@photivra/engine 0.6.0 → 1.0.0

package/CHANGELOG.md

@@ -1,9 +1,192 @@
 # Changelog
 
+## 1.0.0 candidate — publication pending owner tag
+
+- Prepare the stable public distribution after all 32 V1 feature/science items and defect #178 are reviewed and merged. Package/lock/citation become 1.0.0; root contract 0.116.0 and every independent model/schema/POC/plan identity remain unchanged. No scientific arithmetic, seed, fixture hash, exported signature or accepted execution envelope changes.
+- Reconcile human/agent/source guidance, actual bounded production integration and closed tier/performance/export/conformance acceptance. Add developer capability navigation, exact root-export reference, packed executable examples, strict documentation/consumer checks and exact owner tag/publish procedure.
+- Preserve synthetic/calibration/visibility/PSF/resolution limits and the recorded external-editor/hash/build limitations. Review compatibility/migration and owner handoff in `docs/RELEASE_1_0.md`; this entry does not certify npm publication.
+
+## Historical development — engine API 0.116.0
+
+The following entries record introduction-time work and version identities. Older pending/draft/issue-count statements are historical checkpoints; the 1.0 release contract and current domain guides own present status.
+
+- Complete the proposed final #131 scientific conformance disposition: shared-reference relative metering and exposure control through independently predicted photon/dark counts, committed production RAW/processing and paired output; controlled light/compensation/time/orientation/render variants, exact replay and fail-closed bindings. Reuse merged tier/performance evidence with explicit synthetic limits; no runtime/API/asset/dependency change. See `docs/SCIENTIFIC_CONFORMANCE.md`.
+
+- Complete the proposed final #43/#45 performance disposition on stabilized V1 main with paired whole-consumer equivalence/timing, preparation/memory profiles and dense executed environment-to-RAW evidence. Retain merged private reuse; no further public abstraction or runtime/API change. See `docs/V1_PERFORMANCE_DISPOSITION.md`.
+
+- Complete the proposed #119 generic tier acceptance layer with reproducible versioned physical/correction-cost/corrected reports, finite multidimensional pupil/texture envelopes, same-capture edge/noise comparisons and independently predicted signed stabilization/ordinary flash checks. Reuse existing body and production/output acceptance; no calibration claims, runtime/asset/version changes or new dependency. See `docs/TIER_ACCEPTANCE.md`.
+
+- Complete the proposed #116 generic preset acceptance disposition: all nine exact body/lens pairings through bounded authoritative environment capture, ISO/readout, exact RAW processing and paired output; independent phase-sum checks and controlled sampled scenes for all 27 finite pupil slices. Preserve synthetic limits, separate #119 validation ownership and unchanged 1.0.0 assets/runtime/version contracts. See `docs/TIER_PRESET_ACCEPTANCE.md`.
+
+- Add the bounded executed environment-to-RAW handoff to the authoritative production graph. Plan 0.7.0 validates committed event, scene/provider/optics, geometry, shutter, rotation, renderer and seed bindings before source callbacks, fingerprints execution data/results, and supplies the exact realized RAW to optional shared processing. Consumer manifest 0.2.0 carries the same immutable execution/output results. Existing attached-RAW and physical-sample paths retain explicit unsupported boundaries. Share existing output-envelope validation without changing supported limits, scientific models, seed schedules or package/POC versions. See `docs/PRODUCTION_ENVIRONMENT_CAPTURE.md`.
+
+## Engine API 0.115.0
+
+- Prepare producer-derived #16 interoperability acceptance: committed all-orientation/manual-WB DNG/JPEG pairs, reproducible repository-only generator, independent TIFF/JPEG/two-XML/LibRaw verification and explicit native-site/unsupported-size evidence. Preserve historical fixtures and shared existing algorithms. Adobe/editor/browser evidence and owner review/DCO remain required; no issue closure, new runtime dependency or API/version change. See `docs/EXPORT_ACCEPTANCE.md`.
+
+- Complete the bounded #112 SDR post-capture handoff: expose shared `calculateProcessedSensorRaw()`/parser for RAW preview and paired JPEG, retain explicit color/WB/rendering/correction states and capture diagnostics, support 8/16-bit preview while JPEG remains 8-bit. Production plan 0.6.0 accepts committed output-state/RAW policy, executes four downstream stages and fingerprints their immutable result/evidence. Upstream missing-stage blockers remain; no physical-provider, high-resolution or external-editor acceptance is inferred. See `docs/PROCESSED_OUTPUT.md`. Merged in #200 after owner review/DCO; V1 tracker stands at 26/32.
+
+## Engine API 0.114.0
+
+- Add `calculateEnvironmentSensorPhotoSignal()` and `simulateEnvironmentSensorRawFrame()`: generate and execute bounded environment queries at each actual local shutter midpoint, wavelength and optional complete PSF support tap, then reuse optics, instantaneous EQE, temporal photo/dark, completeness, capacity, seeded noise and ADC. Bind full native frame geometry, optics, scene identity and event exactly. Frozen provider requests, owned parsed results and aggregate evaluation limits fail closed. Resulting RAW feeds existing paired DNG/JPEG export. Invocation is established without claiming physical provider transport/visibility, calibrated accuracy, full-resolution support or production-plan activation. See `docs/ENVIRONMENT_RAW_CAPTURE.md`. Partial #16/#178 integration; V1 remains 25/32.
+
+## Engine API 0.113.0
+
+- Add `calculateSensorEnvironmentRadianceQuery()`: derive an environment request from native sensor optical support with explicit +Y-down/+Y-up conversion, focus-aware ideal projection, existing analytic inverse camera rotation and outgoing-toward-camera direction convention. Explicit opening-boundary clock mapping preserves time semantics. Ray projection is calculated; intersections, visibility, provider transport and production activation remain absent. See `docs/SENSOR_ENVIRONMENT_QUERY.md`. Partial #16/#178 integration.
+
+## Engine API 0.112.0
+
+- Add `calculateSensorPsfIrradianceQuadrature()`: resolve sampled lens PSFs at each pre-AA destination/wavelength and apply their normalized shape to explicitly supplied inverse kernel support. Convert native +Y-down support to image-plane +Y-up PSF axes; retain separate pupil throughput, wavelength-basis evidence, exact instantaneous times and local shift-invariance limitations. Complete support and bounded work fail closed. No full field-dependent forward transport, source projection/provider execution or production activation is inferred. See `docs/SENSOR_PSF_QUADRATURE.md`. Partial #16/#178 integration.
+
+## Engine API 0.111.0
+
+- Add `calculateSceneSensorEqeTemporalExposure()`: compose declared physical scene radiance through paraxial optics and instantaneous response validity/EQE at every local shutter midpoint. Sensor inputs own spatial/spectral plans; explicit package-plane and first-opening-boundary time semantics prevent plane/clock reinterpretation. Shared internal temporal identity/work preflight preserves existing sensor diagnostics and budgets. No provider/projection/PSF execution, convergence bound or production activation is inferred. See `docs/SCENE_SENSOR_TEMPORAL_EXPOSURE.md`. Partial #16/#178 resolution.
+
+## Engine API 0.110.0
+
+- Add a validated compact temporal EQE photo signal and connect it to exact-event dark/accumulated charge and native RAW. Preserve stationary arithmetic and narrow-call types; share compensated integration sums. Producer result schema 0.3.0 and temporal dark/charge model 1.1.0 distinguish the additive path without changing noise/readout identities. Global/rolling tests verify independent SI counts, deterministic codes and exact paired DNG/JPEG lineage. Source transport/PSF, convergence and production activation remain unverified; no umbrella closure. See `docs/TEMPORAL_PHOTO_RAW.md`. Partial #16/#178 resolution.
+
+## Engine API 0.109.0
+
+- Add `calculateSensorEqeTemporalExposure()`: independently validate response/range/EQE at each explicitly supplied local shutter midpoint and integrate physical rates with seconds-valued measures. Share the existing instantaneous path without changing stationary behavior; retain child evidence, deterministic canonical ordering and bounded Cartesian work. No stationarity, source transport, PSF, convergence or RAW activation is inferred. This new nonstationary result deliberately cannot enter the stationary charge/RAW contract. See `docs/SENSOR_EQE_TEMPORAL_EXPOSURE.md`. Partial #16/#178 resolution.
+
+## Engine API 0.108.0
+
+- Add `calculateSceneToSensorIrradianceQuadrature()`: bind wavelength-resolved scene-provider declarations to each exact spatial/wavelength/time node and evaluate the existing paraxial optical bridge at its pre-AA coordinate. Share Cartesian node validation with the existing irradiance reducer, preserving equations and prior diagnostics while rejecting sparse sample arrays explicitly. Pre-stack/package-incident output feeds matching effective EQE; source projection, provider execution, PSF and temporal integration remain unverified/unapplied, and production gates remain unchanged. See `docs/SCENE_SENSOR_QUADRATURE.md`. Partial #16/#178 resolution.
+
+## Engine API 0.107.0
+
+- Add `calculateSensorEqeLocalExposure`, composing existing spatial/spectral quadrature, explicitly supplied irradiance, response application/range checks, EQE rate, local shutter binding and stationary integration. Preserve child evidence and approximation boundaries; demonstrate the resulting photo expectation through RAW and paired files. Scene/optics origin remains declared, production stages remain gated, and time-varying irradiance is unsupported. See `docs/SENSOR_EQE_LOCAL_EXPOSURE.md`. Partial #16/#178 resolution.
+
+## Engine API 0.106.0
+
+- Map all 32 V1 features to primitives, implemented consumers, representative evidence and remaining ticket ownership. Document the missing typed scene/optics/sensor-response-to-exposure RAW handoff and correct adjacent production-boundary descriptions. Documentation only; no stage activation, runtime/version change, approved deferral or feature closure. Partial defect #178 resolution.
+
+- Define the RAW reference compatibility envelope and share full-native producer/reconstruction limits while retaining the larger structural attachment budget. Export parsing rejects unsupported crop sampling, uncovered output/active reconstruction and non-Bayer topology before pixel execution. Supported execution, hashes, bytes and versions remain unchanged; invalid-request diagnostic precedence may change. Partial defect #178 resolution.
+
+- Move reusable sensor-channel color development and conditioned inversion into an internal color-layer adapter. Preserve explicit profile evidence/basis binding, one-time WB order, exact RAW lineage and paired file identities; export retains validation and container policy. Partial defect #178 resolution; no public API or version change.
+
+- Share sorted-key finite-JSON serialization mechanics across planner fingerprints, capture-derived comparisons and export hashing. Preserve domain-specific undefined-property policies/errors, existing identity algorithms and all version surfaces; pinned historical export/file hashes detect byte drift. Partial defect #178 resolution.
+
+- Consolidate equivalent child-first immutable-data freezing across capture, RAW attachment/reconstruction, export metadata and generic equipment presets into one internal helper. Domain validation/copy ownership and planner/focus/release freeze semantics are preserved; no public API, schema, numerical or identity change. Partial defect #178 resolution.
+
+- Correct production-plan diagnostics to report the current plan contract version instead of a stale hard-coded version, and document the existing `distribute*` public verb family. Diagnostic text changes only; blocker codes, validation, scientific behavior and all version surfaces remain unchanged. Partial defect #178 resolution.
+
+- Add generic tier readout-to-file acceptance: explicit ISO regimes preserve expected/realized charge, independent ADC arithmetic predicts codes, and paired export preserves native RAW through orientation/rendering exposure. Synthetic topology/color/charge fixture; no runtime/API/assets change.
+
+- Add matched generic tier body execution acceptance for release cadence/timer/limits, AF availability/hold/loss and release gating, independent metering/AWB arithmetic, and global readout timing. Synthetic policy evidence only; runtime/API/assets unchanged. See `docs/GENERIC_TIER_PRESETS.md`.
+
+- Extend generic tier correction acceptance with independent residual CA/distortion, full Jacobian/stretch, same-capture slanted-step interpolation/gain and support/retained-ray checks. Synthetic sampled regression evidence only; runtime/API/assets unchanged. See `docs/GENERIC_TIER_PRESETS.md`.
+
+- Correct the electronic read-noise boundary: preserve negative read noise through the upper-only pre-ADC threshold, add the black pedestal, then quantize/clamp to the unsigned ADC range. Readout model 2.0.0 and capture RAW noise model 0.2.0 distinguish changed shadow codes from prior replay.
+- Add incremental #131 conformance for the merged global sensor RAW producer → reconstruction/color/WB → correction → SDR/paired export path. Independent numeric and lattice expectations cover exposure boundaries, four orientations, same-noise correction, signed shadows and display clipping; no final V1 closure.
+
+## Generic tier presets — engine API 0.105.0
+
+- Add exact-version Consumer, Prosumer and Professional generic body/lens reference assets, cross-tier selection and strict saved-manifest validation. A finite 50 mm, f/4, focus 5 m optical slice resolves explicit profiles rather than a tier quality multiplier. Matched pupil and same-capture correction fixtures expose field/defocus character and gain/noise tradeoffs. See `docs/GENERIC_TIER_PRESETS.md`.
+- Synthetic educational approximations only; no calibration, universal ranking, sensor-format default, production/POC activation or complete #116/#119 acceptance claim. Preset assets are version 1.0.0; saved selection schema 0.1.0. Root API 0.105.0 follows the local-shutter 0.104.0 contract in PR #173.
+
+## Local shutter RAW binding — engine API 0.104.0
+
+- Added optional full-native local shutter-window binding to the RAW producer (producer result schema 0.2.0). Exact per-site photo/dark/completeness windows must match the existing engine timing calculation. Omitted timing retains global behavior and unchanged native seed ownership; no rolling motion/radiance integration or production-stage activation is claimed.
+
+- Reuse call-owned geometric preparation across sampling-plan pixels through the existing scalar point evaluator. Preserve external revalidation, per-point radial/finite guards, provenance and independent derivative arrays. Whole correction/plan timing and separate CPU/allocation evidence are recorded in `docs/GEOMETRIC_PREPARATION_REUSE.md`; no public API/schema version change or generic prepared cache.
+
+- Reuse the existing focus-plane projection privately for POC defocus sweeps. Whole-request timings, separate allocation sampling, preparation/retained-memory limits and 64 complete-response equivalence fixtures are recorded in `docs/POC_PROJECTION_REUSE.md`. No root/POC/schema version change or public prepared API; one-off path overhead and Node-only performance evidence are explicit.
+
+- Add optional RAW-derived JPEG correction to paired photographic export, reusing the capture correction executor after explicit color/WB. Preserve DNG codes and native crop; expose the processed crop, clipping diagnostics and separate informational RAW intent. Require full active reconstruction and reject unprovided prefiltering. No production-stage activation or external-editor validation claim.
+
+## Capture-owned native RAW producer — unreleased
+
+- Added `simulateSensorRawFrame()` and strict handoff parser: declared untreated EQE/dark exposure expectations → existing accumulated charge/completeness → physical capacity assessment → seeded charge realization → read noise/ADC → native CFA samples → immutable RAW attachment. A versioned capture-owned site seed schedule, full native coverage and global exposure/state checks are explicit. Child provenance/saturation diagnostics and genuine same-RAW DNG/JPEG tests are retained. See `docs/SENSOR_RAW_PRODUCER.md`.
+- Root API advances to 0.102.0; producer schema/noise identity 0.1.0. Package/POC/capture/RAW-frame/production schemas are unchanged. The reference producer does not verify upstream radiometry, accept RGB as RAW input, support rolling/high-resolution/multi-frame capture or activate reserved production stages. New human review and contribution-specific DCO remain required.
+
+## Capture-bound correction and SDR bridge — unreleased
+
+- Added `calculateCaptureCorrectedSdr()` and its strict parser: committed capture/color/WB → native optical geometry/CA → gain → oriented joint-valid output view → existing SDR rendering. Four orientations, off-center crops, separate clocks and preserved source history are inspectable. Gain clipping events are separately reported by the correction executor. See `docs/CAPTURE_CORRECTED_SDR.md`.
+- Root API advances to 0.101.0; package, POC, production and capture schemas are unchanged. No sensor producer, production-stage activation, editor acceptance or new dependency is claimed. Human review and new contribution-specific DCO certification remain required.
+
+## Paired DNG/JPEG reference export — unreleased
+
+- Added `createPhotographicExportPair()` and strict input/color-profile parsers: uncompressed 16-bit native Bayer DNG and baseline 8-bit YCbCr444 JPEG developed from the exact attached RAW frame. Explicit reconstruction, approximate camera color interpretation, existing resolved WB, final orientation/crop and existing SDR rendering are traceable; unsupported resampling fails closed. EXIF/XMP, distinct artifact identities and deterministic SHA-256 provenance accompany owned bytes. See `docs/PHOTOGRAPHIC_EXPORT.md`.
+- Integrates pending capture-SDR, RAW attachment, metadata and reconstruction slices as one main-based draft. Proposed root API 0.100.0; export schema 0.1.0. No runtime dependency or package/POC/capture schema change. Full native input is limited to 4,096 sites. Editor interoperability, production execution and high-resolution support remain open gates.
+
+## Same-RAW reconstruction handoff — unreleased
+
+- Added #16C `resolveRawFrameReconstruction()`: bounded native-region values derived only from the attached #166 RAW frame via #14 explicit linear-neighborhood reconstruction, complete absolute-phase dispatch, child provenance and exact source contributions. Signed values survive; missing edges fail rather than padding/clamping/rephasing. Independent captured float planes are not used. No sensor color calibration, downstream WB/color/output processing or file writer is claimed. See `docs/RAW_FRAME_RECONSTRUCTION.md`.
+- Proposed root API 0.99.0, handoff schema 0.1.0. Stacked draft requires #166; reconcile parallel additive root versions before merge. Existing package/POC/capture/production contracts are unchanged.
+
+## Native RAW-frame attachment — unreleased
+
+- Added #16 prerequisite `createSensorRawFrame()` and strict input parser: complete bounded native periodic-CFA coverage, exact one-site binding, immutable capture attachment, code/black/digital-white/per-site-seed preservation, and rejection of processed/grouped/multi-frame inputs. Producer origin is explicitly caller-declared; no serializer or RAW-to-RGB pairing proof is claimed. See `docs/SENSOR_RAW_FRAME.md`.
+- Proposed root API 0.98.0 and RAW-frame schema 0.1.0. Reconcile additive root versions against parallel drafts before merge; existing package/POC/capture/production versions unchanged.
+
 Notable public changes to `@photivra/engine` are documented here.
 
 ## Unreleased
 
+### Added
+
+- Added #1 ideal regular-polygon scalar Fraunhofer diffraction. The additive `calculateIdealPolygonDiffractionPsf()` returns continuous 1/µm² unit-energy density plus peak-normalized intensity using an analytical polygon boundary integral, explicit equal-area pupil size, propagation distance and resolved wavelength basis. No finite-support renormalization, throughput loss or real-lens effects are inferred. PSF foundation advances to `0.3.0`; root API advances to `0.94.0`. Existing circular Airy, sampled/complex-pupil schemas, production composition and POC behavior are unchanged.
+- Added standalone #114 parametric clean-lens stray-light irradiance, #118 composed digital geometry/sampling and #117 generic camera-applied lens corrections. Exact system/wavelength bindings, separate ghost/veil contributions, full Jacobians, valid-source masks/joint crops, prefilter gates, channel registration, downstream gain/noise/clipping diagnostics, RAW metadata intent and mandatory/reference-bypass states are explicit. No calibrated presets, production/POC stage activation, optical-PSF repair or runtime dependency is added. See `docs/DIGITAL_OPTICS_FOUNDATION.md`. Root API advances to `0.95.0`; new schemas are `0.1.0`. Pending parallel API changes must reconcile versions in merge order.
+- Added #15A/#15B/#15C authoritative capture, color and encoding foundations. `SimulatedCapture` schema `0.2.0` commits immutable format-neutral float planes, explicit linear image states, capture geometry/focal equivalence/focus/WB, public metadata, canonical serialization and external references. Legacy `0.1.0` archives normalize to `0.2.0`. Color model `0.1.0` independently derives the ideal colorimetric camera/linear-sRGB D65 basis, applies explicitly bound resolved RGB gains, or uses an explicitly approximate adopted-white XYZ diagonal transform. Signed floats/headroom are retained; arbitrary spectral/commercial sensor RGB and repeated application are rejected. Linear encoding schema `0.1.0` maps floats to uniform uint16 codes with explicit black/reference-white/headroom, negative and clipping policies, rounding ties and per-side clipping counts while preserving the master. #16 serialization remains separate. Root API advances to `0.96.0`; reconcile pending parallel API changes in merge order. Package/POC/production contracts are unchanged.
+
+- Added independent #112A SDR rendering primitives (schema `0.1.0`) for explicitly color-transformed linear-sRGB/D65 input. Rendering exposure, named identity/positive-per-channel-Reinhard tone choices, explicit component gamut clipping/rejection, standard sRGB transfer, and deterministic 8/16-bit quantization remain separately inspectable. Unresolved WB/color, unsupported HDR policies and non-finite arithmetic fail closed; source samples remain unchanged. No capture/WB/correction adapter or production-stage activation is introduced in this standalone slice. Root API advances `0.96.0` to `0.97.0`; reconcile parallel version bumps in merge order. Package/POC contracts unchanged.
+
+- Added #113 real-lens PSF/aberration framework. Unit-energy sampled 2D PSF profiles preserve image-plane orientation and support bounded regular-grid interpolation across focal length, #103 focus state (via focus diopters, including infinity), aperture, field coordinates, wavelength, and signed image-plane defocus. Best-focus image-plane offsets make field curvature and longitudinal chromatic focus explicit without changing distortion/lateral-CA coordinates. A scalar Fraunhofer complex-pupil reference path jointly evaluates diffraction plus explicit pupil amplitude/optical-path-difference phase while keeping pupil throughput as a separate factor for #110. MTF magnitude-only profiles are diagnostic and explicitly cannot authorize unique PSF reconstruction. Lens PSFs remain upstream of sensor OLPF/CFA/reconstruction and exclude #114 stray light.
+- Added #3 extended-object time-varying projection. Explicit metric points on one rigidly translating object are projected independently through physical time with camera and object translation preserved as separate inputs. Pure axial motion can therefore leave an on-axis center nearly stationary while off-axis geometry expands/contracts. A uniform magnification diagnostic is emitted only for an explicitly declared and validated fronto-parallel planar patch; arbitrary 3D geometry never gains a one-scale or one-homography claim. A #12 capture-local wrapper samples the same geometry on each native point's authoritative local exposure clock. The result remains geometry only: no visibility/occlusion solution, synthetic blur kernel, radiance integration, deformation/acceleration, or static-defocus shortcut is claimed.
+- Added #97 time-domain physical stabilization with generic synthetic sensor-shift, lens-optical, coordinated-body+lens, and off architectures. Explicit rotational disturbance trajectories are corrected with per-axis gain, latency and angular travel limits; declared panning-axis bypass suppresses only the chosen correction axis; coordinated profiles allocate one total correction without double counting. #12 local-exposure sampling evaluates residual stabilization on the authoritative first-opening-boundary time basis. Support/tripod state, CIPA-style stop ratings, camera translation/parallax, spontaneous drift and digital stabilization are deliberately not folded into this physical model. The legacy `stabilizationStopsEquivalent` API remains unchanged.
+- Added #106 manual-flash and ordinary-sync foundations. A flash is represented as a spatial #85 illumination source plus an explicit aperiodic pulse waveform registered to #12's first-opening-boundary time basis. Front- and rear-curtain sync resolve only when the complete active frame has a real simultaneous-open interval long enough for the pulse; impossible ordinary sync fails closed. Existing ambient temporal illumination is preserved when the flash overlay is added. Optional #105 release-frame binding exposes sequence-relative pulse time. Schema 0.1.0 intentionally does not model HSS, TTL/preflash metering, recycle/thermal limits, red-eye preflash, modeling lights, AF-assist, or branded protocols, and never substitutes a post-render brightness multiplier.
+- Completed #7 ISO/exposure-index and generic high-ISO signal-chain foundations. Detailed capability profiles now represent standard ISO/EI ranges and grids, expanded low/high settings, Auto ISO eligibility/ranges, and evidenced capture-mode restrictions without inferring photons, conversion gain, read noise, or saturation from the ISO number. A binder carries those constraints into #99 while keeping manual and Auto ISO envelopes distinct. Generic signal-chain profiles map exact ISO/capture-mode states to explicit #14 readout regimes; Good/Better/Best remain convenience mappings to profile IDs rather than real-camera rankings or direct ISO-to-noise equations.
+- Completed #14 sensor/RAW closure with deterministic seeded photo/dark shot-noise realization, explicit additional-charge sampling policies, separate electronic read-noise components, evidence-backed conversion-gain regimes, black-level offset, pre-ADC saturation, ADC quantization/digital saturation, native CFA/capture-mode-bound RAW samples, and explicit linear neighborhood reconstruction. Physical storage saturation, pre-ADC clipping, and digital saturation remain separate; scalar physical clamping never claims blooming; ISO never implicitly selects a gain regime; grouped/remosaic modes fail closed without explicit combination math; reconstruction revalidates site/channel identity against the declared CFA and does not claim aliasing/moiré without an adequate pre-sampling optical-frequency model.
+- Added #104 generic focus-control with explicit MF, single-AF and continuous-AF policies; renderer-neutral finite/infinity target observations using #103 longitudinal-distance semantics; deterministic ideal-instantaneous AF actuation; explicit idle/acquired/target-lost/locked state; hold-last-focus target-loss behavior with explicit reacquisition; focus lock independent from exposure/metering/WB; and a separate focus-priority/release-priority/balanced capture-gating seam without claiming commercial AF tracking performance.
+- Completed #12 sensor readout/shutter closure with exact capture-mode timing profiles, depth-dependent camera-translation/parallax temporal quadrature, and provider-neutral temporal scene-radiance sampling/reduction on the authoritative first-opening-boundary exposure clock. Readout timing remains distinct from exposure timing; unsupported non-uniform schedules fail closed; translation requires metric depth and does not authorize one global homography; camera and subject translation remain separate inputs; per-node radiance uncertainty/evidence is preserved without fabricated aggregate uncertainty.
+- Completed the #111 capture-state handoff with `createProductionCaptureSnapshotFromReleaseFrame()`: committed #105 release-frame exposure/focus/automation/timing/seed state and the full resolved #108 white-balance state are validated, frozen, fingerprinted, round-trippable, and surfaced in production-plan capture identity. Legacy direct snapshot construction remains supported.
+- Added #134 engine-wide scientific assurance composition with explicit calibrated/approximation/unknown status, required-evidence visibility, quantified/not-quantified/unknown/not-applicable uncertainty states, preservation of existing `CalculationQuality` uncertainty components, and a fail-closed rule against fabricated aggregate uncertainty. #111 production plans and optimized/reference consumer manifests now preserve the same assurance object and include material evidence/uncertainty changes in reproducibility identity.
+- Added #135 generic front-of-lens filter transmission with neutral linear, base-10 optical-density, and wavelength-resolved spectral models. Multiple filters compose multiplicatively with preserved component identity/evidence, remain explicitly unpolarized/unbranded, and integrate exactly once into #110 and #111 without changing aperture geometry, working f-number, DOF, or diffraction. Production capture snapshots now preserve the selected filter stack as immutable capture identity.
+- Added #108 shooting-time white-balance control and Auto WB foundations over an explicit pre-WB camera-linear RGB domain. Generic profile-owned presets, manual gains, independent CCT+tint intent, clipped-sample-safe custom measurement, deterministic gray-world-style AWB priorities, and AWB lock remain separate from physical scene illumination and #15 render/export color transforms. AWB never reads authoritative scene illuminant metadata as an oracle and resolved WB state never changes exposure, focus, or RAW-like capture data.
+- Added #105 deterministic logical release sequencing for single, burst, self-timer, exposure-bracket, and explicit-focus-bracket capture. Generic release capabilities constrain supported drive/bracket modes, maximum frame count/cadence, and inter-frame gap. Scheduling prevents incompatible ordinary-still exposure overlap, derives distinct reproducible per-frame seeds, snapshots base capture state, keeps sensor capture modes separate, and provides an explicit cancellation boundary without conflating WB bracketing with physical multi-exposure capture.
+- Completed the generic #100 metering integration seam with reusable generic-body metering capability profiles, explicit metering-profile/mode compatibility assessment, spot/focus-point linkage capability metadata, and end-to-end meter → frozen target → exposure compensation → #99 automatic-exposure tests. Meter target/calibration policy remains owned by the metering profile rather than duplicated into equipment metadata; the controlled relative-light path preserves the -1 EV scene / +1 EV Auto ISO invariant.
+- Extended sensor-architecture metadata to schema 0.3.0 with optional evidence-backed `cmos | ccd` technology-family identity. CMOS/CCD remains independent from FSI/BSI, stacking, readout, shutter, CFA, noise, QE, dynamic range, and other behavior; no hidden physics is activated by the metadata. Legacy schema 0.2.0 profiles remain accepted with their original schema identity and never acquire an inferred technology family.
+- Added explicit renderer-neutral `FocusPlane` states for finite longitudinal focus distance versus optical infinity. `parseFocusPlane()` keeps JSON/untrusted boundaries fail-closed, while `calculateFocusPlaneImageDistance()` delegates finite focus to the existing Gaussian thin-lens calculation and represents infinity exactly with image distance equal to nominal focal length, zero limiting magnification, and no non-finite/fabricated distance. Existing `focusDistanceM` APIs remain unchanged.
+- Extended #111 production composition with immutable temporal-capture input, authoritative local exposure-window evaluation, separate sensor-readout timing, optional pure-rotation temporal quadrature, and renderer temporal-sampling capability checks. Spatial camera rotation and rolling-readout effects now preserve active versus modeled-zero semantics. Exposure/readout clocks remain explicitly unsynchronized unless a later linkage model establishes synchronization. The planner may compute mature temporal foundations while still blocking a requested full temporal image-formation path on uncomposed upstream PSF dependencies rather than bypassing the authoritative graph. Added renderer/reference consumer manifests that project the same finalized semantic plan into interactive-optimized or reference execution roles without changing stage/effect identity, temporal sample count, seeds, or physical results.
+- Added the first #111 production image-formation composition contract alongside the legacy POC. The new browser-safe plan separates prepared static context from immutable per-capture snapshots, expands required stage dependencies from the authoritative image-formation graph, records active/modeled-zero/omitted/unsupported/blocked stage and effect states, declares renderer capabilities and capability mismatches explicitly, and provides structured blockers instead of silent fidelity degradation. The first composed physical path consumes #85 scene-radiance samples plus #110 optical throughput to produce pre-sensor-stack spectral irradiance. Prepared contexts, capture snapshots, and plans are cloned/frozen and carry deterministic canonical FNV-1a reproducibility fingerprints; the fingerprint is explicitly non-cryptographic. The legacy POC remains unchanged.
+- Added #110's primary optical radiometry bridge from validated outgoing scene spectral radiance to pre-sensor-stack sensor-plane spectral irradiance. The bridge uses an explicit paraxial circular-pupil acceptance term, one mutually exclusive optical-transmission path (wavelength-resolved transmission or an effective working-T-stop approximation), optional field throughput applied exactly once, explicit finite-focus working-f-number semantics, and exact wavelength-basis preservation. It stops before PSF redistribution, distortion-area correction, sensor optical stack/microlens/CFA/QE, stray light, polarization, volumetrics, or wavelength-changing behavior. Numeric spectral curves require reusable/Photivra-owned provenance; calibrated optical data cannot promote the current approximation-only #85 scene-radiance result into a calibrated sensor-irradiance claim.
+- Added final #99 Bulb/Time exposure-duration control and cross-mode hardening. Fixed-duration, Bulb, and Time controls now resolve to a concrete positive elapsed duration before physical integration; unfinished Bulb/Time controls remain active and cannot enter the #12 exposure-window pipeline. Resolved control duration binds only the authoritative seconds-valued nominal exposure duration while preserving caller-selected shutter mechanism/boundary schedules and explicitly refusing to infer tripod support, stabilization state, long-exposure noise reduction, or temperature behavior. Long durations are not capped at a universal 30 s. Added invariants proving equal fixed/Bulb/Time durations produce identical exposure windows and identical resolved aperture/shutter/ISO values produce identical downstream relative exposure regardless of shooting mode.
+- Expanded #99 with Program Auto and Full Auto exposure plus a shared versioned generic program-line policy. Program-line nodes declare optical exposure stops relative to the explicit reference exposure together with aperture/shutter pairs; resolution validates physical consistency, interpolates aperture/shutter in log2 space, applies #109 capability/grid constraints, and reports endpoint/quantization residuals. Program Auto supports manual or Auto ISO; Full Auto exposure always resolves aperture+shutter+ISO but explicitly does not resolve autofocus, white balance, flash, drive, scene recognition, or stabilization policy. Generic program lines are approximation/product policy, not named-camera emulation or physical law.
+- Expanded #99 with a larger priority-mode group: Aperture Priority + Auto ISO, Shutter Priority + manual ISO, and Shutter Priority + Auto ISO. Two-auto-axis behavior is now explicit product policy rather than hidden physics. A+Auto ISO uses minimum selectable ISO until a declared slowest-preferred shutter, then raises ISO; the policy explicitly chooses whether to allow slower shutter after ISO maximum. S+Auto ISO uses minimum ISO with aperture-first selection, then Auto ISO fills remaining exposure. Shutter Priority with manual ISO resolves aperture only. All paths reuse the same #100 target, #109 capability envelope, reference exposure anchor, quantization rules, and signed residual diagnostics.
+- Added the next #99 resolver slice: Aperture Priority with manual ISO. Aperture and ISO remain caller-owned; shutter is the only automatic axis. The resolver reuses the same typed #100 meter target, explicit relative reference exposure anchor, and #109 capability envelope as Manual/Auto ISO. Continuous shutter ranges resolve the ideal duration directly; discrete grids quantize in log2 duration space with the shorter shutter on an exact tie. Shutter min/max and grid quantization produce explicit signed residual-stop diagnostics. No-signal targets block automatic shutter without fabrication.
+- Added the first #99 exposure-mode resolver slice for Manual exposure with either manual ISO or Auto ISO. Aperture and shutter remain caller-owned and are never changed; manual ISO is preserved exactly after capability validation, while Auto ISO resolves only the ISO axis from the typed #100 meter target and #109 capability envelope. Relative target scale is normalized through an explicit reference exposure anchor rather than a hidden ISO-100 assumption. Discrete ISO values use nearest-log2 quantization with a lower-ISO tie break; ISO limits produce explicit residual under/over-target diagnostics. Unsupported/unknown Auto ISO and no-signal targets block Auto ISO without fabricating a setting.
+- Added the first generic #109 equipment-capability foundation for exposure control. Versioned Photivra body profiles now declare evidence-backed shutter-duration and ISO ranges/grids plus distinct supported/unsupported/unknown Auto ISO capability; generic lens profiles declare focal-length range, focal-dependent or constant widest available f-number, narrowest available f-number, and aperture setting grid. A deterministic resolver produces the body+lens exposure envelope at one selected focal length without mutating source profiles or claiming named-equipment emulation. Selected camera state and #99 exposure setting resolution remain separate.
+- Added a stable #100→#99 exposure-meter target seam. Spatial or temporal meter results can be frozen into a reusable AE-lock-safe target snapshot; exposure compensation is applied downstream as an absolute stop offset without mutating the meter measurement, and changed compensation requires a new target identity. Positive compensation requests more exposure. No-signal targets remain finite/unresolved, and automatic aperture/shutter/ISO selection remains outside this layer.
+- Added the #85→#100 scene-radiance metering bridge plus explicit temporal metering. A derivation profile labels renderer/provider scalar pre-exposure reductions as approximation-only with no calibrated spectral weighting; sample-set creation validates provider, illumination, material, optional temporal-profile, scene-state and capture-time identity. Time-varying metering requires explicit capture times on the shared `first-opening-boundary-phase` reference, and weighted temporal averaging combines linear meter signals under caller-declared positive normalized weights rather than silently averaging stop offsets. Flash/TTL metering, exposure compensation, and automatic aperture/shutter/ISO resolution remain separate.
+- Added a renderer-neutral relative pre-exposure metering foundation for #100. Generic multi-zone, center-weighted, spot, and highlight-weighted policies operate on area-weighted linear samples in the physically oriented active capture frame; output crop, tone mapping, display gamma, white balance, sharpening, exposure compensation, and automatic setting resolution remain outside the meter. The meter preserves stable measurement/scene-state identity, returns a finite no-signal state instead of infinite correction, and enforces the controlled invariant that a uniform -1 stop scene-signal change produces a +1 stop shift to the declared relative target.
+- Added temporal illumination waveforms and explicit source-waveform↔capture-time registration. Aperiodic flash/pulse and periodic flicker profiles use seconds-based piecewise-linear relative multipliers bound to the existing `first-opening-boundary-phase` capture reference; local exposure integration consumes authoritative exposure-window samples with deterministic midpoint quadrature. Sensor readout timing is never used as an exposure-time proxy, base source magnitude/spectrum remain authoritative, and the layer does not choose exposure settings, apply source magnitude/material transport, calculate scene radiance, or estimate convergence error.
+- Added shared continuous spectral-coverage composition plus first-class discrete line-spectrum measures. Continuous participants now intersect explicit air/vacuum support and union interpolation breakpoints without applying spectral values; sensor-response and scene-illumination adapters feed that shared plan. Discrete illumination spectra use normalized wavelength-integrated line weights, distribute broadband source magnitude into integrated per-line quantities, and integrate by summation without inventing a line width or multiplying by dλ. Continuous and discrete paths remain separate, and calibrated absolute line-output claims are still not authorized automatically.
+- Added the renderer-neutral scene-radiance provider/material-response boundary. Material profiles distinguish unresolved, RGB/PBR approximation, and wavelength-preserving spectral-data inputs; provider profiles declare spectral/material/visibility/direct/indirect fidelity; evaluation requests bind exact scene/profile/target/time/wavelength identity; results use outgoing spectral radiance in W/m²/sr/nm; and binding validation prevents profile/material/request/result drift without recomputing renderer output. Schema 0.1.0 remains approximation-only at the provider/result level and explicitly does not authorize calibrated radiance, optics/sensor-plane irradiance, photons, fluorescence, volumetric transport, or polarization.
+- Added renderer-neutral shared spectral wavelength primitives plus a scene illumination profile for stable point/spot/area/directional/environment source identities, explicit source-specific magnitude units, relative/RGB/blackbody/continuous-spectrum representations, reusable-data provenance, and fail-closed approximation/calibration boundaries. The profile describes illumination only and does not calculate outgoing scene radiance, material response, visibility, indirect transport, fluorescence, volumetrics, polarization, or sensor signal.
+- Added `scene-radiance-evaluation` as an explicit image-formation ownership stage between scene projection and lens/pupil evaluation. The stage defines the future seam for outgoing spectral radiance without turning `SceneRadiometry`, source metadata, RGB preview values, or sensor-plane irradiance into interchangeable quantities.
+- Added a sensor spectral-response foundation linked to exact color-sampling channel IDs. It supports direct effective external QE, direct effective spectral responsivity in A/W, or explicitly separable channel-filter transmittance × detector EQE; requires reusable rights for embedded numeric curves; uses explicit air/vacuum/unspecified wavelength bases with piecewise-linear interpolation and fail-closed out-of-range behavior; preserves single-condition metadata without inventing angle/temperature/polarization dependence; and keeps spectral integration, photons/electrons, RAW values, and reconstruction separate.
+- Added response-breakpoint-aware bounded sensor spectral quadrature. Requested range edges, response-curve knots, and optional caller-supplied continuous-spectrum/optics breakpoints form deterministic midpoint segments with explicit dλ and a maximum subinterval width; response scope/provenance are preserved while response application, source-spectrum integration, photon/electron/current calculation, and RAW output remain separate.
+- Added pre-response spatio-spectral irradiance reduction over explicit E_lambda(x,y) samples in W/m^2/nm. The reducer validates exact spatial/spectral profile linkage, caps the Cartesian product, composes normalized AA/aperture spatial measures with dλ, and reports wavelength-integrated spatial-average irradiance plus geometric-aperture incident flux without applying sensor response or temporal exposure.
+- Added a sensor-response application compatibility gate. It binds response data to exact color/sampling-aperture/optical-stack identities, validates response reference plane and incident-area normalization, requires explicit spatial response uniformity/separability before post-spatial application, checks declared reference conditions, blocks unresolved wavelength basis, and keeps signal conversion disabled pending a later typed EQE or A/W path.
+- Added an evidence-backed sensor-response operating-range gate for instantaneous optical-input linearity. It preserves radiant-power vs irradiance calibration domains, wavelength applicability, reference conditions, uncertainty, and a declared maximum relative nonlinearity criterion while keeping exposure/full-well saturation and downstream electronics linearity explicitly separate.
+- Added a photon-energy wavelength-basis foundation using exact SI Planck constant and vacuum light speed. Vacuum wavelengths map directly; air wavelengths require an exact-wavelength sourced phase refractive index plus explicit atmosphere compatibility, and refractive-index uncertainty is preserved without falsely claiming uncertainty propagation.
+- Added typed EQE/filter×detector-EQE instantaneous electron-rate conversion. The converter validates structural and operating-range authorization, requires explicit spatial linear superposition and per-spectral-bin operating-range applicability, binds response evidence and evaluated bin inputs to the exact pre-response reduction, converts each wavelength-bin power contribution to photon rate with the photon-energy foundation, applies effective QE per wavelength, and returns expected electron rate without temporal integration.
+- Tightened the operating-range gate so wavelength-dependent rate conversion now fails closed unless both geometric-aperture linear superposition and per-spectral-bin input applicability are explicitly established. Broadband-only range evidence remains diagnostic but cannot authorize EQE/A-W conversion.
+- Added typed A/W spectral-responsivity conversion from per-wavelength geometric-aperture radiant power to detector-terminal photocurrent magnitude. The path requires the same structural/spatial/per-bin operating gates as EQE plus an explicit electrical applicability profile for detector bias and current-readout loading; transimpedance, voltage, temporal charge, saturation, noise, ADC and RAW remain downstream.
+- Added local sensor-rate/exposure-window binding. Engine-produced EQE and A/W rate results now preserve source color-site identity; the binding validates the exact site channel, requires an evidenced one-to-one color-site/native-effective-raster relationship, recomputes the local shutter window at the mapped native sample center, and deliberately leaves constant-rate temporal integration unauthorized.
+- Added evidence-bound constant-rate temporal integration for exact local exposure windows. EQE rates become fractional expected photon/electron counts; A/W photocurrent becomes charge magnitude in coulombs without carrier inference. Results remain photo-signal-only and explicitly cannot authorize full-well or camera-saturation assessment.
+- Added dark-current charge accumulation for the EQE electron-count path. Dark current is explicitly pre-compensation thermal electron generation in e-/s, can use exact-reference temperature or fail-closed piecewise-linear measured temperature tables, and does not infer a universal exponential temperature law or dark-current nonuniformity.
+- Added accumulated stored-charge composition and completeness assessment. Photo and dark expected electrons plus explicitly incremental additional stored-electron contributors are rebound to one exact local exposure; only an evidence-backed all-material-contributors completeness declaration authorizes later physical full-well assessment.
+- Added physical charge-storage capacity assessment against complete expected stored electrons. Capacity is explicitly distinct from camera saturation/digital clipping, remains bound to sensor site/operating state/temperature applicability, and reports expectation-vs-capacity without clamping, blooming, overflow redistribution, or stochastic saturation claims.
+- Added camera signal saturation-capacity assessment in dark-corrected photo-generated electron-equivalent units. The comparison deliberately excludes dark/other stored charge, does not reuse physical full-well capacity, and does not infer which analog/digital stage limits the camera response.
+- Added exact canonical response-channel data binding from spectral quadrature through spatio-spectral reduction. EQE and A/W converters now reject numeric calibration-curve drift even when profile IDs and evidence references are unchanged; the binding is an exact data-identity mechanism, not a cryptographic integrity checksum.
+
+### Changed
+
+- Engine API contract advances to `0.97.0`; production image-formation plan contract advances to `0.5.0`; scientific-assurance contract remains `0.1.0`; production capture snapshot advances to `0.3.0`; production plan consumer manifest remains `0.1.0`; image-formation contract remains `0.4.0`; Exposure Mode Resolver remains `0.5.0`; Exposure Duration Control remains `0.1.0`. The composed POC remains `0.20.0`; package version remains `0.6.0` until the next public release.
+
 ## 0.6.0 - 2026-09-29
 
 ### Added
@@ -28,6 +211,9 @@ Notable public changes to `@photivra/engine` are documented here.
 
 ### Fixed
 
+- Hardened npm package-surface validation so every relative module re-exported by the built root `dist/index.js` must also be present in the packed tarball; added previously missing public `capture`, `composition`, `equipment`, and new `color` dist directories to the package whitelist.
+
+
 - Radial-distortion invertibility validation now uses scale-normalized, cancellation-resistant stationary-point solving so near-linear high-order profiles cannot hide an interior fold; unsafe derived normalized radii and malformed/sparse batch points fail closed as scientific input errors.
 - Reverse image-plane coordinate mapping now uses a physical-scale floating-point edge tolerance instead of a fixed normalized-UV tolerance.
 

package/CITATION.cff

@@ -9,7 +9,7 @@ abstract: "An open TypeScript engine for the science and mathematics of photogra
 repository-code: "https://github.com/photivra/photivra"
 url: "https://photivra.com"
 license: "Apache-2.0"
-version: "0.6.0"
+version: "1.0.0"
 keywords:
   - photography
   - camera optics

package/CONTRIBUTING.md

@@ -0,0 +1,76 @@
+# Contributing
+
+Contributions are welcome when they preserve scientific integrity, source provenance, API consistency, and the Apache-2.0 licensing boundary.
+
+## Development setup
+
+Node.js 22.13 or newer is required for the repository's development/tooling workflow. The reproducible npm path is:
+
+```sh
+npm ci
+npm run check
+npm run coverage
+npm run build
+npm run pack:check
+```
+
+CI verifies maintained Node.js 22 (including minimum 22.13) and 24; prefer patched Node 24 under [the runtime policy](NODE_SUPPORT.md). For release preparation also run `npm run docs:check` and `npm run release:consumer-check` after build. The generated API reference must match root exports; regenerate with `node scripts/generate-api-reference.mjs` when public contracts change.
+
+## Before submitting
+
+- Follow [docs/API_STYLE.md](docs/API_STYLE.md).
+- Follow [docs/NUMERICAL_CORRECTNESS.md](docs/NUMERICAL_CORRECTNESS.md).
+- Follow [docs/PROVENANCE.md](docs/PROVENANCE.md).
+- Add meaningful analytical/regression tests.
+- Update concise documentation when behavior, assumptions, limitations, schemas, version surfaces, or public APIs change.
+- Preserve the browser-safe published-package boundary; Node-only transport code is repository-only contributor tooling and must not become a public package export.
+- Keep npm/package version, `ENGINE_API_VERSION`, `POC_SIMULATION_API_VERSION`, and schema-specific versions distinct.
+- For sensor/capture work, preserve native coordinate conventions, active-capture vs output-crop separation, optical-axis offsets, and independent X/Y sampling.
+- For provenance/calibration work, keep evidence origin separate from reuse rights and never treat geometric sample pitch as photon-collection area.
+- Do not submit copied or adapted third-party code/data unless its license and provenance are explicitly compatible and recorded.
+- If generative tools assisted with code or prose, the contributor remains responsible for originality, licensing, scientific accuracy, confidentiality, and substantive human review.
+- Do not rely on an AI system's statement that generated material is original, copyrightable, unpatented, or license-compatible as legal evidence.
+
+## Sensor/capture contribution checklist
+
+Changes in sensor, capture, output, or radiometry code should explicitly answer:
+
+- Which coordinate space does each point/vector/rectangle use?
+- Does the change preserve native top-left/+X-right/+Y-down semantics?
+- Are physical active capture and digital/output crop still separate?
+- Does an off-center crop preserve optical-axis position?
+- Are X/Y sampling differences preserved or deliberately rejected?
+- Does output resampling preserve geometry unless an explicit transform says otherwise?
+- Is physical focal length kept separate from diagonal-based 35 mm equivalence?
+- Are unknown sensor facts left unknown instead of inferred?
+- Is every evidence record legally usable for the way it is consumed?
+- Is any approximate representation still labeled approximation?
+- Does any radiometry change accidentally enable photon/noise claims without the readiness gate and defensible calibration?
+
+## Contributor certification
+
+Contributions are made under the [Developer Certificate of Origin 1.1](DCO).
+
+Every commit intended for inclusion should contain a `Signed-off-by` line. The simplest workflow is:
+
+```sh
+git commit -s
+```
+
+By signing off, the contributor certifies the DCO for that contribution, including the right to submit it under the project's open-source license and the public/indefinite nature of the contribution record.
+
+## Scientific changes
+
+A pull request that changes calculations should include:
+
+- the equation/model being implemented or changed;
+- assumptions, coordinate conventions, and units;
+- provenance/references;
+- analytical or independently reproducible test cases;
+- any numerical behavior change;
+- uncertainty/approximation notes where relevant;
+- compatibility impact on the root engine API and/or composed POC simulation API, if applicable;
+- coordinate-system/invariance tests for geometry changes;
+- evidence, reuse-rights, calibration/approximation status, and uncertainty/limitation treatment for sensor/radiometry changes.
+
+Critical scientific regressions and unsupported scientific claims are release blocking.

package/DCO

@@ -0,0 +1,33 @@
+Developer Certificate of Origin
+Version 1.1
+
+Copyright (C) 2004, 2006 The Linux Foundation and its contributors.
+
+Everyone is permitted to copy and distribute verbatim copies of this
+license document, but changing it is not allowed.
+
+Developer's Certificate of Origin 1.1
+
+By making a contribution to this project, I certify that:
+
+(a) The contribution was created in whole or in part by me and I
+    have the right to submit it under the open source license
+    indicated in the file; or
+
+(b) The contribution is based upon previous work that, to the best
+    of my knowledge, is covered under an appropriate open source
+    license and I have the right under that license to submit that
+    work with modifications, whether created in whole or in part
+    by me, under the same open source license (unless I am
+    permitted to submit under a different license), as indicated
+    in the file; or
+
+(c) The contribution was provided directly to me by some other
+    person who certified (a), (b) or (c) and I have not modified
+    it.
+
+(d) I understand and agree that this project and the contribution
+    are public and that a record of the contribution (including all
+    personal information I submit with it, including my sign-off) is
+    maintained indefinitely and may be redistributed consistent with
+    this project or the open source license(s) involved.

package/NODE_SUPPORT.md

@@ -0,0 +1,37 @@
+# Photivra organization Node.js support policy
+
+Adopted: 2026-09-26. Applies to every Node.js repository in the Photivra organization, including contributor tooling, CI, build/deployment tooling, and supported Node.js execution environments. It does not change browser support or the browser-safe engine boundary.
+
+## Maintained LTS only
+
+"Actively maintained LTS" means an official Node.js release line in either **Active LTS** or **Maintenance LTS**, before its upstream end-of-life date. Current, prerelease/nightly, end-of-life, and commercial extended-support-only releases are not supported.
+
+Use the official lifecycle, not "latest", a version-number parity rule, or an open-ended minimum version as evidence of support:
+
+- https://nodejs.org/en/about/previous-releases
+- https://github.com/nodejs/Release
+- https://github.com/nodejs/Release/blob/main/schedule.json
+
+As reverified against the official schedule on 2026-10-02 (original policy review 2026-09-26), Node 24 is Active LTS and Node 22 is Maintenance LTS. Node 26 is Current and is not eligible yet. Future dates must be reverified; entering LTS makes a line eligible for review, not automatically supported by every repository.
+
+## Repository baselines
+
+An eligible upstream line is not an untested repository compatibility claim. Each repository must explicitly record and test its supported subset. Prefer the newest qualified Active LTS line for normal development and builds; retain a qualified Maintenance LTS line where compatibility is already supported.
+
+This repository preserves its existing Node 22 and Node 24 CI coverage, including the Node 22.13.0 minimum-version regression job. The normal tooling baseline and pinned `@types/node` major remain **24**. Use current patched releases for ordinary development/deployment; a historical minimum-version regression job is not a deployment recommendation.
+
+Node 22-compatible code must not assume Node 24-only APIs merely because contributor tooling uses Node 24 typings. Keep the Node 22 runtime tests and the public browser-safe package boundary. A broad existing `engines.node` range is a compatibility hint, not permission to claim support for Current or EOL lines. Any manifest-range change must update its lockfile and follow package compatibility/release review; this policy does not rewrite already-published packages.
+
+## CI and dependency enforcement
+
+`.github/node-lts-policy.mjs` checks the actual Node build's LTS marker, this repository's approved major set, a reviewed upstream LTS date window, and the approved pinned typings major before dependency installation. `.github/test-node-lts-policy.mjs` covers acceptance and rejection boundaries. Both run in existing CI jobs; no additional CI matrix or service is introduced.
+
+The lifecycle snapshot is intentionally local and reviewed, not fetched from the network during ordinary CI. It uses UTC dates and fails closed on the recorded end-of-life date. Reverify the official schedule before changing the snapshot, before a baseline/release decision, and during regular dependency maintenance. Do not extend an expired window or add a Current line merely to pass CI.
+
+Routine minor/patch updates within an approved major may follow normal green-PR rules. Do not auto-merge a Node runtime, Node image, or `@types/node` major upgrade independently. Where Dependabot is configured, keep Node typings major upgrades out of its routine update queue while allowing supported-major updates.
+
+## Lifecycle changes
+
+Add a newly eligible LTS line through one coordinated review of the support policy/guard, CI, local version files, build environments, typings, manifest/lockfile compatibility, and tests. Update only files that exist and are relevant; do not introduce a new runtime or infrastructure merely for uniformity. Remove a line from the support set and CI before upstream EOL, documenting downstream compatibility implications. Never silently raise a library's minimum runtime or advertise an untested line.
+
+All existing scientific, security, provenance, regression, artifact, and release gates remain in force. This rule does not authorize npm publication, tags, public release, or a default runtime-major upgrade.

package/NOTICE

@@ -7,3 +7,5 @@ Source code in this repository is made available under the Apache License,
 Version 2.0. The Apache License does not grant permission to use Photivra
 trade names, trademarks, service marks, product names, logos, or branding
 except as allowed by applicable law and the license itself.
+
+This product includes DNG technology under license by Adobe.