@profullstack/readm3 0.15.0 → 0.17.0

package/README.md

@@ -371,7 +371,31 @@ work offline. Remote URLs
 need a connection and a host that permits browser access (CORS); files are fetched
 directly with no credentials or server proxy. Local files are uploaded only when you explicitly choose Share → Save online.
 
-Imports are limited to 4 MB per file, 20 MB per workspace, and 1,000 files.
+#### File limits and storage
+
+| | Without an account | Free account | Pay as you go |
+| --- | --- | --- | --- |
+| Largest file | 4 MB | 5 GB | 5 GB |
+| Number of files | 1,000 (20 MB in all) | 5,000 | 5,000 |
+| Synced storage | none | 5 GB | $0.05 per GB a month over 5 GB |
+
+The meter beside Sync in the editor's header shows storage and files against these
+limits; click it for the plan, the price and the balance, and to add funds.
+
+Signed in, a file over 4 MB is a *stored file*: it opens read-only (a PDF or image is
+shown whole, text as its first megabyte) and Download gives it back exactly. On the
+device it is kept in browser storage as it is; on the account it is end-to-end
+encrypted with its own key in 8 MB chunks, and the key travels only inside your
+sealed workspace, so readm3.com holds data it cannot read or name. Small files that
+do not fit the synced copy are stored the same way and turn back into ordinary,
+editable files when opened.
+
+Storage over the free 5 GB is charged hourly from the prepaid balance (CoinPay
+top-ups, as for AI summaries). When the balance is empty, new uploads past the free
+allowance are refused; nothing already stored is deleted. `GET /api/v1/blobs` reports
+what an account stores, the allowance and the price. Self-hosted servers set
+`READM3_FREE_STORAGE_BYTES`, `READM3_STORAGE_MICROS_PER_GB_MONTH` and
+`READM3_BLOB_DIR` (default: `blobs/` beside the database).
 
 ### File history and AI summaries
 
@@ -647,11 +671,34 @@ bun run test:site    # local/offline reader plus browser sharing and admin workf
 
 ## Workspace and settings sync
 
-Sign in with verified email at `/account`, then create a personal API token in `/admin`. The PWA's **Sync** button saves or loads
-your local Markdown workspace and reader preferences on that same account. Shared
-documents continue to use their own document permissions and version history.
-Local files are uploaded only when you choose **Save to account**, `readm3 save`,
-or a sharing action. Sync requires a connection; the local reader still works offline.
+Every signed-in device (browser tab, installed app, desktop app) syncs the workspace
+and reader settings **automatically and end to end encrypted**. Turn it off for one
+device with **Sync automatically on this device** in the Sync dialog.
+
+- **Automatic**: on load, a few seconds after each edit, on focus, and every 30 s
+  (that check asks only for the latest revision number). Edits merge per file
+  (`src/sync-merge.ts`): a file changed on one device takes that change; changed on two,
+  the account copy keeps the name and the other is kept beside it as
+  `name (conflict <device> <date>).md`. A device that has never synced loads first and
+  never uploads its starter files over an account.
+- **End-to-end encrypted** (`src/sync-crypto.ts`): the workspace and settings are
+  gzip-compressed, then sealed with AES-256-GCM under a key derived (PBKDF2-SHA256,
+  600,000 iterations, per-account salt) from your **sync passphrase**. readm3.com stores
+  one `sealed.json` per revision and cannot read file names, text or settings. You choose
+  the passphrase on the first device and type it once on each other one (the derived key
+  stays in that device's IndexedDB, non-extractable); a password manager can store it.
+  There is no reset: without it the synced copy cannot be opened, though every device
+  keeps its local files. **Change sync passphrase** re-seals the account copy; other
+  devices then ask for the new one. The first encrypted save deletes every readable
+  revision the server held, and the server refuses readable saves after that.
+
+Shared documents continue to use their own document permissions and version history.
+Sync requires a connection; the local reader still works offline. The CLI's
+`readm3 save`/`load`/`sync` still move readable snapshots and are refused by an account
+that syncs encrypted.
+
+Sign in with verified email at `/account`, then create a personal API token in `/admin`
+for the CLI.
 
 The CLI, document commands, and MCP use one credential file, `cloud.json`, under
 `$XDG_CONFIG_HOME/readm3` (normally `~/.config/readm3`). It is written with mode
@@ -690,8 +737,9 @@ conflicting local edits, including on a device that has never synced. `--force`
 explicitly overrides a conflict. Replaced local files receive numbered `.bak-NNN`
 backups. Browser replacements receive backups in IndexedDB, accessible through
 **Sync → Local backups** for download or restoration. Clearing browser site data
-also removes those local backups. Sync supports the browser's workspace limits:
-1,000 files, 4 MB per file, and 20 MB of source in total.
+also removes those local backups. The CLI syncs a readable workspace of up to 4 MB
+per file and 20 MB in total; the browser and desktop app sync up to 5,000 files of
+up to 5 GB each (see File limits and storage).
 
 The authenticated API exposes:
 

package/dist/blob-store.d.ts

@@ -0,0 +1,59 @@
+/**
+ * Large files, stored apart from the synced workspace.
+ *
+ * A signed-in account may keep files of up to 5 GB, and any number of them. A file that
+ * large cannot live in the workspace JSON (a string, synced as one request), so it is
+ * a `blob` document: the workspace keeps a reference, and the bytes live on their own,
+ * in IndexedDB on the device and in fixed-size chunks on readm3.com.
+ *
+ * Every blob has its own random AES-256 key. The key travels only inside the reference,
+ * which travels only inside the sealed (end-to-end encrypted) workspace, so the server
+ * stores chunks it cannot read and cannot link to a file name. Chunk n is encrypted
+ * with AES-256-GCM under an IV that is n itself: unique, since no key is reused across
+ * blobs, and a chunk moved to another position fails authentication.
+ *
+ * Small text files that do not fit the snapshot are stored the same way ("spilled") and
+ * carry the document's digest, so the merge sees the same document either way.
+ *
+ * Browser-safe: Web Crypto only. Shared by the page, the server and the tests.
+ */
+export declare const GiB: number;
+/** The largest single file an account may keep. */
+export declare const MAX_BLOB_BYTES: number;
+/** Files in one signed-in workspace (signed out, the workspace keeps 1,000). */
+export declare const MAX_ACCOUNT_FILES = 5000;
+/** Storage every signed-in account gets free; more is pay as you go from the prepaid balance. */
+export declare const FREE_STORAGE_BYTES: number;
+/** Pay as you go: micro-dollars per GiB stored per month, over the free allowance. */
+export declare const STORAGE_MICROS_PER_GIB_MONTH = 50000;
+/** Plaintext bytes per chunk; each stored chunk is 16 bytes longer (the GCM tag). */
+export declare const CHUNK_BYTES: number;
+export declare const TAG_BYTES = 16;
+/** Text larger than this opens read-only, as a preview; smaller text is edited in the workspace. */
+export declare const INLINE_MAX_BYTES: number;
+/** Inline text kept inside one synced snapshot; the rest of the small files spill to blobs. */
+export declare const SNAPSHOT_INLINE_BYTES: number;
+export interface BlobRef {
+    /** 22 url-safe characters: random, never derived from the content. */
+    id: string;
+    /** Plaintext bytes. */
+    size: number;
+    /** Base64 of the 32-byte AES key. */
+    key: string;
+    /** Set on a spilled text file: the document digest, so it compares equal to the inline copy. */
+    digest?: string;
+}
+export declare const isBlobId: (value: unknown) => value is string;
+export declare function blobRefProblem(value: unknown): string | null;
+export declare function newBlobRef(size: number, digest?: string): BlobRef;
+export declare const chunkCount: (size: number) => number;
+/** Plaintext bytes in chunk n of a blob of `size` bytes. */
+export declare const chunkPlainBytes: (size: number, n: number) => number;
+/** What the server stores for chunk n: the ciphertext and its tag. */
+export declare const chunkStoredBytes: (size: number, n: number) => number;
+/** Everything the server holds for a blob, which is what the account's storage counts. */
+export declare const storedBytes: (size: number) => number;
+export declare function encryptChunk(ref: BlobRef, n: number, plain: Uint8Array): Promise<Uint8Array>;
+export declare function decryptChunk(ref: BlobRef, n: number, stored: Uint8Array): Promise<Uint8Array>;
+export declare const formatStorage: (bytes: number) => string;
+//# sourceMappingURL=blob-store.d.ts.map

package/dist/blob-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"blob-store.d.ts","sourceRoot":"","sources":["../src/blob-store.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AACH,eAAO,MAAM,GAAG,QAAY,CAAC;AAC7B,mDAAmD;AACnD,eAAO,MAAM,cAAc,QAAU,CAAC;AACtC,gFAAgF;AAChF,eAAO,MAAM,iBAAiB,OAAO,CAAC;AACtC,iGAAiG;AACjG,eAAO,MAAM,kBAAkB,QAAU,CAAC;AAC1C,sFAAsF;AACtF,eAAO,MAAM,4BAA4B,QAAS,CAAC;AACnD,qFAAqF;AACrF,eAAO,MAAM,WAAW,QAAkB,CAAC;AAC3C,eAAO,MAAM,SAAS,KAAK,CAAC;AAC5B,oGAAoG;AACpG,eAAO,MAAM,gBAAgB,QAAkB,CAAC;AAChD,+FAA+F;AAC/F,eAAO,MAAM,qBAAqB,QAAmB,CAAC;AAEtD,MAAM,WAAW,OAAO;IACtB,sEAAsE;IACtE,EAAE,EAAE,MAAM,CAAC;IACX,uBAAuB;IACvB,IAAI,EAAE,MAAM,CAAC;IACb,qCAAqC;IACrC,GAAG,EAAE,MAAM,CAAC;IACZ,gGAAgG;IAChG,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAID,eAAO,MAAM,QAAQ,GAAI,OAAO,OAAO,KAAG,KAAK,IAAI,MAAqD,CAAC;AAEzG,wBAAgB,cAAc,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI,CAS5D;AASD,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAGjE;AAED,eAAO,MAAM,UAAU,GAAI,MAAM,MAAM,KAAG,MAAoD,CAAC;AAC/F,4DAA4D;AAC5D,eAAO,MAAM,eAAe,GAAI,MAAM,MAAM,EAAE,GAAG,MAAM,KAAG,MAAoE,CAAC;AAC/H,sEAAsE;AACtE,eAAO,MAAM,gBAAgB,GAAI,MAAM,MAAM,EAAE,GAAG,MAAM,KAAG,MAA8C,CAAC;AAC1G,0FAA0F;AAC1F,eAAO,MAAM,WAAW,GAAI,MAAM,MAAM,KAAG,MAA6C,CAAC;AAUzF,wBAAsB,YAAY,CAAC,GAAG,EAAE,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC,CAElG;AAED,wBAAsB,YAAY,CAAC,GAAG,EAAE,OAAO,EAAE,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC,CAGnG;AAED,eAAO,MAAM,aAAa,GAAI,OAAO,MAAM,KAAG,MAC+H,CAAC"}

package/dist/blob-store.js

@@ -0,0 +1,95 @@
+/**
+ * Large files, stored apart from the synced workspace.
+ *
+ * A signed-in account may keep files of up to 5 GB, and any number of them. A file that
+ * large cannot live in the workspace JSON (a string, synced as one request), so it is
+ * a `blob` document: the workspace keeps a reference, and the bytes live on their own,
+ * in IndexedDB on the device and in fixed-size chunks on readm3.com.
+ *
+ * Every blob has its own random AES-256 key. The key travels only inside the reference,
+ * which travels only inside the sealed (end-to-end encrypted) workspace, so the server
+ * stores chunks it cannot read and cannot link to a file name. Chunk n is encrypted
+ * with AES-256-GCM under an IV that is n itself: unique, since no key is reused across
+ * blobs, and a chunk moved to another position fails authentication.
+ *
+ * Small text files that do not fit the snapshot are stored the same way ("spilled") and
+ * carry the document's digest, so the merge sees the same document either way.
+ *
+ * Browser-safe: Web Crypto only. Shared by the page, the server and the tests.
+ */
+export const GiB = 1024 ** 3;
+/** The largest single file an account may keep. */
+export const MAX_BLOB_BYTES = 5 * GiB;
+/** Files in one signed-in workspace (signed out, the workspace keeps 1,000). */
+export const MAX_ACCOUNT_FILES = 5000;
+/** Storage every signed-in account gets free; more is pay as you go from the prepaid balance. */
+export const FREE_STORAGE_BYTES = 5 * GiB;
+/** Pay as you go: micro-dollars per GiB stored per month, over the free allowance. */
+export const STORAGE_MICROS_PER_GIB_MONTH = 50_000;
+/** Plaintext bytes per chunk; each stored chunk is 16 bytes longer (the GCM tag). */
+export const CHUNK_BYTES = 8 * 1024 * 1024;
+export const TAG_BYTES = 16;
+/** Text larger than this opens read-only, as a preview; smaller text is edited in the workspace. */
+export const INLINE_MAX_BYTES = 4 * 1024 * 1024;
+/** Inline text kept inside one synced snapshot; the rest of the small files spill to blobs. */
+export const SNAPSHOT_INLINE_BYTES = 16 * 1024 * 1024;
+const ID = /^[A-Za-z0-9_-]{22}$/;
+const KEY = /^[A-Za-z0-9+/]{43}=$/;
+export const isBlobId = (value) => typeof value === "string" && ID.test(value);
+export function blobRefProblem(value) {
+    if (!value || typeof value !== "object" || Array.isArray(value))
+        return "A stored file reference must be an object.";
+    const ref = value;
+    if (Object.keys(ref).some((key) => !["id", "size", "key", "digest"].includes(key)))
+        return "A stored file reference has unknown fields.";
+    if (!isBlobId(ref.id))
+        return "A stored file has an invalid id.";
+    if (!Number.isSafeInteger(ref.size) || ref.size < 0 || ref.size > MAX_BLOB_BYTES)
+        return "A stored file is larger than 5 GB.";
+    if (typeof ref.key !== "string" || !KEY.test(ref.key))
+        return "A stored file has an invalid key.";
+    if (ref.digest !== undefined && (typeof ref.digest !== "string" || !/^[a-z0-9]{1,16}:[a-z0-9]{1,16}$/.test(ref.digest)))
+        return "A stored file has an invalid digest.";
+    return null;
+}
+const b64 = (bytes) => {
+    let text = "";
+    for (let i = 0; i < bytes.length; i += 0x8000)
+        text += String.fromCharCode(...bytes.subarray(i, i + 0x8000));
+    return btoa(text);
+};
+const unb64 = (text) => Uint8Array.from(atob(text), (c) => c.charCodeAt(0));
+export function newBlobRef(size, digest) {
+    const id = b64(crypto.getRandomValues(new Uint8Array(16))).replace(/=+$/, "").replace(/\+/g, "-").replace(/\//g, "_");
+    return { id, size, key: b64(crypto.getRandomValues(new Uint8Array(32))), ...(digest ? { digest } : {}) };
+}
+export const chunkCount = (size) => Math.max(1, Math.ceil(size / CHUNK_BYTES));
+/** Plaintext bytes in chunk n of a blob of `size` bytes. */
+export const chunkPlainBytes = (size, n) => Math.max(0, Math.min(CHUNK_BYTES, size - n * CHUNK_BYTES));
+/** What the server stores for chunk n: the ciphertext and its tag. */
+export const chunkStoredBytes = (size, n) => chunkPlainBytes(size, n) + TAG_BYTES;
+/** Everything the server holds for a blob, which is what the account's storage counts. */
+export const storedBytes = (size) => size + chunkCount(size) * TAG_BYTES;
+const iv = (n) => { const bytes = new Uint8Array(12); new DataView(bytes.buffer).setUint32(8, n); return bytes; };
+const keys = new Map();
+const cryptoKey = (ref) => {
+    let key = keys.get(ref.key);
+    if (!key) {
+        key = crypto.subtle.importKey("raw", unb64(ref.key), "AES-GCM", false, ["encrypt", "decrypt"]);
+        keys.set(ref.key, key);
+    }
+    return key;
+};
+export async function encryptChunk(ref, n, plain) {
+    return new Uint8Array(await crypto.subtle.encrypt({ name: "AES-GCM", iv: iv(n) }, await cryptoKey(ref), plain));
+}
+export async function decryptChunk(ref, n, stored) {
+    try {
+        return new Uint8Array(await crypto.subtle.decrypt({ name: "AES-GCM", iv: iv(n) }, await cryptoKey(ref), stored));
+    }
+    catch {
+        throw new Error("A stored file chunk failed to decrypt; it was damaged or replaced.");
+    }
+}
+export const formatStorage = (bytes) => bytes >= GiB ? `${(bytes / GiB).toFixed(bytes >= 10 * GiB ? 0 : 1)} GB` : bytes >= 1024 * 1024 ? `${(bytes / 1024 / 1024).toFixed(1)} MB` : `${Math.ceil(bytes / 1024)} KB`;
+//# sourceMappingURL=blob-store.js.map

package/dist/blob-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"blob-store.js","sourceRoot":"","sources":["../src/blob-store.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,CAAC,MAAM,GAAG,GAAG,IAAI,IAAI,CAAC,CAAC;AAC7B,mDAAmD;AACnD,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,GAAG,GAAG,CAAC;AACtC,gFAAgF;AAChF,MAAM,CAAC,MAAM,iBAAiB,GAAG,IAAI,CAAC;AACtC,iGAAiG;AACjG,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,GAAG,GAAG,CAAC;AAC1C,sFAAsF;AACtF,MAAM,CAAC,MAAM,4BAA4B,GAAG,MAAM,CAAC;AACnD,qFAAqF;AACrF,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AAC3C,MAAM,CAAC,MAAM,SAAS,GAAG,EAAE,CAAC;AAC5B,oGAAoG;AACpG,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AAChD,+FAA+F;AAC/F,MAAM,CAAC,MAAM,qBAAqB,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAatD,MAAM,EAAE,GAAG,qBAAqB,CAAC;AACjC,MAAM,GAAG,GAAG,sBAAsB,CAAC;AACnC,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,KAAc,EAAmB,EAAE,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAEzG,MAAM,UAAU,cAAc,CAAC,KAAc;IAC3C,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,4CAA4C,CAAC;IACrH,MAAM,GAAG,GAAG,KAAgC,CAAC;IAC7C,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QAAE,OAAO,6CAA6C,CAAC;IACzI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAAE,OAAO,kCAAkC,CAAC;IACjE,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,IAAK,GAAG,CAAC,IAAe,GAAG,CAAC,IAAK,GAAG,CAAC,IAAe,GAAG,cAAc;QAAE,OAAO,oCAAoC,CAAC;IACtJ,IAAI,OAAO,GAAG,CAAC,GAAG,KAAK,QAAQ,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;QAAE,OAAO,mCAAmC,CAAC;IAClG,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,OAAO,GAAG,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,iCAAiC,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAAE,OAAO,sCAAsC,CAAC;IACvK,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,GAAG,GAAG,CAAC,KAAiB,EAAU,EAAE;IACxC,IAAI,IAAI,GAAG,EAAE,CAAC;IACd,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,IAAI,MAAM;QAAE,IAAI,IAAI,MAAM,CAAC,YAAY,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC;IAC7G,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC;AACpB,CAAC,CAAC;AACF,MAAM,KAAK,GAAG,CAAC,IAAY,EAAc,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;AAEhG,MAAM,UAAU,UAAU,CAAC,IAAY,EAAE,MAAe;IACtD,MAAM,EAAE,GAAG,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IACtH,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;AAC3G,CAAC;AAED,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,IAAY,EAAU,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,WAAW,CAAC,CAAC,CAAC;AAC/F,4DAA4D;AAC5D,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,IAAY,EAAE,CAAS,EAAU,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,WAAW,EAAE,IAAI,GAAG,CAAC,GAAG,WAAW,CAAC,CAAC,CAAC;AAC/H,sEAAsE;AACtE,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,IAAY,EAAE,CAAS,EAAU,EAAE,CAAC,eAAe,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,SAAS,CAAC;AAC1G,0FAA0F;AAC1F,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,IAAY,EAAU,EAAE,CAAC,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC,GAAG,SAAS,CAAC;AAEzF,MAAM,EAAE,GAAG,CAAC,CAAS,EAAc,EAAE,GAAG,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC;AACtI,MAAM,IAAI,GAAG,IAAI,GAAG,EAA8B,CAAC;AACnD,MAAM,SAAS,GAAG,CAAC,GAAY,EAAE,EAAE;IACjC,IAAI,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAC5B,IAAI,CAAC,GAAG,EAAE,CAAC;QAAC,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,GAAG,CAAiB,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC;QAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IAAC,CAAC;IACrJ,OAAO,GAAG,CAAC;AACb,CAAC,CAAC;AAEF,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,GAAY,EAAE,CAAS,EAAE,KAAiB;IAC3E,OAAO,IAAI,UAAU,CAAC,MAAM,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,CAAiB,EAAE,EAAE,MAAM,SAAS,CAAC,GAAG,CAAC,EAAE,KAAqB,CAAC,CAAC,CAAC;AAClJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,GAAY,EAAE,CAAS,EAAE,MAAkB;IAC5E,IAAI,CAAC;QAAC,OAAO,IAAI,UAAU,CAAC,MAAM,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,CAAiB,EAAE,EAAE,MAAM,SAAS,CAAC,GAAG,CAAC,EAAE,MAAsB,CAAC,CAAC,CAAC;IAAC,CAAC;IACzJ,MAAM,CAAC;QAAC,MAAM,IAAI,KAAK,CAAC,oEAAoE,CAAC,CAAC;IAAC,CAAC;AAClG,CAAC;AAED,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,KAAa,EAAU,EAAE,CACrD,KAAK,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC"}

package/dist/cli.d.ts

@@ -1,6 +1,6 @@
 import { type ColorMode } from "./print.ts";
 import { type ViewerOptions } from "./viewer.ts";
-export declare const VERSION = "0.15.0";
+export declare const VERSION = "0.17.0";
 /** The help text, exported so a test can hold it to the flags it documents. */
 export declare const USAGE: string;
 export interface ParsedArgs extends ViewerOptions {

package/dist/cli.js

@@ -11,7 +11,7 @@ import { printDocument, COLOR_MODES } from "./print.js";
 import { run } from "./viewer.js";
 import { isCloudCommand, cloudMain, CLOUD_USAGE } from "./cloud-cli.js";
 import { isDesktopCommand, desktopMain, installedDesktop, prefersDesktop, DESKTOP_USAGE } from "./desktop-cli.js";
-export const VERSION = "0.15.0";
+export const VERSION = "0.17.0";
 /** The help text, exported so a test can hold it to the flags it documents. */
 export const USAGE = `readm3 — a plain text editor for Markdown and code
 

package/dist/sync-crypto.d.ts

@@ -0,0 +1,43 @@
+/**
+ * End-to-end encryption for synced workspaces. The server stores one sealed blob per
+ * revision and can read nothing in it: not the documents, their names, or the settings.
+ *
+ *   files JSON → gzip → AES-256-GCM (key from the sync passphrase) → base64 envelope
+ *
+ * The key is PBKDF2-SHA256 (600,000 iterations, a random 16-byte salt per account) over
+ * the person's sync passphrase, which never leaves the device. The salt and iteration
+ * count travel in each envelope so any device can derive the same key; a wrong
+ * passphrase fails GCM authentication rather than producing garbage. Web Crypto and
+ * CompressionStream only, so the same code runs in browsers, the desktop app, Node and Bun.
+ */
+export declare const SEALED_FILE = "sealed.json";
+export declare const KDF_ITERATIONS = 600000;
+export declare const MIN_PASSPHRASE = 10;
+export interface Kdf {
+    name: "PBKDF2-SHA256";
+    iterations: number;
+    salt: string;
+}
+export interface Envelope {
+    v: 1;
+    alg: "AES-256-GCM";
+    zip: "gzip";
+    kdf: Kdf;
+    iv: string;
+    data: string;
+}
+export interface SyncKey {
+    key: CryptoKey;
+    kdf: Kdf;
+}
+export declare class WrongPassphrase extends Error {
+    constructor();
+}
+/** A new account key: fresh salt. */
+export declare const newKdf: () => Kdf;
+export declare function deriveKey(passphrase: string, kdf: Kdf): Promise<SyncKey>;
+export declare function seal(value: unknown, { key, kdf }: SyncKey): Promise<Envelope>;
+export declare function open<T = unknown>(envelope: Envelope, { key }: SyncKey): Promise<T>;
+/** The envelope's shape, checked on the server, which cannot check anything inside it. */
+export declare function envelopeProblem(value: unknown): string | null;
+//# sourceMappingURL=sync-crypto.d.ts.map

package/dist/sync-crypto.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sync-crypto.d.ts","sourceRoot":"","sources":["../src/sync-crypto.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,WAAW,gBAAgB,CAAC;AACzC,eAAO,MAAM,cAAc,SAAU,CAAC;AACtC,eAAO,MAAM,cAAc,KAAK,CAAC;AAEjC,MAAM,WAAW,GAAG;IAAG,IAAI,EAAE,eAAe,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE;AAChF,MAAM,WAAW,QAAQ;IAAG,CAAC,EAAE,CAAC,CAAC;IAAC,GAAG,EAAE,aAAa,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,GAAG,CAAC;IAAC,EAAE,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE;AACvG,MAAM,WAAW,OAAO;IAAG,GAAG,EAAE,SAAS,CAAC;IAAC,GAAG,EAAE,GAAG,CAAA;CAAE;AAErD,qBAAa,eAAgB,SAAQ,KAAK;;CAEzC;AAaD,qCAAqC;AACrC,eAAO,MAAM,MAAM,QAAO,GAAqH,CAAC;AAEhJ,wBAAsB,SAAS,CAAC,UAAU,EAAE,MAAM,EAAE,GAAG,EAAE,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,CAS9E;AAED,wBAAsB,IAAI,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC,CAKnF;AAED,wBAAsB,IAAI,CAAC,CAAC,GAAG,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,EAAE,GAAG,EAAE,EAAE,OAAO,GAAG,OAAO,CAAC,CAAC,CAAC,CAKxF;AAED,0FAA0F;AAC1F,wBAAgB,eAAe,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI,CAU7D"}

package/dist/sync-crypto.js

@@ -0,0 +1,72 @@
+/**
+ * End-to-end encryption for synced workspaces. The server stores one sealed blob per
+ * revision and can read nothing in it: not the documents, their names, or the settings.
+ *
+ *   files JSON → gzip → AES-256-GCM (key from the sync passphrase) → base64 envelope
+ *
+ * The key is PBKDF2-SHA256 (600,000 iterations, a random 16-byte salt per account) over
+ * the person's sync passphrase, which never leaves the device. The salt and iteration
+ * count travel in each envelope so any device can derive the same key; a wrong
+ * passphrase fails GCM authentication rather than producing garbage. Web Crypto and
+ * CompressionStream only, so the same code runs in browsers, the desktop app, Node and Bun.
+ */
+export const SEALED_FILE = "sealed.json";
+export const KDF_ITERATIONS = 600_000;
+export const MIN_PASSPHRASE = 10;
+export class WrongPassphrase extends Error {
+    constructor() { super("That passphrase does not open this account's synced files."); }
+}
+const b64 = (bytes) => {
+    let text = "";
+    for (let i = 0; i < bytes.length; i += 0x8000)
+        text += String.fromCharCode(...bytes.subarray(i, i + 0x8000));
+    return btoa(text);
+};
+const unb64 = (text) => Uint8Array.from(atob(text), (c) => c.charCodeAt(0));
+async function pipe(bytes, stream) {
+    return new Uint8Array(await new Response(new Blob([bytes]).stream().pipeThrough(stream)).arrayBuffer());
+}
+/** A new account key: fresh salt. */
+export const newKdf = () => ({ name: "PBKDF2-SHA256", iterations: KDF_ITERATIONS, salt: b64(crypto.getRandomValues(new Uint8Array(16))) });
+export async function deriveKey(passphrase, kdf) {
+    if (kdf.name !== "PBKDF2-SHA256" || !Number.isSafeInteger(kdf.iterations) || kdf.iterations < 100_000 || kdf.iterations > 10_000_000)
+        throw new Error("Unsupported key derivation in the synced files.");
+    const material = await crypto.subtle.importKey("raw", new TextEncoder().encode(passphrase.normalize("NFC")), "PBKDF2", false, ["deriveKey"]);
+    const key = await crypto.subtle.deriveKey({ name: "PBKDF2", hash: "SHA-256", salt: unb64(kdf.salt), iterations: kdf.iterations }, material, { name: "AES-GCM", length: 256 }, false, ["encrypt", "decrypt"]);
+    return { key, kdf };
+}
+export async function seal(value, { key, kdf }) {
+    const iv = crypto.getRandomValues(new Uint8Array(12));
+    const packed = await pipe(new TextEncoder().encode(JSON.stringify(value)), new CompressionStream("gzip"));
+    const sealed = new Uint8Array(await crypto.subtle.encrypt({ name: "AES-GCM", iv: iv }, key, packed));
+    return { v: 1, alg: "AES-256-GCM", zip: "gzip", kdf, iv: b64(iv), data: b64(sealed) };
+}
+export async function open(envelope, { key }) {
+    let packed;
+    try {
+        packed = new Uint8Array(await crypto.subtle.decrypt({ name: "AES-GCM", iv: unb64(envelope.iv) }, key, unb64(envelope.data)));
+    }
+    catch {
+        throw new WrongPassphrase();
+    }
+    return JSON.parse(new TextDecoder().decode(await pipe(packed, new DecompressionStream("gzip"))));
+}
+/** The envelope's shape, checked on the server, which cannot check anything inside it. */
+export function envelopeProblem(value) {
+    if (!value || typeof value !== "object" || Array.isArray(value))
+        return "sealed.json must be an object";
+    const e = value;
+    if (Object.keys(e).some((key) => !["v", "alg", "zip", "kdf", "iv", "data"].includes(key)))
+        return "sealed.json has unknown fields";
+    if (e.v !== 1 || e.alg !== "AES-256-GCM" || e.zip !== "gzip")
+        return "unsupported sealed.json format";
+    const kdf = e.kdf;
+    if (!kdf || kdf.name !== "PBKDF2-SHA256" || !Number.isSafeInteger(kdf.iterations) || typeof kdf.salt !== "string" || !/^[A-Za-z0-9+/]{22}==$/.test(kdf.salt))
+        return "invalid key derivation";
+    if (typeof e.iv !== "string" || !/^[A-Za-z0-9+/]{16}$/.test(e.iv))
+        return "invalid iv";
+    if (typeof e.data !== "string" || !/^[A-Za-z0-9+/]+={0,2}$/.test(e.data))
+        return "invalid sealed data";
+    return null;
+}
+//# sourceMappingURL=sync-crypto.js.map

package/dist/sync-crypto.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sync-crypto.js","sourceRoot":"","sources":["../src/sync-crypto.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,aAAa,CAAC;AACzC,MAAM,CAAC,MAAM,cAAc,GAAG,OAAO,CAAC;AACtC,MAAM,CAAC,MAAM,cAAc,GAAG,EAAE,CAAC;AAMjC,MAAM,OAAO,eAAgB,SAAQ,KAAK;IACxC,gBAAgB,KAAK,CAAC,4DAA4D,CAAC,CAAC,CAAC,CAAC;CACvF;AAED,MAAM,GAAG,GAAG,CAAC,KAAiB,EAAU,EAAE;IACxC,IAAI,IAAI,GAAG,EAAE,CAAC;IACd,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,IAAI,MAAM;QAAE,IAAI,IAAI,MAAM,CAAC,YAAY,CAAC,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC;IAC7G,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC;AACpB,CAAC,CAAC;AACF,MAAM,KAAK,GAAG,CAAC,IAAY,EAAc,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;AAEhG,KAAK,UAAU,IAAI,CAAC,KAAiB,EAAE,MAA+C;IACpF,OAAO,IAAI,UAAU,CAAC,MAAM,IAAI,QAAQ,CAAC,IAAI,IAAI,CAAC,CAAC,KAAiB,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;AACtH,CAAC;AAED,qCAAqC;AACrC,MAAM,CAAC,MAAM,MAAM,GAAG,GAAQ,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,eAAe,EAAE,UAAU,EAAE,cAAc,EAAE,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;AAEhJ,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,UAAkB,EAAE,GAAQ;IAC1D,IAAI,GAAG,CAAC,IAAI,KAAK,eAAe,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,GAAG,CAAC,UAAU,GAAG,OAAO,IAAI,GAAG,CAAC,UAAU,GAAG,UAAU;QAClI,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;IACrE,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC;IAC7I,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CACvC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,CAAC,GAAG,CAAC,IAAI,CAAiB,EAAE,UAAU,EAAE,GAAG,CAAC,UAAU,EAAE,EACtG,QAAQ,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,CAAC,SAAS,EAAE,SAAS,CAAC,CAC1E,CAAC;IACF,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;AACtB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,IAAI,CAAC,KAAc,EAAE,EAAE,GAAG,EAAE,GAAG,EAAW;IAC9D,MAAM,EAAE,GAAG,MAAM,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC;IACtD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,iBAAiB,CAAC,MAAM,CAAC,CAAC,CAAC;IAC1G,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,MAAM,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,EAAkB,EAAE,EAAE,GAAG,EAAE,MAAsB,CAAC,CAAC,CAAC;IACrI,OAAO,EAAE,CAAC,EAAE,CAAC,EAAE,GAAG,EAAE,aAAa,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;AACxF,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,IAAI,CAAc,QAAkB,EAAE,EAAE,GAAG,EAAW;IAC1E,IAAI,MAAkB,CAAC;IACvB,IAAI,CAAC;QAAC,MAAM,GAAG,IAAI,UAAU,CAAC,MAAM,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAiB,EAAE,EAAE,GAAG,EAAE,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAiB,CAAC,CAAC,CAAC;IAAC,CAAC;IACrK,MAAM,CAAC;QAAC,MAAM,IAAI,eAAe,EAAE,CAAC;IAAC,CAAC;IACtC,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,MAAM,IAAI,CAAC,MAAM,EAAE,IAAI,mBAAmB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAM,CAAC;AACxG,CAAC;AAED,0FAA0F;AAC1F,MAAM,UAAU,eAAe,CAAC,KAAc;IAC5C,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,+BAA+B,CAAC;IACxG,MAAM,CAAC,GAAG,KAAgC,CAAC;IAC3C,IAAI,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QAAE,OAAO,gCAAgC,CAAC;IACnI,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,GAAG,KAAK,aAAa,IAAI,CAAC,CAAC,GAAG,KAAK,MAAM;QAAE,OAAO,gCAAgC,CAAC;IACtG,MAAM,GAAG,GAAG,CAAC,CAAC,GAA0C,CAAC;IACzD,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,IAAI,KAAK,eAAe,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC;QAAE,OAAO,wBAAwB,CAAC;IAC9L,IAAI,OAAO,CAAC,CAAC,EAAE,KAAK,QAAQ,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QAAE,OAAO,YAAY,CAAC;IACvF,IAAI,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;QAAE,OAAO,qBAAqB,CAAC;IACvG,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/sync-merge.d.ts

@@ -0,0 +1,41 @@
+/**
+ * Three-way merge of a synced workspace, per document, so every signed-in device can
+ * sync on its own without one device's copy replacing another's.
+ *
+ *  - `base` is what this device last agreed with the account: a digest per path.
+ *  - A document changed only on one side takes that side; changed on both, the account
+ *    copy keeps the path and this device's copy is kept beside it as a conflict file.
+ *  - A deletion carries over unless the other side edited the document meanwhile.
+ *  - A device that has never synced (no base) never deletes or overwrites anything:
+ *    the account's documents win their paths, and the device's own documents join them,
+ *    except the untouched starter documents every new device begins with.
+ *
+ * Pure (no DOM, no network) so it is tested like the renderer.
+ */
+import type { SyncedWorkspace, WorkspaceDocument } from "./sync-schema.ts";
+export type Digest = (text: string) => string;
+/**
+ * FNV-1a over the text and the language: cheap, and only ever compared on one account.
+ * A spilled text file carries the digest of its text; a large stored file is its blob.
+ */
+export declare const digestDocument: (doc: Pick<WorkspaceDocument, "source" | "language" | "blob">) => string;
+export declare const digests: (workspace: SyncedWorkspace | undefined) => Record<string, string>;
+export interface MergeResult {
+    workspace: SyncedWorkspace;
+    /** Paths saved beside the account copy because both sides changed them. */
+    conflicts: string[];
+    /** The merge differs from what the account holds, so this device must upload it. */
+    upload: boolean;
+    /** The merge differs from what this device holds, so it must be applied here. */
+    download: boolean;
+}
+export declare function mergeWorkspaces(options: {
+    local: SyncedWorkspace;
+    remote: SyncedWorkspace | undefined;
+    base: Record<string, string> | undefined;
+    /** Starter documents (path → digest) that a fresh device holds and nobody wrote. */
+    starter?: Record<string, string>;
+    /** Names this device in conflict copies, e.g. "conflict desktop 2026-10-19". */
+    conflictLabel?: string;
+}): MergeResult;
+//# sourceMappingURL=sync-merge.d.ts.map

package/dist/sync-merge.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sync-merge.d.ts","sourceRoot":"","sources":["../src/sync-merge.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,OAAO,KAAK,EAAE,eAAe,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAE3E,MAAM,MAAM,MAAM,GAAG,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,CAAC;AAE9C;;;GAGG;AACH,eAAO,MAAM,cAAc,GAAI,KAAK,IAAI,CAAC,iBAAiB,EAAE,QAAQ,GAAG,UAAU,GAAG,MAAM,CAAC,KAAG,MAM7F,CAAC;AAEF,eAAO,MAAM,OAAO,GAAI,WAAW,eAAe,GAAG,SAAS,KAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CACU,CAAC;AAEjG,MAAM,WAAW,WAAW;IAC1B,SAAS,EAAE,eAAe,CAAC;IAC3B,2EAA2E;IAC3E,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,oFAAoF;IACpF,MAAM,EAAE,OAAO,CAAC;IAChB,iFAAiF;IACjF,QAAQ,EAAE,OAAO,CAAC;CACnB;AAYD,wBAAgB,eAAe,CAAC,OAAO,EAAE;IACvC,KAAK,EAAE,eAAe,CAAC;IACvB,MAAM,EAAE,eAAe,GAAG,SAAS,CAAC;IACpC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,SAAS,CAAC;IACzC,oFAAoF;IACpF,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,gFAAgF;IAChF,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB,GAAG,WAAW,CAiDd"}

package/dist/sync-merge.js

@@ -0,0 +1,86 @@
+/**
+ * FNV-1a over the text and the language: cheap, and only ever compared on one account.
+ * A spilled text file carries the digest of its text; a large stored file is its blob.
+ */
+export const digestDocument = (doc) => {
+    if (doc.blob)
+        return doc.blob.digest ?? `blob:${doc.blob.id}`;
+    let hash = 0x811c9dc5;
+    const text = `${doc.language ?? ""}\0${doc.source}`;
+    for (let i = 0; i < text.length; i++)
+        hash = Math.imul(hash ^ text.charCodeAt(i), 0x01000193);
+    return `${text.length.toString(36)}:${(hash >>> 0).toString(36)}`;
+};
+export const digests = (workspace) => Object.fromEntries((workspace?.documents ?? []).map((doc) => [doc.path, digestDocument(doc)]));
+function conflictPath(path, label, taken) {
+    const slash = path.lastIndexOf("/");
+    const dot = path.lastIndexOf(".");
+    const cut = dot > slash + 1 ? dot : path.length;
+    for (let n = 1;; n++) {
+        const candidate = `${path.slice(0, cut)} (${label}${n > 1 ? ` ${n}` : ""})${path.slice(cut)}`;
+        if (!taken.has(candidate))
+            return candidate;
+    }
+}
+export function mergeWorkspaces(options) {
+    const { local, remote, base, starter = {}, conflictLabel = "conflict" } = options;
+    const L = new Map(local.documents.map((doc) => [doc.path, doc]));
+    const R = new Map((remote?.documents ?? []).map((doc) => [doc.path, doc]));
+    const merged = new Map();
+    const conflicts = [];
+    const isStarter = (doc) => starter[doc.path] === digestDocument(doc);
+    for (const path of new Set([...L.keys(), ...R.keys()])) {
+        const l = L.get(path), r = R.get(path);
+        const ld = l && digestDocument(l), rd = r && digestDocument(r);
+        if (!base) {
+            // First sync on this device: nothing is deleted, the account wins shared paths.
+            if (r)
+                merged.set(path, r);
+            if (l && !isStarter(l) && (!r || ld !== rd)) {
+                if (!r)
+                    merged.set(path, l);
+                else {
+                    const copy = conflictPath(path, conflictLabel, new Set([...L.keys(), ...R.keys(), ...merged.keys()]));
+                    merged.set(copy, { ...l, path: copy });
+                    conflicts.push(copy);
+                }
+            }
+            continue;
+        }
+        const bd = base[path];
+        if (l && r) {
+            if (ld === rd || ld === bd)
+                merged.set(path, r);
+            else if (rd === bd)
+                merged.set(path, l);
+            else {
+                merged.set(path, r);
+                const copy = conflictPath(path, conflictLabel, new Set([...L.keys(), ...R.keys(), ...merged.keys()]));
+                merged.set(copy, { ...l, path: copy });
+                conflicts.push(copy);
+            }
+        }
+        else if (l) {
+            // Gone from the account: deleted elsewhere, unless it is new here or edited here since.
+            if (bd === undefined || ld !== bd)
+                merged.set(path, l);
+        }
+        else if (r) {
+            // Gone from this device: deleted here, unless it is new there or edited there since.
+            if (bd === undefined || rd !== bd)
+                merged.set(path, r);
+        }
+    }
+    const documents = [...merged.values()].sort((a, b) => a.path.localeCompare(b.path));
+    // A workspace never syncs empty; the schema needs one document and an active path.
+    if (!documents.length)
+        documents.push(...local.documents);
+    const name = remote && (!base ? true : local.name === remote.name) ? remote.name : local.name;
+    const active = merged.has(local.active) ? local.active : remote && merged.has(remote.active) ? remote.active : documents[0].path;
+    const workspace = { name, active, documents };
+    const same = (a) => !!a && a.name === workspace.name
+        && a.documents.length === documents.length
+        && documents.every((doc) => { const other = a.documents.find((d) => d.path === doc.path); return !!other && digestDocument(other) === digestDocument(doc); });
+    return { workspace, conflicts, upload: !same(remote), download: !same(local) };
+}
+//# sourceMappingURL=sync-merge.js.map

package/dist/sync-merge.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sync-merge.js","sourceRoot":"","sources":["../src/sync-merge.ts"],"names":[],"mappings":"AAkBA;;;GAGG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,GAA4D,EAAU,EAAE;IACrG,IAAI,GAAG,CAAC,IAAI;QAAE,OAAO,GAAG,CAAC,IAAI,CAAC,MAAM,IAAI,QAAQ,GAAG,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;IAC9D,IAAI,IAAI,GAAG,UAAU,CAAC;IACtB,MAAM,IAAI,GAAG,GAAG,GAAG,CAAC,QAAQ,IAAI,EAAE,KAAK,GAAG,CAAC,MAAM,EAAE,CAAC;IACpD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE;QAAE,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC;IAC9F,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC;AACpE,CAAC,CAAC;AAEF,MAAM,CAAC,MAAM,OAAO,GAAG,CAAC,SAAsC,EAA0B,EAAE,CACxF,MAAM,CAAC,WAAW,CAAC,CAAC,SAAS,EAAE,SAAS,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;AAYjG,SAAS,YAAY,CAAC,IAAY,EAAE,KAAa,EAAE,KAAkB;IACnE,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IACpC,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IAClC,MAAM,GAAG,GAAG,GAAG,GAAG,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC;IAChD,KAAK,IAAI,CAAC,GAAG,CAAC,GAAI,CAAC,EAAE,EAAE,CAAC;QACtB,MAAM,SAAS,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,KAAK,KAAK,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QAC9F,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC;YAAE,OAAO,SAAS,CAAC;IAC9C,CAAC;AACH,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,OAQ/B;IACC,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,GAAG,EAAE,EAAE,aAAa,GAAG,UAAU,EAAE,GAAG,OAAO,CAAC;IAClF,MAAM,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;IACjE,MAAM,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,SAAS,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;IAC3E,MAAM,MAAM,GAAG,IAAI,GAAG,EAA6B,CAAC;IACpD,MAAM,SAAS,GAAa,EAAE,CAAC;IAC/B,MAAM,SAAS,GAAG,CAAC,GAAsB,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,cAAc,CAAC,GAAG,CAAC,CAAC;IAExF,KAAK,MAAM,IAAI,IAAI,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;QACvD,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACvC,MAAM,EAAE,GAAG,CAAC,IAAI,cAAc,CAAC,CAAC,CAAC,EAAE,EAAE,GAAG,CAAC,IAAI,cAAc,CAAC,CAAC,CAAC,CAAC;QAC/D,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,gFAAgF;YAChF,IAAI,CAAC;gBAAE,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;YAC3B,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;gBAC5C,IAAI,CAAC,CAAC;oBAAE,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;qBACvB,CAAC;oBAAC,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,EAAE,aAAa,EAAE,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;oBAAC,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,GAAG,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;oBAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAAC,CAAC;YAC/K,CAAC;YACD,SAAS;QACX,CAAC;QACD,MAAM,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC;QACtB,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACX,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE;gBAAE,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;iBAC3C,IAAI,EAAE,KAAK,EAAE;gBAAE,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;iBACnC,CAAC;gBACJ,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;gBACpB,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,EAAE,aAAa,EAAE,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;gBACtG,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE,GAAG,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;gBACvC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACvB,CAAC;QACH,CAAC;aAAM,IAAI,CAAC,EAAE,CAAC;YACb,wFAAwF;YACxF,IAAI,EAAE,KAAK,SAAS,IAAI,EAAE,KAAK,EAAE;gBAAE,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QACzD,CAAC;aAAM,IAAI,CAAC,EAAE,CAAC;YACb,qFAAqF;YACrF,IAAI,EAAE,KAAK,SAAS,IAAI,EAAE,KAAK,EAAE;gBAAE,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;QACzD,CAAC;IACH,CAAC;IAED,MAAM,SAAS,GAAG,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IACpF,mFAAmF;IACnF,IAAI,CAAC,SAAS,CAAC,MAAM;QAAE,SAAS,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,SAAS,CAAC,CAAC;IAC1D,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC;IAC9F,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,IAAI,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAE,CAAC,IAAI,CAAC;IAClI,MAAM,SAAS,GAAoB,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;IAC/D,MAAM,IAAI,GAAG,CAAC,CAA8B,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,KAAK,SAAS,CAAC,IAAI;WAC5E,CAAC,CAAC,SAAS,CAAC,MAAM,KAAK,SAAS,CAAC,MAAM;WACvC,SAAS,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,GAAG,MAAM,KAAK,GAAG,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,KAAK,IAAI,cAAc,CAAC,KAAK,CAAC,KAAK,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAChK,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;AACjF,CAAC"}

package/dist/sync-schema.d.ts

@@ -1,14 +1,17 @@
 /** Browser-safe account data contract. Only these two files may be synced. */
 import { type Flavor } from "./flavors.ts";
+import { type BlobRef } from "./blob-store.ts";
 /**
  * A workspace file. `source` is the text, or base64 bytes when the path names a PDF or
  * an image. `language` is only stored when the name could not decide it (no known
- * extension) and the content was sniffed on import.
+ * extension) and the content was sniffed on import. A file stored apart (src/blob-store.ts:
+ * larger than 4 MB, or spilled from a full snapshot) has `blob` and an empty `source`.
  */
 export interface WorkspaceDocument {
     path: string;
     source: string;
     language?: string;
+    blob?: BlobRef;
 }
 export interface SyncedWorkspace {
     documents: WorkspaceDocument[];
@@ -37,6 +40,8 @@ export declare const SYNC_POLICY: {
 };
 export declare function validateSettings(value: unknown): ReaderSettings;
 export declare function validateWorkspace(value: unknown): SyncedWorkspace;
+/** An end-to-end encrypted snapshot (src/sync-crypto.ts): one sealed.json, nothing readable beside it. */
+export declare const isSealed: (files: Record<string, unknown> | undefined) => boolean;
 export declare function validateSyncFiles(files: Record<string, {
     content: string;
 }>): void;

package/dist/sync-schema.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sync-schema.d.ts","sourceRoot":"","sources":["../src/sync-schema.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,OAAO,EAAY,KAAK,MAAM,EAAE,MAAM,cAAc,CAAC;AAErD;;;;GAIG;AACH,MAAM,WAAW,iBAAiB;IAAG,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAE;AACtF,MAAM,WAAW,eAAe;IAAG,SAAS,EAAE,iBAAiB,EAAE,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE;AACjG,MAAM,WAAW,cAAc;IAAG,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE;AACnE,eAAO,MAAM,WAAW;;;;CAAmF,CAAC;AAC5G,eAAO,MAAM,UAAU,8CAA+C,CAAC;AACvE,eAAO,MAAM,WAAW;;;;;;;;;CAIvB,CAAC;AAEF,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,OAAO,GAAG,cAAc,CAO/D;AAED,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,OAAO,GAAG,eAAe,CAsBjE;AAED,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE;IAAE,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC,GAAG,IAAI,CAOlF"}
+{"version":3,"file":"sync-schema.d.ts","sourceRoot":"","sources":["../src/sync-schema.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,OAAO,EAAY,KAAK,MAAM,EAAE,MAAM,cAAc,CAAC;AAErD,OAAO,EAA8E,KAAK,OAAO,EAAE,MAAM,iBAAiB,CAAC;AAE3H;;;;;GAKG;AACH,MAAM,WAAW,iBAAiB;IAAG,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,OAAO,CAAA;CAAE;AACtG,MAAM,WAAW,eAAe;IAAG,SAAS,EAAE,iBAAiB,EAAE,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE;AACjG,MAAM,WAAW,cAAc;IAAG,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE;AACnE,eAAO,MAAM,WAAW;;;;CAAmF,CAAC;AAC5G,eAAO,MAAM,UAAU,8CAA+C,CAAC;AACvE,eAAO,MAAM,WAAW;;;;;;;;;CAIvB,CAAC;AAEF,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,OAAO,GAAG,cAAc,CAO/D;AAED,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,OAAO,GAAG,eAAe,CA4BjE;AAED,0GAA0G;AAC1G,eAAO,MAAM,QAAQ,GAAI,OAAO,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS,KAAG,OAA0C,CAAC;AAEjH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE;IAAE,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC,GAAG,IAAI,CAiBlF"}

package/dist/sync-schema.js

@@ -1,5 +1,7 @@
 /** Browser-safe account data contract. Only these two files may be synced. */
 import { isFlavor } from "./flavors.js";
+import { envelopeProblem, SEALED_FILE } from "./sync-crypto.js";
+import { blobRefProblem, INLINE_MAX_BYTES, MAX_ACCOUNT_FILES, SNAPSHOT_INLINE_BYTES } from "./blob-store.js";
 export const SYNC_LIMITS = { maxFileBytes: 32 * 1024 * 1024, maxTotalBytes: 33 * 1024 * 1024, maxFiles: 2 };
 export const SYNC_FILES = ["settings.json", "workspace.json"];
 export const SYNC_POLICY = {
@@ -25,8 +27,8 @@ export function validateWorkspace(value) {
     const ws = value;
     if (Object.keys(ws).some((key) => !["name", "active", "documents"].includes(key)))
         throw new Error("Workspace can only contain name, active and documents.");
-    if (typeof ws.name !== "string" || ws.name.length > 200 || !Array.isArray(ws.documents) || !ws.documents.length || ws.documents.length > 1000)
-        throw new Error("Workspace needs a name and 1–1,000 files.");
+    if (typeof ws.name !== "string" || ws.name.length > 200 || !Array.isArray(ws.documents) || !ws.documents.length || ws.documents.length > MAX_ACCOUNT_FILES)
+        throw new Error("Workspace needs a name and 1–5,000 files.");
     const paths = new Set();
     let total = 0;
     const encoder = new TextEncoder();
@@ -39,19 +41,47 @@ export function validateWorkspace(value) {
             throw new Error("A file's source must be text.");
         if (doc.language !== undefined && (typeof doc.language !== "string" || !/^[a-z0-9_+-]{1,40}$/.test(doc.language)))
             throw new Error("A file's language must be a short highlight name.");
-        if (Object.keys(doc).some((key) => !["path", "source", "language"].includes(key)))
-            throw new Error("Documents can only contain path, source and language.");
+        if (Object.keys(doc).some((key) => !["path", "source", "language", "blob"].includes(key)))
+            throw new Error("Documents can only contain path, source, language and blob.");
+        if (doc.blob !== undefined) {
+            const problem = blobRefProblem(doc.blob);
+            if (problem)
+                throw new Error(problem);
+            if (doc.source !== "")
+                throw new Error("A stored file keeps its bytes apart; its source must be empty.");
+        }
         const bytes = encoder.encode(doc.source).length;
         total += bytes;
-        if (bytes > 4 * 1024 * 1024 || total > 20 * 1024 * 1024)
-            throw new Error("Workspace limit: 4 MB per file and 20 MB total.");
+        // Larger files, and small ones past the snapshot's share, are stored apart (src/blob-store.ts).
+        if (bytes > INLINE_MAX_BYTES || total > SNAPSHOT_INLINE_BYTES + INLINE_MAX_BYTES)
+            throw new Error("Workspace limit: 4 MB of text per file inside the synced copy; larger files are stored apart.");
         paths.add(doc.path);
     }
     if (!paths.has(ws.active))
         throw new Error("The active document is missing.");
     return ws;
 }
+/** An end-to-end encrypted snapshot (src/sync-crypto.ts): one sealed.json, nothing readable beside it. */
+export const isSealed = (files) => !!files && SEALED_FILE in files;
 export function validateSyncFiles(files) {
+    if (isSealed(files)) {
+        if (Object.keys(files).length !== 1)
+            throw new Error("An encrypted snapshot holds sealed.json and nothing else.");
+        const file = files[SEALED_FILE];
+        if (!file || typeof file.content !== "string")
+            throw new Error("sealed.json: content must be text.");
+        let envelope;
+        try {
+            envelope = JSON.parse(file.content);
+        }
+        catch {
+            throw new Error("sealed.json is not JSON.");
+        }
+        const problem = envelopeProblem(envelope);
+        if (problem)
+            throw new Error(problem);
+        return;
+    }
     for (const [path, file] of Object.entries(files)) {
         if (!SYNC_FILES.includes(path))
             throw new Error(`File is not syncable: ${path}`);

package/dist/sync-schema.js.map

@@ -1 +1 @@
-{"version":3,"file":"sync-schema.js","sourceRoot":"","sources":["../src/sync-schema.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,OAAO,EAAE,QAAQ,EAAe,MAAM,cAAc,CAAC;AAUrD,MAAM,CAAC,MAAM,WAAW,GAAG,EAAE,YAAY,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI,EAAE,aAAa,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;AAC5G,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,eAAe,EAAE,gBAAgB,CAAU,CAAC;AACvE,MAAM,CAAC,MAAM,WAAW,GAAG;IACzB,KAAK,EAAE,UAAU,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IACvD,KAAK,EAAE,CAAC,cAAc,EAAE,YAAY,EAAE,WAAW,CAAC;IAClD,GAAG,WAAW;CACf,CAAC;AAEF,MAAM,UAAU,gBAAgB,CAAC,KAAc;IAC7C,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;IAChH,MAAM,QAAQ,GAAG,KAAuB,CAAC;IACzC,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;IACjJ,IAAI,QAAQ,CAAC,KAAK,KAAK,SAAS,IAAI,CAAC,OAAO,QAAQ,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,gBAAgB,CAAC,CAAC;IACzJ,IAAI,QAAQ,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;IAC7G,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,KAAc;IAC9C,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;IACzF,MAAM,EAAE,GAAG,KAAwB,CAAC;IACpC,IAAI,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;IAC7J,IAAI,OAAO,EAAE,CAAC,IAAI,KAAK,QAAQ,IAAI,EAAE,CAAC,IAAI,CAAC,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,SAAS,CAAC,MAAM,IAAI,EAAE,CAAC,SAAS,CAAC,MAAM,GAAG,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;IAC5M,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAChC,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;IAClC,KAAK,MAAM,GAAG,IAAI,EAAE,CAAC,SAAS,EAAE,CAAC;QAC/B,qFAAqF;QACrF,4CAA4C;QAC5C,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,GAAG,IAAI,IAAI,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,IAAI,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;QACnQ,IAAI,OAAO,GAAG,CAAC,MAAM,KAAK,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;QACrF,IAAI,GAAG,CAAC,QAAQ,KAAK,SAAS,IAAI,CAAC,OAAO,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;QACxL,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;QAC5J,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC;QAChD,KAAK,IAAI,KAAK,CAAC;QACf,IAAI,KAAK,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,IAAI,KAAK,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;QAC5H,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACtB,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IAC9E,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,KAA0C;IAC1E,KAAK,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACjD,IAAI,CAAE,UAAgC,CAAC,QAAQ,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,IAAI,EAAE,CAAC,CAAC;QACxG,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,yBAAyB,CAAC,CAAC;QACjG,MAAM,KAAK,GAAY,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAChD,IAAI,IAAI,KAAK,eAAe;YAAE,gBAAgB,CAAC,KAAK,CAAC,CAAC;;YAAM,iBAAiB,CAAC,KAAK,CAAC,CAAC;IACvF,CAAC;AACH,CAAC"}
+{"version":3,"file":"sync-schema.js","sourceRoot":"","sources":["../src/sync-schema.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,OAAO,EAAE,QAAQ,EAAe,MAAM,cAAc,CAAC;AACrD,OAAO,EAAE,eAAe,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAChE,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,qBAAqB,EAAgB,MAAM,iBAAiB,CAAC;AAW3H,MAAM,CAAC,MAAM,WAAW,GAAG,EAAE,YAAY,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI,EAAE,aAAa,EAAE,EAAE,GAAG,IAAI,GAAG,IAAI,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAC;AAC5G,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,eAAe,EAAE,gBAAgB,CAAU,CAAC;AACvE,MAAM,CAAC,MAAM,WAAW,GAAG;IACzB,KAAK,EAAE,UAAU,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IACvD,KAAK,EAAE,CAAC,cAAc,EAAE,YAAY,EAAE,WAAW,CAAC;IAClD,GAAG,WAAW;CACf,CAAC;AAEF,MAAM,UAAU,gBAAgB,CAAC,KAAc;IAC7C,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;IAChH,MAAM,QAAQ,GAAG,KAAuB,CAAC;IACzC,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,kDAAkD,CAAC,CAAC;IACjJ,IAAI,QAAQ,CAAC,KAAK,KAAK,SAAS,IAAI,CAAC,OAAO,QAAQ,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,gBAAgB,CAAC,CAAC;IACzJ,IAAI,QAAQ,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;IAC7G,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,KAAc;IAC9C,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAC;IACzF,MAAM,EAAE,GAAG,KAAwB,CAAC;IACpC,IAAI,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;IAC7J,IAAI,OAAO,EAAE,CAAC,IAAI,KAAK,QAAQ,IAAI,EAAE,CAAC,IAAI,CAAC,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,SAAS,CAAC,MAAM,IAAI,EAAE,CAAC,SAAS,CAAC,MAAM,GAAG,iBAAiB;QAAE,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC;IACzN,MAAM,KAAK,GAAG,IAAI,GAAG,EAAU,CAAC;IAChC,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;IAClC,KAAK,MAAM,GAAG,IAAI,EAAE,CAAC,SAAS,EAAE,CAAC;QAC/B,qFAAqF;QACrF,4CAA4C;QAC5C,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,IAAI,GAAG,CAAC,IAAI,CAAC,MAAM,GAAG,IAAI,IAAI,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,IAAI,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;QACnQ,IAAI,OAAO,GAAG,CAAC,MAAM,KAAK,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;QACrF,IAAI,GAAG,CAAC,QAAQ,KAAK,SAAS,IAAI,CAAC,OAAO,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,qBAAqB,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;QACxL,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAC;QAC1K,IAAI,GAAG,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC3B,MAAM,OAAO,GAAG,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACzC,IAAI,OAAO;gBAAE,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC;YACtC,IAAI,GAAG,CAAC,MAAM,KAAK,EAAE;gBAAE,MAAM,IAAI,KAAK,CAAC,gEAAgE,CAAC,CAAC;QAC3G,CAAC;QACD,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC;QAChD,KAAK,IAAI,KAAK,CAAC;QACf,gGAAgG;QAChG,IAAI,KAAK,GAAG,gBAAgB,IAAI,KAAK,GAAG,qBAAqB,GAAG,gBAAgB;YAAE,MAAM,IAAI,KAAK,CAAC,+FAA+F,CAAC,CAAC;QACnM,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACtB,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;IAC9E,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,0GAA0G;AAC1G,MAAM,CAAC,MAAM,QAAQ,GAAG,CAAC,KAA0C,EAAW,EAAE,CAAC,CAAC,CAAC,KAAK,IAAI,WAAW,IAAI,KAAK,CAAC;AAEjH,MAAM,UAAU,iBAAiB,CAAC,KAA0C;IAC1E,IAAI,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACpB,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,KAAK,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,2DAA2D,CAAC,CAAC;QAClH,MAAM,IAAI,GAAG,KAAK,CAAC,WAAW,CAAC,CAAC;QAChC,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;QACrG,IAAI,QAAiB,CAAC;QACtB,IAAI,CAAC;YAAC,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;QAAC,CAAC;QACnG,MAAM,OAAO,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC;QAC1C,IAAI,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC;QACtC,OAAO;IACT,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACjD,IAAI,CAAE,UAAgC,CAAC,QAAQ,CAAC,IAAI,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,IAAI,EAAE,CAAC,CAAC;QACxG,IAAI,CAAC,IAAI,IAAI,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,yBAAyB,CAAC,CAAC;QACjG,MAAM,KAAK,GAAY,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAChD,IAAI,IAAI,KAAK,eAAe;YAAE,gBAAgB,CAAC,KAAK,CAAC,CAAC;;YAAM,iBAAiB,CAAC,KAAK,CAAC,CAAC;IACvF,CAAC;AACH,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@profullstack/readm3",
-  "version": "0.15.0",
+  "version": "0.17.0",
   "description": "Markdown editing and sharing for people and teams. Web/PWA, CLI, API and MCP with version history, view/edit links, and a terminal reader.",
   "type": "module",
   "license": "MIT",