@needle-tools/gltf-build-pipeline 3.0.0-beta → 3.0.0-beta.1.1b06064

package/CHANGELOG.md

@@ -4,6 +4,12 @@ All notable changes to this package will be documented in this file.
 The format is based on [Keep a Changelog](http://keepachangelog.com/en/1.0.0/)
 and this project adheres to [Semantic Versioning](http://semver.org/spec/v2.0.0.html).
 
+## [3.0.0-beta.1] - 2026-06-10
+
+### Fixed
+- VRM thumbnail (and other textures referenced only through an opaque extension) no longer dangle to the wrong image after prune/dedup re-indexing. When an image was deduped, an extension-carried `KHR_texture_basisu.source` was copied verbatim and left stale — the thumbnail's source could point past the end of the image array and crash three.js on load (`Cannot read properties of undefined (reading 'uri')`), while other affected textures silently resolved to a neighbouring image. Re-running the pipeline on an already-compressed VRM is now covered by tests.
+- Audio URIs now use forward slashes on every platform. On Windows the rewritten clip path was built with `path.join`, producing backslashes that loaders cannot resolve (only affected audio assets in a subfolder).
+
 ## [3.0.0-alpha] - 2026-05-26
 
 ### Breaking

package/dist/cli/index.js

@@ -689,7 +689,11 @@ var GenericWriter = class {
     }
     this.debug && console.log("Could not find texture, creating a new one: " + this._debugName);
     let extensions = this.inputDefinition.extensions ? { ...this.inputDefinition.extensions } : void 0;
-    extensions && (delete extensions[NEEDLE_progressive_texture_settings.EXTENSION_NAME], extensions.EXT_texture_exr && this.inputObject.getMimeType() !== "image/exr" && delete extensions.EXT_texture_exr, Object.keys(extensions).length === 0 && (extensions = void 0));
+    if (extensions && (delete extensions[NEEDLE_progressive_texture_settings.EXTENSION_NAME], extensions.EXT_texture_exr && this.inputObject.getMimeType() !== "image/exr" && delete extensions.EXT_texture_exr, Object.keys(extensions).length === 0 && (extensions = void 0)), extensions)
+      for (let key of Object.keys(extensions)) {
+        let extDef = extensions[key];
+        extDef?.source !== void 0 && (extensions[key] = { ...extDef, source: imgIndex });
+      }
     let textureDef = {
       source: extensions && Object.keys(extensions).some((key) => extensions[key]?.source !== void 0) ? void 0 : imgIndex,
       sampler: this.findOrCreateSampler(context.jsonDoc.json),
@@ -1190,7 +1194,7 @@ function registerExtensions(node) {
 import { createTransform } from "@gltf-transform/functions";
 
 // src/utils/version.gen.ts
-var version = "3.0.0-beta";
+var version = "3.0.0-beta.1.1b06064";
 
 // src/utils/version.ts
 function getVersion(_marklocal = !0) {
@@ -3600,7 +3604,7 @@ function needle_audio_transform(options) {
 }
 function computeOpusOggUri(sourceUri) {
   let dir = dirname6(sourceUri), ext = extname(sourceUri), newName = `${basename3(sourceUri, ext)}.opus.ogg`;
-  return dir === "." || dir === "" ? newName : join6(dir, newName);
+  return (dir === "." || dir === "" ? newName : `${dir}/${newName}`).replaceAll("\\", "/");
 }
 
 // src/scripts/pack-gltf.ts
@@ -3731,9 +3735,30 @@ async function calculateStats(inputfile, options) {
   return createNewFilestats(inputfile, document, json);
 }
 
+// src/utils/logfile.ts
+import { appendFileSync, existsSync as existsSync12, mkdirSync as mkdirSync8, renameSync, statSync as statSync6 } from "fs";
+import { join as join8 } from "path";
+import { homedir } from "os";
+var LOG_DIR = join8(homedir(), ".needle", "optimization-pipeline", "logs"), LOG_FILE = join8(LOG_DIR, "pipeline.log"), PREV_LOG_FILE = join8(LOG_DIR, "pipeline.prev.log"), MAX_LOG_BYTES = 1024 * 1024;
+function redactSecrets(message) {
+  return message.replace(/([a-z][a-z0-9+.-]*:\/\/)[^/@\s]+@/gi, "$1").replace(/\b[A-Za-z0-9_-]{8,}\.[A-Za-z0-9_-]{8,}\.[A-Za-z0-9_-]{8,}\b/g, "[REDACTED_JWT]").replace(/\bnc_[A-Za-z0-9_-]{6,}\b/g, "[REDACTED_TOKEN]");
+}
+function logToFile(message) {
+  try {
+    mkdirSync8(LOG_DIR, { recursive: !0 });
+    try {
+      existsSync12(LOG_FILE) && statSync6(LOG_FILE).size > MAX_LOG_BYTES && renameSync(LOG_FILE, PREV_LOG_FILE);
+    } catch {
+    }
+    appendFileSync(LOG_FILE, `[${(/* @__PURE__ */ new Date()).toISOString()}] ${redactSecrets(message)}
+`);
+  } catch {
+  }
+}
+
 // src/config/index.ts
 import { Logger as Logger3, Verbosity as Verbosity4 } from "@gltf-transform/core";
-import { existsSync as existsSync12, readFileSync as readFileSync9, statSync as statSync6 } from "fs";
+import { existsSync as existsSync13, readFileSync as readFileSync9, statSync as statSync7 } from "fs";
 import path6, { dirname as dirname7, resolve as resolve2 } from "path";
 var UsecaseOptions = ["product", "world"], defaultConfig = {
   usecase: "default"
@@ -3748,9 +3773,9 @@ function createConfig(usecase) {
 function getConfig(configPath, fallbackSearchDirectory, opts) {
   let logger = opts?.logger;
   if (logger || (logger = new Logger3(Verbosity4.WARN)), configPath != null) {
-    if (configPath = resolve2(process.cwd(), configPath), !existsSync12(configPath))
+    if (configPath = resolve2(process.cwd(), configPath), !existsSync13(configPath))
       throw new Error(`No config found at "${configPath}"`);
-    if (statSync6(configPath).isDirectory()) {
+    if (statSync7(configPath).isDirectory()) {
       let res2 = searchConfig(configPath, logger);
       if (res2)
         return res2;
@@ -3771,9 +3796,9 @@ function getConfig(configPath, fallbackSearchDirectory, opts) {
 }
 var _cachedConfig;
 function searchConfig(directory, logger) {
-  for (statSync6(directory).isFile() && (directory = dirname7(directory)), directory = directory.replaceAll("\\", "/"); directory.length > 0; ) {
+  for (statSync7(directory).isFile() && (directory = dirname7(directory)), directory = directory.replaceAll("\\", "/"); directory.length > 0; ) {
     let configPath = path6.join(directory, "needle.config.json");
-    if (existsSync12(configPath)) {
+    if (existsSync13(configPath)) {
       let content = readFileSync9(configPath, "utf8"), config = resolveConfig(configPath, content, logger);
       if (config)
         return config;
@@ -3805,7 +3830,7 @@ function resolveConfig(filename, content, logger) {
 }
 
 // src/cli/index.ts
-import { existsSync as existsSync14, readFileSync as readFileSync11, readdirSync as readdirSync3, statSync as statSync7, writeFileSync as writeFileSync7 } from "fs";
+import { existsSync as existsSync15, readFileSync as readFileSync11, readdirSync as readdirSync3, statSync as statSync8, writeFileSync as writeFileSync7 } from "fs";
 import path7, { basename as basename4, dirname as dirname8, resolve as resolve3 } from "path";
 
 // src/constants.ts
@@ -3922,9 +3947,9 @@ var PROD_KEYS = [
 var trusted = [...PROD_KEYS], TRUSTED_KEYS = trusted;
 
 // src/auth/verify.ts
-import { readFileSync as readFileSync10, existsSync as existsSync13 } from "fs";
-import { join as join8 } from "path";
-import { homedir } from "os";
+import { readFileSync as readFileSync10, existsSync as existsSync14 } from "fs";
+import { join as join9 } from "path";
+import { homedir as homedir2 } from "os";
 var AuthError = class extends Error {
   constructor(message) {
     super(message), this.name = "AuthError";
@@ -3932,29 +3957,32 @@ var AuthError = class extends Error {
 }, LOCAL_FETCH_TIMEOUT_MS = 2e3;
 function getLocalServerToken() {
   try {
-    let file = join8(homedir(), ".needle", "local-server-token");
-    if (!existsSync13(file)) return null;
+    let file = join9(homedir2(), ".needle", "local-server-token");
+    if (!existsSync14(file)) return null;
     let data = JSON.parse(readFileSync10(file, "utf-8"));
     return typeof data.token == "string" ? data.token : null;
-  } catch {
-    return null;
+  } catch (err) {
+    return logToFile(`[auth] failed reading local-server-token (${err instanceof Error ? err.name : "unknown error"})`), null;
   }
 }
 async function tryFetchLocalToken(org) {
+  let baseUrl = process.env.NEEDLE_LICENSE_SERVER_URL || "http://localhost:8424/api/license", safeServer = "local license server";
   try {
-    let baseUrl = process.env.NEEDLE_LICENSE_SERVER_URL || "http://localhost:8424/api/license", url = new URL(baseUrl);
-    org && url.searchParams.set("org", org);
+    let url = new URL(baseUrl);
+    org && url.searchParams.set("org", org), safeServer = `${url.origin}${url.pathname}`;
     let headers = {}, serverToken = getLocalServerToken();
     serverToken && (headers.Authorization = `Bearer ${serverToken}`);
     let res = await fetch(url, {
       signal: AbortSignal.timeout(LOCAL_FETCH_TIMEOUT_MS),
       headers
     });
-    if (!res.ok) return null;
+    if (!res.ok)
+      return logToFile(`[auth] license server (${safeServer}) returned HTTP ${res.status} ${res.statusText}${org ? ` \u2014 verify the --org value "${org}"` : ""}`), null;
     let jwt = (await res.json()).needle_license_jwt;
-    return typeof jwt == "string" && jwt.length > 0 ? jwt : null;
-  } catch {
-    return null;
+    return typeof jwt == "string" && jwt.length > 0 ? jwt : (logToFile(`[auth] license server (${safeServer}) responded without a license token${org ? ` for org "${org}"` : ""}`), null);
+  } catch (err) {
+    let msg = err instanceof Error ? err.message : String(err);
+    return logToFile(`[auth] could not reach license server (${safeServer})${org ? ` for org "${org}"` : ""}: ${msg}`), null;
   }
 }
 async function verifyWithKey(token, key) {
@@ -4019,7 +4047,7 @@ async function gateAuth(authToken, org, logger) {
     await requireAuth(authToken, typeof org == "string" ? org : void 0);
   } catch (err) {
     let message = err instanceof AuthError || err instanceof Error ? err.message : String(err);
-    logger.error(`[Needle Build Pipeline] Auth failed: ${message}`), process.exit(ERROR_CODES.AUTH_FAILED);
+    logger.error(`[Needle Build Pipeline] v${getVersion()} Auth failed: ${message}`), logToFile(`[Needle Build Pipeline] v${getVersion()} Auth failed: ${message}`), process.exit(ERROR_CODES.AUTH_FAILED);
   }
 }
 program.cast(!1);
@@ -4073,7 +4101,7 @@ When caching is enabled then previously processed files will be detected and loa
   }
   let set = /* @__PURE__ */ new Set(), useCache = options.cache !== !1, debug = options.debug === !0, verbose = options.verbose === !0;
   await foreachGLTF(inputPaths, async (file) => {
-    if (existsSync14(file)) {
+    if (existsSync15(file)) {
       if (file != input && options.progressive === !0 && isLOD(file)) {
         logger.debug(`\u2192 Ignore existing LOD file at ${file}`);
         return;
@@ -4089,12 +4117,12 @@ When caching is enabled then previously processed files will be detected and loa
       config
     }, file) : void 0;
     if (jobKey) {
-      let outputDir = output ? existsSync14(output) && isDirectory(output) ? output : dirname8(output) : dirname8(file), restored = tryRestoreJobResult(jobKey, outputDir, logger);
+      let outputDir = output ? existsSync15(output) && isDirectory(output) ? output : dirname8(output) : dirname8(file), restored = tryRestoreJobResult(jobKey, outputDir, logger);
       if (restored) {
-        let inputFileSize = statSync7(file).size / 1024 / 1024;
+        let inputFileSize = statSync8(file).size / 1024 / 1024;
         for (let f of restored)
           if (set.add(f), stats) {
-            let sizeInMB = statSync7(f).size / 1024 / 1024;
+            let sizeInMB = statSync8(f).size / 1024 / 1024;
             stats.totalFilesProcessed++, stats.totalFileSizeInMB += sizeInMB, stats.totalFileSizeInMBBefore += inputFileSize;
           }
         logger.info(`\u2192 [CACHE] Restored ${restored.length} file(s) for job ${jobKey}`);
@@ -4165,7 +4193,7 @@ raw .exr / .hdr inputs.
 `).argument("<input>", "Path to a .exr/.hdr file OR a directory containing .exr/.hdr files (recursive)", { validator: program.STRING }).argument("<output>", "Output file (when input is a single .exr/.hdr) or output directory. Defaults to writing next to the input file.", { default: "", validator: program.STRING }).option("--cache", 'Use "--cache False" to disable caching.', { validator: program.BOOLEAN, default: !0 }).option("--debug", 'Enable verbose output with "--debug True"', { validator: program.BOOLEAN, default: !1 }).option("--verbose", 'Enable verbose output with "--verbose True"', { validator: program.BOOLEAN, default: !1 }).option("--auth-token <jwt>", "Required. A JWT minted by needle-cloud (alternatively set NEEDLE_CLOUD_TOKEN). Note: an `nc_*` needle-cloud access token is NOT a JWT and will be rejected.", { validator: program.STRING }).option("--org <org>", "Organization ID for local license-server fallback (or set NEEDLE_CLOUD_ORG).", { validator: program.STRING }).hide().action(async ({ logger, args, options }) => {
   warnUnknownOptions(options, logger), await gateAuth(options.authToken, options.org, logger), logger.level = options.debug || options.verbose ? "debug" : "info", await ensureHashReady();
   let input = args.input.toString();
-  existsSync14(input) || (logger.error(`Input does not exist: ${input}`), process.exit(ERROR_CODES.INVALID_ARGS));
+  existsSync15(input) || (logger.error(`Input does not exist: ${input}`), process.exit(ERROR_CODES.INVALID_ARGS));
   let inputFiles = [], inputIsDirectory = isDirectory(input);
   if (inputIsDirectory ? collectPmremInputFiles(input, inputFiles) : isPmremInputFile(input) ? inputFiles.push(input) : (logger.error(`Input is not an .exr/.hdr file or directory: ${input}`), process.exit(ERROR_CODES.INVALID_ARGS)), inputFiles.length === 0) {
     logger.warn(`No .exr/.hdr files found in ${input}`);
@@ -4204,7 +4232,7 @@ function collectPmremInputFiles(dir, out) {
   for (let entry of readdirSync3(dir)) {
     if (entry === "node_modules" || entry.startsWith(".")) continue;
     let full = path7.join(dir, entry);
-    statSync7(full).isDirectory() ? collectPmremInputFiles(full, out) : isPmremInputFile(entry) && out.push(full);
+    statSync8(full).isDirectory() ? collectPmremInputFiles(full, out) : isPmremInputFile(entry) && out.push(full);
   }
 }
 function resolvePmremOutputPath(srcPath, input, inputIsDirectory, outputArg) {
@@ -4215,7 +4243,7 @@ function resolvePmremOutputPath(srcPath, input, inputIsDirectory, outputArg) {
     let rel = path7.relative(input, srcPath), relDir = dirname8(rel), outDir = relDir === "." ? outputArg : path7.join(outputArg, relDir);
     return ensureIsDirectory(outDir), path7.join(outDir, outName);
   }
-  return existsSync14(outputArg) && isDirectory(outputArg) ? path7.join(outputArg, outName) : outputArg.toLowerCase().endsWith(".ktx2") ? (ensureIsDirectory(dirname8(outputArg)), outputArg) : (ensureIsDirectory(outputArg), path7.join(outputArg, outName));
+  return existsSync15(outputArg) && isDirectory(outputArg) ? path7.join(outputArg, outName) : outputArg.toLowerCase().endsWith(".ktx2") ? (ensureIsDirectory(dirname8(outputArg)), outputArg) : (ensureIsDirectory(outputArg), path7.join(outputArg, outName));
 }
 program.run().catch((err) => {
   if (!(err.message.includes("Unknown command") && !err.message.includes("Did you mean")))

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@needle-tools/gltf-build-pipeline",
-  "version": "3.0.0-beta",
+  "version": "3.0.0-beta.1.1b06064",
   "description": "Pipeline and tools for optimizing gltf files using gltf-transform and compression settings within glTF extensions",
   "type": "module",
   "exports": {