@osmo.inc/cli 0.1.15 → 0.1.17

package/package.json

@@ -1,13 +1,13 @@
 {
   "name": "@osmo.inc/cli",
-  "version": "0.1.15",
+  "version": "0.1.17",
   "private": false,
   "publishConfig": {
     "access": "public",
     "tag": "latest",
     "registry": "https://registry.npmjs.org/"
   },
-  "description": "Local Osmo Studio: native rendering, browser preview, and timeline feedback",
+  "description": "Share videos. Collect feedback.",
   "type": "module",
   "bin": {
     "osmo": "bin/osmo.mjs"
@@ -26,8 +26,7 @@
     "LICENSE",
     "THIRD_PARTY_NOTICES.md",
     "third-party",
-    "release.json",
-    "RELEASE.md"
+    "release.json"
   ],
   "engines": {
     "node": ">=22 <23"

package/release.json

@@ -1,10 +1,10 @@
 {
-  "version": "0.1.15",
+  "version": "0.1.17",
   "platform": "darwin-arm64",
   "channel": "latest",
   "defaultCloudOrigin": "https://studio.osmo.inc",
-  "sourceCommit": "0bb14b4541e8e9955714ce24cdbac68869935b02",
-  "sourceDirty": false,
+  "sourceCommit": "563ee37eec74dc7d47098e83e50e9b2088f5e28b",
+  "sourceDirty": true,
   "signing": "ad-hoc",
   "licenseFileIncluded": false,
   "dependencyCount": 243,
@@ -16,8 +16,8 @@
     }
   },
   "contents": {
-    "totalBytes": 59066771,
-    "fileCount": 948,
+    "totalBytes": 59042643,
+    "fileCount": 947,
     "groups": {
       "vendor": 16948891,
       "studio": 15935597,
@@ -25,16 +25,15 @@
       "node_modules/typescript": 9913238,
       "third-party": 4800129,
       "src": 375601,
-      "dist": 293069,
+      "dist": 298595,
       "node_modules/esbuild": 143795,
       "runtime": 137478,
       "node_modules/fflate": 96377,
-      "README.md": 17083,
-      "RELEASE.md": 9545,
-      "DEPLOY.md": 4829,
-      "SETUP.md": 2811,
+      "DEPLOY.md": 2902,
+      "SETUP.md": 1138,
       "THIRD_PARTY_NOTICES.md": 1088,
-      "package.json": 951,
+      "package.json": 889,
+      "README.md": 636,
       "bin": 544
     },
     "largestFiles": [
@@ -72,7 +71,7 @@
       },
       {
         "path": "dist/osmo.js",
-        "bytes": 293069
+        "bytes": 298595
       },
       {
         "path": "third-party/rust-standard-library/COPYRIGHT-library.html",
@@ -121,15 +120,15 @@
     ]
   },
   "hashes": {
-    "dist/osmo.js": "c6e7596e1469131d949c0fea10b18639de29f22c3ae0a5f18248396ad05963db",
-    "vendor/osmo-lite": "33c4b23661d96b1e4b124059233fda15b84a2c928c17eb4502bdd42026f4c589",
+    "dist/osmo.js": "01bc4e6a15c8508d8f2a408251303b2ee47e652dd9e530569dfd0705772546ac",
+    "vendor/osmo-lite": "403b62a187b6185128a8137210ae87ace3a4a13a0ff92b12aa1d9d85d7f99c07",
     "studio/src/engine_bg.wasm": "7e1414a348e0e4de6646248f1cba4f08e73f30f5f42c3db3ed8beac2f1513bc4",
     "studio/src/app.js": "4b1d952844a3ed878c0cdd20ce5d26bab711564e4086abc422ef939f299c70ff",
     "studio/src/app.css": "42bd8cf182d2e5c9183fe04cddece8a150992180ed7e9bc9e981e376224d96ef",
     "third-party/inventory.json": "6ff4e90c6583a67ca8bfe95b3f4399cfcdc080d39585dce1314a8dd91ee6fecb"
   },
   "lockfiles": {
-    "package-lock.json": "86a27a636faac94ee6a7d93fbfddd5b6f9fff296738eb9f702095e5a73b70f07",
+    "package-lock.json": "45083fcc718c0e5547b36eaeaadc7889ebb9c4989ab4d06fa54bc09a3fca2a14",
     "apps/native/Cargo.lock": "cf31d67cf167c5f32438abfeb42159eb50da61d36e4e482bae50ed3d71241373",
     "packages/render-engine/Cargo.lock": "a1a68051e1eea30ef0fa46bf17cd0685bb2c6a327defed0405e0d63dd61017a7"
   }

package/vendor/platform.json

@@ -1 +1 @@
-{"os":"darwin","arch":"arm64","version":"0.1.15"}
+{"os":"darwin","arch":"arm64","version":"0.1.17"}

package/RELEASE.md

@@ -1,164 +0,0 @@
-# Public release
-
-Release branch: `feat/cli-public-beta-typescript`, based on preview after TypeScript migration
-PR #1045. The previous implementation remains on `feat/cli-public-beta`. End-user cloud default:
-`https://studio.osmo.inc`. Preview testing requires an explicit
-`OSMO_BASE_URL=https://preview.osmo.inc` override. Existing project origins and
-per-origin credentials are preserved; preview logins are not reused for production.
-Initial supported distribution: macOS Apple Silicon, arm64 Node 22. Other
-platforms must have their own build and clean-machine validation before support
-is declared. The current host's native deployment target is recorded by the
-binary; older macOS versions have not been certified by this change.
-
-## Studio release switch
-
-`OSMO_STUDIO_ENABLED=1` enables the unreleased `osmo studio` namespace for internal
-testing, including `osmo studio init [folder]`. Initialization and its generated
-AGENTS.md guide belong to Studio; the former top-level `osmo init` is removed.
-Studio defaults off in both checkout and installed builds, independently of the
-cloud origin. Other values do not enable it. Disabled commands return
-`feature_disabled` with `--json` before project lookup, rendering, or cloud writes;
-help and video-share usage omit Studio commands. This local switch does not
-provide account-based access control.
-
-Project commands (`publish`, `push`, `pull`, `sync`, `clone`, and `history`) also
-live under `osmo studio` and require the same opt-in; their top-level forms are
-removed. Top-level authentication, resources, video sharing, and video comments
-are unchanged. The archive still contains
-the full runtime for internal opt-in; this flag alone does not shrink the payload.
-The release manifest records the default and environment variable. Installed
-smoke tests cover the disabled public surface and explicitly opt in for Studio
-rendering/deploy tests. Video deployment tests run with Studio disabled.
-
-## Build and package
-
-1. Use a clean checkout, `npm ci`, arm64 Node 22.18+, Rust/Cargo, wasm-pack,
-   the wasm32-unknown-unknown Rust target, Xcode command-line tools, Git, and FFmpeg.
-   The package builds both renderer targets from source, then bundles Studio.
-   It also rebuilds the TypeScript CLI into `dist/osmo.js`; only that bundle and
-   its starter/resource templates are shipped, not raw CLI or editor source.
-   Compilation defaults to two Cargo jobs to limit memory usage.
-2. Run unit tests, build the package and validate the installed archive:
-
-```sh
-npm -w @osmo/cli test
-npm -w @osmo/studio test
-npm -w @osmo/cli run test:package
-npm -w @osmo/cli run package:npm
-node packages/cli/tools/smoke-package.mjs dist/osmo.inc-cli-0.1.15-darwin-arm64.tgz
-```
-
-`package:npm` builds a publishable archive without requiring a first-party
-LICENSE file or Apple credentials. Existing first-party license metadata and an
-optional LICENSE file are preserved; the build does not choose new license terms.
-`package:internal` performs the same builds and checks but sets `private: true`
-for a local test archive. Neither command publishes to npm.
-
-### Optional Apple signing
-
-Both archive types use an ad-hoc signature by default, which needs no Apple
-account or certificate. Set `OSMO_SIGNING_IDENTITY` to opt into certificate
-signing. Also set `OSMO_NOTARY_PROFILE` to opt into notarization using a configured
-`notarytool` keychain profile; that option requires a Developer ID Application
-identity. If explicitly requested signing/notarization fails, packaging fails
-instead of silently downgrading. `release.json.signing` records `ad-hoc`,
-`signed`, or `developer-id-notarized`. Standalone Mach-O binaries cannot have
-notarization tickets stapled. Do not commit credentials.
-
-## Notices
-
-`third-party/inventory.json` enumerates the actual Studio bundle inputs, installed
-CLI dependencies and target-specific Cargo dependency graphs. Full upstream
-notices, Inter OFL, and matching Mediabunny MPL source are included. The CLI
-renderer excludes desktop UI dependencies and their unused fonts. Cargo entries conservatively include build-time dependencies.
-Missing third-party license text fails packaging. For crates omitting notices from their
-published archive, `licenses/rust-sources.json` pins upstream notice files by
-version, source commit and SHA-256. Dependency updates require reviewing these
-records. The upstream declaration and standard MIT text are retained for crates
-that declare MIT but omit its full text; see `licenses/README.md`.
-
-`release.json` records the source commit, dirty-tree state, lockfile hashes,
-platform, cloud default, signing state, renderer/Studio hashes, and payload sizes
-by directory with the largest files. These are
-local build records, not npm or SLSA provenance attestations. Review the archive
-contents before publishing. No Passenger fonts should be present.
-
-## Before opening access
-
-- Validate the archive on a second Apple Silicon Mac, including launch behavior,
-  install, login to studio.osmo.inc, font rendering, MP4 export and both deploy workflows.
-- Confirm the intended production account access policy, storage limits, upload rate
-  limits and operational budget. Those backend policies are not added by this
-  packaging change. Existing per-file limits are not per-account quotas.
-- Use your company npm publishing credentials for `@osmo.inc/cli`. Publish stable versions under npm's
-  `latest` tag.
-- Publish separately when ready:
-
-```sh
-npm publish ./dist/osmo.inc-cli-0.1.15-darwin-arm64.tgz --access public --tag latest
-```
-
-The private GitHub repository is not made public by this workflow. No automated
-public publishing workflow is enabled here. Project initialization now uses `osmo studio init`; the scene API is unchanged.
-
-## Local validation of 0.1.15-beta.1
-
-Validated on macOS 27.0 / Apple Silicon, Node 22.23.1. The native binary declares
-macOS 11.0 as its deployment target; this does not certify older macOS versions.
-All scene, editor, Studio and CLI typechecks passed after the TypeScript port.
-Scene tests: 233 passed; editor: 129; Studio: 68; CLI: 76, with the native deploy
-case run separately. Packaging regressions: 3 passed, including stale-font
-removal, missing/tampered notice rejection, and execution of the trimmed compiler
-and ZIP dependency. The actual 19.5 MiB archive installed
-offline outside the checkout, rejected unavailable Git without creating a partial
-project, initialized and typechecked the starter, and rendered visible Inter text
-to MP4. The archive contains `dist/osmo.js`, not raw CLI TypeScript, and its
-bundled auth flow independently verifies the studio.osmo.inc default. All 5 deploy tests passed against local cloud fixtures using the installed
-CLI and native release binary, including both deploy modes and comments. Two
-additional installed-package tests passed: generated SVG/WGSL/GLB fixtures and
-audible AAC export, plus Studio static assets and a native worker frame. The
-normal desktop build still passes Cargo check with its default features.
-The public npm archive also builds without a first-party LICENSE file or Apple
-credentials and passes all nine installed-package checks. A separate standalone
-video deployment to preview succeeded with Studio disabled. No npm publication,
-Developer ID signing, or notarization was performed.
-
-## Package size audit
-
-Measured from the macOS arm64 internal npm tarball, with MiB = 1,048,576 bytes:
-
-| Payload | Before | After |
-| --- | ---: | ---: |
-| Compressed download | 24.89 MiB | 19.48 MiB |
-| Unpacked files | 77.52 MiB | 56.32 MiB |
-| Native renderer | 22.25 MiB | 16.13 MiB |
-| TypeScript dependency | 22.53 MiB | 9.45 MiB |
-
-The archive excludes the standalone desktop window, file picker, playback audio
-output library and desktop UI fonts. Audio mixing/export and Studio preview remain
-supported. Checkout desktop builds retain their default features.
-
-The staged compiler retains the compiler API and standard library declarations;
-CLI executables, language server, translated diagnostics and development files are
-excluded. Its JavaScript receives whitespace-only minification, with notices and
-a modification notice retained. Unused fflate builds, duplicate raw Studio fonts,
-vendor documentation, sample scripts and install metadata are also excluded.
-`init` now creates a small text animation with no external assets or shaders.
-
-Built-in WGSL implements rendering and effects; it stays embedded in the native
-and WASM renderers. Project media, resource catalog downloads, repository examples,
-shader demos and test fixtures are not bundled, except the existing 0.36 MiB
-`resources examples` templates. Removing that public command requires separate
-API approval. Resource listing/download/import continues to fetch content on demand.
-
-The remaining major components are native rendering (16.13 MiB), browser WASM
-(10.43 MiB), esbuild (9.90 MiB), the Node compiler and its standard libraries
-(9.45 MiB), and Studio JavaScript (4.46 MiB). Studio includes its own browser
-compiler for local source editing. Required notices and matching MPL source are
-retained. A much smaller base install would require optional/on-demand Studio and
-renderer downloads; that architectural change is not part of this cleanup.
-
-Package verification rejects desktop dependencies, redundant assets and removed
-compiler tools, and limits the macOS arm64 unpacked payload to 60 MiB. Review
-size changes deliberately before raising that budget. `release.json.contents`
-measures staged payload files before adding the release manifest itself.