hyperframes 0.8.119 → 0.8.120

package/dist/{chunk-DNXD7TOA.js → chunk-I465DBM6.js}

@@ -51,6 +51,16 @@ var ErrRefreshFailed = (detail) => new AuthError(
   detail ? `Failed to refresh OAuth tokens: ${detail}` : "Failed to refresh OAuth tokens",
   "Run `hyperframes auth login` to re-authenticate."
 );
+var ErrLoginExpired = () => new AuthError(
+  "LOGIN_EXPIRED",
+  "Your HeyGen login expired",
+  "Run `hyperframes auth login` to sign in again."
+);
+var ErrLoginChanged = () => new AuthError(
+  "LOGIN_CHANGED",
+  "Your HeyGen login changed while this command ran",
+  "Run the command again."
+);
 var ErrDeviceAuthFailed = (detail) => new AuthError(
   "DEVICE_AUTH_FAILED",
   `Device authorization failed: ${detail}`,
@@ -461,14 +471,12 @@ async function resolveCredential(opts = {}) {
   const { credentials, source } = await readStore();
   if (source === "absent") throw ErrNotConfigured();
   const fileSource = source === "file_legacy" ? "file_legacy" : "file_json";
-  if (credentials.oauth) {
-    const oauth = pickOAuth(credentials.oauth, now, fileSource);
-    if (oauth) return oauth;
-  }
+  const oauth = credentials.oauth ? pickOAuth(credentials.oauth, now, fileSource) : null;
+  if (oauth) return oauth;
   if (credentials.api_key) {
     return { type: "api_key", key: credentials.api_key, source: fileSource };
   }
-  throw ErrNotConfigured();
+  throw credentials.oauth ? ErrLoginExpired() : ErrNotConfigured();
 }
 async function tryResolveCredential(opts = {}) {
   try {
@@ -482,7 +490,7 @@ async function tryResolveCredential(opts = {}) {
 }
 function pickOAuth(tokens, now, source) {
   const expiresAt = parseDate(tokens.expires_at);
-  const expired = expiresAt !== void 0 && expiresAt.getTime() - EXPIRY_SKEW_MS < now.getTime();
+  const expired = isTokenExpired(expiresAt, now);
   if (expired && !tokens.refresh_token) return null;
   const out = {
     type: "oauth",
@@ -495,6 +503,9 @@ function pickOAuth(tokens, now, source) {
   if (tokens.scope) out.scope = tokens.scope;
   return out;
 }
+function isTokenExpired(expiresAt, now) {
+  return expiresAt !== void 0 && expiresAt.getTime() - EXPIRY_SKEW_MS < now.getTime();
+}
 function parseDate(s) {
   if (!s) return void 0;
   const d = new Date(s);
@@ -736,7 +747,7 @@ async function startAuthorizationCodeFlow(opts = {}) {
     verifier: pkce.verifier,
     fetchImpl: opts.fetchImpl
   });
-  await persistOAuth(tokens, { preserveMissing: false });
+  await persistOAuth(tokens);
   return { tokens };
 }
 async function startDeviceAuthorizationFlow(opts = {}) {
@@ -884,7 +895,7 @@ async function refreshTokens(refresh_token, opts = {}) {
   }
   const payload = await readJsonOrThrow(res);
   const tokens = parseTokenResponse(payload);
-  await persistOAuth(tokens, { preserveMissing: true });
+  await persistOAuth(tokens, { refreshed: refresh_token });
   return tokens;
 }
 async function revokeTokens(token, opts = {}) {
@@ -1009,15 +1020,18 @@ function numericField(obj, key) {
   }
   return void 0;
 }
-async function persistOAuth(tokens, opts) {
+async function persistOAuth(tokens, opts = {}) {
   let existing = {};
   try {
     const { credentials } = await readStore();
     existing = credentials;
-  } catch {
-    existing = {};
+  } catch (err) {
+    if (opts.refreshed !== void 0) throw err;
+  }
+  if (opts.refreshed !== void 0 && existing.oauth?.refresh_token !== opts.refreshed) {
+    throw ErrLoginChanged();
   }
-  const oauth = opts.preserveMissing ? { ...existing.oauth, ...tokens } : { ...tokens };
+  const oauth = opts.refreshed !== void 0 ? { ...existing.oauth, ...tokens } : { ...tokens };
   await writeStore({ ...existing, oauth });
 }
 async function persistVerifiedOAuthSession(tokens, user) {
@@ -1190,6 +1204,7 @@ export {
   isHeaderSafe,
   resolveCredential,
   tryResolveCredential,
+  isTokenExpired,
   assertOAuthConfiguredOrExit,
   startAuthorizationCodeFlow,
   startDeviceAuthorizationFlow,

package/dist/chunk-IGLEPPTN.js

@@ -0,0 +1,24 @@
+import { createRequire as __hf_createRequire } from "node:module";
+import { fileURLToPath as __hf_fileURLToPath } from "node:url";
+import { dirname as __hf_dirname } from "node:path";
+var require = __hf_createRequire(import.meta.url);
+var __filename = __hf_fileURLToPath(import.meta.url);
+var __dirname = __hf_dirname(__filename);
+
+// src/utils/feedbackSource.ts
+var SOURCES = ["person", "agent"];
+function parseFeedbackSource(raw) {
+  if (raw === void 0) return void 0;
+  const source = raw.trim();
+  return SOURCES.includes(source) ? source : null;
+}
+var FEEDBACK_EMAIL_ENV = "HYPERFRAMES_FEEDBACK_EMAIL";
+function feedbackEmail(env = process.env) {
+  return env[FEEDBACK_EMAIL_ENV]?.trim() || void 0;
+}
+
+export {
+  parseFeedbackSource,
+  FEEDBACK_EMAIL_ENV,
+  feedbackEmail
+};

package/dist/{chunk-CDTPNYO3.js → chunk-IJ2O4BLJ.js}

@@ -8,7 +8,7 @@ import {
   flush,
   shouldTrack,
   trackEvent
-} from "./chunk-M6LKSPER.js";
+} from "./chunk-LJXFGHPO.js";
 import {
   getPowerState
 } from "./chunk-U7AMFQ6G.js";

package/dist/{chunk-MVWXSRY6.js → chunk-JH556Q42.js}

@@ -4,10 +4,15 @@ import { dirname as __hf_dirname } from "node:path";
 var require = __hf_createRequire(import.meta.url);
 var __filename = __hf_fileURLToPath(import.meta.url);
 var __dirname = __hf_dirname(__filename);
+import {
+  refreshIfNeeded
+} from "./chunk-SHB5VDMH.js";
 import {
   buildAuthHeaders,
+  isAuthError,
+  isTokenExpired,
   tryResolveCredential
-} from "./chunk-DNXD7TOA.js";
+} from "./chunk-I465DBM6.js";
 import {
   CSS_URL_RE,
   isNonRelativeUrl,
@@ -191,6 +196,36 @@ function getUploadHeaders(data, uploadUrl, contentType, archiveByteLength) {
 async function readJson(response) {
   return response.clone().json().catch(() => null);
 }
+var CredentialRejectedError = class extends Error {
+};
+async function metadataRequestError(response, fallback) {
+  const message = await readErrorMessage(response, fallback);
+  return response.status === 401 ? new CredentialRejectedError(message) : new Error(message);
+}
+var LOGIN_EXPIRED = "Your login expired. Run hyperframes auth login, then publish again.";
+var LOGIN_CHANGED = "Your login changed during publish. Run publish again.";
+var API_KEY_ENV_VAR = { env: "HEYGEN_API_KEY", env_alias: "HYPERFRAMES_API_KEY" };
+function rejectedCredentialMessage(credential) {
+  if (credential.type === "api_key" && (credential.source === "env" || credential.source === "env_alias")) {
+    return `${API_KEY_ENV_VAR[credential.source]} was rejected. Fix or unset it, then publish again.`;
+  }
+  return LOGIN_EXPIRED;
+}
+async function resolvePublishCredential(checked) {
+  try {
+    const credential = checked === void 0 ? await tryResolveCredential() : checked;
+    if (!credential) return null;
+    const expired = credential.type === "oauth" && isTokenExpired(credential.expires_at, /* @__PURE__ */ new Date());
+    if (expired && !credential.refresh_token) throw new Error(LOGIN_EXPIRED);
+    return await refreshIfNeeded(expired ? { ...credential, refreshable: true } : credential);
+  } catch (error) {
+    if (isAuthError(error) && (error.code === "REFRESH_FAILED" || error.code === "LOGIN_EXPIRED")) {
+      throw new Error(LOGIN_EXPIRED);
+    }
+    if (isAuthError(error) && error.code === "LOGIN_CHANGED") throw new Error(LOGIN_CHANGED);
+    throw error;
+  }
+}
 async function readErrorMessage(response, fallback) {
   const contentType = response.headers.get("content-type") || "";
   if (contentType.includes("application/json")) {
@@ -477,7 +512,7 @@ async function publishProjectArchiveDirect(apiBaseUrl, title, archive, isPublic,
   const payload = await readJson(response);
   const publishedProject = parsePublishedProjectResponse(payload);
   if (!response.ok || !publishedProject) {
-    throw new Error(await readErrorMessage(response, "Failed to publish project"));
+    throw await metadataRequestError(response, "Failed to publish project");
   }
   return publishedProject;
 }
@@ -526,7 +561,7 @@ async function publishProjectArchiveStaged(apiBaseUrl, title, archive, isPublic,
   const uploadPayload = await readJson(uploadResponse);
   const stagedUpload = parseStagedUploadResponse(uploadPayload, archive.buffer.byteLength);
   if (!uploadResponse.ok || !stagedUpload) {
-    throw new Error(await readErrorMessage(uploadResponse, "Failed to prepare project upload"));
+    throw await metadataRequestError(uploadResponse, "Failed to prepare project upload");
   }
   await uploadArchiveToPresignedUrl(stagedUpload, archive);
   const completeResponse = await fetchForPublish(
@@ -551,7 +586,7 @@ async function publishProjectArchiveStaged(apiBaseUrl, title, archive, isPublic,
   const completePayload = await readJson(completeResponse);
   const publishedProject = parsePublishedProjectResponse(completePayload);
   if (!completeResponse.ok || !publishedProject) {
-    throw new Error(await readErrorMessage(completeResponse, "Failed to publish project"));
+    throw await metadataRequestError(completeResponse, "Failed to publish project");
   }
   return publishedProject;
 }
@@ -560,27 +595,38 @@ async function publishProjectArchive(projectDir, opts = {}) {
   const title = basename(projectDir);
   const archive = opts.archive ?? createPublishArchive(projectDir);
   const apiBaseUrl = getPublishApiBaseUrl();
-  const credential = await tryResolveCredential();
+  const credential = await resolvePublishCredential(opts.credential);
   const authHeaders = credential ? buildAuthHeaders(credential) : {};
   const projectId = credential ? opts.projectId : void 0;
   const spaceId = credential ? opts.spaceId : void 0;
   const metadataHeaders = spaceId ? { ...authHeaders, "x-space-id": spaceId } : authHeaders;
-  const result = await publishProjectArchiveStaged(
-    apiBaseUrl,
-    title,
-    archive,
-    isPublic,
-    metadataHeaders,
-    projectId
-  ) ?? await publishProjectArchiveDirect(
-    apiBaseUrl,
-    title,
-    archive,
-    isPublic,
-    metadataHeaders,
-    projectId
-  );
-  if (credential) {
+  let result;
+  try {
+    result = await publishProjectArchiveStaged(
+      apiBaseUrl,
+      title,
+      archive,
+      isPublic,
+      metadataHeaders,
+      projectId
+    ) ?? await publishProjectArchiveDirect(
+      apiBaseUrl,
+      title,
+      archive,
+      isPublic,
+      metadataHeaders,
+      projectId
+    );
+    if (credential?.type === "oauth" && !result.claimed) {
+      throw new CredentialRejectedError("unclaimed publish");
+    }
+  } catch (error) {
+    if (error instanceof CredentialRejectedError && credential) {
+      throw new Error(rejectedCredentialMessage(credential));
+    }
+    throw error;
+  }
+  if (result.claimed) {
     writeProjectLink(projectDir, { projectId: result.projectId, url: result.url });
   }
   return result;
@@ -591,6 +637,8 @@ export {
   ensureProjectId,
   readTeamProject,
   writeTeamProject,
+  API_KEY_ENV_VAR,
+  resolvePublishCredential,
   rewriteHtmlAttributes,
   buildPublishFileMap,
   zipPublishFileMap,

package/dist/{chunk-3NXDJSD5.js → chunk-LIPKCOYU.js}

@@ -6,8 +6,8 @@ var __filename = __hf_fileURLToPath(import.meta.url);
 var __dirname = __hf_dirname(__filename);
 
 // src/version.ts
-var VERSION = true ? "0.8.119" : "0.0.0-dev";
-var PRODUCER_VERSION = true ? "0.8.119" : "0.0.0-dev";
+var VERSION = true ? "0.8.120" : "0.0.0-dev";
+var PRODUCER_VERSION = true ? "0.8.120" : "0.0.0-dev";
 
 export {
   VERSION,

package/dist/{chunk-M6LKSPER.js → chunk-LJXFGHPO.js}

@@ -37,7 +37,7 @@ import {
 } from "./chunk-XUXGIA7H.js";
 import {
   VERSION
-} from "./chunk-3NXDJSD5.js";
+} from "./chunk-LIPKCOYU.js";
 
 // src/telemetry/transport.ts
 import { spawn } from "child_process";

package/dist/{chunk-ZTU5PYQJ.js → chunk-LP3KFEVQ.js}

@@ -9,6 +9,7 @@ import {
   dedupeClonedCompositionId,
   findTargetElement,
   isHTMLElement,
+  nextUniqueId,
   parseSourceDocument,
   patchElementInHtml,
   probeElementInSource,
@@ -20,7 +21,7 @@ import {
   splitElementInHtml,
   unwrapElementsFromHtml,
   wrapElementsInHtml
-} from "./chunk-HNOJAFT2.js";
+} from "./chunk-6ZX3YCCU.js";
 import {
   atomicTempPath,
   createFileAtomically,
@@ -6021,6 +6022,21 @@ function foldElementPatches(originalContent, patches) {
   return { content, matched };
 }
 var PATCH_CONFLICT_ATTEMPTS = 3;
+var ID_ATTRIBUTE = /[\s"'/]id\s*=\s*(?=(?:"([^"]*)"|'([^']*)'|([^\s"'=<>`]+)))/gi;
+function projectHtmlIds(projectDir) {
+  const ids = /* @__PURE__ */ new Set();
+  for (const rel of walkDir(projectDir)) {
+    if (!rel.endsWith(".html") || isInHiddenOrVendorDir(rel)) continue;
+    let html;
+    try {
+      html = readFileSync32(join52(projectDir, rel), "utf-8");
+    } catch {
+      continue;
+    }
+    for (const m of html.matchAll(ID_ATTRIBUTE)) ids.add(m[1] ?? m[2] ?? m[3] ?? "");
+  }
+  return ids;
+}
 function commitElementPatchBatches(projectDir, batches, writeFile2 = (path, content) => replaceFileAtomically(path, content, statSync32(path).mode), requestToken) {
   for (let attempt = 1; ; attempt += 1) {
     try {
@@ -7912,7 +7928,13 @@ function registerFileRoutes(api, adapter) {
       } catch {
         return c.json({ error: "not found" }, 404);
       }
-      const element = patchElementInHtml(originalContent, parsed.target, parsed.body.operations);
+      const takenIds = parsed.body.operations.some((op) => op.type === "ensure-id") ? projectHtmlIds(ctx.project.dir) : void 0;
+      const element = patchElementInHtml(
+        originalContent,
+        parsed.target,
+        parsed.body.operations,
+        takenIds
+      );
       const { matched } = element;
       const patched = matched && isStudioFontFaceCss(fontFaceCss) ? ensureStudioFontFaceCss(element.html, fontFaceCss) : element.html;
       if (patched === originalContent) {
@@ -7922,6 +7944,7 @@ function registerFileRoutes(api, adapter) {
           ok: true,
           changed: false,
           matched,
+          elementId: element.elementId,
           content: originalContent,
           path: ctx.filePath,
           version: version2
@@ -7945,6 +7968,7 @@ function registerFileRoutes(api, adapter) {
         ok: true,
         changed: true,
         matched,
+        elementId: element.elementId,
         content: patched,
         path: ctx.filePath,
         version,
@@ -9884,11 +9908,6 @@ function spans(el, time) {
   if (start === null || duration === null) return false;
   return time > start + EPSILON && time < start + duration - EPSILON;
 }
-function uniqueId(document2, base) {
-  let id = base;
-  for (let n = 2; document2.getElementById(id); n++) id = `${base}-${n}`;
-  return id;
-}
 function shiftTracks(document2, tracks, from, by) {
   for (const el of document2.querySelectorAll("[data-start]")) {
     if (el.hasAttribute("data-composition-id") || !tracks.has(trackOf(el))) continue;
@@ -9972,7 +9991,7 @@ function applyFreezeFrameToHtml(html, input) {
   shiftTracks(document2, tracks, input.playhead, hold);
   const leftHalf = findTargetElement(document2, input.target);
   if (!leftHalf?.parentElement) return null;
-  const freezeId = uniqueId(document2, `${video.getAttribute("id") || "clip"}-freeze`);
+  const freezeId = nextUniqueId(document2, `${video.getAttribute("id") || "clip"}-freeze`);
   const still = buildStill(document2, leftHalf, {
     id: freezeId,
     imageSrc: input.imageSrc,
@@ -11003,23 +11022,17 @@ function duplicateElementInHtml(source, target, newId, at) {
   if (duration === null || numericAttribute(element, "data-start") === null) {
     return { html: source, matched: false, newId: null };
   }
-  const uniqueId2 = nextUniqueId(document2, newId);
+  const uniqueId = nextUniqueId(document2, newId);
   rippleElements(document2, element, at, duration, track);
   const clone = element.cloneNode(true);
   if (!isHTMLElement(clone)) return { html: source, matched: false, newId: null };
-  clone.setAttribute("id", uniqueId2);
+  clone.setAttribute("id", uniqueId);
   dedupeClonedCompositionId(document2, clone);
   stripStableIds(clone);
   clone.setAttribute("data-start", String(at));
   element.parentElement.insertBefore(clone, element.nextSibling);
   const html = wrappedFragment ? document2.body.innerHTML || "" : document2.toString();
-  return { html: ensureHfIds(html), matched: true, newId: uniqueId2 };
-}
-function nextUniqueId(document2, newId) {
-  let uniqueId2 = newId;
-  let suffix = 2;
-  while (document2.getElementById(uniqueId2)) uniqueId2 = `${newId}-${suffix++}`;
-  return uniqueId2;
+  return { html: ensureHfIds(html), matched: true, newId: uniqueId };
 }
 function rippleElements(document2, element, at, duration, track) {
   for (const candidate of Array.from(document2.querySelectorAll("[data-start][data-duration]"))) {

package/dist/{chunk-MYSYOQPV.js → chunk-NP5P2A2K.js}

@@ -20,7 +20,7 @@ import {
   typeDirPath,
   updateRecord,
   withFigmaErrors
-} from "./chunk-2FJPEXII.js";
+} from "./chunk-UOKW7DPN.js";
 import {
   defineCommand
 } from "./chunk-S3S4TGEH.js";
@@ -221,7 +221,7 @@ var asset_default = defineCommand({
           rendered > 0 ? `(${results.length} nodes, ${rendered} rendered in 1 figma request)` : `(${results.length} nodes, all reused from cache \u2014 no figma request)`
         );
       }
-      const { trackFigmaImport } = await import("./telemetry-JJJQWUA3.js");
+      const { trackFigmaImport } = await import("./telemetry-5WHZVQFM.js");
       trackFigmaImport({
         phase: "asset",
         reused: results.every((r) => r.reused),

package/dist/{chunk-SUIF4D5H.js → chunk-PCL5KCT7.js}

@@ -12,7 +12,7 @@ import {
   iterateFontFamilyDeclarations,
   normalizeSystemFontPrimaryFamilies,
   resolveFontFamilyDeclarationFamilies
-} from "./chunk-AIYKVE4Y.js";
+} from "./chunk-2GKO3X7F.js";
 import {
   EncoderInterruptedError,
   encoderFailureError,

package/dist/{chunk-7UXUVWOY.js → chunk-QWD3NM22.js}

@@ -6,7 +6,7 @@ var __filename = __hf_fileURLToPath(import.meta.url);
 var __dirname = __hf_dirname(__filename);
 import {
   updateNoticesSuppressed
-} from "./chunk-FRIRP3DN.js";
+} from "./chunk-7N3IODU7.js";
 import {
   hostAnswers
 } from "./chunk-K4WIOZFP.js";

package/dist/chunk-SHB5VDMH.js

@@ -0,0 +1,51 @@
+import { createRequire as __hf_createRequire } from "node:module";
+import { fileURLToPath as __hf_fileURLToPath } from "node:url";
+import { dirname as __hf_dirname } from "node:path";
+var require = __hf_createRequire(import.meta.url);
+var __filename = __hf_fileURLToPath(import.meta.url);
+var __dirname = __hf_dirname(__filename);
+import {
+  apiBaseUrl,
+  buildAuthHeaders,
+  refreshTokens,
+  resolveCredential
+} from "./chunk-I465DBM6.js";
+
+// src/cloud/auth.ts
+async function resolveCloudAuthHeaders() {
+  let credential = await resolveCredential();
+  credential = await refreshIfNeeded(credential);
+  return buildAuthHeaders(credential);
+}
+function resolveCloudBaseUrl() {
+  return apiBaseUrl();
+}
+async function refreshIfNeeded(credential) {
+  if (credential.type !== "oauth") return credential;
+  if (!credential.refreshable || !credential.refresh_token) return credential;
+  const fresh = await refreshTokens(credential.refresh_token);
+  return {
+    ...credential,
+    access_token: fresh.access_token,
+    expires_at: parseDateOrUndef(fresh.expires_at),
+    refreshable: false,
+    ...fresh.refresh_token ? { refresh_token: fresh.refresh_token } : {}
+  };
+}
+function parseDateOrUndef(value) {
+  if (!value) return void 0;
+  const d = new Date(value);
+  return Number.isNaN(d.getTime()) ? void 0 : d;
+}
+async function forceRefreshCredentials() {
+  const credential = await resolveCredential();
+  if (credential.type !== "oauth" || !credential.refresh_token) return;
+  await refreshTokens(credential.refresh_token);
+}
+
+export {
+  resolveCloudAuthHeaders,
+  resolveCloudBaseUrl,
+  refreshIfNeeded,
+  forceRefreshCredentials
+};

package/dist/{chunk-AMSNSTLK.js → chunk-SVI32JAG.js}

@@ -7,7 +7,7 @@ var __dirname = __hf_dirname(__filename);
 import {
   getMimeType,
   injectMediaCodecMapIntoHtml
-} from "./chunk-ZTU5PYQJ.js";
+} from "./chunk-LP3KFEVQ.js";
 import {
   PROXY_VARIANT_CONFIG,
   ProxyCapacityError,

package/dist/{chunk-BZKDN6BU.js → chunk-UDYR6TIQ.js}

@@ -7,7 +7,7 @@ var __dirname = __hf_dirname(__filename);
 import {
   RegistryCompatibilityError,
   gateRegistryItemsCompatibility
-} from "./chunk-P6UJ22SS.js";
+} from "./chunk-EFC3DCJL.js";
 import {
   DEFAULT_PROJECT_CONFIG,
   createProjectConfig,
@@ -29,7 +29,7 @@ import {
 } from "./chunk-PPTHGZTG.js";
 import {
   trackRegistryItemAdded
-} from "./chunk-CDTPNYO3.js";
+} from "./chunk-IJ2O4BLJ.js";
 import {
   c
 } from "./chunk-ZTZA4UWZ.js";

package/dist/{chunk-2FJPEXII.js → chunk-UOKW7DPN.js}

@@ -1278,7 +1278,7 @@ async function withFigmaErrors(command, fn) {
   } catch (err) {
     if (err instanceof Error) {
       try {
-        const { trackCommandFailure } = await import("./events-T4KFU5HZ.js");
+        const { trackCommandFailure } = await import("./events-EA2PNDU6.js");
         trackCommandFailure(
           command,
           err,

package/dist/{chunk-RMDKZTSI.js → chunk-WMCV6DHA.js}

@@ -6,7 +6,7 @@ var __filename = __hf_fileURLToPath(import.meta.url);
 var __dirname = __hf_dirname(__filename);
 import {
   getMimeType
-} from "./chunk-ZTU5PYQJ.js";
+} from "./chunk-LP3KFEVQ.js";
 import {
   injectTagsAtHeadStart
 } from "./chunk-SHLFJFPM.js";

package/dist/{chunk-RLYTIMTS.js → chunk-Y6W4DVPS.js}

@@ -5,11 +5,10 @@ var require = __hf_createRequire(import.meta.url);
 var __filename = __hf_fileURLToPath(import.meta.url);
 var __dirname = __hf_dirname(__filename);
 import {
-  apiBaseUrl,
-  buildAuthHeaders,
-  refreshTokens,
-  resolveCredential
-} from "./chunk-DNXD7TOA.js";
+  forceRefreshCredentials,
+  resolveCloudAuthHeaders,
+  resolveCloudBaseUrl
+} from "./chunk-SHB5VDMH.js";
 import {
   errorBox
 } from "./chunk-IHFUKJOR.js";
@@ -277,38 +276,6 @@ var HyperframesCloudClient = class {
   }
 };
 
-// src/cloud/auth.ts
-async function resolveCloudAuthHeaders() {
-  let credential = await resolveCredential();
-  credential = await refreshIfNeeded(credential);
-  return buildAuthHeaders(credential);
-}
-function resolveCloudBaseUrl() {
-  return apiBaseUrl();
-}
-async function refreshIfNeeded(credential) {
-  if (credential.type !== "oauth") return credential;
-  if (!credential.refreshable || !credential.refresh_token) return credential;
-  const fresh = await refreshTokens(credential.refresh_token);
-  return {
-    ...credential,
-    access_token: fresh.access_token,
-    expires_at: parseDateOrUndef(fresh.expires_at),
-    refreshable: false,
-    ...fresh.refresh_token ? { refresh_token: fresh.refresh_token } : {}
-  };
-}
-function parseDateOrUndef(value) {
-  if (!value) return void 0;
-  const d = new Date(value);
-  return Number.isNaN(d.getTime()) ? void 0 : d;
-}
-async function forceRefreshCredentials() {
-  const credential = await resolveCredential();
-  if (credential.type !== "oauth" || !credential.refresh_token) return;
-  await refreshTokens(credential.refresh_token);
-}
-
 // src/cloud/index.ts
 async function createCloudClient() {
   const client = new HyperframesCloudClient({

package/dist/{chunk-KK7VGMEF.js → chunk-YV5INYEM.js}

@@ -4,6 +4,9 @@ import { dirname as __hf_dirname } from "node:path";
 var require = __hf_createRequire(import.meta.url);
 var __filename = __hf_fileURLToPath(import.meta.url);
 var __dirname = __hf_dirname(__filename);
+import {
+  resolveProject
+} from "./chunk-B3MQEZBK.js";
 import {
   installPageFunctionGuard,
   resolveCliChromeGpuMode,
@@ -16,9 +19,6 @@ import {
   launchManagedBrowser,
   resolveManagedGpuMode
 } from "./chunk-OI3IIR2X.js";
-import {
-  resolveProject
-} from "./chunk-6Q3Q7HGA.js";
 import {
   c
 } from "./chunk-ZTZA4UWZ.js";
@@ -32,7 +32,7 @@ import {
 import {
   printDeprecationNotice,
   withMeta
-} from "./chunk-FRIRP3DN.js";
+} from "./chunk-7N3IODU7.js";
 import {
   normalizeErrorMessage
 } from "./chunk-KNU5COPB.js";
@@ -221,7 +221,7 @@ function extractCompositionErrorsFromLint(lintResult) {
 async function localizeRemoteAssets(html) {
   let dir;
   try {
-    const { loadProducer } = await import("./producer-FS442D4D.js");
+    const { loadProducer } = await import("./producer-6WPA3U6C.js");
     const { localizeRemoteMediaSources, localizeRemoteImageSources, localizeRemoteFontFaces } = await loadProducer();
     dir = mkdtempSync(join(tmpdir(), "hf-validate-assets-"));
     const assetDir = dir;
@@ -244,7 +244,7 @@ async function validateInBrowser(project, opts) {
   const projectDir = project.dir;
   const { bundleToSingleHtml } = await import("./compiler-GPUSYMA6.js");
   const { ensureBrowser } = await import("./manager-CT3D67CG.js");
-  const { serveStaticProjectHtml } = await import("./staticProjectServer-RBGIJQMY.js");
+  const { serveStaticProjectHtml } = await import("./staticProjectServer-BM2TZYJY.js");
   const { lintProject } = await import("./lintProject-FDJYTOVM.js");
   const lintResult = await lintProject(projectDir);
   const compositionErrors = extractCompositionErrorsFromLint(lintResult);

package/dist/{chunk-RZAXPDIT.js → chunk-ZTZ7NCJT.js}

@@ -10,7 +10,7 @@ import {
   hasPreservedUnknownData,
   readStore,
   writeStore
-} from "./chunk-DNXD7TOA.js";
+} from "./chunk-I465DBM6.js";
 
 // src/auth/user.ts
 function isUserInfoEmpty(u) {