truecanvas 0.4.1 → 0.6.0

package/dist/{chunk-M7B3W7EP.js → chunk-OPKROZI2.js}

@@ -40,6 +40,10 @@ header { position: fixed; top: 12px; left: 12px; right: 12px; display: flex; ali
   background: var(--panel); backdrop-filter: blur(14px); -webkit-backdrop-filter: blur(14px); border: 1px solid var(--line); box-shadow: 0 1px 2px rgba(0,0,0,.05); }
 .brand img { height: 20px; width: auto; display: block; }
 .brand span { font-weight: 600; letter-spacing: -.01em; }
+.brand .who { font-weight: 450; color: var(--muted); white-space: nowrap; overflow: hidden; text-overflow: ellipsis; max-width: 180px; }
+.brand form { display: contents; }
+.brand .who-btn, .brand a.who-btn { height: 28px; padding: 0 8px; border-radius: 8px; font-size: 13px; color: var(--text); text-decoration: none; display: inline-flex; align-items: center; }
+.brand .who-btn:hover { background: var(--line); }
 .title { font-weight: 550; }
 .meta { color: var(--muted); }
 .vselect { gap: 4px; color: var(--muted); padding: 0 6px 0 8px; margin-right: -6px; max-width: 46vw; }
@@ -120,23 +124,56 @@ button:focus-visible { outline: 2px solid #3b82f6; outline-offset: 1px; }
 @media (max-width: 640px) {
   .meta, .sep, .made, .vdate { display: none; } header { top: 8px; left: 8px; right: 8px; gap: 8px; }
   .brand:has(img) span { display: none; }
+  .brand .who { display: none; }
   header .pill { min-width: 0; padding: 0 10px; }
   header .pill:last-child { flex: 1 1 auto; justify-content: flex-end; }
   .title { min-width: 0; overflow: hidden; text-overflow: ellipsis; white-space: nowrap; }
   #pop { left: 8px !important; right: 8px; top: auto !important; bottom: 8px; width: auto; max-height: 60dvh; }
   #panel { left: 8px; right: 8px; top: 56px; bottom: 68px; width: auto; }
 }
-@media (prefers-reduced-motion: reduce) { .frame-box iframe { transition: none; } }
+/* live site */
+.live-btn { height: 22px; min-width: 0; margin-left: 8px; padding: 0 8px 0 6px; gap: 4px; border-radius: 6px; vertical-align: middle;
+  background: var(--accent-soft); color: var(--accent); font-size: 11.5px; font-weight: 600; }
+.live-btn:hover { background: var(--accent); color: #fff; }
+#live { position: fixed; inset: 0; z-index: 50; display: flex; flex-direction: column; align-items: center; justify-content: center; gap: 10px; padding: 16px;
+  background: rgba(12,12,11,.6); backdrop-filter: blur(6px); -webkit-backdrop-filter: blur(6px); animation: fade-in .16s var(--ease-out); }
+@keyframes fade-in { from { opacity: 0; } }
+.live-bar { display: flex; align-items: center; gap: 10px; max-width: 100%; height: 40px; padding: 0 6px 0 14px; border-radius: 12px;
+  background: var(--panel-solid); border: 1px solid var(--line); box-shadow: 0 8px 28px -10px rgba(0,0,0,.35); }
+.live-bar b { font-weight: 600; white-space: nowrap; overflow: hidden; text-overflow: ellipsis; min-width: 0; }
+.live-bar a { color: var(--text); white-space: nowrap; text-decoration: none; padding: 0 8px; height: 30px; display: inline-flex; align-items: center; border-radius: 8px; }
+.live-bar a:hover { background: var(--line); }
+.live-device { position: relative; overflow: hidden; border-radius: 10px; background: #fff; box-shadow: 0 30px 80px -20px rgba(0,0,0,.6); animation: pop-in .2s var(--ease-out); }
+.live-device iframe { position: absolute; left: 0; top: 0; border: 0; transform-origin: 0 0; background: #fff; }
+@media (max-width: 640px) { .live-bar .meta { display: none; } }
+/* the room: who's here, their cursors, a live session */
+#room { gap: 8px; padding: 0 10px 0 12px; }
+.live-badge { display: inline-flex; align-items: center; gap: 6px; font-weight: 650; font-size: 12px; color: #dc2626; letter-spacing: .01em; }
+.live-badge::before { content: ""; width: 7px; height: 7px; border-radius: 50%; background: #dc2626; box-shadow: 0 0 0 3px rgba(220,38,38,.18); }
+.faces { display: flex; }
+.face { width: 24px; height: 24px; border-radius: 50%; display: grid; place-items: center; color: #fff; font-size: 10.5px; font-weight: 650;
+  border: 2px solid var(--panel-solid); margin-left: -6px; }
+.face:first-child { margin-left: 0; }
+.rcursor { position: absolute; width: 0; height: 0; transform-origin: 0 0; z-index: 3; pointer-events: none; transition: left .09s linear, top .09s linear; }
+.rcursor svg { position: absolute; left: -2px; top: -2px; display: block; }
+.rcursor span { position: absolute; left: 13px; top: 15px; white-space: nowrap; padding: 2px 7px; border-radius: 7px; color: #fff; font-size: 11.5px; font-weight: 600;
+  box-shadow: 0 2px 6px rgba(0,0,0,.18); }
+@media (prefers-reduced-motion: reduce) { .frame-box iframe { transition: none; } #live, .live-device { animation: none; } .rcursor { transition: none; } }
 </style>
 </head>
 <body>
 <div id="stage" aria-label="Design canvas"><div id="world"></div></div>
 <header>
   <div class="pill brand" id="brand"><span>Design review</span></div>
+  <div class="pill" id="room" hidden aria-live="polite"></div>
   <div class="pill"><span class="title" id="title"></span><span class="sep"></span><span class="meta" id="meta"></span><button id="list" hidden aria-label="Comments" title="Comments"><svg width="15" height="15" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><path d="M4 5h16v11H9l-5 4z"/></svg><span class="count" id="count">0</span></button></div>
 </header>
 <aside id="panel" hidden aria-label="Comments"><div class="panel-head"><span>Comments</span><button id="panel-close" aria-label="Close">\u2715</button></div><div class="panel-list" id="panel-list"></div></aside>
 <div id="pop" hidden role="dialog" aria-label="Comment"></div>
+<div id="live" hidden role="dialog" aria-modal="true" aria-label="Live site">
+  <div class="live-bar"><b id="live-name"></b><span class="meta" id="live-size"></span><a id="live-tab" target="_blank" rel="noopener">Open in a new tab</a><button id="live-close" aria-label="Close live site" title="Close (Esc)">\u2715</button></div>
+  <div class="live-device" id="live-device"></div>
+</div>
 <footer><div class="pill">
   <button id="out" aria-label="Zoom out" title="Zoom out (-)">\u2212</button>
   <button id="zoom" aria-label="Zoom to fit" title="Zoom to fit (1)">100%</button>
@@ -248,6 +285,14 @@ button:focus-visible { outline: 2px solid #3b82f6; outline-offset: 1px; }
   if (manifest.brand) {
     document.getElementById("brand").innerHTML = (manifest.brand.logo ? '<img alt="" src="' + esc(manifest.brand.logo) + '">' : "") + (manifest.brand.name ? "<span>" + esc(manifest.brand.name) + "</span>" : "");
   }
+  // signed in: who's commenting, and sign out. On review sites with sign-in, a way in for the studio and invitees.
+  if (manifest.viewer || manifest.signIn) {
+    const brandEl = document.getElementById("brand");
+    const here = location.pathname.replace(/\\/+$/, "");
+    brandEl.insertAdjacentHTML("beforeend", '<span class="sep"></span>' + (manifest.viewer
+      ? '<span class="who" title="' + esc(manifest.viewer.email) + '">' + esc(manifest.viewer.name) + '</span><form method="post" action="/signout"><input type="hidden" name="next" value="' + esc(here) + '"><button class="who-btn" type="submit">Sign out</button></form>'
+      : '<a class="who-btn" href="/signin?next=' + encodeURIComponent(here) + '">Sign in</a>'));
+  }
 
   // layout: frames at their canvas positions
   const frames = manifest.frames;
@@ -258,10 +303,12 @@ button:focus-visible { outline: 2px solid #3b82f6; outline-offset: 1px; }
     const el = document.createElement("div");
     el.className = "frame";
     el.style.cssText = "left:" + (f.x - minX) + "px;top:" + (f.y - minY) + "px;width:" + f.width + "px;height:" + f.height + "px";
-    el.innerHTML = '<div class="frame-label"><b>' + esc(f.name) + "</b>" + f.width + " \xD7 " + Math.round(f.height) + "</div>" +
+    el.innerHTML = '<div class="frame-label"><b>' + esc(f.name) + "</b>" + f.width + " \xD7 " + Math.round(f.height) + (manifest.live ? '<button class="live-btn" title="Open the live site at this width"><svg width="11" height="11" viewBox="0 0 24 24" fill="currentColor"><path d="M7 4.5v15l13-7.5z"/></svg>View live</button>' : "") + "</div>" +
       '<div class="frame-box" style="width:' + f.width + "px;height:" + f.height + 'px"><img alt="" src="' + esc(f.image) + '"><iframe sandbox title="' + esc(f.name) + '" scrolling="no" loading="lazy" src="' + esc(f.html) + '"></iframe></div>';
     const iframe = el.querySelector("iframe");
     iframe.addEventListener("load", () => iframe.classList.add("ready"));
+    const liveBtn = el.querySelector(".live-btn");
+    if (liveBtn) liveBtn.onclick = (e) => { e.stopPropagation(); openLive(f); };
     el.dataset.name = f.name;
     world.appendChild(el);
     labels.push(el.querySelector(".frame-label"));
@@ -276,7 +323,7 @@ button:focus-visible { outline: 2px solid #3b82f6; outline-offset: 1px; }
     zoomLabel.textContent = Math.round(z * 100) + "%";
     // labels keep a readable size at any zoom
     for (const l of labels) l.style.transform = "scale(" + 1 / z + ")";
-    for (const p of world.querySelectorAll(".pin")) p.style.transform = "scale(" + 1 / z + ")";
+    for (const p of world.querySelectorAll(".pin, .rcursor")) p.style.transform = "scale(" + 1 / z + ")";
     if (typeof placePop === "function") placePop();
   };
   const zoomAt = (nz, cx, cy) => {
@@ -319,8 +366,8 @@ button:focus-visible { outline: 2px solid #3b82f6; outline-offset: 1px; }
   let pinch = null;
   let moved = false, downAt = null;
   stage.addEventListener("pointerdown", (e) => {
-    // pins are buttons: they take their own clicks
-    if (e.target.closest && e.target.closest(".pin")) return;
+    // pins and View live are buttons: they take their own clicks
+    if (e.target.closest && e.target.closest(".pin, .live-btn")) return;
     stage.setPointerCapture(e.pointerId);
     moved = false;
     downAt = { x: e.clientX, y: e.clientY };
@@ -378,6 +425,7 @@ button:focus-visible { outline: 2px solid #3b82f6; outline-offset: 1px; }
   document.getElementById("out").onclick = () => zoomAt(z / 1.25, ...center());
   zoomLabel.onclick = () => (tall() ? fitWidth() : fit());
   addEventListener("keydown", (e) => {
+    if (liveOpen()) { if (e.key === "Escape") closeLive(); return; }
     if (e.target.closest && e.target.closest("input, textarea, select")) return;
     if (e.key === "Escape") { closePop(); setCommenting(false); return; }
     if ((e.key === "c" || e.key === "C") && canComment && !e.metaKey && !e.ctrlKey) { setCommenting(!commenting); return; }
@@ -389,6 +437,53 @@ button:focus-visible { outline: 2px solid #3b82f6; outline-offset: 1px; }
   });
   addEventListener("resize", apply);
 
+  // ---------- live site: the real thing, at the frame's width ----------
+  const liveBox = document.getElementById("live");
+  const liveDevice = document.getElementById("live-device");
+  let liveFrame = null, liveReturn = null;
+  const liveOpen = () => !liveBox.hidden;
+  // a realistic screen for the width: desktop, tablet or phone
+  const viewportHeight = (w) => (w >= 1024 ? 900 : w > 500 ? 1024 : 844);
+  function sizeLive() {
+    if (!liveFrame) return;
+    const w = liveFrame.width, h = viewportHeight(w);
+    const s = Math.min(1, (innerWidth - 32) / w, (innerHeight - 32 - 50) / h);
+    liveDevice.style.width = Math.round(w * s) + "px";
+    liveDevice.style.height = Math.round(h * s) + "px";
+    const iframe = liveDevice.querySelector("iframe");
+    iframe.style.width = w + "px";
+    iframe.style.height = h + "px";
+    iframe.style.transform = s < 1 ? "scale(" + s + ")" : "";
+    document.getElementById("live-size").textContent = w + " \xD7 " + h + (s < 1 ? " \xB7 " + Math.round(s * 100) + "%" : "");
+  }
+  function openLive(f) {
+    liveFrame = f;
+    liveReturn = document.activeElement;
+    liveDevice.textContent = "";
+    // its own origin: scripts run there, never on the review site
+    const iframe = document.createElement("iframe");
+    iframe.title = "Live site: " + f.name;
+    iframe.setAttribute("sandbox", "allow-scripts allow-same-origin allow-forms allow-popups allow-popups-to-escape-sandbox");
+    iframe.setAttribute("referrerpolicy", "no-referrer");
+    iframe.src = manifest.live.url;
+    liveDevice.appendChild(iframe);
+    document.getElementById("live-name").textContent = f.name;
+    document.getElementById("live-tab").href = manifest.live.url;
+    liveBox.hidden = false;
+    sizeLive();
+    document.getElementById("live-close").focus();
+  }
+  function closeLive() {
+    liveBox.hidden = true;
+    liveDevice.textContent = "";
+    liveFrame = null;
+    if (liveReturn && liveReturn.focus) liveReturn.focus();
+  }
+  document.getElementById("live-close").onclick = closeLive;
+  // a click on the backdrop closes it too
+  liveBox.addEventListener("click", (e) => { if (e.target === liveBox) closeLive(); });
+  addEventListener("resize", sizeLive);
+
   // ---------- comments (on a review site: the manifest says so) ----------
   var canComment = !!manifest.comments;
   var commenting = false;
@@ -398,7 +493,8 @@ button:focus-visible { outline: 2px solid #3b82f6; outline-offset: 1px; }
   var popAnchor = null;
   var pop = document.getElementById("pop");
   const studioName = (manifest.brand && manifest.brand.name) || "Studio";
-  const storedName = () => { try { return localStorage.getItem("tc-review-name") || ""; } catch { return ""; } };
+  // signed in: comments carry the account's name, nothing to type
+  const storedName = () => { if (manifest.viewer) return manifest.viewer.name; try { return localStorage.getItem("tc-review-name") || ""; } catch { return ""; } };
   const saveName = (n) => { try { localStorage.setItem("tc-review-name", n); } catch {} };
   const ago = (t) => {
     const s = Math.round((Date.now() - t) / 1000);
@@ -647,6 +743,156 @@ button:focus-visible { outline: 2px solid #3b82f6; outline-offset: 1px; }
     setInterval(() => document.visibilityState === "visible" && refresh(), 15000);
     addEventListener("visibilitychange", () => document.visibilityState === "visible" && refresh());
   }
+
+  // ---------- the link's room: who's here, their cursors, comments as they come, live sessions ----------
+  if (manifest.room && "WebSocket" in window) {
+    const people = new Map();
+    const roomPill = document.getElementById("room");
+    let me = null, live = false, route = null, sock = null, retry = 1000, ping = 0;
+    // a session shows the app as it is now: only on the latest version
+    const canLive = !!manifest.session && (!manifest.versions || !manifest.versions.length || manifest.versions[0].id === manifest.id);
+    const initials = (n) => n.split(" ").filter(Boolean).slice(0, 2).map((w) => w[0].toUpperCase()).join("") || "?";
+
+    function renderRoom() {
+      const others = [...people.values()];
+      roomPill.hidden = !live && !others.length;
+      roomPill.textContent = "";
+      if (live) roomPill.appendChild(el("span", "live-badge", "Live"));
+      const faces = el("span", "faces");
+      for (const p of others.slice(0, 5)) {
+        const f = el("span", "face", initials(p.name));
+        f.style.background = p.color;
+        f.title = p.name + (p.kind === "studio" ? " (" + studioName + ")" : "");
+        faces.appendChild(f);
+      }
+      if (others.length > 5) faces.appendChild(el("span", "face", "+" + (others.length - 5))).style.background = "#8b8a85";
+      if (others.length) roomPill.appendChild(faces);
+      roomPill.setAttribute("aria-label", (live ? "Live session. " : "") + (others.length ? others.map((p) => p.name).join(", ") + " here" : ""));
+    }
+
+    function cursorOf(p) {
+      if (p.el) return p.el;
+      p.el = el("div", "rcursor");
+      p.el.innerHTML = '<svg width="18" height="18" viewBox="0 0 18 18" aria-hidden="true"><path d="M2.2 1.6 15.1 8.3c.7.4.6 1.4-.2 1.6l-5.3 1.3-2.6 4.8c-.4.7-1.4.6-1.6-.2L1.1 2.7c-.2-.8.5-1.4 1.1-1.1Z" stroke="#fff" stroke-width="1.5" stroke-linejoin="round"/></svg>';
+      p.el.querySelector("path").setAttribute("fill", p.color);
+      const name = el("span", null, p.name);
+      name.style.background = p.color;
+      p.el.appendChild(name);
+      p.el.style.transform = "scale(" + 1 / z + ")";
+      world.appendChild(p.el);
+      return p.el;
+    }
+    function moveCursor(p, cx, cy) {
+      if (cx == null || cy == null) { if (p.el) p.el.hidden = true; return; }
+      const c = cursorOf(p);
+      c.hidden = false;
+      c.style.left = cx - minX + "px";
+      c.style.top = cy - minY + "px";
+    }
+    const add = (person) => { if (person.id !== me) people.set(person.id, Object.assign(people.get(person.id) || {}, person)); };
+    const remove = (id) => { const p = people.get(id); if (p && p.el) p.el.remove(); people.delete(id); };
+
+    // live frames: the studio's app, served from the link's session host, at each frame's size
+    function sessionFrame(f) {
+      const home = new URL(manifest.session.url);
+      const url = new URL((route || "/truecanvas/") + encodeURIComponent(manifest.canvas), home);
+      url.searchParams.set("frame", f.name);
+      if (f.theme) url.searchParams.set("theme", f.theme);
+      const token = home.searchParams.get("tc_access");
+      if (token) url.searchParams.set("tc_access", token);
+      return url.href;
+    }
+    function setLive(on) {
+      on = !!on && canLive;
+      if (on === live) return renderRoom();
+      live = on;
+      for (const frameEl of world.querySelectorAll(".frame")) {
+        const f = frameOf(frameEl.dataset.name);
+        const box = frameEl.querySelector(".frame-box");
+        const old = box.querySelector("iframe");
+        const img = box.querySelector("img");
+        const next = document.createElement("iframe");
+        next.title = f.name;
+        next.setAttribute("scrolling", "no");
+        if (on) {
+          // its own origin: the app's scripts run there, never on the review site
+          next.setAttribute("sandbox", "allow-scripts allow-same-origin allow-forms");
+          next.setAttribute("referrerpolicy", "no-referrer");
+          next.src = sessionFrame(f);
+        } else {
+          next.setAttribute("sandbox", "");
+          next.loading = "lazy";
+          next.src = f.html;
+          if (img) img.style.visibility = "";
+        }
+        next.addEventListener("load", () => { next.classList.add("ready"); if (on && img) img.style.visibility = "hidden"; });
+        old.replaceWith(next);
+      }
+      renderRoom();
+      toast(on ? "Live: you're seeing the design as the studio works on it" : "The live session ended: back to the published version");
+    }
+
+    function onEvent(e) {
+      if (e.t === "hello") {
+        me = e.you.id;
+        for (const id of [...people.keys()]) remove(id);
+        for (const p of e.people) add(p);
+        route = e.route;
+        setLive(e.live);
+      } else if (e.t === "join") { add(e.person); renderRoom(); }
+      else if (e.t === "leave") { remove(e.id); renderRoom(); }
+      else if (e.t === "cursor") { const p = people.get(e.id); if (p) moveCursor(p, e.x, e.y); }
+      else if (e.t === "state") { route = e.route || route; setLive(e.live); }
+      else if (e.t === "comments" && canComment) refresh();
+    }
+
+    function connect() {
+      const url = new URL("room", document.baseURI);
+      url.protocol = url.protocol === "https:" ? "wss:" : "ws:";
+      const typed = storedName();
+      if (!manifest.viewer && typed) url.searchParams.set("name", typed);
+      const s = new WebSocket(url.href);
+      sock = s;
+      s.onopen = () => {
+        retry = 1000;
+        clearInterval(ping);
+        // idle sockets are dropped after about 100 s: the room answers "ping" without waking up
+        ping = setInterval(() => s.readyState === 1 && s.send("ping"), 30000);
+      };
+      s.onmessage = (m) => {
+        if (m.data === "pong") return;
+        let e;
+        try { e = JSON.parse(m.data); } catch { return; }
+        onEvent(e);
+      };
+      s.onclose = () => {
+        clearInterval(ping);
+        if (sock !== s) return;
+        sock = null;
+        for (const id of [...people.keys()]) remove(id);
+        renderRoom();
+        setTimeout(connect, retry);
+        retry = Math.min(retry * 2, 15000);
+      };
+    }
+
+    // my cursor, in canvas coordinates, at most 20 times a second
+    let next = null, timer = 0, last = 0;
+    const flush = () => {
+      timer = 0;
+      if (!next || !sock || sock.readyState !== 1) return;
+      last = Date.now();
+      sock.send(JSON.stringify({ t: "cursor", x: next.x, y: next.y }));
+      next = null;
+    };
+    const sendCursor = (cx, cy) => {
+      next = { x: cx, y: cy };
+      if (!timer) timer = setTimeout(flush, Math.max(0, 50 - (Date.now() - last)));
+    };
+    stage.addEventListener("pointermove", (e) => sendCursor((e.clientX - x) / z + minX, (e.clientY - y) / z + minY));
+    stage.addEventListener("pointerleave", () => sendCursor(null, null));
+    connect();
+  }
 })();
 </script>
 </body>
@@ -654,6 +900,86 @@ button:focus-visible { outline: 2px solid #3b82f6; outline-offset: 1px; }
 `;
 }
 
+// src/share/wire.ts
+var CHUNK = 256 * 1024;
+var enc = new TextEncoder();
+var dec = new TextDecoder();
+function encodeFrame(header, payload) {
+  const head = enc.encode(JSON.stringify(header));
+  const out = new Uint8Array(4 + head.length + (payload?.length ?? 0));
+  new DataView(out.buffer).setUint32(0, head.length);
+  out.set(head, 4);
+  if (payload) out.set(payload, 4 + head.length);
+  return out;
+}
+function decodeFrame(data) {
+  const bytes = data instanceof Uint8Array ? data : new Uint8Array(data);
+  if (bytes.length < 4) throw new Error("Short tunnel frame");
+  const size = new DataView(bytes.buffer, bytes.byteOffset, bytes.byteLength).getUint32(0);
+  if (size > bytes.length - 4) throw new Error("Bad tunnel frame");
+  const header = JSON.parse(dec.decode(bytes.subarray(4, 4 + size)));
+  if (!header || typeof header.t !== "string" || typeof header.id !== "string") throw new Error("Bad tunnel frame");
+  return { header, payload: bytes.subarray(4 + size) };
+}
+function safePath(path) {
+  if (typeof path !== "string" || path.length > 8192) return null;
+  if (!path.startsWith("/") || path.startsWith("//") || /[\\\u0000-\u001f\u007f]/.test(path)) return null;
+  if (/^\/(%2f|%5c)/i.test(path)) return null;
+  return path;
+}
+var DROP_REQUEST = /* @__PURE__ */ new Set([
+  "host",
+  "connection",
+  "keep-alive",
+  "upgrade",
+  "transfer-encoding",
+  "te",
+  "trailer",
+  "proxy-authorization",
+  "proxy-connection",
+  "content-length",
+  "accept-encoding",
+  "origin",
+  "referer",
+  "authorization",
+  "cdn-loop",
+  "x-real-ip",
+  "true-client-ip",
+  "sec-websocket-key",
+  "sec-websocket-version",
+  "sec-websocket-extensions",
+  "sec-websocket-protocol"
+]);
+function requestHeaders(headers) {
+  const out = [];
+  for (const [k, v] of headers) {
+    const key = k.toLowerCase();
+    if (DROP_REQUEST.has(key) || key.startsWith("cf-") || key.startsWith("x-forwarded-") || key.startsWith("sec-fetch-") || key.startsWith("x-tc-")) continue;
+    if (key === "cookie") {
+      const kept = v.split(";").map((c) => c.trim()).filter((c) => c && !c.startsWith("tc_"));
+      if (kept.length) out.push(["cookie", kept.join("; ")]);
+      continue;
+    }
+    out.push([key, v]);
+  }
+  return out;
+}
+var DROP_RESPONSE = /* @__PURE__ */ new Set(["connection", "keep-alive", "transfer-encoding", "content-encoding", "content-length", "upgrade", "trailer", "alt-svc"]);
+function responseHeaders(headers) {
+  const out = [];
+  for (const [k, v] of headers) {
+    const key = k.toLowerCase();
+    if (!DROP_RESPONSE.has(key)) out.push([key, v]);
+  }
+  return out;
+}
+
 export {
-  viewerHtml
+  viewerHtml,
+  CHUNK,
+  encodeFrame,
+  decodeFrame,
+  safePath,
+  requestHeaders,
+  responseHeaders
 };

package/dist/chunk-OZOV4Y6C.js

@@ -0,0 +1,45 @@
+// src/core/config.ts
+import fs from "fs";
+import path from "path";
+function loadConfig(root, overrides = {}) {
+  let file = {};
+  const configPath = path.join(root, "truecanvas.config.json");
+  if (fs.existsSync(configPath)) file = JSON.parse(fs.readFileSync(configPath, "utf8"));
+  let deps = {};
+  try {
+    const pkg = JSON.parse(fs.readFileSync(path.join(root, "package.json"), "utf8"));
+    deps = { ...pkg.dependencies, ...pkg.devDependencies };
+  } catch {
+    deps = {};
+  }
+  const framework = file.framework ?? detectFramework(deps);
+  const vite = framework === "vite";
+  const appDir = file.appDir ?? (vite ? fs.existsSync(path.join(root, "src")) ? "src" : "." : fs.existsSync(path.join(root, "src/app")) ? "src/app" : "app");
+  const srcPrefix = appDir === "src" || appDir.startsWith("src/") ? "src/" : "";
+  const knownLibraries = ["@paper-design/shaders-react"].filter((l) => l in deps);
+  return {
+    root,
+    framework,
+    appUrl: vite ? "http://localhost:5173" : "http://localhost:3000",
+    port: 4800,
+    canvasDir: `${srcPrefix}canvas`,
+    appDir,
+    routeDir: vite ? ".truecanvas" : `${appDir}/truecanvas`,
+    components: [`${srcPrefix}components/**/*.tsx`],
+    darkMode: { strategy: "class", value: "dark" },
+    ...file,
+    libraries: [.../* @__PURE__ */ new Set([...knownLibraries, ...file.libraries ?? []])],
+    ...stripUndefined(overrides)
+  };
+}
+function stripUndefined(o) {
+  return Object.fromEntries(Object.entries(o).filter(([, v]) => v !== void 0));
+}
+function detectFramework(deps) {
+  return !("next" in deps) && "vite" in deps ? "vite" : "next";
+}
+
+export {
+  loadConfig,
+  detectFramework
+};