ima2-gen 3.9.0 → 3.10.0

package/bin/lib/serviceTemplates.js

@@ -0,0 +1,87 @@
+/**
+ * Pure renderers for background-service artifacts. Kept free of process/fs so
+ * contract tests can snapshot them (adversarial audit 260821c: PATH must be
+ * baked — launchd/systemd hand jobs a minimal environment and the grok/oauth
+ *  proxies spawn bare binaries that silently die without the user's PATH).
+ */
+export const LAUNCHD_LABEL = "com.ima2.server";
+export const SYSTEMD_UNIT = "ima2.service";
+function xmlEscape(value) {
+    return value
+        .replaceAll("&", "&")
+        .replaceAll("<", "&lt;")
+        .replaceAll(">", "&gt;");
+}
+export function renderLaunchdPlist(input) {
+    const env = [
+        ["IMA2_SERVICE", "1"],
+        ["PATH", input.pathEnv],
+    ];
+    if (input.configDir)
+        env.push(["IMA2_CONFIG_DIR", input.configDir]);
+    const envXml = env
+        .map(([k, v]) => `    <key>${xmlEscape(k)}</key><string>${xmlEscape(v)}</string>`)
+        .join("\n");
+    return `<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+<dict>
+  <key>Label</key><string>${LAUNCHD_LABEL}</string>
+  <key>ProgramArguments</key>
+  <array>
+    <string>${xmlEscape(input.nodePath)}</string>
+    <string>${xmlEscape(input.serverJs)}</string>
+  </array>
+  <key>WorkingDirectory</key><string>${xmlEscape(input.rootDir)}</string>
+  <key>RunAtLoad</key><true/>
+  <key>KeepAlive</key><true/>
+  <key>StandardOutPath</key><string>${xmlEscape(input.logDir)}/service.out.log</string>
+  <key>StandardErrorPath</key><string>${xmlEscape(input.logDir)}/service.err.log</string>
+  <key>EnvironmentVariables</key>
+  <dict>
+${envXml}
+  </dict>
+</dict>
+</plist>
+`;
+}
+export function renderSystemdUnit(input) {
+    const lines = [
+        "[Unit]",
+        "Description=ima2-gen local generation server",
+        "After=network.target",
+        "",
+        "[Service]",
+        `ExecStart=${input.nodePath} ${input.serverJs}`,
+        `WorkingDirectory=${input.rootDir}`,
+        "Restart=always",
+        "RestartSec=2",
+        "Environment=IMA2_SERVICE=1",
+        `Environment=PATH=${input.pathEnv}`,
+    ];
+    if (input.configDir)
+        lines.push(`Environment=IMA2_CONFIG_DIR=${input.configDir}`);
+    lines.push("", "[Install]", "WantedBy=default.target", "");
+    return lines.join("\n");
+}
+/**
+ * launchctl's trap: `load` can exit 0 while writing "Load failed: ..." to
+ * stderr (opencodex hit this in production). Treat that stderr shape as a
+ * failure regardless of exit status.
+ */
+export function launchctlOutputIndicatesFailure(stderr) {
+    const s = (stderr || "").toLowerCase();
+    return s.includes("load failed") || s.includes("bootstrap failed") || s.includes("input/output error");
+}
+/** Paths drifted (nvm/prefix/config-dir move) since install? repair re-renders. */
+export function serviceStateStale(state, current) {
+    const issues = [];
+    if (state.nodePath !== current.nodePath)
+        issues.push(`node moved: ${state.nodePath} -> ${current.nodePath}`);
+    if (state.serverJs !== current.serverJs)
+        issues.push(`server.js moved: ${state.serverJs} -> ${current.serverJs}`);
+    if (current.configDir !== undefined && state.configDir !== current.configDir) {
+        issues.push(`config dir moved: ${state.configDir} -> ${current.configDir}`);
+    }
+    return issues;
+}

package/docs/API.md

@@ -31,6 +31,7 @@ Generation section below for the full endpoint specification.
 | Method | Path | Notes |
 |---|---|---|
 | `GET` | `/api/health` | Server health, version, paths, provider policy |
+| `POST` | `/api/admin/stop` | Clean shutdown (local admin only): requires the boot-generated `X-Ima2-Admin-Nonce` from `~/.ima2/server.json`; any request with an `Origin` header is refused (browser drive-by protection). Responds `202` then self-signals SIGTERM |
 | `GET` | `/api/providers` | Provider availability and runtime ports |
 | `GET` | `/api/oauth/status` | OAuth proxy status and visible models |
 | `GET` | `/api/grok/status` | Bundled progrok status and visible xAI image models |

package/docs/migration/runtime-test-inventory.md

@@ -4,7 +4,7 @@ Generated by `npm run test:inventory` (script: `scripts/classify-tests.mjs`).
 
 _Tests considered "runtime-importing" if they import from `../lib/`, `../routes/`, `../bin/`, `../server`, or `../config`._
 
-Total: 376 (runtime: 172, contract: 204)
+Total: 378 (runtime: 174, contract: 204)
 
 ## Runtime-importing tests
 - `tests/agent-mode-auto-planner-contract.test.ts`
@@ -146,6 +146,7 @@ Total: 376 (runtime: 172, contract: 204)
 - `tests/serve-singleton-contract.test.ts`
 - `tests/serve-ui-build-contract.test.ts`
 - `tests/server-code-preservation.test.ts`
+- `tests/service-command-contract.test.ts`
 - `tests/skill-video-claims-contract.test.ts`
 - `tests/sprite-anchor-policy.test.ts`
 - `tests/sprite-atlas-compose.test.ts`
@@ -157,6 +158,7 @@ Total: 376 (runtime: 172, contract: 204)
 - `tests/sprite-recipe-routes.test.ts`
 - `tests/sprite-recipe-store.test.ts`
 - `tests/star-prompt.test.ts`
+- `tests/stop-command-contract.test.ts`
 - `tests/storage-migration.test.ts`
 - `tests/structured-filename-pipelines.test.ts`
 - `tests/style-sheet.test.ts`

package/lib/processControl.js

@@ -0,0 +1,138 @@
+/**
+ * Process-control helpers for `ima2 stop` (and service stop paths).
+ *
+ * Doctrine (adversarial audit 260821c): never kill a pid the advertise file
+ * merely CLAIMS — verify identity against the live /api/health response first,
+ * because pids get recycled. Graceful (admin API) before signals, SIGTERM
+ * before SIGKILL, and a stale advertise file is cleaned, not trusted.
+ */
+import { execFileSync } from "node:child_process";
+export function isProcessAlive(pid) {
+    try {
+        process.kill(pid, 0);
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+/** Poll until the pid exits or the timeout lapses. CLI context: async is fine. */
+export async function waitForExit(pid, timeoutMs) {
+    const deadline = Date.now() + timeoutMs;
+    while (Date.now() < deadline) {
+        if (!isProcessAlive(pid))
+            return true;
+        await new Promise((r) => setTimeout(r, 50));
+    }
+    return !isProcessAlive(pid);
+}
+/**
+ * Secondary identity signal for when the HTTP check is unreachable: compare
+ * the LIVE process start time against the advertised startedAt. A recycled
+ * pid belongs to a process started well after our server did; a hung-but-ours
+ * server started (approximately) when the advertise file says. Returns
+ * "corroborated" only when the start times agree within tolerance; "recycled"
+ * when the live process is provably younger than the advertised boot;
+ * "unknown" when ps output cannot be read — callers must REFUSE to kill on
+ * "unknown"/"recycled" (audit blocker: never guess).
+ */
+export function corroborateByStartTime(pid, advertisedStartedAt, runPs = defaultPs) {
+    if (!advertisedStartedAt || !Number.isFinite(advertisedStartedAt))
+        return "unknown";
+    if (process.platform === "win32")
+        return "unknown";
+    const lstart = runPs(pid);
+    if (!lstart)
+        return "unknown";
+    const started = Date.parse(lstart);
+    if (!Number.isFinite(started))
+        return "unknown";
+    // advertise happens moments after process start; allow generous skew.
+    const TOLERANCE_MS = 120_000;
+    if (Math.abs(started - advertisedStartedAt) <= TOLERANCE_MS)
+        return "corroborated";
+    return started > advertisedStartedAt + TOLERANCE_MS ? "recycled" : "unknown";
+}
+function defaultPs(pid) {
+    try {
+        const out = execFileSync("ps", ["-p", String(pid), "-o", "lstart="], { encoding: "utf8" });
+        const line = out.trim();
+        return line.length > 0 ? line : null;
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * Does the server answering on entry.url/port actually carry entry.pid?
+ * "mismatch" means someone else answers there (or the pid was recycled):
+ * killing entry.pid would hit an innocent process.
+ */
+export async function verifyServerIdentity(entry, fetchFn = fetch) {
+    const base = (entry.url ?? (entry.port ? `http://127.0.0.1:${entry.port}` : null))?.toString().replace(/\/$/, "");
+    if (!base || !entry.pid)
+        return "unreachable";
+    try {
+        const controller = new AbortController();
+        const timer = setTimeout(() => controller.abort(), 1500);
+        const r = await fetchFn(`${base}/api/health`, {
+            signal: controller.signal,
+            headers: { connection: "close" },
+        });
+        clearTimeout(timer);
+        if (!r.ok)
+            return "unreachable";
+        const health = (await r.json());
+        return health.pid === entry.pid ? "match" : "mismatch";
+    }
+    catch {
+        return "unreachable";
+    }
+}
+/**
+ * Ask the server to stop itself via the admin API. Requires the nonce from the
+ * advertise file. Note: bin/lib/client.ts carries no LAN token, so on a
+ * token-guarded non-loopback bind this degrades (401) to the signal path —
+ * that is intended behavior, not an accident.
+ */
+export async function gracefulStop(entry, fetchFn = fetch) {
+    const base = (entry.url ?? (entry.port ? `http://127.0.0.1:${entry.port}` : null))?.toString().replace(/\/$/, "");
+    if (!base || !entry.adminNonce)
+        return false;
+    try {
+        const controller = new AbortController();
+        const timer = setTimeout(() => controller.abort(), 2500);
+        const r = await fetchFn(`${base}/api/admin/stop`, {
+            method: "POST",
+            signal: controller.signal,
+            headers: { "x-ima2-admin-nonce": entry.adminNonce, connection: "close" },
+        });
+        clearTimeout(timer);
+        return r.status === 202;
+    }
+    catch {
+        return false;
+    }
+}
+/** SIGTERM → wait → SIGKILL → wait. Only ever called on an identity-verified pid. */
+export async function escalateKill(pid, waits = {}) {
+    if (!isProcessAlive(pid))
+        return "already-dead";
+    try {
+        process.kill(pid, "SIGTERM");
+    }
+    catch {
+        return isProcessAlive(pid) ? "failed" : "already-dead";
+    }
+    if (await waitForExit(pid, waits.termMs ?? 5000))
+        return "term";
+    try {
+        process.kill(pid, "SIGKILL");
+    }
+    catch {
+        return isProcessAlive(pid) ? "failed" : "term";
+    }
+    if (await waitForExit(pid, waits.killMs ?? 2000))
+        return "kill";
+    return "failed";
+}

package/lib/runtimeContext.js

@@ -120,6 +120,7 @@ export function createTestRuntimeContext(over = {}) {
     const base = {
         apiKey: undefined,
         apiKeySource: undefined,
+        adminNonce: "",
         config: {},
         grokActualPort: undefined,
         grokPort: 18645,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ima2-gen",
-  "version": "3.9.0",
+  "version": "3.10.0",
   "packageManager": "npm@11.18.0",
   "description": "Local-first visual generation runtime and studio for people and coding agents, with reproducible image and video workflows across multiple providers.",
   "type": "module",
@@ -119,5 +119,5 @@
     "tsx": "^4.23.12",
     "typescript": "^5.9.3"
   },
-  "gitHead": "3883482f57e132376dd7cd078a3f1e11791e94c0"
+  "gitHead": "b7369f8a4c042249dcaa282270421d0faa7ed4fe"
 }

package/routes/admin.js

@@ -0,0 +1,51 @@
+import { timingSafeEqual } from "node:crypto";
+import { requireRuntimeContext } from "../lib/runtimeContext.js";
+import { logEvent } from "../lib/logger.js";
+/**
+ * Local admin surface. POST /api/admin/stop shuts the server down cleanly.
+ *
+ * Threat model: the LAN guard is a pass-through on loopback binds, so without
+ * extra auth ANY web page could fire a cross-origin
+ * fetch("http://127.0.0.1:3333/api/admin/stop") and kill the server — a
+ * remote-triggerable kill switch (adversarial audit 260821c, blocker 1).
+ * Two independent gates close that hole:
+ *
+ * 1. The caller must present the boot-generated admin nonce, which is
+ *    published only in the advertise file (~/.ima2/server.json). Reading that
+ *    file requires local filesystem access, which a web page does not have.
+ * 2. Any request carrying an Origin header is refused outright. Browser-issued
+ *    cross-origin fetches always carry Origin; the ima2 CLI never does.
+ *
+ * Shutdown itself is a self-signal: the SIGTERM handler installed by
+ * onShutdown() owns the ONLY complete teardown (unadvertise, proxy children,
+ * agent queue, timers, DB close, exit) and its shutdownStarted latch makes the
+ * signal idempotent. Calling shutdownServerAndMcp() directly here would strand
+ * proxy children and leave a stale advertise file (audit blocker 2).
+ */
+export function registerAdminRoutes(app, ctxRaw) {
+    const ctx = requireRuntimeContext(ctxRaw);
+    app.post("/api/admin/stop", (req, res) => {
+        if (typeof req.headers.origin === "string" && req.headers.origin.length > 0) {
+            return res.status(403).json({ error: "admin stop is not callable from a browser context" });
+        }
+        const nonce = req.headers["x-ima2-admin-nonce"];
+        const expected = Buffer.from(ctx.adminNonce);
+        const presented = typeof nonce === "string" ? Buffer.from(nonce) : Buffer.alloc(0);
+        const valid = expected.length > 0 &&
+            presented.length === expected.length &&
+            timingSafeEqual(presented, expected);
+        if (!valid) {
+            return res.status(401).json({ error: "missing or invalid admin nonce" });
+        }
+        logEvent("admin", "stop_requested", { pid: process.pid });
+        res.status(202).json({ ok: true, pid: process.pid, stopping: true });
+        setImmediate(() => {
+            try {
+                process.kill(process.pid, "SIGTERM");
+            }
+            catch {
+                process.exit(0);
+            }
+        });
+    });
+}

package/routes/edit.js

@@ -18,6 +18,8 @@ import { startJob, finishJob, registerJobAbortController, isJobCanceled, isStart
 import { isGenerationCanceledError, makeGenerationCanceledError, throwIfJobCanceled, } from "../lib/generationCancel.js";
 import { logEvent, logError } from "../lib/logger.js";
 import { hasPngAlphaChannel, parsePngInfo } from "../lib/pngInfo.js";
+import { verifyBufferAlpha } from "../lib/imageBackgroundParam.js";
+import { decodeRawForAlpha } from "../lib/alphaDecode.js";
 import { invalidateHistoryIndex } from "../lib/historyIndex.js";
 import { errInfo } from "../lib/errInfo.js";
 import { requireRuntimeContext } from "../lib/runtimeContext.js";
@@ -287,6 +289,21 @@ export function registerEditRoutes(app, ctxRaw) {
             const editExt = activeProvider === "grok" || activeProvider === "agy" || activeProvider === "grok-api" || activeProvider === "gemini-api" || activeProvider === "atlascloud" || activeProvider === "minimax" ? imageFormatFromMime(editMime) : "png";
             const editBuffer = Buffer.from(resultB64, "base64");
             const createdAt = Date.now();
+            // Semantic alpha verification: at least one pixel with alpha < 255.
+            // Never trust provider mime for transparency claims (same doctrine as
+            // the generate path); a failed decode reports alphaVerified: false.
+            let alphaVerified = false;
+            let alphaReason = null;
+            try {
+                const verdict = (await verifyBufferAlpha(editBuffer, decodeRawForAlpha));
+                alphaVerified = verdict.hasAlpha === true;
+                if (!alphaVerified)
+                    alphaReason = verdict.reason ?? "undetectable";
+            }
+            catch {
+                alphaVerified = false;
+                alphaReason = "undetectable";
+            }
             const filename = await writeFileUnique(ctx.config.storage.generatedDir, buildFilename({
                 model: (activeProvider === "grok" || activeProvider === "grok-api") ? resolveGrokQualityModel(imageModel, quality) : (imageModel || activeProvider),
                 size: effectiveSize,
@@ -312,6 +329,8 @@ export function registerEditRoutes(app, ctxRaw) {
                 kind: "edit",
                 requestId,
                 createdAt,
+                alphaVerified,
+                alphaReason,
                 usage: usage || null,
                 webSearchCalls,
                 webSearchEnabled,
@@ -332,6 +351,8 @@ export function registerEditRoutes(app, ctxRaw) {
                 elapsed,
                 reasoningEffort,
                 filename,
+                alphaVerified,
+                alphaReason,
                 usage,
                 provider: activeProvider,
                 model: activeProvider === "grok" ? resolveGrokQualityModel(imageModel, quality) : imageModel,

package/routes/index.js

@@ -2,6 +2,7 @@ import { registerCapabilitiesRoutes } from "./capabilities.js";
 import { registerModelsRoutes } from "./models.js";
 import { registerEventsRoute } from "./events.js";
 import { registerHealthRoutes } from "./health.js";
+import { registerAdminRoutes } from "./admin.js";
 import { registerHistoryRoutes } from "./history.js";
 import { registerAssetsRoutes } from "./assets.js";
 import { registerSpriteRecipeRoutes } from "./spriteRecipes.js";
@@ -45,6 +46,7 @@ export function configureRoutes(app, ctxRaw) {
     const ctx = requireRuntimeContext(ctxRaw);
     registerEventsRoute(app, ctx);
     registerHealthRoutes(app, ctx);
+    registerAdminRoutes(app, ctx);
     registerCapabilitiesRoutes(app, ctx);
     registerStorageRoutes(app, ctx);
     registerMetadataRoutes(app, ctx);

package/server.js

@@ -1,7 +1,8 @@
 import "dotenv/config";
 import express from "express";
+import { randomUUID } from "node:crypto";
 import { readFile } from "fs/promises";
-import { existsSync, writeFileSync, unlinkSync, mkdirSync, readFileSync as fsReadFileSync, } from "fs";
+import { existsSync, writeFileSync, unlinkSync, chmodSync, mkdirSync, readFileSync as fsReadFileSync, } from "fs";
 import { dirname, join } from "path";
 import { fileURLToPath, pathToFileURL } from "url";
 import { onShutdown } from "./bin/lib/platform.js";
@@ -296,6 +297,7 @@ export function buildAdvertisePayload(ctx) {
         pid: process.pid,
         startedAt: ctx.startedAt,
         version: ctx.packageVersion,
+        adminNonce: ctx.adminNonce,
         backend: {
             configuredPort: Number(ctx.serverConfiguredPort || ctx.config.server.port),
             actualPort: Number(ctx.serverActualPort || ctx.config.server.port),
@@ -321,8 +323,14 @@ function advertise(ctx) {
     if (!ctx.serverActualPort)
         return;
     try {
-        mkdirSync(dirname(ctx.config.storage.advertiseFile), { recursive: true });
-        writeFileSync(ctx.config.storage.advertiseFile, JSON.stringify(buildAdvertisePayload(ctx)));
+        // The payload carries the admin nonce (a kill-switch credential): the file
+        // must be owner-only, or any local user on a shared host can stop the
+        // server (adversarial review 260821c, blocker 3).
+        mkdirSync(dirname(ctx.config.storage.advertiseFile), { recursive: true, mode: 0o700 });
+        writeFileSync(ctx.config.storage.advertiseFile, JSON.stringify(buildAdvertisePayload(ctx)), { mode: 0o600 });
+        // mode applies only at creation: a crash-survivor file from an older build
+        // keeps its old permissions, so re-assert them on every publish.
+        chmodSync(ctx.config.storage.advertiseFile, 0o600);
     }
     catch (e) {
         const err = errInfo(e);
@@ -379,6 +387,7 @@ export async function createRuntimeContext(overrides = {}) {
         openai,
         startedAt: overrides.startedAt ?? Date.now(),
         packageVersion: overrides.packageVersion ?? readPackageVersion(),
+        adminNonce: randomUUID(),
         xaiApiKey: loadedXaiKey.apiKey ?? undefined,
         xaiApiKeySource: loadedXaiKey.apiKeySource,
         hasXaiApiKey: !!loadedXaiKey.apiKey,

package/ui/dist/.vite/manifest.json

@@ -1,11 +1,11 @@
 {
-  "_AssetGenWorkspace-CqXyN9at.js": {
-    "file": "assets/AssetGenWorkspace-CqXyN9at.js",
+  "_AssetGenWorkspace-Bhi2OrfW.js": {
+    "file": "assets/AssetGenWorkspace-Bhi2OrfW.js",
     "name": "AssetGenWorkspace",
     "isDynamicEntry": true,
     "imports": [
       "index.html",
-      "_KeyingPanel-Bv0n_bhk.js"
+      "_KeyingPanel-D7iozqcS.js"
     ],
     "dynamicImports": [
       "src/components/assetgen/SpriteRecipeWorkspace.tsx"
@@ -18,12 +18,12 @@
     "file": "assets/AssetGenWorkspace-Dkr80l12.css",
     "src": "_AssetGenWorkspace-Dkr80l12.css"
   },
-  "_KeyingPanel-Bv0n_bhk.js": {
-    "file": "assets/KeyingPanel-Bv0n_bhk.js",
+  "_KeyingPanel-D7iozqcS.js": {
+    "file": "assets/KeyingPanel-D7iozqcS.js",
     "name": "KeyingPanel",
     "imports": [
       "index.html",
-      "_useAgentDialogFocus-R64NV-ZZ.js"
+      "_useAgentDialogFocus-CqjQmoEH.js"
     ]
   },
   "__vite-browser-external": {
@@ -32,15 +32,15 @@
     "src": "__vite-browser-external",
     "isDynamicEntry": true
   },
-  "_useAgentDialogFocus-R64NV-ZZ.js": {
-    "file": "assets/useAgentDialogFocus-R64NV-ZZ.js",
+  "_useAgentDialogFocus-CqjQmoEH.js": {
+    "file": "assets/useAgentDialogFocus-CqjQmoEH.js",
     "name": "useAgentDialogFocus",
     "imports": [
       "index.html"
     ]
   },
   "index.html": {
-    "file": "assets/index-CxEuSZMC.js",
+    "file": "assets/index-CVVv0v-b.js",
     "name": "index",
     "src": "index.html",
     "isEntry": true,
@@ -55,16 +55,16 @@
       "src/components/card-news/CardNewsWorkspace.tsx",
       "src/components/agent/AgentWorkspace.tsx",
       "src/components/assets/AssetsWorkspace.tsx",
-      "_AssetGenWorkspace-CqXyN9at.js",
+      "_AssetGenWorkspace-Bhi2OrfW.js",
       "src/components/home/HomeWorkspace.tsx",
       "src/components/PromptLibraryPanel.tsx"
     ],
     "css": [
-      "assets/index-C0nfanMr.css"
+      "assets/index-C4IY6hxw.css"
     ]
   },
   "node_modules/pptxgenjs/dist/pptxgen.es.js": {
-    "file": "assets/pptxgen.es-BE4CSd5F.js",
+    "file": "assets/pptxgen.es-DIQkG3ve.js",
     "name": "pptxgen.es",
     "src": "node_modules/pptxgenjs/dist/pptxgen.es.js",
     "isDynamicEntry": true,
@@ -78,7 +78,7 @@
     ]
   },
   "src/components/GenerationRequestLogPanel.tsx": {
-    "file": "assets/GenerationRequestLogPanel-B68EUfUg.js",
+    "file": "assets/GenerationRequestLogPanel-sr-wSiOe.js",
     "name": "GenerationRequestLogPanel",
     "src": "src/components/GenerationRequestLogPanel.tsx",
     "isDynamicEntry": true,
@@ -87,7 +87,7 @@
     ]
   },
   "src/components/NodeCanvas.tsx": {
-    "file": "assets/NodeCanvas-VwdctvAW.js",
+    "file": "assets/NodeCanvas-Bu6q2z3V.js",
     "name": "NodeCanvas",
     "src": "src/components/NodeCanvas.tsx",
     "isDynamicEntry": true,
@@ -99,7 +99,7 @@
     ]
   },
   "src/components/PromptImportDialog.tsx": {
-    "file": "assets/PromptImportDialog-D4QYbRfH.js",
+    "file": "assets/PromptImportDialog-CZwFZDvz.js",
     "name": "PromptImportDialog",
     "src": "src/components/PromptImportDialog.tsx",
     "isDynamicEntry": true,
@@ -112,7 +112,7 @@
     ]
   },
   "src/components/PromptImportDiscoverySection.tsx": {
-    "file": "assets/PromptImportDiscoverySection-Bx7BeTFh.js",
+    "file": "assets/PromptImportDiscoverySection-B5Lyhl9X.js",
     "name": "PromptImportDiscoverySection",
     "src": "src/components/PromptImportDiscoverySection.tsx",
     "isDynamicEntry": true,
@@ -121,7 +121,7 @@
     ]
   },
   "src/components/PromptImportFolderSection.tsx": {
-    "file": "assets/PromptImportFolderSection-Bwf60URx.js",
+    "file": "assets/PromptImportFolderSection-DmMFtYmn.js",
     "name": "PromptImportFolderSection",
     "src": "src/components/PromptImportFolderSection.tsx",
     "isDynamicEntry": true,
@@ -130,7 +130,7 @@
     ]
   },
   "src/components/PromptLibraryPanel.tsx": {
-    "file": "assets/PromptLibraryPanel-mNG2wZkQ.js",
+    "file": "assets/PromptLibraryPanel-BHr73ns_.js",
     "name": "PromptLibraryPanel",
     "src": "src/components/PromptLibraryPanel.tsx",
     "isDynamicEntry": true,
@@ -142,7 +142,7 @@
     ]
   },
   "src/components/SettingsWorkspace.tsx": {
-    "file": "assets/SettingsWorkspace-DA5tIa0Q.js",
+    "file": "assets/SettingsWorkspace-DrQ44R-B.js",
     "name": "SettingsWorkspace",
     "src": "src/components/SettingsWorkspace.tsx",
     "isDynamicEntry": true,
@@ -151,43 +151,43 @@
     ]
   },
   "src/components/agent/AgentWorkspace.tsx": {
-    "file": "assets/AgentWorkspace-fcIXiWV6.js",
+    "file": "assets/AgentWorkspace-DAOw-Q1x.js",
     "name": "AgentWorkspace",
     "src": "src/components/agent/AgentWorkspace.tsx",
     "isDynamicEntry": true,
     "imports": [
       "index.html",
-      "_useAgentDialogFocus-R64NV-ZZ.js"
+      "_useAgentDialogFocus-CqjQmoEH.js"
     ]
   },
   "src/components/assetgen/SpriteRecipeWorkspace.tsx": {
-    "file": "assets/SpriteRecipeWorkspace-Da9qTQX0.js",
+    "file": "assets/SpriteRecipeWorkspace-ChboDVCj.js",
     "name": "SpriteRecipeWorkspace",
     "src": "src/components/assetgen/SpriteRecipeWorkspace.tsx",
     "isDynamicEntry": true,
     "imports": [
       "index.html",
-      "_AssetGenWorkspace-CqXyN9at.js",
-      "_KeyingPanel-Bv0n_bhk.js",
-      "_useAgentDialogFocus-R64NV-ZZ.js"
+      "_AssetGenWorkspace-Bhi2OrfW.js",
+      "_KeyingPanel-D7iozqcS.js",
+      "_useAgentDialogFocus-CqjQmoEH.js"
     ]
   },
   "src/components/assets/AssetsWorkspace.tsx": {
-    "file": "assets/AssetsWorkspace-xwHFVOb7.js",
+    "file": "assets/AssetsWorkspace-D-pcyPvz.js",
     "name": "AssetsWorkspace",
     "src": "src/components/assets/AssetsWorkspace.tsx",
     "isDynamicEntry": true,
     "imports": [
       "index.html",
-      "_KeyingPanel-Bv0n_bhk.js",
-      "_useAgentDialogFocus-R64NV-ZZ.js"
+      "_KeyingPanel-D7iozqcS.js",
+      "_useAgentDialogFocus-CqjQmoEH.js"
     ],
     "css": [
       "assets/AssetsWorkspace-BkUjPPKU.css"
     ]
   },
   "src/components/canvas-mode/index.ts": {
-    "file": "assets/index-Bv1Yrz8W.js",
+    "file": "assets/index-D1SD3LcV.js",
     "name": "index",
     "src": "src/components/canvas-mode/index.ts",
     "isDynamicEntry": true,
@@ -199,7 +199,7 @@
     ]
   },
   "src/components/card-news/CardNewsWorkspace.tsx": {
-    "file": "assets/CardNewsWorkspace-ltdjG40R.js",
+    "file": "assets/CardNewsWorkspace-BETskmU7.js",
     "name": "CardNewsWorkspace",
     "src": "src/components/card-news/CardNewsWorkspace.tsx",
     "isDynamicEntry": true,
@@ -208,7 +208,7 @@
     ]
   },
   "src/components/home/HomeWorkspace.tsx": {
-    "file": "assets/HomeWorkspace-BBOG_aNm.js",
+    "file": "assets/HomeWorkspace-vjN-A1AR.js",
     "name": "HomeWorkspace",
     "src": "src/components/home/HomeWorkspace.tsx",
     "isDynamicEntry": true,
@@ -217,7 +217,7 @@
     ]
   },
   "src/components/prompt-builder/PromptBuilderPanel.tsx": {
-    "file": "assets/PromptBuilderPanel-BBMpF_3Q.js",
+    "file": "assets/PromptBuilderPanel-DklSQCS_.js",
     "name": "PromptBuilderPanel",
     "src": "src/components/prompt-builder/PromptBuilderPanel.tsx",
     "isDynamicEntry": true,