@hraness/slopcamera 3.8.0 → 3.9.0

package/apps/desktop/application/html-overlay-integrity.ts

@@ -24,6 +24,9 @@ import {
 } from "./html-overlay-browser-runtime";
 
 const Sha256Schema = z.string().regex(/^[a-f0-9]{64}$/u);
+const ExecutionContractVersionSchema = z.union([z.literal(1), z.literal(2)]);
+export type HtmlOverlayExecutionContractVersion = z.infer<typeof ExecutionContractVersionSchema>;
+
 const IntegrityLeafSchema = z.strictObject({
   key: z.string().min(1).max(512),
   sha256: Sha256Schema,
@@ -44,7 +47,7 @@ export const HtmlOverlayExecutionIntegritySchema = z.strictObject({
   }),
   rootSha256: Sha256Schema,
   runtimeSha256: Sha256Schema,
-  schemaVersion: z.literal(1),
+  schemaVersion: ExecutionContractVersionSchema,
 });
 export type HtmlOverlayExecutionIntegrity = Readonly<
   z.infer<typeof HtmlOverlayExecutionIntegritySchema>
@@ -185,7 +188,7 @@ function legacyHtmlOverlayRendererContract(profileInput?: HtmlOverlayExecutionPr
 }
 
 /** Fetch opt-in grants only the exact declared private paths and changes execution identity. */
-export function htmlOverlayRendererContract(
+function historicalHtmlOverlayRendererContract(
   profileInput?: HtmlOverlayExecutionProfile,
   resourcesInput: readonly HtmlOverlayDeclaredResource[] = [],
 ) {
@@ -204,6 +207,25 @@ export function htmlOverlayRendererContract(
   });
 }
 
+/** Historical receipts select v1 explicitly; all new execution binds clone prevention. */
+export function htmlOverlayRendererContract(
+  profileInput?: HtmlOverlayExecutionProfile,
+  resourcesInput: readonly HtmlOverlayDeclaredResource[] = [],
+  version: HtmlOverlayExecutionContractVersion = 2,
+) {
+  const contract = historicalHtmlOverlayRendererContract(profileInput, resourcesInput);
+  if (ExecutionContractVersionSchema.parse(version) === 1) return contract;
+  return Object.freeze({
+    ...contract,
+    launch: Object.freeze({
+      ...contract.launch,
+      args: Object.freeze(contract.launch.args.map(argument => argument.startsWith("--disable-features=")
+        ? `${argument},PaintHolding,MacAppCodeSignClone` : argument)),
+    }),
+    schemaVersion: 4,
+  });
+}
+
 export function assertHtmlOverlayExecutionProfileLibraries(
   libraries: readonly string[], profile?: HtmlOverlayExecutionProfile,
 ): void {
@@ -258,6 +280,7 @@ export function createHtmlOverlayExecutionBundle(
   authoringInput: HtmlOverlayAuthoringInput,
   browserRuntimeInput: HtmlOverlayBrowserRuntimeBinding,
   executionProfile?: HtmlOverlayExecutionProfile,
+  contractVersion: HtmlOverlayExecutionContractVersion = 2,
 ): HtmlOverlayExecutionBundle {
   const authoring = HtmlOverlayAuthoringInputSchema.parse(authoringInput);
   assertHtmlOverlayExecutionProfileLibraries(authoring.libraries, executionProfile);
@@ -290,7 +313,7 @@ export function createHtmlOverlayExecutionBundle(
       },
     },
     { key: "browser-runtime", value: browserRuntime },
-    { key: "renderer-contract", value: htmlOverlayRendererContract(executionProfile, authoring.resources) },
+    { key: "renderer-contract", value: htmlOverlayRendererContract(executionProfile, authoring.resources, contractVersion) },
     {
       key: "document",
       value: {
@@ -326,7 +349,7 @@ export function createHtmlOverlayExecutionBundle(
     leaves,
     rootSha256: merkleRoot(leaves),
     runtimeSha256,
-    schemaVersion: 1,
+    schemaVersion: contractVersion,
   });
   return Object.freeze({
     importMap,

package/apps/desktop/application/operation.ts

@@ -4,7 +4,7 @@ import type { z } from "zod";
 
 import type { ApplicationContext } from "./context";
 
-export const SLOPCAMERA_APPLICATION_TOOL_VERSION = "slopcamera-3.8.0" as const;
+export const SLOPCAMERA_APPLICATION_TOOL_VERSION = "slopcamera-3.9.0" as const;
 
 export const OPERATION_KINDS = [
   "scene.audit",

package/apps/desktop/application/operations/spatial-render.ts

@@ -381,7 +381,7 @@ export async function recoverSpatialRenderOutput(application: ApplicationContext
       mode: plan.request.mode, frameRate: plan.request.selection.kind === "video" ? plan.request.selection.frameRate : { numerator: 1, denominator: 1 }, preparedAssets: batch.preparedAssets });
     equal(batch.metadata, expectedBatch.metadata, "Spatial batch metadata differs from the exact scene samples.");
     equal(batch.metadataSha256, expectedBatch.metadataSha256, "Spatial batch metadata digest is invalid.");
-    const execution = createHtmlOverlayExecutionBundle(expectedBatch.authoring, input.browserRuntime, plan.request.executionProfile);
+    const execution = createHtmlOverlayExecutionBundle(expectedBatch.authoring, input.browserRuntime, plan.request.executionProfile, batch.executionIntegrity.schemaVersion);
     assertHtmlOverlayGpuEvidenceProfile(plan.request.executionProfile, batch.gpuEvidence);
     equal(batch.gpuEvidence, receipt.runtime.gpuEvidence, "Spatial batch hardware identity differs from its completion receipt.");
     equal(batch.executionIntegrity, execution.integrity, "Spatial batch execution integrity differs from its exact authored runtime.");

package/apps/desktop/cli/capability-manifest.ts

@@ -127,8 +127,12 @@ const capabilityModules = Object.freeze([
       { effect: "local-read", name: "diagram sheets check" },
       { effect: "local-derived-write", name: "diagram sheets render" },
       { effect: "local-derived-write", name: "image vectorize" },
+      { effect: "local-derived-write", name: "image icon compose" },
+      { effect: "local-derived-write", name: "image icon render" },
+      { effect: "local-derived-write", name: "media soundtrack compose" },
+      { effect: "local-derived-write", name: "media soundtrack grid" },
     ],
-    description: "Portable diagrams, CLI/SDK drawing sheets, local vectorization, and the bounded semantic operation projection.",
+    description: "Portable diagrams, CLI/SDK drawing sheets, local vectorization, deterministic icon scenes and soundtrack beat grids, and the bounded semantic operation projection.",
     moduleId: "slopcamera.capability.diagram-image",
     operationKeys: diagramImageOperations,
     profiles: [{
@@ -139,7 +143,16 @@ const capabilityModules = Object.freeze([
     }],
     stability: "stable",
     title: "Diagrams and images",
-    toolNames: ["check_diagram", "execute_slopcamera", "render_diagram", "search_slopcamera"],
+    toolNames: [
+      "check_diagram",
+      "compose_icon",
+      "compose_soundtrack",
+      "derive_soundtrack_grid",
+      "execute_slopcamera",
+      "render_diagram",
+      "render_icon",
+      "search_slopcamera",
+    ],
     trust: "portable",
     version: 1,
     workflowKeys: [],

package/apps/desktop/cli/commands.ts

@@ -365,7 +365,7 @@ import {
   workflowRunStore,
 } from "./workflow-runs";
 
-export const SLOPCAMERA_VERSION = "3.8.0";
+export const SLOPCAMERA_VERSION = "3.9.0";
 
 // Legacy direct renders predate per-target output contracts. Keep them
 // bounded generously enough for long-form production while preventing one

package/apps/desktop/cli/help.ts

@@ -37,7 +37,7 @@ Commands:
                                  Discover and run Vercel AI Gateway media models
   credits status|topup|wait|forget
                                  Buy and inspect hosted generation credits
-  media audio|color              Apply local non-destructive audio and video effects
+  media audio|color|soundtrack   Apply local audio and video effects; derive soundtrack beat grids
   outputs                        Print the agent outputs directory
   outputs list|open|reveal       List the newest outputs or open one on this Mac
   status                         What Slopcamera is doing, credits and newest outputs
@@ -293,6 +293,10 @@ compliance. Drawing sheets are exposed through this CLI and the root SDK, not co
   slopcamera image icon --set <file.json> --output-dir <directory>
         [--context <card|hero|inline>] [--candidates <1-4>]
         [--set-rounds <1-4>] [--keep-raster] [--json]
+  slopcamera image icon compose <source.json> [--output <file.json>] [--json]
+  slopcamera image icon render <source.json> --output <file.svg> [--recipe <file.json>]
+        [--size <16-1024>] [--background] [--palette <original|ink|earth|night>]
+        [--language <language>] [--json]
 
 Explicit --output file commands delegate to @hraness/slopcamera. Vectorization is local,
 bounded, checksum-pinned, and emits inert SVG. File generation uses Vercel AI Gateway with the
@@ -308,7 +312,13 @@ variation axes or an explicit candidate list — keeps every candidate with its
 composes a labelled contact sheet plus receipt for agent review. Texture cells repeat the
 candidate 2×2 so seams are inspectable (--tile/--no-tile overrides). It never replaces existing
 outputs and never promotes a candidate into authored source; review the sheet and select
-explicitly.`,
+explicitly.
+
+Icon compose and render are local and deterministic, with no model or network. They solve and
+draw icon.place scenes, collections, construction programs, and recipes into inert SVG; a recipe
+replays only when its recorded digests match. Construction-program languages: outline, sketch,
+pen, crosshatch, engraving, stipple, halftone, glyph, flat, shaded, figure, cutpaper, woodcut,
+offset.`,
   style: `Usage:
   slopcamera style list [--json]
   slopcamera style show <id> [--json]
@@ -616,6 +626,15 @@ argv, receipts, or logs. When a configured wallet runs out, paid calls fail with
         [--output <relative-path>] [--json]
   slopcamera media color <video-path> [grade] [--video-stream <index>]
         [--output <relative-path>] [--json]
+  slopcamera media soundtrack compose <score> [--output <file.json>]
+        [--format <compose|song|json|midi>] [--json]
+  slopcamera media soundtrack grid <score> [--output <file.json>] [--start-us <n>]
+        [--format <compose|song|json|midi>] [--json]
+
+Soundtrack verbs delegate to @hraness/slopcamera. They verify a Soundfish loop or song (compose
+text, song text, score JSON, or a Standard MIDI file) and derive the {bpm, beatOffsetUs,
+beatsPerBar} music timing that HTML scene requests accept, plus section cue times. They render
+no audio; pair the grid with the track you mix.
 
 Audio effects may be combined in one deterministic chain:
   --volume-db <-60..24>
@@ -725,7 +744,7 @@ export function completions(words: readonly string[]): readonly string[] {
   if (command === "diagram") return words[1] === "sheets"
     ? ["init", "check", "render"]
     : ["init", "check", "render", "sheets"];
-  if (command === "image") return ["vectorize", "generate", "gallery", "icon"];
+  if (command === "image") return words[1] === "icon" ? ["compose", "render"] : ["vectorize", "generate", "gallery", "icon"];
   if (command === "workflows") return ["list", "show", "plan", "run"];
   if (command === "code") return ["init", "check", "plan", "run"];
   if (command === "runs") return ["list", "show", "resume", "approve", "cancel"];
@@ -748,7 +767,7 @@ export function completions(words: readonly string[]): readonly string[] {
   if (command === "fillers") return ["list", "apply"];
   if (command === "ai") return ["models", "provider-options", "image", "video", "speech", "transcribe"];
   if (command === "credits") return ["status", "topup", "wait", "forget"];
-  if (command === "media") return ["audio", "color"];
+  if (command === "media") return words[1] === "soundtrack" ? ["compose", "grid"] : ["audio", "color", "soundtrack"];
   if (command === "render") return ["plan", "run"];
   if (command === "assets") return ["emoji"];
   if (command === "outputs") return ["list", "open", "reveal"];

package/apps/desktop/cli/portable-surface.ts

@@ -289,6 +289,7 @@ export async function runPortableSurface(
       argv[0] === "code"
       && (argv[1] === "search" || argv[1] === "execute")
     )
+    || (argv[0] === "media" && argv[1] === "soundtrack")
     || (
       argv[0] === "image"
       && (

package/apps/desktop/cli/verbs.ts

@@ -96,6 +96,8 @@ export const CLI_VERBS: readonly VerbRow[] = [
   row("image generate", "operate", "Generate an image with Vercel AI Gateway"),
   row("image gallery", "operate", "Generate a review gallery of image candidates"),
   row("image icon", "operate", "Generate a line-art SVG icon"),
+  row("image icon compose", "operate", "Solve a vector icon scene and report its digests"),
+  row("image icon render", "operate", "Draw a vector icon scene or recipe to inert SVG"),
 
   row("html catalog", "read", "List HTML scene profiles"),
   row("html scaffold", "operate", "Write a new HTML scene"),
@@ -138,6 +140,8 @@ export const CLI_VERBS: readonly VerbRow[] = [
 
   row("media audio", "operate", "Apply audio effects into a new file"),
   row("media color", "operate", "Apply a color grade into a new file"),
+  row("media soundtrack compose", "operate", "Verify a loop or song score"),
+  row("media soundtrack grid", "operate", "Derive music timing and section cues from a score"),
 
   row("outputs", "read", "Print the outputs folder"),
   row("outputs list", "read", "List the files in the outputs folder, newest first"),