@hraness/slopcamera 3.8.0 → 3.8.1

package/apps/desktop/application/html-overlay-integrity.ts

@@ -24,6 +24,9 @@ import {
 } from "./html-overlay-browser-runtime";
 
 const Sha256Schema = z.string().regex(/^[a-f0-9]{64}$/u);
+const ExecutionContractVersionSchema = z.union([z.literal(1), z.literal(2)]);
+export type HtmlOverlayExecutionContractVersion = z.infer<typeof ExecutionContractVersionSchema>;
+
 const IntegrityLeafSchema = z.strictObject({
   key: z.string().min(1).max(512),
   sha256: Sha256Schema,
@@ -44,7 +47,7 @@ export const HtmlOverlayExecutionIntegritySchema = z.strictObject({
   }),
   rootSha256: Sha256Schema,
   runtimeSha256: Sha256Schema,
-  schemaVersion: z.literal(1),
+  schemaVersion: ExecutionContractVersionSchema,
 });
 export type HtmlOverlayExecutionIntegrity = Readonly<
   z.infer<typeof HtmlOverlayExecutionIntegritySchema>
@@ -185,7 +188,7 @@ function legacyHtmlOverlayRendererContract(profileInput?: HtmlOverlayExecutionPr
 }
 
 /** Fetch opt-in grants only the exact declared private paths and changes execution identity. */
-export function htmlOverlayRendererContract(
+function historicalHtmlOverlayRendererContract(
   profileInput?: HtmlOverlayExecutionProfile,
   resourcesInput: readonly HtmlOverlayDeclaredResource[] = [],
 ) {
@@ -204,6 +207,25 @@ export function htmlOverlayRendererContract(
   });
 }
 
+/** Historical receipts select v1 explicitly; all new execution binds clone prevention. */
+export function htmlOverlayRendererContract(
+  profileInput?: HtmlOverlayExecutionProfile,
+  resourcesInput: readonly HtmlOverlayDeclaredResource[] = [],
+  version: HtmlOverlayExecutionContractVersion = 2,
+) {
+  const contract = historicalHtmlOverlayRendererContract(profileInput, resourcesInput);
+  if (ExecutionContractVersionSchema.parse(version) === 1) return contract;
+  return Object.freeze({
+    ...contract,
+    launch: Object.freeze({
+      ...contract.launch,
+      args: Object.freeze(contract.launch.args.map(argument => argument.startsWith("--disable-features=")
+        ? `${argument},PaintHolding,MacAppCodeSignClone` : argument)),
+    }),
+    schemaVersion: 4,
+  });
+}
+
 export function assertHtmlOverlayExecutionProfileLibraries(
   libraries: readonly string[], profile?: HtmlOverlayExecutionProfile,
 ): void {
@@ -258,6 +280,7 @@ export function createHtmlOverlayExecutionBundle(
   authoringInput: HtmlOverlayAuthoringInput,
   browserRuntimeInput: HtmlOverlayBrowserRuntimeBinding,
   executionProfile?: HtmlOverlayExecutionProfile,
+  contractVersion: HtmlOverlayExecutionContractVersion = 2,
 ): HtmlOverlayExecutionBundle {
   const authoring = HtmlOverlayAuthoringInputSchema.parse(authoringInput);
   assertHtmlOverlayExecutionProfileLibraries(authoring.libraries, executionProfile);
@@ -290,7 +313,7 @@ export function createHtmlOverlayExecutionBundle(
       },
     },
     { key: "browser-runtime", value: browserRuntime },
-    { key: "renderer-contract", value: htmlOverlayRendererContract(executionProfile, authoring.resources) },
+    { key: "renderer-contract", value: htmlOverlayRendererContract(executionProfile, authoring.resources, contractVersion) },
     {
       key: "document",
       value: {
@@ -326,7 +349,7 @@ export function createHtmlOverlayExecutionBundle(
     leaves,
     rootSha256: merkleRoot(leaves),
     runtimeSha256,
-    schemaVersion: 1,
+    schemaVersion: contractVersion,
   });
   return Object.freeze({
     importMap,

package/apps/desktop/application/operation.ts

@@ -4,7 +4,7 @@ import type { z } from "zod";
 
 import type { ApplicationContext } from "./context";
 
-export const SLOPCAMERA_APPLICATION_TOOL_VERSION = "slopcamera-3.8.0" as const;
+export const SLOPCAMERA_APPLICATION_TOOL_VERSION = "slopcamera-3.8.1" as const;
 
 export const OPERATION_KINDS = [
   "scene.audit",

package/apps/desktop/application/operations/spatial-render.ts

@@ -381,7 +381,7 @@ export async function recoverSpatialRenderOutput(application: ApplicationContext
       mode: plan.request.mode, frameRate: plan.request.selection.kind === "video" ? plan.request.selection.frameRate : { numerator: 1, denominator: 1 }, preparedAssets: batch.preparedAssets });
     equal(batch.metadata, expectedBatch.metadata, "Spatial batch metadata differs from the exact scene samples.");
     equal(batch.metadataSha256, expectedBatch.metadataSha256, "Spatial batch metadata digest is invalid.");
-    const execution = createHtmlOverlayExecutionBundle(expectedBatch.authoring, input.browserRuntime, plan.request.executionProfile);
+    const execution = createHtmlOverlayExecutionBundle(expectedBatch.authoring, input.browserRuntime, plan.request.executionProfile, batch.executionIntegrity.schemaVersion);
     assertHtmlOverlayGpuEvidenceProfile(plan.request.executionProfile, batch.gpuEvidence);
     equal(batch.gpuEvidence, receipt.runtime.gpuEvidence, "Spatial batch hardware identity differs from its completion receipt.");
     equal(batch.executionIntegrity, execution.integrity, "Spatial batch execution integrity differs from its exact authored runtime.");

package/apps/desktop/cli/commands.ts

@@ -365,7 +365,7 @@ import {
   workflowRunStore,
 } from "./workflow-runs";
 
-export const SLOPCAMERA_VERSION = "3.8.0";
+export const SLOPCAMERA_VERSION = "3.8.1";
 
 // Legacy direct renders predate per-target output contracts. Keep them
 // bounded generously enough for long-form production while preventing one