music, extracted from the platform into its own repository

Everything the plugin is, moved out of officerdev/platform on 2026-08-15 —
41 files, unchanged from the tree they left.

  manifest.ts   identity, one permission, ffmpeg/ffprobe declared
  api/          the sidecar proxy; the prefix comes from mountPrefix()
  sidecar/      the whole /api/music contract — indexing, streaming, per-user state
  db/           music_favorites, _playlists, _playlist_items, _now_playing
  web/          panels, layout, and the player: engine, bar, lyrics, favourites
  cliamp/       the second playback path, parked — not working, kept deliberately
  widgets/      the dashboard widget, parked — plugins cannot contribute widgets
  assets/       icon.png, the dock tile
  scripts/      the reindex CLI

PLUGIN.md is the design record: what moved, what stayed, what broke, and why.
MUSIC_API.md is the contract the phone and tablet apps speak, and the reason
the sidecar's HTTP shape is not free to change.

── It does not build here, and that is the point ──

The platform resolves `hooks/useClient`, `officerdev`, `officerdb/db` and `@@/*`
through the workspace links in its own node_modules. Measured from this
directory, outside the platform checkout, every one of them fails to resolve —
7 imports in the backend, ~29 in the frontend.

So this repository is the source of truth, not yet a buildable unit. Making it
one means the host API becoming something a plugin can depend on rather than
something it reaches into. That is the next problem, and having the code here
is what makes it unavoidable rather than theoretical.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>

web/player-time.ts

@@ -0,0 +1,42 @@
+/**
+ * Playback position, published outside React.
+ *
+ * The lyrics pane no longer lives in the player's subtree — it renders in a panel of the /music
+ * workspace — so the position has to cross the tree. It cannot cross as state: the engine reports a new
+ * position every animation frame, and a shared state channel would re-render every consumer 60× a
+ * second. Instead the host pushes into this module and subscribers decide for themselves what is worth
+ * a render (the lyrics pane only re-renders when the ACTIVE LINE changes, roughly once a line).
+ *
+ * Seek travels the other way for the same reason: the engine is the host's, but a click on a lyric line
+ * has to reach it.
+ */
+let position = 0;
+let duration = 0;
+const subscribers = new Set<(sec: number, dur: number) => void>();
+let seekFn: ((sec: number) => void) | null = null;
+
+export const publishPlayerTime = (sec: number, dur: number): void => {
+  position = sec;
+  duration = dur;
+  for (const fn of subscribers) fn(sec, dur);
+};
+
+/** Latest values, for a subscriber that mounts mid-track. */
+export const getPlayerTime = (): number => position;
+export const getPlayerDuration = (): number => duration;
+
+export const subscribePlayerTime = (fn: (sec: number, dur: number) => void): (() => void) => {
+  subscribers.add(fn);
+  return () => {
+    subscribers.delete(fn);
+  };
+};
+
+export const registerPlayerSeek = (fn: (sec: number) => void): (() => void) => {
+  seekFn = fn;
+  return () => {
+    if (seekFn === fn) seekFn = null;
+  };
+};
+
+export const seekPlayer = (sec: number): void => seekFn?.(sec);