hyperframes 0.8.137 → 0.8.139

package/dist/{chunk-JVJQL42J.js → chunk-X3TMMIDP.js}

@@ -14,9 +14,13 @@ import {
   describeRejectedPythonOverride,
   hasPythonModules
 } from "./chunk-5ETJX6WM.js";
+import {
+  OPTIONAL_PACKAGES,
+  installedOptionalPackageVersion
+} from "./chunk-3DKN5WKL.js";
 import {
   runEnvironmentChecks
-} from "./chunk-ADXD2HP4.js";
+} from "./chunk-O6K5DWXM.js";
 import {
   c
 } from "./chunk-ZTZA4UWZ.js";
@@ -25,31 +29,27 @@ import {
   getFreeDiskMb,
   getShmSizeMb,
   getSystemMeta
-} from "./chunk-OEJQAXS3.js";
+} from "./chunk-PLNWWGE7.js";
 import {
   defineCommand
 } from "./chunk-S3S4TGEH.js";
 import {
   resolveExtractCacheDir
-} from "./chunk-TTBOUHWT.js";
+} from "./chunk-QXOFUKBF.js";
 import {
   getUpdateMeta,
   withMeta
-} from "./chunk-2DQ356HE.js";
+} from "./chunk-TCWL4BKK.js";
 import {
   CONFIG_PATH,
   withFileLock
 } from "./chunk-XUXGIA7H.js";
 import {
   VERSION
-} from "./chunk-WYX6L7AV.js";
+} from "./chunk-UMWROSIP.js";
 import {
   normalizeErrorMessage
 } from "./chunk-KNU5COPB.js";
-import {
-  OPTIONAL_PACKAGES,
-  installedOptionalPackageVersion
-} from "./chunk-XT5P4QMO.js";
 
 // src/commands/doctor.ts
 import { execFileSync, execSync } from "child_process";

package/dist/{chunk-SMGQFCBC.js → chunk-XOZ3J3LB.js}

@@ -12,7 +12,7 @@ import {
 } from "./chunk-HVW7ABXD.js";
 import {
   DEFAULT_REGISTRY_URL
-} from "./chunk-NSLSFVFN.js";
+} from "./chunk-GIDHR5OL.js";
 
 // src/utils/projectConfig.ts
 import { readFileSync, writeFileSync } from "fs";

package/dist/{chunk-WFNNUWFN.js → chunk-YOL4QRSL.js}

@@ -8,10 +8,10 @@ import {
   DEFAULT_VP9_CPU_USED,
   isHttpUrl,
   runFfmpeg
-} from "./chunk-TTBOUHWT.js";
+} from "./chunk-QXOFUKBF.js";
 import {
   parseAnimatedGifMetadata
-} from "./chunk-SCCJUPPX.js";
+} from "./chunk-EJ7OWYF2.js";
 import {
   parseHTML
 } from "./chunk-GK4AIFIH.js";

package/dist/{chunk-6XCIGLRQ.js → chunk-Z67RZ4XO.js}

@@ -21,20 +21,14 @@ import {
   splitElementInHtml,
   unwrapElementsFromHtml,
   wrapElementsInHtml
-} from "./chunk-LSLJIVWV.js";
-import {
-  atomicTempPath,
-  createFileAtomically,
-  isAtomicTempPath,
-  replaceFileAtomically
-} from "./chunk-EOVYQ3IG.js";
+} from "./chunk-DUQJF7FK.js";
 import {
   DEFAULT_TARGET_LUFS,
   absoluteLoudnessPlan,
   measureAudio,
   requiredFfmpeg,
   resolveLocalAudioPath
-} from "./chunk-MOBLZWAK.js";
+} from "./chunk-Q73ISOVQ.js";
 import {
   PROXY_PARAMS_VERSION,
   PROXY_PENDING_RETRY_AFTER_SECONDS,
@@ -42,9 +36,13 @@ import {
   ProxyCapacityError,
   ProxyTranscodeError,
   ProxyWaitTimeoutError,
+  STUDIO_MOTION_PATH,
   createMediaCodecProbeCache,
+  createStudioMotionRenderBodyScript,
   decideMediaProxyEligibility,
   isInHiddenOrVendorDir,
+  isPrivateProjectFile,
+  isPrivateProjectPath,
   isProxyVariantRequest,
   pinWithinProject,
   probeAssetCodec,
@@ -56,11 +54,18 @@ import {
   recordProxyRequest,
   resolveProxy,
   resolveProxyVariantRequest,
+  resolveWithinProject,
   scanProjectMediaCodecMap,
   shouldPrewarmProxy,
   waitForProxy,
   walkDir
-} from "./chunk-J4AOOISS.js";
+} from "./chunk-A4X2YWNQ.js";
+import {
+  atomicTempPath,
+  createFileAtomically,
+  isAtomicTempPath,
+  replaceFileAtomically
+} from "./chunk-EOVYQ3IG.js";
 import {
   findTimelineScript,
   parseGsapScriptAcorn
@@ -81,7 +86,7 @@ import {
   motionPathPluginUrl,
   parseFps,
   sameInstant
-} from "./chunk-SCCJUPPX.js";
+} from "./chunk-EJ7OWYF2.js";
 import {
   MagicString,
   VALID_CANVAS_RESOLUTIONS,
@@ -90,7 +95,7 @@ import {
 import {
   addScenePartsManifest,
   ensureHfIds
-} from "./chunk-HUV6BP7O.js";
+} from "./chunk-GWV2Y36Q.js";
 import {
   AFTER_FONTS_SCRIPT_TYPE,
   RUNTIME_BOOTSTRAP_ATTR,
@@ -104,20 +109,19 @@ import {
   resolveRateSpec,
   sourceTimeAt,
   stripEmbeddedRuntimeScripts
-} from "./chunk-P7GAS5DG.js";
+} from "./chunk-HYYSJI5D.js";
 import {
   ProjectRootMissingError,
   folderGone,
   isProjectRootMissing,
   isSafePath,
   mkdirWithinProject,
-  realpath,
-  resolveWithinProject
+  realpath
 } from "./chunk-OFQWTKPW.js";
 import {
   isWithinProjectRoot,
   readProjectFile
-} from "./chunk-VDQCNWQI.js";
+} from "./chunk-STA43FMY.js";
 import {
   FFPROBE_PATH_ENV,
   findFfBinary
@@ -138,7 +142,7 @@ import {
   simple
 } from "./chunk-2PSPARWP.js";
 
-// ../studio-server/dist/chunk-7ON477WG.js
+// ../studio-server/dist/chunk-DG2VOIGR.js
 import { createHash } from "crypto";
 import { closeSync, constants, fstatSync, openSync, readFileSync, writeFileSync } from "fs";
 import { dirname, join } from "path";
@@ -222,7 +226,7 @@ function stampFileHfIds(filePath) {
   }
 }
 
-// ../studio-server/dist/chunk-36F5I56K.js
+// ../studio-server/dist/chunk-K3H6HTVC.js
 import { randomUUID as randomUUID6 } from "crypto";
 import { mkdir as mkdir2, readdir as readdir3, rm as rm3, rmdir, writeFile } from "fs/promises";
 import {
@@ -1963,7 +1967,7 @@ function clearElementScreenshotIsolation() {
   page.__hfThumbnailFaded = [];
 }
 
-// ../studio-server/dist/chunk-WK3ZL3SN.js
+// ../studio-server/dist/chunk-G7FEKQ32.js
 import { resolve as resolve4 } from "path";
 function isAutoProxyEnabled(adapter) {
   return adapter.autoProxy !== false;
@@ -2008,193 +2012,6 @@ async function injectMediaCodecMap(html, adapter, projectDir, compSrcPath, probe
   return injectMediaCodecMapIntoHtml(html, projectDir, [{ html, compSrcPath }], probeCache);
 }
 
-// ../studio-server/dist/chunk-4ETS2LXI.js
-var STUDIO_MOTION_PATH = ".hyperframes/studio-motion.json";
-function hasStudioMotionEntries(manifestContent) {
-  try {
-    const parsed = JSON.parse(manifestContent);
-    return Array.isArray(parsed.motions) && parsed.motions.length > 0;
-  } catch {
-    return false;
-  }
-}
-function createStudioMotionRenderBodyScript(manifestContent, options = {}) {
-  if (!manifestContent.trim() || !hasStudioMotionEntries(manifestContent)) return null;
-  return `(${studioMotionRenderRuntime.toString()})(${JSON.stringify(manifestContent)}, ${JSON.stringify(options.activeCompositionPath ?? null)});`;
-}
-function studioMotionRenderRuntime(manifestContent, activeCompositionPath) {
-  const STUDIO_MOTION_TIMELINE_ID = "studio-motion";
-  const STUDIO_MOTION_ATTR = "data-hf-studio-motion";
-  const ORIGINAL_TRANSFORM_ATTR = "data-hf-studio-motion-original-transform";
-  const ORIGINAL_OPACITY_ATTR = "data-hf-studio-motion-original-opacity";
-  const ORIGINAL_VISIBILITY_ATTR = "data-hf-studio-motion-original-visibility";
-  const objectRecord = (value) => value && typeof value === "object" ? value : null;
-  const finiteNumber = (value) => typeof value === "number" && Number.isFinite(value) ? value : null;
-  const runtimeWindow = window;
-  const parseMotionValues = (value) => {
-    const record = objectRecord(value);
-    if (!record) return null;
-    const parsed = {};
-    for (const key of ["x", "y", "scale", "rotation", "opacity", "autoAlpha"]) {
-      const next = finiteNumber(record[key]);
-      if (next != null) parsed[key] = next;
-    }
-    return Object.keys(parsed).length > 0 ? parsed : null;
-  };
-  const parseCustomEase = (value) => {
-    const record = objectRecord(value);
-    if (!record) return null;
-    const id = typeof record.id === "string" ? record.id.trim() : "";
-    const data = typeof record.data === "string" ? record.data.trim() : "";
-    if (!id || !data) return null;
-    return { id, data };
-  };
-  const parsedManifest = (() => {
-    try {
-      return objectRecord(JSON.parse(manifestContent));
-    } catch {
-      return null;
-    }
-  })();
-  const manifestMotions = Array.isArray(parsedManifest?.motions) ? parsedManifest.motions : [];
-  const sourceFileForElement = (element) => {
-    let current = element;
-    while (current) {
-      const sourceFile = current.getAttribute("data-composition-file") ?? current.getAttribute("data-composition-src");
-      if (sourceFile) return sourceFile;
-      current = current.parentElement;
-    }
-    return activeCompositionPath ?? "index.html";
-  };
-  const elementMatchesSourceFile = (element, sourceFile) => sourceFileForElement(element) === sourceFile;
-  const isHTMLElement2 = (element) => element instanceof HTMLElement;
-  const querySelectorCandidates = (selector) => {
-    const className = selector.match(/^\.([A-Za-z0-9_-]+)$/)?.[1];
-    if (className) {
-      return Array.from(document.getElementsByTagName("*")).filter(
-        (element) => isHTMLElement2(element) && element.classList.contains(className)
-      );
-    }
-    if (/^[A-Za-z][A-Za-z0-9-]*$/.test(selector)) {
-      return Array.from(document.getElementsByTagName(selector)).filter(isHTMLElement2);
-    }
-    return Array.from(document.querySelectorAll(selector)).filter(isHTMLElement2);
-  };
-  const resolveTarget = (targetRecord) => {
-    const sourceFile = typeof targetRecord.sourceFile === "string" ? targetRecord.sourceFile : "";
-    if (!sourceFile) return null;
-    const id = typeof targetRecord.id === "string" ? targetRecord.id : "";
-    if (id) {
-      const byId = document.getElementById(id);
-      if (isHTMLElement2(byId) && elementMatchesSourceFile(byId, sourceFile)) return byId;
-    }
-    const selector = typeof targetRecord.selector === "string" ? targetRecord.selector : "";
-    if (!selector) return null;
-    try {
-      const selectorIndex = Math.max(0, Math.floor(finiteNumber(targetRecord.selectorIndex) ?? 0));
-      return querySelectorCandidates(selector).filter(
-        (element) => elementMatchesSourceFile(element, sourceFile)
-      )[selectorIndex] ?? null;
-    } catch {
-      return null;
-    }
-  };
-  const restoreElement = (element) => {
-    runtimeWindow.gsap?.set?.(element, { clearProps: "transform,opacity,visibility" });
-    element.style.transform = element.getAttribute(ORIGINAL_TRANSFORM_ATTR) ?? "";
-    element.style.opacity = element.getAttribute(ORIGINAL_OPACITY_ATTR) ?? "";
-    element.style.visibility = element.getAttribute(ORIGINAL_VISIBILITY_ATTR) ?? "";
-    element.removeAttribute(STUDIO_MOTION_ATTR);
-    element.removeAttribute(ORIGINAL_TRANSFORM_ATTR);
-    element.removeAttribute(ORIGINAL_OPACITY_ATTR);
-    element.removeAttribute(ORIGINAL_VISIBILITY_ATTR);
-  };
-  const restoreStudioMotionElements = () => {
-    for (const element of Array.from(document.querySelectorAll(`[${STUDIO_MOTION_ATTR}]`))) {
-      if (isHTMLElement2(element)) restoreElement(element);
-    }
-  };
-  const readCurrentTime = () => {
-    try {
-      const playerTime = runtimeWindow.__player?.getTime?.();
-      if (typeof playerTime === "number" && Number.isFinite(playerTime)) {
-        return Math.max(0, playerTime);
-      }
-    } catch {
-    }
-    try {
-      const timelineTime = runtimeWindow.__timeline?.time?.();
-      if (typeof timelineTime === "number" && Number.isFinite(timelineTime)) {
-        return Math.max(0, timelineTime);
-      }
-    } catch {
-    }
-    return 0;
-  };
-  const resolveEase = (motion) => {
-    const fallback = typeof motion.ease === "string" && motion.ease.trim() ? motion.ease.trim() : "none";
-    const customEase = parseCustomEase(motion.customEase);
-    const customEasePlugin = runtimeWindow.CustomEase;
-    if (!customEase || typeof customEasePlugin?.create !== "function") return fallback;
-    try {
-      runtimeWindow.gsap?.registerPlugin?.(customEasePlugin);
-      customEasePlugin.create(customEase.id, customEase.data);
-      return customEase.id;
-    } catch {
-      return fallback;
-    }
-  };
-  const applyManifest = () => {
-    runtimeWindow.__timelines = runtimeWindow.__timelines ?? {};
-    runtimeWindow.__timelines[STUDIO_MOTION_TIMELINE_ID]?.kill?.();
-    delete runtimeWindow.__timelines[STUDIO_MOTION_TIMELINE_ID];
-    restoreStudioMotionElements();
-    const gsap = runtimeWindow.gsap;
-    if (!gsap?.timeline || manifestMotions.length === 0) return 0;
-    const timeline = gsap.timeline({ paused: true, defaults: { overwrite: "auto" } });
-    let applied = 0;
-    for (const motionValue of manifestMotions) {
-      const motion = objectRecord(motionValue);
-      if (!motion || motion.kind !== "gsap-motion") continue;
-      const targetRecord = objectRecord(motion.target);
-      if (!targetRecord) continue;
-      const target = resolveTarget(targetRecord);
-      if (!target || typeof timeline.fromTo !== "function") continue;
-      const start = finiteNumber(motion.start);
-      const duration = finiteNumber(motion.duration);
-      if (start == null || duration == null || start < 0 || duration <= 0) continue;
-      const from = parseMotionValues(motion.from);
-      const to = parseMotionValues(motion.to);
-      if (!from || !to) continue;
-      if (!target.hasAttribute(STUDIO_MOTION_ATTR)) {
-        target.setAttribute(ORIGINAL_TRANSFORM_ATTR, target.style.transform);
-        target.setAttribute(ORIGINAL_OPACITY_ATTR, target.style.opacity);
-        target.setAttribute(ORIGINAL_VISIBILITY_ATTR, target.style.visibility);
-      }
-      target.setAttribute(STUDIO_MOTION_ATTR, "true");
-      timeline.fromTo(
-        target,
-        from,
-        { ...to, duration, ease: resolveEase(motion), overwrite: "auto", immediateRender: false },
-        start
-      );
-      applied += 1;
-    }
-    if (applied === 0) {
-      timeline.kill?.();
-      return 0;
-    }
-    runtimeWindow.__timelines[STUDIO_MOTION_TIMELINE_ID] = timeline;
-    timeline.pause?.();
-    const currentTime = readCurrentTime();
-    if (typeof timeline.totalTime === "function") timeline.totalTime(currentTime, false);
-    else timeline.time?.(currentTime);
-    return applied;
-  };
-  runtimeWindow.__hfStudioMotionApply = applyManifest;
-  applyManifest();
-}
-
 // ../studio-server/dist/chunk-X62ASOGO.js
 function findUnsafeMutationValues(value, path = "body", options = {}) {
   if (value === null) {
@@ -2352,7 +2169,7 @@ function holdScope(before, previous) {
     held.set(a.targetSelector, props);
   }
   return {
-    touched: (a) => previous !== null && !kept.has(tweenSignature(a)),
+    touched: (a) => previous === null || !kept.has(tweenSignature(a)),
     held: (selector) => held.get(selector) ?? /* @__PURE__ */ new Map()
   };
 }
@@ -2370,7 +2187,8 @@ function keyframeHoldForAnimation(animation, animations, scope) {
   const touched = scope.touched(animation);
   const pinned = scope.held(animation.targetSelector);
   const kept = (property, value) => touched ? pinned.has(property) : pinned.get(property) === value;
-  const pins = (group, property, value) => group === "position" && start > 1e-3 || (group === "position" || group === "size") && (lone && touched || kept(property, value));
+  const startsLate = start > 1e-3;
+  const pins = (group, property, value) => (group === "position" || group === "size") && ((lone || group === "position" && startsLate) && touched || kept(property, value));
   const hold = {};
   for (const [property, value] of Object.entries(atStart.properties)) {
     if (!pins(classifyPropertyGroup2(property), property, value) || typeof value !== "number")
@@ -5439,6 +5257,7 @@ import { createHash as createHash23 } from "crypto";
 // ../core/dist/studioPreviewMark.js
 var STUDIO_PREVIEW_MARK_META = "hyperframes-studio-preview";
 var STUDIO_PREVIEW_LAZY_ATTR = "data-hf-preview-lazy";
+var STUDIO_PREVIEW_ERRORS = "__hfPreviewErrors";
 
 // ../studio-server/dist/index.js
 import { readlinkSync as readlinkSync2 } from "fs";
@@ -5446,7 +5265,7 @@ import { dirname as dirname42, join as join7, parse as parse2, relative as relat
 import { readFileSync as readFileSync72 } from "fs";
 import { join as join9 } from "path";
 import { streamSSE } from "hono/streaming";
-import { existsSync as existsSync6, readFileSync as readFileSync8, unlinkSync as unlinkSync3, readdirSync as readdirSync32, statSync as statSync5 } from "fs";
+import { existsSync as existsSync6, lstatSync as lstatSync32, readFileSync as readFileSync8, unlinkSync as unlinkSync3, readdirSync as readdirSync32, statSync as statSync5 } from "fs";
 import { join as join10 } from "path";
 import { HTTPException } from "hono/http-exception";
 import { open, stat as stat2 } from "fs/promises";
@@ -5522,7 +5341,7 @@ function registerProjectRoutes(api, adapter) {
   api.get("/projects/:id", async (c) => {
     const project = await adapter.resolveProject(c.req.param("id"));
     if (!project) return c.json({ error: "not found" }, 404);
-    const files = walkDir(project.dir);
+    const files = walkDir(project.dir).filter((file) => !isPrivateProjectPath(file));
     const compositions = await filterCompositionFiles(project.dir, files);
     return c.json({ id: project.id, dir: project.dir, title: project.title, files, compositions });
   });
@@ -6436,7 +6255,7 @@ function requestSubPath(url, route) {
   return decodeURIComponent(segments.slice(start + routeSegments.length).join("/"));
 }
 async function loadGsapParser() {
-  return import("./gsapParser-2OL54XZ5.js");
+  return import("./gsapParser-UP3PNPC2.js");
 }
 function isDanglingSymlinkInProject(projectDir, lexicalPath) {
   if (!isSafePath(projectDir, dirname32(lexicalPath))) return false;
@@ -6805,7 +6624,7 @@ function updateReferences(projectDir, oldPath, newPath, isDirectory) {
   const rewrite = referenceRewriter(oldPath, newPath, isDirectory, projectPaths(projectDir));
   let updatedCount = 0;
   for (const file of textFiles) {
-    if (!isSafePath(projectDir, file)) continue;
+    if (!isSafePath(projectDir, file) || isPrivateProjectFile(projectDir, file)) continue;
     const content = readableText(file);
     if (content === null) continue;
     const updated = rewrite(content);
@@ -7097,7 +6916,7 @@ async function prepareGsapMutationScript(c, res, firstMutation) {
   let block = extractGsapScriptBlock(html);
   if (!block && (firstMutation.type === "add" || firstMutation.type === "add-with-keyframes")) {
     const compId = html.match(/data-composition-id="([^"]+)"/)?.[1] ?? "main";
-    const { GSAP_CDN } = await import("./dist-7Y5HTID7.js");
+    const { GSAP_CDN } = await import("./dist-4JZWRWS6.js");
     const bootstrap = [
       `<script src="${GSAP_CDN}"></script>`,
       "<script>",
@@ -7155,7 +6974,7 @@ function clipRetimeOf(mutation) {
 function retimeRun(script, run, root) {
   const live = run.filter((slot) => slot !== "no-op");
   const retimed = retimeClipTweensInScript(script, live, root);
-  const synced = syncPositionHoldsBeforeKeyframes(retimed.script);
+  const synced = syncPositionHoldsBeforeKeyframes(retimed.script, script);
   let next = 0;
   const changed = run.map((slot) => slot !== "no-op" && retimed.changed[next++]);
   if (synced !== retimed.script) changed[changed.length - 1] = true;
@@ -7949,7 +7768,7 @@ async function processUploadedFiles(formData, targetDir, projectDir) {
       finalName = `${base} (${n})${ext}`;
       finalPath = resolve22(targetDir, finalName);
     }
-    if (!isSafePath(projectDir, finalPath)) continue;
+    if (!isSafePath(projectDir, finalPath) || isPrivateProjectFile(projectDir, finalPath)) continue;
     const buffer = Buffer.from(await value.arrayBuffer());
     const validation = validateUploadedMediaBuffer(finalName, buffer);
     if (!validation.ok) {
@@ -9101,15 +8920,17 @@ var GSAP_CDN_FALLBACK_SCRIPT = `<script ${GSAP_FALLBACK_ATTR}>
     if(loaded[file])return loaded[file];
     return loaded[file]=new Promise(function(ok,fail){
       var s=document.createElement("script");
-      s.src=cdnBase+file;s.onload=ok;s.onerror=fail;
+      s.src=cdnBase+file;s.hfGsapFallback=true;s.onload=ok;s.onerror=fail;
       document.head.appendChild(s);
     });
   }
   document.addEventListener("error",function(e){
     var t=e.target;
-    if(!t||t.tagName!=="SCRIPT"||!t.src)return;
+    if(!t||t.tagName!=="SCRIPT"||!t.src||t.hfGsapFallback)return;
     var m=t.src.match(/gsap[^/]*\\/dist\\/(.+\\.js)/);
-    if(m)loadFallback(m[1]);
+    if(m)loadFallback(m[1]).catch(function(){
+      reportError(new Error("GSAP could not load from "+t.src+" or "+cdnBase+m[1]+", so this preview's animations will not play."));
+    });
   },true);
 })();
 </script>`;
@@ -9141,8 +8962,13 @@ function previewVariablesFromRequest(rawVariables) {
   return { raw: rawVariables, values: parse22.values };
 }
 var PREVIEW_CAPTURE_PARAM = "hf-capture";
+var EARLY_ERRORS_SCRIPT = `<script>(function(){var seen=window.${STUDIO_PREVIEW_ERRORS}=[];
+addEventListener("error",function(e){seen.push(e.message||String(e))});})();</script>`;
 function injectStudioPreviewAugmentations(html, adapter, projectDir, activeCompositionPath, capture) {
-  const marked = capture ? html : injectTagsAtHeadStart(lazyPreviewImages(html), `<meta name="${STUDIO_PREVIEW_MARK_META}">`);
+  const marked = capture ? html : injectTagsAtHeadStart(
+    lazyPreviewImages(html),
+    `<meta name="${STUDIO_PREVIEW_MARK_META}">${EARLY_ERRORS_SCRIPT}`
+  );
   return injectStudioMotionScript(
     injectMotionPathPluginIfNeeded(
       injectGsapCdnFallback(
@@ -9363,7 +9189,7 @@ ${etag}`;
     const subPath = requestSubPath(c.req.url, "projects/:id/preview");
     const candidate = resolve42(project.dir, subPath);
     const file = isWithinProjectRoot(project.dir, candidate) ? candidate : null;
-    if (!file) {
+    if (!file || isPrivateProjectFile(project.dir, file)) {
       return c.text("not found", 404);
     }
     recordPreviewRead(project.dir, file);
@@ -9634,6 +9460,13 @@ function registerRenderRoutes(api, adapter) {
     ".mov": "video/quicktime"
   };
   const RENDER_EXTENSIONS = Object.keys(RENDER_MIME);
+  const isPlainFile = (path) => {
+    try {
+      return lstatSync32(path).isFile();
+    } catch {
+      return false;
+    }
+  };
   function renderContentType(filePath) {
     const ext = RENDER_EXTENSIONS.find((e) => filePath.endsWith(e));
     return (ext && RENDER_MIME[ext]) ?? "video/mp4";
@@ -9641,7 +9474,7 @@ function registerRenderRoutes(api, adapter) {
   api.get("/render/:jobId/view", (c) => {
     const { jobId } = c.req.param();
     const job = renderJobs.get(jobId);
-    if (!job?.outputPath || !existsSync6(job.outputPath)) {
+    if (!job?.outputPath || !isPlainFile(job.outputPath)) {
       return c.json({ error: "not found" }, 404);
     }
     const contentType = renderContentType(job.outputPath);
@@ -9659,7 +9492,7 @@ function registerRenderRoutes(api, adapter) {
   api.get("/render/:jobId/download", (c) => {
     const { jobId } = c.req.param();
     const job = renderJobs.get(jobId);
-    if (!job?.outputPath || !existsSync6(job.outputPath)) {
+    if (!job?.outputPath || !isPlainFile(job.outputPath)) {
       return c.json({ error: "not found" }, 404);
     }
     const contentType = renderContentType(job.outputPath);
@@ -9694,7 +9527,7 @@ function registerRenderRoutes(api, adapter) {
     if (!filename) return c.json({ error: "missing filename" }, 400);
     const rendersDir = adapter.rendersDir(project);
     const fp = resolveWithinProject(rendersDir, filename);
-    if (!fp) return c.json({ error: "forbidden" }, 403);
+    if (!fp || isPrivateProjectFile(project.dir, fp)) return c.json({ error: "forbidden" }, 403);
     if (!existsSync6(fp)) return c.json({ error: "not found" }, 404);
     const contentType = renderContentType(fp);
     const content = readFileSync8(fp);
@@ -9712,8 +9545,10 @@ function registerRenderRoutes(api, adapter) {
     if (!project) return c.json({ error: "not found" }, 404);
     const rendersDir = adapter.rendersDir(project);
     if (!existsSync6(rendersDir)) return c.json({ renders: [] });
-    const files = readdirSync32(rendersDir).filter((f) => f.endsWith(".mp4") || f.endsWith(".webm") || f.endsWith(".mov")).map((f) => {
-      const fp = join10(rendersDir, f);
+    const files = readdirSync32(rendersDir).filter((f) => f.endsWith(".mp4") || f.endsWith(".webm") || f.endsWith(".mov")).flatMap((f) => {
+      const fp = resolveWithinProject(rendersDir, f);
+      return fp && !isPrivateProjectFile(project.dir, fp) ? [{ f, fp }] : [];
+    }).map(({ f, fp }) => {
       const stat22 = statSync5(fp);
       const rid = f.replace(/\.(mp4|webm|mov)$/, "");
       const metaPath = join10(rendersDir, `${rid}.meta.json`);
@@ -9732,6 +9567,7 @@ function registerRenderRoutes(api, adapter) {
       return {
         id: rid,
         filename: f,
+        path: fp,
         size: stat22.size,
         createdAt: stat22.mtimeMs,
         status,
@@ -9745,12 +9581,12 @@ function registerRenderRoutes(api, adapter) {
           id: file.id,
           status: file.status,
           progress: 100,
-          outputPath: join10(rendersDir, file.filename),
+          outputPath: file.path,
           createdAt: file.createdAt
         });
       }
     }
-    return c.json({ renders: files });
+    return c.json({ renders: files.map(({ path: _path, ...render }) => render) });
   });
 }
 var ThumbnailGenerationCoordinator = class {
@@ -11527,8 +11363,6 @@ export {
   getElementScreenshotClip,
   clearElementScreenshotIsolation,
   injectMediaCodecMapIntoHtml,
-  STUDIO_MOTION_PATH,
-  createStudioMotionRenderBodyScript,
   MIME_TYPES,
   getMimeType,
   buildSubCompositionHtml,