@cueframe/kernel 0.2.58 → 0.2.59-rc.1

package/dist/chunk-EQH37KNZ.js

@@ -0,0 +1,224 @@
+// ../composition/src/validators/cardHtml.ts
+import parseCss from "css-tree/parser";
+import walkCss from "css-tree/walker";
+import { parseFragment } from "parse5";
+import { z } from "zod";
+function isFragmentReference(value) {
+  return value.trim().startsWith("#");
+}
+function cssUrlPayloads(value) {
+  return [...value.matchAll(/url\(\s*(['"]?)(.*?)\1\s*\)/gi)].map((m) => m[2] ?? "");
+}
+function hasNonFragmentCssUrl(value) {
+  return cssUrlPayloads(value).some((payload) => !isFragmentReference(payload));
+}
+var HTML_ELEMENTS = [
+  "abbr",
+  "address",
+  "article",
+  "aside",
+  "b",
+  "bdi",
+  "bdo",
+  "blockquote",
+  "br",
+  "button",
+  "caption",
+  "cite",
+  "code",
+  "col",
+  "colgroup",
+  "data",
+  "dd",
+  "del",
+  "dfn",
+  "div",
+  "dl",
+  "dt",
+  "em",
+  "figcaption",
+  "figure",
+  "footer",
+  "h1",
+  "h2",
+  "h3",
+  "h4",
+  "h5",
+  "h6",
+  "header",
+  "hgroup",
+  "hr",
+  "i",
+  "ins",
+  "kbd",
+  "label",
+  "li",
+  "main",
+  "mark",
+  "meter",
+  "nav",
+  "ol",
+  "p",
+  "pre",
+  "progress",
+  "q",
+  "rp",
+  "rt",
+  "ruby",
+  "s",
+  "samp",
+  "section",
+  "small",
+  "span",
+  "strong",
+  "style",
+  "sub",
+  "sup",
+  "table",
+  "tbody",
+  "td",
+  "tfoot",
+  "th",
+  "thead",
+  "time",
+  "tr",
+  "u",
+  "ul",
+  "var",
+  "wbr"
+];
+var SVG_ELEMENTS = [
+  "svg",
+  "g",
+  "defs",
+  "symbol",
+  "use",
+  "title",
+  "desc",
+  "path",
+  "rect",
+  "circle",
+  "ellipse",
+  "line",
+  "polyline",
+  "polygon",
+  "text",
+  "tspan",
+  "textpath",
+  "lineargradient",
+  "radialgradient",
+  "stop",
+  "clippath",
+  "mask",
+  "pattern",
+  "marker",
+  "filter",
+  "feblend",
+  "fecolormatrix",
+  "fecomponenttransfer",
+  "fecomposite",
+  "feconvolvematrix",
+  "fediffuselighting",
+  "fedisplacementmap",
+  "fedistantlight",
+  "fedropshadow",
+  "feflood",
+  "fefunca",
+  "fefuncb",
+  "fefuncg",
+  "fefuncr",
+  "fegaussianblur",
+  "femerge",
+  "femergenode",
+  "femorphology",
+  "feoffset",
+  "fepointlight",
+  "fespecularlighting",
+  "fespotlight",
+  "fetile",
+  "feturbulence"
+];
+var ALLOWED_ELEMENTS = /* @__PURE__ */ new Set([...HTML_ELEMENTS, ...SVG_ELEMENTS]);
+var URL_ATTRIBUTES = /* @__PURE__ */ new Set(["action", "data", "formaction", "href", "poster", "src", "srcset"]);
+var CSS_VALUE_ATTRIBUTES = /* @__PURE__ */ new Set([
+  "clip-path",
+  "cursor",
+  "fill",
+  "filter",
+  "marker",
+  "marker-end",
+  "marker-mid",
+  "marker-start",
+  "mask",
+  "stroke"
+]);
+function cssProblem(css, context) {
+  let ast;
+  try {
+    ast = parseCss(css, { context });
+  } catch (cause) {
+    return `contains invalid CSS: ${String(cause)}`;
+  }
+  let problem = null;
+  walkCss(ast, (node) => {
+    if (problem) return;
+    if (node.type === "Url" && !isFragmentReference(node.value)) {
+      problem = "contains a CSS url() asset reference";
+    } else if (node.type === "Atrule" && ["import", "font-face"].includes(node.name.toLowerCase())) {
+      problem = `contains a forbidden CSS @${node.name} rule`;
+    }
+  });
+  return problem;
+}
+function nodeProblem(node) {
+  if (node.nodeName === "#comment" || node.nodeName === "#text") return null;
+  if ("tagName" in node) {
+    const tag = node.tagName.toLowerCase();
+    if (!ALLOWED_ELEMENTS.has(tag)) return `contains <${node.tagName}>, which a card may not use`;
+    for (const attr of node.attrs) {
+      const name = attr.name.toLowerCase();
+      if (name.startsWith("on")) return `contains the event handler '${attr.name}'`;
+      if (URL_ATTRIBUTES.has(name) && !isFragmentReference(attr.value)) {
+        return `contains a ${attr.name} reference outside the card`;
+      }
+      if (name === "style") {
+        const problem = cssProblem(attr.value, "declarationList");
+        if (problem) return problem;
+      }
+      if (CSS_VALUE_ATTRIBUTES.has(name) && hasNonFragmentCssUrl(attr.value)) {
+        return `contains a ${attr.name} url() reference outside the card`;
+      }
+    }
+    if (tag === "style") {
+      const css = node.childNodes.filter((child) => child.nodeName === "#text").map((child) => child.value).join("");
+      const problem = cssProblem(css, "stylesheet");
+      if (problem) return problem;
+    }
+  }
+  if ("childNodes" in node) {
+    for (const child of node.childNodes) {
+      const problem = nodeProblem(child);
+      if (problem) return problem;
+    }
+  }
+  return null;
+}
+function cardHtmlProblem(html) {
+  for (const node of parseFragment(html).childNodes) {
+    const problem = nodeProblem(node);
+    if (problem) return problem;
+  }
+  return null;
+}
+var CardHtml = z.string().min(1).superRefine((html, ctx) => {
+  const problem = cardHtmlProblem(html);
+  if (problem) ctx.addIssue({ code: "custom", message: `Card HTML ${problem}.` });
+});
+
+export {
+  isFragmentReference,
+  cssUrlPayloads,
+  hasNonFragmentCssUrl,
+  cardHtmlProblem,
+  CardHtml
+};

package/dist/{chunk-EXY4JJPH.js → chunk-F6PLDBAK.js}

@@ -3,7 +3,7 @@ import {
   componentBundleIdentity,
   componentRenderIdentity,
   sourceVersionIdentity
-} from "./chunk-DAARYRNT.js";
+} from "./chunk-FKSXKS35.js";
 
 // ../execution/component-runtime/src/identity.ts
 import { createHash } from "crypto";
@@ -22,20 +22,11 @@ function componentRenderKey(request) {
 function componentArtifactId(input) {
   return sha256Hex(componentArtifactIdentity(input));
 }
-function bundleIdentityFields(bundle) {
-  return {
-    bundleId: bundle.bundleId,
-    sourceVersionId: bundle.sourceVersionId,
-    runtimeDigest: bundle.runtimeDigest,
-    dependencyLockDigest: bundle.dependencyLockDigest
-  };
-}
 
 export {
   sha256Hex,
   sourceVersionId,
   componentBundleId,
   componentRenderKey,
-  componentArtifactId,
-  bundleIdentityFields
+  componentArtifactId
 };

package/dist/{chunk-DAARYRNT.js → chunk-FKSXKS35.js}

@@ -32,21 +32,21 @@ function canonicalValue(value, seen) {
     seen.delete(value);
   }
 }
-function canonicalJson(value) {
+function canonicalIdentityJson(value) {
   return JSON.stringify(canonicalValue(value, /* @__PURE__ */ new Set()));
 }
 function sourceVersionIdentity(source) {
-  return canonicalJson(source);
+  return canonicalIdentityJson(source);
 }
 function componentBundleIdentity(input) {
-  return canonicalJson({ domain: "cueframe.component.bundle.v2", ...input });
+  return canonicalIdentityJson({ domain: "cueframe.component.bundle.v2", ...input });
 }
 function componentRenderIdentity(request) {
-  return canonicalJson({ domain: "cueframe.component.render.v2", request });
+  return canonicalIdentityJson({ domain: "cueframe.component.render.v2", request });
 }
 function componentArtifactIdentity(input) {
   const { host: _host, ...identity } = input.receipt;
-  return canonicalJson({
+  return canonicalIdentityJson({
     domain: "cueframe.component.artifact.v2",
     outputSha256: input.outputSha256,
     receipt: identity
@@ -54,7 +54,7 @@ function componentArtifactIdentity(input) {
 }
 
 export {
-  canonicalJson,
+  canonicalIdentityJson,
   sourceVersionIdentity,
   componentBundleIdentity,
   componentRenderIdentity,

package/dist/{chunk-KBDUEU4W.js → chunk-FZB7UX44.js}

@@ -1,6 +1,6 @@
 import {
   __export
-} from "./chunk-2ESYSVXG.js";
+} from "./chunk-U67V476Y.js";
 
 // ../sdk/src/client.ts
 var ApiError = class extends Error {

package/dist/chunk-H2ZZXISB.js

@@ -0,0 +1,24 @@
+import {
+  cardHtmlProblem
+} from "./chunk-EQH37KNZ.js";
+import {
+  CueframeError
+} from "./chunk-XQGQ5EFS.js";
+
+// ../execution/render-harness/src/cardAssetAdmission.ts
+function assertCardHtmlAssetFree(input) {
+  for (const overlay of input.overlays ?? []) {
+    if (overlay.template !== "card") continue;
+    const html = overlay.params?.html;
+    if (typeof html !== "string") continue;
+    const problem = cardHtmlProblem(html);
+    if (problem) {
+      const locator = `overlay '${overlay.id}'`;
+      throw new CueframeError("card_external_asset_forbidden", `Card ${locator} ${problem}`, void 0, { card: locator });
+    }
+  }
+}
+
+export {
+  assertCardHtmlAssetFree
+};

package/dist/{chunk-WSMCZRJ2.js → chunk-I2HNC4PQ.js}

@@ -1,7 +1,7 @@
 import {
   bodySchemaFor,
   opById
-} from "./chunk-KBDUEU4W.js";
+} from "./chunk-FZB7UX44.js";
 
 // ../mcp/src/generated/sceneContract.ts
 function deepFreeze(value) {

package/dist/{chunk-NVXSKKRN.js → chunk-IUJABAG2.js}

@@ -3,6 +3,10 @@ import {
   buildEasedZooms,
   buildPannedCenters
 } from "./chunk-QH3YI3ND.js";
+import {
+  flattenCompoundClips,
+  hasCompoundClips
+} from "./chunk-ZPJQ3TQL.js";
 import {
   DOMINANCE_WEIGHTS,
   ENTER_SEC,
@@ -20,26 +24,22 @@ import {
   scoreAndRank,
   segmentShots,
   stabilizeSelectionHysteresis
-} from "./chunk-MNO6AO2J.js";
-import {
-  flattenCompoundClips,
-  hasCompoundClips
-} from "./chunk-IMIUHG2E.js";
+} from "./chunk-3HLDIIWA.js";
 import {
   compositionHasVo,
   roleDefaultGainDb
-} from "./chunk-VZ7TYX6Z.js";
-import {
-  resolveBrandRef
-} from "./chunk-DKBFAQCW.js";
+} from "./chunk-P3EFZDM5.js";
 import {
   SHOT_SCALE_TARGET,
   shotScaleZoom
 } from "./chunk-WREYUH2E.js";
+import {
+  resolveBrandRef
+} from "./chunk-DKBFAQCW.js";
 import {
   CueframeError,
   encodeError
-} from "./chunk-AK5QBHOB.js";
+} from "./chunk-XQGQ5EFS.js";
 import {
   SCENE_CAPTURE_IDENTITY_FIELDS_V1,
   SCENE_PRESET_TRIANGLES,
@@ -2212,6 +2212,8 @@ async function assemblePreparedRenderInput(composition, resolved, dependencies)
 }
 
 // ../execution/core/src/render/exportSettings.ts
+var EXPORT_QUALITIES = ["maximum", "social", "web", "potato", "source"];
+var EXPORT_RESOLUTIONS = ["source", "1080p", "1440p", "4k"];
 var DEFAULT_FPS = 30;
 var DEFAULT_WIDTH = 1920;
 var DEFAULT_HEIGHT = 1080;
@@ -3222,6 +3224,8 @@ export {
   compositionToRenderInput,
   assembleRenderInput,
   assemblePreparedRenderInput,
+  EXPORT_QUALITIES,
+  EXPORT_RESOLUTIONS,
   DEFAULT_FPS,
   DEFAULT_WIDTH,
   DEFAULT_HEIGHT,

package/dist/{chunk-7NIOFHMH.js → chunk-IVFMOHAC.js}

@@ -6,7 +6,7 @@ import {
 import {
   CueframeError,
   encodeError
-} from "./chunk-AK5QBHOB.js";
+} from "./chunk-XQGQ5EFS.js";
 
 // ../composition/src/projection/cardTokens.ts
 var CARD_MOTION_VAR_NAMES = [
@@ -206,13 +206,6 @@ function primaryClipForOverlay(composition, overlayId) {
   }
   return null;
 }
-async function behindReadinessForOverlay(input) {
-  const target = primaryClipForOverlay(input.composition, input.overlayId);
-  return behindReadinessForTarget(
-    target,
-    target ? input.mattesByMediaId[target.mediaId] : void 0
-  );
-}
 async function behindReadinessForTarget(target, mattes) {
   if (!target) return { state: "no-clip" };
   const key = await matteIntentKey({ ...target.window, subjectClass: "person" });
@@ -605,7 +598,6 @@ export {
   isCurrentMatteBakeVersion,
   matteIntentKey,
   primaryClipForOverlay,
-  behindReadinessForOverlay,
   behindReadinessForTarget,
   clipOverlapsBehind,
   matteWindowsByMediaId,

package/dist/{chunk-UKDBU7HM.js → chunk-JNBNDHEF.js}

@@ -4,7 +4,7 @@ import {
 } from "./chunk-QGAWDLYX.js";
 import {
   DashboardPopulate
-} from "./chunk-S5H6GH6M.js";
+} from "./chunk-3Z7CN54H.js";
 import {
   useFrameScale
 } from "./chunk-QAGGJHAF.js";
@@ -35,7 +35,7 @@ import {
   TEXT_MUTED,
   VIOLET,
   WARNING
-} from "./chunk-W2245F6G.js";
+} from "./chunk-WTQRLFR2.js";
 import {
   CAMERA_PRESETS,
   DEFAULT_CAMERA,
@@ -43,7 +43,7 @@ import {
   makeDefaultScreenTexture,
   resolveCamera,
   useImageTexture
-} from "./chunk-FHMTAZD4.js";
+} from "./chunk-RWJHZCOR.js";
 import {
   DEVICE_GLASS_OPACITY_ENCODED,
   DeviceMesh,

package/dist/{chunk-JWMWVP64.js → chunk-KC4LNZL5.js}

@@ -1,7 +1,10 @@
 import {
   ComponentHostAttestationV2,
   ComponentRuntimeError
-} from "./chunk-EC6VFQE6.js";
+} from "./chunk-BZVOCVQV.js";
+import {
+  canonicalJson
+} from "./chunk-XHMKPTHV.js";
 import {
   STUDIO_SHADOW_MAP_BUDGET
 } from "./chunk-CL5Y6V6K.js";
@@ -46,14 +49,6 @@ async function readGpuAttestation(browser) {
     }).filter(([, value]) => value !== void 0 && value !== null && value !== "")
   );
   const hasDeviceOrDriverIdentity = Array.isArray(gpu?.devices) && gpu.devices.length > 0 || typeof aux.driverVendor === "string" && aux.driverVendor.length > 0 || typeof aux.driverVersion === "string" && aux.driverVersion.length > 0;
-  const canonicalJson = (value) => {
-    if (Array.isArray(value)) return `[${value.map(canonicalJson).join(",")}]`;
-    if (value !== null && typeof value === "object") {
-      const object = value;
-      return `{${Object.keys(object).sort().map((key) => `${JSON.stringify(key)}:${canonicalJson(object[key])}`).join(",")}}`;
-    }
-    return JSON.stringify(value);
-  };
   return {
     renderer: typeof aux.glRenderer === "string" ? aux.glRenderer : "",
     featureStatus: gpu?.featureStatus ?? {},

package/dist/{chunk-GCQ7Z7S7.js → chunk-KKATUGRU.js}

@@ -1,11 +1,6 @@
-// ../authoring/src/models/defaultModels.ts
-var DEFAULT_MODEL_IDS = {
-  anthropic: "claude-opus-5",
-  openai: "gpt-4.1",
-  ollama: "llama3.1",
-  /** Cheaper model used for fast-mode / low-effort turns. */
-  fast: "claude-haiku-4-5"
-};
+import {
+  DEFAULT_MODEL_IDS
+} from "./chunk-CIOUDOGN.js";
 
 // ../authoring/src/models/modelFactory.ts
 import { createAnthropic } from "@ai-sdk/anthropic";
@@ -106,7 +101,6 @@ function buildFastModel(settings, langfuse) {
 }
 
 export {
-  DEFAULT_MODEL_IDS,
   withRequestTimeout,
   makeLangfuseFetch,
   buildModel,

package/dist/{chunk-Q5P5UFOP.js → chunk-KLQ53NX3.js}

@@ -60,10 +60,22 @@ var PREVIEW_FRAME_CASES = [
 function isKnownRed(c, lane) {
   return c.knownRed?.includes(lane) ?? false;
 }
+function meetsExpectation(c, answer) {
+  return answer.status === c.expect.status && (c.expect.code === void 0 || answer.code === c.expect.code);
+}
+function conformanceVerdict(c, lane, answer) {
+  const meets = meetsExpectation(c, answer);
+  if (isKnownRed(c, lane)) {
+    return meets ? { ok: false, reason: `"${c.name}" conforms on ${lane} now: remove "${lane}" from its knownRed.` } : { ok: true };
+  }
+  return meets ? { ok: true } : { ok: false, reason: `${c.name}: ${lane} answered ${answer.status} ${answer.code ?? ""}, expected ${c.expect.status} ${c.expect.code ?? ""}. ${c.why}` };
+}
 
 export {
   CONFORMANCE_COMPOSITION,
   CONFORMANCE_DURATION_SEC,
   PREVIEW_FRAME_CASES,
-  isKnownRed
+  isKnownRed,
+  meetsExpectation,
+  conformanceVerdict
 };

package/dist/{chunk-UMXES6ED.js → chunk-LVMWPFV4.js}

@@ -2,7 +2,7 @@ import {
   selectAllClips,
   selectAllOverlays,
   selectSceneMarkers
-} from "./chunk-LBJ5LI5V.js";
+} from "./chunk-2K2GBFLU.js";
 
 // ../authoring/src/context/transcript.ts
 var MAX_TRANSCRIPT_CHARS = 6e4;

package/dist/{chunk-TKFLSGAS.js → chunk-MMJYII7Y.js}

@@ -1,9 +1,9 @@
-import {
-  EASING_BY_INTENT
-} from "./chunk-MFHXCHRI.js";
 import {
   FitText
 } from "./chunk-XHGZ2E77.js";
+import {
+  EASING_BY_INTENT
+} from "./chunk-MFHXCHRI.js";
 import {
   ACCENT,
   ACCENT_STRONG,
@@ -17,7 +17,7 @@ import {
   TEXT_MUTED,
   VIOLET,
   WARNING
-} from "./chunk-W2245F6G.js";
+} from "./chunk-WTQRLFR2.js";
 import {
   CAMERA_PRESETS,
   DEFAULT_CAMERA,
@@ -26,7 +26,7 @@ import {
   perspectiveFor,
   resolveCamera,
   useStage
-} from "./chunk-FHMTAZD4.js";
+} from "./chunk-RWJHZCOR.js";
 
 // ../execution/primitives/src/effects/blur/index.tsx
 import React2 from "react";

package/dist/{chunk-REST55RC.js → chunk-NECN7TT4.js}

@@ -1,12 +1,12 @@
 import {
   BrandKitBodySchema
-} from "./chunk-TR53N6HB.js";
+} from "./chunk-CEO47DIE.js";
 import {
   ComponentSourceV2
-} from "./chunk-EC6VFQE6.js";
+} from "./chunk-BZVOCVQV.js";
 import {
   Composition
-} from "./chunk-UFD4EZHM.js";
+} from "./chunk-AFUITAH6.js";
 import {
   SceneShotSpecV2,
   sceneShotImageSlots,
@@ -142,7 +142,8 @@ var TemplateDocumentSchema = z.object({
     poster: z.string().url().optional(),
     prompt: z.string().optional(),
     details: z.array(z.string()).optional(),
-    transcriptExcerpt: z.string().nullable().optional()
+    transcriptExcerpt: z.string().nullable().optional(),
+    loop: z.boolean().optional()
   }).strict().optional(),
   presets: z.record(z.string().regex(PRESET_NAME, "preset names are kebab-case"), TemplatePresetSchema).optional()
 }).strict().superRefine((doc, ctx) => {