@hraness/slopcamera 3.9.0 → 3.9.1

package/README.md

@@ -43,11 +43,11 @@ file and a new render.
 ## Install SlopCamera
 
 Install [Bun 1.3.14 or newer](https://bun.sh), then install the
-[SlopCamera v3.8.1 release](https://github.com/hraness/slopcamera/releases/tag/v3.8.1)
+[SlopCamera v3.9.0 release](https://github.com/hraness/slopcamera/releases/tag/v3.9.0)
 and its matching Agent Skill:
 
 ```sh
-bun add --global https://github.com/hraness/slopcamera/releases/download/v3.8.1/hraness-slopcamera-3.8.1.tgz
+bun add --global https://github.com/hraness/slopcamera/releases/download/v3.9.0/hraness-slopcamera-3.9.0.tgz
 slopcamera skill install --target agents
 ```
 
@@ -325,11 +325,10 @@ or [Why SlopCamera](https://slopcamera.com/docs/explanation/why-slopcamera).
   identical output elsewhere.
 - **Trusted code is not sandboxed.** Native Python and your own Bun workflows
   run with the current user's access.
-- **MCP is a subset.** Current source has 21 fixed tools that check and render diagrams, plan and
+- **MCP is a subset.** Its 21 fixed tools check and render diagrams, plan and
   audit scenes, compose icon scenes and soundtrack beat grids, and run ten
   operation codes. It does not expose every CLI command and never changes
-  project state. The verified v3.8.1 archive has a 17-tool subset and six
-  registered operations; icon and soundtrack composition require a later source build.
+  project state.
 
 ## Design and trust
 

package/apps/desktop/application/html-overlay-integrity.ts

@@ -24,7 +24,7 @@ import {
 } from "./html-overlay-browser-runtime";
 
 const Sha256Schema = z.string().regex(/^[a-f0-9]{64}$/u);
-const ExecutionContractVersionSchema = z.union([z.literal(1), z.literal(2)]);
+const ExecutionContractVersionSchema = z.union([z.literal(1), z.literal(2), z.literal(3)]);
 export type HtmlOverlayExecutionContractVersion = z.infer<typeof ExecutionContractVersionSchema>;
 
 const IntegrityLeafSchema = z.strictObject({
@@ -207,14 +207,12 @@ function historicalHtmlOverlayRendererContract(
   });
 }
 
-/** Historical receipts select v1 explicitly; all new execution binds clone prevention. */
-export function htmlOverlayRendererContract(
+/** Version 2 stays byte-identical for completed clone-prevention receipts. */
+function clonePreventionHtmlOverlayRendererContract(
   profileInput?: HtmlOverlayExecutionProfile,
   resourcesInput: readonly HtmlOverlayDeclaredResource[] = [],
-  version: HtmlOverlayExecutionContractVersion = 2,
 ) {
   const contract = historicalHtmlOverlayRendererContract(profileInput, resourcesInput);
-  if (ExecutionContractVersionSchema.parse(version) === 1) return contract;
   return Object.freeze({
     ...contract,
     launch: Object.freeze({
@@ -226,6 +224,58 @@ export function htmlOverlayRendererContract(
   });
 }
 
+// Qualified against playwright-core 1.62.0's chromiumSwitches(). Keep every
+// default disabled feature when replacing this one exact default switch.
+const QUALIFIED_PLAYWRIGHT_VERSION = "1.62.0";
+const QUALIFIED_PLAYWRIGHT_DISABLED_FEATURES = Object.freeze([
+  "AvoidUnnecessaryBeforeUnloadCheckSync",
+  "BoundaryEventDispatchTracksNodeRemoval",
+  "DestroyProfileOnBrowserClose",
+  "DialMediaRouteProvider",
+  "GlobalMediaControls",
+  "HttpsUpgrades",
+  "LensOverlay",
+  "MediaRouter",
+  "PaintHolding",
+  "ThirdPartyStoragePartitioning",
+  "BlockOriginHeaderModificationOnRedirect",
+  "Translate",
+  "AutoDeElevate",
+  "OptimizationHints",
+  "msForceBrowserSignIn",
+  "msEdgeUpdateLaunchServicesPreferredVersion",
+]);
+const QUALIFIED_PLAYWRIGHT_DISABLE_FEATURES_ARGUMENT =
+  `--disable-features=${QUALIFIED_PLAYWRIGHT_DISABLED_FEATURES.join(",")}`;
+
+/** Historical versions remain immutable; new launches bind one merged switch. */
+export function htmlOverlayRendererContract(
+  profileInput?: HtmlOverlayExecutionProfile,
+  resourcesInput: readonly HtmlOverlayDeclaredResource[] = [],
+  version: HtmlOverlayExecutionContractVersion = 3,
+) {
+  const parsedVersion = ExecutionContractVersionSchema.parse(version);
+  if (parsedVersion === 1) return historicalHtmlOverlayRendererContract(profileInput, resourcesInput);
+  const contract = clonePreventionHtmlOverlayRendererContract(profileInput, resourcesInput);
+  if (parsedVersion === 2) return contract;
+  if (playwrightCorePackage.version !== QUALIFIED_PLAYWRIGHT_VERSION) {
+    throw new Error("The merged HTML-overlay launch policy requires qualified playwright-core 1.62.0 defaults.");
+  }
+  return Object.freeze({
+    ...contract,
+    launch: Object.freeze({
+      ...contract.launch,
+      args: Object.freeze(contract.launch.args.map(argument => argument.startsWith("--disable-features=")
+        ? `--disable-features=${[...new Set([
+          ...QUALIFIED_PLAYWRIGHT_DISABLED_FEATURES,
+          ...argument.slice("--disable-features=".length).split(","),
+        ])].join(",")}` : argument)),
+      ignoreDefaultArgs: Object.freeze([QUALIFIED_PLAYWRIGHT_DISABLE_FEATURES_ARGUMENT]),
+    }),
+    schemaVersion: 5,
+  });
+}
+
 export function assertHtmlOverlayExecutionProfileLibraries(
   libraries: readonly string[], profile?: HtmlOverlayExecutionProfile,
 ): void {
@@ -280,7 +330,7 @@ export function createHtmlOverlayExecutionBundle(
   authoringInput: HtmlOverlayAuthoringInput,
   browserRuntimeInput: HtmlOverlayBrowserRuntimeBinding,
   executionProfile?: HtmlOverlayExecutionProfile,
-  contractVersion: HtmlOverlayExecutionContractVersion = 2,
+  contractVersion: HtmlOverlayExecutionContractVersion = 3,
 ): HtmlOverlayExecutionBundle {
   const authoring = HtmlOverlayAuthoringInputSchema.parse(authoringInput);
   assertHtmlOverlayExecutionProfileLibraries(authoring.libraries, executionProfile);

package/apps/desktop/application/operation.ts

@@ -4,7 +4,7 @@ import type { z } from "zod";
 
 import type { ApplicationContext } from "./context";
 
-export const SLOPCAMERA_APPLICATION_TOOL_VERSION = "slopcamera-3.9.0" as const;
+export const SLOPCAMERA_APPLICATION_TOOL_VERSION = "slopcamera-3.9.1" as const;
 
 export const OPERATION_KINDS = [
   "scene.audit",

package/apps/desktop/cli/commands.ts

@@ -365,7 +365,7 @@ import {
   workflowRunStore,
 } from "./workflow-runs";
 
-export const SLOPCAMERA_VERSION = "3.9.0";
+export const SLOPCAMERA_VERSION = "3.9.1";
 
 // Legacy direct renders predate per-target output contracts. Keep them
 // bounded generously enough for long-form production while preventing one

package/apps/desktop/cli/html-overlay-renderer.ts

@@ -81,18 +81,32 @@ function maximumLibraryBytes(lock: HtmlOverlayActiveLibraryLock): number {
 const DEFAULT_BROWSER_STEP_TIMEOUT_MS = 60_000;
 const MAXIMUM_BROWSER_STEP_TIMEOUT_MS = 5 * 60_000;
 
-export function createHtmlOverlayBrowserLaunchArgs(
+export function createHtmlOverlayBrowserLaunchOptions(
   libraries: readonly HtmlOverlayLibrarySpecifier[],
   executionProfile?: HtmlOverlayExecutionProfile,
-): string[] {
+): { args: string[]; ignoreDefaultArgs: string[] } {
   assertHtmlOverlayExecutionProfileLibraries(libraries, executionProfile);
   const contract = htmlOverlayRendererContract(executionProfile);
-  return [
-    ...contract.launch.args,
-    ...(libraries.includes("vgpu")
-      ? HTML_OVERLAY_RENDERER_CONTRACT.launch.libraryArgs.vgpu
-      : []),
-  ];
+  // Both the replacement and exact selective suppression are receipt-bound.
+  if (!("ignoreDefaultArgs" in contract.launch)) {
+    throw new Error("The current HTML-overlay launch contract lacks its selective default-argument policy.");
+  }
+  return {
+    args: [
+      ...contract.launch.args,
+      ...(libraries.includes("vgpu")
+        ? HTML_OVERLAY_RENDERER_CONTRACT.launch.libraryArgs.vgpu
+        : []),
+    ],
+    ignoreDefaultArgs: [...contract.launch.ignoreDefaultArgs],
+  };
+}
+
+export function createHtmlOverlayBrowserLaunchArgs(
+  libraries: readonly HtmlOverlayLibrarySpecifier[],
+  executionProfile?: HtmlOverlayExecutionProfile,
+): string[] {
+  return createHtmlOverlayBrowserLaunchOptions(libraries, executionProfile).args;
 }
 const BROWSER_CLEANUP_TIMEOUT_MS = 30_000;
 const BROWSER_RUNTIME_FLAGS_TIMEOUT_MS = 60_000;
@@ -2107,7 +2121,7 @@ export class PlaywrightHtmlOverlayRenderer implements HtmlOverlayRenderer {
             browserShutdownRequired = true;
             try {
               return await this.#launch({
-                args: createHtmlOverlayBrowserLaunchArgs(
+                ...createHtmlOverlayBrowserLaunchOptions(
                   request.authoring.libraries,
                   request.executionProfile,
                 ),