@scribe-platform/cli 0.8.0 → 0.9.0

package/dist/lib/proof-folder.js

@@ -0,0 +1,226 @@
+import { createHash } from 'node:crypto';
+import { existsSync, readdirSync, readFileSync, statSync, writeFileSync } from 'node:fs';
+import { join, relative, sep } from 'node:path';
+/**
+ * RFC 0029 — a Proof folder on Ashley's machine: `proofs/<name>/` inside the
+ * client folder, holding the current version's files plus `.scribe-proof.json`,
+ * which says which Proof the folder belongs to so commands run inside it need
+ * no argument.
+ *
+ * The rules below mirror the server's (`@scribe-cms/core/proofs`'s
+ * `validateManifest`), so `scribe proof check` can say what a push would
+ * refuse before anything is uploaded. **The server is the authority**: if the
+ * two ever disagree, the push fails with the server's reason, which is the
+ * safe direction to drift.
+ */
+export const PROOF_CONFIG_FILE = '.scribe-proof.json';
+export const ENTRY_PATH = 'index.html';
+export const MAX_FILE_BYTES = 25 * 1024 * 1024;
+export const MAX_VERSION_BYTES = 100 * 1024 * 1024;
+const RESERVED_PREFIX = '_scribe/';
+/** File types a Proof may contain, by lowercase extension — the server's table. */
+export const PROOF_CONTENT_TYPES = {
+    html: 'text/html; charset=utf-8',
+    htm: 'text/html; charset=utf-8',
+    css: 'text/css; charset=utf-8',
+    js: 'text/javascript; charset=utf-8',
+    mjs: 'text/javascript; charset=utf-8',
+    json: 'application/json; charset=utf-8',
+    txt: 'text/plain; charset=utf-8',
+    svg: 'image/svg+xml',
+    png: 'image/png',
+    jpg: 'image/jpeg',
+    jpeg: 'image/jpeg',
+    gif: 'image/gif',
+    webp: 'image/webp',
+    avif: 'image/avif',
+    ico: 'image/x-icon',
+    woff: 'font/woff',
+    woff2: 'font/woff2',
+    ttf: 'font/ttf',
+    otf: 'font/otf',
+    mp4: 'video/mp4',
+    webm: 'video/webm',
+    pdf: 'application/pdf',
+};
+export const PROOF_EXTENSIONS = Object.keys(PROOF_CONTENT_TYPES);
+/** Same rule as the server and the runtime: ids appear in URLs, event rows and CLI output. */
+export const OPTION_ID = /^[A-Za-z0-9][A-Za-z0-9_-]{0,63}$/;
+/** `acme-bakery/logo-concepts` → `{ client, proof }`, or null if it isn't one. */
+export function parseProofRef(value) {
+    const match = /^([a-z0-9][a-z0-9-]*)\/([a-z0-9][a-z0-9-]*)$/.exec(value.trim());
+    return match ? { client: match[1], proof: match[2] } : null;
+}
+export function readProofConfig(dir) {
+    const file = join(dir, PROOF_CONFIG_FILE);
+    if (!existsSync(file))
+        return null;
+    try {
+        const data = JSON.parse(readFileSync(file, 'utf8'));
+        return typeof data.client === 'string' && typeof data.proof === 'string' ? { client: data.client, proof: data.proof } : null;
+    }
+    catch {
+        return null;
+    }
+}
+export function writeProofConfig(dir, ref) {
+    writeFileSync(join(dir, PROOF_CONFIG_FILE), `${JSON.stringify(ref, null, 2)}\n`);
+}
+/**
+ * Which Proof a command means: the `<client>/<proof>` argument if given,
+ * otherwise the folder's `.scribe-proof.json`.
+ */
+export function resolveProofRef(arg, dir) {
+    if (arg) {
+        const ref = parseProofRef(arg);
+        return ref ? { ok: true, ref } : { ok: false, error: `"${arg}" isn't a Proof — expected <client>/<proof>, e.g. acme-bakery/logo-concepts` };
+    }
+    const ref = readProofConfig(dir);
+    if (ref)
+        return { ok: true, ref };
+    return {
+        ok: false,
+        error: `No ${PROOF_CONFIG_FILE} in ${dir}. Run this inside a Proof folder, or name the Proof as <client>/<proof>.`,
+    };
+}
+/** Hidden files and folders never ship: `.scribe-proof.json`, `.DS_Store`, `.git`. */
+function isHidden(name) {
+    return name.startsWith('.');
+}
+/** Every file a push would send, sorted by path so manifests are stable. */
+export function scanFolder(dir) {
+    const files = [];
+    const walk = (current) => {
+        for (const entry of readdirSync(current, { withFileTypes: true })) {
+            if (isHidden(entry.name) || entry.name === 'node_modules')
+                continue;
+            const absolute = join(current, entry.name);
+            if (entry.isDirectory())
+                walk(absolute);
+            else if (entry.isFile()) {
+                const content = readFileSync(absolute);
+                files.push({
+                    path: relative(dir, absolute).split(sep).join('/'),
+                    absolute,
+                    bytes: statSync(absolute).size,
+                    sha256: createHash('sha256').update(content).digest('hex'),
+                });
+            }
+        }
+    };
+    walk(dir);
+    return files.sort((a, b) => (a.path < b.path ? -1 : a.path > b.path ? 1 : 0));
+}
+export function extensionOf(path) {
+    const name = path.slice(path.lastIndexOf('/') + 1);
+    const dot = name.lastIndexOf('.');
+    return dot > 0 ? name.slice(dot + 1).toLowerCase() : null;
+}
+function mb(bytes) {
+    return `${Math.round((bytes / (1024 * 1024)) * 10) / 10} MB`;
+}
+/** `data-proof-option` elements in one HTML file — a lighter read than the server's, for warnings only. */
+export function findOptions(html) {
+    const visible = html.replace(/<!--[\s\S]*?-->/g, '').replace(/<script\b[\s\S]*?<\/script\s*>/gi, '');
+    const options = [];
+    const duplicates = [];
+    const invalid = [];
+    const seen = new Set();
+    for (const tag of visible.matchAll(/<[A-Za-z][^>]*\sdata-proof-option\s*=\s*("([^"]*)"|'([^']*)'|([^\s>]+))[^>]*>/g)) {
+        const id = (tag[2] ?? tag[3] ?? tag[4] ?? '').trim();
+        if (!OPTION_ID.test(id)) {
+            invalid.push(id);
+            continue;
+        }
+        if (seen.has(id)) {
+            duplicates.push(id);
+            continue;
+        }
+        seen.add(id);
+        const label = /\sdata-proof-label\s*=\s*("([^"]*)"|'([^']*)')/.exec(tag[0]);
+        options.push({ id, label: label ? (label[2] ?? label[3] ?? '').trim() || null : null });
+    }
+    return { options, duplicates, invalid };
+}
+/**
+ * Links that start with `/`. A Proof is served under `/c/<token>/`, so a
+ * root-absolute `/images/logo.png` points outside it and 404s for the Client —
+ * while working fine in a local dev server, which is what makes it worth
+ * catching before a push. Protocol-relative `//cdn…` links are fine.
+ */
+export function findRootAbsoluteLinks(text) {
+    const found = [];
+    const patterns = [/\s(?:src|href|poster|action)\s*=\s*["'](\/(?!\/)[^"']*)["']/gi, /url\(\s*["']?(\/(?!\/)[^"')]*)["']?\s*\)/gi];
+    text.split('\n').forEach((lineText, index) => {
+        for (const pattern of patterns) {
+            for (const match of lineText.matchAll(pattern))
+                found.push({ line: index + 1, link: match[1] });
+        }
+    });
+    return found;
+}
+/**
+ * Everything `scribe proof check` reports. `previousOptions` — the last pushed
+ * version's Option ids — lets it say which Options a revision dropped.
+ */
+/** Mirrors core's `isGalleryManifest`: images and PDFs are what a generated page can be built from. */
+function isGalleryType(path) {
+    const type = PROOF_CONTENT_TYPES[extensionOf(path) ?? ''];
+    return Boolean(type) && (type.startsWith('image/') || type === 'application/pdf');
+}
+export function checkFolder(dir, previousOptions = []) {
+    const files = scanFolder(dir);
+    const errors = [];
+    const brokenLinks = [];
+    const warnings = [];
+    let totalBytes = 0;
+    let options = [];
+    if (files.length === 0)
+        errors.push('The folder is empty.');
+    // A folder of images and nothing else is allowed to arrive with no page:
+    // the server generates one and makes each file an Option, which is what
+    // makes "send them these four PNGs" work with no HTML at all (RFC 0029).
+    const gallery = files.length > 0 && files.every((f) => isGalleryType(f.path));
+    if (files.length > 0 && !gallery && !files.some((f) => f.path === ENTRY_PATH)) {
+        errors.push(`${ENTRY_PATH} is missing — it's the page the Proof opens on.`);
+    }
+    for (const file of files) {
+        totalBytes += file.bytes;
+        const ext = extensionOf(file.path);
+        if (!ext || !PROOF_EXTENSIONS.includes(ext))
+            errors.push(`${file.path}: not a file type a Proof may contain.`);
+        if (file.bytes > MAX_FILE_BYTES)
+            errors.push(`${file.path}: ${mb(file.bytes)} is over the ${mb(MAX_FILE_BYTES)} per-file limit.`);
+        if (file.path.startsWith(RESERVED_PREFIX))
+            errors.push(`${file.path}: ${RESERVED_PREFIX} is reserved for Scribe's own files.`);
+        if (/[?#]/.test(file.path))
+            errors.push(`${file.path}: file names can't contain ? or #.`);
+        if (ext === 'html' || ext === 'htm' || ext === 'css') {
+            const text = readFileSync(file.absolute, 'utf8');
+            for (const { line, link } of findRootAbsoluteLinks(text)) {
+                brokenLinks.push(`${file.path}:${line}: "${link}" starts with / — make it relative ("${link.slice(1)}")`);
+            }
+            if (ext !== 'css') {
+                const found = findOptions(text);
+                if (file.path === ENTRY_PATH)
+                    options = found.options;
+                for (const id of found.duplicates)
+                    warnings.push(`${file.path}: Option "${id}" appears more than once; only the first counts.`);
+                for (const id of found.invalid) {
+                    warnings.push(`${file.path}: "${id}" isn't a usable Option id (letters, numbers, - and _ only, up to 64).`);
+                }
+            }
+        }
+    }
+    if (totalBytes > MAX_VERSION_BYTES)
+        errors.push(`${mb(totalBytes)} in total is over the ${mb(MAX_VERSION_BYTES)} per-version limit.`);
+    // Often deliberate — the revision workflow drops the Options nobody liked —
+    // so it's one line of information, not a warning per Option.
+    const current = new Set(options.map((o) => o.id));
+    const dropped = previousOptions.filter((id) => !current.has(id));
+    if (dropped.length > 0) {
+        warnings.push(`Dropped since the last version: ${dropped.join(', ')}. Feedback on those stays on the older version.`);
+    }
+    return { files, totalBytes, errors, brokenLinks, warnings, options, gallery };
+}
+//# sourceMappingURL=proof-folder.js.map

package/dist/lib/proof-folder.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"proof-folder.js","sourceRoot":"","sources":["../../src/lib/proof-folder.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,YAAY,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACzF,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAEhD;;;;;;;;;;;GAWG;AAEH,MAAM,CAAC,MAAM,iBAAiB,GAAG,oBAAoB,CAAC;AACtD,MAAM,CAAC,MAAM,UAAU,GAAG,YAAY,CAAC;AACvC,MAAM,CAAC,MAAM,cAAc,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAC/C,MAAM,CAAC,MAAM,iBAAiB,GAAG,GAAG,GAAG,IAAI,GAAG,IAAI,CAAC;AACnD,MAAM,eAAe,GAAG,UAAU,CAAC;AAEnC,mFAAmF;AACnF,MAAM,CAAC,MAAM,mBAAmB,GAAqC;IACnE,IAAI,EAAE,0BAA0B;IAChC,GAAG,EAAE,0BAA0B;IAC/B,GAAG,EAAE,yBAAyB;IAC9B,EAAE,EAAE,gCAAgC;IACpC,GAAG,EAAE,gCAAgC;IACrC,IAAI,EAAE,iCAAiC;IACvC,GAAG,EAAE,2BAA2B;IAChC,GAAG,EAAE,eAAe;IACpB,GAAG,EAAE,WAAW;IAChB,GAAG,EAAE,YAAY;IACjB,IAAI,EAAE,YAAY;IAClB,GAAG,EAAE,WAAW;IAChB,IAAI,EAAE,YAAY;IAClB,IAAI,EAAE,YAAY;IAClB,GAAG,EAAE,cAAc;IACnB,IAAI,EAAE,WAAW;IACjB,KAAK,EAAE,YAAY;IACnB,GAAG,EAAE,UAAU;IACf,GAAG,EAAE,UAAU;IACf,GAAG,EAAE,WAAW;IAChB,IAAI,EAAE,YAAY;IAClB,GAAG,EAAE,iBAAiB;CACvB,CAAC;AAEF,MAAM,CAAC,MAAM,gBAAgB,GAAsB,MAAM,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;AAEpF,8FAA8F;AAC9F,MAAM,CAAC,MAAM,SAAS,GAAG,kCAAkC,CAAC;AAe5D,kFAAkF;AAClF,MAAM,UAAU,aAAa,CAAC,KAAa;IACzC,MAAM,KAAK,GAAG,8CAA8C,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;IAChF,OAAO,KAAK,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AAC9D,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,GAAW;IACzC,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,iBAAiB,CAAC,CAAC;IAC1C,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACnC,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAsB,CAAC;QACzE,OAAO,OAAO,IAAI,CAAC,MAAM,KAAK,QAAQ,IAAI,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;IAC/H,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,GAAW,EAAE,GAAa;IACzD,aAAa,CAAC,IAAI,CAAC,GAAG,EAAE,iBAAiB,CAAC,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC;AACnF,CAAC;AAID;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAC,GAAuB,EAAE,GAAW;IAClE,IAAI,GAAG,EAAE,CAAC;QACR,MAAM,GAAG,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC;QAC/B,OAAO,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,GAAG,6EAA6E,EAAE,CAAC;IAC9I,CAAC;IACD,MAAM,GAAG,GAAG,eAAe,CAAC,GAAG,CAAC,CAAC;IACjC,IAAI,GAAG;QAAE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;IAClC,OAAO;QACL,EAAE,EAAE,KAAK;QACT,KAAK,EAAE,MAAM,iBAAiB,OAAO,GAAG,0EAA0E;KACnH,CAAC;AACJ,CAAC;AAED,sFAAsF;AACtF,SAAS,QAAQ,CAAC,IAAY;IAC5B,OAAO,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;AAC9B,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,UAAU,CAAC,GAAW;IACpC,MAAM,KAAK,GAAgB,EAAE,CAAC;IAC9B,MAAM,IAAI,GAAG,CAAC,OAAe,EAAE,EAAE;QAC/B,KAAK,MAAM,KAAK,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;YAClE,IAAI,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,cAAc;gBAAE,SAAS;YACpE,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;YAC3C,IAAI,KAAK,CAAC,WAAW,EAAE;gBAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;iBACnC,IAAI,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;gBACxB,MAAM,OAAO,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC;gBACvC,KAAK,CAAC,IAAI,CAAC;oBACT,IAAI,EAAE,QAAQ,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC;oBAClD,QAAQ;oBACR,KAAK,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC,IAAI;oBAC9B,MAAM,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;iBAC3D,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC,CAAC;IACF,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAChF,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,IAAY;IACtC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;IACnD,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IAClC,OAAO,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AAC5D,CAAC;AAED,SAAS,EAAE,CAAC,KAAa;IACvB,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC,GAAG,EAAE,CAAC,GAAG,EAAE,KAAK,CAAC;AAC/D,CAAC;AAOD,2GAA2G;AAC3G,MAAM,UAAU,WAAW,CAAC,IAAY;IACtC,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,kBAAkB,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,kCAAkC,EAAE,EAAE,CAAC,CAAC;IACrG,MAAM,OAAO,GAAuB,EAAE,CAAC;IACvC,MAAM,UAAU,GAAa,EAAE,CAAC;IAChC,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,MAAM,GAAG,IAAI,OAAO,CAAC,QAAQ,CAAC,gFAAgF,CAAC,EAAE,CAAC;QACrH,MAAM,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACrD,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;YACxB,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACjB,SAAS;QACX,CAAC;QACD,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,EAAE,CAAC;YACjB,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACpB,SAAS;QACX,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACb,MAAM,KAAK,GAAG,gDAAgD,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QAC5E,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IAC1F,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC;AAC1C,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,qBAAqB,CAAC,IAAY;IAChD,MAAM,KAAK,GAAqC,EAAE,CAAC;IACnD,MAAM,QAAQ,GAAG,CAAC,+DAA+D,EAAE,4CAA4C,CAAC,CAAC;IACjI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,KAAK,EAAE,EAAE;QAC3C,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC/B,KAAK,MAAM,KAAK,IAAI,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC;gBAAE,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,GAAG,CAAC,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAClG,CAAC;IACH,CAAC,CAAC,CAAC;IACH,OAAO,KAAK,CAAC;AACf,CAAC;AAgBD;;;GAGG;AACH,uGAAuG;AACvG,SAAS,aAAa,CAAC,IAAY;IACjC,MAAM,IAAI,GAAG,mBAAmB,CAAC,WAAW,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;IAC1D,OAAO,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,IAAI,KAAK,iBAAiB,CAAC,CAAC;AACpF,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,GAAW,EAAE,kBAA4B,EAAE;IACrE,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;IAC9B,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,MAAM,WAAW,GAAa,EAAE,CAAC;IACjC,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,IAAI,UAAU,GAAG,CAAC,CAAC;IACnB,IAAI,OAAO,GAAuB,EAAE,CAAC;IAErC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC;IAC5D,yEAAyE;IACzE,wEAAwE;IACxE,yEAAyE;IACzE,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IAC9E,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,UAAU,CAAC,EAAE,CAAC;QAC9E,MAAM,CAAC,IAAI,CAAC,GAAG,UAAU,iDAAiD,CAAC,CAAC;IAC9E,CAAC;IAED,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,UAAU,IAAI,IAAI,CAAC,KAAK,CAAC;QACzB,MAAM,GAAG,GAAG,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACnC,IAAI,CAAC,GAAG,IAAI,CAAC,gBAAgB,CAAC,QAAQ,CAAC,GAAG,CAAC;YAAE,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,wCAAwC,CAAC,CAAC;QAC/G,IAAI,IAAI,CAAC,KAAK,GAAG,cAAc;YAAE,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,KAAK,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,gBAAgB,EAAE,CAAC,cAAc,CAAC,kBAAkB,CAAC,CAAC;QAClI,IAAI,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,eAAe,CAAC;YAAE,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,KAAK,eAAe,sCAAsC,CAAC,CAAC;QAC/H,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,MAAM,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,oCAAoC,CAAC,CAAC;QAE1F,IAAI,GAAG,KAAK,MAAM,IAAI,GAAG,KAAK,KAAK,IAAI,GAAG,KAAK,KAAK,EAAE,CAAC;YACrD,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;YACjD,KAAK,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,qBAAqB,CAAC,IAAI,CAAC,EAAE,CAAC;gBACzD,WAAW,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,IAAI,IAAI,MAAM,IAAI,wCAAwC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;YAC5G,CAAC;YACD,IAAI,GAAG,KAAK,KAAK,EAAE,CAAC;gBAClB,MAAM,KAAK,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;gBAChC,IAAI,IAAI,CAAC,IAAI,KAAK,UAAU;oBAAE,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;gBACtD,KAAK,MAAM,EAAE,IAAI,KAAK,CAAC,UAAU;oBAAE,QAAQ,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,aAAa,EAAE,kDAAkD,CAAC,CAAC;gBAChI,KAAK,MAAM,EAAE,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;oBAC/B,QAAQ,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,MAAM,EAAE,wEAAwE,CAAC,CAAC;gBAC9G,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,IAAI,UAAU,GAAG,iBAAiB;QAAE,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,yBAAyB,EAAE,CAAC,iBAAiB,CAAC,qBAAqB,CAAC,CAAC;IAEtI,4EAA4E;IAC5E,6DAA6D;IAC7D,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAClD,MAAM,OAAO,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;IACjE,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,QAAQ,CAAC,IAAI,CAAC,mCAAmC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,iDAAiD,CAAC,CAAC;IACxH,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,EAAE,WAAW,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAChF,CAAC"}

package/dist/lib/proof-preview.d.ts

@@ -0,0 +1,39 @@
+/**
+ * RFC 0029 — `scribe proof preview`: a Proof folder served the way a Client
+ * will see it, before anything is pushed.
+ *
+ * Same sandbox CSP, same runtime injected the same way, same iframe sandbox
+ * attribute — so a Proof that works here works for the Client, and one that
+ * breaks under the sandbox (a script reading `localStorage`, say) breaks here
+ * first. The panel around it is a stand-in for the real review page: it keeps
+ * hearts, comments and pins in memory so they show up on the page as they
+ * would, and prints each one to the terminal. Nothing is saved anywhere.
+ */
+/** Mirrors the admin's `PROOF_CONTENT_CSP`. No `allow-same-origin`, ever. */
+export declare const PREVIEW_CSP = "sandbox allow-scripts allow-forms allow-popups allow-modals";
+/**
+ * The runtime bundle, copied in from `@scribe-cms/proof-runtime` at build time
+ * by scripts/bundle-runtime.mjs — the CLI is published to npm and can't depend
+ * on the private workspace package at install time. `../../runtime/` resolves
+ * to the package root from both `src/lib/` (tests) and `dist/lib/` (published).
+ */
+export declare function loadRuntimeSource(): string;
+/** Same placement rule as the admin's `injectRuntime`: first thing in `<head>`, src relative to the file's depth. */
+export declare function injectRuntime(html: string, path: string): string;
+/**
+ * The file a request path names inside the folder, or null. Hidden files and
+ * anything outside the folder are never served — the same files a push would
+ * leave out.
+ */
+export declare function resolvePreviewFile(dir: string, requestPath: string): string | null;
+export interface PreviewServer {
+    url: string;
+    close(): Promise<void>;
+}
+export declare function startPreview(args: {
+    dir: string;
+    port?: number;
+    log?: (line: string) => void;
+    runtimeSource?: string;
+}): Promise<PreviewServer>;
+//# sourceMappingURL=proof-preview.d.ts.map

package/dist/lib/proof-preview.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"proof-preview.d.ts","sourceRoot":"","sources":["../../src/lib/proof-preview.ts"],"names":[],"mappings":"AAMA;;;;;;;;;;GAUG;AAEH,6EAA6E;AAC7E,eAAO,MAAM,WAAW,gEAAgE,CAAC;AAWzF;;;;;GAKG;AACH,wBAAgB,iBAAiB,IAAI,MAAM,CAM1C;AAED,qHAAqH;AACrH,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAWhE;AAaD;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAalF;AAED,MAAM,WAAW,aAAa;IAC5B,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxB;AAED,wBAAsB,YAAY,CAAC,IAAI,EAAE;IACvC,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,GAAG,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC7B,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB,GAAG,OAAO,CAAC,aAAa,CAAC,CA6DzB"}

package/dist/lib/proof-preview.js

@@ -0,0 +1,318 @@
+import { existsSync, readFileSync, statSync } from 'node:fs';
+import { createServer } from 'node:http';
+import { basename, resolve, sep } from 'node:path';
+import { ENTRY_PATH, extensionOf, PROOF_CONTENT_TYPES } from './proof-folder.js';
+/**
+ * RFC 0029 — `scribe proof preview`: a Proof folder served the way a Client
+ * will see it, before anything is pushed.
+ *
+ * Same sandbox CSP, same runtime injected the same way, same iframe sandbox
+ * attribute — so a Proof that works here works for the Client, and one that
+ * breaks under the sandbox (a script reading `localStorage`, say) breaks here
+ * first. The panel around it is a stand-in for the real review page: it keeps
+ * hearts, comments and pins in memory so they show up on the page as they
+ * would, and prints each one to the terminal. Nothing is saved anywhere.
+ */
+/** Mirrors the admin's `PROOF_CONTENT_CSP`. No `allow-same-origin`, ever. */
+export const PREVIEW_CSP = 'sandbox allow-scripts allow-forms allow-popups allow-modals';
+const PREFIX = '/c/local/';
+const RUNTIME_PATH = '_scribe/proof.js';
+/**
+ * Must match `PROTOCOL_VERSION` in `@scribe-cms/proof-runtime`'s protocol
+ * module. Not imported from it: the CLI ships to npm and only gets the bundled
+ * script copied in at build time, never the package. A mismatch is loud — the
+ * runtime drops every message and the preview draws no affordances at all.
+ */
+const PROTOCOL_VERSION = 7;
+/**
+ * The runtime bundle, copied in from `@scribe-cms/proof-runtime` at build time
+ * by scripts/bundle-runtime.mjs — the CLI is published to npm and can't depend
+ * on the private workspace package at install time. `../../runtime/` resolves
+ * to the package root from both `src/lib/` (tests) and `dist/lib/` (published).
+ */
+export function loadRuntimeSource() {
+    const file = new URL('../../runtime/proof.js', import.meta.url);
+    if (!existsSync(file)) {
+        throw new Error('The Proof runtime is missing from this install. Reinstall the CLI (or, in the repo, run `npm run build --workspace=@scribe-platform/cli`).');
+    }
+    return readFileSync(file, 'utf8');
+}
+/** Same placement rule as the admin's `injectRuntime`: first thing in `<head>`, src relative to the file's depth. */
+export function injectRuntime(html, path) {
+    const depth = path.split('/').length - 1;
+    const tag = `<script src="${'../'.repeat(depth)}${RUNTIME_PATH}"></script>`;
+    const at = (index) => html.slice(0, index) + tag + html.slice(index);
+    const head = /<head(\s[^>]*)?>/i.exec(html);
+    if (head)
+        return at(head.index + head[0].length);
+    const body = /<body(\s[^>]*)?>/i.exec(html);
+    if (body)
+        return at(body.index);
+    const doctype = /^\s*<!doctype[^>]*>/i.exec(html);
+    if (doctype)
+        return at(doctype[0].length);
+    return tag + html;
+}
+function contentHeaders(contentType) {
+    return {
+        'Content-Type': contentType,
+        'Content-Security-Policy': PREVIEW_CSP,
+        'Referrer-Policy': 'no-referrer',
+        'X-Content-Type-Options': 'nosniff',
+        // Ashley edits and reloads; never serve her a stale copy.
+        'Cache-Control': 'no-store',
+    };
+}
+/**
+ * The file a request path names inside the folder, or null. Hidden files and
+ * anything outside the folder are never served — the same files a push would
+ * leave out.
+ */
+export function resolvePreviewFile(dir, requestPath) {
+    let segments;
+    try {
+        segments = requestPath.split('/').map(decodeURIComponent);
+    }
+    catch {
+        return null;
+    }
+    if (segments.some((s) => s === '' || s === '.' || s === '..' || s.startsWith('.') || s.includes('/') || s.includes('\\')))
+        return null;
+    const root = resolve(dir);
+    const target = resolve(root, ...segments);
+    if (!target.startsWith(root + sep))
+        return null;
+    if (!existsSync(target) || !statSync(target).isFile())
+        return null;
+    return target;
+}
+export async function startPreview(args) {
+    const dir = resolve(args.dir);
+    const log = args.log ?? ((line) => console.log(line));
+    const runtime = args.runtimeSource ?? loadRuntimeSource();
+    const shell = shellPage(basename(dir));
+    const server = createServer((req, res) => {
+        const url = new URL(req.url ?? '/', 'http://localhost');
+        const send = (status, headers, body) => {
+            res.writeHead(status, headers);
+            res.end(body);
+        };
+        if (req.method === 'POST' && url.pathname === '/__log') {
+            let body = '';
+            req.on('data', (chunk) => (body += chunk));
+            req.on('end', () => {
+                try {
+                    const { line } = JSON.parse(body);
+                    if (typeof line === 'string')
+                        log(line.slice(0, 2000));
+                }
+                catch {
+                    // a malformed log line from our own page; nothing to print
+                }
+                send(204, {});
+            });
+            return;
+        }
+        if (req.method !== 'GET' && req.method !== 'HEAD')
+            return send(405, { 'Content-Type': 'text/plain' }, 'Method not allowed\n');
+        if (url.pathname === '/')
+            return send(200, { 'Content-Type': 'text/html; charset=utf-8', 'Cache-Control': 'no-store' }, shell);
+        if (url.pathname === '/c/local' || url.pathname === PREFIX)
+            return send(307, { Location: `${PREFIX}${ENTRY_PATH}` });
+        if (!url.pathname.startsWith(PREFIX))
+            return send(404, contentHeaders('text/plain; charset=utf-8'), 'Not found\n');
+        const path = url.pathname.slice(PREFIX.length);
+        if (path === RUNTIME_PATH)
+            return send(200, contentHeaders('text/javascript; charset=utf-8'), runtime);
+        const file = resolvePreviewFile(dir, path);
+        const ext = file ? extensionOf(file) : null;
+        const contentType = ext ? PROOF_CONTENT_TYPES[ext] : undefined;
+        if (!file || !contentType) {
+            // Same 404 for a missing file and a type a push would refuse: either
+            // way the Client would never see it, so neither should the preview.
+            return send(404, contentHeaders('text/plain; charset=utf-8'), `Not in this Proof: ${path}\n`);
+        }
+        const bytes = readFileSync(file);
+        if (contentType.startsWith('text/html')) {
+            return send(200, contentHeaders(contentType), injectRuntime(bytes.toString('utf8'), decodeURIComponent(path)));
+        }
+        return send(200, contentHeaders(contentType), bytes);
+    });
+    await new Promise((resolveListen, reject) => {
+        server.once('error', reject);
+        // Loopback only: a preview is for the machine it runs on.
+        server.listen(args.port ?? 0, '127.0.0.1', () => resolveListen());
+    });
+    const { port } = server.address();
+    return {
+        url: `http://127.0.0.1:${port}/`,
+        close: () => new Promise((done) => server.close(() => done())),
+    };
+}
+function escapeHtml(value) {
+    return value.replace(/[&<>"']/g, (c) => ({ '&': '&amp;', '<': '&lt;', '>': '&gt;', '"': '&quot;', "'": '&#39;' })[c]);
+}
+/**
+ * The stand-in review page. Deliberately plain — the real one (plan PR 6) is
+ * branded and built from the admin's design system; this one only has to make
+ * the runtime's behaviour visible and print what a Client's feedback would be.
+ */
+function shellPage(folder) {
+    return `<!doctype html>
+<html lang="en"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width, initial-scale=1">
+<title>Preview · ${escapeHtml(folder)}</title>
+<style>
+  :root { color-scheme: light dark; --bg: #f8fafc; --panel: #fff; --text: #0f172a; --muted: #64748b; --line: #e2e8f0; --accent: #2563eb; }
+  @media (prefers-color-scheme: dark) { :root { --bg: #0b1220; --panel: #111827; --text: #e5e7eb; --muted: #94a3b8; --line: #1f2937; } }
+  * { box-sizing: border-box; }
+  body { margin: 0; height: 100vh; display: grid; grid-template-columns: 1fr 320px; background: var(--bg); color: var(--text);
+    font: 14px/1.4 -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, sans-serif; }
+  main { display: grid; place-items: start center; overflow: auto; padding: 16px; }
+  iframe { width: 100%; height: calc(100vh - 32px); border: 1px solid var(--line); border-radius: 8px; background: #fff; transition: width .2s; }
+  iframe.phone { width: 390px; }
+  aside { border-left: 1px solid var(--line); background: var(--panel); display: flex; flex-direction: column; min-height: 0; }
+  header { padding: 16px; border-bottom: 1px solid var(--line); }
+  h1 { margin: 0 0 4px; font-size: 15px; } p { margin: 0; color: var(--muted); font-size: 13px; }
+  .tools { display: flex; flex-wrap: wrap; gap: 8px; padding: 12px 16px; border-bottom: 1px solid var(--line); }
+  button { font: inherit; padding: 6px 12px; border-radius: 6px; border: 1px solid var(--line); background: var(--panel); color: var(--text); cursor: pointer; }
+  button[aria-pressed="true"] { background: var(--accent); border-color: var(--accent); color: #fff; }
+  ol { list-style: none; margin: 0; padding: 8px 16px; overflow: auto; flex: 1; }
+  li { padding: 8px 0; border-bottom: 1px solid var(--line); font-size: 13px; }
+  li.focus { background: color-mix(in srgb, var(--accent) 12%, transparent); }
+  li .when { color: var(--muted); font-size: 12px; }
+  @media (max-width: 800px) { body { grid-template-columns: 1fr; grid-template-rows: 1fr 40vh; } aside { border-left: 0; border-top: 1px solid var(--line); } }
+</style></head>
+<body>
+<main><iframe id="proof" title="The Proof" src="${PREFIX}${ENTRY_PATH}" sandbox="allow-scripts allow-forms allow-popups allow-modals"></iframe></main>
+<aside>
+  <header><h1>Preview · ${escapeHtml(folder)}</h1><p>What the Client will see: click anywhere on the work to leave a comment. This is a rehearsal — nothing is saved or sent.</p></header>
+  <div class="tools">
+    <button id="phone" type="button" aria-pressed="false">Phone width</button>
+    <button id="reset" type="button">Clear</button>
+  </div>
+  <ol id="log" aria-live="polite"></ol>
+</aside>
+<script>
+  const env = { scribe: 'proof', protocolVersion: ${PROTOCOL_VERSION} };
+  const frame = document.getElementById('proof');
+  const list = document.getElementById('log');
+  const ME = { initials: 'Y', color: '#2563eb' };
+  let state = { options: {}, pins: [] };
+  let seq = 0;
+  let labels = {};
+  let lastUnplaced = '';
+
+  function post(message) { frame.contentWindow.postMessage({ ...env, ...message }, '*'); }
+  function push() { post({ type: 'feedback', feedback: state }); }
+  function option(id) { return state.options[id] || (state.options[id] = { up: 0, down: 0, mine: null, comments: 0, reactions: [] }); }
+  function name(id) { return labels[id] ? labels[id] + ' (' + id + ')' : id; }
+
+  function log(line, id) {
+    const li = document.createElement('li');
+    if (id) li.dataset.pin = id;
+    li.innerHTML = '<div></div><div class="when"></div>';
+    li.firstChild.textContent = line;
+    li.lastChild.textContent = new Date().toLocaleTimeString();
+    list.prepend(li);
+    fetch('/__log', { method: 'POST', body: JSON.stringify({ line }) }).catch(() => {});
+  }
+
+  window.addEventListener('message', (event) => {
+    if (event.source !== frame.contentWindow) return;
+    const m = event.data;
+    if (!m || m.scribe !== 'proof' || m.protocolVersion !== ${PROTOCOL_VERSION}) return;
+    switch (m.type) {
+      case 'ready':
+        labels = Object.fromEntries((m.options || []).map((o) => [o.id, o.label]));
+        post({ type: 'init', mode: 'review', reviewer: { name: 'You (preview)' }, me: ME, canReply: true, feedback: state });
+        log('Loaded ' + m.path + ' — ' + (m.options.length ? m.options.length + ' option(s): ' + m.options.map((o) => o.id).join(', ') : 'no options marked'));
+        break;
+      case 'react': {
+        // One Reaction per person per Option, so a second one rewrites the
+        // first — the same rule the real API enforces.
+        const o = option(m.optionId);
+        const body = (m.body || '').trim();
+        let entry = o.reactions.find((r) => r.mine);
+        if (!entry) {
+          entry = { id: 'r' + (++seq), reaction: m.reaction, author: 'You', body: '', mine: true, when: 'just now', person: ME, replies: [] };
+          o.reactions.push(entry);
+        }
+        if (entry.reaction !== m.reaction) o[entry.reaction]--;
+        entry.reaction = m.reaction;
+        if (body) entry.body = body;
+        o.up = o.reactions.filter((r) => r.reaction === 'up').length;
+        o.down = o.reactions.filter((r) => r.reaction === 'down').length;
+        o.mine = m.reaction;
+        log((m.reaction === 'up' ? '👍 ' : '👎 ') + name(m.optionId) + (body ? ' — ' + body : ''));
+        // The composer in the page is waiting on this whenever words came
+        // with the thumb, exactly as it is for a comment.
+        if (m.body !== null && m.body !== undefined) post({ type: 'comment-result', ok: true, error: null });
+        push();
+        break;
+      }
+      case 'comment': {
+        // The composer lives in the page now, so this one case covers what the
+        // reviewer typed and what the Proof's own script said.
+        const body = (m.body || '').trim();
+        if (m.parentId) {
+          // A reply, so it belongs under the pin it answers rather than on the
+          // page — the same filing the real shell does.
+          // Under a pin, or under one of an Option's Reactions — the real
+          // shell files a reply by its parent, wherever that parent lives.
+          const parent = state.pins.find((p) => p.id === m.parentId) ||
+            Object.values(state.options).flatMap((o) => o.reactions).find((r) => r.id === m.parentId);
+          if (parent) parent.replies.push({ id: m.parentId + '-r' + (parent.replies.length + 1), author: 'You (preview)', body, mine: true, when: 'just now', person: ME });
+          log('↩ Replied: "' + body + '"', m.parentId);
+        } else if (m.pin) {
+          const n = state.pins.length + 1, id = 'pin-' + n;
+          state.pins.push({ id, number: n, anchor: m.pin, mine: true, author: 'You (preview)', body, when: 'just now', person: ME, replies: [] });
+          if (m.optionId) option(m.optionId).comments++;
+          log('📍 Pin ' + n + ' on ' + m.pin.selector + ' (' + Math.round(m.pin.x * 100) + '%, ' + Math.round(m.pin.y * 100) + '%) at ' + m.pin.viewportWidth + 'px: "' + body + '"', id);
+        } else if (m.optionId) {
+          option(m.optionId).comments++;
+          log('💬 On ' + name(m.optionId) + ': "' + body + '"');
+        } else {
+          log('💬 "' + body + '"');
+        }
+        // Nothing is saved in a preview, so it always "saved" — the composer
+        // needs an answer either way or it sits there saying Saving….
+        post({ type: 'comment-result', ok: true, error: null });
+        push();
+        break;
+      }
+      case 'focus-pin':
+        for (const li of list.querySelectorAll('li.focus')) li.classList.remove('focus');
+        list.querySelector('[data-pin="' + CSS.escape(m.pinId) + '"]')?.classList.add('focus');
+        break;
+      case 'unplaced-pins': { const key = m.pinIds.join(','); if (key && key !== lastUnplaced) log('⚠ Can’t place ' + m.pinIds.join(', ') + ' on this page — the element moved'); lastUnplaced = key; break; }
+      case 'delete-comment': {
+        // The whole thread goes, the way it does for real.
+        const before = state.pins.length;
+        state.pins = state.pins.filter((p) => p.id !== m.commentId);
+        for (const p of state.pins) p.replies = p.replies.filter((r) => r.id !== m.commentId);
+        let cleared = false;
+        for (const o of Object.values(state.options)) {
+          const kept = o.reactions.filter((r) => r.id !== m.commentId);
+          cleared = cleared || kept.length !== o.reactions.length;
+          o.reactions = kept;
+          for (const r of o.reactions) r.replies = r.replies.filter((x) => x.id !== m.commentId);
+          o.up = o.reactions.filter((r) => r.reaction === 'up').length;
+          o.down = o.reactions.filter((r) => r.reaction === 'down').length;
+          o.mine = (o.reactions.find((r) => r.mine) || {}).reaction || null;
+        }
+        log(cleared ? '🗑 Cleared a reaction' : before === state.pins.length ? '🗑 Deleted a reply' : '🗑 Deleted a comment and everything under it');
+        push();
+        break;
+      }
+    }
+  });
+
+  document.getElementById('phone').addEventListener('click', (e) => {
+    const on = frame.classList.toggle('phone');
+    e.currentTarget.setAttribute('aria-pressed', String(on));
+  });
+  document.getElementById('reset').addEventListener('click', () => { state = { options: {}, pins: [] }; list.innerHTML = ''; push(); });
+</script>
+</body></html>`;
+}
+//# sourceMappingURL=proof-preview.js.map

package/dist/lib/proof-preview.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"proof-preview.js","sourceRoot":"","sources":["../../src/lib/proof-preview.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC7D,OAAO,EAAE,YAAY,EAA6C,MAAM,WAAW,CAAC;AAEpF,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AACnD,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAEjF;;;;;;;;;;GAUG;AAEH,6EAA6E;AAC7E,MAAM,CAAC,MAAM,WAAW,GAAG,6DAA6D,CAAC;AACzF,MAAM,MAAM,GAAG,WAAW,CAAC;AAC3B,MAAM,YAAY,GAAG,kBAAkB,CAAC;AACxC;;;;;GAKG;AACH,MAAM,gBAAgB,GAAG,CAAC,CAAC;AAE3B;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB;IAC/B,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,wBAAwB,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAChE,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACtB,MAAM,IAAI,KAAK,CAAC,4IAA4I,CAAC,CAAC;IAChK,CAAC;IACD,OAAO,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;AACpC,CAAC;AAED,qHAAqH;AACrH,MAAM,UAAU,aAAa,CAAC,IAAY,EAAE,IAAY;IACtD,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;IACzC,MAAM,GAAG,GAAG,gBAAgB,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,YAAY,aAAa,CAAC;IAC5E,MAAM,EAAE,GAAG,CAAC,KAAa,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,GAAG,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC7E,MAAM,IAAI,GAAG,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC5C,IAAI,IAAI;QAAE,OAAO,EAAE,CAAC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IACjD,MAAM,IAAI,GAAG,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC5C,IAAI,IAAI;QAAE,OAAO,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAChC,MAAM,OAAO,GAAG,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAClD,IAAI,OAAO;QAAE,OAAO,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IAC1C,OAAO,GAAG,GAAG,IAAI,CAAC;AACpB,CAAC;AAED,SAAS,cAAc,CAAC,WAAmB;IACzC,OAAO;QACL,cAAc,EAAE,WAAW;QAC3B,yBAAyB,EAAE,WAAW;QACtC,iBAAiB,EAAE,aAAa;QAChC,wBAAwB,EAAE,SAAS;QACnC,0DAA0D;QAC1D,eAAe,EAAE,UAAU;KAC5B,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAAC,GAAW,EAAE,WAAmB;IACjE,IAAI,QAAkB,CAAC;IACvB,IAAI,CAAC;QACH,QAAQ,GAAG,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,kBAAkB,CAAC,CAAC;IAC5D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACvI,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC;IAC1B,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,EAAE,GAAG,QAAQ,CAAC,CAAC;IAC1C,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,GAAG,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAChD,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE;QAAE,OAAO,IAAI,CAAC;IACnE,OAAO,MAAM,CAAC;AAChB,CAAC;AAOD,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,IAKlC;IACC,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC9B,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,IAAY,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;IAC9D,MAAM,OAAO,GAAG,IAAI,CAAC,aAAa,IAAI,iBAAiB,EAAE,CAAC;IAC1D,MAAM,KAAK,GAAG,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;IAEvC,MAAM,MAAM,GAAG,YAAY,CAAC,CAAC,GAAoB,EAAE,GAAmB,EAAE,EAAE;QACxE,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,kBAAkB,CAAC,CAAC;QACxD,MAAM,IAAI,GAAG,CAAC,MAAc,EAAE,OAA+B,EAAE,IAAsB,EAAE,EAAE;YACvF,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;YAC/B,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAChB,CAAC,CAAC;QAEF,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;YACvD,IAAI,IAAI,GAAG,EAAE,CAAC;YACd,GAAG,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,IAAI,IAAI,KAAK,CAAC,CAAC,CAAC;YAC3C,GAAG,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;gBACjB,IAAI,CAAC;oBACH,MAAM,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAuB,CAAC;oBACxD,IAAI,OAAO,IAAI,KAAK,QAAQ;wBAAE,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;gBACzD,CAAC;gBAAC,MAAM,CAAC;oBACP,2DAA2D;gBAC7D,CAAC;gBACD,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YAChB,CAAC,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QACD,IAAI,GAAG,CAAC,MAAM,KAAK,KAAK,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM;YAAE,OAAO,IAAI,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,YAAY,EAAE,EAAE,sBAAsB,CAAC,CAAC;QAE9H,IAAI,GAAG,CAAC,QAAQ,KAAK,GAAG;YAAE,OAAO,IAAI,CAAC,GAAG,EAAE,EAAE,cAAc,EAAE,0BAA0B,EAAE,eAAe,EAAE,UAAU,EAAE,EAAE,KAAK,CAAC,CAAC;QAC/H,IAAI,GAAG,CAAC,QAAQ,KAAK,UAAU,IAAI,GAAG,CAAC,QAAQ,KAAK,MAAM;YAAE,OAAO,IAAI,CAAC,GAAG,EAAE,EAAE,QAAQ,EAAE,GAAG,MAAM,GAAG,UAAU,EAAE,EAAE,CAAC,CAAC;QACrH,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC;YAAE,OAAO,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,2BAA2B,CAAC,EAAE,aAAa,CAAC,CAAC;QAEnH,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC/C,IAAI,IAAI,KAAK,YAAY;YAAE,OAAO,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,gCAAgC,CAAC,EAAE,OAAO,CAAC,CAAC;QAEvG,MAAM,IAAI,GAAG,kBAAkB,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QAC3C,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAC5C,MAAM,WAAW,GAAG,GAAG,CAAC,CAAC,CAAC,mBAAmB,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAC/D,IAAI,CAAC,IAAI,IAAI,CAAC,WAAW,EAAE,CAAC;YAC1B,qEAAqE;YACrE,oEAAoE;YACpE,OAAO,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,2BAA2B,CAAC,EAAE,sBAAsB,IAAI,IAAI,CAAC,CAAC;QAChG,CAAC;QACD,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;QACjC,IAAI,WAAW,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;YACxC,OAAO,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,WAAW,CAAC,EAAE,aAAa,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACjH,CAAC;QACD,OAAO,IAAI,CAAC,GAAG,EAAE,cAAc,CAAC,WAAW,CAAC,EAAE,KAAK,CAAC,CAAC;IACvD,CAAC,CAAC,CAAC;IAEH,MAAM,IAAI,OAAO,CAAO,CAAC,aAAa,EAAE,MAAM,EAAE,EAAE;QAChD,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC7B,0DAA0D;QAC1D,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,EAAE,WAAW,EAAE,GAAG,EAAE,CAAC,aAAa,EAAE,CAAC,CAAC;IACpE,CAAC,CAAC,CAAC;IACH,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,CAAC,OAAO,EAAiB,CAAC;IACjD,OAAO;QACL,GAAG,EAAE,oBAAoB,IAAI,GAAG;QAChC,KAAK,EAAE,GAAG,EAAE,CAAC,IAAI,OAAO,CAAO,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;KACrE,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CAAC,KAAa;IAC/B,OAAO,KAAK,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,CAAE,CAAC,CAAC;AACzH,CAAC;AAED;;;;GAIG;AACH,SAAS,SAAS,CAAC,MAAc;IAC/B,OAAO;;mBAEU,UAAU,CAAC,MAAM,CAAC;;;;;;;;;;;;;;;;;;;;;;;kDAuBa,MAAM,GAAG,UAAU;;0BAE3C,UAAU,CAAC,MAAM,CAAC;;;;;;;;oDAQQ,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;;8DA2BN,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;eA6F/D,CAAC;AAChB,CAAC"}