mirror of https://github.com/heygen-com/hyperframes.git synced 2026-11-14 21:29:34 +00:00

Files

T

Vance IngallsandClaude Fable 5 d9368ec051 fix(core): address PR feedback — ReDoS-safe slug trim, getVariables cleanups

- slugify: replace the anchored alternated trim regex (/^-+|-+$/g) with a
  character-scan trim — CodeQL js/polynomial-redos blocker.
- readRenderOverrides: fold the readOverrides wrapper into the exported
  function (one name, no pass-through).
- getVariables: deduplicate declarers with a Set, matching
  injectCompositionCssVariables.
- Move the tokenSlug import to the top of the file.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

2026-07-08 02:34:18 -07:00

adapters

fix(producer): suppress GSAP call side effects during render seeks (#2037 )

2026-07-07 21:06:59 -04:00

analytics.test.ts

refactor(core): simplify packages/core — dead code, dedup, type safety (#1413 )

2026-06-13 18:23:36 -04:00

analytics.ts

fix(sdk): moveElement survives GSAP animation per-axis via runtime delta translate (#1875 )

2026-07-03 20:44:27 -07:00

bridge.test.ts

fix(slideshow): harden media controls in present decks (#1619 )

2026-06-20 23:35:58 -07:00

bridge.ts

fix(slideshow): harden media controls in present decks (#1619 )

2026-06-20 23:35:58 -07:00

captionOverrides.test.ts

fix: make caption overrides refresh-safe (#609 )

2026-05-03 23:29:16 -07:00

captionOverrides.ts

fix: make caption overrides refresh-safe (#609 )

2026-05-03 23:29:16 -07:00

clipTree.test.ts

feat(studio): instant, flicker-free manual editing (#1605 )

2026-06-22 01:21:18 -04:00

clipTree.ts

feat(studio): instant, flicker-free manual editing (#1605 )

2026-06-22 01:21:18 -04:00

clock-drift.test.ts

feat(runtime): single-clock transport — eliminate pause/play audio drift (#671 )

2026-05-08 07:53:46 +02:00

clock.test.ts

fix(player): correct playback rate for direct-timeline and audio-clock paths (#849 )

2026-05-14 16:34:38 -07:00

clock.ts

fix(player): correct playback rate for direct-timeline and audio-clock paths (#849 )

2026-05-14 16:34:38 -07:00

colorGrading.test.ts

fix(runtime): satisfy color grading audit

2026-07-06 12:49:34 -07:00

colorGrading.ts

fix(runtime): satisfy color grading audit

2026-07-06 12:49:34 -07:00

compositionLoader.test.ts

fix: producer render diverges from preview for sub-composition root styling (#1886 )

2026-07-03 12:08:17 -07:00

compositionLoader.ts

fix(core,cli,lint): close the figma brand-token loop — runtime CSS variables, --name, snippet lint

2026-07-08 00:47:13 -07:00

diagnostics.test.ts

feat(runtime): swallow() helper replaces empty catches in inlined runtime

2026-05-06 23:53:21 +00:00

diagnostics.ts

refactor(core): simplify packages/core — dead code, dedup, type safety (#1413 )

2026-06-13 18:23:36 -04:00

entry.ts

feat(core,cli,engine,producer): add getVariables() helper and --variables render flag

2026-05-03 00:18:13 +00:00

flattenedRoot.ts

fix(core,cli,lint): close the figma brand-token loop — runtime CSS variables, --name, snippet lint

2026-07-08 00:47:13 -07:00

getVariables.test.ts

fix(core,cli,lint): close the figma brand-token loop — runtime CSS variables, --name, snippet lint

2026-07-08 00:47:13 -07:00

getVariables.ts

fix(core): address PR feedback — ReDoS-safe slug trim, getVariables cleanups

2026-07-08 02:34:18 -07:00

globals.ts

refactor(core): simplify packages/core — dead code, dedup, type safety (#1413 )

2026-06-13 18:23:36 -04:00

init.test.ts

fix(producer): suppress GSAP call side effects during render seeks (#2037 )

2026-07-07 21:06:59 -04:00

init.ts

fix(core,cli,lint): close the figma brand-token loop — runtime CSS variables, --name, snippet lint

2026-07-08 00:47:13 -07:00

media.test.ts

fix(core): mute preview audio per-element so a slow-decoding track isn't silenced (#1602 )

2026-06-19 20:16:19 -04:00

media.ts

perf(producer): skip wasted Chrome media work + injector page.evaluates during render (#1651 )

2026-06-22 17:12:28 -07:00

mediaVolumeEnvelope.ts

fix(core): apply renderer volume-automation solution to preview (#1118 )

2026-05-29 10:10:12 -04:00

picker.test.ts

feat: cache shader transition preview frames (#634 )

2026-05-06 01:25:09 -07:00

picker.ts

fix(core,studio): escape user values in querySelector attribute selectors

2026-06-19 15:47:28 -04:00

player.test.ts

fix(producer): suppress GSAP call side effects during render seeks (#2037 )

2026-07-07 21:06:59 -04:00

player.ts

fix(producer): suppress GSAP call side effects during render seeks (#2037 )

2026-07-07 21:06:59 -04:00

positionEdits.test.ts

fix(sdk): moveElement survives GSAP animation per-axis via runtime delta translate (#1875 )

2026-07-03 20:44:27 -07:00

positionEdits.ts

fix(sdk): moveElement survives GSAP animation per-axis via runtime delta translate (#1875 )

2026-07-03 20:44:27 -07:00

README.md

fix(runtime,player): replay bridge state on iframe ready to repair race

2026-06-09 12:22:27 -07:00

startExpression.ts

fix(engine): resolve relative data-start references in video-frame extraction

2026-07-07 18:11:21 -04:00

startResolver.test.ts

fix: producer render diverges from preview for sub-composition root styling (#1886 )

2026-07-03 12:08:17 -07:00

startResolver.ts

fix(engine): resolve relative data-start references in video-frame extraction

2026-07-07 18:11:21 -04:00

state.test.ts

fix(slideshow): harden media controls in present decks (#1619 )

2026-06-20 23:35:58 -07:00

state.ts

fix(slideshow): harden media controls in present decks (#1619 )

2026-06-20 23:35:58 -07:00

timeline.test.ts

feat(studio): instant, flicker-free manual editing (#1605 )

2026-06-22 01:21:18 -04:00

timeline.ts

refactor: make @hyperframes/lint depend only on parsers (#1773 )

2026-06-27 13:51:21 -04:00

types.ts

fix(producer): suppress GSAP call side effects during render seeks (#2037 )

2026-07-07 21:06:59 -04:00

validateVariables.test.ts

fix(sdk): code-review follow-ups (WS-B/C/3.C, #1569/#1570/#1572) (#1588 )

2026-06-19 00:07:53 -07:00

validateVariables.ts

fix(sdk): code-review follow-ups (WS-B/C/3.C, #1569/#1570/#1572) (#1588 )

2026-06-19 00:07:53 -07:00

webAudioTransport.test.ts

fix(core): mute preview audio per-element so a slow-decoding track isn't silenced (#1602 )

2026-06-19 20:16:19 -04:00

webAudioTransport.ts

fix(core): mute preview audio per-element so a slow-decoding track isn't silenced (#1602 )

2026-06-19 20:16:19 -04:00

window.d.ts

fix(producer): suppress GSAP call side effects during render seeks (#2037 )

2026-07-07 21:06:59 -04:00

README.md

Hyperframe Runtime Engine

This folder owns the runtime that powers preview and producer parity.

Current Direction

Runtime source of truth is converging on hyperframe.ts.
Build produces:
- dist/hyperframe.runtime.iife.js (browser bootstrap)
- dist/hyperframe.runtime.mjs (tooling/tests)
- dist/hyperframe.manifest.json (version + sha256 + artifact map)
FE owns iframe runtime injection.
BE persists raw generated HTML without injecting runtime scripts.
Producer validates pinned runtime checksum from manifest before render.

Runtime Contract (Stable Surface)

Globals:

window.__player
window.__playerReady
window.__renderReady
window.__timelines
window.__clipManifest

postMessage:

parent -> runtime control:
- source: "hf-parent"
- type: "control"
- actions: play, pause, seek, set-muted, set-playback-rate, enable-pick-mode, disable-pick-mode
runtime -> parent events:
- source: "hf-preview"
- type: "state" and type: "timeline"
- type: "ready" — emitted once when installRuntimeControlBridge registers the control-message listener. The parent uses it to replay current playback state (set-muted, set-volume, set-playback-rate) so any control message sent before the listener was installed isn't lost. Emitted again on every iframe reload because the new runtime instance starts with no state.

Determinism baseline:

renderSeek is the producer-canonical seek path.
30fps quantization and readiness gates are correctness requirements.

Build

bun run --filter @hyperframes/core build:hyperframes-runtime

Security Expectations

Runtime bootstrap URL must be version-pinned and host-allowlisted.
Iframe bridge payloads must be schema-validated.
Unsafe URL schemes (javascript: and unapproved data:) are rejected.
Fail closed if runtime bootstrap/handshake is not healthy.

Product Editing Model

Primary mode: prompt + element picking.
Secondary mode: manual precision controls.
Avoid timeline-first manual workflows as default product path.