nudge-ui 0.2.4 → 0.2.6

package/dist/nudge-ui.mjs

@@ -3750,8 +3750,8 @@ var require_source_map = __commonJS({
 var require_previous_map = __commonJS({
   "../../node_modules/.pnpm/postcss@8.5.26/node_modules/postcss/lib/previous-map.js"(exports, module) {
     "use strict";
-    var { existsSync: existsSync4, readFileSync: readFileSync2, realpathSync: realpathSync3 } = __require("fs");
-    var { dirname: dirname5, isAbsolute: isAbsolute5, join: join7, relative: relative5, sep: sep4 } = __require("path");
+    var { existsSync: existsSync3, readFileSync: readFileSync3, realpathSync: realpathSync3 } = __require("fs");
+    var { dirname: dirname4, isAbsolute: isAbsolute5, join: join7, relative: relative5, sep: sep4 } = __require("path");
     var { SourceMapConsumer, SourceMapGenerator } = require_source_map();
     function realPath(path) {
       try {
@@ -3778,7 +3778,7 @@ var require_previous_map = __commonJS({
         if (!this.mapFile && opts.from) {
           this.mapFile = opts.from;
         }
-        if (this.mapFile) this.root = dirname5(this.mapFile);
+        if (this.mapFile) this.root = dirname4(this.mapFile);
         if (text) this.text = text;
       }
       consumer() {
@@ -3824,15 +3824,15 @@ var require_previous_map = __commonJS({
         if (!trusted && !this.unsafeMap) {
           if (!/\.map$/i.test(path)) return void 0;
           if (!cssFile) return void 0;
-          let rel = relative5(realPath(dirname5(cssFile)), realPath(path));
+          let rel = relative5(realPath(dirname4(cssFile)), realPath(path));
           if (rel === ".." || rel.startsWith(".." + sep4) || isAbsolute5(rel)) {
             return void 0;
           }
         }
-        this.root = dirname5(path);
-        if (existsSync4(path)) {
+        this.root = dirname4(path);
+        if (existsSync3(path)) {
           this.mapFile = path;
-          return readFileSync2(path, "utf-8").toString().trim();
+          return readFileSync3(path, "utf-8").toString().trim();
         }
       }
       loadMap(file, prev) {
@@ -3866,7 +3866,7 @@ var require_previous_map = __commonJS({
           return this.decodeInline(this.annotation);
         } else if (this.annotation) {
           let map = this.annotation;
-          if (file) map = join7(dirname5(file), map);
+          if (file) map = join7(dirname4(file), map);
           let unknown = this.loadFile(map, file, false);
           if (unknown) {
             try {
@@ -4369,12 +4369,12 @@ var require_fromJSON = __commonJS({
 var require_map_generator = __commonJS({
   "../../node_modules/.pnpm/postcss@8.5.26/node_modules/postcss/lib/map-generator.js"(exports, module) {
     "use strict";
-    var { dirname: dirname5, relative: relative5, resolve: resolve5, sep: sep4 } = __require("path");
+    var { dirname: dirname4, relative: relative5, resolve: resolve5, sep: sep4 } = __require("path");
     var { SourceMapConsumer, SourceMapGenerator } = require_source_map();
     var { pathToFileURL: pathToFileURL2 } = __require("url");
     var Input2 = require_input();
     var sourceMapAvailable = Boolean(SourceMapConsumer && SourceMapGenerator);
-    var pathAvailable = Boolean(dirname5 && resolve5 && relative5 && sep4);
+    var pathAvailable = Boolean(dirname4 && resolve5 && relative5 && sep4);
     var MapGenerator = class {
       constructor(stringify2, root2, opts, cssString) {
         this.stringify = stringify2;
@@ -4406,7 +4406,7 @@ var require_map_generator = __commonJS({
       applyPrevMaps() {
         for (let prev of this.previous()) {
           let from = this.toUrl(this.path(prev.file));
-          let root2 = prev.root || dirname5(prev.file);
+          let root2 = prev.root || dirname4(prev.file);
           let map;
           if (this.mapOpts.sourcesContent === false) {
             map = new SourceMapConsumer(prev.text);
@@ -4601,9 +4601,9 @@ var require_map_generator = __commonJS({
         if (/^\w+:\/\//.test(file)) return file;
         let cached = this.memoizedPaths.get(file);
         if (cached) return cached;
-        let from = this.opts.to ? dirname5(this.opts.to) : ".";
+        let from = this.opts.to ? dirname4(this.opts.to) : ".";
         if (typeof this.mapOpts.annotation === "string") {
-          from = dirname5(resolve5(from, this.mapOpts.annotation));
+          from = dirname4(resolve5(from, this.mapOpts.annotation));
         }
         let path = relative5(from, file);
         this.memoizedPaths.set(file, path);
@@ -6152,11 +6152,58 @@ import { resolve as resolve4 } from "node:path";
 
 // src/cli/agentCommand.ts
 import { spawnSync } from "node:child_process";
-import { existsSync } from "node:fs";
+
+// src/project/mcpPackage.ts
+import { existsSync, readFileSync } from "node:fs";
 import { createRequire } from "node:module";
-import { dirname, join } from "node:path";
+import { dirname, join, parse } from "node:path";
+var MCP_PACKAGE = "@nudge-ui/mcp";
+var MCP_BIN = "nudge-mcp";
+function findProjectMcpRoot(appRoot) {
+  let directory2 = appRoot;
+  const { root: root2 } = parse(directory2);
+  for (; ; ) {
+    const candidate = join(directory2, "node_modules", "@nudge-ui", "mcp");
+    if (existsSync(join(candidate, "package.json"))) return candidate;
+    if (directory2 === root2) break;
+    directory2 = dirname(directory2);
+  }
+  if (!isPnpRuntime()) return null;
+  try {
+    return packageRootOf(createRequire(join(appRoot, "package.json")).resolve(MCP_PACKAGE));
+  } catch {
+    return null;
+  }
+}
+function projectMcpCliEntry(mcpRoot) {
+  const bin = readManifest(join(mcpRoot, "package.json"))?.bin;
+  const entry = typeof bin === "string" ? bin : isRecord(bin) ? bin[MCP_BIN] : void 0;
+  return typeof entry === "string" ? join(mcpRoot, entry) : null;
+}
+function packageRootOf(entry) {
+  for (let directory2 = dirname(entry); ; directory2 = dirname(directory2)) {
+    const manifest = join(directory2, "package.json");
+    if (existsSync(manifest) && readManifest(manifest)?.name === MCP_PACKAGE) return directory2;
+    if (dirname(directory2) === directory2) return null;
+  }
+}
+function readManifest(path) {
+  try {
+    const parsed = JSON.parse(readFileSync(path, "utf8"));
+    return isRecord(parsed) ? parsed : null;
+  } catch {
+    return null;
+  }
+}
+function isRecord(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function isPnpRuntime() {
+  return "pnp" in process.versions && typeof process.versions.pnp === "string";
+}
+
+// src/cli/agentCommand.ts
 function planAgentCommand(args, projectRoot, packageVersion) {
-  const projectRequire = createRequire(join(projectRoot, "package.json"));
   if (args[0] === "setup") {
     if (!packageVersion || !/^\d+\.\d+\.\d+(?:-[0-9A-Za-z.-]+)?(?:\+[0-9A-Za-z.-]+)?$/.test(packageVersion)) {
       throw new Error("Run agent setup through the installed nudge-ui executable.");
@@ -6167,13 +6214,9 @@ function planAgentCommand(args, projectRoot, packageVersion) {
     };
   }
   if (args[0] === "doctor") {
-    let entry;
-    try {
-      const packageEntry = projectRequire.resolve(findLocalMcp(projectRoot, projectRequire));
-      entry = join(dirname(packageEntry), "cli.mjs");
-    } catch {
-      throw new Error("Nudge agent integration is not installed. Run nudge-ui agent setup.");
-    }
+    const mcpRoot = findProjectMcpRoot(projectRoot);
+    const entry = mcpRoot === null ? null : projectMcpCliEntry(mcpRoot);
+    if (entry === null) throw new Error("Nudge agent integration is not installed. Run nudge-ui agent setup.");
     return {
       executable: process.execPath,
       args: [entry, "doctor", "--workspace-root", projectRoot, ...args.slice(1)]
@@ -6181,20 +6224,6 @@ function planAgentCommand(args, projectRoot, packageVersion) {
   }
   throw new Error("Usage: nudge-ui agent <setup|doctor> [options]");
 }
-function findLocalMcp(projectRoot, projectRequire) {
-  let directory2 = projectRoot;
-  while (true) {
-    const candidate = join(directory2, "node_modules", "@nudge-ui", "mcp");
-    if (existsSync(join(candidate, "package.json"))) return candidate;
-    const parent = dirname(directory2);
-    if (parent === directory2) break;
-    directory2 = parent;
-  }
-  if (process.versions.pnp) {
-    return projectRequire.resolve("@nudge-ui/mcp");
-  }
-  throw new Error("MCP is not installed in this project.");
-}
 function runAgentCommand(args, packageVersion) {
   const command = planAgentCommand(args, process.cwd(), packageVersion);
   const result = spawnSync(command.executable, command.args, { cwd: process.cwd(), stdio: "inherit" });
@@ -6215,7 +6244,7 @@ function isHtmlArtifactRevision(value) {
 
 // src/project/artifacts.ts
 import { createHash } from "node:crypto";
-import { readFileSync, renameSync, writeFileSync } from "node:fs";
+import { readFileSync as readFileSync2, renameSync, writeFileSync } from "node:fs";
 import { mkdir, readFile, realpath, rename, rm, writeFile } from "node:fs/promises";
 import { isAbsolute, join as join2, relative, sep } from "node:path";
 
@@ -6233,6 +6262,42 @@ function isReservedNudgeUiRoute(pathname) {
   return pathname === NUDGE_UI_ROUTE_PREFIX.slice(0, -1) || pathname.startsWith(NUDGE_UI_ROUTE_PREFIX);
 }
 
+// src/inspector/runtime/runtimeConfig.ts
+function cloneAndFreeze(value, seen = /* @__PURE__ */ new WeakMap()) {
+  if (value === null || typeof value !== "object") return value;
+  const source = value;
+  const existing = seen.get(source);
+  if (existing) return existing;
+  if (Object.isFrozen(value)) {
+    seen.set(source, value);
+    return value;
+  }
+  if (Array.isArray(value)) {
+    const copy2 = [];
+    seen.set(source, copy2);
+    for (const item of value) copy2.push(cloneAndFreeze(item, seen));
+    return Object.freeze(copy2);
+  }
+  const copy = {};
+  seen.set(source, copy);
+  for (const [key, child] of Object.entries(value)) {
+    copy[key] = cloneAndFreeze(child, seen);
+  }
+  return Object.freeze(copy);
+}
+var DEFAULT_RUNTIME_CONFIG = cloneAndFreeze({
+  projectId: "/stub/project",
+  host: "vite-react",
+  framework: "React",
+  stylingSystem: "CSS custom properties",
+  capabilities: { canvas: true, componentSemantics: true, domNavigation: false },
+  tokenCatalog: [],
+  tokens: [],
+  tokenDiagnostics: [],
+  tokenGeneration: "",
+  componentContracts: []
+});
+
 // src/transport/editor.ts
 function isNudgeUiEditorDocumentRequest(requestHref, method, headers) {
   const normalizedMethod = (method ?? "GET").toUpperCase();
@@ -6256,7 +6321,7 @@ function createNudgeUiEditorDocument() {
 <head>
   <meta charset="utf-8">
   <meta name="viewport" content="width=device-width, initial-scale=1">
-  <title>Nudge UI</title>
+  <title></title>
   <style>html,body,#${NUDGE_UI_MOUNT_ID}{width:100%;height:100%;margin:0}body{overflow:hidden}</style>
 </head>
 <body>
@@ -6269,6 +6334,20 @@ function createNudgeUiEditorDocument() {
 // src/transport/index.ts
 var NUDGE_UI_MANIFEST_VERSION = 1;
 
+// src/inspector/clientManifest.ts
+var NUDGE_UI_CLIENT_MANIFEST_VERSION = NUDGE_UI_MANIFEST_VERSION;
+function createNudgeUiClientManifest(input) {
+  return {
+    version: NUDGE_UI_CLIENT_MANIFEST_VERSION,
+    revision: input.revision ?? 0,
+    runtime: input.runtime,
+    ...input.agentBridge ? { agentBridge: input.agentBridge } : {},
+    ...input.document ? { document: input.document } : {},
+    ...input.reload ? { reload: input.reload } : {},
+    ...input.inspectAutomatedBrowsers ? { inspectAutomatedBrowsers: true } : {}
+  };
+}
+
 // src/hosts/environment.ts
 function readNudgeUiEnvironmentSwitch(env = process.env) {
   const value = env.NUDGE_UI?.trim().toLowerCase();
@@ -6282,17 +6361,14 @@ function automationManifestFields(env = process.env) {
 
 // src/hosts/static/manifest.ts
 function createStandaloneRuntimeManifest(projectId, tokenSnapshot = emptyTokenSnapshot(), revision2 = 0) {
-  return {
-    version: NUDGE_UI_MANIFEST_VERSION,
+  return createNudgeUiClientManifest({
     revision: revision2,
     runtime: {
       projectId,
       host: "static-html",
       framework: "HTML",
       stylingSystem: "CSS custom properties",
-      // Canvas shares the Vite host's controller/renderer runtime (ADR-0012):
-      // every served document carries the bootstrap, so card iframes boot as
-      // renderers without host-specific code.
+      // Canvas shares the Vite host's controller/renderer runtime (ADR-0012).
       capabilities: { canvas: true, componentSemantics: false, domNavigation: true },
       tokenCatalog: tokenSnapshot.tokenCatalog,
       tokens: tokenSnapshot.tokens,
@@ -6310,7 +6386,7 @@ function createStandaloneRuntimeManifest(projectId, tokenSnapshot = emptyTokenSn
       events: ["ready", "reload"]
     },
     ...automationManifestFields()
-  };
+  });
 }
 function emptyTokenSnapshot() {
   return {
@@ -14171,7 +14247,7 @@ var VOID_ELEMENTS = /* @__PURE__ */ new Set([
 ]);
 
 // ../../node_modules/.pnpm/parse5@7.3.0/node_modules/parse5/dist/index.js
-function parse(html, options) {
+function parse2(html, options) {
   return Parser.parse(html, options);
 }
 
@@ -14181,7 +14257,7 @@ var MOUNT_MARKER = "data-nudge-ui-mount";
 function injectStandaloneBootstrap(html, options = {}) {
   const clientPath = options.clientPath ?? NUDGE_UI_CLIENT_PATH;
   const manifestPath = options.manifestPath ?? NUDGE_UI_MANIFEST_PATH;
-  const document2 = parse(html, { sourceCodeLocationInfo: true });
+  const document2 = parse2(html, { sourceCodeLocationInfo: true });
   const sourceFacts = inspectSource(document2, clientPath);
   const nodes = [];
   if (!sourceFacts.hasMount) {
@@ -14291,6 +14367,9 @@ async function directory(root2, id) {
   }
   return join2(actual, id);
 }
+function isRecord2(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}
 async function body(request) {
   const chunks = [];
   let size = 0;
@@ -14301,7 +14380,9 @@ async function body(request) {
     chunks.push(data);
   }
   const text = Buffer.concat(chunks).toString("utf8");
-  return text.length === 0 ? {} : JSON.parse(text);
+  if (text.length === 0) return {};
+  const parsed = JSON.parse(text);
+  return isRecord2(parsed) ? parsed : null;
 }
 function respond(response, status, content, type = "text/plain; charset=utf-8") {
   response.writeHead(status, {
@@ -14338,7 +14419,7 @@ async function handleHtmlArtifactRequest(request, response, root2, transformHtml
   try {
     if (request.method === "POST" && parts.length === 0) {
       const input = await body(request);
-      if (!validArtifact(input)) {
+      if (!input || !validArtifact(input)) {
         respond(response, 400, "Invalid artifact");
         return true;
       }
@@ -14394,27 +14475,26 @@ async function handleHtmlArtifactRequest(request, response, root2, transformHtml
       }
       if (request.method === "PUT" && parts[1] === "document" || request.method === "POST" && parts[1] === "commit") {
         const input = await body(request);
-        if (!input || typeof input !== "object") {
+        if (!input) {
           respond(response, 400, "Invalid document");
           return true;
         }
-        const item = input;
-        if (!isHtmlArtifactRevision(item.expected)) {
+        if (!isHtmlArtifactRevision(input.expected)) {
           respond(response, 428, "An expected iteration revision is required");
           return true;
         }
-        if (item.html !== void 0 && typeof item.html !== "string" || request.method === "PUT" && typeof item.html !== "string") {
+        if (input.html !== void 0 && typeof input.html !== "string" || request.method === "PUT" && typeof input.html !== "string") {
           respond(response, 400, "Invalid document");
           return true;
         }
-        const expected = item.expected;
+        const expected = input.expected;
         if (!sameRevision(await readRevision(target), expected)) {
           respond(response, 409, HTML_ITERATION_CONFLICT);
           return true;
         }
-        const html = typeof item.html === "string" ? item.html : await readFile(join2(target, "document.html"), "utf8");
+        const html = typeof input.html === "string" ? input.html : await readFile(join2(target, "document.html"), "utf8");
         const writes = request.method === "POST" ? ["preview.html"] : [];
-        if (typeof item.html === "string") writes.push("document.html");
+        if (typeof input.html === "string") writes.push("document.html");
         const previewBefore = await readFile(join2(target, "preview.html"));
         const temporaryFiles = [];
         try {
@@ -14424,8 +14504,8 @@ async function handleHtmlArtifactRequest(request, response, root2, transformHtml
             await writeFile(temporary, html);
           }
           const latest = {
-            document: revision(readFileSync(join2(target, "document.html"))),
-            preview: revision(readFileSync(join2(target, "preview.html")))
+            document: revision(readFileSync2(join2(target, "document.html"))),
+            preview: revision(readFileSync2(join2(target, "preview.html")))
           };
           if (!sameRevision(latest, expected)) {
             respond(response, 409, HTML_ITERATION_CONFLICT);
@@ -14471,10 +14551,9 @@ async function handleHtmlArtifactRequest(request, response, root2, transformHtml
   return true;
 }
 function validArtifact(value) {
-  if (!value || typeof value !== "object") return false;
-  const item = value;
-  const viewport = item.viewport;
-  return typeof item.id === "string" && ID.test(item.id) && typeof item.sourceUrl === "string" && item.sourceUrl.length < 4096 && typeof item.title === "string" && item.title.length < 512 && typeof item.html === "string" && item.html.length > 0 && !!viewport && typeof viewport.width === "number" && typeof viewport.height === "number";
+  if (!isRecord2(value)) return false;
+  const viewport = value.viewport;
+  return typeof value.id === "string" && ID.test(value.id) && typeof value.sourceUrl === "string" && value.sourceUrl.length < 4096 && typeof value.title === "string" && value.title.length < 512 && typeof value.html === "string" && value.html.length > 0 && isRecord2(viewport) && typeof viewport.width === "number" && typeof viewport.height === "number";
 }
 
 // src/hosts/static/server.ts
@@ -14484,12 +14563,12 @@ import {
 } from "node:http";
 import {
   constants,
-  existsSync as existsSync3,
+  existsSync as existsSync2,
   realpathSync as realpathSync2,
   statSync as statSync2
 } from "node:fs";
 import { open, stat as stat2 } from "node:fs/promises";
-import { dirname as dirname4, extname as extname2, isAbsolute as isAbsolute4, join as join6, relative as relative4, resolve as resolve3 } from "node:path";
+import { dirname as dirname3, extname as extname2, isAbsolute as isAbsolute4, join as join6, relative as relative4, resolve as resolve3 } from "node:path";
 import { createRequire as createRequire3 } from "node:module";
 
 // src/html/dom.ts
@@ -14594,7 +14673,7 @@ function runIdentityPass(source, pass) {
     });
   };
   const parseErrors = [];
-  const document2 = parse(source, {
+  const document2 = parse2(source, {
     sourceCodeLocationInfo: true,
     onParseError: (error) => parseErrors.push(error)
   });
@@ -14679,9 +14758,8 @@ function instrumentSourceHtml(source, file) {
 }
 
 // src/hosts/projectBridge.ts
-import { existsSync as existsSync2 } from "node:fs";
 import { createRequire as createRequire2 } from "node:module";
-import { dirname as dirname2, join as join3, parse as parse2 } from "node:path";
+import { join as join3 } from "node:path";
 import { pathToFileURL } from "node:url";
 var runningBridges = /* @__PURE__ */ new Map();
 async function startOptionalProjectBridge(input) {
@@ -14698,7 +14776,7 @@ async function startOptionalProjectBridge(input) {
 async function launchOptionalProjectBridge(input, key) {
   let modulePath;
   try {
-    if (!isPnpRuntime() && !hasProjectInstalledMcp(input.appRoot)) {
+    if (findProjectMcpRoot(input.appRoot) === null) {
       runningBridges.delete(key);
       return null;
     }
@@ -14740,18 +14818,6 @@ async function launchOptionalProjectBridge(input, key) {
     return null;
   }
 }
-function isPnpRuntime() {
-  return typeof process.versions.pnp === "string";
-}
-function hasProjectInstalledMcp(appRoot) {
-  let directory2 = appRoot;
-  const root2 = parse2(directory2).root;
-  for (; ; ) {
-    if (existsSync2(join3(directory2, "node_modules", "@nudge-ui", "mcp", "package.json"))) return true;
-    if (directory2 === root2) return false;
-    directory2 = dirname2(directory2);
-  }
-}
 
 // src/project/tokens.ts
 import { createHash as createHash2 } from "node:crypto";
@@ -15457,7 +15523,7 @@ function comparePosixStrings(a, b) {
 import { watch } from "node:fs";
 import { readdir as readdir2 } from "node:fs/promises";
 import { realpathSync, statSync } from "node:fs";
-import { dirname as dirname3, isAbsolute as isAbsolute3, join as join5, relative as relative3, resolve as resolve2, sep as sep3 } from "node:path";
+import { dirname as dirname2, isAbsolute as isAbsolute3, join as join5, relative as relative3, resolve as resolve2, sep as sep3 } from "node:path";
 function createProjectFileWatcher(options) {
   const rootDirectory = realpathSync(resolve2(options.rootDirectory));
   const debounceMs = Math.max(0, options.debounceMs ?? 60);
@@ -15603,7 +15669,7 @@ function canonicalProjectPath(rootDirectory, path) {
     const canonical = realpathSync(path);
     return isWithin(rootDirectory, canonical) && !isSensitiveProjectPath(relative3(rootDirectory, canonical).split(sep3).join("/")) ? canonical : null;
   } catch {
-    const parent = dirname3(path);
+    const parent = dirname2(path);
     if (parent === path) return null;
     try {
       const canonicalParent = realpathSync(parent);
@@ -15817,13 +15883,13 @@ function resolveDecodedStaticFile(root2, decodedPath) {
   if (!isWithin2(root2, candidate)) return null;
   const canonicalCandidate = canonicalExistingAncestor(candidate);
   if (!canonicalCandidate || !isWithin2(root2, canonicalCandidate)) return null;
-  if (!existsSync3(candidate)) return null;
+  if (!existsSync2(candidate)) return null;
   let filePath = canonicalCandidate;
   const stats = statSync2(filePath);
   if (stats.isDirectory()) {
     const indexCandidate = join6(filePath, "index.html");
     const canonicalIndex = canonicalExistingAncestor(indexCandidate);
-    if (!canonicalIndex || !isWithin2(root2, canonicalIndex) || !existsSync3(indexCandidate)) {
+    if (!canonicalIndex || !isWithin2(root2, canonicalIndex) || !existsSync2(indexCandidate)) {
       return null;
     }
     if (!statSync2(canonicalIndex).isFile()) return null;
@@ -15842,10 +15908,7 @@ function createStandaloneProjectId(rootDirectory) {
 }
 function contentTypeForPath(filePath) {
   const extension = extname2(filePath).toLowerCase();
-  return MIME_TYPES2[extension] ?? "application/octet-stream";
-}
-function isReservedNudgeUiRoute2(pathname) {
-  return pathname === NUDGE_UI_ROUTE_PREFIX.slice(0, -1) || pathname.startsWith(NUDGE_UI_ROUTE_PREFIX);
+  return MIME_TYPES2.get(extension) ?? "application/octet-stream";
 }
 function canonicalDirectory(directory2) {
   const canonical = canonicalDirectoryOrNull(directory2);
@@ -15903,7 +15966,7 @@ function canonicalExistingAncestor(candidate) {
       return realpathSync2(current);
     } catch (error) {
       if (!isMissingPathError(error)) return null;
-      const parent = dirname4(current);
+      const parent = dirname3(current);
       if (parent === current) return null;
       current = parent;
     }
@@ -15928,7 +15991,7 @@ async function handleRequest(input) {
     sendText(response, 400, "Bad Request");
     return;
   }
-  if (isReservedNudgeUiRoute2(decodedPath)) {
+  if (isReservedNudgeUiRoute(decodedPath)) {
     await handleNudgeUiRoute(input, decodedPath);
     return;
   }
@@ -16084,7 +16147,7 @@ function sendBody(response, status, body2, contentType, headers = {}) {
   if (response.req?.method !== "HEAD") response.end(body2);
   else response.end();
 }
-var MIME_TYPES2 = {
+var MIME_TYPES2 = new Map(Object.entries({
   ".avif": "image/avif",
   ".css": "text/css; charset=utf-8",
   ".csv": "text/csv; charset=utf-8",
@@ -16110,7 +16173,7 @@ var MIME_TYPES2 = {
   ".woff": "font/woff",
   ".woff2": "font/woff2",
   ".xml": "application/xml; charset=utf-8"
-};
+}));
 
 // src/hosts/static/cli.ts
 function parseServeArguments(args, currentDirectory = process.cwd()) {

package/dist/project/artifacts.js

@@ -49,6 +49,10 @@ async function directory(root, id) {
     }
     return join(actual, id);
 }
+function isRecord(value) {
+    return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+/** Both artifact endpoints accept JSON objects only. */
 async function body(request) {
     const chunks = [];
     let size = 0;
@@ -60,7 +64,10 @@ async function body(request) {
         chunks.push(data);
     }
     const text = Buffer.concat(chunks).toString("utf8");
-    return text.length === 0 ? {} : JSON.parse(text);
+    if (text.length === 0)
+        return {};
+    const parsed = JSON.parse(text);
+    return isRecord(parsed) ? parsed : null;
 }
 function respond(response, status, content, type = "text/plain; charset=utf-8") {
     response.writeHead(status, {
@@ -100,7 +107,7 @@ export async function handleHtmlArtifactRequest(request, response, root, transfo
     try {
         if (request.method === "POST" && parts.length === 0) {
             const input = await body(request);
-            if (!validArtifact(input)) {
+            if (!input || !validArtifact(input)) {
                 respond(response, 400, "Invalid artifact");
                 return true;
             }
@@ -159,28 +166,27 @@ export async function handleHtmlArtifactRequest(request, response, root, transfo
             if ((request.method === "PUT" && parts[1] === "document")
                 || (request.method === "POST" && parts[1] === "commit")) {
                 const input = await body(request);
-                if (!input || typeof input !== "object") {
+                if (!input) {
                     respond(response, 400, "Invalid document");
                     return true;
                 }
-                const item = input;
-                if (!isHtmlArtifactRevision(item.expected)) {
+                if (!isHtmlArtifactRevision(input.expected)) {
                     respond(response, 428, "An expected iteration revision is required");
                     return true;
                 }
-                if ((item.html !== undefined && typeof item.html !== "string")
-                    || (request.method === "PUT" && typeof item.html !== "string")) {
+                if ((input.html !== undefined && typeof input.html !== "string")
+                    || (request.method === "PUT" && typeof input.html !== "string")) {
                     respond(response, 400, "Invalid document");
                     return true;
                 }
-                const expected = item.expected;
+                const expected = input.expected;
                 if (!sameRevision(await readRevision(target), expected)) {
                     respond(response, 409, HTML_ITERATION_CONFLICT);
                     return true;
                 }
-                const html = typeof item.html === "string" ? item.html : await readFile(join(target, "document.html"), "utf8");
+                const html = typeof input.html === "string" ? input.html : await readFile(join(target, "document.html"), "utf8");
                 const writes = request.method === "POST" ? ["preview.html"] : [];
-                if (typeof item.html === "string")
+                if (typeof input.html === "string")
                     writes.push("document.html");
                 const previewBefore = await readFile(join(target, "preview.html"));
                 const temporaryFiles = [];
@@ -190,9 +196,7 @@ export async function handleHtmlArtifactRequest(request, response, root, transfo
                         temporaryFiles.push({ temporary, destination: join(target, file) });
                         await writeFile(temporary, html);
                     }
-                    // Keep the final check and replacements in one controller critical section.
-                    // External tools must finish their file writes before handoff; they do
-                    // not participate in this process's request queue.
+                    // External writers do not join this request queue, so the final check and replacements stay in one critical section.
                     const latest = {
                         document: revision(readFileSync(join(target, "document.html"))),
                         preview: revision(readFileSync(join(target, "preview.html"))),
@@ -241,13 +245,12 @@ export async function handleHtmlArtifactRequest(request, response, root, transfo
     return true;
 }
 function validArtifact(value) {
-    if (!value || typeof value !== "object")
+    if (!isRecord(value))
         return false;
-    const item = value;
-    const viewport = item.viewport;
-    return typeof item.id === "string" && ID.test(item.id)
-        && typeof item.sourceUrl === "string" && item.sourceUrl.length < 4096
-        && typeof item.title === "string" && item.title.length < 512
-        && typeof item.html === "string" && item.html.length > 0
-        && !!viewport && typeof viewport.width === "number" && typeof viewport.height === "number";
+    const viewport = value.viewport;
+    return typeof value.id === "string" && ID.test(value.id)
+        && typeof value.sourceUrl === "string" && value.sourceUrl.length < 4096
+        && typeof value.title === "string" && value.title.length < 512
+        && typeof value.html === "string" && value.html.length > 0
+        && isRecord(viewport) && typeof viewport.width === "number" && typeof viewport.height === "number";
 }

package/dist/project/files.d.ts

@@ -15,5 +15,4 @@ export interface ProjectFileWatcher {
     start(): Promise<void>;
     close(): Promise<void>;
 }
-/** Creates a watcher that starts and stops explicitly with the server. */
 export declare function createProjectFileWatcher(options: ProjectFileWatcherOptions): ProjectFileWatcher;