rshow 0.0.7 → 0.0.8

package/dist/main.js

@@ -38,7 +38,7 @@ import process from "node:process";
 // src/version.ts
 import { readFileSync } from "node:fs";
 import { fileURLToPath } from "node:url";
-var VERSION = true ? "0.0.7" : versionFromPackage();
+var VERSION = true ? "0.0.8" : versionFromPackage();
 
 // src/binary.ts
 var ASSET_MANIFEST = "assets.json";
@@ -382,8 +382,12 @@ var Client = class {
   async patchArtifact(slug, patch) {
     return (await this.send("PATCH", `/api/artifacts/${encodeURIComponent(slug)}`, { json: patch })).body;
   }
-  async deleteArtifact(slug) {
-    await this.send("DELETE", `/api/artifacts/${encodeURIComponent(slug)}`);
+  async deleteArtifact(slug, force = false) {
+    await this.send("DELETE", `/api/artifacts/${encodeURIComponent(slug)}${force ? "?force=1" : ""}`);
+  }
+  async deleteVersion(slug, n, force = false) {
+    const pathname = `/api/artifacts/${encodeURIComponent(slug)}/versions/${n}${force ? "?force=1" : ""}`;
+    return (await this.send("DELETE", pathname)).body;
   }
   async putShare(slug, email, role) {
     const pathname = `/api/artifacts/${encodeURIComponent(slug)}/shares/${encodeURIComponent(email)}`;
@@ -444,6 +448,7 @@ var SLUG_PATTERN = /^[a-z0-9][a-z0-9-]{0,62}$/;
 var TAG_PATTERN = /^[a-z0-9][a-z0-9-]{0,31}$/;
 var THEME_NAME_PATTERN = /^[a-z0-9-]{1,40}$/;
 var THEME_VERSION_PATTERN = /^([a-z0-9-]{1,40})@([0-9]{1,9})$/;
+var THEME_LATEST_PATTERN = /^([a-z0-9-]{1,40})@latest$/;
 var DATA_KEY_PATTERN = /^[A-Za-z0-9_.-]{1,128}$/;
 var EMAIL_PATTERN = /^[^\s@]+@[^\s@]+\.[^\s@]+$/;
 var TOKEN_PREFIX = "rsh_";
@@ -991,7 +996,8 @@ commands:
   show <slug>             artifact, versions and shares
   share <slug>            set mode or change shares
   pin <slug> <n|live>     serve version n, or live for the newest
-  delete <slug> --yes     delete an artifact
+  delete <slug> [--version n] [--force] --yes
+                          delete an artifact, or one version of it
   login [--url u]         save the API token for this account
   logout [--url u]        remove the saved token for a server
   completion <shell>      print a completion script for bash, zsh or fish
@@ -1041,8 +1047,10 @@ usage error. --offline skips the theme version lookup on the art host.
 errors:
   no index.html at the root, unless theme.json makes the folder a theme
   a local href, src, poster, srcset, CSS url() or @import with no file behind it
-  a root-relative reference other than /_themes/<name>@<n>/<path>
-  a /_themes/<name>@<n>/ path whose version the art host does not have
+  a root-relative reference other than /_themes/<name>@<n>/<path> or
+    /_themes/<name>@latest/<path>
+  a /_themes/<name>@<n>/ path whose version the art host does not have, or an
+    @latest whose theme it does not have
   a script from a host other than cdnjs.cloudflare.com, cdn.jsdelivr.net,
     unpkg.com, or one of those without an exact version (@1.2.3, /1.2.3/ on cdnjs)
   a stylesheet from a host other than fonts.googleapis.com, cdn.jsdelivr.net,
@@ -1101,9 +1109,9 @@ Style warnings:
 var PREVIEW_USAGE = `usage: rshow preview <dir> [--theme <dir>] [--offline] [--no-reload] [--port 4321]
 
 Serves <dir> on 127.0.0.1: index.html for a folder, content types for files.
-Works offline: /_themes/<name>@<n>/ is served from --theme when it names that
-theme, then from the built-in themes on disk, and only then proxied to the art
-URL from config, which --offline turns off.
+Works offline: /_themes/<name>@<n>/ and /_themes/<name>@latest/ are served
+from --theme when it names that theme, then from the built-in themes on disk,
+and only then proxied to the art URL from config, which --offline turns off.
 The page is reloaded on its own when a file changes; --no-reload turns that off.
 Scripts that use <artifact>/_data/<key> get a local store in that same session.`;
 var CONFIG_USAGE = `usage: rshow config [dir] [--offline]
@@ -1112,9 +1120,10 @@ Prints the merged config as JSON: ~/.config/rshow/config.json first, then
 <dir>/rshow.json (default: the current folder). RSHOW_URL overrides url and
 RSHOW_ART overrides art. <dir>/rshow.json also takes project and tags; later
 files win. Run rshow init to write url and art.
-A theme with no version, or @latest, is looked up on the art host and printed
-as <name>@<n>; when that fails a warning goes to stderr. --offline skips it, and
-so does a config with no art host.
+A theme with no version, or @latest, prints as <name>@latest, and with the
+network its lookup adds theme_resolved as <name>@<n>; when the lookup fails a
+warning goes to stderr and the key is left out. --offline prints the loaded
+config as it is, and so does a config with no art host.
 The token is RSHOW_TOKEN, else the token rshow login saved in the macOS
 Keychain, the Linux keyring or a file with mode 600.`;
 var INIT_USAGE = `usage: rshow init --url <admin-url> --art <viewer-url> [--theme <name>] [--force]
@@ -1174,11 +1183,11 @@ var THEME_PREVIEW_USAGE = `usage: rshow theme preview <dir> [--offline] [--no-re
 
 Builds the theme folder into a temporary folder, serves that on 127.0.0.1 and
 prints the URL of index.html, the preview page that shows every layout. The
-built folder answers /_themes/<name>@<n>/ and is rebuilt, and the page reloaded,
-when the folder changes; --no-reload turns the reload off. A /_themes/ path for
-another theme comes from the built-in themes on disk, then from the art URL
-from config, which --offline turns off. The temporary folder goes when the
-server stops.`;
+built folder answers /_themes/<name>@<n>/ and /_themes/<name>@latest/ and is
+rebuilt, and the page reloaded, when the folder changes; --no-reload turns the
+reload off. A /_themes/ path for another theme comes from the built-in themes
+on disk, then from the art URL from config, which --offline turns off. The
+temporary folder goes when the server stops.`;
 var THEME_PUBLISH_USAGE = `usage: rshow theme publish <dir> [--label l] [--build cmd] [--no-check] [--force]
 
 <dir> needs theme.json with a name. The folder is published as theme-<name>,
@@ -1190,7 +1199,8 @@ built on top of its base theme, and the built folder is what gets published.
 When the newest version already holds the built folder's paths and hashes, it
 prints unchanged: theme-<name> is already v<n> and publishes nothing.
 --force publishes a new version anyway.
-Prints /_themes/<name>@<n>/.`;
+Prints /_themes/<name>@<n>/. Pages link /_themes/<name>@latest/ by default, so
+they follow every version you publish here.`;
 var THEME_LIST_USAGE = `usage: rshow theme list
 
 Lists artifacts whose slug starts with theme- and their served version.`;
@@ -1258,9 +1268,13 @@ var SHARE_USAGE = `usage: rshow share <slug> [--mode private|people|public] [--a
 var PIN_USAGE = `usage: rshow pin <slug> <n|live>
 
 Pins version n, or live to serve the newest version again.`;
-var DELETE_USAGE = `usage: rshow delete <slug> --yes
+var DELETE_USAGE = `usage: rshow delete <slug> [--version n] [--force] --yes
 
-Deletes the artifact and needs --yes.`;
+Deletes the artifact, or with --version n only that version, and needs --yes.
+A theme or a theme version also needs --force, because pages link to it.
+A pinned version and the only version of an artifact cannot be deleted.
+A public version can stay visible for up to 5 minutes after the delete, and a
+theme file for longer.`;
 var LOGIN_USAGE = `usage: rshow login [--url u]
 
 Reads the token from stdin, checks it with the API, then saves it in the macOS
@@ -15984,7 +15998,7 @@ var EMOJI = new RegExp("\\p{Emoji_Presentation}", "gu");
 var COLOR = /#[0-9a-f]{3,8}\b|\b(?:rgba?|hsla?)\([^()]*\)/gi;
 var GOOGLE_URL = /fonts\.googleapis\.com\/[^"'\s)>]*/gi;
 var GOOGLE_FAMILY = /[?&]family=([^&"'\s]+)/gi;
-var THEME_LINK = /\/_themes\/[a-z0-9][a-z0-9-]*@[0-9]+\//i;
+var THEME_LINK = /\/_themes\/[a-z0-9][a-z0-9-]*@(?:[0-9]+|latest)\//i;
 function stylePathSkipped(rel2) {
   const parts2 = rel2.toLowerCase().split("/");
   const name = parts2[parts2.length - 1] ?? "";
@@ -16372,7 +16386,7 @@ var VERSION_AT = /@[0-9]+\.[0-9]+\.[0-9]+/;
 var VERSION_PATH = /\/[0-9]+\.[0-9]+\.[0-9]+\//;
 var EXTERNAL = /^(?:[a-z][a-z0-9+.-]*:|\/\/)/i;
 var IGNORED = /^(?:#|data:|blob:|mailto:|tel:|javascript:)/i;
-var THEME_REF = /^\/_themes\/([a-z0-9][a-z0-9-]*)@([0-9]+)\//;
+var THEME_REF = /^\/_themes\/([a-z0-9][a-z0-9-]*)@(latest|[0-9]+)\//;
 var TAG_PATTERN2 = /<([a-zA-Z][a-zA-Z0-9:-]*)((?:[^>"']|"[^"]*"|'[^']*')*)>/g;
 var ATTR_PATTERN = /([a-zA-Z_:][-a-zA-Z0-9_:.]*)(?:\s*=\s*(?:"([^"]*)"|'([^']*)'|([^\s"'=<>`]+)))?/g;
 var CSS_URL = /url\(\s*(?:"([^"]*)"|'([^']*)'|([^)'"\s]*))\s*\)/gi;
@@ -16498,7 +16512,7 @@ function resolveRef(scan, file, raw, line) {
       file,
       line,
       "error",
-      `root-relative reference ${value} (only /_themes/<name>@<n>/ paths may start with a slash)`
+      `root-relative reference ${value} (only /_themes/<name>@<n>/ or /_themes/<name>@latest/ paths may start with a slash)`
     );
     return;
   }
@@ -18093,7 +18107,7 @@ async function handleTheme(req, res, session, raw, pathname, method) {
   const rest = pathname.slice(PROXY_PREFIX.length);
   const slash = rest.indexOf("/");
   const segment = slash < 0 ? rest : rest.slice(0, slash);
-  const match = THEME_VERSION_PATTERN.exec(segment);
+  const match = THEME_VERSION_PATTERN.exec(segment) ?? THEME_LATEST_PATTERN.exec(segment);
   if (match === null) {
     if (session.art !== "" && !session.offline) {
       await proxy(session.art, raw, method, res);
@@ -18488,15 +18502,16 @@ async function resolveTheme2(config) {
   const theme = config.theme ?? "default";
   const ref = themeRefOf(theme);
   if (ref.version !== void 0 && ref.version !== "latest") return config;
+  const latest = { ...config, theme: `${ref.name}@latest` };
   if (config.art === void 0) {
     warn("no art host configured; skipping theme version lookup");
-    return config;
+    return config.theme === void 0 ? config : latest;
   }
   try {
-    return { ...config, theme: await resolvedTheme(config.art, theme) };
+    return { ...latest, theme_resolved: await resolvedTheme(config.art, theme) };
   } catch (err) {
     warn(`cannot resolve theme ${ref.name}: ${messageOf8(err)}`);
-    return config.theme === void 0 ? config : { ...config, theme: ref.name };
+    return config.theme === void 0 ? config : latest;
   }
 }
 async function run4(argv, ctx) {
@@ -19473,13 +19488,35 @@ async function run12(argv, ctx) {
 
 // src/commands/delete.ts
 async function run13(argv, ctx) {
-  const args = parseCommandArgs(argv, { yes: { type: "boolean" } }, 1, 1, DELETE_USAGE);
+  const args = parseCommandArgs(
+    argv,
+    { version: { type: "string" }, force: { type: "boolean" }, yes: { type: "boolean" } },
+    1,
+    1,
+    DELETE_USAGE
+  );
   const slug = validateSlug(args.positionals[0]);
+  const raw = stringValue(args, "version");
+  let version2 = null;
+  if (raw !== void 0) {
+    if (!/^[0-9]+$/.test(raw) || Number(raw) < 1) {
+      throw new UsageError(`expected a version number, got: ${raw}`);
+    }
+    version2 = Number(raw);
+  }
   if (!boolValue(args, "yes")) throw new UsageError(`delete needs --yes (try: ${usageLine(DELETE_USAGE)})`);
   const api = await ctx.api();
-  await api.deleteArtifact(slug);
-  ctx.out.data(null);
-  ctx.out.line(`deleted: ${slug}`);
+  const force = boolValue(args, "force");
+  if (version2 === null) {
+    await api.deleteArtifact(slug, force);
+    ctx.out.data(null);
+    ctx.out.line(`deleted: ${slug}`);
+    return;
+  }
+  const artifact = await api.deleteVersion(slug, version2, force);
+  ctx.out.data(artifact);
+  ctx.out.line(`deleted: ${slug} v${version2}`);
+  ctx.out.line(`served: ${artifact?.served === null || artifact?.served === void 0 ? "-" : artifact.served}`);
 }
 
 // src/commands/project.ts
@@ -22713,8 +22750,15 @@ function listLines(usage) {
   if (start < 0) return [];
   const out = [];
   for (const line of lines.slice(start)) {
-    if (!/^\s{2}\S/.test(line)) break;
-    out.push(line);
+    if (/^\s{2}\S/.test(line)) {
+      out.push(line);
+      continue;
+    }
+    if (out.length > 0 && /^\s{3,}\S/.test(line)) {
+      out[out.length - 1] = `${out[out.length - 1].trimEnd()}  ${line.trim()}`;
+      continue;
+    }
+    break;
   }
   return out;
 }
@@ -23483,10 +23527,12 @@ function fail(err) {
 async function main2(argv) {
   const wantsJson = argv.includes("--json");
   const args = argv.filter((arg) => arg !== "--json");
-  const wantsVersion = args.includes("--version") || args.includes("-v");
   const wantsHelp = args.includes("--help") || args.includes("-h");
-  const name = args.find((arg) => !arg.startsWith("-"));
+  const commandAt = args.findIndex((arg) => !arg.startsWith("-"));
+  const name = commandAt < 0 ? void 0 : args[commandAt];
   const spec = name === void 0 ? void 0 : COMMANDS[name];
+  const versionAt = args.findIndex((arg) => arg === "--version" || arg === "-v");
+  const wantsVersion = versionAt >= 0 && (commandAt < 0 || versionAt < commandAt);
   if (wantsVersion) {
     const suffix = await isBinary() ? " (binary)" : "";
     process23.stdout.write(`rshow ${VERSION}${suffix}
@@ -23506,8 +23552,7 @@ async function main2(argv) {
   if (spec === void 0) {
     throw new UsageError(`unknown command: ${name} (try: rshow --help)`);
   }
-  const index = args.indexOf(name);
-  const rest = [...args.slice(0, index), ...args.slice(index + 1)];
+  const rest = [...args.slice(0, commandAt), ...args.slice(commandAt + 1)];
   const configs = /* @__PURE__ */ new Map();
   const clients = /* @__PURE__ */ new Map();
   const keyOf = (dir) => dir === void 0 ? "" : path26.resolve(dir);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "rshow",
-  "version": "0.0.7",
+  "version": "0.0.8",
   "description": "Publish static artifacts to rshow",
   "license": "MIT",
   "homepage": "https://rslib.github.io/rshow",

package/skills/rshow/SKILL.md

@@ -20,7 +20,7 @@ Copy this checklist into the reply and tick it as you go.
 
 ```text
 - [ ] shape picked and outline or headings agreed
-- [ ] page written, theme linked at a pinned version
+- [ ] page written, theme linked at `@latest`
 - [ ] rshow check <dir> exits 0
 - [ ] rshow preview <dir> looked at 360px wide and at desktop width
 - [ ] audience confirmed with the person
@@ -30,7 +30,7 @@ Copy this checklist into the reply and tick it as you go.
 ```
 
 1. Pick the shape and say it back in one sentence, such as a page, a report, a poster, a project page, a dashboard, a mockup, a sketch, a terminal page or a prerendered Astro or Vite site.
-2. Write `index.html` in its own folder, link the theme at a pinned version and keep every other path relative.
+2. Write `index.html` in its own folder, link the theme at `@latest` and keep every other path relative.
 3. Run `rshow check <dir>`.
 4. Fix every error, then run `rshow check` again until it exits 0.
 5. Run `rshow preview <dir>` and open the printed `http://127.0.0.1:4321` link.
@@ -46,7 +46,10 @@ Copy this checklist into the reply and tick it as you go.
 - Every path inside the artifact is relative, with no leading slash.
   The only exceptions are `/_themes/...` and `/_data/...`.
 - Link the theme, never copy it.
-  The stylesheet links and `mode.js` in the head all carry the same `<name>@<n>` version.
+  The stylesheet links and `mode.js` in the head all carry the same `<name>@latest`.
+- Link `@latest`, so a theme fix reaches the page with no republish.
+  Write a number only when the person asks to freeze a page, such as a talk on the day it is given.
+  A page frozen on a number needs 8 or newer for math.
 - The theme is the base, not a cage.
   A page may carry one inline `<style>` block with its own classes and its own layouts when the content needs them.
   Own CSS takes colour, type and space from the theme tokens with `var(--...)`, so light, dark, print and a theme swap keep working.
@@ -63,7 +66,6 @@ Copy this checklist into the reply and tick it as you go.
 - A report links `report.css` and `report.js` in place of `page.css`, and `mode.js` still goes in the head.
   Read [reports](reference/reports.md) before you write one.
 - Math is LaTeX in the text of an element with the class `math`, and the page links `math.css` and `math.js` for it.
-  Math needs theme version 8 or newer, so a page on an older version moves up with `rshow config <dir>`.
   A `div.math` is display math and any other element is inline.
   A `$` in the prose is a price and is never read as math, so `$5` stays text.
   Read [reports](reference/reports.md) for the markup an equation takes.
@@ -154,4 +156,4 @@ The short list above is a hard rule.
   Write the LaTeX in an element with the class `math` and link `math.css` and `math.js`.
 - Never create a second artifact with a `-v2` slug.
   Publish the same slug again.
-- Never delete an artifact or drop a share without a yes from the person.
+- Never delete a version, a theme or an artifact, and never drop a share, unless the person asks for it.

package/skills/rshow/reference/cli.md

@@ -25,7 +25,7 @@ This file is the whole surface, both config files and the exit codes.
 | `rshow check <file-or-dir>` | apply the page contract to the files a publish would upload |
 | `rshow preview <dir>` | serve a folder on `127.0.0.1` for a look, offline |
 | `rshow publish <file-or-dir>` | upload a folder, or one file as `index.html`, as a new version |
-| `rshow config [dir] [--offline]` | print the merged config as JSON, with `theme` resolved to its current version, such as `default@3` |
+| `rshow config [dir] [--offline]` | print the merged config as JSON, with `theme` as `<name>@latest` and, with the network, `theme_resolved` as the version it resolves to |
 | `rshow init --url <admin-url> --art <viewer-url>` | write the global config file, with `--theme` and `--force` |
 | `rshow doctor [dir]` | check node, config, token, api, art, theme and skills, one `ok\|warn\|fail` line each |
 | `rshow list` | list artifacts you own or that are shared with you, with `--project`, `--tag` and `--q` filters |
@@ -36,7 +36,7 @@ This file is the whole surface, both config files and the exit codes.
 | `rshow tag <slug>` | add or remove tags on an artifact |
 | `rshow handoff <slug>@v<n>` | write a design handoff folder from a published design |
 | `rshow compare --against <dir>` | compare an implementation with that handoff folder |
-| `rshow delete <slug> --yes` | delete an artifact |
+| `rshow delete <slug> [--version n] [--force] --yes` | delete an artifact, or one version of it |
 | `rshow theme new <name>` | write a preset folder that extends a built-in theme |
 | `rshow theme check <dir>` | check a theme or preset folder against the token contract |
 | `rshow theme preview <dir>` | build the theme, then serve its preview page on `127.0.0.1` |
@@ -77,7 +77,7 @@ They are never errors, because a person may have a reason.
 `--no-style` skips all of them, and `--json` prints the findings as data.
 
 `--offline` skips every request the check would make, so it works on a plane and it never waits on the host.
-A published page that links `/_themes/<name>@<n>/` needs the network to confirm that version exists, so a `--offline` run reports those links as unchecked rather than as a pass.
+A published page that links `/_themes/<name>@<n>/` or `/_themes/<name>@latest/` needs the network to confirm the theme exists, so a `--offline` run reports those links as unchecked rather than as a pass.
 
 `rshow publish` runs the check first and stops while there is an error, so a page that fails the contract does not go live.
 `--no-check` skips that step.
@@ -90,7 +90,7 @@ rshow preview <dir> [--theme <dir>] [--offline] [--no-reload] [--port 4321]
 ```
 
 It serves `<dir>` on `127.0.0.1`, prints `http://127.0.0.1:<port>` and keeps running until you stop it.
-It works offline: `/_themes/<name>@<n>/` comes from `--theme` when that folder is the theme, then from the built-in theme on disk, and only then from the art URL in the config, which `--offline` turns off.
+It works offline: `/_themes/<name>@<n>/` and `/_themes/<name>@latest/` come from `--theme` when that folder is the theme, then from the built-in theme on disk, and only then from the art URL in the config, which `--offline` turns off.
 A page that uses `<artifact>/_data/<key>` gets a local store for the session, and the page reloads by itself when a file changes, which `--no-reload` turns off.
 
 ## publish
@@ -174,8 +174,10 @@ Set the tags and the project in `rshow.json` when they are a fact about the fold
 `rshow theme publish <dir> [--label l] [--build cmd]` needs a `theme.json` with a `name`, publishes the folder as `theme-<name>`, sets it public and prints `/_themes/<name>@<n>/`.
 `rshow theme list` prints the theme artifacts and the version each one serves.
 `rshow show <slug>` prints the artifact, its versions, its shares, its pin and its URLs.
-`rshow delete <slug> --yes` deletes the artifact and every version.
+`rshow delete <slug> --yes` deletes the artifact and every version, and `--version <n>` deletes only that version.
 It needs `--yes`, and it needs a yes from the person.
+A theme or a theme version also needs `--force`, because pages link to it.
+A public version can stay visible for up to 5 minutes after the delete, and a theme file for longer, so tell the person this when they delete to take something down.
 
 A preset is a small folder whose `theme.json` carries `"extends": "default"` and only token and font overrides.
 `rshow theme new <name> [--dir <parent>] [--from default]` writes it with both modes pre-filled with the base values of `--bg`, `--fg`, `--muted`, `--accent` and `--layer-01`, and prints the path plus `next: rshow theme check <dir>`.
@@ -238,7 +240,7 @@ Later files win, and the environment beats both.
 | `art` | the art base the preview proxies `/_themes/` to, set by `rshow init` or `RSHOW_ART`; without it a theme lookup is skipped with a warning |
 | `slug` | the artifact to publish to, overridden by `--slug` |
 | `title` | the human title, overridden by `--title` |
-| `theme` | the theme a page should link: `<name>`, `<name>@latest` or a fixed `<name>@<n>`. `rshow config` prints it as `<name>@<n>` and you apply it by hand |
+| `theme` | the theme a page should link: `<name>`, `<name>@latest` or a fixed `<name>@<n>`. Agents link `<name>@latest` and `rshow config` keeps it that way, with `theme_resolved` beside it when the lookup works |
 | `tokens` | token overrides recorded and printed by `rshow config`. No command writes them into a page, so apply them by hand |
 | `build` | the command `publish` runs in the folder first |
 | `out` | the folder under `<dir>` to publish, default `dist` |

package/skills/rshow/reference/dashboard.md

@@ -30,11 +30,11 @@ A dashboard that nobody filters is a report with extra steps.
 <meta charset="utf-8">
 <meta name="viewport" content="width=device-width, initial-scale=1">
 <title>Write-ahead log, results per run</title>
-<link rel="stylesheet" href="/_themes/default@3/fonts.css">
-<link rel="stylesheet" href="/_themes/default@3/tokens.css">
-<link rel="stylesheet" href="/_themes/default@3/dashboard.css">
-<script src="/_themes/default@3/mode.js"></script>
-<script defer src="/_themes/default@3/dashboard.js"></script>
+<link rel="stylesheet" href="/_themes/default@latest/fonts.css">
+<link rel="stylesheet" href="/_themes/default@latest/tokens.css">
+<link rel="stylesheet" href="/_themes/default@latest/dashboard.css">
+<script src="/_themes/default@latest/mode.js"></script>
+<script defer src="/_themes/default@latest/dashboard.js"></script>
 </head>
 <body>
 <div class="dashboard" data-src="results.csv" data-facet="workload"

package/skills/rshow/reference/page-contract.md

@@ -8,7 +8,7 @@ It reads the files a publish would upload, so for a prerendered site it reads th
 
 - One `index.html` at the root of the folder you publish.
 - Every other path inside the artifact is relative and has no leading slash, such as `chart.svg`.
-- The two root-relative prefixes are `/_themes/<name>@<n>/` and `/_data/`, and both point at the host on purpose.
+- The root-relative prefixes are `/_themes/<name>@latest/`, `/_themes/<name>@<n>/` and `/_data/`, and all point at the host on purpose.
 - At most 2000 files and 100 MiB per version, and at most 25 MiB per file.
 - No theme file in the artifact.
   No `deck.css`, no `page.css`, no font file, no `assets/` copy of a theme.
@@ -34,6 +34,7 @@ The theme files under `/_themes/` count as `'self'`, so a linked theme needs no
 ## CDN builds, pinned
 
 Pin the exact version in the URL and never write `@latest` or a moving tag, which `rshow check` counts as an error.
+A theme link is the one moving link that is allowed, so `/_themes/<name>@latest/` is right and a number is for a frozen page.
 
 | Library | Pinned URL |
 |---|---|

package/skills/rshow/reference/pages.md

@@ -27,8 +27,8 @@ A single file published on its own becomes `index.html` and nothing else is uplo
 
 ## The skeleton
 
-Replace `<name>@<n>` with the `theme` value that `rshow config <dir>` prints, which the server resolves to the current version. Use `default@3` only when `rshow config` warns that it cannot resolve the theme.
-Every link carries the same version on purpose, because a mixed version renders somewhere between two designs.
+Link the theme at `@latest`, so a theme fix reaches the page with no republish. Write a number only when the person asks to freeze a page, such as a talk on the day it is given. A page frozen on a number needs 8 or newer for math.
+Every link names the same theme on purpose, and all of them use `@latest` or all use the same number, because a mix of two versions renders somewhere between two designs.
 
 ```html
 <!doctype html>
@@ -37,10 +37,10 @@ Every link carries the same version on purpose, because a mixed version renders
 <meta charset="utf-8">
 <meta name="viewport" content="width=device-width, initial-scale=1">
 <title>Q3 latency report</title>
-<link rel="stylesheet" href="/_themes/default@3/fonts.css">
-<link rel="stylesheet" href="/_themes/default@3/tokens.css">
-<link rel="stylesheet" href="/_themes/default@3/page.css">
-<script src="/_themes/default@3/mode.js"></script>
+<link rel="stylesheet" href="/_themes/default@latest/fonts.css">
+<link rel="stylesheet" href="/_themes/default@latest/tokens.css">
+<link rel="stylesheet" href="/_themes/default@latest/page.css">
+<script src="/_themes/default@latest/mode.js"></script>
 <style>:root{--accent: #0f62fe;}</style>
 </head>
 <body>
@@ -164,7 +164,7 @@ Put the same thing in `rshow.json` when it should not be retyped:
 {
   "slug": "status",
   "title": "Cluster status",
-  "theme": "default@3",
+  "theme": "default@latest",
   "build": "npm run build",
   "out": "dist"
 }

package/skills/rshow/reference/poster.md

@@ -37,12 +37,12 @@ The status line beside the buttons always names the width and the height, so the
 <meta charset="utf-8">
 <meta name="viewport" content="width=device-width, initial-scale=1">
 <title>Immutable artifacts for reproducible figures</title>
-<link rel="stylesheet" href="/_themes/default@3/fonts.css">
-<link rel="stylesheet" href="/_themes/default@3/tokens.css">
-<link rel="stylesheet" href="/_themes/default@3/poster.css">
-<script src="/_themes/default@3/mode.js"></script>
+<link rel="stylesheet" href="/_themes/default@latest/fonts.css">
+<link rel="stylesheet" href="/_themes/default@latest/tokens.css">
+<link rel="stylesheet" href="/_themes/default@latest/poster.css">
+<script src="/_themes/default@latest/mode.js"></script>
 <script defer src="https://cdn.jsdelivr.net/npm/qrcode-generator@1.4.4/qrcode.js"></script>
-<script defer src="/_themes/default@3/poster.js"></script>
+<script defer src="/_themes/default@latest/poster.js"></script>
 </head>
 <body>
 

package/skills/rshow/reference/project-page.md

@@ -38,11 +38,11 @@ Link `fonts.css`, `tokens.css` and `project.css`, then `mode.js` in the head and
 <meta charset="utf-8">
 <meta name="viewport" content="width=device-width, initial-scale=1">
 <title>Immutable artifacts for reproducible figures</title>
-<link rel="stylesheet" href="/_themes/default@3/fonts.css">
-<link rel="stylesheet" href="/_themes/default@3/tokens.css">
-<link rel="stylesheet" href="/_themes/default@3/project.css">
-<script src="/_themes/default@3/mode.js"></script>
-<script defer src="/_themes/default@3/project.js"></script>
+<link rel="stylesheet" href="/_themes/default@latest/fonts.css">
+<link rel="stylesheet" href="/_themes/default@latest/tokens.css">
+<link rel="stylesheet" href="/_themes/default@latest/project.css">
+<script src="/_themes/default@latest/mode.js"></script>
+<script defer src="/_themes/default@latest/project.js"></script>
 </head>
 <body>
 <div class="project">

package/skills/rshow/reference/reports.md

@@ -35,11 +35,11 @@ Link `fonts.css`, `tokens.css` and `report.css`, then `mode.js` in the head and
 <meta charset="utf-8">
 <meta name="viewport" content="width=device-width, initial-scale=1">
 <title>Publishing a folder as an immutable artifact</title>
-<link rel="stylesheet" href="/_themes/default@3/fonts.css">
-<link rel="stylesheet" href="/_themes/default@3/tokens.css">
-<link rel="stylesheet" href="/_themes/default@3/report.css">
-<script src="/_themes/default@3/mode.js"></script>
-<script defer src="/_themes/default@3/report.js"></script>
+<link rel="stylesheet" href="/_themes/default@latest/fonts.css">
+<link rel="stylesheet" href="/_themes/default@latest/tokens.css">
+<link rel="stylesheet" href="/_themes/default@latest/report.css">
+<script src="/_themes/default@latest/mode.js"></script>
+<script defer src="/_themes/default@latest/report.js"></script>
 </head>
 <body>
 <div class="report">

package/skills/rshow/reference/sketch.md

@@ -23,11 +23,11 @@ A sketch is also the honest shape for a workshop, where a tidy drawing would end
 ## Markup
 
 ```html
-<link rel="stylesheet" href="/_themes/default@3/fonts.css">
-<link rel="stylesheet" href="/_themes/default@3/tokens.css">
-<link rel="stylesheet" href="/_themes/default@3/sketch.css">
-<script src="/_themes/default@3/mode.js"></script>
-<script defer src="/_themes/default@3/sketch.js"></script>
+<link rel="stylesheet" href="/_themes/default@latest/fonts.css">
+<link rel="stylesheet" href="/_themes/default@latest/tokens.css">
+<link rel="stylesheet" href="/_themes/default@latest/sketch.css">
+<script src="/_themes/default@latest/mode.js"></script>
+<script defer src="/_themes/default@latest/sketch.js"></script>
 ...
 <div class="sketch" data-src="drawing.excalidraw" data-store="sketch-main"></div>
 ```

package/skills/rshow/reference/terminal.md

@@ -26,11 +26,11 @@ The viewer and the TUI kit are the theme's, and both are guided kits: the frame
 ## The viewer
 
 ```html
-<link rel="stylesheet" href="/_themes/default@3/fonts.css">
-<link rel="stylesheet" href="/_themes/default@3/tokens.css">
-<link rel="stylesheet" href="/_themes/default@3/terminal.css">
-<script src="/_themes/default@3/mode.js"></script>
-<script defer src="/_themes/default@3/terminal.js"></script>
+<link rel="stylesheet" href="/_themes/default@latest/fonts.css">
+<link rel="stylesheet" href="/_themes/default@latest/tokens.css">
+<link rel="stylesheet" href="/_themes/default@latest/terminal.css">
+<script src="/_themes/default@latest/mode.js"></script>
+<script defer src="/_themes/default@latest/terminal.js"></script>
 ...
 <figure class="terminal" data-mode="ansi" data-src="capture.ans"
         data-cols="100" data-rows="30" data-title="procview" data-palette="default"></figure>

package/skills/rshow-slides/SKILL.md

@@ -32,8 +32,7 @@ A topic on its own is not a slide.
 
 ## 2. Skeleton
 
-Replace `<name>@<n>` with the `theme` value that `rshow config <dir>` prints, which the server resolves to the current version. Use `default@3` only when `rshow config` warns that it cannot resolve the theme.
-Math needs theme version 8 or newer, so a page on an older version moves up with `rshow config <dir>`.
+Link the theme at `@latest`, so a theme fix reaches the deck with no republish. Write a number only when the person asks to freeze a deck, such as a talk on the day it is given. A deck frozen on a number needs 8 or newer for math.
 
 ```html
 <!doctype html>
@@ -42,12 +41,12 @@ Math needs theme version 8 or newer, so a page on an older version moves up with
 <meta charset="utf-8">
 <meta name="viewport" content="width=device-width, initial-scale=1">
 <title>Talk title</title>
-<link rel="stylesheet" href="/_themes/default@3/fonts.css">
-<link rel="stylesheet" href="/_themes/default@3/tokens.css">
-<link rel="stylesheet" href="/_themes/default@3/deck.css">
+<link rel="stylesheet" href="/_themes/default@latest/fonts.css">
+<link rel="stylesheet" href="/_themes/default@latest/tokens.css">
+<link rel="stylesheet" href="/_themes/default@latest/deck.css">
 <!-- a deck that writes math links these two, and math.js goes before deck.js -->
-<link rel="stylesheet" href="/_themes/default@3/math.css">
-<script defer src="/_themes/default@3/math.js"></script>
+<link rel="stylesheet" href="/_themes/default@latest/math.css">
+<script defer src="/_themes/default@latest/math.js"></script>
 </head>
 <body>
 <main class="deck">
@@ -69,13 +68,12 @@ Math needs theme version 8 or newer, so a page on an older version moves up with
   </section>
 
 </main>
-<script src="/_themes/default@3/deck.js"></script>
+<script src="/_themes/default@latest/deck.js"></script>
 </body>
 </html>
 ```
 
-The three stylesheet links and the script carry the same `<n>` on purpose, because a mixed version renders somewhere between two designs.
-A fallback to `default@3` keeps the page readable but has no math, so a deck on that version links neither `math.css` nor `math.js`, and the `math.js` warning of `rshow check` is the sign to move up.
+The three stylesheet links and the script carry `@latest` on purpose, so a theme fix reaches every deck on the next open.
 The deck needs no `mode.js`, because `deck.js` reads the same key and `t` does the same work.
 Override a token in one `:root` block after the theme links when the deck needs its own accent, with no limit on the declarations.
 An inline `<style>` block after the theme links may also carry a layout of the deck's own, as section 3 says.

package/worker/index.js

@@ -2703,6 +2703,7 @@ var SLUG_PATTERN = /^[a-z0-9][a-z0-9-]{0,62}$/;
 var TAG_PATTERN = /^[a-z0-9][a-z0-9-]{0,31}$/;
 var THEME_NAME_PATTERN = /^[a-z0-9-]{1,40}$/;
 var THEME_VERSION_PATTERN = /^([a-z0-9-]{1,40})@([0-9]{1,9})$/;
+var THEME_LATEST_PATTERN = /^([a-z0-9-]{1,40})@latest$/;
 var THEME_JSON_PATTERN = /^([a-z0-9-]{1,40})\.json$/;
 var DATA_KEY_PATTERN = /^[A-Za-z0-9_.-]{1,128}$/;
 var EMAIL_PATTERN = /^[^\s@]+@[^\s@]+\.[^\s@]+$/;
@@ -3002,13 +3003,13 @@ function jsonError(message2, status) {
   return json({ error: message2 }, status);
 }
 __name(jsonError, "jsonError");
-function redirect(location, status = 301) {
-  return new Response(null, { status, headers: { location, "cache-control": "no-store" } });
+function redirect(location, status = 301, cacheControl = "no-store") {
+  return new Response(null, { status, headers: { location, "cache-control": cacheControl } });
 }
 __name(redirect, "redirect");
 
 // src/db.ts
-var ARTIFACT_COLUMNS = "slug, title, owner, mode, pinned, latest, project, created_at, updated_at";
+var ARTIFACT_COLUMNS = "slug, title, owner, mode, pinned, latest, last_n, version_gen, project, created_at, updated_at";
 var PROJECT_COLUMNS = "slug, title, description, owner, created_at, updated_at";
 async function getArtifact(env, slug) {
   return await env.DB.prepare(`SELECT ${ARTIFACT_COLUMNS} FROM artifacts WHERE slug = ?1`).bind(slug).first();
@@ -3048,6 +3049,11 @@ async function listVersions(env, slug) {
   return result.results ?? [];
 }
 __name(listVersions, "listVersions");
+async function countVersions(env, slug) {
+  const row = await env.DB.prepare("SELECT COUNT(*) AS total FROM versions WHERE slug = ?1").bind(slug).first();
+  return row?.total ?? 0;
+}
+__name(countVersions, "countVersions");
 async function sharesForEmail(env, email) {
   const result = await env.DB.prepare("SELECT slug, email, role FROM shares WHERE email = ?1").bind(email).all();
   const map = /* @__PURE__ */ new Map();
@@ -3280,12 +3286,12 @@ var MANIFEST_CACHE_CONTROL = "public, max-age=31536000, immutable";
 var VERSION_CACHE_CONTROL = "public, max-age=31536000, immutable";
 var JSON_CONTENT_TYPE = "application/json";
 var BLOB_CACHE_CONTROL = "public, max-age=31536000, immutable";
-var ARTIFACT_COLUMNS2 = "slug, title, owner, mode, pinned, latest, project, created_at, updated_at";
+var ARTIFACT_COLUMNS2 = "slug, title, owner, mode, pinned, latest, last_n, version_gen, project, created_at, updated_at";
 var VERSION_COLUMNS = "slug, n, label, manifest_key, files, bytes, created_by, created_at";
 var accessMemory = /* @__PURE__ */ new Map();
 var manifestMemory = /* @__PURE__ */ new Map();
 var versionMemory = /* @__PURE__ */ new Map();
-var versionNumbers = /* @__PURE__ */ new Map();
+var versionKeys = /* @__PURE__ */ new Map();
 var trackedKeys = /* @__PURE__ */ new Set();
 function accessCacheKey(slug) {
   return `${CACHE_ORIGIN}/access/${slug}`;
@@ -3299,12 +3305,12 @@ function blobCacheKey(hash) {
   return `${CACHE_ORIGIN}/blob/${hash}`;
 }
 __name(blobCacheKey, "blobCacheKey");
-function versionCacheKey(slug, n) {
-  return `${CACHE_ORIGIN}/version/${slug}/${n}`;
+function versionCacheKey(slug, n, gen) {
+  return `${CACHE_ORIGIN}/version/${slug}/${n}/${gen}`;
 }
 __name(versionCacheKey, "versionCacheKey");
-function versionMemoryKey(slug, n) {
-  return `${slug}/${n}`;
+function versionMemoryKey(slug, n, gen) {
+  return `${slug}/${n}/${gen}`;
 }
 __name(versionMemoryKey, "versionMemoryKey");
 function rememberAccess(slug, value, expires) {
@@ -3327,8 +3333,8 @@ function rememberManifest(key, value) {
   }
 }
 __name(rememberManifest, "rememberManifest");
-function rememberVersion(slug, n, row) {
-  const key = versionMemoryKey(slug, n);
+function rememberVersion(slug, n, gen, row) {
+  const key = versionMemoryKey(slug, n, gen);
   versionMemory.delete(key);
   versionMemory.set(key, row);
   while (versionMemory.size > VERSION_MAX_ENTRIES) {
@@ -3336,9 +3342,9 @@ function rememberVersion(slug, n, row) {
     if (oldest === void 0) break;
     versionMemory.delete(oldest);
   }
-  const numbers = versionNumbers.get(slug) ?? /* @__PURE__ */ new Set();
-  numbers.add(n);
-  versionNumbers.set(slug, numbers);
+  const keys = versionKeys.get(slug) ?? /* @__PURE__ */ new Set();
+  keys.add(versionCacheKey(slug, n, gen));
+  versionKeys.set(slug, keys);
 }
 __name(rememberVersion, "rememberVersion");
 function decodeVersion(text) {
@@ -3487,34 +3493,38 @@ async function invalidateProjectAccess(env, project) {
   }
 }
 __name(invalidateProjectAccess, "invalidateProjectAccess");
-async function versionFor(env, slug, n) {
-  const memory = versionMemory.get(versionMemoryKey(slug, n));
+async function versionFor(env, artifact, n) {
+  const gen = artifact.version_gen;
+  const memory = versionMemory.get(versionMemoryKey(artifact.slug, n, gen));
   if (memory) {
-    rememberVersion(slug, n, memory);
+    rememberVersion(artifact.slug, n, gen, memory);
     return memory;
   }
-  const cached = await cacheGet(versionCacheKey(slug, n));
+  const key = versionCacheKey(artifact.slug, n, gen);
+  const cached = await cacheGet(key);
   if (cached) {
     const row2 = decodeVersion(await cached.text());
     if (row2) {
-      rememberVersion(slug, n, row2);
+      rememberVersion(artifact.slug, n, gen, row2);
       return row2;
     }
   }
-  const row = await getVersion(env, slug, n);
+  const row = await getVersion(env, artifact.slug, n);
   if (!row) return null;
-  rememberVersion(slug, n, row);
-  await cachePut(versionCacheKey(slug, n), JSON.stringify(row), VERSION_CACHE_CONTROL);
+  rememberVersion(artifact.slug, n, gen, row);
+  await cachePut(key, JSON.stringify(row), VERSION_CACHE_CONTROL);
   return row;
 }
 __name(versionFor, "versionFor");
 async function invalidateVersions(slug) {
-  const numbers = versionNumbers.get(slug);
-  versionNumbers.delete(slug);
-  if (!numbers) return;
-  for (const n of numbers) {
-    versionMemory.delete(versionMemoryKey(slug, n));
-    const key = versionCacheKey(slug, n);
+  const prefix = `${slug}/`;
+  for (const key of [...versionMemory.keys()]) {
+    if (key.startsWith(prefix)) versionMemory.delete(key);
+  }
+  const keys = versionKeys.get(slug);
+  versionKeys.delete(slug);
+  if (!keys) return;
+  for (const key of keys) {
     trackedKeys.delete(key);
     try {
       await caches.default.delete(key);
@@ -3796,7 +3806,7 @@ async function storeVersion(env, artifact, input2) {
       env.DB.prepare(
         "INSERT INTO versions (slug, n, label, manifest_key, files, bytes, created_by, created_at) SELECT ?1, ?2, ?3, ?4, ?5, ?6, ?7, ?8 WHERE (SELECT latest FROM artifacts WHERE slug = ?1) IS ?9"
       ).bind(artifact.slug, input2.n, input2.label, key, input2.files, input2.bytes, input2.createdBy, input2.now, input2.base),
-      env.DB.prepare("UPDATE artifacts SET latest = ?2, updated_at = ?3 WHERE slug = ?1 AND latest IS ?4").bind(
+      env.DB.prepare("UPDATE artifacts SET latest = ?2, last_n = ?2, updated_at = ?3 WHERE slug = ?1 AND latest IS ?4").bind(
         artifact.slug,
         input2.n,
         input2.now,
@@ -3841,6 +3851,52 @@ function registerVersions(app) {
     if (!manifest) return jsonError("no such version", 404);
     return json(toVersionDetail(c.env, access.artifact.slug, version, manifest));
   });
+  app.delete("/api/artifacts/:slug/versions/:n", async (c) => {
+    const email = c.get("identity").email;
+    const access = await loadAccessible(c.env, c.req.param("slug"), email);
+    if (!access) return jsonError("not found", 404);
+    if (!canManage(access.artifact, access.shares, actorOf(c), access.project)) {
+      return jsonError("owner access is required", 403);
+    }
+    const raw2 = c.req.param("n");
+    if (!/^[1-9][0-9]{0,8}$/.test(raw2)) return jsonError("no such version", 404);
+    const n = Number(raw2);
+    const slug = access.artifact.slug;
+    if (slug.startsWith(THEME_PREFIX) && c.req.query("force") !== "1") {
+      return jsonError("pages link to theme versions; pass force to delete it", 409);
+    }
+    const version = await getVersion(c.env, slug, n);
+    if (!version) return jsonError("no such version", 404);
+    if (access.artifact.pinned === n) {
+      return jsonError(`version ${n} is pinned; pin another version first`, 409);
+    }
+    if (await countVersions(c.env, slug) <= 1) {
+      return jsonError("this is the only version; delete the artifact instead", 409);
+    }
+    const now = (/* @__PURE__ */ new Date()).toISOString();
+    let deletedChanges = 0;
+    try {
+      const [deleted] = await c.env.DB.batch([
+        c.env.DB.prepare(
+          "DELETE FROM versions WHERE slug = ?1 AND n = ?2 AND (SELECT pinned FROM artifacts WHERE slug = ?1) IS NOT ?2 AND (SELECT COUNT(*) FROM versions WHERE slug = ?1) > 1"
+        ).bind(slug, n),
+        c.env.DB.prepare(
+          "UPDATE artifacts SET latest = (SELECT MAX(n) FROM versions WHERE slug = ?1), version_gen = version_gen + 1, updated_at = ?2 WHERE slug = ?1"
+        ).bind(slug, now)
+      ]);
+      deletedChanges = deleted?.meta?.changes ?? 0;
+    } catch {
+      return jsonError("could not delete the version", 500);
+    }
+    if (deletedChanges !== 1) return jsonError("another change came first, retry", 409);
+    await discardManifest(c.env, version.manifest_key);
+    await invalidateVersions(slug);
+    await invalidateAccess(slug);
+    const updated = await getArtifact(c.env, slug);
+    if (!updated) return jsonError("not found", 404);
+    const tags = await getArtifactTags(c.env, slug);
+    return json(toArtifact(c.env, updated, access.role, tags));
+  });
   app.post("/api/artifacts/:slug/versions", async (c) => {
     const body = await readBody(c);
     if (!body.ok) return body.response;
@@ -3882,7 +3938,7 @@ function registerVersions(app) {
     }
     const label = typeof body.body.label === "string" ? body.body.label.trim().slice(0, 200) : "";
     const base = access.artifact.latest;
-    const n = (base ?? 0) + 1;
+    const n = Math.max(access.artifact.last_n, base ?? 0) + 1;
     const now = (/* @__PURE__ */ new Date()).toISOString();
     const stored = await storeVersion(c.env, access.artifact, {
       label,
@@ -3999,6 +4055,8 @@ function registerArtifactCreate(app) {
       mode: MODE.private,
       pinned: null,
       latest: null,
+      last_n: 0,
+      version_gen: 0,
       project,
       created_at: now,
       updated_at: now
@@ -4138,6 +4196,9 @@ function registerArtifactItem(app) {
     if (!canManage(access.artifact, access.shares, actorOf(c), access.project)) {
       return jsonError("owner access is required", 403);
     }
+    if (access.artifact.slug.startsWith(THEME_PREFIX) && c.req.query("force") !== "1") {
+      return jsonError("pages link to this theme; pass force to delete it", 409);
+    }
     const prefix = `manifests/${access.artifact.slug}/`;
     const keys = [];
     let cursor;
@@ -4498,7 +4559,7 @@ __name(registerApi, "registerApi");
 
 // src/static.generated.ts
 var APP_CSS = '/* IBM Carbon Design System v11, g10 theme (light) and g100 theme (dark) */\n:root{--bg:#f4f4f4;--layer-01:#ffffff;--layer-02:#f4f4f4;--layer-hover:#e8e8e8;--layer-active:#d1d1d1;--border-subtle:#e0e0e0;--border-strong:#8d8d8d;--text-primary:#161616;--text-secondary:#525252;--link:#0f62fe;--link-hover:#0043ce;--focus:#0f62fe;--support-error:#da1e28;--support-success:#24a148;--error-bg:#fff1f1;--tag-gray:#e0e0e0;--tag-blue:#d0e2ff;--tag-blue-ink:#0043ce;--tag-teal:#9ef0f0;--tag-teal-ink:#004144;--btn-primary:#0f62fe;--btn-primary-hover:#0043ce;--btn-primary-ink:#ffffff;--btn-secondary:#393939;--btn-secondary-hover:#4c4c4c;--tag-live-bg:#a7f0ba;--tag-live-ink:#044317;--code-bg:#161616;--code-ink:#f4f4f4;--shell:#161616;--shell-fg:#f4f4f4;--shell-muted:#c6c6c6;--shell-field:#393939;--nav-selected:#e8e8e8;--segment-on-bg:#161616;--segment-on-fg:#ffffff;--font-sans:"IBM Plex Sans",system-ui,-apple-system,sans-serif;--font-mono:"IBM Plex Mono",ui-monospace,monospace}\n@media (prefers-color-scheme: dark){:root:not([data-mode="light"]){--bg:#161616;--layer-01:#262626;--layer-02:#393939;--layer-hover:#333333;--layer-active:#525252;--border-subtle:#393939;--border-strong:#6f6f6f;--text-primary:#f4f4f4;--text-secondary:#c6c6c6;--link:#78a9ff;--link-hover:#a6c8ff;--focus:#ffffff;--support-error:#fa4d56;--support-success:#42be65;--error-bg:#2d0709;--tag-gray:#393939;--tag-blue:#002d9c;--tag-blue-ink:#d0e2ff;--tag-teal:#004144;--tag-teal-ink:#9ef0f0;--btn-primary:#0f62fe;--btn-primary-hover:#0353e9;--btn-primary-ink:#ffffff;--btn-secondary:#6f6f6f;--btn-secondary-hover:#525252;--tag-live-bg:#044317;--tag-live-ink:#a7f0ba;--code-bg:#262626;--code-ink:#f4f4f4;--shell:#161616;--shell-fg:#f4f4f4;--shell-muted:#c6c6c6;--shell-field:#262626;--nav-selected:#393939;--segment-on-bg:#f4f4f4;--segment-on-fg:#161616}}\n:root[data-mode="dark"]{--bg:#161616;--layer-01:#262626;--layer-02:#393939;--layer-hover:#333333;--layer-active:#525252;--border-subtle:#393939;--border-strong:#6f6f6f;--text-primary:#f4f4f4;--text-secondary:#c6c6c6;--link:#78a9ff;--link-hover:#a6c8ff;--focus:#ffffff;--support-error:#fa4d56;--support-success:#42be65;--error-bg:#2d0709;--tag-gray:#393939;--tag-blue:#002d9c;--tag-blue-ink:#d0e2ff;--tag-teal:#004144;--tag-teal-ink:#9ef0f0;--btn-primary:#0f62fe;--btn-primary-hover:#0353e9;--btn-primary-ink:#ffffff;--btn-secondary:#6f6f6f;--btn-secondary-hover:#525252;--tag-live-bg:#044317;--tag-live-ink:#a7f0ba;--code-bg:#262626;--code-ink:#f4f4f4;--shell:#161616;--shell-fg:#f4f4f4;--shell-muted:#c6c6c6;--shell-field:#262626;--nav-selected:#393939;--segment-on-bg:#f4f4f4;--segment-on-fg:#161616}\n*{box-sizing:border-box}\nhtml,body{margin:0;padding:0}\nbody{background:var(--bg);color:var(--text-primary);font:400 14px/1.43 var(--font-sans);-webkit-font-smoothing:antialiased}\na{color:var(--link);text-decoration:none}\na:hover{color:var(--link-hover);text-decoration:underline}\na:focus-visible,button:focus-visible,input:focus-visible,select:focus-visible,textarea:focus-visible,summary:focus-visible,.segment:focus-within{outline:2px solid var(--focus);outline-offset:-2px}\nh1,h2,h3,p{margin:0}\nh1{font-size:28px;font-weight:400;line-height:1.29;letter-spacing:0}\nh2{font-size:16px;font-weight:600;line-height:1.375;letter-spacing:0}\n.sr-only{position:absolute;width:1px;height:1px;padding:0;margin:-1px;overflow:hidden;clip:rect(0,0,0,0);white-space:nowrap;border:0}\n.muted{color:var(--text-secondary)}\n.mono{font-family:var(--font-mono);font-size:12px;line-height:1.33;overflow-wrap:anywhere}\n.empty{padding:24px 16px;margin:0;color:var(--text-secondary)}\n.app{min-height:100vh;display:flex;flex-direction:column;background:var(--bg);color:var(--text-primary)}\n.topbar{height:48px;flex:0 0 auto;display:flex;align-items:center;gap:16px;padding:0 16px;background:var(--shell);color:var(--shell-fg)}\n.brand{display:inline-flex;align-items:baseline;gap:8px;color:var(--shell-fg);font-size:14px;font-weight:600;white-space:nowrap}\n.brand:hover{color:var(--shell-fg);text-decoration:none}\n.brand-sub{font-family:var(--font-mono);font-size:12px;font-weight:400;color:var(--shell-muted)}\n.search{flex:1 1 240px;min-width:0;max-width:520px;height:32px;display:flex;align-items:center;gap:8px;padding:0 12px;background:var(--shell-field);color:var(--shell-fg);margin-left:8px}\n.search-icon{flex:0 0 auto;color:var(--shell-muted);font-size:16px;line-height:1}\n.search input{flex:1;min-width:0;height:32px;padding:0;border:0;background:transparent;color:var(--shell-fg);font:400 14px/1.29 var(--font-sans)}\n.search input::placeholder{color:var(--shell-muted)}\n.search input:focus{outline:2px solid var(--focus);outline-offset:-2px}\n.top-spacer{flex:1}\n.topbar-user{max-width:260px;overflow:hidden;text-overflow:ellipsis;white-space:nowrap;font-family:var(--font-mono);font-size:12px;color:var(--shell-muted)}\nbutton.mode-toggle{height:48px;padding:0 12px;display:inline-flex;align-items:center;gap:8px;color:var(--shell-fg);background:transparent;border:0;border-radius:0;white-space:nowrap}\nbutton.mode-toggle:hover{background:var(--shell-field);color:var(--shell-fg)}\n.shell{flex:1;display:flex;align-items:stretch;min-height:0}\n.sidenav{flex:0 0 240px;width:240px;padding:16px 0;background:var(--layer-01);border-right:1px solid var(--border-subtle)}\n.nav-item{display:flex;align-items:center;gap:8px;min-height:40px;padding:8px 16px;border-left:3px solid transparent;color:var(--text-primary);font-size:14px;line-height:1.29}\n.nav-item:hover{background:var(--layer-hover);color:var(--text-primary);text-decoration:none}\n.nav-item.is-active{background:var(--nav-selected);border-left-color:var(--link);font-weight:600}\n.nav-label{flex:1;min-width:0;overflow:hidden;text-overflow:ellipsis;white-space:nowrap}\n.nav-count{margin-left:auto;color:var(--text-secondary);font-weight:400;font-family:var(--font-mono);font-size:12px}\n.nav-heading{margin:24px 16px 8px;font-size:12px;line-height:1.33;color:var(--text-secondary);letter-spacing:.32px}\n.main{flex:999 1 640px;min-width:0;padding:32px}\n.page{width:100%;max-width:1376px;margin:0 auto;padding:24px 32px 48px}\n.page-head{display:flex;align-items:flex-end;justify-content:space-between;gap:16px;flex-wrap:wrap;margin-bottom:24px}\n.detail-head{align-items:flex-start}\n.detail-head h1,.signin-card h1{font-size:32px;font-weight:300;line-height:1.25}\n.title-block{min-width:0;flex:1 1 480px;overflow-wrap:anywhere}\n.page-sub{margin:4px 0 0;color:var(--text-secondary);max-width:80ch}\n.project-description{margin-top:12px;color:var(--text-primary);font-size:16px;line-height:1.5}\n.meta-line{display:flex;align-items:center;gap:16px;flex-wrap:wrap;margin:8px 0 0;color:var(--text-secondary);font-size:14px;overflow-wrap:anywhere}\n.meta-line a{color:var(--text-primary)}\n.meta-line a.mono:hover{color:var(--link);text-decoration:none}\n.meta-line .pill{vertical-align:middle}\n.breadcrumbs{margin:0 0 12px;font-size:14px;line-height:1.29;color:var(--text-secondary);overflow-wrap:anywhere}\n.breadcrumbs a{color:var(--link)}\n.crumb-sep{margin:0 4px;color:var(--text-secondary)}\n.button-row{display:flex;align-items:center;gap:1px;flex-wrap:wrap}\n.btn{display:inline-flex;align-items:center;justify-content:center;height:48px;padding:0 16px;border:1px solid transparent;border-radius:0;background:var(--btn-secondary);color:#fff;font:400 14px/1.29 var(--font-sans);white-space:nowrap;cursor:pointer}\n.btn:hover{background:var(--btn-secondary-hover);color:#fff;text-decoration:none}\n.btn-primary{background:var(--btn-primary);color:var(--btn-primary-ink)}\n.btn-primary:hover{background:var(--btn-primary-hover);color:var(--btn-primary-ink)}\n.btn-tertiary{background:transparent;border-color:var(--border-strong);color:var(--text-primary)}\n.btn-tertiary:hover{background:var(--layer-hover);color:var(--text-primary)}\n.btn-danger{background:transparent;border-color:var(--support-error);color:var(--support-error)}\n.btn-danger:hover{background:var(--error-bg);color:var(--support-error)}\n.btn-sm{height:40px;padding:0 12px}\n.btn-link{display:inline-flex;align-items:center;height:32px;padding:0 8px;border:0;background:transparent;color:var(--link);font:400 14px/1.29 var(--font-sans);cursor:pointer}\n.btn-link:hover{background:var(--layer-hover);color:var(--link-hover);text-decoration:none}\nbutton{height:40px;padding:0 16px;border:1px solid transparent;border-radius:0;background:var(--btn-secondary);color:#fff;font:400 14px/1.29 var(--font-sans);cursor:pointer}\nbutton:hover{background:var(--btn-secondary-hover)}\nbutton.primary{background:var(--btn-primary);color:var(--btn-primary-ink)}\nbutton.primary:hover{background:var(--btn-primary-hover)}\nbutton.small{height:40px;padding:0 12px;border-color:transparent;background:transparent;color:var(--link)}\nbutton.small:hover{background:var(--layer-hover);color:var(--link-hover)}\nbutton.small.danger{color:var(--support-error)}\nbutton.danger{background:transparent;border-color:transparent;color:var(--support-error)}\nbutton.danger:hover{background:var(--error-bg);color:var(--support-error)}\n.icon-btn{width:40px;height:40px;padding:0;display:inline-flex;align-items:center;justify-content:center;background:transparent;border:0;color:var(--text-secondary);font-size:20px;line-height:1}\n.icon-btn:hover{background:var(--layer-hover);color:var(--text-primary)}\n.tagbar{display:flex;align-items:center;gap:8px;flex-wrap:wrap;margin-bottom:16px;min-height:32px}\n.tagbar-label{margin-right:4px;color:var(--text-secondary);font-size:14px}\n.tagbar-spacer{flex:1}\n.tag-chip{display:inline-flex;align-items:center;gap:6px;height:32px;padding:0 12px;border-radius:16px;border:0;background:var(--tag-gray);color:var(--text-primary);font:400 12px/1.33 var(--font-sans);text-decoration:none;white-space:nowrap;cursor:pointer}\n.tag-chip:hover{background:var(--layer-active);color:var(--text-primary);text-decoration:none}\n.tag-chip.is-on{background:var(--btn-primary);color:var(--btn-primary-ink)}\n.tag-count{font-family:var(--font-mono);opacity:.72}\n.tag-chip-static{cursor:default;padding-right:6px}\n.tag-row{display:flex;align-items:center;gap:8px;flex-wrap:wrap;min-height:32px}\n.tag-remove{width:20px;height:20px;padding:0;display:inline-flex;align-items:center;justify-content:center;border:0;background:transparent;color:inherit;font-size:16px;line-height:1}\n.tag-remove:hover{background:var(--layer-active);color:var(--text-primary)}\n.sharing-filter{display:flex;align-items:center;gap:8px;flex-wrap:wrap}\n.inline-label{display:inline-flex;align-items:center;gap:8px;color:var(--text-secondary);font-size:14px;white-space:nowrap}\ninput,select,textarea{height:40px;padding:0 12px;border:0;border-bottom:1px solid var(--border-strong);border-radius:0;background:var(--layer-02);color:var(--text-primary);font:400 14px/1.29 var(--font-sans)}\nselect{padding-right:32px;cursor:pointer}\ntextarea{height:auto;min-height:80px;padding:8px 12px;resize:vertical}\ninput::placeholder,textarea::placeholder{color:var(--text-secondary)}\ninput:focus,select:focus,textarea:focus{outline:2px solid var(--focus);outline-offset:-2px}\ninput:disabled,select:disabled,textarea:disabled{color:var(--text-secondary);cursor:not-allowed}\n.field-row{display:flex;align-items:stretch;gap:1px;flex-wrap:wrap}\n.field-row input,.field-row select{flex:1 1 160px;min-width:0}\n.field-row .btn{height:40px}\n.field-label{display:block;margin-bottom:8px;color:var(--text-secondary);font-size:12px;line-height:1.33;letter-spacing:.32px}\n.field-hint{color:var(--text-secondary);font-size:12px;line-height:1.33}\n.form-stack{display:flex;flex-direction:column;gap:24px}\n.form-field{display:flex;flex-direction:column;gap:8px;max-width:640px}\n.form-field input,.form-field textarea{width:100%}\n.form-card{max-width:720px}\n.form-actions{display:flex;gap:1px;flex-wrap:wrap}\n.detail-block{display:flex;flex-direction:column;gap:8px;margin-bottom:24px}\n.detail-block:last-child{margin-bottom:0}\n.tag-form{margin-top:12px;max-width:420px}\n.table-box{width:100%;overflow-x:auto;background:var(--layer-01);border-radius:0}\n.data-table{width:100%;border-collapse:collapse;font-size:14px;line-height:1.29}\n.gallery-table{min-width:860px}\n.project-table{min-width:620px}\n.token-table{min-width:640px}\n.data-table th,.data-table td{height:48px;padding:0 16px;text-align:left;vertical-align:middle;white-space:nowrap;border-bottom:1px solid var(--border-subtle)}\n.data-table th{background:var(--border-subtle);color:var(--text-primary);font-weight:600}\n.data-table tbody tr:hover td{background:var(--layer-hover)}\n.data-table tr:last-child td{border-bottom:0}\n.cell-name{min-width:220px}\n.cell-name .row-title{display:block;color:var(--text-primary);font-weight:400;max-width:360px;overflow:hidden;text-overflow:ellipsis}\n.cell-name .row-title:hover{color:var(--link);text-decoration:none}\n.cell-name .slug-link{display:block;margin-top:2px;color:var(--text-secondary)}\n.cell-name .slug-link:hover{color:var(--link);text-decoration:none}\n.empty-row td{height:auto;padding:32px 16px;white-space:normal;color:var(--text-secondary);text-align:center}\n.pill{display:inline-flex;align-items:center;height:24px;padding:0 8px;border-radius:12px;background:var(--tag-gray);color:var(--text-primary);font-size:12px;font-weight:400;line-height:1;white-space:nowrap}\n.pill-private{background:var(--tag-gray);color:var(--text-primary)}\n.pill-people{background:var(--tag-blue);color:var(--tag-blue-ink)}\n.pill-public{background:var(--tag-teal);color:var(--tag-teal-ink)}\n.pill-live{background:var(--tag-live-bg);color:var(--tag-live-ink)}\na.pill:hover{text-decoration:none;color:var(--text-primary)}\n.panel{margin-bottom:24px;background:var(--layer-01);border-radius:0}\n.panel-head{display:flex;align-items:center;justify-content:space-between;gap:16px;flex-wrap:wrap;min-height:48px;padding:8px 16px;border-bottom:1px solid var(--border-subtle)}\n.panel-head h2{font-size:16px;font-weight:600}\n.panel-head .muted{font-size:14px}\n.panel-body{padding:16px}\n.detail-layout{display:flex;align-items:flex-start;gap:24px;flex-wrap:wrap}\n.detail-main{flex:999 1 640px;min-width:0}\n.detail-side{flex:1 1 380px;min-width:0;display:flex;flex-direction:column;gap:20px;padding:16px;background:var(--layer-01)}\n.detail-side h2{font-size:16px;font-weight:600}\n.side-text{margin:4px 0 0;color:var(--text-secondary);line-height:1.43}\n.side-hint{margin:4px 0 0;color:var(--text-secondary);font-size:12px;line-height:1.33}\n.side-section{display:flex;flex-direction:column;gap:12px}\n.preview-picker{display:inline-flex;align-items:center;gap:8px}\n.preview-body{padding:16px}\n.preview-frame{display:block;width:100%;aspect-ratio:16/9;border:1px solid var(--border-subtle);background:#ffffff}\n.preview-empty{display:flex;align-items:center;justify-content:center;min-height:200px;padding:24px;border:1px solid var(--border-subtle);background:var(--layer-02);color:var(--text-secondary);text-align:center}\n.version-list{list-style:none;margin:0;padding:0}\n.version-row{display:flex;align-items:center;gap:16px;flex-wrap:wrap;min-height:56px;padding:8px 16px;border-bottom:1px solid var(--border-subtle)}\n.version-row:last-child{border-bottom:0}\n.version-row.is-served{background:var(--layer-02);border-left:3px solid var(--support-success);padding-left:13px}\n.version-n{flex:0 0 36px}\n.version-main{flex:1 1 220px;min-width:0}\n.version-label{overflow:hidden;text-overflow:ellipsis;white-space:nowrap}\n.version-meta{color:var(--text-secondary);font-size:12px;line-height:1.33}\n.version-actions{padding:12px 16px;border-top:1px solid var(--border-subtle)}\n.segmented{display:grid;grid-template-columns:repeat(3,minmax(0,1fr));gap:1px;margin:0;background:var(--border-strong)}\n.segment{position:relative;display:flex;align-items:center;justify-content:center;height:40px;background:var(--layer-01);color:var(--text-primary);font-size:14px;cursor:pointer}\n.segment:hover{background:var(--layer-hover)}\n.segment.is-on{background:var(--segment-on-bg);color:var(--segment-on-fg)}\n.segment-input{position:absolute;width:1px;height:1px;padding:0;margin:0;overflow:hidden;clip:rect(0,0,0,0);border:0;opacity:0}\n.people-list{list-style:none;margin:0;padding:0}\n.person-row{display:flex;align-items:center;gap:8px;min-height:48px;padding:4px 0;border-bottom:1px solid var(--border-subtle)}\n.person-row:last-child{border-bottom:0}\n.person-email{flex:1;min-width:0;overflow-wrap:anywhere}\n.person-role{color:var(--text-secondary);font-size:12px;white-space:nowrap}\n.info-box{padding:12px 16px;background:var(--layer-02)}\n.info-title{font-weight:600}\n.info-text{margin-top:4px;color:var(--text-secondary);font-size:14px}\n.info-box a{display:inline-block;margin-top:8px}\n.danger-zone{padding-top:16px;border-top:1px solid var(--border-subtle)}\n.danger-zone h2{margin-bottom:8px;font-size:14px;font-weight:600;color:var(--support-error)}\n.theme-list{list-style:none;margin:0;padding:0}\n.theme-row{display:flex;align-items:center;justify-content:space-between;gap:16px;min-height:48px;padding:0 16px;border-bottom:1px solid var(--border-subtle)}\n.theme-row:last-child{border-bottom:0}\n.token-box{margin-top:16px;padding:16px;background:var(--code-bg);color:var(--code-ink)}\n.token-box code{display:block;margin-top:8px;font-family:var(--font-mono);font-size:12px;word-break:break-all}\n.token-box .muted{color:var(--code-ink);opacity:.78}\n.token-error{margin-top:12px;color:var(--support-error)}\n.signin{display:flex;align-items:flex-start;justify-content:center;padding-top:80px}\n.signin-card{width:100%;max-width:560px}\n.signin-card .btn{margin-top:8px}\n@media(max-width:900px){\n.shell{display:block}\n.sidenav{width:auto;display:flex;flex-wrap:nowrap;align-items:stretch;overflow-x:auto;overflow-y:hidden;padding:0;border-right:0;border-bottom:1px solid var(--border-subtle);scrollbar-width:thin}\n.nav-item{width:auto;flex:0 0 auto;min-height:48px;padding:0 16px;border-left:0;border-bottom:3px solid transparent}\n.nav-item.is-active{border-left-color:transparent;border-bottom-color:var(--link)}\n.nav-heading{display:none}\n.data-table{min-width:0}\n.data-table th,.data-table td{white-space:normal;overflow-wrap:anywhere}\n.data-table th{overflow-wrap:normal}\n.main{padding:24px 16px 48px}\n.page{padding:16px 16px 40px}\n.detail-side{flex-basis:100%}\n}\n@media(max-width:620px){\n.topbar{height:auto;min-height:48px;flex-wrap:wrap;gap:8px;padding:8px 16px}\n.search{order:3;flex:1 1 100%;max-width:none;height:40px;margin-left:0}\n.search input{height:40px}\n.brand-sub{display:none}\n.topbar-user{max-width:100%}\nbutton.mode-toggle{height:40px}\nh1,.detail-head h1,.signin-card h1{font-size:24px}\n.page-head,.detail-head{align-items:flex-start}\n.button-row{width:100%}\n.button-row .btn{flex:1 1 auto}\n.field-row input,.field-row select{flex:1 1 140px}\n.panel-head{align-items:flex-start}\n.version-row{gap:8px}\n.preview-frame{aspect-ratio:4/3}\n.data-table,.data-table tbody,.data-table tr,.data-table td{display:block;width:100%;min-width:0}\n.data-table thead{position:absolute;width:1px;height:1px;padding:0;margin:-1px;overflow:hidden;clip:rect(0,0,0,0);white-space:nowrap;border:0}\n.data-table tr{padding:12px 16px;border-bottom:1px solid var(--border-subtle);background:var(--layer-01)}\n.data-table tr:hover{background:var(--layer-hover)}\n.data-table tbody tr:hover td{background:transparent}\n.data-table tr:last-child{border-bottom:0}\n.data-table td,.data-table th{height:auto;padding:0;border:0;text-align:left;white-space:normal;overflow-wrap:anywhere;background:transparent}\n.data-table tr>td:first-child{padding-bottom:8px}\n.data-table td[data-label]{display:flex;align-items:baseline;gap:8px;flex-wrap:wrap;min-height:32px;padding:2px 0}\n.data-table td[data-label]::before{content:attr(data-label) ": ";flex:0 0 auto;min-width:96px;color:var(--text-secondary);font-family:var(--font-sans);font-weight:400;font-size:12px;line-height:1.33}\n.data-table .btn-link{height:40px;padding:0}\n.data-table .icon-btn{height:40px}\n.data-table .empty-row td{padding:24px 0;text-align:center;color:var(--text-secondary)}\n.cell-name .row-title{max-width:none;overflow:visible;white-space:normal}\n}\n';
-var APP_JS = '"use strict";\n(function () {\n  function api(method, path, body) {\n    var init = { method: method, credentials: "same-origin", headers: {} };\n    if (method !== "GET") init.headers["Content-Type"] = "application/json";\n    if (body !== undefined) init.body = JSON.stringify(body);\n    return fetch(path, init).then(function (res) {\n      if (res.status === 204) return null;\n      return res.text().then(function (text) {\n        var data = null;\n        if (text) { try { data = JSON.parse(text); } catch (err) { data = null; } }\n        if (!res.ok) {\n          var msg = data && data.error ? data.error : "Request failed with status " + res.status;\n          throw new Error(msg);\n        }\n        return data;\n      });\n    });\n  }\n\n  function fail(err) {\n    window.alert(err && err.message ? err.message : String(err));\n  }\n\n  function reload() {\n    window.location.reload();\n  }\n\n  function copyText(value) {\n    if (navigator.clipboard && navigator.clipboard.writeText) {\n      navigator.clipboard.writeText(value).catch(fail);\n      return;\n    }\n    var input = document.createElement("textarea");\n    input.value = value;\n    document.body.appendChild(input);\n    input.select();\n    try { document.execCommand("copy"); } catch (err) { fail(err); }\n    document.body.removeChild(input);\n  }\n\n  function propsOf(el) {\n    var raw = el.getAttribute("data-props");\n    if (!raw) return {};\n    try { return JSON.parse(raw) || {}; } catch (err) { return {}; }\n  }\n\n  function closest(event, selector) {\n    var target = event.target;\n    if (!target || !target.closest) return null;\n    return target.closest(selector);\n  }\n\n  function flash(el, text) {\n    var label = el.textContent;\n    el.textContent = text;\n    window.setTimeout(function () { el.textContent = label; }, 1200);\n  }\n\n  function field(form, name) {\n    var el = form.querySelector("[name=" + name + "]");\n    return el && typeof el.value === "string" ? el.value : "";\n  }\n\n  var islands = {\n    copy: function (root, props) {\n      root.addEventListener("click", function (event) {\n        event.preventDefault();\n        copyText(String(props.text || ""));\n        flash(root, "Copied");\n      });\n    },\n    delete: function (root, props) {\n      root.addEventListener("click", function (event) {\n        event.preventDefault();\n        if (!window.confirm("Delete this artifact, all versions and all shares?")) return;\n        api("DELETE", "/api/artifacts/" + encodeURIComponent(props.slug)).then(function () {\n          window.location.assign("/");\n        }, fail);\n      });\n    },\n    versions: function (root, props) {\n      root.addEventListener("click", function (event) {\n        var el = closest(event, "[data-action]");\n        if (!el || !root.contains(el)) return;\n        var action = el.getAttribute("data-action");\n        if (action !== "pin" && action !== "set-live" && action !== "newest") return;\n        event.preventDefault();\n        if (action === "newest") {\n          api("PATCH", "/api/artifacts/" + encodeURIComponent(props.slug), { pinned: null }).then(reload, fail);\n        } else {\n          api("PATCH", "/api/artifacts/" + encodeURIComponent(props.slug), {\n            pinned: Number(el.getAttribute("data-n"))\n          }).then(reload, fail);\n        }\n      });\n    },\n    share: function (root, props) {\n      root.addEventListener("click", function (event) {\n        var removed = closest(event, "[data-action=remove-share]");\n        if (removed && root.contains(removed)) {\n          event.preventDefault();\n          api(\n            "DELETE",\n            "/api/artifacts/" + encodeURIComponent(props.slug) + "/shares/" + encodeURIComponent(removed.getAttribute("data-email"))\n          ).then(reload, fail);\n          return;\n        }\n        var tag = closest(event, "[data-action=remove-tag]");\n        if (tag && root.contains(tag)) {\n          event.preventDefault();\n          var tags = Array.isArray(props.tags) ? props.tags.filter(function (value) {\n            return value !== tag.getAttribute("data-tag");\n          }) : [];\n          api("PATCH", "/api/artifacts/" + encodeURIComponent(props.slug), { tags: tags }).then(reload, fail);\n        }\n      });\n      root.addEventListener("submit", function (event) {\n        var form = event.target;\n        var kind = form.getAttribute("data-form");\n        if (!kind) return;\n        event.preventDefault();\n        if (kind === "mode") {\n          var checked = form.querySelector("[name=mode]:checked") || form.querySelector("[name=mode]");\n          api("PATCH", "/api/artifacts/" + encodeURIComponent(props.slug), {\n            mode: checked ? checked.value : "private"\n          }).then(reload, fail);\n        } else if (kind === "title") {\n          api("PATCH", "/api/artifacts/" + encodeURIComponent(props.slug), {\n            title: field(form, "title").trim()\n          }).then(reload, fail);\n        } else if (kind === "share") {\n          var email = field(form, "email").trim();\n          if (email === "") return;\n          api(\n            "PUT",\n            "/api/artifacts/" + encodeURIComponent(props.slug) + "/shares/" + encodeURIComponent(email),\n            { role: field(form, "role") }\n          ).then(reload, fail);\n        } else if (kind === "tags") {\n          var tagInput = field(form, "tag").trim().toLowerCase();\n          if (tagInput === "") return;\n          var next = Array.isArray(props.tags) ? props.tags.slice() : [];\n          if (next.indexOf(tagInput) === -1) next.push(tagInput);\n          api("PATCH", "/api/artifacts/" + encodeURIComponent(props.slug), { tags: next }).then(reload, fail);\n        } else if (kind === "project") {\n          var project = field(form, "project");\n          api("PATCH", "/api/artifacts/" + encodeURIComponent(props.slug), {\n            project: project === "" ? null : project\n          }).then(reload, fail);\n        }\n      });\n    },\n    project: function (root, props) {\n      root.addEventListener("click", function (event) {\n        var el = closest(event, "[data-action=remove-member]");\n        if (!el || !root.contains(el)) return;\n        event.preventDefault();\n        api(\n          "DELETE",\n          "/api/projects/" + encodeURIComponent(props.slug) + "/members/" + encodeURIComponent(el.getAttribute("data-email"))\n        ).then(reload, fail);\n      });\n      root.addEventListener("submit", function (event) {\n        var form = event.target;\n        var kind = form.getAttribute("data-form");\n        if (!kind) return;\n        event.preventDefault();\n        if (kind === "project-new") {\n          var slug = field(form, "slug").trim().toLowerCase();\n          if (slug === "") return;\n          var body = { slug: slug };\n          var title = field(form, "title").trim();\n          var description = field(form, "description").trim();\n          if (title !== "") body.title = title;\n          if (description !== "") body.description = description;\n          api("POST", "/api/projects", body).then(function (data) {\n            window.location.assign("/p/" + encodeURIComponent(data.slug));\n          }, fail);\n        } else if (kind === "description") {\n          api("PATCH", "/api/projects/" + encodeURIComponent(props.slug), {\n            description: field(form, "description").trim()\n          }).then(reload, fail);\n        } else if (kind === "add-artifact") {\n          var artifact = field(form, "artifact");\n          if (artifact === "") return;\n          api("PATCH", "/api/artifacts/" + encodeURIComponent(artifact), { project: props.slug }).then(reload, fail);\n        } else if (kind === "member") {\n          var email = field(form, "email").trim();\n          if (email === "") return;\n          api(\n            "PUT",\n            "/api/projects/" + encodeURIComponent(props.slug) + "/members/" + encodeURIComponent(email),\n            { role: field(form, "role") }\n          ).then(reload, fail);\n        }\n      });\n    },\n    tokens: function (root) {\n      root.addEventListener("click", function (event) {\n        var copy = closest(event, "[data-action=copy]");\n        if (copy && root.contains(copy)) {\n          event.preventDefault();\n          copyText(copy.getAttribute("data-copy") || "");\n          flash(copy, "Copied");\n          return;\n        }\n        var revoke = closest(event, "[data-action=revoke], [data-action=revoke-token]");\n        if (!revoke || !root.contains(revoke)) return;\n        event.preventDefault();\n        if (!window.confirm("Revoke this token? The CLI using it will stop working.")) return;\n        api("DELETE", "/api/tokens/" + encodeURIComponent(revoke.getAttribute("data-id"))).then(function () {\n          var row = revoke.closest("tr");\n          if (row) row.remove();\n        }, fail);\n      });\n      root.addEventListener("submit", function (event) {\n        var form = event.target;\n        if (form.getAttribute("data-form") !== "token") return;\n        event.preventDefault();\n        var name = field(form, "name").trim();\n        var scope = field(form, "scope");\n        api("POST", "/api/tokens", { name: name, scope: scope }).then(function (data) {\n          var box = document.getElementById("token-box");\n          var code = document.getElementById("token-value");\n          var error = document.getElementById("token-error");\n          if (box && code) {\n            code.textContent = data.token;\n            box.hidden = false;\n          }\n          if (error) error.hidden = true;\n          var body = document.getElementById("token-rows");\n          if (body) {\n            var tr = document.createElement("tr");\n            var cells = [data.name, data.scope.charAt(0).toUpperCase() + data.scope.slice(1), String(data.created_at).slice(0, 10), "Never"];\n            var labels = [null, "Scope", "Created", "Last used"];\n            for (var i = 0; i < cells.length; i += 1) {\n              var td = document.createElement("td");\n              td.textContent = cells[i];\n              if (labels[i]) td.setAttribute("data-label", labels[i]);\n              tr.appendChild(td);\n            }\n            var last = document.createElement("td");\n            last.setAttribute("data-label", "Actions");\n            var button = document.createElement("button");\n            button.type = "button";\n            button.className = "btn-link";\n            button.setAttribute("data-action", "revoke");\n            button.setAttribute("data-id", data.id);\n            button.textContent = "Revoke";\n            last.appendChild(button);\n            tr.appendChild(last);\n            body.appendChild(tr);\n          }\n          form.reset();\n        }, function (err) {\n          var box = document.getElementById("token-error");\n          if (box) {\n            box.textContent = err && err.message ? err.message : String(err);\n            box.hidden = false;\n            return;\n          }\n          fail(err);\n        });\n      });\n    }\n  };\n\n  var MODE_KEY = "rshow-mode";\n  var MODES = ["system", "light", "dark"];\n  var MODE_LABELS = { system: "System", light: "Light", dark: "Dark" };\n\n  function normalizeMode(value) {\n    return value === "light" || value === "dark" ? value : "system";\n  }\n\n  function readMode() {\n    try { return normalizeMode(window.localStorage.getItem(MODE_KEY)); } catch (err) { return "system"; }\n  }\n\n  function applyMode(mode) {\n    var root = document.documentElement;\n    if (mode === "light" || mode === "dark") root.dataset.mode = mode;\n    else delete root.dataset.mode;\n  }\n\n  function saveMode(mode) {\n    try { window.localStorage.setItem(MODE_KEY, mode); } catch (err) { /* storage may be blocked */ }\n    applyMode(mode);\n  }\n\n  function paintMode(toggle) {\n    var mode = readMode();\n    toggle.textContent = MODE_LABELS[mode];\n    toggle.setAttribute("aria-label", "Color mode: " + MODE_LABELS[mode] + ". Activate to cycle System, Light, Dark.");\n  }\n\n  var modeToggle = document.getElementById("mode-toggle");\n  if (modeToggle) {\n    paintMode(modeToggle);\n    modeToggle.addEventListener("click", function () {\n      var next = MODES[(MODES.indexOf(readMode()) + 1) % MODES.length];\n      saveMode(next);\n      paintMode(modeToggle);\n    });\n  }\n\n  document.addEventListener("change", function (event) {\n    var el = event.target;\n    if (!el || !el.matches || !el.matches("[data-submit-on-change]")) return;\n    if (el.form) el.form.requestSubmit();\n  });\n\n  var navBar = document.querySelector(".sidenav");\n  var activeNav = navBar ? navBar.querySelector(".nav-item.is-active") : null;\n  if (navBar && activeNav && navBar.scrollWidth > navBar.clientWidth) {\n    var delta = activeNav.getBoundingClientRect().left - navBar.getBoundingClientRect().left;\n    if (delta < 0 || delta + activeNav.offsetWidth > navBar.clientWidth) {\n      navBar.scrollLeft = Math.max(0, navBar.scrollLeft + delta - 16);\n    }\n  }\n\n  var nodes = document.querySelectorAll("[data-island]");\n  for (var i = 0; i < nodes.length; i += 1) {\n    var kind = nodes[i].getAttribute("data-island");\n    var mount = islands[kind];\n    if (mount) mount(nodes[i], propsOf(nodes[i]));\n  }\n})();\n';
+var APP_JS = '"use strict";\n(function () {\n  function api(method, path, body) {\n    var init = { method: method, credentials: "same-origin", headers: {} };\n    if (method !== "GET") init.headers["Content-Type"] = "application/json";\n    if (body !== undefined) init.body = JSON.stringify(body);\n    return fetch(path, init).then(function (res) {\n      if (res.status === 204) return null;\n      return res.text().then(function (text) {\n        var data = null;\n        if (text) { try { data = JSON.parse(text); } catch (err) { data = null; } }\n        if (!res.ok) {\n          var msg = data && data.error ? data.error : "Request failed with status " + res.status;\n          throw new Error(msg);\n        }\n        return data;\n      });\n    });\n  }\n\n  function fail(err) {\n    window.alert(err && err.message ? err.message : String(err));\n  }\n\n  function reload() {\n    window.location.reload();\n  }\n\n  function copyText(value) {\n    if (navigator.clipboard && navigator.clipboard.writeText) {\n      navigator.clipboard.writeText(value).catch(fail);\n      return;\n    }\n    var input = document.createElement("textarea");\n    input.value = value;\n    document.body.appendChild(input);\n    input.select();\n    try { document.execCommand("copy"); } catch (err) { fail(err); }\n    document.body.removeChild(input);\n  }\n\n  function propsOf(el) {\n    var raw = el.getAttribute("data-props");\n    if (!raw) return {};\n    try { return JSON.parse(raw) || {}; } catch (err) { return {}; }\n  }\n\n  function closest(event, selector) {\n    var target = event.target;\n    if (!target || !target.closest) return null;\n    return target.closest(selector);\n  }\n\n  function flash(el, text) {\n    var label = el.textContent;\n    el.textContent = text;\n    window.setTimeout(function () { el.textContent = label; }, 1200);\n  }\n\n  function field(form, name) {\n    var el = form.querySelector("[name=" + name + "]");\n    return el && typeof el.value === "string" ? el.value : "";\n  }\n\n  var islands = {\n    copy: function (root, props) {\n      root.addEventListener("click", function (event) {\n        event.preventDefault();\n        copyText(String(props.text || ""));\n        flash(root, "Copied");\n      });\n    },\n    delete: function (root, props) {\n      root.addEventListener("click", function (event) {\n        event.preventDefault();\n        if (!window.confirm("Delete this artifact, all versions and all shares?")) return;\n        api("DELETE", "/api/artifacts/" + encodeURIComponent(props.slug)).then(function () {\n          window.location.assign("/");\n        }, fail);\n      });\n    },\n    versions: function (root, props) {\n      root.addEventListener("click", function (event) {\n        var el = closest(event, "[data-action]");\n        if (!el || !root.contains(el)) return;\n        var action = el.getAttribute("data-action");\n        if (action !== "pin" && action !== "set-live" && action !== "newest" && action !== "delete-version") return;\n        event.preventDefault();\n        if (action === "newest") {\n          api("PATCH", "/api/artifacts/" + encodeURIComponent(props.slug), { pinned: null }).then(reload, fail);\n        } else if (action === "delete-version") {\n          var version = Number(el.getAttribute("data-n"));\n          if (!window.confirm("Delete v" + version + "? This cannot be undone.")) return;\n          api("DELETE", "/api/artifacts/" + encodeURIComponent(props.slug) + "/versions/" + version).then(reload, fail);\n        } else {\n          api("PATCH", "/api/artifacts/" + encodeURIComponent(props.slug), {\n            pinned: Number(el.getAttribute("data-n"))\n          }).then(reload, fail);\n        }\n      });\n    },\n    share: function (root, props) {\n      root.addEventListener("click", function (event) {\n        var removed = closest(event, "[data-action=remove-share]");\n        if (removed && root.contains(removed)) {\n          event.preventDefault();\n          api(\n            "DELETE",\n            "/api/artifacts/" + encodeURIComponent(props.slug) + "/shares/" + encodeURIComponent(removed.getAttribute("data-email"))\n          ).then(reload, fail);\n          return;\n        }\n        var tag = closest(event, "[data-action=remove-tag]");\n        if (tag && root.contains(tag)) {\n          event.preventDefault();\n          var tags = Array.isArray(props.tags) ? props.tags.filter(function (value) {\n            return value !== tag.getAttribute("data-tag");\n          }) : [];\n          api("PATCH", "/api/artifacts/" + encodeURIComponent(props.slug), { tags: tags }).then(reload, fail);\n        }\n      });\n      root.addEventListener("submit", function (event) {\n        var form = event.target;\n        var kind = form.getAttribute("data-form");\n        if (!kind) return;\n        event.preventDefault();\n        if (kind === "mode") {\n          var checked = form.querySelector("[name=mode]:checked") || form.querySelector("[name=mode]");\n          api("PATCH", "/api/artifacts/" + encodeURIComponent(props.slug), {\n            mode: checked ? checked.value : "private"\n          }).then(reload, fail);\n        } else if (kind === "title") {\n          api("PATCH", "/api/artifacts/" + encodeURIComponent(props.slug), {\n            title: field(form, "title").trim()\n          }).then(reload, fail);\n        } else if (kind === "share") {\n          var email = field(form, "email").trim();\n          if (email === "") return;\n          api(\n            "PUT",\n            "/api/artifacts/" + encodeURIComponent(props.slug) + "/shares/" + encodeURIComponent(email),\n            { role: field(form, "role") }\n          ).then(reload, fail);\n        } else if (kind === "tags") {\n          var tagInput = field(form, "tag").trim().toLowerCase();\n          if (tagInput === "") return;\n          var next = Array.isArray(props.tags) ? props.tags.slice() : [];\n          if (next.indexOf(tagInput) === -1) next.push(tagInput);\n          api("PATCH", "/api/artifacts/" + encodeURIComponent(props.slug), { tags: next }).then(reload, fail);\n        } else if (kind === "project") {\n          var project = field(form, "project");\n          api("PATCH", "/api/artifacts/" + encodeURIComponent(props.slug), {\n            project: project === "" ? null : project\n          }).then(reload, fail);\n        }\n      });\n    },\n    project: function (root, props) {\n      root.addEventListener("click", function (event) {\n        var el = closest(event, "[data-action=remove-member]");\n        if (!el || !root.contains(el)) return;\n        event.preventDefault();\n        api(\n          "DELETE",\n          "/api/projects/" + encodeURIComponent(props.slug) + "/members/" + encodeURIComponent(el.getAttribute("data-email"))\n        ).then(reload, fail);\n      });\n      root.addEventListener("submit", function (event) {\n        var form = event.target;\n        var kind = form.getAttribute("data-form");\n        if (!kind) return;\n        event.preventDefault();\n        if (kind === "project-new") {\n          var slug = field(form, "slug").trim().toLowerCase();\n          if (slug === "") return;\n          var body = { slug: slug };\n          var title = field(form, "title").trim();\n          var description = field(form, "description").trim();\n          if (title !== "") body.title = title;\n          if (description !== "") body.description = description;\n          api("POST", "/api/projects", body).then(function (data) {\n            window.location.assign("/p/" + encodeURIComponent(data.slug));\n          }, fail);\n        } else if (kind === "description") {\n          api("PATCH", "/api/projects/" + encodeURIComponent(props.slug), {\n            description: field(form, "description").trim()\n          }).then(reload, fail);\n        } else if (kind === "add-artifact") {\n          var artifact = field(form, "artifact");\n          if (artifact === "") return;\n          api("PATCH", "/api/artifacts/" + encodeURIComponent(artifact), { project: props.slug }).then(reload, fail);\n        } else if (kind === "member") {\n          var email = field(form, "email").trim();\n          if (email === "") return;\n          api(\n            "PUT",\n            "/api/projects/" + encodeURIComponent(props.slug) + "/members/" + encodeURIComponent(email),\n            { role: field(form, "role") }\n          ).then(reload, fail);\n        }\n      });\n    },\n    tokens: function (root) {\n      root.addEventListener("click", function (event) {\n        var copy = closest(event, "[data-action=copy]");\n        if (copy && root.contains(copy)) {\n          event.preventDefault();\n          copyText(copy.getAttribute("data-copy") || "");\n          flash(copy, "Copied");\n          return;\n        }\n        var revoke = closest(event, "[data-action=revoke], [data-action=revoke-token]");\n        if (!revoke || !root.contains(revoke)) return;\n        event.preventDefault();\n        if (!window.confirm("Revoke this token? The CLI using it will stop working.")) return;\n        api("DELETE", "/api/tokens/" + encodeURIComponent(revoke.getAttribute("data-id"))).then(function () {\n          var row = revoke.closest("tr");\n          if (row) row.remove();\n        }, fail);\n      });\n      root.addEventListener("submit", function (event) {\n        var form = event.target;\n        if (form.getAttribute("data-form") !== "token") return;\n        event.preventDefault();\n        var name = field(form, "name").trim();\n        var scope = field(form, "scope");\n        api("POST", "/api/tokens", { name: name, scope: scope }).then(function (data) {\n          var box = document.getElementById("token-box");\n          var code = document.getElementById("token-value");\n          var error = document.getElementById("token-error");\n          if (box && code) {\n            code.textContent = data.token;\n            box.hidden = false;\n          }\n          if (error) error.hidden = true;\n          var body = document.getElementById("token-rows");\n          if (body) {\n            var tr = document.createElement("tr");\n            var cells = [data.name, data.scope.charAt(0).toUpperCase() + data.scope.slice(1), String(data.created_at).slice(0, 10), "Never"];\n            var labels = [null, "Scope", "Created", "Last used"];\n            for (var i = 0; i < cells.length; i += 1) {\n              var td = document.createElement("td");\n              td.textContent = cells[i];\n              if (labels[i]) td.setAttribute("data-label", labels[i]);\n              tr.appendChild(td);\n            }\n            var last = document.createElement("td");\n            last.setAttribute("data-label", "Actions");\n            var button = document.createElement("button");\n            button.type = "button";\n            button.className = "btn-link";\n            button.setAttribute("data-action", "revoke");\n            button.setAttribute("data-id", data.id);\n            button.textContent = "Revoke";\n            last.appendChild(button);\n            tr.appendChild(last);\n            body.appendChild(tr);\n          }\n          form.reset();\n        }, function (err) {\n          var box = document.getElementById("token-error");\n          if (box) {\n            box.textContent = err && err.message ? err.message : String(err);\n            box.hidden = false;\n            return;\n          }\n          fail(err);\n        });\n      });\n    }\n  };\n\n  var MODE_KEY = "rshow-mode";\n  var MODES = ["system", "light", "dark"];\n  var MODE_LABELS = { system: "System", light: "Light", dark: "Dark" };\n\n  function normalizeMode(value) {\n    return value === "light" || value === "dark" ? value : "system";\n  }\n\n  function readMode() {\n    try { return normalizeMode(window.localStorage.getItem(MODE_KEY)); } catch (err) { return "system"; }\n  }\n\n  function applyMode(mode) {\n    var root = document.documentElement;\n    if (mode === "light" || mode === "dark") root.dataset.mode = mode;\n    else delete root.dataset.mode;\n  }\n\n  function saveMode(mode) {\n    try { window.localStorage.setItem(MODE_KEY, mode); } catch (err) { /* storage may be blocked */ }\n    applyMode(mode);\n  }\n\n  function paintMode(toggle) {\n    var mode = readMode();\n    toggle.textContent = MODE_LABELS[mode];\n    toggle.setAttribute("aria-label", "Color mode: " + MODE_LABELS[mode] + ". Activate to cycle System, Light, Dark.");\n  }\n\n  var modeToggle = document.getElementById("mode-toggle");\n  if (modeToggle) {\n    paintMode(modeToggle);\n    modeToggle.addEventListener("click", function () {\n      var next = MODES[(MODES.indexOf(readMode()) + 1) % MODES.length];\n      saveMode(next);\n      paintMode(modeToggle);\n    });\n  }\n\n  document.addEventListener("change", function (event) {\n    var el = event.target;\n    if (!el || !el.matches || !el.matches("[data-submit-on-change]")) return;\n    if (el.form) el.form.requestSubmit();\n  });\n\n  var navBar = document.querySelector(".sidenav");\n  var activeNav = navBar ? navBar.querySelector(".nav-item.is-active") : null;\n  if (navBar && activeNav && navBar.scrollWidth > navBar.clientWidth) {\n    var delta = activeNav.getBoundingClientRect().left - navBar.getBoundingClientRect().left;\n    if (delta < 0 || delta + activeNav.offsetWidth > navBar.clientWidth) {\n      navBar.scrollLeft = Math.max(0, navBar.scrollLeft + delta - 16);\n    }\n  }\n\n  var nodes = document.querySelectorAll("[data-island]");\n  for (var i = 0; i < nodes.length; i += 1) {\n    var kind = nodes[i].getAttribute("data-island");\n    var mount = islands[kind];\n    if (mount) mount(nodes[i], propsOf(nodes[i]));\n  }\n})();\n';
 var MODE_JS = '"use strict";\n(function () {\n  var KEY = "rshow-mode";\n  var root = document.documentElement;\n  var mode = null;\n  try { mode = window.localStorage.getItem(KEY); } catch (err) { mode = null; }\n  if (mode === "light" || mode === "dark") root.dataset.mode = mode;\n  else delete root.dataset.mode;\n})();\n';
 
 // src/static.ts
@@ -5403,6 +5464,7 @@ function VersionRowView(props) {
   const version = props.version;
   const served = props.artifact.served === version.n;
   const pinned = props.artifact.pinned === version.n;
+  const deletable = props.owner && !props.artifact.slug.startsWith(THEME_PREFIX) && !pinned && props.count > 1;
   return /* @__PURE__ */ jsxDEV("li", { class: served ? "version-row is-served" : "version-row", children: [
     /* @__PURE__ */ jsxDEV("span", { class: "version-n mono", children: [
       "v",
@@ -5423,7 +5485,8 @@ function VersionRowView(props) {
     ] }),
     served ? /* @__PURE__ */ jsxDEV("span", { class: "pill pill-live", children: pinned ? "Pinned, live" : "Live" }) : null,
     /* @__PURE__ */ jsxDEV("a", { class: "btn-link", href: `/a/${props.artifact.slug}?preview=${version.n}`, children: "Preview" }),
-    props.owner && !served ? /* @__PURE__ */ jsxDEV("button", { type: "button", class: "btn-link", "data-action": "pin", "data-n": version.n, children: "Pin here" }) : null
+    props.owner && !served ? /* @__PURE__ */ jsxDEV("button", { type: "button", class: "btn-link", "data-action": "pin", "data-n": version.n, children: "Pin here" }) : null,
+    deletable ? /* @__PURE__ */ jsxDEV("button", { type: "button", class: "btn-link", "data-action": "delete-version", "data-n": version.n, children: "Delete" }) : null
   ] });
 }
 __name(VersionRowView, "VersionRowView");
@@ -5557,7 +5620,7 @@ function artifactPage(env, email, artifact, versions, shares, project, editableP
                 /* @__PURE__ */ jsxDEV("h2", { children: "Versions" }),
                 /* @__PURE__ */ jsxDEV("span", { class: "muted", children: artifact.pinned === null ? "The link follows the newest version." : `Pinned to v${artifact.pinned}. New publishes wait behind it.` })
               ] }),
-              versions.length === 0 ? /* @__PURE__ */ jsxDEV("p", { class: "empty", children: "No versions yet." }) : /* @__PURE__ */ jsxDEV("ul", { class: "version-list", children: versions.map((version) => /* @__PURE__ */ jsxDEV(VersionRowView, { artifact, version, owner })) }),
+              versions.length === 0 ? /* @__PURE__ */ jsxDEV("p", { class: "empty", children: "No versions yet." }) : /* @__PURE__ */ jsxDEV("ul", { class: "version-list", children: versions.map((version) => /* @__PURE__ */ jsxDEV(VersionRowView, { artifact, version, owner, count: versions.length })) }),
               artifact.pinned !== null ? /* @__PURE__ */ jsxDEV("div", { class: "version-actions", children: /* @__PURE__ */ jsxDEV("button", { type: "button", class: "btn btn-tertiary", "data-action": "newest", children: "Follow the newest version again" }) }) : null
             ]
           }
@@ -5627,7 +5690,7 @@ function artifactPage(env, email, artifact, versions, shares, project, editableP
         ] }) : null,
         owner ? /* @__PURE__ */ jsxDEV("div", { class: "danger-zone", children: [
           /* @__PURE__ */ jsxDEV("h2", { children: "Danger zone" }),
-          /* @__PURE__ */ jsxDEV(
+          artifact.slug.startsWith(THEME_PREFIX) ? /* @__PURE__ */ jsxDEV("p", { class: "side-text", children: "Pages link to this theme. Delete it with rshow delete --force." }) : /* @__PURE__ */ jsxDEV(
             "button",
             {
               type: "button",
@@ -6503,7 +6566,6 @@ __name(loginRedirect, "loginRedirect");
 
 // src/project.ts
 var THEME_SLUG = `${THEME_PREFIX}default`;
-var THEME_VERSION = 3;
 var MODE_WORDS = {
   private: "Private",
   people: "People",
@@ -6513,15 +6575,15 @@ var LIST_STYLE = ".rshow-project{max-width:44rem}.rshow-project h1{margin-bottom
 async function defaultThemeReady(env) {
   const artifact = await env.DB.prepare("SELECT mode FROM artifacts WHERE slug = ?1").bind(THEME_SLUG).first();
   if (!artifact || artifact.mode !== MODE.public) return false;
-  const version = await env.DB.prepare("SELECT n FROM versions WHERE slug = ?1 AND n = ?2").bind(THEME_SLUG, THEME_VERSION).first();
+  const version = await env.DB.prepare("SELECT n FROM versions WHERE slug = ?1 LIMIT 1").bind(THEME_SLUG).first();
   return version !== null;
 }
 __name(defaultThemeReady, "defaultThemeReady");
 function groupPage(title2, description, artifacts, theme) {
-  const links = theme ? `<link rel="stylesheet" href="/_themes/default@3/fonts.css">
-<link rel="stylesheet" href="/_themes/default@3/tokens.css">
-<link rel="stylesheet" href="/_themes/default@3/page.css">
-<script src="/_themes/default@3/mode.js"><\/script>` : `<style>${MINIMAL_STYLE}</style>`;
+  const links = theme ? `<link rel="stylesheet" href="/_themes/default@latest/fonts.css">
+<link rel="stylesheet" href="/_themes/default@latest/tokens.css">
+<link rel="stylesheet" href="/_themes/default@latest/page.css">
+<script src="/_themes/default@latest/mode.js"><\/script>` : `<style>${MINIMAL_STYLE}</style>`;
   const descriptionHtml = description === "" ? "" : `
 <p class="rshow-desc">${escapeHtml(description)}</p>`;
   const listHtml = artifacts.length === 0 ? `
@@ -6593,7 +6655,8 @@ var CACHE_CONTROL2 = {
   publicLive: "public, max-age=0, s-maxage=15, must-revalidate",
   publicVersion: "public, max-age=31536000, immutable, s-maxage=300",
   theme: "public, max-age=31536000, immutable",
-  themeJson: "public, max-age=60"
+  themeJson: "public, max-age=60",
+  themeLatest: "public, max-age=60"
 };
 function viewerCsp(env) {
   return [
@@ -6719,7 +6782,7 @@ async function handleViewer(c) {
     if (identity.email === null) return loginRedirect(pathname, url.search);
     return forbiddenPage(identity.email);
   }
-  const version = versionN === null ? access.version : access.version && access.version.n === versionN ? access.version : await versionFor(env, slug, versionN);
+  const version = versionN === null ? access.version : access.version && access.version.n === versionN ? access.version : await versionFor(env, artifact, versionN);
   if (!version) return notFoundPage("This artifact has no such version yet.");
   const relative = relativePath(parts);
   if (relative === null) return notFoundPage();
@@ -6743,11 +6806,11 @@ async function handleTheme(c, rest, url) {
   if (info) {
     if (rest.length !== 1) return withoutBodyOnHead(c, jsonError("not found", 404));
     const name2 = info[1];
-    const latest = await accessFor(env, `${THEME_PREFIX}${name2}`);
-    if (!latest || latest.artifact.mode !== MODE.public || !latest.version) {
+    const latest2 = await accessFor(env, `${THEME_PREFIX}${name2}`);
+    if (!latest2 || latest2.artifact.mode !== MODE.public || !latest2.version) {
       return withoutBodyOnHead(c, jsonError("not found", 404));
     }
-    const version2 = latest.version.n;
+    const version2 = latest2.version.n;
     const reply = { name: name2, version: version2, url: `/${THEMES_SEGMENT}/${name2}@${version2}/` };
     return withoutBodyOnHead(
       c,
@@ -6757,6 +6820,15 @@ async function handleTheme(c, rest, url) {
       })
     );
   }
+  const latest = THEME_LATEST_PATTERN.exec(segment);
+  if (latest) {
+    const name2 = latest[1];
+    const access2 = await accessFor(env, `${THEME_PREFIX}${name2}`);
+    if (!access2 || access2.artifact.mode !== MODE.public || !access2.version) return notFoundPage();
+    const path = rest.slice(1).map(encodeURIComponent).join("/");
+    const location = `/${THEMES_SEGMENT}/${name2}@${access2.version.n}/${path}${url.search}`;
+    return withoutBodyOnHead(c, redirect(location, 302, CACHE_CONTROL2.themeLatest));
+  }
   const match2 = THEME_VERSION_PATTERN.exec(segment);
   if (!match2) return notFoundPage();
   const name = match2[1];
@@ -6767,7 +6839,7 @@ async function handleTheme(c, rest, url) {
   if (!access || access.artifact.mode !== MODE.public) return notFoundPage();
   const parts = rest.slice(1);
   if (parts.length === 0) return redirect(`/${THEMES_SEGMENT}/${segment}/${url.search}`, 301);
-  const version = access.version && access.version.n === n ? access.version : await versionFor(env, slug, n);
+  const version = access.version && access.version.n === n ? access.version : await versionFor(env, access.artifact, n);
   if (!version) return notFoundPage("This theme has no such version yet.");
   const relative = relativePath(parts);
   if (relative === null) return notFoundPage();

package/worker/migrations/0005_version_counters.sql

@@ -0,0 +1,3 @@
+ALTER TABLE artifacts ADD COLUMN last_n INTEGER NOT NULL DEFAULT 0;
+ALTER TABLE artifacts ADD COLUMN version_gen INTEGER NOT NULL DEFAULT 0;
+UPDATE artifacts SET last_n = COALESCE(latest, 0);