@cueframe/kernel 0.2.58 → 0.2.59-rc.0

package/dist/primitives.js

@@ -1,44 +1,44 @@
-import {
-  catalog as catalog3
-} from "./chunk-FVDFPJHT.js";
-import {
-  catalog as catalog6
-} from "./chunk-VLJOIUHL.js";
-import {
-  catalog as catalog2
-} from "./chunk-TKFLSGAS.js";
 import {
   catalog as catalog8
-} from "./chunk-RL5SO653.js";
+} from "./chunk-RQRPSSRT.js";
 import {
   catalog as catalog4
-} from "./chunk-PTVTWQ4T.js";
+} from "./chunk-3JEUNKDK.js";
 import {
   catalog as catalog7
-} from "./chunk-UKDBU7HM.js";
-import "./chunk-QGAWDLYX.js";
-import "./chunk-S5H6GH6M.js";
-import "./chunk-QAGGJHAF.js";
-import "./chunk-MFHXCHRI.js";
+} from "./chunk-JNBNDHEF.js";
 import {
   catalog
-} from "./chunk-RBWS5XHE.js";
+} from "./chunk-CAF7BRNE.js";
 import "./chunk-DLF4WVSE.js";
 import "./chunk-U4V4FZGE.js";
+import {
+  catalog as catalog3
+} from "./chunk-46WBCUPE.js";
+import "./chunk-QGAWDLYX.js";
+import {
+  catalog as catalog6
+} from "./chunk-7PSQUTL5.js";
+import "./chunk-3Z7CN54H.js";
+import "./chunk-QAGGJHAF.js";
 import "./chunk-LT4PWSR2.js";
-import "./chunk-FWSJLHSV.js";
-import "./chunk-ZFEXATWN.js";
+import "./chunk-R642352J.js";
 import {
   catalog as catalog5
-} from "./chunk-RAXHCRVV.js";
+} from "./chunk-2PAP5LO5.js";
+import "./chunk-ZFEXATWN.js";
+import {
+  catalog as catalog2
+} from "./chunk-25JH5QZA.js";
+import "./chunk-MFHXCHRI.js";
 import "./chunk-XHGZ2E77.js";
-import "./chunk-W2245F6G.js";
-import "./chunk-FHMTAZD4.js";
+import "./chunk-WTQRLFR2.js";
+import "./chunk-RWJHZCOR.js";
 import "./chunk-XV2K3AQT.js";
 import "./chunk-CL5Y6V6K.js";
 import "./chunk-2L7PYYJK.js";
 import "./chunk-OOL7ZUG7.js";
-import "./chunk-2ESYSVXG.js";
+import "./chunk-U67V476Y.js";
 
 // ../execution/primitives/src/index.ts
 var allPrimitives = [
@@ -51,20 +51,6 @@ var allPrimitives = [
   ...catalog7,
   ...catalog8
 ];
-var catalogs = {
-  text: catalog,
-  effects: catalog2,
-  transitions: catalog3,
-  layouts: catalog4,
-  backgrounds: catalog5,
-  "ui-blocks": catalog6,
-  scenes: catalog7
-};
-function resolvePrimitive(id) {
-  return allPrimitives.find((p) => p.id === id);
-}
 export {
-  allPrimitives,
-  catalogs,
-  resolvePrimitive
+  allPrimitives
 };

package/dist/render-harness/cardAssetAdmission.js

@@ -1,9 +1,9 @@
 import {
   assertCardHtmlAssetFree
-} from "../chunk-MFMR3LHO.js";
-import "../chunk-OSMXQV5V.js";
-import "../chunk-AK5QBHOB.js";
-import "../chunk-2ESYSVXG.js";
+} from "../chunk-H2ZZXISB.js";
+import "../chunk-EQH37KNZ.js";
+import "../chunk-XQGQ5EFS.js";
+import "../chunk-U67V476Y.js";
 export {
   assertCardHtmlAssetFree
 };

package/dist/render-harness/cardFonts.js

@@ -2,10 +2,10 @@ import {
   assertCardFontsAdmitted,
   cardBundledFamilies,
   cardFontFamilyStacks
-} from "../chunk-GQ6XGAFB.js";
-import "../chunk-AK5QBHOB.js";
+} from "../chunk-DCKADD5B.js";
+import "../chunk-XQGQ5EFS.js";
 import "../chunk-OOL7ZUG7.js";
-import "../chunk-2ESYSVXG.js";
+import "../chunk-U67V476Y.js";
 export {
   assertCardFontsAdmitted,
   cardBundledFamilies,

package/dist/render-harness/renderInputAssets.js

@@ -4,11 +4,11 @@ import {
   assetUrlKey,
   isRemoteUrl,
   renderInputAssets
-} from "../chunk-5T655LYZ.js";
-import "../chunk-OSMXQV5V.js";
-import "../chunk-4NIJWK45.js";
+} from "../chunk-NY6EI5YW.js";
+import "../chunk-EISHFHU5.js";
+import "../chunk-EQH37KNZ.js";
 import "../chunk-7PA7FGLD.js";
-import "../chunk-2ESYSVXG.js";
+import "../chunk-U67V476Y.js";
 export {
   assertNoRemoteRefs,
   assetSlots,

package/dist/render-harness.js

@@ -1,19 +1,17 @@
 import {
   assertCardHtmlAssetFree
-} from "./chunk-MFMR3LHO.js";
+} from "./chunk-H2ZZXISB.js";
 import {
   assertCardFontsAdmitted
-} from "./chunk-GQ6XGAFB.js";
+} from "./chunk-DCKADD5B.js";
 import {
   assertNoRemoteRefs,
   assetSlots,
   assetUrlKey,
   isRemoteUrl,
   renderInputAssets
-} from "./chunk-5T655LYZ.js";
-import "./chunk-OSMXQV5V.js";
-import "./chunk-BEFSJMFF.js";
-import "./chunk-BVA3537Z.js";
+} from "./chunk-NY6EI5YW.js";
+import "./chunk-P6RVYHLT.js";
 import {
   COMPONENT_STILL_RUNTIME_IDENTITY,
   componentStillDependencyIdentity,
@@ -23,43 +21,50 @@ import {
   readMaterializedComponentSource,
   resolveRenderEntryRoot,
   verifyLocalStagedBrowser
-} from "./chunk-HGCYZMII.js";
+} from "./chunk-AK6QPX7A.js";
 import "./chunk-WB2VFDQZ.js";
+import "./chunk-6HPEMDQW.js";
+import {
+  componentBrowserBackend
+} from "./chunk-KC4LNZL5.js";
 import {
   sourceVersionId
-} from "./chunk-EXY4JJPH.js";
-import "./chunk-DAARYRNT.js";
-import "./chunk-K66NLMGX.js";
-import "./chunk-WL2MLKWU.js";
+} from "./chunk-F6PLDBAK.js";
+import "./chunk-FKSXKS35.js";
+import "./chunk-UGWJC4GA.js";
+import "./chunk-BZVOCVQV.js";
+import "./chunk-BVA3537Z.js";
 import {
-  componentBrowserBackend
-} from "./chunk-JWMWVP64.js";
-import "./chunk-EC6VFQE6.js";
+  canonicalJson
+} from "./chunk-XHMKPTHV.js";
 import {
   generatedStudioPreparationFactsV1,
   scenePresetBuilderDescriptorV1
 } from "./chunk-XV2K3AQT.js";
-import "./chunk-4NIJWK45.js";
+import "./chunk-EISHFHU5.js";
 import {
   SCENE_SHOT_PREPARATION_STAGE,
   createSceneBuilderDescriptorRegistryV1,
   parseSceneComponentCaptureIntentV1,
   prepareSceneShotRenderInput,
   readSceneShotManifest
-} from "./chunk-NVXSKKRN.js";
+} from "./chunk-IUJABAG2.js";
 import "./chunk-QH3YI3ND.js";
-import "./chunk-MNO6AO2J.js";
-import "./chunk-IMIUHG2E.js";
-import "./chunk-VZ7TYX6Z.js";
+import "./chunk-ZPJQ3TQL.js";
+import "./chunk-3HLDIIWA.js";
+import "./chunk-P3EFZDM5.js";
 import "./chunk-T56BK7NS.js";
-import "./chunk-KYRDKK2D.js";
-import "./chunk-7NIOFHMH.js";
-import "./chunk-DKBFAQCW.js";
+import {
+  cardHtmlProblem
+} from "./chunk-EQH37KNZ.js";
+import "./chunk-Q6CJ6HCU.js";
 import "./chunk-WREYUH2E.js";
+import "./chunk-IVFMOHAC.js";
+import "./chunk-DKBFAQCW.js";
 import "./chunk-ILO4NEZ3.js";
 import {
   CueframeError
-} from "./chunk-AK5QBHOB.js";
+} from "./chunk-XQGQ5EFS.js";
 import "./chunk-7PA7FGLD.js";
 import "./chunk-VG2ND6PX.js";
 import {
@@ -70,21 +75,22 @@ import {
 } from "./chunk-CL5Y6V6K.js";
 import "./chunk-2L7PYYJK.js";
 import "./chunk-OOL7ZUG7.js";
-import "./chunk-2ESYSVXG.js";
+import "./chunk-U67V476Y.js";
 
 // ../execution/render-harness/src/materializeSources.ts
 import { join as join5, basename } from "path";
 import { createHash as createHash4 } from "crypto";
 import { mkdir, copyFile, readFile as readFile3 } from "fs/promises";
-import { createWriteStream, existsSync as existsSync4 } from "fs";
+import { createWriteStream, existsSync as existsSync3 } from "fs";
 import { fileURLToPath as fileURLToPath3 } from "url";
 import { Readable } from "stream";
 import { pipeline } from "stream/promises";
 
 // ../execution/render-harness/src/mediaServer.ts
 import { createServer } from "http";
-import { createReadStream, statSync, existsSync } from "fs";
-import { join, extname } from "path";
+import { createReadStream, realpathSync, statSync } from "fs";
+import { randomBytes } from "crypto";
+import { extname, join, sep } from "path";
 var MIME_TYPES = {
   ".mp4": "video/mp4",
   ".mov": "video/quicktime",
@@ -104,53 +110,68 @@ var MIME_TYPES = {
   ".ttf": "font/ttf",
   ".otf": "font/otf"
 };
-function startMediaServer(directory) {
-  const server = createServer((req, res) => {
-    const filename = decodeURIComponent((req.url ?? "/").slice(1));
-    const filePath = join(directory, filename);
-    if (!existsSync(filePath)) {
-      res.writeHead(404, { "Access-Control-Allow-Origin": "*" });
-      res.end("Not found");
-      return;
-    }
-    if (req.method === "OPTIONS") {
-      res.writeHead(204, {
-        "Access-Control-Allow-Origin": "*",
+function end(response, status, headers = {}) {
+  response.writeHead(status, { "Access-Control-Allow-Origin": "*", ...headers });
+  response.end();
+}
+function parseRange(value, size) {
+  if (!value) return null;
+  const match = /^bytes=(\d*)-(\d*)$/.exec(value);
+  if (!match || match[1] === "" && match[2] === "") return "invalid";
+  const start = match[1] === "" ? Math.max(0, size - Number(match[2])) : Number(match[1]);
+  const last = match[1] === "" || match[2] === "" ? size - 1 : Math.min(Number(match[2]), size - 1);
+  return start <= last && start < size ? [start, last] : "invalid";
+}
+async function startMediaServer(directory) {
+  const root = realpathSync(directory);
+  const token = randomBytes(24).toString("hex");
+  const prefix = `/${token}/`;
+  let expectedHost = "";
+  const server = createServer((request, response) => {
+    if (request.headers.host !== expectedHost) return end(response, 421);
+    if (request.method === "OPTIONS") {
+      return end(response, 204, {
         "Access-Control-Allow-Methods": "GET, HEAD, OPTIONS",
         "Access-Control-Allow-Headers": "Range"
       });
-      res.end();
-      return;
     }
-    const size = statSync(filePath).size;
-    const contentType = MIME_TYPES[extname(filePath).toLowerCase()] ?? "application/octet-stream";
-    const range = req.headers.range;
-    if (range) {
-      const parts = range.replace(/bytes=/, "").split("-");
-      const start = parseInt(parts[0], 10);
-      const end = parts[1] ? parseInt(parts[1], 10) : size - 1;
-      res.writeHead(206, {
-        "Content-Range": `bytes ${start}-${end}/${size}`,
-        "Accept-Ranges": "bytes",
-        "Content-Length": end - start + 1,
-        "Content-Type": contentType,
-        "Access-Control-Allow-Origin": "*"
-      });
-      createReadStream(filePath, { start, end }).pipe(res);
-    } else {
-      res.writeHead(200, {
-        "Content-Length": size,
-        "Content-Type": contentType,
-        "Accept-Ranges": "bytes",
-        "Access-Control-Allow-Origin": "*"
-      });
-      createReadStream(filePath).pipe(res);
+    if (request.method !== "GET" && request.method !== "HEAD") return end(response, 405);
+    const pathname = (request.url ?? "/").split("?")[0];
+    if (!pathname.startsWith(prefix)) return end(response, 404);
+    let filePath;
+    try {
+      filePath = realpathSync(join(root, decodeURIComponent(pathname.slice(prefix.length))));
+    } catch {
+      return end(response, 404);
     }
+    if (!filePath.startsWith(root + sep)) return end(response, 404);
+    const stat = statSync(filePath);
+    if (!stat.isFile()) return end(response, 404);
+    const contentType = MIME_TYPES[extname(filePath).toLowerCase()] ?? "application/octet-stream";
+    if (stat.size === 0) return end(response, 200, { "Content-Type": contentType, "Content-Length": 0 });
+    const range = parseRange(request.headers.range, stat.size);
+    if (range === "invalid") return end(response, 416, { "Content-Range": `bytes */${stat.size}` });
+    const [start, last] = range ?? [0, stat.size - 1];
+    response.writeHead(range ? 206 : 200, {
+      "Access-Control-Allow-Origin": "*",
+      "Accept-Ranges": "bytes",
+      "Content-Type": contentType,
+      "Content-Length": last - start + 1,
+      ...range ? { "Content-Range": `bytes ${start}-${last}/${stat.size}` } : {}
+    });
+    if (request.method === "HEAD") return response.end();
+    const stream = createReadStream(filePath, { start, end: last });
+    stream.once("error", () => response.destroy());
+    stream.pipe(response);
+  });
+  await new Promise((resolve, reject) => {
+    server.once("error", reject);
+    server.listen(0, "127.0.0.1", () => resolve());
   });
-  server.listen(0);
-  const port = server.address().port;
+  const { port } = server.address();
+  expectedHost = `127.0.0.1:${port}`;
   return {
-    baseUrl: `http://localhost:${port}`,
+    baseUrl: `http://127.0.0.1:${port}/${token}`,
     close: () => server.close()
   };
 }
@@ -158,7 +179,7 @@ function startMediaServer(directory) {
 // ../execution/render-harness/src/extractSegments.ts
 import { execFile } from "child_process";
 import { promisify } from "util";
-import { mkdtempSync, existsSync as existsSync2 } from "fs";
+import { mkdtempSync, existsSync } from "fs";
 import { join as join2 } from "path";
 import { tmpdir } from "os";
 import { rm } from "fs/promises";
@@ -183,7 +204,7 @@ async function extractSegments(clips, sourceFiles, opts) {
     }
     const sourcePath = sourceFiles[poolItemId];
     const remote = /^https?:\/\//i.test(sourcePath);
-    if (!remote && !existsSync2(sourcePath)) {
+    if (!remote && !existsSync(sourcePath)) {
       console.warn(`[extractSegments] Source not found: ${sourcePath}`);
       continue;
     }
@@ -233,7 +254,7 @@ async function extractSegments(clips, sourceFiles, opts) {
 }
 
 // ../execution/render-harness/src/resolveAssets.ts
-import { existsSync as existsSync3 } from "fs";
+import { existsSync as existsSync2 } from "fs";
 import { join as join3, extname as extname2 } from "path";
 import { createHash } from "crypto";
 async function resolveAssets(renderInput, tempDir, mediaServerUrl, download, signal) {
@@ -260,7 +281,7 @@ async function resolveAssets(renderInput, tempDir, mediaServerUrl, download, sig
     if (!ext) throw new Error(`Unsupported embedded render asset MIME '${embedded?.[1] ?? "unknown"}'.`);
     const filename = `asset_${hash}${ext}`;
     const localPath2 = join3(tempDir, filename);
-    if (!existsSync3(localPath2)) {
+    if (!existsSync2(localPath2)) {
       try {
         await download(url, localPath2, signal);
       } catch (err) {
@@ -752,13 +773,6 @@ function captureSessionKey(intent) {
     rasterAffectingFlags: intent.rasterAffectingFlags
   });
 }
-function stableJson(value) {
-  if (Array.isArray(value)) return `[${value.map(stableJson).join(",")}]`;
-  if (value !== null && typeof value === "object") {
-    return `{${Object.keys(value).sort().map((key) => `${JSON.stringify(key)}:${stableJson(value[key])}`).join(",")}}`;
-  }
-  return JSON.stringify(value);
-}
 function createMaterializedSceneCaptureProvider(options) {
   const sessions = /* @__PURE__ */ new Map();
   const captures = /* @__PURE__ */ new Map();
@@ -806,7 +820,7 @@ function createMaterializedSceneCaptureProvider(options) {
       const execution = await resolveExecutionFacts(intent, signal);
       if (closed) throw new Error("scene_component_capture_provider_closed");
       for (const field of ["runtimeIdentity", "dependencyIdentity", "requestedGlBackend", "rasterAffectingFlags"]) {
-        if (stableJson(intent[field]) !== stableJson(execution[field])) {
+        if (canonicalJson(intent[field]) !== canonicalJson(execution[field])) {
           throw new Error(`scene_component_execution_fact_mismatch: ${field}`);
         }
       }
@@ -847,7 +861,7 @@ function createMaterializedSceneCaptureProvider(options) {
           if (captureSessionKey(next) !== key) {
             throw new Error("scene_component_capture_session_mismatch");
           }
-          const captureKey = stableJson(next);
+          const captureKey = canonicalJson(next);
           let pending = captures.get(captureKey);
           if (!pending) {
             pending = (async () => {
@@ -911,7 +925,7 @@ function localFilePath(u) {
   if (u.startsWith("file://")) p = fileURLToPath3(u);
   else if (u.startsWith("/")) p = u;
   else return null;
-  return existsSync4(p) ? p : null;
+  return existsSync3(p) ? p : null;
 }
 function hasLocalFileRefs(input) {
   for (const slot of assetSlots(input)) {
@@ -958,7 +972,7 @@ async function materializeSources(renderInput, workDir, log = () => {
     } };
   }
   await mkdir(workDir, { recursive: true });
-  const server = startMediaServer(workDir);
+  const server = await startMediaServer(workDir);
   const fps = Number(renderInput.fps) || 30;
   const cleanups = [async () => {
     server.close();
@@ -1184,6 +1198,10 @@ async function renderCardStill(opts) {
   const browserExecutable = (await verifyLocalStagedBrowser(renderEntryRoot)).path;
   mkdirSync(opts.outDir, { recursive: true });
   assertCardFontsAdmitted(opts.html, "still");
+  const problem = cardHtmlProblem(opts.html);
+  if (problem) {
+    throw new CueframeError("card_external_asset_forbidden", `Card still ${problem}`, void 0, { card: "still" });
+  }
   writeFileSync(
     join6(opts.outDir, CARD_ROOT_FILENAME),
     generateCardRootSource({ width, height, fps, renderEntryRoot })

package/dist/{src-ZP6727AA.js → src-XI5MULKD.js}

@@ -4,13 +4,13 @@ import {
   GRID_DEFAULT_MAX_MARKERS,
   GRID_HARD_MAX_MARKERS,
   GridError,
+  NON_DOCUMENT_METHODS,
   applyCaptionOpToStore,
   applyOp,
   applyOpToStore,
   captionSourceMediaIds,
   collectAlphaLayerClips,
   collectRawComponentClips,
-  collectUnbakedComponentClips,
   createRecordingStore,
   invertOp,
   materializeCaptionsFromComposition,
@@ -20,44 +20,45 @@ import {
   replaceRegion,
   resolveClipKind,
   wrapWithOpRecorder
-} from "./chunk-UXRSEMJJ.js";
-import "./chunk-NVXSKKRN.js";
+} from "./chunk-ONSGT6UJ.js";
+import "./chunk-IUJABAG2.js";
 import "./chunk-QH3YI3ND.js";
-import "./chunk-MNO6AO2J.js";
-import "./chunk-IMIUHG2E.js";
-import "./chunk-VZ7TYX6Z.js";
+import "./chunk-ZPJQ3TQL.js";
+import "./chunk-3HLDIIWA.js";
+import "./chunk-P3EFZDM5.js";
 import "./chunk-T56BK7NS.js";
-import "./chunk-LBJ5LI5V.js";
-import "./chunk-IG3YAOUZ.js";
-import "./chunk-PWWZTY3G.js";
-import "./chunk-UFD4EZHM.js";
+import "./chunk-2K2GBFLU.js";
+import "./chunk-ZCEYEIRB.js";
+import "./chunk-6KZCXAYL.js";
+import "./chunk-AFUITAH6.js";
 import "./chunk-WPZKOVYF.js";
 import "./chunk-B7J5UUUV.js";
-import "./chunk-KYRDKK2D.js";
-import "./chunk-7NIOFHMH.js";
-import "./chunk-DKBFAQCW.js";
+import "./chunk-EQH37KNZ.js";
+import "./chunk-Q6CJ6HCU.js";
 import "./chunk-WREYUH2E.js";
+import "./chunk-IVFMOHAC.js";
+import "./chunk-DKBFAQCW.js";
 import "./chunk-ILO4NEZ3.js";
-import "./chunk-AK5QBHOB.js";
+import "./chunk-XQGQ5EFS.js";
 import "./chunk-7PA7FGLD.js";
 import "./chunk-VG2ND6PX.js";
 import "./chunk-CL5Y6V6K.js";
 import "./chunk-2L7PYYJK.js";
 import "./chunk-OOL7ZUG7.js";
-import "./chunk-2ESYSVXG.js";
+import "./chunk-U67V476Y.js";
 export {
   CaptionMaterializationError,
   CompositionOp,
   GRID_DEFAULT_MAX_MARKERS,
   GRID_HARD_MAX_MARKERS,
   GridError,
+  NON_DOCUMENT_METHODS,
   applyCaptionOpToStore,
   applyOp,
   applyOpToStore,
   captionSourceMediaIds,
   collectAlphaLayerClips,
   collectRawComponentClips,
-  collectUnbakedComponentClips,
   createRecordingStore,
   invertOp,
   materializeCaptionsFromComposition,