studiograph 1.3.48-next.223 → 1.3.48-next.224

package/dist/core/artifact-asset-resolution.d.ts

@@ -0,0 +1,90 @@
+/**
+ * The artifact asset-resolution contract.
+ *
+ * Every artifact render context resolves workspace-asset references in exactly
+ * ONE way, chosen once per render as an explicit `AssetResolution` value:
+ *
+ *   token    — in-app canvas / present + headless Playwright render (PNG/PDF/
+ *              inspect). URLs stay `/api/assets/...` and carry the `?at=`
+ *              capability token; CSP allowlists `<origin>/api/assets/` only.
+ *   share    — public share page. URLs are the token-scoped
+ *              `/api/share/<token>/asset/...` surface; CSP allowlists exactly
+ *              that token's path — never `/api/share/` broadly.
+ *   relative — self-contained HTML export. Bundled refs become relative
+ *              `./assets/...` paths; unbundled refs become labeled inline
+ *              placeholders. CSP carries NO network sources, unconditionally
+ *              (`file:` only, for opening from disk) — an exported file never
+ *              phones home, and a copy hosted on an http origin cannot beacon
+ *              same-origin either.
+ *   none     — no asset access (unsaved previews, tests).
+ *
+ * Both document builders (`buildArtifactSrcdoc` in the web runtime and
+ * `buildArtifactHtmlExport` in core) derive the URL rewrite AND the CSP from
+ * the SAME resolution value via `applyAssetResolution` / `artifactCsp`, so a
+ * context can never mix models — "URLs from one scheme, CSP from another"
+ * (the share-page broken-images class) is unrepresentable.
+ *
+ * Fail-closed: a malformed origin or share token yields NO network source and
+ * NO rewrite rather than a permissive or splicable CSP.
+ */
+export type AssetResolution = {
+    mode: 'token';
+    /** Artifact-asset capability token (`?at=`). Null while the mint is in
+     *  flight — the CSP already allowlists `/api/assets/` so the rebuilt
+     *  document with the token doesn't change policy, only URLs. */
+    token: string | null;
+    /** App origin the asset URLs resolve against (CSP sources need an
+     *  absolute origin; the sandboxed iframe inherits the parent base URL). */
+    origin: string;
+} | {
+    mode: 'share';
+    shareToken: string;
+    origin: string;
+} | {
+    mode: 'relative';
+    /** Decoded `assetId/filename` identity keys actually written into the
+     *  export bundle. Refs NOT in the set render as labeled placeholders —
+     *  never absolutized back to the workspace. Omitted = relativize all
+     *  (caller bundles every ref). */
+    bundledKeys?: Set<string>;
+} | {
+    mode: 'none';
+};
+export declare function isValidShareToken(token: string): boolean;
+/**
+ * The network source expressions (if any) the resolution adds to the asset
+ * CSP directives (`img-src` / `media-src` / `font-src`).
+ *
+ * D4 invariants (pinned by tests):
+ *  - token    → `<origin>/api/assets/` and nothing else
+ *  - share    → `<origin>/api/share/<token>/asset/` (the exact token path)
+ *  - relative → `file:` ONLY, so the bundled `./assets/...` files load when
+ *               the export is opened from disk. Deliberately NOT `'self'`:
+ *               on an http(s)-hosted copy, `'self'` would let artifact JS
+ *               beacon same-origin via img/media/font loads — "no network,
+ *               unconditionally" means a hosted export shows placeholders
+ *               instead (codex P1). A hostable export would be its own
+ *               explicit mode, not a widening of this one.
+ *  - none     → nothing
+ */
+export declare function artifactCspAssetSources(resolution: AssetResolution): string[];
+/**
+ * The full iframe/document Content-Security-Policy for an artifact render.
+ * Single definition for BOTH builders (web srcdoc + core HTML export) so the
+ * policy can't drift between contexts. The asset directives are derived from
+ * the resolution; everything else is the fixed sandbox posture (inline + blob
+ * scripts allowed, no eval, no network, no frames/objects/forms).
+ *
+ * `allowBaseOrigin` — the Playwright render path injects `<base href>` so
+ * root-relative asset URLs resolve in a `setContent` document; `base-uri`
+ * must then allow exactly that origin (everything else keeps `'none'`).
+ */
+export declare function artifactCsp(resolution?: AssetResolution, opts?: {
+    allowBaseOrigin?: string;
+}): string;
+/**
+ * Rewrite every workspace-asset URL in a built document according to the
+ * resolution. This is the ONLY url-rewrite exit in both builders — the same
+ * value that produced the CSP produces the URLs.
+ */
+export declare function applyAssetResolution(html: string, resolution?: AssetResolution): string;

package/dist/core/artifact-asset-resolution.js

@@ -0,0 +1,138 @@
+/**
+ * The artifact asset-resolution contract.
+ *
+ * Every artifact render context resolves workspace-asset references in exactly
+ * ONE way, chosen once per render as an explicit `AssetResolution` value:
+ *
+ *   token    — in-app canvas / present + headless Playwright render (PNG/PDF/
+ *              inspect). URLs stay `/api/assets/...` and carry the `?at=`
+ *              capability token; CSP allowlists `<origin>/api/assets/` only.
+ *   share    — public share page. URLs are the token-scoped
+ *              `/api/share/<token>/asset/...` surface; CSP allowlists exactly
+ *              that token's path — never `/api/share/` broadly.
+ *   relative — self-contained HTML export. Bundled refs become relative
+ *              `./assets/...` paths; unbundled refs become labeled inline
+ *              placeholders. CSP carries NO network sources, unconditionally
+ *              (`file:` only, for opening from disk) — an exported file never
+ *              phones home, and a copy hosted on an http origin cannot beacon
+ *              same-origin either.
+ *   none     — no asset access (unsaved previews, tests).
+ *
+ * Both document builders (`buildArtifactSrcdoc` in the web runtime and
+ * `buildArtifactHtmlExport` in core) derive the URL rewrite AND the CSP from
+ * the SAME resolution value via `applyAssetResolution` / `artifactCsp`, so a
+ * context can never mix models — "URLs from one scheme, CSP from another"
+ * (the share-page broken-images class) is unrepresentable.
+ *
+ * Fail-closed: a malformed origin or share token yields NO network source and
+ * NO rewrite rather than a permissive or splicable CSP.
+ */
+import { appendAssetToken, rewriteAssetsToRelative, rewriteAssetsToShare, } from './artifact-asset-urls.js';
+/** Normalize + validate an origin for use as a CSP source / URL prefix.
+ *  Returns the bare `scheme://host[:port]` origin, or null when the value
+ *  isn't a plain http(s) origin (fail-closed: no CSP source). */
+function safeOrigin(value) {
+    try {
+        const url = new URL(value);
+        if (url.protocol !== 'http:' && url.protocol !== 'https:')
+            return null;
+        return url.origin;
+    }
+    catch {
+        return null;
+    }
+}
+/** Share tokens are server-minted (`shr_` + base64url), so anything outside
+ *  this charset is not a token — and must never be spliced into a CSP source
+ *  or URL path (`;`/whitespace would terminate the directive; `/`/`..` would
+ *  widen the path scope). */
+const SHARE_TOKEN_RE = /^[A-Za-z0-9._-]+$/;
+export function isValidShareToken(token) {
+    return token.length > 0 && SHARE_TOKEN_RE.test(token);
+}
+/**
+ * The network source expressions (if any) the resolution adds to the asset
+ * CSP directives (`img-src` / `media-src` / `font-src`).
+ *
+ * D4 invariants (pinned by tests):
+ *  - token    → `<origin>/api/assets/` and nothing else
+ *  - share    → `<origin>/api/share/<token>/asset/` (the exact token path)
+ *  - relative → `file:` ONLY, so the bundled `./assets/...` files load when
+ *               the export is opened from disk. Deliberately NOT `'self'`:
+ *               on an http(s)-hosted copy, `'self'` would let artifact JS
+ *               beacon same-origin via img/media/font loads — "no network,
+ *               unconditionally" means a hosted export shows placeholders
+ *               instead (codex P1). A hostable export would be its own
+ *               explicit mode, not a widening of this one.
+ *  - none     → nothing
+ */
+export function artifactCspAssetSources(resolution) {
+    switch (resolution.mode) {
+        case 'token': {
+            const origin = safeOrigin(resolution.origin);
+            return origin ? [`${origin}/api/assets/`] : [];
+        }
+        case 'share': {
+            const origin = safeOrigin(resolution.origin);
+            if (!origin || !isValidShareToken(resolution.shareToken))
+                return [];
+            return [`${origin}/api/share/${resolution.shareToken}/asset/`];
+        }
+        case 'relative':
+            return ['file:'];
+        case 'none':
+            return [];
+    }
+}
+/**
+ * The full iframe/document Content-Security-Policy for an artifact render.
+ * Single definition for BOTH builders (web srcdoc + core HTML export) so the
+ * policy can't drift between contexts. The asset directives are derived from
+ * the resolution; everything else is the fixed sandbox posture (inline + blob
+ * scripts allowed, no eval, no network, no frames/objects/forms).
+ *
+ * `allowBaseOrigin` — the Playwright render path injects `<base href>` so
+ * root-relative asset URLs resolve in a `setContent` document; `base-uri`
+ * must then allow exactly that origin (everything else keeps `'none'`).
+ */
+export function artifactCsp(resolution = { mode: 'none' }, opts = {}) {
+    const sources = artifactCspAssetSources(resolution);
+    const withAsset = (base) => (sources.length ? `${base} ${sources.join(' ')}` : base);
+    const baseOrigin = opts.allowBaseOrigin ? safeOrigin(opts.allowBaseOrigin) : null;
+    return [
+        "default-src 'none'",
+        baseOrigin ? `base-uri ${baseOrigin}` : "base-uri 'none'",
+        "connect-src 'none'",
+        withAsset('font-src data: blob:'),
+        "form-action 'none'",
+        "frame-src 'none'",
+        withAsset('img-src data: blob:'),
+        withAsset('media-src data: blob:'),
+        "object-src 'none'",
+        "script-src 'unsafe-inline' blob:",
+        "style-src 'unsafe-inline'",
+    ].join('; ');
+}
+/**
+ * Rewrite every workspace-asset URL in a built document according to the
+ * resolution. This is the ONLY url-rewrite exit in both builders — the same
+ * value that produced the CSP produces the URLs.
+ */
+export function applyAssetResolution(html, resolution = { mode: 'none' }) {
+    switch (resolution.mode) {
+        case 'token':
+            return resolution.token ? appendAssetToken(html, resolution.token) : html;
+        case 'share':
+            // Fail-closed symmetry: an invalid token produced no CSP source above,
+            // so don't emit URLs either — the refs stay `/api/assets/...`, which the
+            // share CSP blocks (visible as missing images, never as a leak).
+            return isValidShareToken(resolution.shareToken)
+                ? rewriteAssetsToShare(html, resolution.shareToken)
+                : html;
+        case 'relative':
+            return rewriteAssetsToRelative(html, './assets', { bundledKeys: resolution.bundledKeys });
+        case 'none':
+            return html;
+    }
+}
+//# sourceMappingURL=artifact-asset-resolution.js.map

package/dist/core/artifact-asset-resolution.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"artifact-asset-resolution.js","sourceRoot":"","sources":["../../src/core/artifact-asset-resolution.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAEH,OAAO,EACL,gBAAgB,EAChB,uBAAuB,EACvB,oBAAoB,GACrB,MAAM,0BAA0B,CAAC;AAwBlC;;iEAEiE;AACjE,SAAS,UAAU,CAAC,KAAa;IAC/B,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;QAC3B,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QACvE,OAAO,GAAG,CAAC,MAAM,CAAC;IACpB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;6BAG6B;AAC7B,MAAM,cAAc,GAAG,mBAAmB,CAAC;AAE3C,MAAM,UAAU,iBAAiB,CAAC,KAAa;IAC7C,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AACxD,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,uBAAuB,CAAC,UAA2B;IACjE,QAAQ,UAAU,CAAC,IAAI,EAAE,CAAC;QACxB,KAAK,OAAO,CAAC,CAAC,CAAC;YACb,MAAM,MAAM,GAAG,UAAU,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;YAC7C,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,MAAM,cAAc,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACjD,CAAC;QACD,KAAK,OAAO,CAAC,CAAC,CAAC;YACb,MAAM,MAAM,GAAG,UAAU,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;YAC7C,IAAI,CAAC,MAAM,IAAI,CAAC,iBAAiB,CAAC,UAAU,CAAC,UAAU,CAAC;gBAAE,OAAO,EAAE,CAAC;YACpE,OAAO,CAAC,GAAG,MAAM,cAAc,UAAU,CAAC,UAAU,SAAS,CAAC,CAAC;QACjE,CAAC;QACD,KAAK,UAAU;YACb,OAAO,CAAC,OAAO,CAAC,CAAC;QACnB,KAAK,MAAM;YACT,OAAO,EAAE,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,WAAW,CACzB,aAA8B,EAAE,IAAI,EAAE,MAAM,EAAE,EAC9C,OAAqC,EAAE;IAEvC,MAAM,OAAO,GAAG,uBAAuB,CAAC,UAAU,CAAC,CAAC;IACpD,MAAM,SAAS,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IAC7F,MAAM,UAAU,GAAG,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAClF,OAAO;QACL,oBAAoB;QACpB,UAAU,CAAC,CAAC,CAAC,YAAY,UAAU,EAAE,CAAC,CAAC,CAAC,iBAAiB;QACzD,oBAAoB;QACpB,SAAS,CAAC,sBAAsB,CAAC;QACjC,oBAAoB;QACpB,kBAAkB;QAClB,SAAS,CAAC,qBAAqB,CAAC;QAChC,SAAS,CAAC,uBAAuB,CAAC;QAClC,mBAAmB;QACnB,kCAAkC;QAClC,2BAA2B;KAC5B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAAC,IAAY,EAAE,aAA8B,EAAE,IAAI,EAAE,MAAM,EAAE;IAC/F,QAAQ,UAAU,CAAC,IAAI,EAAE,CAAC;QACxB,KAAK,OAAO;YACV,OAAO,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,gBAAgB,CAAC,IAAI,EAAE,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAC5E,KAAK,OAAO;YACV,uEAAuE;YACvE,yEAAyE;YACzE,iEAAiE;YACjE,OAAO,iBAAiB,CAAC,UAAU,CAAC,UAAU,CAAC;gBAC7C,CAAC,CAAC,oBAAoB,CAAC,IAAI,EAAE,UAAU,CAAC,UAAU,CAAC;gBACnD,CAAC,CAAC,IAAI,CAAC;QACX,KAAK,UAAU;YACb,OAAO,uBAAuB,CAAC,IAAI,EAAE,UAAU,EAAE,EAAE,WAAW,EAAE,UAAU,CAAC,WAAW,EAAE,CAAC,CAAC;QAC5F,KAAK,MAAM;YACT,OAAO,IAAI,CAAC;IAChB,CAAC;AACH,CAAC"}

package/dist/core/artifact-asset-urls.d.ts

@@ -4,7 +4,12 @@
  * `/api/assets/...` references, so they can't drift:
  *   - mint  → enumerate the exact asset keys an artifact references (allowlist)
  *   - in-app srcdoc + headless PNG/PDF render → append the `?at=` capability token
- *   - HTML export → rewrite to relative `./assets/...` paths
+ *   - public share page → rewrite to `/api/share/<token>/asset/...` paths
+ *   - HTML export → rewrite to relative `./assets/...` paths (placeholders for
+ *     anything not bundled)
+ * Which rewrite applies is decided once per render by the `AssetResolution`
+ * contract (artifact-asset-resolution.ts), which derives the CSP from the
+ * same value.
  *
  * Matches BOTH forms that appear in bundles:
  *   - root-relative   `/api/assets/<assetId>/<filename>`
@@ -28,6 +33,28 @@ export interface ArtifactAssetRef {
     assetId: string;
     filename: string;
 }
+/**
+ * Decode a URL filename segment back to the RAW stored filename — the canonical
+ * IDENTITY used to match the asset index (`row.filename`), the capability-token
+ * allowlist (`artifactAssetKey`), and the decoded serve-route path param. The URL
+ * segment itself is percent-encoded by `encodeAssetFilename` (e.g. a screenshot
+ * `page(1).png` → `page%281%29.png`); everything that reasons about asset identity
+ * must use this decoded form, or it won't match the raw name the index/serve speak
+ * (which is exactly the encoded-vs-raw mismatch that left special-char images 404).
+ * URL emitters below keep the encoded segment. Falls back to the raw input on a
+ * malformed `%` sequence (never throws).
+ */
+export declare function decodeAssetFilenameSegment(segment: string): string;
+/**
+ * Percent-encode a RAW stored filename into the URL segment form — the single
+ * inverse of {@link decodeAssetFilenameSegment} (encode on emit, decode on
+ * parse). `encodeURIComponent` alone is not enough: it leaves `!~*'()`
+ * unescaped, and `()` are exactly the delimiters `ASSET_URL_RE` rejects — so
+ * encode those too. Result chars ∈ `[A-Za-z0-9._-]` + `%XX`, which the
+ * matcher's filename class accepts; the serve route decodes the path param
+ * back to the raw stored filename, so the round-trip is exact.
+ */
+export declare function encodeAssetFilename(filename: string): string;
 /** Every distinct asset referenced in the text, in first-seen order. `filename`
  *  and `key` are the DECODED (raw) identity — matchable against the asset index
  *  and token allowlist — not the percent-encoded URL segment. */
@@ -41,16 +68,35 @@ export declare function findArtifactAssetRefs(text: string): ArtifactAssetRef[];
  */
 export declare function appendAssetToken(text: string, token: string): string;
 /**
- * Rewrite asset URLs for the self-contained HTML export zip. Refs whose key is
- * in `bundledKeys` (the assets actually written into the zip) become relative
+ * Rewrite asset URLs to the public-share scheme:
+ * `/api/share/<shareToken>/asset/<assetId>/<filename>`. Used by the share-mode
+ * asset resolution so the document's URLs and its CSP allowlist come from the
+ * same token. The filename segment stays in its encoded URL form. Idempotent:
+ * the output no longer matches the `/api/assets/` grammar, and the server-side
+ * share read may have already rewritten the body — re-applying is a no-op.
+ * Legacy 3-segment URLs aren't matched and pass through unchanged.
+ */
+export declare function rewriteAssetsToShare(text: string, shareToken: string): string;
+/**
+ * A labeled inline placeholder for an asset the export could not bundle
+ * (exporter lacks access / blob missing): a neutral framed box carrying the
+ * filename, as a `data:image/svg+xml` URI so it renders wherever the original
+ * URL appeared (`<img src>`, `srcset`, CSS `url(...)`) under the export's
+ * no-network CSP. Every output char is `%XX`-escaped past encodeURIComponent's
+ * leftovers (`!~*'()`), so the URI never carries a quote/paren/comma that
+ * would terminate an attribute, CSS `url()`, or srcset candidate.
+ */
+export declare function assetPlaceholderDataUri(filename: string): string;
+/**
+ * Rewrite asset URLs for the self-contained HTML export. Refs whose key is in
+ * `bundledKeys` (the assets actually written into the zip) become relative
  * `./assets/<id>/<file>` (offline-resolvable); any OTHER `/api/assets/...` ref
- * (cross-repo / unauthorized — not bundled) is left absolute so it still
- * resolves online: an already-absolute URL is kept, a root-relative one is
- * prefixed with `origin`. With no `bundledKeys` every ref is relativized
- * (caller bundles all of them). Legacy 3-segment URLs aren't matched and pass
- * through unchanged.
+ * (exporter lacks access / blob missing — not bundled) becomes an explicit
+ * labeled placeholder. NEVER absolutized back to the workspace: an exported
+ * file must not phone home, and its no-network CSP would block the load anyway
+ * (D11b). With no `bundledKeys` every ref is relativized (caller bundles all
+ * of them). Legacy 3-segment URLs aren't matched and pass through unchanged.
  */
 export declare function rewriteAssetsToRelative(text: string, baseDir?: string, opts?: {
     bundledKeys?: Set<string>;
-    origin?: string;
 }): string;

package/dist/core/artifact-asset-urls.js

@@ -4,7 +4,12 @@
  * `/api/assets/...` references, so they can't drift:
  *   - mint  → enumerate the exact asset keys an artifact references (allowlist)
  *   - in-app srcdoc + headless PNG/PDF render → append the `?at=` capability token
- *   - HTML export → rewrite to relative `./assets/...` paths
+ *   - public share page → rewrite to `/api/share/<token>/asset/...` paths
+ *   - HTML export → rewrite to relative `./assets/...` paths (placeholders for
+ *     anything not bundled)
+ * Which rewrite applies is decided once per render by the `AssetResolution`
+ * contract (artifact-asset-resolution.ts), which derives the CSP from the
+ * same value.
  *
  * Matches BOTH forms that appear in bundles:
  *   - root-relative   `/api/assets/<assetId>/<filename>`
@@ -38,7 +43,7 @@ const ASSET_URL_RE = /(https?:\/\/[^\s"'()<>\/]+)?\/api\/assets\/([A-Za-z0-9._%-
  * URL emitters below keep the encoded segment. Falls back to the raw input on a
  * malformed `%` sequence (never throws).
  */
-function decodeAssetFilenameSegment(segment) {
+export function decodeAssetFilenameSegment(segment) {
     try {
         return decodeURIComponent(segment);
     }
@@ -46,6 +51,18 @@ function decodeAssetFilenameSegment(segment) {
         return segment;
     }
 }
+/**
+ * Percent-encode a RAW stored filename into the URL segment form — the single
+ * inverse of {@link decodeAssetFilenameSegment} (encode on emit, decode on
+ * parse). `encodeURIComponent` alone is not enough: it leaves `!~*'()`
+ * unescaped, and `()` are exactly the delimiters `ASSET_URL_RE` rejects — so
+ * encode those too. Result chars ∈ `[A-Za-z0-9._-]` + `%XX`, which the
+ * matcher's filename class accepts; the serve route decodes the path param
+ * back to the raw stored filename, so the round-trip is exact.
+ */
+export function encodeAssetFilename(filename) {
+    return encodeURIComponent(filename).replace(/[!~*'()]/g, (c) => `%${c.charCodeAt(0).toString(16).toUpperCase()}`);
+}
 /** Every distinct asset referenced in the text, in first-seen order. `filename`
  *  and `key` are the DECODED (raw) identity — matchable against the asset index
  *  and token allowlist — not the percent-encoded URL segment. */
@@ -77,31 +94,66 @@ export function appendAssetToken(text, token) {
     });
 }
 /**
- * Rewrite asset URLs for the self-contained HTML export zip. Refs whose key is
- * in `bundledKeys` (the assets actually written into the zip) become relative
+ * Rewrite asset URLs to the public-share scheme:
+ * `/api/share/<shareToken>/asset/<assetId>/<filename>`. Used by the share-mode
+ * asset resolution so the document's URLs and its CSP allowlist come from the
+ * same token. The filename segment stays in its encoded URL form. Idempotent:
+ * the output no longer matches the `/api/assets/` grammar, and the server-side
+ * share read may have already rewritten the body — re-applying is a no-op.
+ * Legacy 3-segment URLs aren't matched and pass through unchanged.
+ */
+export function rewriteAssetsToShare(text, shareToken) {
+    return text.replace(ASSET_URL_RE, (_full, _origin, assetId, filename) => `/api/share/${shareToken}/asset/${assetId}/${filename}`);
+}
+/** Escape text for embedding inside an SVG source string. */
+function escapeXml(s) {
+    return s.replace(/[&<>"']/g, (c) => c === '&' ? '&amp;' : c === '<' ? '&lt;' : c === '>' ? '&gt;' : c === '"' ? '&quot;' : '&#39;');
+}
+/**
+ * A labeled inline placeholder for an asset the export could not bundle
+ * (exporter lacks access / blob missing): a neutral framed box carrying the
+ * filename, as a `data:image/svg+xml` URI so it renders wherever the original
+ * URL appeared (`<img src>`, `srcset`, CSS `url(...)`) under the export's
+ * no-network CSP. Every output char is `%XX`-escaped past encodeURIComponent's
+ * leftovers (`!~*'()`), so the URI never carries a quote/paren/comma that
+ * would terminate an attribute, CSS `url()`, or srcset candidate.
+ */
+export function assetPlaceholderDataUri(filename) {
+    const label = filename.length > 48 ? `${filename.slice(0, 45)}…` : filename;
+    const svg = '<svg xmlns="http://www.w3.org/2000/svg" width="640" height="360" viewBox="0 0 640 360">' +
+        '<rect width="640" height="360" fill="#f4f4f4"/>' +
+        '<rect x="0.5" y="0.5" width="639" height="359" fill="none" stroke="#d0d0d0"/>' +
+        '<g fill="#8a8a8a" font-family="system-ui, -apple-system, sans-serif" text-anchor="middle">' +
+        '<text x="320" y="168" font-size="15">Image not included in export</text>' +
+        `<text x="320" y="196" font-size="13">${escapeXml(label)}</text>` +
+        '</g></svg>';
+    // encodeAssetFilename is the strict percent-encoder (encodeURIComponent +
+    // the `!~*'()` leftovers) — exactly the delimiter-free guarantee the URI
+    // needs, applied to the whole SVG payload.
+    return `data:image/svg+xml,${encodeAssetFilename(svg)}`;
+}
+/**
+ * Rewrite asset URLs for the self-contained HTML export. Refs whose key is in
+ * `bundledKeys` (the assets actually written into the zip) become relative
  * `./assets/<id>/<file>` (offline-resolvable); any OTHER `/api/assets/...` ref
- * (cross-repo / unauthorized — not bundled) is left absolute so it still
- * resolves online: an already-absolute URL is kept, a root-relative one is
- * prefixed with `origin`. With no `bundledKeys` every ref is relativized
- * (caller bundles all of them). Legacy 3-segment URLs aren't matched and pass
- * through unchanged.
+ * (exporter lacks access / blob missing — not bundled) becomes an explicit
+ * labeled placeholder. NEVER absolutized back to the workspace: an exported
+ * file must not phone home, and its no-network CSP would block the load anyway
+ * (D11b). With no `bundledKeys` every ref is relativized (caller bundles all
+ * of them). Legacy 3-segment URLs aren't matched and pass through unchanged.
  */
 export function rewriteAssetsToRelative(text, baseDir = './assets', opts = {}) {
     const prefix = baseDir.replace(/\/+$/, '');
-    const originPrefix = opts.origin ? opts.origin.replace(/\/+$/, '') : null;
-    return text.replace(ASSET_URL_RE, (full, origin, assetId, filename, query) => {
+    return text.replace(ASSET_URL_RE, (_full, _origin, assetId, filename) => {
         // `bundledKeys` are DECODED identity keys (artifactAssetKey over the raw
         // filename), so decode the URL segment to look them up; the rewritten URL
         // itself keeps the encoded segment (the browser decodes it back to the
         // raw on-disk path in the export zip).
-        if (!opts.bundledKeys || opts.bundledKeys.has(`${assetId}/${decodeAssetFilenameSegment(filename)}`)) {
+        const raw = decodeAssetFilenameSegment(filename);
+        if (!opts.bundledKeys || opts.bundledKeys.has(`${assetId}/${raw}`)) {
             return `${prefix}/${assetId}/${filename}`;
         }
-        if (origin)
-            return full; // already absolute → resolves online as-is
-        if (originPrefix)
-            return `${originPrefix}/api/assets/${assetId}/${filename}${query ?? ''}`;
-        return full;
+        return assetPlaceholderDataUri(raw);
     });
 }
 //# sourceMappingURL=artifact-asset-urls.js.map

package/dist/core/artifact-asset-urls.js.map

@@ -1 +1 @@
-{"version":3,"file":"artifact-asset-urls.js","sourceRoot":"","sources":["../../src/core/artifact-asset-urls.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AASH,iGAAiG;AACjG,gFAAgF;AAChF,6EAA6E;AAC7E,wEAAwE;AACxE,MAAM,YAAY,GAChB,yHAAyH,CAAC;AAE5H;;;;;;;;;;GAUG;AACH,SAAS,0BAA0B,CAAC,OAAe;IACjD,IAAI,CAAC;QACH,OAAO,kBAAkB,CAAC,OAAO,CAAC,CAAC;IACrC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,OAAO,CAAC;IACjB,CAAC;AACH,CAAC;AAED;;iEAEiE;AACjE,MAAM,UAAU,qBAAqB,CAAC,IAAY;IAChD,MAAM,IAAI,GAAG,IAAI,GAAG,EAA4B,CAAC;IACjD,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;QAC5C,MAAM,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QACrB,MAAM,QAAQ,GAAG,0BAA0B,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAClD,MAAM,GAAG,GAAG,GAAG,OAAO,IAAI,QAAQ,EAAE,CAAC;QACrC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC;IAChE,CAAC;IACD,OAAO,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;AAC5B,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAAY,EAAE,KAAa;IAC1D,MAAM,GAAG,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC;IACtC,OAAO,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAyB,EAAE,EAAE;QAChG,MAAM,IAAI,GAAG,GAAG,MAAM,IAAI,EAAE,eAAe,OAAO,IAAI,QAAQ,EAAE,CAAC;QACjE,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3F,MAAM,CAAC,IAAI,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;QACzB,OAAO,GAAG,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;IACvC,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,uBAAuB,CACrC,IAAY,EACZ,OAAO,GAAG,UAAU,EACpB,OAAuD,EAAE;IAEzD,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC3C,MAAM,YAAY,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC1E,OAAO,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAyB,EAAE,EAAE;QAC/F,yEAAyE;QACzE,0EAA0E;QAC1E,uEAAuE;QACvE,uCAAuC;QACvC,IAAI,CAAC,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,OAAO,IAAI,0BAA0B,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC;YACpG,OAAO,GAAG,MAAM,IAAI,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC5C,CAAC;QACD,IAAI,MAAM;YAAE,OAAO,IAAI,CAAC,CAAC,2CAA2C;QACpE,IAAI,YAAY;YAAE,OAAO,GAAG,YAAY,eAAe,OAAO,IAAI,QAAQ,GAAG,KAAK,IAAI,EAAE,EAAE,CAAC;QAC3F,OAAO,IAAI,CAAC;IACd,CAAC,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"artifact-asset-urls.js","sourceRoot":"","sources":["../../src/core/artifact-asset-urls.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AASH,iGAAiG;AACjG,gFAAgF;AAChF,6EAA6E;AAC7E,wEAAwE;AACxE,MAAM,YAAY,GAChB,yHAAyH,CAAC;AAE5H;;;;;;;;;;GAUG;AACH,MAAM,UAAU,0BAA0B,CAAC,OAAe;IACxD,IAAI,CAAC;QACH,OAAO,kBAAkB,CAAC,OAAO,CAAC,CAAC;IACrC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,OAAO,CAAC;IACjB,CAAC;AACH,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,mBAAmB,CAAC,QAAgB;IAClD,OAAO,kBAAkB,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;AACpH,CAAC;AAED;;iEAEiE;AACjE,MAAM,UAAU,qBAAqB,CAAC,IAAY;IAChD,MAAM,IAAI,GAAG,IAAI,GAAG,EAA4B,CAAC;IACjD,KAAK,MAAM,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;QAC5C,MAAM,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;QACrB,MAAM,QAAQ,GAAG,0BAA0B,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAClD,MAAM,GAAG,GAAG,GAAG,OAAO,IAAI,QAAQ,EAAE,CAAC;QACrC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,QAAQ,EAAE,CAAC,CAAC;IAChE,CAAC;IACD,OAAO,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;AAC5B,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,gBAAgB,CAAC,IAAY,EAAE,KAAa;IAC1D,MAAM,GAAG,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC;IACtC,OAAO,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,KAAyB,EAAE,EAAE;QAChG,MAAM,IAAI,GAAG,GAAG,MAAM,IAAI,EAAE,eAAe,OAAO,IAAI,QAAQ,EAAE,CAAC;QACjE,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3F,MAAM,CAAC,IAAI,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;QACzB,OAAO,GAAG,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;IACvC,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,oBAAoB,CAAC,IAAY,EAAE,UAAkB;IACnE,OAAO,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,CACtE,cAAc,UAAU,UAAU,OAAO,IAAI,QAAQ,EAAE,CAAC,CAAC;AAC7D,CAAC;AAED,6DAA6D;AAC7D,SAAS,SAAS,CAAC,CAAS;IAC1B,OAAO,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC,EAAE,EAAE,CACjC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;AACpG,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,uBAAuB,CAAC,QAAgB;IACtD,MAAM,KAAK,GAAG,QAAQ,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC,CAAC,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC;IAC5E,MAAM,GAAG,GACP,yFAAyF;QACzF,iDAAiD;QACjD,+EAA+E;QAC/E,4FAA4F;QAC5F,0EAA0E;QAC1E,wCAAwC,SAAS,CAAC,KAAK,CAAC,SAAS;QACjE,YAAY,CAAC;IACf,0EAA0E;IAC1E,yEAAyE;IACzE,2CAA2C;IAC3C,OAAO,sBAAsB,mBAAmB,CAAC,GAAG,CAAC,EAAE,CAAC;AAC1D,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,uBAAuB,CACrC,IAAY,EACZ,OAAO,GAAG,UAAU,EACpB,OAAsC,EAAE;IAExC,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC3C,OAAO,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE;QACtE,yEAAyE;QACzE,0EAA0E;QAC1E,uEAAuE;QACvE,uCAAuC;QACvC,MAAM,GAAG,GAAG,0BAA0B,CAAC,QAAQ,CAAC,CAAC;QACjD,IAAI,CAAC,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,OAAO,IAAI,GAAG,EAAE,CAAC,EAAE,CAAC;YACnE,OAAO,GAAG,MAAM,IAAI,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC5C,CAAC;QACD,OAAO,uBAAuB,CAAC,GAAG,CAAC,CAAC;IACtC,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/core/artifact-export.d.ts

@@ -1,4 +1,5 @@
 import type { ArtifactBundle, ArtifactLibraryKey } from './artifact-bundle.js';
+import { type AssetResolution } from './artifact-asset-resolution.js';
 /** The neutral gray the hosted app presents artifacts on. The web stage rule
  *  (.artifact-stage[data-view-mode='fullscreen'] in ArtifactEntityView.svelte)
  *  must use the same value — a source-sync test pins it. */
@@ -9,13 +10,18 @@ export type ArtifactLibrarySources = Partial<Record<ArtifactLibrarySourceKey, st
 export declare function artifactExportFilename(bundle: Pick<ArtifactBundle, 'artifactId' | 'title'>, extension?: ArtifactExportExtension): string;
 export interface ArtifactHtmlExportOptions {
     context?: 'editor' | 'fullscreen' | 'export';
+    /** Base URL for the headless (Playwright) render path so root-relative
+     *  `/api/assets/...` URLs resolve in a `setContent` document. The CSP's
+     *  `base-uri` is widened to exactly this origin. Never set on the
+     *  standalone HTML export — a downloaded file must not phone home. */
     baseHref?: string;
     includeRenderHostStyles?: boolean;
     librarySources?: ArtifactLibrarySources;
-    /** Artifact-asset capability token. When set, `?at=<token>` is appended to
-     *  every `/api/assets/...` ref so a headless render (PNG/PDF) — which loads
-     *  the doc with no session cookie — can fetch workspace images. Not used for
-     *  the self-contained HTML zip (that rewrites refs to relative paths). */
-    assetToken?: string;
+    /** How workspace-asset refs resolve in THIS render — drives both the URL
+     *  rewrite and the document CSP from one value (see
+     *  artifact-asset-resolution.ts). Headless PNG/PDF passes token mode; the
+     *  self-contained HTML export passes relative mode. Defaults to none
+     *  (no asset access). */
+    assets?: AssetResolution;
 }
 export declare function buildArtifactHtmlExport(bundle: ArtifactBundle, options?: ArtifactHtmlExportOptions): string;

package/dist/core/artifact-export.js

@@ -1,5 +1,5 @@
 import { encodeBase64, escapeAttribute, escapeHtml, escapeScript, escapeStyle, } from './artifact-escape.js';
-import { appendAssetToken } from './artifact-asset-urls.js';
+import { applyAssetResolution, artifactCsp } from './artifact-asset-resolution.js';
 import { frameStepperSelector, frameStepperVisibilityCss } from './artifact-frame-selectors.js';
 /** The neutral gray the hosted app presents artifacts on. The web stage rule
  *  (.artifact-stage[data-view-mode='fullscreen'] in ArtifactEntityView.svelte)
@@ -255,8 +255,16 @@ function addAttributesToHtmlTag(html, attrs) {
     });
 }
 function headAdditions(bundle, entry, options) {
+    // The CSP is derived from the SAME AssetResolution that rewrites the asset
+    // URLs (finalize step), so this document can't carry URLs from one asset
+    // model and a policy from another. `base-uri` opens to exactly the
+    // baseHref's origin when the headless render injects a <base> tag.
+    // Safe unescaped: every dynamic CSP part is validated upstream (origins are
+    // URL-parsed, share tokens charset-checked) — no quote can reach here.
+    const csp = artifactCsp(options.assets, { allowBaseOrigin: options.baseHref });
     const additions = [
         '<meta charset="utf-8">',
+        `<meta http-equiv="Content-Security-Policy" content="${csp}">`,
         options.baseHref ? `<base href="${escapeAttribute(options.baseHref)}">` : '',
         '<meta name="generator" content="Studiograph Artifact Canvas">',
         /<title[\s>]/i.test(entry) ? '' : `<title>${escapeHtml(bundle.title)}</title>`,
@@ -524,10 +532,11 @@ ${printPagination}
 </style>`;
 }
 export function buildArtifactHtmlExport(bundle, options = {}) {
-    // Append the capability token to asset URLs in the final document (idempotent;
-    // no-op without a token). Used by headless PNG/PDF render so its cookie-less
-    // image requests are authorized.
-    const finalize = (html) => options.assetToken ? appendAssetToken(html, options.assetToken) : html;
+    // Resolve workspace-asset URLs per the render's AssetResolution at the
+    // single exit (token: append ?at= for the cookieless headless render;
+    // relative: ./assets paths + placeholders for the standalone export).
+    // The CSP in headAdditions derives from the same value.
+    const finalize = (html) => applyAssetResolution(html, options.assets);
     const rawEntry = stripNetworkAssetTags(bundle.files[bundle.entrypoint] ?? '');
     const deferred = requestedLibraries(bundle).length > 0 ? deferInlineScripts(rawEntry) : { html: rawEntry, scripts: [] };
     const entry = deferred.html;

package/dist/core/artifact-export.js.map

@@ -1 +1 @@
-{"version":3,"file":"artifact-export.js","sourceRoot":"","sources":["../../src/core/artifact-export.ts"],"names":[],"mappings":"AACA,OAAO,EACL,YAAY,EACZ,eAAe,EACf,UAAU,EACV,YAAY,EACZ,WAAW,GACZ,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAC5D,OAAO,EAAE,oBAAoB,EAAE,yBAAyB,EAAE,MAAM,+BAA+B,CAAC;AAEhG;;4DAE4D;AAC5D,MAAM,CAAC,MAAM,yBAAyB,GAAG,SAAS,CAAC;AAInD,SAAS,qBAAqB,CAAC,IAAY;IACzC,OAAO,IAAI;SACR,OAAO,CACN,wHAAwH,EACxH,EAAE,CACH;SACA,OAAO,CAAC,0DAA0D,EAAE,EAAE,CAAC,CAAC;AAC7E,CAAC;AAaD,SAAS,wBAAwB,CAAC,KAAa;IAC7C,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,iDAAiD,CAAC,CAAC;IAC7E,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,IAAI,IAAI,CAAC;AACxF,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAa;IACzC,MAAM,IAAI,GAAG,wBAAwB,CAAC,KAAK,CAAC,CAAC;IAC7C,IAAI,CAAC,IAAI,IAAI,IAAI,KAAK,iBAAiB,IAAI,IAAI,KAAK,wBAAwB,IAAI,IAAI,KAAK,iBAAiB,IAAI,IAAI,KAAK,wBAAwB,EAAE,CAAC;QAChJ,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC;AAC7C,CAAC;AAED,SAAS,iBAAiB,CAAC,IAAY;IACrC,OAAO,IAAI,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;AACpE,CAAC;AAED,SAAS,kBAAkB,CAAC,IAAY;IACtC,MAAM,OAAO,GAAiC,EAAE,CAAC;IACjD,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,6DAA6D,EAAE,CAAC,KAAK,EAAE,KAAa,EAAE,EAAU,EAAE,EAAE;QAChI,MAAM,IAAI,GAAG,oBAAoB,CAAC,KAAK,CAAC,CAAC;QACzC,IAAI,CAAC,IAAI;YAAE,OAAO,KAAK,CAAC;QACxB,IAAI,EAAE,CAAC,IAAI,EAAE;YAAE,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,UAAU,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;QACpH,OAAO,EAAE,CAAC;IACZ,CAAC,CAAC,CAAC;IACH,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;AACrC,CAAC;AAED,SAAS,SAAS,CAAC,MAAsB;IACvC,OAAO,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC;SAChC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;SACvD,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,8BAA8B,eAAe,CAAC,IAAI,CAAC,OAAO,WAAW,CAAC,GAAG,CAAC,YAAY,CAAC;SAC5G,IAAI,CAAC,IAAI,CAAC,CAAC;AAChB,CAAC;AAKD,SAAS,kBAAkB,CAAC,MAAsB;IAChD,OAAO,MAAM,CAAC,SAAS,IAAI,EAAE,CAAC;AAChC,CAAC;AAED,SAAS,WAAW,CAAC,MAAsB,EAAE,UAAkC,EAAE;IAC/E,MAAM,SAAS,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC;IAC7C,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAEtC,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,KAAK,MAAM,OAAO,IAAI,SAAS,EAAE,CAAC;QAChC,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,KAAK,QAAQ,EAAE,CAAC;YAC7C,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;YAChC,IAAI,CAAC,MAAM;gBAAE,SAAS;YACtB,IAAI,CAAC,IAAI,CAAC,kCAAkC,OAAO,OAAO,YAAY,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;QAC/F,CAAC;IACH,CAAC;IAED,MAAM,iBAAiB,GAAa,EAAE,CAAC;IACvC,IAAI,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;QACjD,iBAAiB,CAAC,IAAI,CAAC;;;;;;;gDAOqB,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;gCAC3D,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,uBAAuB,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI;;;;;;;;;;;;;;KAc/H,CAAC,CAAC;IACL,CAAC;IAED,IAAI,CAAC,IAAI,CAAC;8CACkC,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC;;EAErE,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC;;;;;;UAMpB,CAAC,CAAC;IAEV,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACzB,CAAC;AAED,SAAS,UAAU,CAAC,MAAsB,EAAE,gBAAkC,EAAE;IAC9E,MAAM,SAAS,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC;SAC3C,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;SAC3C,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,iBAAiB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;IAEtE,IAAI,kBAAkB,CAAC,MAAM,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1C,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,GAAG,aAAa,EAAE,GAAG,SAAS,CAAC,CAAC,CAAC;QACjE,OAAO;;;oBAGS,YAAY,CAAC,OAAO,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;UAkC/B,CAAC;IACT,CAAC;IAED,OAAO,SAAS;SACb,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,UAAU,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,wBAAwB,eAAe,CAAC,IAAI,CAAC,OAAO,YAAY,CAAC,EAAE,CAAC,aAAa,CAAC;SACjK,IAAI,CAAC,IAAI,CAAC,CAAC;AAChB,CAAC;AAED,SAAS,+BAA+B,CAAC,MAAsB,EAAE,OAAkC;IACjG,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,KAAK,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;IAC5F,IAAI,CAAC,OAAO;QAAE,OAAO,EAAE,CAAC;IAExB,2EAA2E;IAC3E,yEAAyE;IACzE,MAAM,QAAQ,GAAG,oBAAoB,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAExD,OAAO;;qBAEY,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;UAmFnC,CAAC;AACX,CAAC;AAED,SAAS,sBAAsB,CAAC,IAAY,EAAE,KAAmD;IAC/F,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAC3C,OAAO,IAAI,CAAC,OAAO,CAAC,kBAAkB,EAAE,CAAC,KAAK,EAAE,aAAqB,EAAE,EAAE;QACvE,IAAI,SAAS,GAAG,aAAa,CAAC;QAC9B,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YAClD,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,KAAK;gBAAE,SAAS;YACrD,IAAI,IAAI,MAAM,CAAC,MAAM,IAAI,OAAO,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC;gBAAE,SAAS;YACjE,SAAS,GAAG,IAAI,IAAI,GAAG,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,eAAe,CAAC,KAAK,CAAC,GAAG,GAAG,SAAS,EAAE,CAAC;QAC5F,CAAC;QACD,OAAO,QAAQ,SAAS,GAAG,CAAC;IAC9B,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,aAAa,CAAC,MAAsB,EAAE,KAAa,EAAE,OAAkC;IAC9F,MAAM,SAAS,GAAG;QAChB,wBAAwB;QACxB,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,eAAe,eAAe,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE;QAC5E,+DAA+D;QAC/D,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU;QAC9E,SAAS,CAAC,MAAM,CAAC;QACjB,OAAO,CAAC,uBAAuB,CAAC,CAAC,CAAC,2BAA2B,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE;KAC3E,CAAC;IACF,OAAO,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC9C,CAAC;AAED,SAAS,WAAW,CAAC,IAAY;IAC/B,OAAO,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,oBAAoB,IAAI,EAAE,CAAC;AAC3E,CAAC;AAED,MAAM,UAAU,sBAAsB,CACpC,MAAoD,EACpD,YAAqC,MAAM;IAE3C,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,UAAU,IAAI,UAAU,CAAC;IAC/D,MAAM,IAAI,GAAG,MAAM;SAChB,SAAS,CAAC,MAAM,CAAC;SACjB,OAAO,CAAC,kBAAkB,EAAE,EAAE,CAAC;SAC/B,WAAW,EAAE;SACb,OAAO,CAAC,aAAa,EAAE,GAAG,CAAC;SAC3B,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC;SACvB,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAChB,OAAO,GAAG,IAAI,IAAI,UAAU,IAAI,SAAS,EAAE,CAAC;AAC9C,CAAC;AAcD,SAAS,2BAA2B,CAAC,MAAsB;IACzD,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,EAAE,kBAAkB,IAAI,MAAM,CAAC,QAAQ,CAAC;IACvE,MAAM,UAAU,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC;IAClE,MAAM,WAAW,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC;IACpE,MAAM,kBAAkB,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,KAAK,OAAO,CAAC;IAC5D,MAAM,iBAAiB,GAAG,kBAAkB;QAC1C,CAAC,CAAC,qCAAqC;QACvC,CAAC,CAAC;;;;;;yCAMmC,CAAC;IACxC,MAAM,gBAAgB,GAAG;;sCAEW,UAAU;uCACT,WAAW;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAoChD,iBAAiB;;;;;;;;;;;;;CAalB,CAAC;IACA,4DAA4D;IAC5D,6EAA6E;IAC7E,2EAA2E;IAC3E,4EAA4E;IAC5E,2EAA2E;IAC3E,2EAA2E;IAC3E,4EAA4E;IAC5E,oEAAoE;IACpE,qDAAqD;IACrD,MAAM,aAAa,GAAG,MAAM,CAAC,OAAO,EAAE,QAAQ,EAAE,OAAO;QACrD,CAAC,CAAC,wEAAwE;QAC1E,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,KAAK,OAAO;YAChC,CAAC,CAAC,0CAA0C;YAC5C,CAAC,CAAC,IAAI,CAAC;IACX,MAAM,eAAe,GAAG,aAAa,IAAI,MAAM,CAAC,OAAO,EAAE,UAAU,KAAK,aAAa;QACnF,CAAC,CAAC;EACJ,aAAa;gBACC,yBAAyB;;EAEvC,aAAa;;;CAGd;QACG,CAAC,CAAC,EAAE,CAAC;IACP,MAAM,iBAAiB,GAAG,MAAM,CAAC,OAAO,EAAE,QAAQ,EAAE,OAAO;QACzD,CAAC,CAAC;;;;;;;;;;;;;;;;;;;;;;EAsBJ,yBAAyB,CACzB,oBAAoB,CAAC,MAAM,CAAC,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,CAAC,EACjE,wEAAwE,CACzE;CACA;QACG,CAAC,CAAC,EAAE,CAAC;IACP,MAAM,eAAe,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,KAAK,OAAO;QACtD,CAAC,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAkCL;QACG,CAAC,CAAC,EAAE,CAAC;IACP,MAAM,eAAe,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA4CxB,iBAAiB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAiClB,CAAC;IACA,OAAO;;;;;EAKP,eAAe;EACf,eAAe;EACf,iBAAiB;EACjB,gBAAgB;EAChB,eAAe;SACR,CAAC;AACV,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,MAAsB,EAAE,UAAqC,EAAE;IACrG,+EAA+E;IAC/E,6EAA6E;IAC7E,iCAAiC;IACjC,MAAM,QAAQ,GAAG,CAAC,IAAY,EAAU,EAAE,CACxC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,gBAAgB,CAAC,IAAI,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACzE,MAAM,QAAQ,GAAG,qBAAqB,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC;IAC9E,MAAM,QAAQ,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;IACxH,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC;IAC5B,MAAM,MAAM,GAAG,aAAa,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;IACrD,MAAM,SAAS,GAAG,WAAW,CAAC,MAAM,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC;IAC9D,MAAM,OAAO,GAAG,UAAU,CAAC,MAAM,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC;IACrD,MAAM,OAAO,GAAG,+BAA+B,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjE,MAAM,WAAW,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAClE,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO;QAC/B,CAAC,CAAC;YACA,uBAAuB,EAAE,OAAO,CAAC,OAAO;YACxC,uBAAuB,EAAE,MAAM,CAAC,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS;SAChF;QACD,CAAC,CAAC,EAAE,CAAC;IAEP,IAAI,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAC9B,IAAI,IAAI,GAAG,sBAAsB,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;QACpD,IAAI,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAC7B,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,gBAAgB,EAAE,aAAa,MAAM,KAAK,SAAS,IAAI,CAAC,CAAC;QAC/E,CAAC;aAAM,CAAC;YACN,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,gBAAgB,EAAE,qBAAqB,MAAM,KAAK,SAAS,WAAW,CAAC,CAAC;QAC9F,CAAC;QAED,IAAI,WAAW,EAAE,CAAC;YAChB,IAAI,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC3B,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,GAAG,WAAW,WAAW,CAAC,CAAC;YAC9D,CAAC;iBAAM,CAAC;gBACN,IAAI,GAAG,GAAG,IAAI,KAAK,WAAW,EAAE,CAAC;YACnC,CAAC;QACH,CAAC;QACD,OAAO,QAAQ,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC;IACrC,CAAC;IAED,OAAO,QAAQ,CAAC;OACX,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,2BAA2B,eAAe,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,+BAA+B,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE;;EAErK,MAAM;EACN,SAAS;;;EAGT,KAAK;EACL,WAAW;;QAEL,CAAC,CAAC;AACV,CAAC"}
+{"version":3,"file":"artifact-export.js","sourceRoot":"","sources":["../../src/core/artifact-export.ts"],"names":[],"mappings":"AACA,OAAO,EACL,YAAY,EACZ,eAAe,EACf,UAAU,EACV,YAAY,EACZ,WAAW,GACZ,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,oBAAoB,EAAE,WAAW,EAAwB,MAAM,gCAAgC,CAAC;AACzG,OAAO,EAAE,oBAAoB,EAAE,yBAAyB,EAAE,MAAM,+BAA+B,CAAC;AAEhG;;4DAE4D;AAC5D,MAAM,CAAC,MAAM,yBAAyB,GAAG,SAAS,CAAC;AAInD,SAAS,qBAAqB,CAAC,IAAY;IACzC,OAAO,IAAI;SACR,OAAO,CACN,wHAAwH,EACxH,EAAE,CACH;SACA,OAAO,CAAC,0DAA0D,EAAE,EAAE,CAAC,CAAC;AAC7E,CAAC;AAaD,SAAS,wBAAwB,CAAC,KAAa;IAC7C,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,iDAAiD,CAAC,CAAC;IAC7E,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,WAAW,EAAE,IAAI,IAAI,CAAC;AACxF,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAa;IACzC,MAAM,IAAI,GAAG,wBAAwB,CAAC,KAAK,CAAC,CAAC;IAC7C,IAAI,CAAC,IAAI,IAAI,IAAI,KAAK,iBAAiB,IAAI,IAAI,KAAK,wBAAwB,IAAI,IAAI,KAAK,iBAAiB,IAAI,IAAI,KAAK,wBAAwB,EAAE,CAAC;QAChJ,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC;AAC7C,CAAC;AAED,SAAS,iBAAiB,CAAC,IAAY;IACrC,OAAO,IAAI,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;AACpE,CAAC;AAED,SAAS,kBAAkB,CAAC,IAAY;IACtC,MAAM,OAAO,GAAiC,EAAE,CAAC;IACjD,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,6DAA6D,EAAE,CAAC,KAAK,EAAE,KAAa,EAAE,EAAU,EAAE,EAAE;QAChI,MAAM,IAAI,GAAG,oBAAoB,CAAC,KAAK,CAAC,CAAC;QACzC,IAAI,CAAC,IAAI;YAAE,OAAO,KAAK,CAAC;QACxB,IAAI,EAAE,CAAC,IAAI,EAAE;YAAE,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,UAAU,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;QACpH,OAAO,EAAE,CAAC;IACZ,CAAC,CAAC,CAAC;IACH,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;AACrC,CAAC;AAED,SAAS,SAAS,CAAC,MAAsB;IACvC,OAAO,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC;SAChC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;SACvD,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,8BAA8B,eAAe,CAAC,IAAI,CAAC,OAAO,WAAW,CAAC,GAAG,CAAC,YAAY,CAAC;SAC5G,IAAI,CAAC,IAAI,CAAC,CAAC;AAChB,CAAC;AAKD,SAAS,kBAAkB,CAAC,MAAsB;IAChD,OAAO,MAAM,CAAC,SAAS,IAAI,EAAE,CAAC;AAChC,CAAC;AAED,SAAS,WAAW,CAAC,MAAsB,EAAE,UAAkC,EAAE;IAC/E,MAAM,SAAS,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC;IAC7C,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAEtC,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,KAAK,MAAM,OAAO,IAAI,SAAS,EAAE,CAAC;QAChC,IAAI,OAAO,KAAK,IAAI,IAAI,OAAO,KAAK,QAAQ,EAAE,CAAC;YAC7C,MAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;YAChC,IAAI,CAAC,MAAM;gBAAE,SAAS;YACtB,IAAI,CAAC,IAAI,CAAC,kCAAkC,OAAO,OAAO,YAAY,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC;QAC/F,CAAC;IACH,CAAC;IAED,MAAM,iBAAiB,GAAa,EAAE,CAAC;IACvC,IAAI,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;QACjD,iBAAiB,CAAC,IAAI,CAAC;;;;;;;gDAOqB,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;gCAC3D,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,uBAAuB,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI;;;;;;;;;;;;;;KAc/H,CAAC,CAAC;IACL,CAAC;IAED,IAAI,CAAC,IAAI,CAAC;8CACkC,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC;;EAErE,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC;;;;;;UAMpB,CAAC,CAAC;IAEV,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACzB,CAAC;AAED,SAAS,UAAU,CAAC,MAAsB,EAAE,gBAAkC,EAAE;IAC9E,MAAM,SAAS,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC;SAC3C,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;SAC3C,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,iBAAiB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;IAEtE,IAAI,kBAAkB,CAAC,MAAM,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC1C,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC,GAAG,aAAa,EAAE,GAAG,SAAS,CAAC,CAAC,CAAC;QACjE,OAAO;;;oBAGS,YAAY,CAAC,OAAO,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;UAkC/B,CAAC;IACT,CAAC;IAED,OAAO,SAAS;SACb,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,UAAU,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,wBAAwB,eAAe,CAAC,IAAI,CAAC,OAAO,YAAY,CAAC,EAAE,CAAC,aAAa,CAAC;SACjK,IAAI,CAAC,IAAI,CAAC,CAAC;AAChB,CAAC;AAED,SAAS,+BAA+B,CAAC,MAAsB,EAAE,OAAkC;IACjG,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,KAAK,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;IAC5F,IAAI,CAAC,OAAO;QAAE,OAAO,EAAE,CAAC;IAExB,2EAA2E;IAC3E,yEAAyE;IACzE,MAAM,QAAQ,GAAG,oBAAoB,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IAExD,OAAO;;qBAEY,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;UAmFnC,CAAC;AACX,CAAC;AAED,SAAS,sBAAsB,CAAC,IAAY,EAAE,KAAmD;IAC/F,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAC3C,OAAO,IAAI,CAAC,OAAO,CAAC,kBAAkB,EAAE,CAAC,KAAK,EAAE,aAAqB,EAAE,EAAE;QACvE,IAAI,SAAS,GAAG,aAAa,CAAC;QAC9B,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YAClD,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,KAAK;gBAAE,SAAS;YACrD,IAAI,IAAI,MAAM,CAAC,MAAM,IAAI,OAAO,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC;gBAAE,SAAS;YACjE,SAAS,GAAG,IAAI,IAAI,GAAG,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,eAAe,CAAC,KAAK,CAAC,GAAG,GAAG,SAAS,EAAE,CAAC;QAC5F,CAAC;QACD,OAAO,QAAQ,SAAS,GAAG,CAAC;IAC9B,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,aAAa,CAAC,MAAsB,EAAE,KAAa,EAAE,OAAkC;IAC9F,2EAA2E;IAC3E,yEAAyE;IACzE,mEAAmE;IACnE,mEAAmE;IACnE,4EAA4E;IAC5E,uEAAuE;IACvE,MAAM,GAAG,GAAG,WAAW,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,eAAe,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC;IAC/E,MAAM,SAAS,GAAG;QAChB,wBAAwB;QACxB,uDAAuD,GAAG,IAAI;QAC9D,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,eAAe,eAAe,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE;QAC5E,+DAA+D;QAC/D,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,UAAU,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC,UAAU;QAC9E,SAAS,CAAC,MAAM,CAAC;QACjB,OAAO,CAAC,uBAAuB,CAAC,CAAC,CAAC,2BAA2B,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE;KAC3E,CAAC;IACF,OAAO,SAAS,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC9C,CAAC;AAED,SAAS,WAAW,CAAC,IAAY;IAC/B,OAAO,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,oBAAoB,IAAI,EAAE,CAAC;AAC3E,CAAC;AAED,MAAM,UAAU,sBAAsB,CACpC,MAAoD,EACpD,YAAqC,MAAM;IAE3C,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,UAAU,IAAI,UAAU,CAAC;IAC/D,MAAM,IAAI,GAAG,MAAM;SAChB,SAAS,CAAC,MAAM,CAAC;SACjB,OAAO,CAAC,kBAAkB,EAAE,EAAE,CAAC;SAC/B,WAAW,EAAE;SACb,OAAO,CAAC,aAAa,EAAE,GAAG,CAAC;SAC3B,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC;SACvB,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAChB,OAAO,GAAG,IAAI,IAAI,UAAU,IAAI,SAAS,EAAE,CAAC;AAC9C,CAAC;AAmBD,SAAS,2BAA2B,CAAC,MAAsB;IACzD,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,EAAE,kBAAkB,IAAI,MAAM,CAAC,QAAQ,CAAC;IACvE,MAAM,UAAU,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC;IAClE,MAAM,WAAW,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC;IACpE,MAAM,kBAAkB,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,KAAK,OAAO,CAAC;IAC5D,MAAM,iBAAiB,GAAG,kBAAkB;QAC1C,CAAC,CAAC,qCAAqC;QACvC,CAAC,CAAC;;;;;;yCAMmC,CAAC;IACxC,MAAM,gBAAgB,GAAG;;sCAEW,UAAU;uCACT,WAAW;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAoChD,iBAAiB;;;;;;;;;;;;;CAalB,CAAC;IACA,4DAA4D;IAC5D,6EAA6E;IAC7E,2EAA2E;IAC3E,4EAA4E;IAC5E,2EAA2E;IAC3E,2EAA2E;IAC3E,4EAA4E;IAC5E,oEAAoE;IACpE,qDAAqD;IACrD,MAAM,aAAa,GAAG,MAAM,CAAC,OAAO,EAAE,QAAQ,EAAE,OAAO;QACrD,CAAC,CAAC,wEAAwE;QAC1E,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,KAAK,OAAO;YAChC,CAAC,CAAC,0CAA0C;YAC5C,CAAC,CAAC,IAAI,CAAC;IACX,MAAM,eAAe,GAAG,aAAa,IAAI,MAAM,CAAC,OAAO,EAAE,UAAU,KAAK,aAAa;QACnF,CAAC,CAAC;EACJ,aAAa;gBACC,yBAAyB;;EAEvC,aAAa;;;CAGd;QACG,CAAC,CAAC,EAAE,CAAC;IACP,MAAM,iBAAiB,GAAG,MAAM,CAAC,OAAO,EAAE,QAAQ,EAAE,OAAO;QACzD,CAAC,CAAC;;;;;;;;;;;;;;;;;;;;;;EAsBJ,yBAAyB,CACzB,oBAAoB,CAAC,MAAM,CAAC,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,CAAC,EACjE,wEAAwE,CACzE;CACA;QACG,CAAC,CAAC,EAAE,CAAC;IACP,MAAM,eAAe,GAAG,MAAM,CAAC,QAAQ,CAAC,IAAI,KAAK,OAAO;QACtD,CAAC,CAAC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAkCL;QACG,CAAC,CAAC,EAAE,CAAC;IACP,MAAM,eAAe,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA4CxB,iBAAiB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAiClB,CAAC;IACA,OAAO;;;;;EAKP,eAAe;EACf,eAAe;EACf,iBAAiB;EACjB,gBAAgB;EAChB,eAAe;SACR,CAAC;AACV,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,MAAsB,EAAE,UAAqC,EAAE;IACrG,uEAAuE;IACvE,sEAAsE;IACtE,sEAAsE;IACtE,wDAAwD;IACxD,MAAM,QAAQ,GAAG,CAAC,IAAY,EAAU,EAAE,CAAC,oBAAoB,CAAC,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IACtF,MAAM,QAAQ,GAAG,qBAAqB,CAAC,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC;IAC9E,MAAM,QAAQ,GAAG,kBAAkB,CAAC,MAAM,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;IACxH,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC;IAC5B,MAAM,MAAM,GAAG,aAAa,CAAC,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;IACrD,MAAM,SAAS,GAAG,WAAW,CAAC,MAAM,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC;IAC9D,MAAM,OAAO,GAAG,UAAU,CAAC,MAAM,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC;IACrD,MAAM,OAAO,GAAG,+BAA+B,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjE,MAAM,WAAW,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAClE,MAAM,SAAS,GAAG,OAAO,CAAC,OAAO;QAC/B,CAAC,CAAC;YACA,uBAAuB,EAAE,OAAO,CAAC,OAAO;YACxC,uBAAuB,EAAE,MAAM,CAAC,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS;SAChF;QACD,CAAC,CAAC,EAAE,CAAC;IAEP,IAAI,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAC9B,IAAI,IAAI,GAAG,sBAAsB,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;QACpD,IAAI,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAC7B,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,gBAAgB,EAAE,aAAa,MAAM,KAAK,SAAS,IAAI,CAAC,CAAC;QAC/E,CAAC;aAAM,CAAC;YACN,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,gBAAgB,EAAE,qBAAqB,MAAM,KAAK,SAAS,WAAW,CAAC,CAAC;QAC9F,CAAC;QAED,IAAI,WAAW,EAAE,CAAC;YAChB,IAAI,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC3B,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,GAAG,WAAW,WAAW,CAAC,CAAC;YAC9D,CAAC;iBAAM,CAAC;gBACN,IAAI,GAAG,GAAG,IAAI,KAAK,WAAW,EAAE,CAAC;YACnC,CAAC;QACH,CAAC;QACD,OAAO,QAAQ,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC;IACrC,CAAC;IAED,OAAO,QAAQ,CAAC;OACX,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,2BAA2B,eAAe,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC,+BAA+B,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE;;EAErK,MAAM;EACN,SAAS;;;EAGT,KAAK;EACL,WAAW;;QAEL,CAAC,CAAC;AACV,CAAC"}

package/dist/core/embeds.d.ts

@@ -41,7 +41,9 @@ export declare function assetEmbed(filename: string, url: string): string;
 export declare function deriveAssetDisplayName(filename: string): string;
 /**
  * References present in `before` but absent from `after` — i.e. embeds a
- * body rewrite would drop. Set semantics on the raw reference string.
+ * body rewrite would drop. Set semantics on the CANONICALIZED reference
+ * (decoded asset identity — see {@link canonicalAssetRef}); the returned
+ * strings are the original `before` refs so messages show what the body said.
  */
 export declare function droppedAssetEmbeds(before: string, after: string): string[];
 /**
@@ -69,6 +71,11 @@ export declare function extractLegacyAssetUrls(fileContent: string): LegacyAsset
  * `![[transclusions]]` are left untouched. Used by the public share read to
  * point embedded images at the token-scoped `/api/share/{token}/asset/...`
  * surface without leaking the authed `/api/assets` URLs to guests.
+ *
+ * D5 identity contract: `filename` reaches the callback DECODED (the raw
+ * stored name). A callback that emits a URL must percent-encode the segment
+ * it splices (`encodeAssetFilename`) — emitting the raw name breaks markdown/
+ * HTML URL parsing on spaces and parens.
  */
 export declare function rewriteImmutableAssetUrls(body: string, replace: (assetId: string, filename: string) => string): string;
 /**
@@ -79,6 +86,11 @@ export declare function rewriteImmutableAssetUrls(body: string, replace: (assetI
  * entry actually embeds — not every asset that merely shares its repo. Legacy
  * three-segment URLs and `![[transclusions]]` are intentionally ignored, the
  * same way the rewrite leaves them untouched.
+ *
+ * D5 identity contract: `filename` is the DECODED raw stored name, directly
+ * comparable to `assets.db.filename` and to a Fastify-decoded route param —
+ * comparing the encoded URL segment against either was the latent
+ * special-char 404 on public shares (share-api embedded-asset check).
  */
 export declare function extractImmutableAssetRefs(body: string): Array<{
     assetId: string;