@vmz/vmz 0.1.12 → 0.1.14

package/dist/build-assemble.js

@@ -8,6 +8,8 @@ import { semanticIdsForAssembly, sha256Hex, canonicalJson } from './delivery-pro
 import { emitServerArtifact } from './server-artifact.js';
 import { emitEmbeddedPackaging } from './embedded-packaging.js';
 import { emitSiteDelivery } from './site-delivery.js';
+import { emitSiteFavicon } from './site-favicon.js';
+import { emitPublicStaticAssets } from './public-static-assets.js';
 import { emitWebStatic } from './static-emit.js';
 import { writePrettyJsonFile } from './pretty-json.js';
 export const BUILD_PROOF_SCHEMA = 'vmz.build.proof.v0';
@@ -26,10 +28,13 @@ export async function assembleDelivery(outDir, ctx) {
         serverRuntime: selection.serverRuntime || null,
         steps: [],
     };
-    if (assembly === 'static-cdn' || assembly === 'cdn+server') {
-        const staticResult = await emitWebStatic(outDir, { origin: ctx.origin });
+    if (assembly === 'web-static' || assembly === 'cdn+server') {
+        const staticResult = await emitWebStatic(outDir, {
+            origin: ctx.origin,
+            projectRoot: ctx.projectRoot,
+        });
         result.steps.push({
-            kind: 'static-cdn',
+            kind: 'web-static',
             digest: staticResult.digest,
             htmlFiles: staticResult.htmlFiles?.length ?? 0,
             skipped: staticResult.skipped?.length ?? 0,
@@ -40,6 +45,11 @@ export async function assembleDelivery(outDir, ctx) {
             skipped: staticResult.skipped,
         };
     }
+    else if (assembly === 'server-host' || assembly === 'local-static') {
+        // SSR / local packs: favicon + opaque public/ for serve-host.
+        emitSiteFavicon(outDir, { projectRoot: ctx.projectRoot });
+        emitPublicStaticAssets(outDir, { projectRoot: ctx.projectRoot });
+    }
     if (assembly === 'local-static') {
         result.steps.push({
             kind: 'local-static',
@@ -124,7 +134,7 @@ export function emitBuildProof(outDir, ctx) {
     };
     for (const id of semanticIds) {
         if (id === 'static-delivery') {
-            const step = (ctx.assemble?.steps || []).find((s) => s.kind === 'static-cdn');
+            const step = (ctx.assemble?.steps || []).find((s) => s.kind === 'web-static');
             slots[id] = step
                 ? { status: 'emitted', detail: `digest=${String(step.digest).slice(0, 12)}` }
                 : { status: 'pending', detail: 'assembly requires static emit' };

package/dist/cli.js

@@ -23,7 +23,7 @@ import { cmdRefactor } from './refactor-cmd.js';
 import { cmdExplain } from './explain-cmd.js';
 import { resolveNativeVmzCli } from './resolve-native-cli.js';
 import { loadVmzConfig } from './plugin-host.js';
-import { normalizeDeliveryAuthoring, selectBuildProfile } from './delivery-profile.js';
+import { normalizeDeliveryAuthoring, resolveProfileArtifactDir, selectBuildProfile } from './delivery-profile.js';
 import { packFromDeploymentIr } from './pack.js';
 import { assembleDelivery, emitBuildProof } from './build-assemble.js';
 /**
@@ -121,11 +121,11 @@ Usage:
   vmz help                      Show this help
 
 Options:
-  --out-dir, -o <dir>   Output directory (default: dist)
+  --out-dir, -o <dir>   Workspace output root (default: dist). Profile artifacts land in <out-dir>/<name> (name defaults to profile id; CDN: name:'cdn' → dist/cdn)
   --release             Release build (omit serve-host; pack minify slot; proof)
   --profile <name>      Delivery profile (default from config; builtins: web-ssr|static|web-client|web-hybrid)
   --target <id>         browser (default) | mini-program-wechat (pack dist/wechat for WeChat DevTools; build+dev)
-  --origin <url>        Site origin for static-cdn canonical/sitemap
+  --origin <url>        Site origin for web-static canonical/sitemap
   --host <host>         Listen host (default: 127.0.0.1)
   --port <port>         Listen port (dev: omit = auto from 5173; set = lock)
   --poll-ms <ms>        Dev watch poll interval (default: 300)
@@ -339,28 +339,29 @@ async function cmdBuild(args) {
         return 1;
     }
     const wechatPack = targetRaw === 'mini-program-wechat';
-    const { project, outDir } = resolveWorkspaceDirs({
+    const { project, outDir: outDirRoot } = resolveWorkspaceDirs({
         path: pathArg,
         outDir: typeof args['out-dir'] === 'string' ? args['out-dir'] : undefined,
     });
-    log.info(`build ${project} → ${outDir}${wechatPack ? ' (target=mini-program-wechat)' : ''}`);
+    const cfg = await loadVmzConfig(project);
+    const cliProfile = typeof args.profile === 'string' ? args.profile : '';
+    const norm = normalizeDeliveryAuthoring(cfg.delivery ?? null);
+    if (!norm.ok) {
+        log.diagnostics(norm.diagnostics ?? []);
+        log.error('delivery authoring invalid');
+        return 1;
+    }
+    const selected = selectBuildProfile(norm.table, cliProfile);
+    if (!selected.ok) {
+        log.diagnostics(selected.diagnostics ?? []);
+        log.error(`unknown build --profile ${cliProfile || norm.table.default}`);
+        return 1;
+    }
+    const outDir = resolveProfileArtifactDir(outDirRoot, selected.profile);
+    log.info(`build ${project} → ${outDir}${wechatPack ? ' (target=mini-program-wechat)' : ''} (out-dir=${outDirRoot}, name=${selected.profile.name})`);
     const ws = createWorkspace({ root: project, outDir });
     try {
-        const cfg = await loadVmzConfig(project);
-        const cliProfile = typeof args.profile === 'string' ? args.profile : '';
-        const norm = normalizeDeliveryAuthoring(cfg.delivery ?? null);
-        if (!norm.ok) {
-            log.diagnostics(norm.diagnostics ?? []);
-            log.error('delivery authoring invalid');
-            return 1;
-        }
-        const selected = selectBuildProfile(norm.table, cliProfile);
-        if (!selected.ok) {
-            log.diagnostics(selected.diagnostics ?? []);
-            log.error(`unknown build --profile ${cliProfile || norm.table.default}`);
-            return 1;
-        }
-        log.info(`delivery profile ${selected.selection.profileId} (assembly=${selected.selection.assembly})`);
+        log.info(`delivery profile ${selected.selection.profileId} (assembly=${selected.selection.assembly}, name=${selected.profile.name})`);
         const code = await runWithPlugins(ws, project, outDir, () => {
             const report = ws.build(Boolean(args.release));
             const errors = log.diagnostics(report.diagnostics ?? []);
@@ -449,7 +450,7 @@ async function cmdBuild(args) {
         const origin = typeof args.origin === 'string' ? args.origin : undefined;
         let assemble = null;
         try {
-            if (selected.selection.assembly === 'static-cdn') {
+            if (selected.selection.assembly === 'web-static') {
                 log.info(`static emit ${outDir}`);
             }
             assemble = await assembleDelivery(outDir, {
@@ -461,9 +462,10 @@ async function cmdBuild(args) {
                 siteId: cfg.application?.id || undefined,
                 origin,
                 pack: pack.manifest,
+                projectRoot: project,
             });
             for (const step of assemble.manifest.steps || []) {
-                if (step.kind === 'static-cdn') {
+                if (step.kind === 'web-static') {
                     log.info(`static ok (${step.htmlFiles} html, ${step.skipped} skipped, digest=${String(step.digest).slice(0, 12)}…)`);
                 }
                 else if (step.kind === 'site-delivery' && step.digest) {
@@ -495,10 +497,25 @@ async function cmdServe(args) {
         if (code !== 0)
             return code;
     }
-    const { project, outDir } = resolveWorkspaceDirs({
+    const { project, outDir: outDirRoot } = resolveWorkspaceDirs({
         path: pathArg,
         outDir: typeof args['out-dir'] === 'string' ? args['out-dir'] : undefined,
     });
+    const cfg = await loadVmzConfig(project);
+    const cliProfile = typeof args.profile === 'string' ? args.profile : '';
+    const norm = normalizeDeliveryAuthoring(cfg.delivery ?? null);
+    if (!norm.ok) {
+        log.diagnostics(norm.diagnostics ?? []);
+        log.error('delivery authoring invalid');
+        return 1;
+    }
+    const selected = selectBuildProfile(norm.table, cliProfile);
+    if (!selected.ok) {
+        log.diagnostics(selected.diagnostics ?? []);
+        log.error(`unknown build --profile ${cliProfile || norm.table.default}`);
+        return 1;
+    }
+    const outDir = resolveProfileArtifactDir(outDirRoot, selected.profile);
     const hostJs = path.join(outDir, 'vmz-serve-host.mjs');
     if (!existsSync(hostJs)) {
         try {
@@ -521,6 +538,7 @@ async function cmdServe(args) {
             VMZ_DIST: outDir,
             VMZ_PORT: String(port),
             VMZ_HOST: host,
+            VMZ_PROJECT_ROOT: project,
             VMZ_NATIVE_NODE: resolveNativePath(),
         },
         stdio: 'inherit',
@@ -546,10 +564,25 @@ async function cmdServe(args) {
  */
 async function cmdDev(args) {
     const pathArg = args._[0] ?? '.';
-    const { project, outDir } = resolveWorkspaceDirs({
+    const { project, outDir: outDirRoot } = resolveWorkspaceDirs({
         path: pathArg,
         outDir: typeof args['out-dir'] === 'string' ? args['out-dir'] : undefined,
     });
+    const cfg = await loadVmzConfig(project);
+    const cliProfile = typeof args.profile === 'string' ? args.profile : '';
+    const norm = normalizeDeliveryAuthoring(cfg.delivery ?? null);
+    if (!norm.ok) {
+        log.diagnostics(norm.diagnostics ?? []);
+        log.error('delivery authoring invalid');
+        return 1;
+    }
+    const selected = selectBuildProfile(norm.table, cliProfile);
+    if (!selected.ok) {
+        log.diagnostics(selected.diagnostics ?? []);
+        log.error(`unknown build --profile ${cliProfile || norm.table.default}`);
+        return 1;
+    }
+    const outDir = resolveProfileArtifactDir(outDirRoot, selected.profile);
     const host = typeof args.host === 'string' ? args.host : '127.0.0.1';
     const portLocked = Object.prototype.hasOwnProperty.call(args, 'port');
     let port;

package/dist/content-addressed-assets.d.ts

@@ -2,6 +2,8 @@
  * A3: content-addressed assets/<hash> layout for immutable CDN objects.
  * Logical paths stay available for serve/dev; static HTML rewrites to hashed URLs.
  * CSS aggregators (vmz.css) rewrite `@import` to hashed sibling paths under assets/.
+ * JS under assets/ always rewrites ESM `./` → `../` so barrels (vmz-dom → dom-core)
+ * resolve at dist root — never prefer hashed siblings for JS (second-hop 404).
  */
 export declare const CONTENT_ADDRESSED_ASSETS_SCHEMA = "vmz.content_addressed_assets.v0";
 /**
@@ -10,6 +12,19 @@ export declare const CONTENT_ADDRESSED_ASSETS_SCHEMA = "vmz.content_addressed_as
  * @param {Record<string, string>} rewrites logical (no leading slash) or `/logical` → `assets/hash.ext`
  */
 export declare function rewriteCssImports(cssText: any, rewrites: any): any;
+/**
+ * Rewrite relative ESM so a file served from `/assets/<hash>.js` resolves against
+ * dist root (static `from "./x"` / `export * from "./x"` + dynamic `import("./"+…)`).
+ *
+ * Always use `../…` (Fix A). Do **not** prefer hashed siblings under `assets/`:
+ * barrels like `vmz-dom.js` (`export * from './dom-core.js'`) would then resolve
+ * as `/assets/dom-core.js` and 404. `rewrites` is accepted for API parity with CSS
+ * but intentionally ignored for JS path choice.
+ *
+ * @param {string} jsText
+ * @param {Record<string, string>} [_rewrites]
+ */
+export declare function rewriteJsEntryRelativeImports(jsText: any, _rewrites?: {}): string;
 /**
  * Emit `assets/<sha256>.<ext>` copies and rewrite HTML href/src to hashed URLs.
  * @param {string} distDir

package/dist/content-addressed-assets.js

@@ -2,6 +2,8 @@
  * A3: content-addressed assets/<hash> layout for immutable CDN objects.
  * Logical paths stay available for serve/dev; static HTML rewrites to hashed URLs.
  * CSS aggregators (vmz.css) rewrite `@import` to hashed sibling paths under assets/.
+ * JS under assets/ always rewrites ESM `./` → `../` so barrels (vmz-dom → dom-core)
+ * resolve at dist root — never prefer hashed siblings for JS (second-hop 404).
  */
 // @ts-nocheck
 import crypto from 'node:crypto';
@@ -24,6 +26,8 @@ const DEFAULT_CANDIDATES = [
 ];
 /** CSS files that may @import other logical CSS; processed after leaf CSS is hashed. */
 const CSS_AGGREGATORS = new Set(['vmz.css']);
+/** JS entry shells hashed under assets/; relative ESM must be rewritten first. */
+const JS_ENTRY_AGGREGATORS = new Set(['entry-client.js', 'entry-event.js']);
 const CSS_IMPORT_RE = /@import\s*(?:url\()?['"]?(\.\/)?([^'")\s;]+)['"]?\)?/gi;
 /**
  * Rewrite relative `@import "./foo.css"` to hashed paths under assets/.
@@ -43,6 +47,35 @@ export function rewriteCssImports(cssText, rewrites) {
         return `@import"${sibling}"`;
     });
 }
+/**
+ * Rewrite relative ESM so a file served from `/assets/<hash>.js` resolves against
+ * dist root (static `from "./x"` / `export * from "./x"` + dynamic `import("./"+…)`).
+ *
+ * Always use `../…` (Fix A). Do **not** prefer hashed siblings under `assets/`:
+ * barrels like `vmz-dom.js` (`export * from './dom-core.js'`) would then resolve
+ * as `/assets/dom-core.js` and 404. `rewrites` is accepted for API parity with CSS
+ * but intentionally ignored for JS path choice.
+ *
+ * @param {string} jsText
+ * @param {Record<string, string>} [_rewrites]
+ */
+export function rewriteJsEntryRelativeImports(jsText, _rewrites = {}) {
+    let out = String(jsText || '');
+    // Dynamic: import("./" + id) → import("../" + id)
+    out = out.replace(/import\(\s*"\.\/"\s*\+/g, 'import("../"+');
+    out = out.replace(/import\(\s*'\.\/'\s*\+/g, "import('../'+");
+    const rewriteSpec = (spec) => {
+        const logical = String(spec || '').replace(/^\.\//, '');
+        if (!logical || logical.startsWith('../') || logical.startsWith('/'))
+            return spec;
+        return `../${logical}`;
+    };
+    // import/export … from "./x"  |  import("./x")
+    out = out.replace(/\b((?:import|export)\s+[^'"\n]*?\s+from\s+|import\s*\(\s*)(['"])(\.\/[^'"]+)\2/g, (match, prefix, quote, spec) => `${prefix}${quote}${rewriteSpec(spec)}${quote}`);
+    // side-effect: import "./x.js"
+    out = out.replace(/(^|[;\s])(import\s*)(['"])(\.\/[^'"]+)\3/gm, (match, lead, kw, quote, spec) => `${lead}${kw}${quote}${rewriteSpec(spec)}${quote}`);
+    return out;
+}
 /**
  * Emit `assets/<sha256>.<ext>` copies and rewrite HTML href/src to hashed URLs.
  * @param {string} distDir
@@ -62,6 +95,22 @@ export function emitContentAddressedAssets(distDir, opts = {}) {
     const rewrites = {};
     const ordered = orderCandidates(candidates);
     for (const rel of ordered) {
+        // Aggregators are replaced in later passes; leaf JS must rewrite ./ → ../ so a
+        // hashed barrel under assets/ never 404s on second-hop relative re-exports.
+        if (CSS_AGGREGATORS.has(rel) || JS_ENTRY_AGGREGATORS.has(rel)) {
+            ingestCandidate(abs, rel, rewrites, objects, { transform: null });
+            continue;
+        }
+        if (/\.m?js$/i.test(rel)) {
+            const src = path.join(abs, rel);
+            if (!fs.existsSync(src))
+                continue;
+            const rewritten = rewriteJsEntryRelativeImports(fs.readFileSync(src, 'utf8'), {});
+            ingestCandidate(abs, rel, rewrites, objects, {
+                transform: () => Buffer.from(rewritten, 'utf8'),
+            });
+            continue;
+        }
         ingestCandidate(abs, rel, rewrites, objects, { transform: null });
     }
     // Aggregator CSS (vmz.css) must import hashed leaf files — rewrite then hash.
@@ -79,6 +128,21 @@ export function emitContentAddressedAssets(distDir, opts = {}) {
             transform: () => Buffer.from(rewritten, 'utf8'),
         });
     }
+    // JS entry shells: rewrite relative ESM (static + dynamic) then re-hash.
+    for (const rel of ordered) {
+        if (!JS_ENTRY_AGGREGATORS.has(rel))
+            continue;
+        const src = path.join(abs, rel);
+        if (!fs.existsSync(src))
+            continue;
+        const rewritten = rewriteJsEntryRelativeImports(fs.readFileSync(src, 'utf8'), rewrites);
+        removeLogicalObject(objects, rel);
+        delete rewrites[`/${rel}`];
+        delete rewrites[rel];
+        ingestCandidate(abs, rel, rewrites, objects, {
+            transform: () => Buffer.from(rewritten, 'utf8'),
+        });
+    }
     objects.sort((a, b) => (a.logicalPath < b.logicalPath ? -1 : a.logicalPath > b.logicalPath ? 1 : 0));
     let rewrittenHtml = 0;
     if (opts.rewriteHtml !== false) {
@@ -107,15 +171,20 @@ function orderCandidates(candidates) {
     /** @type {string[]} */
     const out = [];
     for (const name of DEFAULT_CANDIDATES) {
-        if (set.has(name) && !CSS_AGGREGATORS.has(name))
+        if (set.has(name) && !CSS_AGGREGATORS.has(name) && !JS_ENTRY_AGGREGATORS.has(name))
             out.push(name);
     }
     for (const name of [...set].sort()) {
-        if (!CSS_AGGREGATORS.has(name) && !out.includes(name))
+        if (!CSS_AGGREGATORS.has(name) && !JS_ENTRY_AGGREGATORS.has(name) && !out.includes(name)) {
             out.push(name);
+        }
     }
     if (set.has('vmz.css'))
         out.push('vmz.css');
+    for (const name of ['entry-client.js', 'entry-event.js']) {
+        if (set.has(name))
+            out.push(name);
+    }
     return out;
 }
 /**

package/dist/delivery-profile.d.ts

@@ -4,7 +4,7 @@
  */
 export declare const DELIVERY_PROFILE_AUTHORING_SCHEMA = "vmz.delivery.authoring.v0";
 export declare const BUILD_PROFILE_SELECTION_SCHEMA = "vmz.build.profile_selection.v0";
-/** Browser-era assembly kinds (04 B5). */
+/** Browser-era assembly kinds (04 B5). `static-cdn` was renamed to `web-static`. */
 export declare const ASSEMBLIES: readonly string[];
 export declare const SERVER_RUNTIMES: readonly string[];
 /** Official built-in aliases when not overridden in config. */
@@ -28,6 +28,22 @@ export declare const BUILTIN_PROFILES: Readonly<{
         serverRuntime: string;
     };
 }>;
+/**
+ * Profile artifact directory name under CLI `--out-dir` (default = profile id).
+ * @param {string} id
+ * @param {unknown} rawName
+ * @param {Array<{ code: string, message: string }>} diagnostics
+ * @returns {string | null}
+ */
+export declare function normalizeProfileArtifactName(id: any, rawName: any, diagnostics: any): string;
+/**
+ * Workspace `--out-dir` + profile `name` → artifact root.
+ * Always nests: `path.join(outDir, name)` where `name` defaults to profile id
+ * (`name: 'cdn'` → `dist/cdn`; omit → `dist/static` for profile `static`).
+ * @param {string} outDir
+ * @param {{ name?: string, id?: string } | null | undefined} profile
+ */
+export declare function resolveProfileArtifactDir(outDir: any, profile: any): any;
 export declare function pickSiteAuthoring(raw: any): {
     artifact: string;
     sources: any;
@@ -69,6 +85,8 @@ export declare function selectBuildProfile(table: any, cliProfile?: string): {
     selection: {
         schema: string;
         profileId: any;
+        name: any;
+        nameExplicit: boolean;
         host: any;
         assembly: any;
         serverRuntime: any;

package/dist/delivery-profile.js

@@ -4,18 +4,67 @@
  */
 // @ts-nocheck
 import crypto from 'node:crypto';
+import path from 'node:path';
 export const DELIVERY_PROFILE_AUTHORING_SCHEMA = 'vmz.delivery.authoring.v0';
 export const BUILD_PROFILE_SELECTION_SCHEMA = 'vmz.build.profile_selection.v0';
-/** Browser-era assembly kinds (04 B5). */
-export const ASSEMBLIES = Object.freeze(['local-static', 'static-cdn', 'server-host', 'cdn+server', 'rust-embedded']);
+/** Browser-era assembly kinds (04 B5). `static-cdn` was renamed to `web-static`. */
+export const ASSEMBLIES = Object.freeze(['local-static', 'web-static', 'server-host', 'cdn+server', 'rust-embedded']);
 export const SERVER_RUNTIMES = Object.freeze(['node', 'worker', 'deno', 'bun', 'rust-host']);
 /** Official built-in aliases when not overridden in config. */
 export const BUILTIN_PROFILES = Object.freeze({
     'web-client': { host: 'browser', assembly: 'local-static' },
-    static: { host: 'browser', assembly: 'static-cdn' },
+    static: { host: 'browser', assembly: 'web-static' },
     'web-ssr': { host: 'browser', assembly: 'server-host', serverRuntime: 'node' },
     'web-hybrid': { host: 'browser', assembly: 'cdn+server', serverRuntime: 'node' },
 });
+/**
+ * Profile artifact directory name under CLI `--out-dir` (default = profile id).
+ * @param {string} id
+ * @param {unknown} rawName
+ * @param {Array<{ code: string, message: string }>} diagnostics
+ * @returns {string | null}
+ */
+export function normalizeProfileArtifactName(id, rawName, diagnostics) {
+    const fallback = String(id || '').trim();
+    if (rawName == null || rawName === '')
+        return fallback || null;
+    if (typeof rawName !== 'string') {
+        diagnostics.push({
+            code: 'delivery.profile.name',
+            message: `profiles.${id}.name must be a string (got ${typeof rawName})`,
+        });
+        return null;
+    }
+    const name = rawName.trim();
+    if (!name) {
+        diagnostics.push({
+            code: 'delivery.profile.name',
+            message: `profiles.${id}.name must be a non-empty string`,
+        });
+        return null;
+    }
+    if (name === '.' || name === '..' || name.includes('/') || name.includes('\\') || name.includes('\0')) {
+        diagnostics.push({
+            code: 'delivery.profile.name',
+            message: `profiles.${id}.name must be a single path segment under --out-dir (got '${name}')`,
+        });
+        return null;
+    }
+    return name;
+}
+/**
+ * Workspace `--out-dir` + profile `name` → artifact root.
+ * Always nests: `path.join(outDir, name)` where `name` defaults to profile id
+ * (`name: 'cdn'` → `dist/cdn`; omit → `dist/static` for profile `static`).
+ * @param {string} outDir
+ * @param {{ name?: string, id?: string } | null | undefined} profile
+ */
+export function resolveProfileArtifactDir(outDir, profile) {
+    const name = String(profile?.name || profile?.id || '').trim();
+    if (!name)
+        return outDir;
+    return path.join(outDir, name);
+}
 function isPlainObject(v) {
     return v != null && typeof v === 'object' && !Array.isArray(v);
 }
@@ -122,7 +171,14 @@ function normalizeProfileEntry(entry, id, diagnostics) {
             message: `profiles.${id}.host: only 'browser' is supported before Browser Production (got ${host})`,
         });
     }
-    const assembly = String(entry.assembly || '').trim();
+    let assembly = String(entry.assembly || '').trim();
+    if (assembly === 'static-cdn') {
+        diagnostics.push({
+            code: 'delivery.profile.assembly.renamed',
+            message: `profiles.${id}.assembly 'static-cdn' was renamed to 'web-static'`,
+        });
+        return null;
+    }
     if (!ASSEMBLIES.includes(assembly)) {
         diagnostics.push({
             code: 'delivery.profile.assembly',
@@ -130,6 +186,10 @@ function normalizeProfileEntry(entry, id, diagnostics) {
         });
         return null;
     }
+    const nameExplicit = entry.name != null && String(entry.name).trim() !== '';
+    const name = normalizeProfileArtifactName(id, nameExplicit ? entry.name : id, diagnostics);
+    if (!name)
+        return null;
     let serverRuntime = null;
     if (assembly === 'server-host' || assembly === 'cdn+server') {
         serverRuntime = String(entry.serverRuntime || 'node');
@@ -171,6 +231,9 @@ function normalizeProfileEntry(entry, id, diagnostics) {
     }
     return {
         id,
+        name,
+        /** True when author set `profiles.<id>.name`; false → `name` defaulted to profile id. */
+        nameExplicit,
         host: 'browser',
         assembly,
         serverRuntime,
@@ -303,6 +366,8 @@ export function selectBuildProfile(table, cliProfile = '') {
     const selection = {
         schema: BUILD_PROFILE_SELECTION_SCHEMA,
         profileId: id,
+        name: profile.name,
+        nameExplicit: Boolean(profile.nameExplicit),
         host: profile.host,
         assembly: profile.assembly,
         serverRuntime: profile.serverRuntime,
@@ -315,7 +380,7 @@ export function selectBuildProfile(table, cliProfile = '') {
 }
 export function semanticIdsForAssembly(assembly) {
     switch (assembly) {
-        case 'static-cdn':
+        case 'web-static':
             return ['static-delivery', 'asset-graph'];
         case 'server-host':
             return ['server-host', 'asset-graph'];

package/dist/dev-session.js

@@ -552,6 +552,7 @@ function defaultSpawnHost(opts) {
             VMZ_PORT: String(opts.port),
             VMZ_HOST: opts.host,
             VMZ_DEV: '1',
+            VMZ_PROJECT_ROOT: opts.project,
             VMZ_NATIVE_NODE: resolveNativePath(),
         },
         stdio: ['ignore', 'inherit', 'inherit'],

package/dist/index.d.ts

@@ -166,13 +166,15 @@ export { cmdApplication, runCheck as runApplicationCheck } from './application-c
 export { cmdArtifact } from './release-cmd.js';
 export { ARTIFACT_DIFF_SCHEMA, DELIVERY_ARTIFACT_MANIFEST_SCHEMA, RELEASE_ENVELOPE_SCHEMA, ROUTE_REALIZATION_TABLE_SCHEMA, atomicWritePointer, canonicalJson, diffArtifacts, loadReleaseEnvelope, packRelease, publishRelease, readPointer, rollbackRelease, sha256File, sha256Hex, } from './release-pack.js';
 export { STATIC_DELIVERY_MANIFEST_SCHEMA, emitWebStatic, } from './static-emit.js';
-export { CONTENT_ADDRESSED_ASSETS_SCHEMA, emitContentAddressedAssets, resolveAssetByDigest, assertSharedAssetPath, contentAddressedAssetsDigest, } from './content-addressed-assets.js';
+export { CONTENT_ADDRESSED_ASSETS_SCHEMA, emitContentAddressedAssets, resolveAssetByDigest, assertSharedAssetPath, contentAddressedAssetsDigest, rewriteCssImports, rewriteJsEntryRelativeImports, } from './content-addressed-assets.js';
+export { SITE_FAVICON_SCHEMA, emitSiteFavicon, readSiteFaviconHeadHtml, packPngsIntoIco, } from './site-favicon.js';
+export { PUBLIC_STATIC_ASSETS_SCHEMA, emitPublicStaticAssets, } from './public-static-assets.js';
 export { CDN_POLICY_MANIFEST_SCHEMA, CDN_ADAPTER_PROJECTION_SCHEMA, CACHE_HTML, CACHE_ASSET_IMMUTABLE, CACHE_META, buildCdnPolicyManifest, emitCdnPolicy, projectCdnAdapter, createLocalStaticHandler, listenLocalStaticHost, matchGlob, } from './cdn-policy.js';
 export { SITE_DELIVERY_CONTRACT_SCHEMA, SITE_DELIVERY_RESOLUTION_SCHEMA, defineSite, normalizeSiteDelivery, normalizeSourceProbe, resolveSiteRelease, probeReleaseDirectory, emitSiteDelivery, } from './site-delivery.js';
 export { EMBEDDED_RESOURCE_INDEX_SCHEMA, emitEmbeddedPackaging, } from './embedded-packaging.js';
 export { SERVER_LANG_IDS, SERVER_LANG_ALIASES, SERVER_LANGUAGE_BACKENDS, resolveServerLanguage, assertLangRuntimePair, } from './server-language-backend.js';
 export { WECHAT_PACKAGING_SCHEMA, WECHAT_PACKAGING_REL, wechatPackagingFromDelivery, materializeWechatPackaging, } from './wechat-packaging.js';
-export { DELIVERY_PROFILE_AUTHORING_SCHEMA, BUILD_PROFILE_SELECTION_SCHEMA, ASSEMBLIES, SERVER_RUNTIMES, BUILTIN_PROFILES, pickSiteAuthoring, pickDeliveryPackaging, normalizeDeliveryAuthoring, selectBuildProfile, semanticIdsForAssembly, } from './delivery-profile.js';
+export { DELIVERY_PROFILE_AUTHORING_SCHEMA, BUILD_PROFILE_SELECTION_SCHEMA, ASSEMBLIES, SERVER_RUNTIMES, BUILTIN_PROFILES, pickSiteAuthoring, pickDeliveryPackaging, normalizeProfileArtifactName, resolveProfileArtifactDir, normalizeDeliveryAuthoring, selectBuildProfile, semanticIdsForAssembly, } from './delivery-profile.js';
 export { PACK_MANIFEST_SCHEMA, packFromDeploymentIr, ensureRuntimeCompanions } from './pack.js';
 export { SERVER_ARTIFACT_SCHEMA, HTTP_CONTRACT_SCHEMA, SERVER_RUNTIME_ADAPTER_SCHEMA, emitServerArtifact, projectServerRuntimeAdapter, } from './server-artifact.js';
 export { BUILD_PROOF_SCHEMA, ASSEMBLE_MANIFEST_SCHEMA, assembleDelivery, emitBuildProof, } from './build-assemble.js';

package/dist/index.js

@@ -147,6 +147,7 @@ export function resolveCoreRuntimeDist() {
 /** Runtime companions required by dist/vmz-serve-host.mjs relative imports. */
 export const SERVE_HOST_RUNTIME_FILES = [
     ['serve-host.mjs', 'vmz-serve-host.mjs'],
+    ['native-addon.js', 'native-addon.js'],
     ['list-client-components.js', 'list-client-components.js'],
     ['deployment-registry.js', 'deployment-registry.js'],
     ['render-host.js', 'render-host.js'],
@@ -408,13 +409,15 @@ export { ARTIFACT_DIFF_SCHEMA, DELIVERY_ARTIFACT_MANIFEST_SCHEMA, RELEASE_ENVELO
 // APPLICATION_ARTIFACT_SCHEMA lives in @vmz/protocol (already re-exported above);
 // release-pack keeps a local constant for envelope writes — do not dual-export the name.
 export { STATIC_DELIVERY_MANIFEST_SCHEMA, emitWebStatic, } from './static-emit.js';
-export { CONTENT_ADDRESSED_ASSETS_SCHEMA, emitContentAddressedAssets, resolveAssetByDigest, assertSharedAssetPath, contentAddressedAssetsDigest, } from './content-addressed-assets.js';
+export { CONTENT_ADDRESSED_ASSETS_SCHEMA, emitContentAddressedAssets, resolveAssetByDigest, assertSharedAssetPath, contentAddressedAssetsDigest, rewriteCssImports, rewriteJsEntryRelativeImports, } from './content-addressed-assets.js';
+export { SITE_FAVICON_SCHEMA, emitSiteFavicon, readSiteFaviconHeadHtml, packPngsIntoIco, } from './site-favicon.js';
+export { PUBLIC_STATIC_ASSETS_SCHEMA, emitPublicStaticAssets, } from './public-static-assets.js';
 export { CDN_POLICY_MANIFEST_SCHEMA, CDN_ADAPTER_PROJECTION_SCHEMA, CACHE_HTML, CACHE_ASSET_IMMUTABLE, CACHE_META, buildCdnPolicyManifest, emitCdnPolicy, projectCdnAdapter, createLocalStaticHandler, listenLocalStaticHost, matchGlob, } from './cdn-policy.js';
 export { SITE_DELIVERY_CONTRACT_SCHEMA, SITE_DELIVERY_RESOLUTION_SCHEMA, defineSite, normalizeSiteDelivery, normalizeSourceProbe, resolveSiteRelease, probeReleaseDirectory, emitSiteDelivery, } from './site-delivery.js';
 export { EMBEDDED_RESOURCE_INDEX_SCHEMA, emitEmbeddedPackaging, } from './embedded-packaging.js';
 export { SERVER_LANG_IDS, SERVER_LANG_ALIASES, SERVER_LANGUAGE_BACKENDS, resolveServerLanguage, assertLangRuntimePair, } from './server-language-backend.js';
 export { WECHAT_PACKAGING_SCHEMA, WECHAT_PACKAGING_REL, wechatPackagingFromDelivery, materializeWechatPackaging, } from './wechat-packaging.js';
-export { DELIVERY_PROFILE_AUTHORING_SCHEMA, BUILD_PROFILE_SELECTION_SCHEMA, ASSEMBLIES, SERVER_RUNTIMES, BUILTIN_PROFILES, pickSiteAuthoring, pickDeliveryPackaging, normalizeDeliveryAuthoring, selectBuildProfile, semanticIdsForAssembly, } from './delivery-profile.js';
+export { DELIVERY_PROFILE_AUTHORING_SCHEMA, BUILD_PROFILE_SELECTION_SCHEMA, ASSEMBLIES, SERVER_RUNTIMES, BUILTIN_PROFILES, pickSiteAuthoring, pickDeliveryPackaging, normalizeProfileArtifactName, resolveProfileArtifactDir, normalizeDeliveryAuthoring, selectBuildProfile, semanticIdsForAssembly, } from './delivery-profile.js';
 export { PACK_MANIFEST_SCHEMA, packFromDeploymentIr, ensureRuntimeCompanions } from './pack.js';
 export { SERVER_ARTIFACT_SCHEMA, HTTP_CONTRACT_SCHEMA, SERVER_RUNTIME_ADAPTER_SCHEMA, emitServerArtifact, projectServerRuntimeAdapter, } from './server-artifact.js';
 export { BUILD_PROOF_SCHEMA, ASSEMBLE_MANIFEST_SCHEMA, assembleDelivery, emitBuildProof, } from './build-assemble.js';

package/dist/public-static-assets.d.ts

@@ -0,0 +1,24 @@
+/**
+ * Opaque site-root static files: project `public/**` → deploy root (static / web-static).
+ * Not dependency packaging (no node_modules / @dxo/* scanning).
+ */
+export declare const PUBLIC_STATIC_ASSETS_SCHEMA = "vmz.public_static_assets.v0";
+/**
+ * @param {string} distDir
+ * @param {{ projectRoot?: string, publicDir?: string }} [opts]
+ */
+export declare function emitPublicStaticAssets(distDir: any, opts?: {}): {
+    schema: string;
+    status: string;
+    reason: string;
+    fileCount: number;
+    files: any[];
+    skippedConflicts: any[];
+} | {
+    schema: string;
+    status: string;
+    source: string;
+    fileCount: number;
+    files: any[];
+    skippedConflicts: any[];
+};

package/dist/public-static-assets.js

@@ -0,0 +1,140 @@
+/**
+ * Opaque site-root static files: project `public/**` → deploy root (static / web-static).
+ * Not dependency packaging (no node_modules / @dxo/* scanning).
+ */
+// @ts-nocheck
+import fs from 'node:fs';
+import path from 'node:path';
+import { writePrettyJsonFile } from './pretty-json.js';
+export const PUBLIC_STATIC_ASSETS_SCHEMA = 'vmz.public_static_assets.v0';
+/** Relative paths under dist that VMZ owns; public/ must not clobber. */
+const RESERVED_EXACT = new Set([
+    'entry-client.js',
+    'entry-event.js',
+    'vmz-dom.js',
+    'vmz-runtime.js',
+    'vmz-http.js',
+    'vmz-client-nav.js',
+    'vmz.css',
+    'vmz-designs.css',
+    'vmz-style.css',
+    'vmz-deployment.json',
+    'vmz-routes.json',
+    'vmz-plugin-targets.json',
+    'sitemap.xml',
+    'robots.txt',
+    '404.html',
+]);
+/**
+ * @param {string} distDir
+ * @param {{ projectRoot?: string, publicDir?: string }} [opts]
+ */
+export function emitPublicStaticAssets(distDir, opts = {}) {
+    const absDist = path.resolve(distDir);
+    const projectRoot = opts.projectRoot ? path.resolve(opts.projectRoot) : null;
+    const publicDir = opts.publicDir ? path.resolve(opts.publicDir) : projectRoot ? path.join(projectRoot, 'public') : null;
+    if (!publicDir || !fs.existsSync(publicDir) || !fs.statSync(publicDir).isDirectory()) {
+        const skipped = {
+            schema: PUBLIC_STATIC_ASSETS_SCHEMA,
+            status: 'skipped',
+            reason: publicDir ? 'public/ missing' : 'no projectRoot',
+            fileCount: 0,
+            files: [],
+            skippedConflicts: [],
+        };
+        writeArtifact(absDist, skipped);
+        return skipped;
+    }
+    /** @type {Array<{ path: string, bytes: number }>} */
+    const files = [];
+    /** @type {Array<{ path: string, reason: string }>} */
+    const skippedConflicts = [];
+    walkFiles(publicDir, (absFile) => {
+        const rel = path.relative(publicDir, absFile).replace(/\\/g, '/');
+        if (!rel || rel.startsWith('..'))
+            return;
+        if (shouldSkipReserved(rel)) {
+            skippedConflicts.push({ path: rel, reason: 'reserved-vmz-path' });
+            return;
+        }
+        const dest = path.join(absDist, ...rel.split('/'));
+        if (fs.existsSync(dest) && isReservedExisting(rel, dest, absDist)) {
+            skippedConflicts.push({ path: rel, reason: 'would-clobber-generated' });
+            return;
+        }
+        fs.mkdirSync(path.dirname(dest), { recursive: true });
+        fs.copyFileSync(absFile, dest);
+        files.push({ path: rel, bytes: fs.statSync(dest).size });
+    });
+    files.sort((a, b) => (a.path < b.path ? -1 : a.path > b.path ? 1 : 0));
+    const artifact = {
+        schema: PUBLIC_STATIC_ASSETS_SCHEMA,
+        status: 'ready',
+        source: 'public/',
+        fileCount: files.length,
+        files,
+        skippedConflicts,
+    };
+    writeArtifact(absDist, artifact);
+    return artifact;
+}
+/**
+ * @param {string} rel
+ */
+function shouldSkipReserved(rel) {
+    if (rel === '_vmz' || rel.startsWith('_vmz/'))
+        return true;
+    if (RESERVED_EXACT.has(rel))
+        return true;
+    if (rel.startsWith('pages/') || rel.startsWith('components/'))
+        return true;
+    if (/\.client\.js$/i.test(rel))
+        return true;
+    if (rel.startsWith('assets/') && /^assets\/[a-f0-9]{64}\./i.test(rel))
+        return true;
+    return false;
+}
+/**
+ * After compile, many generated files already exist; do not let public overwrite them.
+ * Allow overwrite of non-reserved paths (e.g. re-copy same wasm).
+ * @param {string} rel
+ * @param {string} dest
+ * @param {string} absDist
+ */
+function isReservedExisting(rel, dest, absDist) {
+    if (shouldSkipReserved(rel))
+        return true;
+    // Never overwrite generated HTML shells that static-emit will (or did) write.
+    if (/\.html$/i.test(rel) && fs.existsSync(dest)) {
+        const text = fs.readFileSync(dest, 'utf8');
+        if (text.includes('data-vmz-page') || text.includes('entry-client'))
+            return true;
+    }
+    void absDist;
+    return false;
+}
+/**
+ * @param {string} dir
+ * @param {(absFile: string) => void} onFile
+ */
+function walkFiles(dir, onFile) {
+    for (const name of fs.readdirSync(dir)) {
+        if (name === '.' || name === '..')
+            continue;
+        const full = path.join(dir, name);
+        const st = fs.statSync(full);
+        if (st.isDirectory())
+            walkFiles(full, onFile);
+        else if (st.isFile())
+            onFile(full);
+    }
+}
+/**
+ * @param {string} absDist
+ * @param {Record<string, unknown>} artifact
+ */
+function writeArtifact(absDist, artifact) {
+    const vmzDir = path.join(absDist, '_vmz');
+    fs.mkdirSync(vmzDir, { recursive: true });
+    writePrettyJsonFile(path.join(vmzDir, 'public-static-assets.json'), artifact);
+}

package/dist/site-favicon.d.ts

@@ -0,0 +1,31 @@
+/**
+ * Site favicon: author SVG → PNG + ICO + `_vmz/site-favicon.json` head links.
+ * Convention: `assets/favicon.svg` (or `favicon.svg`) under project / already in dist.
+ */
+export declare const SITE_FAVICON_SCHEMA = "vmz.site_favicon.v0";
+/**
+ * @param {string} distDir
+ * @param {{ projectRoot?: string, skipNative?: boolean }} [opts]
+ */
+export declare function emitSiteFavicon(distDir: any, opts?: {}): {
+    schema: string;
+    status: string;
+    source: string;
+    svg: string;
+    ico: string;
+    png: string[];
+    headHtml: string;
+} | {
+    status: string;
+    reason: string;
+};
+/**
+ * Read ready head HTML for static/SSR shells (empty when missing).
+ * @param {string} distDir
+ */
+export declare function readSiteFaviconHeadHtml(distDir: any): any;
+/**
+ * PNG-in-ICO (Vista+); widely accepted by modern browsers.
+ * @param {Array<{ png: Buffer, size: number }>} images
+ */
+export declare function packPngsIntoIco(images: any): Buffer<ArrayBuffer>;

package/dist/site-favicon.js

@@ -0,0 +1,140 @@
+/**
+ * Site favicon: author SVG → PNG + ICO + `_vmz/site-favicon.json` head links.
+ * Convention: `assets/favicon.svg` (or `favicon.svg`) under project / already in dist.
+ */
+// @ts-nocheck
+import fs from 'node:fs';
+import path from 'node:path';
+import { requireNativeAddon } from './native-addon.js';
+import { writePrettyJsonFile } from './pretty-json.js';
+export const SITE_FAVICON_SCHEMA = 'vmz.site_favicon.v0';
+const ICO_SIZES = [16, 32, 48];
+/**
+ * @param {string} distDir
+ * @param {{ projectRoot?: string, skipNative?: boolean }} [opts]
+ */
+export function emitSiteFavicon(distDir, opts = {}) {
+    const absDist = path.resolve(distDir);
+    const projectRoot = opts.projectRoot ? path.resolve(opts.projectRoot) : null;
+    const src = discoverFaviconSvg(absDist, projectRoot);
+    if (!src) {
+        return { status: 'skipped', reason: 'no assets/favicon.svg' };
+    }
+    const svgText = fs.readFileSync(src.path, 'utf8');
+    const assetsDir = path.join(absDist, 'assets');
+    fs.mkdirSync(assetsDir, { recursive: true });
+    const svgDest = path.join(assetsDir, 'favicon.svg');
+    if (path.resolve(src.path) !== path.resolve(svgDest)) {
+        fs.copyFileSync(src.path, svgDest);
+    }
+    /** @type {Buffer[]} */
+    const pngs = [];
+    if (!opts.skipNative) {
+        const native = requireNativeAddon();
+        if (typeof native.rasterizeSvgPng !== 'function') {
+            throw new Error('vmz native addon missing rasterizeSvgPng — rebuild with `pnpm napi:build`');
+        }
+        for (const px of ICO_SIZES) {
+            const buf = Buffer.from(native.rasterizeSvgPng(svgText, px));
+            pngs.push(buf);
+            fs.writeFileSync(path.join(assetsDir, `favicon-${px}.png`), buf);
+        }
+    }
+    let icoPath = null;
+    if (pngs.length) {
+        const ico = packPngsIntoIco(pngs.map((png, i) => ({ png, size: ICO_SIZES[i] })));
+        icoPath = path.join(absDist, 'favicon.ico');
+        fs.writeFileSync(icoPath, ico);
+    }
+    const headParts = [];
+    if (icoPath) {
+        headParts.push('<link rel="icon" href="/favicon.ico" sizes="any">');
+    }
+    headParts.push('<link rel="icon" href="/assets/favicon.svg" type="image/svg+xml">');
+    for (const px of ICO_SIZES) {
+        if (fs.existsSync(path.join(assetsDir, `favicon-${px}.png`))) {
+            headParts.push(`<link rel="icon" type="image/png" sizes="${px}x${px}" href="/assets/favicon-${px}.png">`);
+        }
+    }
+    const headHtml = `${headParts.join('\n')}\n`;
+    const artifact = {
+        schema: SITE_FAVICON_SCHEMA,
+        status: 'ready',
+        source: src.rel,
+        svg: 'assets/favicon.svg',
+        ico: icoPath ? 'favicon.ico' : null,
+        png: ICO_SIZES.filter((px) => fs.existsSync(path.join(assetsDir, `favicon-${px}.png`))).map((px) => `assets/favicon-${px}.png`),
+        headHtml,
+    };
+    const vmzDir = path.join(absDist, '_vmz');
+    fs.mkdirSync(vmzDir, { recursive: true });
+    writePrettyJsonFile(path.join(vmzDir, 'site-favicon.json'), artifact);
+    return artifact;
+}
+/**
+ * Read ready head HTML for static/SSR shells (empty when missing).
+ * @param {string} distDir
+ */
+export function readSiteFaviconHeadHtml(distDir) {
+    try {
+        const p = path.join(distDir, '_vmz', 'site-favicon.json');
+        if (!fs.existsSync(p))
+            return '';
+        const j = JSON.parse(fs.readFileSync(p, 'utf8'));
+        if (j?.status !== 'ready' || typeof j.headHtml !== 'string')
+            return '';
+        return j.headHtml;
+    }
+    catch {
+        return '';
+    }
+}
+/**
+ * @param {string} distDir
+ * @param {string|null} projectRoot
+ */
+function discoverFaviconSvg(distDir, projectRoot) {
+    const candidates = [path.join(distDir, 'assets', 'favicon.svg'), path.join(distDir, 'favicon.svg')];
+    if (projectRoot) {
+        candidates.push(path.join(projectRoot, 'assets', 'favicon.svg'), path.join(projectRoot, 'favicon.svg'), path.join(projectRoot, 'public', 'assets', 'favicon.svg'), path.join(projectRoot, 'public', 'favicon.svg'));
+    }
+    for (const abs of candidates) {
+        if (fs.existsSync(abs) && fs.statSync(abs).isFile()) {
+            return {
+                path: abs,
+                rel: path.relative(projectRoot || distDir, abs).replace(/\\/g, '/') || 'assets/favicon.svg',
+            };
+        }
+    }
+    return null;
+}
+/**
+ * PNG-in-ICO (Vista+); widely accepted by modern browsers.
+ * @param {Array<{ png: Buffer, size: number }>} images
+ */
+export function packPngsIntoIco(images) {
+    const count = images.length;
+    const header = Buffer.alloc(6);
+    header.writeUInt16LE(0, 0);
+    header.writeUInt16LE(1, 2);
+    header.writeUInt16LE(count, 4);
+    const entries = Buffer.alloc(16 * count);
+    /** @type {Buffer[]} */
+    const blobs = [];
+    let offset = 6 + 16 * count;
+    for (let i = 0; i < count; i += 1) {
+        const { png, size } = images[i];
+        const o = i * 16;
+        entries.writeUInt8(size >= 256 ? 0 : size, o);
+        entries.writeUInt8(size >= 256 ? 0 : size, o + 1);
+        entries.writeUInt8(0, o + 2);
+        entries.writeUInt8(0, o + 3);
+        entries.writeUInt16LE(1, o + 4);
+        entries.writeUInt16LE(32, o + 6);
+        entries.writeUInt32LE(png.length, o + 8);
+        entries.writeUInt32LE(offset, o + 12);
+        blobs.push(png);
+        offset += png.length;
+    }
+    return Buffer.concat([header, entries, ...blobs]);
+}

package/dist/static-emit.d.ts

@@ -43,6 +43,12 @@ export declare function emitWebStatic(distDir: any, opts?: {}): Promise<{
             sitemap: string;
             robots: string;
         };
+        publicAssets: {
+            schema: string;
+            status: string;
+            fileCount: number;
+            source: any;
+        };
     };
     htmlFiles: any[];
     skipped: any[];
@@ -55,6 +61,21 @@ export declare function emitWebStatic(distDir: any, opts?: {}): Promise<{
         objects: any[];
         rewrittenHtml: number;
     };
+    publicAssets: {
+        schema: string;
+        status: string;
+        reason: string;
+        fileCount: number;
+        files: any[];
+        skippedConflicts: any[];
+    } | {
+        schema: string;
+        status: string;
+        source: string;
+        fileCount: number;
+        files: any[];
+        skippedConflicts: any[];
+    };
     cdnPolicy: {
         schema: string;
         applicationId: any;

package/dist/static-emit.js

@@ -15,7 +15,9 @@ import { emitContentAddressedAssets } from './content-addressed-assets.js';
 import { absoluteUrl, buildLocalePageMeta, localizeBodyLinks } from './locale-router.js';
 import { requireNativeAddon } from './native-addon.js';
 import { writePrettyJsonFile } from './pretty-json.js';
+import { emitPublicStaticAssets } from './public-static-assets.js';
 import { filePathPatternFromChunk, isRouteBoundaryStem, listPublicPageUnits, parsePathPattern, unitBrowserPathPattern } from './route-path.js';
+import { emitSiteFavicon, readSiteFaviconHeadHtml } from './site-favicon.js';
 export const STATIC_DELIVERY_MANIFEST_SCHEMA = 'vmz.static.delivery_manifest.v0';
 /**
  * @param {string} distDir
@@ -32,6 +34,9 @@ export async function emitWebStatic(distDir, opts = {}) {
     if (!fs.existsSync(domPath)) {
         throw new Error(`emitWebStatic: missing ${domPath} — run vmz build first`);
     }
+    emitSiteFavicon(distDir, { projectRoot: opts.projectRoot });
+    const faviconHead = readSiteFaviconHeadHtml(distDir);
+    const publicAssets = emitPublicStaticAssets(distDir, { projectRoot: opts.projectRoot });
     const host = await createRenderHost(distDir, { strictDeployment: true, preload: 'none' });
     const { renderToString, renderToStream } = host;
     const pageCatalog = listPageClientFiles(distDir);
@@ -135,6 +140,7 @@ export async function emitWebStatic(distDir, opts = {}) {
                 props,
                 meta: gen.meta,
                 cssEntry: readCssEntry(distDir),
+                headExtraHtml: faviconHead,
             });
             fs.writeFileSync(absHtml, html, 'utf8');
             generations.push({
@@ -166,6 +172,7 @@ export async function emitWebStatic(distDir, opts = {}) {
         },
         cssEntry: readCssEntry(distDir),
         isErrorDocument: true,
+        headExtraHtml: faviconHead,
     });
     fs.writeFileSync(path.join(distDir, '404.html'), notFoundHtml, 'utf8');
     const sitemap = buildSitemap(origin, generations);
@@ -216,6 +223,12 @@ export async function emitWebStatic(distDir, opts = {}) {
             sitemap: 'sitemap.xml',
             robots: 'robots.txt',
         },
+        publicAssets: {
+            schema: publicAssets.schema,
+            status: publicAssets.status,
+            fileCount: publicAssets.fileCount ?? 0,
+            source: publicAssets.source || null,
+        },
     };
     const digest = sha256Hex(canonicalJson(manifest));
     manifest.manifestDigest = digest;
@@ -239,6 +252,7 @@ export async function emitWebStatic(distDir, opts = {}) {
         skipped,
         digest: manifest.manifestDigest,
         assets: assets.manifest,
+        publicAssets,
         cdnPolicy: cdn.policy,
         cdnAdapters: cdn.adapters,
     };
@@ -503,6 +517,7 @@ function readCssEntry(distDir) {
  *   meta: { title: string, description: string, canonical: string, robots: string, lang: string, dir?: string, alternates?: Array<{ hreflang: string, href: string }> },
  *   cssEntry: string | null,
  *   isErrorDocument?: boolean,
+ *   headExtraHtml?: string,
  * }} input
  */
 function wrapDocument(input) {
@@ -530,6 +545,7 @@ function wrapDocument(input) {
         // napi Option<String>: omit/undefined = None; null is rejected as String
         ...(input.cssEntry ? { cssEntry: String(input.cssEntry) } : {}),
         isErrorDocument: !!input.isErrorDocument,
+        ...(input.headExtraHtml ? { headExtraHtml: String(input.headExtraHtml) } : {}),
     });
 }
 /**

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vmz/vmz",
-  "version": "0.1.12",
+  "version": "0.1.14",
   "type": "module",
   "description": "VMZ Node toolchain — N-API workspace session + CLI (publish name @vmz/vmz)",
   "license": "MIT",
@@ -48,15 +48,15 @@
     }
   },
   "dependencies": {
-    "@vmz/core": "0.1.12",
-    "@vmz/plugin": "0.1.12",
-    "@vmz/protocol": "0.1.12",
+    "@vmz/core": "0.1.14",
+    "@vmz/plugin": "0.1.14",
+    "@vmz/protocol": "0.1.14",
     "jiti": "^2.6.1",
     "json5": "^2.2.3"
   },
   "peerDependencies": {
-    "@vmz/plugin-markdown-it": "0.1.12",
-    "@vmz/test": "0.1.12",
+    "@vmz/plugin-markdown-it": "0.1.14",
+    "@vmz/test": "0.1.14",
     "typescript": "^5.8.3"
   },
   "peerDependenciesMeta": {
@@ -90,12 +90,12 @@
     "cli"
   ],
   "optionalDependencies": {
-    "@vmz/vmz-win32-x64": "0.1.12",
-    "@vmz/vmz-win32-arm64": "0.1.12",
-    "@vmz/vmz-darwin-x64": "0.1.12",
-    "@vmz/vmz-darwin-arm64": "0.1.12",
-    "@vmz/vmz-linux-x64": "0.1.12",
-    "@vmz/vmz-linux-arm64": "0.1.12"
+    "@vmz/vmz-win32-x64": "0.1.14",
+    "@vmz/vmz-win32-arm64": "0.1.14",
+    "@vmz/vmz-darwin-x64": "0.1.14",
+    "@vmz/vmz-darwin-arm64": "0.1.14",
+    "@vmz/vmz-linux-x64": "0.1.14",
+    "@vmz/vmz-linux-arm64": "0.1.14"
   },
   "publishConfig": {
     "access": "public"