@hraness/slopcamera 3.8.1 → 3.9.1

package/NOTICE.md

@@ -52,3 +52,17 @@ The complete local workflow host uses
 License (Copyright 2023 Effectful Technologies Inc). It remains a separately
 installed runtime dependency and is not relicensed by this project. Portable
 workflow authoring and graph compilation do not load this runtime.
+
+Icon scene composition and rendering use
+[`@hraness/iconplace`](https://github.com/hraness/iconplace) 0.1.0, the
+icon.place library, and soundtrack scores and beat grids use
+[`@hraness/soundfish`](https://github.com/hraness/soundfish) 0.7.0. Both are
+distributed under the MIT License and remain separately installed runtime
+dependencies pinned to exact versions; neither is relicensed by this project.
+The letterform outline data in `@hraness/iconplace/scene` and
+`@hraness/iconplace/collections` is derived from Cormorant Garamond and
+UnifrakturMaguntia and stays under the SIL Open Font License 1.1, as that
+package's `THIRD_PARTY_NOTICES.md` and `licenses/` record.
+Slopcamera imports their library entry points only and never runs their
+commands. The Soundfish Agent Skill ships with `@hraness/soundfish`, not with
+Slopcamera.

package/README.md

@@ -23,7 +23,9 @@ file and a new render.
   is a JSON file of boxes and arrows, a title animation is an HTML scaffold
   for one of seven profiles, and a 3D shot is scene JSON with a named camera.
   The renderer, frame timing, encoding, and export formats are already
-  installed. No benchmark of token use has been published yet.
+  installed. This does not make it cheaper in tokens: in our
+  [benchmark](https://slopcamera.com/docs/explanation/token-benchmark), the median cost with
+  SlopCamera installed was higher than without it on all four tasks.
 - **Revisions change the source, not the whole result.** Change one label,
   camera, or cut and render again. Every export comes from the same source, so
   light and dark versions, or 16:9 and 9:16 cuts, stay in step.
@@ -41,11 +43,11 @@ file and a new render.
 ## Install SlopCamera
 
 Install [Bun 1.3.14 or newer](https://bun.sh), then install the
-[SlopCamera v3.8.0 release](https://github.com/hraness/slopcamera/releases/tag/v3.8.0)
+[SlopCamera v3.9.0 release](https://github.com/hraness/slopcamera/releases/tag/v3.9.0)
 and its matching Agent Skill:
 
 ```sh
-bun add --global https://github.com/hraness/slopcamera/releases/download/v3.8.0/hraness-slopcamera-3.8.0.tgz
+bun add --global https://github.com/hraness/slopcamera/releases/download/v3.9.0/hraness-slopcamera-3.9.0.tgz
 slopcamera skill install --target agents
 ```
 
@@ -192,6 +194,10 @@ them all with their requirements.
 | Explainer video | A Manim scene, captions, and a presenter | A lesson video with typeset math | [Geometry lesson](https://slopcamera.com/docs/how-to/educational-video#inspect-the-finished-example) |
 | Footage edits | Cuts, captions, reframes, and color as project decisions | 16:9, 9:16, 1:1, and 4:5 exports from one edit | [Four formats](https://slopcamera.com/docs/how-to/edit-video#landscape-delivery) |
 
+SlopCamera also composes vector icon scenes with the bundled icon.place library
+and reads Soundfish scores or MIDI files into beat grids for music-timed scenes,
+both locally and without a model. Neither renders audio.
+
 Model-backed generation of images, video, and speech is available through your
 own provider access, and cinematic effects, particles, and character
 performance can be planned from source. The gallery has no rendered examples
@@ -319,9 +325,10 @@ or [Why SlopCamera](https://slopcamera.com/docs/explanation/why-slopcamera).
   identical output elsewhere.
 - **Trusted code is not sandboxed.** Native Python and your own Bun workflows
   run with the current user's access.
-- **MCP is a subset.** Its 17 fixed tools check and render diagrams, plan and
-  audit scenes, and run six operation codes. It does not expose every CLI
-  command and never changes project state.
+- **MCP is a subset.** Its 21 fixed tools check and render diagrams, plan and
+  audit scenes, compose icon scenes and soundtrack beat grids, and run ten
+  operation codes. It does not expose every CLI command and never changes
+  project state.
 
 ## Design and trust
 

package/apps/desktop/application/html-overlay-integrity.ts

@@ -24,7 +24,7 @@ import {
 } from "./html-overlay-browser-runtime";
 
 const Sha256Schema = z.string().regex(/^[a-f0-9]{64}$/u);
-const ExecutionContractVersionSchema = z.union([z.literal(1), z.literal(2)]);
+const ExecutionContractVersionSchema = z.union([z.literal(1), z.literal(2), z.literal(3)]);
 export type HtmlOverlayExecutionContractVersion = z.infer<typeof ExecutionContractVersionSchema>;
 
 const IntegrityLeafSchema = z.strictObject({
@@ -207,14 +207,12 @@ function historicalHtmlOverlayRendererContract(
   });
 }
 
-/** Historical receipts select v1 explicitly; all new execution binds clone prevention. */
-export function htmlOverlayRendererContract(
+/** Version 2 stays byte-identical for completed clone-prevention receipts. */
+function clonePreventionHtmlOverlayRendererContract(
   profileInput?: HtmlOverlayExecutionProfile,
   resourcesInput: readonly HtmlOverlayDeclaredResource[] = [],
-  version: HtmlOverlayExecutionContractVersion = 2,
 ) {
   const contract = historicalHtmlOverlayRendererContract(profileInput, resourcesInput);
-  if (ExecutionContractVersionSchema.parse(version) === 1) return contract;
   return Object.freeze({
     ...contract,
     launch: Object.freeze({
@@ -226,6 +224,58 @@ export function htmlOverlayRendererContract(
   });
 }
 
+// Qualified against playwright-core 1.62.0's chromiumSwitches(). Keep every
+// default disabled feature when replacing this one exact default switch.
+const QUALIFIED_PLAYWRIGHT_VERSION = "1.62.0";
+const QUALIFIED_PLAYWRIGHT_DISABLED_FEATURES = Object.freeze([
+  "AvoidUnnecessaryBeforeUnloadCheckSync",
+  "BoundaryEventDispatchTracksNodeRemoval",
+  "DestroyProfileOnBrowserClose",
+  "DialMediaRouteProvider",
+  "GlobalMediaControls",
+  "HttpsUpgrades",
+  "LensOverlay",
+  "MediaRouter",
+  "PaintHolding",
+  "ThirdPartyStoragePartitioning",
+  "BlockOriginHeaderModificationOnRedirect",
+  "Translate",
+  "AutoDeElevate",
+  "OptimizationHints",
+  "msForceBrowserSignIn",
+  "msEdgeUpdateLaunchServicesPreferredVersion",
+]);
+const QUALIFIED_PLAYWRIGHT_DISABLE_FEATURES_ARGUMENT =
+  `--disable-features=${QUALIFIED_PLAYWRIGHT_DISABLED_FEATURES.join(",")}`;
+
+/** Historical versions remain immutable; new launches bind one merged switch. */
+export function htmlOverlayRendererContract(
+  profileInput?: HtmlOverlayExecutionProfile,
+  resourcesInput: readonly HtmlOverlayDeclaredResource[] = [],
+  version: HtmlOverlayExecutionContractVersion = 3,
+) {
+  const parsedVersion = ExecutionContractVersionSchema.parse(version);
+  if (parsedVersion === 1) return historicalHtmlOverlayRendererContract(profileInput, resourcesInput);
+  const contract = clonePreventionHtmlOverlayRendererContract(profileInput, resourcesInput);
+  if (parsedVersion === 2) return contract;
+  if (playwrightCorePackage.version !== QUALIFIED_PLAYWRIGHT_VERSION) {
+    throw new Error("The merged HTML-overlay launch policy requires qualified playwright-core 1.62.0 defaults.");
+  }
+  return Object.freeze({
+    ...contract,
+    launch: Object.freeze({
+      ...contract.launch,
+      args: Object.freeze(contract.launch.args.map(argument => argument.startsWith("--disable-features=")
+        ? `--disable-features=${[...new Set([
+          ...QUALIFIED_PLAYWRIGHT_DISABLED_FEATURES,
+          ...argument.slice("--disable-features=".length).split(","),
+        ])].join(",")}` : argument)),
+      ignoreDefaultArgs: Object.freeze([QUALIFIED_PLAYWRIGHT_DISABLE_FEATURES_ARGUMENT]),
+    }),
+    schemaVersion: 5,
+  });
+}
+
 export function assertHtmlOverlayExecutionProfileLibraries(
   libraries: readonly string[], profile?: HtmlOverlayExecutionProfile,
 ): void {
@@ -280,7 +330,7 @@ export function createHtmlOverlayExecutionBundle(
   authoringInput: HtmlOverlayAuthoringInput,
   browserRuntimeInput: HtmlOverlayBrowserRuntimeBinding,
   executionProfile?: HtmlOverlayExecutionProfile,
-  contractVersion: HtmlOverlayExecutionContractVersion = 2,
+  contractVersion: HtmlOverlayExecutionContractVersion = 3,
 ): HtmlOverlayExecutionBundle {
   const authoring = HtmlOverlayAuthoringInputSchema.parse(authoringInput);
   assertHtmlOverlayExecutionProfileLibraries(authoring.libraries, executionProfile);

package/apps/desktop/application/operation.ts

@@ -4,7 +4,7 @@ import type { z } from "zod";
 
 import type { ApplicationContext } from "./context";
 
-export const SLOPCAMERA_APPLICATION_TOOL_VERSION = "slopcamera-3.8.1" as const;
+export const SLOPCAMERA_APPLICATION_TOOL_VERSION = "slopcamera-3.9.1" as const;
 
 export const OPERATION_KINDS = [
   "scene.audit",

package/apps/desktop/cli/capability-manifest.ts

@@ -127,8 +127,12 @@ const capabilityModules = Object.freeze([
       { effect: "local-read", name: "diagram sheets check" },
       { effect: "local-derived-write", name: "diagram sheets render" },
       { effect: "local-derived-write", name: "image vectorize" },
+      { effect: "local-derived-write", name: "image icon compose" },
+      { effect: "local-derived-write", name: "image icon render" },
+      { effect: "local-derived-write", name: "media soundtrack compose" },
+      { effect: "local-derived-write", name: "media soundtrack grid" },
     ],
-    description: "Portable diagrams, CLI/SDK drawing sheets, local vectorization, and the bounded semantic operation projection.",
+    description: "Portable diagrams, CLI/SDK drawing sheets, local vectorization, deterministic icon scenes and soundtrack beat grids, and the bounded semantic operation projection.",
     moduleId: "slopcamera.capability.diagram-image",
     operationKeys: diagramImageOperations,
     profiles: [{
@@ -139,7 +143,16 @@ const capabilityModules = Object.freeze([
     }],
     stability: "stable",
     title: "Diagrams and images",
-    toolNames: ["check_diagram", "execute_slopcamera", "render_diagram", "search_slopcamera"],
+    toolNames: [
+      "check_diagram",
+      "compose_icon",
+      "compose_soundtrack",
+      "derive_soundtrack_grid",
+      "execute_slopcamera",
+      "render_diagram",
+      "render_icon",
+      "search_slopcamera",
+    ],
     trust: "portable",
     version: 1,
     workflowKeys: [],

package/apps/desktop/cli/commands.ts

@@ -365,7 +365,7 @@ import {
   workflowRunStore,
 } from "./workflow-runs";
 
-export const SLOPCAMERA_VERSION = "3.8.1";
+export const SLOPCAMERA_VERSION = "3.9.1";
 
 // Legacy direct renders predate per-target output contracts. Keep them
 // bounded generously enough for long-form production while preventing one

package/apps/desktop/cli/help.ts

@@ -37,7 +37,7 @@ Commands:
                                  Discover and run Vercel AI Gateway media models
   credits status|topup|wait|forget
                                  Buy and inspect hosted generation credits
-  media audio|color              Apply local non-destructive audio and video effects
+  media audio|color|soundtrack   Apply local audio and video effects; derive soundtrack beat grids
   outputs                        Print the agent outputs directory
   outputs list|open|reveal       List the newest outputs or open one on this Mac
   status                         What Slopcamera is doing, credits and newest outputs
@@ -293,6 +293,10 @@ compliance. Drawing sheets are exposed through this CLI and the root SDK, not co
   slopcamera image icon --set <file.json> --output-dir <directory>
         [--context <card|hero|inline>] [--candidates <1-4>]
         [--set-rounds <1-4>] [--keep-raster] [--json]
+  slopcamera image icon compose <source.json> [--output <file.json>] [--json]
+  slopcamera image icon render <source.json> --output <file.svg> [--recipe <file.json>]
+        [--size <16-1024>] [--background] [--palette <original|ink|earth|night>]
+        [--language <language>] [--json]
 
 Explicit --output file commands delegate to @hraness/slopcamera. Vectorization is local,
 bounded, checksum-pinned, and emits inert SVG. File generation uses Vercel AI Gateway with the
@@ -308,7 +312,13 @@ variation axes or an explicit candidate list — keeps every candidate with its
 composes a labelled contact sheet plus receipt for agent review. Texture cells repeat the
 candidate 2×2 so seams are inspectable (--tile/--no-tile overrides). It never replaces existing
 outputs and never promotes a candidate into authored source; review the sheet and select
-explicitly.`,
+explicitly.
+
+Icon compose and render are local and deterministic, with no model or network. They solve and
+draw icon.place scenes, collections, construction programs, and recipes into inert SVG; a recipe
+replays only when its recorded digests match. Construction-program languages: outline, sketch,
+pen, crosshatch, engraving, stipple, halftone, glyph, flat, shaded, figure, cutpaper, woodcut,
+offset.`,
   style: `Usage:
   slopcamera style list [--json]
   slopcamera style show <id> [--json]
@@ -616,6 +626,15 @@ argv, receipts, or logs. When a configured wallet runs out, paid calls fail with
         [--output <relative-path>] [--json]
   slopcamera media color <video-path> [grade] [--video-stream <index>]
         [--output <relative-path>] [--json]
+  slopcamera media soundtrack compose <score> [--output <file.json>]
+        [--format <compose|song|json|midi>] [--json]
+  slopcamera media soundtrack grid <score> [--output <file.json>] [--start-us <n>]
+        [--format <compose|song|json|midi>] [--json]
+
+Soundtrack verbs delegate to @hraness/slopcamera. They verify a Soundfish loop or song (compose
+text, song text, score JSON, or a Standard MIDI file) and derive the {bpm, beatOffsetUs,
+beatsPerBar} music timing that HTML scene requests accept, plus section cue times. They render
+no audio; pair the grid with the track you mix.
 
 Audio effects may be combined in one deterministic chain:
   --volume-db <-60..24>
@@ -725,7 +744,7 @@ export function completions(words: readonly string[]): readonly string[] {
   if (command === "diagram") return words[1] === "sheets"
     ? ["init", "check", "render"]
     : ["init", "check", "render", "sheets"];
-  if (command === "image") return ["vectorize", "generate", "gallery", "icon"];
+  if (command === "image") return words[1] === "icon" ? ["compose", "render"] : ["vectorize", "generate", "gallery", "icon"];
   if (command === "workflows") return ["list", "show", "plan", "run"];
   if (command === "code") return ["init", "check", "plan", "run"];
   if (command === "runs") return ["list", "show", "resume", "approve", "cancel"];
@@ -748,7 +767,7 @@ export function completions(words: readonly string[]): readonly string[] {
   if (command === "fillers") return ["list", "apply"];
   if (command === "ai") return ["models", "provider-options", "image", "video", "speech", "transcribe"];
   if (command === "credits") return ["status", "topup", "wait", "forget"];
-  if (command === "media") return ["audio", "color"];
+  if (command === "media") return words[1] === "soundtrack" ? ["compose", "grid"] : ["audio", "color", "soundtrack"];
   if (command === "render") return ["plan", "run"];
   if (command === "assets") return ["emoji"];
   if (command === "outputs") return ["list", "open", "reveal"];

package/apps/desktop/cli/html-overlay-renderer.ts

@@ -81,18 +81,32 @@ function maximumLibraryBytes(lock: HtmlOverlayActiveLibraryLock): number {
 const DEFAULT_BROWSER_STEP_TIMEOUT_MS = 60_000;
 const MAXIMUM_BROWSER_STEP_TIMEOUT_MS = 5 * 60_000;
 
-export function createHtmlOverlayBrowserLaunchArgs(
+export function createHtmlOverlayBrowserLaunchOptions(
   libraries: readonly HtmlOverlayLibrarySpecifier[],
   executionProfile?: HtmlOverlayExecutionProfile,
-): string[] {
+): { args: string[]; ignoreDefaultArgs: string[] } {
   assertHtmlOverlayExecutionProfileLibraries(libraries, executionProfile);
   const contract = htmlOverlayRendererContract(executionProfile);
-  return [
-    ...contract.launch.args,
-    ...(libraries.includes("vgpu")
-      ? HTML_OVERLAY_RENDERER_CONTRACT.launch.libraryArgs.vgpu
-      : []),
-  ];
+  // Both the replacement and exact selective suppression are receipt-bound.
+  if (!("ignoreDefaultArgs" in contract.launch)) {
+    throw new Error("The current HTML-overlay launch contract lacks its selective default-argument policy.");
+  }
+  return {
+    args: [
+      ...contract.launch.args,
+      ...(libraries.includes("vgpu")
+        ? HTML_OVERLAY_RENDERER_CONTRACT.launch.libraryArgs.vgpu
+        : []),
+    ],
+    ignoreDefaultArgs: [...contract.launch.ignoreDefaultArgs],
+  };
+}
+
+export function createHtmlOverlayBrowserLaunchArgs(
+  libraries: readonly HtmlOverlayLibrarySpecifier[],
+  executionProfile?: HtmlOverlayExecutionProfile,
+): string[] {
+  return createHtmlOverlayBrowserLaunchOptions(libraries, executionProfile).args;
 }
 const BROWSER_CLEANUP_TIMEOUT_MS = 30_000;
 const BROWSER_RUNTIME_FLAGS_TIMEOUT_MS = 60_000;
@@ -2107,7 +2121,7 @@ export class PlaywrightHtmlOverlayRenderer implements HtmlOverlayRenderer {
             browserShutdownRequired = true;
             try {
               return await this.#launch({
-                args: createHtmlOverlayBrowserLaunchArgs(
+                ...createHtmlOverlayBrowserLaunchOptions(
                   request.authoring.libraries,
                   request.executionProfile,
                 ),

package/apps/desktop/cli/portable-surface.ts

@@ -289,6 +289,7 @@ export async function runPortableSurface(
       argv[0] === "code"
       && (argv[1] === "search" || argv[1] === "execute")
     )
+    || (argv[0] === "media" && argv[1] === "soundtrack")
     || (
       argv[0] === "image"
       && (

package/apps/desktop/cli/verbs.ts

@@ -96,6 +96,8 @@ export const CLI_VERBS: readonly VerbRow[] = [
   row("image generate", "operate", "Generate an image with Vercel AI Gateway"),
   row("image gallery", "operate", "Generate a review gallery of image candidates"),
   row("image icon", "operate", "Generate a line-art SVG icon"),
+  row("image icon compose", "operate", "Solve a vector icon scene and report its digests"),
+  row("image icon render", "operate", "Draw a vector icon scene or recipe to inert SVG"),
 
   row("html catalog", "read", "List HTML scene profiles"),
   row("html scaffold", "operate", "Write a new HTML scene"),
@@ -138,6 +140,8 @@ export const CLI_VERBS: readonly VerbRow[] = [
 
   row("media audio", "operate", "Apply audio effects into a new file"),
   row("media color", "operate", "Apply a color grade into a new file"),
+  row("media soundtrack compose", "operate", "Verify a loop or song score"),
+  row("media soundtrack grid", "operate", "Derive music timing and section cues from a score"),
 
   row("outputs", "read", "Print the outputs folder"),
   row("outputs list", "read", "List the files in the outputs folder, newest first"),