pixelkiln 0.20.2 → 0.22.0

package/dist/index.d.ts

@@ -7262,6 +7262,55 @@ declare function tagAdopted(provider: Provider, specs: ResolvedSpec[], lock: Loc
     onProgress?: (msg: string) => void;
 }): Promise<number>;
 
+interface SheetGroup {
+    key: string;
+    assetId: string;
+    styleId: string;
+    prompt: string;
+    reviewObjectId: string;
+    frameUrls: string[];
+    width: number;
+    height: number;
+    mode?: "candidates" | "frame-set";
+    frameLabels?: string[];
+    fps?: number;
+    revision?: {
+        mode: "image-to-image" | "inpaint" | "outpaint";
+        sourceAssetId: string;
+        sourceUrl: string;
+        width: number;
+        height: number;
+    };
+    /** The art this generation replaces, shown beside the candidates. */
+    current?: {
+        url: string;
+        width: number;
+        height: number;
+    };
+}
+/**
+ * A contact sheet for choosing among generated candidates.
+ *
+ * This is the only step that needs human judgement, so it is optimised for one
+ * thing: deciding fast. Small candidates render at an exact integer zoom with
+ * a transparency checkerboard and a true-size swatch. Large candidates are
+ * fitted without changing their aspect ratio, so a wide browser cannot turn a
+ * review into an oversized or stretched image wall. Keyboard-first, one row
+ * per asset, and the page posts back and closes itself.
+ */
+interface RenderSheetOptions {
+    /** Where selections are POSTed. Default `/apply`, the standalone review server. */
+    applyUrl?: string;
+    /** Extra headers on the apply request, e.g. a gallery session token. */
+    applyHeaders?: Record<string, string>;
+    /**
+     * Hosted inside another page: after a successful apply the sheet tells its
+     * parent window (same origin only) so the host can close it and refresh.
+     */
+    embedded?: boolean;
+}
+declare function renderSheet(groups: SheetGroup[], options?: RenderSheetOptions): string;
+
 interface PickResult {
     selected: number;
     skipped: number;
@@ -7271,56 +7320,828 @@ interface ReviewReadyInfo {
     keys: string[];
 }
 /**
- * Serves the contact sheet on localhost, waits for the selections to be
- * applied, then shuts down.
- *
- * Selections are committed through the provider (`select-frames` promotes the chosen
- * candidate to its own object and drops the rest) and written to the lockfile
- * before the browser gets its response, so a closed tab never loses a choice.
+ * Everything a review needs except the HTTP server: the candidate groups to
+ * show, the local files the sheet may load, and the apply step. `runPicker`
+ * wraps this in the one-shot review server; the gallery hosts the same sheet
+ * inside its own long-lived server instead.
+ */
+interface ReviewSession {
+    groups: SheetGroup[];
+    /** Exact local media routes the sheet references (revision sources). */
+    assets: ReadonlyMap<string, {
+        path: string;
+        contentType: string;
+    }>;
+    /** Render the sheet, optionally addressed for an embedding host. */
+    html(options?: RenderSheetOptions): string;
+    /**
+     * Commit the posted selections through the provider and write the lockfile.
+     * Selections are persisted before the caller responds, so a closed tab never
+     * loses a choice. Throws (leaving the sheet free to retry) on a provider error.
+     */
+    apply(body: unknown, lockPath: string): Promise<PickResult>;
+}
+interface PrepareReviewOptions {
+    onProgress?: (msg: string) => void;
+    /** Optional lock-key selection for a filtered or mixed-provider run. */
+    keys?: Iterable<string>;
+    /** Resolved intent supplies immutable revision context for comparison. */
+    specs?: ResolvedSpec[];
+    /** Prefix for the sheet's local media routes when hosted under a sub-path. */
+    routePrefix?: string;
+}
+/** Gather every entry in review for this provider. Null when nothing is waiting. */
+declare function prepareReview(provider: Provider, lock: Lock, opts?: PrepareReviewOptions): Promise<ReviewSession | null>;
+/**
+ * Serves the contact sheet on localhost, waits for the selections to be
+ * applied, then shuts down.
+ *
+ * Selections are committed through the provider (`select-frames` promotes the chosen
+ * candidate to its own object and drops the rest) and written to the lockfile
+ * before the browser gets its response, so a closed tab never loses a choice.
+ */
+declare function runPicker(provider: Provider, lock: Lock, lockPath: string, opts?: {
+    port?: number;
+    open?: boolean;
+    onProgress?: (msg: string) => void;
+    /** Optional lock-key selection for a filtered or mixed-provider run. */
+    keys?: Iterable<string>;
+    /** Resolved intent supplies immutable revision context for comparison. */
+    specs?: ResolvedSpec[];
+    /** Receives the live URL as soon as the server listens. */
+    onReady?: (info: ReviewReadyInfo) => void;
+}): Promise<PickResult>;
+
+/**
+ * One sibling project registered in a workspace catalog. Only paths and
+ * identity live here — never a credential. Each project keeps loading its own
+ * key from its own `.env`, the same as it does standalone.
+ */
+declare const WorkspaceProjectSchema: z.ZodObject<{
+    id: z.ZodString;
+    /** Manifest path, relative to the catalog file's own directory. */
+    manifest: z.ZodString;
+    /** Lockfile path, relative to the catalog file's own directory. */
+    lock: z.ZodString;
+    provider: z.ZodDefault<z.ZodString>;
+    /** Free-form label for a shared account, e.g. distinguishing sandboxes. */
+    account: z.ZodOptional<z.ZodString>;
+}, "strict", z.ZodTypeAny, {
+    provider: string;
+    id: string;
+    manifest: string;
+    lock: string;
+    account?: string | undefined;
+}, {
+    id: string;
+    manifest: string;
+    lock: string;
+    provider?: string | undefined;
+    account?: string | undefined;
+}>;
+declare const WorkspaceSchema: z.ZodObject<{
+    version: z.ZodLiteral<1>;
+    projects: z.ZodDefault<z.ZodArray<z.ZodObject<{
+        id: z.ZodString;
+        /** Manifest path, relative to the catalog file's own directory. */
+        manifest: z.ZodString;
+        /** Lockfile path, relative to the catalog file's own directory. */
+        lock: z.ZodString;
+        provider: z.ZodDefault<z.ZodString>;
+        /** Free-form label for a shared account, e.g. distinguishing sandboxes. */
+        account: z.ZodOptional<z.ZodString>;
+    }, "strict", z.ZodTypeAny, {
+        provider: string;
+        id: string;
+        manifest: string;
+        lock: string;
+        account?: string | undefined;
+    }, {
+        id: string;
+        manifest: string;
+        lock: string;
+        provider?: string | undefined;
+        account?: string | undefined;
+    }>, "many">>;
+}, "strict", z.ZodTypeAny, {
+    version: 1;
+    projects: {
+        provider: string;
+        id: string;
+        manifest: string;
+        lock: string;
+        account?: string | undefined;
+    }[];
+}, {
+    version: 1;
+    projects?: {
+        id: string;
+        manifest: string;
+        lock: string;
+        provider?: string | undefined;
+        account?: string | undefined;
+    }[] | undefined;
+}>;
+type WorkspaceProject = z.infer<typeof WorkspaceProjectSchema>;
+type Workspace = z.infer<typeof WorkspaceSchema>;
+/**
+ * Parses a workspace catalog, rejecting anything that is not v1.
+ *
+ * Mirrors `parseLock`'s stance: no migration path, fail loudly rather than
+ * guess at a hand-edited or corrupted file's intent.
+ */
+declare function parseWorkspace(raw: unknown): Workspace;
+declare function loadWorkspace(workspacePath: string): Promise<Workspace>;
+/** Atomic write — a crash mid-save must not leave a truncated catalog. */
+declare function saveWorkspace(workspacePath: string, ws: Workspace): Promise<void>;
+/** Stored path convention: relative to the catalog's directory, forward-slash. */
+declare function toPortablePath(dir: string, absolute: string): string;
+/** Resolve a registered project's stored paths against the catalog's directory. */
+declare function resolveProject(dir: string, project: WorkspaceProject): {
+    manifestPath: string;
+    lockPath: string;
+};
+interface WorkspaceDiagnostic {
+    id: "duplicate-id" | "duplicate-lock" | "duplicate-manifest" | "missing-manifest" | "missing-lock" | "absolute-path" | "mixed-provider";
+    level: "error" | "warning";
+    message: string;
+}
+/**
+ * Checks the catalog without touching the network or any registered
+ * project's files. Duplicate ids and duplicate lock paths are errors — either
+ * would corrupt the union claim set. A duplicate manifest is only a warning,
+ * because a manifest paired with a variant `--lock` is an already-supported
+ * pattern (see `cachePathFor`). Missing files are errors: a claim set derived
+ * from a workspace that silently skipped a project is the exact hazard this
+ * catalog exists to prevent.
+ */
+declare function validateWorkspace(ws: Workspace, dir: string): WorkspaceDiagnostic[];
+
+/**
+ * A read-only view of everything the project has generated, built from the
+ * same three sources `plan` reads — manifest, lockfile, and disk — and nothing
+ * else. No provider is contacted, so the snapshot is free to rebuild on every
+ * page refresh while a `gen` runs in another terminal.
+ *
+ * The lockfile is the record of paid work, so the gallery is lock-first: an
+ * entry the manifest no longer declares still appears (as `undeclared`) rather
+ * than vanishing, and a declared asset with no entry yet appears as a
+ * placeholder so the gallery also shows what has *not* been made.
+ */
+type GalleryState = PlanState | "undeclared";
+interface GalleryMedia {
+    /** Absolute path of the file the server may read for this id. */
+    path: string;
+    contentType: MediaType;
+}
+interface GalleryOutput {
+    /** Manifest-relative path as recorded (or as the manifest would record it). */
+    path: string;
+    absolutePath: string;
+    /** Null for a file PixelKiln did not download (untracked or `source` art). */
+    sha256: string | null;
+    role: string | null;
+    mediaType: MediaType | null;
+    exists: boolean;
+    bytes: number | null;
+    /** Served only while the gallery runs; null when the file is missing. */
+    url: string | null;
+}
+interface GalleryQuality {
+    state: QualityProfileInspection["state"];
+    reason: string;
+    /** Manifest-relative refined output path. */
+    output: string;
+    /** Manifest-relative quality companion path. */
+    record: string;
+    recordExists: boolean;
+    outputs: GalleryOutput[];
+    palette: string[] | null;
+    review: {
+        status: "pending";
+    } | {
+        status: "approved";
+        reviewer: string;
+        approvedAt: string;
+        note: string | null;
+    } | null;
+    nativeGrid: {
+        confidence: string;
+        consensus: string;
+        stepX: number;
+        stepY: number;
+        sourceWidth: number;
+        sourceHeight: number;
+        nativeWidth: number;
+        nativeHeight: number;
+    } | null;
+    audit: {
+        safe: boolean;
+        colorCount: number;
+        transparency: number;
+        reasons: string[];
+    } | null;
+    frameSet: {
+        fps: number;
+        count: number;
+        roles: string[];
+    } | null;
+    /** Fail-closed verdict from the record itself, when one could be read. */
+    check: {
+        safe: boolean;
+        current: boolean;
+        reasons: string[];
+    } | null;
+}
+interface GalleryItem {
+    /** Page identity: the lock key, prefixed by project id in a workspace. */
+    id: string;
+    /** Workspace project id, or null for a single-project gallery. */
+    project: string | null;
+    key: string;
+    styleId: string;
+    assetId: string;
+    /** False for a lock entry the current manifest no longer declares. */
+    declared: boolean;
+    state: GalleryState;
+    reason: string;
+    /** Lock lifecycle status; null when nothing has been submitted. */
+    status: LockEntry["status"] | null;
+    provider: string;
+    generator: string;
+    /** The prompt actually sent, or the prompt that would be sent. */
+    prompt: string;
+    /** Current resolved prompt when it differs from the one recorded (stale work). */
+    currentPrompt: string | null;
+    width: number;
+    height: number;
+    tileFeature: string | null;
+    /** Playback rate for an ordered frame set, from the quality record or provider metadata. */
+    fps: number | null;
+    cost: number;
+    costUnit: string;
+    /** Offline estimate for the current spec; null for undeclared entries. */
+    estimatedCost: number | null;
+    candidates: number | null;
+    submittedAt: string | null;
+    downloadedAt: string | null;
+    jobId: string | null;
+    objectId: string | null;
+    reviewObjectId: string | null;
+    candidateIndex: number | null;
+    error: string | null;
+    recordedSpecHash: string | null;
+    currentSpecHash: string | null;
+    revision: LockEntry["revision"];
+    /** Parent lock key for a revision, so the page can link lineage. */
+    revisionParentKey: string | null;
+    outputs: GalleryOutput[];
+    quality: GalleryQuality | null;
+    providerMetadata: Record<string, unknown>;
+    /** Manifest asset as declared, for the "intent" side of the record. */
+    asset: Asset | null;
+    /** Manifest-relative committed art placed instead of generated output. */
+    source: string | null;
+    tags: string[];
+    category: string | null;
+}
+interface GalleryStyle {
+    id: string;
+    /** Workspace project id, or null for a single-project gallery. */
+    project: string | null;
+    provider: string;
+    generator: string;
+    outDir: string;
+    /** Resolved look, after inheritance. */
+    promptPrefix: string;
+    promptSuffix: string;
+    palette: string[];
+    quality: boolean;
+    tags: string[];
+    /** Parent style id when this style `extends` one. */
+    extends: string | null;
+    /**
+     * Fields the style declares itself, as written. A field absent here is
+     * inherited (or a default), which is what decides whether a parent edit
+     * reaches this style.
+     */
+    ownFields: string[];
+    items: number;
+    spendByUnit: Record<string, number>;
+    /** What regenerating every declared asset in this style would cost now. */
+    regenerate: {
+        assets: number;
+        cost: number;
+        costUnit: string;
+    };
+    /** Candidates one generation returns for this style; null when its assets disagree or none resolve. */
+    candidates: number | null;
+    /** Whether that count is a provider option the manifest can set (`patch-style`). */
+    candidatesEditable: boolean;
+    /** Declared assets `plan` would generate right now, with their offline estimate. */
+    actionable: {
+        keys: string[];
+        cost: number;
+        costUnit: string;
+    };
+}
+interface GalleryProject {
+    /** Workspace catalog id; the manifest name for a single project. */
+    id: string;
+    name: string;
+    manifest: string;
+    lock: string;
+    root: string;
+    /** Manifest default provider, or the catalog provider when the manifest failed to load. */
+    provider: string;
+    account: string | null;
+    /** Hash of the manifest bytes this snapshot was built from; an edit must quote it. */
+    manifestSha256: string | null;
+    entries: number;
+    items: number;
+    spendByUnit: Record<string, number>;
+    /** Why this project contributed nothing; a broken sibling never hides the rest. */
+    error: string | null;
+}
+interface GallerySnapshot {
+    version: 1;
+    generatedAt: string;
+    /** The one project shown; null in a workspace gallery. */
+    project: GalleryProject | null;
+    /** Every registered project, in catalog order; null for a single project. */
+    workspace: {
+        path: string;
+        dir: string;
+        projects: GalleryProject[];
+    } | null;
+    /** Active `--style`/`--only` filters, so the page can say what it is showing. */
+    filter: {
+        styles: string[];
+        assets: string[];
+    };
+    totals: {
+        entries: number;
+        items: number;
+        byState: Record<string, number>;
+        byStatus: Record<string, number>;
+        spendByUnit: Record<string, number>;
+    };
+    styles: GalleryStyle[];
+    items: GalleryItem[];
+}
+interface GalleryBuild {
+    snapshot: GallerySnapshot;
+    /** Exactly the files the page may load, keyed by their route id. */
+    media: Map<string, GalleryMedia>;
+}
+interface BuildGalleryOptions {
+    loaded: LoadedManifest;
+    specs: ResolvedSpec[];
+    lock: Lock;
+    lockPath: string;
+    filter?: {
+        styles?: string[];
+        assets?: string[];
+    };
+    /** Deterministic clock hook for tests. */
+    now?: () => Date;
+}
+/** Route id for one absolute path: stable across refreshes, not enumerable. */
+declare function galleryMediaId(absolutePath: string): string;
+declare function galleryMediaRoute(id: string): string;
+declare function buildGallerySnapshot(opts: BuildGalleryOptions): Promise<GalleryBuild>;
+interface BuildWorkspaceGalleryOptions {
+    workspace: Workspace;
+    /** Catalog path; project paths resolve against its directory. */
+    workspacePath: string;
+    filter?: {
+        styles?: string[];
+        assets?: string[];
+    };
+    now?: () => Date;
+}
+/**
+ * One gallery for every project a workspace catalog registers. Each project
+ * is built with the single-project builder and its items are namespaced by
+ * project id, so two projects can both own `base/anvil`. A project whose
+ * manifest or lock fails to load is listed with its error and contributes
+ * nothing, mirroring `workspace status`: one broken sibling must not hide
+ * the rest. A `--style`/`--only` filter is applied per project and a project
+ * that has none of the requested ids simply shows zero items.
+ */
+declare function buildWorkspaceGallerySnapshot(opts: BuildWorkspaceGalleryOptions): Promise<GalleryBuild>;
+
+/**
+ * The gallery page: every generation the project has made, at integer zoom,
+ * with the provenance record behind each one a click away.
+ *
+ * It shares the review sheet's visual language on purpose — same palette, same
+ * square corners, same monospace identity — so `pick` and `gallery` read as two
+ * rooms of one tool. Where `pick` is built for deciding fast, this page is
+ * built for looking things up: search, filter, and a detail drawer that shows
+ * the lockfile, quality record, and manifest intent side by side.
+ *
+ * Everything is rendered client-side from one embedded snapshot, and the same
+ * code re-renders from `/api/gallery.json` on Refresh, so the page can stay
+ * open while `gen` runs elsewhere. All text reaches the DOM via textContent;
+ * the only escaping needed is keeping the JSON from closing its script tag
+ * (`<\/` and `<\u0021--` are both still valid JSON, so the page can parse
+ * the very same bytes back for the refresh path).
+ */
+interface RenderGalleryOptions {
+    /** Present when the server accepts any write; the page sends it back on every POST. */
+    session?: string;
+    /** Manifest editing is enabled (`--edit`). */
+    editable?: boolean;
+    /** Generation jobs are enabled (`--budget`). */
+    generation?: boolean;
+}
+declare function renderGallery(snapshot: GallerySnapshot, opts?: RenderGalleryOptions): string;
+
+declare const ManifestEditSchema: z.ZodDiscriminatedUnion<"action", [z.ZodObject<{
+    action: z.ZodLiteral<"patch-asset">;
+    /** Workspace project id; omitted for a single-project gallery. */
+    project: z.ZodOptional<z.ZodString>;
+    assetId: z.ZodString;
+    /** Manifest bytes the page last saw; a mismatch refuses the write. */
+    expectedSha256: z.ZodString;
+    patch: z.ZodObject<{
+        prompt: z.ZodOptional<z.ZodString>;
+        /** Per-style override for the style being viewed; null removes it. */
+        promptForStyle: z.ZodOptional<z.ZodObject<{
+            styleId: z.ZodString;
+            prompt: z.ZodNullable<z.ZodString>;
+        }, "strip", z.ZodTypeAny, {
+            prompt: string | null;
+            styleId: string;
+        }, {
+            prompt: string | null;
+            styleId: string;
+        }>>;
+        category: z.ZodOptional<z.ZodNullable<z.ZodString>>;
+        width: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
+        height: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
+        size: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
+        tags: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    }, "strict", z.ZodTypeAny, {
+        width?: number | null | undefined;
+        height?: number | null | undefined;
+        size?: number | null | undefined;
+        tags?: string[] | undefined;
+        prompt?: string | undefined;
+        category?: string | null | undefined;
+        promptForStyle?: {
+            prompt: string | null;
+            styleId: string;
+        } | undefined;
+    }, {
+        width?: number | null | undefined;
+        height?: number | null | undefined;
+        size?: number | null | undefined;
+        tags?: string[] | undefined;
+        prompt?: string | undefined;
+        category?: string | null | undefined;
+        promptForStyle?: {
+            prompt: string | null;
+            styleId: string;
+        } | undefined;
+    }>;
+}, "strict", z.ZodTypeAny, {
+    assetId: string;
+    patch: {
+        width?: number | null | undefined;
+        height?: number | null | undefined;
+        size?: number | null | undefined;
+        tags?: string[] | undefined;
+        prompt?: string | undefined;
+        category?: string | null | undefined;
+        promptForStyle?: {
+            prompt: string | null;
+            styleId: string;
+        } | undefined;
+    };
+    expectedSha256: string;
+    action: "patch-asset";
+    project?: string | undefined;
+}, {
+    assetId: string;
+    patch: {
+        width?: number | null | undefined;
+        height?: number | null | undefined;
+        size?: number | null | undefined;
+        tags?: string[] | undefined;
+        prompt?: string | undefined;
+        category?: string | null | undefined;
+        promptForStyle?: {
+            prompt: string | null;
+            styleId: string;
+        } | undefined;
+    };
+    expectedSha256: string;
+    action: "patch-asset";
+    project?: string | undefined;
+}>, z.ZodObject<{
+    action: z.ZodLiteral<"add-asset">;
+    project: z.ZodOptional<z.ZodString>;
+    assetId: z.ZodString;
+    expectedSha256: z.ZodString;
+    asset: z.ZodObject<{
+        prompt: z.ZodString;
+        category: z.ZodOptional<z.ZodString>;
+        width: z.ZodOptional<z.ZodNumber>;
+        height: z.ZodOptional<z.ZodNumber>;
+        size: z.ZodOptional<z.ZodNumber>;
+        tags: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+        /** Restrict to these styles; empty or omitted means every style. */
+        styles: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    }, "strict", z.ZodTypeAny, {
+        prompt: string;
+        width?: number | undefined;
+        height?: number | undefined;
+        size?: number | undefined;
+        tags?: string[] | undefined;
+        category?: string | undefined;
+        styles?: string[] | undefined;
+    }, {
+        prompt: string;
+        width?: number | undefined;
+        height?: number | undefined;
+        size?: number | undefined;
+        tags?: string[] | undefined;
+        category?: string | undefined;
+        styles?: string[] | undefined;
+    }>;
+}, "strict", z.ZodTypeAny, {
+    assetId: string;
+    asset: {
+        prompt: string;
+        width?: number | undefined;
+        height?: number | undefined;
+        size?: number | undefined;
+        tags?: string[] | undefined;
+        category?: string | undefined;
+        styles?: string[] | undefined;
+    };
+    expectedSha256: string;
+    action: "add-asset";
+    project?: string | undefined;
+}, {
+    assetId: string;
+    asset: {
+        prompt: string;
+        width?: number | undefined;
+        height?: number | undefined;
+        size?: number | undefined;
+        tags?: string[] | undefined;
+        category?: string | undefined;
+        styles?: string[] | undefined;
+    };
+    expectedSha256: string;
+    action: "add-asset";
+    project?: string | undefined;
+}>, z.ZodObject<{
+    action: z.ZodLiteral<"patch-style">;
+    project: z.ZodOptional<z.ZodString>;
+    styleId: z.ZodString;
+    expectedSha256: z.ZodString;
+    patch: z.ZodEffects<z.ZodObject<{
+        /** Candidates per generation, written to the provider's own option. */
+        candidates: z.ZodOptional<z.ZodNumber>;
+        /** Empty clears the style's own value (inherit, or the default). */
+        promptPrefix: z.ZodOptional<z.ZodString>;
+        promptSuffix: z.ZodOptional<z.ZodString>;
+        /** `#rrggbb` values; null or empty clears the style's own palette. */
+        palette: z.ZodOptional<z.ZodNullable<z.ZodArray<z.ZodString, "many">>>;
+    }, "strict", z.ZodTypeAny, {
+        candidates?: number | undefined;
+        palette?: string[] | null | undefined;
+        promptSuffix?: string | undefined;
+        promptPrefix?: string | undefined;
+    }, {
+        candidates?: number | undefined;
+        palette?: string[] | null | undefined;
+        promptSuffix?: string | undefined;
+        promptPrefix?: string | undefined;
+    }>, {
+        candidates?: number | undefined;
+        palette?: string[] | null | undefined;
+        promptSuffix?: string | undefined;
+        promptPrefix?: string | undefined;
+    }, {
+        candidates?: number | undefined;
+        palette?: string[] | null | undefined;
+        promptSuffix?: string | undefined;
+        promptPrefix?: string | undefined;
+    }>;
+}, "strict", z.ZodTypeAny, {
+    styleId: string;
+    patch: {
+        candidates?: number | undefined;
+        palette?: string[] | null | undefined;
+        promptSuffix?: string | undefined;
+        promptPrefix?: string | undefined;
+    };
+    expectedSha256: string;
+    action: "patch-style";
+    project?: string | undefined;
+}, {
+    styleId: string;
+    patch: {
+        candidates?: number | undefined;
+        palette?: string[] | null | undefined;
+        promptSuffix?: string | undefined;
+        promptPrefix?: string | undefined;
+    };
+    expectedSha256: string;
+    action: "patch-style";
+    project?: string | undefined;
+}>]>;
+type ManifestEdit = z.infer<typeof ManifestEditSchema>;
+/** The page showed a manifest that has since changed; the write is refused. */
+declare class ManifestDriftError extends Error {
+    readonly status = 409;
+    constructor(manifestPath: string);
+}
+/** A request the schema or the manifest rules reject; nothing was written. */
+declare class ManifestEditError extends Error {
+    readonly status = 400;
+    constructor(message: string);
+}
+interface ManifestEditResult {
+    manifestPath: string;
+    /** Hash of the manifest after the write, for the next edit's `expectedSha256`. */
+    sha256: string;
+    changed: boolean;
+}
+/**
+ * Apply one edit to the manifest on disk. The write is refused when the file
+ * no longer matches what the page saw, and rolled back when the edited
+ * manifest fails to load or resolve — an invalid manifest never lands.
  */
-declare function runPicker(provider: Provider, lock: Lock, lockPath: string, opts?: {
-    port?: number;
-    open?: boolean;
+declare function applyManifestEdit(manifestPath: string, edit: ManifestEdit): Promise<ManifestEditResult>;
+interface GalleryEditHandlerOptions {
+    /** Resolves the manifest an edit may rewrite; must never trust a client path. */
+    manifestFor: (project?: string) => string | Promise<string>;
+    /** Rebuilds the gallery after a successful write. */
+    reload: () => Promise<GalleryBuild>;
     onProgress?: (msg: string) => void;
-    /** Optional lock-key selection for a filtered or mixed-provider run. */
-    keys?: Iterable<string>;
-    /** Resolved intent supplies immutable revision context for comparison. */
-    specs?: ResolvedSpec[];
-    /** Receives the live URL as soon as the server listens. */
-    onReady?: (info: ReviewReadyInfo) => void;
-}): Promise<PickResult>;
+}
+/** The `edit` callback `serveGallery` expects: validate, apply, rebuild. */
+declare function createGalleryEditHandler(opts: GalleryEditHandlerOptions): (body: unknown) => Promise<GalleryBuild>;
 
-interface SheetGroup {
-    key: string;
-    assetId: string;
-    styleId: string;
-    prompt: string;
-    reviewObjectId: string;
-    frameUrls: string[];
-    width: number;
-    height: number;
-    mode?: "candidates" | "frame-set";
-    frameLabels?: string[];
-    fps?: number;
-    revision?: {
-        mode: "image-to-image" | "inpaint" | "outpaint";
-        sourceAssetId: string;
-        sourceUrl: string;
-        width: number;
-        height: number;
+/**
+ * Generation from the gallery is the CLI's `gen`, run as a background job:
+ * the same `buildPlan`, the same per-provider budget and balance preflight,
+ * the same `submit → poll → fetch` library calls writing the same lockfile.
+ * The page adds nothing the terminal cannot do; it only shows the estimate,
+ * asks, and reports progress.
+ *
+ * Two ceilings guard spend. The session budget is passed when the gallery
+ * starts (`--budget`, optionally keyed per provider) and every job's estimate
+ * is charged against it up front, so the page can never exceed what the
+ * person typed. Each submission also carries the remaining ceiling as its
+ * own `budget`, the way `gen --budget` does, so a provider estimate that
+ * grows between plan and submit is refused rather than paid.
+ */
+type GeneratePhase = "queued" | "submitting" | "polling" | "fetching" | "review" | "done" | "failed";
+interface GenerateJob {
+    id: string;
+    project: string | null;
+    keys: string[];
+    /** `resume` skips submission: poll, review, and fetch existing work at no cost. */
+    mode: "generate" | "resume";
+    phase: GeneratePhase;
+    startedAt: string;
+    finishedAt: string | null;
+    /** Progress lines, exactly what the CLI would have printed. */
+    messages: string[];
+    error: string | null;
+    /** Successful-submission estimates this job charged, by provider. */
+    spent: Record<string, number>;
+    /** Keys still waiting for a human choice. */
+    review: string[];
+    counts: {
+        submitted: number;
+        failed: number;
+        downloaded: number;
     };
 }
+interface GalleryProjectContext {
+    loaded: LoadedManifest;
+    /** Every spec the project declares, unfiltered. */
+    specs: ResolvedSpec[];
+    lock: Lock;
+    lockPath: string;
+}
+interface SessionBudget {
+    /** Unkeyed ceiling, valid only when a run involves a single provider. */
+    amount?: number;
+    /** Provider-keyed ceilings. */
+    byProvider: Record<string, number>;
+}
+interface GenerateHandlerOptions {
+    /** Load a project fresh from disk; `project` is the workspace id, if any. */
+    loadProject: (project?: string) => Promise<GalleryProjectContext>;
+    /** An online provider for a project; the caller owns env loading and caching. */
+    providerFor: (project: string | undefined, providerId: string) => Provider;
+    budget: SessionBudget;
+    reload: () => Promise<GalleryBuild>;
+    onProgress?: (msg: string) => void;
+    /** Test hooks. */
+    pollIntervalMs?: number;
+    submitSpacingMs?: number;
+    /** Deterministic clock hook. */
+    now?: () => Date;
+}
+interface GenerateStatus {
+    jobs: GenerateJob[];
+    budget: SessionBudget;
+    /** Estimates charged so far this session, by provider. */
+    spent: Record<string, number>;
+    /** Providers whose spend unit is known, for display. */
+    units: Record<string, CostUnit>;
+}
+interface GalleryGenerateHandlers {
+    start(body: unknown): Promise<GenerateJob>;
+    status(): GenerateStatus;
+    /** The embedded review sheet for a job's waiting keys; null when nothing waits. */
+    review(jobId: string, options: RenderSheetOptions & {
+        routePrefix: string;
+    }): Promise<ReviewSession | null>;
+    applyReview(jobId: string, body: unknown): Promise<PickResult>;
+}
+declare const GenerateRequestSchema: z.ZodObject<{
+    project: z.ZodOptional<z.ZodString>;
+    keys: z.ZodArray<z.ZodString, "many">;
+    /** Regenerate work that is up to date, as `gen --force` does. */
+    force: z.ZodOptional<z.ZodBoolean>;
+    /** Advance in-flight, review, or selected work without submitting anything. */
+    resume: z.ZodOptional<z.ZodBoolean>;
+}, "strict", z.ZodTypeAny, {
+    keys: string[];
+    resume?: boolean | undefined;
+    force?: boolean | undefined;
+    project?: string | undefined;
+}, {
+    keys: string[];
+    resume?: boolean | undefined;
+    force?: boolean | undefined;
+    project?: string | undefined;
+}>;
+declare class GenerateRequestError extends Error {
+    readonly status: number;
+    constructor(message: string, status?: number);
+}
+declare function createGenerateHandlers(opts: GenerateHandlerOptions): GalleryGenerateHandlers;
+
 /**
- * A contact sheet for choosing among generated candidates.
+ * The gallery's HTTP surface. Unlike the review server this is long-lived:
+ * three GET routes, bound to loopback, running until the caller closes it
+ * (the CLI does so on Ctrl+C). It has no write path unless the caller opts
+ * in: `edit` adds one POST route for manifest edits, and `generate` adds the
+ * routes that start a generation job and host its review sheet.
  *
- * This is the only step that needs human judgement, so it is optimised for one
- * thing: deciding fast. Small candidates render at an exact integer zoom with
- * a transparency checkerboard and a true-size swatch. Large candidates are
- * fitted without changing their aspect ratio, so a wide browser cannot turn a
- * review into an oversized or stretched image wall. Keyboard-first, one row
- * per asset, and the page posts back and closes itself.
+ * Every POST is guarded twice, because a page on localhost is reachable by
+ * every other page in the browser: the request's Origin must be this server,
+ * and it must carry the session token minted at startup, which only the
+ * served page knows. A cross-origin page can neither read the token nor send
+ * the custom header without a preflight this server refuses.
+ *
+ * The snapshot is rebuilt on every page load and every `/api/gallery.json`
+ * request, and the media allowlist is replaced with it, so the page's Refresh
+ * button shows a `gen` that finished in another terminal — including files
+ * that did not exist when the server started. Only paths the current
+ * snapshot names are ever read; nothing else on disk is reachable.
  */
-declare function renderSheet(groups: SheetGroup[]): string;
+interface GalleryServerOptions {
+    /** Rebuilds the snapshot and the allowlist of servable files. */
+    load: () => Promise<GalleryBuild>;
+    /** Called once listening, with the localhost URL. */
+    onReady?: (url: string) => void;
+    onProgress?: (msg: string) => void;
+    port?: number;
+    /** Open the URL in the system browser once listening. Default true. */
+    open?: boolean;
+    /**
+     * Enable `POST /api/edit`. The handler receives the parsed JSON body and
+     * returns the rebuilt gallery; it should throw an error carrying `status`
+     * (400 for a rejected edit, 409 for a manifest that changed underneath) so
+     * the page can explain what happened.
+     */
+    edit?: (body: unknown) => Promise<GalleryBuild>;
+    /**
+     * Enable `POST /api/generate`, `GET /api/jobs`, and the `/review/<job>`
+     * sheet. The handlers own budgets and provider access; see `generate.ts`.
+     */
+    generate?: GalleryGenerateHandlers;
+}
+interface GalleryServer {
+    url: string;
+    /** Session token the served page must present on writes; null when read-only. */
+    session: string | null;
+    close(): Promise<void>;
+}
+declare function serveGallery(opts: GalleryServerOptions): Promise<GalleryServer>;
 
 /** Minimal PNG header read — avoids pulling in an image library just for dimensions. */
 declare function pngSize(buf: Buffer): {
@@ -7520,111 +8341,6 @@ interface SalvageSheetContext {
  */
 declare function renderSalvageSheet(orphans: Orphan[], ctx?: SalvageSheetContext): string;
 
-/**
- * One sibling project registered in a workspace catalog. Only paths and
- * identity live here — never a credential. Each project keeps loading its own
- * key from its own `.env`, the same as it does standalone.
- */
-declare const WorkspaceProjectSchema: z.ZodObject<{
-    id: z.ZodString;
-    /** Manifest path, relative to the catalog file's own directory. */
-    manifest: z.ZodString;
-    /** Lockfile path, relative to the catalog file's own directory. */
-    lock: z.ZodString;
-    provider: z.ZodDefault<z.ZodString>;
-    /** Free-form label for a shared account, e.g. distinguishing sandboxes. */
-    account: z.ZodOptional<z.ZodString>;
-}, "strict", z.ZodTypeAny, {
-    provider: string;
-    id: string;
-    manifest: string;
-    lock: string;
-    account?: string | undefined;
-}, {
-    id: string;
-    manifest: string;
-    lock: string;
-    provider?: string | undefined;
-    account?: string | undefined;
-}>;
-declare const WorkspaceSchema: z.ZodObject<{
-    version: z.ZodLiteral<1>;
-    projects: z.ZodDefault<z.ZodArray<z.ZodObject<{
-        id: z.ZodString;
-        /** Manifest path, relative to the catalog file's own directory. */
-        manifest: z.ZodString;
-        /** Lockfile path, relative to the catalog file's own directory. */
-        lock: z.ZodString;
-        provider: z.ZodDefault<z.ZodString>;
-        /** Free-form label for a shared account, e.g. distinguishing sandboxes. */
-        account: z.ZodOptional<z.ZodString>;
-    }, "strict", z.ZodTypeAny, {
-        provider: string;
-        id: string;
-        manifest: string;
-        lock: string;
-        account?: string | undefined;
-    }, {
-        id: string;
-        manifest: string;
-        lock: string;
-        provider?: string | undefined;
-        account?: string | undefined;
-    }>, "many">>;
-}, "strict", z.ZodTypeAny, {
-    version: 1;
-    projects: {
-        provider: string;
-        id: string;
-        manifest: string;
-        lock: string;
-        account?: string | undefined;
-    }[];
-}, {
-    version: 1;
-    projects?: {
-        id: string;
-        manifest: string;
-        lock: string;
-        provider?: string | undefined;
-        account?: string | undefined;
-    }[] | undefined;
-}>;
-type WorkspaceProject = z.infer<typeof WorkspaceProjectSchema>;
-type Workspace = z.infer<typeof WorkspaceSchema>;
-/**
- * Parses a workspace catalog, rejecting anything that is not v1.
- *
- * Mirrors `parseLock`'s stance: no migration path, fail loudly rather than
- * guess at a hand-edited or corrupted file's intent.
- */
-declare function parseWorkspace(raw: unknown): Workspace;
-declare function loadWorkspace(workspacePath: string): Promise<Workspace>;
-/** Atomic write — a crash mid-save must not leave a truncated catalog. */
-declare function saveWorkspace(workspacePath: string, ws: Workspace): Promise<void>;
-/** Stored path convention: relative to the catalog's directory, forward-slash. */
-declare function toPortablePath(dir: string, absolute: string): string;
-/** Resolve a registered project's stored paths against the catalog's directory. */
-declare function resolveProject(dir: string, project: WorkspaceProject): {
-    manifestPath: string;
-    lockPath: string;
-};
-interface WorkspaceDiagnostic {
-    id: "duplicate-id" | "duplicate-lock" | "duplicate-manifest" | "missing-manifest" | "missing-lock" | "absolute-path" | "mixed-provider";
-    level: "error" | "warning";
-    message: string;
-}
-/**
- * Checks the catalog without touching the network or any registered
- * project's files. Duplicate ids and duplicate lock paths are errors — either
- * would corrupt the union claim set. A duplicate manifest is only a warning,
- * because a manifest paired with a variant `--lock` is an already-supported
- * pattern (see `cachePathFor`). Missing files are errors: a claim set derived
- * from a workspace that silently skipped a project is the exact hazard this
- * catalog exists to prevent.
- */
-declare function validateWorkspace(ws: Workspace, dir: string): WorkspaceDiagnostic[];
-
 interface WorkspaceClaims {
     /** Provider-qualified remote ids (`provider:id`) across every lock. */
     claimed: Set<string>;
@@ -7679,4 +8395,4 @@ interface WorkspaceStatusReport {
  */
 declare function workspaceStatus(ws: Workspace, dir: string): Promise<WorkspaceStatusReport>;
 
-export { type AdoptResult, type ApproveQualityOptions, type ApprovedQualityReview, type ArtifactBundleManifest, type ArtifactBundleOptions, type ArtifactBundleResult, type ArtifactFile, type ArtifactProvenance, type ArtifactSource, type ArtifactVerification, type Asset, type AssetAudit, AssetSchema, type AuditEvaluation, type AuditThresholds, type AuditViolation, type Balance, type BalanceChange, type BalanceInfo, type CacheHealthOptions, type CacheHealthReport, type CandidateSelection, type ComfyUIBinding, type ComfyUIBindings, type ComfyUIFramesOptions, type ComfyUIImageInput, type ComfyUIOptions, ComfyUIProvider, type ContentCacheHealth, type ContentCacheIssue, type CostEstimate, type CostUnit, DEFAULT_QUALITY_TOLERANCES, DEFAULT_RATE_LIMIT, type DoctorCheck, type DoctorLevel, type DoctorOptions, type DoctorReport, FAKE_PNG, type FakeOptions, FakeProvider, type FetchResult, type Generator, GeneratorSchema, type GenericTileset, type GridConfidence, GridConfidenceSchema, type ImageQualityMetrics, ImageQualityMetricsSchema, InheritedStyleSchema, type InstallRecipeOptions, type InstallRecipeResult, type JobState, type LoadedManifest, type LoadedRecipe, type Lock, type LockEntry, LockEntrySchema, type LockOutput, LockSchema, MAX_DOWNLOAD_BYTES, MAX_RETRIES, type ManagedArtifactBundleOptions, type Manifest, ManifestInputSchema, ManifestSchema, type MapObject, MediaType, type MountPlacement, type MountedSheet, type NormalizedTileRules, type Orphan, type OrphanGroups, type OutputSelection, type OutputSource, PIXEL_ART_FIXER_REVISION, PIXEL_ART_FIXER_URL, type PackedFrame, type PackedSheet, type PackedSource, type PendingQualityReview, type PickResult, type PixelArtFixerDetection, PixelLabClient, PixelLabError, type PixelLabObject, PixelLabProvider, type Plan, type PlanItem, type PlanState, type PollContext, type PollOptions, type PollResult, type Provider, type ProviderFactory, type ProviderInputContext, type ProviderInputScalar, type ProviderInputValue, type ProviderMetadata, type ProviderMode, type ProviderOptionContext, type ProviderSubmission, type QualityBaseline, QualityBaselineSchema, type QualityCheck, type QualityProfile, type QualityProfileInspection, QualityProfileSchema, type QualityProfileState, type QualityRegressionCaseResult, type QualityRegressionReport, type QualitySnapshotResult, QualityToleranceSchema, type QualityTolerances, type RateLimit, type Recipe, type RecipeFileVerification, type RecipeModelVerification, RecipeSchema, type RecipeVerification, type RefineAudit, type RefineFrameSetOptions, type RefineFrameSetResult, type RefineOptions, type RefineQualityProfilesOptions, type RefineQualityProfilesResult, type RefineRecordOptions, type RefineResult, type RemoteAsset, type RemoteHashCacheHealth, type ResolvedOutput, type ResolvedProviderInputs, type ResolvedProviderOptions, type ResolvedQualityInput, type ResolvedQualityProfile, type ResolvedRevision, type ResolvedSpec, type ResolvedStyleImage, type ResumeAction, type ResumeCommand, type RetroDiffusionOptions, RetroDiffusionProvider, type ReviewReadyInfo, type Revision, type RevisionMode, RevisionModeSchema, type RevisionReadiness, RevisionSchema, type SalvageAction, type SalvageResult, type ScannedAsset, type ScenarioOptions, ScenarioProvider, type SheetGroup, type SiblingManifest, type SpriteInput, type Style, type StyleAudit, type StyleInput, StyleInputSchema, StyleSchema, type SubmissionCheckpoint, type SubmitContext, type SubmitOptions, type SubmitResult, type TilesPro, type TilesetExport, type TilesetExportOptions, type TilesetFormat, UnsupportedCapabilityError, type Workspace, type WorkspaceClaims, type WorkspaceDiagnostic, type WorkspaceProject, WorkspaceProjectSchema, type WorkspaceProjectStatus, WorkspaceSchema, type WorkspaceStatusReport, adopt, applyTags, approveQualityRecord, auditStyle, availableProviders, backoffMs, buildManifest, buildPlan, bundledRecipeRoot, cacheFileName, candidateCount, checkQualityBaseline, checkQualityRecord, clientFromEnv, colorDistance, countNumberedDescriptions, createArtifactBundleManifest, createProvider, currentEntryOutputPath, currentOutputPath, detectMediaType, doctor, evaluateAudit, expectedOutputPath, exportTileset, fallbackOutputRole, fetchAssets, findOrphans, formatCost, generationCost, groupOrphansByStyle, hex, idFromPrompt, imageMetadata, inspectCaches, inspectQualityProfile, inspectRevisionReadiness, installRecipe, isSensitiveSourceUrl, listBundledRecipes, loadClaims, loadLock, loadManifest, loadSiblingManifests, loadWorkspace, lockKey, matchOrphanStyle, measureBalanceChange, measureDecodedImageQuality, measureImageQuality, mediaExtension, mediaTypeFromExtension, mergePalettes, mountSprites, mountStyle, normalizeLockOutputPaths, normalizeRefinementPalette, normalizeTileRules, outliers, outputId, packSprites, packStyle, paletteDistance, parseLock, parseWorkspace, pngSize, poll, portableOutputPath, primaryOutput, providerCredentialEnvs, providerFactory, pushTags, qualityFrameOutputPath, qualityRecordPath, quantizeToPalette, readArtifactBundleManifest, readQualityBaseline, recipeDigest, refineAsset, refineFrameSet, refineQualityProfiles, registerProvider, remove, renderSalvageSheet, renderSheet, requireApprovedQualitySources, requireBalance, requireDelete, requireList, requireRevisionReady, requireSelectCandidate, resolveEntryOutputs, resolveOutputPath, resolvePackInputs, resolveProject, resolveQualityInputs, resolveRecipe, resolveSpecEntryOutputs, resolveSpecOutputs, resolveSpecs, resolveStyleImages, resolveStyleOutputs, resumeActions, resumeCommandForStatus, retryAfterMs, runPicker, runSalvage, saveLock, saveWorkspace, scanAssets, selectEntryOutput, sha256, sha256File, shouldPersistSourceUrl, shouldRetry, slugify, snapshotQualityBaseline, specHash, spendByUnit, styleImagesBase64, submit, summarize, tagAdopted, tileFeatureOutputCount, tileVariationCount, tilesCost, toPortablePath, totalSpend, upsert, validateCostEstimate, validateMedia, validateWorkspace, verifyArtifactBundle, verifyRecipe, withArtifactManifest, workspaceClaims, workspaceStatus, writeArtifactBundle, writeManagedArtifactBundle };
+export { type AdoptResult, type ApproveQualityOptions, type ApprovedQualityReview, type ArtifactBundleManifest, type ArtifactBundleOptions, type ArtifactBundleResult, type ArtifactFile, type ArtifactProvenance, type ArtifactSource, type ArtifactVerification, type Asset, type AssetAudit, AssetSchema, type AuditEvaluation, type AuditThresholds, type AuditViolation, type Balance, type BalanceChange, type BalanceInfo, type BuildGalleryOptions, type BuildWorkspaceGalleryOptions, type CacheHealthOptions, type CacheHealthReport, type CandidateSelection, type ComfyUIBinding, type ComfyUIBindings, type ComfyUIFramesOptions, type ComfyUIImageInput, type ComfyUIOptions, ComfyUIProvider, type ContentCacheHealth, type ContentCacheIssue, type CostEstimate, type CostUnit, DEFAULT_QUALITY_TOLERANCES, DEFAULT_RATE_LIMIT, type DoctorCheck, type DoctorLevel, type DoctorOptions, type DoctorReport, FAKE_PNG, type FakeOptions, FakeProvider, type FetchResult, type GalleryBuild, type GalleryEditHandlerOptions, type GalleryGenerateHandlers, type GalleryItem, type GalleryMedia, type GalleryOutput, type GalleryProject, type GalleryProjectContext, type GalleryQuality, type GalleryServer, type GalleryServerOptions, type GallerySnapshot, type GalleryState, type GalleryStyle, type GenerateHandlerOptions, type GenerateJob, type GeneratePhase, GenerateRequestError, GenerateRequestSchema, type GenerateStatus, type Generator, GeneratorSchema, type GenericTileset, type GridConfidence, GridConfidenceSchema, type ImageQualityMetrics, ImageQualityMetricsSchema, InheritedStyleSchema, type InstallRecipeOptions, type InstallRecipeResult, type JobState, type LoadedManifest, type LoadedRecipe, type Lock, type LockEntry, LockEntrySchema, type LockOutput, LockSchema, MAX_DOWNLOAD_BYTES, MAX_RETRIES, type ManagedArtifactBundleOptions, type Manifest, ManifestDriftError, type ManifestEdit, ManifestEditError, type ManifestEditResult, ManifestEditSchema, ManifestInputSchema, ManifestSchema, type MapObject, MediaType, type MountPlacement, type MountedSheet, type NormalizedTileRules, type Orphan, type OrphanGroups, type OutputSelection, type OutputSource, PIXEL_ART_FIXER_REVISION, PIXEL_ART_FIXER_URL, type PackedFrame, type PackedSheet, type PackedSource, type PendingQualityReview, type PickResult, type PixelArtFixerDetection, PixelLabClient, PixelLabError, type PixelLabObject, PixelLabProvider, type Plan, type PlanItem, type PlanState, type PollContext, type PollOptions, type PollResult, type PrepareReviewOptions, type Provider, type ProviderFactory, type ProviderInputContext, type ProviderInputScalar, type ProviderInputValue, type ProviderMetadata, type ProviderMode, type ProviderOptionContext, type ProviderSubmission, type QualityBaseline, QualityBaselineSchema, type QualityCheck, type QualityProfile, type QualityProfileInspection, QualityProfileSchema, type QualityProfileState, type QualityRegressionCaseResult, type QualityRegressionReport, type QualitySnapshotResult, QualityToleranceSchema, type QualityTolerances, type RateLimit, type Recipe, type RecipeFileVerification, type RecipeModelVerification, RecipeSchema, type RecipeVerification, type RefineAudit, type RefineFrameSetOptions, type RefineFrameSetResult, type RefineOptions, type RefineQualityProfilesOptions, type RefineQualityProfilesResult, type RefineRecordOptions, type RefineResult, type RemoteAsset, type RemoteHashCacheHealth, type RenderGalleryOptions, type RenderSheetOptions, type ResolvedOutput, type ResolvedProviderInputs, type ResolvedProviderOptions, type ResolvedQualityInput, type ResolvedQualityProfile, type ResolvedRevision, type ResolvedSpec, type ResolvedStyleImage, type ResumeAction, type ResumeCommand, type RetroDiffusionOptions, RetroDiffusionProvider, type ReviewReadyInfo, type ReviewSession, type Revision, type RevisionMode, RevisionModeSchema, type RevisionReadiness, RevisionSchema, type SalvageAction, type SalvageResult, type ScannedAsset, type ScenarioOptions, ScenarioProvider, type SessionBudget, type SheetGroup, type SiblingManifest, type SpriteInput, type Style, type StyleAudit, type StyleInput, StyleInputSchema, StyleSchema, type SubmissionCheckpoint, type SubmitContext, type SubmitOptions, type SubmitResult, type TilesPro, type TilesetExport, type TilesetExportOptions, type TilesetFormat, UnsupportedCapabilityError, type Workspace, type WorkspaceClaims, type WorkspaceDiagnostic, type WorkspaceProject, WorkspaceProjectSchema, type WorkspaceProjectStatus, WorkspaceSchema, type WorkspaceStatusReport, adopt, applyManifestEdit, applyTags, approveQualityRecord, auditStyle, availableProviders, backoffMs, buildGallerySnapshot, buildManifest, buildPlan, buildWorkspaceGallerySnapshot, bundledRecipeRoot, cacheFileName, candidateCount, checkQualityBaseline, checkQualityRecord, clientFromEnv, colorDistance, countNumberedDescriptions, createArtifactBundleManifest, createGalleryEditHandler, createGenerateHandlers, createProvider, currentEntryOutputPath, currentOutputPath, detectMediaType, doctor, evaluateAudit, expectedOutputPath, exportTileset, fallbackOutputRole, fetchAssets, findOrphans, formatCost, galleryMediaId, galleryMediaRoute, generationCost, groupOrphansByStyle, hex, idFromPrompt, imageMetadata, inspectCaches, inspectQualityProfile, inspectRevisionReadiness, installRecipe, isSensitiveSourceUrl, listBundledRecipes, loadClaims, loadLock, loadManifest, loadSiblingManifests, loadWorkspace, lockKey, matchOrphanStyle, measureBalanceChange, measureDecodedImageQuality, measureImageQuality, mediaExtension, mediaTypeFromExtension, mergePalettes, mountSprites, mountStyle, normalizeLockOutputPaths, normalizeRefinementPalette, normalizeTileRules, outliers, outputId, packSprites, packStyle, paletteDistance, parseLock, parseWorkspace, pngSize, poll, portableOutputPath, prepareReview, primaryOutput, providerCredentialEnvs, providerFactory, pushTags, qualityFrameOutputPath, qualityRecordPath, quantizeToPalette, readArtifactBundleManifest, readQualityBaseline, recipeDigest, refineAsset, refineFrameSet, refineQualityProfiles, registerProvider, remove, renderGallery, renderSalvageSheet, renderSheet, requireApprovedQualitySources, requireBalance, requireDelete, requireList, requireRevisionReady, requireSelectCandidate, resolveEntryOutputs, resolveOutputPath, resolvePackInputs, resolveProject, resolveQualityInputs, resolveRecipe, resolveSpecEntryOutputs, resolveSpecOutputs, resolveSpecs, resolveStyleImages, resolveStyleOutputs, resumeActions, resumeCommandForStatus, retryAfterMs, runPicker, runSalvage, saveLock, saveWorkspace, scanAssets, selectEntryOutput, serveGallery, sha256, sha256File, shouldPersistSourceUrl, shouldRetry, slugify, snapshotQualityBaseline, specHash, spendByUnit, styleImagesBase64, submit, summarize, tagAdopted, tileFeatureOutputCount, tileVariationCount, tilesCost, toPortablePath, totalSpend, upsert, validateCostEstimate, validateMedia, validateWorkspace, verifyArtifactBundle, verifyRecipe, withArtifactManifest, workspaceClaims, workspaceStatus, writeArtifactBundle, writeManagedArtifactBundle };