@plitzi/cli 0.38.8 → 0.38.9

package/dist/index.js

@@ -11,7 +11,7 @@ import { createHash, randomBytes } from "node:crypto";
 import { createServer } from "node:http";
 import tls from "node:tls";
 import readline from "node:readline/promises";
-import { EXPLAIN_KINDS, PAGE_SPEC_FIELDS, PAGE_TEXT_LIMIT, actionSpecFromEntry, actionToSource, authorSpace, blankTemplateFiles, catalogTemplateFiles, closest, comparePictures, compareTexts, darkScheme, dataIssues, elementTriggers, elementTypeNames, emptySpaceSource, explain, explainKindOf, explainList, explanationText, failedFlowText, importProbe, importedFiles, inspectDocument, inspectPage, isSuggestionCode, loadImages, locateClasses, locateElements, openPage, pageRegions, pageTexts, planFixes, readDevTools, refusalOf, unrollPage } from "@plitzi/sdk-authoring";
+import { EXPLAIN_KINDS, PAGE_SPEC_FIELDS, PAGE_TEXT_LIMIT, actionSpecFromEntry, actionToSource, authorSpace, blankTemplateFiles, catalogTemplateFiles, closest, comparePictures, compareTexts, darkScheme, dataIssues, elementTriggers, elementTypeNames, emptyTemplateFiles, explain, explainKindOf, explainList, explanationText, failedFlowText, importProbe, importedFiles, inspectDocument, inspectPage, isSuggestionCode, loadImages, locateClasses, locateElements, openPage, pageRegions, pageTexts, planFixes, readDevTools, refusalOf, unrollPage } from "@plitzi/sdk-authoring";
 import { existsSync, readFileSync, readdirSync, realpathSync, statSync, watch } from "node:fs";
 import { parseEnv, promisify } from "node:util";
 import { lookup } from "node:dns/promises";
@@ -2418,7 +2418,7 @@ var projectScripts = (answers) => {
 			* runs what `build` emitted and carries no TypeScript at all.
 			*/
 			build: "tsc -p tsconfig.build.json",
-			"start:prod": nodeWithEnv(`${v$3}/main.js`)
+			"start:prod": `NODE_ENV=production ${nodeWithEnv(`${v$3}/main.js`)}`
 		} : {
 			start: "vite",
 			build: "vite build",
@@ -2512,7 +2512,7 @@ var YARN_IGNORES$1 = "\n.yarn/*\n!.yarn/patches\n!.yarn/plugins\n!.yarn/releases
 * the CLI records about it, and is committed — a clone without it could not pull, push or upgrade.
 */
 var gitignore$1 = ({ mode, packageManager }) => `node_modules\n${v$3}\n.env\ntmp\n${mode === "server" ? `${y$2}\n` : ""}${packageManager === "yarn" ? YARN_IGNORES$1 : ""}`;
-var startLine = ({ mode, packageManager, source }) => mode === "server" ? `\`${runCommand(packageManager, "start")}\` serves pages on http://127.0.0.1:8080 — or, when something else holds 8080, the next free port, which it prints and writes to \`${x$3}\` (set \`PORT\` to choose one). \`${runCommand(packageManager, "start:dev")}\` restarts on a save to the server's code; a save to a plugin swaps it in the open page${source === "local" ? ", and a save to the space reloads it" : ""}. In production, \`${runCommand(packageManager, "build")}\` once and run \`${runCommand(packageManager, "start:prod")}\` with \`NODE_ENV=production\`: the compiled server, with no TypeScript in the process.` : `\`${runCommand(packageManager, "start")}\` runs Vite on http://127.0.0.1:5173, with hot module replacement.`;
+var startLine = ({ mode, packageManager, source }) => mode === "server" ? `\`${runCommand(packageManager, "start")}\` serves pages on http://127.0.0.1:8080 — or, when something else holds 8080, the next free port, which it prints and writes to \`${x$3}\` (set \`PORT\` to choose one). \`${runCommand(packageManager, "start:dev")}\` restarts on a save to the server's code; a save to a plugin swaps it in the open page${source === "local" ? ", and a save to the space reloads it" : ""}. In production, \`${runCommand(packageManager, "build")}\` once and run \`${runCommand(packageManager, "start:prod")}\`, which sets \`NODE_ENV=production\` itself: the compiled server, with no TypeScript in the process.` : `\`${runCommand(packageManager, "start")}\` runs Vite on http://127.0.0.1:5173, with hot module replacement.`;
 var spaceSection = (answers) => {
 	if (answers.source === "cloud") return `## Where the space comes from
 
@@ -2634,7 +2634,7 @@ ${commands.join("\n")}
 - **Settings are ${code(".env")}**, never committed; ${code(".env.example")} names them, committed — a new one goes in both. ${settingsNote}
 ${dataNote}
 - **${code("public/")} is on the internet.** Every file in it is served to anyone who asks for it, as it is, the moment the project is deployed — no sign-in, no check. Never put in it a secret, a key, a ${code(".env")}, a private document, a database dump, or data only some visitors may read: that goes through a server action or a provider that checks who is asking.
-${serverNotes}- **Check a page in text first:** ${code(`${runCommand(answers.packageManager, "check")} -- / --width 1440,390`)} says whether every element is on screen, nothing overflows and the console is clean — and with ${code("--click <id>")}, what clicking one element changed, or that nothing did (${code("--fill <id>=<value>")} first, for a form) — a picture only when it says something is wrong: ${code(`${runCommand(answers.packageManager, "shot")} -- / --width 390`)} (add ${code("--scheme dark")}; ${code("--frames 4")} to see what moves; ${code("--compare <url>")} against another site: by section, and each text measured). ${run("visual")} runs the checks as tests.
+${serverNotes}- **Check a page in text first:** ${code(`${runCommand(answers.packageManager, "check")} -- / --width 1440,390`)} says whether every element is on screen, nothing overflows and the console is clean — and with ${code("--click <id>")}, what clicking one element changed, or that nothing did (${code("--fill <id>=<value>")} first, for a form) — a picture only when it says something is wrong: ${code(`${runCommand(answers.packageManager, "shot")} -- / --width 390`)} (add ${code("--scheme dark")}; ${code("--frames 4")} to see what moves, ${code("--click <id|selector> --sheet")} for an interaction; ${code("--compare <url>")} against another site: by section, and each text measured). ${run("visual")} runs the checks as tests.
 - **What the page holds, in text:** ${code(`${runCommand(answers.packageManager, "check")} -- /products --state --element <id>`)} adds its state, every source by name and one element (what it reads, its own state, whether it is on screen); every check already lists the flows that failed. Read it instead of guessing from classes in the DOM.
 
 ## Do not read
@@ -2660,7 +2660,7 @@ What you leave behind is the next reader's problem — the user's, or the next a
 - **Scratch goes in ${code(`tmp/`)}, or nowhere.** A one-off script, a dump, a picture to look at — never at the root or beside the source, where it reads as part of the project.
 - **One of everything.** A look used twice is a class; a value used twice is a token; a block used twice is a component, and rows of data are one list. Change it where it is defined, and rename everywhere when you rename.
 - **Files a reader can find.** One part per file, named after what it is, in the folder of its kind — the shape ${code("src/space/")} already has. Do not start a parallel layout of your own.
-- **Leave it passing.** ${run("verify")} runs it all and prints only what fails: ${local ? `${run("author")} with zero warnings, ${run("lint:space")} clean, ` : ""}${run("typecheck")}, ${run("lint")} and the format clean, and every page whole (${run("check")}, with the server up).
+- **Leave it passing.** ${run("verify")} runs it all and prints only what fails: ${local ? `${run("author")} with zero warnings, ${run("lint:space")} clean, ` : ""}${run("typecheck")}, ${run("lint")} and the format clean, and every page whole (${run("check")}, with the server up) — those for signed-in visitors too, once ${code(".env")} names an account to check them as: ${code("PLITZI_CHECK_USER")} and ${code("PLITZI_CHECK_PASSWORD")}.
 
 ## The rules that go wrong most
 
@@ -3226,7 +3226,10 @@ var spaceFiles = (answers) => {
 		[r$6]: authorScript()
 	};
 	if (answers.template === "blank") return {
-		[a$6]: emptySpaceSource({ name: answers.name }),
+		...emptyTemplateFiles({
+			name: answers.name,
+			dir: i$6
+		}),
 		[r$6]: authorScript(),
 		...answers.mode === "client" ? { "public/data/.gitkeep": "" } : {}
 	};
@@ -4425,9 +4428,9 @@ var __exportAll = (all, no_symbols) => {
 var e$42 = "[a-zA-Z_][a-zA-Z0-9_]*(?:-[a-zA-Z0-9_]+)*";
 var t$63 = `(?:${e$42}|\\d+)`;
 var n$47 = `\\[\\s*(?:\\d+|'[^']*'|"[^"]*"|${e$42}(?:\\.${t$63})*)\\s*\\]`;
-var r$37 = `${`${e$42}(?:${n$47})*(?:\\??\\.${t$63}(?:${n$47})*)*`}(?:\\s*\\?\\?\\s*[^|{}]+?)?(?:\\s*\\|\\s*[a-zA-Z_]+(?:\\([^)]*\\))?)*`;
-var i$28 = `\\{\\{\\s*${r$37}\\s*\\}\\}`;
-var a$24 = `(?:${`\\{\\{\\{\\s*${r$37}\\s*\\}\\}\\}`}|${i$28})`;
+var r$36 = `${`${e$42}(?:${n$47})*(?:\\??\\.${t$63}(?:${n$47})*)*`}(?:\\s*\\?\\?\\s*[^|{}]+?)?(?:\\s*\\|\\s*[a-zA-Z_]+(?:\\([^)]*\\))?)*`;
+var i$28 = `\\{\\{\\s*${r$36}\\s*\\}\\}`;
+var a$24 = `(?:${`\\{\\{\\{\\s*${r$36}\\s*\\}\\}\\}`}|${i$28})`;
 new RegExp(a$24, "g");
 RegExp(`^${a$24}$`);
 var e$41 = ["smooth", "auto"];
@@ -4437,8 +4440,8 @@ var t$61 = [
 	"end",
 	"nearest"
 ];
-var s$21 = "onScroll";
-var r$35 = {
+var s$22 = "onScroll";
+var r$34 = {
 	type: "select",
 	description: "How it moves: \"smooth\" glides there, \"auto\" jumps.",
 	default: "smooth",
@@ -4516,7 +4519,7 @@ var a$22 = {
 				description: "How far down, the same way; negative goes up.",
 				default: ""
 			},
-			behavior: r$35
+			behavior: r$34
 		}
 	},
 	scrollTo: {
@@ -4534,7 +4537,7 @@ var a$22 = {
 				description: "Where down, the same way. Empty stays.",
 				default: ""
 			},
-			behavior: r$35
+			behavior: r$34
 		}
 	},
 	scrollIntoView: {
@@ -4554,7 +4557,7 @@ var a$22 = {
 				default: "nearest",
 				options: [...t$61]
 			},
-			behavior: r$35
+			behavior: r$34
 		}
 	}
 };
@@ -4958,7 +4961,7 @@ var n$44 = {
 	"border-bottom-left-radius": "4px",
 	"border-bottom-right-radius": "4px"
 };
-var r$34 = t$60()({
+var r$33 = t$60()({
 	type: "button",
 	attributeValues: {
 		subType: e$39()([
@@ -5608,7 +5611,7 @@ var n$39 = {
 	"letter-spacing": "inherit",
 	cursor: "pointer"
 };
-var r$33 = t$60()({
+var r$32 = t$60()({
 	type: "themeToggle",
 	attributeValues: { subType: e$39()(["switch", "segmented"]) },
 	triggers: { onThemeChange: {
@@ -5806,7 +5809,7 @@ var n$37 = {
 	outline: "none",
 	position: "relative"
 };
-var r$32 = {
+var r$31 = {
 	...n$37,
 	"line-height": "20px"
 };
@@ -5828,7 +5831,7 @@ var o$23 = {
 	color: "red",
 	"margin-top": "4px"
 };
-var s$19 = {
+var s$20 = {
 	color: "red",
 	"margin-left": "4px"
 };
@@ -5847,7 +5850,7 @@ var l$13 = {
 	"padding-left": "0px",
 	display: "block",
 	...c$18,
-	"background-color": "inherit",
+	"background-color": "transparent",
 	color: "inherit",
 	"line-height": "inherit",
 	"font-family": "inherit",
@@ -5868,7 +5871,7 @@ var u$13 = {
 	cursor: "inherit",
 	"box-shadow": "none"
 };
-var d$13 = {
+var d$12 = {
 	height: "100%",
 	"margin-top": "0px",
 	"margin-right": "0px",
@@ -5888,11 +5891,11 @@ var d$13 = {
 	"font-weight": "inherit",
 	cursor: "pointer"
 };
-var f$11 = {
+var f$10 = {
 	...n$37,
 	cursor: "pointer"
 };
-var p$10 = {
+var p$11 = {
 	height: "20px",
 	width: "36px",
 	"margin-top": "0px",
@@ -5922,7 +5925,7 @@ var p$10 = {
 	appearance: "none",
 	cursor: "pointer"
 };
-var m$6 = (e, t, { field: n, icon: r } = {}) => ({
+var m$7 = (e, t, { field: n, icon: r } = {}) => ({
 	name: e,
 	displayMode: "desktop",
 	style: {
@@ -5931,7 +5934,7 @@ var m$6 = (e, t, { field: n, icon: r } = {}) => ({
 		...n ? { field: { default: n } } : {},
 		...r ? { icon: { default: r } } : {},
 		label: { default: a$21 },
-		requiredMark: { default: s$19 },
+		requiredMark: { default: s$20 },
 		error: { default: o$23 }
 	}
 });
@@ -5977,7 +5980,7 @@ var g$4 = t$60()({
 			autoFocus: !1,
 			disabled: !1,
 			options: [],
-			required: !0,
+			required: !1,
 			requiredMessage: "",
 			minLength: 0,
 			minLengthMessage: "",
@@ -6029,26 +6032,26 @@ var g$4 = t$60()({
 			displayMode: "desktop",
 			style: { base: { default: {} } },
 			subTypes: {
-				hidden: m$6("Form Control Hidden", {}),
-				text: m$6("Form Control Text", r$32, h$4),
-				number: m$6("Form Control Number", r$32, h$4),
-				email: m$6("Form Control Email", r$32, h$4),
-				password: m$6("Form Control Password", r$32, {
+				hidden: m$7("Form Control Hidden", {}),
+				text: m$7("Form Control Text", r$31, h$4),
+				number: m$7("Form Control Number", r$31, h$4),
+				email: m$7("Form Control Email", r$31, h$4),
+				password: m$7("Form Control Password", r$31, {
 					...h$4,
-					icon: d$13
+					icon: d$12
 				}),
-				search: m$6("Form Control Search", r$32, h$4),
-				url: m$6("Form Control URL", r$32, h$4),
-				tel: m$6("Form Control Phone", r$32, h$4),
-				date: m$6("Form Control Date", r$32, h$4),
-				time: m$6("Form Control Time", r$32, h$4),
-				color: m$6("Form Control Color", r$32, h$4),
-				textarea: m$6("Form Control Textarea", {
-					...r$32,
+				search: m$7("Form Control Search", r$31, h$4),
+				url: m$7("Form Control URL", r$31, h$4),
+				tel: m$7("Form Control Phone", r$31, h$4),
+				date: m$7("Form Control Date", r$31, h$4),
+				time: m$7("Form Control Time", r$31, h$4),
+				color: m$7("Form Control Color", r$31, h$4),
+				textarea: m$7("Form Control Textarea", {
+					...r$31,
 					color: "inherit",
 					resize: "vertical"
 				}),
-				select: m$6("Form Control Select", f$11, { field: u$13 }),
+				select: m$7("Form Control Select", f$10, { field: u$13 }),
 				checkbox: {
 					name: "Form Control Checkbox",
 					displayMode: "desktop",
@@ -6061,7 +6064,7 @@ var g$4 = t$60()({
 							"margin-right": "4px"
 						} },
 						label: { default: i$25 },
-						requiredMark: { default: s$19 },
+						requiredMark: { default: s$20 },
 						error: { default: o$23 }
 					}
 				},
@@ -6070,12 +6073,12 @@ var g$4 = t$60()({
 					displayMode: "desktop",
 					style: {
 						base: { default: {} },
-						input: { default: p$10 },
+						input: { default: p$11 },
 						label: { default: {
 							...i$25,
 							"align-items": "center"
 						} },
-						requiredMark: { default: s$19 },
+						requiredMark: { default: s$20 },
 						error: { default: o$23 }
 					}
 				}
@@ -6677,7 +6680,7 @@ var n$34 = t$60()({
 		definition: {
 			label: "Api Container",
 			type: "apiContainer",
-			description: "Fetches data from a backend HTTP API (its `query`/`method`/`credentials`) and exposes the response as a data source ITS DESCENDANTS bind to (source `apiContainer_<id>.data`; only elements inside it can consume it). This is how you get backend data into the frontend. Its `mockData` prop is builder-only sample data — the published runtime fetches the real `query`, so always set a real query for production. With `cache: true` a browser request is kept for `staleTime` seconds (default 30) and shared with every provider asking the same thing; it is off unless set. A flow refreshes it with `performQuery` or the global `invalidateQueries` step, and `refreshSeconds` makes it ask again on its own every N seconds (either runtime; paused while the tab is hidden) — the way to keep a queue, feed or status board current without a plugin. Its `subType` (container tag) is empty by default, and then it renders NO element of its own: its children lay out directly in its parent, and any class, variant or style binding on it applies to nothing. To style the provider itself give it a tag (`subType: \"div\"`, `section`, …); otherwise style its parent or a child.",
+			description: "Fetches data from a backend HTTP API (its `query`/`method`/`credentials`) and exposes the response as a data source ITS DESCENDANTS bind to (source `apiContainer_<id>.data`; only elements inside it can consume it). This is how you get backend data into the frontend. Its `mockData` prop is builder-only sample data — the published runtime fetches the real `query`, so always set a real query for production. With `cache: true` a browser request is kept for `staleTime` seconds (default 30) and shared with every provider asking the same thing; it is off unless set. A flow refreshes it with `performQuery` or the global `invalidateQueries` step, and `refreshSeconds` makes it ask again on its own every N seconds (either runtime; paused while the tab is hidden) — the way to keep a queue, feed or status board current without a plugin. A server provider (`runtime: \"server\"`) whose answer means the address shows nothing — a record not found — says so in `notFound`, a template against its answer (`{{ source.found == false }}`): the page is sent with status 404, rendered as written. Its `subType` (container tag) is empty by default, and then it renders NO element of its own: its children lay out directly in its parent, and any class, variant or style binding on it applies to nothing. To style the provider itself give it a tag (`subType: \"div\"`, `section`, …); otherwise style its parent or a child.",
 			items: [],
 			bindings: {},
 			styleSelectors: { base: "" },
@@ -6976,7 +6979,7 @@ var t$42 = t$60()({
 		settings: {}
 	}
 });
-var r$31 = t$60()({
+var r$30 = t$60()({
 	type: "container",
 	attributeValues: {
 		subType: e$39()([
@@ -7093,11 +7096,11 @@ var B$2 = {
 	ApiContainer: n$34,
 	BlockHtml: t$59,
 	BlockJsx: t$58,
-	Button: r$34,
+	Button: r$33,
 	Carousel: t$43,
 	CarouselTrack: t$42,
 	Channel: n$33,
-	Container: r$31,
+	Container: r$30,
 	Custom: t$57,
 	DialogContainer: t$60()({
 		type: "dialogContainer",
@@ -7851,7 +7854,7 @@ var B$2 = {
 		}
 	}),
 	Text: t$51,
-	ThemeToggle: r$33,
+	ThemeToggle: r$32,
 	Video: t$44
 };
 /** Every declaration, read through the part of its shape this catalog uses. */
@@ -8370,6 +8373,16 @@ var AUTHORING_CODES = {
 		means: "a `runtime: 'server'` element inside a component: the page server resolves a page's and its layouts', never a component's",
 		fix: "put the provider on the page, around the instance, and hand the component its rows as a prop"
 	},
+	"not-found-in-browser": {
+		kind: "refused",
+		means: "`notFound` on a provider asked from the browser — its answer arrives after the page was sent with its status",
+		fix: "`runtime: 'server'` on the provider, or `visible` on the page's \"not found\" part instead"
+	},
+	"not-found-not-a-template": {
+		kind: "refused",
+		means: "`notFound` that is not one `{{ expression }}` against the answer — never `true`, so never a 404",
+		fix: "`notFound: '{{ source.found == false }}'`"
+	},
 	"server-data-in-browser": {
 		kind: "refused",
 		means: "a provider asking for the project's own data (`/data/…`, read by its server from `src/data/` and never served) from the browser",
@@ -8855,6 +8868,11 @@ var AUTHORING_CODES = {
 		means: "a colour written out in a class where the space has a token of that value — it stays put in the dark scheme",
 		fix: "`var(--token)` when it should follow the scheme; a token of one value of its own when it must stay the same in both"
 	},
+	"not-found-page": {
+		kind: "suggested",
+		means: "a space with no page of its own for an address no other page answers — a plain one was added, in the home page’s layout, sent with status 404",
+		fix: "a page whose slug is `'*'`: `{ id: 'not-found', name: 'Not found', slug: '*', layout: …, body: [...] }`"
+	},
 	"unused-component": {
 		kind: "suggested",
 		means: "a component no page, layout or other component places",
@@ -9154,6 +9172,8 @@ var t$30 = {
 	TEXT_INDENT: "text-indent",
 	TEXT_TRANSFORM: "text-transform",
 	DIRECTION: "direction",
+	WRITING_MODE: "writing-mode",
+	TEXT_ORIENTATION: "text-orientation",
 	WHITE_SPACE: "white-space",
 	TEXT_WRAP: "text-wrap",
 	WORD_BREAK: "word-break",
@@ -9178,7 +9198,7 @@ Object.values(t$30).map((e) => ({
 	path: e,
 	label: e
 }));
-t$30.DISPLAY, t$30.FLEX_WRAP, t$30.FLEX_DIRECTION, t$30.ALIGN_ITEMS, t$30.JUSTIFY_ITEMS, t$30.JUSTIFY_CONTENT, t$30.ALIGN_CONTENT, t$30.ROW_GAP, t$30.COLUMN_GAP, t$30.GRID_ROW_GAP, t$30.GRID_COLUMN_GAP, t$30.GRID_TEMPLATE_AREAS, t$30.GRID_TEMPLATE_COLUMNS, t$30.GRID_TEMPLATE_ROWS, t$30.GRID_AUTO_FLOW, t$30.GRID_AUTO_ROWS, t$30.GRID_AUTO_COLUMNS, t$30.GRID_ROW_START, t$30.GRID_COLUMN_START, t$30.GRID_ROW_END, t$30.GRID_COLUMN_END, t$30.ALIGN_SELF, t$30.JUSTIFY_SELF, t$30.ORDER, t$30.FLEX_GROW, t$30.FLEX_SHRINK, t$30.FLEX_BASIS, t$30.LIST_STYLE, t$30.LIST_STYLE_TYPE, t$30.LIST_STYLE_POSITION, t$30.LIST_STYLE_IMAGE, t$30.BACKGROUND_COLOR, t$30.BACKGROUND_IMAGE, t$30.BACKGROUND_POSITION, t$30.BACKGROUND_SIZE, t$30.BACKGROUND_CLIP, t$30.BACKGROUND_ORIGIN, t$30.BACKGROUND_REPEAT, t$30.BACKGROUND_ATTACHMENT, t$30.BACKGROUND_BLEND_MODE, t$30.MASK_IMAGE, t$30.MASK_SIZE, t$30.MASK_POSITION, t$30.MASK_REPEAT, t$30.MASK_COMPOSITE, t$30.WEBKIT_MASK_IMAGE, t$30.BORDER_TOP_STYLE, t$30.BORDER_TOP_WIDTH, t$30.BORDER_TOP_COLOR, t$30.BORDER_BOTTOM_STYLE, t$30.BORDER_BOTTOM_WIDTH, t$30.BORDER_BOTTOM_COLOR, t$30.BORDER_LEFT_STYLE, t$30.BORDER_LEFT_WIDTH, t$30.BORDER_LEFT_COLOR, t$30.BORDER_RIGHT_STYLE, t$30.BORDER_RIGHT_WIDTH, t$30.BORDER_RIGHT_COLOR, t$30.BORDER_TOP_LEFT_RADIUS, t$30.BORDER_TOP_RIGHT_RADIUS, t$30.BORDER_BOTTOM_LEFT_RADIUS, t$30.BORDER_BOTTOM_RIGHT_RADIUS, t$30.BORDER_COLLAPSE, t$30.BORDER_SPACING, t$30.TABLE_LAYOUT, t$30.OPACITY, t$30.VISIBILITY, t$30.CURSOR, t$30.TRANSITION, t$30.TRANSITION_PROPERTY, t$30.TRANSITION_DURATION, t$30.TRANSITION_TIMING_FUNCTION, t$30.TRANSITION_DELAY, t$30.TRANSITION_BEHAVIOR, t$30.ANIMATION, t$30.ANIMATION_NAME, t$30.ANIMATION_DURATION, t$30.ANIMATION_TIMING_FUNCTION, t$30.ANIMATION_DELAY, t$30.ANIMATION_ITERATION_COUNT, t$30.ANIMATION_DIRECTION, t$30.ANIMATION_FILL_MODE, t$30.ANIMATION_PLAY_STATE, t$30.ANIMATION_TIMELINE, t$30.ANIMATION_RANGE, t$30.BOX_SHADOW, t$30.FILTER, t$30.BACKDROP_FILTER, t$30.MIX_BLEND_MODE, t$30.ISOLATION, t$30.CLIP_PATH, t$30.TRANSFORM, t$30.TRANSFORM_ORIGIN, t$30.TRANSLATE, t$30.ROTATE, t$30.SCALE, t$30.TRANSFORM_STYLE, t$30.PERSPECTIVE, t$30.PERSPECTIVE_ORIGIN, t$30.BACKFACE_VISIBILITY, t$30.WILL_CHANGE, t$30.OUTLINE_WIDTH, t$30.OUTLINE_STYLE, t$30.OUTLINE_COLOR, t$30.OUTLINE_OFFSET, t$30.POINTER_EVENTS, t$30.USER_SELECT, t$30.TOUCH_ACTION, t$30.RESIZE, t$30.APPEARANCE, t$30.SCROLL_BEHAVIOR, t$30.OVERSCROLL_BEHAVIOR, t$30.SCROLL_SNAP_TYPE, t$30.SCROLL_SNAP_ALIGN, t$30.SCROLL_SNAP_STOP, t$30.SCROLL_PADDING_TOP, t$30.SCROLL_MARGIN_TOP, t$30.ACCENT_COLOR, t$30.CARET_COLOR, t$30.COLOR_SCHEME, t$30.POSITION, t$30.FLOAT, t$30.CLEAR, t$30.Z_INDEX, t$30.TOP, t$30.BOTTOM, t$30.LEFT, t$30.RIGHT, t$30.BOX_SIZING, t$30.ASPECT_RATIO, t$30.WIDTH, t$30.HEIGHT, t$30.MIN_WIDTH, t$30.MIN_HEIGHT, t$30.MAX_WIDTH, t$30.MAX_HEIGHT, t$30.OVERFLOW, t$30.OVERFLOW_X, t$30.OVERFLOW_Y, t$30.SCROLLBAR_WIDTH, t$30.SCROLLBAR_COLOR, t$30.CONTAINER_TYPE, t$30.CONTENT, t$30.CONTAINER_NAME, t$30.OBJECT_FIT, t$30.OBJECT_POSITION, t$30.COLUMN_WIDTH, t$30.COLUMN_COUNT, t$30.MARGIN_TOP, t$30.MARGIN_BOTTOM, t$30.MARGIN_LEFT, t$30.MARGIN_RIGHT, t$30.PADDING_TOP, t$30.PADDING_BOTTOM, t$30.PADDING_LEFT, t$30.PADDING_RIGHT, t$30.FONT_FAMILY, t$30.FONT_WEIGHT, t$30.FONT_SIZE, t$30.LINE_HEIGHT, t$30.COLOR, t$30.TEXT_ALIGN, t$30.FONT_STYLE, t$30.FONT_VARIANT, t$30.FONT_VARIANT_NUMERIC, t$30.FONT_FEATURE_SETTINGS, t$30.TEXT_DECORATION, t$30.TEXT_DECORATION_LINE, t$30.TEXT_DECORATION_COLOR, t$30.TEXT_DECORATION_STYLE, t$30.TEXT_DECORATION_THICKNESS, t$30.TEXT_UNDERLINE_OFFSET, t$30.LETTER_SPACING, t$30.WORD_SPACING, t$30.TEXT_INDENT, t$30.TEXT_TRANSFORM, t$30.DIRECTION, t$30.WHITE_SPACE, t$30.TEXT_WRAP, t$30.WORD_BREAK, t$30.OVERFLOW_WRAP, t$30.HYPHENS, t$30.VERTICAL_ALIGN, t$30.TEXT_OVERFLOW, t$30.TEXT_SHADOW, t$30.LINE_CLAMP, t$30.WEBKIT_LINE_CLAMP, t$30.WEBKIT_BOX_ORIENT, t$30.WEBKIT_TEXT_FILL_COLOR, t$30.WEBKIT_BACKGROUND_CLIP, t$30.BOX_DECORATION_BREAK, t$30.WEBKIT_BOX_DECORATION_BREAK, t$30.FILL, t$30.STROKE, t$30.STROKE_WIDTH;
+t$30.DISPLAY, t$30.FLEX_WRAP, t$30.FLEX_DIRECTION, t$30.ALIGN_ITEMS, t$30.JUSTIFY_ITEMS, t$30.JUSTIFY_CONTENT, t$30.ALIGN_CONTENT, t$30.ROW_GAP, t$30.COLUMN_GAP, t$30.GRID_ROW_GAP, t$30.GRID_COLUMN_GAP, t$30.GRID_TEMPLATE_AREAS, t$30.GRID_TEMPLATE_COLUMNS, t$30.GRID_TEMPLATE_ROWS, t$30.GRID_AUTO_FLOW, t$30.GRID_AUTO_ROWS, t$30.GRID_AUTO_COLUMNS, t$30.GRID_ROW_START, t$30.GRID_COLUMN_START, t$30.GRID_ROW_END, t$30.GRID_COLUMN_END, t$30.ALIGN_SELF, t$30.JUSTIFY_SELF, t$30.ORDER, t$30.FLEX_GROW, t$30.FLEX_SHRINK, t$30.FLEX_BASIS, t$30.LIST_STYLE, t$30.LIST_STYLE_TYPE, t$30.LIST_STYLE_POSITION, t$30.LIST_STYLE_IMAGE, t$30.BACKGROUND_COLOR, t$30.BACKGROUND_IMAGE, t$30.BACKGROUND_POSITION, t$30.BACKGROUND_SIZE, t$30.BACKGROUND_CLIP, t$30.BACKGROUND_ORIGIN, t$30.BACKGROUND_REPEAT, t$30.BACKGROUND_ATTACHMENT, t$30.BACKGROUND_BLEND_MODE, t$30.MASK_IMAGE, t$30.MASK_SIZE, t$30.MASK_POSITION, t$30.MASK_REPEAT, t$30.MASK_COMPOSITE, t$30.WEBKIT_MASK_IMAGE, t$30.BORDER_TOP_STYLE, t$30.BORDER_TOP_WIDTH, t$30.BORDER_TOP_COLOR, t$30.BORDER_BOTTOM_STYLE, t$30.BORDER_BOTTOM_WIDTH, t$30.BORDER_BOTTOM_COLOR, t$30.BORDER_LEFT_STYLE, t$30.BORDER_LEFT_WIDTH, t$30.BORDER_LEFT_COLOR, t$30.BORDER_RIGHT_STYLE, t$30.BORDER_RIGHT_WIDTH, t$30.BORDER_RIGHT_COLOR, t$30.BORDER_TOP_LEFT_RADIUS, t$30.BORDER_TOP_RIGHT_RADIUS, t$30.BORDER_BOTTOM_LEFT_RADIUS, t$30.BORDER_BOTTOM_RIGHT_RADIUS, t$30.BORDER_COLLAPSE, t$30.BORDER_SPACING, t$30.TABLE_LAYOUT, t$30.OPACITY, t$30.VISIBILITY, t$30.CURSOR, t$30.TRANSITION, t$30.TRANSITION_PROPERTY, t$30.TRANSITION_DURATION, t$30.TRANSITION_TIMING_FUNCTION, t$30.TRANSITION_DELAY, t$30.TRANSITION_BEHAVIOR, t$30.ANIMATION, t$30.ANIMATION_NAME, t$30.ANIMATION_DURATION, t$30.ANIMATION_TIMING_FUNCTION, t$30.ANIMATION_DELAY, t$30.ANIMATION_ITERATION_COUNT, t$30.ANIMATION_DIRECTION, t$30.ANIMATION_FILL_MODE, t$30.ANIMATION_PLAY_STATE, t$30.ANIMATION_TIMELINE, t$30.ANIMATION_RANGE, t$30.BOX_SHADOW, t$30.FILTER, t$30.BACKDROP_FILTER, t$30.MIX_BLEND_MODE, t$30.ISOLATION, t$30.CLIP_PATH, t$30.TRANSFORM, t$30.TRANSFORM_ORIGIN, t$30.TRANSLATE, t$30.ROTATE, t$30.SCALE, t$30.TRANSFORM_STYLE, t$30.PERSPECTIVE, t$30.PERSPECTIVE_ORIGIN, t$30.BACKFACE_VISIBILITY, t$30.WILL_CHANGE, t$30.OUTLINE_WIDTH, t$30.OUTLINE_STYLE, t$30.OUTLINE_COLOR, t$30.OUTLINE_OFFSET, t$30.POINTER_EVENTS, t$30.USER_SELECT, t$30.TOUCH_ACTION, t$30.RESIZE, t$30.APPEARANCE, t$30.SCROLL_BEHAVIOR, t$30.OVERSCROLL_BEHAVIOR, t$30.SCROLL_SNAP_TYPE, t$30.SCROLL_SNAP_ALIGN, t$30.SCROLL_SNAP_STOP, t$30.SCROLL_PADDING_TOP, t$30.SCROLL_MARGIN_TOP, t$30.ACCENT_COLOR, t$30.CARET_COLOR, t$30.COLOR_SCHEME, t$30.POSITION, t$30.FLOAT, t$30.CLEAR, t$30.Z_INDEX, t$30.TOP, t$30.BOTTOM, t$30.LEFT, t$30.RIGHT, t$30.BOX_SIZING, t$30.ASPECT_RATIO, t$30.WIDTH, t$30.HEIGHT, t$30.MIN_WIDTH, t$30.MIN_HEIGHT, t$30.MAX_WIDTH, t$30.MAX_HEIGHT, t$30.OVERFLOW, t$30.OVERFLOW_X, t$30.OVERFLOW_Y, t$30.SCROLLBAR_WIDTH, t$30.SCROLLBAR_COLOR, t$30.CONTAINER_TYPE, t$30.CONTENT, t$30.CONTAINER_NAME, t$30.OBJECT_FIT, t$30.OBJECT_POSITION, t$30.COLUMN_WIDTH, t$30.COLUMN_COUNT, t$30.MARGIN_TOP, t$30.MARGIN_BOTTOM, t$30.MARGIN_LEFT, t$30.MARGIN_RIGHT, t$30.PADDING_TOP, t$30.PADDING_BOTTOM, t$30.PADDING_LEFT, t$30.PADDING_RIGHT, t$30.FONT_FAMILY, t$30.FONT_WEIGHT, t$30.FONT_SIZE, t$30.LINE_HEIGHT, t$30.COLOR, t$30.TEXT_ALIGN, t$30.FONT_STYLE, t$30.FONT_VARIANT, t$30.FONT_VARIANT_NUMERIC, t$30.FONT_FEATURE_SETTINGS, t$30.TEXT_DECORATION, t$30.TEXT_DECORATION_LINE, t$30.TEXT_DECORATION_COLOR, t$30.TEXT_DECORATION_STYLE, t$30.TEXT_DECORATION_THICKNESS, t$30.TEXT_UNDERLINE_OFFSET, t$30.LETTER_SPACING, t$30.WORD_SPACING, t$30.TEXT_INDENT, t$30.TEXT_TRANSFORM, t$30.DIRECTION, t$30.WRITING_MODE, t$30.TEXT_ORIENTATION, t$30.WHITE_SPACE, t$30.TEXT_WRAP, t$30.WORD_BREAK, t$30.OVERFLOW_WRAP, t$30.HYPHENS, t$30.VERTICAL_ALIGN, t$30.TEXT_OVERFLOW, t$30.TEXT_SHADOW, t$30.LINE_CLAMP, t$30.WEBKIT_LINE_CLAMP, t$30.WEBKIT_BOX_ORIENT, t$30.WEBKIT_TEXT_FILL_COLOR, t$30.WEBKIT_BACKGROUND_CLIP, t$30.BOX_DECORATION_BREAK, t$30.WEBKIT_BOX_DECORATION_BREAK, t$30.FILL, t$30.STROKE, t$30.STROKE_WIDTH;
 [...e$38];
 /** Both binding forms as one list. The map form targets attributes, which is what nearly every binding does. */
 var toBindingSpecs = (bind) => Array.isArray(bind) ? bind : Object.entries(bind).map(([to, source]) => ({
@@ -9517,11 +9537,11 @@ var e$27 = {
 	"motion-safe": "@media (prefers-reduced-motion: no-preference)"
 };
 var t$23 = Object.keys(e$27);
-var r$19 = (t) => Object.hasOwn(e$27, t);
+var r$18 = (t) => Object.hasOwn(e$27, t);
 var i$17 = String.raw`\d+(?:\.\d+)?(?:px|rem|em|ch)`;
 var a$15 = String.raw`\((?:min|max)-width:\s*${i$17}\)`;
 var o$17 = new RegExp(String.raw`^container(?:\s+(?<name>-?[_a-zA-Z][\w-]*))?\s+(?<query>${a$15}(?:\s+and\s+${a$15})?)$`);
-var s$14 = (e) => {
+var s$15 = (e) => {
 	let t = o$17.exec(e.trim());
 	if (t?.groups) return {
 		name: t.groups.name,
@@ -9529,8 +9549,8 @@ var s$14 = (e) => {
 	};
 };
 var c$12 = (e) => {
-	if (r$19(e)) return e;
-	let t = s$14(e);
+	if (r$18(e)) return e;
+	let t = s$15(e);
 	if (t) return t.name ? `container ${t.name} ${t.query}` : `container ${t.query}`;
 };
 var e$26 = [
@@ -9573,7 +9593,7 @@ var o$16 = [
 	"line-height",
 	"vertical-align"
 ];
-var s$13 = [
+var s$14 = [
 	"font-family",
 	"font-size",
 	"font-style",
@@ -9600,16 +9620,16 @@ var l$8 = {
 		"color",
 		"content",
 		"direction",
-		...s$13
+		...s$14
 	],
 	placeholder: [
 		...o$16,
-		...s$13,
+		...s$14,
 		...c$11
 	],
 	"first-line": [
 		...o$16,
-		...s$13,
+		...s$14,
 		...c$11
 	]
 };
@@ -9617,7 +9637,7 @@ var u$7 = (e, t) => {
 	let n = l$8[e];
 	return !n || t.startsWith("--") || n.includes(t);
 };
-var d$8 = /* @__PURE__ */ new Set([
+var d$7 = /* @__PURE__ */ new Set([
 	"none",
 	"normal",
 	"open-quote",
@@ -9629,8 +9649,8 @@ var d$8 = /* @__PURE__ */ new Set([
 	"unset",
 	"revert"
 ]);
-var f$6 = /^(?:counter|counters|attr|url|var|image-set|linear-gradient|radial-gradient|conic-gradient)\(/i;
-var p$7 = (e) => {
+var f$5 = /^(?:counter|counters|attr|url|var|image-set|linear-gradient|radial-gradient|conic-gradient)\(/i;
+var p$8 = (e) => {
 	let t = [], n = "", r = "", i = 0;
 	for (let a of e) {
 		if (r) {
@@ -9648,9 +9668,9 @@ var p$7 = (e) => {
 	}
 	return n && t.push(n), r || i !== 0 ? void 0 : t;
 };
-var m$3 = (e) => {
-	let t = p$7(e.trim());
-	return t?.length ? t.every((e) => /^(["']).*\1$/s.test(e) || d$8.has(e.toLowerCase()) || f$6.test(e) && e.endsWith(")")) : !1;
+var m$4 = (e) => {
+	let t = p$8(e.trim());
+	return t?.length ? t.every((e) => /^(["']).*\1$/s.test(e) || d$7.has(e.toLowerCase()) || f$5.test(e) && e.endsWith(")")) : !1;
 };
 var e$25 = [
 	"hover",
@@ -9670,7 +9690,7 @@ var e$25 = [
 	"even"
 ];
 var t$21 = "plitzi-component--hidden";
-var r$17 = {
+var r$16 = {
 	odd: 0,
 	even: 1,
 	first: 2,
@@ -9687,7 +9707,7 @@ var r$17 = {
 	disabled: 13,
 	hidden: 14
 };
-var i$15 = (e) => Object.hasOwn(r$17, e);
+var i$15 = (e) => Object.hasOwn(r$16, e);
 var l$7 = {
 	current: ":is([aria-current]:not([aria-current=\"false\"]),[aria-pressed=\"true\"],[aria-selected=\"true\"],[role=\"tabpanel\"]:not([hidden]))",
 	expanded: "[aria-expanded=\"true\"]",
@@ -9698,7 +9718,7 @@ var l$7 = {
 	even: ":nth-child(even)"
 };
 var u$6 = (e) => (i$15(e) ? l$7[e] : void 0) ?? `:${e}`;
-var p$6 = (e) => e === ">";
+var p$7 = (e) => e === ">";
 var n$16 = (e) => {
 	let t = typeof e == "string" && e.trim() !== "" ? Number(e) : e;
 	return typeof t == "number" && Number.isInteger(t) && t >= 250 ? t : void 0;
@@ -9880,7 +9900,7 @@ var onInterval = (ms) => {
 * and hide the arrow at the end already reached: `[named('row', onScroll()), setState({ key: 'atEnd', type:
 * 'boolean', value: '{{ row.atEnd }}' })]`.
 */
-var onScroll = () => on(s$21);
+var onScroll = () => on(s$22);
 var onPageLoad = () => on("onPageLoad");
 /**
 * The end of a server action this element started — the trigger a `detached` run needs, because that step returns
@@ -12094,7 +12114,7 @@ var toStates = (states) => {
 };
 var CLASS_NAME = /^-?[_a-zA-Z][\w-]*$/;
 var toAncestors = (ancestors) => Object.entries(ancestors ?? {}).map(([name, ancestor]) => {
-	if (!p$6(name) && !CLASS_NAME.test(name)) throw new AuthoringError("ancestor-not-class", `The ancestor "${name}" is not a class name. An ancestor condition is keyed by a class that ancestor wears — \`[card.name]\` for a \`styles()\` declaration — or by \`'>'\` for the parent, whatever it wears.`);
+	if (!p$7(name) && !CLASS_NAME.test(name)) throw new AuthoringError("ancestor-not-class", `The ancestor "${name}" is not a class name. An ancestor condition is keyed by a class that ancestor wears — \`[card.name]\` for a \`styles()\` declaration — or by \`'>'\` for the parent, whatever it wears.`);
 	return [name, toBlocks({
 		css: ancestor.css,
 		states: ancestor.states,
@@ -12132,7 +12152,7 @@ var assertPseudo = (pseudo, part) => {
 	for (const rules of ruleSets) for (const [property, value] of Object.entries(rules)) {
 		if (property === "content") {
 			if (!i$16.includes(pseudo)) throw new AuthoringError("style-pseudo-content", `\`content\` on \`::${pseudo}\` draws nothing: only ${i$16.map((name) => `\`::${name}\``).join(", ")} take one.`);
-			if (!m$3(String(value))) throw new AuthoringError("style-pseudo-content", `\`content: ${String(value)}\` on \`::${pseudo}\` is not text CSS can read, so nothing is drawn. Text goes in quotes inside the string — \`content: '"${String(value).replace(/"/g, "\\\"")}"'\` — and an empty box is \`'""'\`; \`counter()\`, \`attr()\` and \`url()\` are written as they are.`);
+			if (!m$4(String(value))) throw new AuthoringError("style-pseudo-content", `\`content: ${String(value)}\` on \`::${pseudo}\` is not text CSS can read, so nothing is drawn. Text goes in quotes inside the string — \`content: '"${String(value).replace(/"/g, "\\\"")}"'\` — and an empty box is \`'""'\`; \`counter()\`, \`attr()\` and \`url()\` are written as they are.`);
 			continue;
 		}
 		if (!u$7(pseudo, property)) throw new AuthoringError("style-pseudo-property", `\`${property}\` on \`::${pseudo}\` is dropped by every browser — \`::${pseudo}\` honours ${(l$8[pseudo] ?? []).map((name) => `\`${name}\``).join(", ")}. Style the element itself for the rest.`);
@@ -14305,6 +14325,33 @@ var footerRow = styles("footer-row", { css: {
 		gap: "8px"
 	}
 } });
+container({
+	id: "not-found-main",
+	subType: "main",
+	class: [shell$1, heroBand],
+	children: [
+		text$1("404", {
+			id: "not-found-kicker",
+			class: kicker
+		}),
+		heading("Page not found", {
+			id: "not-found-title",
+			subType: "h1",
+			class: sectionTitle
+		}),
+		paragraph({
+			id: "not-found-lede",
+			class: bodyText,
+			content: "There is nothing at this address — it may have moved, or the link has a typo."
+		}),
+		link({
+			id: "not-found-home",
+			href: "/",
+			class: button,
+			content: "Back to the home page"
+		})
+	]
+});
 /**
 * The space, declared: this file is the page, and it assembles the rest — the palette in `tokens.ts`, the classes in
 * `theme.ts`, what the page says in `content.ts`. Everything else — element ids, style selector names, the
@@ -14614,6 +14661,17 @@ container({
 		})]
 	})]
 });
+heading("Page not found", {
+	id: "not-found-title",
+	subType: "h1"
+}), paragraph({
+	id: "not-found-lede",
+	content: "There is nothing at this address."
+}), link({
+	id: "not-found-home",
+	href: "/",
+	content: "Back to the home page"
+});
 /**
 * The space, declared — and nothing in it yet but what every space starts from: tokens for both themes, a layout the
 * pages render in, and one page.
@@ -15211,6 +15269,14 @@ var builtPluginTypes = (folder) => existsSync(folder) ? readdirSync(folder, { wi
 	return [entry.name, ...e$32(pluginSchema) ? Object.keys(pluginSchema) : []];
 }) : [];
 /**
+* The stylesheets of the plugins under `folder` — every `.css` in a plugin's folder, at any depth — as their text, for
+* `authorSpace`'s `stylesheets`: the tokens a plugin's own CSS reads are tokens the space uses.
+*/
+var pluginStylesheets = (folder) => existsSync(folder) ? readdirSync(folder, {
+	recursive: true,
+	withFileTypes: true
+}).filter((entry) => entry.isFile() && entry.name.endsWith(".css")).map((entry) => path.join(entry.parentPath, entry.name)).sort().map((file) => readFileSync(file, "utf-8")) : [];
+/**
 * `projectAuthoring` of the project at `root`, held to the same check: for a tool that works on a project from another
 * folder — the CLI, run anywhere inside one. A project's own code calls `projectAuthoring()`.
 */
@@ -15221,6 +15287,7 @@ var projectAuthoringAt = async (root) => {
 	return {
 		plugins: await pluginDeclarations(path.join(at, o$1$1)),
 		pluginTypes: builtPluginTypes(path.join(at, u$2)),
+		stylesheets: pluginStylesheets(path.join(at, o$1$1)),
 		...existsSync(serverData) ? { serverData: projectData(serverData) } : {},
 		data: publicData(path.join(at, p$1))
 	};
@@ -18285,11 +18352,43 @@ var move$1 = async (elementId, options) => {
 	].join("\n"));
 };
 //#endregion
+//#region src/commands/projectSettings.ts
+/**
+* What the project's processes start with: what its `.env` sets, under what the environment already has — as its
+* scripts read it (`--env-file-if-exists=.env`). Read, never loaded into this process's own environment.
+*/
+var projectSettings = async (root) => {
+	const text = await fs.readFile(path.join(root, ".env"), "utf-8").catch(() => void 0);
+	const parsed = text === void 0 ? {} : parseEnv(text);
+	return {
+		file: text !== void 0,
+		value: (name) => process.env[name] ?? parsed[name] ?? ""
+	};
+};
+//#endregion
 //#region src/commands/check.ts
-/** Where `--as` reads the account's password: the environment, never the command line, which a shell keeps. */
+/** The account `verify` signs in as for the pages that send a visitor to sign in: the project's, in `.env`. */
+var CHECK_USER_ENV = "PLITZI_CHECK_USER";
+/** Where the account's password is read: `.env` or the environment, never the command line, which a shell keeps. */
 var CHECK_PASSWORD_ENV = "PLITZI_CHECK_PASSWORD";
 /** The project's sign-in route: where `createServer({ auth })` mounts its flows unless told otherwise. */
 var SIGN_IN_PATH = "/auth/login";
+/**
+* The account a check signs in as: the one named, or the project's own (`PLITZI_CHECK_USER`) — `undefined` when
+* neither is — with its password from `PLITZI_CHECK_PASSWORD`, each read from the environment over `.env`, as the
+* project's scripts read them.
+*/
+var checkAccount = async (root, username) => {
+	const settings = await projectSettings(root);
+	const named = username ?? settings.value("PLITZI_CHECK_USER");
+	if (!named) return;
+	const password = settings.value(CHECK_PASSWORD_ENV);
+	if (!password) return { problem: `${named} signs in with the password in ${CHECK_PASSWORD_ENV}: set it in .env — never on the command line, which a shell keeps` };
+	return {
+		username: named,
+		password
+	};
+};
 /** The space the project declares, authored. Only for one written here. */
 var projectSpace = async (root) => {
 	const project = await loadProjectSpace(root);
@@ -18310,12 +18409,25 @@ var projectSpace = async (root) => {
 * (`/p/:slug`), so the one meant is read off the list rather than guessed from letters.
 */
 var noPageMessage = (handles, pathname) => `no page of the space answers at ${pathname}: its pages are ${Object.values(handles.pages).map((page) => page.path).join(", ")}`;
+/**
+* The space's "not found" page: a page whose slug is `*`, the page of every address under its folder that no other
+* page answers. Not every path ending in `*` — `update/*` is a page of its own that answers a whole subtree.
+*/
+var isNotFoundPage = (page) => page.slug === "*";
+/** A path whose last segment is `*`: it answers every address under it. */
+var isSplat = (path) => path.endsWith("/*");
+/** Where `verify` looks at a page for an address nothing answers: an address under its folder no page has. */
+var NOT_FOUND_PROBE = "plitzi-check-not-found";
+/** The page an address is answered by — as the router picks: every page with a path of its own first, then the "not found" pages, the deepest folder's before the space's. */
 var pageFor = (handles, pathname) => {
 	const wanted = pathname.replace(/\/$/, "").split("/");
-	return Object.values(handles.pages).find((page) => {
-		const segments = page.path.replace(/\/$/, "").split("/");
-		return segments.length === wanted.length && segments.every((segment, index) => segment.startsWith(":") || /^\{\{.*\}\}$/.test(segment) || segment === wanted[index]);
-	})?.id;
+	const answers = (path) => {
+		const splat = isSplat(path);
+		const segments = (splat ? path.slice(0, -2) : path.replace(/\/$/, "")).split("/");
+		return (splat ? wanted.length > segments.length : segments.length === wanted.length) && segments.every((segment, index) => segment.startsWith(":") || /^\{\{.*\}\}$/.test(segment) || segment === wanted[index]);
+	};
+	const pages = Object.values(handles.pages);
+	return [...pages.filter((page) => !isNotFoundPage(page)), ...pages.filter(isNotFoundPage).sort((a, b) => b.path.length - a.path.length)].find((page) => answers(page.path))?.id;
 };
 /** The elements a piece of HTML carries, by the id each is marked with. */
 var markedIn = (html) => new Set([...html.matchAll(/data-plitzi-el="([^"]+)"/g)].map(([, id]) => id));
@@ -18708,17 +18820,23 @@ var checkAt = async (browser, origin, pathname, width, scheme, authored, asked,
 		} });
 		if (!signedIn.ok()) return unchecked({
 			code: "not-signed-in",
-			message: signedIn.status() === 404 ? `nothing answers at ${SIGN_IN_PATH}: --as signs in through the routes createServer({ auth }) mounts there` : `${account.username} was not signed in (${String(signedIn.status())}): ${(await signedIn.text()).slice(0, 200)} — check ${CHECK_PASSWORD_ENV}`,
+			message: signedIn.status() === 404 ? `nothing answers at ${SIGN_IN_PATH}: --as signs in through the routes createServer({ auth }) mounts there` : `${account.username} was not signed in (${String(signedIn.status())}): ${(await signedIn.text()).slice(0, 200)} — check ${CHECK_PASSWORD_ENV} in .env`,
 			width
 		});
 	}
 	const consoleErrors = [];
 	const failedRequests = [];
 	page.on("pageerror", (error) => consoleErrors.push(error.message));
+	const address = `${origin}${pathname}`;
 	page.on("console", (message) => {
-		if (message.type() === "error") consoleErrors.push(message.text());
+		if (message.type() === "error" && message.location().url !== address) consoleErrors.push(message.text());
 	});
+	let sentWith;
 	page.on("response", (response) => {
+		if (sentWith === void 0 && response.url() === address) {
+			sentWith = response.status();
+			return;
+		}
 		if (response.status() >= 400 && response.url().startsWith(origin)) failedRequests.push(`${String(response.status())} ${response.url().slice(origin.length)}`);
 	});
 	if (handles && !pageFor(handles, pathname)) return {
@@ -18743,7 +18861,7 @@ var checkAt = async (browser, origin, pathname, width, scheme, authored, asked,
 	if (withoutTrailingSlash(landed) !== withoutTrailingSlash(new URL(`${origin}${pathname}`).pathname)) return {
 		...unchecked({
 			code: "redirected",
-			message: account ? `${pathname} sent the browser to ${landed}, signed in as ${account.username}: that account may not see it` : `${pathname} sent the browser to ${landed} — what a page for signed-in visitors does: \`plitzi page check ${pathname} --as <username>\` signs in first, the password in ${CHECK_PASSWORD_ENV}`,
+			message: account ? `${pathname} sent the browser to ${landed}, signed in as ${account.username}: that account may not see it` : `${pathname} sent the browser to ${landed} — what a page for signed-in visitors does: \`plitzi page check ${pathname} --as <username>\` signs in first, the password in ${CHECK_PASSWORD_ENV} in .env`,
 			width
 		}),
 		consoleErrors,
@@ -18773,8 +18891,18 @@ var checkAt = async (browser, origin, pathname, width, scheme, authored, asked,
 		...flow.on === void 0 ? {} : { elementId: flow.on },
 		width
 	}));
+	const statusIssues = (handles && pageId ? isNotFoundPage(handles.pages[pageId]) : false) && sentWith !== 404 ? [{
+		code: "page-status",
+		message: `${pathname} shows the page for an address nothing answers, sent with status ${String(sentWith)}: a crawler reads it as a page that exists — the server should send it with 404`,
+		width
+	}] : sentWith !== void 0 && sentWith >= 400 && sentWith !== 404 ? [{
+		code: "page-status",
+		message: `${pathname} was sent with status ${String(sentWith)}`,
+		width
+	}] : [];
 	const issues = [
 		...noPage,
+		...statusIssues,
 		...report.issues.map((issue) => ({
 			...issue,
 			width
@@ -18803,7 +18931,8 @@ var checkAt = async (browser, origin, pathname, width, scheme, authored, asked,
 		...!asked.state || devTools.sources === void 0 ? {} : { sources: devTools.sources },
 		...devTools.element === void 0 ? {} : { element: devTools.element },
 		...styled === void 0 ? {} : { styles: styled },
-		...clicked === void 0 ? {} : { clicked }
+		...clicked === void 0 ? {} : { clicked },
+		...sentWith === 404 ? { notFound: true } : {}
 	};
 };
 /** What the page holds, when it was asked for: one compact line each, the shape of a source rather than its rows. */
@@ -18859,6 +18988,7 @@ var clickedText = (clicked) => {
 var reportText$2 = (report, asked) => {
 	const head = `${report.path} at ${String(report.width)} px`;
 	const held = [
+		...report.notFound ? ["  · sent with status 404: the page for an address that shows nothing"] : [],
 		...listsText(report.lists),
 		...browserOnlyText(report),
 		...heldText(report, asked),
@@ -18879,27 +19009,27 @@ var reportText$2 = (report, asked) => {
 	].join("\n");
 };
 var withoutTrailingSlash = (path) => path.length > 1 ? path.replace(/\/+$/, "") : path;
-var check = async (route, options) => {
+var check = async (routes, options) => {
 	const project = await projectHere("whose page to check");
 	if (!project) return;
-	const password = process.env[CHECK_PASSWORD_ENV];
-	if (options.as && !password) {
-		fail(`--as ${options.as} signs in with the password in ${CHECK_PASSWORD_ENV}: set it — ${CHECK_PASSWORD_ENV}=… npx plitzi page check …`);
+	const account = options.as === void 0 ? void 0 : await checkAccount(project.root, options.as);
+	if (account && "problem" in account) {
+		fail(`--as ${account.problem}.`);
 		return;
 	}
 	if (options.fill && !options.click) {
 		fail("--fill fills fields for a --click: with nothing clicked, nothing they hold is sent anywhere.");
 		return;
 	}
-	const account = options.as && password ? {
-		username: options.as,
-		password
-	} : void 0;
+	if (options.click && routes.length > 1) {
+		fail(`--click clicks one element of one page: ${String(routes.length)} were named.`);
+		return;
+	}
 	const asked = {
 		state: Boolean(options.state),
 		...options.element ? { element: options.element } : {}
 	};
-	const reports = await checkRoutes(project, [route ?? "/"], {
+	const reports = await checkRoutes(project, routes.length > 0 ? routes : ["/"], {
 		widths: options.width ?? [1440, 390],
 		asked,
 		ssr: Boolean(options.ssr),
@@ -18942,7 +19072,7 @@ var checkRoutes = async (project, routes, options) => {
 var staticPaths = async (root) => {
 	const authored = await projectSpace(root);
 	if ("problem" in authored) return authored;
-	return Object.values(authored.handles.pages).map((page) => page.path).filter((pathname) => pathname.split("/").every((segment) => !segment.startsWith(":") && !/\{\{.*\}\}/.test(segment)));
+	return Object.values(authored.handles.pages).map((page) => isNotFoundPage(page) ? `${page.path.slice(0, -1)}${NOT_FOUND_PROBE}` : page.path).filter((pathname) => pathname.split("/").every((segment) => !segment.startsWith(":") && !/\{\{.*\}\}/.test(segment)));
 };
 //#endregion
 //#region src/commands/functions.ts
@@ -23510,6 +23640,82 @@ var compareWith = async (browser, taken, target, view, regions, base) => {
 		diff: `${base}-diff.png`
 	};
 };
+/**
+* The pictures on one sheet, each under what it shows, four to a row and each 360 px wide: runs in the page, so it is
+* self-contained — no import, nothing it closes over.
+*/
+function contactSheet(cells) {
+	const CELL_WIDTH = 360;
+	const LABEL = 24;
+	const GAP = 12;
+	const load = (src) => new Promise((resolve, reject) => {
+		const image = new Image();
+		image.onload = () => resolve(image);
+		image.onerror = () => reject(/* @__PURE__ */ new Error("a picture of the sheet did not load"));
+		image.src = src;
+	});
+	return Promise.all(cells.map((cell) => load(cell.src))).then((images) => {
+		const columns = Math.min(4, images.length);
+		const heightOf = (image) => Math.round(image.naturalHeight * CELL_WIDTH / image.naturalWidth);
+		const cellHeight = Math.max(...images.map(heightOf));
+		const rows = Math.ceil(images.length / columns);
+		const canvas = document.createElement("canvas");
+		canvas.width = GAP + columns * 372;
+		canvas.height = GAP + rows * (LABEL + cellHeight + GAP);
+		const context = canvas.getContext("2d");
+		if (!context) throw new Error("no canvas to draw the sheet on");
+		context.fillStyle = "#ffffff";
+		context.fillRect(0, 0, canvas.width, canvas.height);
+		context.font = "13px ui-monospace, monospace";
+		images.forEach((image, index) => {
+			const x = GAP + index % columns * 372;
+			const y = GAP + Math.floor(index / columns) * (LABEL + cellHeight + GAP);
+			context.fillStyle = "#16181d";
+			context.fillText(cells[index].label, x, y + 16);
+			context.drawImage(image, x, y + LABEL, CELL_WIDTH, heightOf(image));
+			context.strokeStyle = "#d0d4dc";
+			context.strokeRect(x + .5, y + LABEL + .5, 359, heightOf(image) - 1);
+		});
+		return canvas.toDataURL("image/png");
+	});
+}
+/**
+* Each element clicked in turn, and the page pictured after it — `frames` pictures `every` ms apart, or one. What a
+* click changed is measured against the picture before it: nothing at all is said, as a click that did nothing.
+*/
+var clickThrough = async (taken, how, clicks, { frames, every }) => {
+	const moments = [{
+		label: "before",
+		png: taken.png
+	}];
+	const clicked = [];
+	for (const target of clicks) {
+		const element = taken.page.locator(selectorOf(target)).first();
+		if (await element.count() === 0) return { problem: `${target} is not on the page: --click takes an element's name or a CSS selector.` };
+		const before = moments[moments.length - 1].png;
+		try {
+			await element.click({ timeout: 3e3 });
+		} catch (error) {
+			return { problem: `${target} could not be clicked — hidden, covered or disabled: ${error instanceof Error ? error.message.split("\n")[0] : String(error)}` };
+		}
+		for (let frame = 1; frame <= Math.max(1, frames); frame += 1) {
+			await taken.page.waitForTimeout(every);
+			moments.push({
+				label: `${target} +${String(frame * every)} ms`,
+				png: await capture(taken.page, how)
+			});
+		}
+		const after = moments[moments.length - 1].png;
+		clicked.push({
+			target,
+			changed: (await comparePictures(taken.page, dataUrl(before), dataUrl(after))).changed
+		});
+	}
+	return {
+		moments,
+		clicked
+	};
+};
 var shot = async (route, options) => {
 	const project = await projectHere("whose page to picture");
 	if (!project) return;
@@ -23523,6 +23729,17 @@ var shot = async (route, options) => {
 		fail(browser.problem);
 		return;
 	}
+	const clicks = options.click ?? [];
+	if (options.compare && clicks.length > 0) {
+		await browser.close();
+		fail("`--compare` sets the page beside another site as it loads: leave out --click, or picture the click on its own.");
+		return;
+	}
+	if (options.sheet && clicks.length === 0 && (options.frames ?? 0) <= 1) {
+		await browser.close();
+		fail("`--sheet` lays out the pictures a --click or --frames takes: with neither, there is one picture and no sheet.");
+		return;
+	}
 	if (options.compare && (options.clip || options.scrollTo || options.viewport)) {
 		await browser.close();
 		fail("`--compare` sets the whole page beside the other site, section by section: leave out --clip, --scroll-to and --viewport.");
@@ -23539,7 +23756,7 @@ var shot = async (route, options) => {
 			...options.clip ? { clip: options.clip } : {},
 			...options.scrollTo ? { scrollTo: options.scrollTo } : {},
 			...options.viewport ? { viewport: true } : {},
-			still: !options.clip && !options.scrollTo && !options.viewport && (options.frames ?? 0) <= 1
+			still: !options.clip && !options.scrollTo && !options.viewport && (options.frames ?? 0) <= 1 && clicks.length === 0
 		};
 		const how = framing(view);
 		const taken = await pictureOf(browser, `${where.origin}${pathname}`, view, where.origin);
@@ -23571,13 +23788,29 @@ var shot = async (route, options) => {
 			report.compare = compared;
 		}
 		const frames = options.frames ?? 0;
-		if (frames > 1) {
-			const every = options.every ?? 500;
+		const every = options.every ?? 500;
+		let moments = [];
+		if (clicks.length > 0) {
+			const played = await clickThrough(taken, how, clicks, {
+				frames,
+				every
+			});
+			if ("problem" in played) {
+				fail(played.problem);
+				return;
+			}
+			moments = played.moments;
+			report.clicked = played.clicked;
+		} else if (frames > 1) {
 			const pictures = [taken.png];
 			for (let frame = 1; frame < frames; frame += 1) {
 				await taken.page.waitForTimeout(every);
 				pictures.push(await capture(taken.page, how));
 			}
+			moments = pictures.map((png, frame) => ({
+				label: frame === 0 ? "before" : `+${String(frame * every)} ms`,
+				png
+			}));
 			const diffs = [];
 			for (let frame = 1; frame < pictures.length; frame += 1) diffs.push(await comparePictures(taken.page, dataUrl(pictures[frame - 1]), dataUrl(pictures[frame]), { regions }));
 			const whole = how.kind === "element" ? options.clip ?? "element" : "viewport";
@@ -23592,6 +23825,24 @@ var shot = async (route, options) => {
 				still: moved.filter((region) => region.changed <= MOVING_PERCENT).map((region) => region.name)
 			};
 		}
+		if (moments.length > 1 && options.sheet) {
+			const sheet = await taken.page.evaluate(contactSheet, moments.map((moment) => ({
+				label: moment.label,
+				src: dataUrl(moment.png)
+			})));
+			report.sheet = `${base}-sheet.png`;
+			await writeFile(report.sheet, Buffer.from(sheet.replace(/^data:image\/png;base64,/, ""), "base64"));
+		} else if (moments.length > 1 && clicks.length > 0) {
+			report.pictures = [];
+			for (const [index, moment] of moments.slice(1).entries()) {
+				const file = `${base}-${String(index + 1)}.png`;
+				await writeFile(file, moment.png);
+				report.pictures.push({
+					label: moment.label,
+					out: file
+				});
+			}
+		}
 		if (options.json) {
 			console.log(JSON.stringify(report));
 			return;
@@ -23600,6 +23851,9 @@ var shot = async (route, options) => {
 		if (report.settled) console.log(chalk.dim(`${String(report.settled)} arrival${report.settled === 1 ? "" : "s"} waiting for the scroll shown as they end — --scroll-to <id> --viewport --frames 4 shows one arriving`));
 		if (report.unloaded) console.log(chalk.yellow(`${String(report.unloaded)} picture(s) had not loaded when the page was taken`));
 		if (report.compare) console.log(compareText(report.compare).join("\n"));
+		for (const { target, changed } of report.clicked ?? []) console.log(changed > 0 ? `clicked ${target}: ${String(changed)}% of the picture changed` : chalk.yellow(`clicked ${target}: nothing changed — the click did nothing to see`));
+		if (report.sheet) console.log(`sheet: ${report.sheet}`);
+		for (const picture of report.pictures ?? []) console.log(`${picture.label}: ${picture.out}`);
 		if (report.frames) console.log(report.frames.moving.length > 0 ? `moving over ${String(report.frames.count)} frames: ${regionsText(report.frames.moving)}` : `nothing moved over ${String(report.frames.count)} frames, ${String(report.frames.every)} ms apart`);
 	} finally {
 		await browser.close();
@@ -23664,8 +23918,10 @@ var scriptsOf = async (root) => {
 	const scripts = e$3(parsed) && e$3(parsed.scripts) ? parsed.scripts : {};
 	return Object.fromEntries(Object.entries(scripts).filter((entry) => typeof entry[1] === "string"));
 };
+/** A page the browser was sent away from — one for signed-in visitors, sent to sign in. */
+var redirected = (report) => report.issues.some((issue) => issue.code === "redirected");
 /** A page the browser was sent away from, or that nothing answered: not looked at, so neither passing nor failing. */
-var unchecked = (report) => report.issues.some((issue) => issue.code === "redirected" || issue.code === "no-answer");
+var unchecked = (report) => redirected(report) || report.issues.some((issue) => issue.code === "no-answer");
 var verify = async (options) => {
 	const project = await projectHere("to verify");
 	if (!project) return;
@@ -23703,29 +23959,53 @@ var verify = async (options) => {
 	} : pages));
 	if (failed) process.exitCode = 1;
 };
+var NOT_STARTED = "start it (npm start) and verify again, or --no-pages to leave them";
 var pagesChecked = async (project) => {
 	const paths = await staticPaths(project.root);
 	if ("problem" in paths) return paths;
-	const reports = await checkRoutes(project, paths, {
+	const options = {
 		widths: WIDTHS,
 		asked: { state: false },
 		ssr: false
-	});
-	if ("problem" in reports) return { problem: `${reports.problem} — start it (npm start) and verify again, or --no-pages to leave them` };
-	return {
-		passing: reports.filter((report) => report.ok).length,
-		failing: reports.filter((report) => !report.ok && !unchecked(report)),
-		unchecked: [...new Set(reports.filter(unchecked).map((report) => report.path))]
 	};
+	const reports = await checkRoutes(project, paths, options);
+	if ("problem" in reports) return { problem: `${reports.problem} — ${NOT_STARTED}` };
+	const sentAway = [...new Set(reports.filter(redirected).map((report) => report.path))];
+	if (sentAway.length === 0) return summary(reports);
+	const account = await checkAccount(project.root);
+	if (!account || "problem" in account) return summary(reports, account ?? { none: true });
+	const signedIn = await checkRoutes(project, sentAway, {
+		...options,
+		account
+	});
+	if ("problem" in signedIn) return { problem: `${signedIn.problem} — ${NOT_STARTED}` };
+	return summary([...reports.filter((report) => !sentAway.includes(report.path)), ...signedIn], {
+		as: account.username,
+		checks: signedIn.filter((report) => !unchecked(report)).length
+	});
+};
+var summary = (reports, signedIn) => ({
+	passing: reports.filter((report) => report.ok).length,
+	failing: reports.filter((report) => !report.ok && !unchecked(report)),
+	unchecked: [...new Set(reports.filter(unchecked).map((report) => report.path))],
+	...signedIn ? { signedIn } : {}
+});
+/** Why the pages left are not checked, and what checks them. */
+var uncheckedText = (pages) => {
+	const list = pages.unchecked.join(", ");
+	const signedIn = pages.signedIn;
+	if (!signedIn || "none" in signedIn) return `- not checked — sent elsewhere (a page for signed-in visitors) or not answered: ${list} — name an account of the project in .env, ${CHECK_USER_ENV} and ${CHECK_PASSWORD_ENV}, and verify signs in for them`;
+	if ("problem" in signedIn) return `- not checked — sent elsewhere (a page for signed-in visitors) or not answered: ${list} — ${signedIn.problem}`;
+	return `- not checked, even signed in as ${signedIn.as}: ${list} — that account may not see them, or nothing answered`;
 };
 var verifyText = (results, pages) => [...results.flatMap((result) => result.ok ? [chalk.green(`✓ ${result.name}`)] : [
 	chalk.red(`✗ ${result.name}`),
 	...(result.said ?? []).map((line) => `    ${line}`),
 	...result.fix ? [`    → ${result.fix}`] : []
 ]), ...pages === void 0 ? [chalk.yellow("- pages not checked: --no-pages")] : "waiting" in pages ? [chalk.yellow(`- not run until ${pages.after} passes: ${pages.waiting.join(", ")} (--keep-going runs them anyway)`)] : "problem" in pages ? [chalk.red(`✗ pages — ${pages.problem}`)] : [
-	pages.failing.length === 0 ? chalk.green(`✓ pages — ${String(pages.passing)} checks at ${WIDTHS.join(" and ")} px`) : chalk.red(`✗ pages — ${String(pages.failing.length)} of ${String(pages.passing + pages.failing.length)} checks`),
+	pages.failing.length === 0 ? chalk.green(`✓ pages — ${String(pages.passing)} checks at ${WIDTHS.join(" and ")} px${pages.signedIn && "as" in pages.signedIn ? `, ${String(pages.signedIn.checks)} of them signed in as ${pages.signedIn.as}` : ""}`) : chalk.red(`✗ pages — ${String(pages.failing.length)} of ${String(pages.passing + pages.failing.length)} checks`),
 	...pages.failing.map((report) => reportText$2(report, { state: false })),
-	...pages.unchecked.length > 0 ? [chalk.yellow(`- not checked — sent elsewhere (a page for signed-in visitors) or not answered: ${pages.unchecked.join(", ")} — plitzi page check <path> --as <username>`)] : []
+	...pages.unchecked.length > 0 ? [chalk.yellow(uncheckedText(pages))] : []
 ]].join("\n");
 //#endregion
 //#region src/doctor/projectModules.ts
@@ -24066,17 +24346,8 @@ var minimumSecret = async (root) => {
 	const minimum = e$3(actions) ? actions.MIN_SIGNING_SECRET_LENGTH : void 0;
 	return typeof minimum === "number" ? minimum : void 0;
 };
-/** What the process starts with: what `.env` sets, under what the environment already has — as the server reads it. */
-var settingsOf = async (root) => {
-	const text = await readOptional(path.join(root, ".env"));
-	const parsed = text === void 0 ? {} : parseEnv(text);
-	return {
-		file: text !== void 0,
-		value: (name) => process.env[name] ?? parsed[name] ?? ""
-	};
-};
 var envChecks = async ({ root, answers }) => {
-	const settings = await settingsOf(root);
+	const settings = await projectSettings(root);
 	const where = settings.file ? ".env" : "the environment (there is no .env)";
 	const findings = [];
 	if (answers.mode === "client") {
@@ -24682,6 +24953,13 @@ var NODE_SCRIPTS = [
 	"start:dev",
 	"author"
 ];
+/** The variables a script sets before its command — `NODE_ENV=production node …` — by name. */
+var assignmentsOf = (command) => Object.fromEntries([...(/^((?:\w+=\S*\s+)*)/.exec(command)?.[1] ?? "").matchAll(/(\w+)=(\S*)/g)].map(([, name, value]) => [name, value]));
+/** A script's words when its command runs Node — after any variable it sets first — and none when it runs anything else. */
+var nodeWords = (command) => {
+	const words = (command ?? "").replace(/^(?:\w+=\S*\s+)*/, "").split(/\s+/);
+	return words[0] === "node" ? words : [];
+};
 /**
 * What a script that runs Node needs on disk: the file it starts, and every folder `--watch-path` names — Node stops at
 * start when one of them is not there, which is why each watched folder keeps a `.gitkeep`.
@@ -24691,7 +24969,7 @@ var scriptTargetChecks = async ({ root, manifest }) => {
 	const findings = [];
 	for (const name of NODE_SCRIPTS) {
 		const command = scripts[name];
-		const words = command && /^node\s/.test(command) ? command.split(/\s+/).slice(1) : [];
+		const words = nodeWords(command).slice(1);
 		const watched = words.flatMap((word) => /^--watch-path=(.+)$/.exec(word)?.[1] ?? []);
 		const started = words.filter((word) => !word.startsWith("-")).at(-1);
 		for (const folder of watched) if (!await fs.stat(path.join(root, folder)).then(() => true, () => false)) findings.push(say$3.error("watch-path-missing", `The script ${name} watches ${folder}, which is not there: Node stops before it starts.`, {
@@ -24727,8 +25005,12 @@ var scriptEnvChecks = ({ answers, manifest }) => {
 	if (answers.mode !== "server") return [];
 	const scripts = stringsOf(manifest.scripts);
 	return SERVER_SCRIPTS.flatMap((name) => {
-		const words = /^node\s/.test(scripts[name] ?? "") ? scripts[name].split(/\s+/) : [];
+		const words = nodeWords(scripts[name]);
 		if (words.length === 0) return [];
+		if (name === "start:prod" && assignmentsOf(scripts[name]).NODE_ENV !== "production") return [say$3.warning("start-prod-not-production", "The script start:prod does not set NODE_ENV=production: wherever it runs without it, the server is a development one — its dev tools on, and the trace of every action in what a visitor is answered.", {
+			file: "package.json",
+			fix: `NODE_ENV=production before node in start:prod — ${UPGRADE_PACKAGES} rewrites a script the CLI wrote.`
+		})];
 		const flagged = words.some((word) => ENV_FLAG.test(word));
 		const preloaded = words.some((word, index) => word === `--import=${ENV_PRELOAD}` || word === "--import" && words[index + 1] === ENV_PRELOAD);
 		const watched = words.some((word) => word.startsWith("--watch"));
@@ -25452,7 +25734,9 @@ var previousLines = (previous) => previous.length ? [
 	...previous.map((url) => `  - ${url}`),
 	"Read each (a claude.ai artifact: open it with your artifact tool, never by fetching the URL). Number the new",
 	"findings after the highest id there, and fill `changed` with every earlier finding this project touched:",
-	"fixed, partly or still open — and how you saw it, on the versions above."
+	"fixed, partly or still open — and how you saw it, on the versions above.",
+	"A link can stop opening — an artifact deleted, or no longer shared. Say which one did not, ask the person for",
+	"the highest id it had, and leave `changed` to the reports you could read."
 ] : ["No earlier report: number the findings from PZ-1."];
 var feedbackBrief = (facts, file, previous) => [
 	"A report to Plitzi, for the developer to send as a link.",
@@ -26749,7 +27033,7 @@ var reportText = (report) => {
 	}
 	for (const [title, findings] of groups) lines.push(...fileText(title, findings));
 	if (report.findings.length > 0) lines.push(chalk.dim(`What each means and what to write instead: the docs of each code — ${docsOf(report)}.`));
-	const suggested = [...new Set(report.findings.filter((each) => each.origin === "authoring").map((each) => each.code))];
+	const suggested = [...new Set(report.findings.filter((each) => each.origin === "authoring" && each.file !== void 0).map((each) => each.code))];
 	if (suggested.length > 0) lines.push(chalk.dim(`Authoring's suggestions (${suggested.join(", ")}) are quieted on the element they are about — \`quiet: ['${suggested[0]}']\` — not by a \`plitzi-lint-disable\` comment, which silences only lint's own codes.`));
 	const summary = [
 		plural(counts.error, "error"),
@@ -26901,14 +27185,14 @@ program.command("login").description("Sign in, in your browser. The session is k
 program.command("logout").description("Sign out: the session is revoked on the platform and forgotten here").action(() => logout());
 program.command("whoami").description("Who the CLI is signed in as, and the space it works in").option("--json", "One object: { api, user, space }, for a tool or an agent").option(...API_OPTION).action((options) => whoami(options));
 spaceGroup.command("use").description("Choose the space to work in, in your browser. One at a time: it replaces the one chosen before").option(...API_OPTION).action((options) => space$2(options));
-pageGroup.command("check").argument("[path]", "The page: /about. The home page when left out").description("Whether a page of the running project is whole, in text: every element on screen, no broken image, no console error, no failed flow").addOption(widthsOption("The widths to check it at, separated by commas", [1440, 390])).addOption(schemeOption()).option("--state", "Also what the page holds: its state, and every source by name").option("--element <id>", "Also one element: what it reads, its own state, whether it is on screen").option("--ssr", "Also the HTML the server sent against the hydrated page: what a server provider sent late").option("--click <id>", "Click one element once the page settles, and say what it changed — or that nothing did").addOption(new Option("--fill <id=value>", "Fill a field before the click, as a visitor types in it — once per field; a box takes true or false").argParser(fill)).option("--as <username>", "Sign in first as this account, through the server’s /auth routes — the password from PLITZI_CHECK_PASSWORD").option("--json", "One object per width, for a tool or an agent").action((path, options) => check(path, options));
+pageGroup.command("check").argument("[paths...]", "The pages: /about /writers, in one browser. The home page when left out").description("Whether a page of the running project is whole, in text: every element on screen, no broken image, no console error, no failed flow").addOption(widthsOption("The widths to check it at, separated by commas", [1440, 390])).addOption(schemeOption()).option("--state", "Also what the page holds: its state, and every source by name").option("--element <id>", "Also one element: what it reads, its own state, whether it is on screen").option("--ssr", "Also the HTML the server sent against the hydrated page: what a server provider sent late").option("--click <id>", "Click one element once the page settles, and say what it changed — or that nothing did").addOption(new Option("--fill <id=value>", "Fill a field before the click, as a visitor types in it — once per field; a box takes true or false").argParser(fill)).option("--as <username>", "Sign in first as this account, through the server’s /auth routes — the password from PLITZI_CHECK_PASSWORD, in .env").option("--json", "One object per page and width, for a tool or an agent").action((paths, options) => check(paths, options));
 spaceGroup.command("fix").description("What authoring would fix in the space, as edits to your source: shown as a diff; with --write written, formatted and checked").option("--write", "Write the edits — kept only when the space authors with each fix gone and no problem added").option("--json", "The plan as one object, for a tool or an agent").action((options) => fix(options));
 pageGroup.command("import").argument("<url>", "The page to start from: https://example.com/pricing").description("A page of a site you verified, as a place to start writing from: its tokens, the outline of its blocks per breakpoint, its lists as JSON — never its words").option("-o, --out <dir>", "Where it is written, inside the project", "src/imported").addOption(widthsOption("The widths it is measured at: the widest is desktop, then tablet and mobile", [
 	1440,
 	768,
 	390
 ])).option("-f, --force", "Write over what --out already holds").option("--account", "A site not served from this machine: ask your Plitzi account whether one of your spaces verified its domain (signs in)").option("--json", "One object, for a tool or an agent").option(...API_OPTION).option(...DRY_RUN_OPTION).action((url, options) => importPage(url, options));
-pageGroup.command("shot").argument("[path]", "The page: /about. The home page when left out").description("A picture of one page of the running project — and, asked, how it differs from another or what moves").addOption(new Option("--width <px>", "The viewport width").argParser(width).default(1280)).addOption(new Option("--height <px>", "The viewport height (the picture is the whole page unless --viewport, --scroll-to or --clip)").argParser(positiveInteger).default(800)).addOption(schemeOption()).option("-o, --out <file>", "Where the picture goes. tmp/shots/<page>-<width>-<scheme>.png by default").option("--compare <url>", "Another site: the same page there, side by side, and how much differs by section").addOption(new Option("--frames <n>", "Pictures taken one after another: which sections move (a marquee, an autoplay)").argParser(positiveInteger)).addOption(new Option("--every <ms>", "How far apart --frames are taken").argParser(positiveInteger).default(500)).option("--wait-for <element>", "An element to wait for first: its name (data-plitzi-el) or a CSS selector").option("--clip <element>", "Only this element — its name or a CSS selector — scrolled to wherever it is").option("--scroll-to <element>", "The page scrolled until this element is in view; the picture is the screen there").option("--viewport", "Only what fits the viewport, not the whole page").option("--reduced-motion", "As a visitor who asked for less motion").option("--json", "One object, for a tool or an agent").action((path, options) => shot(path, options));
+pageGroup.command("shot").argument("[path]", "The page: /about. The home page when left out").description("A picture of one page of the running project — and, asked, how it differs from another or what moves").addOption(new Option("--width <px>", "The viewport width").argParser(width).default(1280)).addOption(new Option("--height <px>", "The viewport height (the picture is the whole page unless --viewport, --scroll-to or --clip)").argParser(positiveInteger).default(800)).addOption(schemeOption()).option("-o, --out <file>", "Where the picture goes. tmp/shots/<page>-<width>-<scheme>.png by default").option("--compare <url>", "Another site: the same page there, side by side, and how much differs by section").addOption(new Option("--frames <n>", "Pictures taken one after another: which sections move (a marquee, an autoplay)").argParser(positiveInteger)).addOption(new Option("--every <ms>", "How far apart --frames are taken").argParser(positiveInteger).default(500)).option("--wait-for <element>", "An element to wait for first: its name (data-plitzi-el) or a CSS selector").option("--clip <element>", "Only this element — its name or a CSS selector — scrolled to wherever it is").option("--scroll-to <element>", "The page scrolled until this element is in view; the picture is the screen there").option("--viewport", "Only what fits the viewport, not the whole page").option("--click <element...>", "Click these in order once the page settles — each its name or a CSS selector, inside a plugin too — picturing what each changed (--frames pictures --every ms apart after each)").option("--sheet", "Every picture taken — before, after each click, each frame — on one contact sheet").option("--reduced-motion", "As a visitor who asked for less motion").option("--json", "One object, for a tool or an agent").action((path, options) => shot(path, options));
 program.command("verify").description("Whether the project is left passing: author, lints, types, format and every page, only the problems said").option("--no-pages", "Leave the pages out — said as such").option("--keep-going", "Run every check even after one fails — by default the first failure ends the run").option("--json", "One object, for a tool or an agent").action((options) => verify(options));
 elementGroup.command("where").argument("<query>", "An element’s id, a class it wears, or words it shows: hero-cta, navLink, \"Get started\"").description("Where the project’s code writes an element: the file, the line and the call itself").addOption(new Option("--by <reading>", "Read the query one way only, not the first of id, class and words that matches").choices(WHERE_READINGS)).option("--json", "One object, for a tool or an agent").action((query, options) => where(query, options));
 elementGroup.command("edit").argument("<id>", "The element, by its id: hero-cta").description("Change an element’s attributes in the call that writes it, then check the space still authors").option("--set <key=value...>", "An attribute to write: content=\"Start free\", required=true").option("--remove <key...>", "An attribute to take out").option("--every", "The call writes other elements too, and the change is for every one").option("--json", "One object, for a tool or an agent").action((id, options) => edit(id, options));