ryugi-artifacts 1.14.0 → 1.15.1

package/dist/server.cjs

@@ -5171,14 +5171,14 @@ var require_websocket_server = __commonJS({
 
 // src/server/main.ts
 var import_node_child_process2 = require("node:child_process");
-var import_node_fs22 = __toESM(require("node:fs"), 1);
+var import_node_fs24 = __toESM(require("node:fs"), 1);
 var import_node_os = __toESM(require("node:os"), 1);
-var import_node_path19 = __toESM(require("node:path"), 1);
+var import_node_path20 = __toESM(require("node:path"), 1);
 
 // src/server/app.ts
-var import_node_fs20 = __toESM(require("node:fs"), 1);
+var import_node_fs22 = __toESM(require("node:fs"), 1);
 var import_node_http = __toESM(require("node:http"), 1);
-var import_node_path18 = __toESM(require("node:path"), 1);
+var import_node_path19 = __toESM(require("node:path"), 1);
 
 // src/shared/types.ts
 var ARTIFACT_TYPES = ["artboard", "document", "html"];
@@ -18207,7 +18207,9 @@ function readRaw(boardDir) {
 }
 function boardVersions(boardDir, canvas) {
   const versions = {};
-  for (const board of Object.values(canvas.boards)) {
+  let writing;
+  let latestWrite = -Infinity;
+  for (const [id2, board] of Object.entries(canvas.boards)) {
     const target = resolveBoardFile(boardDir, board.file);
     if (!target) {
       versions[board.file] = 0;
@@ -18215,12 +18217,19 @@ function boardVersions(boardDir, canvas) {
     }
     try {
       const stat = import_node_fs5.default.statSync(target);
-      versions[board.file] = stat.size > 0 ? stat.mtimeMs : 0;
+      const html = import_node_fs5.default.readFileSync(target, "utf8");
+      const document2 = /<(?:!doctype|html)\b/i.test(html);
+      const ready = html.trim().length > 0 && (!document2 || /<\/html>\s*(?:<!--[\s\S]*?-->\s*)*$/i.test(html));
+      versions[board.file] = ready ? stat.mtimeMs : 0;
+      if (!ready && stat.mtimeMs >= latestWrite) {
+        writing = id2;
+        latestWrite = stat.mtimeMs;
+      }
     } catch {
       versions[board.file] = 0;
     }
   }
-  return versions;
+  return { versions, writing };
 }
 function readCanvas(boardDir) {
   const { raw, warning } = readRaw(boardDir);
@@ -18228,16 +18237,19 @@ function readCanvas(boardDir) {
   try {
     const structural = structuralWarnings(raw);
     if (structural.length > 0) return { canvas: null, warnings: structural, pending: [], layout: null, versions: {} };
-    const canvas = raw;
+    const canvas = { ...raw };
+    const { versions, writing } = boardVersions(boardDir, canvas);
     const pending = /* @__PURE__ */ new Set();
-    const warnings = validateCanvas(canvas, (rel) => resolveBoardFile(boardDir, rel) !== null, {
-      pending,
-      allowPending: canvas.building === true
-    });
-    const versions = boardVersions(boardDir, canvas);
     for (const [id2, board] of Object.entries(canvas.boards)) {
       if (!versions[board.file]) pending.add(id2);
     }
+    canvas.building = pending.size > 0;
+    delete canvas.writing;
+    if (writing) canvas.writing = writing;
+    const warnings = validateCanvas(canvas, (rel) => resolveBoardFile(boardDir, rel) !== null, {
+      pending,
+      allowPending: true
+    });
     return { canvas, warnings, pending: [...pending].sort(), layout: computeLayout(canvas), versions };
   } catch (err) {
     return {
@@ -19250,19 +19262,19 @@ var ElementDOMSlot = class _ElementDOMSlot extends DOMSlot {
   }
 };
 function indexPath(root, child) {
-  const path20 = [];
+  const path21 = [];
   let node = child;
   for (; node !== root && node !== null; node = node.parentNode) {
     let i6 = 0;
     for (let sibling = node.previousSibling; sibling !== null; sibling = sibling.previousSibling) {
       i6++;
     }
-    path20.push(i6);
+    path21.push(i6);
   }
   if (!(node === root)) {
     formatDevErrorMessage(`indexPath: root is not a parent of child`);
   }
-  return path20.reverse();
+  return path21.reverse();
 }
 // @__NO_SIDE_EFFECTS__
 function readLexicalVersion() {
@@ -34042,9 +34054,9 @@ function getActiveElementDeep(root) {
 function getComposedEventTarget(event) {
   const target = event.target;
   if (target !== null && isHTMLElement(target) && target.shadowRoot !== null && typeof event.composedPath === "function") {
-    const path20 = event.composedPath();
-    if (path20.length > 0) {
-      return path20[0];
+    const path21 = event.composedPath();
+    if (path21.length > 0) {
+      return path21[0];
     }
   }
   return target;
@@ -44140,10 +44152,10 @@ function _loadWasmModule(sync, filepath, src, imports2) {
   var buf = null;
   var isNode2 = typeof process !== "undefined" && process.versions != null && process.versions.node != null;
   if (filepath && isNode2) {
-    var fs25 = null;
-    var path20 = null;
+    var fs27 = null;
+    var path21 = null;
     return new Promise((resolve, reject) => {
-      fs25.readFile(path20.resolve(__dirname, filepath), (error, buffer) => {
+      fs27.readFile(path21.resolve(__dirname, filepath), (error, buffer) => {
         if (error != null) {
           reject(error);
         } else {
@@ -45446,10 +45458,10 @@ var LoroDoc = class _LoroDoc {
    * @param {string} path
    * @returns {Value | Container | undefined}
    */
-  getByPath(path20) {
+  getByPath(path21) {
     try {
       const retptr = wasm.__wbindgen_add_to_stack_pointer(-16);
-      const ptr0 = passStringToWasm0(path20, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
+      const ptr0 = passStringToWasm0(path21, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
       const len0 = WASM_VECTOR_LEN;
       wasm.lorodoc_getByPath(retptr, this.__wbg_ptr, ptr0, len0);
       var r0 = getDataViewMemory0().getInt32(retptr + 4 * 0, true);
@@ -88549,6 +88561,7 @@ var import_node_fs12 = __toESM(require("node:fs"), 1);
 var import_node_path12 = __toESM(require("node:path"), 1);
 
 // src/shared/cloud.ts
+var ownLink = (url, hostId) => hostId ? `${url}#ryugi-host=${hostId}` : url;
 var isVisibility = (value) => value === "private" || value === "public";
 
 // src/server/config.ts
@@ -88714,7 +88727,7 @@ function createRelayClient(options) {
     ws2.on("open", () => {
       backoff = 1e3;
       announced = idsOf(served).join("\n");
-      send2({ t: "hello", version: options.version, ids: idsOf(served) });
+      send2({ t: "hello", version: options.version, ids: idsOf(served), ...options.local ? { local: options.local() } : {} });
       heartbeat = setInterval(() => {
         if (watched.size > 0) options.onActivity();
         ws2.send("ping");
@@ -88782,8 +88795,155 @@ function createRelayClient(options) {
   };
 }
 
+// src/server/ws.ts
+var import_node_crypto3 = __toESM(require("node:crypto"), 1);
+var WS_MAGIC = "258EAFA5-E914-47DA-95CA-C5AB0DC85B11";
+var OPCODE_TEXT = 1;
+var OPCODE_CLOSE = 8;
+var OPCODE_PING = 9;
+var OPCODE_PONG = 10;
+var MAX_CLIENT_FRAME = 8 * 1024 * 1024;
+function acceptKey(clientKey) {
+  return import_node_crypto3.default.createHash("sha1").update(clientKey + WS_MAGIC).digest("base64");
+}
+function encodeFrame(opcode, payload) {
+  const len = payload.length;
+  let header;
+  if (len < 126) {
+    header = Buffer.from([128 | opcode, len]);
+  } else if (len < 65536) {
+    header = Buffer.alloc(4);
+    header[0] = 128 | opcode;
+    header[1] = 126;
+    header.writeUInt16BE(len, 2);
+  } else {
+    header = Buffer.alloc(10);
+    header[0] = 128 | opcode;
+    header[1] = 127;
+    header.writeBigUInt64BE(BigInt(len), 2);
+  }
+  return Buffer.concat([header, payload]);
+}
+var textFrame = (text2) => encodeFrame(OPCODE_TEXT, Buffer.from(text2));
+function completeHandshake(socket, clientKey) {
+  socket.write(
+    `HTTP/1.1 101 Switching Protocols\r
+Upgrade: websocket\r
+Connection: Upgrade\r
+Sec-WebSocket-Accept: ${acceptKey(clientKey)}\r
+\r
+`
+  );
+}
+function rejectUpgrade(socket, status, reason) {
+  socket.end(`HTTP/1.1 ${status} ${reason}\r
+Connection: close\r
+Content-Length: 0\r
+\r
+`);
+}
+function handleClientFrames(socket, onText) {
+  let buffer = Buffer.alloc(0);
+  socket.on("data", (chunk) => {
+    buffer = Buffer.concat([buffer, chunk]);
+    while (buffer.length >= 2) {
+      const fin = (buffer[0] & 128) !== 0;
+      const opcode = buffer[0] & 15;
+      let len = buffer[1] & 127;
+      let offset = 2;
+      if (len === 126) {
+        if (buffer.length < 4) return;
+        len = buffer.readUInt16BE(2);
+        offset = 4;
+      } else if (len === 127) {
+        if (buffer.length < 10) return;
+        const big = buffer.readBigUInt64BE(2);
+        if (big > BigInt(MAX_CLIENT_FRAME)) {
+          socket.destroy();
+          return;
+        }
+        len = Number(big);
+        offset = 10;
+      }
+      const total = offset + 4 + len;
+      if (buffer.length < total) return;
+      const mask = buffer.subarray(offset, offset + 4);
+      const payload = Buffer.from(buffer.subarray(offset + 4, total));
+      for (let i6 = 0; i6 < payload.length; i6++) payload[i6] = payload[i6] ^ mask[i6 % 4];
+      buffer = buffer.subarray(total);
+      if (opcode === OPCODE_CLOSE) {
+        socket.end(encodeFrame(OPCODE_CLOSE, Buffer.alloc(0)));
+        return;
+      }
+      if (opcode === OPCODE_PING) socket.write(encodeFrame(OPCODE_PONG, payload));
+      else if (opcode === OPCODE_TEXT && fin) onText?.(payload.toString("utf8"));
+    }
+  });
+}
+
+// src/server/direct-relay.ts
+function createDirectRelay(options) {
+  const sockets = /* @__PURE__ */ new Map();
+  let opened = 0;
+  const write = (socket, message) => socket.write(textFrame(JSON.stringify(message)));
+  const onText = async (socket, key2, conn, text2) => {
+    let message;
+    try {
+      message = JSON.parse(text2);
+    } catch {
+      return;
+    }
+    if (message.t !== "request" || typeof message.rid !== "number" && typeof message.rid !== "string") return;
+    options.onActivity();
+    try {
+      write(socket, { t: "reply", rid: message.rid, body: { ok: true, data: await options.handle(key2, message.body, conn) } });
+    } catch (err) {
+      write(socket, { t: "reply", rid: message.rid, body: { ok: false, error: err.message } });
+    }
+  };
+  return {
+    accept(socket, clientKey, key2) {
+      completeHandshake(socket, clientKey);
+      const conn = `direct:${++opened}`;
+      sockets.set(socket, { key: key2, conn });
+      write(socket, { t: "presence", online: true, version: options.version });
+      handleClientFrames(socket, (text2) => void onText(socket, key2, conn, text2));
+      const forget = () => {
+        if (sockets.delete(socket)) options.onClose(conn);
+      };
+      socket.on("end", () => {
+        forget();
+        socket.end();
+      });
+      socket.on("close", forget);
+      socket.on("error", forget);
+      options.onActivity();
+    },
+    emit(key2, body) {
+      for (const [socket, entry] of sockets) if (entry.key === key2) write(socket, { t: "event", body });
+    },
+    close() {
+      for (const socket of sockets.keys()) socket.destroy();
+    }
+  };
+}
+
+// src/server/host-id.ts
+var import_node_fs14 = __toESM(require("node:fs"), 1);
+var import_node_path14 = __toESM(require("node:path"), 1);
+function hostIdFor(credentialsFile2) {
+  const file = import_node_path14.default.join(import_node_path14.default.dirname(credentialsFile2), "host-id");
+  const saved = readPersisted(file);
+  if (/^[A-Za-z0-9_-]{16,64}$/.test(saved)) return saved;
+  const id2 = randomToken();
+  import_node_fs14.default.mkdirSync(import_node_path14.default.dirname(file), { recursive: true, mode: 448 });
+  import_node_fs14.default.writeFileSync(file, `${id2}
+`, { mode: 384 });
+  return id2;
+}
+
 // src/server/avatars.ts
-var import_node_crypto3 = require("node:crypto");
+var import_node_crypto4 = require("node:crypto");
 var AVATAR_ROUTE = /^\/api\/avatar\/([a-z]+)\/([^/]+)$/;
 var MAX_BYTES = 512 * 1024;
 var TIMEOUT_MS = 5e3;
@@ -88792,7 +88952,7 @@ var SOURCES = {
   gravatar: { valid: /^[0-9a-f]{64}$/, url: (id2) => `https://gravatar.com/avatar/${id2}?s=64&d=404` }
 };
 var githubAvatar = (login) => `/api/avatar/github/${login}`;
-var gravatarAvatar = (email) => `/api/avatar/gravatar/${(0, import_node_crypto3.createHash)("sha256").update(email.trim().toLowerCase()).digest("hex")}`;
+var gravatarAvatar = (email) => `/api/avatar/gravatar/${(0, import_node_crypto4.createHash)("sha256").update(email.trim().toLowerCase()).digest("hex")}`;
 function createAvatars(fetchImpl = fetch) {
   const cache = /* @__PURE__ */ new Map();
   const fetchAvatar = async (url) => {
@@ -88824,7 +88984,7 @@ function createAvatars(fetchImpl = fetch) {
 }
 
 // src/server/cloud.ts
-var import_node_crypto4 = __toESM(require("node:crypto"), 1);
+var import_node_crypto5 = __toESM(require("node:crypto"), 1);
 
 // src/shared/brand.ts
 var RYUGI_MARK_VIEWBOX = "0 0 512 512";
@@ -88934,8 +89094,8 @@ function callbackPage(result) {
 }
 
 // src/server/pack.ts
-var import_node_fs14 = __toESM(require("node:fs"), 1);
-var import_node_path14 = __toESM(require("node:path"), 1);
+var import_node_fs15 = __toESM(require("node:fs"), 1);
+var import_node_path15 = __toESM(require("node:path"), 1);
 var MAX_ARTIFACT_BYTES = 20 * 1024 * 1024;
 function formatBytes(bytes) {
   if (bytes < 1024) return `${bytes} B`;
@@ -88944,22 +89104,22 @@ function formatBytes(bytes) {
 }
 var excluded = (type, relative) => type === "document" && relative === "comments.json";
 function packArtifact(dir, type, { maxBytes = MAX_ARTIFACT_BYTES } = {}) {
-  const rootReal = import_node_fs14.default.realpathSync(dir);
+  const rootReal = import_node_fs15.default.realpathSync(dir);
   const found = [];
   const visited = /* @__PURE__ */ new Set([rootReal]);
   let total = 0;
   const walk = (current) => {
-    for (const entry of import_node_fs14.default.readdirSync(current, { withFileTypes: true })) {
+    for (const entry of import_node_fs15.default.readdirSync(current, { withFileTypes: true })) {
       if (entry.name.startsWith(".")) continue;
-      const full = import_node_path14.default.join(current, entry.name);
+      const full = import_node_path15.default.join(current, entry.name);
       let real;
       try {
-        real = import_node_fs14.default.realpathSync(full);
+        real = import_node_fs15.default.realpathSync(full);
       } catch {
         continue;
       }
-      if (!real.startsWith(rootReal + import_node_path14.default.sep)) continue;
-      const stat = import_node_fs14.default.statSync(real);
+      if (!real.startsWith(rootReal + import_node_path15.default.sep)) continue;
+      const stat = import_node_fs15.default.statSync(real);
       if (stat.isDirectory()) {
         if (visited.has(real)) continue;
         visited.add(real);
@@ -88967,7 +89127,7 @@ function packArtifact(dir, type, { maxBytes = MAX_ARTIFACT_BYTES } = {}) {
         continue;
       }
       if (!stat.isFile()) continue;
-      const relative = import_node_path14.default.relative(dir, full).split(import_node_path14.default.sep).join("/");
+      const relative = import_node_path15.default.relative(dir, full).split(import_node_path15.default.sep).join("/");
       if (excluded(type, relative)) continue;
       total += stat.size;
       found.push({ path: relative, real });
@@ -88977,12 +89137,12 @@ function packArtifact(dir, type, { maxBytes = MAX_ARTIFACT_BYTES } = {}) {
   if (total > maxBytes) {
     throw new Error(`artifact is ${formatBytes(total)}; the limit is ${formatBytes(maxBytes)}`);
   }
-  return found.map((file) => ({ path: file.path, data: import_node_fs14.default.readFileSync(file.real) }));
+  return found.map((file) => ({ path: file.path, data: import_node_fs15.default.readFileSync(file.real) }));
 }
 
 // src/server/publish-payload.ts
-var import_node_fs15 = __toESM(require("node:fs"), 1);
-var import_node_path15 = __toESM(require("node:path"), 1);
+var import_node_fs16 = __toESM(require("node:fs"), 1);
+var import_node_path16 = __toESM(require("node:path"), 1);
 var CLOUD_RUNTIME_URL = "/_ryugi/runtime/ryugi-ui.js";
 function sharedComments(file) {
   return {
@@ -88995,7 +89155,7 @@ function publishPayload(ref, dir, title, payload, comments = emptyComments()) {
     const { canvas, layout, versions } = payload;
     return { canvas, layout, versions };
   }
-  if (ref.type === "document") return { title, state: parseDocument2(import_node_fs15.default.readFileSync(import_node_path15.default.join(dir, "doc.xml"), "utf8")), comments: sharedComments(comments) };
+  if (ref.type === "document") return { title, state: parseDocument2(import_node_fs16.default.readFileSync(import_node_path16.default.join(dir, "doc.xml"), "utf8")), comments: sharedComments(comments) };
   return { title };
 }
 var isPage = (type, file) => type === "html" ? file === "index.html" : (type === "document" || type === "artboard") && file.endsWith(".html");
@@ -89006,12 +89166,12 @@ function withCloudRuntime(type, files) {
 }
 
 // src/server/settings.ts
-var import_node_fs16 = __toESM(require("node:fs"), 1);
-var import_node_path16 = __toESM(require("node:path"), 1);
-var settingsFileFor = (credentialsFile2) => import_node_path16.default.join(import_node_path16.default.dirname(credentialsFile2), "config.json");
+var import_node_fs17 = __toESM(require("node:fs"), 1);
+var import_node_path17 = __toESM(require("node:path"), 1);
+var settingsFileFor = (credentialsFile2) => import_node_path17.default.join(import_node_path17.default.dirname(credentialsFile2), "config.json");
 function readSettings(file) {
   try {
-    const raw = JSON.parse(import_node_fs16.default.readFileSync(file, "utf8"));
+    const raw = JSON.parse(import_node_fs17.default.readFileSync(file, "utf8"));
     return typeof raw === "object" && raw !== null && !Array.isArray(raw) ? raw : {};
   } catch {
     return {};
@@ -89022,7 +89182,7 @@ function readGlobalAutoPublish(file) {
   return typeof value === "boolean" ? value : void 0;
 }
 function writeGlobalAutoPublish(file, value) {
-  import_node_fs16.default.mkdirSync(import_node_path16.default.dirname(file), { recursive: true, mode: 448 });
+  import_node_fs17.default.mkdirSync(import_node_path17.default.dirname(file), { recursive: true, mode: 448 });
   writeJsonAtomic(file, { ...readSettings(file), autoPublish: value });
 }
 function defaultGlobalAutoPublish(file) {
@@ -89037,7 +89197,7 @@ var LOGIN_STATE_TTL_MS = 10 * 60 * 1e3;
 var UPLOAD_CONCURRENCY = 6;
 var MAX_JSON_BODY = 4096;
 var CLOUD_ID = /^[A-Za-z0-9_-]{1,64}$/;
-var ROUTE = /^\/api\/cloud\/(status|login|logout|artifacts|publish|visibility|auto-publish)(?:\/([^/]+)(?:\/([^/]+))?)?$/;
+var ROUTE = /^\/api\/cloud\/(status|login|logout|artifacts|publish|reserve|visibility|auto-publish)(?:\/([^/]+)(?:\/([^/]+))?)?$/;
 var SignedOut = class extends Error {
 };
 var CloudRefused = class extends Error {
@@ -89094,10 +89254,10 @@ function createCloudRoutes(options) {
     const state = randomToken();
     const verifier = randomToken();
     pendingStates.set(state, { expires: now + LOGIN_STATE_TTL_MS, verifier });
-    const challenge = import_node_crypto4.default.createHash("sha256").update(verifier).digest("base64url");
+    const challenge = import_node_crypto5.default.createHash("sha256").update(verifier).digest("base64url");
     return `${origin}/auth/cli?port=${options.port()}&state=${state}&challenge=${challenge}`;
   };
-  const cloudFetch = async (method, path20, body) => {
+  const cloudFetch = async (method, path21, body) => {
     const credentials = readCredentials(credentialsFile2, origin);
     if (!credentials) throw new SignedOut();
     const headers = { Authorization: `Bearer ${credentials.token}` };
@@ -89111,7 +89271,7 @@ function createCloudRoutes(options) {
     }
     let res;
     try {
-      res = await fetch(`${origin}${path20}`, { method, headers, body: payload });
+      res = await fetch(`${origin}${path21}`, { method, headers, body: payload });
     } catch (err) {
       throw new CloudRefused(502, `could not reach ${origin}: ${err.message}`);
     }
@@ -89134,6 +89294,28 @@ function createCloudRoutes(options) {
     return run2;
   };
   const keyOfCloudId = (cloudId) => Object.entries(readConfig(configFile).config.artifacts).find(([, entry]) => entry.cloud?.id === cloudId)?.[0] ?? `cloud:${cloudId}`;
+  const createRecord2 = async (ref, visibility) => {
+    const res = await cloudFetch("POST", "/api/artifacts", { type: ref.type, visibility, project });
+    if (res.status === 403) throw new CreateRefused(await errorMessage(res));
+    const created = await (await expectOk(res)).json();
+    updateArtifactConfig(configFile, `${ref.type}/${ref.id}`, {
+      visibility: created.visibility,
+      cloud: { id: created.id, url: created.url, publishedAt: null, visibility: created.visibility }
+    });
+    return created.id;
+  };
+  const reserve = async (ref) => {
+    const key2 = `${ref.type}/${ref.id}`;
+    const entry = artifactEntry(key2);
+    if (entry.cloud) return entry.cloud.url;
+    if (entry.autoPublish === false || !autoPublishState().enabled) return null;
+    try {
+      await createRecord2(ref, entry.visibility ?? "private");
+    } catch {
+      return null;
+    }
+    return artifactEntry(key2).cloud?.url ?? null;
+  };
   const publish = async (ref, requested, { recreate = true } = {}) => {
     const inspected = await options.inspect(ref);
     if (!inspected) throw new CloudRefused(404, `${ref.type}/${ref.id} not found`);
@@ -89146,20 +89328,11 @@ function createCloudRoutes(options) {
     }
     const key2 = `${ref.type}/${ref.id}`;
     const entry = artifactEntry(key2);
-    const hashed = files.map((file) => ({ ...file, hash: import_node_crypto4.default.createHash("sha256").update(file.data).digest("hex") }));
+    const hashed = files.map((file) => ({ ...file, hash: import_node_crypto5.default.createHash("sha256").update(file.data).digest("hex") }));
     const byHash = new Map(hashed.map((file) => [file.hash, file.data]));
-    const manifest = hashed.map(({ path: path20, hash }) => ({ path: path20, hash }));
+    const manifest = hashed.map(({ path: path21, hash }) => ({ path: path21, hash }));
     const version2 = (visibility) => ({ title: inspected.title, payload: inspected.payload, files: manifest, project, ...visibility ? { visibility } : {} });
-    const create3 = async () => {
-      const res2 = await cloudFetch("POST", "/api/artifacts", { type: ref.type, visibility: requested ?? entry.visibility ?? "private", project });
-      if (res2.status === 403) throw new CreateRefused(await errorMessage(res2));
-      const created = await (await expectOk(res2)).json();
-      updateArtifactConfig(configFile, key2, {
-        visibility: created.visibility,
-        cloud: { id: created.id, url: created.url, publishedAt: null, visibility: created.visibility }
-      });
-      return created.id;
-    };
+    const create3 = () => createRecord2(ref, requested ?? entry.visibility ?? "private");
     const upload = async (id2, hashes) => {
       for (let i6 = 0; i6 < hashes.length; i6 += UPLOAD_CONCURRENCY) {
         await Promise.all(
@@ -89249,7 +89422,7 @@ function createCloudRoutes(options) {
     if (action === "status" && method === "GET" && !first) {
       const credentials = readCredentials(credentialsFile2, origin);
       const { config, warning } = readConfig(configFile);
-      sendJson(res, 200, { signedIn: !!credentials, login: credentials?.login ?? null, origin, artifacts: config.artifacts, autoPublish: autoPublishState(), warning: warning ?? null });
+      sendJson(res, 200, { signedIn: !!credentials, login: credentials?.login ?? null, origin, hostId: hostIdFor(credentialsFile2), artifacts: config.artifacts, autoPublish: autoPublishState(), warning: warning ?? null });
       return;
     }
     if (action === "login" && method === "POST" && !first) {
@@ -89290,6 +89463,10 @@ function createCloudRoutes(options) {
       sendJson(res, result.status, result.body);
       return;
     }
+    if (action === "reserve" && ref && method === "POST") {
+      sendJson(res, 200, { url: await serialized(`${ref.type}/${ref.id}`, () => reserve(ref)) });
+      return;
+    }
     if (action === "publish" && ref && method === "DELETE") {
       const key2 = `${ref.type}/${ref.id}`;
       await serialized(key2, async () => {
@@ -89376,7 +89553,7 @@ function createCloudRoutes(options) {
 
 // src/server/comment-names.ts
 var import_node_child_process = require("node:child_process");
-var import_node_fs17 = __toESM(require("node:fs"), 1);
+var import_node_fs18 = __toESM(require("node:fs"), 1);
 
 // src/server/agent.ts
 var NAMES = {
@@ -89457,7 +89634,7 @@ function commentNames({ agentFile, projectDir, cloud }) {
     },
     agent: () => {
       try {
-        return detectAgent(JSON.parse(import_node_fs17.default.readFileSync(agentFile, "utf8")));
+        return detectAgent(JSON.parse(import_node_fs18.default.readFileSync(agentFile, "utf8")));
       } catch {
         return void 0;
       }
@@ -89485,8 +89662,8 @@ function viewerPage(template, page) {
 }
 
 // src/server/auto-publish.ts
-var import_node_crypto5 = __toESM(require("node:crypto"), 1);
-var import_node_fs18 = __toESM(require("node:fs"), 1);
+var import_node_crypto6 = __toESM(require("node:crypto"), 1);
+var import_node_fs19 = __toESM(require("node:fs"), 1);
 var SIGNED_OUT_MESSAGE = "auto-publish paused: the Ryugi Cloud sign-in expired";
 function isNotice(value) {
   if (typeof value !== "object" || value === null) return false;
@@ -89496,7 +89673,7 @@ function isNotice(value) {
 function readAutoPublishState(file) {
   let raw = {};
   try {
-    const parsed = JSON.parse(import_node_fs18.default.readFileSync(file, "utf8"));
+    const parsed = JSON.parse(import_node_fs19.default.readFileSync(file, "utf8"));
     if (typeof parsed === "object" && parsed !== null) raw = parsed;
   } catch {
   }
@@ -89516,7 +89693,7 @@ function createAutoPublisher(options) {
   const remarked = /* @__PURE__ */ new Set();
   const save = () => writeJsonAtomic(options.stateFile, { dirty: [...dirty], notice, paused });
   const raise = (kind, message) => {
-    if (notice?.kind !== kind) notice = { id: import_node_crypto5.default.randomUUID(), kind, message };
+    if (notice?.kind !== kind) notice = { id: import_node_crypto6.default.randomUUID(), kind, message };
   };
   const run2 = async () => {
     if (!options.enabled() || dirty.size === 0) return;
@@ -89575,26 +89752,45 @@ function createAutoPublisher(options) {
   };
 }
 
+// src/server/artifact-file.ts
+var import_node_fs20 = __toESM(require("node:fs"), 1);
+var RESOLVE = { artboard: resolveBoardFile, document: resolveDocumentAsset, html: resolveHtmlFile };
+var isArtifactPage = (type, relative) => type === "html" ? relative === "index.html" : relative.endsWith(".html");
+function readArtifactFile(dir, type, relative, uiRuntimeUrl) {
+  if (!resolveInside(dir, relative)) return null;
+  const target = RESOLVE[type](dir, relative);
+  if (!target) return null;
+  let data;
+  try {
+    data = import_node_fs20.default.readFileSync(target);
+  } catch {
+    return null;
+  }
+  if (!isArtifactPage(type, relative)) return { contentType: mimeOf(target), data };
+  const page = injectRuntime(data.toString("utf8"), { uiRuntimeUrl, embedded: type === "document", inspector: type === "artboard" });
+  return { contentType: "text/html; charset=utf-8", data: Buffer.from(page) };
+}
+
 // src/server/watch.ts
-var import_node_fs19 = __toESM(require("node:fs"), 1);
-var import_node_path17 = __toESM(require("node:path"), 1);
-var toPosix = (file) => file.split(import_node_path17.default.sep).join("/");
+var import_node_fs21 = __toESM(require("node:fs"), 1);
+var import_node_path18 = __toESM(require("node:path"), 1);
+var toPosix = (file) => file.split(import_node_path18.default.sep).join("/");
 var ignored = (file) => file === ".state" || file.startsWith(".state/");
 function snapshot(root, dir = root, out = /* @__PURE__ */ new Map()) {
   let entries2;
   try {
-    entries2 = import_node_fs19.default.readdirSync(dir, { withFileTypes: true });
+    entries2 = import_node_fs21.default.readdirSync(dir, { withFileTypes: true });
   } catch {
     return out;
   }
   for (const entry of entries2) {
-    const full = import_node_path17.default.join(dir, entry.name);
-    const rel = toPosix(import_node_path17.default.relative(root, full));
+    const full = import_node_path18.default.join(dir, entry.name);
+    const rel = toPosix(import_node_path18.default.relative(root, full));
     if (ignored(rel)) continue;
     if (entry.isDirectory()) snapshot(root, full, out);
     else {
       try {
-        out.set(rel, import_node_fs19.default.statSync(full).mtimeMs);
+        out.set(rel, import_node_fs21.default.statSync(full).mtimeMs);
       } catch {
       }
     }
@@ -89627,7 +89823,7 @@ function watchTree(root, onChange, debounceMs = 120, backupPollMs = 1e3) {
     }, debounceMs);
   };
   try {
-    const watcher = import_node_fs19.default.watch(root, { recursive: true }, (_event, filename) => {
+    const watcher = import_node_fs21.default.watch(root, { recursive: true }, (_event, filename) => {
       if (filename) queue([toPosix(filename.toString())]);
     });
     watcher.on("error", () => {
@@ -89651,92 +89847,6 @@ function watchTree(root, onChange, debounceMs = 120, backupPollMs = 1e3) {
   }
 }
 
-// src/server/ws.ts
-var import_node_crypto6 = __toESM(require("node:crypto"), 1);
-var WS_MAGIC = "258EAFA5-E914-47DA-95CA-C5AB0DC85B11";
-var OPCODE_TEXT = 1;
-var OPCODE_CLOSE = 8;
-var OPCODE_PING = 9;
-var OPCODE_PONG = 10;
-var MAX_CLIENT_FRAME = 8 * 1024 * 1024;
-function acceptKey(clientKey) {
-  return import_node_crypto6.default.createHash("sha1").update(clientKey + WS_MAGIC).digest("base64");
-}
-function encodeFrame(opcode, payload) {
-  const len = payload.length;
-  let header;
-  if (len < 126) {
-    header = Buffer.from([128 | opcode, len]);
-  } else if (len < 65536) {
-    header = Buffer.alloc(4);
-    header[0] = 128 | opcode;
-    header[1] = 126;
-    header.writeUInt16BE(len, 2);
-  } else {
-    header = Buffer.alloc(10);
-    header[0] = 128 | opcode;
-    header[1] = 127;
-    header.writeBigUInt64BE(BigInt(len), 2);
-  }
-  return Buffer.concat([header, payload]);
-}
-var textFrame = (text2) => encodeFrame(OPCODE_TEXT, Buffer.from(text2));
-function completeHandshake(socket, clientKey) {
-  socket.write(
-    `HTTP/1.1 101 Switching Protocols\r
-Upgrade: websocket\r
-Connection: Upgrade\r
-Sec-WebSocket-Accept: ${acceptKey(clientKey)}\r
-\r
-`
-  );
-}
-function rejectUpgrade(socket, status, reason) {
-  socket.end(`HTTP/1.1 ${status} ${reason}\r
-Connection: close\r
-Content-Length: 0\r
-\r
-`);
-}
-function handleClientFrames(socket, onText) {
-  let buffer = Buffer.alloc(0);
-  socket.on("data", (chunk) => {
-    buffer = Buffer.concat([buffer, chunk]);
-    while (buffer.length >= 2) {
-      const fin = (buffer[0] & 128) !== 0;
-      const opcode = buffer[0] & 15;
-      let len = buffer[1] & 127;
-      let offset = 2;
-      if (len === 126) {
-        if (buffer.length < 4) return;
-        len = buffer.readUInt16BE(2);
-        offset = 4;
-      } else if (len === 127) {
-        if (buffer.length < 10) return;
-        const big = buffer.readBigUInt64BE(2);
-        if (big > BigInt(MAX_CLIENT_FRAME)) {
-          socket.destroy();
-          return;
-        }
-        len = Number(big);
-        offset = 10;
-      }
-      const total = offset + 4 + len;
-      if (buffer.length < total) return;
-      const mask = buffer.subarray(offset, offset + 4);
-      const payload = Buffer.from(buffer.subarray(offset + 4, total));
-      for (let i6 = 0; i6 < payload.length; i6++) payload[i6] = payload[i6] ^ mask[i6 % 4];
-      buffer = buffer.subarray(total);
-      if (opcode === OPCODE_CLOSE) {
-        socket.end(encodeFrame(OPCODE_CLOSE, Buffer.alloc(0)));
-        return;
-      }
-      if (opcode === OPCODE_PING) socket.write(encodeFrame(OPCODE_PONG, payload));
-      else if (opcode === OPCODE_TEXT && fin) onText?.(payload.toString("utf8"));
-    }
-  });
-}
-
 // src/server/app.ts
 var VIEWER_CSP = [
   "default-src 'self'",
@@ -89755,6 +89865,7 @@ var CONTENT_CSP = {
   document: "sandbox; default-src 'none'",
   html: "sandbox allow-scripts allow-modals allow-forms allow-popups allow-downloads"
 };
+var DIRECT_RELAY_ROUTE = /^\/relay\/a\/([A-Za-z0-9_-]{1,64})$/;
 var SHELL_ROUTE = new RegExp(`^/(?:(${ARTIFACT_TYPES.join("|")})/([^/]+)/?)?$`);
 var API_ARTIFACT_ROUTE = /^\/api\/artifacts\/([^/]+)\/([^/]+)$/;
 var PREVIEW_ROUTE = /^\/preview\/(artboard|document|html)\/([a-z0-9][a-z0-9-]*)\/?$/;
@@ -89763,6 +89874,7 @@ var API_DOCUMENT_ROUTE = /^\/api\/document\/([^/]+)\/(state|update|comments)$/;
 var MAX_COMMENT_OP = 64 * 1024;
 var API_AGENT_COMMENTS_ROUTE = /^\/api\/agent\/document\/([^/]+)\/comments$/;
 var MAX_DOCUMENT_UPDATE = 8 * 1024 * 1024;
+var MAX_RELAY_FILE = 8 * 1024 * 1024;
 var MAX_RUNTIME_MESSAGE = 2048;
 var MAX_RUNTIME_WARNINGS = 20;
 function readArtifact(dir, ref, runtime = []) {
@@ -89779,17 +89891,17 @@ function titleOf(payload, ref) {
   return payload.canvas?.title || ref.id;
 }
 async function startArtifactsServer(options) {
-  const root = import_node_path18.default.resolve(options.root);
-  const viewerDir = import_node_path18.default.resolve(options.viewerDir);
-  const runtimeDir = options.runtimeDir ? import_node_path18.default.resolve(options.runtimeDir) : null;
-  const stateDir = import_node_path18.default.join(root, ".state");
-  import_node_fs20.default.mkdirSync(stateDir, { recursive: true, mode: 448 });
-  import_node_fs20.default.writeFileSync(import_node_path18.default.join(stateDir, ".gitignore"), "*\n");
+  const root = import_node_path19.default.resolve(options.root);
+  const viewerDir = import_node_path19.default.resolve(options.viewerDir);
+  const runtimeDir = options.runtimeDir ? import_node_path19.default.resolve(options.runtimeDir) : null;
+  const stateDir = import_node_path19.default.join(root, ".state");
+  import_node_fs22.default.mkdirSync(stateDir, { recursive: true, mode: 448 });
+  import_node_fs22.default.writeFileSync(import_node_path19.default.join(stateDir, ".gitignore"), "*\n");
   if (options.configFile) ensureConfig(options.configFile);
-  const portFile = import_node_path18.default.join(stateDir, ".last-port");
-  const tokenFile = import_node_path18.default.join(stateDir, ".last-token");
+  const portFile = import_node_path19.default.join(stateDir, ".last-port");
+  const tokenFile = import_node_path19.default.join(stateDir, ".last-token");
   const token = readPersisted(tokenFile) || randomToken();
-  import_node_fs20.default.writeFileSync(tokenFile, `${token}
+  import_node_fs22.default.writeFileSync(tokenFile, `${token}
 `, { mode: 384 });
   const contentToken = randomToken();
   const runtimeWarnings = /* @__PURE__ */ new Map();
@@ -89806,13 +89918,20 @@ async function startArtifactsServer(options) {
   let port = 0;
   let cookieName = "";
   let relay = null;
+  const direct = createDirectRelay({
+    version: options.relay?.version ?? "",
+    handle: (key2, body, conn) => handleRelay(key2, body, conn, `http://127.0.0.1:${port}`),
+    onActivity: () => touch(),
+    onClose: (conn) => dropRelayViewer(conn)
+  });
   const broadcast = (message) => {
     const frame = textFrame(JSON.stringify(message));
     for (const socket of clients) socket.write(frame);
     relay?.emit(message.artifact, message);
+    direct.emit(message.artifact, message);
   };
   const avatars = createAvatars(options.fetch);
-  const names = commentNames({ agentFile: import_node_path18.default.join(stateDir, "agent"), projectDir: import_node_path18.default.resolve(root, "../.."), cloud: options.cloud });
+  const names = commentNames({ agentFile: import_node_path19.default.join(stateDir, "agent"), projectDir: import_node_path19.default.resolve(root, "../.."), cloud: options.cloud });
   const documents = createDocumentRegistry({
     root,
     stateDir,
@@ -89850,8 +89969,8 @@ async function startArtifactsServer(options) {
     }
     return { dir, title, reasons, payload: published };
   };
-  const cloud = options.cloud && options.configFile ? createCloudRoutes({ ...options.cloud, configFile: options.configFile, project: import_node_path18.default.basename(import_node_path18.default.resolve(root, "../..")), port: () => port, inspect }) : null;
-  const autoPublisher = cloud ? createAutoPublisher({ stateFile: import_node_path18.default.join(stateDir, "auto-publish.json"), enabled: cloud.autoPublishEnabled, token: cloud.token, publish: cloud.autoPublish }) : null;
+  const cloud = options.cloud && options.configFile ? createCloudRoutes({ ...options.cloud, configFile: options.configFile, project: import_node_path19.default.basename(import_node_path19.default.resolve(root, "../..")), port: () => port, inspect }) : null;
+  const autoPublisher = cloud ? createAutoPublisher({ stateFile: import_node_path19.default.join(stateDir, "auto-publish.json"), enabled: cloud.autoPublishEnabled, token: cloud.token, publish: cloud.autoPublish }) : null;
   const sameOrigin = (req) => {
     const origin2 = req.headers.origin;
     const host = req.headers.host ?? "";
@@ -89930,7 +90049,7 @@ async function startArtifactsServer(options) {
   };
   const blockIdsOf = async (id2, dir) => {
     await (await documents.open(id2))?.flush();
-    const state = parseDocument2(import_node_fs20.default.readFileSync(import_node_path18.default.join(dir, "doc.xml"), "utf8"));
+    const state = parseDocument2(import_node_fs22.default.readFileSync(import_node_path19.default.join(dir, "doc.xml"), "utf8"));
     return new Set(state.root.children.flatMap((block) => block.$?.blockId ? [block.$.blockId] : []));
   };
   const serveAgentComments = async (req, res, id2) => {
@@ -90010,7 +90129,7 @@ async function startArtifactsServer(options) {
       sendFile(res, target, headers);
       return;
     }
-    import_node_fs20.default.readFile(target, "utf8", (err, source) => {
+    import_node_fs22.default.readFile(target, "utf8", (err, source) => {
       if (err) send(res, 404, "Not found");
       else {
         const uiRuntimeUrl = runtimeDir ? `${contentPrefix}runtime/ryugi-ui.js` : void 0;
@@ -90018,10 +90137,10 @@ async function startArtifactsServer(options) {
       }
     });
   };
-  const artifactMeta = (ref, dir) => ({
+  const artifactMeta = (ref, dir, contentOrigin = "") => ({
     ...readArtifact(dir, ref, runtimeOf(ref, dir)),
     ...ref.type !== "html" ? { agent: names.agent() } : {},
-    contentBase: `${contentPrefix}${ref.type}/${ref.id}/`
+    contentBase: `${contentOrigin}${contentPrefix}${ref.type}/${ref.id}/`
   });
   const serveArtifactApi = (res, type, id2) => {
     const dir = resolveArtifactDir(root, type, id2);
@@ -90039,7 +90158,7 @@ async function startArtifactsServer(options) {
       title: titleOf(readArtifact(entry.dir, entry), entry),
       updatedAt: latestMtime(entry.dir)
     }));
-    sendJson(res, 200, { project: import_node_path18.default.basename(import_node_path18.default.dirname(import_node_path18.default.dirname(root))), artifacts: summaries, warnings });
+    sendJson(res, 200, { project: import_node_path19.default.basename(import_node_path19.default.dirname(import_node_path19.default.dirname(root))), artifacts: summaries, warnings });
   };
   function onClientText(socket, text2) {
     let message;
@@ -90053,7 +90172,9 @@ async function startArtifactsServer(options) {
       selections.accept(socket, message);
       return;
     }
-    const { type, artifact, message: detail, version: version2, file } = message;
+    acceptReport(message);
+  }
+  function acceptReport({ type, artifact, message: detail, version: version2, file }) {
     if (typeof artifact !== "string") return;
     const ref = artifactKeyOf(artifact);
     if (!ref || ref.type === "artboard" || artifact !== `${ref.type}/${ref.id}`) return;
@@ -90085,7 +90206,7 @@ async function startArtifactsServer(options) {
     runtimeWarnings.set(artifact, [...list2, detail]);
     writeState(ref, dir);
     const frame = textFrame(JSON.stringify({ type: "change", artifact, files: [] }));
-    for (const socket2 of clients) socket2.write(frame);
+    for (const socket of clients) socket.write(frame);
   }
   const handleRequest = (req, res) => {
     touch();
@@ -90099,7 +90220,7 @@ async function startArtifactsServer(options) {
       return;
     }
     if (pathname === "/robots.txt") {
-      sendFile(res, import_node_path18.default.join(viewerDir, "robots.txt"));
+      sendFile(res, import_node_path19.default.join(viewerDir, "robots.txt"));
       return;
     }
     if (pathname.startsWith("/c/")) {
@@ -90196,7 +90317,7 @@ async function startArtifactsServer(options) {
     if (SHELL_ROUTE.test(pathname) || PREVIEW_ROUTE.test(pathname) || pathname === "/index.html") {
       const ref = artifactKeyOf(pathname.replace(/^\/(?:preview\/)?/, "").replace(/\/$/, ""));
       const dir = ref && resolveArtifactDir(root, ref.type, ref.id);
-      const project = import_node_path18.default.basename(import_node_path18.default.dirname(import_node_path18.default.dirname(root)));
+      const project = import_node_path19.default.basename(import_node_path19.default.dirname(import_node_path19.default.dirname(root)));
       const title = ref ? dir ? titleOf(readArtifact(dir, ref), ref) : ref.id : `${project} \xB7 Artifacts`;
       const description = ref ? `\u5728 ${project} \u9879\u76EE\u4E2D\u67E5\u770B ${title}\uFF0C\u8FD9\u662F\u4E00\u4E2A ${ref.type === "artboard" ? "Artboard" : ref.type === "document" ? "Document" : "HTML"} Artifact\u3002` : `\u6D4F\u89C8 ${project} \u9879\u76EE\u7684\u5168\u90E8 Artboard\u3001Document \u548C HTML Artifact\uFF0C\u9884\u89C8\u771F\u5B9E\u5185\u5BB9\uFF0C\u6309\u7C7B\u578B\u3001\u540D\u79F0\u548C\u66F4\u65B0\u65F6\u95F4\u67E5\u627E\u4F5C\u54C1\u3002`;
       const canonical = `http://${urlHostForHttp(options.urlHost)}:${port}/${ref ? `${ref.type}/${ref.id}` : ""}`;
@@ -90205,7 +90326,7 @@ async function startArtifactsServer(options) {
         "Content-Security-Policy": PREVIEW_ROUTE.test(pathname) ? VIEWER_CSP.replace("frame-ancestors 'none'", "frame-ancestors 'self'") : VIEWER_CSP
       };
       if (key2 !== null) headers["Set-Cookie"] = `${cookieName}=${token}; HttpOnly; SameSite=Strict; Path=/`;
-      void import_node_fs20.default.promises.readFile(import_node_path18.default.join(viewerDir, "index.html"), "utf8").then((template) => send(res, 200, viewerPage(template, { title, description, url: canonical }), headers)).catch((err) => send(res, err.code === "ENOENT" ? 404 : 500, "Viewer unavailable"));
+      void import_node_fs22.default.promises.readFile(import_node_path19.default.join(viewerDir, "index.html"), "utf8").then((template) => send(res, 200, viewerPage(template, { title, description, url: canonical }), headers)).catch((err) => send(res, err.code === "ENOENT" ? 404 : 500, "Viewer unavailable"));
       return;
     }
     const target = resolveInside(viewerDir, pathname.slice(1));
@@ -90222,6 +90343,18 @@ async function startArtifactsServer(options) {
   server.on("upgrade", (req, socket) => {
     const url2 = new URL(req.url ?? "/", "http://artifacts.local");
     const clientKey = req.headers["sec-websocket-key"];
+    const directMatch = DIRECT_RELAY_ROUTE.exec(url2.pathname);
+    if (directMatch && typeof clientKey === "string") {
+      const fromCloud = options.cloud !== void 0 && req.headers.origin === options.cloud.origin;
+      if (!safeEqual(url2.searchParams.get("key") ?? "", token) || !(fromCloud || sameOrigin(req))) {
+        rejectUpgrade(socket, 403, "Forbidden");
+        return;
+      }
+      const key2 = servedArtifacts().get(directMatch[1]);
+      if (!key2) rejectUpgrade(socket, 404, "Not Found");
+      else direct.accept(socket, clientKey, key2);
+      return;
+    }
     if (url2.pathname !== "/ws" || typeof clientKey !== "string") {
       rejectUpgrade(socket, 400, "Bad Request");
       return;
@@ -90252,7 +90385,7 @@ async function startArtifactsServer(options) {
     port = await listen(server, options.host, 0);
   }
   cookieName = `ryugi_artifacts_${port}`;
-  import_node_fs20.default.writeFileSync(portFile, `${port}
+  import_node_fs22.default.writeFileSync(portFile, `${port}
 `, { mode: 384 });
   const origin = `http://${urlHostForHttp(options.urlHost)}:${port}`;
   const url = `${origin}/?key=${token}`;
@@ -90278,23 +90411,40 @@ async function startArtifactsServer(options) {
     initialChanges.push({ ref: entry, payload, files: [] });
     if (entry.type === "document") void documents.open(entry.id);
   }
-  writeJsonAtomic(import_node_path18.default.join(stateDir, "server-info"), { type: "server-started", url, port, root });
+  writeJsonAtomic(import_node_path19.default.join(stateDir, "server-info"), { type: "server-started", url, port, root });
   const relayViewers = /* @__PURE__ */ new Map();
-  const servedDocuments = () => {
+  const servedArtifacts = () => {
     const served = /* @__PURE__ */ new Map();
     if (!options.configFile) return served;
     for (const [key2, entry] of Object.entries(readConfig(options.configFile).config.artifacts)) {
       const ref = artifactKeyOf(key2);
-      if (entry.cloud && ref?.type === "document" && resolveArtifactDir(root, "document", ref.id)) served.set(entry.cloud.id, key2);
+      if (entry.cloud && ref && resolveArtifactDir(root, ref.type, ref.id)) served.set(entry.cloud.id, key2);
     }
     return served;
   };
-  const handleRelay = async (key2, body, conn) => {
+  const dropRelayViewer = (conn) => {
+    const viewer = relayViewers.get(conn);
+    if (!viewer) return;
+    selections.drop(viewer.tab);
+    relayViewers.delete(conn);
+  };
+  const handleRelay = async (key2, body, conn, contentOrigin = "") => {
     const ref = artifactKeyOf(key2);
     const dir = resolveArtifactDir(root, ref.type, ref.id);
     if (!dir) throw new Error(`${key2} not found`);
     const request = typeof body === "object" && body !== null ? body : {};
-    if (request.op === "meta") return artifactMeta(ref, dir);
+    if (request.op === "meta") return artifactMeta(ref, dir, contentOrigin);
+    if (request.op === "file") {
+      const file = typeof request.path === "string" ? readArtifactFile(dir, ref.type, request.path, CLOUD_RUNTIME_URL) : null;
+      if (!file) throw new Error("not found");
+      if (file.data.length > MAX_RELAY_FILE) throw new Error("too large");
+      return { contentType: file.contentType, data: file.data.toString("base64") };
+    }
+    if (request.op === "client") {
+      if (typeof request.message === "object" && request.message !== null) acceptReport({ ...request.message, artifact: key2 });
+      return null;
+    }
+    if ((request.op === "state" || request.op === "update" || request.op === "comment") && ref.type !== "document") throw new Error(`${key2} is not a document`);
     if (request.op === "state" || request.op === "update") {
       const session = await documents.open(ref.id);
       if (!session) throw new Error(`${key2} has no doc.xml`);
@@ -90322,12 +90472,13 @@ async function startArtifactsServer(options) {
   relay = options.relay && options.cloud ? createRelayClient({
     ...options.relay,
     token: () => readCredentials(options.cloud.credentialsFile, options.cloud.origin)?.token ?? null,
-    served: servedDocuments,
+    served: servedArtifacts,
+    local: () => ({ hostId: hostIdFor(options.cloud.credentialsFile), port, key: token }),
     handle: handleRelay,
     onActivity: touch,
     onWatch: (keys2) => {
       for (const [conn, viewer] of relayViewers) {
-        if (keys2.has(viewer.key)) continue;
+        if (keys2.has(viewer.key) || conn.startsWith("direct:")) continue;
         selections.drop(viewer.tab);
         relayViewers.delete(conn);
       }
@@ -90364,6 +90515,7 @@ async function startArtifactsServer(options) {
         const frame = textFrame(JSON.stringify({ type: "change", artifact: key2, files: changed }));
         for (const socket of clients) socket.write(frame);
         relay?.emit(key2, { type: "change", artifact: key2, files: changed });
+        direct.emit(key2, { type: "change", artifact: key2, files: changed });
         changeListeners.forEach((listener) => listener(ref, payload, changed));
       }
       touch();
@@ -90376,6 +90528,11 @@ async function startArtifactsServer(options) {
     contentToken,
     url,
     linkFor,
+    cloudLinkFor: (type, id2) => {
+      if (!options.cloud || !options.configFile || !readCredentials(options.cloud.credentialsFile, options.cloud.origin)) return null;
+      const url2 = readConfig(options.configFile).config.artifacts[`${type}/${id2}`]?.cloud?.url;
+      return url2 ? ownLink(url2, hostIdFor(options.cloud.credentialsFile)) : null;
+    },
     clientCount: () => clients.size,
     onArtifactChange: (listener) => {
       changeListeners.push(listener);
@@ -90385,6 +90542,7 @@ async function startArtifactsServer(options) {
     close: () => new Promise((resolve) => {
       watcher.close();
       relay?.close();
+      direct.close();
       selections.clearAll();
       for (const socket of clients) socket.destroy();
       server.close(() => resolve());
@@ -90394,7 +90552,7 @@ async function startArtifactsServer(options) {
 }
 
 // src/server/lifecycle.ts
-var import_node_fs21 = __toESM(require("node:fs"), 1);
+var import_node_fs23 = __toESM(require("node:fs"), 1);
 var DEFAULT_IDLE_TIMEOUT_MS = 4 * 60 * 60 * 1e3;
 var DEFAULT_LIFECYCLE_CHECK_MS = 60 * 1e3;
 var SERVER_ID_ARG = "--artifacts-server-id=";
@@ -90426,7 +90584,7 @@ function parseEnv(env, argv = []) {
 function readOwners(file) {
   let text2;
   try {
-    text2 = import_node_fs21.default.readFileSync(file, "utf8");
+    text2 = import_node_fs23.default.readFileSync(file, "utf8");
   } catch {
     return [];
   }
@@ -90489,20 +90647,20 @@ function openReady(payload) {
 }
 
 // package.json
-var version = "1.14.0";
+var version = "1.15.1";
 
 // src/server/main.ts
 async function main() {
   const config = parseEnv(process.env, process.argv.slice(2));
-  const root = import_node_path19.default.resolve(config.root);
-  const stateDir = import_node_path19.default.join(root, ".state");
+  const root = import_node_path20.default.resolve(config.root);
+  const stateDir = import_node_path20.default.join(root, ".state");
   const server = await startArtifactsServer({
     root,
-    viewerDir: import_node_path19.default.join(__dirname, "viewer"),
-    runtimeDir: import_node_path19.default.join(__dirname, "runtime"),
+    viewerDir: import_node_path20.default.join(__dirname, "viewer"),
+    runtimeDir: import_node_path20.default.join(__dirname, "runtime"),
     host: config.host,
     urlHost: config.urlHost,
-    configFile: import_node_path19.default.join(import_node_path19.default.dirname(root), "config.json"),
+    configFile: import_node_path20.default.join(import_node_path20.default.dirname(root), "config.json"),
     cloud: { origin: config.cloudOrigin, credentialsFile: credentialsFile(process.env, process.platform, import_node_os.default.homedir()) },
     relay: { url: `${config.cloudOrigin.replace(/^http/, "ws")}/api/relay/host`, version }
   });
@@ -90517,7 +90675,7 @@ async function main() {
     if ("canvas" in payload ? !openReady(payload) : payload.warnings.length > 0) return;
     browserOpened = true;
     if (server.clientCount() > 0) return;
-    const link = server.linkFor(ref.type, ref.id);
+    const link = server.cloudLinkFor(ref.type, ref.id) ?? server.linkFor(ref.type, ref.id);
     if (config.openCmd) {
       (0, import_node_child_process2.exec)(`${config.openCmd} ${JSON.stringify(link)}`, () => {
       });
@@ -90532,12 +90690,12 @@ async function main() {
     if (stopping) return;
     stopping = true;
     console.log(JSON.stringify({ type: "server-stopped", reason }));
-    import_node_fs22.default.rmSync(import_node_path19.default.join(stateDir, "server-info"), { force: true });
-    writeJsonAtomic(import_node_path19.default.join(stateDir, "server-stopped"), { reason, timestamp: Date.now() });
+    import_node_fs24.default.rmSync(import_node_path20.default.join(stateDir, "server-info"), { force: true });
+    writeJsonAtomic(import_node_path20.default.join(stateDir, "server-stopped"), { reason, timestamp: Date.now() });
     await server.close();
     process.exit(0);
   };
-  const ownersFile = import_node_path19.default.join(stateDir, "owners");
+  const ownersFile = import_node_path20.default.join(stateDir, "owners");
   const timer = setInterval(() => {
     const owners = readOwners(ownersFile);
     const reason = shutdownReason({
@@ -90551,7 +90709,7 @@ async function main() {
   timer.unref();
   process.on("SIGTERM", () => void shutdown("SIGTERM"));
   process.on("SIGINT", () => void shutdown("SIGINT"));
-  import_node_fs22.default.rmSync(import_node_path19.default.join(stateDir, "server-stopped"), { force: true });
+  import_node_fs24.default.rmSync(import_node_path20.default.join(stateDir, "server-stopped"), { force: true });
   console.log(JSON.stringify({ type: "server-started", url: server.url, port: server.port, root }));
 }
 main().catch((err) => {