@cueframe/kernel 0.1.4 → 0.2.1

package/dist/chunk-CGHTMZNC.js

@@ -0,0 +1,6 @@
+// ../execution/component-runtime/src/browserOptions.ts
+var COMPONENT_CHROMIUM_OPTIONS = Object.freeze({ gl: "swangle" });
+
+export {
+  COMPONENT_CHROMIUM_OPTIONS
+};

package/dist/chunk-DHKQ47Q6.js

@@ -0,0 +1,57 @@
+// ../execution/component-runtime/src/canonicalIdentity.ts
+function normalizedString(value) {
+  return value.replace(/\r\n?/g, "\n").normalize("NFC");
+}
+function canonicalValue(value, seen) {
+  if (value === null || typeof value === "boolean") return value;
+  if (typeof value === "string") return normalizedString(value);
+  if (typeof value === "number") {
+    if (!Number.isFinite(value)) throw new TypeError("Canonical JSON does not support non-finite numbers.");
+    return Object.is(value, -0) ? 0 : value;
+  }
+  if (typeof value !== "object") {
+    throw new TypeError(`Canonical JSON does not support ${typeof value} values.`);
+  }
+  if (seen.has(value)) throw new TypeError("Canonical JSON does not support cyclic values.");
+  seen.add(value);
+  try {
+    if (Array.isArray(value)) return value.map((item) => canonicalValue(item, seen));
+    const prototype = Object.getPrototypeOf(value);
+    if (prototype !== Object.prototype && prototype !== null) {
+      throw new TypeError("Canonical JSON only supports plain objects.");
+    }
+    const record = value;
+    const result = {};
+    for (const key of Object.keys(record).sort()) {
+      const item = record[key];
+      if (item === void 0) throw new TypeError("Canonical JSON does not support undefined values.");
+      result[normalizedString(key)] = canonicalValue(item, seen);
+    }
+    return result;
+  } finally {
+    seen.delete(value);
+  }
+}
+function canonicalJson(value) {
+  return JSON.stringify(canonicalValue(value, /* @__PURE__ */ new Set()));
+}
+function sourceVersionIdentity(source) {
+  return canonicalJson(source);
+}
+function componentBundleIdentity(input) {
+  return canonicalJson({ domain: "cueframe.component.bundle.v2", ...input });
+}
+function componentRenderIdentity(request) {
+  return canonicalJson({ domain: "cueframe.component.render.v2", request });
+}
+function componentArtifactIdentity(input) {
+  return canonicalJson({ domain: "cueframe.component.artifact.v2", ...input });
+}
+
+export {
+  canonicalJson,
+  sourceVersionIdentity,
+  componentBundleIdentity,
+  componentRenderIdentity,
+  componentArtifactIdentity
+};

package/dist/{chunk-3PM6VICZ.js → chunk-DQKSCHFC.js}

@@ -1,3 +1,6 @@
+import {
+  FitText
+} from "./chunk-XHGZ2E77.js";
 import {
   ACCENT,
   BG,
@@ -19,9 +22,6 @@ import {
   TEXT_MUTED,
   VIOLET
 } from "./chunk-CX2IIQ4R.js";
-import {
-  FitText
-} from "./chunk-XHGZ2E77.js";
 
 // ../execution/primitives/src/layouts/chat-to-preview-layout/index.tsx
 import { Easing, interpolate, useCurrentFrame, useVideoConfig } from "remotion";
@@ -1187,7 +1187,7 @@ var config3 = {
 // ../execution/primitives/src/layouts/photo-grid/config.ts
 import { z as z4 } from "zod";
 var paramsSchema4 = z4.object({
-  images: z4.array(z4.string().url()).min(1).describe("Array of image URLs to display."),
+  images: z4.array(z4.string().url().meta({ cueframeAsset: true })).min(1).describe("Array of image URLs to display."),
   columns: z4.number().int().min(1).max(6).default(2).describe("Grid columns."),
   gap: z4.number().min(0).max(40).default(8).describe("Gap between cells in pixels."),
   stagger: z4.number().min(0).max(2).default(0.15).describe("Seconds between each cell's reveal. 0.1\u20130.25 reads natural.")

package/dist/{chunk-D6S3ZKIY.js → chunk-EEXCDFY5.js}

@@ -9,7 +9,7 @@ import {
 import {
   decodeError,
   scrubSensitive
-} from "./chunk-R5BMJ2NX.js";
+} from "./chunk-4FOOBSEE.js";
 
 // ../director/src/domain/chat.ts
 import { z } from "zod";

package/dist/{chunk-ZT7MHRQU.js → chunk-GCQ7Z7S7.js}

@@ -1,3 +1,12 @@
+// ../authoring/src/models/defaultModels.ts
+var DEFAULT_MODEL_IDS = {
+  anthropic: "claude-opus-5",
+  openai: "gpt-4.1",
+  ollama: "llama3.1",
+  /** Cheaper model used for fast-mode / low-effort turns. */
+  fast: "claude-haiku-4-5"
+};
+
 // ../authoring/src/models/modelFactory.ts
 import { createAnthropic } from "@ai-sdk/anthropic";
 import { createOpenAI } from "@ai-sdk/openai";
@@ -56,19 +65,19 @@ function buildModel(settings, langfuse) {
         apiKey: settings.apiKey,
         ...settings.baseUrl ? { baseURL: settings.baseUrl } : {}
       });
-      const id = settings.modelId || "claude-sonnet-4-6";
+      const id = settings.modelId || DEFAULT_MODEL_IDS.anthropic;
       return { model: anthropic(id), providerName: "anthropic", modelId: id };
     }
     case "openai": {
       if (!settings.apiKey) throw new Error("OpenAI API key not configured.");
       const openai = createOpenAI({ apiKey: settings.apiKey });
-      const id = settings.modelId || "gpt-4o";
+      const id = settings.modelId || DEFAULT_MODEL_IDS.openai;
       return { model: openai(id), providerName: "openai", modelId: id };
     }
     case "ollama": {
       const baseUrl = settings.baseUrl || "http://localhost:11434/v1";
       const openai = createOpenAI({ apiKey: "ollama", baseURL: baseUrl });
-      const id = settings.modelId || "llama3.1";
+      const id = settings.modelId || DEFAULT_MODEL_IDS.ollama;
       return { model: openai(id), providerName: "ollama", modelId: id };
     }
     case "gateway": {
@@ -79,7 +88,7 @@ function buildModel(settings, langfuse) {
         baseURL: settings.gatewayUrl + "/anthropic/v1",
         fetch: settings.requestTimeoutMs ? withRequestTimeout(baseFetch, settings.requestTimeoutMs) : langfuse ? baseFetch : void 0
       });
-      const id = settings.modelId || "claude-sonnet-4-6";
+      const id = settings.modelId || DEFAULT_MODEL_IDS.anthropic;
       return { model: anthropic(id), providerName: "gateway", modelId: id };
     }
     default:
@@ -90,13 +99,14 @@ function buildFastModel(settings, langfuse) {
   return buildModel(
     {
       ...settings,
-      modelId: settings.fastModelId ?? "claude-haiku-4-5-20251001"
+      modelId: settings.fastModelId ?? DEFAULT_MODEL_IDS.fast
     },
     langfuse
   );
 }
 
 export {
+  DEFAULT_MODEL_IDS,
   withRequestTimeout,
   makeLangfuseFetch,
   buildModel,

package/dist/{chunk-ZBRPF6GV.js → chunk-GEGRJKKO.js}

@@ -2,7 +2,7 @@ import {
   COMPOSE_PLANNER_TOOLS,
   COMPOSE_ROLE_TOOLS,
   dispatchComposeRoleTool
-} from "./chunk-D2EGO543.js";
+} from "./chunk-XVBOSPZI.js";
 
 // ../authoring/src/agent/buildTools.ts
 import { tool } from "ai";

package/dist/{chunk-JRIPQ7DN.js → chunk-IBMJ33EL.js}

@@ -1,9 +1,9 @@
+import {
+  Composition
+} from "./chunk-7KEUL3FI.js";
 import {
   expandToLinkGroup
 } from "./chunk-KYRDKK2D.js";
-import {
-  Composition
-} from "./chunk-2SNY75AR.js";
 
 // ../composition/src/ops/compositionOps.shared.ts
 function findOrCreateTrackByKind(composition, kind) {

package/dist/{chunk-JTVFIN6H.js → chunk-IHFREGFA.js}

@@ -4,7 +4,7 @@ import {
   Format,
   GraphicRole,
   OpaqueId
-} from "./chunk-2SNY75AR.js";
+} from "./chunk-7KEUL3FI.js";
 
 // ../composition/src/validators/composePlan.ts
 import { z } from "zod";
@@ -92,17 +92,23 @@ var AudioPaletteRef = z2.string().min(1);
 var FontRef = z2.union([
   z2.object({
     kind: z2.literal("system"),
-    family: z2.string().min(1)
+    family: z2.string().min(1),
+    weight: z2.number().int().min(1).max(1e3).optional(),
+    style: z2.enum(["normal", "italic"]).optional()
   }),
   z2.object({
     kind: z2.literal("web"),
     family: z2.string().min(1),
-    url: z2.string().url().optional()
+    url: z2.string().url().optional(),
+    weight: z2.number().int().min(1).max(1e3).optional(),
+    style: z2.enum(["normal", "italic"]).optional()
   }),
   z2.object({
     kind: z2.literal("uploaded"),
     fontId: OpaqueId,
-    family: z2.string().optional()
+    family: z2.string().optional(),
+    weight: z2.number().int().min(1).max(1e3).optional(),
+    style: z2.enum(["normal", "italic"]).optional()
   })
 ]);
 var Colors = z2.object({

package/dist/chunk-IJ7PVJTK.js

@@ -0,0 +1,114 @@
+import {
+  CueframeError
+} from "./chunk-4FOOBSEE.js";
+
+// ../execution/render-harness/src/cardAssetAdmission.ts
+import { parse as parseCss, walk as walkCss } from "css-tree";
+import { parseFragment } from "parse5";
+var RESOURCE_ELEMENTS = /* @__PURE__ */ new Set([
+  "audio",
+  "embed",
+  "iframe",
+  "image",
+  "img",
+  "link",
+  "object",
+  "script",
+  "source",
+  "track",
+  "video"
+]);
+var URL_ATTRIBUTES = /* @__PURE__ */ new Set([
+  "action",
+  "data",
+  "formaction",
+  "href",
+  "poster",
+  "src",
+  "srcset",
+  "xlink:href"
+]);
+var CSS_VALUE_ATTRIBUTES = /* @__PURE__ */ new Set([
+  "clip-path",
+  "cursor",
+  "fill",
+  "filter",
+  "marker",
+  "marker-end",
+  "marker-mid",
+  "marker-start",
+  "mask",
+  "stroke"
+]);
+function isFragmentReference(value) {
+  return value.trim().startsWith("#");
+}
+function refuse(locator, reason) {
+  throw new CueframeError(
+    "card_external_asset_forbidden",
+    `Card ${locator} ${reason}`,
+    void 0,
+    { card: locator }
+  );
+}
+function assertCssAssetFree(css, context, locator) {
+  let ast;
+  try {
+    ast = parseCss(css, { context });
+  } catch (cause) {
+    refuse(locator, `contains invalid CSS: ${String(cause)}`);
+  }
+  walkCss(ast, (node) => {
+    if (node.type === "Url" && !isFragmentReference(node.value)) {
+      refuse(locator, "contains a CSS url() asset reference");
+    }
+    if (node.type === "Atrule" && ["import", "font-face"].includes(node.name.toLowerCase())) {
+      refuse(locator, `contains a forbidden CSS @${node.name} rule`);
+    }
+  });
+}
+function assertNodeAssetFree(node, locator) {
+  if ("tagName" in node) {
+    const tagName = node.tagName.toLowerCase();
+    if (RESOURCE_ELEMENTS.has(tagName)) {
+      refuse(locator, `contains resource-bearing <${tagName}> markup`);
+    }
+    for (const attr of node.attrs) {
+      const name = attr.name.toLowerCase();
+      if (name.startsWith("on")) {
+        refuse(locator, `contains executable event handler '${name}'`);
+      }
+      if (URL_ATTRIBUTES.has(name) && !isFragmentReference(attr.value)) {
+        refuse(locator, `contains an unmanifested ${name} asset reference`);
+      }
+      if (name === "style") assertCssAssetFree(attr.value, "declarationList", locator);
+      if (CSS_VALUE_ATTRIBUTES.has(name)) {
+        for (const match of attr.value.matchAll(/url\(\s*(['"]?)(.*?)\1\s*\)/gi)) {
+          if (!isFragmentReference(match[2] ?? "")) {
+            refuse(locator, `contains an unmanifested ${name} url() asset reference`);
+          }
+        }
+      }
+    }
+    if (tagName === "style" && "childNodes" in node) {
+      const css = node.childNodes.filter((child) => child.nodeName === "#text").map((child) => child.value).join("");
+      assertCssAssetFree(css, "stylesheet", locator);
+    }
+  }
+  if ("childNodes" in node) {
+    for (const child of node.childNodes) assertNodeAssetFree(child, locator);
+  }
+}
+function assertCardHtmlAssetFree(input) {
+  for (const overlay of input.overlays ?? []) {
+    if (overlay.template !== "card") continue;
+    const html = overlay.params?.html;
+    if (typeof html !== "string") continue;
+    const fragment = parseFragment(html);
+    for (const node of fragment.childNodes) assertNodeAssetFree(node, `overlay '${overlay.id}'`);
+  }
+}
+
+export {
+  assertCardHtmlAssetFree
+};

package/dist/{chunk-6ABIXGLO.js → chunk-KKEY5MIW.js}

@@ -17,6 +17,10 @@ import {
   staggerRise,
   staggerUp
 } from "./chunk-ZFEXATWN.js";
+import {
+  FitText,
+  resolveFitFontSize
+} from "./chunk-XHGZ2E77.js";
 import {
   ACCENT,
   ACCENT_STRONG,
@@ -31,10 +35,6 @@ import {
   VIOLET,
   WARNING
 } from "./chunk-CX2IIQ4R.js";
-import {
-  FitText,
-  resolveFitFontSize
-} from "./chunk-XHGZ2E77.js";
 
 // ../execution/primitives/src/text/blur-reveal/index.tsx
 import { interpolate, useCurrentFrame, useVideoConfig } from "remotion";
@@ -1986,7 +1986,7 @@ var paramsSchema2 = z2.object({
     "Visual variant. default: letterboxed fade with letter-spacing tighten. bold: heavier weight + spring entrance. zoom: scale-from-blur with overshoot."
   ),
   position: z2.enum(["center", "top", "bottom"]).default("center").describe("Vertical position of the title block."),
-  tokens: tokensSchema.default({}).describe("Visual tokens. fontFamily, fontSize, textColor, accentColor, letterSpacing.")
+  tokens: tokensSchema.prefault({}).describe("Visual tokens. fontFamily, fontSize, textColor, accentColor, letterSpacing.")
 }).passthrough();
 var config2 = {
   id: "cinematic-title",
@@ -2113,7 +2113,7 @@ var paramsSchema4 = z4.object({
     "Array of timed words. Each word has text + startMs/endMs in milliseconds relative to the clip start. Source from the transcript."
   ),
   position: z4.enum(["center", "left", "right", "bottom"]).default("center").describe('Block position. "bottom" is canonical for caption-style overlays.'),
-  tokens: tokensSchema2.default({}).describe("Visual tokens. fontFamily, fontSize, textColor, activeColor, activeScale.")
+  tokens: tokensSchema2.prefault({}).describe("Visual tokens. fontFamily, fontSize, textColor, activeColor, activeScale.")
 }).passthrough();
 var config4 = {
   id: "karaoke",
@@ -2178,7 +2178,7 @@ var paramsSchema5 = z5.object({
   ),
   position: z5.enum(["center", "left", "right"]).default("center").describe("Horizontal alignment of the word block."),
   accentColor: z5.string().default(ACCENT).describe("Accent for the payoff (last) word. Empty string disables."),
-  tokens: tokensSchema3.default({}).describe("Visual tokens. fontFamily, fontSize, textColor.")
+  tokens: tokensSchema3.prefault({}).describe("Visual tokens. fontFamily, fontSize, textColor.")
 }).passthrough();
 var config5 = {
   id: "kinetic-type",
@@ -2244,7 +2244,7 @@ var paramsSchema6 = z6.object({
   variant: z6.enum(["classic", "modern", "cinematic"]).default("classic").describe(
     "Visual variant. classic: split accent + dark sub bar. modern: full accent rounded bg. cinematic: borderLeft accent + translucent dark."
   ),
-  tokens: tokensSchema4.default({}).describe("Visual tokens. fontFamily, fontSize, subtitleFontSize, textColor, accentColor, backgroundColor.")
+  tokens: tokensSchema4.prefault({}).describe("Visual tokens. fontFamily, fontSize, subtitleFontSize, textColor, accentColor, backgroundColor.")
 }).passthrough();
 var config6 = {
   id: "lower-third",