ryugi-artifacts 1.42.2 → 1.44.0

package/dist/server.cjs

@@ -5191,8 +5191,14 @@ var import_node_fs = __toESM(require("node:fs"), 1);
 var import_node_path = __toESM(require("node:path"), 1);
 
 // src/shared/ids.ts
-var ID_PATTERN = /^[a-z0-9][a-z0-9-]*$/;
+var SLUG_SOURCE = "[a-z0-9][a-z0-9-]*";
+var ADDRESS_SOURCE = "(?:[A-Za-z0-9_-]{21}|[a-f0-9]{32})";
+var ARTIFACT_LOCATOR_SOURCE = `(?:${SLUG_SOURCE}|${ADDRESS_SOURCE})`;
+var ID_PATTERN = new RegExp(`^${SLUG_SOURCE}$`);
+var ADDRESS_PATTERN = new RegExp(`^${ADDRESS_SOURCE}$`);
 var isArtifactId = (id2) => ID_PATTERN.test(id2);
+var isArtifactAddress = (id2) => ADDRESS_PATTERN.test(id2);
+var isArtifactLocator = (id2) => ID_PATTERN.test(id2) || ADDRESS_PATTERN.test(id2);
 var isArtifactType = (type) => ARTIFACT_TYPES.includes(type);
 
 // src/server/artifacts.ts
@@ -5228,9 +5234,9 @@ function resolveArtifactDir(root, type, id2) {
     return null;
   }
 }
-function artifactKeyOf(relative) {
+function artifactKeyOf(relative, isId2 = isArtifactId) {
   const [type, id2] = relative.split("/");
-  if (!type || !id2 || !isArtifactType(type) || !isArtifactId(id2)) return null;
+  if (!type || !id2 || !isArtifactType(type) || !isId2(id2)) return null;
   return { type, id: id2 };
 }
 function artifactSignature(dir, type) {
@@ -5265,9 +5271,87 @@ function artifactSignature(dir, type) {
 }
 
 // src/server/artifact-address.ts
-var import_node_crypto2 = __toESM(require("node:crypto"), 1);
 var import_node_fs2 = __toESM(require("node:fs"), 1);
 var import_node_path2 = __toESM(require("node:path"), 1);
+
+// node_modules/.pnpm/nanoid@5.1.16/node_modules/nanoid/index.js
+var import_node_crypto2 = require("node:crypto");
+
+// node_modules/.pnpm/nanoid@5.1.16/node_modules/nanoid/url-alphabet/index.js
+var urlAlphabet = "useandom-26T198340PX75pxJACKVERYMINDBUSHWOLF_GQZbfghjklqvwyzrict";
+
+// node_modules/.pnpm/nanoid@5.1.16/node_modules/nanoid/index.js
+var POOL_SIZE_MULTIPLIER = 128;
+var pool;
+var poolOffset;
+function fillPool(bytes) {
+  if (bytes < 0) throw new RangeError("Wrong ID size");
+  try {
+    if (!pool || pool.length < bytes) {
+      pool = Buffer.allocUnsafe(bytes * POOL_SIZE_MULTIPLIER);
+      import_node_crypto2.webcrypto.getRandomValues(pool);
+      poolOffset = 0;
+    } else if (poolOffset + bytes > pool.length) {
+      import_node_crypto2.webcrypto.getRandomValues(pool);
+      poolOffset = 0;
+    }
+  } catch (e5) {
+    pool = void 0;
+    throw e5;
+  }
+  poolOffset += bytes;
+}
+function random(bytes) {
+  fillPool(bytes |= 0);
+  return pool.subarray(poolOffset - bytes, poolOffset);
+}
+function customRandom(alphabet, defaultSize, getRandom) {
+  let safeByteCutoff = 256 - 256 % alphabet.length;
+  if (safeByteCutoff === 256) {
+    let mask = alphabet.length - 1;
+    return (size = defaultSize) => {
+      if (!size) return "";
+      let id2 = "";
+      while (true) {
+        let bytes = getRandom(size);
+        let i6 = size;
+        while (i6--) {
+          id2 += alphabet[bytes[i6] & mask];
+          if (id2.length >= size) return id2;
+        }
+      }
+    };
+  }
+  let step = Math.ceil(1.6 * 256 * defaultSize / safeByteCutoff);
+  return (size = defaultSize) => {
+    if (!size) return "";
+    let id2 = "";
+    while (true) {
+      let bytes = getRandom(step);
+      let i6 = step;
+      while (i6--) {
+        if (bytes[i6] < safeByteCutoff) {
+          id2 += alphabet[bytes[i6] % alphabet.length];
+          if (id2.length >= size) return id2;
+        }
+      }
+    }
+  };
+}
+function customAlphabet(alphabet, size = 21) {
+  return customRandom(alphabet, size, random);
+}
+function nanoid(size = 21) {
+  fillPool(size |= 0);
+  let id2 = "";
+  for (let i6 = poolOffset - size; i6 < poolOffset; i6++) {
+    id2 += urlAlphabet[pool[i6] & 63];
+  }
+  return id2;
+}
+
+// src/server/artifact-address.ts
+var newArtifactId = customAlphabet("0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz", 21);
 function artifactId(dir) {
   const file = import_node_path2.default.join(dir, ".artifact-id");
   let id2;
@@ -5275,7 +5359,7 @@ function artifactId(dir) {
     id2 = import_node_fs2.default.readFileSync(file, "utf8").trim();
   } catch (err) {
     if (err.code !== "ENOENT") throw err;
-    id2 = import_node_crypto2.default.randomBytes(16).toString("hex");
+    id2 = newArtifactId();
     try {
       import_node_fs2.default.writeFileSync(file, `${id2}
 `, { flag: "wx" });
@@ -5284,7 +5368,7 @@ function artifactId(dir) {
       return artifactId(dir);
     }
   }
-  if (!/^[a-f0-9]{32}$/.test(id2)) throw new Error(`Invalid artifact ID in ${file}`);
+  if (!isArtifactAddress(id2)) throw new Error(`Invalid artifact ID in ${file}`);
   return id2;
 }
 function artifactPath(root, type, slug) {
@@ -5351,7 +5435,7 @@ function readDocument(dir, id2) {
 }
 
 // node_modules/.pnpm/nanoid@6.0.2/node_modules/nanoid/url-alphabet/index.js
-var urlAlphabet = "57X6y3wQZNzYjJB2L_10pxbackgroundhimselfUTF-8DEMOGRAPHICSVqvt4KW9";
+var urlAlphabet2 = "57X6y3wQZNzYjJB2L_10pxbackgroundhimselfUTF-8DEMOGRAPHICSVqvt4KW9";
 
 // node_modules/.pnpm/nanoid@6.0.2/node_modules/nanoid/index.js
 var GET_RANDOM_LIMIT = 65536;
@@ -5363,14 +5447,14 @@ function fillRandom(buffer) {
     from = to3;
   }
 }
-function random(bytes) {
+function random2(bytes) {
   bytes |= 0;
   if (bytes < 0) throw new RangeError("Wrong ID size");
   let buffer = Buffer.allocUnsafe(bytes);
   fillRandom(buffer);
   return buffer;
 }
-function customRandom(alphabet, defaultSize, getRandom) {
+function customRandom2(alphabet, defaultSize, getRandom) {
   let safeByteCutoff = 256 - 256 % alphabet.length;
   if (safeByteCutoff === 256) {
     let mask = alphabet.length - 1;
@@ -5404,13 +5488,13 @@ function customRandom(alphabet, defaultSize, getRandom) {
   };
 }
 var POOL_MAX = GET_RANDOM_LIMIT / 2;
-function customAlphabet(alphabet, defaultSize = 21) {
+function customAlphabet2(alphabet, defaultSize = 21) {
   if (typeof alphabet !== "string" || !alphabet || alphabet.length > 256) {
-    return customRandom(alphabet, defaultSize, random);
+    return customRandom2(alphabet, defaultSize, random2);
   }
   for (let i6 = 0; i6 < alphabet.length; i6++) {
     if (alphabet.charCodeAt(i6) > 255) {
-      return customRandom(alphabet, defaultSize, random);
+      return customRandom2(alphabet, defaultSize, random2);
     }
   }
   let charCodes = Uint8Array.from(alphabet, (str) => {
@@ -5457,7 +5541,7 @@ function customAlphabet(alphabet, defaultSize = 21) {
     return pool2.substring(poolOffset2 - size, poolOffset2);
   };
 }
-var nanoid = customAlphabet(urlAlphabet);
+var nanoid2 = customAlphabet2(urlAlphabet2);
 
 // node_modules/.pnpm/@haklex+rich-litexml@0.58.0_typescript@5.9.3/node_modules/@haklex/rich-litexml/dist/src-CwO17cE7.js
 var impl = null;
@@ -5603,11 +5687,11 @@ function registerBuiltinReaders(registry2) {
   }));
 }
 var idAlphabet = "abcdefghijklmnopqrstuvwxyz0123456789";
-var makePollIdSuffix = customAlphabet(idAlphabet, 10);
-var makeOptionIdSuffix = customAlphabet(idAlphabet, 6);
-var makeChatParticipantId = customAlphabet(idAlphabet, 6);
-var makeChatMessageId = customAlphabet(idAlphabet, 8);
-var makeStepId = customAlphabet(idAlphabet, 8);
+var makePollIdSuffix = customAlphabet2(idAlphabet, 10);
+var makeOptionIdSuffix = customAlphabet2(idAlphabet, 6);
+var makeChatParticipantId = customAlphabet2(idAlphabet, 6);
+var makeChatMessageId = customAlphabet2(idAlphabet, 8);
+var makeStepId = customAlphabet2(idAlphabet, 8);
 function extractBlockId(el2) {
   const id2 = el2.getAttribute("id");
   return id2 ? { $: { blockId: id2 } } : {};
@@ -17610,42 +17694,6 @@ setPrototypeOf(Document4, Document2).prototype = Document2.prototype;
 // node_modules/.pnpm/@haklex+rich-litexml@0.58.0_typescript@5.9.3/node_modules/@haklex/rich-litexml/dist/node.mjs
 registerParseHTML((html) => parseHTML2(html).document);
 
-// node_modules/.pnpm/nanoid@5.1.16/node_modules/nanoid/index.js
-var import_node_crypto3 = require("node:crypto");
-
-// node_modules/.pnpm/nanoid@5.1.16/node_modules/nanoid/url-alphabet/index.js
-var urlAlphabet2 = "useandom-26T198340PX75pxJACKVERYMINDBUSHWOLF_GQZbfghjklqvwyzrict";
-
-// node_modules/.pnpm/nanoid@5.1.16/node_modules/nanoid/index.js
-var POOL_SIZE_MULTIPLIER = 128;
-var pool;
-var poolOffset;
-function fillPool(bytes) {
-  if (bytes < 0) throw new RangeError("Wrong ID size");
-  try {
-    if (!pool || pool.length < bytes) {
-      pool = Buffer.allocUnsafe(bytes * POOL_SIZE_MULTIPLIER);
-      import_node_crypto3.webcrypto.getRandomValues(pool);
-      poolOffset = 0;
-    } else if (poolOffset + bytes > pool.length) {
-      import_node_crypto3.webcrypto.getRandomValues(pool);
-      poolOffset = 0;
-    }
-  } catch (e5) {
-    pool = void 0;
-    throw e5;
-  }
-  poolOffset += bytes;
-}
-function nanoid2(size = 21) {
-  fillPool(size |= 0);
-  let id2 = "";
-  for (let i6 = poolOffset - size; i6 < poolOffset; i6++) {
-    id2 += urlAlphabet2[pool[i6] & 63];
-  }
-  return id2;
-}
-
 // src/shared/dynamic.ts
 var DYNAMIC_URL = /^assets\/[\w-][\w.-]*\.html$/;
 
@@ -17820,8 +17868,8 @@ function stampBlockIds(state) {
       seen.add(id2);
       return block;
     }
-    let fresh = nanoid2(8);
-    while (seen.has(fresh)) fresh = nanoid2(8);
+    let fresh = nanoid(8);
+    while (seen.has(fresh)) fresh = nanoid(8);
     seen.add(fresh);
     return { ...block, $: { ...block.$, blockId: fresh } };
   });
@@ -17838,7 +17886,7 @@ function boxDrawingDiagrams(state) {
 }
 
 // src/server/board-comments.ts
-var import_node_crypto4 = __toESM(require("node:crypto"), 1);
+var import_node_crypto3 = __toESM(require("node:crypto"), 1);
 var import_node_fs9 = __toESM(require("node:fs"), 1);
 var import_node_path8 = __toESM(require("node:path"), 1);
 
@@ -18578,10 +18626,10 @@ var documentRules = {
   agent: applyAgentOp
 };
 var noNames = { human: () => void 0, agent: () => void 0 };
-function createCommentStore(file, names = noNames, now = () => (/* @__PURE__ */ new Date()).toISOString(), newId = () => nanoid2(10)) {
+function createCommentStore(file, names = noNames, now = () => (/* @__PURE__ */ new Date()).toISOString(), newId = () => nanoid(10)) {
   return createStore(file, documentRules, names, now, newId);
 }
-function createStore(file, rules, names = noNames, now = () => (/* @__PURE__ */ new Date()).toISOString(), newId = () => nanoid2(10)) {
+function createStore(file, rules, names = noNames, now = () => (/* @__PURE__ */ new Date()).toISOString(), newId = () => nanoid(10)) {
   let current = rules.empty();
   let lastSeen = null;
   let warnings = [];
@@ -18701,7 +18749,7 @@ function fileHash(dir, relative) {
     const stamp2 = `${stat.size}:${stat.mtimeMs}`;
     const cached = hashCache.get(file);
     if (cached?.stamp === stamp2) return cached.hash;
-    const hash = import_node_crypto4.default.createHash("sha1").update(import_node_fs9.default.readFileSync(file)).digest("hex").slice(0, 12);
+    const hash = import_node_crypto3.default.createHash("sha1").update(import_node_fs9.default.readFileSync(file)).digest("hex").slice(0, 12);
     hashCache.set(file, { stamp: stamp2, hash });
     return hash;
   } catch {
@@ -89050,6 +89098,15 @@ function installTweaks(win, makeTools) {
   });
 }
 
+// src/server/strip-runtime.ts
+var HEAD = /<head(\s[^>]*)?>/i;
+var PROLOGUE = /^\s*(<!doctype[^>]*>)?\s*(<html(\s[^>]*)?>)?/i;
+var EMBEDDED_STYLE = "<style>:root{color-scheme:light dark;background:transparent}body{margin:0;font-family:var(--lobe-font-family,system-ui,-apple-system,sans-serif)}</style>";
+function injectionPoint(html) {
+  const head = HEAD.exec(html);
+  return head ? head.index + head[0].length : PROLOGUE.exec(html)?.[0].length ?? 0;
+}
+
 // src/server/inject.ts
 var RUNTIME = `(() => {
   const post = (message) => parent.postMessage(message, '*');
@@ -89152,10 +89209,7 @@ var RUNTIME = `(() => {
     }
   });
 })();`;
-var HEAD = /<head(\s[^>]*)?>/i;
-var PROLOGUE = /^\s*(<!doctype[^>]*>)?\s*(<html(\s[^>]*)?>)?/i;
 var RUNTIME_LINE = RUNTIME.split("\n").map((line) => line.trim()).join(" ");
-var EMBEDDED_STYLE = "<style>:root{color-scheme:light dark;background:transparent}body{margin:0;font-family:var(--lobe-font-family,system-ui,-apple-system,sans-serif)}</style>";
 var UI_MARKER = /<ryugi-(?!icon(?:\s|>))[a-z0-9-]+(?:\s|>)/i;
 var UI_META = /<meta[^>]+name=["']ryugi-ui["'][^>]*>/i;
 function injectRuntime(html, options = {}) {
@@ -89163,13 +89217,12 @@ function injectRuntime(html, options = {}) {
   const tag = `${options.embedded ? EMBEDDED_STYLE : ""}<script>${inspect || RUNTIME_LINE}</script>`;
   const ui2 = options.uiRuntimeUrl && !options.inspector && (UI_MARKER.test(html) || UI_META.test(html)) ? `<script defer src="${options.uiRuntimeUrl.replace(/"/g, "&quot;")}"></script>` : "";
   const icons = options.uiRuntimeUrl && (ui2 || /<ryugi-icon(?:\s|>)|<meta[^>]+name=["']ryugi-icons["']/i.test(html)) ? `<script defer src="${options.uiRuntimeUrl.replace(/ryugi-ui\.js$/, "ryugi-icons.js").replace(/"/g, "&quot;")}"></script>` : "";
-  const head = HEAD.exec(html);
-  const at7 = head ? head.index + head[0].length : PROLOGUE.exec(html)?.[0].length ?? 0;
+  const at7 = injectionPoint(html);
   return html.slice(0, at7) + tag + icons + ui2 + html.slice(at7);
 }
 
 // src/server/http.ts
-var import_node_crypto5 = __toESM(require("node:crypto"), 1);
+var import_node_crypto4 = __toESM(require("node:crypto"), 1);
 var import_node_fs11 = __toESM(require("node:fs"), 1);
 var import_node_path11 = __toESM(require("node:path"), 1);
 var MIME2 = {
@@ -89195,11 +89248,11 @@ var MIME2 = {
   ".webm": "video/webm"
 };
 var mimeOf = (file) => MIME2[import_node_path11.default.extname(file).toLowerCase()] ?? "application/octet-stream";
-var randomToken = () => import_node_crypto5.default.randomBytes(24).toString("base64url");
+var randomToken = () => import_node_crypto4.default.randomBytes(24).toString("base64url");
 function safeEqual(a5, b6) {
   const ab = Buffer.from(a5);
   const bb = Buffer.from(b6);
-  return ab.length === bb.length && import_node_crypto5.default.timingSafeEqual(ab, bb);
+  return ab.length === bb.length && import_node_crypto4.default.timingSafeEqual(ab, bb);
 }
 function parseCookies(header) {
   const cookies = {};
@@ -89714,7 +89767,7 @@ function createRelayClient(options) {
 }
 
 // src/server/ws.ts
-var import_node_crypto6 = __toESM(require("node:crypto"), 1);
+var import_node_crypto5 = __toESM(require("node:crypto"), 1);
 var WS_MAGIC = "258EAFA5-E914-47DA-95CA-C5AB0DC85B11";
 var OPCODE_TEXT = 1;
 var OPCODE_CLOSE = 8;
@@ -89722,7 +89775,7 @@ var OPCODE_PING = 9;
 var OPCODE_PONG = 10;
 var MAX_CLIENT_FRAME = 8 * 1024 * 1024;
 function acceptKey(clientKey) {
-  return import_node_crypto6.default.createHash("sha1").update(clientKey + WS_MAGIC).digest("base64");
+  return import_node_crypto5.default.createHash("sha1").update(clientKey + WS_MAGIC).digest("base64");
 }
 function encodeFrame(opcode, payload) {
   const len = payload.length;
@@ -89861,7 +89914,7 @@ function hostIdFor(credentialsFile2) {
 }
 
 // src/server/avatars.ts
-var import_node_crypto7 = require("node:crypto");
+var import_node_crypto6 = require("node:crypto");
 var AVATAR_ROUTE = /^\/api\/avatar\/([a-z]+)\/([^/]+)$/;
 var MAX_BYTES = 512 * 1024;
 var TIMEOUT_MS = 5e3;
@@ -89870,7 +89923,7 @@ var SOURCES = {
   gravatar: { valid: /^[0-9a-f]{64}$/, url: (id2) => `https://gravatar.com/avatar/${id2}?s=64&d=404` }
 };
 var githubAvatar = (login) => `/api/avatar/github/${login}`;
-var gravatarAvatar = (email) => `/api/avatar/gravatar/${(0, import_node_crypto7.createHash)("sha256").update(email.trim().toLowerCase()).digest("hex")}`;
+var gravatarAvatar = (email) => `/api/avatar/gravatar/${(0, import_node_crypto6.createHash)("sha256").update(email.trim().toLowerCase()).digest("hex")}`;
 function createAvatars(fetchImpl = fetch) {
   const cache = /* @__PURE__ */ new Map();
   const fetchAvatar = async (url) => {
@@ -89902,7 +89955,7 @@ function createAvatars(fetchImpl = fetch) {
 }
 
 // src/server/cloud.ts
-var import_node_crypto8 = __toESM(require("node:crypto"), 1);
+var import_node_crypto7 = __toESM(require("node:crypto"), 1);
 
 // src/shared/brand.ts
 var RYUGI_MARK_VIEWBOX = "0 0 512 512";
@@ -90324,7 +90377,7 @@ function createCloudRoutes(options) {
     const state = randomToken();
     const verifier = randomToken();
     pendingStates.set(state, { expires: now + LOGIN_STATE_TTL_MS, verifier });
-    const challenge = import_node_crypto8.default.createHash("sha256").update(verifier).digest("base64url");
+    const challenge = import_node_crypto7.default.createHash("sha256").update(verifier).digest("base64url");
     return `${origin}/auth/cli?port=${options.port()}&state=${state}&challenge=${challenge}`;
   };
   const cloudFetch = async (method, path24, body) => {
@@ -90408,7 +90461,7 @@ function createCloudRoutes(options) {
     } catch (err) {
       throw new CloudRefused(413, err.message);
     }
-    const sha = (data) => import_node_crypto8.default.createHash("sha256").update(data).digest("hex");
+    const sha = (data) => import_node_crypto7.default.createHash("sha256").update(data).digest("hex");
     const hashed = withCloudRuntime(ref.type, packed).map((file) => ({ ...file, hash: sha(file.data) }));
     const content = { title: inspected.title, payload: inspected.payload, files: hashed.map(({ path: path24, hash }) => ({ path: path24, hash })) };
     const fingerprint = sha(JSON.stringify({ title: inspected.title, payload: fingerprintPayload(inspected.payload), files: packed.map((file) => ({ path: file.path, hash: sha(file.data) })) }));
@@ -91017,7 +91070,7 @@ function renderThumbnail(artifact, value) {
 }
 
 // src/server/viewer-page.ts
-var import_node_crypto9 = require("node:crypto");
+var import_node_crypto8 = require("node:crypto");
 var escapeHtml2 = (value) => value.replace(/[&<>"']/g, (ch) => ({ "&": "&amp;", "<": "&lt;", ">": "&gt;", '"': "&quot;", "'": "&#39;" })[ch]);
 function viewerPage(template, page) {
   const locale = page.locale ?? "en";
@@ -91039,12 +91092,12 @@ function viewerPage(template, page) {
 }
 var INLINE_SCRIPT = /<script\b(?![^>]*\bsrc=)[^>]*>([\s\S]*?)<\/script>/gi;
 function allowInlineScripts(csp, html) {
-  const hashes = [...html.matchAll(INLINE_SCRIPT)].map(([, body]) => `'sha256-${(0, import_node_crypto9.createHash)("sha256").update(body).digest("base64")}'`);
+  const hashes = [...html.matchAll(INLINE_SCRIPT)].map(([, body]) => `'sha256-${(0, import_node_crypto8.createHash)("sha256").update(body).digest("base64")}'`);
   return hashes.length ? csp.replace(/script-src [^;]*/, (directive) => `${directive} ${hashes.join(" ")}`) : csp;
 }
 
 // src/server/auto-publish.ts
-var import_node_crypto10 = __toESM(require("node:crypto"), 1);
+var import_node_crypto9 = __toESM(require("node:crypto"), 1);
 var import_node_fs21 = __toESM(require("node:fs"), 1);
 var IDLE_MS = 5 * 60 * 1e3;
 var MAX_WAIT_MS = 15 * 60 * 1e3;
@@ -91079,7 +91132,7 @@ function createAutoPublisher(options) {
   const failures = /* @__PURE__ */ new Map();
   const save = () => writeJsonAtomic(options.stateFile, { dirty: [...dirty], notice, paused });
   const raise = (kind, message, upgradeUrl) => {
-    if (notice?.kind !== kind) notice = { id: import_node_crypto10.default.randomUUID(), kind, message, ...upgradeUrl ? { upgradeUrl } : {} };
+    if (notice?.kind !== kind) notice = { id: import_node_crypto9.default.randomUUID(), kind, message, ...upgradeUrl ? { upgradeUrl } : {} };
   };
   let idleTimer = null;
   let maxTimer = null;
@@ -91287,7 +91340,7 @@ var CLOSE_FLUSH_MS = 5e3;
 var DIRECT_RELAY_ROUTE = /^\/relay\/a\/([A-Za-z0-9_-]{1,64})$/;
 var SHELL_ROUTE = new RegExp(`^/(?:(${ARTIFACT_TYPES.join("|")})/([^/]+)/?)?$`);
 var API_ARTIFACT_ROUTE = /^\/api\/artifacts\/([^/]+)\/([^/]+)$/;
-var PREVIEW_ROUTE = /^\/preview\/(artboard|document|html)\/([a-z0-9][a-z0-9-]*)\/?$/;
+var PREVIEW_ROUTE = new RegExp(`^/preview/(artboard|document|html)/${ARTIFACT_LOCATOR_SOURCE}/?$`);
 var API_PREVIEW_ROUTE = /^\/api\/preview\/([^/]+)\/([^/]+)$/;
 var API_THUMBNAIL_ROUTE = /^\/api\/thumbnail\/([^/]+)\/([^/]+)\.svg$/;
 var API_DOCUMENT_ROUTE = /^\/api\/document\/([^/]+)\/(state|update|comments)$/;
@@ -91788,7 +91841,7 @@ async function startArtifactsServer(options) {
     }
     const thumbnailMatch = API_THUMBNAIL_ROUTE.exec(pathname);
     if (thumbnailMatch) {
-      const requested = artifactKeyOf(`${thumbnailMatch[1]}/${thumbnailMatch[2]}`);
+      const requested = artifactKeyOf(`${thumbnailMatch[1]}/${thumbnailMatch[2]}`, isArtifactLocator);
       let resolved = null;
       try {
         resolved = requested && resolveArtifactAddress(root, requested.type, requested.id);
@@ -91891,7 +91944,7 @@ async function startArtifactsServer(options) {
       return;
     }
     if (SHELL_ROUTE.test(pathname) || PREVIEW_ROUTE.test(pathname) || pathname === "/index.html") {
-      const requested = artifactKeyOf(pathname.replace(/^\/(?:preview\/)?/, "").replace(/\/$/, ""));
+      const requested = artifactKeyOf(pathname.replace(/^\/(?:preview\/)?/, "").replace(/\/$/, ""), isArtifactLocator);
       const resolved = requested && resolveArtifactAddress(root, requested.type, requested.id);
       const ref = resolved ?? requested;
       const dir = resolved?.dir;
@@ -92321,7 +92374,7 @@ function openReady(payload) {
 }
 
 // src/server/registry.ts
-var import_node_crypto11 = __toESM(require("node:crypto"), 1);
+var import_node_crypto10 = __toESM(require("node:crypto"), 1);
 var import_node_fs26 = __toESM(require("node:fs"), 1);
 var import_node_os = __toESM(require("node:os"), 1);
 var import_node_path22 = __toESM(require("node:path"), 1);
@@ -92330,7 +92383,7 @@ function registryDir(env = process.env, platform = process.platform, uid = proce
   if (platform === "win32") return import_node_path22.default.join(tmpdir, "ryugi", "servers");
   return `/tmp/ryugi-${uid}/servers`;
 }
-var fileFor = (dir, project) => import_node_path22.default.join(dir, `${import_node_crypto11.default.createHash("sha256").update(project).digest("hex").slice(0, 16)}.json`);
+var fileFor = (dir, project) => import_node_path22.default.join(dir, `${import_node_crypto10.default.createHash("sha256").update(project).digest("hex").slice(0, 16)}.json`);
 function verifyDir(dir) {
   if (process.platform === "win32") return;
   for (const target of [import_node_path22.default.dirname(dir), dir]) {
@@ -92375,7 +92428,7 @@ function touchEntry(dir, entry) {
 }
 
 // package.json
-var version = "1.42.2";
+var version = "1.44.0";
 
 // src/server/main.ts
 async function main() {