A local-first browser video editor. Imported media, project state, captions and renders stay on the device. The app has no analytics, cloud sync or application server.
Live: https://aeiouvcode.github.io/frameforge-studio/
Timeline editing with magnetic snapping, ripple delete, split, frame nudging (, .), slip ([ ], moves the source window inside a fixed clip), roll (Alt+[ ], moves a shared edit point, crossfade overlaps preserved) and slide (Ctrl+[ ], moves a clip between its neighbours, which absorb the change). Shift steps by 10 frames. The Inspector has a Slip / Roll / Slide mode switch with frame steppers for touch.
FrameForge is a JavaScript shell around a native core written in Zig and compiled to WebAssembly.
- Shell (JavaScript): interface, timeline model, storage, vault, WebCodecs/MediaRecorder export.
- Core (Zig → WASM,
core/): per-pixel and per-sample kernels. v1 ships 3D LUT grading and exact waveform peaks; the scope histogram kernel is built but stays on JS because it measured at parity. - Every kernel lands behind a parity test against the JS path (
core/test/parity.mjs) and a pinned SHA-256. If the core fails to load or verify, the JS path runs unchanged.
Rebuild the core with Zig 0.16.x: sh core/build.sh.
Python 3:
python3 -m http.server 4173 --bind 127.0.0.1Open http://127.0.0.1:4173/.
Node.js:
npx --yes serve -l 4173 .Use the Python command when you do not want npx to download anything. Do not expose this server on 0.0.0.0 unless you intentionally want other devices on the network to reach it.
- Local-only IndexedDB and Origin Private File System storage
- Strict Content Security Policy: same-origin connections only (the app's own vendored assets); no forms, frames, plugins or base URL changes
- Blob/data media only
- Context-correct HTML escaping for imported names and captions
- Input size/type validation
- No API keys or secrets
The hosted GitHub Pages copy is the same static client. Pages serves files only; editing and storage remain in the browser.
The bundle vendors ONNX Runtime Web and the Silero VAD ONNX model under vendor/. vendor/SHA256SUMS records every shipped runtime/model asset. No CDN is used. WebAssembly requires the narrow CSP capability wasm-unsafe-eval; ordinary JavaScript eval remains blocked. The first analysis can take longer while local model files are read and compiled.