framefields 2.11.0 → 2.13.0

package/dist/storage/index.d.mts

@@ -0,0 +1,206 @@
+//#region ../storage/dist/index.d.mts
+//#region src/manifest.d.ts
+/**
+ * The `storage` and `assets` sections of a project's `framefields.json`.
+ *
+ * ```json
+ * {
+ *   "storage": {
+ *     "remotes": {
+ *       "media": {
+ *         "endpoint": "https://<account>.r2.cloudflarestorage.com",
+ *         "bucket": "films",
+ *         "publicUrl": "https://media.example.com"
+ *       }
+ *     }
+ *   },
+ *   "assets": {
+ *     "assets/footage/intro.mp4": { "sha256": "…", "size": 48213 }
+ *   }
+ * }
+ * ```
+ *
+ * Assets are stored by content (`sha256/ab/<hash>`), so the manifest pins
+ * exact bytes the way a lockfile pins packages, and the files themselves
+ * stay out of git.
+ */
+/** An S3-compatible bucket: Cloudflare R2, AWS S3, Backblaze B2, MinIO, … */
+interface StorageRemote {
+  /** The S3 API endpoint, e.g. `https://<account>.r2.cloudflarestorage.com`. */
+  endpoint: string;
+  bucket: string;
+  /** SigV4 region. Default `auto` (R2); AWS needs the bucket's region. */
+  region?: string;
+  /** Key prefix inside the bucket, e.g. `films/launch/`. */
+  prefix?: string;
+  /**
+   * Where the bucket is publicly readable: a custom domain (an R2 custom
+   * domain or any CDN in front of the bucket) or the `r2.dev` URL. Reads use
+   * it instead of signed URLs, so anyone can pull and render without keys.
+   */
+  publicUrl?: string;
+}
+interface StorageConfig {
+  /** The remote new assets go to. Default: the only remote. */
+  default?: string;
+  remotes: Record<string, StorageRemote>;
+}
+/** One file the project needs, pinned by content. */
+interface AssetEntry {
+  sha256: string;
+  size: number;
+  /** The remote holding it. Default: `storage.default`. */
+  remote?: string;
+  /** A fixed https URL to fetch it from instead of a remote (public media). */
+  url?: string;
+}
+type AssetManifest = Record<string, AssetEntry>;
+declare const REMOTE_NAME: RegExp;
+declare const SHA256: RegExp;
+declare class ManifestError extends Error {
+  name: string;
+}
+/** Validates `storage`; errors name the remote and field at fault. */
+declare function parseStorage(value: unknown): StorageConfig;
+/** Validates `assets`; errors name the path and field at fault. */
+declare function parseAssets(value: unknown, storage?: StorageConfig): AssetManifest;
+/** The remote an asset (or a new one, without `name`) belongs to. */
+declare function pickRemote(storage: StorageConfig | undefined, name?: string): {
+  name: string;
+  remote: StorageRemote;
+};
+/** The object key holding `sha256`: `<prefix>sha256/ab/<hash>`. */
+declare function objectKey(sha256: string, prefix?: string): string;
+/** The asset's URL on the remote's public domain, if it has one. */
+declare function publicUrl(remote: StorageRemote, sha256: string): string | undefined;
+/**
+ * Where to download an asset without credentials: a signed URL handed in
+ * (`signed`, by sha256), its own `url`, or its remote's public domain.
+ * Undefined means the asset is on a private remote and needs a signature.
+ */
+declare function readUrl(entry: AssetEntry, storage: StorageConfig | undefined, signed?: Readonly<Record<string, string>>): string | undefined;
+declare function isAssetPath(path: string): boolean;
+//#endregion
+//#region src/bucket.d.ts
+interface Credentials {
+  accessKeyId: string;
+  secretAccessKey: string;
+  sessionToken?: string;
+}
+/**
+ * Keys for `remote` from the environment:
+ * `FRAMEFIELDS_STORAGE_<REMOTE>_ACCESS_KEY_ID` / `…_SECRET_ACCESS_KEY`
+ * (the remote's name upper-cased, `-` as `_`), else the standard
+ * `AWS_ACCESS_KEY_ID` / `AWS_SECRET_ACCESS_KEY`.
+ */
+declare function credentialsFromEnv(remote: string, env?: Readonly<Record<string, string | undefined>>): Credentials | undefined;
+/** The env vars `credentialsFromEnv` reads for `remote`, for messages. */
+declare function credentialEnvNames(remote: string): [string, string];
+declare class StorageError extends Error {
+  readonly status?: number | undefined;
+  name: string;
+  constructor(message: string, status?: number | undefined);
+}
+interface UploadProgress {
+  sent: number;
+  total: number;
+}
+interface BucketOptions {
+  fetch?: typeof fetch;
+  /** Files above this go up in parts. Default 64 MiB. */
+  multipartThreshold?: number;
+  /** Default 16 MiB; grows so a file never needs more than 10,000 parts. */
+  partSize?: number;
+  /** Parts in flight at once. Default 4. */
+  concurrency?: number;
+}
+/** One remote's bucket, signed with `credentials`. */
+declare class Bucket {
+  readonly remote: StorageRemote;
+  private readonly options;
+  private readonly aws;
+  private readonly fetch;
+  constructor(remote: StorageRemote, credentials: Credentials, options?: BucketOptions);
+  keyFor(sha256: string): string;
+  /** Whether the bucket holds `sha256` at the expected size. */
+  has(sha256: string, size: number): Promise<boolean>;
+  /**
+   * Uploads `file` (already hashed) under its content key. The bucket
+   * checks every byte against the sha256 sent with it.
+   */
+  upload(file: string, digest: {
+    sha256: string;
+    size: number;
+  }, onProgress?: (p: UploadProgress) => void): Promise<void>;
+  /** A GET URL anyone can use until it expires (at most 7 days). */
+  presign(sha256: string, expiresSec?: number): Promise<string>;
+  private put;
+  private uploadParts;
+  private url;
+  private send;
+  private failure;
+}
+//#endregion
+//#region src/files.d.ts
+type AssetErrorCode = "ASSET_NOT_FOUND" | "ASSET_FORBIDDEN" | "ASSET_DOWNLOAD_FAILED" | "ASSET_HASH_MISMATCH";
+declare class AssetError extends Error {
+  readonly code: AssetErrorCode;
+  name: string;
+  constructor(code: AssetErrorCode, message: string, options?: {
+    cause?: unknown;
+  });
+}
+interface FileDigest {
+  sha256: string;
+  size: number;
+}
+declare function hashFile(path: string): Promise<FileDigest>;
+interface DownloadOptions {
+  fetch?: typeof fetch;
+  signal?: AbortSignal;
+  /** Attempts for network errors and 5xx/429 responses. Default 3. */
+  attempts?: number;
+}
+/**
+ * Downloads `url` to `dest` through a temporary file, and only renames it
+ * into place once its size and sha256 match `expected`.
+ */
+declare function downloadVerified(url: string, dest: string, expected: FileDigest, options?: DownloadOptions): Promise<void>;
+/** Signed URLs carry credentials in the query: never print them. */
+declare function redactQuery(url: string): string;
+/** The Content-Type a CDN serves the file with. */
+declare function contentType(path: string): string;
+//#endregion
+//#region src/locate.d.ts
+interface ProjectManifest {
+  storage?: StorageConfig;
+  assets: AssetManifest;
+}
+/** The nearest folder at or above `dir` holding a framefields.json. */
+declare function findProjectDir(dir: string): string | undefined;
+/** The `storage` and `assets` of the project at `dir`; undefined without assets. */
+declare function readProjectManifest(dir: string): Promise<ProjectManifest | undefined>;
+interface AssetLocator {
+  /** The project folder (where framefields.json is). */
+  readonly root: string;
+  /** The pinned entry for an absolute path, if the project pins it. */
+  entry(file: string): AssetEntry | undefined;
+  /**
+   * A URL to read a pinned file from: its public domain or own URL, else
+   * a GET signed with the remote's keys from the environment. Undefined
+   * when the file isn't pinned, or is private and there are no keys.
+   */
+  url(file: string): Promise<string | undefined>;
+}
+/**
+ * Pinned-asset lookup for the project at or above `dir`, or undefined when
+ * it pins none.
+ */
+declare function openAssetLocator(dir: string, options?: {
+  env?: Readonly<Record<string, string | undefined>>;
+  fetch?: typeof fetch;
+}): Promise<AssetLocator | undefined>;
+//#endregion
+//#endregion
+export { type AssetEntry, AssetError, type AssetErrorCode, type AssetLocator, type AssetManifest, Bucket, type BucketOptions, type Credentials, type DownloadOptions, type FileDigest, ManifestError, type ProjectManifest, REMOTE_NAME, SHA256, type StorageConfig, StorageError, type StorageRemote, type UploadProgress, contentType, credentialEnvNames, credentialsFromEnv, downloadVerified, findProjectDir, hashFile, isAssetPath, objectKey, openAssetLocator, parseAssets, parseStorage, pickRemote, publicUrl, readProjectManifest, readUrl, redactQuery };
+//# sourceMappingURL=index.d.mts.map

package/dist/storage/index.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.mts","names":["StorageRemote","StorageConfig","Record","AssetEntry","AssetManifest","REMOTE_NAME","RegExp","SHA256","ManifestError","Error","parseStorage","parseAssets","pickRemote","objectKey","publicUrl","readUrl","Readonly","isAssetPath","Credentials","credentialsFromEnv","credentialEnvNames","StorageError","UploadProgress","BucketOptions","fetch","Bucket","Promise","AssetErrorCode","AssetError","FileDigest","hashFile","DownloadOptions","AbortSignal","downloadVerified","redactQuery","contentType","ProjectManifest","findProjectDir","readProjectManifest","AssetLocator","openAssetLocator"],"sources":["../../../storage/dist/index.d.mts"],"sourcesContent":["//#region src/manifest.d.ts\n/**\n * The `storage` and `assets` sections of a project's `framefields.json`.\n *\n * ```json\n * {\n *   \"storage\": {\n *     \"remotes\": {\n *       \"media\": {\n *         \"endpoint\": \"https://<account>.r2.cloudflarestorage.com\",\n *         \"bucket\": \"films\",\n *         \"publicUrl\": \"https://media.example.com\"\n *       }\n *     }\n *   },\n *   \"assets\": {\n *     \"assets/footage/intro.mp4\": { \"sha256\": \"…\", \"size\": 48213 }\n *   }\n * }\n * ```\n *\n * Assets are stored by content (`sha256/ab/<hash>`), so the manifest pins\n * exact bytes the way a lockfile pins packages, and the files themselves\n * stay out of git.\n */\n/** An S3-compatible bucket: Cloudflare R2, AWS S3, Backblaze B2, MinIO, … */\ninterface StorageRemote {\n  /** The S3 API endpoint, e.g. `https://<account>.r2.cloudflarestorage.com`. */\n  endpoint: string;\n  bucket: string;\n  /** SigV4 region. Default `auto` (R2); AWS needs the bucket's region. */\n  region?: string;\n  /** Key prefix inside the bucket, e.g. `films/launch/`. */\n  prefix?: string;\n  /**\n   * Where the bucket is publicly readable: a custom domain (an R2 custom\n   * domain or any CDN in front of the bucket) or the `r2.dev` URL. Reads use\n   * it instead of signed URLs, so anyone can pull and render without keys.\n   */\n  publicUrl?: string;\n}\ninterface StorageConfig {\n  /** The remote new assets go to. Default: the only remote. */\n  default?: string;\n  remotes: Record<string, StorageRemote>;\n}\n/** One file the project needs, pinned by content. */\ninterface AssetEntry {\n  sha256: string;\n  size: number;\n  /** The remote holding it. Default: `storage.default`. */\n  remote?: string;\n  /** A fixed https URL to fetch it from instead of a remote (public media). */\n  url?: string;\n}\ntype AssetManifest = Record<string, AssetEntry>;\ndeclare const REMOTE_NAME: RegExp;\ndeclare const SHA256: RegExp;\ndeclare class ManifestError extends Error {\n  name: string;\n}\n/** Validates `storage`; errors name the remote and field at fault. */\ndeclare function parseStorage(value: unknown): StorageConfig;\n/** Validates `assets`; errors name the path and field at fault. */\ndeclare function parseAssets(value: unknown, storage?: StorageConfig): AssetManifest;\n/** The remote an asset (or a new one, without `name`) belongs to. */\ndeclare function pickRemote(storage: StorageConfig | undefined, name?: string): {\n  name: string;\n  remote: StorageRemote;\n};\n/** The object key holding `sha256`: `<prefix>sha256/ab/<hash>`. */\ndeclare function objectKey(sha256: string, prefix?: string): string;\n/** The asset's URL on the remote's public domain, if it has one. */\ndeclare function publicUrl(remote: StorageRemote, sha256: string): string | undefined;\n/**\n * Where to download an asset without credentials: a signed URL handed in\n * (`signed`, by sha256), its own `url`, or its remote's public domain.\n * Undefined means the asset is on a private remote and needs a signature.\n */\ndeclare function readUrl(entry: AssetEntry, storage: StorageConfig | undefined, signed?: Readonly<Record<string, string>>): string | undefined;\ndeclare function isAssetPath(path: string): boolean;\n//#endregion\n//#region src/bucket.d.ts\ninterface Credentials {\n  accessKeyId: string;\n  secretAccessKey: string;\n  sessionToken?: string;\n}\n/**\n * Keys for `remote` from the environment:\n * `FRAMEFIELDS_STORAGE_<REMOTE>_ACCESS_KEY_ID` / `…_SECRET_ACCESS_KEY`\n * (the remote's name upper-cased, `-` as `_`), else the standard\n * `AWS_ACCESS_KEY_ID` / `AWS_SECRET_ACCESS_KEY`.\n */\ndeclare function credentialsFromEnv(remote: string, env?: Readonly<Record<string, string | undefined>>): Credentials | undefined;\n/** The env vars `credentialsFromEnv` reads for `remote`, for messages. */\ndeclare function credentialEnvNames(remote: string): [string, string];\ndeclare class StorageError extends Error {\n  readonly status?: number | undefined;\n  name: string;\n  constructor(message: string, status?: number | undefined);\n}\ninterface UploadProgress {\n  sent: number;\n  total: number;\n}\ninterface BucketOptions {\n  fetch?: typeof fetch;\n  /** Files above this go up in parts. Default 64 MiB. */\n  multipartThreshold?: number;\n  /** Default 16 MiB; grows so a file never needs more than 10,000 parts. */\n  partSize?: number;\n  /** Parts in flight at once. Default 4. */\n  concurrency?: number;\n}\n/** One remote's bucket, signed with `credentials`. */\ndeclare class Bucket {\n  readonly remote: StorageRemote;\n  private readonly options;\n  private readonly aws;\n  private readonly fetch;\n  constructor(remote: StorageRemote, credentials: Credentials, options?: BucketOptions);\n  keyFor(sha256: string): string;\n  /** Whether the bucket holds `sha256` at the expected size. */\n  has(sha256: string, size: number): Promise<boolean>;\n  /**\n   * Uploads `file` (already hashed) under its content key. The bucket\n   * checks every byte against the sha256 sent with it.\n   */\n  upload(file: string, digest: {\n    sha256: string;\n    size: number;\n  }, onProgress?: (p: UploadProgress) => void): Promise<void>;\n  /** A GET URL anyone can use until it expires (at most 7 days). */\n  presign(sha256: string, expiresSec?: number): Promise<string>;\n  private put;\n  private uploadParts;\n  private url;\n  private send;\n  private failure;\n}\n//#endregion\n//#region src/files.d.ts\ntype AssetErrorCode = \"ASSET_NOT_FOUND\" | \"ASSET_FORBIDDEN\" | \"ASSET_DOWNLOAD_FAILED\" | \"ASSET_HASH_MISMATCH\";\ndeclare class AssetError extends Error {\n  readonly code: AssetErrorCode;\n  name: string;\n  constructor(code: AssetErrorCode, message: string, options?: {\n    cause?: unknown;\n  });\n}\ninterface FileDigest {\n  sha256: string;\n  size: number;\n}\ndeclare function hashFile(path: string): Promise<FileDigest>;\ninterface DownloadOptions {\n  fetch?: typeof fetch;\n  signal?: AbortSignal;\n  /** Attempts for network errors and 5xx/429 responses. Default 3. */\n  attempts?: number;\n}\n/**\n * Downloads `url` to `dest` through a temporary file, and only renames it\n * into place once its size and sha256 match `expected`.\n */\ndeclare function downloadVerified(url: string, dest: string, expected: FileDigest, options?: DownloadOptions): Promise<void>;\n/** Signed URLs carry credentials in the query: never print them. */\ndeclare function redactQuery(url: string): string;\n/** The Content-Type a CDN serves the file with. */\ndeclare function contentType(path: string): string;\n//#endregion\n//#region src/locate.d.ts\ninterface ProjectManifest {\n  storage?: StorageConfig;\n  assets: AssetManifest;\n}\n/** The nearest folder at or above `dir` holding a framefields.json. */\ndeclare function findProjectDir(dir: string): string | undefined;\n/** The `storage` and `assets` of the project at `dir`; undefined without assets. */\ndeclare function readProjectManifest(dir: string): Promise<ProjectManifest | undefined>;\ninterface AssetLocator {\n  /** The project folder (where framefields.json is). */\n  readonly root: string;\n  /** The pinned entry for an absolute path, if the project pins it. */\n  entry(file: string): AssetEntry | undefined;\n  /**\n   * A URL to read a pinned file from: its public domain or own URL, else\n   * a GET signed with the remote's keys from the environment. Undefined\n   * when the file isn't pinned, or is private and there are no keys.\n   */\n  url(file: string): Promise<string | undefined>;\n}\n/**\n * Pinned-asset lookup for the project at or above `dir`, or undefined when\n * it pins none.\n */\ndeclare function openAssetLocator(dir: string, options?: {\n  env?: Readonly<Record<string, string | undefined>>;\n  fetch?: typeof fetch;\n}): Promise<AssetLocator | undefined>;\n//#endregion\nexport { type AssetEntry, AssetError, type AssetErrorCode, type AssetLocator, type AssetManifest, Bucket, type BucketOptions, type Credentials, type DownloadOptions, type FileDigest, ManifestError, type ProjectManifest, REMOTE_NAME, SHA256, type StorageConfig, StorageError, type StorageRemote, type UploadProgress, contentType, credentialEnvNames, credentialsFromEnv, downloadVerified, findProjectDir, hashFile, isAssetPath, objectKey, openAssetLocator, parseAssets, parseStorage, pickRemote, publicUrl, readProjectManifest, readUrl, redactQuery };\n//# sourceMappingURL=index.d.mts.map"],"mappings":";;;AA0BuB;AAkBN;AAGG;AAQO;AACM;AACL;AACa;AAImB;AAEwB;AAI7D;AAGG;AAEsB;;;;;;AAMiD;AACrE;AAGP;;;;;AAW+F,UApE1GA,aAAAA,CAsEOoB;EAAkB;EACK,QAK9BE,EAAAA,MAAAA;EAAc,MAIdC,EAAAA,MAAAA;EACY;EAUHvB,MAAAA,CAAAA,EAAAA,MAAAA;EAIGA;EAA4BkB,MAAAA,CAAAA,EAAAA,MAAAA;EAAuBK;;;;;EAalB,SAAA,CAAA,EAAA,MAAA;AAAA;AASpC,UAtGTtB,aAAAA,CAuGc;EACP0B;EAEGA,OAAAA,CAAAA,EAAAA,MAAAA;EAHalB,OAAAA,EApGtBP,MAoGsBO,CAAAA,MAAAA,EApGPT,aAoGOS,CAAAA;;AAAK;AAOlB,UAxGVN,UAAAA,CA4Ge;EAAuB,MACtC4B,EAAAA,MAAAA;EAEY,IAQLE,EAAAA,MAAAA;EAAsDJ;EAAsBE,MAAAA,CAAAA,EAAAA,MAAAA;EAAkBL;EAAO,GAAA,CAAA,EAAA,MAAA;AAAA;AAE1F,KAjHvBtB,aAAAA,GAAgBF,MAmHO,CAAA,MAAA,EAnHQC,UAmHR,CAAA;AAAA,cAlHdE,WAqHW,EArHEC,MAqHF;AAEF,cAtHTC,MAyHG8B,EAzHK/B,MAyHS;AAAA,cAxHjBE,aAAAA,SAAsBC,KAAAA,CA0HuB2B;EAAD,IAChDG,EAAAA,MAAAA;AAUkB;;iBAjIX7B,YAAAA,CAwITM,KAAAA,EAAAA,OAAAA,CAAAA,EAxIuCf,aAwIvCe;;iBAtISL,WAAAA,CAwIL4B,KAAAA,EAAAA,OAAAA,EAAAA,OAAAA,CAAAA,EAxI2CtC,aAwI3CsC,CAAAA,EAxI2DnC,aAwI3DmC;;iBAtIK3B,UAAAA,CAsIN,OAAA,EAtI0BX,aAsI1B,GAAA,SAAA,EAAA,IAAA,CAAA,EAAA,MAAA,CAAA,EAAA;;UApIDD;;;iBAGOa,SAAAA;;iBAEAC,SAAAA,SAAkBd;;;;;;iBAMlBe,OAAAA,QAAeZ,qBAAqBF,oCAAoCe,SAASd;iBACjFe,WAAAA;;;UAGPC,WAAAA;;;;;;;;;;;iBAWOC,kBAAAA,uBAAyCH,SAASd,sCAAsCgB;;iBAExFE,kBAAAA;cACHC,YAAAA,SAAqBZ,KAAAA;;;;;UAKzBa,cAAAA;;;;UAIAC,aAAAA;iBACOC;;;;;;;;;cASHC,MAAAA;mBACKzB;;;;sBAIGA,4BAA4BkB,uBAAuBK;;;qCAGpCG;;;;;;;;sBAQfJ,0BAA0BI;;gDAEAA;;;;;;;;;KAS3CC,cAAAA;cACSC,UAAAA,SAAmBnB,KAAAA;iBAChBkB;;oBAEGA;;;;UAIVE,UAAAA;;;;iBAIOC,QAAAA,gBAAwBJ,QAAQG;UACvCE,eAAAA;iBACOP;WACNQ;;;;;;;;iBAQMC,gBAAAA,sCAAsDJ,sBAAsBE,kBAAkBL;;iBAE9FQ,WAAAA;;iBAEAC,WAAAA;;;UAGPC,eAAAA;YACEnC;UACFG;;;iBAGOiC,cAAAA;;iBAEAC,mBAAAA,eAAkCZ,QAAQU;UACjDG,YAAAA;;;;uBAIapC;;;;;;qBAMFuB;;;;;;iBAMJc,gBAAAA;QACTxB,SAASd;iBACAsB;IACbE,QAAQa"}

package/dist/storage/index.mjs

@@ -0,0 +1,3 @@
+import { S as redactQuery, _ as parseStorage, a as SHA256, b as readProjectManifest, c as credentialEnvNames, d as findProjectDir, f as hashFile, g as parseAssets, h as openAssetLocator, i as REMOTE_NAME, l as credentialsFromEnv, m as objectKey, n as Bucket, o as StorageError, p as isAssetPath, r as ManifestError, s as contentType, t as AssetError, u as downloadVerified, v as pickRemote, x as readUrl, y as publicUrl } from "../dist-CiTgmfUw.mjs";
+
+export { AssetError, Bucket, ManifestError, REMOTE_NAME, SHA256, StorageError, contentType, credentialEnvNames, credentialsFromEnv, downloadVerified, findProjectDir, hashFile, isAssetPath, objectKey, openAssetLocator, parseAssets, parseStorage, pickRemote, publicUrl, readProjectManifest, readUrl, redactQuery };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "framefields",
-  "version": "2.11.0",
+  "version": "2.13.0",
   "private": false,
   "description": "High-performance WebGPU rendering SDK for video composition, Photoshop-grade 2D VFX, audio DSP, and reactive signals. Built for AI Agents.",
   "license": "Apache-2.0",
@@ -87,6 +87,12 @@
       "import": "./dist/cloud/index.mjs",
       "default": "./dist/cloud/index.mjs"
     },
+    "./storage": {
+      "types": "./dist/storage/index.d.mts",
+      "development": "./src/storage/index.ts",
+      "import": "./dist/storage/index.mjs",
+      "default": "./dist/storage/index.mjs"
+    },
     "./sam": {
       "types": "./dist/sam/index.d.mts",
       "development": "./src/sam/index.ts",
@@ -105,6 +111,7 @@
     "@mediabunny/server": "^1.61.6",
     "@napi-rs/webcodecs": "^1.3.1",
     "@resvg/resvg-js": "^2.6.2",
+    "aws4fetch": "^1.0.20",
     "d3-format": "^3.1.2",
     "d3-scale": "^4.0.2",
     "d3-shape": "^3.2.0",
@@ -138,64 +145,65 @@
     "tsdown": "^0.19.0",
     "typescript": "^5.8.3",
     "vitest": "4.1.5",
-    "@framefields/components": "2.11.0",
-    "@framefields/node-audio-compressor": "2.11.0",
-    "@framefields/core": "2.11.0",
-    "@framefields/ai": "2.11.0",
-    "@framefields/compositions": "2.11.0",
-    "@framefields/client-utils": "2.11.0",
-    "@framefields/node-audio-delay": "2.11.0",
-    "@framefields/node-audio-fade": "2.11.0",
-    "@framefields/node-audio-reverb": "2.11.0",
-    "@framefields/node-audio-noise-gate": "2.11.0",
-    "@framefields/node-audio-parametric-eq": "2.11.0",
-    "@framefields/node-audio-signal-extractor": "2.11.0",
-    "@framefields/node-color-balance": "2.11.0",
-    "@framefields/node-colorkey": "2.11.0",
-    "@framefields/node-corner-pin": "2.11.0",
-    "@framefields/node-curves": "2.11.0",
-    "@framefields/node-crop": "2.11.0",
-    "@framefields/node-flip": "2.11.0",
-    "@framefields/node-displacement-map": "2.11.0",
-    "@framefields/node-blur": "2.11.0",
-    "@framefields/node-kenburns": "2.11.0",
-    "@framefields/node-film-grain": "2.11.0",
-    "@framefields/node-deflicker": "2.11.0",
-    "@framefields/node-halftone-screen": "2.11.0",
-    "@framefields/node-high-pass": "2.11.0",
-    "@framefields/node-levels": "2.11.0",
-    "@framefields/node-gradient-map": "2.11.0",
-    "@framefields/node-liquify": "2.11.0",
-    "@framefields/node-layer-style": "2.11.0",
-    "@framefields/node-modulate": "2.11.0",
-    "@framefields/node-particles": "2.11.0",
-    "@framefields/node-mesh-warp": "2.11.0",
-    "@framefields/node-lut": "2.11.0",
-    "@framefields/node-refraction-caustics": "2.11.0",
-    "@framefields/node-refine-edge": "2.11.0",
-    "@framefields/node-paint": "2.11.0",
-    "@framefields/node-rotate": "2.11.0",
-    "@framefields/node-relight-3d": "2.11.0",
-    "@framefields/node-patch-heal": "2.11.0",
-    "@framefields/node-mask-math": "2.11.0",
-    "@framefields/node-signal": "2.11.0",
-    "@framefields/node-sdk": "2.11.0",
-    "@framefields/node-selective-color": "2.11.0",
-    "@framefields/node-signal-gate": "2.11.0",
-    "@framefields/node-tile-offset": "2.11.0",
-    "@framefields/node-stereo-panning": "2.11.0",
-    "@framefields/node-vignette": "2.11.0",
-    "@framefields/node-vision": "2.11.0",
-    "@framefields/node-unsharp-mask": "2.11.0",
-    "@framefields/renderers": "2.11.0",
-    "@framefields/vision": "2.11.0",
-    "@framefields/node-shadows-highlights": "2.11.0",
-    "@framefields/tsconfig": "2.11.0",
-    "@framefields/vision-sam": "2.11.0",
-    "@framefields/renderer": "2.11.0",
-    "@framefields/tensor-webgpu": "2.11.0",
-    "@framefields/webgpu-renderers": "2.11.0",
-    "@framefields/node-signal-math": "2.11.0"
+    "@framefields/ai": "2.13.0",
+    "@framefields/node-audio-compressor": "2.13.0",
+    "@framefields/client-utils": "2.13.0",
+    "@framefields/compositions": "2.13.0",
+    "@framefields/components": "2.13.0",
+    "@framefields/node-audio-noise-gate": "2.13.0",
+    "@framefields/core": "2.13.0",
+    "@framefields/node-audio-fade": "2.13.0",
+    "@framefields/node-audio-reverb": "2.13.0",
+    "@framefields/node-audio-parametric-eq": "2.13.0",
+    "@framefields/node-audio-delay": "2.13.0",
+    "@framefields/node-color-balance": "2.13.0",
+    "@framefields/node-crop": "2.13.0",
+    "@framefields/node-curves": "2.13.0",
+    "@framefields/node-colorkey": "2.13.0",
+    "@framefields/node-audio-signal-extractor": "2.13.0",
+    "@framefields/node-deflicker": "2.13.0",
+    "@framefields/node-displacement-map": "2.13.0",
+    "@framefields/node-film-grain": "2.13.0",
+    "@framefields/node-blur": "2.13.0",
+    "@framefields/node-gradient-map": "2.13.0",
+    "@framefields/node-high-pass": "2.13.0",
+    "@framefields/node-kenburns": "2.13.0",
+    "@framefields/node-liquify": "2.13.0",
+    "@framefields/node-corner-pin": "2.13.0",
+    "@framefields/node-levels": "2.13.0",
+    "@framefields/node-halftone-screen": "2.13.0",
+    "@framefields/node-lut": "2.13.0",
+    "@framefields/node-mask-math": "2.13.0",
+    "@framefields/node-modulate": "2.13.0",
+    "@framefields/node-mesh-warp": "2.13.0",
+    "@framefields/node-paint": "2.13.0",
+    "@framefields/node-patch-heal": "2.13.0",
+    "@framefields/node-particles": "2.13.0",
+    "@framefields/node-refraction-caustics": "2.13.0",
+    "@framefields/node-layer-style": "2.13.0",
+    "@framefields/node-refine-edge": "2.13.0",
+    "@framefields/node-rotate": "2.13.0",
+    "@framefields/node-sdk": "2.13.0",
+    "@framefields/node-selective-color": "2.13.0",
+    "@framefields/node-shadows-highlights": "2.13.0",
+    "@framefields/node-signal-gate": "2.13.0",
+    "@framefields/node-signal-math": "2.13.0",
+    "@framefields/node-signal": "2.13.0",
+    "@framefields/node-stereo-panning": "2.13.0",
+    "@framefields/node-unsharp-mask": "2.13.0",
+    "@framefields/node-tile-offset": "2.13.0",
+    "@framefields/node-vignette": "2.13.0",
+    "@framefields/node-vision": "2.13.0",
+    "@framefields/renderer": "2.13.0",
+    "@framefields/storage": "2.13.0",
+    "@framefields/renderers": "2.13.0",
+    "@framefields/tensor-webgpu": "2.13.0",
+    "@framefields/tsconfig": "2.13.0",
+    "@framefields/vision-sam": "2.13.0",
+    "@framefields/vision": "2.13.0",
+    "@framefields/webgpu-renderers": "2.13.0",
+    "@framefields/node-flip": "2.13.0",
+    "@framefields/node-relight-3d": "2.13.0"
   },
   "scripts": {
     "build": "tsdown && node ../../scripts/sync-readme.mjs && node scripts/check-bundled-imports.mjs && node scripts/check-components-treeshake.mjs && node scripts/check-registry-types.mjs",

package/dist/audio-CYZkDwae.d.mts.map

@@ -1 +0,0 @@
-{"version":3,"file":"audio-CYZkDwae.d.mts","names":["_framefields_node_sdk_renderer0","_default","NodeRendererPlugin","Readonly","default"],"sources":["../../../nodes/node-modulate/dist/renderer.d.mts","../src/signals/audio.ts"],"sourcesContent":["import * as _framefields_node_sdk_renderer0 from \"@framefields/node-sdk/renderer\";\n\n//#region src/renderers/index.d.ts\ndeclare const _default: Readonly<_framefields_node_sdk_renderer0.NodeRendererPlugin>;\n//#endregion\nexport { _default as default };\n//# sourceMappingURL=renderer.d.mts.map"],"mappings":";;;;;;cAGcC,UAAUE,SAASH;;;;UCWhB,kBAAA,SAA2B;;;EDX9BC,WAAsE,CAAA,EAAA,UAAnDD,GAAAA,UAAAA,GAAAA,cAAD,GAAA,UAAA;;UCiBf,2BAAA;WACP;EAPO,IAAA,EAQV,WARU,CAAA,MAAmB,CAAA;EAMnB,IAAA,EAGV,WAHU,CAAA,MAAA,CAAA;EACP,MAAA,EAGD,WAHC,CAAA,MAAA,CAAA;EACH,WAAA,EAAA,MAAA;EACA,SAAA,EAAA,MAAA;EACE,UAAA,EAAA,MAAA;EAAW,WAAA,EAAA,OAAA;EAaH,OAAA,EAAA,OAAA;EAKA,aAAA,EAAA,OAAiB;EAE7B,UAAA,EAAA,OAAA;EAEQ,UAAA,EAAA,OAAA;EAEJ,YAAA,EAAA,OAAA;EACO,SAAA,CAAA,KAAA,EAAA,MAAA,CAAA,EAAA,IAAA;;AAAgD,UAZ/C,iBAAA,SAA0B,qBAYqB,CAAA;EAAY,GAAA,CAAA,EAAA,MAAA;AAc5E;;AAIW,UAzBM,iBAAA,CAyBN;EACC;EAAR,EAAA,EAxBC,WAwBD,CAAA,MAAA,CAAA;EAoFO;EACC,UAAA,EA3GC,WA2GD,CAAA,MAAA,CAAA;EAAR;EAWQ,MAAA,EApHH,WAoHG,CAAA,MAAA,CAAA;EAED,OAAA,EAAA;IACC,EAAA,EAtHI,YAsHJ;IAAR,UAAA,EAtHsC,YAsHtC;IA4BO,MAAA,EAlJqD,YAkJrD;EACC,CAAA;EAAR,GAAA,EAAA,MAAA;EAAO,SAAA,EAAA,MAAA;;;cArIE;gCAED,8CAED,qBACP,QAAQ;oCAoFD,qBACP,QAAQ;;8BAWA,8CAED,oBACP,QAAQ;;kCA4BD,oBACP,QAAQ"}

package/dist/cloud-xcfV4J03.mjs

@@ -1,233 +0,0 @@
-import { createWriteStream, realpathSync } from "node:fs";
-import path from "node:path";
-import fs$1 from "node:fs/promises";
-import { execFileSync } from "node:child_process";
-import { Readable } from "node:stream";
-import { pipeline } from "node:stream/promises";
-
-//#region src/cloud/git-source.ts
-/**
-* Where a cloud render gets the project from: the git repo the working
-* directory is in, at the commit checked out now. Cloud workers fetch from
-* the remote, so that commit has to be pushed; uncommitted changes are not
-* rendered.
-*/
-/** Reads repo, branch, commit and folder from git, and checks the commit is pushed. */
-function resolveGitSource(cwd, entry) {
-	const git = (...args) => execFileSync("git", args, {
-		cwd,
-		encoding: "utf8",
-		stdio: [
-			"ignore",
-			"pipe",
-			"pipe"
-		]
-	}).trim();
-	let root;
-	try {
-		root = git("rev-parse", "--show-toplevel");
-	} catch {
-		throw new Error(`${cwd} is not in a git repository. Cloud renders fetch the project from git: commit it and push it to a remote first.`);
-	}
-	const workdir = path.relative(realpathSync(root), realpathSync(cwd)).split(path.sep).join("/") || ".";
-	const relEntry = path.relative(cwd, path.resolve(cwd, entry)).split(path.sep).join("/");
-	if (relEntry.startsWith("../") || path.isAbsolute(relEntry)) throw new Error(`${entry} is outside ${cwd}; run from the project folder that contains it.`);
-	const branch = git("rev-parse", "--abbrev-ref", "HEAD");
-	const commit = git("rev-parse", "HEAD");
-	const remoteName = upstreamRemote(git, branch) ?? "origin";
-	let remoteUrl;
-	try {
-		remoteUrl = git("remote", "get-url", remoteName);
-	} catch {
-		throw new Error(`The repository has no "${remoteName}" remote. Push the project to a git host first.`);
-	}
-	if (!git("branch", "-r", "--contains", commit)) throw new Error(`Commit ${commit.slice(0, 7)} is not on ${remoteName}. Push it first (\`git push\`): cloud workers fetch the project from the remote.`);
-	const dirty = git("status", "--porcelain", "--untracked-files=no", "--", ".");
-	return {
-		source: {
-			repo: toHttps(remoteUrl),
-			...branch !== "HEAD" && { ref: branch },
-			commit,
-			workdir
-		},
-		entry: relEntry,
-		warnings: dirty ? [`Uncommitted changes are not rendered: the cloud renders commit ${commit.slice(0, 7)}.`] : []
-	};
-}
-function upstreamRemote(git, branch) {
-	if (branch === "HEAD") return void 0;
-	try {
-		return git("config", `branch.${branch}.remote`) || void 0;
-	} catch {
-		return;
-	}
-}
-/** `git@github.com:acme/films.git` → `https://github.com/acme/films.git`; credentials dropped. */
-function toHttps(url) {
-	const scp = /^[\w.-]+@([^:/]+):(.+)$/.exec(url);
-	if (scp) return `https://${scp[1]}/${scp[2]}`;
-	const parsed = URL.canParse(url) ? new URL(url) : void 0;
-	if (parsed && (parsed.protocol === "ssh:" || parsed.protocol === "git:")) return `https://${parsed.hostname}${parsed.pathname}`;
-	if (parsed?.protocol === "https:" || parsed?.protocol === "http:") {
-		parsed.username = "";
-		parsed.password = "";
-		return parsed.toString();
-	}
-	return url;
-}
-
-//#endregion
-//#region src/cloud/index.ts
-/**
-* Cloud renders on api.framefields.dev: the project renders from git on
-* framefields' GPU workers, billed to the account that owns the API key.
-*
-* ```ts
-* import { renderCloud } from "framefields/cloud";
-*
-* const result = await renderCloud({
-*   entry: "src/film.ts",
-*   workers: "auto", // split a long film across GPUs; 1 (default) renders on one
-*   outputPath: "output/film.mp4",
-*   onProgress: (s) => console.log(s.status, s.progress.frames),
-* });
-* ```
-*
-* `workers: "auto"` probes the film on one worker first, then splits it into
-* as many chunks as stay efficient: short films stay on one worker, long ones
-* spread out up to `maxWorkers`. `dryRun: true` returns that plan with the
-* estimated cost and renders nothing. Aborting `signal` cancels the render;
-* GPU time already used is charged.
-*/
-const FRAMEFIELDS_API_URL = "https://api.framefields.dev";
-/** A cloud render that failed, was cancelled, or was refused by the API. */
-var CloudRenderError = class extends Error {
-	constructor(message, code, status) {
-		super(message);
-		this.code = code;
-		this.status = status;
-		this.name = "CloudRenderError";
-	}
-};
-const DONE = new Set([
-	"planned",
-	"completed",
-	"failed",
-	"cancelled"
-]);
-/** Starts a cloud render and waits for it; resolves when it completed (or was planned). */
-async function renderCloud(options) {
-	const api = cloudClient(options);
-	const cwd = options.cwd ?? process.cwd();
-	const resolved = options.source ? {
-		source: options.source,
-		entry: options.entry,
-		warnings: []
-	} : resolveGitSource(cwd, options.entry);
-	const warn = options.onWarning ?? ((m) => process.stderr.write(`framefields: ${m}\n`));
-	for (const w of resolved.warnings) warn(w);
-	let status = await api.start({
-		source: resolved.source,
-		target: {
-			entry: resolved.entry,
-			export: options.export ?? "buildFilm",
-			...options.args !== void 0 && { args: options.args },
-			...options.select && { select: [options.select] }
-		},
-		render: {
-			codec: options.codec ?? "h264",
-			...options.quality && { quality: options.quality }
-		},
-		workers: options.workers ?? 1,
-		...options.maxWorkers && { max_workers: options.maxWorkers },
-		dry_run: options.dryRun ?? false
-	});
-	options.onProgress?.(status);
-	try {
-		while (!DONE.has(status.status)) {
-			await sleep(options.pollMs ?? 3e3, options.signal);
-			status = await api.status(status.id);
-			options.onProgress?.(status);
-		}
-	} catch (err) {
-		if (options.signal?.aborted) throw new CloudRenderError("The cloud render was cancelled.", "cancelled", await api.cancel(status.id).catch(() => status));
-		throw err;
-	}
-	if (status.status === "failed" || status.status === "cancelled") throw new CloudRenderError(status.error ? `Cloud render ${status.status}: ${status.error.message} (${status.error.code})` : `Cloud render ${status.status}.`, status.error?.code ?? status.status, status);
-	if (status.status === "completed" && options.outputPath && status.output) {
-		await download(status.output.url, options.outputPath, options.signal);
-		return {
-			...status,
-			filePath: options.outputPath
-		};
-	}
-	return status;
-}
-/** The API calls behind `renderCloud`, for callers who track renders themselves. */
-function cloudClient(options) {
-	const key = options.apiKey ?? process.env.FRAMEFIELDS_API_KEY;
-	if (!key) throw new CloudRenderError("No API key. Set FRAMEFIELDS_API_KEY (keys at https://framefields.dev/dashboard/keys) or pass apiKey.", "invalid_api_key");
-	const base = (options.apiUrl ?? process.env.FRAMEFIELDS_API_URL ?? FRAMEFIELDS_API_URL).replace(/\/+$/, "");
-	const call = async (method, route, body) => {
-		const res = await fetch(`${base}/v1/render${route}`, {
-			method,
-			headers: {
-				Authorization: `Bearer ${key}`,
-				"Content-Type": "application/json"
-			},
-			...body !== void 0 && { body: JSON.stringify(body) }
-		});
-		const json = await res.json().catch(() => ({}));
-		if (!res.ok) throw new CloudRenderError(json.error?.message ?? `api.framefields.dev answered HTTP ${res.status}`, json.error?.type ?? `http_${res.status}`);
-		return fromApi(json);
-	};
-	return {
-		start: (body) => call("POST", "", body),
-		status: (id) => call("GET", `/${encodeURIComponent(id)}`),
-		cancel: (id) => call("DELETE", `/${encodeURIComponent(id)}`)
-	};
-}
-function fromApi(s) {
-	return {
-		id: s.id,
-		status: s.status,
-		workers: s.workers ?? 1,
-		...s.plan && { plan: {
-			workers: s.plan.workers,
-			workSec: s.plan.work_sec,
-			etaSec: s.plan.eta_sec,
-			chunks: s.plan.chunks
-		} },
-		progress: {
-			frames: s.progress?.frames ?? 0,
-			totalFrames: s.progress?.total_frames ?? null,
-			etaSec: s.progress?.eta_sec ?? null
-		},
-		costUsd: s.cost_usd ?? 0,
-		gpuSeconds: s.gpu_seconds ?? 0,
-		...s.estimate_usd !== void 0 && { estimateUsd: s.estimate_usd },
-		...s.sha && { sha: s.sha },
-		...s.output && { output: s.output },
-		...s.error && { error: s.error }
-	};
-}
-async function download(url, file, signal) {
-	const res = await fetch(url, { signal });
-	if (!res.ok || !res.body) throw new CloudRenderError(`Downloading the render failed: HTTP ${res.status}`, "download_failed");
-	await fs$1.mkdir(path.dirname(path.resolve(file)), { recursive: true });
-	await pipeline(Readable.fromWeb(res.body), createWriteStream(file));
-}
-function sleep(ms, signal) {
-	return new Promise((resolve$1, reject) => {
-		if (signal?.aborted) return reject(signal.reason);
-		const timer = setTimeout(resolve$1, ms);
-		signal?.addEventListener("abort", () => {
-			clearTimeout(timer);
-			reject(signal.reason);
-		}, { once: true });
-	});
-}
-
-//#endregion
-export { resolveGitSource as a, renderCloud as i, FRAMEFIELDS_API_URL as n, toHttps as o, cloudClient as r, CloudRenderError as t };
-//# sourceMappingURL=cloud-xcfV4J03.mjs.map