Dev proxy for Worker-owned paths in plain vp dev + font-build gitignore - #170

Mobile heading controls dropped to their own row unconditionally: the icon
row was pinned to `grid-row: 3` and `.radical` was squeezed into a
`max-width: 4.5rem` column, so /萌 at 375px burned four stacked rows
(艸 / +8 / = 12 / pencil, then copy·異體字·star) with obvious free space
next to the headword.

Root blocker was `.entry-copy-status { min-width: 8rem }`: a permanent
inline reservation for the copy feedback. 8rem plus three 44px targets can
never fit beside a title at phone widths, so the icon row could not share a
line no matter how much room the title left.

- `.entry-heading` (≤767px) is now ONE wrapping flex line: title
  `flex: 1 1 auto; min-width: 0`, `justify-content: flex-end`, `order` for
  visual sequence. Flex line-breaking uses max-content sizes, so the radical
  box and the icon row stay on the title's line whenever they fit and wrap to
  their own right-flush line only when the title needs that width.
  Measured: 375px /萌 → 2 rows (heading 193px → 145px); 560px → all one line;
  375px /一鼓作氣 → title line 1, controls share line 2; 1280px unchanged.
- `.entry-copy-status` becomes an absolutely positioned pill under the icon
  row, visibility driven by `data-state="idle|ok|error"`. The node is never
  unmounted (an aria-live region must exist before its content changes), and
  out-of-flow satisfies the zero-layout-shift contract more directly than the
  reservation did. Background uses --moe-surface-alt; --moe-surface equals the
  entry card in dark mode and made the pill invisible.
- `.radical` is nowrap with a 0.15em column gap, so the 部首/筆畫 badge is one
  line again, and its stroke-order pencil joins the toolbar at a 44px touch
  target (legacy sized it 32x30).
- `row-gap: 0.5rem` gives clearance for ruby tone marks, which paint below
  h1.title's own box and otherwise graze a wrapped control line.

Tests updated to the new contract: `mobile: controls share the radical's line
when the heading still has room` (560px) is the guard for the reported
behaviour; the 333px test now asserts controls clear the title and the icon
row stays right-flush; the enlarged-64px-title test asserts both groups clear
the title rather than stacking; visual-invariants R8 (320/390px) asserts the
status region is out of flow, that nothing is reserved left of the first icon,
and that the longest failure message stays inside the viewport.

Also in this commit, because it is the same in-flight narrow-heading work this
checkout carried uncommitted and my layout is verified on top of it (see
5b1a7de on origin/fix/narrow-heading-wrap): the title ruby box in index.css
(e2e blocks r2-assets styles.css, without which length-3 yin+diao cannot share
a heading) and the moe-android diao centering.

Separately, plain `vp dev` gains a dev proxy for the paths the Worker owns
(`/api`, `/assets` → VITE_DEV_API_ORIGIN, default www.moedict.tw, with
`public/` winning via bypass). Without it those paths hit Vite's SPA fallback
and returned index.html, which surfaced as `取得 ASSET_BASE_URL 失敗:
SyntaxError: JSON.parse` and `MIME 型態「text/html」不是「text/css」`.
AGENTS.md documents both dev modes and the heading-layout invariant.

Verified: chromium e2e 259 passed, webkit-romanization 15, unit 2125,
integration 141, tsc -b --noEmit clean, vp lint clean, dark-contrast audit
0 unexpected findings.

Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>

…conflict)

bestian 回報本 PR 與 main 衝突（issuecomment-5672694868）。解法：版面部分
以 main 為準，PR 只保留 main 還沒有的內容。

Layout 取 main（#173 已出貨，PR 的舊設計退場）：
- src/index.css、src/pages/DictionaryPage.tsx、tests/e2e/dictionary.spec.ts、
  tests/e2e/visual-invariants.spec.ts 四檔直接取 main 版。PR 的 wrapping-flex
  單列（data-state pill、display:contents）與 main 的 narrow rail（grid 窄欄＋
  8rem 預留＋.entry-compact-title）互斥；#173 已合併且有 R8/e2e 鎖定，舊設計
  不留。
- AGENTS.md 的標題列版型 bullet 改寫為 narrow-rail 描述（原 wrapping-flex
  描述與出貨行為矛盾，一併修正）。

PR 保留（main 沒有，合併後 PR diff 只剩這四檔）：
- vite.config.ts：Worker-owned 路徑 dev proxy＋public/ bypass（含 Copilot
  review 的 tryDecodeURIComponent／statSync hardening）。
- tests/unit/dev-proxy-public-bypass.test.ts：上述契約測試。
- .gitignore：/fonts/ 構建產物忽略＋issue-triage 否定清理。
- AGENTS.md：本機 dev 兩種模式文件。

驗證：tsc -b --noEmit clean；dev-proxy 5 tests、offline-api 11 tests 通過；
四個版面檔與 origin/main byte-identical（沿用 main CI 已驗證的 e2e）。

Why this change is needed:

The public-directory bypass runs before Vite's remote Worker proxy. Although
ordinary dot segments are normalized by the WHATWG URL parser, an encoded path
separator such as `%2f` survives that parser and becomes a separator only after
percent-decoding. The previous implementation normalized the decoded absolute
path before checking for `..`, so `/api/%2e%2e%2fmanifest.json` collapsed to
`/manifest.json`. Because `public/manifest.json` is a real file, the helper
returned true, skipped the production proxy, and let Vite answer with its SPA
HTML fallback. This violated the documented fail-closed contract and recreated
the wrong-MIME/HTML-response failure that the dev proxy is intended to prevent.

The existing traversal assertions did not expose the gap: their ordinary dot
segments were already removed by `new URL()`, and the package.json positive
control only checked that a constructed string ended in the expected filename
instead of proving the file existed.

What changed:

- Reject NUL bytes and decoded path segments equal to `..` before calling
  `path.posix.normalize`, while recognizing both slash and backslash separators
  so the guard remains fail-closed on POSIX and Windows hosts.
- Preserve the existing post-normalization containment and guarded `statSync`
  checks as defense in depth.
- Add regressions for encoded-slash traversal under both `/api` and `/assets`,
  plus encoded-backslash traversal for Windows path semantics.
- Replace the ineffective string-suffix positive control with real `statSync`
  assertions for the repo-root package.json and public/manifest.json targets.

Verification:

- targeted dev-proxy unit suite: 5 tests passed
- TypeScript project check: passed
- Oxfmt check for both changed files: passed
- type-aware Oxlint for both changed files: passed