ryugi-artifacts 1.16.2 → 1.17.0

package/dist/cli.cjs

@@ -281,10 +281,16 @@ async function comment(options, emit) {
     throw new CliError(`The running artifacts server is older than this CLI. Run \`${invocation()} start --project-dir ${server.project}\` to replace it, then run this again.`);
   }
   if (status < 200 || status >= 300) throw new CliError(json.error || `HTTP ${status}`);
-  if (action === "list") emit({ type: "comments", artifact: options.artifact, threads: json.threads, ...options.all ? { all: true } : {} });
+  if (action === "list") emit({ type: "comments", artifact: options.artifact, threads: json.threads, ...json.groups ? { groups: json.groups } : {}, ...options.all ? { all: true } : {} });
   else emit({ type: WRITTEN[action], artifact: options.artifact, threadId: json.threadId, ...json.messageId ? { messageId: json.messageId } : {} });
   return 0;
 }
+var VERDICT_TEXT = { pass: "passed", reject: "rejected", pending: "waiting for a verdict" };
+var plural = (count, word) => `${count} ${word}${count === 1 ? "" : "s"}`;
+function groupText(group) {
+  const parts = [VERDICT_TEXT[group.verdict], group.evidenceUpdated ? "evidence replaced since the last verdict" : "", group.rejectThreads ? `${plural(group.rejectThreads, "open reject thread")}` : ""];
+  return `  ${group.id}${group.title ? ` (${group.title})` : ""}: ${parts.filter(Boolean).join(" \xB7 ")}`;
+}
 var clip = (text2, max) => text2.length > max ? `${text2.slice(0, max)}\u2026` : text2;
 var percent = (value) => `${Math.round(value * 100)}%`;
 function anchorLines(thread) {
@@ -312,8 +318,12 @@ function threadText(thread) {
 function commentText(value) {
   if (value.type === "comments") {
     const threads = value.threads ?? [];
-    if (!threads.length) return value.all ? `No comments on ${value.artifact}.` : `No new comments on ${value.artifact}.`;
-    return threads.map(threadText).join("\n\n");
+    const groups = value.groups ?? [];
+    const head = threads.length ? threads.map(threadText).join("\n\n") : value.all ? `No comments on ${value.artifact}.` : `No new comments on ${value.artifact}.`;
+    return groups.length ? `${head}
+
+Verify groups:
+${groups.map(groupText).join("\n")}` : head;
   }
   if (value.type === "comment-added") return `Added thread ${value.threadId} (message ${value.messageId})`;
   if (value.type === "comment-replied") return `Replied in thread ${value.threadId} (message ${value.messageId})`;
@@ -339,6 +349,7 @@ var import_node_path2 = __toESM(require("node:path"), 1);
 // src/shared/validate.ts
 var BOARD_NUMBERS = ["x", "y", "w", "h"];
 var BOARD_REQUIRED = ["file", "page", ...BOARD_NUMBERS];
+var MEDIA_REQUIRED = ["src", "page", ...BOARD_NUMBERS];
 
 // src/server/state.ts
 function writeJsonAtomic(file, value) {
@@ -911,7 +922,7 @@ async function main(argv) {
       }, emit);
     }
     if (command === "--version" || command === "-v") {
-      console.log("1.16.2");
+      console.log("1.17.0");
       return 0;
     }
     if (command === "--help" || command === "-h") {

package/dist/server.cjs

@@ -5182,6 +5182,8 @@ var import_node_path20 = __toESM(require("node:path"), 1);
 
 // src/shared/types.ts
 var ARTIFACT_TYPES = ["artboard", "document", "html"];
+var BOARD_TYPES = ["html", "image", "video"];
+var isMediaBoard = (board) => board.type === "image" || board.type === "video";
 
 // src/server/artifacts.ts
 var import_node_fs = __toESM(require("node:fs"), 1);
@@ -17961,6 +17963,14 @@ function readBoardAnchor(value) {
     if (!isName(value.board)) return null;
     anchor.board = value.board;
   }
+  if (value.group !== void 0) {
+    if (!isName(value.group)) return null;
+    anchor.group = value.group;
+  }
+  if (value.verdict !== void 0) {
+    if (!anchor.group || value.verdict !== "pass" && value.verdict !== "reject") return null;
+    anchor.verdict = value.verdict;
+  }
   if (value.nodes !== void 0) {
     const nodes = readNodes(value.nodes);
     if (!nodes) return null;
@@ -17980,17 +17990,24 @@ function readBoardAnchor(value) {
 }
 var boardAnchors = {
   read: readBoardAnchor,
-  same: (a5, b6) => a5.page === b6.page && a5.board === b6.board && a5.x === b6.x && a5.y === b6.y,
+  same: (a5, b6) => a5.page === b6.page && a5.board === b6.board && a5.group === b6.group && a5.verdict === b6.verdict && a5.x === b6.x && a5.y === b6.y,
   missing: "a new thread needs a board anchor (page, x, y); dropped it"
 };
 var emptyBoardComments = () => ({ version: 1, threads: [] });
 var savedBoardComments = (incoming) => savedComments(incoming, boardAnchors);
 var mergeBoardComments = (base, incoming, origin, now, newId, name) => mergeComments(base, incoming, origin, now, newId, name, boardAnchors);
 function applyBoardHumanOp(file, op, now, newId, who) {
-  if (op.op === "create") return { ...file, threads: [...file.threads, openThread(op.anchor, "human", op.text, now, newId, who)] };
-  return applyThreadOp(file, op, now, newId, who);
+  if (op.op !== "create") return applyThreadOp(file, op, now, newId, who);
+  const thread = openThread(op.anchor, "human", op.text, now, newId, who);
+  if (op.anchor.verdict !== "pass") return { ...file, threads: [...file.threads, thread] };
+  const closed = { status: "resolved", statusAt: now, statusBy: "human" };
+  const rejected = (t7) => t7.anchor.group === op.anchor.group && t7.anchor.verdict === "reject" && t7.status === "open";
+  return { ...file, threads: [...file.threads.map((t7) => rejected(t7) ? { ...t7, ...closed } : t7), { ...thread, ...closed }] };
 }
 function applyBoardAgentOp(file, op, now, newId, name) {
+  if (op.op === "resolve" && file.threads.find((t7) => t7.id === op.threadId)?.anchor.verdict === "reject") {
+    throw new Error("a reject closes only when your human partner passes the group");
+  }
   if (op.op === "add") {
     const thread = openThread(op.anchor, "agent", op.text, now, newId, { name });
     return { file: { ...file, threads: [...file.threads, thread] }, threadId: thread.id, messageId: thread.messages[0].id };
@@ -17998,6 +18015,19 @@ function applyBoardAgentOp(file, op, now, newId, name) {
   return applyAgentThreadOp(file, op, now, newId, name);
 }
 
+// src/shared/verdicts.ts
+var openedAt = (thread) => thread.messages[0]?.at ?? thread.statusAt;
+function groupVerdict(threads, group, stale) {
+  const own = threads.filter((thread) => thread.anchor.group === group && thread.anchor.verdict && thread.messages.some((m11) => !m11.deleted)).sort((a5, b6) => openedAt(a5) < openedAt(b6) ? -1 : openedAt(a5) > openedAt(b6) ? 1 : 0);
+  const rejectThreads = own.filter((thread) => thread.anchor.verdict === "reject" && thread.status === "open").length;
+  const latest = own.at(-1);
+  if (!latest) return { state: "pending", evidenceUpdated: false, rejectThreads };
+  const at7 = openedAt(latest);
+  if (stale.has(latest.id)) return { state: "pending", at: at7, evidenceUpdated: true, rejectThreads };
+  if (latest.anchor.verdict === "pass") return { state: "pass", at: at7, evidenceUpdated: false, rejectThreads };
+  return { state: latest.status === "open" ? "reject" : "pending", at: at7, evidenceUpdated: false, rejectThreads };
+}
+
 // src/server/comment-cursors.ts
 var import_node_fs6 = __toESM(require("node:fs"), 1);
 var import_node_path6 = __toESM(require("node:path"), 1);
@@ -18093,6 +18123,9 @@ var intersects = (a5, b6) => a5.x < b6.x + b6.w && b6.x < a5.x + a5.w && a5.y <
 // src/shared/validate.ts
 var BOARD_NUMBERS = ["x", "y", "w", "h"];
 var BOARD_REQUIRED = ["file", "page", ...BOARD_NUMBERS];
+var MEDIA_REQUIRED = ["src", "page", ...BOARD_NUMBERS];
+var fileOf = (board) => isMediaBoard(board) ? board.src ?? "" : board.file;
+var fileField = (board) => isMediaBoard(board) ? "src" : "file";
 var isObject2 = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
 function structuralWarnings(raw) {
   if (!isObject2(raw)) return ["canvas.json must be a JSON object"];
@@ -18122,6 +18155,16 @@ function structuralWarnings(raw) {
       if (isObject2(board) && board.interactive !== void 0 && typeof board.interactive !== "boolean") {
         warnings.push(`board "${id2}" field "interactive" must be a boolean`);
       }
+      if (isObject2(board) && board.type !== void 0 && !BOARD_TYPES.includes(board.type)) {
+        warnings.push(`board "${id2}" field "type" must be "html", "image" or "video"`);
+      }
+    }
+  }
+  if (isObject2(raw.groups)) {
+    for (const [id2, group] of Object.entries(raw.groups)) {
+      if (isObject2(group) && group.verify !== void 0 && typeof group.verify !== "boolean") {
+        warnings.push(`group "${id2}" field "verify" must be a boolean`);
+      }
     }
   }
   if (warnings.length > 0) return warnings;
@@ -18135,7 +18178,7 @@ function structuralWarnings(raw) {
       warnings.push(`board "${id2}" must be an object`);
       continue;
     }
-    for (const key2 of BOARD_REQUIRED) {
+    for (const key2 of isMediaBoard(board) ? MEDIA_REQUIRED : BOARD_REQUIRED) {
       if (board[key2] === void 0) warnings.push(`board "${id2}" is missing "${key2}"`);
     }
     for (const key2 of BOARD_NUMBERS) {
@@ -18143,7 +18186,7 @@ function structuralWarnings(raw) {
         warnings.push(`board "${id2}" field "${key2}" must be a number`);
       }
     }
-    for (const key2 of ["file", "page"]) {
+    for (const key2 of ["file", "src", "page"]) {
       if (board[key2] !== void 0 && typeof board[key2] !== "string") {
         warnings.push(`board "${id2}" field "${key2}" must be a string`);
       }
@@ -18174,10 +18217,11 @@ function validateCanvas(raw, fileExists, options = {}) {
   const notes = Object.entries(canvas.notes ?? {});
   for (const [id2, board] of boards) {
     if (!pages.has(board.page)) warnings.push(`board "${id2}" uses unknown page "${board.page}"`);
-    if (!board.file.startsWith("pages/")) warnings.push(`board "${id2}" file must start with "pages/": ${board.file}`);
-    else if (!fileExists(board.file)) {
+    const file = fileOf(board);
+    if (!file.startsWith("pages/")) warnings.push(`board "${id2}" ${fileField(board)} must start with "pages/": ${file}`);
+    else if (!fileExists(file)) {
       options.pending?.add(id2);
-      if (!options.allowPending) warnings.push(`board "${id2}" file not found: ${board.file}`);
+      if (!options.allowPending) warnings.push(`board "${id2}" file not found: ${file}`);
     }
   }
   for (let i6 = 0; i6 < boards.length; i6++) {
@@ -18288,6 +18332,10 @@ function boardVersions(boardDir, canvas) {
     }
     try {
       const stat = import_node_fs5.default.statSync(target);
+      if (isMediaBoard(board)) {
+        versions[board.file] = stat.size > 0 ? stat.mtimeMs : 0;
+        continue;
+      }
       const html = import_node_fs5.default.readFileSync(target, "utf8");
       const document2 = /<(?:!doctype|html)\b/i.test(html);
       const ready = html.trim().length > 0 && (!document2 || /<\/html>\s*(?:<!--[\s\S]*?-->\s*)*$/i.test(html));
@@ -18309,6 +18357,7 @@ function readCanvas(boardDir) {
     const structural = structuralWarnings(raw);
     if (structural.length > 0) return { canvas: null, warnings: structural, pending: [], layout: null, versions: {} };
     const canvas = { ...raw };
+    canvas.boards = Object.fromEntries(Object.entries(canvas.boards).map(([id2, board]) => [id2, isMediaBoard(board) ? { ...board, file: board.src ?? "" } : board]));
     const { versions, writing } = boardVersions(boardDir, canvas);
     const pending = /* @__PURE__ */ new Set();
     for (const [id2, board] of Object.entries(canvas.boards)) {
@@ -18487,6 +18536,7 @@ var boardRules = {
   agent: applyBoardAgentOp
 };
 var withoutHashes = ({ hashes: _hashes, ...anchor }) => anchor;
+var withoutVerdict = ({ hashes: _hashes, group: _group, verdict: _verdict, ...anchor }) => anchor;
 function asBoardHumanOp(value) {
   if (typeof value !== "object" || value === null) return null;
   const v6 = value;
@@ -18502,22 +18552,30 @@ function asBoardAgentOp(value) {
   const v6 = value;
   if (v6.op === "add") {
     const anchor = readBoardAnchor(v6.anchor);
-    return anchor && isText3(v6.text) && v6.text.length > 0 ? { op: "add", anchor: withoutHashes(anchor), text: v6.text } : null;
+    return anchor && isText3(v6.text) && v6.text.length > 0 ? { op: "add", anchor: withoutVerdict(anchor), text: v6.text } : null;
   }
   if (v6.op === "reply") return isId(v6.threadId) && isText3(v6.text) && v6.text.length > 0 ? { op: "reply", threadId: v6.threadId, text: v6.text } : null;
   if (v6.op === "resolve") return isId(v6.threadId) ? { op: "resolve", threadId: v6.threadId } : null;
   return null;
 }
-function boardSpecs(dir) {
+function readCanvasJson(dir) {
   try {
-    const canvas = JSON.parse(import_node_fs8.default.readFileSync(import_node_path7.default.join(dir, "canvas.json"), "utf8"));
-    return Object.fromEntries(Object.entries(canvas.boards ?? {}).flatMap(
-      ([id2, board]) => typeof board?.file === "string" ? [[id2, { file: board.file, page: typeof board.page === "string" ? board.page : "", w: typeof board.w === "number" ? board.w : 0 }]] : []
-    ));
+    return JSON.parse(import_node_fs8.default.readFileSync(import_node_path7.default.join(dir, "canvas.json"), "utf8"));
   } catch {
     return {};
   }
 }
+function boardSpecs(dir) {
+  return Object.fromEntries(Object.entries(readCanvasJson(dir).boards ?? {}).flatMap(([id2, board]) => {
+    const file = board?.type === "image" || board?.type === "video" ? board.src : board?.file;
+    return typeof file === "string" ? [[id2, { file, page: typeof board.page === "string" ? board.page : "", w: typeof board.w === "number" ? board.w : 0 }]] : [];
+  }));
+}
+function groupSpecs(dir) {
+  return Object.fromEntries(Object.entries(readCanvasJson(dir).groups ?? {}).flatMap(
+    ([id2, group]) => Array.isArray(group?.boards) ? [[id2, { ...typeof group.title === "string" ? { title: group.title } : {}, boards: group.boards.filter((b6) => typeof b6 === "string"), verify: group.verify === true }]] : []
+  ));
+}
 var boardFiles = (dir) => Object.fromEntries(Object.entries(boardSpecs(dir)).map(([id2, spec]) => [id2, spec.file]));
 function agentAddOnBoard(value, specs) {
   if (typeof value !== "object" || value === null) return null;
@@ -18527,11 +18585,18 @@ function agentAddOnBoard(value, specs) {
   if (!spec) return { error: `no board ${v6.board}` };
   return asBoardAgentOp({ op: "add", anchor: { page: spec.page, board: v6.board, x: v6.x ?? spec.w, y: v6.y ?? 0 }, text: v6.text });
 }
+var hashCache = /* @__PURE__ */ new Map();
 function fileHash(dir, relative) {
   const file = resolveBoardFile(dir, relative);
   if (!file) return null;
   try {
-    return import_node_crypto2.default.createHash("sha1").update(import_node_fs8.default.readFileSync(file)).digest("hex").slice(0, 12);
+    const stat = import_node_fs8.default.statSync(file);
+    const stamp2 = `${stat.size}:${stat.mtimeMs}`;
+    const cached = hashCache.get(file);
+    if (cached?.stamp === stamp2) return cached.hash;
+    const hash = import_node_crypto2.default.createHash("sha1").update(import_node_fs8.default.readFileSync(file)).digest("hex").slice(0, 12);
+    hashCache.set(file, { stamp: stamp2, hash });
+    return hash;
   } catch {
     return null;
   }
@@ -18542,13 +18607,20 @@ function boardHashes(dir) {
     return hash ? [[id2, hash]] : [];
   }));
 }
-var boardsOf = (anchor) => [.../* @__PURE__ */ new Set([...anchor.board ? [anchor.board] : [], ...(anchor.nodes ?? []).map((node) => node.board)])];
-function stamp(anchor, hashes) {
-  const boards = boardsOf(anchor);
+var boardsOf = (anchor, groups = {}) => [
+  .../* @__PURE__ */ new Set([...anchor.board ? [anchor.board] : [], ...(anchor.nodes ?? []).map((node) => node.board), ...anchor.group ? groups[anchor.group]?.boards ?? [] : []])
+];
+function stamp(anchor, hashes, groups = {}) {
+  const boards = boardsOf(anchor, groups);
   if (!boards.length) return withoutHashes(anchor);
   return { ...withoutHashes(anchor), hashes: Object.fromEntries(boards.map((board) => [board, hashes[board] ?? "missing"])) };
 }
-var isStale = (thread, hashes) => Object.entries(thread.anchor.hashes ?? {}).some(([board, hash]) => hashes[board] !== hash);
+var sameMembers = (thread, groups) => {
+  const group = thread.anchor.group;
+  if (!group) return true;
+  return Object.keys(thread.anchor.hashes ?? {}).sort().join("\n") === [...groups[group]?.boards ?? []].sort().join("\n");
+};
+var isStale = (thread, hashes, groups) => !sameMembers(thread, groups) || Object.entries(thread.anchor.hashes ?? {}).some(([board, hash]) => hashes[board] !== hash);
 function createBoardCommentRegistry(options) {
   const stores = /* @__PURE__ */ new Map();
   const hashes = /* @__PURE__ */ new Map();
@@ -18573,7 +18645,8 @@ function createBoardCommentRegistry(options) {
   };
   const stale = (id2) => {
     const now = currentHashes(id2);
-    return store(id2).current().threads.filter((thread) => isStale(thread, now)).map((thread) => thread.id);
+    const groups = groupSpecs(dirOf(id2));
+    return store(id2).current().threads.filter((thread) => isStale(thread, now, groups)).map((thread) => thread.id);
   };
   const push2 = (id2) => {
     const ids = stale(id2);
@@ -18586,11 +18659,12 @@ function createBoardCommentRegistry(options) {
   };
   const forAgent2 = (id2, staleIds) => {
     const files = boardFiles(dirOf(id2));
+    const groups = groupSpecs(dirOf(id2));
     return (thread) => ({
       ...thread,
       stale: staleIds.has(thread.id),
       waitingOn: waitingOn(thread),
-      files: Object.fromEntries(boardsOf(thread.anchor).flatMap((board) => files[board] ? [[board, files[board]]] : [])),
+      files: Object.fromEntries(boardsOf(thread.anchor, groups).flatMap((board) => files[board] ? [[board, files[board]]] : [])),
       messages: thread.messages.map(({ avatar: _avatar, ...message }) => message)
     });
   };
@@ -18599,7 +18673,9 @@ function createBoardCommentRegistry(options) {
     stale,
     warnings: (id2) => store(id2).warnings(),
     apply: (id2, op) => {
-      const stamped = op.op === "create" ? { ...op, anchor: stamp(op.anchor, fresh(id2)) } : op;
+      const groups = groupSpecs(dirOf(id2));
+      if (op.op === "create" && op.anchor.verdict && !groups[op.anchor.group]?.verify) throw new Error(`no verify group ${op.anchor.group} in artboard/${id2}`);
+      const stamped = op.op === "create" ? { ...op, anchor: stamp(op.anchor, fresh(id2), groups) } : op;
       store(id2).apply(stamped);
       push2(id2);
       return { comments: store(id2).current(), stale: stale(id2) };
@@ -18620,6 +18696,16 @@ function createBoardCommentRegistry(options) {
       if (newest) cursors.set(id2, agent, newest);
       return threads.map(format);
     },
+    groups: (id2) => {
+      const specs = boardSpecs(dirOf(id2));
+      const threads = store(id2).current().threads;
+      const staleIds = new Set(stale(id2));
+      return Object.entries(groupSpecs(dirOf(id2))).filter(([, group]) => group.verify).map(([groupId, group]) => {
+        const { state, ...verdict } = groupVerdict(threads, groupId, staleIds);
+        const page = group.boards.map((board) => specs[board]?.page).find(Boolean) ?? "";
+        return { id: groupId, page, ...group.title ? { title: group.title } : {}, verdict: state, ...verdict, boards: group.boards };
+      });
+    },
     sync: (id2) => {
       if (store(id2).sync()) push2(id2);
     },
@@ -88587,10 +88673,29 @@ function send(res, status, body, headers = {}) {
 function sendJson(res, status, value) {
   send(res, status, JSON.stringify(value), { "Content-Type": MIME2[".json"] });
 }
-function sendFile(res, file, headers = {}) {
-  import_node_fs10.default.readFile(file, (err, data) => {
-    if (err) send(res, 404, "Not found");
-    else send(res, 200, data, { "Content-Type": mimeOf(file), ...headers });
+function byteRange(range, size) {
+  const match = range && /^bytes=(\d*)-(\d*)$/.exec(range.trim());
+  if (!match || !match[1] && !match[2]) return null;
+  const start = match[1] ? Number(match[1]) : Math.max(0, size - Number(match[2]));
+  const end = match[1] && match[2] ? Math.min(Number(match[2]), size - 1) : size - 1;
+  return start > end || start >= size ? "unsatisfiable" : { start, end };
+}
+function sendFile(res, file, headers = {}, range) {
+  import_node_fs10.default.stat(file, (err, stat) => {
+    if (err || !stat.isFile()) {
+      send(res, 404, "Not found");
+      return;
+    }
+    const base = { "Referrer-Policy": "no-referrer", "Cache-Control": "no-store", "Content-Type": mimeOf(file), "Accept-Ranges": "bytes", ...headers };
+    const part = byteRange(range, stat.size);
+    if (part === "unsatisfiable") {
+      res.writeHead(416, { ...base, "Content-Range": `bytes */${stat.size}` });
+      res.end();
+      return;
+    }
+    if (part) res.writeHead(206, { ...base, "Content-Range": `bytes ${part.start}-${part.end}/${stat.size}`, "Content-Length": String(part.end - part.start + 1) });
+    else res.writeHead(200, { ...base, "Content-Length": String(stat.size) });
+    import_node_fs10.default.createReadStream(file, part ?? {}).on("error", () => res.destroy()).pipe(res);
   });
 }
 
@@ -88750,15 +88855,15 @@ function readAnySelection(value) {
 function createSelectionStore(stateDir, exists) {
   const tabs = /* @__PURE__ */ new Map();
   let clock = 0;
-  const fileOf = (kind, id2) => import_node_path12.default.join(stateDir, kind, id2, "selection.json");
+  const fileOf2 = (kind, id2) => import_node_path12.default.join(stateDir, kind, id2, "selection.json");
   const write = (kind, id2) => {
     let winner;
     for (const tab of tabs.values()) {
       if (tab.kind !== kind || tab.id !== id2) continue;
       if (!winner || tab.humanAt > winner.humanAt || tab.humanAt === winner.humanAt && tab.seenAt > winner.seenAt) winner = tab;
     }
-    if (!winner?.state) import_node_fs12.default.rmSync(fileOf(kind, id2), { force: true });
-    else writeJsonAtomic(fileOf(kind, id2), { artifact: `${kind}/${id2}`, updatedAt: (/* @__PURE__ */ new Date()).toISOString(), ...winner.state });
+    if (!winner?.state) import_node_fs12.default.rmSync(fileOf2(kind, id2), { force: true });
+    else writeJsonAtomic(fileOf2(kind, id2), { artifact: `${kind}/${id2}`, updatedAt: (/* @__PURE__ */ new Date()).toISOString(), ...winner.state });
   };
   return {
     accept(socket, value) {
@@ -88792,7 +88897,7 @@ function createSelectionStore(stateDir, exists) {
         } catch {
           continue;
         }
-        for (const id2 of ids) import_node_fs12.default.rmSync(fileOf(kind, id2), { force: true });
+        for (const id2 of ids) import_node_fs12.default.rmSync(fileOf2(kind, id2), { force: true });
       }
     }
   };
@@ -89998,14 +90103,16 @@ function createAutoPublisher(options) {
 var import_node_fs21 = __toESM(require("node:fs"), 1);
 var RESOLVE = { artboard: resolveBoardFile, document: resolveDocumentAsset, html: resolveHtmlFile };
 var isArtifactPage = (type, relative) => type === "html" ? relative === "index.html" : relative.endsWith(".html");
-function readArtifactFile(dir, type, relative, uiRuntimeUrl) {
+function readArtifactFile(dir, type, relative, uiRuntimeUrl, maxBytes = Infinity) {
   if (!resolveInside(dir, relative)) return null;
   const target = RESOLVE[type](dir, relative);
   if (!target) return null;
   let data;
   try {
+    if (import_node_fs21.default.statSync(target).size > maxBytes) throw new RangeError("too large");
     data = import_node_fs21.default.readFileSync(target);
-  } catch {
+  } catch (err) {
+    if (err instanceof RangeError) throw err;
     return null;
   }
   if (!isArtifactPage(type, relative)) return { contentType: mimeOf(target), data };
@@ -90348,7 +90455,11 @@ async function startArtifactsServer(options) {
       sendJson(res, 400, { error: "not a comment op" });
       return;
     }
-    sendJson(res, 200, boardComments.apply(id2, op));
+    try {
+      sendJson(res, 200, boardComments.apply(id2, op));
+    } catch (err) {
+      sendJson(res, 400, { error: err.message });
+    }
   };
   const serveAgentBoardComments = async (req, res, id2) => {
     const dir = resolveArtifactDir(root, "artboard", id2);
@@ -90360,7 +90471,8 @@ async function startArtifactsServer(options) {
     const fields = typeof body === "object" && body !== null ? body : {};
     const agent = typeof fields.agent === "string" && fields.agent.length > 0 && fields.agent.length <= 100 ? fields.agent : void 0;
     if (fields.op === "list") {
-      sendJson(res, 200, { type: "comments", artifact: `artboard/${id2}`, threads: boardComments.list(id2, agent ?? "Agent", fields.all === true) });
+      const threads = boardComments.list(id2, agent ?? "Agent", fields.all === true);
+      sendJson(res, 200, { type: "comments", artifact: `artboard/${id2}`, threads, groups: boardComments.groups(id2) });
       return;
     }
     const shorthand = agentAddOnBoard(body, boardSpecs(dir));
@@ -90384,7 +90496,7 @@ async function startArtifactsServer(options) {
     }
   };
   const isAuthorized = (req, keyFromQuery) => keyFromQuery !== null && safeEqual(keyFromQuery, token) || safeEqual(parseCookies(req.headers.cookie)[cookieName] ?? "", token);
-  const serveContent = (res, rest) => {
+  const serveContent = (res, rest, range) => {
     if (rest.startsWith("runtime/")) {
       if (!runtimeDir) {
         send(res, 404, "Not found");
@@ -90420,7 +90532,7 @@ async function startArtifactsServer(options) {
     const page = ref.type === "html" ? relative === "index.html" : relative.endsWith(".html");
     const headers = { "Content-Security-Policy": CONTENT_CSP[page && ref.type === "document" ? "html" : ref.type], "Access-Control-Allow-Origin": "*" };
     if (!page) {
-      sendFile(res, target, headers);
+      sendFile(res, target, headers, range);
       return;
     }
     import_node_fs23.default.readFile(target, "utf8", (err, source) => {
@@ -90520,7 +90632,7 @@ async function startArtifactsServer(options) {
     }
     if (pathname.startsWith("/c/")) {
       if (!pathname.startsWith(contentPrefix)) send(res, 404, "Not found");
-      else serveContent(res, pathname.slice(contentPrefix.length));
+      else serveContent(res, pathname.slice(contentPrefix.length), req.headers.range);
       return;
     }
     if (cloud && pathname === "/api/cloud/callback") {
@@ -90748,7 +90860,7 @@ async function startArtifactsServer(options) {
     const request = typeof body === "object" && body !== null ? body : {};
     if (request.op === "meta") return artifactMeta(ref, dir, contentOrigin);
     if (request.op === "file") {
-      const file = typeof request.path === "string" ? readArtifactFile(dir, ref.type, request.path, CLOUD_RUNTIME_URL) : null;
+      const file = typeof request.path === "string" ? readArtifactFile(dir, ref.type, request.path, CLOUD_RUNTIME_URL, MAX_RELAY_FILE) : null;
       if (!file) throw new Error("not found");
       if (file.data.length > MAX_RELAY_FILE) throw new Error("too large");
       return { contentType: file.contentType, data: file.data.toString("base64") };
@@ -90967,7 +91079,7 @@ function openReady(payload) {
 }
 
 // package.json
-var version = "1.16.2";
+var version = "1.17.0";
 
 // src/server/main.ts
 async function main() {

package/dist/viewer/{CloudLiveDocument-DBNIW7Dh.js → CloudLiveDocument-x2LGLMZw.js}

@@ -1 +1 @@
-import{i as e}from"./rolldown-runtime-COiEfhsA.js";import{n as t,t as n}from"./jsx-runtime-CldxteV5.js";import{a as r}from"./useSandboxFrame-N5uRz7Cc.js";import{t as i}from"./index.js";import a from"./CloudDocument-DQ8BLzr7.js";import{DocumentView as o,t as s}from"./DocumentPage-CgCHoFVv.js";var c=e(t(),1),l=`1.16.2`,u=e=>/^(\d+)\.(\d+)\./.exec(e??``)?.slice(1,3).join(`.`)??null;function d(e,t){let n=u(e);return n!==null&&n===u(t)}var f=(e,t)=>`电脑上的 ryugi 是 ${t??`未知版本`}，网页是 ${e}，版本对上之前只能评论`,p=n();function m({id:e,state:t,contentBase:n,liveContentBase:u,comments:m}){let{transport:h,presence:g}=s(e,u??n??``),_=g?.online??!1;r(e,{online:g?.online??null});let[v,y]=(0,c.useState)(!1);if((0,c.useEffect)(()=>{_&&y(!0)},[_]),!h||!(v||_))return!t||!n?(0,p.jsx)(i,{children:g===null?`正在连接…`:`还没发布。电脑在线时，这里会实时显示。`}):(0,p.jsx)(a,{id:e,state:t,contentBase:n,comments:m,offline:g!==null&&!_});let b=_&&d(l,g?.version??null),x=_&&!b?f(l,g?.version??null):null;return(0,p.jsx)(o,{id:e,transport:h,live:_,cloud:{online:_,canEdit:b,reason:x}})}export{m as default};
+import{i as e}from"./rolldown-runtime-COiEfhsA.js";import{n as t,t as n}from"./jsx-runtime-CldxteV5.js";import{a as r}from"./useSandboxFrame-N5uRz7Cc.js";import{t as i}from"./index.js";import a from"./CloudDocument-DQ8BLzr7.js";import{DocumentView as o,t as s}from"./DocumentPage-CgCHoFVv.js";var c=e(t(),1),l=`1.17.0`,u=e=>/^(\d+)\.(\d+)\./.exec(e??``)?.slice(1,3).join(`.`)??null;function d(e,t){let n=u(e);return n!==null&&n===u(t)}var f=(e,t)=>`电脑上的 ryugi 是 ${t??`未知版本`}，网页是 ${e}，版本对上之前只能评论`,p=n();function m({id:e,state:t,contentBase:n,liveContentBase:u,comments:m}){let{transport:h,presence:g}=s(e,u??n??``),_=g?.online??!1;r(e,{online:g?.online??null});let[v,y]=(0,c.useState)(!1);if((0,c.useEffect)(()=>{_&&y(!0)},[_]),!h||!(v||_))return!t||!n?(0,p.jsx)(i,{children:g===null?`正在连接…`:`还没发布。电脑在线时，这里会实时显示。`}):(0,p.jsx)(a,{id:e,state:t,contentBase:n,comments:m,offline:g!==null&&!_});let b=_&&d(l,g?.version??null),x=_&&!b?f(l,g?.version??null):null;return(0,p.jsx)(o,{id:e,transport:h,live:_,cloud:{online:_,canEdit:b,reason:x}})}export{m as default};