paintress 0.6.0 → 0.7.1

package/dist/cli.js

@@ -1,12 +1,14 @@
 #!/usr/bin/env node
-import { C as isPresetType, D as presetPathFor, E as notePathFor, O as readTextIfExists, S as findNodeIn, T as listPresets, _ as LineDecoder, a as ensureDaemon, b as componentsPathFor, c as isDaemonRunning, d as lockPath, f as pidPath, g as socketPath, h as sanitizeProjectName, k as setPreset, l as queryDaemon, m as safeJoin, n as runStdioServer, o as reuseDaemon, p as resolveProjectDir, r as TOOLS, s as attachPersistent, u as sendRequest, v as encodeLine, w as listComponents, x as ensureProjectScaffold, y as applyProjectPresets } from "./server-DZRNNWac.js";
-import { T as loadDoc, qt as VERSION, t as renderDocument } from "./render-BSf62388.js";
+import { A as listComponents, C as findBrowser, D as ensureProjectScaffold, E as componentsPathFor, F as projectFilesInfo, I as projectFontRegistry, L as readTextIfExists, M as listPresets, N as notePathFor, O as findNodeIn, P as presetPathFor, R as setPreset, S as encodeLine, T as applyProjectPresets, _ as resolveProjectDir, a as defaultRouteIpv4, b as socketPath, c as windowsSystem32, d as attachPersistent, f as isDaemonRunning, g as pidPath, h as lockPath, j as listPresetGroups, k as findProjectRoot, l as ensureDaemon, m as sendRequest, n as runStdioServer, o as interopEnabled, p as queryDaemon, r as TOOLS, s as isWsl, u as reuseDaemon, v as safeJoin, w as screenshotPen, x as LineDecoder, y as sanitizeProjectName, z as setProjectRoots } from "./server-Buuoq3kq.js";
+import { P as planFonts, T as loadDoc, rn as VERSION, t as renderDocument, z as isPresetType } from "./render-DWs1iQ0v.js";
 import "./index.js";
 import { chmodSync, closeSync, copyFileSync, existsSync, mkdirSync, openSync, readFileSync, readdirSync, realpathSync, renameSync, statSync, unlinkSync, writeFileSync } from "node:fs";
-import { homedir } from "node:os";
+import { homedir, tmpdir } from "node:os";
 import { fileURLToPath } from "node:url";
 import { dirname, extname, join, relative, resolve, sep } from "node:path";
+import { randomUUID } from "node:crypto";
 import { createServer } from "node:net";
+import { spawn } from "node:child_process";
 import { createServer as createServer$1 } from "node:http";
 import { readFile } from "node:fs/promises";
 import chokidar from "chokidar";
@@ -121,18 +123,24 @@ var Registry = class {
 var MarksStore = class {
 	byProject = /* @__PURE__ */ new Map();
 	seq = 0;
-	/** 同一项目内同一 nodeId 复用既有短号；否则分配新号 */
+	/** 短号按「文件 + nodeId」去重：节点 id 只在文件内唯一，跨文件同 id 不能复用 */
+	key(project, nodeId, file) {
+		return `${project}\u0000${file ?? ""}\u0000${nodeId}`;
+	}
+	/** 同一项目内同一文件同一 nodeId 复用既有短号；否则分配新号 */
 	add(input) {
 		let bucket = this.byProject.get(input.project);
 		if (!bucket) {
 			bucket = /* @__PURE__ */ new Map();
 			this.byProject.set(input.project, bucket);
 		}
-		const existing = bucket.get(input.nodeId);
+		const key = this.key(input.project, input.nodeId, input.file);
+		const existing = bucket.get(key);
 		if (existing) {
 			if (input.name !== void 0) existing.name = input.name;
 			if (input.type !== void 0) existing.type = input.type;
 			if (input.path !== void 0) existing.path = input.path;
+			if (input.file !== void 0) existing.file = input.file;
 			existing.at = Date.now();
 			return existing;
 		}
@@ -140,21 +148,22 @@ var MarksStore = class {
 		const mark = {
 			shortId: this.seq,
 			project: input.project,
+			...input.file !== void 0 ? { file: input.file } : {},
 			nodeId: input.nodeId,
 			name: input.name,
 			type: input.type,
 			path: input.path ?? input.nodeId,
 			at: Date.now()
 		};
-		bucket.set(input.nodeId, mark);
+		bucket.set(key, mark);
 		return mark;
 	}
 	list(project) {
 		const bucket = this.byProject.get(project);
 		return bucket ? [...bucket.values()].sort((a, b) => a.shortId - b.shortId) : [];
 	}
-	get(project, nodeId) {
-		return this.byProject.get(project)?.get(nodeId);
+	get(project, nodeId, file) {
+		return this.byProject.get(project)?.get(this.key(project, nodeId, file));
 	}
 	clear(project) {
 		const bucket = this.byProject.get(project);
@@ -163,8 +172,16 @@ var MarksStore = class {
 		this.byProject.delete(project);
 		return n;
 	}
-	remove(project, nodeId) {
-		return this.byProject.get(project)?.delete(nodeId) ?? false;
+	remove(project, nodeId, file) {
+		const bucket = this.byProject.get(project);
+		if (bucket === void 0) return false;
+		if (file !== void 0) return bucket.delete(this.key(project, nodeId, file));
+		let removed = false;
+		for (const [key, mark] of bucket) if (mark.nodeId === nodeId) {
+			bucket.delete(key);
+			removed = true;
+		}
+		return removed;
 	}
 };
 // src/web/changes.ts
@@ -399,8 +416,368 @@ var VersionChecker = class {
 		};
 	}
 };
+// src/web/bind.ts
+/**
+* 监听地址的选取策略（端口阶梯）。
+*
+* 为什么需要它（2026-11-15 实测）：WSL2 的 `localhost` 转发由宿主侧 `wslrelay.exe`
+* 落地 —— Windows 上绑不上这个端口，转发就不存在，宿主浏览器只会看到「连接失败」。
+* 最常见的一类不可绑是 **Hyper-V 保留端口段**（`netsh int ipv4 show excludedportrange`），
+* 而保留段每次开机在动态端口范围内重新划分，位置会漂：同一个默认端口今天能开、明天不能开。
+* 这一类故障在 WSL 内部完全看不出来（daemon 自己 `curl 127.0.0.1` 永远是 200）。
+*
+* 因此顺序是「宿主预检、真正 listen、最后复核」：
+*   1. 宿主体检（一次 interop 调用）：哪些候选端口在 Windows 上绑得上；
+*   2. 真正 listen：WSL 内冲突在这里暴露，失败才换下一个候选；
+*   3. 端到端复核：从 Windows 侧取 `/api/ping`，校验 nonce —— 只信身份，不信 200。
+*
+* 阶梯：127.0.0.1 × [6033, 6133, 6233] → 0.0.0.0 × [6033, 6133, 6233]，最多 6 次。
+* 兜底的 0.0.0.0 之所以有效：Windows 直连 WSL 网卡地址不经过 wslrelay，端口被宿主保留也不影响
+* （实测保留端口上 localhost 连不通、WSL IP 返回 200）。
+*/
+/** 默认端口：60 号肉身成圣远征队 + 33 号远征队 */
+const DEFAULT_PORT = 6033;
+/** 跳级候选（顺序即优先级） */
+const PORT_CANDIDATES = [
+	DEFAULT_PORT,
+	6133,
+	6233
+];
+const sleep = (ms) => new Promise((r) => setTimeout(r, ms));
+/** 单个候选的探测预算：loopback 要走 wslrelay 接管（实测 300ms–1.06s），all 是直连 */
+const PROBE_BUDGET_MS = {
+	loopback: 2e3,
+	all: 600
+};
+const PROBE_INTERVAL_MS = 150;
+/** 单次 Windows 进程调用的硬超时；端到端探测会按剩余预算收紧它 */
+const INTEROP_TIMEOUT_MS = 4e3;
+function inRange(ranges, port) {
+	return ranges.some(([start, end]) => port >= start && port <= end);
+}
+const hostOf = (mode) => mode === "loopback" ? "127.0.0.1" : "0.0.0.0";
+function candidatesFor(opts) {
+	const pref = opts.bind ?? "auto";
+	if (opts.requestedPort !== void 0) {
+		const mode = pref === "all" ? "all" : "loopback";
+		return [{
+			port: opts.requestedPort,
+			host: hostOf(mode),
+			bind: mode
+		}];
+	}
+	return (pref === "auto" ? ["loopback", "all"] : [pref]).flatMap((mode) => (opts.ports ?? PORT_CANDIDATES).map((port) => ({
+		port,
+		host: hostOf(mode),
+		bind: mode
+	})));
+}
+/** 运行一条 Windows 命令，收集 stdout（超时/不存在都返回 null） */
+async function runWindows(exe, args, timeoutMs = INTEROP_TIMEOUT_MS) {
+	return new Promise((resolve) => {
+		let out = "";
+		const child = spawn(exe, args, { stdio: [
+			"ignore",
+			"pipe",
+			"ignore"
+		] });
+		const timer = setTimeout(() => {
+			child.kill("SIGKILL");
+			resolve(null);
+		}, timeoutMs);
+		child.stdout?.on("data", (chunk) => {
+			out += chunk.toString("utf8");
+		});
+		child.once("error", () => {
+			clearTimeout(timer);
+			resolve(null);
+		});
+		child.once("close", () => {
+			clearTimeout(timer);
+			resolve(out);
+		});
+	});
+}
+function system32() {
+	if (!interopEnabled()) return null;
+	return windowsSystem32();
+}
+/**
+* 宿主体检：一次 PowerShell 调用同时拿回「保留段」与「候选端口可否独占绑定」。
+* 为什么不分开调：每次 interop 都是新进程（热 70–260ms，冷启动可达 2s），启动路径上能省则省。
+*/
+async function windowsReport(ports) {
+	const sys32 = system32();
+	if (sys32 === null) return null;
+	const ps = `${sys32}/WindowsPowerShell/v1.0/powershell.exe`;
+	if (!existsSync(ps)) return null;
+	const raw = await runWindows(ps, [
+		"-NoProfile",
+		"-NonInteractive",
+		"-Command",
+		[
+			"$ex = @()",
+			"$null = netsh.exe int ipv4 show excludedportrange protocol=tcp | ForEach-Object { if ($_ -match '^\\s*(\\d+)\\s+(\\d+)\\s*$') { $ex += ,@([int]$Matches[1],[int]$Matches[2]) } }",
+			"$b = @{}",
+			`foreach ($p in @(${ports.join(",")})) {`,
+			"  $s = New-Object System.Net.Sockets.Socket([System.Net.Sockets.AddressFamily]::InterNetwork,[System.Net.Sockets.SocketType]::Stream,[System.Net.Sockets.ProtocolType]::Tcp)",
+			"  try { $s.ExclusiveAddressUse = $true",
+			"        $s.Bind((New-Object System.Net.IPEndPoint([System.Net.IPAddress]::Loopback,$p)))",
+			"        $b[\"$p\"] = $true } catch { $b[\"$p\"] = $false } finally { $s.Close() }",
+			"}",
+			"@{ excluded = $ex; bindable = $b } | ConvertTo-Json -Compress -Depth 4"
+		].join("; ")
+	]);
+	if (raw === null) return null;
+	try {
+		const parsed = JSON.parse(raw.trim());
+		const excluded = Array.isArray(parsed.excluded) ? parsed.excluded.filter((r) => Array.isArray(r) && r.length === 2).map((r) => [Number(r[0]), Number(r[1])]) : [];
+		const bindable = {};
+		if (parsed.bindable !== null && typeof parsed.bindable === "object") for (const [k, v] of Object.entries(parsed.bindable)) bindable[k] = v === true;
+		return {
+			excluded: excluded.filter(([s, e]) => Number.isFinite(s) && Number.isFinite(e)),
+			bindable
+		};
+	} catch {
+		return null;
+	}
+}
+/**
+* 端到端探测：从 Windows 侧取 `/api/ping`，正文里必须出现本次 nonce。
+* 只认身份不认状态码 —— 端口上蹲着别的程序（甚至另一个 distro 的 paintress）时，200 也是假的。
+*/
+async function windowsProbe(url, budgetMs) {
+	const sys32 = system32();
+	if (sys32 === null) return false;
+	let nonce = "";
+	try {
+		nonce = new URL(url).searchParams.get("nonce") ?? "";
+	} catch {
+		return false;
+	}
+	if (nonce === "") return false;
+	const deadline = Date.now() + budgetMs;
+	const curl = `${sys32}/curl.exe`;
+	if (existsSync(curl)) {
+		while (Date.now() < deadline) {
+			const remaining = deadline - Date.now();
+			const out = await runWindows(curl, [
+				"-s",
+				"--noproxy",
+				"*",
+				"-m",
+				"2",
+				url
+			], Math.max(1, remaining));
+			if (out !== null && out.includes(nonce)) return true;
+			await sleep(PROBE_INTERVAL_MS);
+		}
+		return false;
+	}
+	const ps = `${sys32}/WindowsPowerShell/v1.0/powershell.exe`;
+	if (!existsSync(ps)) return false;
+	const script = `try { (Invoke-WebRequest -UseBasicParsing -TimeoutSec 2 -Uri '${url}').Content } catch { '' }`;
+	while (Date.now() < deadline) {
+		const remaining = deadline - Date.now();
+		const out = await runWindows(ps, [
+			"-NoProfile",
+			"-NonInteractive",
+			"-Command",
+			script
+		], Math.max(1, remaining));
+		if (out !== null && out.includes(nonce)) return true;
+		await sleep(PROBE_INTERVAL_MS);
+	}
+	return false;
+}
+function listenOn(server, endpoint) {
+	return new Promise((resolve, reject) => {
+		const onError = (err) => {
+			server.off("listening", onListening);
+			reject(err);
+		};
+		const onListening = () => {
+			server.off("error", onError);
+			resolve();
+		};
+		server.once("error", onError);
+		server.once("listening", onListening);
+		server.listen(endpoint.port, endpoint.host);
+	});
+}
+function closeQuietly(server) {
+	try {
+		server.closeAllConnections?.();
+		server.close();
+	} catch {}
+}
+function ladderError(attempts, explicit) {
+	const reason = {
+		ok: "ok",
+		"in-use": "端口已被占用",
+		"windows-reserved": "落在 Windows 保留端口段",
+		"windows-unreachable": "Windows 侧连不上（转发未建立）"
+	};
+	const rows = attempts.map((a) => `  ${a.bind === "all" ? "0.0.0.0" : "127.0.0.1"}:${a.port}  ${reason[a.result]}${a.detail ? `（${a.detail}）` : ""}`);
+	const hint = explicit ? "显式 --port 不跳级：换一个端口（--port <n>），或在 WSL 里用 --bind all 绑 0.0.0.0 让宿主直连。" : "可用 --port <n> 指定端口、--bind all 直接绑 0.0.0.0，或把 Windows 动态端口段恢复默认（见 README「端口与宿主访问」）。";
+	return /* @__PURE__ */ new Error(`paintress web 没有可用端口，${attempts.length} 个候选全部失败：\n${rows.join("\n")}\n${hint}`);
+}
+/** 宿主预检：能提前判死的就别去 listen（保留段 / 宿主占用）。返回 null = 继续尝试 */
+function predictSkip(cand, report, wsl, log) {
+	if (!wsl || cand.bind !== "loopback" || report === null) return null;
+	if (inRange(report.excluded, cand.port)) {
+		log(`${cand.port} 落在 Windows 保留端口段，跳过`);
+		return {
+			port: cand.port,
+			bind: cand.bind,
+			result: "windows-reserved"
+		};
+	}
+	if (report.bindable[String(cand.port)] === false) {
+		log(`${cand.port} 在 Windows 侧绑不上（已被占用或已被转发），跳过`);
+		return {
+			port: cand.port,
+			bind: cand.bind,
+			result: "in-use",
+			detail: "Windows 侧不可绑（已被占用或已转发）"
+		};
+	}
+	return null;
+}
+/**
+* 端到端复核：从宿主侧取 `/api/ping`，只认本次进程的 nonce。
+* 返回 'unreachable' 表示「本机起得来、宿主连不上」—— 正是 WSL 转发没落地的那种失败。
+*/
+async function verifyCandidate(cand, ctx) {
+	if (!ctx.wsl) return "skipped";
+	if (!ctx.canProbe) return "unavailable";
+	let target = null;
+	if (cand.bind === "loopback") target = `127.0.0.1:${cand.port}`;
+	else if (ctx.ipv4 !== null) target = `${ctx.ipv4}:${cand.port}`;
+	if (target === null) return "unreachable";
+	return await ctx.probe(`http://${target}/api/ping?nonce=${ctx.nonce}`, PROBE_BUDGET_MS[cand.bind]) ? "ok" : "unreachable";
+}
+/**
+* 走完阶梯并返回**已经 listen 成功且复核通过**的 server。
+* 调用方只需要接管返回值，不必关心中间换过几个候选。
+*/
+async function bindWithFallback(opts) {
+	const seams = opts.seams ?? {};
+	const log = opts.log ?? (() => {});
+	const explicit = opts.requestedPort !== void 0;
+	const ephemeral = opts.requestedPort === 0;
+	const wsl = !ephemeral && (seams.isWsl ?? isWsl)();
+	const requestedPort = opts.requestedPort ?? opts.ports?.[0] ?? 6033;
+	const plan = candidatesFor(opts);
+	const attempts = [];
+	const ipv4 = (seams.hostIpv4 ?? defaultRouteIpv4)();
+	const probe = seams.probe ?? windowsProbe;
+	const canProbe = wsl && (seams.probe !== void 0 || interopEnabled() && windowsSystem32() !== null);
+	let report = null;
+	if (canProbe && plan.some((c) => c.bind === "loopback")) {
+		report = await (seams.report ?? windowsReport)(plan.filter((c) => c.bind === "loopback").map((c) => c.port));
+		if (report === null) log("Windows 侧体检失败，跳过宿主预检（仍做端到端复核）");
+	} else if (wsl && !canProbe) log("Windows interop 不可用：跳过宿主预检与复核");
+	const probeCtx = {
+		wsl,
+		canProbe,
+		ipv4,
+		nonce: opts.nonce,
+		probe
+	};
+	for (const cand of plan) {
+		if (wsl && cand.bind === "all" && ipv4 === null) {
+			attempts.push({
+				port: cand.port,
+				bind: cand.bind,
+				result: "windows-unreachable",
+				detail: "找不到默认路由网卡的 IPv4 地址"
+			});
+			log(`${cand.port} (all) 没有可供宿主访问的网卡地址，换下一个`);
+			continue;
+		}
+		const skip = predictSkip(cand, report, wsl, log);
+		if (skip !== null) {
+			attempts.push(skip);
+			continue;
+		}
+		const server = opts.create();
+		try {
+			await listenOn(server, cand);
+		} catch (cause) {
+			const code = cause.code;
+			if (code === "EADDRINUSE" || code === "EACCES") {
+				attempts.push({
+					port: cand.port,
+					bind: cand.bind,
+					result: "in-use",
+					detail: String(code)
+				});
+				log(`${cand.port} (${cand.bind}) 本机不可用（${code}），换下一个`);
+				continue;
+			}
+			throw cause;
+		}
+		const verdict = await verifyCandidate(cand, probeCtx);
+		if (verdict === "unreachable") {
+			closeQuietly(server);
+			attempts.push({
+				port: cand.port,
+				bind: cand.bind,
+				result: "windows-unreachable"
+			});
+			log(`${cand.port} (${cand.bind}) 已监听但 Windows 侧连不上，换下一个`);
+			continue;
+		}
+		attempts.push({
+			port: cand.port,
+			bind: cand.bind,
+			result: "ok"
+		});
+		const resolved = server.address();
+		const actualPort = typeof resolved === "object" && resolved !== null ? resolved.port : cand.port;
+		const host = cand.bind === "loopback" ? "localhost" : ipv4 ?? cand.host;
+		const access = {
+			url: `http://${host}:${actualPort}/`,
+			host,
+			bind: cand.bind,
+			windows: verdict,
+			jumped: !ephemeral && actualPort !== requestedPort,
+			requestedPort: ephemeral ? actualPort : requestedPort,
+			attempts
+		};
+		if (access.jumped) log(`端口 ${requestedPort} 不可用，已改用 ${actualPort}`);
+		if (cand.bind === "all") log(`已绑定 0.0.0.0:${actualPort} —— 宿主浏览器用 ${access.url}（localhost 走不通）`);
+		return {
+			server,
+			endpoint: {
+				...cand,
+				port: actualPort
+			},
+			access
+		};
+	}
+	throw ladderError(attempts, explicit);
+}
+async function diagnoseNetwork(seams = {}) {
+	const wsl = (seams.isWsl ?? isWsl)();
+	const ports = [...PORT_CANDIDATES];
+	const report = wsl ? await (seams.report ?? windowsReport)(ports) : null;
+	return {
+		wsl,
+		interop: interopEnabled(),
+		system32: windowsSystem32(),
+		hostIpv4: (seams.hostIpv4 ?? defaultRouteIpv4)(),
+		defaultPort: DEFAULT_PORT,
+		candidates: ports.map((port) => ({
+			port,
+			excluded: report === null ? false : inRange(report.excluded, port),
+			windowsBindable: report === null ? null : report.bindable[String(port)] === true
+		})),
+		report
+	};
+}
 // src/web/daemon.ts
-const DEFAULT_PORT = 3316;
 const MIME = {
 	".html": "text/html; charset=utf-8",
 	".js": "text/javascript; charset=utf-8",
@@ -423,6 +800,10 @@ const MIME = {
 function mimeOf(filePath) {
 	return MIME[extname(filePath).toLowerCase()] ?? "application/octet-stream";
 }
+/** 项目内资源 → /files URL（项目名可能带斜杠，按段编码） */
+function filesUrl(project, relPath) {
+	return `/files/${project.split("/").map(encodeURIComponent).join("/")}/${relPath.split("/").filter((seg) => seg !== "").map(encodeURIComponent).join("/")}`;
+}
 /** 定位前端产物目录：源码运行 / 构建后 / cwd 三种候选，找不到则回退精简视图 */
 function findUiDist() {
 	const here = dirname(fileURLToPath(import.meta.url));
@@ -527,14 +908,60 @@ function esc(s) {
 function isTrustedWrite(req) {
 	return req.headers["x-paintress"] === "1";
 }
+/**
+* 属性面板用的变量表：项目预设打底、文档本地同名优先。
+* themed 列表取第一个可显示的值（面板只做展示，不替人挑主题）。
+*/
+function panelVars(fileAbs) {
+	const out = {};
+	const collect = (doc) => {
+		for (const [key, def] of Object.entries(doc?.variables ?? {})) {
+			const raw = def["value"];
+			const first = Array.isArray(raw) ? raw.map((e) => e !== null && typeof e === "object" ? e["value"] : void 0).find((x) => typeof x === "string" || typeof x === "number" || typeof x === "boolean") : raw;
+			if (typeof first === "string" || typeof first === "number" || typeof first === "boolean") out[key] = String(first);
+		}
+	};
+	try {
+		const p = presetPathFor(fileAbs);
+		if (p !== null) collect(loadDoc(p).doc);
+		collect(loadDoc(fileAbs).doc);
+	} catch {}
+	return out;
+}
+var FontReportStore = class {
+	byFile = /* @__PURE__ */ new Map();
+	set(project, path, report) {
+		this.byFile.set(`${project}\u0000${path}`, {
+			...report,
+			project,
+			path,
+			at: Date.now()
+		});
+	}
+	get(project, path) {
+		return this.byFile.get(`${project}\u0000${path}`);
+	}
+	list(project) {
+		return [...this.byFile.values()].filter((r) => r.project === project);
+	}
+};
 async function startDaemon(opts = {}) {
 	const releaseLock = acquireLock();
 	const registry = new Registry();
 	const marks = new MarksStore();
+	/** daemon 自己也是 doc 层的一个调用方：注册根就是它的项目表 */
+	const syncProjectRoots = () => setProjectRoots(registry.all().map((p) => p.root));
+	const fontReports = new FontReportStore();
 	const changes = new ChangesStore();
 	const watchers = new WatchManager();
 	const versions = new VersionChecker();
 	const startedAt = Date.now();
+	/** 身份串：宿主侧探测必须回显它，避免「端口上蹲着别的程序」被当成成功 */
+	const instanceNonce = randomUUID();
+	/** 绑定结果；ping 只能发生在 listen 之后（socket 服务更晚），先用占位值初始化 */
+	let port = 0;
+	let accessInfo = null;
+	let endpoint = null;
 	const idleTimeoutMs = opts.idleTimeoutMs ?? 6e4;
 	const emptyGraceMs = opts.emptyGraceMs ?? Math.min(idleTimeoutMs, 3e3);
 	const emptyBrowserMs = opts.emptyBrowserMs ?? 3e4;
@@ -671,7 +1098,8 @@ async function startDaemon(opts = {}) {
 								pid: process.pid,
 								port,
 								uptimeMs: Date.now() - startedAt,
-								projects: registry.all().length
+								projects: registry.all().length,
+								...accessInfo !== null ? { access: accessInfo } : {}
 							});
 							break;
 						case "status":
@@ -683,6 +1111,12 @@ async function startDaemon(opts = {}) {
 								version: VERSION
 							});
 							break;
+						case "fonts":
+							reply({
+								ok: true,
+								reports: fontReports.list(req.project)
+							});
+							break;
 						case "watch": {
 							everHadProjects = true;
 							const entry = registry.watch(req.project, req.dir, req.depth, req.owner === "agent" ? { owner: "agent" } : {});
@@ -694,6 +1128,7 @@ async function startDaemon(opts = {}) {
 							} catch (cause) {
 								process.stderr.write(`paintress web: 项目脚手架创建失败（${cause instanceof Error ? cause.message : String(cause)}）\n`);
 							}
+							syncProjectRoots();
 							reply({
 								ok: true,
 								watched: true,
@@ -705,6 +1140,7 @@ async function startDaemon(opts = {}) {
 						case "unwatch": {
 							const before = registry.get(req.project);
 							const removed = before === void 0 ? false : detachProject(before, "unwatch");
+							syncProjectRoots();
 							reply({
 								ok: true,
 								unwatched: removed
@@ -797,7 +1233,7 @@ async function startDaemon(opts = {}) {
 	};
 	const sockServer = createServer(handleClient);
 	const uiDist = findUiDist();
-	const httpServer = createServer$1(async (req, res) => {
+	const handleHttp = async (req, res) => {
 		lastHttpAt = Date.now();
 		const url = new URL(req.url ?? "/", "http://localhost");
 		const segments = url.pathname.split("/").filter((s) => s !== "");
@@ -823,6 +1259,17 @@ async function startDaemon(opts = {}) {
 		};
 		try {
 			if (segments[0] === "api") {
+				if (segments[1] === "ping" && segments.length === 2) {
+					sendJson(200, {
+						ok: true,
+						pong: true,
+						pid: process.pid,
+						nonce: instanceNonce,
+						port,
+						bind: endpoint === null ? "loopback" : endpoint.bind
+					});
+					return;
+				}
 				if (segments[1] === "projects" && segments.length === 2) {
 					sendJson(200, {
 						ok: true,
@@ -898,6 +1345,61 @@ async function startDaemon(opts = {}) {
 					});
 					return;
 				}
+				if (segments[1] === "fonts" && segments.length === 2) {
+					const qProject = url.searchParams.get("project") ?? "";
+					const qFile = url.searchParams.get("path") ?? "";
+					if (req.method === "POST") {
+						const raw = await readBody();
+						let body;
+						try {
+							body = JSON.parse(raw);
+						} catch {
+							sendJson(400, {
+								ok: false,
+								error: "请求体不是合法 JSON"
+							});
+							return;
+						}
+						const project = typeof body["project"] === "string" ? body["project"] : qProject;
+						const path = typeof body["path"] === "string" ? body["path"] : qFile;
+						if (project === "" || path === "") {
+							sendJson(400, {
+								ok: false,
+								error: "缺少 project / path"
+							});
+							return;
+						}
+						if (!registry.get(project)) {
+							sendJson(404, {
+								ok: false,
+								error: `未注册的项目：${project}`
+							});
+							return;
+						}
+						const checked = Array.isArray(body["checked"]) ? body["checked"].map(String) : [];
+						const missing = Array.isArray(body["missing"]) ? body["missing"].map(String) : [];
+						fontReports.set(project, path, {
+							checked,
+							missing,
+							substituted: [],
+							source: "viewer"
+						});
+						sendJson(200, { ok: true });
+						return;
+					}
+					if (req.method !== "GET") {
+						sendJson(405, {
+							ok: false,
+							error: "不支持的方法"
+						});
+						return;
+					}
+					sendJson(200, {
+						ok: true,
+						reports: fontReports.list(qProject)
+					});
+					return;
+				}
 				if (segments[1] === "changes") {
 					const qProject = url.searchParams.get("project") ?? "";
 					const qFile = url.searchParams.get("path") ?? "";
@@ -909,6 +1411,132 @@ async function startDaemon(opts = {}) {
 					});
 					return;
 				}
+				if (segments[1] === "export" && req.method === "GET") {
+					const qProject = url.searchParams.get("project") ?? "";
+					const qFile = url.searchParams.get("path") ?? "";
+					const qBoard = url.searchParams.get("board") ?? "";
+					const qScale = Number(url.searchParams.get("scale") ?? "1");
+					if (qProject === "" || qFile === "" || qBoard === "") {
+						sendJson(400, {
+							ok: false,
+							error: "缺少 project / path / board"
+						});
+						return;
+					}
+					if (qScale !== .5 && qScale !== 1 && qScale !== 2) {
+						sendJson(400, {
+							ok: false,
+							error: "scale 只支持 0.5 / 1 / 2"
+						});
+						return;
+					}
+					const entry = registry.get(qProject);
+					if (!entry) {
+						sendJson(404, {
+							ok: false,
+							error: `未注册的项目：${qProject}`
+						});
+						return;
+					}
+					const abs = safeJoin(entry.rootReal, qFile);
+					if (!abs) {
+						sendJson(400, {
+							ok: false,
+							error: `路径不在项目内：${qFile}`
+						});
+						return;
+					}
+					if (findBrowser() === null) {
+						sendJson(501, {
+							ok: false,
+							error: "本机没有 Chromium/Chrome，无法导出 PNG（可用 PTR_BROWSER 指定）"
+						});
+						return;
+					}
+					const tmpPng = join(tmpdir(), `paintress-export-${randomUUID()}.png`);
+					try {
+						const shot = await screenshotPen(abs, tmpPng, {
+							board: qBoard,
+							scale: qScale
+						});
+						const buf = await readFile(tmpPng);
+						const raw = `${(qFile.split("/").pop() ?? qFile).replace(/\.[^.]+$/, "")}-${shot.board?.name !== void 0 && shot.board.name !== "" ? shot.board.name : shot.board?.id ?? qBoard}@${qScale}x.png`;
+						const ascii = raw.replace(/[^A-Za-z0-9._@-]+/g, "_");
+						res.writeHead(200, {
+							"content-type": "image/png",
+							"content-disposition": `attachment; filename="${ascii}"; filename*=UTF-8''${encodeURIComponent(raw)}`,
+							"cache-control": "no-store",
+							"x-paintress-scale": String(shot.scale)
+						});
+						res.end(buf);
+						return;
+					} catch (cause) {
+						sendJson(400, {
+							ok: false,
+							error: cause instanceof Error ? cause.message : String(cause)
+						});
+						return;
+					} finally {
+						try {
+							unlinkSync(tmpPng);
+						} catch {}
+					}
+				}
+				if (segments[1] === "node" && req.method === "GET") {
+					const qProject = url.searchParams.get("project") ?? "";
+					const qFile = url.searchParams.get("path") ?? "";
+					const qId = url.searchParams.get("id") ?? "";
+					if (qProject === "" || qFile === "" || qId === "") {
+						sendJson(400, {
+							ok: false,
+							error: "缺少 project / path / id"
+						});
+						return;
+					}
+					const entry = registry.get(qProject);
+					if (!entry) {
+						sendJson(404, {
+							ok: false,
+							error: `未注册的项目：${qProject}`
+						});
+						return;
+					}
+					const abs = safeJoin(entry.rootReal, qFile);
+					if (!abs) {
+						sendJson(400, {
+							ok: false,
+							error: `路径不在项目内：${qFile}`
+						});
+						return;
+					}
+					let doc;
+					try {
+						doc = loadDoc(abs).doc;
+					} catch (cause) {
+						sendJson(404, {
+							ok: false,
+							error: cause instanceof Error ? cause.message : String(cause)
+						});
+						return;
+					}
+					const node = findNodeIn(doc.children, qId);
+					if (node === null) {
+						sendJson(404, {
+							ok: false,
+							error: `节点不存在：${qId}`
+						});
+						return;
+					}
+					entry.lastAccess = Date.now();
+					const { children, ...fields } = node;
+					sendJson(200, {
+						ok: true,
+						node: fields,
+						childrenCount: Array.isArray(children) ? children.length : 0,
+						vars: panelVars(abs)
+					});
+					return;
+				}
 				if (segments[1] === "marks") {
 					const qProject = url.searchParams.get("project") ?? "";
 					if (req.method === "GET") {
@@ -951,6 +1579,7 @@ async function startDaemon(opts = {}) {
 							mark: marks.add({
 								project: projectIn,
 								nodeId,
+								...typeof body["file"] === "string" && body["file"] !== "" ? { file: body["file"] } : {},
 								...typeof body["name"] === "string" ? { name: body["name"] } : {},
 								...typeof body["type"] === "string" ? { type: body["type"] } : {},
 								...typeof body["path"] === "string" ? { path: body["path"] } : {}
@@ -960,9 +1589,10 @@ async function startDaemon(opts = {}) {
 					}
 					if (req.method === "DELETE") {
 						const nodeId = url.searchParams.get("nodeId");
+						const file = url.searchParams.get("file") ?? void 0;
 						sendJson(200, {
 							ok: true,
-							cleared: nodeId ? marks.remove(qProject, nodeId) ? 1 : 0 : marks.clear(qProject)
+							cleared: nodeId ? marks.remove(qProject, nodeId, file) ? 1 : 0 : marks.clear(qProject)
 						});
 						return;
 					}
@@ -1032,7 +1662,8 @@ async function startDaemon(opts = {}) {
 						sendJson(200, {
 							ok: true,
 							path,
-							items
+							items,
+							groups: listPresetGroups(entry.rootReal).groups
 						});
 						return;
 					}
@@ -1078,7 +1709,7 @@ async function startDaemon(opts = {}) {
 						if (!isPresetType(typeRaw)) {
 							sendJson(400, {
 								ok: false,
-								error: "type 必须是 color 或 radius"
+								error: "type 必须是 color / radius / spacing / fontSize / font"
 							});
 							return;
 						}
@@ -1094,7 +1725,8 @@ async function startDaemon(opts = {}) {
 							sendJson(200, {
 								ok: true,
 								path: presetPathFor(entry.rootReal),
-								items
+								items,
+								groups: listPresetGroups(entry.rootReal).groups
 							});
 						} catch (cause) {
 							sendJson(400, {
@@ -1234,10 +1866,21 @@ async function startDaemon(opts = {}) {
 					return;
 				}
 				const loaded = loadDoc(abs);
-				const rendered = renderDocument(applyProjectPresets(loaded.doc, abs).doc, { title: relPath });
+				const merged = applyProjectPresets(loaded.doc, abs).doc;
+				const { registry: fontRegistry } = projectFontRegistry(abs);
+				const fontPlan = planFonts(fontRegistry, (source) => source.target === void 0 ? null : filesUrl(entry.name, source.target));
+				const rendered = renderDocument(merged, {
+					title: relPath,
+					fonts: fontPlan,
+					probeFonts: url.searchParams.get("embed") === "1"
+				});
 				const dir = relPath.includes("/") ? relPath.slice(0, relPath.lastIndexOf("/") + 1) : "";
 				const baseHref = `/files/${entry.name.split("/").map(encodeURIComponent).join("/")}/${dir.split("/").filter((s) => s !== "").map(encodeURIComponent).join("/")}${dir ? "/" : ""}`;
 				let html = rendered.html.replace("<head>", `<head>\n<base href="${baseHref}">`);
+				if (url.searchParams.get("embed") === "1") {
+					const fontApi = `/api/fonts?project=${encodeURIComponent(entry.name)}&path=${encodeURIComponent(relPath)}`;
+					html = html.replace("</head>", `<script>window.PAINTRESS_FONT_URL=${JSON.stringify(fontApi)}<\/script>\n</head>`);
+				}
 				if (url.searchParams.get("embed") !== "1") {
 					const liveScript = `<script>\n(function(){\n  var es = new EventSource('/events?project=${encodeURIComponent(entry.name)}&path=${encodeURIComponent(relPath)}');\n  es.addEventListener('change', function(){ location.reload(); });\n})();\n<\/script>`;
 					html = html.replace("</body>", `${liveScript}</body>`);
@@ -1264,12 +1907,16 @@ async function startDaemon(opts = {}) {
 					send(404, "component not found", "text/plain; charset=utf-8");
 					return;
 				}
-				send(200, renderDocument({
+				const single = {
 					...doc,
 					children: [node]
-				}, {
+				};
+				const { registry: fontRegistry } = projectFontRegistry(compPath);
+				const fontPlan = planFonts(fontRegistry, (source) => source.target === void 0 ? null : filesUrl(entry.name, source.target));
+				send(200, renderDocument(single, {
 					title: id,
-					transparent: true
+					transparent: true,
+					fonts: fontPlan
 				}).html);
 				return;
 			}
@@ -1286,10 +1933,27 @@ async function startDaemon(opts = {}) {
 					send(404, "file not found", "text/plain; charset=utf-8");
 					return;
 				}
+				const ext = extname(abs).toLowerCase();
+				const isFont = ext === ".woff" || ext === ".woff2" || ext === ".ttf" || ext === ".otf";
+				if (isFont) try {
+					if (statSync(abs).size > 33554432) {
+						sendJson(413, {
+							ok: false,
+							error: "字体文件超过 32 MB，拒绝加载"
+						});
+						return;
+					}
+				} catch {
+					sendJson(404, {
+						ok: false,
+						error: "file not found"
+					});
+					return;
+				}
 				const buf = await readFile(abs);
 				res.writeHead(200, {
 					"content-type": mimeOf(abs),
-					"cache-control": "no-cache"
+					"cache-control": isFont ? "public, max-age=31536000, immutable" : "no-cache"
 				});
 				res.end(buf);
 				return;
@@ -1323,7 +1987,8 @@ async function startDaemon(opts = {}) {
 					const info = registry.info(p);
 					return `<div class="card"><h2 style="margin:0 0 4px"><a href="${`/${p.name.split("/").map(encodeURIComponent).join("/")}`}">${esc(p.label)}</a></h2><div class="meta">${esc(info.root)} · ${info.fileCount} 个设计稿 · agent ${info.agentConns} · 浏览器 ${info.browserConns}</div></div>`;
 				}).join("");
-				send(200, layout("项目", `<h1>paintress</h1><div class="meta">pid ${process.pid} · 端口 ${opts.port ?? DEFAULT_PORT} · 运行 ${Math.round((Date.now() - startedAt) / 1e3)}s</div><p class="meta">前端未构建（<code>ui/dist</code> 不存在），当前为精简视图。</p>` + (items || "<p class=\"empty\">还没有注册任何项目。用 <code>paintress watch &lt;name&gt; &lt;dir&gt;</code> 注册。</p>")));
+				const boundHost = endpoint === null ? "127.0.0.1" : endpoint.host;
+				send(200, layout("项目", `<h1>paintress</h1><div class="meta">pid ${process.pid} · 端口 ${port} · 绑定 ${boundHost} · 运行 ${Math.round((Date.now() - startedAt) / 1e3)}s</div><p class="meta">前端未构建（<code>ui/dist</code> 不存在），当前为精简视图。</p>` + (items || "<p class=\"empty\">还没有注册任何项目。用 <code>paintress watch &lt;name&gt; &lt;dir&gt;</code> 注册。</p>")));
 				return;
 			}
 			const hit = resolveProjectPrefix(registry, segments);
@@ -1343,27 +2008,40 @@ async function startDaemon(opts = {}) {
 		} catch (cause) {
 			send(500, layout("错误", `<h1>500</h1><pre>${esc(cause instanceof Error ? cause.message : String(cause))}</pre>`));
 		}
-	});
-	const desiredPort = opts.port ?? DEFAULT_PORT;
-	const port = await new Promise((resolve, reject) => {
-		httpServer.once("error", (err) => {
-			reject(err.code === "EADDRINUSE" ? /* @__PURE__ */ new Error(`端口 ${desiredPort} 已被占用；可用 --port 指定其他端口`) : err);
-		});
-		httpServer.listen(desiredPort, "127.0.0.1", () => {
-			const addr = httpServer.address();
-			resolve(typeof addr === "object" && addr !== null ? addr.port : desiredPort);
+	};
+	let bound;
+	try {
+		bound = await bindWithFallback({
+			create: () => createServer$1(handleHttp),
+			nonce: instanceNonce,
+			...opts.port !== void 0 ? { requestedPort: opts.port } : {},
+			...opts.bind !== void 0 ? { bind: opts.bind } : {},
+			...opts.quiet === true ? {} : { log: (line) => process.stderr.write(`paintress web: ${line}\n`) }
 		});
-	});
+	} catch (cause) {
+		releaseLock();
+		throw cause;
+	}
+	const httpServer = bound.server;
+	port = bound.endpoint.port;
+	endpoint = bound.endpoint;
+	accessInfo = bound.access;
 	const sock = socketPath();
 	try {
 		if (existsSync(sock)) unlinkSync(sock);
 	} catch {}
-	await new Promise((resolve, reject) => {
-		sockServer.once("error", reject);
-		sockServer.listen(sock, () => {
-			resolve();
+	try {
+		await new Promise((resolve, reject) => {
+			sockServer.once("error", reject);
+			sockServer.listen(sock, () => {
+				resolve();
+			});
 		});
-	});
+	} catch (cause) {
+		httpServer.close();
+		releaseLock();
+		throw cause;
+	}
 	/**
 	* 生命周期策略：控制权在 agent 侧，人不需要管进程在不在。
 	*
@@ -1439,7 +2117,16 @@ async function startDaemon(opts = {}) {
 		port,
 		pid: process.pid,
 		close: () => shutdown("close"),
-		registry
+		registry,
+		access: accessInfo ?? {
+			url: `http://localhost:${port}/`,
+			host: "localhost",
+			bind: "loopback",
+			windows: "skipped",
+			jumped: false,
+			requestedPort: opts.port ?? 6033,
+			attempts: []
+		}
 	};
 }
 // src/integrations/clients.ts
@@ -1741,7 +2428,9 @@ const FLAG_KEYS = /* @__PURE__ */ new Set([
 	"index",
 	"scale",
 	"port",
+	"bind",
 	"idle",
+	"foreground",
 	"daemon",
 	"dry-run",
 	"opencode-layout",
@@ -1754,14 +2443,28 @@ const FLAG_KEYS = /* @__PURE__ */ new Set([
 	"force",
 	"board",
 	"parent",
+	"apply",
+	"min-uses",
+	"key",
+	"group",
+	"prop",
+	"value",
+	"preview",
+	"note",
+	"metrics",
+	"embed-fonts",
 	NO_OPEN_FLAG
 ]);
+/** `daemon` 只是历史别名：默认行为已经是后台，留着不报错 */
 const BOOLEAN_FLAGS = /* @__PURE__ */ new Set([
 	"regex",
 	"reusable",
+	"foreground",
 	"daemon",
 	"dry-run",
 	"force",
+	"apply",
+	"embed-fonts",
 	NO_OPEN_FLAG
 ]);
 /** 纯函数：argv → 命令 + 位置参数 + 标志（可单测） */
@@ -1799,6 +2502,29 @@ function currentLaunchCommand() {
 		realpath: (p) => realpathSync(p)
 	});
 }
+/** CLI 输出的 `http` 字段保持历史形态（不带结尾斜杠）；`access.url` 仍带斜杠作为基地址 */
+function httpOf(access) {
+	return access.url.replace(/\/$/, "");
+}
+/** `paintress doctor` 的「当前 daemon 实况」：没跑就是 null，不拉起进程 */
+async function daemonSnapshot() {
+	const info = await queryDaemon(500);
+	if (info === null) return null;
+	return {
+		pid: info.pid,
+		port: info.port,
+		url: info.access.url,
+		bind: info.access.bind,
+		windows: info.access.windows,
+		jumped: info.access.jumped
+	};
+}
+/** `--bind` 只接受三种取值：auto（默认，走端口阶梯）、loopback、all */
+function parseBind(v) {
+	if (v === void 0) return void 0;
+	if (v === "auto" || v === "loopback" || v === "all") return v;
+	throw new Error(`--bind 只接受 auto|loopback|all，收到：${v}`);
+}
 function flagStr(f, key) {
 	const v = f[key];
 	return typeof v === "string" && v !== "" ? v : void 0;
@@ -1810,6 +2536,14 @@ function flagNum(f, key) {
 	if (!Number.isInteger(n) || n < 0) throw new Error(`--${key} 需要非负整数，收到：${v}`);
 	return n;
 }
+/** 连续数值参数（截图倍率 0.2–2）；与整数参数分开，不能把 0.8 当成非法 */
+function flagDecimal(f, key) {
+	const v = flagStr(f, key);
+	if (v === void 0) return void 0;
+	const n = Number(v);
+	if (!Number.isFinite(n)) throw new Error(`--${key} 需要数字，收到：${v}`);
+	return n;
+}
 function parseJson(text, what) {
 	try {
 		return JSON.parse(text);
@@ -1823,6 +2557,23 @@ async function call(tool, args) {
 	return await def.run(args);
 }
 /** 入口：返回退出码（可单测） */
+/** 当前目录所在项目里两个关键文件的现状（只报告，不创建） */
+function cwdDesignSystem() {
+	try {
+		const root = findProjectRoot(process.cwd());
+		return root === null ? null : projectFilesInfo(root);
+	} catch {
+		return null;
+	}
+}
+/** CLI 进程也要用「注册根」解析项目文件：从 daemon 拉一次项目表即可 */
+async function syncProjectRoots() {
+	if (!isDaemonRunning()) return;
+	try {
+		const res = await sendRequest({ kind: "status" }, 2e3);
+		if (res.ok && "projects" in res && Array.isArray(res.projects)) setProjectRoots(res.projects.map((p) => p.root));
+	} catch {}
+}
 async function main(argv) {
 	if (argv[0] === "--version" || argv[0] === "-v" || argv[0] === "version") {
 		console.log(`paintress ${VERSION}`);
@@ -1830,10 +2581,11 @@ async function main(argv) {
 	}
 	const parsed = parseArgv(argv);
 	if (!parsed) {
-		console.error("用法：paintress <mcp|web|ping|status|watch|unwatch|attach|stop|new|info|query|get|update|insert|delete|move|batch|render|shot|validate|install|doctor|mcp-config> ...（版本：paintress --version）");
+		console.error("用法：paintress <mcp|web|ping|status|watch|unwatch|attach|stop|new|info|query|get|update|insert|delete|move|batch|render|shot|validate|audit|establish|adjust|install|doctor|mcp-config> ...（版本：paintress --version）");
 		return 2;
 	}
 	const { cmd, positionals, flags } = parsed;
+	await syncProjectRoots();
 	const [file, a1, a2] = positionals;
 	try {
 		if (cmd === "mcp") {
@@ -1845,7 +2597,7 @@ async function main(argv) {
 				console.log(JSON.stringify({
 					ok: false,
 					running: false,
-					hint: "未运行：paintress web --daemon"
+					hint: "未运行：paintress web"
 				}));
 				return 1;
 			}
@@ -1956,7 +2708,13 @@ async function main(argv) {
 					dryRun
 				});
 			}
-			console.log(JSON.stringify({
+			console.log(JSON.stringify(cmd === "doctor" ? {
+				ok: true,
+				launch,
+				results,
+				net: await diagnoseNetwork(),
+				daemon: await daemonSnapshot()
+			} : {
 				ok: true,
 				launch,
 				results
@@ -1986,9 +2744,9 @@ async function main(argv) {
 		if (cmd === "web") {
 			const port = flagNum(flags, "port");
 			const idle = flagNum(flags, "idle");
+			const bind = parseBind(flagStr(flags, "bind"));
 			const noOpen = flags[NO_OPEN_FLAG] === true || process.env["PAINTRESS_NO_OPEN"] === "1";
-			const url = (p) => `http://localhost:${p}`;
-			const running = await reuseDaemon(port);
+			const running = await reuseDaemon(port, bind);
 			if (running !== null) {
 				console.log(JSON.stringify({
 					ok: true,
@@ -1996,13 +2754,16 @@ async function main(argv) {
 					reused: true,
 					pid: running.pid,
 					port: running.port,
-					http: url(running.port)
+					http: httpOf(running.access),
+					access: running.access,
+					designSystem: cwdDesignSystem()
 				}, null, 2));
 				return 0;
 			}
-			if (flags["daemon"] === true) {
+			if (flags["foreground"] !== true) {
 				const res = await ensureDaemon({
 					...port !== void 0 ? { port } : {},
+					...bind !== void 0 ? { bind } : {},
 					...idle !== void 0 ? { idleTimeoutMs: idle } : {},
 					noOpen
 				});
@@ -2012,7 +2773,9 @@ async function main(argv) {
 					reused: !res.started,
 					pid: res.pid,
 					port: res.port,
-					http: url(res.port)
+					http: httpOf(res.access),
+					access: res.access,
+					designSystem: cwdDesignSystem()
 				}, null, 2));
 				return 0;
 			}
@@ -2020,6 +2783,7 @@ async function main(argv) {
 			try {
 				handle = await startDaemon({
 					...port !== void 0 ? { port } : {},
+					...bind !== void 0 ? { bind } : {},
 					...idle !== void 0 ? { idleTimeoutMs: idle } : {},
 					emptyGraceMs: 6e4,
 					updateCheck: true
@@ -2033,20 +2797,21 @@ async function main(argv) {
 					reused: true,
 					pid: again.pid,
 					port: again.port,
-					http: url(again.port)
+					http: httpOf(again.access),
+					access: again.access
 				}, null, 2));
 				return 0;
 			}
-			const http = url(handle.port);
 			console.log(JSON.stringify({
 				ok: true,
 				pid: handle.pid,
 				port: handle.port,
-				http
+				http: httpOf(handle.access),
+				access: handle.access
 			}, null, 2));
 			if (!noOpen) {
-				const { openBrowser } = await import("./server-DZRNNWac.js").then((n) => n.i);
-				openBrowser(`${http}/`);
+				const { openBrowser } = await import("./server-Buuoq3kq.js").then((n) => n.i);
+				openBrowser(handle.access.url);
 			}
 			await new Promise((resolve) => {
 				process.once("SIGINT", () => void handle.close().then(() => resolve()));
@@ -2061,8 +2826,45 @@ async function main(argv) {
 				action: "list",
 				...a1 !== void 0 ? { path: a1 } : {}
 			});
-			else if (action === "set") {
-				if (!a1 || !a2 || !positionals[3] || !positionals[4]) throw new Error("用法：paintress preset set <dir> <key> <color|radius> <value> [--name 名称]");
+			else if (action === "groups") {
+				const full = await call("paintress_preset", {
+					action: "list",
+					...a1 !== void 0 ? { path: a1 } : {}
+				});
+				out = {
+					ok: true,
+					path: full.path ?? null,
+					groups: full.groups ?? {}
+				};
+			} else if (action === "seed") out = await call("paintress_preset", {
+				action: "seed",
+				...a1 !== void 0 ? { path: a1 } : {},
+				...flags["apply"] === true ? { apply: true } : {}
+			});
+			else if (action === "set-group") {
+				if (!a1 || !a2 || !positionals[3] || !positionals[4]) throw new Error("用法：paintress preset set-group <dir> <组名> <target> '<props-json>'");
+				let props;
+				try {
+					props = JSON.parse(positionals[4]);
+				} catch {
+					throw new Error(`props 不是合法 JSON：${positionals[4]}`);
+				}
+				out = await call("paintress_preset", {
+					action: "set-group",
+					path: a1,
+					group: a2,
+					target: positionals[3],
+					props
+				});
+			} else if (action === "remove-group") {
+				if (!a1 || !a2) throw new Error("用法：paintress preset remove-group <dir> <组名>");
+				out = await call("paintress_preset", {
+					action: "remove-group",
+					path: a1,
+					group: a2
+				});
+			} else if (action === "set") {
+				if (!a1 || !a2 || !positionals[3] || !positionals[4]) throw new Error("用法：paintress preset set <dir> <key> <color|radius|spacing|fontSize|font> <value> [--name 名称]");
 				out = await call("paintress_preset", {
 					action: "set",
 					path: a1,
@@ -2078,7 +2880,7 @@ async function main(argv) {
 					path: a1,
 					key: a2
 				});
-			} else throw new Error(`未知 preset 动作：${action}（list / set / remove）`);
+			} else throw new Error(`未知 preset 动作：${action}（list / set / remove / seed / set-group / remove-group）`);
 			console.log(JSON.stringify(out, null, 2));
 			return 0;
 		}
@@ -2097,7 +2899,76 @@ async function main(argv) {
 					...flagStr(flags, "parent") !== void 0 ? { parent: flagStr(flags, "parent") } : {},
 					...flagNum(flags, "index") !== void 0 ? { index: flagNum(flags, "index") } : {}
 				});
-			} else throw new Error(`未知 component 动作：${action}（list / insert）`);
+			} else if (action === "add") {
+				if (!a1 || !a2) throw new Error("用法：paintress component add <file> <id> [--name 名称] [--parent p] [--index n]");
+				out = await call("paintress_component", {
+					action: "add",
+					path: a1,
+					id: a2,
+					...flagStr(flags, "name") !== void 0 ? { name: flagStr(flags, "name") } : {},
+					...flagStr(flags, "parent") !== void 0 ? { parent: flagStr(flags, "parent") } : {},
+					...flagNum(flags, "index") !== void 0 ? { index: flagNum(flags, "index") } : {}
+				});
+			} else throw new Error(`未知 component 动作：${action}（list / insert / add）`);
+			console.log(JSON.stringify(out, null, 2));
+			return 0;
+		}
+		if (cmd === "font") {
+			const action = file ?? "list";
+			if (action === "list") out = await call("paintress_font", {
+				action: "list",
+				...a1 !== void 0 ? { path: a1 } : {}
+			});
+			else if (action === "remove") {
+				if (!a1 || !a2) throw new Error("用法：paintress font remove <dir> <family>");
+				out = await call("paintress_font", {
+					action: "remove",
+					path: a1,
+					family: a2
+				});
+			} else if (action === "default") {
+				if (!a1 || !a2) throw new Error("用法：paintress font default <dir> <token-or-family>");
+				out = await call("paintress_font", {
+					action: "default",
+					path: a1,
+					value: a2
+				});
+			} else if (action === "add") {
+				if (!a1 || !a2 || !positionals[3]) throw new Error("用法：paintress font add <dir> <family> <web|css|file|system|bundle> [source] [--preview x] [--note n] [--metrics '{\"sizeAdjust\":\"96%\"}']");
+				const metricsRaw = flagStr(flags, "metrics");
+				let metrics;
+				if (metricsRaw !== void 0) try {
+					metrics = JSON.parse(metricsRaw);
+				} catch {
+					throw new Error(`metrics 不是合法 JSON：${metricsRaw}`);
+				}
+				const preview = flagStr(flags, "preview");
+				const note = flagStr(flags, "note");
+				out = await call("paintress_font", {
+					action: "add",
+					path: a1,
+					family: a2,
+					kind: positionals[3],
+					...positionals[4] !== void 0 ? { source: positionals[4] } : {},
+					...preview !== void 0 ? { preview } : {},
+					...note !== void 0 ? { note } : {},
+					...metrics !== void 0 ? { metrics } : {}
+				});
+			} else throw new Error(`未知 font 动作：${action}（list / add / remove / default）`);
+			console.log(JSON.stringify(out, null, 2));
+			return 0;
+		}
+		if (cmd === "project") {
+			out = await call("paintress_project", { ...file !== void 0 ? { path: file } : {} });
+			console.log(JSON.stringify(out, null, 2));
+			return 0;
+		}
+		if (cmd === "convert") {
+			out = await call("paintress_convert", {
+				path: file,
+				...a1 !== void 0 ? { out: a1 } : {},
+				...flags["force"] === true ? { overwrite: true } : {}
+			});
 			console.log(JSON.stringify(out, null, 2));
 			return 0;
 		}
@@ -2191,9 +3062,36 @@ async function main(argv) {
 				if (!a1) throw new Error("缺少 <out.html> 参数");
 				out = await call("paintress_render", {
 					path: file,
-					out: a1
+					out: a1,
+					...flags["embed-fonts"] === true ? { embedFonts: true } : {}
+				});
+				break;
+			case "audit":
+				out = await call("paintress_audit", { path: file });
+				break;
+			case "establish":
+				out = await call("paintress_establish", {
+					path: file,
+					...flags["apply"] === true ? { apply: true } : {},
+					...flagNum(flags, "min-uses") !== void 0 ? { minUses: flagNum(flags, "min-uses") } : {}
 				});
 				break;
+			case "adjust": {
+				const key = flagStr(flags, "key");
+				const group = flagStr(flags, "group");
+				const prop = flagStr(flags, "prop");
+				const value = flagStr(flags, "value");
+				if (value === void 0) throw new Error("adjust 需要 --value");
+				out = await call("paintress_adjust", {
+					path: file,
+					value,
+					...key !== void 0 ? { key } : {},
+					...group !== void 0 ? { group } : {},
+					...prop !== void 0 ? { prop } : {},
+					...flags["apply"] === true ? { apply: true } : {}
+				});
+				break;
+			}
 			case "shot": {
 				if (!a1) throw new Error("缺少 <out.png> 参数");
 				if (flags["board"] === true) throw new Error("--board 需要画板 id 或 name");
@@ -2201,7 +3099,7 @@ async function main(argv) {
 				out = await call("paintress_screenshot", {
 					path: file,
 					out: a1,
-					...flagNum(flags, "scale") !== void 0 ? { scale: flagNum(flags, "scale") } : {},
+					...flagDecimal(flags, "scale") !== void 0 ? { scale: flagDecimal(flags, "scale") } : {},
 					...board !== void 0 ? { board } : {}
 				});
 				break;