@hyperframes/studio-server 0.8.135 → 0.8.137

package/dist/index.d.ts

@@ -25,6 +25,8 @@ import './helpers/mediaCodecMap.js';
  */
 declare function createStudioApi(adapter: StudioApiAdapter): Hono;
 
+declare const MAX_UPLOAD_BYTES: number;
+
 /**
  * Whether a write at `changedPath` can change `createProjectSignature(projectDir)`.
  *
@@ -226,4 +228,4 @@ type BackgroundRemovalRender = (options: {
 }>;
 declare function createBackgroundRemovalJob(opts: BackgroundRemovalJobOptions, render: BackgroundRemovalRender): MediaProcessingJobState;
 
-export { type AppliedFileMutation, type BackgroundRemovalRender, DELETED_VERSION, type DuplicateElementResult, type FileMutationInput, type FileWriteReceipt, MIME_TYPES, MediaProcessingJobState, PREVIEW_BUNDLE_OPTIONS, SourceMutationTarget, StudioApiAdapter, type ThumbnailOutputDimensions, affectsPreview, affectsProjectSignature, applyFileMutations, buildSubCompositionHtml, cleanupProxyCache, compositionsAffectedBy, consumeFileWriteReceipt, createBackgroundRemovalJob, createPreviewDocumentStore, createProjectSignature, createStudioApi, duplicateElementInHtml, fileContentVersion, getMimeType, identifyFileWrite, requestSubPath, settledFileTag, thumbnailDeviceScaleFactor };
+export { type AppliedFileMutation, type BackgroundRemovalRender, DELETED_VERSION, type DuplicateElementResult, type FileMutationInput, type FileWriteReceipt, MAX_UPLOAD_BYTES, MIME_TYPES, MediaProcessingJobState, PREVIEW_BUNDLE_OPTIONS, SourceMutationTarget, StudioApiAdapter, type ThumbnailOutputDimensions, affectsPreview, affectsProjectSignature, applyFileMutations, buildSubCompositionHtml, cleanupProxyCache, compositionsAffectedBy, consumeFileWriteReceipt, createBackgroundRemovalJob, createPreviewDocumentStore, createProjectSignature, createStudioApi, duplicateElementInHtml, fileContentVersion, getMimeType, identifyFileWrite, requestSubPath, settledFileTag, thumbnailDeviceScaleFactor };

package/dist/index.js

@@ -2681,8 +2681,8 @@ async function foldAtomicCutFile(c, file, absPath, before, writer) {
     skippedSelectors: [...skippedSelectors]
   };
 }
+var MAX_UPLOAD_BYTES = 500 * 1024 * 1024;
 async function processUploadedFiles(formData, targetDir, projectDir) {
-  const MAX_UPLOAD_BYTES = 500 * 1024 * 1024;
   const uploaded = [];
   const skipped = [];
   const invalid = [];
@@ -3495,7 +3495,6 @@ function registerFileRoutes(api, adapter) {
     }
     return c.json({ ok: true, path: copyPath }, 201);
   });
-  const MAX_UPLOAD_BYTES = 500 * 1024 * 1024;
   api.post(
     "/projects/:id/upload",
     bodyLimit({
@@ -3597,7 +3596,7 @@ function registerFileRoutes(api, adapter) {
 }
 
 // src/routes/preview.ts
-import { parseHTML as parseHTML6 } from "linkedom";
+import { parseHTML as parseHTML7 } from "linkedom";
 import { createReadStream, existsSync as existsSync5, readFileSync as readFileSync6, statSync as statSync4 } from "fs";
 import { Readable } from "stream";
 import { join as join8, resolve as resolve4 } from "path";
@@ -3619,8 +3618,13 @@ import { ensureHfIds as ensureHfIds2 } from "@hyperframes/parsers/hf-ids";
 // src/helpers/previewReads.ts
 import { readlinkSync as readlinkSync2 } from "fs";
 import { dirname as dirname4, join as join7, parse, relative as relative3, resolve as resolve3 } from "path";
+import { parseHTML as parseHTML5 } from "linkedom";
 var ALWAYS_AFFECTS = ["hyperframes.json", ...STUDIO_SIGNATURE_MANIFEST_PATHS];
+var MAX_PREVIEW_PATH_LENGTH = 4096;
+var SHOW_ELEMENT = 1;
 var REFERENCE = /\b(?:src|href|poster|data-composition-src)\s*=\s*(?:"([^"\n]*)"|'([^'\n]*)')|url\(\s*(?:"([^"\n]*)"|'([^'\n]*)'|([^"'\s)]+))/gi;
+var REFERENCE_ATTRIBUTE = /\b(?:src|href|poster|data-composition-src)$/i;
+var isElement = (node) => node.nodeType === 1;
 var pathKey = process.platform === "darwin" || process.platform === "win32" ? (path) => resolve3(path).toLowerCase() : (path) => resolve3(path);
 var readsByProject = /* @__PURE__ */ new Map();
 var builtProjects = /* @__PURE__ */ new Set();
@@ -3645,6 +3649,7 @@ function linksOnTheWay(path) {
       continue;
     }
     const next = join7(at, part);
+    if (next.length > MAX_PREVIEW_PATH_LENGTH) return passed;
     const target = hops < 40 ? readLink(next) : null;
     if (target === null) {
       at = next;
@@ -3660,26 +3665,51 @@ function linksOnTheWay(path) {
   return passed;
 }
 function recordPreviewRead(projectDir, filePath) {
+  if (filePath.length > MAX_PREVIEW_PATH_LENGTH) return;
   const key = projectKey(projectDir);
   let reads = readsByProject.get(key);
   if (!reads) readsByProject.set(key, reads = /* @__PURE__ */ new Set());
   const read = inRealProject(projectDir, filePath);
+  if (read.length > MAX_PREVIEW_PATH_LENGTH) return;
   for (const found of [read, ...linksOnTheWay(read)]) {
     for (let path = pathKey(found); !reads.has(path); path = dirname4(path)) reads.add(path);
   }
 }
 function recordPreviewReferences(projectDir, html) {
   const named = /* @__PURE__ */ new Set();
-  for (const match of html.matchAll(REFERENCE)) {
-    const url = (match[1] ?? match[2] ?? match[3] ?? match[4] ?? match[5] ?? "").trim();
-    if (!url || /^(?:[a-z][a-z0-9+.-]*:|[/#])/i.test(url)) continue;
+  const add = (reference) => {
+    const url = reference.trim();
+    if (!url || /^(?:[a-z][a-z0-9+.-]*:|[/#])/i.test(url)) return;
     const path = url.split(/[?#]/)[0] ?? "";
     let decoded = path;
     try {
       decoded = decodeURIComponent(path);
     } catch {
     }
-    if (decoded) named.add(decoded);
+    if (decoded && decoded.length <= MAX_PREVIEW_PATH_LENGTH) named.add(decoded);
+  };
+  const scan = (text2) => {
+    for (const match of text2.matchAll(REFERENCE)) {
+      add(match[1] ?? match[2] ?? match[3] ?? match[4] ?? match[5] ?? "");
+    }
+  };
+  const scanElement = (element) => {
+    for (const attribute of element.attributes) {
+      if (REFERENCE_ATTRIBUTE.test(attribute.name)) add(attribute.value);
+    }
+    const style = element.getAttribute("style");
+    if (style) scan(style);
+    if (element.localName === "style" || element.localName === "script") {
+      scan(element.textContent ?? "");
+    }
+  };
+  const { document } = parseHTML5(html);
+  for (const root of document.children) {
+    scanElement(root);
+    const elements = document.createTreeWalker(root, SHOW_ELEMENT);
+    for (let node = elements.nextNode(); node; node = elements.nextNode()) {
+      if (isElement(node)) scanElement(node);
+    }
   }
   for (const path of named) recordPreviewRead(projectDir, path);
 }
@@ -3717,7 +3747,7 @@ function injectPreviewVariables(html, values) {
 
 // src/helpers/lazyPreviewImages.ts
 import { findStartTags } from "@hyperframes/core/compiler/html-document";
-import { parseHTML as parseHTML5 } from "linkedom";
+import { parseHTML as parseHTML6 } from "linkedom";
 import { STUDIO_PREVIEW_LAZY_ATTR } from "@hyperframes/core/studio-preview-mark";
 function startsAfterZero(el) {
   for (let node = el; node; node = node.parentElement) {
@@ -3728,7 +3758,7 @@ function startsAfterZero(el) {
 var hasLoading = (img) => Array.from(img.attributes).some((attr) => attr.name.toLowerCase() === "loading");
 function lazyPreviewImages(html) {
   if (!/<!doctype|<html[\s>]/i.test(html)) return html;
-  const images = [...parseHTML5(html).document.querySelectorAll("img")];
+  const images = [...parseHTML6(html).document.querySelectorAll("img")];
   const tags = findStartTags(html, "img");
   if (tags.length !== images.length) return html;
   const parts = [];
@@ -3819,7 +3849,7 @@ function isGsapCoreUrl(src) {
   return URL.canParse(src, base) && /\/gsap(\.min)?\.js$/i.test(new URL(src, base).pathname);
 }
 function findGsapCoreScript(html) {
-  const scripts = [...parseHTML6(html).document.querySelectorAll("script")];
+  const scripts = [...parseHTML7(html).document.querySelectorAll("script")];
   const starts = findStartTags2(html, "script");
   if (starts.length !== scripts.length) return null;
   const at = scripts.findIndex(
@@ -6401,6 +6431,7 @@ export {
   HistoryBusyError,
   HistoryClosedError,
   HistoryIdError,
+  MAX_UPLOAD_BYTES,
   MAX_WINDOW_IDLE_MS,
   MIME_TYPES,
   PREVIEW_BUNDLE_OPTIONS,