@vosjs/cli 0.78.0 → 0.80.0

package/dist/{chunk-B4U4URE3.js → chunk-J3KHIZCH.js}

@@ -232,279 +232,9 @@ function containerMismatch(filename, head) {
   return `${filename} is ${actual}, not the ${claimed} its name claims \u2014 rename it to ${nameForType(filename, actual)}`;
 }
 
-// src/programAssets.ts
-import { createHash } from "crypto";
-import {
-  closeSync,
-  existsSync,
-  mkdirSync,
-  openSync,
-  readSync,
-  readdirSync,
-  realpathSync,
-  renameSync,
-  rmSync,
-  statSync,
-  writeFileSync
-} from "fs";
-import { homedir } from "os";
-import { extname, join, resolve, sep } from "path";
-var ASSET_ROUTE = "/__assets/";
-var UUID = "[0-9a-f]{8}(?:-[0-9a-f]{4}){3}-[0-9a-f]{12}";
-var HOSTED_URI = new RegExp(`^asset:(${UUID})$`);
-var HOSTED_FILE = new RegExp(
-  `^(https?://[^/?#]+)?/api/assets/(${UUID})/file(?:[?#].*)?$`
-);
-function hostedAssetId(ref, homeOrigins = []) {
-  const uri = HOSTED_URI.exec(ref);
-  if (uri) return uri[1];
-  const file = HOSTED_FILE.exec(ref);
-  if (!file) return null;
-  return file[1] === void 0 || homeOrigins.includes(file[1]) ? file[2] : null;
-}
-var ASSET_NAME = /^[A-Za-z_][A-Za-z0-9_]*$/;
-var SERVED_TYPES = {
-  ".png": "image/png",
-  ".jpg": "image/jpeg",
-  ".jpeg": "image/jpeg",
-  ".webp": "image/webp",
-  ".gif": "image/gif",
-  ".svg": "image/svg+xml",
-  ".avif": "image/avif",
-  ".mp4": "video/mp4",
-  ".webm": "video/webm",
-  ".mov": "video/quicktime",
-  ".mp3": "audio/mpeg",
-  ".ogg": "audio/ogg",
-  ".wav": "audio/wav",
-  ".m4a": "audio/mp4",
-  ".glb": "model/gltf-binary",
-  ".gltf": "model/gltf+json",
-  ".woff2": "font/woff2",
-  ".woff": "font/woff",
-  ".ttf": "font/ttf",
-  ".otf": "font/otf",
-  ".json": "application/json"
-};
-function serveFile(file, range) {
-  const size = statSync(file).size;
-  const type = SERVED_TYPES[extname(file).toLowerCase()] ?? "application/octet-stream";
-  const base = { "content-type": type, "accept-ranges": "bytes" };
-  const read = (start2, end2) => {
-    const body = Buffer.alloc(Math.max(0, end2 - start2 + 1));
-    const fd = openSync(file, "r");
-    try {
-      readSync(fd, body, 0, body.length, start2);
-    } finally {
-      closeSync(fd);
-    }
-    return body;
-  };
-  const m = range ? /^bytes=(\d*)-(\d*)$/.exec(range.trim()) : null;
-  if (!m || m[1] === "" && m[2] === "") {
-    return {
-      status: 200,
-      headers: { ...base, "content-length": String(size) },
-      body: read(0, size - 1)
-    };
-  }
-  const start = m[1] === "" ? Math.max(0, size - Number(m[2])) : Number(m[1]);
-  const end = m[1] === "" || m[2] === "" ? size - 1 : Math.min(Number(m[2]), size - 1);
-  if (start >= size || start > end) {
-    return {
-      status: 416,
-      headers: { ...base, "content-range": `bytes */${size}` },
-      body: Buffer.alloc(0)
-    };
-  }
-  return {
-    status: 206,
-    headers: {
-      ...base,
-      "content-range": `bytes ${start}-${end}/${size}`,
-      "content-length": String(end - start + 1)
-    },
-    body: read(start, end)
-  };
-}
-function localFile(ref, baseDir) {
-  if (baseDir === null) {
-    return {
-      refused: "a config loaded from a URL has no directory, so it reads no local file"
-    };
-  }
-  const file = resolve(baseDir, ref);
-  if (!existsSync(file) || !statSync(file).isFile()) {
-    return { refused: "which is not a file beside the config" };
-  }
-  const root = realpathSync(baseDir);
-  const real = realpathSync(file);
-  if (!real.startsWith(root + sep)) {
-    return {
-      refused: `which is outside the program's directory (${root}). A program reads only files in its own directory or below: copy the file there`
-    };
-  }
-  return { file: real };
-}
-function isUrl(ref) {
-  return /^(https?:|data:|blob:)/.test(ref);
-}
-function manifestOf(config) {
-  const assets = config.assets;
-  if (!assets || typeof assets !== "object" || Array.isArray(assets))
-    return null;
-  return Object.keys(assets).length > 0 ? assets : null;
-}
-function manifestRefs(config) {
-  const out = [];
-  for (const [name, decl] of Object.entries(manifestOf(config) ?? {})) {
-    if (!ASSET_NAME.test(name) || !decl || typeof decl !== "object") continue;
-    if (Array.isArray(decl.ref)) {
-      decl.ref.forEach((ref, index) => {
-        if (typeof ref === "string") out.push({ name, index, ref });
-      });
-    } else if (typeof decl.ref === "string") {
-      out.push({ name, index: null, ref: decl.ref });
-    }
-  }
-  return out;
-}
-async function fetchHosted(id, opts) {
-  const dir = opts.cacheDir ?? join(homedir(), ".cache", "vos", "assets");
-  const cached = existsSync(dir) ? readdirSync(dir).find(
-    (f) => (f === id || f.startsWith(`${id}.`)) && !f.endsWith(".part")
-  ) : void 0;
-  if (cached) return join(dir, cached);
-  if (!opts.origin || !opts.key) {
-    opts.log(
-      `note: asset ${id} is hosted and no credential is set, so the render cannot load it (vos login, or keep the file beside the config and name its path)`
-    );
-    return null;
-  }
-  const res = await fetch(`${opts.origin}/api/assets/${id}/file`, {
-    headers: { authorization: `Bearer ${opts.key}` }
-  });
-  if (!res.ok) {
-    opts.log(
-      `note: asset ${id} could not be read (${res.status}), so the render cannot load it`
-    );
-    return null;
-  }
-  mkdirSync(dir, { recursive: true, mode: 448 });
-  const type = (res.headers.get("content-type") ?? "").split(";")[0].trim();
-  const file = join(dir, `${id}${extensionFor(type)}`);
-  const partial = `${file}.part`;
-  try {
-    writeFileSync(partial, new Uint8Array(await res.arrayBuffer()), {
-      mode: 384
-    });
-    renameSync(partial, file);
-  } finally {
-    rmSync(partial, { force: true });
-  }
-  return file;
-}
-function htmlFaceRefs(config) {
-  const out = [];
-  const stack = Array.isArray(config.stack) ? config.stack : [];
-  for (const entry of stack) {
-    const data = entry?.data;
-    const overlays = Array.isArray(data?.overlays) ? data.overlays : [];
-    for (const clip of overlays) {
-      const html = clip?.html;
-      const faces = Array.isArray(html?.faces) ? html.faces : [];
-      for (const face of faces) {
-        if (typeof face?.url !== "string" || !face.url) continue;
-        out.push({
-          where: `overlay ${String(clip.id)} font ${String(face.family)}`,
-          url: face.url,
-          set: (next) => {
-            face.url = next;
-          },
-          drop: () => {
-            const at = faces.indexOf(face);
-            if (at >= 0) faces.splice(at, 1);
-          }
-        });
-      }
-    }
-  }
-  return out;
-}
-var FACE_HOST = /^https:\/\/assets\.vos\.so\//;
-async function programAssets(config, opts) {
-  const refs = manifestRefs(config);
-  const faces = [];
-  for (const f of htmlFaceRefs(config)) {
-    const hosted = hostedAssetId(f.url, opts.origin ? [opts.origin] : []);
-    if (!isUrl(f.url) || hosted) {
-      faces.push(f);
-    } else if (!FACE_HOST.test(f.url)) {
-      opts.log(
-        `note: ${f.where} names ${f.url}, which is not on https://assets.vos.so, so the render does not fetch it (a face comes from the hosted catalog, a hosted file, or a .woff2 beside the document)`
-      );
-      f.drop();
-    }
-  }
-  if (refs.length === 0 && faces.length === 0) return null;
-  const files = {};
-  const served = /* @__PURE__ */ new Map();
-  const serve = (file) => {
-    const known = served.get(file);
-    if (known) return known;
-    const tag = createHash("sha256").update(file).digest("hex").slice(0, 16);
-    const ext = extname(file);
-    const path = `${ASSET_ROUTE}${tag}${/^\.[A-Za-z0-9]+$/.test(ext) ? ext.toLowerCase() : ""}`;
-    files[path] = file;
-    served.set(file, path);
-    return path;
-  };
-  const reach = async (ref, where) => {
-    const hosted = hostedAssetId(ref, opts.origin ? [opts.origin] : []);
-    if (hosted) {
-      const file = await fetchHosted(hosted, opts);
-      return file ? serve(file) : ref;
-    }
-    if (isUrl(ref)) return ref;
-    const local = localFile(ref, opts.baseDir);
-    if ("refused" in local) {
-      opts.log(
-        `note: ${where} names ${ref}, ${local.refused}, so the render cannot load it`
-      );
-      return ref;
-    }
-    return serve(local.file);
-  };
-  for (const face of faces) face.set(await reach(face.url, face.where));
-  const assets = {};
-  for (const { name, index, ref } of refs) {
-    const url = await reach(
-      ref,
-      index === null ? `assets.${name}` : `assets.${name}[${index}]`
-    );
-    if (index === null) assets[name] = url;
-    else {
-      const list = assets[name] ??= [];
-      list[index] = url;
-    }
-  }
-  return { assets, files };
-}
-function missingManifestFiles(config, baseDir) {
-  const out = [];
-  for (const { name, index, ref } of manifestRefs(config)) {
-    if (isUrl(ref) || hostedAssetId(ref)) continue;
-    const local = localFile(ref, baseDir);
-    if ("file" in local) continue;
-    const where = index === null ? `assets.${name}` : `assets.${name}[${index}]`;
-    out.push(`${where} names ${ref}, ${local.refused}`);
-  }
-  return out;
-}
-
 // src/plugin/safeWrite.ts
 import { lstat, writeFile } from "fs/promises";
-import { lstatSync, writeFileSync as writeFileSync2 } from "fs";
+import { lstatSync, writeFileSync } from "fs";
 async function writeFileSafe(path, data) {
   await refuseSymlink(path);
   await writeFile(path, data);
@@ -524,7 +254,7 @@ function writeFileSafeSync(path, data) {
   } catch {
   }
   if (link) throw new Error(symlinkRefusal(path));
-  writeFileSync2(path, data);
+  writeFileSync(path, data);
 }
 function symlinkRefusal(path) {
   return `${path} is a symbolic link, and the CLI writes only a regular file there: remove the link and run again`;
@@ -586,12 +316,12 @@ function hasFlag(flags, name) {
 }
 
 // src/plugin/platform.ts
-import { mkdirSync as mkdirSync2, readFileSync, writeFileSync as writeFileSync3 } from "fs";
-import { homedir as homedir2 } from "os";
-import { join as join2 } from "path";
+import { mkdirSync, readFileSync, writeFileSync as writeFileSync2 } from "fs";
+import { homedir } from "os";
+import { dirname, join } from "path";
 
 // src/plugin/hostAgent.ts
-import { existsSync as existsSync2 } from "fs";
+import { existsSync } from "fs";
 var SLUG = /^[a-z0-9][a-z0-9.-]{0,39}$/;
 var MARKERS = [
   ["cursor", (e) => !!e.CURSOR_TRACE_ID],
@@ -621,7 +351,7 @@ function slugFromAiAgent(value) {
   if (head === "github-copilot-cli") return "github-copilot";
   return SLUG.test(head) ? head : null;
 }
-function detectHostAgent(env = process.env, exists = existsSync2) {
+function detectHostAgent(env = process.env, exists = existsSync) {
   if (env.AI_AGENT) {
     const slug = slugFromAiAgent(env.AI_AGENT);
     if (slug) return slug;
@@ -667,157 +397,479 @@ function parseVosId(input) {
 function deriveSlug(title) {
   return title.toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "").slice(0, 50).replace(/-+$/, "") || "remix";
 }
-var CREDENTIALS_PATH = join2(homedir2(), ".config", "vos", "credentials");
-function resolveCredential(explicit) {
+var CREDENTIALS_PATH = join(homedir(), ".config", "vos", "credentials");
+var DEFAULT_ORIGIN = "https://vos.so";
+function originOf(url) {
+  try {
+    return new URL(url).origin;
+  } catch {
+    return url.replace(/\/+$/, "");
+  }
+}
+function readStoredCredential(path = CREDENTIALS_PATH) {
+  let text;
+  try {
+    text = readFileSync(path, "utf8");
+  } catch {
+    return null;
+  }
+  const [first, ...rest] = text.split("\n");
+  const key = first.trim();
+  if (!key) return null;
+  const line = rest.map((l) => l.trim()).find((l) => l.startsWith("origin="));
+  const origin = line ? originOf(line.slice("origin=".length).trim()) : "";
+  return { key, origin: origin || DEFAULT_ORIGIN };
+}
+var storedFor = /* @__PURE__ */ new Map();
+var warned = /* @__PURE__ */ new Set();
+function resolveCredential(explicit, path = CREDENTIALS_PATH) {
   const flag = explicit?.trim();
   if (flag) return flag;
   const env = process.env.VOS_API_KEY?.trim();
   if (env) return env;
+  const stored = readStoredCredential(path);
+  if (!stored) return null;
+  storedFor.set(stored.key, stored.origin);
+  return stored.key;
+}
+function bearerFor(key, url) {
+  if (!key) return {};
+  const bound = storedFor.get(key);
+  const to = originOf(url);
+  if (bound && bound !== to) {
+    if (!warned.has(to)) {
+      warned.add(to);
+      process.stderr.write(
+        `note: the credential vos login stored is for ${bound}, so it is not sent to ${to}; for ${to}, run vos login --origin ${to}, or pass --key or VOS_API_KEY
+`
+      );
+    }
+    return {};
+  }
+  return { authorization: `Bearer ${key}` };
+}
+var mintAt = (origin = DEFAULT_ORIGIN) => `${originOf(origin)}/app/api`;
+function requireCredential(explicit, origin) {
+  const key = resolveCredential(explicit);
+  if (!key) {
+    throw new Error(
+      `no credential found \u2014 pass --key, set VOS_API_KEY, or run \`vos login\` (mint a content key at ${mintAt(origin ?? platformOrigin())}; a vos_rg_ remix grant works too)`
+    );
+  }
+  return key;
+}
+function writeCredential(key, origin = DEFAULT_ORIGIN, path = CREDENTIALS_PATH) {
+  mkdirSync(dirname(path), { recursive: true, mode: 448 });
+  writeFileSync2(path, `${key.trim()}
+origin=${originOf(origin)}
+`, {
+    mode: 384
+  });
+  return path;
+}
+function clientId(env = process.env, exists) {
+  const explicit = env.VOS_CLIENT?.trim();
+  if (explicit && explicit.length <= 60 && !/[\r\n]/.test(explicit))
+    return explicit;
+  const host = detectHostAgent(env, exists);
+  return host ? `${host} vos-cli` : "vos-cli";
+}
+function unreachable(origin, e) {
+  const err = e;
+  const why = [err?.message, err?.cause?.code].filter(Boolean).join(": ");
+  return `could not reach ${origin}${why ? ` (${why})` : ""}; is it the origin you meant? (--origin, or VOS_ORIGIN)`;
+}
+async function apiJson(origin, path, init = {}) {
+  const headers = {
+    accept: "application/json",
+    ...init.headers
+  };
+  Object.assign(headers, bearerFor(init.key, origin));
+  if (init.body !== void 0) headers["content-type"] = "application/json";
+  const reqBody = init.raw !== void 0 ? init.raw : init.body === void 0 ? void 0 : JSON.stringify(init.body);
+  let res;
+  try {
+    res = await fetch(`${origin}${path}`, {
+      method: init.method ?? "GET",
+      headers,
+      body: reqBody
+    });
+  } catch (e) {
+    throw new Error(unreachable(origin, e));
+  }
+  let body = {};
+  try {
+    body = await res.json();
+  } catch {
+  }
+  return { status: res.status, body, origin };
+}
+function detailLine(body) {
+  const details = body.details;
+  if (!Array.isArray(details) || !details.length) return "";
+  const lines = details.map((d) => {
+    const path = Array.isArray(d.path) ? d.path.join(".") : "";
+    return `${path ? `${path}: ` : ""}${String(d.message ?? JSON.stringify(d))}`;
+  });
+  return `
+  ${lines.join("\n  ")}`;
+}
+function apiError(what, r) {
+  const detail = typeof r.body.error === "string" ? r.body.error + detailLine(r.body) : r.body.details !== void 0 ? JSON.stringify(r.body.details) : "";
+  const hint = r.status === 401 ? ` (run \`vos login\`, or set VOS_API_KEY \u2014 mint a key at ${mintAt(r.origin)})` : "";
+  return `${what} \u2192 ${r.status}${detail ? `: ${detail}` : ""}${hint}`;
+}
+function promptHint(target, vosId) {
+  return `vos push ${target} --vos ${vosId} --prompt "<the person's prompt, as they wrote it>"`;
+}
+var SYNC_STATE_NAME = "vos.json";
+function hostedMediaOf(value) {
+  if (!value || typeof value !== "object") return void 0;
+  const out = {};
+  for (const [file, entry] of Object.entries(value)) {
+    const e = entry;
+    if (e && typeof e.ref === "string" && typeof e.sha256 === "string")
+      out[file] = { ref: e.ref, sha256: e.sha256 };
+  }
+  return Object.keys(out).length ? out : void 0;
+}
+function readJsonFile(file) {
   try {
-    const first = readFileSync(CREDENTIALS_PATH, "utf8").split("\n")[0].trim();
-    return first || null;
+    return JSON.parse(readFileSync(file, "utf8"));
   } catch {
     return null;
   }
-}
-function requireCredential(explicit) {
-  const key = resolveCredential(explicit);
-  if (!key) {
-    throw new Error(
-      "no credential found \u2014 pass --key, set VOS_API_KEY, or run `vos login` (mint a content key at https://vos.so/app/api; a vos_rg_ remix grant works too)"
-    );
+}
+function readSyncState(dir) {
+  const own = readJsonFile(join(dir, SYNC_STATE_NAME));
+  if (own && typeof own.vosId === "string") {
+    return {
+      vosId: own.vosId,
+      versionId: typeof own.versionId === "string" ? own.versionId : null,
+      ...typeof own.pushedAt === "string" ? { pushedAt: own.pushedAt } : {},
+      ...typeof own.title === "string" ? { title: own.title } : {},
+      ...typeof own.slug === "string" ? { slug: own.slug } : {},
+      ...typeof own.remixOfId === "string" ? { remixOfId: own.remixOfId } : {},
+      ...hostedMediaOf(own.hostedMedia) ? { hostedMedia: hostedMediaOf(own.hostedMedia) } : {}
+    };
+  }
+  const push = readJsonFile(join(dir, "push.json"));
+  if (push && typeof push.vosId === "string") {
+    return {
+      vosId: push.vosId,
+      versionId: typeof push.versionId === "string" ? push.versionId : null,
+      ...typeof push.pushedAt === "string" ? { pushedAt: push.pushedAt } : {}
+    };
+  }
+  const meta = readJsonFile(join(dir, "meta.json"));
+  if (meta && typeof meta.id === "string") {
+    return {
+      vosId: meta.id,
+      versionId: typeof meta.currentVersionId === "string" ? meta.currentVersionId : null,
+      ...typeof meta.title === "string" ? { title: meta.title } : {},
+      ...typeof meta.slug === "string" ? { slug: meta.slug } : {},
+      ...typeof meta.remixOfId === "string" ? { remixOfId: meta.remixOfId } : {}
+    };
+  }
+  return null;
+}
+function writeSyncState(dir, patch) {
+  const merged = {
+    ...readSyncState(dir) ?? { versionId: null },
+    ...patch
+  };
+  writeFileSafeSync(
+    join(dir, SYNC_STATE_NAME),
+    `${JSON.stringify(merged, null, 2)}
+`
+  );
+  return merged;
+}
+function formatChanges(changes) {
+  const lines = [];
+  for (const ch of changes) {
+    const label = ch.label ? ` \xB7 ${ch.label}` : "";
+    const who = ch.origin === "studio" ? "human" : ch.origin ?? "unknown";
+    lines.push(
+      `v${String(ch.versionNumber ?? "?")} (${who}${label}): ${ch.summary ?? ""}`
+    );
+    if (ch.note) lines.push(`    note: ${ch.note}`);
+  }
+  return lines;
+}
+function serverWarnings(body, log) {
+  const warnings = Array.isArray(body.warnings) ? body.warnings : [];
+  for (const w of warnings) if (typeof w === "string") log(`warning ${w}`);
+}
+
+// src/programAssets.ts
+import { createHash } from "crypto";
+import {
+  closeSync,
+  existsSync as existsSync2,
+  mkdirSync as mkdirSync2,
+  openSync,
+  readSync,
+  readdirSync,
+  realpathSync,
+  renameSync,
+  rmSync,
+  statSync,
+  writeFileSync as writeFileSync3
+} from "fs";
+import { homedir as homedir2 } from "os";
+import { extname, join as join2, resolve, sep } from "path";
+var ASSET_ROUTE = "/__assets/";
+var UUID = "[0-9a-f]{8}(?:-[0-9a-f]{4}){3}-[0-9a-f]{12}";
+var HOSTED_URI = new RegExp(`^asset:(${UUID})$`);
+var HOSTED_FILE = new RegExp(
+  `^(https?://[^/?#]+)?/api/assets/(${UUID})/file(?:[?#].*)?$`
+);
+function hostedAssetId(ref, homeOrigins = []) {
+  const uri = HOSTED_URI.exec(ref);
+  if (uri) return uri[1];
+  const file = HOSTED_FILE.exec(ref);
+  if (!file) return null;
+  return file[1] === void 0 || homeOrigins.includes(file[1]) ? file[2] : null;
+}
+var ASSET_NAME = /^[A-Za-z_][A-Za-z0-9_]*$/;
+var SERVED_TYPES = {
+  ".png": "image/png",
+  ".jpg": "image/jpeg",
+  ".jpeg": "image/jpeg",
+  ".webp": "image/webp",
+  ".gif": "image/gif",
+  ".svg": "image/svg+xml",
+  ".avif": "image/avif",
+  ".mp4": "video/mp4",
+  ".webm": "video/webm",
+  ".mov": "video/quicktime",
+  ".mp3": "audio/mpeg",
+  ".ogg": "audio/ogg",
+  ".wav": "audio/wav",
+  ".m4a": "audio/mp4",
+  ".glb": "model/gltf-binary",
+  ".gltf": "model/gltf+json",
+  ".woff2": "font/woff2",
+  ".woff": "font/woff",
+  ".ttf": "font/ttf",
+  ".otf": "font/otf",
+  ".json": "application/json"
+};
+function serveFile(file, range) {
+  const size = statSync(file).size;
+  const type = SERVED_TYPES[extname(file).toLowerCase()] ?? "application/octet-stream";
+  const base = { "content-type": type, "accept-ranges": "bytes" };
+  const read = (start2, end2) => {
+    const body = Buffer.alloc(Math.max(0, end2 - start2 + 1));
+    const fd = openSync(file, "r");
+    try {
+      readSync(fd, body, 0, body.length, start2);
+    } finally {
+      closeSync(fd);
+    }
+    return body;
+  };
+  const m = range ? /^bytes=(\d*)-(\d*)$/.exec(range.trim()) : null;
+  if (!m || m[1] === "" && m[2] === "") {
+    return {
+      status: 200,
+      headers: { ...base, "content-length": String(size) },
+      body: read(0, size - 1)
+    };
+  }
+  const start = m[1] === "" ? Math.max(0, size - Number(m[2])) : Number(m[1]);
+  const end = m[1] === "" || m[2] === "" ? size - 1 : Math.min(Number(m[2]), size - 1);
+  if (start >= size || start > end) {
+    return {
+      status: 416,
+      headers: { ...base, "content-range": `bytes */${size}` },
+      body: Buffer.alloc(0)
+    };
+  }
+  return {
+    status: 206,
+    headers: {
+      ...base,
+      "content-range": `bytes ${start}-${end}/${size}`,
+      "content-length": String(end - start + 1)
+    },
+    body: read(start, end)
+  };
+}
+function localFile(ref, baseDir) {
+  if (baseDir === null) {
+    return {
+      refused: "a config loaded from a URL has no directory, so it reads no local file"
+    };
+  }
+  const file = resolve(baseDir, ref);
+  if (!existsSync2(file) || !statSync(file).isFile()) {
+    return { refused: "which is not a file beside the config" };
+  }
+  const root = realpathSync(baseDir);
+  const real = realpathSync(file);
+  if (!real.startsWith(root + sep)) {
+    return {
+      refused: `which is outside the program's directory (${root}). A program reads only files in its own directory or below: copy the file there`
+    };
   }
-  return key;
+  return { file: real };
 }
-function writeCredential(key) {
-  mkdirSync2(join2(homedir2(), ".config", "vos"), { recursive: true, mode: 448 });
-  writeFileSync3(CREDENTIALS_PATH, `${key.trim()}
-`, { mode: 384 });
-  return CREDENTIALS_PATH;
+function isUrl(ref) {
+  return /^(https?:|data:|blob:)/.test(ref);
 }
-function clientId(env = process.env, exists) {
-  const explicit = env.VOS_CLIENT?.trim();
-  if (explicit && explicit.length <= 60 && !/[\r\n]/.test(explicit))
-    return explicit;
-  const host = detectHostAgent(env, exists);
-  return host ? `${host} vos-cli` : "vos-cli";
+function manifestOf(config) {
+  const assets = config.assets;
+  if (!assets || typeof assets !== "object" || Array.isArray(assets))
+    return null;
+  return Object.keys(assets).length > 0 ? assets : null;
 }
-async function apiJson(origin, path, init = {}) {
-  const headers = {
-    accept: "application/json",
-    ...init.headers
-  };
-  if (init.key) headers.authorization = `Bearer ${init.key}`;
-  if (init.body !== void 0) headers["content-type"] = "application/json";
-  const reqBody = init.raw !== void 0 ? init.raw : init.body === void 0 ? void 0 : JSON.stringify(init.body);
-  const res = await fetch(`${origin}${path}`, {
-    method: init.method ?? "GET",
-    headers,
-    body: reqBody
-  });
-  let body = {};
-  try {
-    body = await res.json();
-  } catch {
+function manifestRefs(config) {
+  const out = [];
+  for (const [name, decl] of Object.entries(manifestOf(config) ?? {})) {
+    if (!ASSET_NAME.test(name) || !decl || typeof decl !== "object") continue;
+    if (Array.isArray(decl.ref)) {
+      decl.ref.forEach((ref, index) => {
+        if (typeof ref === "string") out.push({ name, index, ref });
+      });
+    } else if (typeof decl.ref === "string") {
+      out.push({ name, index: null, ref: decl.ref });
+    }
   }
-  return { status: res.status, body };
+  return out;
 }
-function detailLine(body) {
-  const details = body.details;
-  if (!Array.isArray(details) || !details.length) return "";
-  const lines = details.map((d) => {
-    const path = Array.isArray(d.path) ? d.path.join(".") : "";
-    return `${path ? `${path}: ` : ""}${String(d.message ?? JSON.stringify(d))}`;
+async function fetchHosted(id, opts) {
+  const dir = opts.cacheDir ?? join2(homedir2(), ".cache", "vos", "assets");
+  const cached = existsSync2(dir) ? readdirSync(dir).find(
+    (f) => (f === id || f.startsWith(`${id}.`)) && !f.endsWith(".part")
+  ) : void 0;
+  if (cached) return join2(dir, cached);
+  if (!opts.origin || !opts.key) {
+    opts.log(
+      `note: asset ${id} is hosted and no credential is set, so the render cannot load it (vos login, or keep the file beside the config and name its path)`
+    );
+    return null;
+  }
+  const res = await fetch(`${opts.origin}/api/assets/${id}/file`, {
+    headers: bearerFor(opts.key, opts.origin)
   });
-  return `
-  ${lines.join("\n  ")}`;
-}
-function apiError(what, r) {
-  const detail = typeof r.body.error === "string" ? r.body.error + detailLine(r.body) : r.body.details !== void 0 ? JSON.stringify(r.body.details) : "";
-  const hint = r.status === 401 ? " (run `vos login`, or set VOS_API_KEY \u2014 mint a key at https://vos.so/app/api)" : "";
-  return `${what} \u2192 ${r.status}${detail ? `: ${detail}` : ""}${hint}`;
-}
-function promptHint(target, vosId) {
-  return `vos push ${target} --vos ${vosId} --prompt "<the person's prompt, as they wrote it>"`;
-}
-var SYNC_STATE_NAME = "vos.json";
-function hostedMediaOf(value) {
-  if (!value || typeof value !== "object") return void 0;
-  const out = {};
-  for (const [file, entry] of Object.entries(value)) {
-    const e = entry;
-    if (e && typeof e.ref === "string" && typeof e.sha256 === "string")
-      out[file] = { ref: e.ref, sha256: e.sha256 };
+  if (!res.ok) {
+    opts.log(
+      `note: asset ${id} could not be read (${res.status}), so the render cannot load it`
+    );
+    return null;
   }
-  return Object.keys(out).length ? out : void 0;
-}
-function readJsonFile(file) {
+  mkdirSync2(dir, { recursive: true, mode: 448 });
+  const type = (res.headers.get("content-type") ?? "").split(";")[0].trim();
+  const file = join2(dir, `${id}${extensionFor(type)}`);
+  const partial = `${file}.part`;
   try {
-    return JSON.parse(readFileSync(file, "utf8"));
-  } catch {
-    return null;
+    writeFileSync3(partial, new Uint8Array(await res.arrayBuffer()), {
+      mode: 384
+    });
+    renameSync(partial, file);
+  } finally {
+    rmSync(partial, { force: true });
   }
+  return file;
 }
-function readSyncState(dir) {
-  const own = readJsonFile(join2(dir, SYNC_STATE_NAME));
-  if (own && typeof own.vosId === "string") {
-    return {
-      vosId: own.vosId,
-      versionId: typeof own.versionId === "string" ? own.versionId : null,
-      ...typeof own.pushedAt === "string" ? { pushedAt: own.pushedAt } : {},
-      ...typeof own.title === "string" ? { title: own.title } : {},
-      ...typeof own.slug === "string" ? { slug: own.slug } : {},
-      ...typeof own.remixOfId === "string" ? { remixOfId: own.remixOfId } : {},
-      ...hostedMediaOf(own.hostedMedia) ? { hostedMedia: hostedMediaOf(own.hostedMedia) } : {}
-    };
-  }
-  const push = readJsonFile(join2(dir, "push.json"));
-  if (push && typeof push.vosId === "string") {
-    return {
-      vosId: push.vosId,
-      versionId: typeof push.versionId === "string" ? push.versionId : null,
-      ...typeof push.pushedAt === "string" ? { pushedAt: push.pushedAt } : {}
-    };
-  }
-  const meta = readJsonFile(join2(dir, "meta.json"));
-  if (meta && typeof meta.id === "string") {
-    return {
-      vosId: meta.id,
-      versionId: typeof meta.currentVersionId === "string" ? meta.currentVersionId : null,
-      ...typeof meta.title === "string" ? { title: meta.title } : {},
-      ...typeof meta.slug === "string" ? { slug: meta.slug } : {},
-      ...typeof meta.remixOfId === "string" ? { remixOfId: meta.remixOfId } : {}
-    };
+function htmlFaceRefs(config) {
+  const out = [];
+  const stack = Array.isArray(config.stack) ? config.stack : [];
+  for (const entry of stack) {
+    const data = entry?.data;
+    const overlays = Array.isArray(data?.overlays) ? data.overlays : [];
+    for (const clip of overlays) {
+      const html = clip?.html;
+      const faces = Array.isArray(html?.faces) ? html.faces : [];
+      for (const face of faces) {
+        if (typeof face?.url !== "string" || !face.url) continue;
+        out.push({
+          where: `overlay ${String(clip.id)} font ${String(face.family)}`,
+          url: face.url,
+          set: (next) => {
+            face.url = next;
+          },
+          drop: () => {
+            const at = faces.indexOf(face);
+            if (at >= 0) faces.splice(at, 1);
+          }
+        });
+      }
+    }
   }
-  return null;
+  return out;
 }
-function writeSyncState(dir, patch) {
-  const merged = {
-    ...readSyncState(dir) ?? { versionId: null },
-    ...patch
+var FACE_HOST = /^https:\/\/assets\.vos\.so\//;
+async function programAssets(config, opts) {
+  const refs = manifestRefs(config);
+  const faces = [];
+  for (const f of htmlFaceRefs(config)) {
+    const hosted = hostedAssetId(f.url, opts.origin ? [opts.origin] : []);
+    if (!isUrl(f.url) || hosted) {
+      faces.push(f);
+    } else if (!FACE_HOST.test(f.url)) {
+      opts.log(
+        `note: ${f.where} names ${f.url}, which is not on https://assets.vos.so, so the render does not fetch it (a face comes from the hosted catalog, a hosted file, or a .woff2 beside the document)`
+      );
+      f.drop();
+    }
+  }
+  if (refs.length === 0 && faces.length === 0) return null;
+  const files = {};
+  const served = /* @__PURE__ */ new Map();
+  const serve = (file) => {
+    const known = served.get(file);
+    if (known) return known;
+    const tag = createHash("sha256").update(file).digest("hex").slice(0, 16);
+    const ext = extname(file);
+    const path = `${ASSET_ROUTE}${tag}${/^\.[A-Za-z0-9]+$/.test(ext) ? ext.toLowerCase() : ""}`;
+    files[path] = file;
+    served.set(file, path);
+    return path;
   };
-  writeFileSafeSync(
-    join2(dir, SYNC_STATE_NAME),
-    `${JSON.stringify(merged, null, 2)}
-`
-  );
-  return merged;
-}
-function formatChanges(changes) {
-  const lines = [];
-  for (const ch of changes) {
-    const label = ch.label ? ` \xB7 ${ch.label}` : "";
-    const who = ch.origin === "studio" ? "human" : ch.origin ?? "unknown";
-    lines.push(
-      `v${String(ch.versionNumber ?? "?")} (${who}${label}): ${ch.summary ?? ""}`
+  const reach = async (ref, where) => {
+    const hosted = hostedAssetId(ref, opts.origin ? [opts.origin] : []);
+    if (hosted) {
+      const file = await fetchHosted(hosted, opts);
+      return file ? serve(file) : ref;
+    }
+    if (isUrl(ref)) return ref;
+    const local = localFile(ref, opts.baseDir);
+    if ("refused" in local) {
+      opts.log(
+        `note: ${where} names ${ref}, ${local.refused}, so the render cannot load it`
+      );
+      return ref;
+    }
+    return serve(local.file);
+  };
+  for (const face of faces) face.set(await reach(face.url, face.where));
+  const assets = {};
+  for (const { name, index, ref } of refs) {
+    const url = await reach(
+      ref,
+      index === null ? `assets.${name}` : `assets.${name}[${index}]`
     );
-    if (ch.note) lines.push(`    note: ${ch.note}`);
+    if (index === null) assets[name] = url;
+    else {
+      const list = assets[name] ??= [];
+      list[index] = url;
+    }
   }
-  return lines;
+  return { assets, files };
 }
-function serverWarnings(body, log) {
-  const warnings = Array.isArray(body.warnings) ? body.warnings : [];
-  for (const w of warnings) if (typeof w === "string") log(`warning ${w}`);
+function missingManifestFiles(config, baseDir) {
+  const out = [];
+  for (const { name, index, ref } of manifestRefs(config)) {
+    if (isUrl(ref) || hostedAssetId(ref)) continue;
+    const local = localFile(ref, baseDir);
+    if ("file" in local) continue;
+    const where = index === null ? `assets.${name}` : `assets.${name}[${index}]`;
+    out.push(`${where} names ${ref}, ${local.refused}`);
+  }
+  return out;
 }
 
 export {
@@ -833,13 +885,6 @@ export {
   resolveMediaType,
   nameForType,
   containerMismatch,
-  ASSET_ROUTE,
-  hostedAssetId,
-  serveFile,
-  localFile,
-  manifestRefs,
-  programAssets,
-  missingManifestFiles,
   writeFileSafe,
   refuseSymlink,
   writeFileSafeSync,
@@ -852,6 +897,8 @@ export {
   deriveSlug,
   CREDENTIALS_PATH,
   resolveCredential,
+  bearerFor,
+  mintAt,
   requireCredential,
   writeCredential,
   clientId,
@@ -863,6 +910,13 @@ export {
   readSyncState,
   writeSyncState,
   formatChanges,
-  serverWarnings
+  serverWarnings,
+  ASSET_ROUTE,
+  hostedAssetId,
+  serveFile,
+  localFile,
+  manifestRefs,
+  programAssets,
+  missingManifestFiles
 };
-//# sourceMappingURL=chunk-B4U4URE3.js.map
+//# sourceMappingURL=chunk-J3KHIZCH.js.map