tileflow 0.1.0-alpha.10 → 0.1.0-alpha.11

package/README.md

@@ -23,8 +23,8 @@ executable. With another package manager, use its local-execution command and th
 do not add a second lockfile or rely on a globally installed CLI.
 
 `init` creates a singular `tileflow.config.ts` extending the official Streets map. `preview` serves
-the exported map using its configured view. `dev` is a compatibility alias for `preview`, not a
-replacement for an application's normal development server.
+the exported map using its configured view; it does not replace an application's normal development
+server.
 
 Local validation, compilation, and asset preparation require no account or API key. Preview and
 capture may fetch configured remote tiles and fonts. Config files are executable trusted code,
@@ -264,7 +264,7 @@ for the verified platform, setup, and development-artifact restrictions.
 
 Run `npx tileflow --help` or `npx tileflow <command> --help` for the installed command surface.
 The families cover map authoring, semantic language discovery, local visual evidence, datasets and
-icons, account sessions, coordinates, and hosted delivery. Hidden compatibility commands are not a
+icons, account sessions, coordinates, and hosted delivery. Hidden support commands are not a
 recommended application workflow.
 
 A manifest 404 usually means assets were not built/served at the component's configured URL.

package/dist/index.js

@@ -88,7 +88,7 @@ var sessionSchema = z.object({
 }).strict().refine((value) => Date.parse(value.expiresAt) > Date.parse(value.createdAt), {
   message: "session expiry must follow creation"
 });
-var authConfigV2Schema = z.object({
+var authConfigSchema = z.object({
   sessions: z.record(z.string().max(2048), sessionSchema),
   version: z.literal(2)
 }).strict().superRefine((value, context) => {
@@ -101,16 +101,6 @@ var authConfigV2Schema = z.object({
     }
   }
 });
-var legacyAuthConfigSchema = z.object({
-  apiKey: z.string().min(16).max(4096),
-  apiUrl: z.string().min(1).max(2048),
-  appUrl: z.string().max(2048).optional(),
-  createdAt: z.string().max(64).optional(),
-  deviceName: z.string().max(200).optional(),
-  keyPrefix: z.string().max(64).optional(),
-  projectId: z.string().max(200).optional(),
-  scopes: z.array(z.string().max(128)).max(32).optional()
-}).strict();
 function emptyAuthConfig() {
   return Object.freeze({ sessions: Object.freeze({}), version: 2 });
 }
@@ -128,24 +118,13 @@ async function readAuthFile(path = authConfigPath()) {
   } catch {
     return { kind: "invalid" };
   }
-  const v2 = authConfigV2Schema.safeParse(parsed);
-  if (v2.success) return { config: freezeConfig(v2.data), kind: "v2" };
-  const legacy = legacyAuthConfigSchema.safeParse(parsed);
-  if (legacy.success) {
-    return { config: Object.freeze(legacy.data), kind: "legacy_project_login" };
-  }
-  if (isSupersededProfileState(parsed)) return { kind: "superseded_profiles" };
-  return { kind: "invalid" };
+  const config = authConfigSchema.safeParse(parsed);
+  return config.success ? { config: freezeConfig(config.data), kind: "sessions" } : { kind: "invalid" };
 }
 async function loadAuthConfig(path = authConfigPath()) {
   const state = await readAuthFile(path);
   if (state.kind === "empty") return emptyAuthConfig();
-  if (state.kind === "v2") return state.config;
-  if (state.kind === "legacy_project_login" || state.kind === "superseded_profiles") {
-    throw new Error(
-      "The saved login uses the retired destination-credential model. Run `tileflow login` to authorize your Tileflow account."
-    );
-  }
+  if (state.kind === "sessions") return state.config;
   throw new Error("Tileflow auth state is invalid; no changes were made.");
 }
 async function installAccountSession(session, path = authConfigPath()) {
@@ -157,7 +136,7 @@ async function installAccountSession(session, path = authConfigPath()) {
   if (state.kind === "invalid") {
     throw new Error("Tileflow auth state is invalid; no changes were made.");
   }
-  const current = state.kind === "v2" ? state.config : emptyAuthConfig();
+  const current = state.kind === "sessions" ? state.config : emptyAuthConfig();
   const sessions = { ...current.sessions, [normalized.apiOrigin]: normalized };
   if (Object.keys(sessions).length > maximumOrigins) {
     throw new Error("Tileflow CLI API-origin limit reached.");
@@ -180,7 +159,7 @@ function removeAccountSession(config, apiUrl) {
   return { config: freezeConfig({ sessions, version: 2 }), removed };
 }
 async function writeAuthFileAtomic(config, path = authConfigPath()) {
-  const normalized = normalizeConfig(authConfigV2Schema.parse(config));
+  const normalized = normalizeConfig(authConfigSchema.parse(config));
   const source = `${JSON.stringify(normalized, null, 2)}
 `;
   if (Buffer.byteLength(source, "utf8") > maximumAuthFileBytes) {
@@ -226,9 +205,6 @@ function parseProjectReference(value) {
   );
   return match ? { organizationSlug: match[1], projectSlug: match[2] } : null;
 }
-function projectReference(value) {
-  return `@${value.organization.slug}/${value.project.slug}`;
-}
 function authConfigPath() {
   return resolve(homedir(), ".tileflow", "config.json");
 }
@@ -250,11 +226,6 @@ function freezeConfig(config) {
   );
   return Object.freeze({ sessions: Object.freeze(sessions), version: 2 });
 }
-function isSupersededProfileState(value) {
-  if (!value || typeof value !== "object" || Array.isArray(value)) return false;
-  const record = value;
-  return record.version === 2 && Boolean(record.profiles && typeof record.profiles === "object") && Boolean(record.selections && typeof record.selections === "object");
-}
 async function syncDirectory(path) {
   if (process.platform === "win32") return;
   const directory = await open(path, "r");
@@ -2464,47 +2435,17 @@ async function requestMapCapability(session, target, scopes, options = {}) {
   } catch (error) {
     return { error: safeTransportError(error, "Map capability request failed."), ok: false };
   }
-  if (!response.ok) {
-    return { error: `Map capability request failed (${response.status}).`, ok: false };
-  }
-  const body = asRecord(response.body);
-  if (!response.json || typeof body.capability !== "string" || !body.capability.startsWith("tf_cap_") || body.capability.length > 8192 || typeof body.mapId !== "string" || !/^map_[A-Za-z0-9_-]{16}$/u.test(body.mapId) || body.mapId !== target.mapId || !validIsoDate(body.expiresAt) || !Array.isArray(body.scopes) || body.scopes.join("\0") !== [...scopes].sort().join("\0")) {
-    return { error: "Map capability response was invalid.", ok: false };
-  }
-  return { capability: body.capability, mapId: body.mapId, ok: true };
-}
-async function requestProjectCapability(session, project, scopes, options = {}) {
-  let response;
-  try {
-    response = await requestHostedJson(
-      session.apiOrigin,
-      "/v1/cli/project-capabilities",
-      {
-        ...jsonRequest("POST", { project, scopes }),
-        headers: {
-          ...authorizationHeaders(session.accountSession),
-          "Content-Type": "application/json"
-        }
-      },
-      options
-    );
-  } catch (error) {
-    return {
-      error: safeTransportError(error, "Project capability request failed."),
-      ok: false
-    };
-  }
   if (!response.ok) {
     return {
-      error: response.status === 401 ? rejectedAccountSessionMessage : `Project capability request failed (${response.status}).`,
+      error: response.status === 401 ? rejectedAccountSessionMessage : `Map capability request failed (${response.status}).`,
       ok: false
     };
   }
   const body = asRecord(response.body);
-  if (!response.json || typeof body.capability !== "string" || !body.capability.startsWith("tf_cap_") || body.capability.length > 8192 || body.reference !== project || !validIsoDate(body.expiresAt) || !Array.isArray(body.scopes) || body.scopes.join("\0") !== [...scopes].sort().join("\0")) {
-    return { error: "Project capability response was invalid.", ok: false };
+  if (!response.json || typeof body.capability !== "string" || !body.capability.startsWith("tf_cap_") || body.capability.length > 8192 || typeof body.mapId !== "string" || !/^map_[A-Za-z0-9_-]{16}$/u.test(body.mapId) || body.mapId !== target.mapId || !validIsoDate(body.expiresAt) || !Array.isArray(body.scopes) || body.scopes.join("\0") !== [...scopes].sort().join("\0")) {
+    return { error: "Map capability response was invalid.", ok: false };
   }
-  return { capability: body.capability, ok: true };
+  return { capability: body.capability, mapId: body.mapId, ok: true };
 }
 async function requestTeamCapability(session, team, scopes, options = {}) {
   let response;
@@ -5292,18 +5233,6 @@ async function fetchAccountProjects(session, includeArchived) {
   }
   return { error: "Destination discovery exceeded its safe page limit.", ok: false, status: 502 };
 }
-async function resolveAccountProjectTarget(session, requestedProject) {
-  const result = await fetchAccountProjects(session, false);
-  if (!result.ok) return { error: result.error, kind: "remote", status: result.status };
-  if (requestedProject) {
-    const parsed = parseProjectReference(requestedProject);
-    if (!parsed) return { kind: "invalid", targets: result.items };
-    const target = result.items.find((candidate) => candidate.reference === requestedProject);
-    return target ? { kind: "selected", target } : { kind: "missing", targets: result.items };
-  }
-  if (result.items.length === 1) return { kind: "selected", target: result.items[0] };
-  return result.items.length ? { kind: "ambiguous", targets: result.items } : { kind: "missing", targets: [] };
-}
 async function requireCommandSession(options, dependencies) {
   let config;
   try {
@@ -8445,7 +8374,7 @@ program.command("build").description("Generate static Tileflow styles").option("
     printKeyValue("Output", pathLabel(resolve8(process.cwd(), options.out)));
   }
 );
-program.command("preview").alias("dev").description("Run a local map preview").option("-c, --config <path>", "config path", defaultConfigPath).option("--against-config <path>", "second config for the comparison workbench").option("--against-map <name>", "map on the right; defaults to --map").option("--against-scene <name>", "committed standalone scene on the right").option("--against-theme <name>", "concrete theme on the right; defaults to --theme").option("--host <host>", "bind host: an explicit IP address or localhost", defaultTileflowDevHost).option("--map <name>", "preview one configured map").option("--theme <name>", "preview one concrete theme; defaults to the map default").option("--renderer <renderer>", "artifact renderer: web or native", "web").option("-p, --port <port>", "preview port", "3333").option("--scene <name>", "preview one committed standalone map scene").option(
+program.command("preview").description("Run a local map preview").option("-c, --config <path>", "config path", defaultConfigPath).option("--against-config <path>", "second config for the comparison workbench").option("--against-map <name>", "map on the right; defaults to --map").option("--against-scene <name>", "committed standalone scene on the right").option("--against-theme <name>", "concrete theme on the right; defaults to --theme").option("--host <host>", "bind host: an explicit IP address or localhost", defaultTileflowDevHost).option("--map <name>", "preview one configured map").option("--theme <name>", "preview one concrete theme; defaults to the map default").option("--renderer <renderer>", "artifact renderer: web or native", "web").option("-p, --port <port>", "preview port", "3333").option("--scene <name>", "preview one committed standalone map scene").option(
   "--api-base-url <url>",
   "Tileflow API base URL used to resolve official map assets",
   process.env.TILEFLOW_API_URL ?? defaultApiUrl
@@ -8461,7 +8390,7 @@ program.command("preview").alias("dev").description("Run a local map preview").o
         process.stdout.write(
           `${JSON.stringify({
             schemaVersion: 1,
-            command: "dev",
+            command: "preview",
             event: "error",
             code: first?.code ?? "NATIVE_RENDERER_UNSUPPORTED",
             phase: first?.phase ?? "command-validation",
@@ -8481,7 +8410,7 @@ program.command("preview").alias("dev").description("Run a local map preview").o
         process.stdout.write(
           `${JSON.stringify({
             schemaVersion: 1,
-            command: "dev",
+            command: "preview",
             event: "error",
             code: "NATIVE_RENDERER_UNSUPPORTED",
             phase: "command-validation",
@@ -8613,7 +8542,7 @@ program.command("preview").alias("dev").description("Run a local map preview").o
           process.stdout.write(
             `${JSON.stringify({
               schemaVersion: 1,
-              command: "dev",
+              command: "preview",
               event: recovered ? "recovered" : state.status,
               generation: state.generation,
               ..."lastGoodGeneration" in state && state.lastGoodGeneration !== void 0 ? { lastGoodGeneration: state.lastGoodGeneration } : {},
@@ -8682,7 +8611,7 @@ program.command("preview").alias("dev").description("Run a local map preview").o
           process.stdout.write(
             `${JSON.stringify({
               schemaVersion: 1,
-              command: "dev",
+              command: "preview",
               event: "stopped",
               generation,
               ...nativeLifecycleFields
@@ -8700,24 +8629,10 @@ program.command("deploy").description("Deploy maps to Tileflow and write the fro
 ).option("--cache-dir <path>", "verified Icon Set artifact cache root").option("--offline", "fail a locked Icon Set cache miss instead of hydrating it").action(
   async (options) => {
     const source = resolveDeploySource(process.env);
-    const resolveApi = (selectedMap) => requireApiOptions(options, {
+    const resolveApi = () => requireApiOptions(options, {
       allowStoredCredential: allowsStoredDeployCredential(source),
       assertExplicitKeyMap: true,
-      capabilityScopes: ["styles:write"],
-      retryCommand: cliInvocation([
-        "tileflow",
-        "deploy",
-        "--config",
-        options.config,
-        "--manifest",
-        options.manifest,
-        "--api-url",
-        options.apiUrl ?? defaultApiUrl,
-        ...options.overwriteSelfHostedManifest ? ["--overwrite-self-hosted-manifest"] : [],
-        ...options.mapId ? ["--map-id", options.mapId] : [],
-        ...options.map && selectedMap ? ["--map", selectedMap] : [],
-        ...options.withNative ? ["--with-native"] : []
-      ])
+      capabilityScopes: ["styles:write"]
     });
     const apiUrl = normalizeApiOrigin(options.apiUrl ?? defaultApiUrl);
     delete process.env.TILEFLOW_API_KEY;
@@ -8823,7 +8738,7 @@ program.command("deploy").description("Deploy maps to Tileflow and write the fro
       return;
     }
     const existingManifest = outputManifest;
-    const api = await resolveApi(mapNames[0]);
+    const api = await resolveApi();
     if (!api) return;
     const hostedSpriteByPackageHash = /* @__PURE__ */ new Map();
     for (const iconPackage of compiledIcons.packages) {
@@ -9108,13 +9023,6 @@ program.command("status").description("Show deployed compiled styles").option("-
   try {
     api = await requireApiOptions(options, {
       capabilityScopes: ["status:read"],
-      retryCommand: cliInvocation([
-        "tileflow",
-        "status",
-        "--api-url",
-        options.apiUrl ?? defaultApiUrl,
-        ...options.json ? ["--json"] : []
-      ]),
       silent: options.json
     });
   } catch (error) {
@@ -9164,18 +9072,6 @@ registerIconDiffCommand(iconsCommand, {
       assertExplicitKeyMap: true,
       allowStoredCredential: allowsStoredDeployCredential(source),
       capabilityScopes: ["status:read"],
-      retryCommand: cliInvocation([
-        "tileflow",
-        "icons",
-        "diff",
-        "--against",
-        options.against,
-        ...options.config ? ["--config", options.config] : [],
-        "--map-id",
-        options.mapId,
-        "--api-url",
-        options.apiUrl ?? defaultApiUrl
-      ]),
       silent: true
     });
   }
@@ -9223,7 +9119,7 @@ async function runTileflowComparisonPreview(options, address) {
     const emit = (event) => {
       if (!options.json) return;
       process.stdout.write(
-        `${JSON.stringify({ schemaVersion: 1, command: "dev.compare", ...event })}
+        `${JSON.stringify({ schemaVersion: 1, command: "preview.compare", ...event })}
 `
       );
     };
@@ -9613,19 +9509,13 @@ async function loadExistingDeployManifest(manifestPath, options) {
 async function requireApiOptions(options, behavior = {}) {
   const apiUrl = normalizeApiOrigin(options.apiUrl ?? defaultApiUrl);
   const requestedMapId = options.mapId;
-  const requested = options.project ? parseProjectReference(options.project) : null;
-  if (requestedMapId && !/^map_[A-Za-z0-9_-]{16}$/u.test(requestedMapId)) {
+  if (!requestedMapId || !/^map_[A-Za-z0-9_-]{16}$/u.test(requestedMapId)) {
     if (!behavior.silent) logError("Managed Map ID is invalid.");
     process.exitCode = 1;
     return null;
   }
-  if (options.project && !requested) {
-    if (!behavior.silent) logError("Managed destination must use @organization/project syntax.");
-    process.exitCode = 1;
-    return null;
-  }
   if (options.apiKey) {
-    if (requestedMapId && behavior.assertExplicitKeyMap) {
+    if (behavior.assertExplicitKeyMap) {
       const profile = await validateApiKey(apiUrl, options.apiKey);
       if (!profile.ok) {
         if (!behavior.silent) logError(profile.error);
@@ -9638,33 +9528,7 @@ async function requireApiOptions(options, behavior = {}) {
         return null;
       }
     }
-    if (requested) {
-      const profile = await validateApiKey(apiUrl, options.apiKey);
-      if (!profile.ok) {
-        if (!behavior.silent) logError(profile.error);
-        process.exitCode = 1;
-        return null;
-      }
-      if (profile.value.credentialType === "team_api_key") {
-        if (!behavior.silent) logError("Team credentials require an explicit --map-id.");
-        process.exitCode = 1;
-        return null;
-      }
-      if (requested && projectReference(profile.value) !== options.project) {
-        if (!behavior.silent) {
-          logError(
-            `This project key belongs to ${projectReference(profile.value)}, not ${options.project}.`
-          );
-        }
-        process.exitCode = 1;
-        return null;
-      }
-    }
-    return {
-      apiKey: options.apiKey,
-      apiUrl,
-      ...requestedMapId ? { mapId: requestedMapId } : {}
-    };
+    return { apiKey: options.apiKey, apiUrl, mapId: requestedMapId };
   }
   const allowStoredCredential = behavior.allowStoredCredential !== false && allowsStoredDeployCredential(resolveDeploySource(process.env));
   if (!allowStoredCredential) {
@@ -9697,46 +9561,9 @@ async function requireApiOptions(options, behavior = {}) {
     process.exitCode = 1;
     return null;
   }
-  if (requestedMapId) {
-    const capability2 = await requestMapCapability(
-      resolvedSession.session,
-      { mapId: requestedMapId },
-      behavior.capabilityScopes ?? ["status:read"]
-    );
-    if (!capability2.ok) {
-      if (!behavior.silent) logError(capability2.error);
-      process.exitCode = 1;
-      return null;
-    }
-    return { apiKey: capability2.capability, apiUrl, mapId: capability2.mapId };
-  }
-  const target = await resolveAccountProjectTarget(resolvedSession.session, options.project);
-  if (target.kind === "remote") {
-    if (!behavior.silent) logError(target.error);
-    process.exitCode = 1;
-    return null;
-  }
-  if (target.kind !== "selected") {
-    if (!behavior.silent) {
-      const references = target.targets.map((candidate) => candidate.reference);
-      if (target.kind === "ambiguous") {
-        const retry = `${behavior.retryCommand ?? "tileflow <command>"} --project ${references[0]}`;
-        logError(`Managed destination is ambiguous: ${references.join(", ")}.`);
-        printNextSteps([`Retry exactly with ${command(retry)}.`]);
-      } else if (target.kind === "invalid") {
-        logError("Managed destination must use @organization/project syntax.");
-      } else {
-        logError(
-          options.project ? `Destination ${options.project} is not accessible to this account.` : "No active managed destination is accessible to this account."
-        );
-      }
-    }
-    process.exitCode = 1;
-    return null;
-  }
-  const capability = await requestProjectCapability(
+  const capability = await requestMapCapability(
     resolvedSession.session,
-    target.target.reference,
+    { mapId: requestedMapId },
     behavior.capabilityScopes ?? ["status:read"]
   );
   if (!capability.ok) {
@@ -9744,7 +9571,7 @@ async function requireApiOptions(options, behavior = {}) {
     process.exitCode = 1;
     return null;
   }
-  return { apiKey: capability.capability, apiUrl };
+  return { apiKey: capability.capability, apiUrl, mapId: capability.mapId };
 }
 function printTileflowPreviewError(error) {
   if (error instanceof TileflowStyleValidationError2) {
@@ -9895,12 +9722,6 @@ function plural(count, singular, pluralForm = `${singular}s`) {
 function command(value) {
   return pc6.cyan(value);
 }
-function cliInvocation(parts) {
-  return parts.map(quoteCliArgument).join(" ");
-}
-function quoteCliArgument(value) {
-  return /^[A-Za-z0-9_./:@%+=,-]+$/u.test(value) ? value : `'${value.replaceAll("'", `'"'"'`)}'`;
-}
 function link(value) {
   return pc6.cyan(value);
 }

package/docs/cli-setup-and-defaults.md

@@ -37,8 +37,8 @@ npx tileflow preview --scene madrid-mobile
 To work on another map, point `--config` at another singular config. Multi-map catalogs are internal
 orchestration used by this repository's workbench and are not a second public config shape.
 
-`tileflow dev` remains a compatibility alias. The `preview` name distinguishes this SDK preview
-server from an application's own `npm run dev` process.
+The `preview` name distinguishes this SDK preview server from an application's own `npm run dev`
+process.
 
 `--api-base-url` selects the origin used by official World, Bathymetry vector, Bathymetry DEM,
 Nautical, and terrain TileJSON sources in the generated preview style. In particular, a hybrid

package/docs/command-families.md

@@ -5,7 +5,7 @@ Start with the [tileflow guide](https://github.com/tileflow/tileflow-sdk/blob/ma
 | Family            | Commands                                                                                       |
 | ----------------- | ---------------------------------------------------------------------------------------------- |
 | Semantic language | `language manifest`, `language schema`                                                         |
-| Map authoring     | `init`, `validate`, `inspect`, `explain`, `semantic-diff`, `build`, `preview` (`dev` alias)    |
+| Map authoring     | `init`, `validate`, `inspect`, `explain`, `semantic-diff`, `build`, `preview`                  |
 | Local evidence    | `setup capture`, `capture`, `visual compare`, `visual analyze`, `visual diff`, `visual update` |
 | Data and assets   | `tileset inspect`, `tileset publish/list/status/purge`, `inspect features`, `icons list/diff`  |
 | Team Icon Sets    | `icon-set publish/list/status/versions/uses/archive/unarchive/purge`                           |
@@ -15,7 +15,7 @@ Start with the [tileflow guide](https://github.com/tileflow/tileflow-sdk/blob/ma
 
 Run `tileflow <command> --help` (or the family help, such as `tileflow icons --help`) for the exact
 arguments and bounded JSON modes. `preview` defaults to the existing web renderer. The explicit
-`preview --renderer native` / `dev --renderer native` mode serves watched `native-v1` artifacts only;
+`preview --renderer native` mode serves watched `native-v1` artifacts only;
 Metro remains the React Native JavaScript development server. See
 [Native artifacts and local preview](./native-artifacts.md) for the endpoint and qualification
 boundary.
@@ -28,5 +28,5 @@ authority when resolving revisions and are the only commands that select revisio
 `tileflow.icons.lock.json`. See the
 [Team Icon Set workflow](https://github.com/tileflow/tileflow-sdk/blob/main/packages/cli/docs/team-icon-sets.md).
 
-The CLI retains the hidden `projects` command family as a compatibility and support surface for the
-internal application boundary. It is not part of the ordinary workflow or the product catalog.
+The hidden `projects` command family lists and manages the internal application destinations of an
+account for support. It is not part of the ordinary workflow or the product catalog.

package/docs/native-artifacts.md

@@ -30,7 +30,7 @@ The ordinary web commands and their default artifact bytes retain their existing
 
 ## Watch and serve native artifacts
 
-`preview` and its `dev` alias use the same renderer selector:
+`preview` selects the renderer with `--renderer`:
 
 ```sh
 npx tileflow preview --renderer native --map stores --theme light

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "tileflow",
-  "version": "0.1.0-alpha.10",
+  "version": "0.1.0-alpha.11",
   "license": "Apache-2.0",
   "description": "CLI-only tools for Tileflow config, capture, visual testing, and deploy.",
   "type": "module",
@@ -35,15 +35,15 @@
     "access": "public"
   },
   "dependencies": {
-    "@hono/node-server": "2.0.10",
-    "@tileflow/capture": ">=0.1.0-alpha.28 <0.1.0-beta.0",
-    "@tileflow/coordinates": ">=0.1.0-alpha.1 <0.1.0-beta.0",
-    "@tileflow/coordinates-runtime": ">=0.1.0-alpha.4 <0.1.0-beta.0",
-    "@tileflow/core": ">=0.1.0-alpha.31 <0.1.0-beta.0",
-    "@tileflow/dev": ">=0.1.0-alpha.29 <0.1.0-beta.0",
-    "@tileflow/maps": ">=0.1.0-alpha.7 <0.1.0-beta.0",
+    "@hono/node-server": "2.1.3",
+    "@tileflow/capture": ">=0.1.0-alpha.29 <0.1.0-beta.0",
+    "@tileflow/coordinates": ">=0.1.0-alpha.2 <0.1.0-beta.0",
+    "@tileflow/coordinates-runtime": ">=0.1.0-alpha.5 <0.1.0-beta.0",
+    "@tileflow/core": ">=0.1.0-alpha.32 <0.1.0-beta.0",
+    "@tileflow/dev": ">=0.1.0-alpha.30 <0.1.0-beta.0",
+    "@tileflow/maps": ">=0.1.0-alpha.8 <0.1.0-beta.0",
     "commander": "^15.0.0",
-    "hono": "4.13.5",
+    "hono": "4.13.7",
     "picocolors": "^1.1.1",
     "zod": "^4.4.3"
   },