@vosjs/shared 0.2.0 → 0.4.0

package/README.md

@@ -1,23 +1,24 @@
-# @vosso/shared
+# @vosjs/shared
 
-Small, dependency-free helpers and types shared across the vosso apps, the
-studio's document model and the vos CLI plugin. Consumed in-source and bundled
-into [`@vosso/vos-plugin`](../vos-plugin). MIT.
+The small shared layer under the `vos` CLI and the document model
+(`@vosjs/studio-core`). Dependency-free. MIT.
 
-## Exports
+## Subpaths
 
-```ts
-import { formatLabel, generateId, sleep, safeJsonParse } from '@vosso/shared'
-```
+| Import                        | What it holds                                                                                         |
+| ----------------------------- | ----------------------------------------------------------------------------------------------------- |
+| `@vosjs/shared`               | The font and typeface catalogs (`FONT_CATALOG`, `TYPEFACE_CATALOG`) and their lookups and URL helpers |
+| `@vosjs/shared/params`        | The remix-knob contract of `config.params`: `ParamSpec`, `readParams`, `applyParamValue`              |
+| `@vosjs/shared/frontmatter`   | A small `---` frontmatter parser for recipe files                                                     |
+| `@vosjs/shared/timelineEdits` | `TimelineEdit` and the source wrapper that applies edits over a program's `createTimeline`            |
 
-| Utility                         | Description                                                          |
-| ------------------------------- | -------------------------------------------------------------------- |
-| `formatLabel(filename)`         | Turn a slug/filename into a title (`'basic-fade'` → `'Basic Fade'`). |
-| `generateId()`                  | A random UUID (`crypto.randomUUID`).                                 |
-| `sleep(ms)`                     | Promise that resolves after `ms`.                                    |
-| `safeJsonParse(json, fallback)` | Parse JSON, returning `fallback` on error.                           |
+The catalogs are generated data: the families, weights and typefaces the
+hosted catalog serves, with their URLs. They are the one place this package
+names a host, and a consumer may point `FONT_CDN_BASE`-shaped URLs elsewhere.
 
-Subpaths: `@vosso/shared/types` and `@vosso/shared/utils`.
+## What is deliberately not here
 
-Keep this package lean — it's the lowest layer, so anything with a heavier
-dependency or a product opinion belongs in `@vosso/studio-core` or the app.
+Anything one platform decides: quota and plan tables, attribution, a
+hosted endpoint's wire types, a hosted changelog's differ. Those live beside
+the service that enforces or serves them. Keep this package the lowest
+layer: a product opinion belongs in `@vosjs/studio-core` or the host.

package/dist/index.d.ts

@@ -1,5 +1,3 @@
-export { formatLabel, generateId, safeJsonParse, sleep } from './utils/index.js';
-
 /**
  * Generated by the vosso build; do not edit by hand.
  * Curation lives in the build script; re-run it (then `pnpm assets:push`) to

package/dist/index.js

@@ -1,10 +1,3 @@
-import "./chunk-K7EIJSYQ.js";
-import {
-  formatLabel,
-  generateId,
-  safeJsonParse,
-  sleep
-} from "./chunk-RDD5SU6G.js";
 import {
   FONT_CATALOG,
   FONT_CDN_BASE,
@@ -50,11 +43,7 @@ export {
   fontFaceUrl,
   fontManifest,
   fontStack,
-  formatLabel,
-  generateId,
   nearestFontWeight,
-  safeJsonParse,
-  sleep,
   typefaceUrl
 };
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/typefaceCatalog.ts"],"sourcesContent":["/**\n * Generated by the vosso build; do not edit by hand.\n * Curation lives in the build script; regenerate + `pnpm assets:push`, then\n * commit this file. One catalog: the 3D prop panel, take lowering, and the\n * CLI lints all read it.\n */\n\nexport interface TypefaceEntry {\n  /** Catalog family name (matches the webfont catalog). */\n  family: string\n  /** File slug — typefaces/{slug}.typeface.json on assets.vos.so. */\n  slug: string\n  /** The converted weight (one file per family; extrusion wants bold). */\n  weight: number\n}\n\nexport const TYPEFACE_CDN_BASE = 'https://assets.vos.so/typefaces'\n\n/** The house default 3D face. */\nexport const DEFAULT_TYPEFACE_SLUG = 'lexend'\n\nexport const TYPEFACE_CATALOG: TypefaceEntry[] = [\n  { family: 'Lexend', slug: 'lexend', weight: 700 },\n  { family: 'Space Grotesk', slug: 'space-grotesk', weight: 700 },\n  { family: 'Bebas Neue', slug: 'bebas-neue', weight: 400 },\n  { family: 'Archivo Black', slug: 'archivo-black', weight: 400 },\n  { family: 'Anton', slug: 'anton', weight: 400 },\n  { family: 'Righteous', slug: 'righteous', weight: 400 },\n  { family: 'Playfair Display', slug: 'playfair-display', weight: 700 },\n  { family: 'Fraunces', slug: 'fraunces', weight: 700 },\n  { family: 'Pacifico', slug: 'pacifico', weight: 400 },\n  { family: 'JetBrains Mono', slug: 'jetbrains-mono', weight: 700 },\n]\n\nexport function typefaceUrl(slug: string): string {\n  return `${TYPEFACE_CDN_BASE}/${slug}.typeface.json`\n}\n\n/** Case-insensitive lookup by slug or family name (null = not in catalog). */\nexport function findTypeface(nameOrSlug: string): TypefaceEntry | null {\n  const needle = nameOrSlug.trim().toLowerCase()\n  return (\n    TYPEFACE_CATALOG.find(\n      (t) => t.slug === needle || t.family.toLowerCase() === needle,\n    ) ?? null\n  )\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;AAgBO,IAAM,oBAAoB;AAG1B,IAAM,wBAAwB;AAE9B,IAAM,mBAAoC;AAAA,EAC/C,EAAE,QAAQ,UAAU,MAAM,UAAU,QAAQ,IAAI;AAAA,EAChD,EAAE,QAAQ,iBAAiB,MAAM,iBAAiB,QAAQ,IAAI;AAAA,EAC9D,EAAE,QAAQ,cAAc,MAAM,cAAc,QAAQ,IAAI;AAAA,EACxD,EAAE,QAAQ,iBAAiB,MAAM,iBAAiB,QAAQ,IAAI;AAAA,EAC9D,EAAE,QAAQ,SAAS,MAAM,SAAS,QAAQ,IAAI;AAAA,EAC9C,EAAE,QAAQ,aAAa,MAAM,aAAa,QAAQ,IAAI;AAAA,EACtD,EAAE,QAAQ,oBAAoB,MAAM,oBAAoB,QAAQ,IAAI;AAAA,EACpE,EAAE,QAAQ,YAAY,MAAM,YAAY,QAAQ,IAAI;AAAA,EACpD,EAAE,QAAQ,YAAY,MAAM,YAAY,QAAQ,IAAI;AAAA,EACpD,EAAE,QAAQ,kBAAkB,MAAM,kBAAkB,QAAQ,IAAI;AAClE;AAEO,SAAS,YAAY,MAAsB;AAChD,SAAO,GAAG,iBAAiB,IAAI,IAAI;AACrC;AAGO,SAAS,aAAa,YAA0C;AACrE,QAAM,SAAS,WAAW,KAAK,EAAE,YAAY;AAC7C,SACE,iBAAiB;AAAA,IACf,CAAC,MAAM,EAAE,SAAS,UAAU,EAAE,OAAO,YAAY,MAAM;AAAA,EACzD,KAAK;AAET;","names":[]}
+{"version":3,"sources":["../src/typefaceCatalog.ts"],"sourcesContent":["/**\n * Generated by the vosso build; do not edit by hand.\n * Curation lives in the build script; regenerate + `pnpm assets:push`, then\n * commit this file. One catalog: the 3D prop panel, take lowering, and the\n * CLI lints all read it.\n */\n\nexport interface TypefaceEntry {\n  /** Catalog family name (matches the webfont catalog). */\n  family: string\n  /** File slug — typefaces/{slug}.typeface.json on assets.vos.so. */\n  slug: string\n  /** The converted weight (one file per family; extrusion wants bold). */\n  weight: number\n}\n\nexport const TYPEFACE_CDN_BASE = 'https://assets.vos.so/typefaces'\n\n/** The house default 3D face. */\nexport const DEFAULT_TYPEFACE_SLUG = 'lexend'\n\nexport const TYPEFACE_CATALOG: TypefaceEntry[] = [\n  { family: 'Lexend', slug: 'lexend', weight: 700 },\n  { family: 'Space Grotesk', slug: 'space-grotesk', weight: 700 },\n  { family: 'Bebas Neue', slug: 'bebas-neue', weight: 400 },\n  { family: 'Archivo Black', slug: 'archivo-black', weight: 400 },\n  { family: 'Anton', slug: 'anton', weight: 400 },\n  { family: 'Righteous', slug: 'righteous', weight: 400 },\n  { family: 'Playfair Display', slug: 'playfair-display', weight: 700 },\n  { family: 'Fraunces', slug: 'fraunces', weight: 700 },\n  { family: 'Pacifico', slug: 'pacifico', weight: 400 },\n  { family: 'JetBrains Mono', slug: 'jetbrains-mono', weight: 700 },\n]\n\nexport function typefaceUrl(slug: string): string {\n  return `${TYPEFACE_CDN_BASE}/${slug}.typeface.json`\n}\n\n/** Case-insensitive lookup by slug or family name (null = not in catalog). */\nexport function findTypeface(nameOrSlug: string): TypefaceEntry | null {\n  const needle = nameOrSlug.trim().toLowerCase()\n  return (\n    TYPEFACE_CATALOG.find(\n      (t) => t.slug === needle || t.family.toLowerCase() === needle,\n    ) ?? null\n  )\n}\n"],"mappings":";;;;;;;;;;;AAgBO,IAAM,oBAAoB;AAG1B,IAAM,wBAAwB;AAE9B,IAAM,mBAAoC;AAAA,EAC/C,EAAE,QAAQ,UAAU,MAAM,UAAU,QAAQ,IAAI;AAAA,EAChD,EAAE,QAAQ,iBAAiB,MAAM,iBAAiB,QAAQ,IAAI;AAAA,EAC9D,EAAE,QAAQ,cAAc,MAAM,cAAc,QAAQ,IAAI;AAAA,EACxD,EAAE,QAAQ,iBAAiB,MAAM,iBAAiB,QAAQ,IAAI;AAAA,EAC9D,EAAE,QAAQ,SAAS,MAAM,SAAS,QAAQ,IAAI;AAAA,EAC9C,EAAE,QAAQ,aAAa,MAAM,aAAa,QAAQ,IAAI;AAAA,EACtD,EAAE,QAAQ,oBAAoB,MAAM,oBAAoB,QAAQ,IAAI;AAAA,EACpE,EAAE,QAAQ,YAAY,MAAM,YAAY,QAAQ,IAAI;AAAA,EACpD,EAAE,QAAQ,YAAY,MAAM,YAAY,QAAQ,IAAI;AAAA,EACpD,EAAE,QAAQ,kBAAkB,MAAM,kBAAkB,QAAQ,IAAI;AAClE;AAEO,SAAS,YAAY,MAAsB;AAChD,SAAO,GAAG,iBAAiB,IAAI,IAAI;AACrC;AAGO,SAAS,aAAa,YAA0C;AACrE,QAAM,SAAS,WAAW,KAAK,EAAE,YAAY;AAC7C,SACE,iBAAiB;AAAA,IACf,CAAC,MAAM,EAAE,SAAS,UAAU,EAAE,OAAO,YAAY,MAAM;AAAA,EACzD,KAAK;AAET;","names":[]}

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@vosjs/shared",
-  "version": "0.2.0",
-  "description": "The small shared layer under the vos CLI and the vosso studio: the semantic differ, the free-tier limits, frontmatter, params, the font and typeface catalogs.",
+  "version": "0.4.0",
+  "description": "The small shared layer under the vos CLI and the document model: the font and typeface catalogs, the remix params contract, frontmatter, and the timeline-edit wrapper.",
   "license": "MIT",
   "author": "vosso",
   "homepage": "https://vos.so",
@@ -21,18 +21,6 @@
       "types": "./dist/index.d.ts",
       "import": "./dist/index.js"
     },
-    "./types": {
-      "types": "./dist/types/index.d.ts",
-      "import": "./dist/types/index.js"
-    },
-    "./utils": {
-      "types": "./dist/utils/index.d.ts",
-      "import": "./dist/utils/index.js"
-    },
-    "./diff": {
-      "types": "./dist/diff/index.d.ts",
-      "import": "./dist/diff/index.js"
-    },
     "./frontmatter": {
       "types": "./dist/frontmatter.d.ts",
       "import": "./dist/frontmatter.js"
@@ -41,18 +29,6 @@
       "types": "./dist/params.d.ts",
       "import": "./dist/params.js"
     },
-    "./limits": {
-      "types": "./dist/limits.d.ts",
-      "import": "./dist/limits.js"
-    },
-    "./acquisition": {
-      "types": "./dist/acquisition.d.ts",
-      "import": "./dist/acquisition.js"
-    },
-    "./backdrops": {
-      "types": "./dist/backdrops.d.ts",
-      "import": "./dist/backdrops.js"
-    },
     "./timelineEdits": {
       "types": "./dist/timelineEdits.d.ts",
       "import": "./dist/timelineEdits.js"

package/dist/acquisition.d.ts

@@ -1,59 +0,0 @@
-/**
- * Signup attribution (first touch), pure.
- *
- * PostHog already sees every referrer and utm param, but nothing first-party
- * survives to the `user` row, and a first touch is the one fact that can
- * never be backfilled. The seam is deliberately tiny: a write-once cookie set
- * by the web worker on the first arrival that carries a signal (an external
- * referrer or utm params — a direct visit sets nothing), read exactly once
- * when BetterAuth creates the user, then stamped as JSON on
- * `user.acquisition` and never updated.
- *
- * Everything here is pure so the platform's cookie writer and its signup
- * reader can never disagree on the format.
- */
-declare const FIRST_TOUCH_COOKIE = "vosso_ft";
-/** 30 days: long enough to span consider-then-signup, short enough to stay a
- *  first touch rather than a biography. */
-declare const FIRST_TOUCH_MAX_AGE: number;
-interface FirstTouch {
-    /** utm_source, or the referring domain when the arrival was untagged. */
-    source: string;
-    /** utm_medium, or 'referral' when derived from a bare referrer. */
-    medium?: string;
-    /** utm_campaign, verbatim. */
-    campaign?: string;
-    /** External referring domain, when there was one. */
-    referrer?: string;
-    /** The path the visit landed on. */
-    landing?: string;
-    /** ISO timestamp of the first touch. */
-    at?: string;
-}
-/**
- * Derive a first touch from a landing request, or null when the visit
- * carries no acquisition signal. Null is the common case and the point:
- * a direct visit gets no cookie, and an absent `user.acquisition` reads
- * honestly as "direct or before the feature", never as a guessed channel.
- */
-declare function firstTouchOf(input: {
-    url: URL;
-    referer: string | null | undefined;
-}): FirstTouch | null;
-/** Cookie-safe encoding of a first touch. */
-declare function encodeFirstTouch(touch: FirstTouch): string;
-/**
- * Fail-closed parse of first-touch JSON (the shape `user.acquisition`
- * stores): anything oversized, unparseable, or missing a string `source`
- * is null.
- */
-declare function parseFirstTouchJson(raw: string | null | undefined): FirstTouch | null;
-/**
- * Fail-closed cookie decode. The cookie arrives from the wild — a browser
- * extension or a hand-edited jar can put anything under our name.
- */
-declare function decodeFirstTouch(raw: string | null | undefined): FirstTouch | null;
-/** Read one cookie's raw value out of a Cookie header. */
-declare function readCookieValue(header: string | null | undefined, name: string): string | undefined;
-
-export { FIRST_TOUCH_COOKIE, FIRST_TOUCH_MAX_AGE, type FirstTouch, decodeFirstTouch, encodeFirstTouch, firstTouchOf, parseFirstTouchJson, readCookieValue };

package/dist/acquisition.js

@@ -1,92 +0,0 @@
-// src/acquisition.ts
-var FIRST_TOUCH_COOKIE = "vosso_ft";
-var FIRST_TOUCH_MAX_AGE = 60 * 60 * 24 * 30;
-var FIELD_MAX = 200;
-var RAW_MAX = 2e3;
-function clean(value) {
-  const v = value?.trim().slice(0, FIELD_MAX);
-  return v || void 0;
-}
-function sameSite(a, b) {
-  const strip = (h) => h.startsWith("www.") ? h.slice(4) : h;
-  return strip(a) === strip(b);
-}
-function firstTouchOf(input) {
-  const { url, referer } = input;
-  const source = clean(url.searchParams.get("utm_source"));
-  const medium = clean(url.searchParams.get("utm_medium"));
-  const campaign = clean(url.searchParams.get("utm_campaign"));
-  let referrerDomain;
-  if (referer) {
-    try {
-      const r = new URL(referer);
-      if (r.hostname && !sameSite(r.hostname, url.hostname)) {
-        referrerDomain = clean(r.hostname);
-      }
-    } catch {
-    }
-  }
-  if (!source && !campaign && !referrerDomain) return null;
-  const touch = {
-    source: source ?? referrerDomain ?? "unknown"
-  };
-  const derivedMedium = medium ?? (!source && referrerDomain ? "referral" : void 0);
-  if (derivedMedium) touch.medium = derivedMedium;
-  if (campaign) touch.campaign = campaign;
-  if (referrerDomain) touch.referrer = referrerDomain;
-  return touch;
-}
-function encodeFirstTouch(touch) {
-  return encodeURIComponent(JSON.stringify(touch));
-}
-function parseFirstTouchJson(raw) {
-  if (!raw || raw.length > RAW_MAX) return null;
-  try {
-    const parsed = JSON.parse(raw);
-    if (typeof parsed !== "object" || parsed === null) return null;
-    const record = parsed;
-    if (typeof record.source !== "string" || !record.source) return null;
-    const touch = { source: record.source.slice(0, FIELD_MAX) };
-    for (const key of [
-      "medium",
-      "campaign",
-      "referrer",
-      "landing",
-      "at"
-    ]) {
-      const value = record[key];
-      if (typeof value === "string" && value)
-        touch[key] = value.slice(0, FIELD_MAX);
-    }
-    return touch;
-  } catch {
-    return null;
-  }
-}
-function decodeFirstTouch(raw) {
-  if (!raw || raw.length > RAW_MAX) return null;
-  try {
-    return parseFirstTouchJson(decodeURIComponent(raw));
-  } catch {
-    return null;
-  }
-}
-function readCookieValue(header, name) {
-  if (!header) return void 0;
-  for (const part of header.split(";")) {
-    const eq = part.indexOf("=");
-    if (eq === -1) continue;
-    if (part.slice(0, eq).trim() === name) return part.slice(eq + 1).trim();
-  }
-  return void 0;
-}
-export {
-  FIRST_TOUCH_COOKIE,
-  FIRST_TOUCH_MAX_AGE,
-  decodeFirstTouch,
-  encodeFirstTouch,
-  firstTouchOf,
-  parseFirstTouchJson,
-  readCookieValue
-};
-//# sourceMappingURL=acquisition.js.map

package/dist/acquisition.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/acquisition.ts"],"sourcesContent":["/**\n * Signup attribution (first touch), pure.\n *\n * PostHog already sees every referrer and utm param, but nothing first-party\n * survives to the `user` row, and a first touch is the one fact that can\n * never be backfilled. The seam is deliberately tiny: a write-once cookie set\n * by the web worker on the first arrival that carries a signal (an external\n * referrer or utm params — a direct visit sets nothing), read exactly once\n * when BetterAuth creates the user, then stamped as JSON on\n * `user.acquisition` and never updated.\n *\n * Everything here is pure so the platform's cookie writer and its signup\n * reader can never disagree on the format.\n */\n\nexport const FIRST_TOUCH_COOKIE = 'vosso_ft'\n\n/** 30 days: long enough to span consider-then-signup, short enough to stay a\n *  first touch rather than a biography. */\nexport const FIRST_TOUCH_MAX_AGE = 60 * 60 * 24 * 30\n\n/** Per-field cap. UTM values are short by convention; anything longer is\n *  noise or abuse and gets truncated rather than refused. */\nconst FIELD_MAX = 200\n\n/** Decode guard: a cookie bigger than this is not ours. */\nconst RAW_MAX = 2000\n\nexport interface FirstTouch {\n  /** utm_source, or the referring domain when the arrival was untagged. */\n  source: string\n  /** utm_medium, or 'referral' when derived from a bare referrer. */\n  medium?: string\n  /** utm_campaign, verbatim. */\n  campaign?: string\n  /** External referring domain, when there was one. */\n  referrer?: string\n  /** The path the visit landed on. */\n  landing?: string\n  /** ISO timestamp of the first touch. */\n  at?: string\n}\n\nfunction clean(value: string | null | undefined): string | undefined {\n  const v = value?.trim().slice(0, FIELD_MAX)\n  return v || undefined\n}\n\n/**\n * Is the referrer an internal navigation rather than an arrival? Compares\n * registrable-host-ish: `www.vos.so` referring to `vos.so` is the same site\n * (canonicalHost 301s www onto the apex, so the second request's referrer is\n * our own www host and must not read as a referral).\n */\nfunction sameSite(a: string, b: string): boolean {\n  const strip = (h: string) => (h.startsWith('www.') ? h.slice(4) : h)\n  return strip(a) === strip(b)\n}\n\n/**\n * Derive a first touch from a landing request, or null when the visit\n * carries no acquisition signal. Null is the common case and the point:\n * a direct visit gets no cookie, and an absent `user.acquisition` reads\n * honestly as \"direct or before the feature\", never as a guessed channel.\n */\nexport function firstTouchOf(input: {\n  url: URL\n  referer: string | null | undefined\n}): FirstTouch | null {\n  const { url, referer } = input\n  const source = clean(url.searchParams.get('utm_source'))\n  const medium = clean(url.searchParams.get('utm_medium'))\n  const campaign = clean(url.searchParams.get('utm_campaign'))\n\n  let referrerDomain: string | undefined\n  if (referer) {\n    try {\n      const r = new URL(referer)\n      if (r.hostname && !sameSite(r.hostname, url.hostname)) {\n        referrerDomain = clean(r.hostname)\n      }\n    } catch {\n      // An unparseable referrer is no signal.\n    }\n  }\n\n  if (!source && !campaign && !referrerDomain) return null\n\n  const touch: FirstTouch = {\n    source: source ?? referrerDomain ?? 'unknown',\n  }\n  const derivedMedium =\n    medium ?? (!source && referrerDomain ? 'referral' : undefined)\n  if (derivedMedium) touch.medium = derivedMedium\n  if (campaign) touch.campaign = campaign\n  if (referrerDomain) touch.referrer = referrerDomain\n  return touch\n}\n\n/** Cookie-safe encoding of a first touch. */\nexport function encodeFirstTouch(touch: FirstTouch): string {\n  return encodeURIComponent(JSON.stringify(touch))\n}\n\n/**\n * Fail-closed parse of first-touch JSON (the shape `user.acquisition`\n * stores): anything oversized, unparseable, or missing a string `source`\n * is null.\n */\nexport function parseFirstTouchJson(\n  raw: string | null | undefined,\n): FirstTouch | null {\n  if (!raw || raw.length > RAW_MAX) return null\n  try {\n    const parsed: unknown = JSON.parse(raw)\n    if (typeof parsed !== 'object' || parsed === null) return null\n    const record = parsed as Record<string, unknown>\n    if (typeof record.source !== 'string' || !record.source) return null\n    const touch: FirstTouch = { source: record.source.slice(0, FIELD_MAX) }\n    for (const key of [\n      'medium',\n      'campaign',\n      'referrer',\n      'landing',\n      'at',\n    ] as const) {\n      const value = record[key]\n      if (typeof value === 'string' && value)\n        touch[key] = value.slice(0, FIELD_MAX)\n    }\n    return touch\n  } catch {\n    return null\n  }\n}\n\n/**\n * Fail-closed cookie decode. The cookie arrives from the wild — a browser\n * extension or a hand-edited jar can put anything under our name.\n */\nexport function decodeFirstTouch(\n  raw: string | null | undefined,\n): FirstTouch | null {\n  if (!raw || raw.length > RAW_MAX) return null\n  try {\n    return parseFirstTouchJson(decodeURIComponent(raw))\n  } catch {\n    return null\n  }\n}\n\n/** Read one cookie's raw value out of a Cookie header. */\nexport function readCookieValue(\n  header: string | null | undefined,\n  name: string,\n): string | undefined {\n  if (!header) return undefined\n  for (const part of header.split(';')) {\n    const eq = part.indexOf('=')\n    if (eq === -1) continue\n    if (part.slice(0, eq).trim() === name) return part.slice(eq + 1).trim()\n  }\n  return undefined\n}\n"],"mappings":";AAeO,IAAM,qBAAqB;AAI3B,IAAM,sBAAsB,KAAK,KAAK,KAAK;AAIlD,IAAM,YAAY;AAGlB,IAAM,UAAU;AAiBhB,SAAS,MAAM,OAAsD;AACnE,QAAM,IAAI,OAAO,KAAK,EAAE,MAAM,GAAG,SAAS;AAC1C,SAAO,KAAK;AACd;AAQA,SAAS,SAAS,GAAW,GAAoB;AAC/C,QAAM,QAAQ,CAAC,MAAe,EAAE,WAAW,MAAM,IAAI,EAAE,MAAM,CAAC,IAAI;AAClE,SAAO,MAAM,CAAC,MAAM,MAAM,CAAC;AAC7B;AAQO,SAAS,aAAa,OAGP;AACpB,QAAM,EAAE,KAAK,QAAQ,IAAI;AACzB,QAAM,SAAS,MAAM,IAAI,aAAa,IAAI,YAAY,CAAC;AACvD,QAAM,SAAS,MAAM,IAAI,aAAa,IAAI,YAAY,CAAC;AACvD,QAAM,WAAW,MAAM,IAAI,aAAa,IAAI,cAAc,CAAC;AAE3D,MAAI;AACJ,MAAI,SAAS;AACX,QAAI;AACF,YAAM,IAAI,IAAI,IAAI,OAAO;AACzB,UAAI,EAAE,YAAY,CAAC,SAAS,EAAE,UAAU,IAAI,QAAQ,GAAG;AACrD,yBAAiB,MAAM,EAAE,QAAQ;AAAA,MACnC;AAAA,IACF,QAAQ;AAAA,IAER;AAAA,EACF;AAEA,MAAI,CAAC,UAAU,CAAC,YAAY,CAAC,eAAgB,QAAO;AAEpD,QAAM,QAAoB;AAAA,IACxB,QAAQ,UAAU,kBAAkB;AAAA,EACtC;AACA,QAAM,gBACJ,WAAW,CAAC,UAAU,iBAAiB,aAAa;AACtD,MAAI,cAAe,OAAM,SAAS;AAClC,MAAI,SAAU,OAAM,WAAW;AAC/B,MAAI,eAAgB,OAAM,WAAW;AACrC,SAAO;AACT;AAGO,SAAS,iBAAiB,OAA2B;AAC1D,SAAO,mBAAmB,KAAK,UAAU,KAAK,CAAC;AACjD;AAOO,SAAS,oBACd,KACmB;AACnB,MAAI,CAAC,OAAO,IAAI,SAAS,QAAS,QAAO;AACzC,MAAI;AACF,UAAM,SAAkB,KAAK,MAAM,GAAG;AACtC,QAAI,OAAO,WAAW,YAAY,WAAW,KAAM,QAAO;AAC1D,UAAM,SAAS;AACf,QAAI,OAAO,OAAO,WAAW,YAAY,CAAC,OAAO,OAAQ,QAAO;AAChE,UAAM,QAAoB,EAAE,QAAQ,OAAO,OAAO,MAAM,GAAG,SAAS,EAAE;AACtE,eAAW,OAAO;AAAA,MAChB;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,MACA;AAAA,IACF,GAAY;AACV,YAAM,QAAQ,OAAO,GAAG;AACxB,UAAI,OAAO,UAAU,YAAY;AAC/B,cAAM,GAAG,IAAI,MAAM,MAAM,GAAG,SAAS;AAAA,IACzC;AACA,WAAO;AAAA,EACT,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAMO,SAAS,iBACd,KACmB;AACnB,MAAI,CAAC,OAAO,IAAI,SAAS,QAAS,QAAO;AACzC,MAAI;AACF,WAAO,oBAAoB,mBAAmB,GAAG,CAAC;AAAA,EACpD,QAAQ;AACN,WAAO;AAAA,EACT;AACF;AAGO,SAAS,gBACd,QACA,MACoB;AACpB,MAAI,CAAC,OAAQ,QAAO;AACpB,aAAW,QAAQ,OAAO,MAAM,GAAG,GAAG;AACpC,UAAM,KAAK,KAAK,QAAQ,GAAG;AAC3B,QAAI,OAAO,GAAI;AACf,QAAI,KAAK,MAAM,GAAG,EAAE,EAAE,KAAK,MAAM,KAAM,QAAO,KAAK,MAAM,KAAK,CAAC,EAAE,KAAK;AAAA,EACxE;AACA,SAAO;AACT;","names":[]}

package/dist/backdrops.d.ts

@@ -1,29 +0,0 @@
-/**
- * The backdrop wire contract: what `GET /api/backdrops`
- * hands to the studio panel, the picker, the CLI and agents. Absolute URLs
- * on purpose — a ProjectDoc travels across environments (save-to-vos, CLI
- * takes, server renders), so a backdrop key must resolve everywhere without
- * host-side rewriting.
- */
-declare const BACKDROP_ASSET_BASE = "https://assets.vos.so/";
-interface Backdrop {
-    id: string;
-    slug: string;
-    title: string;
-    /** The loop's length in seconds — a fact of the asset, never a knob. */
-    duration: number;
-    /** The 1080p bake's pixel size (the export note reads it). */
-    width: number;
-    height: number;
-    /** The CSS underlay a pick writes into `frame.background`. */
-    ground: string;
-    /** Provenance: the vos it was baked from, when it still exists. */
-    vosId: string | null;
-    urls: {
-        '1080p': string | null;
-        '2k': string | null;
-        poster: string | null;
-    };
-}
-
-export { BACKDROP_ASSET_BASE, type Backdrop };

package/dist/backdrops.js

@@ -1,6 +0,0 @@
-// src/backdrops.ts
-var BACKDROP_ASSET_BASE = "https://assets.vos.so/";
-export {
-  BACKDROP_ASSET_BASE
-};
-//# sourceMappingURL=backdrops.js.map

package/dist/backdrops.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/backdrops.ts"],"sourcesContent":["/**\n * The backdrop wire contract: what `GET /api/backdrops`\n * hands to the studio panel, the picker, the CLI and agents. Absolute URLs\n * on purpose — a ProjectDoc travels across environments (save-to-vos, CLI\n * takes, server renders), so a backdrop key must resolve everywhere without\n * host-side rewriting.\n */\n\nexport const BACKDROP_ASSET_BASE = 'https://assets.vos.so/'\n\nexport interface Backdrop {\n  id: string\n  slug: string\n  title: string\n  /** The loop's length in seconds — a fact of the asset, never a knob. */\n  duration: number\n  /** The 1080p bake's pixel size (the export note reads it). */\n  width: number\n  height: number\n  /** The CSS underlay a pick writes into `frame.background`. */\n  ground: string\n  /** Provenance: the vos it was baked from, when it still exists. */\n  vosId: string | null\n  urls: {\n    '1080p': string | null\n    '2k': string | null\n    poster: string | null\n  }\n}\n"],"mappings":";AAQO,IAAM,sBAAsB;","names":[]}

package/dist/chunk-K7EIJSYQ.js

@@ -1 +0,0 @@
-//# sourceMappingURL=chunk-K7EIJSYQ.js.map

package/dist/chunk-K7EIJSYQ.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":[],"sourcesContent":[],"mappings":"","names":[]}

package/dist/chunk-RDD5SU6G.js

@@ -1,25 +0,0 @@
-// src/utils/index.ts
-function formatLabel(filename) {
-  return filename.replace(/\.[^/.]+$/, "").split(/[-_]/).map((word) => word.charAt(0).toUpperCase() + word.slice(1).toLowerCase()).join(" ");
-}
-function generateId() {
-  return crypto.randomUUID();
-}
-function sleep(ms) {
-  return new Promise((resolve) => setTimeout(resolve, ms));
-}
-function safeJsonParse(json, fallback) {
-  try {
-    return JSON.parse(json);
-  } catch {
-    return fallback;
-  }
-}
-
-export {
-  formatLabel,
-  generateId,
-  sleep,
-  safeJsonParse
-};
-//# sourceMappingURL=chunk-RDD5SU6G.js.map

package/dist/chunk-RDD5SU6G.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/utils/index.ts"],"sourcesContent":["/**\n * Shared Utilities\n * Common utility functions used across frontend and backend\n */\n\n/**\n * Format a filename to a human-readable label\n * @example formatLabel('basic-fade') => 'Basic Fade'\n */\nexport function formatLabel(filename: string): string {\n  return filename\n    .replace(/\\.[^/.]+$/, '') // Remove extension\n    .split(/[-_]/)\n    .map((word) => word.charAt(0).toUpperCase() + word.slice(1).toLowerCase())\n    .join(' ')\n}\n\n/**\n * Generate a unique ID\n */\nexport function generateId(): string {\n  return crypto.randomUUID()\n}\n\n/**\n * Sleep for a specified duration\n */\nexport function sleep(ms: number): Promise<void> {\n  return new Promise((resolve) => setTimeout(resolve, ms))\n}\n\n/**\n * Safely parse JSON with a fallback\n */\nexport function safeJsonParse<T>(json: string, fallback: T): T {\n  try {\n    return JSON.parse(json) as T\n  } catch {\n    return fallback\n  }\n}\n"],"mappings":";AASO,SAAS,YAAY,UAA0B;AACpD,SAAO,SACJ,QAAQ,aAAa,EAAE,EACvB,MAAM,MAAM,EACZ,IAAI,CAAC,SAAS,KAAK,OAAO,CAAC,EAAE,YAAY,IAAI,KAAK,MAAM,CAAC,EAAE,YAAY,CAAC,EACxE,KAAK,GAAG;AACb;AAKO,SAAS,aAAqB;AACnC,SAAO,OAAO,WAAW;AAC3B;AAKO,SAAS,MAAM,IAA2B;AAC/C,SAAO,IAAI,QAAQ,CAAC,YAAY,WAAW,SAAS,EAAE,CAAC;AACzD;AAKO,SAAS,cAAiB,MAAc,UAAgB;AAC7D,MAAI;AACF,WAAO,KAAK,MAAM,IAAI;AAAA,EACxB,QAAQ;AACN,WAAO;AAAA,EACT;AACF;","names":[]}

package/dist/diff/index.d.ts

@@ -1,65 +0,0 @@
-/**
- * The semantic differ: pure functions over two
- * immutable version states — no I/O, no recorded gesture log ("derive,
- * don't record"). Runs identically in Workers, the CLI, and the studio;
- * same two inputs ⇒ byte-identical ops and summary.
- */
-interface Op {
-    op: 'add' | 'remove' | 'modify';
-    /**
-     * Doc tracks: zoom | tilt | speed | overlay | object | audio, plus scoped
-     * singletons (segments | frame | cursor | cam | export | camera).
-     * Config tracks: knob (param key space) | look | data | code | config.
-     */
-    track: string;
-    /** Span/clip id, param key, function name, or field name. */
-    id: string;
-    /** Changed properties: key → [from, to]. Absent on code ops. */
-    props?: Record<string, [unknown, unknown]>;
-    /** Code-function modifies only: magnitude of the line-level change. */
-    lines?: number;
-    /**
-     * True when the change is a cascaded consequence of another gesture
-     * (e.g. a trim shifting downstream spans), not a direct edit.
-     */
-    cascade?: boolean;
-}
-/** One intervening version's worth of changes, as the pull contract ships it. */
-interface VersionChanges {
-    versionId: string;
-    versionNumber: number;
-    origin: string;
-    label: string | null;
-    note: string | null;
-    ops: Op[];
-    summary: string;
-}
-/** Stable composite key for net-effect folding. */
-declare function opKey(op: Op): string;
-
-type AnyRecord = Record<string, unknown>;
-
-declare function diffConfig(a: AnyRecord, b: AnyRecord): Op[];
-
-declare function diffDoc(a: AnyRecord, b: AnyRecord): Op[];
-
-/**
- * Net effect per node across a sequence of op sets (the coalescing rules):
- * initial→final only, no intermediate drags. add→modify folds into the add;
- * add→remove vanishes; modify chains keep the first `from` and last `to`
- * (dropping props that net to no change); remove→add of the same id is one
- * modify (the node was replaced in place). Output is deterministically
- * ordered: track declaration order, then output-time anchor, then id.
- */
-declare function coalesce(opsInOrder: readonly Op[]): Op[];
-
-/**
- * Deterministic prose over an op list — the line that lands in the agent's
- * context ("zoom z3: end 4.2s→4.6s, level 2.2→1.8; tilt t1 removed").
- * Same ops ⇒ byte-identical string; unit-pinned like the geometry mirrors.
- */
-declare function summarize(ops: readonly Op[], options?: {
-    maxItems?: number;
-}): string;
-
-export { type Op, type VersionChanges, coalesce, diffConfig, diffDoc, opKey, summarize };