pindeck 3.2.0-beta.1 → 3.3.0

package/README.md

@@ -1,10 +1,9 @@
 # PinDeck
 
-> **macOS, and Linux as a beta · Version 3 beta preview** (`3.2.0-beta.1`). On Linux, PinDeck runs as a
-> headless server that you use from your Mac's browser through an SSH tunnel (see
-> [Running on a Linux server](#running-on-a-linux-server-beta)). Windows is not supported. The beta is on
-> npm’s `beta` channel and the [`v3-beta`](https://github.com/ehabets/PinDeck/tree/v3-beta) branch; stable
-> releases (`npx pindeck`) stay on 2.x. See installation below.
+> **macOS and Linux · Version 3** (`3.3.0`). On Linux, PinDeck runs as a headless server that you use
+> from your Mac's browser through an SSH tunnel (see [Running on a Linux server](#running-on-a-linux-server)).
+> Windows is not supported. Coming from PinDeck 2: version 3 keeps its settings and chats in
+> `~/.pindeck-v3`, apart from 2.x (see [Models, providers and configuration](#models-providers-and-configuration)).
 
 **Pin it. Say it. Done.** PinDeck is a local editor for HTML slide decks (reveal.js): the slides on
 the left, the slide in the middle, and a chat with Claude Code or OpenAI Codex on the right. You click elements to
@@ -32,29 +31,28 @@ checked the layout; the next request, still being typed, refers to the new pins
 
 ## Quick start
 
-Runs on macOS, and on Linux as a beta. The npm package declares `"os": ["darwin", "linux"]`, so normal
+Runs on macOS and Linux. The npm package declares `"os": ["darwin", "linux"]`, so normal
 npm installation rejects other operating systems. Overriding that check does not make those platforms
 supported. Running the server from a cloned repository on another OS shows a local support notice
 instead of opening the deck or starting a backend.
 
-Install the beta from npm:
+Install from npm:
 
 ```bash
-npx pindeck@beta /path/to/deck
-# Or select this exact beta:
-npx pindeck@3.2.0-beta.1 /path/to/deck
+npx pindeck /path/to/deck
 ```
 
-Or run it from the `v3-beta` branch, which includes the example deck:
+Or run it from source, which includes the example deck:
 
 ```bash
-git clone --branch v3-beta --single-branch https://github.com/ehabets/PinDeck.git PinDeck-v3
-cd PinDeck-v3
+git clone https://github.com/ehabets/PinDeck.git
+cd PinDeck
 node front.mjs ocean-example
 ```
 
-Use `npx pindeck@latest /path/to/deck` for the stable release; the beta channel does not replace it.
-Releases, with notes for each beta, are on [GitHub](https://github.com/ehabets/PinDeck/releases).
+PinDeck 2 stays available as `npx pindeck@2 /path/to/deck` (source: the
+[`2.x`](https://github.com/ehabets/PinDeck/tree/2.x) branch). Releases, with notes for each version, are on
+[GitHub](https://github.com/ehabets/PinDeck/releases).
 
 Then open the login link PinDeck prints (`PinDeck: http://127.0.0.1:5180/login?code=...`). It works
 once and logs this browser in; for a new one, run `pindeck login` (or `node front.mjs login`). On a Mac,
@@ -94,11 +92,11 @@ the deck, whichever port it runs on.
   The corresponding executable must be on `PATH`; `CLAUDE_BIN` and `CODEX_BIN` can override its path.
   Only the selected backend is required for editing. Model and effort availability comes from that
   backend and account, and may differ from the provider’s website or desktop app.
-* **Platforms:** macOS, and Linux as a beta (see [Running on a Linux server](#running-on-a-linux-server-beta)).
+* **Platforms:** macOS and Linux (see [Running on a Linux server](#running-on-a-linux-server)).
   Windows is not supported. The npm package declares `"os": ["darwin", "linux"]`, so normal npm
   installation rejects other operating systems. This check can be overridden; bypassing it does not make
   those platforms supported. Source launches on unsupported platforms show a local support page without
-  opening the deck or starting a backend. Native Windows support is a possible v4 feature, not part of this beta.
+  opening the deck or starting a backend. Native Windows support is a possible v4 feature, not part of version 3.
 * **Screenshots and PDF export:** require Chrome, Chromium, Edge or Brave where the server runs.
 * **PDF input through Codex:** pages are rendered with macOS PDFKit, or Poppler on Linux. Page-text
   extraction uses `osascript` and is macOS-only; on Linux Codex reads the rendered page image. Claude uses
@@ -266,7 +264,7 @@ from resuming the other's IDs. `--provider` and `--model` override the deck's se
 is back on the deck's own choice. A later menu selection is saved. `CLAUDE_BIN` and `CODEX_BIN` override
 executable paths. `CLAUDE_MODEL`, which PinDeck 2 read, is not used: PinDeck warns and names `--model`.
 
-The v3 preview defaults to **`~/.pindeck-v3`**, keeping v2 settings and conversations separate. It does
+PinDeck 3 defaults to **`~/.pindeck-v3`**, keeping v2 settings and conversations separate. It does
 not copy the v2 directory automatically; `config.json` and `decks/*/chat.json` can be copied over by hand
 (asset roots too: they are in config.json). Never give both versions the same `PINDECK_HOME`: they keep files
 of the same names in different formats and overwrite each other's settings and chats. PinDeck 3 warns at
@@ -308,7 +306,7 @@ library folder, add the folder it points to as an asset root; it does not have t
 PinDeck never writes or deletes through a symlink out of the deck folder: with a `figures/` or `export/`
 that links elsewhere, uploads, exports and deleting a picture's file are refused with the reason.
 
-## Running on a Linux server (beta)
+## Running on a Linux server
 
 PinDeck can run on a Linux machine where the deck lives, with the editor in your Mac's browser. The
 deck, PinDeck, the backend (Claude Code or Codex) and the deck's git clone all stay on the server; the browser only shows the
@@ -339,7 +337,7 @@ Other users of a shared server cannot open the editor or read the deck through P
 protects it is only in your browser's cookie and in PinDeck's own files in `~/.pindeck-v3` (readable only by
 you), never in a page or on a command line.
 
-What works on Linux in this beta: editing by hand, speaker notes, slides, pins, the chat with Claude or Codex,
+What works on Linux: editing by hand, speaker notes, slides, pins, the chat with Claude or Codex,
 Undo/Redo, live reload when files change on the server, layout checks, attaching figures, audio and
 PDFs, `git-setup` and the PowerPoint import. Some features use programs on the server, and are on when
 they are installed (on Debian or Ubuntu: `sudo apt install poppler-utils libreoffice-impress ffmpeg`):
@@ -351,7 +349,7 @@ they are installed (on Debian or Ubuntu: `sudo apt install poppler-utils libreof
 | Pictures of PowerPoint slides in the import (thumbnails, diagrams) | LibreOffice (`soffice`) and Poppler |
 | Waveforms of audio other than WAV in the import | ffmpeg |
 
-Without them the editor says what is missing (hover over "Server: Linux (beta)"), and the assistant is told
+Without them the editor says what is missing (hover over "Server: Linux"), and the assistant is told
 which commands are not available. LibreOffice may draw some slides a little differently from PowerPoint;
 the pictures are references and figures, the slides themselves are rebuilt from the file. Chromium from snap may not be
 allowed to use hidden folders in your home folder such as `~/.pindeck-v3`; if screenshots fail with it, set
@@ -494,8 +492,8 @@ Without PowerPoint or Keynote (or on other systems than macOS) only the text and
   from `lib/system-prompt.md` and the deck's `CLAUDE.md` and `AGENTS.md`. Codex model and effort changes
   reuse the active thread writer and apply to the next turn. Claude changes and provider switches prepare
   a replacement process before retiring the old one. Events from replaced sessions are ignored.
-* **Permissions.** The assistant may read files, edit and create files in the deck folder, and run the
-  editor's CLI. Nothing else: no other commands, and no edits to `brand.css`, `vendor/`, `.git/` or, for a
+* **Permissions.** The assistant may read the deck folder, its screenshots, attached PDFs and asset roots,
+  edit and create files in the deck folder, and run the editor's CLI. Nothing else: no other commands, and no edits to `brand.css`, `vendor/`, `.git/` or, for a
   named deck file, the other decks in its folder. Claude Code loads no settings files and no MCP servers,
   so no allow rule in your own, the deck's or a parent folder's settings widens this. Codex has no shell
   and no file access of its own: it reads and edits through PinDeck's own tools, which apply the same
@@ -555,12 +553,30 @@ Without PowerPoint or Keynote (or on other systems than macOS) only the text and
 * One writer at a time: PinDeck is not made for editing the same deck from two editors or tools at once.
 * A deck's own scripts run sandboxed in the editor and in Present: they cannot use `localStorage`, cookies
   or the editor page. A deck that needs them for its slides to work should catch the error.
-* Decks are `.html` files; `.htm` files are not listed or opened as decks.
-* Linux (beta): pictures of PDF pages and PowerPoint slides, and waveforms of non-WAV audio, need
-  Poppler, LibreOffice and ffmpeg on the server (see [Running on a Linux server](#running-on-a-linux-server-beta)).
+* Linux: pictures of PDF pages and PowerPoint slides, and waveforms of non-WAV audio, need
+  Poppler, LibreOffice and ffmpeg on the server (see [Running on a Linux server](#running-on-a-linux-server)).
 
 ## Versions
 
+* **3.3.0**: fixes from a code audit.
+  - After a PowerPoint import, refining the slides no longer deletes pictures that the deck still uses
+    (when the turn was stopped, failed or only changed `theme.css`); Undo brings removed pictures back.
+  - Long texts with non-ASCII characters (large notes, tables, SVG) no longer get broken characters.
+  - Claude reads only the deck, its screenshots, attached PDFs and asset roots, as Codex already did, and
+    cannot create a `.git` file in the deck folder.
+
+* **3.2.0**: PinDeck 3, the first stable release of version 3: everything from the 3.0, 3.1 and 3.2 betas
+  below. Compared with 2.11:
+  - OpenAI Codex as a second assistant next to Claude Code, with the models and efforts each backend
+    offers; each deck keeps its own provider, model and effort.
+  - Several decks on one port: a deck menu above the slide, each deck with its own chat, assistant
+    session and Undo.
+  - Deck pages run sandboxed, so a deck's script cannot use the API or read other decks.
+  - Linux is no longer a beta.
+  - Settings and chats are kept in `~/.pindeck-v3`, apart from PinDeck 2's `~/.pindeck`; nothing is copied
+    over (see [Models, providers and configuration](#models-providers-and-configuration)). PinDeck 2 stays
+    on npm as `pindeck@2`.
+
 * **3.2.0-beta.1**: fixes from a code review and a round of user tests.
   - Security: deck pages run sandboxed, so a deck's script can no longer use the API, read other decks or
     send messages; the login link's `next` stays on PinDeck. A deck's own script cannot use `localStorage`
@@ -621,6 +637,11 @@ Without PowerPoint or Keynote (or on other systems than macOS) only the text and
   switching with optional handover, curated model lists, a separate effort selector with per-model
   preferences, restricted Codex tools, and separate v3 runtime state. On npm as `pindeck@beta`.
 
+* **2.11**: screenshots in the chat. A screenshot sent with a message, and one Claude reads, shows as
+  a small picture that opens larger with a click (Esc or a click closes it). PinDeck keeps the 40
+  newest screenshots of a deck; an older one says "no longer kept". Chats from before 2.11 keep their
+  plain label. (In 3.x since 3.1.0-beta.1.)
+
 * **2.10**: decks with their own file names and shared files, decks made without reveal.js, and Claude
   working on the whole deck.
   - A deck file by name: `pindeck path/to/talk.html` (a folder still opens its `index.html`). Several

package/front.mjs

@@ -243,6 +243,7 @@ function follow(st, tab, key) {
 }
 async function readJson(req) {
   let s = "";
+  req.setEncoding("utf8");
   for await (const c of req) { s += c; if (s.length > 10000) throw new Error("body too large"); }
   return s ? JSON.parse(s) : {};
 }

package/lib/capabilities.mjs

@@ -1,7 +1,7 @@
 /* What this server can do on this machine, decided once on the backend and used everywhere: the editor
    (status), the API (refusals before any side effect), the CLI (its error text) and the assistant's system prompt.
 
-   macOS: everything, as before. Linux (beta): editing, the chat, live reload and the PowerPoint import;
+   macOS: everything, as before. Linux: editing, the chat, live reload and the PowerPoint import;
    pictures of PDF pages with Poppler, pictures of PowerPoint slides with LibreOffice and Poppler, and
    waveforms of non-WAV audio with ffmpeg, each when installed, else off with a reason. Chrome features (screenshots, headless
    layout, PDF export) work on Linux as on macOS when Chrome or Chromium is found; PINDECK_LINUX_CHROME=0
@@ -12,7 +12,7 @@ import path from "node:path";
 
 export const SUPPORTED_PLATFORMS = ["darwin", "linux"];
 export const isSupportedPlatform = (platform) => SUPPORTED_PLATFORMS.includes(platform);
-export const platformLabel = (platform) => ({ darwin: "macOS", linux: "Linux (beta)" }[platform] || platform);
+export const platformLabel = (platform) => ({ darwin: "macOS", linux: "Linux" }[platform] || platform);
 
 const CHROME_PATHS = {
   darwin: ["/Applications/Google Chrome.app/Contents/MacOS/Google Chrome",

package/lib/platform-notice.mjs

@@ -4,8 +4,8 @@ export function createPlatformNoticeServer(platform) {
   const windows = platform === 'win32';
   const heading = windows ? 'Windows support is on the roadmap' : 'PinDeck runs on macOS and Linux';
   const explanation = windows
-    ? 'PinDeck runs on macOS and, as a beta, on Linux. Windows support is planned for a future version; there is no release date yet.'
-    : 'This version of PinDeck runs on macOS and, as a beta, on Linux. This operating system is not supported.';
+    ? 'PinDeck runs on macOS and Linux. Windows support is planned for a future version; there is no release date yet.'
+    : 'This version of PinDeck runs on macOS and Linux. This operating system is not supported.';
   const html = `<!doctype html><html lang="en"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1"><title>PinDeck · system not supported</title><style>
   :root{font-family:system-ui,sans-serif;color:#243348;background:#f4f6f8;color-scheme:light}*{box-sizing:border-box}body{margin:0;min-height:100vh;display:grid;place-items:center;padding:24px}main{width:min(100%,620px);padding:40px;background:white;border:1px solid #dde3ea;border-radius:18px;box-shadow:0 12px 40px #20334d0a}.brand{font-weight:700;color:#c36516;margin:0 0 32px}h1{font-size:clamp(26px,5vw,36px);line-height:1.2;margin:0 0 20px}p{line-height:1.65}a{color:#945012}footer{margin-top:28px;font-size:14px;color:#596577}
   </style></head><body><main><p class="brand">PinDeck</p><h1>${heading}</h1><p>${explanation}</p><p>Your deck has not been opened or changed, and no AI backend has been started.</p><p>You can run PinDeck on a Mac or a Linux machine (and use it from this browser through an SSH tunnel), or follow updates on <a href="https://github.com/ehabets/PinDeck">GitHub</a>.</p><footer>Close this tab and press Ctrl+C in the terminal to stop this notice.</footer></main></body></html>`;

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "pindeck",
-  "version": "3.2.0-beta.1",
-  "description": "PinDeck: an editor for HTML slide decks on macOS, and on Linux (beta) through an SSH tunnel. Pin elements, describe the change, and Claude Code or OpenAI Codex edits the slides.",
+  "version": "3.3.0",
+  "description": "PinDeck: an editor for HTML slide decks on macOS, and on Linux through an SSH tunnel. Pin elements, describe the change, and Claude Code or OpenAI Codex edits the slides.",
   "keywords": [
     "slides",
     "presentation",

package/public/editor.js

@@ -907,7 +907,7 @@ function applyStatus(s) {
   imp.disabled = !!why(caps.pptxImport);
   imp.title = why(caps.pptxImport);
   if (why(caps[provider])) $("conn").title = caps[provider].reason;
-  // where the server runs, when it is not this Mac's usual setup: "Linux (beta)", with what is off
+  // where the server runs, when it is not this Mac's usual setup: "Linux", with what is off
   const names = { claude: "Claude", codex: "OpenAI Codex", screenshot: "Screenshots", headlessLayout: "Layout without an open editor",
     pdfExport: "PDF export", pdfPages: "Pictures of PDF pages", pptxImport: "PowerPoint import",
     pptxPictures: "Pictures of PowerPoint slides", audioConvert: "Waveforms of non-WAV audio" };

package/server.mjs

@@ -243,6 +243,7 @@ function staleEdit(res, b) {
 const text = (res, code, s) => { res.writeHead(code, { "content-type": "text/plain; charset=utf-8" }); res.end(s); };
 async function body(req) {
   let s = "";
+  req.setEncoding("utf8");
   for await (const c of req) { s += c; if (s.length > 5e6) throw new Error("body too large"); }
   return s ? JSON.parse(s) : {};
 }
@@ -576,7 +577,7 @@ function slidesInstructions() {
    win over allow rules; a locked file changed anyway is restored after the turn (lock 2 in finishTurn). */
 function lockedPaths() {
   const { files, folders } = otherDecks();
-  return [...LOCKED, "vendor/**", ".git/**", ...files, ...folders.map((f) => `${f}/**`)];
+  return [...LOCKED, "vendor/**", ".git", ".git/**", ...files, ...folders.map((f) => `${f}/**`)];
 }
 /* The other decks in this deck's folder: its other .html files, and the subfolders that hold a deck of their
    own (as the deck menu lists them). Neither the assistant nor this deck's undo touches them. */
@@ -612,10 +613,9 @@ function othersWorkedSince(start) {
   for (const f of files) {
     try {
       const o = JSON.parse(fs.readFileSync(path.join(TURNS_DIR, f), "utf8"));
-      let alive = true;
-      try { process.kill(o.pid, 0); } catch (e) { alive = e.code === "EPERM"; }
+      const running = alive(o.pid);
       // a turn still open in a server that is gone ended when that server did, at the latest
-      if (o.turns.some((x) => (x.end ?? (alive ? now : x.start)) >= start)) names.push(o.deck);
+      if (o.turns.some((x) => (x.end ?? (running ? now : x.start)) >= start)) names.push(o.deck);
     } catch {}
   }
   return names;
@@ -671,7 +671,7 @@ function makeSession(choice) {
     args: () => ["--append-system-prompt", systemPrompt + slidesInstructions() + deckInstructions(),
       "--setting-sources", "", "--strict-mcp-config", "--safe-mode", "--disable-slash-commands",   // no settings files, no MCP servers or connectors
       "--permission-mode", "default", "--tools", "Read,Glob,Grep,Edit,Write,Bash",
-      "--allowedTools", "Read", "Glob", "Grep", "Edit(./**)", "Write(./**)",
+      "--allowedTools", ...readRules(), "Edit(./**)", "Write(./**)",
       ...["layout", "shot", "slides", "pdf", "pdf-figure"].map(command => `Bash(${CLI_CMD} ${command}:*)`),
       "--disallowedTools", ...lockedPaths().flatMap((f) => [`Edit(./${f})`, `Write(./${f})`]),
       ...(choice.model ? ["--model", choice.model] : []), ...(choice.effort ? ["--effort", choice.effort] : [])],
@@ -679,6 +679,13 @@ function makeSession(choice) {
   agent.initialEvent = () => initial;
   return agent;
 }
+/* Claude reads what Codex's tools may read (agentTools' readDirs): the deck, screenshots, attached PDFs and
+   asset roots, each by its path and its real path ("//" starts an absolute path in a rule) */
+function readRules() {
+  const dirs = [SHOT_DIR, PDF_DIR, ...ASSET_ROOTS].flatMap((d) => { try { return [d, fs.realpathSync(d)]; } catch { return [d]; } });
+  const globs = ["./**", ...new Set(dirs.map((d) => `/${d}/**`))];
+  return ["Read", "Glob", "Grep"].flatMap((tool) => globs.map((g) => `${tool}(${g})`));
+}
 const providerAvailable = (provider) => detectCapabilities()[provider];
 /* Every backend process that is stopped is waited for on exit: the discovery helpers, the session a switch
    replaced, the current one. */
@@ -892,7 +899,7 @@ function handleEvent(ev) {
 function startTurn(promptText, userEntry) {
   // every deck file as it is now: the assistant may change any of them (not brand.css or vendor/), and undo
   // takes back all it changed
-  state.turn = { id: userEntry.id, before: snapshot([...EDITABLE, ...LOCKED]), gitConfig: readDeck(".git/config"), scan: scanDeck(), touched: new Set(),
+  state.turn = { id: userEntry.id, before: snapshot([...EDITABLE, ...LOCKED]), gitConfig: readDeck(".git/config"), hadGit: fs.existsSync(path.join(DECK_DIR, ".git")), scan: scanDeck(), touched: new Set(),
     time: { start: Date.now(), end: null } };
   logTurnTime(state.turn.time);
   state.busy = true;
@@ -930,6 +937,12 @@ function finishTurn({ error, cost, duration, denials = [] }) {
       restored.push(".git/config");
     } catch (e) { console.error(e.message); }
   }
+  // a .git file ("gitdir: elsewhere") points git at another config, which the check above does not see
+  const dotGit = path.join(DECK_DIR, ".git");
+  if (!turn.hadGit && fs.lstatSync(dotGit, { throwIfNoEntry: false })?.isDirectory() === false) {
+    fs.rmSync(dotGit, { force: true });
+    restored.push(".git");
+  }
   toolEntries.clear();
   const eid = runEidPass();
   const found = scanChanges(turn.scan, scanDeck());
@@ -952,13 +965,14 @@ function finishTurn({ error, cost, duration, denials = [] }) {
   const deletedFiles = [];
   for (const rel of turn.importedFiles || []) {
     const abs = path.join(DECK_DIR, rel);
-    if (!fs.existsSync(abs) || EDITABLE.some((f) => (after[f] || "").includes(rel))) continue;
+    if (!fs.existsSync(abs) || EDITABLE.some((f) => (readDeck(f) || "").includes(rel))) continue;
     deletedFiles.push({ rel, data: fs.readFileSync(abs) });
     fs.rmSync(abs, { force: true });
   }
   const t = { id: turn.id, kind: "agent", provider: settings.provider, conversation: state.conversation, before, after, files, deletedFiles, undone: false };
-  if (files.length) { state.turns.push(t); state.redo = []; }
-  addEntry({ kind: "turn", turnId: files.length ? t.id : null, files, error, cost, duration,
+  const kept = files.length || deletedFiles.length;
+  if (kept) { state.turns.push(t); state.redo = []; }
+  addEntry({ kind: "turn", turnId: kept ? t.id : null, files, error, cost, duration,
     denials, restored, newIds: eid.assigned.length });
   if (deletedFiles.length) addEntry({ kind: "notice", text: `Removed ${deletedFiles.map((f) => f.rel).join(", ")}: replaced, and no longer used.` });
   if (notOurs.length) addEntry({ kind: "notice", text: `${notOurs.join(", ")} changed during this turn while the assistant of ` +
@@ -1243,11 +1257,7 @@ function undoConflicts(t, direction) {
   const go = direction === "undo" ? t.addedFiles || [] : t.deletedFiles || [];
   // a file to bring back or remove through a symlink out of the deck: not done (deckPath), so not begun
   for (const { rel } of [...comeBack, ...go]) { try { deckPath(rel); } catch { files.push(rel); } }
-  for (const { rel, data } of comeBack) {
-    const abs = path.join(DECK_DIR, rel);
-    if (fs.existsSync(abs) && !sameContent(abs, data)) files.push(rel);
-  }
-  for (const { rel, data } of go) {
+  for (const { rel, data } of [...comeBack, ...go]) {
     const abs = path.join(DECK_DIR, rel);
     if (fs.existsSync(abs) && !sameContent(abs, data)) files.push(rel);
   }
@@ -1330,8 +1340,7 @@ async function applyImport(imp, numbers, afterEid, refine = false) {
   const afterIdx = found < 0 ? slides.length - 1 : found;   // no such slide (any more): at the end
   const after = slides[afterIdx];
   const css = (readDeck("theme.css") || "") + (readDeck("brand.css") || "");
-  const prefix = path.basename(imp.name, path.extname(imp.name)).normalize("NFKD").replace(/[\u0300-\u036f]/g, "")
-    .toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "").split("-").slice(0, 3).join("-") || "import";
+  const prefix = slug(path.basename(imp.name, path.extname(imp.name))).split("-").slice(0, 3).join("-");
   const r = await buildImport({ model: imp.model, numbers, pdf, workDir: imp.dir, deckDir: DECK_DIR, deckHtml: html0, css, after: afterIdx, prefix });
   // building takes a while (pictures are cut from the slides): a change made meanwhile must not be overwritten
   if (EDITABLE.some((f) => readDeck(f) !== before[f])) throw new Error("The deck changed during the import. Import again.");