@cueframe/kernel 0.1.4 → 0.2.1

package/dist/authoring.js

@@ -1,11 +1,11 @@
 import {
   buildDirectorContext
-} from "./chunk-LSP4HN5N.js";
+} from "./chunk-ZCAQHNPI.js";
 import {
   buildFastModel,
   buildModel,
   makeLangfuseFetch
-} from "./chunk-ZT7MHRQU.js";
+} from "./chunk-GCQ7Z7S7.js";
 import {
   PipelineTrace
 } from "./chunk-GF52TW4I.js";
@@ -27,7 +27,7 @@ import {
   buildPlannerTools,
   buildToolsFromSchemas,
   extractProviderError
-} from "./chunk-ZBRPF6GV.js";
+} from "./chunk-GEGRJKKO.js";
 import {
   COMPOSE_MOTION_TOOLS,
   COMPOSE_MOTION_VERIFY_TOOLS,
@@ -36,27 +36,27 @@ import {
   COMPOSE_ROLE_TOOLS,
   COMPOSE_ROLE_TOOL_NAMES,
   dispatchComposeRoleTool
-} from "./chunk-D2EGO543.js";
+} from "./chunk-XVBOSPZI.js";
 import {
   AgentFixableCaptureError,
   getExcludedTools
 } from "./chunk-JOURGVOR.js";
-import "./chunk-JY26PIRP.js";
-import "./chunk-JRIPQ7DN.js";
-import "./chunk-7PA7FGLD.js";
-import "./chunk-KYRDKK2D.js";
-import "./chunk-WTT3GGCA.js";
+import "./chunk-AD5HWBCE.js";
 import {
   cssLayoutVars
 } from "./chunk-YQ7FFW3G.js";
 import "./chunk-DSMLHYJ4.js";
+import "./chunk-C5SEPOWD.js";
 import "./chunk-JF4JJAFP.js";
-import "./chunk-JTVFIN6H.js";
-import "./chunk-2SNY75AR.js";
+import "./chunk-IBMJ33EL.js";
+import "./chunk-IHFREGFA.js";
+import "./chunk-7KEUL3FI.js";
 import "./chunk-WPZKOVYF.js";
 import "./chunk-2B5VJZHL.js";
+import "./chunk-KYRDKK2D.js";
 import "./chunk-WREYUH2E.js";
-import "./chunk-R5BMJ2NX.js";
+import "./chunk-7PA7FGLD.js";
+import "./chunk-4FOOBSEE.js";
 import "./chunk-2ESYSVXG.js";
 
 // ../authoring/src/agent.ts
@@ -1058,6 +1058,8 @@ function generateMotionShell(cardHtml, opts) {
   }).join('\\n');` : "";
   const staggerStyleEl = opts.preset === "stagger-reveal" ? `<style>{staggerRules}</style>` : "";
   return `// generated by @cueframe/authoring generateMotionShell \u2014 preset: ${opts.preset}
+import { Easing, interpolate, useCurrentFrame, useVideoConfig } from 'remotion';
+
 export default function CardMotionShell({ durationInFrames, params }) {
   const frame = useCurrentFrame();
   const { fps } = useVideoConfig();
@@ -1133,7 +1135,7 @@ function resolveMotionPresetCard(composition, input) {
 // ../authoring/src/motion/materializeMotionPresetOps.ts
 var isMotionPresetOp = (op) => !!op && typeof op === "object" && op.type === "applyMotionPreset";
 var hasMotionPresetOp = (ops) => ops.some(isMotionPresetOp);
-async function materializeMotionPresetOpsCore(composition, ops, opts, deps) {
+async function materializeMotionPresetOpsCore(composition, ops, deps) {
   const out = [];
   let current = composition;
   for (let i = 0; i < ops.length; i++) {
@@ -1151,22 +1153,6 @@ async function materializeMotionPresetOpsCore(composition, ops, opts, deps) {
       throw err;
     }
     const componentId = `motion-shell-${op.clipId}`;
-    const projectedUpdate = {
-      type: "clip.update",
-      clipId: op.clipId,
-      patch: {
-        source: {
-          kind: "component",
-          componentId,
-          props: {},
-          ...card.zPlane !== void 0 ? { zPlane: card.zPlane } : {}
-        }
-      }
-    };
-    if (opts.dryRun) {
-      if (deps.apply) current = deps.apply(current, projectedUpdate);
-      continue;
-    }
     const tsxSource = generateMotionShell(card.cardHtml, {
       preset: op.preset,
       ...op.params?.enterMs !== void 0 ? { enterMs: op.params.enterMs } : {},
@@ -1174,13 +1160,11 @@ async function materializeMotionPresetOpsCore(composition, ops, opts, deps) {
       ...op.params?.staggerMs !== void 0 ? { staggerMs: op.params.staggerMs } : {},
       ...card.tokens !== void 0 ? { tokens: card.tokens } : {}
     });
-    const { jsSource } = await deps.transpile(componentId, tsxSource);
     const materialized = await deps.sink({
       componentId,
       clipId: op.clipId,
       preset: op.preset,
       tsxSource,
-      jsSource,
       ...card.zPlane !== void 0 ? { zPlane: card.zPlane } : {}
     });
     out.push(materialized);

package/dist/chunk-2PGLNTB7.js

@@ -0,0 +1,132 @@
+import {
+  ComponentRuntimeError
+} from "./chunk-LQUWKBST.js";
+
+// ../execution/component-runtime/src/importPolicy.ts
+import { parse } from "@babel/parser";
+var COMPONENT_IMPORT_ALLOWLIST = Object.freeze([
+  "react",
+  "remotion",
+  "@remotion/media",
+  "@remotion/motion-blur",
+  "@remotion/noise",
+  "@remotion/paths",
+  "@remotion/shapes",
+  "@remotion/three",
+  "three",
+  "three/webgpu",
+  "three/tsl",
+  "@react-three/fiber",
+  "@react-three/drei",
+  "@cueframe/animate",
+  "gsap"
+]);
+var ALLOWED_IMPORTS = new Set(COMPONENT_IMPORT_ALLOWLIST);
+var DENIED_NONDETERMINISTIC_MEMBERS = /* @__PURE__ */ new Set([
+  "Math.random",
+  "Date.now",
+  "performance.now",
+  "crypto.getRandomValues",
+  "crypto.randomUUID"
+]);
+var DENIED_AMBIENT_CALLS = /* @__PURE__ */ new Set([
+  "Date",
+  "requestAnimationFrame",
+  "setTimeout",
+  "setInterval"
+]);
+function staticMemberPath(value) {
+  if (!value || typeof value !== "object") return null;
+  const node = value;
+  if (node.type === "Identifier" && typeof node.name === "string") return node.name;
+  if (node.type !== "MemberExpression" && node.type !== "OptionalMemberExpression") return null;
+  const object = staticMemberPath(node.object);
+  if (!object || !node.property || typeof node.property !== "object") return null;
+  const property = node.property;
+  const key = node.computed === true ? property.type === "StringLiteral" && typeof property.value === "string" ? property.value : null : property.type === "Identifier" && typeof property.name === "string" ? property.name : null;
+  return key ? `${object}.${key}` : null;
+}
+function normalizedAmbientPath(value) {
+  return staticMemberPath(value)?.replace(/^(?:globalThis|window|self)\./, "") ?? null;
+}
+function denied(specifier) {
+  throw new ComponentRuntimeError(
+    "component_import_denied",
+    `Component import is not allowed: ${JSON.stringify(specifier)}.`
+  );
+}
+function assertComponentImportsAllowed(tsxSource) {
+  let root;
+  try {
+    root = parse(tsxSource, {
+      sourceType: "module",
+      plugins: ["jsx", "typescript"],
+      errorRecovery: false
+    });
+  } catch (error) {
+    throw new ComponentRuntimeError(
+      "component_does_not_compile",
+      error instanceof Error ? error.message : String(error)
+    );
+  }
+  const visit = (value) => {
+    if (!value || typeof value !== "object") return;
+    if (Array.isArray(value)) {
+      for (const child of value) visit(child);
+      return;
+    }
+    const node = value;
+    const type = node.type;
+    if ((type === "ImportDeclaration" || type === "ExportNamedDeclaration" || type === "ExportAllDeclaration") && node.source && typeof node.source === "object") {
+      const specifier = node.source.value;
+      if (typeof specifier === "string" && !ALLOWED_IMPORTS.has(specifier)) denied(specifier);
+    }
+    if (type === "ImportExpression") denied("dynamic import()");
+    if (type === "CallExpression") {
+      const callee = node.callee;
+      if (callee?.type === "Import") denied("dynamic import()");
+      if (callee?.type === "Identifier" && callee.name === "require") denied("require()");
+      if (callee?.type === "Identifier" && typeof callee.name === "string" && DENIED_AMBIENT_CALLS.has(callee.name)) {
+        denied(`ambient ${callee.name}`);
+      }
+    }
+    if (type === "NewExpression") {
+      const callee = node.callee;
+      if (callee?.type === "Identifier" && (callee.name === "Date" || callee.name === "Worker" || callee.name === "SharedWorker")) denied(`ambient ${String(callee.name)}`);
+    }
+    if (type === "MemberExpression" || type === "OptionalMemberExpression") {
+      const member = normalizedAmbientPath(node);
+      if (member && DENIED_NONDETERMINISTIC_MEMBERS.has(member)) denied(`ambient ${member}`);
+    }
+    if (type === "VariableDeclarator") {
+      const init = normalizedAmbientPath(node.init);
+      const id = node.id;
+      if (init && ["Math", "Date", "performance", "crypto"].includes(init) && id?.type === "Identifier") {
+        denied(`ambient ${init} alias`);
+      }
+      if (init === "Math" && id?.type === "ObjectPattern") {
+        const properties = Array.isArray(id.properties) ? id.properties : [];
+        if (properties.some((property) => {
+          const key = property.key;
+          return key?.name === "random" || key?.value === "random";
+        })) denied("ambient Math.random alias");
+      }
+    }
+    if (type === "TSImportType") {
+      const argument = node.argument;
+      if (argument?.type === "StringLiteral" && typeof argument.value === "string" && !ALLOWED_IMPORTS.has(argument.value)) {
+        denied(argument.value);
+      }
+    }
+    for (const [key, child] of Object.entries(node)) {
+      if (key === "loc" || key === "start" || key === "end" || key === "errors" || key === "comments") continue;
+      visit(child);
+    }
+  };
+  visit(root);
+}
+
+export {
+  COMPONENT_IMPORT_ALLOWLIST,
+  assertComponentImportsAllowed
+};

package/dist/{chunk-R5BMJ2NX.js → chunk-4FOOBSEE.js}

@@ -41,6 +41,7 @@ var ERROR_CODES = {
   idempotency_key_mismatch: { stage: "validate", category: "authoring", retryable: false, httpStatus: 422 },
   invalid_cursor: { stage: "validate", category: "authoring", retryable: false, httpStatus: 400 },
   invalid_query: { stage: "validate", category: "authoring", retryable: false, httpStatus: 400 },
+  response_too_large: { stage: "validate", category: "authoring", retryable: false, httpStatus: 422 },
   precondition_required: { stage: "validate", category: "authoring", retryable: false, httpStatus: 428 },
   conflict: { stage: "validate", category: "authoring", retryable: false, httpStatus: 409 },
   candidate_mismatch: { stage: "validate", category: "authoring", retryable: false, httpStatus: 422 },
@@ -57,11 +58,23 @@ var ERROR_CODES = {
   disabled_primitive: { stage: "validate", category: "authoring", retryable: false, httpStatus: 422 },
   invalid_primitive_params: { stage: "validate", category: "authoring", retryable: false, httpStatus: 422 },
   overlapping_hero_overlays: { stage: "validate", category: "authoring", retryable: false, httpStatus: 422 },
-  custom_missing_sourcecode: { stage: "validate", category: "authoring", retryable: false, httpStatus: 422 },
   invalid_prop_schema: { stage: "validate", category: "authoring", retryable: false, httpStatus: 422 },
+  invalid_component_source: { stage: "validate", category: "authoring", retryable: false, httpStatus: 422 },
+  unsupported_runtime_version: { stage: "validate", category: "authoring", retryable: false, httpStatus: 422 },
   component_does_not_compile: { stage: "validate", category: "authoring", retryable: false, httpStatus: 422 },
   component_runtime_error: { stage: "validate", category: "authoring", retryable: false, httpStatus: 422 },
-  component_source_unavailable: { stage: "validate", category: "authoring", retryable: false, httpStatus: 422 },
+  component_deadline_exceeded: { stage: "render", category: "transient", retryable: true, httpStatus: 503 },
+  component_resource_exhausted: { stage: "render", category: "transient", retryable: true, httpStatus: 503 },
+  component_asset_undeclared: { stage: "validate", category: "authoring", retryable: false, httpStatus: 422 },
+  component_asset_unavailable: { stage: "validate", category: "authoring", retryable: false, httpStatus: 422 },
+  component_asset_integrity_failed: { stage: "validate", category: "authoring", retryable: false, httpStatus: 422 },
+  component_network_denied: { stage: "validate", category: "authoring", retryable: false, httpStatus: 422 },
+  component_import_denied: { stage: "validate", category: "authoring", retryable: false, httpStatus: 422 },
+  component_graphics_unavailable: { stage: "render", category: "authoring", retryable: false, httpStatus: 422 },
+  component_graphics_mismatch: { stage: "render", category: "internal", retryable: false, httpStatus: 500 },
+  component_device_lost: { stage: "render", category: "transient", retryable: true, httpStatus: 503 },
+  component_output_invalid: { stage: "render", category: "internal", retryable: false, httpStatus: 500 },
+  component_conflict: { stage: "validate", category: "authoring", retryable: false, httpStatus: 409 },
   motion_preset_unknown: { stage: "validate", category: "authoring", retryable: false, httpStatus: 422 },
   motion_preset_target_invalid: { stage: "validate", category: "authoring", retryable: false, httpStatus: 422 },
   grid_target_invalid: { stage: "validate", category: "authoring", retryable: false, httpStatus: 422 },
@@ -87,6 +100,24 @@ var ERROR_CODES = {
   selector_identity_detector_version_mismatch: { stage: "render", category: "authoring", retryable: false, httpStatus: 422 },
   variant_not_baked: { stage: "render", category: "internal", retryable: false, httpStatus: 422 },
   behind_matte_unresolved: { stage: "render", category: "authoring", retryable: false, httpStatus: 422 },
+  packed_visual_envelope_unsupported: { stage: "render", category: "authoring", retryable: false, httpStatus: 422 },
+  behind_subject_host_missing: { stage: "render", category: "authoring", retryable: false, httpStatus: 422 },
+  behind_subject_host_ambiguous: { stage: "render", category: "authoring", retryable: false, httpStatus: 422 },
+  behind_subject_caption_host_missing: { stage: "render", category: "authoring", retryable: false, httpStatus: 422 },
+  behind_subject_caption_host_ambiguous: { stage: "render", category: "authoring", retryable: false, httpStatus: 422 },
+  mixed_scene_mode_unsupported: { stage: "render", category: "authoring", retryable: false, httpStatus: 422 },
+  clip_effect_scope_unsupported: { stage: "render", category: "authoring", retryable: false, httpStatus: 422 },
+  component_alpha_unavailable: { stage: "render", category: "authoring", retryable: false, httpStatus: 422 },
+  card_external_asset_forbidden: { stage: "validate", category: "authoring", retryable: false, httpStatus: 422 },
+  overlay_asset_unbound: { stage: "validate", category: "authoring", retryable: false, httpStatus: 422 },
+  font_not_reproducible: { stage: "render", category: "authoring", retryable: false, httpStatus: 422 },
+  render_bundle_mismatch: { stage: "render", category: "internal", retryable: false, httpStatus: 422 },
+  capture_busy: { stage: "render", category: "transient", retryable: true, httpStatus: 429 },
+  capture_timed_out: { stage: "render", category: "transient", retryable: true, httpStatus: 503 },
+  capture_cancelled: { stage: "render", category: "transient", retryable: true, httpStatus: 409 },
+  tool_discovery_timed_out: { stage: "system", category: "transient", retryable: true, httpStatus: 503 },
+  evidence_payload_too_large: { stage: "render", category: "authoring", retryable: false, httpStatus: 422 },
+  snapshot_stale: { stage: "render", category: "transient", retryable: true, httpStatus: 409 },
   render_output_invalid: { stage: "render", category: "internal", retryable: false, httpStatus: 422 },
   audio_sync_invalid: { stage: "render", category: "authoring", retryable: false, httpStatus: 422 },
   generation_output_invalid: { stage: "render", category: "authoring", retryable: false, httpStatus: 422 },

package/dist/{chunk-YXEZ75MB.js → chunk-4JRUGT2Y.js}

@@ -1,9 +1,8 @@
 import {
+  querySchemaShape,
+  serializeQuery,
   waitForJob
-} from "./chunk-7V3F5HO4.js";
-import {
-  CURATED_TOOLS
-} from "./chunk-PJ4R4N4Q.js";
+} from "./chunk-NOEBAV2G.js";
 import {
   GENERATED_OPERATIONS,
   apiErrorFrom,
@@ -20,7 +19,10 @@ import {
   sniffImageMediaType,
   text,
   withMedia
-} from "./chunk-RQ2G4DXI.js";
+} from "./chunk-QBKDEO7J.js";
+import {
+  CURATED_TOOLS
+} from "./chunk-ZN6P3KOJ.js";
 
 // ../mcp/src/prompts.ts
 var skillListCache = null;
@@ -91,7 +93,7 @@ CLIPPING (find the best short-form moments in a long video): \`suggest_briefs\`
 
 Every expensive step has a cheap, inspectable check \u2014 prefer reading a value over rendering and eyeballing:
 - Framing & timing are data: \`get_media_context\` BEFORE you compose.
-- Evidence beats guessing: \`preview_frame\` (whole-composition stills), \`preview_component\` (ONE authored graphic: \`executionMode:"live"\` returns a PNG image; \`executionMode:"baked"\` returns a transparent VP9 motion clip \u2014 exactly the lane production composites), \`preview_clip\` (a fromSec\u2192toSec window as a watchable MP4, max 60s, capture-priced \u2014 judge a cut or transition at full fidelity WITHOUT paying for a full render). These are STATELESS: nothing to open, warm, or close; concurrent previews do not contend. \`preview_frame\` defaults to the PERSISTED composition and echoes \`previewed.{source, compositionId, etag}\` \u2014 what you saw is what create_render encodes.
+- Evidence beats guessing: \`preview_frame\` (whole-composition stills), \`preview_component\` (ONE authored graphic rendered from the same immutable component bundle used by production), \`preview_clip\` (a fromSec\u2192toSec window as a watchable MP4, max 60s, capture-priced \u2014 judge a cut or transition at full fidelity WITHOUT paying for a full render). These are STATELESS: nothing to open, warm, or close; concurrent previews do not contend. \`preview_frame\` defaults to the PERSISTED composition and echoes \`previewed.{source, compositionId, etag}\` \u2014 what you saw is what create_render encodes.
 - Quality is a number: \`score_composition\` returns scores + critique + a checkpointId; the compose result carries the winner's composite. **score vs consult**: score answers "how good IS this" (grounded numbers); \`consult\` answers "what SHOULD I change" (advice + an adoptable fix via \`select_candidate\`).
 
 ## Async model
@@ -101,7 +103,7 @@ Every long job is either polled or pushed \u2014 never guessed:
 - Webhooks (\`create_webhook\`): ONE terminal event per kind with status INSIDE the payload \u2014 \`render.completed\`, \`compose.completed\`, \`media.completed\`, \`suggest.completed\` \u2014 plus \`checkpoint.ready\` (a held compose paused for review). Read \`cueframe://webhook-events\` for the full contract before building a receiver.
 - Presigned URLs (stills, clips, render outputs) expire \u2014 render outputs last ~7 days (refresh via the render's refresh-url op); preview stills/clips ~1 hour. Re-read for a fresh link instead of caching one.
 
-CUSTOM GRAPHICS \u2014 author or FORK: \`create_component\` (tsxSource) from scratch, or \`get_component_source\` on a built-in primitive (e.g. \`cinematic-title\`) to fork its editable module. Iterate author\u2192preview\u2192fix with \`preview_component\` (202 + jobId; \`wait_job(kind:"preview")\` returns a PNG image for \`executionMode:"live"\` or a VP9 motion URL for \`executionMode:"baked"\`; a compile failure lands on the job's FAILED terminal carrying the sanitized compiler error) \u2192 fix via \`update_component\` \u2192 preview again. Place baked components via \`apply_composition\` as an \`alpha-layer\` clip \u2014 the shared renderer never runs authored source code (it composites the transparent baked video).
+CUSTOM GRAPHICS \u2014 author or FORK: \`create_component\` (tsxSource + contract-v2 manifest) from scratch, or \`get_component_source\` on a built-in primitive (e.g. \`cinematic-title\`) to fork its editable module. Iterate author\u2192preview\u2192fix with \`preview_component\` (202 + jobId; \`wait_job(kind:"preview")\` returns the verified artifact from the same immutable bundle used by production; a compile/runtime/capability failure lands on the job's FAILED terminal carrying the sanitized author-fixable message) \u2192 fix via \`update_component\` \u2192 preview again. Place the verified component artifact via \`apply_composition\` as an \`alpha-layer\` clip \u2014 the shared compositor never executes authored source.
 
 Cleanup: \`delete_project\` / \`delete_media\` / \`delete_webhook\` / \`delete_composition\`. \`list_projects\` re-orients you in an existing workspace; \`list_media\` (filter by \`source\`/\`tag\`) lists the library.
 
@@ -133,21 +135,30 @@ without resource support.
 
 ### Component Contract
 
-Component \`tsxSource\` MUST follow:
-- Signature: \`export default function Name({ durationInFrames, params }) { ... }\`
+Component \`tsxSource\` MUST follow the component contract v2:
+- Signature: \`export default function Name({ durationInFrames, params, assets, render }) { ... }\`
 - \`params\` is whatever the clip's \`source.params\` carries. The built-in catalog's
   convention \u2014 worth following so your component drops into the same slots:
   \`{ text, subtext?, position?, accentColor?, textColor?, fontFamily?, fontSize?, backgroundColor? }\`
-- ONLY \`useCurrentFrame()\` and \`useVideoConfig()\` hooks. NO useEffect/useState/useMemo/useCallback/useRef.
-- Inline styles only. No imports, no CSS files, no \`document\` access. Max 10000 chars.
-- All animation driven by frame number.`;
+- Use normal static imports from the documented allowlist: React, Remotion, Three.js WebGPU/TSL,
+  React Three Fiber/Drei, Remotion Three, and CueFrame animate helpers. Dynamic imports, URL imports,
+  Node/Tauri modules, remote fetches, and arbitrary filesystem paths are refused.
+- Ordinary React hooks, loops, classes, constructors, refs, typed arrays, canvas, and WebGPU are valid.
+- Declare every media input in \`componentManifest.assets\` and bind it by project media id in
+  \`componentAssets\`. Read only the matching \`assets[name].handle\`; undeclared or missing assets fail.
+- Declare \`componentManifest.graphics.api\` as \`canvas2d\` or \`webgpu\`. A required WebGPU component
+  fails if WebGPU cannot be attested; it is never rendered through WebGL or a static substitute.
+- Declare \`componentManifest.alphaPolicy\` as \`requires-transparency\` or \`allows-opaque\`; opacity
+  validation reads this exact manifest field in both local and cloud adapters.
+- Drive all visible animation from \`render.frame\` / \`render.fps\` (or Remotion frame hooks) and seed
+  procedural variation with \`render.seed\`. Ambient clocks, randomness, and requestAnimationFrame are refused.`;
 
 // ../mcp/src/server.ts
-import { McpServer as McpServer2 } from "@modelcontextprotocol/sdk/server/mcp.js";
+import { McpServer as McpServer2 } from "@modelcontextprotocol/server";
 import { z } from "zod";
 
 // ../mcp/src/resources.ts
-import { ResourceTemplate } from "@modelcontextprotocol/sdk/server/mcp.js";
+import { ResourceTemplate } from "@modelcontextprotocol/server";
 async function read(ex, operationId, mapArg) {
   const op = opById(operationId);
   const res = await ex.invoke({ method: "GET", path: buildPath(op, mapArg) });
@@ -168,11 +179,12 @@ async function jsonResourceWithPoster(uri, value) {
   const url = value?.thumbnail?.url;
   if (!url) return base;
   const data = await fetchAsBase64(url);
-  if (!data) return base;
+  const mimeType = data ? sniffImageMediaType(data) : void 0;
+  if (!data || !mimeType) return base;
   return {
     contents: [
       ...base.contents,
-      { uri: url, mimeType: sniffImageMediaType(data), blob: data }
+      { uri: url, mimeType, blob: data }
     ]
   };
 }
@@ -311,68 +323,6 @@ function registerResources(server, ex) {
   );
 }
 
-// ../mcp/src/burnedNames.ts
-var BURNED_NAMES = [
-  {
-    name: "create_composition",
-    replacement: "compose",
-    reason: "renamed \u2014 one flagship verb: compose {briefId | fromComposition | suggestionId} starts the Director run."
-  },
-  {
-    name: "verify_composition",
-    replacement: "score_composition",
-    reason: "renamed \u2014 the standalone sighted check SCORES a composition and returns a Checkpoint packet."
-  },
-  {
-    name: "render_frame",
-    replacement: "preview_frame",
-    reason: "renamed \u2014 the evidence family says preview_*; render_* is the paid finisher family."
-  },
-  {
-    name: "trigger_suggestions",
-    replacement: "suggest_briefs",
-    reason: "renamed \u2014 the analysis mints kind-'clip' Briefs, each composable via compose {briefId}."
-  },
-  {
-    name: "resume_compose",
-    replacement: "resume",
-    reason: "renamed \u2014 checkpoint-addressed: resume(checkpointId, {decision}) answers the packet, not the job."
-  },
-  {
-    name: "open_session",
-    replacement: "score_composition / preview_frame / preview_component",
-    reason: "sessions dissolved \u2014 each op manages its own warm box server-side, billed flat per operation."
-  },
-  {
-    name: "close_session",
-    replacement: "(nothing \u2014 the managed box reaps itself on idle)",
-    reason: "sessions dissolved \u2014 there is no client-held box to close."
-  },
-  {
-    name: "commit_session",
-    replacement: "apply_composition",
-    reason: "scratch-vs-active dissolved into composition versioning \u2014 there is nothing left to commit."
-  },
-  {
-    name: "new_video",
-    replacement: "new_composition",
-    reason: "renamed \u2014 every verb in the family says composition; only the mint said video."
-  },
-  {
-    name: "list_components",
-    replacement: "list_catalog",
-    reason: "renamed \u2014 'component' on the wire means installed-only; the verb returns the whole catalog."
-  },
-  {
-    name: "adopt_candidate",
-    replacement: "apply_composition",
-    reason: "removed \u2014 adopt a consult proposal by applying its composition (the client stays the author)."
-  }
-];
-function burnedNameError(b) {
-  return `'${b.name}' was RETIRED in the 2026-07 verb cutover and will never come back. Use ${b.replacement}. (${b.reason})`;
-}
-
 // ../mcp/src/server.ts
 function emit(sink, event) {
   if (!sink) return;
@@ -404,9 +354,10 @@ function registerRawTools(server, ex, onEvent) {
     if (RAW_EXCLUDED_OPERATION_IDS.has(op.operationId)) continue;
     const inputSchema = {};
     for (const p of op.pathParams) inputSchema[p] = z.string().describe(`Path parameter \`${p}\``);
+    Object.assign(inputSchema, querySchemaShape(op.queryParams));
     const bodySchema = bodySchemaFor(op);
     if (bodySchema) inputSchema.body = bodySchema.optional().describe("Request body \u2014 typed from the OpenAPI spec.");
-    server.registerTool(op.toolName, { title: op.title, description: op.description, inputSchema, annotations: op.annotations }, async (args, extra) => timed(onEvent, op.toolName, async () => {
+    server.registerTool(op.toolName, { title: op.title, description: op.description, inputSchema: z.object(inputSchema), annotations: op.annotations }, async (args, extra) => timed(onEvent, op.toolName, async () => {
       try {
         return await dispatchOp(
           ex,
@@ -415,7 +366,8 @@ function registerRawTools(server, ex, onEvent) {
           args.body,
           extra,
           op.toolName,
-          (res) => text(res.text || `${op.method} ${op.pathTemplate} \u2192 ${res.status}`)
+          (res) => text(res.text || `${op.method} ${op.pathTemplate} \u2192 ${res.status}`),
+          serializeQuery(op.queryParams, args)
         );
       } catch (err) {
         return errText(`${op.toolName} failed: ${fmtErr(err)}`);
@@ -436,16 +388,14 @@ function registerCuratedTools(server, ex, opts) {
     for (const friendly of Object.keys(spec.pathArgs ?? {})) {
       inputSchema[friendly] = z.string().describe(`${friendly} (path).`);
     }
-    for (const [queryArg, description] of Object.entries(spec.queryArgs ?? {})) {
-      inputSchema[queryArg] = z.string().optional().describe(description);
-    }
+    Object.assign(inputSchema, querySchemaShape(op.queryParams, spec.defaults));
     const bodySchema = bodySchemaFor(op);
     if (bodySchema) inputSchema.body = bodySchema;
     const annotations = { ...op.annotations, ...spec.annotations };
-    server.registerTool(spec.name, { title: spec.title ?? titleCase(spec.name), description: spec.description, inputSchema, annotations }, async (args, extra) => timed(opts?.onEvent, spec.name, async (report) => {
-      const a = args;
+    server.registerTool(spec.name, { title: spec.title ?? titleCase(spec.name), description: spec.description, inputSchema: z.object(inputSchema), annotations }, async (args, extra) => timed(opts?.onEvent, spec.name, async (report) => {
+      const a = { ...spec.defaults ?? {}, ...args };
       try {
-        const query = Object.keys(spec.queryArgs ?? {}).filter((name) => a[name] !== void 0 && a[name] !== null && a[name] !== "").map((name) => `${encodeURIComponent(name)}=${encodeURIComponent(String(a[name]))}`).join("&");
+        const query = serializeQuery(op.queryParams, a);
         return await dispatchOp(ex, op, (p) => a[reverse[p]], a.body, extra, spec.name, async (res) => {
           if (spec.okText) return text(spec.okText(a));
           const json = res.text ? safeParse(res.text) : void 0;
@@ -458,7 +408,7 @@ function registerCuratedTools(server, ex, opts) {
             if (data.length) return withMedia(payload, data.map((d) => ({ data: d, kind })));
           }
           return text(payload);
-        }, query || void 0);
+        }, query);
       } catch (err) {
         return errText(`${spec.name} failed: ${fmtErr(err)}`);
       }
@@ -474,12 +424,12 @@ function registerPreviewCard(server, ex, waitCapMs, onEvent) {
     {
       title: "Preview Card",
       description: 'Render ONE authored card on its own and SEE it, before placing it in a composition. Pass the same `html` (+ optional `tokens`) you would put in a {kind:"card"} clip; you get the still back as an image. Use this while writing a card \u2014 it is the fast loop for catching type that overflows the frame, a headline that collides with a logo, or tokens that did not resolve. Sized to the format you name, so what you see is what that aspect ratio will show. To judge MOTION rather than layout, shell the card with a motion preset and use preview_clip.',
-      inputSchema: {
+      inputSchema: z.object({
         projectId: z.string().describe("projectId (path) \u2014 the card is rendered inline; nothing is persisted to the project."),
         html: z.string().min(1).describe('The card markup, exactly as it would appear in a {kind:"card"} clip source.'),
-        tokens: z.record(z.string()).optional().describe("Token substitutions the html references (e.g. brand colours, fonts). Same shape as the clip source `tokens`."),
+        tokens: z.record(z.string(), z.string()).optional().describe("Token substitutions the html references (e.g. brand colours, fonts). Same shape as the clip source `tokens`."),
         aspectRatio: z.enum(["16:9", "9:16", "1:1", "4:5"]).optional().describe("Frame to size the card into. Default 9:16 \u2014 a card that fits 16:9 often overflows vertical.")
-      },
+      }),
       annotations: { readOnlyHint: true, destructiveHint: false, idempotentHint: true, openWorldHint: false }
     },
     async (args, extra) => timed(onEvent, "preview_card", async (report) => {
@@ -541,12 +491,12 @@ function registerWaitJob(server, ex, waitCapMs, onEvent) {
       title: "Wait for Job",
       annotations: { readOnlyHint: true, destructiveHint: false, idempotentHint: true, openWorldHint: false },
       description: "Wait for a long-running job and return the resolved result \u2014 a BOUNDED long-poll. Polls job status (media import/generation / render / compose / consult / clip-suggestions / verify / preview-frame) and blocks up to the transport window (30s on the hosted transport); if still running, it returns a continuation \u2014 call wait_job again with the same arguments (the job keeps executing server-side). Call this after import_media / generate_media / finalize_upload / import_resource / compose / create_render / consult / suggest_briefs / score_composition / preview_frame / preview_component. For event-driven fan-out, create_webhook delivers the terminal instead.",
-      inputSchema: {
+      inputSchema: z.object({
         kind: z.enum(["media", "render", "suggestions", "compose", "verify", "preview_frame", "preview", "brand_kit_extract", "consult"]).describe("What to wait on: media ingest/generation, render, compose, consult, clip-suggestion analysis, or a generic async job (verify / preview_frame / preview / brand-kit extract \u2014 use the enqueue receipt kind)."),
         id: z.string().describe('kind="media": mediaItemId returned by import/generate/finalize/import_resource. kind="render": renderId. kind="compose": composeJobId. kind="consult": consultJobId. kind="suggestions": mediaItemId. Generic kinds use the jobId from the enqueue receipt.'),
         projectId: z.string().optional().describe('Required when kind="render", "compose", or "consult".'),
         timeoutMs: z.number().int().min(1e3).max(30 * 60 * 1e3).optional().describe("Maximum wait in ms (default 30 min for render/compose, 5 min for suggestions).")
-      }
+      })
     },
     async (args) => timed(onEvent, "wait_job", async (report) => {
       const kind = args.kind;
@@ -577,24 +527,10 @@ function buildServer(opts) {
     expert: opts.expert,
     onEvent: opts.onEvent
   });
-  registerBurnedTombstones(server, opts.onEvent);
   registerResources(server, opts.executor);
   if (opts.expert) registerRawTools(server, opts.executor, opts.onEvent);
   return server;
 }
-function registerBurnedTombstones(server, onEvent) {
-  for (const b of BURNED_NAMES) {
-    server.registerTool(
-      b.name,
-      {
-        title: `${titleCase(b.name)} (retired)`,
-        description: `RETIRED (2026-07 verb cutover) \u2014 use ${b.replacement}. ${b.reason}`,
-        annotations: { readOnlyHint: true, destructiveHint: false, idempotentHint: true, openWorldHint: false }
-      },
-      async () => timed(onEvent, b.name, async () => errText(burnedNameError(b)))
-    );
-  }
-}
 
 export {
   registerSkillPrompts,
@@ -604,6 +540,5 @@ export {
   registerRawTools,
   titleCase,
   registerCuratedTools,
-  buildServer,
-  registerBurnedTombstones
+  buildServer
 };

package/dist/{chunk-FMODQD5P.js → chunk-4ZE564YF.js}

@@ -7,19 +7,22 @@ function gwFetchInit(gw, signal) {
 }
 function mapPexelsVideo(v, query) {
   const files = Array.isArray(v.video_files) ? v.video_files : [];
-  const hdFile = files.find((f) => f.quality === "hd");
-  const sdFile = files.find((f) => f.quality === "sd");
-  const fallback = files[0];
+  const renditions = files.filter(
+    (file) => file.file_type === "video/mp4" && typeof file.link === "string" && file.link.startsWith("https://") && Number.isFinite(file.width) && file.width > 0 && Number.isFinite(file.height) && file.height > 0
+  ).sort((a, b) => b.width * b.height - a.width * a.height || Number(b.fps ?? 0) - Number(a.fps ?? 0) || String(a.link).localeCompare(String(b.link)));
+  const selected = renditions[0];
+  if (!selected) throw new Error(`Pexels video ${String(v.id)} has no valid MP4 rendition.`);
+  const preview = renditions[renditions.length - 1];
   return {
     provider: "pexels",
     externalId: String(v.id ?? ""),
     query,
     thumbnail: String(v.image ?? ""),
-    previewUrl: String((sdFile ?? fallback)?.link ?? ""),
-    downloadUrl: String((hdFile ?? fallback)?.link ?? ""),
+    previewUrl: preview.link,
+    downloadUrl: selected.link,
     duration: Number(v.duration ?? 0),
-    width: Number(v.width ?? 0),
-    height: Number(v.height ?? 0),
+    width: selected.width,
+    height: selected.height,
     photographer: String(v.user?.name ?? "Unknown"),
     photographerUrl: v.user?.url ? String(v.user.url) : void 0,
     assetUrl: v.url ? String(v.url) : void 0
@@ -39,8 +42,12 @@ function mapPexelsPhoto(p) {
 }
 function mapPixabayVideo(v, query) {
   const vids = v.videos ?? {};
-  const best = vids.large ?? vids.medium ?? vids.small ?? vids.tiny ?? {};
-  const preview = vids.tiny ?? vids.small ?? vids.medium ?? vids.large ?? {};
+  const renditions = Object.values(vids).filter(
+    (file) => typeof file?.url === "string" && file.url.startsWith("https://") && Number.isFinite(file.width) && file.width > 0 && Number.isFinite(file.height) && file.height > 0
+  ).sort((a, b) => b.width * b.height - a.width * a.height || String(a.url).localeCompare(String(b.url)));
+  const best = renditions[0];
+  if (!best) throw new Error(`Pixabay video ${String(v.id)} has no valid rendition.`);
+  const preview = renditions[renditions.length - 1];
   return {
     provider: "pixabay",
     externalId: String(v.id ?? ""),