@nodaro/shared 2.27.0 → 3.1.0

package/src/scene3d-authoring-engine.ts

@@ -0,0 +1,215 @@
+/**
+ * WHICH authoring lane a Generate/Edit 3D Scene run goes down.
+ *
+ * There are two, and they are not interchangeable. Basic is the v1 LLM
+ * authoring path the platform has always had; Advanced is the installed
+ * private engine (`blender-cloud` / `blender-local`) that authors and edits
+ * schema-v2 scenes. The wire difference is one field — an `engine` on the body
+ * makes `POST /v1/3d-scene/{generate,edit}` hand the request to the private
+ * engine instead of the Basic guard.
+ *
+ * Deciding that is NOT a per-surface choice. The canvas executor and the
+ * headless orchestrator run the same nodes, and a node that means "Advanced"
+ * in the browser and "Basic" in a scheduled run is a scene authored by a
+ * different engine depending on who pressed Run. So the decision lives here,
+ * once, and both callers spread the SAME `fields` onto their request body.
+ *
+ * Three refusals, each of which used to be a silent wrong answer:
+ *
+ *  - a **v2 plan on the Basic lane** is refused, never downgraded. Basic parses
+ *    `scene3DPlanV1Schema`, so a v2 scene reaches it as a wall of Zod issues
+ *    (the "Pro composition → Edit 3D Scene 400s" report) — and if it ever did
+ *    parse, it would author from a scene it cannot represent.
+ *  - an **explicitly requested engine this install does not have** is refused
+ *    rather than quietly becoming Basic. Falling back would charge the user for
+ *    a different pipeline than the one they picked.
+ *  - an **unknown engine name** is refused before anything is spent.
+ */
+import {
+  SCENE3D_SCHEMA_VERSION,
+} from "./scene3d.js"
+import {
+  SCENE3D_SCHEMA_VERSION_V2,
+  SCENE3D_SUPPORTED_SCHEMA_VERSIONS,
+  SCENE3D_V2_ENGINES,
+  type Scene3DKnownEngine,
+} from "./scene3d-v2.js"
+import { isKnownScene3DEngine, scene3DPlanSchemaVersion } from "./scene3d-v2-plan.js"
+
+/** The value that names the Basic lane explicitly. Absent means the same. */
+export const SCENE3D_BASIC_ENGINE = "basic"
+
+/** Everything a caller may put in `engine` on a Generate/Edit request. */
+export const SCENE3D_AUTHORING_ENGINES = [SCENE3D_BASIC_ENGINE, ...SCENE3D_V2_ENGINES] as const
+export type Scene3DAuthoringEngine = (typeof SCENE3D_AUTHORING_ENGINES)[number]
+
+/**
+ * The engine an Advanced run picks when nothing else names one.
+ *
+ * Hosted cloud, because that is the contract's default lane; `blender-local`
+ * is never inferred — it needs a paired desktop and its own deployment flag,
+ * so it is only ever used when it was explicitly asked for or when the scene
+ * under edit was authored by it and this install still offers it.
+ */
+export const SCENE3D_DEFAULT_ADVANCED_ENGINE: Scene3DKnownEngine = "blender-cloud"
+
+export function isScene3DAuthoringEngine(value: unknown): value is Scene3DAuthoringEngine {
+  return typeof value === "string" && (SCENE3D_AUTHORING_ENGINES as readonly string[]).includes(value)
+}
+
+export interface Scene3DEngineChoiceInput {
+  /** The node's/caller's explicit selection. `undefined` = "not chosen". */
+  requested?: string | null
+  /**
+   * The plan the run edits, for an edit. Omit for generate.
+   *
+   * The raw plan rather than a version number on purpose: the caller already
+   * holds it, and reading the version here is the ONE place the "v2 never goes
+   * to Basic" rule can be enforced for every surface at once.
+   */
+  plan?: unknown
+  /**
+   * Advanced engines this install can actually serve, from
+   * `GET /v1/3d-scene/capabilities`.
+   *
+   * `undefined` means NOT KNOWN (the headless orchestrator never asks, and the
+   * browser has not had the answer back yet) — which is different from "none".
+   * Unknown proceeds and lets the route refuse honestly with
+   * `SCENE_CAPABILITY_UNAVAILABLE`; a known-empty list refuses here, before a
+   * request that cannot succeed is sent.
+   */
+  availableEngines?: readonly string[] | undefined
+}
+
+/** The extra body fields an Advanced request carries. Empty on Basic, so the
+ *  Basic request stays byte-identical to what it has always been. */
+export interface Scene3DEngineRequestFields {
+  engine?: Scene3DKnownEngine
+  /**
+   * Which scene schema versions the CALLER can read back.
+   *
+   * Contract §5: an advanced authoring request declares this so the engine
+   * never answers with a revision the caller cannot render. Both of our
+   * surfaces read v1 and v2, so both send the same list.
+   */
+  acceptedSceneSchemaVersions?: number[]
+}
+
+export type Scene3DEngineChoiceRefusalCode =
+  /** The name is not an engine this contract knows. */
+  | "unknown_engine"
+  /** Explicitly asked for an engine this install does not serve. */
+  | "engine_unavailable"
+  /** A v2 scene was pointed at the Basic lane. */
+  | "schema_requires_advanced"
+  /** The scene claims a version nothing here can author against. */
+  | "unsupported_schema_version"
+  /** v2 scene, and no Advanced engine installed at all. */
+  | "advanced_unavailable"
+
+export type Scene3DEngineChoice =
+  | { ok: true; lane: "basic"; engine: undefined; fields: Scene3DEngineRequestFields }
+  | { ok: true; lane: "advanced"; engine: Scene3DKnownEngine; fields: Scene3DEngineRequestFields }
+  | { ok: false; code: Scene3DEngineChoiceRefusalCode; message: string }
+
+function advancedFields(engine: Scene3DKnownEngine): Scene3DEngineRequestFields {
+  return { engine, acceptedSceneSchemaVersions: [...SCENE3D_SUPPORTED_SCHEMA_VERSIONS] }
+}
+
+/** `undefined` (unknown) is permissive; a known list is authoritative. */
+function serves(available: readonly string[] | undefined, engine: string): boolean {
+  return available === undefined || available.includes(engine)
+}
+
+/** The engine recorded on a v2 plan's provenance, when it is one we know. */
+function planAuthoringEngine(plan: unknown): Scene3DKnownEngine | undefined {
+  const provenance = (plan as { provenance?: { engine?: unknown } } | null | undefined)?.provenance
+  const engine = provenance?.engine
+  return typeof engine === "string" && isKnownScene3DEngine(engine) ? engine : undefined
+}
+
+/**
+ * Resolve the lane, or refuse with a sentence the user can act on.
+ *
+ * Pure and synchronous: every caller already holds the three inputs, and the
+ * answer must be identical on the canvas and in the orchestrator.
+ */
+export function resolveScene3DAuthoringEngine(input: Scene3DEngineChoiceInput): Scene3DEngineChoice {
+  const requested = typeof input.requested === "string" && input.requested.trim() !== ""
+    ? input.requested.trim()
+    : undefined
+  if (requested !== undefined && !isScene3DAuthoringEngine(requested)) {
+    return {
+      ok: false,
+      code: "unknown_engine",
+      message: `"${requested}" is not a 3D authoring engine — choose Basic, or an advanced engine this install offers.`,
+    }
+  }
+
+  // `plan` absent = generate. `null` version = not a Scene3D plan at all, which
+  // is the caller's own error to report (they need the plan for other reasons
+  // too); this resolver only speaks to versions it can read.
+  const version = input.plan === undefined ? undefined : scene3DPlanSchemaVersion(input.plan)
+  if (version !== undefined && version !== null && !(SCENE3D_SUPPORTED_SCHEMA_VERSIONS as readonly number[]).includes(version)) {
+    return {
+      ok: false,
+      code: "unsupported_schema_version",
+      message: `This scene uses schema version ${version}, which this version of Nodaro cannot edit.`,
+    }
+  }
+  const isV2 = version === SCENE3D_SCHEMA_VERSION_V2
+
+  if (isV2) {
+    if (requested === SCENE3D_BASIC_ENGINE) {
+      return {
+        ok: false,
+        code: "schema_requires_advanced",
+        message:
+          "This scene was authored by an advanced engine (schema v2) and cannot be edited on the Basic engine — switch this node's engine to the advanced one.",
+      }
+    }
+    // An EXPLICIT choice is never silently swapped for another engine — it is
+    // refused, exactly like an explicit unavailable engine on a v1 scene.
+    if (requested !== undefined) {
+      return serves(input.availableEngines, requested)
+        ? { ok: true, lane: "advanced", engine: requested, fields: advancedFields(requested) }
+        : unavailable(requested)
+    }
+    // Nothing was picked. Preference order: the engine that AUTHORED the scene
+    // (an edit stays on its own engine unless told otherwise), then the hosted
+    // default.
+    const preferred: Scene3DKnownEngine[] = []
+    const authored = planAuthoringEngine(input.plan)
+    if (authored) preferred.push(authored)
+    if (!preferred.includes(SCENE3D_DEFAULT_ADVANCED_ENGINE)) preferred.push(SCENE3D_DEFAULT_ADVANCED_ENGINE)
+    const engine = preferred.find((candidate) => serves(input.availableEngines, candidate))
+    if (!engine) {
+      return {
+        ok: false,
+        code: "advanced_unavailable",
+        message:
+          "This scene needs an advanced 3D engine to edit, and this install does not have one available.",
+      }
+    }
+    return { ok: true, lane: "advanced", engine, fields: advancedFields(engine) }
+  }
+
+  // v1, or a generate with no plan at all.
+  if (requested === undefined || requested === SCENE3D_BASIC_ENGINE) {
+    return { ok: true, lane: "basic", engine: undefined, fields: {} }
+  }
+  const engine = requested as Scene3DKnownEngine
+  if (!serves(input.availableEngines, engine)) return unavailable(engine)
+  return { ok: true, lane: "advanced", engine, fields: advancedFields(engine) }
+}
+
+function unavailable(engine: string): Scene3DEngineChoice {
+  return {
+    ok: false,
+    code: "engine_unavailable",
+    message: `The "${engine}" 3D authoring engine is not available on this install.`,
+  }
+}
+
+/** v1's version constant, re-exported for callers narrowing a plan by hand. */
+export const SCENE3D_BASIC_SCHEMA_VERSION = SCENE3D_SCHEMA_VERSION

package/src/scene3d-camera-track.ts

@@ -0,0 +1,369 @@
+/**
+ * The Scene3D v2 camera sidecar — one baked sample per frame.
+ *
+ * A 30-second scene is 720 camera samples. V1's 240-keyframe interpolated track
+ * cannot carry that, and interpolating a sparse track across a hard cut blends
+ * two shots into a frame that belongs to neither. So v2 moves the camera out of
+ * the manifest into this dense JSON asset, and the rule becomes trivial:
+ *
+ *   **at integer frame `f`, use `samples[f]`.**
+ *
+ * No interpolation, no easing, no "nearest key". Pausing, scrubbing backwards
+ * and rendering frames out of order therefore produce identical state, which is
+ * the whole reason preview and export can be trusted to agree.
+ *
+ * Two things this format refuses to guess at:
+ *
+ * - **Orientation is a quaternion, not a look-at.** A renderer that replaces the
+ *   exported quaternion with `lookAt(target)` throws away the authored roll and
+ *   the handheld component. `target` is carried for inspection and intent only.
+ * - **Projection is a matrix, not a lens number.** A focal length cannot express
+ *   sensor fit or lens shift, and re-deriving a projection at a different aspect
+ *   silently reframes every shot. `focalLengthMm` is metadata; the 16-element
+ *   column-major matrix is authoritative.
+ *
+ * Changing fps or aspect ratio is an explicit resample/reprojection producing a
+ * NEW revision — never a render-time override. `scene3DCameraTrackPlanIssues`
+ * is what makes that non-negotiable.
+ */
+import { z } from "zod"
+import {
+  SCENE3D_V2_LIMITS,
+  scene3DJsonByteLength,
+  scene3DZodIssues,
+  type Scene3DParseResult,
+  type Scene3DPlanV2,
+} from "./scene3d-v2.js"
+import { SCENE3D_LIMITS, type Scene3DSemanticIssue, type Vec3 } from "./scene3d.js"
+
+export const SCENE3D_CAMERA_TRACK_FORMAT = "scene3d-camera-track"
+export const SCENE3D_CAMERA_TRACK_VERSION = 1
+
+export const SCENE3D_CAMERA_TRACK_LIMITS = {
+  maxJsonBytes: SCENE3D_V2_LIMITS.maxCameraTrackBytes,
+  maxFrameCount: SCENE3D_V2_LIMITS.maxDurationInFrames,
+  minFps: SCENE3D_V2_LIMITS.minFps,
+  maxFps: SCENE3D_V2_LIMITS.maxFps,
+  /** A unit quaternion off by more than this is a bug, not float noise. */
+  quaternionTolerance: 1e-4,
+  /** Absolute tolerance on the projection entries that must be exactly zero
+   *  (or exactly ∓1) in a perspective matrix. */
+  projectionEpsilon: 1e-6,
+  /** Relative tolerance when comparing declared near/far against the values the
+   *  projection matrix implies. */
+  nearFarRelativeTolerance: 1e-3,
+  /** Relative tolerance on `m[0]/m[5]` vs the manifest's `height/width`. */
+  aspectRelativeTolerance: 1e-3,
+  minNear: 1e-4,
+  maxFar: 1e7,
+} as const
+
+export interface Scene3DCameraSample {
+  position: Vec3
+  /** `[x, y, z, w]` — that order, normalized. */
+  quaternion: [number, number, number, number]
+  /** Exactly 16 entries, COLUMN-MAJOR (Three.js `Matrix4.elements` order). */
+  projectionMatrix: number[]
+  near: number
+  far: number
+  /** Authoring intent, for inspection and validation reporting. A renderer must
+   *  never feed this back through `lookAt()`. */
+  target?: Vec3
+  /** Metadata only; the projection matrix wins. */
+  focalLengthMm?: number
+}
+
+export interface Scene3DCameraTrackV1 {
+  format: typeof SCENE3D_CAMERA_TRACK_FORMAT
+  version: typeof SCENE3D_CAMERA_TRACK_VERSION
+  /** Always 0: public frames are zero-based, and the exporter has already
+   *  subtracted the authoring package's start frame. */
+  frameStart: 0
+  frameCount: number
+  fps: number
+  samples: Scene3DCameraSample[]
+}
+
+const coordinate = z.number().min(-SCENE3D_LIMITS.maxCoordinate).max(SCENE3D_LIMITS.maxCoordinate)
+const positionSchema = z.tuple([coordinate, coordinate, coordinate])
+
+export const scene3DCameraSampleSchema = z
+  .object({
+    position: positionSchema,
+    quaternion: z.tuple([z.number(), z.number(), z.number(), z.number()]),
+    projectionMatrix: z.array(z.number()).length(16),
+    near: z.number().min(SCENE3D_CAMERA_TRACK_LIMITS.minNear).max(SCENE3D_CAMERA_TRACK_LIMITS.maxFar),
+    far: z.number().min(SCENE3D_CAMERA_TRACK_LIMITS.minNear).max(SCENE3D_CAMERA_TRACK_LIMITS.maxFar),
+    target: positionSchema.optional(),
+    focalLengthMm: z
+      .number()
+      .min(SCENE3D_LIMITS.minFocalLengthMm)
+      .max(SCENE3D_LIMITS.maxFocalLengthMm)
+      .optional(),
+  })
+  .strict()
+
+/** Structure only; `scene3DCameraTrackIssues` carries the numeric rules. */
+export const scene3DCameraTrackObjectSchema = z
+  .object({
+    format: z.literal(SCENE3D_CAMERA_TRACK_FORMAT),
+    version: z.literal(SCENE3D_CAMERA_TRACK_VERSION),
+    frameStart: z.literal(0),
+    frameCount: z.number().int().min(1).max(SCENE3D_CAMERA_TRACK_LIMITS.maxFrameCount),
+    fps: z.number().int().min(SCENE3D_CAMERA_TRACK_LIMITS.minFps).max(SCENE3D_CAMERA_TRACK_LIMITS.maxFps),
+    samples: z.array(scene3DCameraSampleSchema).min(1).max(SCENE3D_CAMERA_TRACK_LIMITS.maxFrameCount),
+  })
+  .strict()
+
+type Issue = Scene3DSemanticIssue
+
+/**
+ * Is this a real PERSPECTIVE projection, and does it agree with the declared
+ * near/far?
+ *
+ * Column-major layout produced by every Three.js/glTF perspective camera:
+ *
+ * ```text
+ *   m0   0   m8   0
+ *    0  m5   m9   0
+ *    0   0  m10  m14
+ *    0   0   -1   0
+ * ```
+ *
+ * `m8`/`m9` carry lens shift and are free. Everything else is pinned. Inverting
+ * the two depth terms recovers `near = m14 / (m10 - 1)` and
+ * `far = m14 / (m10 + 1)`, which is how a matrix that quietly disagrees with its
+ * own declared clip planes gets caught.
+ *
+ * Exported because the builder validates its export with the same function the
+ * renderer admits it with.
+ */
+export function scene3DProjectionIssues(
+  matrix: readonly number[],
+  near: number,
+  far: number,
+  path: (string | number)[],
+): Issue[] {
+  const issues: Issue[] = []
+  const eps = SCENE3D_CAMERA_TRACK_LIMITS.projectionEpsilon
+
+  if (matrix.length !== 16) {
+    issues.push({ path, message: `projection matrix must have exactly 16 entries (got ${matrix.length})` })
+    return issues
+  }
+  if (matrix.some((value) => !Number.isFinite(value))) {
+    issues.push({ path, message: "projection matrix contains a non-finite entry" })
+    return issues
+  }
+
+  // Orthographic is a future explicit capability. Name it, so it is never
+  // mis-read as a broken perspective matrix.
+  if (Math.abs(matrix[11]) < eps && Math.abs(matrix[15] - 1) < eps) {
+    issues.push({
+      path,
+      message: "projection matrix is orthographic; only perspective cameras are supported by this schema version",
+    })
+    return issues
+  }
+
+  for (const index of [1, 2, 3, 4, 6, 7, 12, 13, 15]) {
+    if (Math.abs(matrix[index]) > eps) {
+      issues.push({ path: [...path, index], message: `projection matrix entry ${index} must be 0 (got ${matrix[index]})` })
+    }
+  }
+  if (Math.abs(matrix[11] + 1) > eps) {
+    issues.push({ path: [...path, 11], message: `projection matrix entry 11 must be -1 for a perspective camera (got ${matrix[11]})` })
+  }
+  if (!(matrix[0] > 0)) {
+    issues.push({ path: [...path, 0], message: `projection matrix entry 0 must be positive (got ${matrix[0]})` })
+  }
+  if (!(matrix[5] > 0)) {
+    issues.push({ path: [...path, 5], message: `projection matrix entry 5 must be positive (got ${matrix[5]})` })
+  }
+  if (!(matrix[10] < 0)) {
+    issues.push({ path: [...path, 10], message: `projection matrix entry 10 must be negative (got ${matrix[10]})` })
+  }
+  if (!(matrix[14] < 0)) {
+    issues.push({ path: [...path, 14], message: `projection matrix entry 14 must be negative (got ${matrix[14]})` })
+  }
+  if (issues.length > 0) return issues
+
+  if (!(near > 0) || !(far > near)) {
+    issues.push({ path, message: `near/far must satisfy 0 < near < far (got near ${near}, far ${far})` })
+    return issues
+  }
+
+  const tolerance = SCENE3D_CAMERA_TRACK_LIMITS.nearFarRelativeTolerance
+  const impliedNear = matrix[14] / (matrix[10] - 1)
+  if (Math.abs(impliedNear - near) > Math.abs(near) * tolerance) {
+    issues.push({
+      path,
+      message: `projection matrix implies near ${impliedNear.toPrecision(6)}, but the sample declares ${near}`,
+    })
+  }
+  const farDenominator = matrix[10] + 1
+  if (Math.abs(farDenominator) < eps) {
+    issues.push({
+      path,
+      message: `projection matrix implies an infinite far plane, but the sample declares ${far}`,
+    })
+  } else {
+    const impliedFar = matrix[14] / farDenominator
+    if (Math.abs(impliedFar - far) > Math.abs(far) * tolerance) {
+      issues.push({
+        path,
+        message: `projection matrix implies far ${impliedFar.toPrecision(6)}, but the sample declares ${far}`,
+      })
+    }
+  }
+
+  return issues
+}
+
+/**
+ * The numeric rules the schema cannot express: exact sample count, normalized
+ * quaternions, and a real perspective projection on every frame.
+ *
+ * Split out of the schema (as v1 does) so a caller holding a parsed track can
+ * re-check it, and so the per-sample walk stays one readable loop over up to
+ * 3,600 samples.
+ */
+export function scene3DCameraTrackIssues(track: Scene3DCameraTrackV1): Issue[] {
+  const issues: Issue[] = []
+
+  if (track.samples.length !== track.frameCount) {
+    issues.push({
+      path: ["samples"],
+      message: `track declares ${track.frameCount} frames but carries ${track.samples.length} samples; exactly one sample per frame is required`,
+    })
+  }
+
+  const quaternionTolerance = SCENE3D_CAMERA_TRACK_LIMITS.quaternionTolerance
+  track.samples.forEach((sample, index) => {
+    const [x, y, z, w] = sample.quaternion
+    const norm = Math.sqrt(x * x + y * y + z * z + w * w)
+    if (Math.abs(norm - 1) > quaternionTolerance) {
+      issues.push({
+        path: ["samples", index, "quaternion"],
+        message: `quaternion at frame ${index} has length ${norm.toPrecision(6)}; it must be normalized`,
+      })
+    }
+    if (!(sample.far > sample.near)) {
+      issues.push({
+        path: ["samples", index, "far"],
+        message: `frame ${index}: far (${sample.far}) must be greater than near (${sample.near})`,
+      })
+    }
+    for (const issue of scene3DProjectionIssues(
+      sample.projectionMatrix,
+      sample.near,
+      sample.far,
+      ["samples", index, "projectionMatrix"],
+    )) {
+      issues.push(issue)
+    }
+  })
+
+  return issues
+}
+
+/** THE camera-track validator: structure, then the numeric rules. */
+export const scene3DCameraTrackSchema = scene3DCameraTrackObjectSchema.superRefine((track, ctx) => {
+  for (const issue of scene3DCameraTrackIssues(track as Scene3DCameraTrackV1)) {
+    ctx.addIssue({ code: "custom", path: issue.path, message: issue.message })
+  }
+})
+
+export function isScene3DCameraTrack(value: unknown): value is Scene3DCameraTrackV1 {
+  return scene3DCameraTrackSchema.safeParse(value).success
+}
+
+/**
+ * Track ↔ manifest agreement. A track that is valid on its own can still be the
+ * WRONG track for this scene: a different fps, a different length, or a
+ * projection baked for another aspect ratio. Each of those silently reframes or
+ * retimes every shot, so each is an error here rather than a render-time
+ * surprise.
+ */
+export function scene3DCameraTrackPlanIssues(
+  track: Scene3DCameraTrackV1,
+  plan: Pick<Scene3DPlanV2, "fps" | "durationInFrames" | "width" | "height">,
+): Issue[] {
+  const issues: Issue[] = []
+
+  if (track.fps !== plan.fps) {
+    issues.push({
+      path: ["fps"],
+      message: `camera track is ${track.fps} fps but the scene is ${plan.fps} fps; changing fps requires an explicit resample and a new revision`,
+    })
+  }
+  if (track.frameCount !== plan.durationInFrames) {
+    issues.push({
+      path: ["frameCount"],
+      message: `camera track covers ${track.frameCount} frames but the scene is ${plan.durationInFrames} frames`,
+    })
+  }
+
+  // m[0]/m[5] === (t-b)/(r-l) === height/width for any perspective matrix,
+  // including a shifted one (shift moves m[8]/m[9], not the frustum extents).
+  const expected = plan.height / plan.width
+  const tolerance = SCENE3D_CAMERA_TRACK_LIMITS.aspectRelativeTolerance
+  track.samples.forEach((sample, index) => {
+    const m0 = sample.projectionMatrix[0]
+    const m5 = sample.projectionMatrix[5]
+    if (!Number.isFinite(m0) || !Number.isFinite(m5) || m5 === 0) return
+    const actual = m0 / m5
+    if (Math.abs(actual - expected) > expected * tolerance) {
+      issues.push({
+        path: ["samples", index, "projectionMatrix"],
+        message: `frame ${index}: projection is baked for aspect ${(1 / actual).toPrecision(6)} but the scene renders ${plan.width}×${plan.height}; reprojection requires a new revision`,
+      })
+    }
+  })
+
+  return issues
+}
+
+/**
+ * The sample for an integer frame. `undefined` outside `[0, frameCount)` — a
+ * caller must fail rather than clamp, because a clamped frame is a wrong frame
+ * that looks plausible.
+ */
+export function scene3DSampleForFrame(
+  track: Scene3DCameraTrackV1,
+  frame: number,
+): Scene3DCameraSample | undefined {
+  if (!Number.isInteger(frame) || frame < 0 || frame >= track.frameCount) return undefined
+  return track.samples[frame]
+}
+
+/**
+ * Size-gate, then parse, then validate. This is the admission path for a
+ * downloaded camera track: an 80 MiB "8 MiB" track is refused before
+ * `JSON.parse` gets a chance to allocate it.
+ */
+export function parseScene3DCameraTrackJson(text: string): Scene3DParseResult<Scene3DCameraTrackV1> {
+  const bytes = scene3DJsonByteLength(text)
+  if (bytes > SCENE3D_CAMERA_TRACK_LIMITS.maxJsonBytes) {
+    return {
+      ok: false,
+      issues: [
+        {
+          path: [],
+          message: `camera track is ${bytes} bytes; the limit is ${SCENE3D_CAMERA_TRACK_LIMITS.maxJsonBytes}`,
+        },
+      ],
+    }
+  }
+  let decoded: unknown
+  try {
+    decoded = JSON.parse(text)
+  } catch {
+    return { ok: false, issues: [{ path: [], message: "camera track is not valid JSON" }] }
+  }
+  const parsed = scene3DCameraTrackSchema.safeParse(decoded)
+  if (!parsed.success) {
+    return { ok: false, issues: scene3DZodIssues(parsed.error) }
+  }
+  return { ok: true, value: parsed.data as Scene3DCameraTrackV1 }
+}

package/src/scene3d-edit.ts

@@ -22,12 +22,12 @@ import {
   scene3DIdSchema,
   scene3DObjectKeyframeSchema,
   scene3DObjectSchema,
-  scene3DPlanSchema,
+  scene3DPlanV1Schema,
   scene3DPrimitiveSchema,
   sizeVec3Schema,
   vec3Schema,
   type Scene3DObject,
-  type Scene3DPlan,
+  type Scene3DPlanV1,
 } from "./scene3d.js"
 
 
@@ -119,14 +119,14 @@ export interface Scene3DEditOptions {
 }
 
 export type Scene3DEditResult =
-  | { ok: true; plan: Scene3DPlan; changedObjectIds: string[]; changeSummary: string }
+  | { ok: true; plan: Scene3DPlanV1; changedObjectIds: string[]; changeSummary: string }
   | { ok: false; code: Scene3DEditErrorCode; message: string; operationIndex?: number }
 
 /** Structural clone that cannot share a reference with its input. `structured-
  *  Clone` is not available in every consumer runtime we ship to, and a plan is
  *  pure JSON by construction. */
-function clonePlan(plan: Scene3DPlan): Scene3DPlan {
-  return JSON.parse(JSON.stringify(plan)) as Scene3DPlan
+function clonePlan(plan: Scene3DPlanV1): Scene3DPlanV1 {
+  return JSON.parse(JSON.stringify(plan)) as Scene3DPlanV1
 }
 
 /** One human sentence per operation — the deterministic lane's answer to the
@@ -183,15 +183,15 @@ function firstIssueMessage(error: z.ZodError): string {
  *    at.
  */
 export function applyScene3DEditOperations(
-  plan: Scene3DPlan,
+  plan: Scene3DPlanV1,
   operations: readonly Scene3DEditOperation[] | unknown,
   options: Scene3DEditOptions = {},
 ): Scene3DEditResult {
-  const parsedPlan = scene3DPlanSchema.safeParse(plan)
+  const parsedPlan = scene3DPlanV1Schema.safeParse(plan)
   if (!parsedPlan.success) {
     return { ok: false, code: "invalid_plan", message: `scenePlan is invalid — ${firstIssueMessage(parsedPlan.error)}` }
   }
-  const source = parsedPlan.data as Scene3DPlan
+  const source = parsedPlan.data as Scene3DPlanV1
 
   if (options.expectedRevisionId !== undefined && options.expectedRevisionId !== source.revisionId) {
     return {
@@ -293,7 +293,7 @@ export function applyScene3DEditOperations(
   next.parentRevisionId = source.revisionId
   next.revisionId = options.revisionId ?? newScene3DRevisionId()
 
-  const validated = scene3DPlanSchema.safeParse(next)
+  const validated = scene3DPlanV1Schema.safeParse(next)
   if (!validated.success) {
     return {
       ok: false,
@@ -304,7 +304,7 @@ export function applyScene3DEditOperations(
 
   return {
     ok: true,
-    plan: validated.data as Scene3DPlan,
+    plan: validated.data as Scene3DPlanV1,
     changedObjectIds: [...changed],
     changeSummary: summarizeScene3DOperations(ops),
   }