hyperframes 0.8.119 → 0.8.121

package/dist/{chunk-5IABQ7OX.js → chunk-GPGWCFIA.js}

@@ -21,7 +21,7 @@ import {
   shouldClampResolvedMediaDuration,
   stripEmbeddedRuntimeScripts,
   warnUnknownEnumValues
-} from "./chunk-SHLFJFPM.js";
+} from "./chunk-PATLRNZA.js";
 import {
   cssVariableName
 } from "./chunk-VC76R6W2.js";

package/dist/{chunk-DNXD7TOA.js → chunk-I465DBM6.js}

@@ -51,6 +51,16 @@ var ErrRefreshFailed = (detail) => new AuthError(
   detail ? `Failed to refresh OAuth tokens: ${detail}` : "Failed to refresh OAuth tokens",
   "Run `hyperframes auth login` to re-authenticate."
 );
+var ErrLoginExpired = () => new AuthError(
+  "LOGIN_EXPIRED",
+  "Your HeyGen login expired",
+  "Run `hyperframes auth login` to sign in again."
+);
+var ErrLoginChanged = () => new AuthError(
+  "LOGIN_CHANGED",
+  "Your HeyGen login changed while this command ran",
+  "Run the command again."
+);
 var ErrDeviceAuthFailed = (detail) => new AuthError(
   "DEVICE_AUTH_FAILED",
   `Device authorization failed: ${detail}`,
@@ -461,14 +471,12 @@ async function resolveCredential(opts = {}) {
   const { credentials, source } = await readStore();
   if (source === "absent") throw ErrNotConfigured();
   const fileSource = source === "file_legacy" ? "file_legacy" : "file_json";
-  if (credentials.oauth) {
-    const oauth = pickOAuth(credentials.oauth, now, fileSource);
-    if (oauth) return oauth;
-  }
+  const oauth = credentials.oauth ? pickOAuth(credentials.oauth, now, fileSource) : null;
+  if (oauth) return oauth;
   if (credentials.api_key) {
     return { type: "api_key", key: credentials.api_key, source: fileSource };
   }
-  throw ErrNotConfigured();
+  throw credentials.oauth ? ErrLoginExpired() : ErrNotConfigured();
 }
 async function tryResolveCredential(opts = {}) {
   try {
@@ -482,7 +490,7 @@ async function tryResolveCredential(opts = {}) {
 }
 function pickOAuth(tokens, now, source) {
   const expiresAt = parseDate(tokens.expires_at);
-  const expired = expiresAt !== void 0 && expiresAt.getTime() - EXPIRY_SKEW_MS < now.getTime();
+  const expired = isTokenExpired(expiresAt, now);
   if (expired && !tokens.refresh_token) return null;
   const out = {
     type: "oauth",
@@ -495,6 +503,9 @@ function pickOAuth(tokens, now, source) {
   if (tokens.scope) out.scope = tokens.scope;
   return out;
 }
+function isTokenExpired(expiresAt, now) {
+  return expiresAt !== void 0 && expiresAt.getTime() - EXPIRY_SKEW_MS < now.getTime();
+}
 function parseDate(s) {
   if (!s) return void 0;
   const d = new Date(s);
@@ -736,7 +747,7 @@ async function startAuthorizationCodeFlow(opts = {}) {
     verifier: pkce.verifier,
     fetchImpl: opts.fetchImpl
   });
-  await persistOAuth(tokens, { preserveMissing: false });
+  await persistOAuth(tokens);
   return { tokens };
 }
 async function startDeviceAuthorizationFlow(opts = {}) {
@@ -884,7 +895,7 @@ async function refreshTokens(refresh_token, opts = {}) {
   }
   const payload = await readJsonOrThrow(res);
   const tokens = parseTokenResponse(payload);
-  await persistOAuth(tokens, { preserveMissing: true });
+  await persistOAuth(tokens, { refreshed: refresh_token });
   return tokens;
 }
 async function revokeTokens(token, opts = {}) {
@@ -1009,15 +1020,18 @@ function numericField(obj, key) {
   }
   return void 0;
 }
-async function persistOAuth(tokens, opts) {
+async function persistOAuth(tokens, opts = {}) {
   let existing = {};
   try {
     const { credentials } = await readStore();
     existing = credentials;
-  } catch {
-    existing = {};
+  } catch (err) {
+    if (opts.refreshed !== void 0) throw err;
+  }
+  if (opts.refreshed !== void 0 && existing.oauth?.refresh_token !== opts.refreshed) {
+    throw ErrLoginChanged();
   }
-  const oauth = opts.preserveMissing ? { ...existing.oauth, ...tokens } : { ...tokens };
+  const oauth = opts.refreshed !== void 0 ? { ...existing.oauth, ...tokens } : { ...tokens };
   await writeStore({ ...existing, oauth });
 }
 async function persistVerifiedOAuthSession(tokens, user) {
@@ -1190,6 +1204,7 @@ export {
   isHeaderSafe,
   resolveCredential,
   tryResolveCredential,
+  isTokenExpired,
   assertOAuthConfiguredOrExit,
   startAuthorizationCodeFlow,
   startDeviceAuthorizationFlow,

package/dist/chunk-IGLEPPTN.js

@@ -0,0 +1,24 @@
+import { createRequire as __hf_createRequire } from "node:module";
+import { fileURLToPath as __hf_fileURLToPath } from "node:url";
+import { dirname as __hf_dirname } from "node:path";
+var require = __hf_createRequire(import.meta.url);
+var __filename = __hf_fileURLToPath(import.meta.url);
+var __dirname = __hf_dirname(__filename);
+
+// src/utils/feedbackSource.ts
+var SOURCES = ["person", "agent"];
+function parseFeedbackSource(raw) {
+  if (raw === void 0) return void 0;
+  const source = raw.trim();
+  return SOURCES.includes(source) ? source : null;
+}
+var FEEDBACK_EMAIL_ENV = "HYPERFRAMES_FEEDBACK_EMAIL";
+function feedbackEmail(env = process.env) {
+  return env[FEEDBACK_EMAIL_ENV]?.trim() || void 0;
+}
+
+export {
+  parseFeedbackSource,
+  FEEDBACK_EMAIL_ENV,
+  feedbackEmail
+};

package/dist/{chunk-MYSYOQPV.js → chunk-IVLJE3VX.js}

@@ -20,7 +20,7 @@ import {
   typeDirPath,
   updateRecord,
   withFigmaErrors
-} from "./chunk-2FJPEXII.js";
+} from "./chunk-2LWWIDPZ.js";
 import {
   defineCommand
 } from "./chunk-S3S4TGEH.js";
@@ -221,7 +221,7 @@ var asset_default = defineCommand({
           rendered > 0 ? `(${results.length} nodes, ${rendered} rendered in 1 figma request)` : `(${results.length} nodes, all reused from cache \u2014 no figma request)`
         );
       }
-      const { trackFigmaImport } = await import("./telemetry-JJJQWUA3.js");
+      const { trackFigmaImport } = await import("./telemetry-7KDXFPTK.js");
       trackFigmaImport({
         phase: "asset",
         reused: results.every((r) => r.reused),

package/dist/{chunk-4PTKEI2C.js → chunk-JACPHNUK.js}

@@ -8,7 +8,7 @@ import {
   DEFAULT_REGISTRY_URL,
   fetchItemManifest,
   fetchRegistryManifest
-} from "./chunk-PPTHGZTG.js";
+} from "./chunk-ZBMQOBQK.js";
 
 // src/registry/resolver.ts
 function defaultWarn(message) {

package/dist/{chunk-MVWXSRY6.js → chunk-JH556Q42.js}

@@ -4,10 +4,15 @@ import { dirname as __hf_dirname } from "node:path";
 var require = __hf_createRequire(import.meta.url);
 var __filename = __hf_fileURLToPath(import.meta.url);
 var __dirname = __hf_dirname(__filename);
+import {
+  refreshIfNeeded
+} from "./chunk-SHB5VDMH.js";
 import {
   buildAuthHeaders,
+  isAuthError,
+  isTokenExpired,
   tryResolveCredential
-} from "./chunk-DNXD7TOA.js";
+} from "./chunk-I465DBM6.js";
 import {
   CSS_URL_RE,
   isNonRelativeUrl,
@@ -191,6 +196,36 @@ function getUploadHeaders(data, uploadUrl, contentType, archiveByteLength) {
 async function readJson(response) {
   return response.clone().json().catch(() => null);
 }
+var CredentialRejectedError = class extends Error {
+};
+async function metadataRequestError(response, fallback) {
+  const message = await readErrorMessage(response, fallback);
+  return response.status === 401 ? new CredentialRejectedError(message) : new Error(message);
+}
+var LOGIN_EXPIRED = "Your login expired. Run hyperframes auth login, then publish again.";
+var LOGIN_CHANGED = "Your login changed during publish. Run publish again.";
+var API_KEY_ENV_VAR = { env: "HEYGEN_API_KEY", env_alias: "HYPERFRAMES_API_KEY" };
+function rejectedCredentialMessage(credential) {
+  if (credential.type === "api_key" && (credential.source === "env" || credential.source === "env_alias")) {
+    return `${API_KEY_ENV_VAR[credential.source]} was rejected. Fix or unset it, then publish again.`;
+  }
+  return LOGIN_EXPIRED;
+}
+async function resolvePublishCredential(checked) {
+  try {
+    const credential = checked === void 0 ? await tryResolveCredential() : checked;
+    if (!credential) return null;
+    const expired = credential.type === "oauth" && isTokenExpired(credential.expires_at, /* @__PURE__ */ new Date());
+    if (expired && !credential.refresh_token) throw new Error(LOGIN_EXPIRED);
+    return await refreshIfNeeded(expired ? { ...credential, refreshable: true } : credential);
+  } catch (error) {
+    if (isAuthError(error) && (error.code === "REFRESH_FAILED" || error.code === "LOGIN_EXPIRED")) {
+      throw new Error(LOGIN_EXPIRED);
+    }
+    if (isAuthError(error) && error.code === "LOGIN_CHANGED") throw new Error(LOGIN_CHANGED);
+    throw error;
+  }
+}
 async function readErrorMessage(response, fallback) {
   const contentType = response.headers.get("content-type") || "";
   if (contentType.includes("application/json")) {
@@ -477,7 +512,7 @@ async function publishProjectArchiveDirect(apiBaseUrl, title, archive, isPublic,
   const payload = await readJson(response);
   const publishedProject = parsePublishedProjectResponse(payload);
   if (!response.ok || !publishedProject) {
-    throw new Error(await readErrorMessage(response, "Failed to publish project"));
+    throw await metadataRequestError(response, "Failed to publish project");
   }
   return publishedProject;
 }
@@ -526,7 +561,7 @@ async function publishProjectArchiveStaged(apiBaseUrl, title, archive, isPublic,
   const uploadPayload = await readJson(uploadResponse);
   const stagedUpload = parseStagedUploadResponse(uploadPayload, archive.buffer.byteLength);
   if (!uploadResponse.ok || !stagedUpload) {
-    throw new Error(await readErrorMessage(uploadResponse, "Failed to prepare project upload"));
+    throw await metadataRequestError(uploadResponse, "Failed to prepare project upload");
   }
   await uploadArchiveToPresignedUrl(stagedUpload, archive);
   const completeResponse = await fetchForPublish(
@@ -551,7 +586,7 @@ async function publishProjectArchiveStaged(apiBaseUrl, title, archive, isPublic,
   const completePayload = await readJson(completeResponse);
   const publishedProject = parsePublishedProjectResponse(completePayload);
   if (!completeResponse.ok || !publishedProject) {
-    throw new Error(await readErrorMessage(completeResponse, "Failed to publish project"));
+    throw await metadataRequestError(completeResponse, "Failed to publish project");
   }
   return publishedProject;
 }
@@ -560,27 +595,38 @@ async function publishProjectArchive(projectDir, opts = {}) {
   const title = basename(projectDir);
   const archive = opts.archive ?? createPublishArchive(projectDir);
   const apiBaseUrl = getPublishApiBaseUrl();
-  const credential = await tryResolveCredential();
+  const credential = await resolvePublishCredential(opts.credential);
   const authHeaders = credential ? buildAuthHeaders(credential) : {};
   const projectId = credential ? opts.projectId : void 0;
   const spaceId = credential ? opts.spaceId : void 0;
   const metadataHeaders = spaceId ? { ...authHeaders, "x-space-id": spaceId } : authHeaders;
-  const result = await publishProjectArchiveStaged(
-    apiBaseUrl,
-    title,
-    archive,
-    isPublic,
-    metadataHeaders,
-    projectId
-  ) ?? await publishProjectArchiveDirect(
-    apiBaseUrl,
-    title,
-    archive,
-    isPublic,
-    metadataHeaders,
-    projectId
-  );
-  if (credential) {
+  let result;
+  try {
+    result = await publishProjectArchiveStaged(
+      apiBaseUrl,
+      title,
+      archive,
+      isPublic,
+      metadataHeaders,
+      projectId
+    ) ?? await publishProjectArchiveDirect(
+      apiBaseUrl,
+      title,
+      archive,
+      isPublic,
+      metadataHeaders,
+      projectId
+    );
+    if (credential?.type === "oauth" && !result.claimed) {
+      throw new CredentialRejectedError("unclaimed publish");
+    }
+  } catch (error) {
+    if (error instanceof CredentialRejectedError && credential) {
+      throw new Error(rejectedCredentialMessage(credential));
+    }
+    throw error;
+  }
+  if (result.claimed) {
     writeProjectLink(projectDir, { projectId: result.projectId, url: result.url });
   }
   return result;
@@ -591,6 +637,8 @@ export {
   ensureProjectId,
   readTeamProject,
   writeTeamProject,
+  API_KEY_ENV_VAR,
+  resolvePublishCredential,
   rewriteHtmlAttributes,
   buildPublishFileMap,
   zipPublishFileMap,

package/dist/{chunk-BKQXLO55.js → chunk-JREV7WVY.js}

@@ -8,7 +8,7 @@ import {
   MAX_AUDIO_GAIN_DB,
   formatAudioGain,
   isAudibleVideoElement
-} from "./chunk-SHLFJFPM.js";
+} from "./chunk-PATLRNZA.js";
 import {
   findFfBinary
 } from "./chunk-PJ3HDUCY.js";

package/dist/{chunk-V2VNJNX6.js → chunk-JWGYWJ5F.js}

@@ -14,7 +14,7 @@ import {
 } from "./chunk-AWDFDFI3.js";
 import {
   isBlockedNetworkHost
-} from "./chunk-IUBZ3DSO.js";
+} from "./chunk-MNMD6XLG.js";
 import {
   DOMParser,
   parseHTML

package/dist/{chunk-AMSNSTLK.js → chunk-JWHQKTVG.js}

@@ -7,7 +7,7 @@ var __dirname = __hf_dirname(__filename);
 import {
   getMimeType,
   injectMediaCodecMapIntoHtml
-} from "./chunk-ZTU5PYQJ.js";
+} from "./chunk-YJMQLWG4.js";
 import {
   PROXY_VARIANT_CONFIG,
   ProxyCapacityError,
@@ -18,10 +18,10 @@ import {
   recordProxyRequest,
   resolveProxy,
   resolveProxyVariantRequest
-} from "./chunk-OWMGDQBZ.js";
+} from "./chunk-SJ64QY5Z.js";
 import {
   resolveAutoProxy
-} from "./chunk-WJP3UOB3.js";
+} from "./chunk-3WXWL7AY.js";
 
 // src/utils/staticProjectServer.ts
 import { createServer } from "http";

package/dist/{chunk-FNX7RJIJ.js → chunk-KYDM3W7A.js}

@@ -8,14 +8,14 @@ import {
   DEFAULT_REGISTRY_URL,
   fetchItemFile,
   validRegistryItem
-} from "./chunk-PPTHGZTG.js";
+} from "./chunk-ZBMQOBQK.js";
 import {
   publishRegistryFile,
   registryTargetPath
 } from "./chunk-GMECXFAN.js";
 import {
   validateVariables
-} from "./chunk-2WKWEB4T.js";
+} from "./chunk-RCNDZEBU.js";
 import {
   realProjectRoot
 } from "./chunk-OFQWTKPW.js";

package/dist/{chunk-U3CILSBM.js → chunk-LZN67SFR.js}

@@ -6,7 +6,7 @@ var __filename = __hf_fileURLToPath(import.meta.url);
 var __dirname = __hf_dirname(__filename);
 import {
   setHostHandlesSigint
-} from "./chunk-IUBZ3DSO.js";
+} from "./chunk-MNMD6XLG.js";
 import {
   processAncestorSnapshot,
   processIdentity,

package/dist/{chunk-IUBZ3DSO.js → chunk-MNMD6XLG.js}

@@ -22,7 +22,7 @@ import {
   renderFrameIdForRenderId,
   resolveAuthoredTimingWindow,
   toFps
-} from "./chunk-2WKWEB4T.js";
+} from "./chunk-RCNDZEBU.js";
 import {
   AUDIO_GROUP_RENDER_ID_ATTR,
   COLOR_GRADING_SOURCE_HIDDEN_ATTR,
@@ -52,7 +52,7 @@ import {
   shiftRateLane,
   sourceTimeAt,
   timeAtSourceTime
-} from "./chunk-SHLFJFPM.js";
+} from "./chunk-PATLRNZA.js";
 import {
   chromeMajorCeiling,
   exceedsChromeCeiling

package/dist/{chunk-CDTPNYO3.js → chunk-NPHNGWJH.js}

@@ -8,16 +8,16 @@ import {
   flush,
   shouldTrack,
   trackEvent
-} from "./chunk-M6LKSPER.js";
+} from "./chunk-6WIWCYD5.js";
 import {
   getPowerState
-} from "./chunk-U7AMFQ6G.js";
+} from "./chunk-BN5KOC5O.js";
 import {
   CliRuntimeError
 } from "./chunk-PBN6GBJE.js";
 import {
   redactTelemetryString
-} from "./chunk-2WKWEB4T.js";
+} from "./chunk-RCNDZEBU.js";
 import {
   readConfig
 } from "./chunk-XUXGIA7H.js";

package/dist/{chunk-EEXM24SY.js → chunk-OWPHLEDI.js}

@@ -16,7 +16,7 @@ import {
 } from "./chunk-5ETJX6WM.js";
 import {
   runEnvironmentChecks
-} from "./chunk-OV62R47Q.js";
+} from "./chunk-VU4KRDRL.js";
 import {
   c
 } from "./chunk-ZTZA4UWZ.js";
@@ -25,24 +25,24 @@ import {
   getFreeDiskMb,
   getShmSizeMb,
   getSystemMeta
-} from "./chunk-U7AMFQ6G.js";
+} from "./chunk-BN5KOC5O.js";
 import {
   defineCommand
 } from "./chunk-S3S4TGEH.js";
 import {
   resolveExtractCacheDir
-} from "./chunk-IUBZ3DSO.js";
+} from "./chunk-MNMD6XLG.js";
 import {
   getUpdateMeta,
   withMeta
-} from "./chunk-FRIRP3DN.js";
+} from "./chunk-7VXU7E5S.js";
 import {
   CONFIG_PATH,
   withFileLock
 } from "./chunk-XUXGIA7H.js";
 import {
   VERSION
-} from "./chunk-3NXDJSD5.js";
+} from "./chunk-WG4IZWEH.js";
 import {
   normalizeErrorMessage
 } from "./chunk-KNU5COPB.js";