openplanr 3.4.0 → 3.5.0

package/lib/host-packages/openai/openplanr/runtime/design/scripts/design.mjs

@@ -1,1500 +0,0 @@
-#!/usr/bin/env node
-import {
-  exportDesignReview,
-  listArtifactReviewServers,
-  resolveDesignPins,
-  saveDesignState,
-  serializeDesignReviewExport,
-  startDesignReview,
-  stopArtifactReviewServer
-} from "./design-review.mjs";
-import {
-  ARTIFACT_REVIEW_MAX_STATE_BYTES,
-  createReviewLedger,
-  decodeArtifactReviewSources,
-  mergeReviewLedger,
-  normalizeArtifactReview,
-  readArtifactReviewState,
-  readDesignFeedback,
-  readDesignHandoff,
-  resolveArtifactReviewDestination,
-  updateDesignHandoff,
-  withArtifactReviewLock,
-  writeArtifactReviewState
-} from "./design-handoff.mjs";
-import {
-  inspectDesignDocument,
-  matchesDesignFrame,
-  prepareDesignDocument,
-  readDesignViewContext,
-  renderDesignDocument,
-  standaloneDesignHtml
-} from "./design-document.mjs";
-import {
-  listDesignRevisions,
-  readDesignRevision
-} from "./design-shared-artifact-support-dependencies-design-support-protocol-contracts-d707e49b.mjs";
-import "./design-review-state-store.mjs";
-import "./design-parse5-parser.mjs";
-import "./design-parse5-tokenizer.mjs";
-import "./design-entities.mjs";
-import "./design-artifact-shell.mjs";
-import {
-  ARTIFACT_ERROR_CODES,
-  PipelineError,
-  digestArtifactEnvelope
-} from "./design-shared-artifact-support-protocol-contracts-9f6918b0.mjs";
-import "./design-sandbox-guards.mjs";
-import {
-  exportDesignShareRecovery,
-  importDesignShareRecovery,
-  manageDesignShare,
-  publishDesignShare,
-  shareDesign,
-  syncDesignShare
-} from "./design-share-cli-bridge.mjs";
-import {
-  atomicJson,
-  currentDesign,
-  hash,
-  readJson
-} from "./design-shared-design-support-0bac378d.mjs";
-import "./design-runtime-home.mjs";
-import {
-  acquireStartLock
-} from "./design-loopback-server.mjs";
-
-// packages/design/lib/design/utility.mjs
-import { spawn } from "node:child_process";
-import { existsSync as existsSync2, mkdirSync as mkdirSync2, readFileSync, realpathSync, writeFileSync as writeFileSync2 } from "node:fs";
-import { dirname as dirname2, join as join4, resolve as resolve3 } from "node:path";
-import { fileURLToPath } from "node:url";
-
-// packages/design/lib/design/feedback-import.mjs
-import { closeSync, constants, fstatSync, openSync, readSync } from "node:fs";
-import { join, resolve } from "node:path";
-function invalid(message, code = ARTIFACT_ERROR_CODES.REVIEW_IMPORT) {
-  throw new PipelineError(code, message);
-}
-function readDesignFeedbackImport(input) {
-  if (typeof input !== "string" || !input.trim()) invalid("Feedback import requires a JSON file.");
-  let fd;
-  try {
-    fd = openSync(resolve(input), constants.O_RDONLY | (constants.O_NOFOLLOW ?? 0));
-    const stat = fstatSync(fd);
-    if (!stat.isFile()) invalid("Feedback import must be a regular JSON file.");
-    if (stat.size > ARTIFACT_REVIEW_MAX_STATE_BYTES)
-      invalid("Feedback import exceeds the 5 MB limit.", ARTIFACT_ERROR_CODES.REQUEST_LIMIT);
-    const bytes = Buffer.alloc(ARTIFACT_REVIEW_MAX_STATE_BYTES + 1);
-    let size = 0;
-    while (size < bytes.length) {
-      const read = readSync(fd, bytes, size, bytes.length - size, null);
-      if (!read) break;
-      size += read;
-    }
-    if (size > ARTIFACT_REVIEW_MAX_STATE_BYTES)
-      invalid("Feedback import exceeds the 5 MB limit.", ARTIFACT_ERROR_CODES.REQUEST_LIMIT);
-    return JSON.parse(new TextDecoder("utf-8", { fatal: true }).decode(bytes.subarray(0, size)));
-  } catch (error) {
-    if (error instanceof PipelineError) throw error;
-    invalid("Feedback import is unreadable or is not valid UTF-8 JSON.");
-  } finally {
-    if (fd !== void 0) closeSync(fd);
-  }
-}
-function originalBundles(file, current) {
-  return { file, current, cache: /* @__PURE__ */ new Map([[current.revision, current]]) };
-}
-function originalBundle(bundles, reviewOf, revisionId) {
-  if (!/^[a-f0-9]{64}$/u.test(reviewOf ?? ""))
-    invalid("Feedback has an invalid original artifact digest.");
-  const load = (revision) => {
-    if (!bundles.cache.has(revision)) {
-      try {
-        const historical = readDesignRevision(bundles.file, revision);
-        bundles.cache.set(revision, { ...historical, document: historical.design });
-      } catch {
-        invalid(
-          "The original feedback revision is unavailable. Restore its immutable render bundle before importing."
-        );
-      }
-    }
-    const bundle = bundles.cache.get(revision);
-    if (bundle.document.id !== bundles.current.document.id)
-      invalid("Feedback revision belongs to another design document.");
-    return bundle;
-  };
-  if (revisionId && /^[a-f0-9]{64}$/u.test(revisionId)) {
-    const exact = load(revisionId);
-    if (digestArtifactEnvelope(exact.envelope) !== reviewOf)
-      invalid("Feedback revision does not match its original artifact digest.");
-    return exact;
-  }
-  for (const bundle of bundles.cache.values())
-    if (digestArtifactEnvelope(bundle.envelope) === reviewOf) return bundle;
-  for (const { revision } of listDesignRevisions(bundles.file).revisions) {
-    const bundle = load(revision);
-    if (digestArtifactEnvelope(bundle.envelope) === reviewOf) return bundle;
-  }
-  invalid(
-    "The original feedback revision is unavailable. Restore its immutable render bundle before importing."
-  );
-}
-function validatePin(pin, bundle) {
-  const entry = bundle.entries.find((value) => value.artifactId === pin.artifactId);
-  const frame = bundle.document.frames.find((value) => value.id === entry?.frameId);
-  const screen = bundle.document.screens.find((value) => value.id === entry?.screenId);
-  if (!entry || !matchesDesignFrame(frame, pin.viewport))
-    invalid("Feedback pin does not match its original screen and captured frame.");
-  if (pin.variant !== void 0 && pin.variant !== entry.variantId)
-    invalid("Feedback pin targets another design direction.");
-  if (pin.region.x + pin.region.w > 1.000001 || pin.region.y + pin.region.h > 1.000001)
-    invalid("Feedback pin region extends beyond its original viewport or anchor.");
-  if (pin.anchor && (pin.anchor.screen !== void 0 && pin.anchor.screen !== entry.screenId || pin.anchor.planrId !== screen.id && !screen.anchors?.includes(pin.anchor.planrId)))
-    invalid("Feedback pin anchor is not declared in its original screen.");
-}
-function identity(value) {
-  return { name: value?.name, ...value?.id == null ? {} : { id: value.id } };
-}
-function projectedPin(thread, group, bundle) {
-  const source = thread.source;
-  if (!source || source.reviewId !== group.reviewId || source.reviewOf !== group.reviewOf || source.artifactId !== group.artifactId || source.revisionId !== group.sourceRevisionId)
-    invalid("Feedback thread and group have conflicting source identities.");
-  const entry = bundle.entries.find((value) => value.artifactId === group.artifactId);
-  if (!entry || entry.screenId !== group.screen?.id || entry.variantId !== group.direction?.id || entry.frameId !== group.frame?.id)
-    invalid("Feedback group has an invalid original screen mapping.");
-  const location = thread.location;
-  if (!location || !["anchor-normalized", "viewport-normalized"].includes(location.coordinateSpace) || Boolean(location.anchor) !== (location.coordinateSpace === "anchor-normalized"))
-    invalid("Feedback location has an invalid coordinate space.");
-  if (!Array.isArray(thread.replies)) invalid("Feedback replies must be an array.");
-  const pin = {
-    id: thread.id,
-    artifactId: source.artifactId,
-    author: identity(thread.author),
-    intent: thread.originalIntent,
-    status: thread.status,
-    comment: thread.comment,
-    region: location.region,
-    viewport: location.capturedViewport,
-    ...location.anchor ? {
-      anchor: {
-        planrId: location.anchor.planrId,
-        ...location.anchor.screen == null ? {} : { screen: location.anchor.screen }
-      }
-    } : {},
-    createdAt: thread.createdAt,
-    updatedAt: thread.updatedAt,
-    replies: thread.replies.map((reply) => ({ ...reply, author: identity(reply.author) }))
-  };
-  return pin;
-}
-function appendProjectedThread(entry, thread, group, bundle, stored) {
-  const pin = projectedPin(thread, group, bundle);
-  const previousPin = stored?.reviews.find((value) => value.review.reviewId === group.reviewId)?.review.pins.find((value) => value.id === pin.id);
-  if (previousPin?.variant !== void 0) pin.variant = previousPin.variant;
-  entry.review.pins.push(pin);
-  if (!entry.review.updatedAt || Date.parse(pin.updatedAt) > Date.parse(entry.review.updatedAt))
-    entry.review.updatedAt = pin.updatedAt;
-  entry.stale ||= thread.stale === true;
-}
-function decodeProjection(value, current, bundles, stored) {
-  if (value.schemaVersion !== "1.0.0" || value.design?.id !== current.document.id || !Array.isArray(value.groups) || value.groups.length > 1e4 || !Array.isArray(value.overallNotes) || value.overallNotes.length > 1e4)
-    invalid("Feedback export does not match this design document or supported schema.");
-  originalBundle(bundles, value.currentArtifactDigest, value.currentRevisionId);
-  const reviews = /* @__PURE__ */ new Map();
-  const reviewFor = (reviewId, reviewOf) => {
-    if (typeof reviewId !== "string" || !reviewId || reviewId.length > 128)
-      invalid("Feedback export is missing its original review identity.");
-    const previous = reviews.get(reviewId);
-    if (previous && previous.review.reviewOf !== reviewOf)
-      invalid("Feedback review identity is bound to conflicting artifact digests.");
-    if (previous) return previous;
-    const existing = stored?.reviews.find((entry2) => entry2.review.reviewId === reviewId)?.review;
-    const entry = {
-      review: {
-        schemaVersion: "1.0.0",
-        reviewId,
-        reviewOf,
-        decision: "pending",
-        overall: "",
-        pins: [],
-        ...existing?.createdAt ? { createdAt: existing.createdAt } : {},
-        ...existing?.updatedAt ? { updatedAt: existing.updatedAt } : {}
-      },
-      stale: false
-    };
-    reviews.set(reviewId, entry);
-    return entry;
-  };
-  for (const group of value.groups) {
-    if (!group || !Array.isArray(group.threads) || group.threads.length > 1e4 || group.sourceMapping !== "original-bundle")
-      invalid("Feedback export lacks its original thread mapping.");
-    const bundle = originalBundle(bundles, group.reviewOf, group.sourceRevisionId);
-    const entry = reviewFor(group.reviewId, group.reviewOf);
-    for (const thread of group.threads) appendProjectedThread(entry, thread, group, bundle, stored);
-  }
-  for (const note of value.overallNotes) {
-    originalBundle(bundles, note?.reviewOf);
-    const entry = reviewFor(note?.reviewId, note?.reviewOf);
-    if (entry.review.overall) invalid("Feedback export contains duplicate overall notes.");
-    entry.review.overall = note.comment;
-  }
-  return [...reviews.values()].map((entry) => ({
-    ...entry,
-    review: normalizeArtifactReview(entry.review)
-  }));
-}
-function rejectLegacy(value) {
-  if (value?.kind === "openplanr-design-review-export" || value?.kind === "artifact-review-state" || value?.artifacts || value?.reviewId || value?.review)
-    return;
-  invalid(
-    "Legacy notes.json is not canonical review feedback. Keep the file and re-export JSON from the original supported Studio; it cannot be converted safely without its revision and anchor mapping."
-  );
-}
-function rebaseLedger(stored, artifactId, digest) {
-  if (stored && stored.artifactId !== artifactId)
-    invalid("Stored feedback belongs to another design document.");
-  return createReviewLedger({
-    artifactId,
-    currentReviewOf: digest,
-    reviews: (stored?.reviews ?? []).map((entry) => ({
-      ...entry,
-      stale: entry.stale || entry.review.reviewOf !== digest
-    }))
-  });
-}
-function mergeImportedEntries(stored, artifactId, digest, entries, bundles, allowStale) {
-  let ledger = rebaseLedger(stored, artifactId, digest);
-  const imported = [];
-  for (const entry of entries) {
-    const bundle = originalBundle(bundles, entry.review.reviewOf);
-    for (const pin of entry.review.pins) validatePin(pin, bundle);
-    const stale = entry.stale || entry.review.reviewOf !== digest;
-    if (stale && !allowStale)
-      invalid(
-        "Feedback belongs to an earlier revision. Inspect it and retry with explicit --allow-stale confirmation.",
-        ARTIFACT_ERROR_CODES.STALE_REVIEW
-      );
-    const previous = ledger.reviews.find(
-      (value) => value.review.reviewId === entry.review.reviewId
-    )?.review;
-    const review = { ...entry.review, decision: previous?.decision ?? "pending" };
-    ledger = mergeReviewLedger(ledger, review, { stale });
-    imported.push({ reviewId: review.reviewId, stale, pins: review.pins.length });
-  }
-  return { ledger, imported };
-}
-async function importDesignFeedback(file, { input, revision, allowStale = false, env = process.env } = {}) {
-  if (!/^[a-f0-9]{64}$/u.test(revision ?? ""))
-    invalid("Feedback import requires the current render revision from feedback inspect.");
-  if (typeof allowStale !== "boolean")
-    invalid("Stale feedback requires an explicit boolean confirmation.");
-  const source = readDesignFeedbackImport(input);
-  rejectLegacy(source);
-  const initial = currentDesign(file);
-  const release = await acquireStartLock(join(initial.root, ".design/render.lock"), {
-    timeout: 1e3,
-    stale: 3e4
-  });
-  try {
-    const current = currentDesign(file);
-    if (current.revision !== revision)
-      invalid(
-        "The design changed before feedback import. Inspect the current revision and retry.",
-        ARTIFACT_ERROR_CODES.STALE_REVIEW
-      );
-    const artifactId = `design-${hash(current.document.id).slice(0, 24)}`;
-    const path = resolveArtifactReviewDestination({ cwd: current.root, env, artifactId }).path;
-    return await withArtifactReviewLock(path, async () => {
-      const stored = readArtifactReviewState(path, { allowMissing: true });
-      const bundles = originalBundles(file, current);
-      const entries = source.kind === "openplanr-design-review-export" ? decodeProjection(source, current, bundles, stored) : await decodeArtifactReviewSources(source, { withMetadata: true });
-      if (source.kind === "artifact-review-state" && source.artifactId !== artifactId)
-        invalid("Imported ledger belongs to another design document.");
-      const digest = digestArtifactEnvelope(current.envelope);
-      const { ledger, imported } = mergeImportedEntries(
-        stored,
-        artifactId,
-        digest,
-        entries,
-        bundles,
-        allowStale
-      );
-      writeArtifactReviewState(path, ledger);
-      return {
-        ok: true,
-        action: "design_feedback_imported",
-        revision: current.revision,
-        imported,
-        note: "Feedback merged. Imported votes, dispositions and decisions do not change owner selection or handoff approval."
-      };
-    });
-  } finally {
-    release();
-  }
-}
-
-// packages/design/lib/design/font-fetch.mjs
-import {
-  chmodSync,
-  existsSync,
-  mkdirSync,
-  mkdtempSync,
-  readdirSync,
-  renameSync,
-  rmdirSync,
-  rmSync,
-  statSync,
-  writeFileSync
-} from "node:fs";
-import { basename, dirname, join as join2, resolve as resolve2 } from "node:path";
-var MAX_FAMILIES = 2;
-var MAX_WEIGHTS = 3;
-var TIMEOUT_MS = 2e4;
-var MAX_FILE_BYTES = 15e5;
-var MAX_TOTAL_BYTES = 5e6;
-var STAGING_MAX_AGE_MS = 10 * 6e4;
-var STAGING_PREFIX = ".fonts-fetch-";
-var CSS_ENDPOINT = "https://fonts.googleapis.com/css2";
-var FONT_ORIGIN = "https://fonts.gstatic.com/";
-var CATALOG_ROOT = "https://raw.githubusercontent.com/google/fonts/main";
-var USER_AGENT = "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Safari/537.36";
-var LICENSES = Object.freeze([
-  {
-    directory: "ofl",
-    metadata: "OFL",
-    file: "OFL.txt",
-    id: "OFL-1.1",
-    text: /SIL Open Font License,?\s+Version 1\.1/iu
-  },
-  {
-    directory: "apache",
-    metadata: "APACHE2",
-    file: "LICENSE.txt",
-    id: "Apache-2.0",
-    text: /Apache License\s+Version 2\.0/iu
-  }
-]);
-var FAMILY_SPEC = /^([A-Za-z0-9](?:[A-Za-z0-9 ]*[A-Za-z0-9])?):(\d{3}(?:,\d{3})*)$/u;
-function parseFontFamily(spec) {
-  const match = typeof spec === "string" ? FAMILY_SPEC.exec(spec.trim()) : null;
-  if (!match)
-    throw new Error(
-      `--family ${JSON.stringify(spec ?? "")} must look like "Inter:400,600" (a name, a colon, comma-separated weights).`
-    );
-  const weights = [...new Set(match[2].split(",").map(Number))].sort((a, b) => a - b);
-  const invalid2 = weights.find((weight) => weight < 100 || weight > 900 || weight % 100 !== 0);
-  if (invalid2 !== void 0)
-    throw new Error(`--family "${spec}" has weight ${invalid2}; use 100 to 900 in steps of 100.`);
-  if (weights.length > MAX_WEIGHTS)
-    throw new Error(
-      `--family "${spec}" has ${weights.length} weights; at most ${MAX_WEIGHTS} per family.`
-    );
-  return { family: match[1], weights };
-}
-function latinFontFaces(css, family) {
-  const faces = [];
-  for (const [, subset, body] of css.matchAll(
-    /\/\*\s*([\w-]+)\s*\*\/\s*@font-face\s*\{([^}]*)\}/gu
-  )) {
-    const value = (name) => new RegExp(`(?:^|;)\\s*${name}\\s*:\\s*([^;]+)`, "iu").exec(body)?.[1].trim();
-    if (subset !== "latin" || !/^U\+0000-00FF\b/iu.test(value("unicode-range") ?? "")) continue;
-    const source = /^url\(([^)\s]+)\)\s*format\(['"]woff2['"]\)$/u.exec(value("src") ?? "");
-    if (!source?.[1].startsWith(FONT_ORIGIN))
-      throw new Error(
-        `"${family}" Latin face is not a woff2 file on ${FONT_ORIGIN}: ${value("src")}`
-      );
-    faces.push({ weight: Number(value("font-weight")), url: source[1] });
-  }
-  return faces;
-}
-async function request(fetchImpl, url, { headers, allowMissing = false, redirect } = {}) {
-  let response;
-  try {
-    response = await fetchImpl(url, {
-      headers,
-      redirect,
-      signal: AbortSignal.timeout(TIMEOUT_MS)
-    });
-  } catch (error) {
-    const reason = error?.name === "TimeoutError" ? `no response within ${TIMEOUT_MS / 1e3} s` : error?.message;
-    throw new Error(`Font fetch failed: ${url}: ${reason}`);
-  }
-  if (allowMissing && response.status === 404) return null;
-  if (!response.ok) throw new Error(`Font fetch failed: ${url}: HTTP ${response.status}`);
-  return response;
-}
-async function verifiedLicense(fetchImpl, family) {
-  const slug = family.toLowerCase().replace(/[^a-z0-9]/gu, "");
-  const tried = [];
-  for (const license of LICENSES) {
-    const base = `${CATALOG_ROOT}/${license.directory}/${slug}`;
-    tried.push(`${base}/METADATA.pb`);
-    const metadata = await request(fetchImpl, `${base}/METADATA.pb`, { allowMissing: true });
-    if (!metadata) continue;
-    const text = await metadata.text();
-    const name = /^name:\s*"([^"]*)"/mu.exec(text)?.[1];
-    const declared = /^license:\s*"([^"]*)"/mu.exec(text)?.[1];
-    if (name !== family && name?.toLowerCase() === family.toLowerCase())
-      throw new Error(`"${family}" is listed as "${name}"; use the catalog name "${name}".`);
-    if (name !== family || declared !== license.metadata)
-      throw new Error(
-        `"${family}" is not verified as ${license.id}: ${base}/METADATA.pb names ${JSON.stringify(name)} with license ${JSON.stringify(declared)}. Use the system stack.`
-      );
-    const body = Buffer.from(
-      await (await request(fetchImpl, `${base}/${license.file}`, { redirect: "error" })).arrayBuffer()
-    );
-    if (!license.text.test(body.toString("utf8")))
-      throw new Error(
-        `"${family}" is not verified as ${license.id}: ${base}/${license.file} does not contain the license text. Use the system stack.`
-      );
-    return { slug, license, body };
-  }
-  throw new Error(
-    `"${family}" is not an OFL or Apache licensed Google Fonts family (checked ${tried.join(", ")}). Use the system stack.`
-  );
-}
-async function download(fetchImpl, url) {
-  const bytes = Buffer.from(
-    await (await request(fetchImpl, url, { redirect: "error" })).arrayBuffer()
-  );
-  if (bytes.length > MAX_FILE_BYTES)
-    throw new Error(`Font file is ${bytes.length} bytes, over the ${MAX_FILE_BYTES} limit: ${url}`);
-  if (bytes.toString("latin1", 0, 4) !== "wOF2") throw new Error(`Font file is not woff2: ${url}`);
-  return bytes;
-}
-function assertWritableDestination(dest) {
-  if (!existsSync(dest)) return;
-  if (!statSync(dest).isDirectory() || readdirSync(dest).length > 0)
-    throw new Error(
-      `Font destination already exists and is not empty: ${dest}. Choose a new --dest or remove it.`
-    );
-}
-function faceRule(family, weights, file) {
-  const weight = weights.length > 1 ? `${weights[0]} ${weights.at(-1)}` : `${weights[0]}`;
-  return `@font-face {
-  font-family: "${family}";
-  font-style: normal;
-  font-weight: ${weight};
-  font-display: swap;
-  src: url("${file}") format("woff2");
-}
-`;
-}
-async function fetchDesignFonts({ families, dest, fetchImpl = fetch }) {
-  if (!dest) throw new Error("fonts fetch requires --dest <design>/source/assets/fonts.");
-  const specs = (families ?? []).map(parseFontFamily);
-  if (specs.length === 0)
-    throw new Error('fonts fetch requires at least one --family "<Name>:<weights>".');
-  if (specs.length > MAX_FAMILIES)
-    throw new Error(
-      `${specs.length} families requested (${specs.map(({ family }) => family).join(", ")}); at most ${MAX_FAMILIES}.`
-    );
-  const names = specs.map(({ family }) => family.toLowerCase());
-  if (new Set(names).size !== names.length)
-    throw new Error(
-      `--family names a family twice: ${specs.map(({ family }) => family).join(", ")}.`
-    );
-  const target = resolve2(dest);
-  if (basename(target).startsWith(STAGING_PREFIX))
-    throw new Error(
-      `Font destination uses the reserved staging prefix ${STAGING_PREFIX}: ${target}`
-    );
-  assertWritableDestination(target);
-  const files = /* @__PURE__ */ new Map();
-  const rules = [];
-  const summaries = [];
-  let totalBytes = 0;
-  const add = (path, bytes) => {
-    totalBytes += bytes.length;
-    if (totalBytes > MAX_TOTAL_BYTES)
-      throw new Error(`Font snapshot exceeds ${MAX_TOTAL_BYTES} bytes at ${path}.`);
-    files.set(path, bytes);
-  };
-  for (const { family, weights } of specs) {
-    const { slug, license, body } = await verifiedLicense(fetchImpl, family);
-    const source = `${CSS_ENDPOINT}?family=${encodeURIComponent(family).replaceAll("%20", "+")}:wght@${weights.join(";")}&display=swap`;
-    const css = await (await request(fetchImpl, source, { headers: { "user-agent": USER_AGENT } })).text();
-    const faces = latinFontFaces(css, family);
-    const byUrl = /* @__PURE__ */ new Map();
-    for (const weight of weights) {
-      const face = faces.find((item) => item.weight === weight);
-      if (!face)
-        throw new Error(`"${family}" has no Latin woff2 face for weight ${weight} in ${source}`);
-      byUrl.set(face.url, [...byUrl.get(face.url) ?? [], weight]);
-    }
-    rules.push(`/* ${family} (${license.id}, ${slug}/${license.file}): ${source} */
-`);
-    for (const [url, covered] of byUrl) {
-      const range = covered.length > 1 ? `${covered[0]}-${covered.at(-1)}` : `${covered[0]}`;
-      const file = `${slug}/${slug}-${range}-latin.woff2`;
-      add(file, await download(fetchImpl, url));
-      rules.push(faceRule(family, covered, file));
-    }
-    add(`${slug}/${license.file}`, body);
-    summaries.push({
-      family,
-      license: license.id,
-      weights,
-      source,
-      licenseFile: `${slug}/${license.file}`
-    });
-  }
-  add("fonts.css", Buffer.from(rules.join("")));
-  const parent = dirname(target);
-  const missingParents = [];
-  for (let directory = parent; !existsSync(directory); directory = dirname(directory))
-    missingParents.push(directory);
-  const createdParents = [];
-  let staging;
-  try {
-    for (const directory of missingParents.reverse()) {
-      mkdirSync(directory);
-      createdParents.push(directory);
-    }
-    const staleBefore = Date.now() - STAGING_MAX_AGE_MS;
-    for (const entry of readdirSync(parent, { withFileTypes: true })) {
-      if (!entry.isDirectory() || !entry.name.startsWith(STAGING_PREFIX)) continue;
-      const path = join2(parent, entry.name);
-      try {
-        if (statSync(path).mtimeMs < staleBefore) rmSync(path, { recursive: true });
-      } catch (error) {
-        if (error.code === "ENOENT") continue;
-        throw new Error(`Could not remove stale staging folder ${path}: ${error.message}`);
-      }
-    }
-    staging = mkdtempSync(join2(parent, STAGING_PREFIX));
-    for (const [path, bytes] of files) {
-      mkdirSync(dirname(join2(staging, path)), { recursive: true });
-      writeFileSync(join2(staging, path), bytes, { flag: "wx" });
-    }
-    assertWritableDestination(target);
-    if (existsSync(target)) rmdirSync(target);
-    chmodSync(staging, 493);
-    renameSync(staging, target);
-  } catch (error) {
-    const cleanupErrors = [];
-    for (const directory of [...staging ? [staging] : [], ...createdParents.reverse()]) {
-      try {
-        if (directory === staging) rmSync(directory, { recursive: true, force: true });
-        else if (readdirSync(directory).length === 0) rmdirSync(directory);
-      } catch (cleanupError) {
-        cleanupErrors.push({ path: directory, message: cleanupError.message });
-      }
-    }
-    if (cleanupErrors.length > 0) {
-      error.cleanupErrors = cleanupErrors;
-      error.message += cleanupErrors.map(({ path, message }) => ` (cleanup also failed for ${path}: ${message})`).join("");
-    }
-    throw error;
-  }
-  return {
-    ok: true,
-    dest: target,
-    css: join2(target, "fonts.css"),
-    families: summaries,
-    files: [...files].map(([path, bytes]) => ({ path, bytes: bytes.length })),
-    totalBytes
-  };
-}
-
-// packages/design/lib/design/studio-lifecycle.mjs
-import { join as join3 } from "node:path";
-function localUrl(value, service, path) {
-  if (typeof value !== "string") return null;
-  try {
-    const url = new URL(value);
-    return url.origin === `http://127.0.0.1:${service.port}` && !url.search && !url.hash && path.test(url.pathname) ? url.href : null;
-  } catch {
-    return null;
-  }
-}
-async function manageDesignStudio(file, { action = "status", instanceId, env = process.env, fetchImpl = fetch } = {}) {
-  if (!["status", "stop"].includes(action))
-    throw new Error("Studio action must be status or stop.");
-  if (instanceId !== void 0 && (typeof instanceId !== "string" || !/^[A-Za-z0-9_-]{22}$/u.test(instanceId)))
-    throw new Error("Studio requires a valid exact instance ID.");
-  const current = currentDesign(file);
-  const services = (await listArtifactReviewServers({ env, fetchImpl })).filter(
-    (service2) => service2.kind === "design" && service2.projectRoot === current.root
-  );
-  const launcher = readJson(join3(current.root, ".design/server.json"), null);
-  let service = services.find((value) => value.instanceId === (instanceId ?? launcher?.instanceId));
-  if (instanceId !== void 0 && !service)
-    throw new Error(
-      "That Studio instance is not owned by this design in the current state directory."
-    );
-  const result = {
-    ok: true,
-    action: `design_studio_${action}`,
-    documentId: current.document.id,
-    revision: current.revision,
-    verification: current.verification.status
-  };
-  if (action === "stop") {
-    if (!service && services.length === 1) service = services[0];
-    if (!service && services.length > 1)
-      throw new Error(
-        `Multiple owned Studio services need recovery. Run studio --action status, then stop an exact service with --instance-id. Owned instances: ${services.map((value) => value.instanceId).join(", ")}.`
-      );
-    if (!service)
-      return {
-        ...result,
-        status: "stopped",
-        notice: "Studio is stopped. Open the design to start it again."
-      };
-    const stopped = await stopArtifactReviewServer(service.instanceId, { env, fetchImpl });
-    return {
-      ...result,
-      status: stopped.status,
-      instanceId: service.instanceId,
-      notice: "Feedback and arrangement are saved. Open the design to start Studio again."
-    };
-  }
-  if (!service)
-    return {
-      ...result,
-      status: services.length ? "attention" : "stopped",
-      services,
-      notice: services.length ? services.length === 1 ? "Stop this design\u2019s owned Studio service, then open the design again to restore its session link." : "Stop an exact owned Studio service with --instance-id, then reopen after all obsolete services are stopped." : "Open the design to start Studio."
-    };
-  const url = localUrl(launcher?.studioUrl, service, /^\/studio\/[A-Za-z0-9._-]+\/$/u) ?? service.url;
-  let browserStatus = "not-checked";
-  const privateUrl = localUrl(launcher?.url, service, /^\/r\/[A-Za-z0-9_-]+\/[A-Za-z0-9_-]+\/$/u);
-  if (privateUrl) {
-    try {
-      const response = await fetchImpl(`${privateUrl}api/design-status`, {
-        signal: AbortSignal.timeout(700)
-      });
-      const data = await response.json();
-      if (response.ok && data.documentId === current.document.id && data.revision === current.revision && ["loading", "ready", "failed"].includes(data.status))
-        browserStatus = data.status;
-    } catch {
-    }
-  }
-  return {
-    ...result,
-    status: "running",
-    instanceId: service.instanceId,
-    url,
-    browserStatus,
-    services
-  };
-}
-
-// packages/design/lib/design/browser-audit.mjs
-function auditRenderedScreen({ height, frameBoundsSeverity = "warning" } = {}) {
-  const issues = [];
-  const add = (rule, severity, message) => issues.push({ rule, severity, message });
-  const label = (node) => node.getAttribute("data-planr-id") || node.id || `${node.tagName.toLowerCase()} \u201C${(node.textContent || node.getAttribute("aria-label") || "").trim().replace(/\s+/gu, " ").slice(0, 60)}\u201D`;
-  const viewport = { width: window.innerWidth, height: window.innerHeight };
-  const screenId = document.body?.getAttribute("data-planr-screen") ?? null;
-  if (!screenId)
-    add("screen-not-loaded", "error", "The frame has no authored design screen identity.");
-  if (document.readyState !== "complete")
-    add("screen-loading", "error", `The frame is still ${document.readyState}.`);
-  const documentHeight = document.documentElement.scrollHeight;
-  if (document.body && getComputedStyle(document.body).boxSizing !== "border-box")
-    add(
-      "board-root-box-sizing",
-      frameBoundsSeverity,
-      "The screen root body must use box-sizing: border-box."
-    );
-  if (height !== "auto" && documentHeight > viewport.height + 1)
-    add(
-      "vertical-overflow",
-      frameBoundsSeverity,
-      `The screen is ${documentHeight}px tall in a ${viewport.height}px frame.`
-    );
-  const nodes = [...document.querySelectorAll("body *")];
-  if (nodes.length > 5e3)
-    add(
-      "audit-limit",
-      "error",
-      "The screen exceeds the 5,000 element audit limit; inspect and split the screen before verification."
-    );
-  const canvas = document.createElement("canvas");
-  canvas.width = canvas.height = 1;
-  const context = canvas.getContext("2d", { willReadFrequently: true });
-  const color = (input) => {
-    if (!context) return null;
-    context.clearRect(0, 0, 1, 1);
-    context.fillStyle = input;
-    context.fillRect(0, 0, 1, 1);
-    return [...context.getImageData(0, 0, 1, 1).data].map((value) => value / 255);
-  };
-  const over = (foreground, background) => foreground.slice(0, 3).map((value, index) => value * foreground[3] + background[index] * (1 - foreground[3]));
-  const luminance = (rgb) => rgb.reduce(
-    (sum, value, index) => sum + [0.2126, 0.7152, 0.0722][index] * (value <= 0.04045 ? value / 12.92 : ((value + 0.055) / 1.055) ** 2.4),
-    0
-  );
-  const effectiveBackground = (node) => {
-    const chain = [];
-    for (let ancestor = node; ancestor; ancestor = ancestor.parentElement) chain.unshift(ancestor);
-    let background = [1, 1, 1];
-    for (const ancestor of chain) {
-      const style = getComputedStyle(ancestor);
-      if (style.backgroundImage !== "none" || Number(style.opacity) < 1 || style.mixBlendMode !== "normal" || style.filter !== "none")
-        return null;
-      const resolved = color(style.backgroundColor);
-      if (!resolved) return null;
-      background = over(resolved, background);
-    }
-    return background;
-  };
-  const visible = (node) => {
-    const rect = node.getBoundingClientRect();
-    const style = getComputedStyle(node);
-    return rect.width > 0 && rect.height > 0 && !node.closest('[hidden],[aria-hidden="true"],[inert]') && style.visibility !== "hidden" && style.visibility !== "collapse" && Number(style.opacity) > 0;
-  };
-  let checkedElements = 0, checkedContrast = 0, skippedContrast = 0, checkedFocus = 0;
-  const focusTargets = [];
-  for (const node of nodes.slice(0, 5e3)) {
-    const style = getComputedStyle(node);
-    const rect = node.getBoundingClientRect();
-    if (rect.width > 0 && rect.height > 0 && style.visibility !== "hidden" && style.visibility !== "collapse" && Number(style.opacity) > 0 && ["absolute", "fixed"].includes(style.position)) {
-      let { left, right, top, bottom } = rect;
-      for (let ancestor = node.parentElement; ancestor && ancestor !== document.body; ancestor = ancestor.parentElement) {
-        const clip = getComputedStyle(ancestor);
-        const bounds = ancestor.getBoundingClientRect();
-        if (["auto", "scroll", "hidden", "clip"].includes(clip.overflowX)) {
-          left = Math.max(left, bounds.left + ancestor.clientLeft);
-          right = Math.min(right, bounds.left + ancestor.clientLeft + ancestor.clientWidth);
-        }
-        if (["auto", "scroll", "hidden", "clip"].includes(clip.overflowY)) {
-          top = Math.max(top, bounds.top + ancestor.clientTop);
-          bottom = Math.min(bottom, bounds.top + ancestor.clientTop + ancestor.clientHeight);
-        }
-      }
-      if (right > left && bottom > top && (left < -1 || right > viewport.width + 1 || top < -1 || bottom > (height === "auto" ? documentHeight : viewport.height) + 1))
-        add(
-          "outside-frame",
-          frameBoundsSeverity,
-          `${label(node)} is positioned outside the frame box.`
-        );
-    }
-    if (!visible(node)) continue;
-    checkedElements += 1;
-    const directText = [...node.childNodes].some(
-      (child) => child.nodeType === 3 && child.textContent.trim()
-    );
-    if (node.tagName === "IMG" && (!node.complete || node.naturalWidth === 0))
-      add("missing-image", "error", `${label(node)} has not loaded its image.`);
-    if (directText) {
-      const background = effectiveBackground(node);
-      const foreground = color(style.color);
-      if (background && foreground) {
-        const a = luminance(over(foreground, background)), b = luminance(background);
-        const ratio = (Math.max(a, b) + 0.05) / (Math.min(a, b) + 0.05);
-        const large = parseFloat(style.fontSize) >= 24 || parseFloat(style.fontSize) >= 18.666 && parseFloat(style.fontWeight) >= 700;
-        const required = large ? 3 : 4.5;
-        checkedContrast += 1;
-        if (ratio + 0.01 < required)
-          add(
-            "contrast-below-aa",
-            "error",
-            `${label(node)} has computed contrast ${ratio.toFixed(2)}:1; ${required}:1 is required.`
-          );
-      } else skippedContrast += 1;
-      if (!["INPUT", "TEXTAREA", "SELECT", "OPTION"].includes(node.tagName)) {
-        const clipsX = ["hidden", "clip"].includes(style.overflowX) && node.scrollWidth > node.clientWidth + 1;
-        const clipsY = ["hidden", "clip"].includes(style.overflowY) && node.scrollHeight > node.clientHeight + 1;
-        if (clipsX || clipsY) {
-          const intentional = style.textOverflow === "ellipsis" || style.webkitLineClamp && style.webkitLineClamp !== "none";
-          add(
-            "clipped-content",
-            intentional ? "warning" : "error",
-            `${label(node)} clips ${clipsX ? "horizontal" : "vertical"} text${intentional ? "; confirm intentional truncation in the screenshot" : ""}.`
-          );
-        }
-      }
-    }
-    if (node.tabIndex >= 0 && !node.disabled && node.matches(
-      'button,a[href],input:not([type="hidden"]),select,textarea,[tabindex],[contenteditable="true"]'
-    )) {
-      focusTargets.push(node);
-      const name = node.getAttribute("aria-label") || (node.getAttribute("aria-labelledby") || "").split(/\s+/u).map((id) => document.getElementById(id)?.textContent || "").join(" ").trim() || [...node.labels || []].map((item) => item.textContent).join(" ").trim() || node.getAttribute("title") || (node.matches('input[type="button"],input[type="submit"],input[type="reset"]') ? node.value : node.matches("input,select,textarea") ? "" : node.textContent.trim());
-      if (!name) add("unnamed-control", "error", `${label(node)} has no accessible name.`);
-    }
-  }
-  if (document.documentElement.scrollWidth > viewport.width + 1)
-    add(
-      "horizontal-overflow",
-      "error",
-      `The screen is ${document.documentElement.scrollWidth}px wide in a ${viewport.width}px frame.`
-    );
-  if (checkedElements === 0)
-    add("empty-render", "error", "The frame contains no visible rendered content.");
-  if (skippedContrast > 0)
-    add(
-      "contrast-needs-inspection",
-      "warning",
-      `${skippedContrast} text elements use images, blending or transparency effects; inspect their screenshot contrast.`
-    );
-  if (document.fonts?.status === "loading")
-    add("fonts-loading", "error", "Fonts are still loading; inspect again after they settle.");
-  const previousFocus = document.activeElement;
-  const previousScroll = { x: window.scrollX, y: window.scrollY };
-  let keyboardInspectionNeeded = 0;
-  for (const node of focusTargets.slice(0, 150)) {
-    const before = getComputedStyle(node);
-    const baseline = [
-      before.boxShadow,
-      before.backgroundColor,
-      before.borderColor,
-      before.textDecorationLine
-    ];
-    node.focus({ preventScroll: true });
-    if (document.activeElement !== node) {
-      add("unreachable-control", "error", `${label(node)} cannot receive focus.`);
-      continue;
-    }
-    if (!node.matches(":focus-visible")) {
-      keyboardInspectionNeeded += 1;
-      continue;
-    }
-    const focused = getComputedStyle(node);
-    const outlined = focused.outlineStyle !== "none" && parseFloat(focused.outlineWidth) > 0 && (color(focused.outlineColor)?.[3] ?? 0) > 0;
-    const changed = [
-      focused.boxShadow,
-      focused.backgroundColor,
-      focused.borderColor,
-      focused.textDecorationLine
-    ].some((value, index) => value !== baseline[index]);
-    checkedFocus += 1;
-    if (!outlined && !changed)
-      add(
-        "missing-focus-indicator",
-        "error",
-        `${label(node)} has no visible keyboard focus style.`
-      );
-  }
-  previousFocus?.focus?.({ preventScroll: true });
-  if (document.activeElement !== previousFocus) document.activeElement?.blur?.();
-  if (window.scrollX !== previousScroll.x || window.scrollY !== previousScroll.y)
-    window.scrollTo(previousScroll.x, previousScroll.y);
-  if (keyboardInspectionNeeded > 0)
-    add(
-      "focus-needs-keyboard-inspection",
-      "warning",
-      `${keyboardInspectionNeeded} controls need a keyboard focus walkthrough.`
-    );
-  if (focusTargets.length > 150)
-    add("focus-audit-limit", "warning", "Only the first 150 focusable controls were inspected.");
-  return {
-    screenId,
-    viewport,
-    checkedElements,
-    checkedContrast,
-    skippedContrast,
-    checkedFocus,
-    issues
-  };
-}
-async function attachedArtifactFrame(page, artifactId, warn) {
-  const deadline = Date.now() + 5e3;
-  const escaped = artifactId.replace(
-    /[^a-z0-9_-]/giu,
-    (char) => `\\${char.codePointAt(0).toString(16)} `
-  );
-  const handle = await page.waitForSelector(
-    `iframe[data-planr-artifact-frame="${escaped}"], iframe[data-planr-artifact-id="${escaped}"]`,
-    { state: "attached", timeout: 5e3 }
-  );
-  try {
-    return await new Promise((resolve4, reject) => {
-      let settled = false;
-      const finish = (error, frame) => {
-        if (settled) return;
-        settled = true;
-        clearTimeout(timer);
-        page.off("frameattached", inspect);
-        page.off("framenavigated", inspect);
-        if (error) reject(error);
-        else resolve4(frame);
-      };
-      const inspect = async (frame) => {
-        if (settled || frame === page.mainFrame?.()) return;
-        try {
-          const candidate = await frame.frameElement();
-          let matches;
-          try {
-            matches = await handle.evaluate((element, other) => element === other, candidate);
-          } finally {
-            await candidate.dispose?.();
-          }
-          if (matches) finish(null, frame);
-        } catch (error) {
-          if (!settled) warn(error);
-        }
-      };
-      const timer = setTimeout(
-        () => finish(new Error(`No frame attached for artifact ${artifactId} within 5000ms.`)),
-        Math.max(1, deadline - Date.now())
-      );
-      page.on("frameattached", inspect);
-      page.on("framenavigated", inspect);
-      handle.contentFrame().then((frame) => {
-        if (frame) finish(null, frame);
-      }, finish);
-    });
-  } finally {
-    await handle.dispose?.();
-  }
-}
-async function auditDesignPage(page, { revision, document: document2, entries = [], screenshotPaths = [], scenarios = [] } = {}) {
-  if (!document2 || typeof document2 !== "object" || Array.isArray(document2))
-    throw new TypeError("Audit requires a design document input.");
-  const issues = [], checkedArtifacts = [], screens = [];
-  const frameBoundsSeverity = document2.frames?.some((frame) => frame.height === "auto") ? "error" : "warning";
-  const expected = new Map(entries.map((entry) => [entry.artifactId, entry]));
-  const add = (artifactId, rule, severity, message) => issues.push({ artifactId, rule, severity, message });
-  if (!entries.length || expected.size !== entries.length)
-    add(
-      "studio",
-      "invalid-audit-scope",
-      "error",
-      "Audit scope must contain every expected artifact exactly once."
-    );
-  if (!page || typeof page.frames !== "function") {
-    return {
-      schemaVersion: "1.0.0",
-      revision,
-      status: "unverified",
-      checkedArtifacts,
-      issues: [
-        {
-          artifactId: "studio",
-          rule: "browser-unavailable",
-          severity: "warning",
-          message: "A browser page is required for rendered verification."
-        }
-      ],
-      screenshots: screenshotPaths,
-      scenarios,
-      screens
-    };
-  }
-  const loaded = /* @__PURE__ */ new Set();
-  for (const entry of expected.values()) {
-    let frameHold;
-    try {
-      try {
-        frameHold = await page.evaluateHandle?.((id) => {
-          const stage = window.__openPlanrArtifactStage;
-          return stage?.frameBudget ? stage.holdFrames([id]) : null;
-        }, entry.artifactId);
-        await page.evaluate?.(async (id) => {
-          const stage = window.__openPlanrArtifactStage;
-          if (stage?.frameBudget) await stage.ensureFrames([id]);
-        }, entry.artifactId);
-      } catch (error) {
-        add(
-          entry.artifactId,
-          "frame-load-error",
-          "error",
-          `The rendered frame could not be mounted: ${error.message}`
-        );
-        continue;
-      }
-      let frames;
-      if (["waitForSelector", "on", "off"].every((method) => typeof page[method] === "function")) {
-        try {
-          const frame = await attachedArtifactFrame(
-            page,
-            entry.artifactId,
-            (error) => add(
-              entry.artifactId,
-              "frame-attachment-inspection-error",
-              "warning",
-              `A frame attachment could not be matched to artifact ${entry.artifactId}: ${error.message}`
-            )
-          );
-          frames = [frame, ...page.frames().filter((candidate) => candidate !== frame)];
-        } catch (error) {
-          add(
-            entry.artifactId,
-            "frame-load-error",
-            "error",
-            `Artifact ${entry.artifactId} has no frame attached for inspection: ${error.message}`
-          );
-          continue;
-        }
-      } else frames = page.frames();
-      for (const frame of frames) {
-        let handle, artifactId, panelState;
-        try {
-          if (frame === page.mainFrame?.()) continue;
-          handle = await frame.frameElement();
-          artifactId = await handle.getAttribute("data-planr-artifact-frame") ?? await handle.getAttribute("data-planr-artifact-id");
-          if (artifactId !== entry.artifactId) continue;
-          if (loaded.has(artifactId)) {
-            add(
-              artifactId,
-              "duplicate-frame",
-              "error",
-              "Multiple frames claim the same artifact identity."
-            );
-            continue;
-          }
-          loaded.add(artifactId);
-          await frame.waitForLoadState?.("load", { timeout: 5e3 });
-          panelState = await handle.evaluate((element) => {
-            const panel = element.closest("[data-artifact-id]");
-            if (!panel) return null;
-            const hidden = panel.hidden;
-            panel.hidden = false;
-            return { hidden };
-          });
-          await page.keyboard?.press("Tab");
-          const result = await frame.evaluate(auditRenderedScreen, {
-            height: entry.height,
-            frameBoundsSeverity
-          });
-          if (result.screenId !== entry.screenId) {
-            add(
-              artifactId,
-              "screen-identity-mismatch",
-              "error",
-              `Expected screen ${entry.screenId}; loaded ${result.screenId ?? "none"}.`
-            );
-            continue;
-          }
-          checkedArtifacts.push(artifactId);
-          screens.push({ artifactId, ...result });
-          for (const issue of result.issues)
-            add(artifactId, issue.rule, issue.severity, issue.message);
-        } catch (error) {
-          if (artifactId && expected.has(artifactId))
-            add(
-              artifactId,
-              "frame-load-error",
-              "error",
-              `The rendered frame could not be inspected: ${error.message}`
-            );
-        } finally {
-          if (panelState && handle) {
-            await handle.evaluate((element, state) => {
-              const panel = element.closest("[data-artifact-id]");
-              if (panel) panel.hidden = state.hidden;
-            }, panelState).catch(
-              (error) => add(
-                artifactId,
-                "panel-visibility-restore-error",
-                "warning",
-                `Artifact ${artifactId} panel visibility could not be restored: ${error.message}`
-              )
-            );
-          }
-          await handle?.dispose?.();
-        }
-      }
-    } finally {
-      try {
-        await frameHold?.evaluate((release) => release?.());
-      } finally {
-        await frameHold?.dispose();
-      }
-    }
-  }
-  for (const artifactId of expected.keys()) {
-    if (!checkedArtifacts.includes(artifactId))
-      add(
-        artifactId,
-        "missing-frame-inspection",
-        "error",
-        "The expected artifact has no completed rendered inspection."
-      );
-  }
-  for (const error of await page.pageErrors?.() ?? [])
-    add("studio", "browser-script-error", "error", error.message ?? String(error));
-  const evidenceComplete = screenshotPaths.length > 0 && scenarios.length > 0 && scenarios.every(({ status: status2 }) => status2 === "passed");
-  const status = issues.some(({ severity }) => severity === "error") ? "failed" : evidenceComplete ? "verified" : "unverified";
-  return {
-    schemaVersion: "1.0.0",
-    revision,
-    status,
-    checkedArtifacts,
-    issues,
-    screenshots: screenshotPaths,
-    scenarios,
-    screens
-  };
-}
-
-// packages/design/lib/design/utility.mjs
-function isPng(bytes) {
-  if (bytes.length < 57 || !bytes.subarray(0, 8).equals(Buffer.from([137, 80, 78, 71, 13, 10, 26, 10])))
-    return false;
-  let offset = 8, header = false, pixels = false;
-  while (offset + 12 <= bytes.length) {
-    const length = bytes.readUInt32BE(offset), type = bytes.toString("ascii", offset + 4, offset + 8);
-    if (length > bytes.length - offset - 12) return false;
-    if (!header) {
-      if (type !== "IHDR" || length !== 13 || bytes.readUInt32BE(offset + 8) === 0 || bytes.readUInt32BE(offset + 12) === 0)
-        return false;
-      header = true;
-    } else if (type === "IHDR") return false;
-    if (type === "IDAT" && length > 0) pixels = true;
-    offset += length + 12;
-    if (type === "IEND") return length === 0 && pixels && offset === bytes.length;
-  }
-  return false;
-}
-function verifyDesignDocument(file, report) {
-  const current = currentDesign(file);
-  if (!report || report.revision !== current.revision)
-    throw new Error("Browser report belongs to a different render revision.");
-  const screenEvidence = Array.isArray(report.screens) ? report.screens : [];
-  const checkedArtifacts = Array.isArray(report.checkedArtifacts) ? report.checkedArtifacts : [];
-  const coverage = current.entries.every((entry) => {
-    const frame = current.document.frames.find((item) => item.id === entry.frameId);
-    const matches = screenEvidence.filter((item) => item?.artifactId === entry.artifactId);
-    return checkedArtifacts.includes(entry.artifactId) && matches.length === 1 && matches[0].screenId === entry.screenId && matchesDesignFrame(frame, matches[0].viewport) && Number.isInteger(matches[0].checkedElements) && matches[0].checkedElements > 0;
-  });
-  const images = (Array.isArray(report.screenshots) ? report.screenshots : []).filter((item) => {
-    const path = typeof item === "string" ? item : item?.path;
-    try {
-      return typeof path === "string" && isPng(readFileSync(resolve3(path)));
-    } catch {
-      return false;
-    }
-  });
-  const journeys = Array.isArray(report.scenarios) && report.scenarios.length > 0 && report.scenarios.every(
-    (item) => item?.status === "passed" && [item.name, item.id].some((value) => typeof value === "string" && value.trim().length > 0)
-  );
-  const issues = [
-    ...Array.isArray(report.issues) ? report.issues : [],
-    ...screenEvidence.flatMap((item) => Array.isArray(item?.issues) ? item.issues : [])
-  ];
-  const status = issues.some((item) => item?.severity === "error") || report.status === "failed" ? "failed" : coverage && images.length > 0 && journeys && report.status !== "unverified" ? "verified" : "unverified";
-  const saved = {
-    ...report,
-    issues,
-    schemaVersion: "1.0.0",
-    revision: current.revision,
-    status,
-    checkedAt: (/* @__PURE__ */ new Date()).toISOString(),
-    coverage,
-    screenshotCount: images.length,
-    primaryJourneysChecked: Boolean(journeys)
-  };
-  atomicJson(join4(current.root, ".design/verification", `${current.revision}.json`), saved);
-  return saved;
-}
-var HELP_FLAGS = /* @__PURE__ */ new Set(["--help", "-h"]);
-var COMMAND_SUMMARIES = Object.freeze({
-  inspect: "Report the design document and its current render.",
-  validate: "Validate the design document without rendering.",
-  render: "Render the design document into its review revision.",
-  open: "Open the local review studio.",
-  studio: "Report or stop a running local studio (--action status|stop).",
-  "view-context": "Report what the studio is showing.",
-  export: "Export the design as html, json, or markdown.",
-  feedback: "Inspect, export, or import review feedback.",
-  verify: "Record a browser verification report.",
-  share: "Create a hosted review of the current revision.",
-  publish: "Publish the current revision to the existing hosted review.",
-  sync: "Retrieve hosted review feedback.",
-  manage: "Manage a hosted review (--action rotate|pause|resume|revoke|delete|recovery|restore).",
-  handoff: "Inspect or update the review handoff.",
-  fonts: "Download open-license fonts (fonts fetch --family ... --dest ...)."
-});
-function commandHelp(command) {
-  if (!Object.hasOwn(COMMAND_SUMMARIES, command))
-    throw new Error(`Unknown command: ${command}. Run design.mjs --help for the command list.`);
-  return {
-    command,
-    usage: command === "fonts" ? 'design.mjs fonts fetch --family "<Name>:<weights>" [--family ...] --dest <dir>' : `design.mjs ${command} <design-document.json> [options]`,
-    summary: COMMAND_SUMMARIES[command],
-    note: "Run design.mjs --help for every option. A help request never reads, renders, or sends anything."
-  };
-}
-async function designUtility(argv, {
-  stdout = (value) => process.stdout.write(`${JSON.stringify(value)}
-`),
-  openUrl,
-  env = process.env,
-  fetchImpl = fetch
-} = {}) {
-  if (argv.length === 0 || ["--help", "-h", "help"].includes(argv[0])) {
-    const help = {
-      usage: 'design.mjs inspect|validate|render|open|studio|view-context|export|feedback|verify|share|publish|sync|manage|handoff <design-document.json> | design.mjs fonts fetch --family "<Name>:<weights>" [--family ...] --dest <dir>',
-      flags: [
-        "--json",
-        "--no-open",
-        "--view canvas|prototype|walkthrough",
-        "--port <number>",
-        "--format html|json|markdown",
-        "--scope current|all",
-        "--output <path>",
-        "--report <browser-report.json>",
-        "--action inspect|export|import|select|resolve|rotate|pause|resume|revoke|delete|recovery|restore|status|stop",
-        "--input <private recovery or feedback JSON file>",
-        "--revision <current-render-revision>",
-        "--request-time <ISO-timestamp>",
-        "--allow-stale",
-        "--variant <id>",
-        "--pins <id,id>",
-        "--summary <text>",
-        "--family <Name>:<weight,weight> (fonts fetch; at most 2 families, 3 weights each)",
-        "--dest <design>/source/assets/fonts (fonts fetch)"
-      ],
-      note: "The host authors design sources. This utility only validates, renders, reviews and exports them; fonts fetch downloads open-license fonts only when run."
-    };
-    stdout(help);
-    return help;
-  }
-  const [command, input, ...args] = argv;
-  if (argv.some((value) => HELP_FLAGS.has(value))) {
-    const help = commandHelp(command);
-    stdout(help);
-    return help;
-  }
-  if (typeof input === "string" && input.startsWith("-"))
-    throw new Error(`${input} must be a design document path, not an option.`);
-  if (![
-    "inspect",
-    "validate",
-    "render",
-    "open",
-    "studio",
-    "view-context",
-    "export",
-    "feedback",
-    "verify",
-    "share",
-    "publish",
-    "sync",
-    "manage",
-    "handoff",
-    "fonts"
-  ].includes(command) || !input)
-    throw new Error(
-      'Usage: design.mjs inspect|validate|render|open|studio|view-context|export|feedback|verify|share|publish|sync|manage|handoff <design-document.json> [--json] [--no-open] [--view canvas|prototype|walkthrough] | design.mjs fonts fetch --family "<Name>:<weights>" [--family ...] --dest <dir>'
-    );
-  const flags = {};
-  for (let i = 0; i < args.length; i++) {
-    if (!args[i].startsWith("--")) throw new Error(`Unexpected argument: ${args[i]}`);
-    const key = args[i].slice(2);
-    if (![
-      "json",
-      "no-open",
-      "view",
-      "format",
-      "output",
-      "port",
-      "report",
-      "action",
-      "instance-id",
-      "pins",
-      "summary",
-      "variant",
-      "input",
-      "scope",
-      "revision",
-      "request-time",
-      "allow-stale",
-      "family",
-      "dest"
-    ].includes(key))
-      throw new Error(`Unknown option: ${args[i]}`);
-    if (["family", "dest"].includes(key) && command !== "fonts")
-      throw new Error(`Unknown option for ${command}: ${args[i]}`);
-    if (key === "family") flags.family = [...flags.family ?? [], args[++i]];
-    else flags[key] = ["json", "no-open", "allow-stale"].includes(key) ? true : args[++i];
-  }
-  if (flags.view && !["canvas", "prototype", "walkthrough"].includes(flags.view))
-    throw new Error("View must be canvas, prototype, or walkthrough.");
-  if (command === "fonts") {
-    if (input !== "fetch")
-      throw new Error(
-        'Usage: design.mjs fonts fetch --family "<Name>:<weights>" [--family ...] --dest <dir>'
-      );
-    const result2 = await fetchDesignFonts({ families: flags.family, dest: flags.dest, fetchImpl });
-    stdout(result2);
-    return result2;
-  }
-  const file = resolve3(input);
-  let result;
-  if (command === "view-context")
-    result = readDesignViewContext(file, { requestTime: flags["request-time"] });
-  if (command === "studio")
-    result = await manageDesignStudio(file, {
-      action: flags.action,
-      instanceId: flags["instance-id"],
-      env,
-      fetchImpl
-    });
-  if (command === "handoff") {
-    const action = flags.action ?? "inspect";
-    if (action === "inspect") result = readDesignHandoff(file);
-    else {
-      const snapshot = readDesignHandoff(file);
-      const input2 = flags.input ? readJson(resolve3(flags.input)) : {};
-      result = await updateDesignHandoff(file, {
-        ...input2,
-        action,
-        revision: input2.revision ?? snapshot.revision,
-        version: input2.version ?? snapshot.draft?.version ?? 0
-      });
-    }
-  }
-  if (command === "share") result = await shareDesign(file);
-  if (command === "publish") result = await publishDesignShare(file);
-  if (command === "sync") result = await syncDesignShare(file);
-  if (command === "manage" && !["rotate", "pause", "resume", "revoke", "delete", "recovery", "restore"].includes(flags.action))
-    throw new Error("manage requires --action rotate|pause|resume|revoke|delete|recovery|restore.");
-  if (command === "manage")
-    result = flags.action === "restore" ? await importDesignShareRecovery(file, { input: flags.input }) : flags.action === "recovery" ? await exportDesignShareRecovery(file, { output: flags.output }) : await manageDesignShare(file, flags.action);
-  if (command === "inspect") result = inspectDesignDocument(file);
-  if (command === "validate") {
-    const prepared = prepareDesignDocument(file);
-    result = {
-      ok: prepared.lint.every((item) => item.ok),
-      lint: prepared.lint,
-      screens: prepared.document.screens.length,
-      artifacts: prepared.entries.length,
-      verification: "unverified"
-    };
-  }
-  if (command === "render") result = await renderDesignDocument(file);
-  if (command === "open") {
-    const port = flags.port === void 0 ? 0 : Number(flags.port);
-    if (!Number.isInteger(port) || port < 0 || port > 65535)
-      throw new Error("Port must be 0\u201365535.");
-    result = await startDesignReview(file, {
-      port,
-      view: flags.view,
-      noOpen: Boolean(flags["no-open"]),
-      openUrl,
-      env,
-      fetchImpl
-    });
-    const close = result.close;
-    if (close) {
-      process.once("SIGINT", async () => {
-        await close();
-        process.exit(0);
-      });
-      process.once("SIGTERM", async () => {
-        await close();
-        process.exit(0);
-      });
-    }
-  }
-  if (command === "export") {
-    const current = currentDesign(file), view = flags.view ?? current.document.defaultView;
-    const state = readJson(join4(current.root, ".design/studio-state.json"), { state: {} }).state;
-    if (flags.format && flags.format !== "html")
-      throw new Error(
-        "Portable export supports HTML. Use the studio PNG action for browser-rendered captures."
-      );
-    const output = resolve3(flags.output ?? join4(current.root, `${view}-export.html`));
-    if (existsSync2(output))
-      throw new Error(`Export already exists: ${output}. Choose a new --output path.`);
-    mkdirSync2(dirname2(output), { recursive: true });
-    writeFileSync2(output, standaloneDesignHtml({ ...current, state }, view), { flag: "wx" });
-    result = { ok: true, output, view, revision: current.revision };
-  }
-  if (command === "verify") {
-    if (!flags.report) throw new Error("verify requires --report <browser-report.json>.");
-    result = verifyDesignDocument(file, readJson(resolve3(flags.report)));
-  }
-  if (command === "feedback") {
-    const action = flags.action ?? "inspect";
-    const synced = action === "import" ? void 0 : await syncDesignShare(file, { env, fetchImpl, unavailable: "skip" });
-    if (action === "import")
-      result = await importDesignFeedback(file, {
-        input: flags.input,
-        revision: flags.revision,
-        allowStale: Boolean(flags["allow-stale"]),
-        env
-      });
-    else if (action === "inspect") result = readDesignFeedback(file, env);
-    else if (action === "export") {
-      const format = flags.format ?? "json", scope = flags.scope ?? "all";
-      if (!["json", "markdown"].includes(format))
-        throw new Error("Feedback export format must be json or markdown.");
-      if (!["current", "all"].includes(scope))
-        throw new Error("Feedback export scope must be current or all.");
-      if (!flags.output) throw new Error("Feedback export requires --output <path>.");
-      const output = resolve3(flags.output);
-      if (existsSync2(output))
-        throw new Error("Feedback export already exists. Choose a new --output path.");
-      const snapshot = exportDesignReview(file, { scope, env });
-      mkdirSync2(dirname2(output), { recursive: true });
-      writeFileSync2(output, serializeDesignReviewExport(snapshot, format), {
-        flag: "wx",
-        mode: 384
-      });
-      result = {
-        ok: true,
-        output,
-        format,
-        scope,
-        revision: snapshot.currentRevisionId,
-        summary: snapshot.summary
-      };
-    } else if (action === "resolve")
-      result = await resolveDesignPins(file, {
-        pinIds: flags.pins?.split(",").filter(Boolean),
-        summary: flags.summary,
-        env
-      });
-    else if (action === "select") {
-      const current = currentDesign(file), saved = readJson(join4(current.root, ".design/studio-state.json"), {
-        state: {},
-        stateVersion: 0
-      });
-      const variant = flags.variant ?? saved.state.selectedVariant;
-      if (!current.document.variants.some((item) => item.id === variant && item.status === "ready"))
-        throw new Error("Select a ready variant with --variant.");
-      const selected = [variant], rejected = (saved.state.preferences?.rejected ?? []).filter((id) => id !== variant);
-      result = await saveDesignState(file, {
-        ...saved,
-        revision: current.revision,
-        state: { ...saved.state, selectedVariant: variant, preferences: { selected, rejected } }
-      });
-      result = {
-        ok: true,
-        selectedVariant: variant,
-        tastePath: result.tastePath,
-        revision: current.revision
-      };
-    } else throw new Error("Feedback action must be inspect, export, import, select, or resolve.");
-    if (synced?.skipped)
-      result = { ...result, sync: { skipped: synced.skipped, reason: synced.reason } };
-  }
-  stdout(result);
-  return result;
-}
-async function main(argv = process.argv.slice(2)) {
-  try {
-    const result = await designUtility(argv, {
-      openUrl: async (url) => {
-        const command = process.platform === "darwin" ? "open" : process.platform === "win32" ? "explorer.exe" : "xdg-open";
-        const child = spawn(command, [url], { stdio: "ignore" });
-        child.on("error", () => {
-        });
-        child.unref();
-      }
-    });
-    if (result?.ok === false || result?.status === "failed") process.exitCode = 1;
-    return result;
-  } catch (error) {
-    process.stderr.write(`${error.message}
-`);
-    process.exitCode = 1;
-  }
-}
-var invokedDirectly = process.argv[1] && fileURLToPath(import.meta.url) === realpathSync(process.argv[1]);
-if (invokedDirectly) await main();
-export {
-  auditDesignPage,
-  auditRenderedScreen,
-  designUtility,
-  main,
-  readDesignViewContext,
-  verifyDesignDocument
-};