engine fix: synch user assets folder better#4

Merged

sowenzhang merged 8 commits into

mainfrom

fix/sync-user-assets

May 25, 2026

Commits on May 25, 2026

fix(engine): mirror user assets (images/, fonts/, etc.) from deck folder into build/
sowenzhang
committed
fix(publish): emit relative vendor paths so file:// open works after multi-file publish

sowenzhang
and
claude
committed
fix(security): reject symlinks at every depth during asset sync

sowenzhang
and
claude
committed
fix(engine): four asset-sync hardenings from Copilot review

sowenzhang
and
claude
committed
fix(security): four more hardenings from Copilot review

sowenzhang
and
claude
committed
fix(publish): clear error when buildDir has a non-directory at vendor/

sowenzhang
and
claude
committed
Potential fix for pull request finding

sowenzhang
and
Copilot
authored
fix(security): close image traversal sink + marker-file rm guard

sowenzhang
and
claude
committed