@editframe/dev-server 0.51.0

package/LICENSE-FULL.md

@@ -0,0 +1,148 @@
+# Editframe SDK License Agreement
+
+**Effective Date:** January 12, 2026 **Version:** 2.0
+
+This License Agreement ("License") governs your use of the Editframe SDK. By downloading, accessing, or using the SDK, you agree to these terms.
+
+---
+
+## 1. Definitions
+
+**"Total Employees"** — All full-time employees, part-time employees, and contractor equivalents across your Organization and all affiliated entities under common control. Contractors are counted proportionally by time worked.
+
+**"Organization"** — You, your company, and all affiliates, subsidiaries, or related entities under common control.
+
+**"Client-Side SDK"** — The source-available browser-based video rendering components, including the custom video tag for local file playback.
+
+**"Server-Side Rendering"** — Hosted cloud service for parallel rendering at scale, supporting simultaneous rendering of large volumes of videos including longer and more complex ones.
+
+**"Premium Player"** — Cloud-based CDN streaming service with API-authenticated streaming capabilities, optimized for editing workflows.
+
+**"Cloud Services"** — Server-Side Rendering and Premium Player collectively.
+
+**"Commercial Use"** — Any use in connection with business operations, revenue-generating activities, or professional services, including internal tools, production environments, and client deliverables.
+
+**"Evaluation Use"** — Good-faith testing and proof-of-concept development, limited to 30 days. Excludes production deployment and ongoing business use.
+
+---
+
+## 2. License Grant
+
+### 2.1 Free Tier (≤3 Employees)
+
+A limited, non-exclusive, non-transferable, revocable license to use the Client-Side SDK.
+
+**Eligible:**
+
+- Organizations with ≤3 total employees (Commercial Use permitted)  
+- Evaluation Use (any size, 30 days, non-production)  
+- Registered non-profits (any size)  
+- Accredited educational institutions  
+- Personal non-commercial projects
+
+**Permitted:**
+
+- Install and use the Client-Side SDK  
+- Use the custom video tag for local file playback (no API key required)  
+- Create and distribute video outputs for personal or Commercial Use
+
+**Not included:** Cloud Services. Cloud Services require a Cloud Tier subscription regardless of company size.
+
+### 2.2 Team Tier (4–10 Employees)
+
+Includes all Free Tier rights. Full Client-Side SDK use for any business purpose including production. Does not include Cloud Services. See [editframe.com/pricing](https://editframe.com/pricing) for pricing.
+
+### 2.3 Cloud Tier (11–20 Employees, or Any Size Requiring Cloud)
+
+Required for organizations with 11–20 employees, or any organization using Cloud Services.
+
+Includes all Team Tier rights, plus Server-Side Rendering and Premium Player via API. Usage-based billing applies in addition to base subscription. See [editframe.com/pricing](https://editframe.com/pricing) for pricing.
+
+### 2.4 Enterprise (21+ Employees)
+
+Contact [hello@editframe.com](mailto:hello@editframe.com). Includes all Cloud Tier features plus priority support and custom SLAs.
+
+---
+
+## 3. Restrictions
+
+### 3.1 Prohibited
+
+- Do not offer the Client-Side SDK or CLI itself as a managed rendering API or infrastructure product to third parties  
+- Do not fork, redistribute, or sublicense the Client-Side SDK or CLI under different terms  
+- Do not use the SDK above your tier threshold without upgrading  
+- Do not share credentials or API keys across separate organizations  
+- Do not implement workarounds to avoid usage-based billing  
+- Do not reverse engineer, decompile, or extract proprietary algorithms from Server-Side Rendering or Premium Player  
+- Do not access Cloud Service APIs other than through official client libraries  
+- Do not disable, circumvent, or tamper with telemetry  
+- Do not remove or alter copyright notices or attribution  
+- Do not use the SDK for unlawful purposes or in violation of export control regulations
+
+### 3.2 Permitted
+
+- Build any product that creates, processes, or delivers video — editors, workflows, motion design tools, content automation, and more  
+- Integrate the Client-Side SDK into platforms, coding environments, vibe coding tools, and AI agents (end users are individually responsible for compliance)  
+- Use the Client-Side SDK in CI/CD pipelines and development environments, provided you are not using it to render production video at scale
+
+---
+
+## 4. Intellectual Property
+
+Editframe, Inc. retains all rights to the SDK. This License does not transfer ownership. You retain all rights to video outputs you create ("Your Content"). Feedback may be used by us without obligation.
+
+---
+
+## 5. Telemetry
+
+The SDK includes always-on telemetry collecting render counts, durations, IP addresses, domains, and feature usage. Telemetry cannot be disabled. Required for usage-based billing and license compliance. No video content is collected. See [editframe.com/privacy](https://editframe.com/privacy).
+
+High Client-Side rendering volume does not trigger payment requirements — eligibility is determined by company size only.
+
+---
+
+## 6. Support
+
+- **Free:** Community support  
+- **Team/Cloud:** Email and Slack, 48-hour response  
+- **Enterprise:** Dedicated support, custom SLAs
+
+---
+
+## 7. Warranties
+
+THE SDK IS PROVIDED "AS IS" WITHOUT WARRANTIES OF ANY KIND. WE DO NOT WARRANT THAT THE SDK WILL BE ERROR-FREE, SECURE, OR UNINTERRUPTED. YOU ASSUME ALL RISKS.
+
+---
+
+## 8. Limitation of Liability
+
+WE SHALL NOT BE LIABLE FOR INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES. TOTAL LIABILITY SHALL NOT EXCEED AMOUNTS PAID IN THE 12 MONTHS PRECEDING THE CLAIM, OR $100 USD, WHICHEVER IS GREATER.
+
+---
+
+## 9. Termination
+
+This License is effective upon first use. We may terminate immediately for breach, failure to maintain required subscription tier, or fraudulent conduct (10 days' notice where feasible). Upon termination, all rights cease and you must delete all SDK copies.
+
+---
+
+## 10. Compliance
+
+Self-report your employee count accurately. Violations may result in termination, back-payment of owed fees, liquidated damages (3× unpaid fees), and legal action. Voluntary disclosure may result in waived penalties.
+
+---
+
+## 11. General
+
+- **Governing Law:** Delaware  
+- **Jurisdiction:** New York County, NY  
+- **Export Controls:** You must comply with U.S. Export Administration Regulations  
+- **Assignment:** You may not assign this License without written consent  
+- **Entire Agreement:** This License, Terms of Service, and Privacy Policy constitute the full agreement
+
+---
+
+[hello@editframe.com](mailto:hello@editframe.com) · editframe.com
+
+**By using the SDK, you agree to these terms.**  

package/LICENSE.md

@@ -0,0 +1,58 @@
+# Editframe SDK License
+
+The Editframe SDK is source-available and free for individuals and small teams, including for commercial use. We've kept the bar low intentionally — if you're building something, you should be able to just use it.
+
+- [Free Tier](#free-tier)  
+- [Paid Tiers](#paid-tiers)
+
+---
+
+## Free Tier
+
+Copyright © 2026 [Editframe](https://editframe.com)
+
+### Who Qualifies
+
+- Individuals and freelancers  
+- Organizations with 3 or fewer total employees  
+- Non-profits and not-for-profit organizations (any size)  
+- Accredited educational institutions  
+- Organizations evaluating Editframe in good faith, prior to commercial deployment (30 days)
+
+### What You Can Build
+
+Use and modify the SDK to build any product that creates, processes, or delivers video — editors, workflows, motion design tools, content automation, and more. Platforms, coding environments, vibe coding tools, and AI agents may freely integrate the SDK. End users are each responsible for their own license compliance.
+
+### What Is Not Permitted
+
+You may not offer the Client-Side SDK or CLI itself as a managed rendering API or infrastructure product to third parties. You may not sell, sublicense, or redistribute the SDK or modifications to it as a standalone product.
+
+### Warranty
+
+The SDK is provided as-is without warranty of any kind. See the [Full License Agreement](./LICENSE-FULL.md) for complete terms.
+
+---
+
+## Paid Tiers
+
+Organizations outside the Free Tier must subscribe to a paid plan.
+
+| Tier | Employees |
+| :---- | :---- |
+| Team | 4–10 |
+| Cloud | 11–20, or any size needing Cloud Rendering & Player |
+| Enterprise | 21+ |
+
+All paid tiers include full SDK rights. 
+
+Cloud Rendering & Player — parallel rendering and CDN streaming optimized for editing workflows — requires a Cloud Tier subscription regardless of company size.
+
+[View pricing →](https://editframe.com/pricing) · Enterprise: [hello@editframe.com](mailto:hello@editframe.com)
+
+---
+
+Unsure which tier applies? See the [FAQ](https://editframe.com/faq) or reach out at [hello@editframe.com](mailto:hello@editframe.com).
+
+[Full License Agreement](./LICENSE-FULL.md) · [Terms of Service](https://editframe.com/terms)
+
+*© 2026 Editframe, Inc.*  

package/dist/efHandlers.d.ts

@@ -0,0 +1,20 @@
+import { ServerResponse } from "node:http";
+import { IncomingMessage as IncomingMessage$1 } from "connect";
+
+//#region src/efHandlers.d.ts
+interface EfHandlers {
+  signUrl(req: IncomingMessage$1, res: ServerResponse): Promise<void>;
+  clearCache(req: IncomingMessage$1, res: ServerResponse, cacheRoot: string): Promise<void>;
+  writeSnapshot?(req: IncomingMessage$1, res: ServerResponse): Promise<void>;
+  compareSnapshot?(req: IncomingMessage$1, res: ServerResponse): Promise<void>;
+  compareTwoImages?(req: IncomingMessage$1, res: ServerResponse): Promise<void>;
+}
+interface ProdEfHandlersDeps {
+  createURLToken: (client: any, url: string) => Promise<string>;
+  getClient: () => any;
+}
+declare function createProdEfHandlers(deps: ProdEfHandlersDeps): EfHandlers;
+declare function createVitestEfHandlers(root: string): EfHandlers;
+//#endregion
+export { EfHandlers, ProdEfHandlersDeps, createProdEfHandlers, createVitestEfHandlers };
+//# sourceMappingURL=efHandlers.d.ts.map

package/dist/efHandlers.js

@@ -0,0 +1,272 @@
+import { handleClearCache } from "./middleware.js";
+import debug from "debug";
+import { existsSync } from "node:fs";
+import path, { join } from "node:path";
+import { mkdir, writeFile } from "node:fs/promises";
+import { compare } from "odiff-bin";
+//#region src/efHandlers.ts
+async function collectJsonBody(req) {
+	const chunks = [];
+	for await (const chunk of req) chunks.push(chunk);
+	const body = Buffer.concat(chunks).toString("utf-8");
+	return JSON.parse(body);
+}
+function parseDataUrl(dataUrl) {
+	const matches = dataUrl.match(/^data:([^;]+);base64,(.+)$/);
+	if (!matches) throw new Error("Invalid data URL format");
+	const mimeType = matches[1];
+	const base64Data = matches[2];
+	const buffer = Buffer.from(base64Data, "base64");
+	let extension = "png";
+	if (mimeType === "image/jpeg" || mimeType === "image/jpg") extension = "jpg";
+	else if (mimeType === "image/webp") extension = "webp";
+	return {
+		buffer,
+		mimeType,
+		extension
+	};
+}
+function getSnapshotDir(root, testName) {
+	return path.resolve(root, "test", "__snapshots__", testName);
+}
+function getSnapshotPaths(root, testName, snapshotName) {
+	const dir = getSnapshotDir(root, testName);
+	return {
+		dir,
+		baseline: join(dir, `${snapshotName}.baseline.png`),
+		actual: join(dir, `${snapshotName}.actual.png`),
+		diff: join(dir, `${snapshotName}.diff.png`)
+	};
+}
+function createProdEfHandlers(deps) {
+	return {
+		async signUrl(req, res) {
+			const log = debug("ef:dev-server:sign-url");
+			if (req.method !== "POST") {
+				res.writeHead(405, { Allow: "POST" });
+				res.end();
+				return;
+			}
+			log("Signing URL token");
+			let body = "";
+			req.on("data", (chunk) => {
+				body += chunk.toString();
+			});
+			await new Promise((resolve) => {
+				req.on("end", async () => {
+					try {
+						const payload = JSON.parse(body);
+						log("Token signing request payload:", payload);
+						const { url, params } = payload;
+						if (!url) {
+							res.writeHead(400, { "Content-Type": "application/json" });
+							res.end(JSON.stringify({ error: "URL is required" }));
+							resolve();
+							return;
+						}
+						const client = deps.getClient();
+						let fullUrl = url;
+						if (params) {
+							const urlObj = new URL(url);
+							Object.entries(params).forEach(([key, value]) => {
+								urlObj.searchParams.set(key, String(value));
+							});
+							fullUrl = urlObj.toString();
+						}
+						log("Creating token for full URL:", fullUrl);
+						const token = await deps.createURLToken(client, fullUrl);
+						res.writeHead(200, { "Content-Type": "application/json" });
+						res.end(JSON.stringify({ token }));
+					} catch (error) {
+						log(`Error signing URL token: ${error}`);
+						res.writeHead(500, { "Content-Type": "application/json" });
+						res.end(JSON.stringify({ error: "Failed to sign URL token" }));
+					}
+					resolve();
+				});
+			});
+		},
+		clearCache: handleClearCache
+	};
+}
+function createVitestEfHandlers(root) {
+	return {
+		async signUrl(req, res) {
+			const log = debug("ef:dev-server:sign-url");
+			if (req.method !== "POST") {
+				res.writeHead(405, { Allow: "POST" });
+				res.end();
+				return;
+			}
+			log("Returning mock token response");
+			const requestChunks = [];
+			req.on("data", (chunk) => {
+				requestChunks.push(chunk);
+			});
+			await new Promise((resolve) => {
+				req.on("end", () => {
+					const mockToken = "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1cmwiOiJodHRwOi8vd2ViOjMwMDAvaGVhZC1tb292LTQ4MHAubXA0IiwiZXhwIjo5OTk5OTk5OTk5fQ.mock-signature";
+					res.writeHead(200, { "Content-Type": "application/json" });
+					res.end(JSON.stringify({ token: mockToken }));
+					resolve();
+				});
+			});
+		},
+		clearCache: handleClearCache,
+		async writeSnapshot(req, res) {
+			const log = debug("ef:dev-server:snapshot");
+			if (req.method !== "POST") {
+				res.writeHead(405, { Allow: "POST" });
+				res.end();
+				return;
+			}
+			try {
+				const { testName, snapshotName, dataUrl, isBaseline } = await collectJsonBody(req);
+				const paths = getSnapshotPaths(root, testName, snapshotName);
+				await mkdir(paths.dir, { recursive: true });
+				const { buffer } = parseDataUrl(dataUrl);
+				const targetPath = isBaseline ? paths.baseline : paths.actual;
+				await writeFile(targetPath, buffer);
+				log(`Wrote snapshot to ${targetPath}`);
+				res.writeHead(200, { "Content-Type": "application/json" });
+				res.end(JSON.stringify({
+					success: true,
+					path: targetPath
+				}));
+			} catch (error) {
+				log(`Error writing snapshot: ${error}`);
+				res.writeHead(500, { "Content-Type": "text/plain" });
+				res.end(error instanceof Error ? error.message : String(error));
+			}
+		},
+		async compareSnapshot(req, res) {
+			const log = debug("ef:dev-server:snapshot");
+			if (req.method !== "POST") {
+				res.writeHead(405, { Allow: "POST" });
+				res.end();
+				return;
+			}
+			try {
+				const { testName, snapshotName, dataUrl, threshold = .1, antialiasing = true, acceptableDiffPercentage = 1 } = await collectJsonBody(req);
+				const paths = getSnapshotPaths(root, testName, snapshotName);
+				await mkdir(paths.dir, { recursive: true });
+				const { buffer } = parseDataUrl(dataUrl);
+				await writeFile(paths.actual, buffer);
+				log(`Wrote actual snapshot to ${paths.actual}`);
+				if (!existsSync(paths.baseline)) {
+					await writeFile(paths.baseline, buffer);
+					log(`Created baseline at ${paths.baseline}`);
+					res.writeHead(200, { "Content-Type": "application/json" });
+					res.end(JSON.stringify({
+						match: true,
+						baselineCreated: true
+					}));
+					return;
+				}
+				log(`Comparing ${paths.actual} against ${paths.baseline}`);
+				const result = await compare(paths.baseline, paths.actual, paths.diff, {
+					threshold,
+					antialiasing
+				});
+				if (result.match) {
+					res.writeHead(200, { "Content-Type": "application/json" });
+					res.end(JSON.stringify({
+						match: true,
+						diffCount: 0,
+						diffPercentage: 0
+					}));
+				} else if (result.reason === "pixel-diff") {
+					const diffPercentage = result.diffPercentage ?? 0;
+					const match = diffPercentage <= acceptableDiffPercentage;
+					log(`Diff: ${result.diffCount} pixels (${diffPercentage.toFixed(2)}%), match: ${match}`);
+					res.writeHead(200, { "Content-Type": "application/json" });
+					res.end(JSON.stringify({
+						match,
+						diffCount: result.diffCount,
+						diffPercentage
+					}));
+				} else if (result.reason === "layout-diff") {
+					log(`Layout diff detected`);
+					res.writeHead(200, { "Content-Type": "application/json" });
+					res.end(JSON.stringify({
+						match: false,
+						error: "Images have different dimensions"
+					}));
+				} else {
+					res.writeHead(200, { "Content-Type": "application/json" });
+					res.end(JSON.stringify({
+						match: false,
+						error: `Comparison failed: ${result.reason}`
+					}));
+				}
+			} catch (error) {
+				log(`Error comparing snapshot: ${error}`);
+				res.writeHead(500, { "Content-Type": "text/plain" });
+				res.end(error instanceof Error ? error.message : String(error));
+			}
+		},
+		async compareTwoImages(req, res) {
+			const log = debug("ef:dev-server:snapshot");
+			if (req.method !== "POST") {
+				res.writeHead(405, { Allow: "POST" });
+				res.end();
+				return;
+			}
+			try {
+				const { testName, comparisonName, dataUrl1, dataUrl2, threshold = .1, acceptableDiffPercentage = 1 } = await collectJsonBody(req);
+				const dir = getSnapshotDir(root, testName);
+				await mkdir(dir, { recursive: true });
+				const image1Path = join(dir, `${comparisonName}.image1.png`);
+				const image2Path = join(dir, `${comparisonName}.image2.png`);
+				const diffPath = join(dir, `${comparisonName}.diff.png`);
+				const { buffer: buffer1 } = parseDataUrl(dataUrl1);
+				const { buffer: buffer2 } = parseDataUrl(dataUrl2);
+				await writeFile(image1Path, buffer1);
+				await writeFile(image2Path, buffer2);
+				log(`Comparing two images: ${image1Path} vs ${image2Path}`);
+				const result = await compare(image1Path, image2Path, diffPath, {
+					threshold,
+					antialiasing: true
+				});
+				if (result.match) {
+					res.writeHead(200, { "Content-Type": "application/json" });
+					res.end(JSON.stringify({
+						match: true,
+						diffCount: 0,
+						diffPercentage: 0
+					}));
+				} else if (result.reason === "pixel-diff") {
+					const diffPercentage = result.diffPercentage ?? 0;
+					const match = diffPercentage <= acceptableDiffPercentage;
+					log(`Diff: ${result.diffCount} pixels (${diffPercentage.toFixed(2)}%), match: ${match}`);
+					res.writeHead(200, { "Content-Type": "application/json" });
+					res.end(JSON.stringify({
+						match,
+						diffCount: result.diffCount,
+						diffPercentage
+					}));
+				} else if (result.reason === "layout-diff") {
+					res.writeHead(200, { "Content-Type": "application/json" });
+					res.end(JSON.stringify({
+						match: false,
+						error: "Images have different dimensions"
+					}));
+				} else {
+					res.writeHead(200, { "Content-Type": "application/json" });
+					res.end(JSON.stringify({
+						match: false,
+						error: `Comparison failed: ${result.reason}`
+					}));
+				}
+			} catch (error) {
+				log(`Error comparing images: ${error}`);
+				res.writeHead(500, { "Content-Type": "text/plain" });
+				res.end(error instanceof Error ? error.message : String(error));
+			}
+		}
+	};
+}
+//#endregion
+export { createProdEfHandlers, createVitestEfHandlers };
+
+//# sourceMappingURL=efHandlers.js.map

package/dist/efHandlers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"efHandlers.js","names":["odiffCompare"],"sources":["../src/efHandlers.ts"],"mappings":";;;;;;;AA2BA,eAAe,gBAAmB,KAAkC;CAClE,MAAM,SAAmB,EAAE;AAC3B,YAAW,MAAM,SAAS,IACxB,QAAO,KAAK,MAAgB;CAE9B,MAAM,OAAO,OAAO,OAAO,OAAO,CAAC,SAAS,QAAQ;AACpD,QAAO,KAAK,MAAM,KAAK;;AAGzB,SAAS,aAAa,SAIpB;CACA,MAAM,UAAU,QAAQ,MAAM,6BAA6B;AAC3D,KAAI,CAAC,QACH,OAAM,IAAI,MAAM,0BAA0B;CAE5C,MAAM,WAAW,QAAQ;CACzB,MAAM,aAAa,QAAQ;CAC3B,MAAM,SAAS,OAAO,KAAK,YAAY,SAAS;CAEhD,IAAI,YAAY;AAChB,KAAI,aAAa,gBAAgB,aAAa,YAC5C,aAAY;UACH,aAAa,aACtB,aAAY;AAGd,QAAO;EAAE;EAAQ;EAAU;EAAW;;AAGxC,SAAS,eAAe,MAAc,UAA0B;AAC9D,QAAO,KAAK,QAAQ,MAAM,QAAQ,iBAAiB,SAAS;;AAG9D,SAAS,iBAAiB,MAAc,UAAkB,cAAsB;CAC9E,MAAM,MAAM,eAAe,MAAM,SAAS;AAC1C,QAAO;EACL;EACA,UAAU,KAAK,KAAK,GAAG,aAAa,eAAe;EACnD,QAAQ,KAAK,KAAK,GAAG,aAAa,aAAa;EAC/C,MAAM,KAAK,KAAK,GAAG,aAAa,WAAW;EAC5C;;AAYH,SAAgB,qBAAqB,MAAsC;AACzE,QAAO;EACL,MAAM,QAAQ,KAAK,KAAK;GACtB,MAAM,MAAM,MAAM,yBAAyB;AAC3C,OAAI,IAAI,WAAW,QAAQ;AACzB,QAAI,UAAU,KAAK,EAAE,OAAO,QAAQ,CAAC;AACrC,QAAI,KAAK;AACT;;AAGF,OAAI,oBAAoB;GAExB,IAAI,OAAO;AACX,OAAI,GAAG,SAAS,UAAU;AACxB,YAAQ,MAAM,UAAU;KACxB;AAEF,SAAM,IAAI,SAAe,YAAY;AACnC,QAAI,GAAG,OAAO,YAAY;AACxB,SAAI;MACF,MAAM,UAAU,KAAK,MAAM,KAAK;AAChC,UAAI,kCAAkC,QAAQ;MAE9C,MAAM,EAAE,KAAK,WAAW;AACxB,UAAI,CAAC,KAAK;AACR,WAAI,UAAU,KAAK,EAAE,gBAAgB,oBAAoB,CAAC;AAC1D,WAAI,IAAI,KAAK,UAAU,EAAE,OAAO,mBAAmB,CAAC,CAAC;AACrD,gBAAS;AACT;;MAGF,MAAM,SAAS,KAAK,WAAW;MAE/B,IAAI,UAAU;AACd,UAAI,QAAQ;OACV,MAAM,SAAS,IAAI,IAAI,IAAI;AAC3B,cAAO,QAAQ,OAAO,CAAC,SAAS,CAAC,KAAK,WAAW;AAC/C,eAAO,aAAa,IAAI,KAAK,OAAO,MAAM,CAAC;SAC3C;AACF,iBAAU,OAAO,UAAU;;AAG7B,UAAI,gCAAgC,QAAQ;MAC5C,MAAM,QAAQ,MAAM,KAAK,eAAe,QAAQ,QAAQ;AAExD,UAAI,UAAU,KAAK,EAAE,gBAAgB,oBAAoB,CAAC;AAC1D,UAAI,IAAI,KAAK,UAAU,EAAE,OAAO,CAAC,CAAC;cAC3B,OAAO;AACd,UAAI,4BAA4B,QAAQ;AACxC,UAAI,UAAU,KAAK,EAAE,gBAAgB,oBAAoB,CAAC;AAC1D,UAAI,IAAI,KAAK,UAAU,EAAE,OAAO,4BAA4B,CAAC,CAAC;;AAEhE,cAAS;MACT;KACF;;EAGJ,YAAY;EACb;;AAOH,SAAgB,uBAAuB,MAA0B;AAC/D,QAAO;EACL,MAAM,QAAQ,KAAK,KAAK;GACtB,MAAM,MAAM,MAAM,yBAAyB;AAC3C,OAAI,IAAI,WAAW,QAAQ;AACzB,QAAI,UAAU,KAAK,EAAE,OAAO,QAAQ,CAAC;AACrC,QAAI,KAAK;AACT;;AAGF,OAAI,gCAAgC;GAEpC,MAAM,gBAA0B,EAAE;AAClC,OAAI,GAAG,SAAS,UAAU;AACxB,kBAAc,KAAK,MAAM;KACzB;AAEF,SAAM,IAAI,SAAe,YAAY;AACnC,QAAI,GAAG,aAAa;KAClB,MAAM,YACJ;AACF,SAAI,UAAU,KAAK,EAAE,gBAAgB,oBAAoB,CAAC;AAC1D,SAAI,IAAI,KAAK,UAAU,EAAE,OAAO,WAAW,CAAC,CAAC;AAC7C,cAAS;MACT;KACF;;EAGJ,YAAY;EAEZ,MAAM,cAAc,KAAK,KAAK;GAC5B,MAAM,MAAM,MAAM,yBAAyB;AAC3C,OAAI,IAAI,WAAW,QAAQ;AACzB,QAAI,UAAU,KAAK,EAAE,OAAO,QAAQ,CAAC;AACrC,QAAI,KAAK;AACT;;AAGF,OAAI;IAQF,MAAM,EAAE,UAAU,cAAc,SAAS,eAP5B,MAAM,gBAKhB,IAAI;IAGP,MAAM,QAAQ,iBAAiB,MAAM,UAAU,aAAa;AAE5D,UAAM,MAAM,MAAM,KAAK,EAAE,WAAW,MAAM,CAAC;IAE3C,MAAM,EAAE,WAAW,aAAa,QAAQ;IACxC,MAAM,aAAa,aAAa,MAAM,WAAW,MAAM;AACvD,UAAM,UAAU,YAAY,OAAO;AAEnC,QAAI,qBAAqB,aAAa;AACtC,QAAI,UAAU,KAAK,EAAE,gBAAgB,oBAAoB,CAAC;AAC1D,QAAI,IAAI,KAAK,UAAU;KAAE,SAAS;KAAM,MAAM;KAAY,CAAC,CAAC;YACrD,OAAO;AACd,QAAI,2BAA2B,QAAQ;AACvC,QAAI,UAAU,KAAK,EAAE,gBAAgB,cAAc,CAAC;AACpD,QAAI,IAAI,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM,CAAC;;;EAInE,MAAM,gBAAgB,KAAK,KAAK;GAC9B,MAAM,MAAM,MAAM,yBAAyB;AAC3C,OAAI,IAAI,WAAW,QAAQ;AACzB,QAAI,UAAU,KAAK,EAAE,OAAO,QAAQ,CAAC;AACrC,QAAI,KAAK;AACT;;AAGF,OAAI;IAUF,MAAM,EACJ,UACA,cACA,SACA,YAAY,IACZ,eAAe,MACf,2BAA2B,MAfhB,MAAM,gBAOhB,IAAI;IAWP,MAAM,QAAQ,iBAAiB,MAAM,UAAU,aAAa;AAE5D,UAAM,MAAM,MAAM,KAAK,EAAE,WAAW,MAAM,CAAC;IAE3C,MAAM,EAAE,WAAW,aAAa,QAAQ;AACxC,UAAM,UAAU,MAAM,QAAQ,OAAO;AACrC,QAAI,4BAA4B,MAAM,SAAS;AAE/C,QAAI,CAAC,WAAW,MAAM,SAAS,EAAE;AAC/B,WAAM,UAAU,MAAM,UAAU,OAAO;AACvC,SAAI,uBAAuB,MAAM,WAAW;AAC5C,SAAI,UAAU,KAAK,EAAE,gBAAgB,oBAAoB,CAAC;AAC1D,SAAI,IAAI,KAAK,UAAU;MAAE,OAAO;MAAM,iBAAiB;MAAM,CAAC,CAAC;AAC/D;;AAGF,QAAI,aAAa,MAAM,OAAO,WAAW,MAAM,WAAW;IAC1D,MAAM,SAAS,MAAMA,QAAa,MAAM,UAAU,MAAM,QAAQ,MAAM,MAAM;KAC1E;KACA;KACD,CAAC;AAEF,QAAI,OAAO,OAAO;AAChB,SAAI,UAAU,KAAK,EAAE,gBAAgB,oBAAoB,CAAC;AAC1D,SAAI,IAAI,KAAK,UAAU;MAAE,OAAO;MAAM,WAAW;MAAG,gBAAgB;MAAG,CAAC,CAAC;eAChE,OAAO,WAAW,cAAc;KACzC,MAAM,iBAAiB,OAAO,kBAAkB;KAChD,MAAM,QAAQ,kBAAkB;AAChC,SAAI,SAAS,OAAO,UAAU,WAAW,eAAe,QAAQ,EAAE,CAAC,aAAa,QAAQ;AACxF,SAAI,UAAU,KAAK,EAAE,gBAAgB,oBAAoB,CAAC;AAC1D,SAAI,IAAI,KAAK,UAAU;MAAE;MAAO,WAAW,OAAO;MAAW;MAAgB,CAAC,CAAC;eACtE,OAAO,WAAW,eAAe;AAC1C,SAAI,uBAAuB;AAC3B,SAAI,UAAU,KAAK,EAAE,gBAAgB,oBAAoB,CAAC;AAC1D,SAAI,IAAI,KAAK,UAAU;MAAE,OAAO;MAAO,OAAO;MAAoC,CAAC,CAAC;WAC/E;AACL,SAAI,UAAU,KAAK,EAAE,gBAAgB,oBAAoB,CAAC;AAC1D,SAAI,IAAI,KAAK,UAAU;MAAE,OAAO;MAAO,OAAO,sBAAsB,OAAO;MAAU,CAAC,CAAC;;YAElF,OAAO;AACd,QAAI,6BAA6B,QAAQ;AACzC,QAAI,UAAU,KAAK,EAAE,gBAAgB,cAAc,CAAC;AACpD,QAAI,IAAI,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM,CAAC;;;EAInE,MAAM,iBAAiB,KAAK,KAAK;GAC/B,MAAM,MAAM,MAAM,yBAAyB;AAC3C,OAAI,IAAI,WAAW,QAAQ;AACzB,QAAI,UAAU,KAAK,EAAE,OAAO,QAAQ,CAAC;AACrC,QAAI,KAAK;AACT;;AAGF,OAAI;IAUF,MAAM,EACJ,UACA,gBACA,UACA,UACA,YAAY,IACZ,2BAA2B,MAfhB,MAAM,gBAOhB,IAAI;IAWP,MAAM,MAAM,eAAe,MAAM,SAAS;AAC1C,UAAM,MAAM,KAAK,EAAE,WAAW,MAAM,CAAC;IAErC,MAAM,aAAa,KAAK,KAAK,GAAG,eAAe,aAAa;IAC5D,MAAM,aAAa,KAAK,KAAK,GAAG,eAAe,aAAa;IAC5D,MAAM,WAAW,KAAK,KAAK,GAAG,eAAe,WAAW;IAExD,MAAM,EAAE,QAAQ,YAAY,aAAa,SAAS;IAClD,MAAM,EAAE,QAAQ,YAAY,aAAa,SAAS;AAClD,UAAM,UAAU,YAAY,QAAQ;AACpC,UAAM,UAAU,YAAY,QAAQ;AAEpC,QAAI,yBAAyB,WAAW,MAAM,aAAa;IAE3D,MAAM,SAAS,MAAMA,QAAa,YAAY,YAAY,UAAU;KAClE;KACA,cAAc;KACf,CAAC;AAEF,QAAI,OAAO,OAAO;AAChB,SAAI,UAAU,KAAK,EAAE,gBAAgB,oBAAoB,CAAC;AAC1D,SAAI,IAAI,KAAK,UAAU;MAAE,OAAO;MAAM,WAAW;MAAG,gBAAgB;MAAG,CAAC,CAAC;eAChE,OAAO,WAAW,cAAc;KACzC,MAAM,iBAAiB,OAAO,kBAAkB;KAChD,MAAM,QAAQ,kBAAkB;AAChC,SAAI,SAAS,OAAO,UAAU,WAAW,eAAe,QAAQ,EAAE,CAAC,aAAa,QAAQ;AACxF,SAAI,UAAU,KAAK,EAAE,gBAAgB,oBAAoB,CAAC;AAC1D,SAAI,IAAI,KAAK,UAAU;MAAE;MAAO,WAAW,OAAO;MAAW;MAAgB,CAAC,CAAC;eACtE,OAAO,WAAW,eAAe;AAC1C,SAAI,UAAU,KAAK,EAAE,gBAAgB,oBAAoB,CAAC;AAC1D,SAAI,IAAI,KAAK,UAAU;MAAE,OAAO;MAAO,OAAO;MAAoC,CAAC,CAAC;WAC/E;AACL,SAAI,UAAU,KAAK,EAAE,gBAAgB,oBAAoB,CAAC;AAC1D,SAAI,IAAI,KAAK,UAAU;MAAE,OAAO;MAAO,OAAO,sBAAsB,OAAO;MAAU,CAAC,CAAC;;YAElF,OAAO;AACd,QAAI,2BAA2B,QAAQ;AACvC,QAAI,UAAU,KAAK,EAAE,gBAAgB,cAAc,CAAC;AACpD,QAAI,IAAI,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM,CAAC;;;EAGpE"}

package/dist/forbidRelativePaths.d.ts

@@ -0,0 +1,7 @@
+import { IncomingMessage } from "connect";
+
+//#region src/forbidRelativePaths.d.ts
+declare const forbidRelativePaths: (req: IncomingMessage) => void;
+//#endregion
+export { forbidRelativePaths };
+//# sourceMappingURL=forbidRelativePaths.d.ts.map

package/dist/forbidRelativePaths.js

@@ -0,0 +1,8 @@
+//#region src/forbidRelativePaths.ts
+const forbidRelativePaths = (req) => {
+	if (req.url?.includes("..")) throw new Error("Relative paths are forbidden");
+};
+//#endregion
+export { forbidRelativePaths };
+
+//# sourceMappingURL=forbidRelativePaths.js.map

package/dist/forbidRelativePaths.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"forbidRelativePaths.js","names":[],"sources":["../src/forbidRelativePaths.ts"],"mappings":";AAEA,MAAa,uBAAuB,QAAyB;AAC3D,KAAI,IAAI,KAAK,SAAS,KAAK,CACzB,OAAM,IAAI,MAAM,+BAA+B"}

package/dist/index.d.ts

@@ -0,0 +1,8 @@
+import { AssetFunctions, JitMiddlewareOptions, TrackFragmentIndex, createJitTranscodeMiddleware, generateLocalJitManifest, getSegmentDurationsMs, isLocalHost, resolveMediaPath, sendByteRange, sendMultipleByteRanges } from "./jitTranscodeMiddleware.js";
+import { EfHandlers, ProdEfHandlersDeps, createProdEfHandlers, createVitestEfHandlers } from "./efHandlers.js";
+import { DevServerOptions, RouterAssetFunctions, createEditframeRouter, injectApiHostScript } from "./router.js";
+import { EditframeDevServerOptions, createEditframeDevServer } from "./server.js";
+import { createAssetsApiMiddleware, createLocalFilesApiMiddleware, handleClearCache } from "./middleware.js";
+import { sendTaskResult } from "./sendTaskResult.js";
+import { forbidRelativePaths } from "./forbidRelativePaths.js";
+export { type AssetFunctions, type DevServerOptions, type EditframeDevServerOptions, type EfHandlers, type JitMiddlewareOptions, type ProdEfHandlersDeps, type RouterAssetFunctions, type TrackFragmentIndex, createAssetsApiMiddleware, createEditframeDevServer, createEditframeRouter, createJitTranscodeMiddleware, createLocalFilesApiMiddleware, createProdEfHandlers, createVitestEfHandlers, forbidRelativePaths, generateLocalJitManifest, getSegmentDurationsMs, handleClearCache, injectApiHostScript, isLocalHost, resolveMediaPath, sendByteRange, sendMultipleByteRanges, sendTaskResult };

package/dist/index.js

@@ -0,0 +1,8 @@
+import { forbidRelativePaths } from "./forbidRelativePaths.js";
+import { createJitTranscodeMiddleware, generateLocalJitManifest, getSegmentDurationsMs, isLocalHost, resolveMediaPath, sendByteRange, sendMultipleByteRanges } from "./jitTranscodeMiddleware.js";
+import { sendTaskResult } from "./sendTaskResult.js";
+import { createAssetsApiMiddleware, createLocalFilesApiMiddleware, handleClearCache } from "./middleware.js";
+import { createEditframeRouter, injectApiHostScript } from "./router.js";
+import { createEditframeDevServer } from "./server.js";
+import { createProdEfHandlers, createVitestEfHandlers } from "./efHandlers.js";
+export { createAssetsApiMiddleware, createEditframeDevServer, createEditframeRouter, createJitTranscodeMiddleware, createLocalFilesApiMiddleware, createProdEfHandlers, createVitestEfHandlers, forbidRelativePaths, generateLocalJitManifest, getSegmentDurationsMs, handleClearCache, injectApiHostScript, isLocalHost, resolveMediaPath, sendByteRange, sendMultipleByteRanges, sendTaskResult };