@cueframe/kernel 0.2.11 → 0.2.12

package/dist/_members/component-runtime/browserFirewall.d.ts

@@ -1,8 +1,8 @@
 export interface ComponentFirewallDecision {
     allow: boolean;
-    documentOrigin: string | null;
+    documentOrigin: string;
 }
-export declare function decideComponentRequest(url: string, resourceType: string, documentOrigin: string | null, allowedAssetOrigins: ReadonlySet<string>): ComponentFirewallDecision;
+export declare function decideComponentRequest(url: string, _resourceType: string, documentOrigin: string, allowedAssetOrigins: ReadonlySet<string>): ComponentFirewallDecision;
 export declare const COMPONENT_PAGE_LOCKDOWN = "\nObject.defineProperties(globalThis, {\n  open: { value: undefined },\n  Worker: { value: undefined },\n  SharedWorker: { value: undefined },\n  RTCPeerConnection: { value: undefined },\n  webkitRTCPeerConnection: { value: undefined },\n  WebSocket: { value: undefined },\n  EventSource: { value: undefined }\n});\n";
 type DevtoolsSession = {
     on(event: string, listener: (payload: any) => void): void;
@@ -14,7 +14,7 @@ type FirewallBrowser = {
         silent: boolean;
     }): Promise<void>;
 };
-export declare function installComponentRequestFirewall(browser: FirewallBrowser, allowedAssetOrigins: ReadonlySet<string>, onDiagnostic?: (entry: {
+export declare function installComponentRequestFirewall(browser: FirewallBrowser, documentOrigin: string, allowedAssetOrigins: ReadonlySet<string>, onDiagnostic?: (entry: {
     type: 'request-failed' | 'page-error';
     url?: string;
     message: string;

package/dist/_members/component-runtime/browserFirewall.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"browserFirewall.d.ts","sourceRoot":"","sources":["../src/browserFirewall.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,yBAAyB;IACxC,KAAK,EAAE,OAAO,CAAC;IACf,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;CAC/B;AAMD,wBAAgB,sBAAsB,CACpC,GAAG,EAAE,MAAM,EACX,YAAY,EAAE,MAAM,EACpB,cAAc,EAAE,MAAM,GAAG,IAAI,EAC7B,mBAAmB,EAAE,WAAW,CAAC,MAAM,CAAC,GACvC,yBAAyB,CAoB3B;AAcD,eAAO,MAAM,uBAAuB,iUAAgB,CAAC;AAErD,KAAK,eAAe,GAAG;IACrB,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,OAAO,EAAE,GAAG,KAAK,IAAI,GAAG,IAAI,CAAC;IAC1D,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CAC1D,CAAC;AACF,KAAK,eAAe,GAAG;IACrB,UAAU,EAAE,eAAe,CAAC;IAC5B,KAAK,CAAC,OAAO,EAAE;QAAE,MAAM,EAAE,OAAO,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACpD,CAAC;AAEF,wBAAsB,+BAA+B,CACnD,OAAO,EAAE,eAAe,EACxB,mBAAmB,EAAE,WAAW,CAAC,MAAM,CAAC,EACxC,YAAY,CAAC,EAAE,CAAC,KAAK,EAAE;IAAE,IAAI,EAAE,gBAAgB,GAAG,YAAY,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,KAAK,IAAI,GACvG,OAAO,CAAC;IACT,cAAc,IAAI,SAAS,MAAM,EAAE,CAAC;IACpC,UAAU,IAAI,OAAO,GAAG,IAAI,CAAC;IAC7B,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxB,CAAC,CA0ED"}
+{"version":3,"file":"browserFirewall.d.ts","sourceRoot":"","sources":["../src/browserFirewall.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,yBAAyB;IACxC,KAAK,EAAE,OAAO,CAAC;IACf,cAAc,EAAE,MAAM,CAAC;CACxB;AAMD,wBAAgB,sBAAsB,CACpC,GAAG,EAAE,MAAM,EACX,aAAa,EAAE,MAAM,EACrB,cAAc,EAAE,MAAM,EACtB,mBAAmB,EAAE,WAAW,CAAC,MAAM,CAAC,GACvC,yBAAyB,CAiB3B;AAcD,eAAO,MAAM,uBAAuB,iUAAgB,CAAC;AAErD,KAAK,eAAe,GAAG;IACrB,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,OAAO,EAAE,GAAG,KAAK,IAAI,GAAG,IAAI,CAAC;IAC1D,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CAC1D,CAAC;AACF,KAAK,eAAe,GAAG;IACrB,UAAU,EAAE,eAAe,CAAC;IAC5B,KAAK,CAAC,OAAO,EAAE;QAAE,MAAM,EAAE,OAAO,CAAA;KAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACpD,CAAC;AAEF,wBAAsB,+BAA+B,CACnD,OAAO,EAAE,eAAe,EACxB,cAAc,EAAE,MAAM,EACtB,mBAAmB,EAAE,WAAW,CAAC,MAAM,CAAC,EACxC,YAAY,CAAC,EAAE,CAAC,KAAK,EAAE;IAAE,IAAI,EAAE,gBAAgB,GAAG,YAAY,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,KAAK,IAAI,GACvG,OAAO,CAAC;IACT,cAAc,IAAI,SAAS,MAAM,EAAE,CAAC;IACpC,UAAU,IAAI,OAAO,GAAG,IAAI,CAAC;IAC7B,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxB,CAAC,CA0ED"}

package/dist/_members/component-runtime/componentBundleServer.d.ts

@@ -0,0 +1,9 @@
+export interface ComponentBundleServer {
+    renderUrl: string;
+    liveUrl: string;
+    origin: string;
+    close(): Promise<void>;
+}
+/** Own one loopback bundle origin for selection, capture and the live player. */
+export declare function startComponentBundleServer(upstream: string, assetOrigins: ReadonlySet<string>): Promise<ComponentBundleServer>;
+//# sourceMappingURL=componentBundleServer.d.ts.map

package/dist/_members/component-runtime/componentBundleServer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"componentBundleServer.d.ts","sourceRoot":"","sources":["../src/componentBundleServer.ts"],"names":[],"mappings":"AAKA,MAAM,WAAW,qBAAqB;IACpC,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxB;AAmBD,iFAAiF;AACjF,wBAAsB,0BAA0B,CAC9C,QAAQ,EAAE,MAAM,EAChB,YAAY,EAAE,WAAW,CAAC,MAAM,CAAC,GAChC,OAAO,CAAC,qBAAqB,CAAC,CAkFhC"}

package/dist/_members/component-runtime/render.d.ts

@@ -72,7 +72,7 @@ export interface CreateComponentStillSessionOpts extends Omit<RenderComponentSti
     /** Optional host diagnostic sink for browser console output during startup/render. */
     onBrowserLog?: (entry: unknown) => void;
     /** Reports bounded startup phases without exposing component source or props. */
-    onStartupPhase?: (phase: 'prepare' | 'prepared' | 'open-browser' | 'browser-open' | 'firewall' | 'select-composition' | 'composition-ready' | 'start-proxy' | 'ready') => void;
+    onStartupPhase?: (phase: 'prepare' | 'prepared' | 'open-browser' | 'browser-open' | 'firewall' | 'select-composition' | 'composition-ready' | 'start-bundle-server' | 'ready') => void;
 }
 export declare function importFromRenderEntry<T>(renderEntryRoot: string, spec: string): Promise<T>;
 /** What the shared verifier hands back: the browser this process will actually run. */

package/dist/_members/component-runtime/render.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"render.d.ts","sourceRoot":"","sources":["../src/render.ts"],"names":[],"mappings":"AAMA,OAAO,EAGL,KAAK,SAAS,EACf,MAAM,gCAAgC,CAAC;AAMxC,OAAO,EAEL,KAAK,yBAAyB,EAC9B,KAAK,8BAA8B,EACnC,KAAK,0BAA0B,EAK/B,KAAK,uCAAuC,EAC5C,KAAK,iCAAiC,IAAI,wBAAwB,EAClE,KAAK,kCAAkC,IAAI,uCAAuC,EAClF,KAAK,sCAAsC,IAAI,2CAA2C,EAC3F,MAAM,gBAAgB,CAAC;AAaxB,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAG3D,OAAO,EACL,iBAAiB,EACjB,oBAAoB,EACpB,oBAAoB,EACpB,mBAAmB,GACpB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,2BAA2B,EAAE,2BAA2B,EAAE,MAAM,wBAAwB,CAAC;AAElG,wBAAgB,+BAA+B,CAC7C,QAAQ,EAAE,MAAM,CAAC,QAAQ,EACzB,WAAW,EAAE,8BAA8B,CAAC,KAAK,CAAC,GACjD,OAAO,CAET;AAED,eAAO,MAAM,qCAAqC,QAAS,CAAC;AAC5D,eAAO,MAAM,oCAAoC,OAAQ,CAAC;AAC1D,eAAO,MAAM,mCAAmC,IAAI,CAAC;AA2FrD,wBAAgB,yBAAyB,CACvC,eAAe,EAAE,MAAM,EACvB,qBAAqB,EAAE,MAAM,IAGrB,QAAQ,GAAG,SAwBpB;AAED,MAAM,WAAW,wBAAwB;IACvC,EAAE,EAAE,SAAS,CAAC;IACd,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAChC,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,8BAA8B,CAAC;IAC1C,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,mFAAmF;IACnF,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,mBAAmB,CAAC,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IAC1C,iFAAiF;IACjF,SAAS,CAAC,EAAE,aAAa,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CAC5F;AAED,MAAM,WAAW,uBAAuB;IACtC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,4EAA4E;IAC5E,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,oFAAoF;IACpF,QAAQ,CAAC,eAAe,EAAE,2CAA2C,GAAG,IAAI,CAAC;IAC7E,WAAW,CAAC,IAAI,CAAC,EAAE,uBAAuB,GAAG,OAAO,CAAC;QACnD,OAAO,EAAE,MAAM,CAAC;QAChB,QAAQ,EAAE,MAAM,CAAC;QACjB,cAAc,EAAE,yBAAyB,CAAC;QAC1C,iBAAiB,EAAE,uCAAuC,GAAG,IAAI,CAAC;QAClE,oBAAoB,EAAE,OAAO,CAAC;KAC/B,CAAC,CAAC;IACH,mBAAmB,CAAC,IAAI,CAAC,EAAE,uBAAuB,GAAG,OAAO,CAAC;QAC3D,GAAG,EAAE,wBAAwB,CAAC;QAC9B,QAAQ,EAAE,MAAM,CAAC;QACjB,cAAc,EAAE,yBAAyB,CAAC;QAC1C,WAAW,EAAE,uCAAuC,CAAC;KACtD,CAAC,CAAC;IACH,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACvB,kFAAkF;IAClF,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACzB;AAED,MAAM,WAAW,+BAAgC,SAAQ,IAAI,CAAC,wBAAwB,EAAE,OAAO,CAAC;IAC9F;iEAC6D;IAC7D,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,iFAAiF;IACjF,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,sFAAsF;IACtF,YAAY,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,IAAI,CAAC;IACxC,iFAAiF;IACjF,cAAc,CAAC,EAAE,CAAC,KAAK,EAAE,SAAS,GAAG,UAAU,GAAG,cAAc,GAAG,cAAc,GAAG,UAAU,GAAG,oBAAoB,GAAG,mBAAmB,GAAG,aAAa,GAAG,OAAO,KAAK,IAAI,CAAC;CAChL;AAED,wBAAsB,qBAAqB,CAAC,CAAC,EAAE,eAAe,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,CAKhG;AAED,uFAAuF;AACvF,MAAM,MAAM,qBAAqB,GAAG;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,gBAAgB,GAAG,oBAAoB,CAAC;IACpD,YAAY,EAAE,MAAM,CAAC;CACtB,CAAC;AAEF;;;;;;GAMG;AACH,eAAO,MAAM,8BAA8B,QAAS,CAAC;AAoBrD,wBAAsB,wBAAwB,CAAC,eAAe,EAAE,MAAM,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAQtG;AA2BD;;;;;;;;;;;GAWG;AACH,wBAAsB,2BAA2B,CAC/C,eAAe,EAAE,MAAM,EACvB,OAAO,EAAE,OAAO,GACf,OAAO,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC,CAmB3D;AAED,0FAA0F;AAC1F,wBAAsB,oBAAoB,CACxC,eAAe,EAAE,MAAM,EACvB,OAAO,EAAE,OAAO,EAChB,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,IAAI,CAAC,CAGf;AAED,kGAAkG;AAClG,MAAM,MAAM,wBAAwB,GAAG;IACrC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;CACvB,CAAC;AAEF;;;;;;;;GAQG;AACH,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,OAAO,GAAG,wBAAwB,GAAG,IAAI,CAEpF;AAED,wBAAgB,sBAAsB,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,CAKhE;AAMD,eAAO,MAAM,gCAAgC,iDAAiD,CAAC;AAc/F,oFAAoF;AACpF,wBAAgB,kCAAkC,CAChD,QAAQ,EAAE,8BAA8B,GACvC;IAAE,gBAAgB,EAAE,MAAM,EAAE,CAAA;CAAE,CA0BhC;AAiFD,wBAAsB,gCAAgC,CAAC,eAAe,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAwB/F;AA0HD,wBAAsB,2BAA2B,CAC/C,IAAI,EAAE,+BAA+B,GACpC,OAAO,CAAC,qBAAqB,CAAC,CA6dhC;AAED,wBAAsB,oBAAoB,CACxC,IAAI,EAAE,wBAAwB,GAC7B,OAAO,CAAC;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,cAAc,EAAE,yBAAyB,CAAA;CAAE,CAAC,CAmBzE;AAED,MAAM,MAAM,UAAU,GAAG,QAAQ,GAAG,KAAK,CAAC;AAE1C;;;GAGG;AACH,eAAO,MAAM,sBAAsB,EAAE,gBAGpC,CAAC;AAEF,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,UAAU,GAAG;IACpD,KAAK,EAAE,UAAU,CAAC;IAClB,WAAW,EAAE,cAAc,GAAG,UAAU,CAAC;IACzC,WAAW,EAAE,KAAK,CAAC;IACnB,KAAK,EAAE,IAAI,CAAC;IACZ,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,cAAc,CAAC,EAAE,gBAAgB,CAAC;CACnC,CAMA;AAED,wBAAgB,QAAQ,CAAC,KAAK,EAAE,UAAU,GAAG,KAAK,GAAG,MAAM,CAE1D;AAED,MAAM,WAAW,wBAAwB;IACvC,EAAE,EAAE,SAAS,CAAC;IACd,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAChC,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,8BAA8B,CAAC;IAC1C,KAAK,CAAC,EAAE,UAAU,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B;mFAC+E;IAC/E,UAAU,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC9B,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,mBAAmB,CAAC,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IAC1C,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,CAAC,QAAQ,EAAE;QAAE,cAAc,EAAE,MAAM,CAAC;QAAC,aAAa,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,KAAK,IAAI,CAAC;IACxG,QAAQ,CAAC,EAAE,CAAC,MAAM,EAAE,qBAAqB,KAAK,IAAI,CAAC;CACpD;AAED,MAAM,WAAW,qBAAqB;IACpC,KAAK,EAAE,QAAQ,GAAG,SAAS,GAAG,aAAa,GAAG,aAAa,GAAG,QAAQ,GAAG,UAAU,GAAG,QAAQ,CAAC;IAC/F,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,CAAC,EAAE,KAAK,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACvD;wEACoE;IACpE,mBAAmB,CAAC,EAAE,MAAM,EAAE,CAAC;CAChC;AAED;;;;;;;GAOG;AACH,wBAAsB,oBAAoB,CACxC,IAAI,EAAE,wBAAwB,GAC7B,OAAO,CAAC;IACT,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,yBAAyB,CAAC;IAC1C,IAAI,EAAE,0BAA0B,GAAG,IAAI,CAAC;CACzC,CAAC,CAqID"}
+{"version":3,"file":"render.d.ts","sourceRoot":"","sources":["../src/render.ts"],"names":[],"mappings":"AAMA,OAAO,EAGL,KAAK,SAAS,EACf,MAAM,gCAAgC,CAAC;AAMxC,OAAO,EAEL,KAAK,yBAAyB,EAC9B,KAAK,8BAA8B,EACnC,KAAK,0BAA0B,EAK/B,KAAK,uCAAuC,EAC5C,KAAK,iCAAiC,IAAI,wBAAwB,EAClE,KAAK,kCAAkC,IAAI,uCAAuC,EAClF,KAAK,sCAAsC,IAAI,2CAA2C,EAC3F,MAAM,gBAAgB,CAAC;AAaxB,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAG3D,OAAO,EACL,iBAAiB,EACjB,oBAAoB,EACpB,oBAAoB,EACpB,mBAAmB,GACpB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,2BAA2B,EAAE,2BAA2B,EAAE,MAAM,wBAAwB,CAAC;AAElG,wBAAgB,+BAA+B,CAC7C,QAAQ,EAAE,MAAM,CAAC,QAAQ,EACzB,WAAW,EAAE,8BAA8B,CAAC,KAAK,CAAC,GACjD,OAAO,CAET;AAED,eAAO,MAAM,qCAAqC,QAAS,CAAC;AAC5D,eAAO,MAAM,oCAAoC,OAAQ,CAAC;AAC1D,eAAO,MAAM,mCAAmC,IAAI,CAAC;AA2FrD,wBAAgB,yBAAyB,CACvC,eAAe,EAAE,MAAM,EACvB,qBAAqB,EAAE,MAAM,IAGrB,QAAQ,GAAG,SAwBpB;AAED,MAAM,WAAW,wBAAwB;IACvC,EAAE,EAAE,SAAS,CAAC;IACd,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAChC,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,8BAA8B,CAAC;IAC1C,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,mFAAmF;IACnF,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,mBAAmB,CAAC,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IAC1C,iFAAiF;IACjF,SAAS,CAAC,EAAE,aAAa,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CAC5F;AAED,MAAM,WAAW,uBAAuB;IACtC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,4EAA4E;IAC5E,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,oFAAoF;IACpF,QAAQ,CAAC,eAAe,EAAE,2CAA2C,GAAG,IAAI,CAAC;IAC7E,WAAW,CAAC,IAAI,CAAC,EAAE,uBAAuB,GAAG,OAAO,CAAC;QACnD,OAAO,EAAE,MAAM,CAAC;QAChB,QAAQ,EAAE,MAAM,CAAC;QACjB,cAAc,EAAE,yBAAyB,CAAC;QAC1C,iBAAiB,EAAE,uCAAuC,GAAG,IAAI,CAAC;QAClE,oBAAoB,EAAE,OAAO,CAAC;KAC/B,CAAC,CAAC;IACH,mBAAmB,CAAC,IAAI,CAAC,EAAE,uBAAuB,GAAG,OAAO,CAAC;QAC3D,GAAG,EAAE,wBAAwB,CAAC;QAC9B,QAAQ,EAAE,MAAM,CAAC;QACjB,cAAc,EAAE,yBAAyB,CAAC;QAC1C,WAAW,EAAE,uCAAuC,CAAC;KACtD,CAAC,CAAC;IACH,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACvB,kFAAkF;IAClF,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACzB;AAED,MAAM,WAAW,+BAAgC,SAAQ,IAAI,CAAC,wBAAwB,EAAE,OAAO,CAAC;IAC9F;iEAC6D;IAC7D,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,iFAAiF;IACjF,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,sFAAsF;IACtF,YAAY,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,IAAI,CAAC;IACxC,iFAAiF;IACjF,cAAc,CAAC,EAAE,CAAC,KAAK,EAAE,SAAS,GAAG,UAAU,GAAG,cAAc,GAAG,cAAc,GAAG,UAAU,GAAG,oBAAoB,GAAG,mBAAmB,GAAG,qBAAqB,GAAG,OAAO,KAAK,IAAI,CAAC;CACxL;AAED,wBAAsB,qBAAqB,CAAC,CAAC,EAAE,eAAe,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,CAKhG;AAED,uFAAuF;AACvF,MAAM,MAAM,qBAAqB,GAAG;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,gBAAgB,GAAG,oBAAoB,CAAC;IACpD,YAAY,EAAE,MAAM,CAAC;CACtB,CAAC;AAEF;;;;;;GAMG;AACH,eAAO,MAAM,8BAA8B,QAAS,CAAC;AAoBrD,wBAAsB,wBAAwB,CAAC,eAAe,EAAE,MAAM,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAQtG;AA2BD;;;;;;;;;;;GAWG;AACH,wBAAsB,2BAA2B,CAC/C,eAAe,EAAE,MAAM,EACvB,OAAO,EAAE,OAAO,GACf,OAAO,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC,CAmB3D;AAED,0FAA0F;AAC1F,wBAAsB,oBAAoB,CACxC,eAAe,EAAE,MAAM,EACvB,OAAO,EAAE,OAAO,EAChB,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,MAAM,GACb,OAAO,CAAC,IAAI,CAAC,CAGf;AAED,kGAAkG;AAClG,MAAM,MAAM,wBAAwB,GAAG;IACrC,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;CACvB,CAAC;AAEF;;;;;;;;GAQG;AACH,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,OAAO,GAAG,wBAAwB,GAAG,IAAI,CAEpF;AAED,wBAAgB,sBAAsB,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,CAKhE;AAMD,eAAO,MAAM,gCAAgC,iDAAiD,CAAC;AAc/F,oFAAoF;AACpF,wBAAgB,kCAAkC,CAChD,QAAQ,EAAE,8BAA8B,GACvC;IAAE,gBAAgB,EAAE,MAAM,EAAE,CAAA;CAAE,CA0BhC;AAiFD,wBAAsB,gCAAgC,CAAC,eAAe,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAwB/F;AA0HD,wBAAsB,2BAA2B,CAC/C,IAAI,EAAE,+BAA+B,GACpC,OAAO,CAAC,qBAAqB,CAAC,CAudhC;AAED,wBAAsB,oBAAoB,CACxC,IAAI,EAAE,wBAAwB,GAC7B,OAAO,CAAC;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,cAAc,EAAE,yBAAyB,CAAA;CAAE,CAAC,CAmBzE;AAED,MAAM,MAAM,UAAU,GAAG,QAAQ,GAAG,KAAK,CAAC;AAE1C;;;GAGG;AACH,eAAO,MAAM,sBAAsB,EAAE,gBAGpC,CAAC;AAEF,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,UAAU,GAAG;IACpD,KAAK,EAAE,UAAU,CAAC;IAClB,WAAW,EAAE,cAAc,GAAG,UAAU,CAAC;IACzC,WAAW,EAAE,KAAK,CAAC;IACnB,KAAK,EAAE,IAAI,CAAC;IACZ,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,cAAc,CAAC,EAAE,gBAAgB,CAAC;CACnC,CAMA;AAED,wBAAgB,QAAQ,CAAC,KAAK,EAAE,UAAU,GAAG,KAAK,GAAG,MAAM,CAE1D;AAED,MAAM,WAAW,wBAAwB;IACvC,EAAE,EAAE,SAAS,CAAC;IACd,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAChC,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACjC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,8BAA8B,CAAC;IAC1C,KAAK,CAAC,EAAE,UAAU,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B;mFAC+E;IAC/E,UAAU,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC9B,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,mBAAmB,CAAC,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC;IAC1C,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,CAAC,QAAQ,EAAE;QAAE,cAAc,EAAE,MAAM,CAAC;QAAC,aAAa,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,KAAK,IAAI,CAAC;IACxG,QAAQ,CAAC,EAAE,CAAC,MAAM,EAAE,qBAAqB,KAAK,IAAI,CAAC;CACpD;AAED,MAAM,WAAW,qBAAqB;IACpC,KAAK,EAAE,QAAQ,GAAG,SAAS,GAAG,aAAa,GAAG,aAAa,GAAG,QAAQ,GAAG,UAAU,GAAG,QAAQ,CAAC;IAC/F,UAAU,EAAE,MAAM,CAAC;IACnB,aAAa,CAAC,EAAE,KAAK,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACvD;wEACoE;IACpE,mBAAmB,CAAC,EAAE,MAAM,EAAE,CAAC;CAChC;AAED;;;;;;;GAOG;AACH,wBAAsB,oBAAoB,CACxC,IAAI,EAAE,wBAAwB,GAC7B,OAAO,CAAC;IACT,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,yBAAyB,CAAC;IAC1C,IAAI,EAAE,0BAA0B,GAAG,IAAI,CAAC;CACzC,CAAC,CAsID"}

package/dist/{chunk-MXMLOPOK.js → chunk-2KO5EQQS.js}

@@ -3,7 +3,7 @@ import {
   assertSceneShotParamsAdmitted,
   materializeComponentSource,
   renderComponentAlpha
-} from "./chunk-MTYEB6C4.js";
+} from "./chunk-RSEN7JYE.js";
 import {
   componentArtifactId,
   componentBundleId,

package/dist/{chunk-AW6HX577.js → chunk-EWABZ72N.js}

@@ -22,7 +22,7 @@ import {
 } from "./chunk-TECEMBCI.js";
 import {
   CURATED_TOOLS
-} from "./chunk-SC55VDLC.js";
+} from "./chunk-NNMXLNOI.js";
 
 // ../mcp/src/prompts.ts
 var skillListCache = null;

package/dist/{chunk-SC55VDLC.js → chunk-NNMXLNOI.js}

@@ -259,11 +259,13 @@ function describeClip(c) {
 function formatComposition(json) {
   const full = JSON.stringify(json, null, 2);
   if (full.length <= COMPOSITION_VERBATIM_BUDGET) return full;
+  const compact = JSON.stringify(json);
+  if (compact.length <= COMPOSITION_VERBATIM_BUDGET) return compact;
   const tracks = Array.isArray(json?.tracks) ? json.tracks : [];
   const clips = tracks.flatMap((t) => Array.isArray(t?.contents) ? t.contents : []);
   const f = json?.format ?? {};
   const lines = [
-    `Composition SUMMARIZED \u2014 the full JSON is ${full.length.toLocaleString()} chars, past what an MCP result can carry. Structure below is complete (every track and clip is listed); card html bodies and caption words are elided as lengths/counts. For a verbatim copy, GET /v1/projects/{id}/composition over REST.`,
+    `Composition SUMMARIZED \u2014 the full JSON is ${full.length.toLocaleString()} chars, past CueFrame's inline response budget. Structure below is complete (every track and clip is listed); card html bodies and caption words are elided as lengths/counts. For a verbatim copy, GET /v1/projects/{id}/composition over REST.`,
     "",
     `format: ${f.aspectRatio ?? "?"} ${f.fps ?? "?"}fps ${f.resolution ?? ""}`.trim(),
     `tracks: ${tracks.length}   clips: ${clips.length}`

package/dist/{chunk-MTYEB6C4.js → chunk-RSEN7JYE.js}

@@ -137,7 +137,7 @@ function readMaterializedComponentSource(ws, id) {
 function isLoopbackHost(hostname) {
   return hostname === "localhost" || hostname === "127.0.0.1" || hostname === "[::1]";
 }
-function decideComponentRequest(url, resourceType, documentOrigin, allowedAssetOrigins) {
+function decideComponentRequest(url, _resourceType, documentOrigin, allowedAssetOrigins) {
   let parsed;
   try {
     parsed = new URL(url);
@@ -150,9 +150,6 @@ function decideComponentRequest(url, resourceType, documentOrigin, allowedAssetO
   if (parsed.protocol !== "http:" && parsed.protocol !== "https:") {
     return { allow: false, documentOrigin };
   }
-  if (documentOrigin === null && resourceType === "Document" && isLoopbackHost(parsed.hostname)) {
-    return { allow: true, documentOrigin: parsed.origin };
-  }
   return {
     allow: parsed.origin === documentOrigin || allowedAssetOrigins.has(parsed.origin),
     documentOrigin
@@ -170,12 +167,15 @@ Object.defineProperties(globalThis, {
 });
 `;
 var COMPONENT_PAGE_LOCKDOWN = PAGE_LOCKDOWN;
-async function installComponentRequestFirewall(browser, allowedAssetOrigins, onDiagnostic) {
+async function installComponentRequestFirewall(browser, documentOrigin, allowedAssetOrigins, onDiagnostic) {
   let closing = false;
   let fatal = null;
   let closePromise = null;
   const denied = [];
-  let documentOrigin = null;
+  const bundle = new URL(documentOrigin);
+  if (bundle.origin !== documentOrigin || bundle.protocol !== "http:" || !isLoopbackHost(bundle.hostname)) {
+    throw new Error("Component firewall requires an owned loopback bundle origin.");
+  }
   const closeBrowser = browser.close.bind(browser);
   const close = () => {
     closing = true;
@@ -195,7 +195,6 @@ async function installComponentRequestFirewall(browser, allowedAssetOrigins, onD
         documentOrigin,
         allowedAssetOrigins
       );
-      documentOrigin = decision.documentOrigin;
       if (!decision.allow) {
         denied.push(event.request.url);
         let location = "invalid URL";
@@ -929,7 +928,7 @@ function deterministicRuntimeScopeSource() {
   return createDeterministicRuntimeScope.toString();
 }
 
-// ../execution/component-runtime/src/livePreviewProxy.ts
+// ../execution/component-runtime/src/componentBundleServer.ts
 import { createServer } from "http";
 import { randomBytes } from "crypto";
 import { readFile, realpath } from "fs/promises";
@@ -950,7 +949,7 @@ function contentSecurityPolicy(assetOrigins, scriptNonce, resourceOrigin) {
     "frame-ancestors tauri: http://tauri.localhost"
   ].join("; ");
 }
-async function startLivePreviewProxy(upstream, assetOrigins) {
+async function startComponentBundleServer(upstream, assetOrigins) {
   const upstreamUrl = URL.canParse(upstream) ? new URL(upstream) : null;
   if (upstreamUrl && (upstreamUrl.protocol !== "http:" || !["127.0.0.1", "localhost"].includes(upstreamUrl.hostname))) {
     throw new Error("Live component preview requires a loopback bundle origin.");
@@ -1019,10 +1018,14 @@ async function startLivePreviewProxy(upstream, assetOrigins) {
     throw new Error("Live component preview did not bind a loopback port.");
   }
   const liveUrl = new URL(upstreamUrl ? upstreamUrl.pathname + upstreamUrl.search : "/", `http://localhost:${address.port}`);
+  liveUrl.searchParams.delete("__cueframe_live");
+  const renderUrl = liveUrl.href;
   liveUrl.searchParams.set("__cueframe_live", "1");
   let closePromise;
   return {
-    url: liveUrl.href,
+    renderUrl,
+    liveUrl: liveUrl.href,
+    origin: liveUrl.origin,
     close: () => closePromise ??= new Promise((resolve2, reject) => {
       server.close((error) => error ? reject(error) : resolve2());
     })
@@ -1439,7 +1442,7 @@ async function createComponentStillSession(opts) {
   const revision = opts.revision ?? localSourceRevision(opts.ws, opts.id);
   const allowedAssetOrigins = new Set(opts.allowedAssetOrigins ?? []);
   opts.onStartupPhase?.("prepare");
-  const { serveUrl, browserExecutable, stagedBrowser, inputProps, renderEntryRoot, pinnedManifest } = await prepareLocalBundle({
+  const { serveUrl: bundlePath, browserExecutable, stagedBrowser, inputProps, renderEntryRoot, pinnedManifest } = await prepareLocalBundle({
     ws: opts.ws,
     id: opts.id,
     width,
@@ -1459,6 +1462,9 @@ async function createComponentStillSession(opts) {
     renderEntryRoot,
     "@remotion/renderer"
   );
+  opts.onStartupPhase?.("start-bundle-server");
+  const bundleServer = await startComponentBundleServer(bundlePath, allowedAssetOrigins);
+  const serveUrl = bundleServer.renderUrl;
   const requiredGraphics = opts.graphics ?? {
     api: "canvas2d",
     required: true,
@@ -1487,6 +1493,7 @@ async function createComponentStillSession(opts) {
       opts.onStartupPhase?.("firewall");
       candidateFirewall = await withComponentBrowserFirewallTimeout(installComponentRequestFirewall(
         candidateBrowser,
+        bundleServer.origin,
         allowedAssetOrigins,
         opts.onBrowserLog ? (entry) => opts.onBrowserLog?.(entry) : void 0
       ));
@@ -1562,9 +1569,11 @@ async function createComponentStillSession(opts) {
       } catch {
       }
       if (!candidateBrowser) {
+        await bundleServer.close();
         throw componentRuntimeError(error, "component_resource_exhausted", true);
       }
       if (error instanceof ComponentBrowserFirewallTimeout && attempt < COMPONENT_BROWSER_FIREWALL_ATTEMPTS) continue;
+      await bundleServer.close();
       const retryable = error instanceof ComponentBrowserFirewallTimeout;
       throw componentRuntimeError(
         error,
@@ -1574,19 +1583,6 @@ async function createComponentStillSession(opts) {
     }
   }
   opts.onStartupPhase?.("composition-ready");
-  let liveProxy;
-  try {
-    opts.onStartupPhase?.("start-proxy");
-    liveProxy = await startLivePreviewProxy(serveUrl, allowedAssetOrigins);
-  } catch (error) {
-    let cleanupError;
-    await firewall.close().catch((caught) => {
-      cleanupError = caught;
-    });
-    const failure = componentRuntimeError(error, "component_runtime_error");
-    if (cleanupError !== void 0 && failure.cause === void 0) failure.cause = cleanupError;
-    throw failure;
-  }
   opts.onStartupPhase?.("ready");
   let state = "open";
   let tail = Promise.resolve();
@@ -1602,7 +1598,7 @@ async function createComponentStillSession(opts) {
   };
   const session = {
     revision,
-    liveUrl: liveProxy.url,
+    liveUrl: bundleServer.liveUrl,
     hostAttestation,
     renderFrame(frameOpts = {}) {
       if (state !== "open") {
@@ -1612,7 +1608,7 @@ async function createComponentStillSession(opts) {
         const fatal = firewall.fatalError();
         if (fatal !== null) {
           state = "closed";
-          closePromise ??= Promise.all([firewall.close(), liveProxy.close()]).then(() => void 0);
+          closePromise ??= Promise.all([firewall.close(), bundleServer.close()]).then(() => void 0);
           throw componentRuntimeError(fatal, "component_runtime_error");
         }
         if (frameOpts.expectedRevision !== void 0 && frameOpts.expectedRevision !== revision) {
@@ -1671,6 +1667,7 @@ async function createComponentStillSession(opts) {
                 await sizeLocalLaneWindows(renderEntryRoot, candidateBrowser, width, height);
                 candidateFirewall = await withComponentBrowserFirewallTimeout(installComponentRequestFirewall(
                   candidateBrowser,
+                  bundleServer.origin,
                   allowedAssetOrigins,
                   opts.onBrowserLog ? (entry) => opts.onBrowserLog?.(entry) : void 0
                 ));
@@ -1764,7 +1761,7 @@ async function createComponentStillSession(opts) {
         const renderFatal = firewall.fatalError();
         if (renderFatal !== null) {
           state = "closed";
-          closePromise ??= Promise.all([firewall.close(), liveProxy.close()]).then(() => void 0);
+          closePromise ??= Promise.all([firewall.close(), bundleServer.close()]).then(() => void 0);
           return refuseAfterCleanup(componentRuntimeError(renderFatal, "component_runtime_error"));
         }
         if (opts.captureAttestation && capturePageRaster.value === null) {
@@ -1845,7 +1842,7 @@ async function createComponentStillSession(opts) {
         try {
           await Promise.all([
             firewall.close(),
-            liveProxy.close(),
+            bundleServer.close(),
             ...[...ownedOutputs].map((path) => unlink(path).catch((error) => {
               if (error.code !== "ENOENT") throw error;
             }))
@@ -1860,7 +1857,7 @@ async function createComponentStillSession(opts) {
     cancel() {
       if (cancelPromise) return cancelPromise;
       state = "closing";
-      const browserClose = Promise.all([firewall.close(), liveProxy.close()]);
+      const browserClose = Promise.all([firewall.close(), bundleServer.close()]);
       cancelPromise = (async () => {
         let closeError;
         try {
@@ -1931,7 +1928,7 @@ async function renderComponentAlpha(opts) {
     opts.onTiming?.({ stage, durationMs: now - stageStarted });
     stageStarted = now;
   };
-  const { serveUrl, browserExecutable, stagedBrowser, inputProps, renderEntryRoot } = await prepareLocalBundle({
+  const { serveUrl: bundlePath, browserExecutable, stagedBrowser, inputProps, renderEntryRoot } = await prepareLocalBundle({
     ws: opts.ws,
     id: opts.id,
     width,
@@ -1954,19 +1951,22 @@ async function renderComponentAlpha(opts) {
     required: true,
     accelerationPreference: "software-allowed"
   };
+  const bundleServer = await startComponentBundleServer(bundlePath, opts.allowedAssetOrigins ?? /* @__PURE__ */ new Set());
+  const serveUrl = bundleServer.renderUrl;
   const collector = graphicsCollector(requiredGraphics);
   let browser;
   try {
     browser = await openBrowser("chrome", componentBrowserOptions(requiredGraphics, browserExecutable, stagedBrowser.chromeMode));
     timed("browser");
   } catch (error) {
+    await bundleServer.close();
     throw componentRuntimeError(error, "component_resource_exhausted", true);
   }
   let primaryError;
   const pageDiagnostics = [];
   try {
     await sizeLocalLaneWindows(renderEntryRoot, browser, width, height);
-    const firewall = await installComponentRequestFirewall(browser, opts.allowedAssetOrigins ?? /* @__PURE__ */ new Set(), (entry) => {
+    const firewall = await installComponentRequestFirewall(browser, bundleServer.origin, opts.allowedAssetOrigins ?? /* @__PURE__ */ new Set(), (entry) => {
       if (pageDiagnostics.length < 5) pageDiagnostics.push(`${entry.type}: ${entry.message.slice(0, 2e3)}`);
     });
     const host = await assertComponentBrowserHardware(browser, requiredGraphics);
@@ -2051,11 +2051,9 @@ ${primaryError.message}`,
     }
     throw primaryError;
   } finally {
-    try {
-      await browser.close({ silent: true });
-    } catch (closeError) {
-      if (primaryError === void 0) throw closeError;
-    }
+    const cleanup = await Promise.allSettled([browser.close({ silent: true }), bundleServer.close()]);
+    const failed = cleanup.find((result) => result.status === "rejected");
+    if (primaryError === void 0 && failed?.status === "rejected") throw failed.reason;
   }
 }
 

package/dist/component-runtime/render.js

@@ -26,7 +26,7 @@ import {
   stagedBrowserLocator,
   verifyLocalStagedBrowser,
   vp9AlphaFfmpegOverride
-} from "../chunk-MTYEB6C4.js";
+} from "../chunk-RSEN7JYE.js";
 import "../chunk-WB2VFDQZ.js";
 import "../chunk-EXY4JJPH.js";
 import "../chunk-DAARYRNT.js";

package/dist/component-runtime.js

@@ -7,7 +7,7 @@ import {
   sourceIdentityForBake,
   startComponentAssetServer,
   verifyComponentOutput
-} from "./chunk-MXMLOPOK.js";
+} from "./chunk-2KO5EQQS.js";
 import {
   COMPONENT_MEDIA_HEADROOM,
   COMPONENT_MEDIA_TIERS,
@@ -52,7 +52,7 @@ import {
   stagedBrowserLocator,
   verifyLocalStagedBrowser,
   vp9AlphaFfmpegOverride
-} from "./chunk-MTYEB6C4.js";
+} from "./chunk-RSEN7JYE.js";
 import "./chunk-WB2VFDQZ.js";
 import {
   bundleIdentityFields,

package/dist/mcp/adapter.js

@@ -16,7 +16,7 @@ import {
 } from "../chunk-TECEMBCI.js";
 import {
   CURATED_TOOLS
-} from "../chunk-SC55VDLC.js";
+} from "../chunk-NNMXLNOI.js";
 import "../chunk-2ESYSVXG.js";
 
 // ../mcp/src/adapter.ts

package/dist/mcp/curation.js

@@ -10,7 +10,7 @@ import {
   formatResourceCandidates,
   formatTranscriptPage,
   formatWarnings
-} from "../chunk-SC55VDLC.js";
+} from "../chunk-NNMXLNOI.js";
 import "../chunk-2ESYSVXG.js";
 export {
   CRUD_COVERAGE,

package/dist/mcp/server.js

@@ -7,10 +7,10 @@ import {
   registerRawTools,
   registerSkillPrompts,
   titleCase
-} from "../chunk-AW6HX577.js";
+} from "../chunk-EWABZ72N.js";
 import "../chunk-3V75A6UH.js";
 import "../chunk-TECEMBCI.js";
-import "../chunk-SC55VDLC.js";
+import "../chunk-NNMXLNOI.js";
 import "../chunk-2ESYSVXG.js";
 export {
   RAW_EXCLUDED_OPERATION_IDS,

package/dist/mcp.js

@@ -7,10 +7,10 @@ import {
   buildServer,
   registerCuratedTools,
   registerRawTools
-} from "./chunk-AW6HX577.js";
+} from "./chunk-EWABZ72N.js";
 import "./chunk-3V75A6UH.js";
 import "./chunk-TECEMBCI.js";
-import "./chunk-SC55VDLC.js";
+import "./chunk-NNMXLNOI.js";
 import "./chunk-2ESYSVXG.js";
 export {
   API_URLS,

package/dist/render-harness.js

@@ -8,7 +8,7 @@ import {
 import {
   assertCardHtmlAssetFree
 } from "./chunk-ODUWCQI3.js";
-import "./chunk-MXMLOPOK.js";
+import "./chunk-2KO5EQQS.js";
 import "./chunk-BVA3537Z.js";
 import {
   COMPONENT_STILL_RUNTIME_IDENTITY,
@@ -19,7 +19,7 @@ import {
   readMaterializedComponentSource,
   resolveRenderEntryRoot,
   verifyLocalStagedBrowser
-} from "./chunk-MTYEB6C4.js";
+} from "./chunk-RSEN7JYE.js";
 import "./chunk-WB2VFDQZ.js";
 import {
   sourceVersionId

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cueframe/kernel",
-  "version": "0.2.11",
+  "version": "0.2.12",
   "type": "module",
   "description": "Publish-only aggregate of CueFrame's isomorphic kernel packages — composition, primitives, authoring, MCP, and friends shipped as one npm artifact. Members remain separate workspace packages; this only changes what ships.",
   "files": [
@@ -18,25 +18,25 @@
     "tsup": "^8.3.5",
     "typescript": "^5.9.3",
     "@cueframe/account-model": "0.1.0",
-    "@cueframe/brand-derivation": "0.1.0",
     "@cueframe/animate": "0.1.0",
+    "@cueframe/cloud-import": "0.1.0",
     "@cueframe/compose": "0.1.0",
+    "@cueframe/authoring": "0.1.0",
+    "@cueframe/brand-derivation": "0.1.0",
+    "@cueframe/composition-ops": "0.1.0",
     "@cueframe/composition": "0.1.0",
     "@cueframe/component-runtime": "0.1.0",
+    "@cueframe/errors": "0.1.0",
     "@cueframe/core": "0.1.0",
-    "@cueframe/cloud-import": "0.1.0",
-    "@cueframe/authoring": "0.1.0",
-    "@cueframe/composition-ops": "0.1.0",
-    "@cueframe/media-model": "0.1.0",
-    "@cueframe/plane": "0.1.0",
     "@cueframe/director": "0.1.0",
-    "@cueframe/foundation": "0.1.0",
-    "@cueframe/render-harness": "0.1.0",
     "@cueframe/mcp": "0.1.0",
-    "@cueframe/errors": "0.1.0",
+    "@cueframe/nle-export": "0.1.0",
     "@cueframe/perception": "0.1.0",
+    "@cueframe/plane": "0.1.0",
+    "@cueframe/media-model": "0.1.0",
+    "@cueframe/render-harness": "0.1.0",
     "@cueframe/primitives": "0.1.0",
-    "@cueframe/nle-export": "0.1.0"
+    "@cueframe/foundation": "0.1.0"
   },
   "peerDependencies": {
     "gsap": "3.13.0",

package/dist/_members/component-runtime/livePreviewProxy.d.ts

@@ -1,7 +0,0 @@
-export interface LivePreviewProxy {
-    url: string;
-    close(): Promise<void>;
-}
-/** Serve the authored player with a network-denying CSP on a fresh loopback origin. */
-export declare function startLivePreviewProxy(upstream: string, assetOrigins: ReadonlySet<string>): Promise<LivePreviewProxy>;
-//# sourceMappingURL=livePreviewProxy.d.ts.map

package/dist/_members/component-runtime/livePreviewProxy.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"livePreviewProxy.d.ts","sourceRoot":"","sources":["../src/livePreviewProxy.ts"],"names":[],"mappings":"AAKA,MAAM,WAAW,gBAAgB;IAC/B,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxB;AAmBD,uFAAuF;AACvF,wBAAsB,qBAAqB,CACzC,QAAQ,EAAE,MAAM,EAChB,YAAY,EAAE,WAAW,CAAC,MAAM,CAAC,GAChC,OAAO,CAAC,gBAAgB,CAAC,CA8E3B"}