dsh-hyperframes 0.9.2 → 0.10.0

package/CHANGELOG.md

@@ -1,8 +1,17 @@
-#- 同步官方 HyperFrames 0.8.207 的 7 个当前技能，14 个旧名称保留为兼容入口；固定 CLI、禁止技能任务绕过 DSH 更新已安装包。
- 更新记录
+# 更新记录
 
 [返回简介](README.md) · [使用说明](docs/USAGE.md) · [验证记录](docs/VALIDATION.md)
 
+## 0.10.0 (2026-10-28)
+
+- 素材页支持上移/下移图片，显示播放序号，立即保存并校验工程修订；不改音频/视频位置和旧成品。
+- Add keyboard-accessible image ordering without re-uploading. Existing renders remain available; export again to apply the new order.
+- 同步官方 HyperFrames 0.8.209 的当前技能、资源和固定 CLI；记录上游提交与校验值。技能文本固定 LF，避免 Windows 检出换行转换导致完整性检查失败。
+
+## 0.9.3 (2026-10-27)
+
+- 修复分批更新时的新旧更新控件混用：保留原页面、草稿与安装保护，空闲后接管旧控制器，兼容旧入口。
+
 ## 0.9.2 (2026-10-27)
 
 - 更新控件移至原有工作台或原生插件详情页底部；更新记录与选项原地展开，移除独立更新菜单与页面。

package/README.en.md

@@ -12,7 +12,9 @@ Feedback and contributions are welcome: report [issues](https://github.com/STARD
 
 Open the new native sidebar workbench after updating and restarting DSH. Settings remains available. See the [workbench guide and validation boundaries](docs/WORKBENCH.md).
 
-Bundled skills: official HyperFrames 0.8.207, seven current skills with fourteen previous names retained as compatibility entries.
+Bundled skills: official HyperFrames 0.8.209, seven current skills with fourteen previous names retained as compatibility entries.
+
+Move images up or down in the Media tab, including with the keyboard. The order saves immediately; export again to apply it to a new MP4.
 
 ## What it does
 

package/README.md

@@ -12,7 +12,9 @@
 
 更新并重启 DSH 后，可从原生侧栏打开新版工作台，原设置入口继续保留。详见[工作台说明与验收范围](docs/WORKBENCH.md)。
 
-技能内容：官方 HyperFrames 0.8.207，7 个当前技能；14 个旧名称保留为兼容入口。
+技能内容：官方 HyperFrames 0.8.209，7 个当前技能；14 个旧名称保留为兼容入口。
+
+在「素材」页上移或下移图片即可调整轮播顺序，支持键盘操作。顺序立即保存；重新导出后应用于新 MP4。
 
 ## 功能
 

package/docs/USAGE.en.md

@@ -46,7 +46,7 @@ Open Settings → HyperFrames in DSH Web or Desktop.
 
 1. Create a video. Select title card, product card or slideshow; set the title/body, canvas and an integer duration of 3–30 seconds, then save.
 2. Upload local copies of PNG/JPEG images, one MP3/WAV background audio and one muted MP4 background video. Limits: 20 MB per asset, 40 MB total. Slideshows follow upload order and need at least two seconds per image.
-3. Explicitly prepare the environment on first use. It downloads official CLI 0.8.207; Windows uses its managed rendering browser, while other platforms reuse installed Chrome when available. Project editing remains available. FFmpeg must be installed and in PATH; restart DSH after changing PATH.
+3. Explicitly prepare the environment on first use. It downloads official CLI 0.8.209; Windows uses its managed rendering browser, while other platforms reuse installed Chrome when available. Project editing remains available. FFmpeg must be installed and in PATH; restart DSH after changing PATH.
 4. Start official Studio and inspect the picture. Stop this preview before editing or exporting. No window is opened automatically.
 5. Export, play and download MP4. Later edits preserve earlier MP4s and display a revision warning. Export again for a new final output.
 
@@ -88,7 +88,7 @@ Node.js 22.19+ (22.x) / 24+ + FFmpeg (`npx hyperframes`).
 
 ## Porting notes
 
-Synced from official HyperFrames 0.8.207 release commit `619b8bc4d7fee406246529a8e214e60424807eda` (2026-10-27). All seven current official skills retain their upstream files. Fourteen previous names remain as compatibility entries that load current workflows. The upstream plugin launcher pins the CLI and blocks standalone skill replacement. Source hashes and the Apache-2.0 license are recorded under `skills/UPSTREAM.json` and `skills/UPSTREAM-LICENSE.txt`.
+Synced from official HyperFrames 0.8.209 release commit `53c975966611e7012b09b6d46707c26511ea077d` (2026-10-28). All seven current official skills retain their upstream files. Fourteen previous names remain as compatibility entries that load current workflows. The upstream plugin launcher pins the CLI and blocks standalone skill replacement. Source hashes and the Apache-2.0 license are recorded under `skills/UPSTREAM.json` and `skills/UPSTREAM-LICENSE.txt`.
 
 ## Multi-harness
 

package/docs/USAGE.md

@@ -46,7 +46,7 @@ dsh plugin --profile web remove dsh-hyperframes
 
 1. 新建视频，选择标题卡、产品介绍或图文轮播，填写标题/正文、画幅和 3–30 秒时长，明确保存。
 2. 上传 PNG/JPEG、一个背景音频（MP3/WAV）、一个静音背景视频（MP4）的副本。每个文件最多 20 MB、总计 40 MB；轮播按上传顺序，每张至少两秒。
-3. 首次点击「准备渲染环境」。此时下载固定版本官方 CLI 0.8.207；Windows 下载官方专用渲染浏览器，其他系统优先复用已安装的 Chrome；可以继续编辑工程。下载失败保留工程，查看运行记录后重试。需先安装 FFmpeg 并加入 PATH，重启 DSH 后生效。
+3. 首次点击「准备渲染环境」。此时下载固定版本官方 CLI 0.8.209；Windows 下载官方专用渲染浏览器，其他系统优先复用已安装的 Chrome；可以继续编辑工程。下载失败保留工程，查看运行记录后重试。需先安装 FFmpeg 并加入 PATH，重启 DSH 后生效。
 4. 启动官方 Studio，检查画面。停止本次预览后再编辑或导出；不会自动打开或占用前台窗口。
 5. 导出 MP4、在工作台播放并下载。工程更新后保留旧成品并显示旧修订提醒；再次导出即可生成新成片。
 
@@ -92,7 +92,7 @@ Node.js 22.19+ (22.x) / 24+ + FFmpeg（`npx hyperframes`）。
 
 ## 移植说明
 
-技能同步自官方 `heygen-com/hyperframes` 的 0.8.207 发布提交 `619b8bc4d7fee406246529a8e214e60424807eda`（2026-10-27）。当前 7 个官方技能完整保留原文、脚本与资源；原来的 14 个旧名称改为兼容入口，转向当前技能，避免继续使用已合并的旧工作流。上游插件启动器固定 CLI 版本，并禁止独立技能更新命令覆盖 DSH 管理的包。来源、完整性与 Apache-2.0 许可证见 `skills/UPSTREAM.json` 和 `skills/UPSTREAM-LICENSE.txt`。
+技能同步自官方 `heygen-com/hyperframes` 的 0.8.209 发布提交 `53c975966611e7012b09b6d46707c26511ea077d`（2026-10-28）。当前 7 个官方技能完整保留原文、脚本与资源；原来的 14 个旧名称改为兼容入口，转向当前技能，避免继续使用已合并的旧工作流。上游插件启动器固定 CLI 版本，并禁止独立技能更新命令覆盖 DSH 管理的包。来源、完整性与 Apache-2.0 许可证见 `skills/UPSTREAM.json` 和 `skills/UPSTREAM-LICENSE.txt`。
 
 ## 跨平台使用
 

package/docs/validation-0.10.0.md

@@ -0,0 +1,12 @@
+# 0.10.0 图片排序验收
+
+2026-10-28，Windows / Node 24.16 / 官方 DSH 0.2.1-rc.3 Web，后台 Chrome / Playwright。Browser plugin 不可用，因此采用本地 Playwright，不切换用户前台窗口。
+
+- 实际创建轮播工程，上传三张有效 PNG，用鼠标和键盘调整顺序，关闭详情再打开验证持久化。
+- 真正准备官方渲染环境并导出 6 秒 MP4，下载后在 1/3/5 秒抽帧，逐张查看确认绿色、蓝色、红色顺序；再次移动图片后旧 MP4 的 SHA-256 保持一致，界面提示重新导出。
+- 中文浅色、英文深色及 390px 窄屏实际操作；窄屏按钮也实际点击，图片重新排列成功；未捕获页面异常。
+- 后端覆盖图片完整排列、重复/缺失/外来 ID、旧修订、空操作、混合音频位置、文件字节和旧渲染记录保留。
+
+同步官方 HyperFrames 0.8.209 发布提交 53c975966611e7012b09b6d46707c26511ea077d 的 7 个当前技能与 301 个资源；14 个旧技能名称保留。5 个被 npm 固定过滤的开发元数据通过记录的 UPSTREAM.gitignore 副本分发，原始路径、内容哈希和别名映射均保留，实际打包清单逐项核对。技能文本固定 LF，避免 Windows Git 检出换行导致校验失败。
+
+未测：Electron 专属菜单、全部模板/格式组合、所有外部媒体与真实业务项目。受控测试素材不代表任意用户项目。自动安装继续默认关闭。

package/lib/client.js

@@ -176,7 +176,7 @@ function __stardustUpdatesGuard(React, name, { dirty = false, busy = false, reta
 function __StardustPluginUpdatesFooter({ React, name }) {
   const [, render] = React.useState(0), pool = __stardustUpdatesGuards();
   React.useEffect(() => { const fn = () => render(value => value + 1); pool.viewListeners.add(fn); return () => pool.viewListeners.delete(fn); }, []);
-  const client = [...pool.clients].find(client => client.has(name));
+  const client = [...pool.clients].find(client => typeof client.Footer === 'function' && client.has(name));
   if (!client) return null;
   return React.createElement(client.Footer, { name });
 }
@@ -238,14 +238,22 @@ function __stardustUpdatesJoin(host, React, require, participant) {
   if (typeof root.plugin !== 'function') return;
   let record = pools.get(root);
   if (!record) {
-    record = { refs: new Map(), timer: null, version: participant.version, alive: true, hold: false };
+    record = { refs: new Map(), timer: null, version: participant.version, alive: true, hold: false, uiRevision: 2 };
     pools.set(root, record);
+    __stardustUpdatesActivate(record, pools, root, React, require);
+  } else if (record.uiRevision !== 2 && !record.migration) {
+    // The first loaded participant may still own a pre-footer client. Keep
+    // its references and draft guards, wait for any admitted install, then
+    // replace that one client fiber instead of running two window heartbeats.
     const shared = record;
-    record.fiber = root.plugin({ name: 'stardustlc-plugin-updates-client', inject: ['slots', 'locale', 'remote', 'remote.pluginManager'], apply(ctx) {
-      const client = __stardustUpdatesClient(ctx, React, require, shared);
-      ctx.effect(() => () => { shared.alive = false; client.dispose(); if (pools.get(root) === shared) pools.delete(root); });
-    } });
-    Promise.resolve(record.fiber).catch(() => { shared.alive = false; if (pools.get(root) === shared) pools.delete(root); });
+    record.migration = Promise.resolve().then(async () => {
+      while (shared.alive && shared.hold) await new Promise(resolve => setTimeout(resolve, 500));
+      if (!shared.alive || !shared.refs.size) return;
+      await shared.fiber?.dispose?.();
+      if (!shared.refs.size) return;
+      shared.alive = true; shared.uiRevision = 2; pools.set(root, shared);
+      __stardustUpdatesActivate(shared, pools, root, React, require);
+    }).catch(() => { /* The original page remains usable if host disposal fails. */ });
   }
   clearTimeout(record.timer);
   const ref = {}; record.refs.set(ref, participant);
@@ -259,10 +267,17 @@ function __stardustUpdatesJoin(host, React, require, participant) {
     if (!record.refs.size) record.timer = setTimeout(stop, 1000);
   });
 }
+function __stardustUpdatesActivate(shared, pools, root, React, require) {
+  shared.fiber = root.plugin({ name: 'stardustlc-plugin-updates-client', inject: ['slots', 'locale', 'remote', 'remote.pluginManager'], apply(ctx) {
+    const client = __stardustUpdatesClient(ctx, React, require, shared);
+    ctx.effect(() => () => { shared.alive = false; client.dispose(); if (pools.get(root) === shared) pools.delete(root); });
+  } });
+  Promise.resolve(shared.fiber).catch(() => { shared.alive = false; if (pools.get(root) === shared) pools.delete(root); });
+}
 function __stardustUpdatesClient(ctx, React, require, shared) {
   const h = React.createElement, W = createWorkbenchUI(React), route = new URL('api/stardustlc/plugin-updates', document.baseURI);
   const { useState, useEffect } = React, id = crypto.randomUUID(), listeners = new Set(), pool = __stardustUpdatesGuards(), requests = new Set(), notified = new Set(), knownRows = new Map();
-  let alive = true, registered = false, state = null, lastInteraction = Date.now(), inPoll = false, manualOperation = false;
+  let alive = true, registered = false, state = null, lastInteraction = Date.now(), inPoll = false, manualOperation = false, legacyHint = null;
   const language = () => String(ctx.locale?.getSnapshot?.().active || '').startsWith('en') ? 'en' : 'zh';
   const t = (zh, en) => language() === 'en' ? en : zh;
   const preferences = name => state?.preferences.packages[name] || { checkEnabled: true, autoInstall: false, deferredUntil: 0, ignoredVersion: null };
@@ -387,11 +402,11 @@ function __stardustUpdatesClient(ctx, React, require, shared) {
   function Reminder() {
     useSnapshot();
     const row = state?.rows.find(row => { const prefs = preferences(row.name); return row.available && !row.updating && !row.bundledBy && prefs.checkEnabled && prefs.deferredUntil <= Date.now() && prefs.ignoredVersion !== row.release.version && !notified.has(row.name + '@' + row.release.version); });
-    if (!row) return null;
+    if (!row && !legacyHint) return null;
     let Toast; try { Toast = require('@deepseek-ai/dsh-client-ui-primitives').Toast; } catch { return null; }
     if (!Toast) return null;
-    const key = row.name + '@' + row.release.version;
-    return h(Toast, { key, text: (language() === 'en' ? row.labelEn : row.label) + t('有新版本，可在页面底部查看。', ' has an update. Review it at the bottom of its page.'), icon: h(W.Icon, { name: 'refresh', size: 18 }), holdMs: 7000, onDone: () => { notified.add(key); notify(); } });
+    const hint = legacyHint, key = hint ? 'legacy-' + hint : row.name + '@' + row.release.version;
+    return h(Toast, { key, text: hint ? hint + t('：请打开「插件」中的此插件详情页，在底部管理更新。', ': open its details in Plugins to manage updates at the bottom.') : (language() === 'en' ? row.labelEn : row.label) + t('有新版本，可在页面底部查看。', ' has an update. Review it at the bottom of its page.'), icon: h(W.Icon, { name: 'refresh', size: 18 }), holdMs: 7000, onDone: () => { if (hint) legacyHint = null; else notified.add(key); notify(); } });
   }
   function register() {
     if (!alive) return;
@@ -410,7 +425,7 @@ function __stardustUpdatesClient(ctx, React, require, shared) {
     finally { inPoll = false; }
   }
   const timer = setInterval(() => { void poll(); }, 15000), first = setTimeout(() => { void poll(); }, 100);
-  const client = { t, Footer: Panel, has: name => registered && !!originalRow(name), row: rowFor, dispose() {
+  const client = { t, Footer: Panel, Button: W.Button, open(name) { const footer = [...document.querySelectorAll('[data-plugin-update-footer]')].find(node => node.getAttribute('data-plugin-update-footer') === name); if (footer) footer.scrollIntoView({ block: 'end', behavior: 'smooth' }); else { legacyHint = name; notify(); } }, has: name => registered && !!originalRow(name), row: rowFor, dispose() {
     close(); alive = false; clearTimeout(first); clearInterval(timer); pool.clients.delete(client);
     pool.listeners.delete(guardChanged); listeners.clear();
     for (const event of ['pointerdown', 'keydown', 'input']) document.removeEventListener(event, interaction, true);
@@ -596,13 +611,24 @@ function MediaCanvas({ project, fields, render, dirty, stale, job, running, read
 function MediaAssets({ project, dirty, running, fileRef, upload, perform, setProject, t }) {
   const [remove, setRemove] = useState(null);
   if (!project) return h(W.Empty, { title: t('先保存工程，再添加素材', 'Save the project before adding media'), icon: 'video' }, t('填写标题并点击上方“保存工程”。', 'Enter a title and choose Save project above.'));
+  const imageIds = project.assets.filter(asset => asset.kind === 'image').map(asset => asset.id);
+  const move = (asset, offset) => perform(async () => {
+    const order = [...imageIds], index = order.indexOf(asset.id), next = index + offset;
+    if (index < 0 || next < 0 || next >= order.length) return;
+    [order[index], order[next]] = [order[next], order[index]];
+    setProject(await api({ action: 'reorderImages', id: project.id, revision: project.revision, imageIds: order }));
+  });
   return h('section', { className: 'media-assets-view' },
     h('div', { className: 'w-toolbar' }, h('h3', null, t('工程素材', 'Project media') + ' · ' + project.assets.length), h(W.Button, { icon: 'upload', disabled: running || dirty, onClick: () => fileRef.current?.click() }, t('上传素材', 'Upload media'))),
-    h('p', { className: 'w-muted' }, t('PNG/JPEG 图片、一个背景音频和一个静音背景视频；每个 ≤20 MB，总共 ≤40 MB。轮播按上传顺序，每张至少两秒。', 'PNG/JPEG images, one background audio and one muted background video; each ≤20 MB, total ≤40 MB. Slideshow follows upload order, at least two seconds per image.')),
+    h('p', { className: 'w-muted' }, t('PNG/JPEG 图片、一个背景音频和一个静音背景视频；每个 ≤20 MB，总共 ≤40 MB。轮播按下方图片顺序，每张至少两秒。', 'PNG/JPEG images, one background audio and one muted background video; each ≤20 MB, total ≤40 MB. Slideshow follows the image order below, at least two seconds per image.')),
+    imageIds.length > 1 ? h('p', { className: 'w-muted' }, t('上移或下移图片后立即保存。已导出的 MP4 保持原样，请重新导出以应用新顺序。', 'Moving an image saves its order immediately. Existing MP4s are preserved; export again to apply the new order.')) : null,
     dirty ? h(W.Status, null, t('请先保存修改，再上传或移除素材副本。', 'Save changes before uploading or removing media copies.')) : null,
     h('input', { ref: fileRef, type: 'file', accept: '.png,.jpg,.jpeg,.mp3,.wav,.mp4', disabled: running || dirty, onChange: upload, 'aria-label': t('上传素材副本', 'Upload a media copy'), style: { display: 'none' } }),
     project.assets.length ? h('ul', { className: 'media-asset-list' }, project.assets.map(asset => h('li', { key: asset.id }, asset.kind === 'image' ? h('img', { src: urlFor(project, 'asset', { asset: asset.id }), alt: asset.name }) : h(W.Icon, { name: asset.kind === 'video' ? 'video' : 'file', size: 28 }),
-      h('div', null, h('strong', null, asset.name), h('p', { className: 'w-muted' }, asset.kind + ' · ' + Math.ceil(asset.bytes / 1024) + ' KB')),
+      h('div', null, h('strong', null, asset.name), h('p', { className: 'w-muted' }, (asset.kind === 'image' ? t('图片 ', 'Image ') + (imageIds.indexOf(asset.id) + 1) + ' / ' + imageIds.length : asset.kind === 'audio' ? t('背景音频', 'Background audio') : t('背景视频', 'Background video')) + ' · ' + Math.ceil(asset.bytes / 1024) + ' KB')),
+      asset.kind === 'image' && imageIds.length > 1 ? h('div', { className: 'w-toolbar media-asset-order' },
+        h(W.Button, { variant: 'ghost', disabled: running || dirty || imageIds.indexOf(asset.id) === 0, 'aria-label': t('上移图片：', 'Move image up: ') + asset.name, onClick: () => move(asset, -1) }, t('上移', 'Move up')),
+        h(W.Button, { variant: 'ghost', disabled: running || dirty || imageIds.indexOf(asset.id) === imageIds.length - 1, 'aria-label': t('下移图片：', 'Move image down: ') + asset.name, onClick: () => move(asset, 1) }, t('下移', 'Move down'))) : null,
       h(W.Button, { variant: 'ghost', icon: 'trash', disabled: running || dirty, onClick: () => setRemove(asset) }, t('移除上传副本', 'Remove uploaded copy'))))) : h(W.Empty, { title: t('还没有上传素材', 'No media uploaded yet'), icon: 'video' }, t('标题卡可以直接导出。需要图片或配乐时，再上传自己的素材。', 'Title cards can be exported as they are. Upload your own media when you need images or music.')),
     remove ? h(W.Dialog, { title: t('移除素材副本', 'Remove media copy'), closeLabel: t('取消', 'Cancel'), busy: running, onClose: () => setRemove(null) }, h('p', null, remove.name), h('p', { className: 'w-muted' }, t('仅移除本工程中的上传副本，原文件保留。', 'Only the uploaded project copy is removed. Your original file is preserved.')), h('div', { className: 'w-toolbar' }, h(W.Button, { variant: 'danger', disabled: running || dirty, onClick: () => perform(async () => { setProject(await api({ action: 'removeAsset', id: project.id, revision: project.revision, asset: remove.id })); setRemove(null); }) }, t('确认移除副本', 'Confirm removal')), h(W.Button, { disabled: running, onClick: () => setRemove(null) }, t('取消', 'Cancel')))) : null);
 }
@@ -633,6 +659,10 @@ const MEDIA_WORKBENCH_CSS = `
                 return message;
             if (error?.status === 401)
                 return 'Your session expired. Reopen DSH and try again.';
+            if (/调整图片顺序需要/.test(message))
+                return 'Reload the project before changing its image order.';
+            if (/图片顺序/.test(message))
+                return 'Use every current image exactly once. Reload the project before trying again.';
             if (/先归档|已达 30/.test(message))
                 return 'The 30 active project slots are full. Archive another project before creating or restoring one.';
             if (/已有预览或渲染/.test(message))
@@ -829,7 +859,7 @@ h('div', { className: 'bar' }, h('button', { disabled: busy || dirty || activeJo
         catch { } W.register(ctx,{id:'dsh-'+engine+'.workbench',label:()=>title,icon:engine==='hyperframes'?'layers':'play',component:Workbench,inject:()=>({locale}),order:engine==='hyperframes'?65:66});
 ctx.slots.inject('settings.section', () => ctx.slots.register({ name: 'settings.section', id: 'dsh-' + engine, order: engine === 'hyperframes' ? 62 : 63, label: () => title, inject: () => ({ locale }) }, Workbench)); }
         return { inject: ['slots', 'locale'], apply };
-    } },{"name":"dsh-hyperframes","version":"0.1.0","hasWorkbench":true,"packageVersion":"0.9.2","label":"HyperFrames","labelEn":"HyperFrames","suiteComponent":true}));
+    } },{"name":"dsh-hyperframes","version":"0.1.0","hasWorkbench":true,"packageVersion":"0.10.0","label":"HyperFrames","labelEn":"HyperFrames","suiteComponent":true}));
 
 })();
 

package/lib/media-store.d.ts

@@ -17,6 +17,8 @@ export declare class MediaStore {
     create(value: unknown): Promise<MediaProject>;
     edit(id: string, revision: unknown, fn: (p: MediaProject) => Promise<void> | void, bump?: boolean): Promise<MediaProject>;
     update(id: string, revision: unknown, value: unknown): Promise<MediaProject>;
+    /** Reorder existing images atomically; audio/video slots and uploaded bytes stay intact. */
+    reorderImages(id: string, revision: unknown, order: unknown): Promise<MediaProject>;
     assetBytes(id: string, asset: MediaAsset): Promise<Buffer>;
     upload(id: string, revision: unknown, name: string, bytes: Buffer): Promise<MediaProject>;
     removeAsset(id: string, revision: unknown, assetId: string): Promise<MediaProject>;

package/lib/media-store.js

@@ -132,6 +132,21 @@ export class MediaStore {
         }
     }
     async update(id, revision, value) { return this.edit(id, revision, p => { Object.assign(p, validateFields(value)); }); }
+    /** Reorder existing images atomically; audio/video slots and uploaded bytes stay intact. */
+    async reorderImages(id, revision, order) {
+        if (!Number.isInteger(revision) || Number(revision) < 1)
+            throw new Error('调整图片顺序需要当前工程修订号。');
+        return this.edit(id, revision, p => {
+            const images = p.assets.filter(a => a.kind === 'image'), byId = new Map(images.map(a => [a.id, a]));
+            if (!Array.isArray(order) || order.length !== images.length || new Set(order).size !== images.length || order.some(id => typeof id !== 'string' || !byId.has(id)))
+                throw new Error('图片顺序必须包含当前项目的全部图片，且每张只出现一次。');
+            if (images.every((asset, index) => asset.id === order[index]))
+                return;
+            let index = 0;
+            p.assets = p.assets.map(asset => asset.kind === 'image' ? byId.get(order[index++]) : asset);
+            p.revision++;
+        }, false);
+    }
     async assetBytes(id, asset) {
         const file = join(await this.path(id), 'assets', asset.file);
         await this.checkPath(file);

package/lib/media-templates.d.ts

@@ -27,7 +27,7 @@ export interface MediaProject extends MediaFields {
     }>;
 }
 export declare const MEDIA_VERSIONS: {
-    readonly hyperframes: "0.8.207";
+    readonly hyperframes: "0.8.209";
     readonly remotion: "4.0.539";
     readonly gsap: "3.15.0";
 };

package/lib/media-templates.js

@@ -1,4 +1,4 @@
-export const MEDIA_VERSIONS = { hyperframes: '0.8.207', remotion: '4.0.539', gsap: '3.15.0' };
+export const MEDIA_VERSIONS = { hyperframes: '0.8.209', remotion: '4.0.539', gsap: '3.15.0' };
 export const MEDIA_TEMPLATES = [
     { id: 'title', zh: '标题卡', en: 'Title card', description: '一句标题、一段介绍，适合开场与通知。' },
     { id: 'product', zh: '产品介绍', en: 'Product card', description: '深色画布与一张主图，适合产品亮点。' },

package/lib/media-workbench.js

@@ -401,6 +401,9 @@ export class MediaWorkbench {
                     case 'removeAsset':
                         value = await this.store.removeAsset(mediaId(v.id), v.revision, mediaId(v.asset));
                         break;
+                    case 'reorderImages':
+                        value = await this.store.reorderImages(mediaId(v.id), v.revision, v.imageIds);
+                        break;
                     case 'archive':
                     case 'restore': {
                         if (v.confirmed !== true)

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-hyperframes",
-  "version": "0.9.2",
+  "version": "0.10.0",
   "description": "DSH 视频插件：HyperFrames 技能、模板与素材工作台、官方预览和本地 MP4 导出。",
   "type": "module",
   "main": "lib/index.js",
@@ -61,7 +61,7 @@
     "fflate": "0.8.3",
     "proper-lockfile": "4.1.2",
     "yaml": "^2.9.0",
-    "@stardustlc/dsh-updates": "0.1.2"
+    "@stardustlc/dsh-updates": "0.1.3"
   },
   "devDependencies": {
     "@types/node": "^24.0.0",

package/plugin.json

@@ -1,5 +1,5 @@
 {
   "name": "hyperframes",
-  "version": "0.8.207",
+  "version": "0.8.209",
   "description": "Official HyperFrames skill release packaged by dsh-hyperframes. DSH manages this bundle; this manifest supplies the pinned upstream CLI version."
 }

package/skills/UPSTREAM.json

@@ -1,9 +1,9 @@
 {
   "name": "hyperframes",
-  "version": "0.8.207",
-  "gitHead": "619b8bc4d7fee406246529a8e214e60424807eda",
-  "tarball": "https://registry.npmjs.org/hyperframes/-/hyperframes-0.8.207.tgz",
-  "integrity": "sha512-h6VdgcltB307D+lkGlIItgY0W7+J5eyDs23arOC1V6I2Zt6l55oOR7G42wkqWm41et3rywPR7rEICwhbzd3jJg==",
+  "version": "0.8.209",
+  "gitHead": "53c975966611e7012b09b6d46707c26511ea077d",
+  "tarball": "https://registry.npmjs.org/hyperframes/-/hyperframes-0.8.209.tgz",
+  "integrity": "sha512-08ft2bTwhVPUxklkEFQ3iw6JWi/bDDDC6s9yI6QjVabGFAZ2T5WfhPkSlgbCTNAOixS8GnjvDaJ0Z5rmf4op6w==",
   "node": ">=22",
   "canonical": [
     "figma",
@@ -34,11 +34,8 @@
   "checkedAt": "2026-10-27",
   "adaptation": "Official canonical files unchanged; DSH compatibility aliases and upstream launcher manifest.",
   "files": {
-    "embedded-captions/SKILL.md": "3ffc067b68d5917dadb48264aa258c9382976d9b8e744b855e0e63df4e356ffd",
-    "faceless-explainer/SKILL.md": "3f694998895cd472e4de3d8cb720028fc091d032f29140f690edfb103d5d8cb8",
     "figma/scripts/verify-motion.mjs": "1988721525e929caa5d3ced6d16c31467996e0c57757d281a971fb77e2297de8",
     "figma/SKILL.md": "d9537758a88bf3cbfc5699167742e437a6791c57c0180556c930ec6c3aae0ab6",
-    "general-video/SKILL.md": "36af528283588750eb6283a23cf1c34aa8042fae6fae4e54928a5151b57f1d21",
     "hyperframes/assets/frame-presets/biennale-yellow/caption-skin.html": "b0e4812d9cb5852969be276f8a98ffa2b293ba8cc902fababae3f3f6340088c3",
     "hyperframes/assets/frame-presets/biennale-yellow/frame-showcase.html": "5ba04e47cf9897e023dcfa49e1ec26fe26bac0c5061097dc6e7cb1d9ed46d7d0",
     "hyperframes/assets/frame-presets/biennale-yellow/FRAME.md": "76d22cced9c152b0edb520543cf34c4ce772a312caa7211c40d4315b53c053cf",
@@ -89,7 +86,7 @@
     "hyperframes/assets/frame-presets/editorial-forest/FRAME.md": "ceeb2ab768367da1e1f3e1eca36ab9feeb3de3e4d15493319b0044c3d869329c",
     "hyperframes/references/captions.md": "e7e2af7eace992487baa455bfa703fb3d770fb29f36732541554e60a46896d54",
     "hyperframes/references/film.md": "b684403f725cf720b9f192bafd420ca55f24060114004234a4e46a715de7a183",
-    "hyperframes/references/format.md": "6418c8f1fe24943be2eb913421a6355d5d4bee60fe8eea4ced9b78ccdf88a4bb",
+    "hyperframes/references/format.md": "babb5d4bfeffa8422c8e3474833a827a2a3dd95d234e8a37c130c4973d360533",
     "hyperframes/references/look.md": "5128a54cdb75bca2f627170e4a3a9667f4f11cf1579301fc16c53862c29c3ad3",
     "hyperframes/references/motion.md": "80b9bd70c011b7fc679f351cb41b993b16d610af1cda316eaf9d19bf9c08372f",
     "hyperframes/references/overlays.md": "d87fa3d13e8e0dace593f4aafb68c085b7f4393eee468c7695a74d5665150da3",
@@ -115,10 +112,8 @@
     "hyperframes/scripts/locate.mjs": "9274b1b63a74b305f044dfd907ae5ddae538d566d31c23b81c39975be6317147",
     "hyperframes/scripts/plugin-cli.mjs": "1ec46cdb9d819ecc9367aba719fea9253089617ead8c5454e59ab18b206711fb",
     "hyperframes/scripts/plugin-cli.test.mjs": "abfdf2498b57509438077803bee3a626c6fc13e1014ae066e5281edbfc4ca23d",
-    "hyperframes/SKILL.md": "180ce4eea5f33f1617105c92e2690a5a2320abf624c263186ec0cb1a78a919ef",
-    "hyperframes-animation/SKILL.md": "d7d6ded178949ddc277f96a6c2c19d3b0d5dc518354ee8aa118ac859ba061e2b",
-    "hyperframes-audio/SKILL.md": "5afd67113b389c5db2724149e1491cdeacf75962183af3ea36e78308da7dbd04",
-    "hyperframes-cli/references/beats.md": "09689994eba8c977693fdc54702b07dd492e80aa47075de0a027df901dc51b1d",
+    "hyperframes/SKILL.md": "96f3793bd677dde345c5aca4aa6484334100a154e8a5d9e2ad07d69c9b9e2b0e",
+    "hyperframes-cli/references/beats.md": "a14417f6308c1bb5cae7f1244635abb634003a1befe0972666924a2a2078751e",
     "hyperframes-cli/references/cloud.md": "8191550a036130249c26b37912dfd321c771c6670223cc7e0fff7aedd67607bf",
     "hyperframes-cli/references/cloudrun.md": "16f46a18ee3d165dba3b7ee50362bb32cb0a927643a90821e7b63494fe0bde83",
     "hyperframes-cli/references/compare-and-batch.md": "d17fa5a16707d981fa6473b99a28aa45abf41bca0fd96c5157c632abd0bfc222",
@@ -131,9 +126,6 @@
     "hyperframes-cli/references/preview-render.md": "851d85d7f4e6939d90ed6e350180a8edadc67b44dfc5d19163376485324d00b2",
     "hyperframes-cli/references/upgrade-info-misc.md": "a46662ad866669d1cf70bfa6404e9a01f68d2db4eb667fe6dc8a8442f6a069d8",
     "hyperframes-cli/SKILL.md": "44a48ccfa4cbd4f4234f8306c96268a4be56a0f2376abedbf31d2167b3c21286",
-    "hyperframes-core/SKILL.md": "b9c5d7dbbe8ff1a858776f87636ba541cd233ebe44b9f7140adefa12aaf97be9",
-    "hyperframes-creative/SKILL.md": "22208406818ebd96c43f68c4c81f8f737d7f604db76206daecc86b3d2d56a8f2",
-    "hyperframes-keyframes/SKILL.md": "c0dc5309170b1032440635b37c891bf4fe7a0c6a8965bf2df2c4ce1661fa6b34",
     "hyperframes-registry/examples/add-block.md": "0e3353755c4ef55e53570d1266a4a43b2c5aef9bbe41276430e38cfa6580b83a",
     "hyperframes-registry/examples/add-component.md": "d06992d31eec617a91f5c34630c9274c52dd07898bd24f10a869d0d1cab5af29",
     "hyperframes-registry/references/component-quality-bar.md": "f0d4c3c44131bc0791f8a8cc3d2d7478d38045451775af7d20b2dd47cf5f91ac",
@@ -147,7 +139,6 @@
     "hyperframes-registry/references/wiring-blocks.md": "397f9ad5a9244d173b97bb5a5dfe76ea3cbccfb8dde16cba8b3dabc6044b011a",
     "hyperframes-registry/references/wiring-components.md": "6c8341c29fdae6de4f9fd1560a668d11cf34731b81fe5a06c9aeb4a000047b2a",
     "hyperframes-registry/SKILL.md": "1c7b27632c9ea9febaafc2d9af073b377029f46be4bee70d75b5e713eb698423",
-    "hyperframes-studio/SKILL.md": "b28c9dd27ae9d7ca2c7fdeb8b897c41f2a03489b7830fc2cfc970d4f3fa594d5",
     "media-use/.gitignore": "a299ec0fcdb6bc6670cf9fb22eefe3fcc37730e2e554b7f54e25de88be1ede02",
     "media-use/audio/assets/sfx/chime.mp3": "74823b1b27703c56e0652db838f503c150ce9c2442d47d27430af3d5121d6d12",
     "media-use/audio/assets/sfx/click-soft.mp3": "075e17bdac5c13662a1c9530050e0046f81d4138e00eb3bf30427a7b4404103d",
@@ -223,8 +214,8 @@
     "media-use/luts/index.json": "988ac83c14bc3a9ef09aa6ab64459a0aa9e766e96361738136970ec89df1675a",
     "media-use/luts/README.md": "c06cbbf2aab80cbf8aa25c83497202a63107a61e083b6c199a89d513e8096a3b",
     "media-use/references/audio.md": "4c2602fec675b5234b18a0a03ac05aa6c380398c75176c6a071ce683d5107973",
-    "media-use/references/grading.md": "00455ee9d1eecec76d846c9bc5d0eac35017ca08f514f2efc7f3fc5f6ffb6e87",
-    "media-use/references/local.md": "c72b10577e731c9904e7cda14a64ed5b7177b4b2ec5053778cbe8cb64d2a6634",
+    "media-use/references/grading.md": "430e2b57dfb64c3acfbdd02317ba967ebb580d42b348686ccffbc175d3de8392",
+    "media-use/references/local.md": "659271d787fe3bdd39f0bc32b1eeb03860b9c76c2672cb71b6bb8d4a88fe4385",
     "media-use/references/media-treatment-recipes.md": "852e7e978af56c9e99ba14f19009da974cd78f99b399ca194dc416c31c49bda5",
     "media-use/references/media-treatments.md": "2125e106e7f891e14716efabda40f5d6a46284592c6f37d5a14b2b86bda96c1a",
     "media-use/references/memory.md": "55477edafb7f9c8294cafd3f1633b7a1820d538695c0868f9c3ddb6b418dadbc",
@@ -264,11 +255,6 @@
     "media-use/scripts/transcript-cut.mjs": "17e148571738ad8cf30b0ccb3f28d0837df5072114b9dfb63bc8d9f5d25e5a5d",
     "media-use/scripts/transcript-cut.test.mjs": "af546cd7d473eb5f4258148a8dd8ec637a67a242cd50948abe1e0dcd6f64c527",
     "media-use/SKILL.md": "ef3976a02ff516d8e5ed0b7fff19d4bbf9358264233bace33fdacaa3aa7f37de",
-    "motion-graphics/SKILL.md": "838123af55a57cc7dd2a8b282c7d1276abf96c6235c1995b100b2f214d8ecea3",
-    "music-to-video/SKILL.md": "4731b05a7f3b43f6841ec58276798f49b1824a8c59c2b10d3f8d3c4fff69de24",
-    "NOTICE.md": "f2aea39bd23e81d314b277486e38eafebf2192559d8adab99146e939c10197f9",
-    "pr-to-video/SKILL.md": "e915ec3819620d1b08883b1c1f046c613f00d1a6faa7dce63bcb6bec215e8776",
-    "product-launch-video/SKILL.md": "e390dc1b198f1e3d0cbde4dbbbfc4600721031568f754fce5fd96da5e3cf7648",
     "remotion-to-hyperframes/assets/.gitkeep": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855",
     "remotion-to-hyperframes/assets/test-corpus/.gitignore": "975bd96543101813e4923824631bbca68bfba96107a4c872a74def48d8b001e6",
     "remotion-to-hyperframes/assets/test-corpus/run.sh": "b6ceead2abf0f155ca816c2a696e0ea4db9d0b2d55bba5ad1407d65ccbd23399",
@@ -348,8 +334,14 @@
     "remotion-to-hyperframes/scripts/tests/smoke.sh": "9a51cadfe9b6fe645096fc2e05d80849c6985abd3a92bd27cb985b3cdd3ce7b0",
     "remotion-to-hyperframes/SKILL.md": "f6fb227e1a5d4fc47ed5375a24efc7bbc55b47a1ac2593825e63e34f6155ca63",
     "slideshow/references/standalone-harness.md": "0f12d69a9c05a801291d923c7b1dbe666b29f3b68f6bb73d7c80681ae09df7e9",
-    "slideshow/SKILL.md": "4525f1a0d468f91957b638f14599c37f4af5e00c9b3c4df519a1cbe16101c908",
-    "talking-head-recut/SKILL.md": "dc1e436ef6b0ea5ff60187e0275382852d25a4cc39771032350e0365007f825d",
-    "UPSTREAM-LICENSE.txt": "4259155fb06f127687ee7b0a8a3682d45132db0f2da26cbc0b7a2d1e796436b8"
-  }
+    "slideshow/SKILL.md": "4525f1a0d468f91957b638f14599c37f4af5e00c9b3c4df519a1cbe16101c908"
+  },
+  "packagedPaths": {
+    "media-use/.gitignore": "media-use/UPSTREAM.gitignore",
+    "remotion-to-hyperframes/assets/test-corpus/.gitignore": "remotion-to-hyperframes/assets/test-corpus/UPSTREAM.gitignore",
+    "remotion-to-hyperframes/assets/test-corpus/tier-1-title-card/.gitignore": "remotion-to-hyperframes/assets/test-corpus/tier-1-title-card/UPSTREAM.gitignore",
+    "remotion-to-hyperframes/assets/test-corpus/tier-2-multi-scene/.gitignore": "remotion-to-hyperframes/assets/test-corpus/tier-2-multi-scene/UPSTREAM.gitignore",
+    "remotion-to-hyperframes/assets/test-corpus/tier-3-data-driven/.gitignore": "remotion-to-hyperframes/assets/test-corpus/tier-3-data-driven/UPSTREAM.gitignore"
+  },
+  "packagingNote": "npm filters .gitignore files. These five development metadata files are distributed under recorded UPSTREAM.gitignore aliases; contents and source hashes are unchanged."
 }

package/skills/hyperframes/SKILL.md

@@ -26,7 +26,7 @@ Build what was asked: no voiceover or captions and no new aspect ratio unless th
 7. Never `play()`, `pause()` or seek media. A `<video>` keeps its sound with `data-has-audio="true"`, else it is `muted`; music, voice, replacement sound and J/L cuts are a separate `<audio>`.
 8. Every `<audio>` has an `id` or it is left out of the mix. No `crossorigin` on media. Time a `<video>` or its wrapper, never both.
 9. Only the bundled fonts (`references/format.md`) resolve by name; any other family needs `@font-face` to a file in `assets/fonts/`.
-10. Asset paths are root-relative (`assets/...`), in sub-compositions too.
+10. Asset paths: `assets/...` (no leading `/`), in sub-compositions too.
 11. Grades, grain, blur and vignettes on footage go through `npx hyperframes media-treatment` (`/media-use`), never CSS filters.
 12. A scene file puts its styles, markup and scripts inside `<template>` and styles its root as `#root`. Intended overflow or overlap: `data-layout-allow-overflow`, `data-layout-allow-overlap`.
 

package/skills/hyperframes/references/format.md

@@ -150,6 +150,7 @@ Studio's Detach audio writes a muted `<video>` and an `<audio>` of the same file
 | `media_missing_id`, `media_crossorigin_breaks_preview` | Give every `<audio>` an `id`; drop `crossorigin`                                                       |
 | `gsap_timeline_registered_before_async_build`          | Register the timeline at the end of the async callback                                                 |
 | `standalone_composition_wrapped_in_template`           | Only scene files use `<template>`                                                                      |
+| `subcomposition_linked_style_names_root_id`            | A linked sheet cannot style a scene's root by id: use an inline `<style>`, or select a child           |
 | `subcomposition_root_styled_by_class`                  | Style a scene's root as `#root`                                                                        |
 | `subcomposition_blanks_before_host`                    | Make the scene's slot span the time it should show                                                     |
 | `clip_ends_past_root_duration`                         | Raise the root's `data-duration`                                                                       |

package/skills/hyperframes-cli/references/beats.md

@@ -8,6 +8,8 @@ npx hyperframes beats ./my-video
 npx hyperframes beats ./my-video --json
 ```
 
+`beats` takes the project folder, never a media file. For the beats of one audio or video file, run `npx hyperframes audio <file> --only beats --json`.
+
 The project must contain a local music `<audio>` source. Mark it with `data-timeline-role="music"`; an id containing `music`, `bgm`, or `soundtrack` is also recognized. The command decodes that file with ffmpeg, tracks its beats, and writes `beats/<audio-relative-path>.json`.
 
 If the track has no steady beat, the command fails and writes nothing. If ffmpeg is missing, run `npx hyperframes doctor`.

package/skills/media-use/UPSTREAM.gitignore

@@ -0,0 +1 @@
+eval-report.html

package/skills/media-use/references/grading.md

@@ -40,6 +40,8 @@ hyperframes media-treatment --project . --file index.html \
   --grading '{"preset":"warm-daylight","intensity":1}' --apply --json
 ```
 
+On Windows PowerShell, put the payload in a file and pass `--grading grading.json` (or pipe it with `--grading -`); inline JSON loses its quotes there.
+
 Use `--dry-run` before writing when scope is uncertain and `--clear` to remove
 the treatment. The low-level persisted result is still normal HTML:
 

package/skills/media-use/references/local.md

@@ -5,6 +5,7 @@ These run on this machine, free, and write into the project.
 ## Grade and style footage and images
 
 - Measure, then correct: `npx hyperframes media-treatment --selector '#hero' --analyze --json`, then `--grading '<json>' --apply`. `--dry-run` previews; `--clear` removes the treatment.
+- On Windows PowerShell, inline JSON loses its quotes: write the JSON to a file and pass its path, `--grading grading.json`, or pipe it with `--grading -`. The same goes for `--variables` and `--vars`.
 - `--file` defaults to `index.html`: for media inside a scene, pass `--file compositions/<scene>.html`.
 - Grain, blur, vignette, presets, palettes: `npx hyperframes media-treatment --capabilities --json`, then `--capability <id>` for one family's controls and ranges.
 - The result is a `data-color-grading` attribute on the media element. It treats the whole element in SDR, so it can't blur one region such as a face.

package/skills/remotion-to-hyperframes/assets/test-corpus/UPSTREAM.gitignore

@@ -0,0 +1 @@
+run-report.json

package/skills/remotion-to-hyperframes/assets/test-corpus/tier-1-title-card/UPSTREAM.gitignore

@@ -0,0 +1,10 @@
+# Render output
+remotion-src/out/
+hf-src/out/
+hf.mp4
+diff/
+strip/
+
+# Remotion / HF dependencies
+node_modules/
+package-lock.json

package/skills/remotion-to-hyperframes/assets/test-corpus/tier-2-multi-scene/UPSTREAM.gitignore

@@ -0,0 +1,14 @@
+# Generated by setup.sh
+remotion-src/public/
+hf-src/assets/
+
+# Remotion / HF dependencies
+remotion-src/node_modules/
+remotion-src/package-lock.json
+
+# Render output
+remotion-src/out/
+hf-src/out/
+hf.mp4
+diff/
+strip/

package/skills/remotion-to-hyperframes/assets/test-corpus/tier-3-data-driven/UPSTREAM.gitignore

@@ -0,0 +1,10 @@
+# Render output
+remotion-src/out/
+hf-src/out/
+hf.mp4
+diff/
+strip/
+
+# Remotion / HF dependencies
+node_modules/
+package-lock.json