tosijs-ui 1.17.0 → 1.17.1

package/CHANGELOG.md

@@ -1,5 +1,54 @@
 # Changelog
 
+## 1.17.1
+
+> Fixes from the 1.17.0 review, plus elastic table columns that can be dragged narrower. Nothing
+> to change on upgrade. **`dist/iife.js` is unchanged in size** (506.2 kB gzip).
+
+### Security
+
+Both affect sites that turn on the accessibility mode in **1.17.0 and its betas**; no advisory is
+filed, because each needs the build running and the reach is local. Upgrade if you build with
+the accessibility mode on a shared machine or network.
+
+- The accessibility audit's temporary server bound every interface, and its root check was a bare
+  prefix, so for the length of the audit a request like `/..%2fdocs-private/key.txt` was served a
+  sibling directory whose name starts with the output directory's. It now listens on localhost
+  only and contains paths with root + separator.
+- The audit's payload and the altText corpus, which can hold hidden pages, were written to
+  predictable names in the shared temp directory and never removed. They now go in private
+  temporary directories removed when the build ends.
+
+### Added
+
+- With a `dist-sizes.json` in the project root (`bun run sizes` writes one in this repo), the site
+  build prints the bundle's gzip size change since that baseline and the version it was recorded
+  at.
+
+### Fixed
+
+- `<tosi-table>`: an elastic column can now be dragged narrower than the width it is drawn at.
+  The last elastic column's edge is the table's edge, so dragging it moved nothing and quietly
+  shrank its `width` to the minimum, and a middle one fought the columns beside it. A drag now
+  fixes the dragged column, and the elastic columns to its left, at the width they are drawn at
+  (it sets `width` and `elastic: false`), so the edge follows the pointer exactly. Elastic
+  columns to its right absorb the difference; with none, the space it gives up is left beside
+  the columns, painted with `--tosi-table-fill`.
+- Under path or query routing, clicking a `/slug/#heading` link in a doc puts the hash in the URL
+  and scrolls to the heading. It pushed the page's URL without the hash and landed at the top.
+- The accessibility mode's axe audit and DAISY Ace run with a time limit (the audit's worst case
+  plus a minute; Ace ten minutes). One that hangs is stopped and reported as not having run,
+  instead of hanging the build, and a build stopped with Ctrl-C or SIGTERM stops them too,
+  instead of leaving them and their browser running.
+- The ePub accessibility check accepted any program named `ace` on PATH as DAISY Ace, so an
+  unrelated tool could decide whether a book claims WCAG conformance. It now accepts only an
+  `ace` inside a `@daisy/ace` package; another is skipped and named in the reason the check did
+  not run, and a real Ace later on PATH is still found.
+- `llms.txt` link titles no longer carry the project suffix ("Menus — tosijs-ui" on every line).
+- When a delegated build is refused because the dev server has a different site config, the
+  message now says that a refusal on every build means the config computes a value per process
+  (`Date.now()`, a random id, an environment variable one process lacks), and how to fix that.
+
 ## 1.17.0
 
 > Accessibility and SEO for doc sites, and the components themselves passing WCAG 2.2 AA. A doc

package/README.md

@@ -53,7 +53,7 @@ The `tosijs-ui` iife build bundles `tosijs`, `tosijs-ui`, `marked` and — as of
 **CodeMirror** into a single minified javascript source file. You can access `xinjs` and
 `xinjsui` as globals which contain all the things exported by `tosijs` and `tosijs-ui`.
 
-> **Size (1.16.21):** ~484KB gzip, up from ~120KB in 1.6. Two things dominate it, and
+> **Size (1.17.0):** ~506KB gzip, up from ~120KB in 1.6. Two things dominate it, and
 > `bun build --format iife` cannot
 > code-split, so `<tosi-code>`'s lazy CodeMirror import is flattened into this bundle
 > whether or not the page uses an editor. **If you don't need `<tosi-code>`, use the ESM

package/dist/data-table.d.ts

@@ -15,7 +15,8 @@ export interface ColumnOptions {
      * Whether this column takes a share of the space left over when the columns add up to
      * less than the table's width. Elastic columns grow in proportion to their `width`, and
      * never shrink below it. Defaults to the table's `elastic`. A pinned column is never
-     * elastic: its sticky offset is its width.
+     * elastic: its sticky offset is its width. Resizing a column by dragging sets this to
+     * `false` on it and on the elastic columns to its left, at the widths they were drawn at.
      */
     elastic?: boolean;
     sort?: false | 'ascending' | 'descending';
@@ -502,9 +503,7 @@ export declare class TosiTable extends TosiTable_base {
     private focusCell;
     private handleKeyNav;
     connectedCallback(): void;
-    /** Where `col`'s right edge is drawn, from the left of the columns. */
-    private drawnEdge;
-    private widthForEdge;
+    private pinElasticThrough;
     private isElastic;
     private layoutColumns;
     setColumnWidths(): void;

package/dist/data-table.js

@@ -1000,8 +1000,11 @@ creator) and every column is elastic unless it says `elastic: false`, which is t
 get it for columns inferred from the data. Pinned columns are never elastic. Elastic
 columns take precedence over `full-width-header`.
 
-Dragging an elastic column's edge keeps the edge under the pointer; the other elastic
-columns give up or take the difference.
+Dragging a column's edge resizes it to exactly where you drop it, narrower than its share
+included. The drag fixes that column, and any elastic columns to its left, at the width
+they were drawn at (it sets their `width` and `elastic: false`, as a resize always sets
+`width`): elastic columns to its right take up or give back the difference, and with none
+to its right, the space it gives up is left beside the columns.
 
 ### Filling the space beside the columns
 
@@ -3091,9 +3094,8 @@ export class TosiTable extends withAttributes({
             first drag on a fresh page into a text selection. See track-drag.ts, and #107.)
             */
             const prop = grabbed.prop;
-            let anchor = grabbed;
-            let anchorWidth = Number(grabbed.width);
-            let anchorEdge = this.drawnEdge(grabbed);
+            let anchor;
+            let anchorWidth = 0;
             let anchorDx = 0;
             const isTouchEvent = event.touches !== undefined;
             const touchIdentifier = isTouchEvent
@@ -3109,15 +3111,18 @@ export class TosiTable extends withAttributes({
                 const live = this.columns.find((c) => c.prop === prop);
                 if (!live)
                     return true;
+                // A click on the edge changes nothing: pin the columns on the first movement.
+                if (anchor === undefined && dx === 0) {
+                    return event.type === 'mouseup' || undefined;
+                }
                 if (live !== anchor) {
+                    this.pinElasticThrough(live);
+                    // The drag measures from where it started; a replaced column rebases on this step.
+                    anchorDx = anchor === undefined ? 0 : dx;
                     anchor = live;
                     anchorWidth = Number(live.width);
-                    anchorEdge = this.drawnEdge(live);
-                    anchorDx = dx;
                 }
-                const width = this.isElastic(live)
-                    ? this.widthForEdge(live, anchorEdge + (dx - anchorDx))
-                    : anchorWidth + (dx - anchorDx);
+                const width = anchorWidth + (dx - anchorDx);
                 live.width = width > this.minColumnWidth ? width : this.minColumnWidth;
                 this.setColumnWidths();
                 if (event.type === 'mouseup') {
@@ -3656,33 +3661,28 @@ export class TosiTable extends withAttributes({
         this.addEventListener('touchend', this.updateSelection);
         this.addEventListener('keydown', this.handleKeyNav);
     }
-    /** Where `col`'s right edge is drawn, from the left of the columns. */
-    drawnEdge(col) {
-        const cols = this.visibleColumns;
-        const { drawn } = this.layoutColumns(cols);
-        const index = cols.indexOf(col);
-        return drawn.slice(0, index + 1).reduce((sum, w) => sum + w, 0);
-    }
     /*
-    The width that draws an elastic column's right edge at `edge`, so a resize drag keeps the edge
-    under the pointer. An elastic column is drawn wider than its width and shares the leftover with
-    the others, so `width + dx` would move the edge by some fraction of dx. Its edge only ever
-    moves right as its width grows, so a bisection finds it.
+    Before a drag resizes `col`, fix it and every elastic column to its left at the width they are
+    drawn at. An elastic column's drawn width is not its width: the table's leftover space is shared
+    out over the elastic columns, so the last one's right edge is the table's right edge whatever
+    its width says, and dragging it narrower moved nothing (its width shrank to the minimum while
+    it stayed drawn wide). Once they are fixed, the dragged edge is the sum of fixed widths and
+    follows the pointer exactly; elastic columns to its right still share the leftover, and with
+    none, the leftover is the space beside the columns. Nothing moves when the drag starts: the
+    columns to the right are drawn at the same widths as before.
     */
-    widthForEdge(col, edge) {
-        const original = col.width;
-        let lo = this.minColumnWidth;
-        let hi = Math.max(lo, edge) * 64;
-        for (let i = 0; i < 40; i++) {
-            const mid = (lo + hi) / 2;
-            col.width = mid;
-            if (this.drawnEdge(col) < edge)
-                lo = mid;
-            else
-                hi = mid;
+    pinElasticThrough(col) {
+        const cols = this.visibleColumns;
+        const index = cols.indexOf(col);
+        if (index === -1)
+            return;
+        const { drawn } = this.layoutColumns(cols);
+        for (let i = 0; i <= index; i++) {
+            if (!this.isElastic(cols[i]))
+                continue;
+            cols[i].width = Math.round(drawn[i]);
+            cols[i].elastic = false;
         }
-        col.width = original;
-        return Math.round(hi);
     }
     isElastic(col) {
         return !col.pinned && (col.elastic ?? this.elastic);

package/dist/doc-browser.js

@@ -1011,7 +1011,14 @@ export function createDocBrowser(options) {
     const scrollToHashExample = () => {
         if (memoryRouting)
             return;
-        let hash = location.hash.replace(/^#/, '');
+        scrollToTarget(location.hash);
+    };
+    /*
+    Scroll to the element a `#hash` names in the content: the URL's hash on arrival (path and
+    query routing), or a clicked link's (memory routing, which never touches the URL).
+    */
+    const scrollToTarget = (rawHash) => {
+        let hash = rawHash.replace(/^#/, '');
         if (!hash)
             return;
         try {
@@ -1173,7 +1180,7 @@ export function createDocBrowser(options) {
     // User-initiated navigation: record the new location (history for path/query,
     // the onRouteChange callback for memory) and then render the doc. Every nav
     // click funnels through here so memory mode never touches window.history.
-    const go = (filename) => {
+    const go = (filename, hash = '') => {
         // If the source editor is open with unsaved changes, confirm before leaving;
         // on confirm it discards + closes, otherwise navigation is aborted (false).
         if (!confirmLeaveEditor())
@@ -1182,7 +1189,8 @@ export function createDocBrowser(options) {
             onRouteChange?.(slugFor(filename));
         }
         else {
-            const href = hrefFor(filename);
+            // The link's `#heading` goes into the URL, where showDoc's scrollToHashExample finds it.
+            const href = hrefFor(filename) + hash;
             /*
             A link to the document already showing REPLACES the entry rather than pushing one, as a
             native same-URL navigation does. Pushing left a duplicate the reader had to Back
@@ -1194,10 +1202,13 @@ export function createDocBrowser(options) {
             may want to come Back from.
             */
             const same = filename === String(app.currentDoc.filename) &&
-                document.location.hash === '';
+                document.location.hash === '' &&
+                hash === '';
             window.history[same ? 'replaceState' : 'pushState']({ href }, '', href);
         }
         navigateTo(filename);
+        if (memoryRouting)
+            scrollToTarget(hash);
         return true;
     };
     // Intercept clicks on internal doc links anywhere in the rendered content so
@@ -1222,27 +1233,7 @@ export function createDocBrowser(options) {
         if (filename === null)
             return;
         event.preventDefault();
-        if (!go(filename))
-            return;
-        /*
-        `/slug/#heading`: path routing gets the scroll from the URL (scrollToHashExample); memory
-        routing never touches the URL, so it goes to the heading itself, once the doc has drawn.
-        */
-        const hash = new URL(anchor.href, document.location.href).hash.slice(1);
-        if (memoryRouting && hash) {
-            requestAnimationFrame(() => requestAnimationFrame(() => {
-                let id = hash;
-                try {
-                    id = decodeURIComponent(hash);
-                }
-                catch {
-                    // a stray % — look it up as written
-                }
-                docContent
-                    .querySelector(`#${CSS.escape(id)}`)
-                    ?.scrollIntoView({ block: 'start' });
-            }));
-        }
+        go(filename, new URL(anchor.href, document.location.href).hash);
     });
     // ── Edit page source (Foundation B / #4) ──────────────────────────────────
     // The "view source" affordance opens a menu: edit the whole source file in a

package/dist/doc-system/doc-title.d.ts

@@ -17,3 +17,8 @@ export interface TitledDoc {
  * more specific label, so use it alone.
  */
 export declare function pageTitle(doc: TitledDoc, projectName?: string): string;
+/**
+ * "Menus — tosijs-ui" → "Menus": a `headTitle` often carries the suffix a headline or an index
+ * entry must not (the structured data's headline; llms.txt's link titles, #3867).
+ */
+export declare function withoutProjectSuffix(title: string, projectName: string | undefined): string;

package/dist/doc-system/doc-title.js

@@ -49,3 +49,13 @@ export function pageTitle(doc, projectName) {
         return doc.title;
     return `${doc.title} — ${project}`;
 }
+/**
+ * "Menus — tosijs-ui" → "Menus": a `headTitle` often carries the suffix a headline or an index
+ * entry must not (the structured data's headline; llms.txt's link titles, #3867).
+ */
+export function withoutProjectSuffix(title, projectName) {
+    if (!projectName)
+        return title;
+    const escaped = projectName.replace(/[.*+?^${}()|[\]\\]/g, '\\$&');
+    return (title.replace(new RegExp(`\\s+[—–|-]\\s+${escaped}\\s*$`, 'i'), '') || title);
+}

package/dist/doc-system/site/a11y-audit-cli.js

@@ -17,7 +17,7 @@ Build-time only. Never import this from browser code.
 import * as path from 'path';
 import { createRequire } from 'module';
 import { existsSync } from 'fs';
-import { NOT_RUN_EXIT, AXE_TAGS } from './a11y-audit.js';
+import { NOT_RUN_EXIT, AXE_TAGS, auditFileFor, } from './a11y-audit.js';
 const payloadPath = process.argv[2];
 const { outputDir, basePath, pages, slowPageMs } = JSON.parse(await Bun.file(payloadPath).text());
 const notRun = (why) => {
@@ -42,16 +42,13 @@ catch {
 }
 const root = path.resolve(outputDir);
 const prefix = (basePath || '').replace(/\/$/, '');
+// Loopback only: the built site is nobody else's business while it is audited (#3861).
 const server = Bun.serve({
     port: 0,
+    hostname: 'localhost',
     fetch(request) {
-        let pathname = decodeURIComponent(new URL(request.url).pathname);
-        if (prefix && pathname.startsWith(prefix))
-            pathname = pathname.slice(prefix.length) || '/';
-        if (pathname.endsWith('/'))
-            pathname += 'index.html';
-        const file = path.join(root, pathname);
-        if (!file.startsWith(root) || !existsSync(file))
+        const file = auditFileFor(root, prefix, new URL(request.url).pathname);
+        if (file === null || !existsSync(file))
             return new Response('not found', { status: 404 });
         return new Response(Bun.file(file));
     },

package/dist/doc-system/site/a11y-audit.d.ts

@@ -24,6 +24,14 @@ export type AxeAuditResult = {
     ran: false;
     reason: string;
 };
+/**
+ * The file in `root` a request path names for the audit server, or null when it is not one.
+ *
+ * Containment is `root + sep`, not a bare prefix: `startsWith(root)` let `/..%2fdocs-private/x`
+ * serve a sibling directory whose name starts with the output dir's (#3861). A malformed
+ * percent-escape is not a file either.
+ */
+export declare function auditFileFor(root: string, prefix: string, rawPathname: string): string | null;
 export declare function auditBuiltSite(opts: {
     outputDir: string;
     basePath?: string;

package/dist/doc-system/site/a11y-audit.js

@@ -9,36 +9,73 @@ takes seconds per page; that is a release step, not something to repeat on each
 What it never does is report a pass it did not earn: when Playwright, axe-core or Chromium is
 missing, the result says the audit did not run and why, and the build prints that.
 */
-import { spawn } from 'bun';
-import { existsSync } from 'fs';
+import { existsSync, mkdtempSync, rmSync } from 'fs';
+import { runBounded } from './bounded-child.js';
 import { tmpdir } from 'os';
 import * as path from 'path';
 /** The child's exit code when it could not run at all (a missing package or browser). */
 export const NOT_RUN_EXIT = 3;
 /** axe-core's tags for WCAG 2.0, 2.1 and 2.2 at levels A and AA. */
 export const AXE_TAGS = ['wcag2a', 'wcag2aa', 'wcag21a', 'wcag21aa', 'wcag22aa'];
+/**
+ * The file in `root` a request path names for the audit server, or null when it is not one.
+ *
+ * Containment is `root + sep`, not a bare prefix: `startsWith(root)` let `/..%2fdocs-private/x`
+ * serve a sibling directory whose name starts with the output dir's (#3861). A malformed
+ * percent-escape is not a file either.
+ */
+export function auditFileFor(root, prefix, rawPathname) {
+    let pathname;
+    try {
+        pathname = decodeURIComponent(rawPathname);
+    }
+    catch {
+        return null;
+    }
+    if (prefix && pathname.startsWith(prefix))
+        pathname = pathname.slice(prefix.length) || '/';
+    if (pathname.endsWith('/'))
+        pathname += 'index.html';
+    const base = path.resolve(root);
+    const file = path.join(base, pathname);
+    return file === base || file.startsWith(base + path.sep) ? file : null;
+}
 export async function auditBuiltSite(opts) {
     const cliTs = `${import.meta.dir}/a11y-audit-cli.ts`;
     const cli = existsSync(cliTs) ? cliTs : `${import.meta.dir}/a11y-audit-cli.js`;
-    const payloadPath = path.join(tmpdir(), `tosijs-a11y-${process.pid}.json`);
+    // A private directory, removed afterwards: a predictable name in a shared /tmp could be
+    // planted, and the payloads were never cleaned up (#3862).
+    const workDir = mkdtempSync(path.join(tmpdir(), 'tosijs-a11y-'));
+    const payloadPath = path.join(workDir, 'payload.json');
     await Bun.write(payloadPath, JSON.stringify({
         outputDir: path.resolve(opts.outputDir),
         basePath: opts.basePath ?? '',
         pages: opts.pages,
         slowPageMs: opts.slowPageMs,
     }));
+    /*
+    The worst case, plus a minute: every page waits out the slow-page limit, four at a time. A
+    run past that is hung, and is killed rather than hanging the build (#3860).
+    */
+    const timeoutMs = 60_000 + Math.ceil(opts.pages.length / 4) * (opts.slowPageMs ?? 30_000) * 2;
     // `--no-install`: without it Bun resolves a package the project does not have from its global
     // cache, so "not installed" would never be said and the audit would use a Playwright nobody chose.
-    const child = spawn(['bun', '--no-install', cli, payloadPath], {
-        cwd: opts.projectDir,
-        stdout: 'pipe',
-        stderr: 'pipe',
-    });
-    const [stdout, stderr, code] = await Promise.all([
-        new Response(child.stdout).text(),
-        new Response(child.stderr).text(),
-        child.exited,
-    ]);
+    let run;
+    try {
+        run = await runBounded(['bun', '--no-install', cli, payloadPath], {
+            cwd: opts.projectDir,
+            timeoutMs,
+        });
+    }
+    finally {
+        rmSync(workDir, { recursive: true, force: true });
+    }
+    const { stdout, stderr, code } = run;
+    if (run.timedOut)
+        return {
+            ran: false,
+            reason: `the audit did not finish in ${Math.round(timeoutMs / 1000)}s and was stopped`,
+        };
     if (code === NOT_RUN_EXIT)
         return { ran: false, reason: stderr.trim() };
     const line = stdout.trim().split('\n').pop() ?? '';

package/dist/doc-system/site/bounded-child.d.ts

@@ -0,0 +1,10 @@
+export interface BoundedResult {
+    stdout: string;
+    stderr: string;
+    code: number | null;
+    timedOut: boolean;
+}
+export declare function runBounded(argv: string[], opts: {
+    cwd?: string;
+    timeoutMs: number;
+}): Promise<BoundedResult>;

package/dist/doc-system/site/bounded-child.js

@@ -0,0 +1,44 @@
+/*
+Run a child process with a wall-clock limit, and take it down with the build.
+
+The axe audit and DAISY Ace are long-running children that drive browsers (#3860). Awaited with
+no limit, one that hung hung the build; and a build killed with Ctrl-C or SIGTERM left the child,
+and the Chromium under it, running. This bounds both: the child is killed when the limit passes
+(reported as `timedOut`), and when this process receives SIGINT or SIGTERM, after which the
+signal is raised again so the build still ends the way it would have.
+*/
+import { spawn } from 'bun';
+export async function runBounded(argv, opts) {
+    const child = spawn(argv, {
+        cwd: opts.cwd,
+        stdout: 'pipe',
+        stderr: 'pipe',
+    });
+    let timedOut = false;
+    const timer = setTimeout(() => {
+        timedOut = true;
+        child.kill();
+    }, opts.timeoutMs);
+    const signals = ['SIGINT', 'SIGTERM'];
+    const onSignal = (signal) => {
+        child.kill();
+        for (const s of signals)
+            process.off(s, onSignal);
+        process.kill(process.pid, signal);
+    };
+    for (const s of signals)
+        process.on(s, onSignal);
+    try {
+        const [stdout, stderr, code] = await Promise.all([
+            new Response(child.stdout).text(),
+            new Response(child.stderr).text(),
+            child.exited,
+        ]);
+        return { stdout, stderr, code, timedOut };
+    }
+    finally {
+        clearTimeout(timer);
+        for (const s of signals)
+            process.off(s, onSignal);
+    }
+}

package/dist/doc-system/site/config-fingerprint.d.ts

@@ -1 +1,22 @@
 export declare function configFingerprint(config: unknown): string;
+export interface BuildServerIdentity {
+    root: string;
+    pid: number;
+    config: string;
+}
+/**
+ * Why a dev server refuses a `/__build` request, as the 409 reply's body, or null to build.
+ *
+ * A request for another project's tree, or with a config fingerprint other than the one the
+ * server was launched with, is refused BEFORE anything is built (#3772, #3863).
+ */
+export declare function buildRequestRefusal(params: URLSearchParams, server: BuildServerIdentity): Record<string, unknown> | null;
+/**
+ * What a delegated build says when the server's reply does not prove it built THIS config, or
+ * null when it does. A server too old to send a fingerprint has already built with whatever
+ * config it was started with, so it cannot be trusted either.
+ */
+export declare function staleConfigMessage(replyConfig: string | undefined, fingerprint: string, where: {
+    port: number;
+    pid: number;
+}): string | null;

package/dist/doc-system/site/config-fingerprint.js

@@ -31,3 +31,46 @@ export function configFingerprint(config) {
         .digest('hex')
         .slice(0, 16);
 }
+/**
+ * Why a dev server refuses a `/__build` request, as the 409 reply's body, or null to build.
+ *
+ * A request for another project's tree, or with a config fingerprint other than the one the
+ * server was launched with, is refused BEFORE anything is built (#3772, #3863).
+ */
+export function buildRequestRefusal(params, server) {
+    const root = params.get('root');
+    if (root !== null && root !== server.root)
+        return {
+            ok: false,
+            detail: `this server builds ${server.root}, not ${root}`,
+            pid: server.pid,
+            root: server.root,
+        };
+    const config = params.get('config');
+    if (config !== null && config !== server.config)
+        return {
+            ok: false,
+            detail: `🛑 this dev server (pid ${server.pid}) was started with a different site config ` +
+                `(edited since, or loaded with a different environment), so it would build the ` +
+                `old one. Restart it, then build again. If this happens on every build, the config ` +
+                `computes a value that differs per process (Date.now(), a random id, an environment ` +
+                `variable one of the two lacks): compute it in a prebuild step instead, or pass it ` +
+                `in through the environment both processes share.`,
+            pid: server.pid,
+            root: server.root,
+            config: server.config,
+        };
+    return null;
+}
+/**
+ * What a delegated build says when the server's reply does not prove it built THIS config, or
+ * null when it does. A server too old to send a fingerprint has already built with whatever
+ * config it was started with, so it cannot be trusted either.
+ */
+export function staleConfigMessage(replyConfig, fingerprint, where) {
+    if (replyConfig === fingerprint)
+        return null;
+    return `🛑 the dev server on ${where.port} is building ${replyConfig === undefined
+        ? 'with a version of tosijs-ui that cannot say which site config it has'
+        : 'a different site config from this one (edited since it started, or loaded with a different environment)'}. Restart it (pid ${where.pid}), then build again.\n`;
+}

package/dist/doc-system/site/dev-server.js

@@ -15,7 +15,7 @@ import { tmpdir } from 'os';
 import { $, spawn, gzipSync } from 'bun';
 import { brotliCompressSync, constants as zlibConstants } from 'node:zlib';
 import { buildSite } from './orchestrator.js';
-import { configFingerprint } from './config-fingerprint.js';
+import { buildRequestRefusal, configFingerprint } from './config-fingerprint.js';
 import { preflight } from './preflight.js';
 import { auditDependencies, reportAudit } from './audit-guard.js';
 import { openDevBrowser } from './open-browser.js';
@@ -2470,27 +2470,16 @@ export async function devServer(config, opts = {}) {
             build used to write the old config's site and report success. The caller compares and
             refuses.
             */
-            const requestedRoot = new URL(request.url).searchParams.get('root');
-            if (requestedRoot !== null && requestedRoot !== path.resolve('./')) {
-                return new Response(JSON.stringify({
-                    ok: false,
-                    detail: `this server builds ${path.resolve('./')}, not ${requestedRoot}`,
-                    pid: process.pid,
-                    root: path.resolve('./'),
-                }), { status: 409, headers: { 'Content-Type': 'application/json' } });
-            }
-            const requestedConfig = new URL(request.url).searchParams.get('config');
-            if (requestedConfig !== null && requestedConfig !== launchedConfig) {
-                return new Response(JSON.stringify({
-                    ok: false,
-                    detail: `🛑 this dev server (pid ${process.pid}) was started with a different site config ` +
-                        `(edited since, or loaded with a different environment), so it would build the ` +
-                        `old one. Restart it, then build again.`,
-                    pid: process.pid,
-                    root: path.resolve('./'),
-                    config: launchedConfig,
-                }), { status: 409, headers: { 'Content-Type': 'application/json' } });
-            }
+            const refusal = buildRequestRefusal(new URL(request.url).searchParams, {
+                root: path.resolve('./'),
+                pid: process.pid,
+                config: launchedConfig,
+            });
+            if (refusal)
+                return new Response(JSON.stringify(refusal), {
+                    status: 409,
+                    headers: { 'Content-Type': 'application/json' },
+                });
             const result = await requestBuild();
             return new Response(JSON.stringify({
                 ...result,

package/dist/doc-system/site/epub-a11y.d.ts

@@ -28,12 +28,21 @@ export type AceResult = {
 };
 /** Why Ace did not run, when it is not installed anywhere. */
 export declare const ACE_NOT_INSTALLED = "DAISY Ace is not installed (npm install -g @daisy/ace, which keeps it out of your lockfile)";
+/** Is `bin` DAISY Ace? Its real path sits inside a `@daisy/ace` package (#3864). */
+export declare function isDaisyAce(bin: string): boolean;
 /**
- * Where `ace` is: the project's own `node_modules/.bin` first, then `PATH`. A global install is
- * the one the docs recommend: Ace brings Electron and Puppeteer, whose advisories would otherwise
- * fail the project's own dependency audit (#3577). It is the adopter's, never a dependency of
- * tosijs-ui.
+ * Where DAISY Ace is: the project's own `node_modules/.bin` first, then `PATH`. A global install
+ * is the one the docs recommend: Ace brings Electron and Puppeteer, whose advisories would
+ * otherwise fail the project's own dependency audit (#3577). It is the adopter's, never a
+ * dependency of tosijs-ui.
+ *
+ * Only DAISY Ace counts: an unrelated program named `ace` would otherwise decide whether a book
+ * claims conformance (#3864). `notAce` lists any `ace` found that is not it.
  */
+export declare function locateAce(projectDir?: string, searchPath?: string): {
+    bin: string | null;
+    notAce: string[];
+};
 export declare function findAce(projectDir?: string, searchPath?: string): string | null;
 /** Check a built `.epub` with DAISY Ace (`@daisy/ace`). */
 export declare function runAce(epubFile: string, projectDir?: string, searchPath?: string): Promise<AceResult>;