@skinhub/viewer 0.1.1

package/dist/SkinViewer.js

@@ -0,0 +1,404 @@
+'use client';
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+/**
+ * *** `<SkinViewer />` - THE EMBED AS A REACT COMPONENT. ***
+ *
+ * ═════════════════════════════════════════════════════════════════════════════════════════════
+ * *** THE ONE PROPERTY THIS FILE EXISTS TO PROTECT: A CHEAP PROP MUST NOT RELOAD THE FRAME. ***
+ *
+ * Owner's requirement: `float`, `seed`, `statTrak`, `nameTag`, the stickers and the charm update in
+ * place *"to make it feel just like in our website"*; only the weapon, the paint kit and the view go
+ * behind a loading card. The renderer guarantees it for a prop change, and `/frame`'s
+ * identity-preserving merge guarantees it across the wire - measured there at 140 float messages, 137
+ * animation frames, 769 timer samples and ZERO covered frames.
+ *
+ * *** THIS COMPONENT CAN STILL THROW IT ALL AWAY IN THREE LINES, AND HERE THEY ARE, GUARDED: ***
+ *
+ *   1. THE `src` IS BUILT ONCE AND NEVER REWRITTEN. Assigning `src` reloads the document, which drops
+ *      the GL context, re-downloads the model and re-runs every shader compile. Every prop change
+ *      after mount is a `postMessage`, without exception. `boot` is state that only `reload()` writes.
+ *
+ *   2. THE `<iframe>` HAS A `key`, AND IT IS DELIBERATELY NOT DERIVED FROM ANY PROP. It is a counter
+ *      that only `reload()` increments. *** A `key={item.weapon}` HERE - OR ON THIS COMPONENT, IN A
+ *      CONSUMER'S TREE - WOULD REMOUNT THE FRAME ON EVERY WEAPON CHANGE *** and turn a two-second
+ *      cross-fade into a full document load. The frame already covers itself on an identity change;
+ *      it does not need help and cannot be helped this way. The same warning is written into
+ *      `/frame`'s own file, because the mistake is available at both ends.
+ *
+ *   3. THE MESSAGE IS A DIFF. See `state.ts`: sending the whole state every tick would be correct on
+ *      the wire and would still re-seed the renderer's sticker draft sixty times a second.
+ *
+ * ═════════════════════════════════════════════════════════════════════════════════════════════
+ * *** AND THE SECOND: A STALE PACKAGE FAILS LOUDLY, NEVER PARTIALLY. ***
+ *
+ * No back-compat, no version window - decided policy, and the README's *Versioning* section is its public statement. A protocol mismatch in
+ * either direction is terminal: the frame renders nothing, this component stops sending, `onError`
+ * carries the sentence naming which side is out of date, and `fallback` gets it too. Nothing is
+ * half-applied, because a subtly wrong picture is worse than a blank one with an explanation.
+ */
+import { useCallback, useEffect, useRef, useState } from 'react';
+import { hostMessage, readFrameEvent } from './protocol.js';
+import { toPublicItem } from './item.js';
+import { coversCanvas, diffState, frameUrl, resolveState } from './state.js';
+import { LINK } from './link.js';
+/** Where the embed is served from. Overridable per component - see {@link SkinViewerProps.origin}. */
+export const DEFAULT_ORIGIN = 'https://skinhub.gg';
+/**
+ * *** THE TWO KINDS OF FAILURE, AND THEY ARE HELD DIFFERENTLY ON PURPOSE. ***
+ *
+ * A FRAME FAILURE (`protocol-mismatch`, `render-failed`) arrives as an event and is STICKY state: the
+ * scene is gone and nothing in the props can bring it back, so it stays until a reload or - for a lost
+ * render - until the next identity change gives the frame something new to try.
+ *
+ * A SUBJECT FAILURE (`no-item`, `bad-inspect-link`, `unknown-weapon`) is DERIVED FROM THE PROPS and is
+ * never sticky. It is a fact about this render's arguments, so the moment the arguments are good it is
+ * over. That distinction is the difference between a viewer that recovers when a query resolves and
+ * one an integrator has to remount.
+ */
+const isFatal = (code) => code === 'protocol-mismatch' || code === 'render-failed' || code === 'unreachable';
+/**
+ * *** HOW LONG THE EMBED HAS TO ANNOUNCE ITSELF BEFORE WE CALL IT UNREACHABLE. ***
+ *
+ * The frame posts `hello` as soon as its script runs, so this is a document fetch plus a parse - a few
+ * hundred milliseconds on a warm connection. Fifteen seconds is therefore not a performance budget, it
+ * is the point past which "still loading" stops being a credible explanation for an empty box.
+ *
+ * *** DELIBERATELY GENEROUS, BECAUSE A FALSE POSITIVE HERE IS SELF-HEALING AND A FALSE NEGATIVE IS
+ * NOT. *** The iframe stays mounted under the `fallback`, so a slow connection that lands at sixteen
+ * seconds clears the error and renders. A timer too short would flash an error at people on bad
+ * networks; no timer at all leaves them with a blank rectangle and nothing to search for.
+ */
+export const CONNECT_TIMEOUT_MS = 15_000;
+export const SkinViewer = (props) => {
+    const { className, style, title = 'SkinHub viewer', loading, fallback, handle } = props;
+    /*
+     * RESOLVED ON EVERY RENDER, NOT MEMOISED, AND THAT IS THE CHEAPER OPTION HERE.
+     *
+     * A memo would need a dependency array over props a consumer writes INLINE - `item={{…}}`,
+     * `settings={{…}}` - so its identity changes every render anyway and the memo would only add a
+     * comparison to the work it fails to skip. Everything downstream compares by VALUE for the same
+     * reason (see `diffState`), so a fresh object here costs nothing: it produces no patch, no message
+     * and no render in the frame.
+     */
+    const desired = resolveState(props);
+    const desiredRef = useRef(desired);
+    desiredRef.current = desired;
+    /*
+     * THE ORIGIN IS READ ONCE. See the prop's own doc: it is the single value that could only be applied
+     * by reloading the frame, and a prop that quietly throws away the GL context is the thing this
+     * component is built not to have.
+     */
+    const originRef = useRef(props.origin ?? DEFAULT_ORIGIN);
+    /**
+     * *** THE `src`, AND THE STATE THAT `src` EXPRESSED. ***
+     *
+     * Built in a `useState` INITIALISER rather than an effect, so the first frame anyone sees is the
+     * integrator's item and not ours corrected a tick later - and so a server render emits the same
+     * attribute the browser will, with no hydration mismatch to paper over.
+     *
+     * `nonce` is the `<iframe>`'s key and only `reload()` moves it. See point 2 in the header.
+     */
+    const [boot, setBoot] = useState(() => {
+        const { src, expressed } = frameUrl(originRef.current, desired);
+        return { src, expressed, nonce: 0 };
+    });
+    /** What the frame has been told so far. The baseline every later diff is measured against. */
+    const sent = useRef(boot.expressed);
+    /** No `set` may be sent before the frame has announced itself; until then it has no listener. */
+    const connected = useRef(false);
+    const frame = useRef(null);
+    /** Cancelled the moment the frame speaks; see {@link CONNECT_TIMEOUT_MS}. */
+    const connectTimer = useRef(null);
+    const [status, setStatus] = useState('connecting');
+    const [error, setError] = useState(null);
+    const [problems, setProblems] = useState([]);
+    /*
+     * THE CALLBACKS, THROUGH A REF.
+     *
+     * `onChange` fires on every pointer move of a sticker drag. Putting the handler itself in a
+     * dependency array would re-attach the window listener on every render of a consumer who writes
+     * `onChange={item => setItem(item)}` inline - which is all of them. One ref, updated during render,
+     * and the listener effect below has no dependencies at all.
+     */
+    const handlers = useRef(props);
+    handlers.current = props;
+    const post = useCallback((message) => {
+        const target = frame.current?.contentWindow;
+        if (!target)
+            return;
+        // TARGETED AT THE FRAME'S ORIGIN AND NEVER `'*'`. We know it - we built the URL - so there is no
+        // reason to broadcast a customer's item state to whatever document happens to be there.
+        target.postMessage(message, originRef.current);
+    }, []);
+    const report = useCallback((next) => {
+        handlers.current.onError?.(next);
+        if (!isFatal(next.code))
+            return;
+        setError(next);
+        setStatus('error');
+        // A MISMATCH IS ONE-WAY. There is no path back: a frame that has answered one message this
+        // package cannot read is a frame whose next answer it also cannot trust.
+        if (next.code === 'protocol-mismatch')
+            connected.current = false;
+    }, []);
+    /**
+     * *** THE FLUSH. Every prop change in this package leaves through this function. ***
+     *
+     * Called after every render and again the moment the frame connects, because a prop can change
+     * before the iframe's document exists and that update must not be lost - it has to wait, not
+     * evaporate.
+     */
+    const flush = useCallback(() => {
+        if (!connected.current)
+            return;
+        const next = desiredRef.current;
+        const patch = diffState(sent.current, next);
+        if (!patch)
+            return;
+        /*
+         * THE BASELINE KEEPS THE LAST ITEM WE ACTUALLY SENT. A render whose `item` was null - a host
+         * whose query briefly returned `undefined` - must not record "no item" as the thing the frame is
+         * showing, or the next real item would be diffed against a hole and sent in full for no reason.
+         */
+        sent.current = { ...next, item: next.item ?? sent.current.item };
+        if (coversCanvas(patch, next.view)) {
+            setStatus('loading');
+            // A NEW ITEM IS A NEW CHANCE. A lost GL context or a 404 on one model says nothing about the
+            // next one, so the fallback comes down and the frame is allowed to try. A protocol mismatch is
+            // not cleared here: that one is about the conversation, not the item.
+            setError(current => (current?.code === 'render-failed' ? null : current));
+        }
+        post(hostMessage(patch));
+    }, [post]);
+    useEffect(flush);
+    /* ── THE CONNECTION DEADLINE ──────────────────────────────────────────────────────────────── */
+    /**
+     * *** THE ONLY THING STANDING BETWEEN AN UNREACHABLE ORIGIN AND A SILENT EMPTY BOX. ***
+     *
+     * Keyed on `boot.nonce`, so `reload()` genuinely retries rather than inheriting a spent deadline.
+     * See {@link CONNECT_TIMEOUT_MS} and the `unreachable` code for why the browser gives us nothing
+     * else to go on.
+     */
+    useEffect(() => {
+        connectTimer.current = setTimeout(() => {
+            connectTimer.current = null;
+            if (connected.current)
+                return;
+            report({
+                code: 'unreachable',
+                message: `The SkinHub viewer embed at ${boot.src} did not respond within ${Math.round(CONNECT_TIMEOUT_MS / 1000)}s. Nothing has rendered. Check that the origin is reachable from this browser, that it serves /frame, and that your page's Content-Security-Policy allows framing it (frame-src).`,
+            });
+        }, CONNECT_TIMEOUT_MS);
+        return () => {
+            if (connectTimer.current !== null)
+                clearTimeout(connectTimer.current);
+            connectTimer.current = null;
+        };
+    }, [boot.nonce, boot.src, report]);
+    /* ── THE CHANNEL ──────────────────────────────────────────────────────────────────────────── */
+    useEffect(() => {
+        const onMessage = (event) => {
+            /*
+             * BOTH CHECKS, AND THEY ARE NOT THE SAME CHECK. `event.source` is the sending WINDOW and
+             * cannot be spoofed, so it is what stops a sibling frame or an ad tag on the host page from
+             * driving this component. `event.origin` is what stops a frame that has been navigated
+             * somewhere else from continuing to talk to us. `EMBED.md` §10 tells hand-rolled hosts to do
+             * exactly this, and a package that told them to and did not would be worth nothing.
+             */
+            if (event.source !== frame.current?.contentWindow)
+                return;
+            if (event.origin !== originRef.current)
+                return;
+            const reading = readFrameEvent(event.data);
+            if (reading.kind === 'ignore')
+                return;
+            if (reading.kind === 'mismatch') {
+                report(reading.error);
+                return;
+            }
+            receive(reading.event);
+        };
+        /* Shadowing the `handle` PROP here would be a trap, so the reader is named for what it does. */
+        const receive = (event) => {
+            switch (event.type) {
+                case 'hello': {
+                    connected.current = true;
+                    if (connectTimer.current !== null) {
+                        clearTimeout(connectTimer.current);
+                        connectTimer.current = null;
+                    }
+                    /*
+                     * *** A LATE ARRIVAL UNDOES `unreachable`, AND ONLY THAT ONE. *** The iframe is never
+                     * unmounted - the `fallback` is drawn OVER it - so a connection that lands after the timer
+                     * is a working viewer sitting under an error card, which is worse than the blank box the
+                     * timer was added to prevent. Cleared here rather than in the timer because this is the
+                     * only place we learn the embed is really there.
+                     */
+                    setError(current => (current?.code === 'unreachable' ? null : current));
+                    setStatus(current => (current === 'connecting' || current === 'error' ? 'loading' : current));
+                    setProblems(event.problems);
+                    /*
+                     * A PROBLEM IN `hello` IS OUR BUG AND NOT THE INTEGRATOR'S. They passed props; this
+                     * package turned them into a query string; the frame is naming the part of that string it
+                     * could not read. It is surfaced on the hook and warned about in development rather than
+                     * routed to `onError`, which is for failures they can act on.
+                     */
+                    if (event.problems.length > 0 && process.env.NODE_ENV !== 'production')
+                        console.warn('[@skinhub/viewer] the embed rejected part of the URL this package built:', event.problems);
+                    // Anything that changed while the document was still loading goes now.
+                    flush();
+                    return;
+                }
+                case 'ready':
+                    // A LEVEL, NOT AN EDGE - it fires again after every identity change. And it fires after a
+                    // FAILED load too, which is why a fatal error is not cleared here.
+                    setStatus(current => (current === 'error' ? current : 'ready'));
+                    handlers.current.onReady?.();
+                    return;
+                case 'error':
+                    report(event.error);
+                    return;
+                case 'change': {
+                    /*
+                     * *** THE USER'S EDIT, AND IT IS ALSO WRITTEN INTO OUR BASELINE. ***
+                     *
+                     * The second half is the one that is easy to miss: without it, the next patch we send
+                     * would be diffed against an item that never learned about the drag, so the very next
+                     * float tick would restate the OLD sticker offsets and yank the sticker back under the
+                     * user's cursor. The frame is the authority on what the user did; we follow it.
+                     */
+                    sent.current = { ...sent.current, item: event.item };
+                    handlers.current.onChange?.(toPublicItem(event.item));
+                    return;
+                }
+                case 'editing-slot':
+                    handlers.current.onEditingSlotChange?.(event.slot);
+                    return;
+                case 'resize':
+                    handlers.current.onResize?.({ width: event.width, height: event.height, dpr: event.dpr });
+                    return;
+            }
+        };
+        window.addEventListener('message', onMessage);
+        return () => window.removeEventListener('message', onMessage);
+    }, [flush, report]);
+    /* ── THE SUBJECT'S OWN FAILURES ───────────────────────────────────────────────────────────── */
+    /*
+     * `no-item`, `bad-inspect-link` and `unknown-weapon` happen HERE rather than in the frame - they are
+     * decided while resolving props, before a message is sent. Reported once per distinct message, not
+     * once per render, because a host re-rendering at 60 Hz with a bad link would otherwise fill their
+     * console and their error reporter.
+     */
+    const reported = useRef(null);
+    useEffect(() => {
+        const subjectError = desiredRef.current.subjectError;
+        if (!subjectError) {
+            reported.current = null;
+            return;
+        }
+        if (reported.current === subjectError.message)
+            return;
+        reported.current = subjectError.message;
+        handlers.current.onError?.(subjectError);
+    });
+    /* ── THE HANDLE ───────────────────────────────────────────────────────────────────────────── */
+    const link = handle?.[LINK];
+    useEffect(() => {
+        if (!link)
+            return;
+        link.reload = () => {
+            /*
+             * REBUILT FROM WHAT IS ON SCREEN NOW, not from the props this component mounted with - a reload
+             * that reverted the item to its first value would be a surprise, not a refresh.
+             *
+             * AND IT FALLS BACK TO THE LAST ITEM WE SENT, for the case where this render happens to have no
+             * item: a `reload()` fired from a button while the host's query is momentarily `undefined` must
+             * bring the item back, not the instruction card.
+             */
+            const current = desiredRef.current;
+            const next = current.item
+                ? current
+                : { ...current, item: sent.current.item, help: sent.current.item ? null : current.help };
+            const { src, expressed } = frameUrl(originRef.current, next);
+            sent.current = expressed;
+            connected.current = false;
+            setStatus('connecting');
+            setError(null);
+            setProblems([]);
+            setBoot(previous => ({ src, expressed, nonce: previous.nonce + 1 }));
+        };
+        return () => {
+            link.reload = () => { };
+        };
+    }, [link]);
+    /*
+     * WHAT THE HOOK IS TOLD IS THE RESOLVED VIEW OF BOTH FAILURE KINDS, not the raw event state - so a
+     * consumer rendering `viewer.status` sees `'error'` for a link that did not decode, without this
+     * component having to make a prop-derived fact sticky to get it there.
+     */
+    const publicError = error ?? desired.subjectError;
+    const publicStatus = publicError ? 'error' : status;
+    useEffect(() => {
+        link?.publish({ status: publicStatus, error: publicError, problems });
+    }, [link, publicStatus, publicError, problems]);
+    /* ── THE BOX ──────────────────────────────────────────────────────────────────────────────── */
+    const box = useRef(null);
+    useEffect(() => {
+        if (process.env.NODE_ENV === 'production')
+            return;
+        const element = box.current;
+        if (!element || (element.offsetWidth > 0 && element.offsetHeight > 0))
+            return;
+        console.warn('[@skinhub/viewer] <SkinViewer> measured 0 px in one dimension, so nothing will be visible. ' +
+            'The viewer fills its container and has no intrinsic size - give it one with `style` or `className` ' +
+            '(e.g. style={{ width: 640, height: 420 }}), or size the element you put it in.');
+    }, []);
+    /*
+     * ── WHAT IS DRAWN OVER THE FRAME, IN ORDER ────────────────────────────────────────────────
+     *
+     * 1. A FATAL FAILURE takes the `fallback` slot. The scene is gone underneath it.
+     *
+     * 2. A SUBJECT FAILURE takes it too WHEN THE CALLER PROVIDED ONE - they said what they want shown
+     *    for a bad item and that beats anything we would draw. *** WITH NO `fallback` IT DRAWS NOTHING,
+     *    AND THAT IS THE POINT: *** the frame is showing the instruction card, and covering it with a
+     *    skeleton would replace the one screen in this product whose whole job is to teach.
+     *
+     * 3. OTHERWISE `loading`, until the frame says `ready`.
+     */
+    const overlay = error
+        ? renderFallback(fallback, error)
+        : desired.subjectError
+            ? (renderFallback(fallback, desired.subjectError) ?? null)
+            : status === 'ready'
+                ? null
+                : loading;
+    return (_jsxs("div", { ref: box, className: className, style: { position: 'relative', ...style }, children: [_jsx("iframe", { ref: frame, src: boot.src, title: title, 
+                /*
+                 * *** NO `referrerPolicy`, AND THAT IS A DECISION. *** The embed reads the framing origin
+                 * from this request's `Referer` header. Setting `no-referrer` here - which looks like good
+                 * hygiene - would make every embed anonymous to us, which is not a privacy win for the host
+                 * (we already know the URL they asked for) and does break the one thing that header decides.
+                 */
+                style: {
+                    position: 'absolute',
+                    inset: 0,
+                    width: '100%',
+                    height: '100%',
+                    border: 0,
+                    // The frame paints nothing of its own, so the canvas composites over the host's page.
+                    // Without this a browser's default white iframe background would sit in between.
+                    background: 'transparent',
+                    display: 'block',
+                } }, boot.nonce), overlay === null || overlay === undefined ? null : (
+            /*
+             * DRAWN OVER THE FRAME, NEVER INSIDE IT - a React element cannot be structured-cloned across
+             * a `postMessage` boundary, so this is the only place a consumer's node can live.
+             *
+             * `pointerEvents: 'none'` so a spinner does not eat the orbit drag underneath it. A consumer
+             * whose overlay is interactive turns it back on in their own node, which is the right way
+             * round: the common case costs them nothing and the rare one is one line.
+             */
+            _jsx("div", { style: { position: 'absolute', inset: 0, pointerEvents: 'none' }, children: overlay }))] }));
+};
+const renderFallback = (fallback, error) => typeof fallback === 'function' ? fallback(error) : fallback;
+//# sourceMappingURL=SkinViewer.js.map

package/dist/SkinViewer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"SkinViewer.js","sourceRoot":"","sources":["../src/SkinViewer.tsx"],"names":[],"mappings":"AAAA,YAAY,CAAA;;AAEZ;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AAEH,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAA;AAEhE,OAAO,EAAE,WAAW,EAAE,cAAc,EAAmB,MAAM,eAAe,CAAA;AAC5E,OAAO,EAAE,YAAY,EAAE,MAAM,WAAW,CAAA;AACxC,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,QAAQ,EAAE,YAAY,EAAqB,MAAM,YAAY,CAAA;AAC/F,OAAO,EAAE,IAAI,EAAmB,MAAM,WAAW,CAAA;AAGjD,sGAAsG;AACtG,MAAM,CAAC,MAAM,cAAc,GAAG,oBAAoB,CAAA;AA6BlD;;;;;;;;;;;GAWG;AACH,MAAM,OAAO,GAAG,CAAC,IAA6B,EAAE,EAAE,CACjD,IAAI,KAAK,mBAAmB,IAAI,IAAI,KAAK,eAAe,IAAI,IAAI,KAAK,aAAa,CAAA;AAEnF;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,MAAM,CAAA;AAExC,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,KAAsB,EAAE,EAAE;IACpD,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,KAAK,GAAG,gBAAgB,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,KAAK,CAAA;IAEvF;;;;;;;;OAQG;IACH,MAAM,OAAO,GAAG,YAAY,CAAC,KAAK,CAAC,CAAA;IACnC,MAAM,UAAU,GAAG,MAAM,CAAC,OAAO,CAAC,CAAA;IAClC,UAAU,CAAC,OAAO,GAAG,OAAO,CAAA;IAE5B;;;;OAIG;IACH,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,IAAI,cAAc,CAAC,CAAA;IAExD;;;;;;;;OAQG;IACH,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,QAAQ,CAAC,GAAG,EAAE;QACrC,MAAM,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG,QAAQ,CAAC,SAAS,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;QAC/D,OAAO,EAAE,GAAG,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC,EAAE,CAAA;IACpC,CAAC,CAAC,CAAA;IAEF,8FAA8F;IAC9F,MAAM,IAAI,GAAG,MAAM,CAAe,IAAI,CAAC,SAAS,CAAC,CAAA;IACjD,iGAAiG;IACjG,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC,CAAA;IAC/B,MAAM,KAAK,GAAG,MAAM,CAAoB,IAAI,CAAC,CAAA;IAC7C,6EAA6E;IAC7E,MAAM,YAAY,GAAG,MAAM,CAAuC,IAAI,CAAC,CAAA;IAEvE,MAAM,CAAC,MAAM,EAAE,SAAS,CAAC,GAAG,QAAQ,CAAe,YAAY,CAAC,CAAA;IAChE,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,GAAG,QAAQ,CAAyB,IAAI,CAAC,CAAA;IAChE,MAAM,CAAC,QAAQ,EAAE,WAAW,CAAC,GAAG,QAAQ,CAAoB,EAAE,CAAC,CAAA;IAE/D;;;;;;;OAOG;IACH,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,CAAA;IAC9B,QAAQ,CAAC,OAAO,GAAG,KAAK,CAAA;IAExB,MAAM,IAAI,GAAG,WAAW,CAAC,CAAC,OAAgB,EAAE,EAAE;QAC7C,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,EAAE,aAAa,CAAA;QAC3C,IAAI,CAAC,MAAM;YAAE,OAAM;QACnB,iGAAiG;QACjG,wFAAwF;QACxF,MAAM,CAAC,WAAW,CAAC,OAAO,EAAE,SAAS,CAAC,OAAO,CAAC,CAAA;IAC/C,CAAC,EAAE,EAAE,CAAC,CAAA;IAEN,MAAM,MAAM,GAAG,WAAW,CAAC,CAAC,IAAqB,EAAE,EAAE;QACpD,QAAQ,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,CAAA;QAChC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,OAAM;QAC/B,QAAQ,CAAC,IAAI,CAAC,CAAA;QACd,SAAS,CAAC,OAAO,CAAC,CAAA;QAClB,2FAA2F;QAC3F,yEAAyE;QACzE,IAAI,IAAI,CAAC,IAAI,KAAK,mBAAmB;YAAE,SAAS,CAAC,OAAO,GAAG,KAAK,CAAA;IACjE,CAAC,EAAE,EAAE,CAAC,CAAA;IAEN;;;;;;OAMG;IACH,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE;QAC9B,IAAI,CAAC,SAAS,CAAC,OAAO;YAAE,OAAM;QAC9B,MAAM,IAAI,GAAG,UAAU,CAAC,OAAO,CAAA;QAC/B,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,CAAA;QAC3C,IAAI,CAAC,KAAK;YAAE,OAAM;QAElB;;;;WAIG;QACH,IAAI,CAAC,OAAO,GAAG,EAAE,GAAG,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAA;QAChE,IAAI,YAAY,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACpC,SAAS,CAAC,SAAS,CAAC,CAAA;YACpB,6FAA6F;YAC7F,+FAA+F;YAC/F,sEAAsE;YACtE,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,OAAO,EAAE,IAAI,KAAK,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAA;QAC1E,CAAC;QACD,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAA;IACzB,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAA;IAEV,SAAS,CAAC,KAAK,CAAC,CAAA;IAEhB,iGAAiG;IACjG;;;;;;OAMG;IACH,SAAS,CAAC,GAAG,EAAE;QACd,YAAY,CAAC,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE;YACtC,YAAY,CAAC,OAAO,GAAG,IAAI,CAAA;YAC3B,IAAI,SAAS,CAAC,OAAO;gBAAE,OAAM;YAC7B,MAAM,CAAC;gBACN,IAAI,EAAE,aAAa;gBACnB,OAAO,EAAE,+BAA+B,IAAI,CAAC,GAAG,2BAA2B,IAAI,CAAC,KAAK,CACpF,kBAAkB,GAAG,IAAI,CACzB,mLAAmL;aACpL,CAAC,CAAA;QACH,CAAC,EAAE,kBAAkB,CAAC,CAAA;QAEtB,OAAO,GAAG,EAAE;YACX,IAAI,YAAY,CAAC,OAAO,KAAK,IAAI;gBAAE,YAAY,CAAC,YAAY,CAAC,OAAO,CAAC,CAAA;YACrE,YAAY,CAAC,OAAO,GAAG,IAAI,CAAA;QAC5B,CAAC,CAAA;IACF,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAA;IAElC,iGAAiG;IACjG,SAAS,CAAC,GAAG,EAAE;QACd,MAAM,SAAS,GAAG,CAAC,KAAmB,EAAE,EAAE;YACzC;;;;;;eAMG;YACH,IAAI,KAAK,CAAC,MAAM,KAAK,KAAK,CAAC,OAAO,EAAE,aAAa;gBAAE,OAAM;YACzD,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,OAAO;gBAAE,OAAM;YAE9C,MAAM,OAAO,GAAG,cAAc,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;YAC1C,IAAI,OAAO,CAAC,IAAI,KAAK,QAAQ;gBAAE,OAAM;YACrC,IAAI,OAAO,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;gBACjC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;gBACrB,OAAM;YACP,CAAC;YACD,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;QACvB,CAAC,CAAA;QAED,gGAAgG;QAChG,MAAM,OAAO,GAAG,CAAC,KAAiB,EAAE,EAAE;YACrC,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;gBACpB,KAAK,OAAO,CAAC,CAAC,CAAC;oBACd,SAAS,CAAC,OAAO,GAAG,IAAI,CAAA;oBACxB,IAAI,YAAY,CAAC,OAAO,KAAK,IAAI,EAAE,CAAC;wBACnC,YAAY,CAAC,YAAY,CAAC,OAAO,CAAC,CAAA;wBAClC,YAAY,CAAC,OAAO,GAAG,IAAI,CAAA;oBAC5B,CAAC;oBACD;;;;;;uBAMG;oBACH,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,OAAO,EAAE,IAAI,KAAK,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAA;oBACvE,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,OAAO,KAAK,YAAY,IAAI,OAAO,KAAK,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAA;oBAC7F,WAAW,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAA;oBAC3B;;;;;uBAKG;oBACH,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,GAAG,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY;wBACrE,OAAO,CAAC,IAAI,CAAC,0EAA0E,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAA;oBACzG,uEAAuE;oBACvE,KAAK,EAAE,CAAA;oBACP,OAAM;gBACP,CAAC;gBACD,KAAK,OAAO;oBACX,0FAA0F;oBAC1F,mEAAmE;oBACnE,SAAS,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,OAAO,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAA;oBAC/D,QAAQ,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAA;oBAC5B,OAAM;gBACP,KAAK,OAAO;oBACX,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;oBACnB,OAAM;gBACP,KAAK,QAAQ,CAAC,CAAC,CAAC;oBACf;;;;;;;uBAOG;oBACH,IAAI,CAAC,OAAO,GAAG,EAAE,GAAG,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAA;oBACpD,QAAQ,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAA;oBACrD,OAAM;gBACP,CAAC;gBACD,KAAK,cAAc;oBAClB,QAAQ,CAAC,OAAO,CAAC,mBAAmB,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;oBAClD,OAAM;gBACP,KAAK,QAAQ;oBACZ,QAAQ,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC,CAAA;oBACzF,OAAM;YACR,CAAC;QACF,CAAC,CAAA;QAED,MAAM,CAAC,gBAAgB,CAAC,SAAS,EAAE,SAAS,CAAC,CAAA;QAC7C,OAAO,GAAG,EAAE,CAAC,MAAM,CAAC,mBAAmB,CAAC,SAAS,EAAE,SAAS,CAAC,CAAA;IAC9D,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAA;IAEnB,iGAAiG;IACjG;;;;;OAKG;IACH,MAAM,QAAQ,GAAG,MAAM,CAAgB,IAAI,CAAC,CAAA;IAC5C,SAAS,CAAC,GAAG,EAAE;QACd,MAAM,YAAY,GAAG,UAAU,CAAC,OAAO,CAAC,YAAY,CAAA;QACpD,IAAI,CAAC,YAAY,EAAE,CAAC;YACnB,QAAQ,CAAC,OAAO,GAAG,IAAI,CAAA;YACvB,OAAM;QACP,CAAC;QACD,IAAI,QAAQ,CAAC,OAAO,KAAK,YAAY,CAAC,OAAO;YAAE,OAAM;QACrD,QAAQ,CAAC,OAAO,GAAG,YAAY,CAAC,OAAO,CAAA;QACvC,QAAQ,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,YAAY,CAAC,CAAA;IACzC,CAAC,CAAC,CAAA;IAEF,iGAAiG;IACjG,MAAM,IAAI,GAA2B,MAAM,EAAE,CAAC,IAAI,CAAC,CAAA;IACnD,SAAS,CAAC,GAAG,EAAE;QACd,IAAI,CAAC,IAAI;YAAE,OAAM;QACjB,IAAI,CAAC,MAAM,GAAG,GAAG,EAAE;YAClB;;;;;;;eAOG;YACH,MAAM,OAAO,GAAG,UAAU,CAAC,OAAO,CAAA;YAClC,MAAM,IAAI,GAAiB,OAAO,CAAC,IAAI;gBACtC,CAAC,CAAC,OAAO;gBACT,CAAC,CAAC,EAAE,GAAG,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,CAAA;YACzF,MAAM,EAAE,GAAG,EAAE,SAAS,EAAE,GAAG,QAAQ,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,CAAC,CAAA;YAC5D,IAAI,CAAC,OAAO,GAAG,SAAS,CAAA;YACxB,SAAS,CAAC,OAAO,GAAG,KAAK,CAAA;YACzB,SAAS,CAAC,YAAY,CAAC,CAAA;YACvB,QAAQ,CAAC,IAAI,CAAC,CAAA;YACd,WAAW,CAAC,EAAE,CAAC,CAAA;YACf,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,GAAG,CAAC,EAAE,CAAC,CAAC,CAAA;QACrE,CAAC,CAAA;QACD,OAAO,GAAG,EAAE;YACX,IAAI,CAAC,MAAM,GAAG,GAAG,EAAE,GAAE,CAAC,CAAA;QACvB,CAAC,CAAA;IACF,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAA;IAEV;;;;OAIG;IACH,MAAM,WAAW,GAAG,KAAK,IAAI,OAAO,CAAC,YAAY,CAAA;IACjD,MAAM,YAAY,GAAG,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAA;IACnD,SAAS,CAAC,GAAG,EAAE;QACd,IAAI,EAAE,OAAO,CAAC,EAAE,MAAM,EAAE,YAAY,EAAE,KAAK,EAAE,WAAW,EAAE,QAAQ,EAAE,CAAC,CAAA;IACtE,CAAC,EAAE,CAAC,IAAI,EAAE,YAAY,EAAE,WAAW,EAAE,QAAQ,CAAC,CAAC,CAAA;IAE/C,iGAAiG;IACjG,MAAM,GAAG,GAAG,MAAM,CAAiB,IAAI,CAAC,CAAA;IACxC,SAAS,CAAC,GAAG,EAAE;QACd,IAAI,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,YAAY;YAAE,OAAM;QACjD,MAAM,OAAO,GAAG,GAAG,CAAC,OAAO,CAAA;QAC3B,IAAI,CAAC,OAAO,IAAI,CAAC,OAAO,CAAC,WAAW,GAAG,CAAC,IAAI,OAAO,CAAC,YAAY,GAAG,CAAC,CAAC;YAAE,OAAM;QAC7E,OAAO,CAAC,IAAI,CACX,6FAA6F;YAC5F,qGAAqG;YACrG,gFAAgF,CACjF,CAAA;IACF,CAAC,EAAE,EAAE,CAAC,CAAA;IAEN;;;;;;;;;;;OAWG;IACH,MAAM,OAAO,GAAG,KAAK;QACpB,CAAC,CAAC,cAAc,CAAC,QAAQ,EAAE,KAAK,CAAC;QACjC,CAAC,CAAC,OAAO,CAAC,YAAY;YACrB,CAAC,CAAC,CAAC,cAAc,CAAC,QAAQ,EAAE,OAAO,CAAC,YAAY,CAAC,IAAI,IAAI,CAAC;YAC1D,CAAC,CAAC,MAAM,KAAK,OAAO;gBACnB,CAAC,CAAC,IAAI;gBACN,CAAC,CAAC,OAAO,CAAA;IAEZ,OAAO,CACN,eAAK,GAAG,EAAE,GAAG,EAAE,SAAS,EAAE,SAAS,EAAE,KAAK,EAAE,EAAE,QAAQ,EAAE,UAAU,EAAE,GAAG,KAAK,EAAE,aAC7E,iBAGC,GAAG,EAAE,KAAK,EACV,GAAG,EAAE,IAAI,CAAC,GAAG,EACb,KAAK,EAAE,KAAK;gBACZ;;;;;mBAKG;gBACH,KAAK,EAAE;oBACN,QAAQ,EAAE,UAAU;oBACpB,KAAK,EAAE,CAAC;oBACR,KAAK,EAAE,MAAM;oBACb,MAAM,EAAE,MAAM;oBACd,MAAM,EAAE,CAAC;oBACT,sFAAsF;oBACtF,iFAAiF;oBACjF,UAAU,EAAE,aAAa;oBACzB,OAAO,EAAE,OAAO;iBAChB,IApBI,IAAI,CAAC,KAAK,CAqBd,EACD,OAAO,KAAK,IAAI,IAAI,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;YACnD;;;;;;;eAOG;YACH,cAAK,KAAK,EAAE,EAAE,QAAQ,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,EAAE,aAAa,EAAE,MAAM,EAAE,YAAG,OAAO,GAAO,CACtF,IACI,CACN,CAAA;AACF,CAAC,CAAA;AAED,MAAM,cAAc,GAAG,CAAC,QAAqC,EAAE,KAAsB,EAAE,EAAE,CACxF,OAAO,QAAQ,KAAK,UAAU,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAA"}

package/dist/index.d.ts

@@ -0,0 +1,53 @@
+/**
+ * *** `@skinhub/viewer` - THE SKINHUB CS2 SKIN VIEWER, AS A REACT COMPONENT. ***
+ *
+ *     import { SkinViewer } from '@skinhub/viewer'
+ *
+ *     <SkinViewer item={{ weapon: 'weapon_ak47', paintIndex: 1449, float: 0.27 }} style={{ height: 420 }} />
+ *     <SkinViewer inspectLink={tradeOffer.inspectLink} style={{ height: 420 }} />
+ *
+ * The 3D is not in here. It is a page on our origin that this component embeds and drives over
+ * `postMessage`, which is why installing this pulls in no `three`, no `@react-three/fiber` and no
+ * asset bundle - the only peer dependency is React. `EMBED.md` documents the same contract for stacks
+ * that are not React; this package is the React-shaped door onto it, not a second implementation.
+ *
+ * ─────────────────────────────────────────────────────────────────────────────────────────────
+ * WHAT IS EXPORTED, AND WHY THE LIST IS SHORT.
+ *
+ *   `SkinViewer`, `useSkinViewer`  - the component and its verbs.
+ *   the types                      - so a consumer can name a prop's shape in their own code.
+ *   `MAP_NAMES`, `WEAPON_IDS`      - the two closed vocabularies, as values, for building a picker.
+ *   the defindex table             - because an integrator with a Steam inventory has numbers.
+ *
+ * Nothing else FROM HERE. The URL builder and the diff are implementation: if they were public, a
+ * customer could build a state this package would then have to keep working, and the whole point of
+ * the version integer is that there is exactly one shape to keep working.
+ *
+ * *** THE WIRE TYPES ARE THE ONE EXCEPTION AND THEY ARE A SEPARATE DOOR - `@skinhub/viewer/protocol`.
+ * *** Deliberately not the barrel, so they never appear in an autocomplete next to `SkinViewer` and
+ * nobody reaches for them by accident. Exported at all because `EMBED.md` §6 already publishes that
+ * exact shape in prose, for hosts that are not React, and because the app repo's conformance test has
+ * to import both halves of the wire to prove they still agree. See `protocol.ts` for both.
+ *
+ * ─────────────────────────────────────────────────────────────────────────────────────────────
+ * *** DO NOT ADD `"sideEffects": false` TO `package.json`. Measured, Bun 1.3.13: *** with that flag
+ * set, a `bun build` bundle of this barrel tree-shakes the entire package away and emits a 248-byte
+ * file that re-exports fourteen names and defines none of them. It builds, it publishes, and it fails
+ * at import time in the consumer. The flag is the correct thing to want and it is not worth this.
+ *
+ * (The package's OWN build is `tsc`, not a bundler - one emitted file per source file, matching
+ * `@skinhub/cdn` - so the flag would only ever bite a consumer's bundler. That is worse, not better:
+ * it moves the failure to somebody else's build.)
+ */
+export { SkinViewer, DEFAULT_ORIGIN } from './SkinViewer.js';
+export { useSkinViewer } from './useSkinViewer.js';
+/**
+ * *** ITEM OUT, LINK BACK. *** A picker is not finished when it can show the item - it is finished
+ * when it can hand you the link. See `item.ts` for the three easy-to-get-wrong facts these encode.
+ */
+export { fromInspectLink, toInspectLink, toPlacement } from './item.js';
+export type { MapName, SkinViewerCharm, SkinViewerError, SkinViewerErrorCode, SkinViewerHandle, SkinViewerItem, SkinViewerProps, SkinViewerSticker, TimeOfDay, ViewerAgent, ViewerBackground, ViewerCameraSettings, ViewerEnvironmentSettings, ViewerGloves, ViewerInteractions, ViewerOverlaySettings, ViewerQualitySettings, ViewerResize, ViewerSettings, ViewerStatus, ViewerSubject, ViewerView, } from './types.js';
+export { CHEAP_FIELDS, MAP_NAMES } from './types.js';
+export type { KnownWeaponId, WeaponId } from './weapons.js';
+export { defindexForWeaponId, isGloveId, isKnownWeaponId, normalizeWeaponId, WEAPON_ID_ALIASES, WEAPON_ID_BY_DEFINDEX, WEAPON_IDS, weaponIdForDefindex, } from './weapons.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwCG;AAEH,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAA;AAC5D,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAA;AAElD;;;GAGG;AACH,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,WAAW,CAAA;AAEvE,YAAY,EACX,OAAO,EACP,eAAe,EACf,eAAe,EACf,mBAAmB,EACnB,gBAAgB,EAChB,cAAc,EACd,eAAe,EACf,iBAAiB,EACjB,SAAS,EACT,WAAW,EACX,gBAAgB,EAChB,oBAAoB,EACpB,yBAAyB,EACzB,YAAY,EACZ,kBAAkB,EAClB,qBAAqB,EACrB,qBAAqB,EACrB,YAAY,EACZ,cAAc,EACd,YAAY,EACZ,aAAa,EACb,UAAU,GACV,MAAM,YAAY,CAAA;AACnB,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,YAAY,CAAA;AAEpD,YAAY,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAA;AAC3D,OAAO,EACN,mBAAmB,EACnB,SAAS,EACT,eAAe,EACf,iBAAiB,EACjB,iBAAiB,EACjB,qBAAqB,EACrB,UAAU,EACV,mBAAmB,GACnB,MAAM,cAAc,CAAA"}

package/dist/index.js

@@ -0,0 +1,51 @@
+/**
+ * *** `@skinhub/viewer` - THE SKINHUB CS2 SKIN VIEWER, AS A REACT COMPONENT. ***
+ *
+ *     import { SkinViewer } from '@skinhub/viewer'
+ *
+ *     <SkinViewer item={{ weapon: 'weapon_ak47', paintIndex: 1449, float: 0.27 }} style={{ height: 420 }} />
+ *     <SkinViewer inspectLink={tradeOffer.inspectLink} style={{ height: 420 }} />
+ *
+ * The 3D is not in here. It is a page on our origin that this component embeds and drives over
+ * `postMessage`, which is why installing this pulls in no `three`, no `@react-three/fiber` and no
+ * asset bundle - the only peer dependency is React. `EMBED.md` documents the same contract for stacks
+ * that are not React; this package is the React-shaped door onto it, not a second implementation.
+ *
+ * ─────────────────────────────────────────────────────────────────────────────────────────────
+ * WHAT IS EXPORTED, AND WHY THE LIST IS SHORT.
+ *
+ *   `SkinViewer`, `useSkinViewer`  - the component and its verbs.
+ *   the types                      - so a consumer can name a prop's shape in their own code.
+ *   `MAP_NAMES`, `WEAPON_IDS`      - the two closed vocabularies, as values, for building a picker.
+ *   the defindex table             - because an integrator with a Steam inventory has numbers.
+ *
+ * Nothing else FROM HERE. The URL builder and the diff are implementation: if they were public, a
+ * customer could build a state this package would then have to keep working, and the whole point of
+ * the version integer is that there is exactly one shape to keep working.
+ *
+ * *** THE WIRE TYPES ARE THE ONE EXCEPTION AND THEY ARE A SEPARATE DOOR - `@skinhub/viewer/protocol`.
+ * *** Deliberately not the barrel, so they never appear in an autocomplete next to `SkinViewer` and
+ * nobody reaches for them by accident. Exported at all because `EMBED.md` §6 already publishes that
+ * exact shape in prose, for hosts that are not React, and because the app repo's conformance test has
+ * to import both halves of the wire to prove they still agree. See `protocol.ts` for both.
+ *
+ * ─────────────────────────────────────────────────────────────────────────────────────────────
+ * *** DO NOT ADD `"sideEffects": false` TO `package.json`. Measured, Bun 1.3.13: *** with that flag
+ * set, a `bun build` bundle of this barrel tree-shakes the entire package away and emits a 248-byte
+ * file that re-exports fourteen names and defines none of them. It builds, it publishes, and it fails
+ * at import time in the consumer. The flag is the correct thing to want and it is not worth this.
+ *
+ * (The package's OWN build is `tsc`, not a bundler - one emitted file per source file, matching
+ * `@skinhub/cdn` - so the flag would only ever bite a consumer's bundler. That is worse, not better:
+ * it moves the failure to somebody else's build.)
+ */
+export { SkinViewer, DEFAULT_ORIGIN } from './SkinViewer.js';
+export { useSkinViewer } from './useSkinViewer.js';
+/**
+ * *** ITEM OUT, LINK BACK. *** A picker is not finished when it can show the item - it is finished
+ * when it can hand you the link. See `item.ts` for the three easy-to-get-wrong facts these encode.
+ */
+export { fromInspectLink, toInspectLink, toPlacement } from './item.js';
+export { CHEAP_FIELDS, MAP_NAMES } from './types.js';
+export { defindexForWeaponId, isGloveId, isKnownWeaponId, normalizeWeaponId, WEAPON_ID_ALIASES, WEAPON_ID_BY_DEFINDEX, WEAPON_IDS, weaponIdForDefindex, } from './weapons.js';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwCG;AAEH,OAAO,EAAE,UAAU,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAA;AAC5D,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAA;AAElD;;;GAGG;AACH,OAAO,EAAE,eAAe,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,WAAW,CAAA;AA0BvE,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,YAAY,CAAA;AAGpD,OAAO,EACN,mBAAmB,EACnB,SAAS,EACT,eAAe,EACf,iBAAiB,EACjB,iBAAiB,EACjB,qBAAqB,EACrB,UAAU,EACV,mBAAmB,GACnB,MAAM,cAAc,CAAA"}