@vizor-vr/player 0.2.0 → 0.2.1

package/dist/hls-adapter-C_a65zia.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hls-adapter-C_a65zia.js","sources":["../src/streaming/fairplay.ts","../src/streaming/hls-adapter.ts"],"sourcesContent":["/**\n * Native Safari FairPlay Streaming wiring. Safari plays HLS natively; FairPlay\n * is set up manually via EME: fetch the certificate, on `encrypted` create a\n * key session, on the SPC `message` POST it to the (Vizor-proxied) FairPlay\n * license URL with the x-api-key header, then update the session with the CKC.\n *\n * The pure helpers are unit-tested; the EME calls are runtime-only (no EME in\n * jsdom) and are documented for manual Safari verification. The exact EZDRM\n * FairPlay SPC/CKC encoding is pinned against the vendor guide at live\n * integration (isolated in buildSpcBody/parseCkc below).\n */\nimport type { DeliveryDrm } from '@vizor-vr/shared';\n\nconst FAIRPLAY_KEY_SYSTEM = 'com.apple.fps';\n\nexport function skdToContentId(skd: string): string {\n  return skd.replace(/^skd:\\/\\//, '');\n}\n\nexport function toBase64(bytes: Uint8Array): string {\n  let bin = '';\n  for (const b of bytes) bin += String.fromCharCode(b);\n  return btoa(bin);\n}\n\nexport function fromBase64(b64: string): Uint8Array {\n  const bin = atob(b64);\n  const out = new Uint8Array(bin.length);\n  for (let i = 0; i < bin.length; i++) out[i] = bin.charCodeAt(i);\n  return out;\n}\n\nexport interface FairPlayDeps {\n  fetch: typeof fetch;\n  requestMediaKeySystemAccess: typeof navigator.requestMediaKeySystemAccess;\n}\n\nexport async function setupFairPlay(\n  video: HTMLVideoElement,\n  drm: DeliveryDrm,\n  apiKey: string | undefined,\n  deps: FairPlayDeps = {\n    fetch: (...a) => fetch(...a),\n    requestMediaKeySystemAccess: (...a) => navigator.requestMediaKeySystemAccess(...a),\n  },\n): Promise<void> {\n  // Self-contain all setup failures (EME unavailable, cert fetch, setMediaKeys)\n  // so callers can fire-and-forget without producing an unhandled rejection.\n  try {\n    const access = await deps.requestMediaKeySystemAccess(FAIRPLAY_KEY_SYSTEM, [\n      {\n        initDataTypes: ['skd', 'cenc'],\n        videoCapabilities: [{ contentType: 'application/vnd.apple.mpegurl', robustness: '' }],\n        distinctiveIdentifier: 'not-allowed',\n        persistentState: 'not-allowed',\n      } as MediaKeySystemConfiguration,\n    ]);\n    const mediaKeys = await access.createMediaKeys();\n\n    if (drm.fairplayCertUrl) {\n      const certRes = await deps.fetch(drm.fairplayCertUrl, { headers: apiKey ? { 'x-api-key': apiKey } : {} });\n      const cert = new Uint8Array(await certRes.arrayBuffer());\n      await mediaKeys.setServerCertificate(cert);\n    }\n    await video.setMediaKeys(mediaKeys);\n\n    video.addEventListener('encrypted', (event) => {\n      const e = event as unknown as { initDataType: string; initData: BufferSource };\n      const session = mediaKeys.createSession();\n      session.addEventListener('message', (msgEvent) => {\n        const m = msgEvent as unknown as { message: ArrayBuffer };\n        const spc = new Uint8Array(m.message);\n        void (async () => {\n          try {\n            const res = await deps.fetch(drm.licenseUrls.fairplay, {\n              method: 'POST',\n              headers: { 'content-type': 'application/octet-stream', ...(apiKey ? { 'x-api-key': apiKey } : {}) },\n              body: buildSpcBody(spc),\n            });\n            const ckc = new Uint8Array(await res.arrayBuffer());\n            await session.update(parseCkc(ckc));\n          } catch (err) {\n            console.error('[Vizor] FairPlay license error:', err);\n          }\n        })();\n      });\n      void session.generateRequest(e.initDataType, e.initData);\n    });\n  } catch (err) {\n    console.error('[Vizor] FairPlay setup failed:', err);\n  }\n}\n\n/** EZDRM FairPlay request body. Pinned against the vendor guide at integration. */\nfunction buildSpcBody(spc: Uint8Array): BodyInit {\n  return spc as BodyInit;\n}\n/** Parse the CKC out of the EZDRM response. Pinned at integration. */\nfunction parseCkc(ckc: Uint8Array): BufferSource {\n  return ckc as unknown as BufferSource;\n}\n","import type { QualityLevel } from '@vizor-vr/shared';\nimport type { IStreamingAdapter, DrmContext } from './types.js';\nimport { setupFairPlay } from './fairplay.js';\n\n/**\n * HLS streaming adapter wrapping hls.js.\n * Lazy-loaded via dynamic import — only included in the bundle\n * when an HLS source is detected.\n *\n * Falls back to native HLS on Safari (no hls.js needed).\n */\nexport class HlsAdapter implements IStreamingAdapter {\n  private videoElement: HTMLVideoElement | null = null;\n  private hls: unknown | null = null;\n  private _isAttached = false;\n  private _isNative = false;\n  private levels: QualityLevel[] = [];\n\n  /** Enable low-latency mode for live streams */\n  lowLatencyMode = false;\n\n  get supportsABR(): boolean {\n    return !this._isNative;\n  }\n\n  get isAttached(): boolean {\n    return this._isAttached;\n  }\n\n  attach(videoElement: HTMLVideoElement): void {\n    this.videoElement = videoElement;\n    this._isAttached = true;\n  }\n\n  async load(url: string, drm?: DrmContext): Promise<void> {\n    if (!this.videoElement) return;\n\n    // Safari supports HLS natively — no need for hls.js\n    if (this.videoElement.canPlayType('application/vnd.apple.mpegurl')) {\n      this.videoElement.src = url;\n      this._isNative = true;\n      if (drm) void setupFairPlay(this.videoElement, drm.config, drm.apiKey);\n      return;\n    }\n\n    try {\n      const HlsModule = await import('hls.js');\n      const Hls = HlsModule.default;\n\n      if (!Hls.isSupported()) {\n        console.error('[Vizor] HLS.js is not supported in this browser');\n        return;\n      }\n\n      // Destroy previous instance\n      if (this.hls) {\n        (this.hls as { destroy(): void }).destroy();\n      }\n\n      const hls = new Hls({\n        enableWorker: true,\n        lowLatencyMode: this.lowLatencyMode,\n        ...(this.lowLatencyMode\n          ? { liveSyncDurationCount: 3, liveMaxLatencyDurationCount: 6 }\n          : {}),\n        ...(drm\n          ? {\n              emeEnabled: true,\n              drmSystems: {\n                'com.widevine.alpha': { licenseUrl: drm.config.licenseUrls.widevine },\n                'com.microsoft.playready': { licenseUrl: drm.config.licenseUrls.playready },\n              },\n              licenseXhrSetup: (xhr: XMLHttpRequest, _url: string) => {\n                if (drm.apiKey) xhr.setRequestHeader('x-api-key', drm.apiKey);\n              },\n            }\n          : {}),\n      });\n\n      hls.attachMedia(this.videoElement);\n      hls.loadSource(url);\n\n      hls.on(Hls.Events.MANIFEST_PARSED, () => {\n        this.levels = hls.levels.map(\n          (level: { height: number; width: number; bitrate: number }, i: number) => ({\n            label: level.height ? `${level.height}p` : `Level ${i}`,\n            width: level.width,\n            height: level.height,\n            bitrate: level.bitrate,\n            active: i === hls.currentLevel,\n          }),\n        );\n      });\n\n      hls.on(Hls.Events.ERROR, (_event: string, data: { fatal: boolean; type: string; details: string }) => {\n        if (data.fatal) {\n          console.error('[Vizor] Fatal HLS error:', data.type, data.details);\n          switch (data.type) {\n            case Hls.ErrorTypes.NETWORK_ERROR:\n              hls.startLoad();\n              break;\n            case Hls.ErrorTypes.MEDIA_ERROR:\n              hls.recoverMediaError();\n              break;\n            default:\n              this.destroy();\n              break;\n          }\n        }\n      });\n\n      this.hls = hls;\n    } catch (e) {\n      console.error('[Vizor] Failed to load hls.js:', e);\n    }\n  }\n\n  getQualityLevels(): QualityLevel[] {\n    return this.levels;\n  }\n\n  setQualityLevel(index: number): void {\n    if (!this.hls || this._isNative) return;\n    const hls = this.hls as { currentLevel: number };\n    hls.currentLevel = index; // -1 = auto\n  }\n\n  destroy(): void {\n    if (this.hls && !this._isNative) {\n      (this.hls as { destroy(): void }).destroy();\n    }\n    this.hls = null;\n    this.videoElement = null;\n    this._isAttached = false;\n    this._isNative = false;\n    this.levels = [];\n  }\n}\n"],"names":[],"mappings":"AAaA,MAAM,sBAAsB;AAwB5B,eAAsB,cACpB,OACA,KACA,QACA,OAAqB;AAAA,EACnB,OAAO,IAAI,MAAM,MAAM,GAAG,CAAC;AAAA,EAC3B,6BAA6B,IAAI,MAAM,UAAU,4BAA4B,GAAG,CAAC;AACnF,GACe;AAGf,MAAI;AACF,UAAM,SAAS,MAAM,KAAK,4BAA4B,qBAAqB;AAAA,MACzE;AAAA,QACE,eAAe,CAAC,OAAO,MAAM;AAAA,QAC7B,mBAAmB,CAAC,EAAE,aAAa,iCAAiC,YAAY,IAAI;AAAA,QACpF,uBAAuB;AAAA,QACvB,iBAAiB;AAAA,MAAA;AAAA,IACnB,CACD;AACD,UAAM,YAAY,MAAM,OAAO,gBAAA;AAE/B,QAAI,IAAI,iBAAiB;AACvB,YAAM,UAAU,MAAM,KAAK,MAAM,IAAI,iBAAiB,EAAE,SAAS,SAAS,EAAE,aAAa,OAAA,IAAW,CAAA,GAAI;AACxG,YAAM,OAAO,IAAI,WAAW,MAAM,QAAQ,aAAa;AACvD,YAAM,UAAU,qBAAqB,IAAI;AAAA,IAC3C;AACA,UAAM,MAAM,aAAa,SAAS;AAElC,UAAM,iBAAiB,aAAa,CAAC,UAAU;AAC7C,YAAM,IAAI;AACV,YAAM,UAAU,UAAU,cAAA;AAC1B,cAAQ,iBAAiB,WAAW,CAAC,aAAa;AAChD,cAAM,IAAI;AACV,cAAM,MAAM,IAAI,WAAW,EAAE,OAAO;AACpC,cAAM,YAAY;AAChB,cAAI;AACF,kBAAM,MAAM,MAAM,KAAK,MAAM,IAAI,YAAY,UAAU;AAAA,cACrD,QAAQ;AAAA,cACR,SAAS,EAAE,gBAAgB,4BAA4B,GAAI,SAAS,EAAE,aAAa,OAAA,IAAW,GAAC;AAAA,cAC/F,MAAM,aAAa,GAAG;AAAA,YAAA,CACvB;AACD,kBAAM,MAAM,IAAI,WAAW,MAAM,IAAI,aAAa;AAClD,kBAAM,QAAQ,OAAO,SAAS,GAAG,CAAC;AAAA,UACpC,SAAS,KAAK;AACZ,oBAAQ,MAAM,mCAAmC,GAAG;AAAA,UACtD;AAAA,QACF,GAAA;AAAA,MACF,CAAC;AACD,WAAK,QAAQ,gBAAgB,EAAE,cAAc,EAAE,QAAQ;AAAA,IACzD,CAAC;AAAA,EACH,SAAS,KAAK;AACZ,YAAQ,MAAM,kCAAkC,GAAG;AAAA,EACrD;AACF;AAGA,SAAS,aAAa,KAA2B;AAC/C,SAAO;AACT;AAEA,SAAS,SAAS,KAA+B;AAC/C,SAAO;AACT;ACzFO,MAAM,WAAwC;AAAA,EAC3C,eAAwC;AAAA,EACxC,MAAsB;AAAA,EACtB,cAAc;AAAA,EACd,YAAY;AAAA,EACZ,SAAyB,CAAA;AAAA;AAAA,EAGjC,iBAAiB;AAAA,EAEjB,IAAI,cAAuB;AACzB,WAAO,CAAC,KAAK;AAAA,EACf;AAAA,EAEA,IAAI,aAAsB;AACxB,WAAO,KAAK;AAAA,EACd;AAAA,EAEA,OAAO,cAAsC;AAC3C,SAAK,eAAe;AACpB,SAAK,cAAc;AAAA,EACrB;AAAA,EAEA,MAAM,KAAK,KAAa,KAAiC;AACvD,QAAI,CAAC,KAAK,aAAc;AAGxB,QAAI,KAAK,aAAa,YAAY,+BAA+B,GAAG;AAClE,WAAK,aAAa,MAAM;AACxB,WAAK,YAAY;AACjB,UAAI,UAAU,cAAc,KAAK,cAAc,IAAI,QAAQ,IAAI,MAAM;AACrE;AAAA,IACF;AAEA,QAAI;AACF,YAAM,YAAY,MAAM,OAAO,QAAQ;AACvC,YAAM,MAAM,UAAU;AAEtB,UAAI,CAAC,IAAI,eAAe;AACtB,gBAAQ,MAAM,iDAAiD;AAC/D;AAAA,MACF;AAGA,UAAI,KAAK,KAAK;AACX,aAAK,IAA4B,QAAA;AAAA,MACpC;AAEA,YAAM,MAAM,IAAI,IAAI;AAAA,QAClB,cAAc;AAAA,QACd,gBAAgB,KAAK;AAAA,QACrB,GAAI,KAAK,iBACL,EAAE,uBAAuB,GAAG,6BAA6B,EAAA,IACzD,CAAA;AAAA,QACJ,GAAI,MACA;AAAA,UACE,YAAY;AAAA,UACZ,YAAY;AAAA,YACV,sBAAsB,EAAE,YAAY,IAAI,OAAO,YAAY,SAAA;AAAA,YAC3D,2BAA2B,EAAE,YAAY,IAAI,OAAO,YAAY,UAAA;AAAA,UAAU;AAAA,UAE5E,iBAAiB,CAAC,KAAqB,SAAiB;AACtD,gBAAI,IAAI,OAAQ,KAAI,iBAAiB,aAAa,IAAI,MAAM;AAAA,UAC9D;AAAA,QAAA,IAEF,CAAA;AAAA,MAAC,CACN;AAED,UAAI,YAAY,KAAK,YAAY;AACjC,UAAI,WAAW,GAAG;AAElB,UAAI,GAAG,IAAI,OAAO,iBAAiB,MAAM;AACvC,aAAK,SAAS,IAAI,OAAO;AAAA,UACvB,CAAC,OAA2D,OAAe;AAAA,YACzE,OAAO,MAAM,SAAS,GAAG,MAAM,MAAM,MAAM,SAAS,CAAC;AAAA,YACrD,OAAO,MAAM;AAAA,YACb,QAAQ,MAAM;AAAA,YACd,SAAS,MAAM;AAAA,YACf,QAAQ,MAAM,IAAI;AAAA,UAAA;AAAA,QACpB;AAAA,MAEJ,CAAC;AAED,UAAI,GAAG,IAAI,OAAO,OAAO,CAAC,QAAgB,SAA4D;AACpG,YAAI,KAAK,OAAO;AACd,kBAAQ,MAAM,4BAA4B,KAAK,MAAM,KAAK,OAAO;AACjE,kBAAQ,KAAK,MAAA;AAAA,YACX,KAAK,IAAI,WAAW;AAClB,kBAAI,UAAA;AACJ;AAAA,YACF,KAAK,IAAI,WAAW;AAClB,kBAAI,kBAAA;AACJ;AAAA,YACF;AACE,mBAAK,QAAA;AACL;AAAA,UAAA;AAAA,QAEN;AAAA,MACF,CAAC;AAED,WAAK,MAAM;AAAA,IACb,SAAS,GAAG;AACV,cAAQ,MAAM,kCAAkC,CAAC;AAAA,IACnD;AAAA,EACF;AAAA,EAEA,mBAAmC;AACjC,WAAO,KAAK;AAAA,EACd;AAAA,EAEA,gBAAgB,OAAqB;AACnC,QAAI,CAAC,KAAK,OAAO,KAAK,UAAW;AACjC,UAAM,MAAM,KAAK;AACjB,QAAI,eAAe;AAAA,EACrB;AAAA,EAEA,UAAgB;AACd,QAAI,KAAK,OAAO,CAAC,KAAK,WAAW;AAC9B,WAAK,IAA4B,QAAA;AAAA,IACpC;AACA,SAAK,MAAM;AACX,SAAK,eAAe;AACpB,SAAK,cAAc;AACnB,SAAK,YAAY;AACjB,SAAK,SAAS,CAAA;AAAA,EAChB;AACF;"}

package/dist/hub/hub-controller.d.ts

@@ -0,0 +1,31 @@
+import type { VzEventEmitter } from '../core/event-emitter.js';
+import type { HubItem } from './hub-model.js';
+export interface HubControllerOptions {
+    items: HubItem[];
+    events: VzEventEmitter;
+    /** Enter an item: swap the lobby scene for that item's playback. */
+    onShowItem: (item: HubItem, index: number) => void;
+    /** Return to the lobby scene. */
+    onShowLobby: () => void;
+}
+/**
+ * Selection state machine for vz-hub. Tracks whether the viewer is in the lobby
+ * (activeIndex -1) or playing an item, drives the show-item/show-lobby callbacks
+ * the element wires to the renderer, and fires `vz-hub-select` on entry. Kept
+ * separate from the WebGL element so the transitions are unit-tested.
+ */
+export declare class HubController {
+    private items;
+    private events;
+    private onShowItem;
+    private onShowLobby;
+    private activeIndex;
+    constructor(opts: HubControllerOptions);
+    isInLobby(): boolean;
+    getActiveIndex(): number;
+    /** Select an item by index: play it and fire vz-hub-select. No-op if invalid or already active. */
+    select(index: number): void;
+    /** Return to the lobby. No-op if already there. */
+    back(): void;
+}
+//# sourceMappingURL=hub-controller.d.ts.map

package/dist/hub/hub-controller.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hub-controller.d.ts","sourceRoot":"","sources":["../../src/hub/hub-controller.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAC/D,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,gBAAgB,CAAC;AAE9C,MAAM,WAAW,oBAAoB;IACnC,KAAK,EAAE,OAAO,EAAE,CAAC;IACjB,MAAM,EAAE,cAAc,CAAC;IACvB,oEAAoE;IACpE,UAAU,EAAE,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,KAAK,IAAI,CAAC;IACnD,iCAAiC;IACjC,WAAW,EAAE,MAAM,IAAI,CAAC;CACzB;AAED;;;;;GAKG;AACH,qBAAa,aAAa;IACxB,OAAO,CAAC,KAAK,CAAY;IACzB,OAAO,CAAC,MAAM,CAAiB;IAC/B,OAAO,CAAC,UAAU,CAAyC;IAC3D,OAAO,CAAC,WAAW,CAAa;IAChC,OAAO,CAAC,WAAW,CAAM;gBAEb,IAAI,EAAE,oBAAoB;IAOtC,SAAS,IAAI,OAAO;IAIpB,cAAc,IAAI,MAAM;IAIxB,mGAAmG;IACnG,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI;IAc3B,mDAAmD;IACnD,IAAI,IAAI,IAAI;CAKb"}

package/dist/hub/hub-layout.d.ts

@@ -0,0 +1,23 @@
+/**
+ * Pure, DOM-free layout math for the vz-hub lobby: distribute N content panels
+ * around the viewer as {lat, lon} positions (degrees), so the placement can be
+ * unit-tested without a renderer. Panels sit at eye level (lat 0) and are
+ * centered on dead-ahead (lon 0); once the arc would wrap past ~330° they
+ * spread evenly around a full ring instead.
+ */
+export interface HubPanelPosition {
+    /** Vertical angle in degrees (0 = eye level). */
+    lat: number;
+    /** Horizontal angle in degrees, normalized to [-180, 180] (0 = dead ahead). */
+    lon: number;
+}
+export interface HubLayoutOptions {
+    /** Degrees between adjacent panels in the front-arc layout. */
+    spacingDeg?: number;
+    /** Eye-level offset for all panels. */
+    lat?: number;
+}
+/** Normalize an angle in degrees to the range [-180, 180]. */
+export declare function normalizeLon(lon: number): number;
+export declare function hubPanelLayout(count: number, opts?: HubLayoutOptions): HubPanelPosition[];
+//# sourceMappingURL=hub-layout.d.ts.map

package/dist/hub/hub-layout.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hub-layout.d.ts","sourceRoot":"","sources":["../../src/hub/hub-layout.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,MAAM,WAAW,gBAAgB;IAC/B,iDAAiD;IACjD,GAAG,EAAE,MAAM,CAAC;IACZ,+EAA+E;IAC/E,GAAG,EAAE,MAAM,CAAC;CACb;AAED,MAAM,WAAW,gBAAgB;IAC/B,+DAA+D;IAC/D,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,uCAAuC;IACvC,GAAG,CAAC,EAAE,MAAM,CAAC;CACd;AAED,8DAA8D;AAC9D,wBAAgB,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAEhD;AAED,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,GAAE,gBAAqB,GAAG,gBAAgB,EAAE,CAe7F"}

package/dist/hub/hub-model.d.ts

@@ -0,0 +1,27 @@
+/**
+ * Pure item model for vz-hub. Turns raw parsed <vz-hub-item> attributes into a
+ * normalized, playable HubItem list (stable ids, defaults, drops items with no
+ * source) so the parsing is unit-tested rather than done inline in the element.
+ */
+export interface RawHubItem {
+    src?: string | null;
+    poster?: string | null;
+    title?: string | null;
+    format?: string | null;
+    contentId?: string | null;
+}
+export interface HubItem {
+    /** Stable id: the content-id if present, else a positional `item-<n>`. */
+    id: string;
+    /** Playable media URL. */
+    src: string;
+    /** Thumbnail shown on the lobby panel (null = fall back to a placeholder). */
+    poster: string | null;
+    title: string;
+    /** VzFormat string; defaults to MONO_360. */
+    format: string;
+}
+/** Heuristic: does a source URL point at a still image (→ vz-img) vs video (→ vz-video)? */
+export declare function isImageSource(src: string): boolean;
+export declare function normalizeHubItems(raw: RawHubItem[]): HubItem[];
+//# sourceMappingURL=hub-model.d.ts.map

package/dist/hub/hub-model.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hub-model.d.ts","sourceRoot":"","sources":["../../src/hub/hub-model.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,MAAM,WAAW,UAAU;IACzB,GAAG,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3B;AAED,MAAM,WAAW,OAAO;IACtB,0EAA0E;IAC1E,EAAE,EAAE,MAAM,CAAC;IACX,0BAA0B;IAC1B,GAAG,EAAE,MAAM,CAAC;IACZ,8EAA8E;IAC9E,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,KAAK,EAAE,MAAM,CAAC;IACd,6CAA6C;IAC7C,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,4FAA4F;AAC5F,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAGlD;AAED,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,UAAU,EAAE,GAAG,OAAO,EAAE,CAc9D"}

package/dist/hub/hub-panel-manager.d.ts

@@ -0,0 +1,16 @@
+import type { Scene, PerspectiveCamera } from 'three';
+import type { HubItem } from './hub-model.js';
+/**
+ * Orchestrates hub lobby panels: renders poster panels (HubPanelRenderer) and
+ * reuses the shared HotspotInteraction raycaster for click selection, mapping
+ * the sprite's index tag back to an item index. Mirrors HotspotManager.
+ */
+export declare class HubPanelManager {
+    private renderer;
+    private interaction;
+    constructor(scene: Scene, camera: PerspectiveCamera, domElement: HTMLElement, onSelect: (index: number) => void);
+    setItems(items: HubItem[]): void;
+    clear(): void;
+    dispose(): void;
+}
+//# sourceMappingURL=hub-panel-manager.d.ts.map

package/dist/hub/hub-panel-manager.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hub-panel-manager.d.ts","sourceRoot":"","sources":["../../src/hub/hub-panel-manager.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,KAAK,EAAE,iBAAiB,EAAE,MAAM,OAAO,CAAC;AAGtD,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,gBAAgB,CAAC;AAE9C;;;;GAIG;AACH,qBAAa,eAAe;IAC1B,OAAO,CAAC,QAAQ,CAAmB;IACnC,OAAO,CAAC,WAAW,CAAqB;gBAGtC,KAAK,EAAE,KAAK,EACZ,MAAM,EAAE,iBAAiB,EACzB,UAAU,EAAE,WAAW,EACvB,QAAQ,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI;IAYnC,QAAQ,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,IAAI;IAIhC,KAAK,IAAI,IAAI;IAIb,OAAO,IAAI,IAAI;CAIhB"}

package/dist/hub/hub-panel-renderer.d.ts

@@ -0,0 +1,26 @@
+import { Sprite } from 'three';
+import type { Scene } from 'three';
+import type { HubItem } from './hub-model.js';
+/**
+ * Renders clickable lobby panels for vz-hub: one sprite per HubItem, positioned
+ * around the viewer via hubPanelLayout on the inside of the panorama sphere.
+ * Each sprite starts as a titled placeholder card and, if the item has a poster,
+ * swaps to the poster texture once it loads. `userData.portalTo` carries the
+ * item index as a string so the shared HotspotInteraction raycaster can drive
+ * selection with no changes.
+ */
+export declare class HubPanelRenderer {
+    private sprites;
+    private posterTextures;
+    private scene;
+    private loader;
+    constructor(scene: Scene);
+    /** Build a panel sprite per item and add them to the scene. */
+    setItems(items: HubItem[]): void;
+    /** Sprites for raycasting (consumed by HotspotInteraction). */
+    getSprites(): Sprite[];
+    clear(): void;
+    dispose(): void;
+    private createPanelSprite;
+}
+//# sourceMappingURL=hub-panel-renderer.d.ts.map

package/dist/hub/hub-panel-renderer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hub-panel-renderer.d.ts","sourceRoot":"","sources":["../../src/hub/hub-panel-renderer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAA8E,MAAM,OAAO,CAAC;AAC3G,OAAO,KAAK,EAAE,KAAK,EAAW,MAAM,OAAO,CAAC;AAG5C,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,gBAAgB,CAAC;AAQ9C;;;;;;;GAOG;AACH,qBAAa,gBAAgB;IAC3B,OAAO,CAAC,OAAO,CAAgB;IAC/B,OAAO,CAAC,cAAc,CAAiB;IACvC,OAAO,CAAC,KAAK,CAAQ;IACrB,OAAO,CAAC,MAAM,CAAuB;gBAEzB,KAAK,EAAE,KAAK;IAIxB,+DAA+D;IAC/D,QAAQ,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,IAAI;IAUhC,+DAA+D;IAC/D,UAAU,IAAI,MAAM,EAAE;IAItB,KAAK,IAAI,IAAI;IAWb,OAAO,IAAI,IAAI;IAIf,OAAO,CAAC,iBAAiB;CAyD1B"}

package/dist/license/__tests__/cache.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=cache.test.d.ts.map

package/dist/license/__tests__/cache.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cache.test.d.ts","sourceRoot":"","sources":["../../../src/license/__tests__/cache.test.ts"],"names":[],"mappings":""}

package/dist/license/__tests__/feature-gate.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=feature-gate.test.d.ts.map

package/dist/license/__tests__/feature-gate.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"feature-gate.test.d.ts","sourceRoot":"","sources":["../../../src/license/__tests__/feature-gate.test.ts"],"names":[],"mappings":""}

package/dist/license/__tests__/format-gate.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=format-gate.test.d.ts.map

package/dist/license/__tests__/format-gate.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"format-gate.test.d.ts","sourceRoot":"","sources":["../../../src/license/__tests__/format-gate.test.ts"],"names":[],"mappings":""}

package/dist/license/__tests__/license-checker.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"license-checker.test.d.ts","sourceRoot":"","sources":["../../../src/license/__tests__/license-checker.test.ts"],"names":[],"mappings":""}

package/dist/license/__tests__/master-key.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"master-key.test.d.ts","sourceRoot":"","sources":["../../../src/license/__tests__/master-key.test.ts"],"names":[],"mappings":""}

package/dist/license/__tests__/verify-no-ed25519.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=verify-no-ed25519.test.d.ts.map

package/dist/license/__tests__/verify-no-ed25519.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"verify-no-ed25519.test.d.ts","sourceRoot":"","sources":["../../../src/license/__tests__/verify-no-ed25519.test.ts"],"names":[],"mappings":""}

package/dist/license/__tests__/verify.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=verify.test.d.ts.map

package/dist/license/__tests__/verify.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"verify.test.d.ts","sourceRoot":"","sources":["../../../src/license/__tests__/verify.test.ts"],"names":[],"mappings":""}

package/dist/license/cache.d.ts

@@ -0,0 +1,4 @@
+import type { LicenseResult } from '@vizor-vr/shared';
+export declare function writeLicenseCache(licenseKey: string, domain: string, result: LicenseResult, now?: number): void;
+export declare function readLicenseCache(licenseKey: string, domain: string, now?: number): LicenseResult | null;
+//# sourceMappingURL=cache.d.ts.map

package/dist/license/cache.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cache.d.ts","sourceRoot":"","sources":["../../src/license/cache.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AA8CtD,wBAAgB,iBAAiB,CAC/B,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,aAAa,EACrB,GAAG,GAAE,MAAmB,GACvB,IAAI,CAYN;AAED,wBAAgB,gBAAgB,CAC9B,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,MAAM,EACd,GAAG,GAAE,MAAmB,GACvB,aAAa,GAAG,IAAI,CA8BtB"}

package/dist/license/drm-gate.d.ts

@@ -0,0 +1,15 @@
+/**
+ * DRM tier gate. Unlike other player features, a DRM asset is encrypted-only —
+ * there is no plain fallback — so an unlicensed tier is BLOCKED (an upgrade
+ * overlay) rather than gracefully degraded. The two inputs are whether the
+ * asset carries a DRM config and whether the resolved license enables `drm`.
+ */
+export type DrmGateDecision = {
+    action: 'none';
+} | {
+    action: 'allow';
+} | {
+    action: 'block';
+};
+export declare function resolveDrmGate(hasDrmConfig: boolean, drmFeatureEnabled: boolean): DrmGateDecision;
+//# sourceMappingURL=drm-gate.d.ts.map

package/dist/license/drm-gate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"drm-gate.d.ts","sourceRoot":"","sources":["../../src/license/drm-gate.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,MAAM,MAAM,eAAe,GAAG;IAAE,MAAM,EAAE,MAAM,CAAA;CAAE,GAAG;IAAE,MAAM,EAAE,OAAO,CAAA;CAAE,GAAG;IAAE,MAAM,EAAE,OAAO,CAAA;CAAE,CAAC;AAE7F,wBAAgB,cAAc,CAAC,YAAY,EAAE,OAAO,EAAE,iBAAiB,EAAE,OAAO,GAAG,eAAe,CAGjG"}

package/dist/license/feature-gate.d.ts

@@ -0,0 +1,27 @@
+import type { FeatureFlags } from '@vizor-vr/shared';
+/**
+ * Tier gating for player features (webxr, spatialAudio, tours, cinema, playlist,
+ * …). This is the feature-flag analogue of `resolveFormatGate` in format-gate.ts.
+ *
+ * Per product decision the player degrades gracefully rather than hard-failing:
+ * a tier that lacks a feature falls back to a sensible baseline (e.g. a tour
+ * shows its start panorama without portal navigation, a playlist plays its first
+ * item, spatial audio plays as plain stereo) instead of blocking. So the only
+ * two outcomes here are `allow` (feature licensed) and `degrade` (feature not
+ * licensed — the caller applies its own fallback). A caller that has *no*
+ * sensible fallback can still choose to render an upgrade overlay on `degrade`.
+ */
+export type FeatureGateDecision = {
+    action: 'allow';
+} | {
+    action: 'degrade';
+};
+/**
+ * Decide whether a feature may run under the current license.
+ *
+ * @param _feature the feature flag name (kept for call-site clarity + future
+ *   per-feature policy; the decision today depends only on `enabled`).
+ * @param enabled whether the resolved license enables the feature.
+ */
+export declare function resolveFeatureGate(_feature: keyof FeatureFlags, enabled: boolean): FeatureGateDecision;
+//# sourceMappingURL=feature-gate.d.ts.map

package/dist/license/feature-gate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"feature-gate.d.ts","sourceRoot":"","sources":["../../src/license/feature-gate.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAErD;;;;;;;;;;;GAWG;AACH,MAAM,MAAM,mBAAmB,GAC3B;IAAE,MAAM,EAAE,OAAO,CAAA;CAAE,GACnB;IAAE,MAAM,EAAE,SAAS,CAAA;CAAE,CAAC;AAE1B;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAChC,QAAQ,EAAE,MAAM,YAAY,EAC5B,OAAO,EAAE,OAAO,GACf,mBAAmB,CAErB"}

package/dist/license/format-gate.d.ts

@@ -0,0 +1,23 @@
+import { VzFormat } from '@vizor-vr/shared';
+import type { FeatureFlags } from '@vizor-vr/shared';
+/**
+ * Tier gating for playback formats. A free-tier viewer must not get the paid
+ * stereo/180 formats, but per product decision we degrade gracefully rather than
+ * hard-fail: a stereo format renders as its mono equivalent (one eye), and only
+ * formats with no sensible fallback (a 180 half-sphere projection) are blocked.
+ */
+export type FormatGateDecision = {
+    action: 'allow';
+} | {
+    action: 'downgrade';
+    to: VzFormat;
+} | {
+    action: 'block';
+    requires: 'stereoFormats' | 'formats180';
+};
+/**
+ * Decide whether a format may play under the given license features, returning a
+ * graceful downgrade where one exists.
+ */
+export declare function resolveFormatGate(format: VzFormat | string, features: FeatureFlags): FormatGateDecision;
+//# sourceMappingURL=format-gate.d.ts.map

package/dist/license/format-gate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"format-gate.d.ts","sourceRoot":"","sources":["../../src/license/format-gate.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAiB,MAAM,kBAAkB,CAAC;AAC3D,OAAO,KAAK,EAAE,YAAY,EAA8B,MAAM,kBAAkB,CAAC;AAEjF;;;;;GAKG;AACH,MAAM,MAAM,kBAAkB,GAC1B;IAAE,MAAM,EAAE,OAAO,CAAA;CAAE,GACnB;IAAE,MAAM,EAAE,WAAW,CAAC;IAAC,EAAE,EAAE,QAAQ,CAAA;CAAE,GACrC;IAAE,MAAM,EAAE,OAAO,CAAC;IAAC,QAAQ,EAAE,eAAe,GAAG,YAAY,CAAA;CAAE,CAAC;AAiBlE;;;GAGG;AACH,wBAAgB,iBAAiB,CAC/B,MAAM,EAAE,QAAQ,GAAG,MAAM,EACzB,QAAQ,EAAE,YAAY,GACrB,kBAAkB,CAgBpB"}

package/dist/license/license-checker.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"license-checker.d.ts","sourceRoot":"","sources":["../../src/license/license-checker.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAKnE,MAAM,WAAW,aAAa;IAC5B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,wEAAwE;IACxE,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB;AAID;;;;;;GAMG;AACH,wBAAsB,YAAY,CAAC,MAAM,EAAE,aAAa,GAAG,OAAO,CAAC,aAAa,CAAC,CAiBhF"}
+{"version":3,"file":"license-checker.d.ts","sourceRoot":"","sources":["../../src/license/license-checker.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAOnE,MAAM,WAAW,aAAa;IAC5B,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,wEAAwE;IACxE,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB;AAID;;;;;;GAMG;AACH,wBAAsB,YAAY,CAAC,MAAM,EAAE,aAAa,GAAG,OAAO,CAAC,aAAa,CAAC,CAkBhF"}

package/dist/license/master-key.d.ts

@@ -1,14 +1,18 @@
 import type { LicenseResult } from '@vizor-vr/shared';
 /**
- * Check if a standalone license result represents a master key.
+ * Check whether a standalone license key is a master key (→ enterprise features).
  *
- * A master key is a specially-signed standalone key where:
- * 1. The payload tier is 'master'
- * 2. The payload publicKey matches the build-time master public key
+ * A master key is an ordinary server-signed license whose verified payload tier
+ * is `'master'`. It is verified against the pinned trusted public key exactly
+ * like any other license — a REAL Ed25519 signature is required.
  *
- * If both conditions are met, the result is upgraded to enterprise tier.
+ * SECURITY: the previous implementation granted enterprise on two plain
+ * string-equality checks (`tier === 'master'` and `payload.publicKey === masterPubKey`)
+ * with NO signature verification, so anyone who knew the master public key could
+ * self-sign a master license. That bypass is gone.
  *
- * @returns The original result (possibly upgraded to enterprise), or null if not a master key
+ * @returns an enterprise `LicenseResult`, or `null` if this is not a validly
+ *          signed master key.
  */
-export declare function checkMasterKey(licenseKey: string): LicenseResult | null;
+export declare function checkMasterKey(licenseKey: string): Promise<LicenseResult | null>;
 //# sourceMappingURL=master-key.d.ts.map

package/dist/license/master-key.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"master-key.d.ts","sourceRoot":"","sources":["../../src/license/master-key.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAUtD;;;;;;;;;;GAUG;AACH,wBAAgB,cAAc,CAAC,UAAU,EAAE,MAAM,GAAG,aAAa,GAAG,IAAI,CAgCvE"}
+{"version":3,"file":"master-key.d.ts","sourceRoot":"","sources":["../../src/license/master-key.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAKtD;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,cAAc,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC,CAWtF"}

package/dist/license/trusted-key.d.ts

@@ -0,0 +1,7 @@
+/**
+ * The single trusted server public key that ALL standalone license signatures are
+ * verified against. Returns '' when no key was pinned at build time (e.g. a dev
+ * build), in which case every standalone license fails closed (treated as free).
+ */
+export declare function getTrustedPublicKey(): string;
+//# sourceMappingURL=trusted-key.d.ts.map

package/dist/license/trusted-key.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"trusted-key.d.ts","sourceRoot":"","sources":["../../src/license/trusted-key.ts"],"names":[],"mappings":"AAWA;;;;GAIG;AACH,wBAAgB,mBAAmB,IAAI,MAAM,CAE5C"}

package/dist/license/verify.d.ts

@@ -0,0 +1,7 @@
+export interface VerifiedPayload {
+    tier: string;
+    domains?: string[];
+    expiresAt?: string;
+}
+export declare function verifyLicenseKey(licenseKey: string, trustedPublicKeyHex: string): Promise<VerifiedPayload | null>;
+//# sourceMappingURL=verify.d.ts.map

package/dist/license/verify.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"verify.d.ts","sourceRoot":"","sources":["../../src/license/verify.ts"],"names":[],"mappings":"AAmBA,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;CAEpB;AAED,wBAAsB,gBAAgB,CACpC,UAAU,EAAE,MAAM,EAClB,mBAAmB,EAAE,MAAM,GAC1B,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC,CA2CjC"}