return full;
-}
 function parseSource(source) {
 	try {
 		return parse(source, {
@@ -3700,7 +3731,7 @@ ${cases}
 `;
 }
 function openSlidePlugin(opts) {
-	const { userCwd, config } = opts;
+	const { userCwd, config, coreVersion } = opts;
 	const slidesDir = config.slidesDir ?? "slides";
 	const slidesRoot = path.resolve(userCwd, slidesDir);
 	const foldersManifestPath = path.join(slidesRoot, ".folders.json");
@@ -3761,7 +3792,8 @@ function openSlidePlugin(opts) {
 				};
 				const resolvedConfig = {
 					...config,
-					build: buildResolved
+					build: buildResolved,
+					version: coreVersion
 				};
 				return `export default ${JSON.stringify(resolvedConfig)};\n`;
 			}
@@ -3978,6 +4010,15 @@ function findPackageRoot(fromFile) {
 }
 const PKG_ROOT = findPackageRoot(fileURLToPath(import.meta.url));
 const APP_ROOT = path.join(PKG_ROOT, "src", "app");
+function readCoreVersion() {
+	try {
+		const raw = readFileSync(path.join(PKG_ROOT, "package.json"), "utf8");
+		return JSON.parse(raw).version ?? "0.0.0";
+	} catch {
+		return "0.0.0";
+	}
+}
+const CORE_VERSION = readCoreVersion();
 async function createViteConfig(opts) {
 	const userCwd = path.resolve(opts.userCwd);
 	const config = opts.config ?? await loadUserConfig(userCwd);
@@ -4000,7 +4041,8 @@ async function createViteConfig(opts) {
 			tailwindcss(),
 			openSlidePlugin({
 				userCwd,
-				config
+				config,
+				coreVersion: CORE_VERSION
 			}),
 			themesPlugin({
 				userCwd,
@@ -4010,7 +4052,8 @@ async function createViteConfig(opts) {
 			apiPlugin({
 				userCwd,
 				slidesDir,
-				assetsDir
+				assetsDir,
+				coreVersion: CORE_VERSION
 			}),
 			notesPlugin({
 				userCwd,