@pixel-point/toolcraft 0.0.17 → 0.0.19

package/templates/runtime/contracts/component-contracts.runtime.ts

@@ -27,6 +27,7 @@ export const TOOLCRAFT_RUNTIME_COMPONENT_CONTRACTS = {
       "Infinity canvas suppresses the bounded product-rendered preview background so the dormant finite output does not appear as a second canvas; when the standard Background pair is enabled, CanvasShell fills the complete infinite viewport with the selected Background color.",
       "When the standard Background pair exists, disabling Background atomically restores finite mode and disables Infinity canvas; re-enabling Background restores switch availability without enabling Infinity automatically.",
       "Infinite exports use canonical world-space scene frames: ToolcraftAppComposition.sceneBoundsProvider contributes exact-state product bounds, runtime image and model bounds are unioned, hidden or suppressed content is excluded, PNG crops tightly, and runtime video unions every scheduled frame state into one envelope.",
+      "Infinite live preview uses that same exact-state product frame: runtime positions one product scene surface from sceneBoundsProvider, and custom raster/WebGL output consumes useToolcraftProductSceneFrame for backing size and world-to-local translation instead of dormant canvas.size.",
       "Do not let canvas.upload choose intrinsic-media by default. Upload without explicit sizing resolves to editable-output so source/background images do not own product output size.",
       "Use intrinsic-media only for true media-viewer or source-native apps where the natural uploaded/generated media size is the product output; record the reason and prove it with intrinsic-media-size acceptance.",
       "Use editable-output for generated, exportable, shader, poster, badge, wall, banner, thumbnail, procedural, reference-clone, and product-output apps so users always see Aspect ratio, Canvas width, and Canvas height.",
@@ -38,7 +39,7 @@ export const TOOLCRAFT_RUNTIME_COMPONENT_CONTRACTS = {
       "Resolved canvas.size exists for every canvas app, but visible Canvas width and Canvas height controls are mandatory only for editable-output sizing and live in the mandatory runtime Setup section.",
       "If canvas.size is provided without an explicit sizing mode, defineToolcraft treats it as editable-output and adds Canvas width and Canvas height controls.",
       "The runtime Canvas width and Canvas height block uses the mandatory headerless Setup controls block; do not add a separate Canvas section label above these fields.",
-      "When the user manually edits Canvas width or Canvas height, the runtime keeps the typed dimension, keeps the other dimension unchanged, switches Aspect ratio to Custom, and shows the reduced current ratio in the custom ratio inputs.",
+      "When the user manually edits Canvas width or Canvas height, the runtime keeps the typed dimension, keeps the other dimension unchanged, switches Aspect ratio to Custom, stores the reduced current ratio in state, and keeps Canvas width and Canvas height as the sole custom numeric editors.",
       "Aspect ratio presets are the only interaction that may resize both canvas dimensions from a preset; manual size inputs are exact output dimensions.",
       "For non-vector raster, Canvas 2D, WebGL, and WebGPU previews, set canvas.renderScale: true so the runtime adds Resolution scale after canvas sizing. The scale changes backing pixels from 1 to 2 without changing visible canvas size.",
       TOOLCRAFT_PERFORMANCE_VERIFICATION_POLICY.renderScaleFidelity,
@@ -104,7 +105,7 @@ export const TOOLCRAFT_RUNTIME_COMPONENT_CONTRACTS = {
       runtimeSetupModeRowRule,
       runtimeSetupModeHelpRule,
       "Keep sticky footer panelActions for product delivery actions only, such as Export PNG, Export Video, Copy, Generate, Apply, or Download.",
-      "Typed Export PNG and Export Video actions are runtime-owned and consume one ToolcraftAppComposition.exportRenderer; use onPanelAction only for non-export product actions.",
+      "Typed Export PNG/Video actions consume ToolcraftAppComposition.exportRenderer and typed Export SVG consumes svgExportRenderer; all are runtime-owned, so use onPanelAction only for non-export product actions.",
     ],
     capabilities: ["settings-import-export"],
     commands: ["controls.setValue", "timeline.setCurrentTime", "timeline.setDuration"],
@@ -121,17 +122,20 @@ export const TOOLCRAFT_RUNTIME_COMPONENT_CONTRACTS = {
       "Compound controls must declare controlPartCoverage for every semantic value part required by their control type.",
       "Compound control browser tests must explicitly exercise each required value part, not only one visible sub-control.",
       "Acceptance tests must fail when an entity is disconnected from runtime state, renderer output, export output, or command side effects.",
+      "Built-in control values enter runtime state through one canonical codec for defaults, live edits, persistence, settings import, and keyframes.",
+      "Selection-scoped property controls prove two distinct entities: the selected entity changes and the comparison entity remains unchanged in both selection directions.",
       "Do not accept typecheck, component existence, registered commands, runtime state mutation, renderer input objects, shader uniform presence, or signature strings as final proof.",
       "Use product-level observables such as rendered pixels, exported image bytes, canvas hash, clipboard payload, cleared media preview, selected layer result, changed viewport, or timeline-rendered frame.",
-      "Any supplied video, GIF, screen-recording, contact-sheet, or extracted-frame reference requires a Video Reference Study before implementation: storyboard frames, frame-to-frame transition analysis, behavior decomposition, and acceptance mapping. Do not implement video references from a single screenshot or high-level summary.",
+      "Every supplied video, GIF, screen-recording, contact-sheet, or extracted-frame reference must be registered as a typed referenceInputs item and preprocessed with pnpm reference:study before product code. The protected study performs a full source scan, reviews dense 12 FPS evidence, partitions reviews above 120 frames, classifies every detected event, decomposes complete contiguous phases into behaviors, and maps each behavior bidirectionally to observable acceptance and browser reference-parity coverage. A no-reference app declares referenceInputs: [] and runs no preprocessing.",
       "A generic canvas hash difference is not enough for workload or semantic controls; assert the intended direction of the effect.",
       "Component variants are accepted entities too; tests should fail if a non-default Toolcraft control variant falls back to the default variant or custom markup.",
       "Conditional entities require fixtures that make the condition observable.",
-      "Use visibleWhen for mode-, type-, source-, include-, variant-, or count-exclusive sections or controls that do not belong to the current selected state.",
-      "When visibleWhen references a selector for the same product entity or selected branch, keep the selector and its dependent controls in one semantic section. A section that exists only because one selector option is active is not a separate product section just because the branch uses a standalone control.",
-      "When a count/quantity control determines how many sibling controls are available, hide unavailable siblings with visibleWhen; do not render all possible controls while the renderer reads only the first N.",
-      "If a switch/select/segmented/tabs/imagePicker/checkbox chooses a branch for the same product entity, controls outside the current branch use visibleWhen, not disabledWhen.",
-      "Do not use schema disabled: true or disabledWhen for generated product controls; the panel should show only controls usable in the current state. Runtime primitives may still have disabled styling internally, but app schemas should model product availability with visibleWhen.",
+      'Every generated product control declares applicability as mode: "always" or mode: "conditional"; omitted applicability and legacy visibleWhen are runtime compatibility only and fail starter acceptance.',
+      "Conditional applicability combines every predicate with AND, hides controls outside mode/type/source/include/variant/count branches, and preserves their runtime values while hidden.",
+      "A visible product control must prove its existing product outcome in every supported finite sibling-selector branch from its Control Section Inventory, including always controls and selectors omitted from its predicates.",
+      "When applicability references a selector for the same product entity or selected branch, keep the selector and its dependent controls in one semantic section. A section that exists only because one selector option is active is not a separate product section just because the branch uses a standalone control.",
+      "When a count/quantity control determines how many sibling controls are applicable, conditional applicability hides unavailable siblings; do not render all possible controls while the renderer reads only the first N.",
+      "Do not use schema disabled: true or disabledWhen for generated product availability; runtime primitives may use disabled styling internally, but product controls outside the active branch are absent.",
       "Do not leave inactive conditional controls visible while making the renderer ignore them.",
       "Before controls or canvas interactions, declare typed interactionOwnership for every operation that could plausibly live on either surface. User request, inspected reference, or product usability selects one primary owner.",
       "Do not mirror one operation across canvas and panel, even with different labels, ids, styling, or custom chrome. The same target and operation capability has one surface owner.",
@@ -214,7 +218,7 @@ export const TOOLCRAFT_RUNTIME_COMPONENT_CONTRACTS = {
       "Generated reference clone apps must declare starterTransferMode.referenceTimeline with mode none, toolcraft-playback, toolcraft-keyframes, or custom-reference-timeline.",
       "Custom reference timeline behavior needs referenceTimelineCoverage entries such as state-jump, trim-range, range-playback, all-range, jump-to-trim-start, and export-range.",
       "Reference clone acceptance must include referenceCoverage rows for canvas sizing, control mapping, renderer state, and any renderer loop, spawn/update cadence, pause/resume, export/copy, or media lifecycle behavior in the reference.",
-      "Video reference assets used in a reference clone also require starterTransferMode.videoReferenceStudy with storyboard frames, frame-to-frame transition analysis, behavior decomposition, and acceptance mapping.",
+      "Motion reference assets used in a reference clone must use typed starterTransferMode.referenceInputs with nested studies backed by pnpm reference:study evidence; each study covers the fully scanned source through dense phases, classifies every detected event, maps behaviors through acceptanceId and motionReferenceCoverage, and requires browser reference-parity.",
       "Browser tests must compare reference behavior or a reference-derived baseline, not only Toolcraft state mutation.",
     ],
     capabilities: [
@@ -238,9 +242,10 @@ export const TOOLCRAFT_RUNTIME_COMPONENT_CONTRACTS = {
       "A concise property label such as Speed, Color, Size, or Opacity is allowed when the nearest visible section or group clearly names the affected product entity.",
       "When the section is generic, mixed, missing, or otherwise weak context, include the affected entity or role in the label: Pattern color, Background opacity, Wave speed, Stroke width.",
       "Acceptance validators suggest semantic replacement labels for weak generic labels; fix the schema label instead of relying on runtime fallback rewriting.",
-      "Controls-panel sections should stay discrete: two to seven product controls is the normal size, and larger sections must split by product sub-entity or workflow stage.",
-      "Generated product apps must export starterControlSectionInventory beside acceptance. Every product controls section declares title, exact targets, groupingReason, and entity or workflowStage; intentional splits of one target entity require workflowStage and splitReason on every split section.",
-      "Section splitting must preserve dependency cohesion: a selector stays with the visibleWhen controls it gates when they share the same target entity or selected branch. Use internal spacing/dividers or a more specific section title before splitting dependent branch controls away.",
+      "One to seven controls is the normal section size. Eight to ten controls are allowed only for one cohesive entity and require semanticGroup on every control; ten is the hard maximum.",
+      "Every Control Section Inventory entry declares required entityId, entity, exact targets, and groupingReason. One entity with ten or fewer controls stays in one section regardless of control type, visual height, or target namespace.",
+      "An entity above ten controls splits into balanced workflow sections of two to ten controls. Every split section keeps the same entityId and entity and declares a unique workflowStage plus splitReason.",
+      "Section splitting must preserve dependency cohesion: a selector stays with the applicability-gated controls it owns when they share the same target entity or selected branch. Use internal spacing/dividers or a more specific section title before splitting dependent branch controls away.",
       "Every app-authored controls-panel body section must have a short meaningful visible title. Runtime-created Setup renders as the first visible headerless controls block with no title, reset action, collapse button, or collapsed state; sticky footer action sections use the technical title Export but render without a visible heading.",
       "Every visible app-authored controls-panel section title renders through the standard 36px collapsible header row with vertically centered text and the runtime collapse icon; generated apps must not hand-build section headers.",
       "Controls-panel section expand and collapse uses the standard runtime height/opacity animation; generated apps must not replace it with instant custom section visibility.",
@@ -289,6 +294,7 @@ export const TOOLCRAFT_RUNTIME_COMPONENT_CONTRACTS = {
       "Do not use selectedLayer.* targets when panels.layers is disabled; single-layer apps use app-specific targets.",
       "Layer-enabled apps need layerCoverage acceptance for selection, visibility, reorder, and grouping.",
       "Every selectedLayer.* control needs selected-layer-controls acceptance proving it edits the currently selected layer output.",
+      "Every selectedLayer.* control uses the shared two-entity isolation recipe in addition to selected-layer-controls coverage.",
       "Layer browser coverage must use real LayersPanel rows and buttons, not direct layers.* command dispatch.",
       "Layer-enabled custom renderers need layers.interactions coverage around real selection, visibility, reorder or grouping, and selected-layer output checks.",
     ],
@@ -319,6 +325,7 @@ export const TOOLCRAFT_RUNTIME_COMPONENT_CONTRACTS = {
       "Before choosing no timeline for any animated product, write an Animation Intent Inventory: product transport, editable keyframes, or autonomous decorative output, plus the user-facing time behaviors present or intentionally absent.",
       'User-requested product animation defaults to panels.timeline mode "playback" unless the spec explicitly declares autonomous decorative/self-running output with no play, pause, scrub, duration, loop, export-at-time behavior, or video export.',
       'Any product app with Export Video must enable the top Toolcraft timeline: use panels.timeline mode "playback" for product animation transport, or mode "keyframes" when exported animation is driven by keyframes.',
+      'Export Video is valid only when productReadiness.exportIntent.video is "user-requested" with non-empty explicit user-request evidence; animation, playback, keyframes, and timeline presence never authorize video export.',
       'Use panels.timeline: { mode: "playback" } when the product needs user-facing play, pause, scrubbing, duration, loop, restart, time progress, export-at-time controls, or video export.',
       'When panels.timeline is enabled for a new Toolcraft app, appTransferMode.animationIntent must match it: mode "timeline-playback" for playback, or mode "timeline-keyframes" for keyframes.',
       "Playback renderers must consume runtime timeline state; pause freezes output, scrubbing renders a deterministic frame, and the full animation cycle maps to state.timeline.durationSeconds instead of a local fixed duration.",

package/templates/runtime/contracts/component-contracts.test.ts

@@ -26,6 +26,7 @@ describe("Toolcraft template component contracts: core", () => {
       "checkbox",
       "actions",
       "collectionActions",
+      "sourceCollection",
       "panelActions",
       "colorOpacity",
       "palette",
@@ -72,6 +73,7 @@ describe("Toolcraft template component contracts: core", () => {
       "palette",
       "actions",
       "collectionActions",
+      "sourceCollection",
       "panelActions",
       "customControl",
     ] as const) {

package/templates/runtime/contracts/component-contracts.visual.test.ts

@@ -3,6 +3,14 @@ import { describe, expect, it } from "vitest";
 import { getToolcraftComponentContract } from "./component-contracts";
 
 describe("Toolcraft template component contracts: visual controls", () => {
+  it("keeps Color UI payloads behind the canonical string value model", () => {
+    const contract = getToolcraftComponentContract("color");
+
+    expect(contract.aiUsageRules).toContain(
+      "Color product state is a canonical hex string even though the UI callback payload is { hex }.",
+    );
+  });
+
   it("marks standalone controls as component-labeled standalone controls", () => {
     for (const id of [
       "palette",
@@ -70,6 +78,9 @@ describe("Toolcraft template component contracts: visual controls", () => {
     expect(contract.aiUsageRules).toContain(
       "Vector pad value labels render compact rounded coordinates. Do not expose raw floating-point strings such as -0.07070312499999998 in the controls panel.",
     );
+    expect(contract.aiUsageRules).toContain(
+      "Vector product state always stores finite numeric x and y values; decimal strings exist only at the visual input boundary and canonicalize before state or keyframes.",
+    );
     expect(contract.aiUsageRules).toContain(
       "Double-clicking a vector pad resets both axes to the control default through the normal runtime value update, matching section header reset semantics; if no default is defined, the fallback is 0,0. Do not add a separate custom reset UI for this basic pad reset behavior.",
     );
@@ -197,6 +208,9 @@ describe("Toolcraft template component contracts: visual controls", () => {
     expect(color.aiUsageRules).toContain(
       "Make color label visibility a group-level decision: do not mix labeled and unlabeled items inside one semantic color bank.",
     );
+    expect(color.aiUsageRules).toContain(
+      "In a mixed section with multiple plain Color controls, declare semanticGroup on every plain Color; runtime pairs only adjacent colors in the same semantic group. A color-only section is one implicit bank.",
+    );
     expect(color.aiUsageRules).toContain(
       "Keep visible labels when colors edit distinct user-facing entities or roles, such as Fill, Stroke, Background, Connector, Object, or Highlight.",
     );
@@ -348,6 +362,12 @@ describe("Toolcraft template component contracts: visual controls", () => {
     expect(contract.aiUsageRules).toContain(
       "Render multiple related color fields in one section with at most two colors per row.",
     );
+    expect(contract.decisionCatalog?.layoutConstraints).toContain(
+      "In a mixed section with multiple plain Color controls, declare semanticGroup on every plain Color; runtime pairs only adjacent colors in the same semantic group. A color-only section is one implicit bank.",
+    );
+    expect(contract.aiUsageRules).toContain(
+      "In a mixed section with multiple plain Color controls, declare semanticGroup on every plain Color; runtime pairs only adjacent colors in the same semantic group. A color-only section is one implicit bank.",
+    );
     expect(contract.aiUsageRules).toContain(
       "If a multi-color bank has an odd trailing plain Color, keep that last Color at half width; only ColorOpacity or intentionally full-width compound controls occupy a full row.",
     );

package/templates/runtime/contracts/component-contracts.visual.ts

@@ -127,6 +127,7 @@ export const TOOLCRAFT_VISUAL_COMPONENT_CONTRACTS = {
       "Use the default vector variant for spatial values such as position, offset, direction, focus, anchor, and light direction.",
       'Default spatial vector pads use coordinateMode: "screen": dragging left/up makes vector.x and vector.y smaller so canvas objects move left/up without renderer-side Y inversion.',
       "Vector pad value labels render compact rounded coordinates. Do not expose raw floating-point strings such as -0.07070312499999998 in the controls panel.",
+      "Vector product state always stores finite numeric x and y values; decimal strings exist only at the visual input boundary and canonicalize before state or keyframes.",
       "Double-clicking a vector pad resets both axes to the control default through the normal runtime value update, matching section header reset semantics; if no default is defined, the fallback is 0,0. Do not add a separate custom reset UI for this basic pad reset behavior.",
       "Holding Shift while dragging a vector pad locks movement to the dominant axis and must not select text or page content; do not build a custom pad just to support axis-constrained movement.",
       'Use coordinateMode: "cartesian" only when the product intentionally exposes mathematical Y-up coordinates instead of canvas/screen movement.',
@@ -206,6 +207,7 @@ export const TOOLCRAFT_VISUAL_COMPONENT_CONTRACTS = {
       ],
       layoutConstraints: [
         "Plain Color controls may render two per row only when no opacity is present.",
+        "In a mixed section with multiple plain Color controls, declare semanticGroup on every plain Color; runtime pairs only adjacent colors in the same semantic group. A color-only section is one implicit bank.",
         "Odd trailing plain Color controls in a multi-color bank keep the same half-width footprint as paired colors.",
         "Color label visibility depends on user usefulness: palette variation banks omit per-item labels; distinct color roles keep labels.",
       ],
@@ -229,10 +231,12 @@ export const TOOLCRAFT_VISUAL_COMPONENT_CONTRACTS = {
       "When one short numeric/text field and one Color field configure the same entity, keep them in one two-column inline layout group.",
       "Mixed inline rows usually require visible labels on both controls. Toggle-plus-parameter rows are the section-owned exception: keep the Switch/Checkbox label visible and set the non-toggle parameter label to false; if the parameter label is needed, stack the controls instead. All 50/50 inline rows use the same horizontal column gap as paired Select controls. Palette variation color banks are the other exception when the group/section label already names the color bank.",
       "Plain Color popovers must not show opacity controls. If opacity is editable, use ColorOpacity instead.",
+      "Color product state is a canonical hex string even though the UI callback payload is { hex }.",
       "Product-output apps always expose renderer-owned output background color as a schema color target such as appearance.background or scene.background.",
       'Declare renderer-owned output background color with export.includeBackground in one authored Background source section. Runtime normalizes them into Setup: a Switch labeled "Background" sits left of Infinity canvas in an equal-width row, Background color renders below, and Timeline remains the final Setup control.',
       "Preview, PNG export, video export, and the infinite runtime viewport must read the runtime background color value instead of hardcoding that background in CSS, Canvas fillStyle, or WebGL clearColor. Product renderers suppress their bounded background in Infinity mode while CanvasShell fills the complete viewport; export.includeBackground controls live preview product background and PNG alpha, and disabling it restores finite mode instead of leaving a transparent infinite workspace.",
       "Render multiple related color fields in one section with at most two colors per row.",
+      "In a mixed section with multiple plain Color controls, declare semanticGroup on every plain Color; runtime pairs only adjacent colors in the same semantic group. A color-only section is one implicit bank.",
       "If a multi-color bank has an odd trailing plain Color, keep that last Color at half width; only ColorOpacity or intentionally full-width compound controls occupy a full row.",
     ],
   },

package/templates/runtime/contracts/decision-contracts.test.ts

@@ -54,6 +54,8 @@ describe("Toolcraft template decision contract", () => {
 
     expect(rule?.level).toBe("invariant");
     expect(rule?.desiredBehavior).toMatch(/sceneBoundsProvider/i);
+    expect(rule?.desiredBehavior).toMatch(/useToolcraftProductSceneFrame/i);
+    expect(rule?.desiredBehavior).toMatch(/live infinite preview/i);
     expect(rule?.desiredBehavior).toMatch(/one exact state/i);
     expect(rule?.desiredBehavior).toMatch(/runtime-owned timestamp schedule/i);
     expect(rule?.desiredBehavior).toMatch(/finite canvas size/i);
@@ -83,6 +85,9 @@ describe("Toolcraft template decision contract", () => {
     expect(getToolcraftDecisionRule("layers-enabled-behavior")?.level).toBe(
       "invariant",
     );
+    expect(
+      getToolcraftDecisionRule("layers-enabled-behavior")?.desiredBehavior,
+    ).toMatch(/selectedLayer\.\*[^.]*two-entity isolation/i);
     expect(getToolcraftDecisionRule("timeline-mode-choice")?.level).toBe("heuristic");
     expect(getToolcraftDecisionRule("timeline-mode-choice")?.desiredBehavior).toMatch(
       /Animation Intent Inventory/,
@@ -116,6 +121,24 @@ describe("Toolcraft template decision contract", () => {
     );
   });
 
+  it("requires artifact delivery to correspond exactly to explicit product export intent", () => {
+    const rule = getToolcraftDecisionRule("output-export-required");
+
+    expect(rule?.level).toBe("invariant");
+    expect(rule?.desiredBehavior).toMatch(/productReadiness\.exportIntent/);
+    expect(rule?.desiredBehavior).toMatch(/image[^.]*Toolcraft default/i);
+    expect(rule?.desiredBehavior).toMatch(/video[^.]*explicit user request[^.]*evidence/i);
+    expect(rule?.desiredBehavior).toMatch(/SVG[^.]*explicit user request[^.]*evidence/i);
+    expect(rule?.desiredBehavior).toMatch(
+      /animation, playback, keyframes, or timeline[^.]*never/i,
+    );
+    expect(rule?.desiredBehavior).toMatch(/image[^.]*removed[^.]*explicit user[^.]*evidence/i);
+    expect(rule?.desiredBehavior).toMatch(
+      /intent[^.]*correspond exactly[^.]*typed schema actions, applicable settings sections, and artifact-specific acceptance coverage/i,
+    );
+    expect(rule?.desiredBehavior).toMatch(/SVG[^.]*editable vector[^.]*never permits raster/i);
+  });
+
   it("makes renderer technology a default with escape hatches", () => {
     const rule = getToolcraftDecisionRule("renderer-technique-inventory");
 
@@ -183,11 +206,12 @@ describe("Toolcraft template decision contract", () => {
     expect(rule?.level).toBe("invariant");
     expect(rule?.area).toBe("reference-analysis");
     expect(rule?.desiredBehavior).toMatch(/video, GIF, screen recording/i);
-    expect(rule?.desiredBehavior).toMatch(/storyboard/i);
-    expect(rule?.desiredBehavior).toMatch(/timecoded frame observations/i);
-    expect(rule?.desiredBehavior).toMatch(/frame-to-frame transitions/i);
-    expect(rule?.desiredBehavior).toMatch(/map those observed behaviors to acceptance rows/i);
-    expect(rule?.desiredBehavior).toMatch(/independent from loop duration or timeline choice/i);
+    expect(rule?.desiredBehavior).toMatch(/typed referenceInputs/i);
+    expect(rule?.desiredBehavior).toMatch(/full source scan/i);
+    expect(rule?.desiredBehavior).toMatch(/dense 12 FPS review/i);
+    expect(rule?.desiredBehavior).toMatch(/classifies every detected event/i);
+    expect(rule?.desiredBehavior).toMatch(/complete contiguous phases/i);
+    expect(rule?.desiredBehavior).toMatch(/browser reference-parity/i);
     expect(rule?.enforcement).toContain("acceptance-validator");
     expect(rule?.enforcement).toContain("starter-agents");
   });
@@ -207,7 +231,7 @@ describe("Toolcraft template decision contract", () => {
       /functional delivery plan with basis "initial"[\s\S]*complete functional proof[\s\S]*no measured performance/i,
     );
     expect(rule?.desiredBehavior).toMatch(
-      /functional delivery plan with basis "changed"[\s\S]*exact affected ownership-derived functional proof[\s\S]*no measured performance/i,
+      /proven product has no later functional delivery plan[\s\S]*feature-focused tests or browser inspection/i,
     );
     expect(rule?.desiredBehavior).toMatch(/development fixture/i);
     expect(rule?.desiredBehavior).toMatch(
@@ -217,13 +241,13 @@ describe("Toolcraft template decision contract", () => {
       /cannot claim targeted or full performance evidence/i,
     );
     expect(rule?.desiredBehavior).toMatch(/verify:delivery/);
-    expect(rule?.desiredBehavior).toMatch(/coherent user-visible delivery batch/i);
+    expect(rule?.desiredBehavior).toMatch(/first product version/i);
     expect(rule?.desiredBehavior).toMatch(
-      /tier, filename, subsystem, complaint repetition, and command selectors cannot authorize proof/i,
+      /changed files, verification tier, ownership classification, affected pass or path ids, and touched subsystems never authorize measured performance/i,
     );
     expect(rule?.desiredBehavior).toMatch(/ordinary-product-work/i);
     expect(rule?.desiredBehavior).toMatch(
-      /cannot silently invoke targeted performance, the full performance matrix/i,
+      /complete performance matrix remains outside conversational delivery/i,
     );
     expect(rule?.desiredBehavior).toMatch(/performance-iteration/i);
     expect(rule?.desiredBehavior).toMatch(/bounded targeted iteration/i);
@@ -255,9 +279,9 @@ describe("Toolcraft template decision contract", () => {
       /explicit natural-language request for the complete audit/i,
     );
     expect(rule?.desiredBehavior).toMatch(/user does not need to know the command name/i);
-    expect(rule?.desiredBehavior).toMatch(/targeted functional\/browser evidence/i);
+    expect(rule?.desiredBehavior).toMatch(/focused evidence for the functionality being edited/i);
     expect(rule?.desiredBehavior).toMatch(
-      /those changes never authorize measured performance/i,
+      /those changes never authorize an aggregate functional gate or measured performance/i,
     );
     expect(rule?.desiredBehavior).toMatch(
       /renderScaleCoverage "selected-backing-pixels" for interaction and steady, plus playback when timeline is enabled/i,

package/templates/runtime/contracts/decision-contracts.ts

@@ -58,7 +58,7 @@ export const TOOLCRAFT_DECISION_CONTRACT = [
     area: "runtime-shell",
     currentConstraint: "Apps must assemble through defineToolcraft and ToolcraftApp.",
     desiredBehavior:
-      "Generated apps use the Toolcraft runtime shell and keep product-specific rendering inside supported extension points: schema controls, canvasContent product output, controlRenderers for true custom controls, one shared ToolcraftAppComposition.exportRenderer for typed image/video actions, ToolcraftApp onPanelAction for non-export product actions, and runtime commands. App-specific code must not import or render low-level runtime surfaces or built-in control components directly, instantiate encoders, or own artifact download mechanics.",
+      "Generated apps use the Toolcraft runtime shell and keep product-specific rendering inside supported extension points: schema controls, bounded canvasContent product output, editor-only full-viewport infiniteCanvasContent product output, controlRenderers for true custom controls, ToolcraftAppComposition.exportRenderer for typed image/video actions, svgExportRenderer for typed SVG, ToolcraftApp onPanelAction for non-export product actions, and runtime commands. App-specific code must not import or render low-level runtime surfaces or built-in control components directly, serialize artifacts, instantiate encoders, or own artifact download mechanics.",
     enforcement: [
       "cli-integrity-check",
       "acceptance-validator",
@@ -87,7 +87,7 @@ export const TOOLCRAFT_DECISION_CONTRACT = [
     currentConstraint:
       "The Toolcraft canvas shell owns the visible workspace backing behind product output.",
     desiredBehavior:
-      "Generated apps preserve the runtime canvas surface and do not replace or hide it when product renderers customize their own background. In infinite mode the shell fills the complete viewport with the selected standard Background color, while bounded product background pixels remain suppressed.",
+      "Generated apps preserve the runtime canvas surface and do not replace or hide it when product renderers customize their own background. In infinite mode the shell fills the complete viewport with the selected standard Background color, while bounded product background pixels remain suppressed. Preview-only product environments may layer through infiniteCanvasContent across the complete viewport under the transformed world; that layer is pointer-transparent and excluded from scene bounds and export.",
     enforcement: ["browser-helper", "starter-agents", "spec-checklist"],
     id: "canvas-surface-preserved",
     level: "invariant",
@@ -99,7 +99,7 @@ export const TOOLCRAFT_DECISION_CONTRACT = [
     currentConstraint:
       "Editable output can switch from a finite artboard to an unbounded workspace, but product renderers and export actions still need one canonical world-space frame contract.",
     desiredBehavior:
-      "Editable-output apps expose one runtime-owned Infinity canvas mode. Enabling it removes finite artboard clipping and size controls while preserving the dormant finite canvas size for exact restoration. When the standard Background pair exists, its selected color fills the complete infinite viewport and Background off atomically resolves finite mode and disables Infinity. Runtime image and model assets retain explicit world-space frames. ToolcraftAppComposition.sceneBoundsProvider supplies product-renderer bounds for one exact state through one direct composition boundary; image export resolves the current frame and video export unions every state from the runtime-owned timestamp schedule. Hidden layers, suppressed default consumers, and editor-only UI do not expand output bounds. Finite mode continues to export the full finite canvas size, while empty, unavailable, and unsafe oversized infinite exports return typed visible failures.",
+      "Editable-output apps expose one runtime-owned Infinity canvas mode. Enabling it removes finite artboard clipping and size controls while preserving the dormant finite canvas size for exact restoration. When the standard Background pair exists, its selected color fills the complete infinite viewport and Background off atomically resolves finite mode and disables Infinity. Runtime image and model assets retain explicit world-space frames. ToolcraftAppComposition.sceneBoundsProvider supplies product-renderer bounds for one exact state through one direct composition boundary. Runtime applies that same product frame to the live infinite preview, and custom raster/WebGL renderers consume useToolcraftProductSceneFrame for backing size and world-to-local translation instead of the dormant finite canvas size. ToolcraftAppComposition.infiniteCanvasContent is reserved for preview-only product environments that fill the complete Infinity viewport without world transforms, pointer input, scene-bounds participation, or export inclusion. Image export resolves the current frame and video export unions every state from the runtime-owned timestamp schedule. Hidden layers, suppressed default consumers, viewport environments, and editor-only UI do not expand preview or output bounds. Finite preview and export remain the full finite canvas and do not call the provider, while empty, unavailable, and unsafe oversized infinite exports return typed visible failures.",
     enforcement: [
       "acceptance-validator",
       "browser-helper",
@@ -169,7 +169,7 @@ export const TOOLCRAFT_DECISION_CONTRACT = [
     currentConstraint:
       "Once layers are enabled, selection, visibility, reorder, grouping, media lifecycle, and selected-layer controls must work through the real LayersPanel UI.",
     desiredBehavior:
-      "Layer-enabled apps prove real layer interactions and product output changes instead of dispatching layer commands directly in browser tests.",
+      "Layer-enabled apps prove real layer interactions and product output changes instead of dispatching layer commands directly in browser tests. Every selectedLayer.* property uses the same protected two-entity isolation recipe as app-owned selected-entity properties: editing either selected entity changes only that entity while preserving the comparison entity.",
     enforcement: ["acceptance-validator", "browser-helper", "performance-validator"],
     id: "layers-enabled-behavior",
     level: "invariant",
@@ -203,9 +203,9 @@ export const TOOLCRAFT_DECISION_CONTRACT = [
   {
     area: "controls",
     currentConstraint:
-      "Every visible schema control must bind to runtime state, reset from schema defaults, and have acceptance and browser coverage.",
+      "Every product control explicitly declares always or conditional applicability; every visible finite sibling branch binds to runtime state, resets from schema defaults, and passes its accepted browser outcome.",
     desiredBehavior:
-      "Controls are not decorative; each visible control proves its product responsibility through runtime and output observables.",
+      "Non-applicable controls are absent with values preserved, and no always or conditional control remains visible in a finite product branch where its value is ignored.",
     enforcement: ["acceptance-validator", "browser-helper"],
     id: "controls-product-coverage",
     level: "invariant",
@@ -215,13 +215,13 @@ export const TOOLCRAFT_DECISION_CONTRACT = [
   {
     area: "controls",
     currentConstraint:
-      "Product-output apps expose final output delivery through sticky footer panelActions.",
+      "Product artifact delivery must match the required productReadiness.exportIntent declaration.",
     desiredBehavior:
-      'Product apps include Export PNG plus an "Image Export" section for format and 2K/4K/8K resolution. Apps whose requested delivery includes animation also include Export Video plus "Video Export" settings; a playback or keyframe timeline may exist for interactive preview without inventing video delivery. Copy can be secondary, but it does not replace export. Product apps declare the standard background pair and runtime places it in Setup: Background beside Infinity canvas, Color below, and Timeline last. One shared product exportRenderer draws deterministic scene-coordinate frames; runtime owns settings, scene crop, PNG/JPEG/video background semantics, visible runtime media/model composition, exact timestamped encoding, download, progress, and typed failures.',
+      'Every product declares productReadiness.exportIntent. Image export starts as the Toolcraft default and is removed only with explicit user-removal evidence; SVG and video require explicit user request evidence. Animation, playback, keyframes, or timeline presence never changes artifact delivery intent. Resolved intent capabilities correspond exactly to typed schema actions, applicable settings sections, and artifact-specific acceptance coverage. SVG means self-contained editable vector geometry/text and never permits raster bytes wrapped in SVG. Product apps declare the standard background pair and runtime places it in Setup: Background beside Infinity canvas, Color below, and Timeline last. Product code uses exportRenderer for deterministic image/video pixels and svgExportRenderer for namespace-aware vector nodes; runtime owns settings, scene crop/frame, background, visible runtime media/model composition, validation, encoding/serialization, download, progress, and typed failures.',
     enforcement: ["acceptance-validator", "performance-validator", "browser-helper", "starter-agents"],
     id: "output-export-required",
     level: "invariant",
-    title: "Product output always has export",
+    title: "Product output follows artifact export intent",
     verdict: "move-to-validator",
   },
   {
@@ -229,7 +229,7 @@ export const TOOLCRAFT_DECISION_CONTRACT = [
     currentConstraint:
       "Every product controls section must be represented in the exported Control Section Inventory before schema authoring.",
     desiredBehavior:
-      "Generated product apps publish a typed Control Section Inventory with section title, product entity or workflow stage, exact targets, and a concrete grouping reason so section ownership is machine-checkable without prescribing the final product layout.",
+      "Generated product apps publish a typed Control Section Inventory with stable entityId, human-readable entity, exact targets, and a concrete grouping reason. One entity stays in one section through ten controls; larger entities use balanced two-to-ten-control workflow stages with explicit split evidence, so section ownership and reset boundaries are machine-checkable without runtime rewriting.",
     enforcement: ["acceptance-validator", "docs", "starter-agents", "spec-checklist"],
     id: "controls-section-inventory-required",
     level: "invariant",
@@ -253,7 +253,7 @@ export const TOOLCRAFT_DECISION_CONTRACT = [
     currentConstraint:
       "Labels, color placement, section grouping, selector order, and inline density need product-aware decisions.",
     desiredBehavior:
-      "Given a valid Control Section Inventory, ordering, section cohesion, labels, color placement, and compact density remain product-aware recommendations. Validators report questionable grouping without rejecting a coherent product-specific choice solely because it differs from a preferred heuristic.",
+      "Given a valid Control Section Inventory, ordering, labels, color placement, and compact density remain product-aware recommendations. The ten-control maximum and entity cohesion are inventory invariants; heuristics may report questionable presentation without rejecting a coherent product-specific choice solely because it differs from a preferred layout.",
     enforcement: ["acceptance-validator", "schema-normalization", "docs", "starter-agents"],
     id: "controls-layout-heuristics",
     level: "heuristic",
@@ -326,7 +326,7 @@ export const TOOLCRAFT_DECISION_CONTRACT = [
     currentConstraint:
       "Video, GIF, and screen-recording references are often treated as static visual inspiration or summarized from a few frames.",
     desiredBehavior:
-      "Whenever a supplied reference is a video, GIF, screen recording, contact sheet, or extracted frame sequence, the agent studies it as behavioral evidence before implementation: extract or inspect a storyboard, record timecoded frame observations, compare frame-to-frame transitions, decompose changing entities and state into product behavior, and map those observed behaviors to acceptance rows. This applies to new Toolcraft apps and reference-runtime-clone work; it is independent from loop duration or timeline choice.",
+      "Whenever a supplied reference is a video, GIF, screen recording, contact sheet, or extracted frame sequence, the agent registers a typed referenceInputs item before implementation. Protected preprocessing performs one full source scan, produces a dense 12 FPS review with bounded partitions, and stores content-addressed evidence. The agent covers complete contiguous phases, classifies every detected event, decomposes product behaviors, and maps each behavior bidirectionally to observable acceptance rows plus browser reference-parity coverage. A no-reference product declares referenceInputs: [] and runs no preprocessing.",
     enforcement: ["acceptance-validator", "browser-helper", "docs", "starter-agents"],
     id: "video-reference-analysis",
     level: "invariant",

package/templates/runtime/contracts/performance-verification-policy.test.ts

@@ -29,29 +29,29 @@ describe("Toolcraft canonical performance verification policy", () => {
       complaintRouting:
         "Performance authority and path localization are separate decisions. Classifier output establishes complaint authority only and never path localization. A localized complaint lets the agent select canonical affected paths and run one targeted iteration without asking the user. An ambiguous or unresolved localization requires one user-facing clarification naming visible operations and offering targeted diagnosis or a complete review; never ask the user for internal path ids. Regardless of whether the classifier returned high-confidence performance-iteration or needs-agent-judgment, unresolved localization creates neither performance-iteration intent nor canonical path authority. A broad or honestly unlocalizable problem may justify recommending the complete review immediately, but only the user's explicit request or acceptance authorizes it. A direct request for a complete review runs the full audit without another clarification.",
       deliveryBatch:
-        "Classify and verify one coherent user-visible delivery batch instead of treating each internal implementation pass or steering correction as a separate aggregate verification boundary.",
+        "Run complete protected functional proof once for the first product version. Later ordinary edits are focused development work and never create another aggregate delivery boundary.",
       deliveryCommand:
-        "Use the protected pnpm verify:delivery command once at the delivery boundary; it derives selectors automatically. Tier, filename, subsystem, complaint repetition, and command selectors cannot authorize proof.",
+        "Use pnpm verify:delivery for the first complete product proof or one exact request-authorized performance iteration. On a proven product without new performance authority it exits before inventory, tests, build, browser work, or checkpoint writes.",
       demandOnlyPerformance:
         "Only exact request authority can create a performance-iteration plan and run measured targeted performance. Changed files, verification tier, ownership classification, affected pass or path ids, and touched subsystems never authorize measured performance.",
       functionalChangeEvidence:
-        "Renderer, canvas, animation, export, timeline, layers, canvas.renderScale, bug fixes, and performance-sensitive control changes require targeted functional/browser evidence. Those changes never authorize measured performance.",
+        "After first delivery, renderer, canvas, animation, export, timeline, layers, canvas.renderScale, bug fixes, and control changes use only focused evidence for the functionality being edited. Those changes never authorize an aggregate functional gate or measured performance.",
       fullAuditDiscovery:
         "The complete performance matrix remains outside conversational delivery. Complaints, repetition, tier, filename, and touched subsystem never launch it automatically. After two consecutive compatible protected performance iterations, the agent must offer a slower complete audit if the user remains unsatisfied; a demonstrably broad or unlocalizable cross-system problem may justify the same offer earlier. An explicit natural-language request for the complete audit, or explicit acceptance of the agent's offer, authorizes the agent acting as operator to run pnpm verify:perf; the user does not need to know the command name. After the audit, repair and rerun failed paths with focused checks, then run the complete matrix only once at the requested certification boundary.",
       performanceIterationDelivery:
         "The runtime request classifier is a tri-state guard, not a replacement for AI semantic judgment: high-confidence runtime complaints, responsiveness optimization, or excessive CPU, GPU, memory, or resource use classify as performance-iteration; high-confidence product motion, speed, freeze, terminology, or locally negated complaint commands classify as ordinary-product-work; ambiguous or unrecognized wording classifies as needs-agent-judgment and the AI decides from the actual user request. Ordinary work is rejected only for a high-confidence performance iteration. Every performance-iteration worklog intent quotes a nontrivial exact raw substring of Request; whitespace and Unicode code units must match before normalized tri-state classification. Invented, whitespace-collapsed, NFKC-equivalent, or mismatched evidence is rejected; high-confidence ordinary evidence is rejected; exact high-confidence performance-iteration evidence, or needs-agent-judgment evidence after semantic resolution, is accepted under agent ownership. Classifier output establishes complaint authority only and never path localization. Each performance iteration requires an exact reachable development fixture and fails with a configuration error instead of falling back to maximum. Only a localized complaint or a post-clarification targeted choice creates performance-iteration intent and one bounded iteration over exact canonical affected paths. Regardless of whether the classifier returned high-confidence performance-iteration or needs-agent-judgment, unresolved localization creates neither performance-iteration intent nor canonical path authority. Each repeated localized request may create one new bounded targeted iteration over its affected paths; repetition alone never expands scope or selects the complete performance matrix, creates or refreshes a durable baseline, or grants full-performance certification authority.",
       functionalInitialDelivery:
         'A functional delivery plan with basis "initial" runs complete functional proof and no measured performance. It preserves any independent full-performance baseline and cannot claim targeted or full performance evidence.',
-      functionalTargetedDelivery:
-        'A functional delivery plan with basis "changed" runs exact affected ownership-derived functional proof and no measured performance. Functional delivery cannot silently invoke targeted performance, the full performance matrix, or create or refresh a performance baseline.',
+      focusedLaterEdits:
+        "A proven product has no later functional delivery plan. Ordinary edits run only feature-focused tests or browser inspection chosen from the edited behavior; commit, push, deploy, and preview do not authorize aggregate proof.",
       renderScaleFidelity:
         'canvas.renderScale is visible functional fidelity. Raster products declare typed renderScaleCoverage "selected-backing-pixels" for interaction and steady, plus playback when timeline is enabled, and prove real canvas backing pixels in every declared state. Every measured path in a render-scale-enabled raster product proves actual CSS × devicePixelRatio × 2 backing after each measured phase. Never downsample, stretch a lower-resolution backing canvas, blur output, or clamp the selected render scale to pass a performance budget.',
     });
     expect(TOOLCRAFT_PERFORMANCE_VERIFICATION_LIFECYCLE).toEqual({
       delivery: {
         command: "verify:delivery",
-        modes: ["functional", "performance-iteration"],
-        selectors: "automatic",
+        modes: ["initial-functional", "performance-iteration"],
+        selectors: "initial-complete-or-authority-exact",
       },
       fullPerformance: {
         command: "verify:perf",
@@ -59,25 +59,25 @@ describe("Toolcraft canonical performance verification policy", () => {
       },
     });
     expect(TOOLCRAFT_PERFORMANCE_VERIFICATION_POLICY_TEXT).toMatch(
-      /one coherent user-visible delivery batch/i,
+      /complete protected functional proof once for the first product version/i,
     );
     expect(TOOLCRAFT_PERFORMANCE_VERIFICATION_POLICY_TEXT).toMatch(
       /verify:delivery/i,
     );
     expect(TOOLCRAFT_PERFORMANCE_VERIFICATION_POLICY_TEXT).toMatch(
-      /tier, filename, subsystem, complaint repetition, and command selectors cannot authorize proof/i,
+      /proven product without new performance authority it exits before inventory, tests, build, browser work, or checkpoint writes/i,
     );
     expect(TOOLCRAFT_PERFORMANCE_VERIFICATION_POLICY_TEXT).toMatch(
       /functional delivery plan with basis "initial"[\s\S]*complete functional proof[\s\S]*no measured performance/i,
     );
     expect(TOOLCRAFT_PERFORMANCE_VERIFICATION_POLICY_TEXT).toMatch(
-      /functional delivery cannot silently invoke targeted performance/i,
+      /proven product has no later functional delivery plan/i,
     );
     expect(TOOLCRAFT_PERFORMANCE_VERIFICATION_POLICY_TEXT).toMatch(
       /only exact request authority can create a performance-iteration plan and run measured targeted performance/i,
     );
     expect(TOOLCRAFT_PERFORMANCE_VERIFICATION_POLICY_TEXT).toMatch(
-      /functional delivery plan with basis "changed"[\s\S]*exact affected ownership-derived functional proof[\s\S]*no measured performance/i,
+      /ordinary edits run only feature-focused tests or browser inspection[\s\S]*commit, push, deploy, and preview do not authorize aggregate proof/i,
     );
     expect(TOOLCRAFT_PERFORMANCE_VERIFICATION_POLICY_TEXT).toMatch(
       /tri-state guard, not a replacement for AI semantic judgment/i,
@@ -137,7 +137,7 @@ describe("Toolcraft canonical performance verification policy", () => {
       /run the complete matrix only once at the requested certification boundary/i,
     );
     expect(TOOLCRAFT_PERFORMANCE_VERIFICATION_POLICY_TEXT).toMatch(
-      /renderer, canvas,[\s\S]*canvas\.renderScale[\s\S]*require targeted functional\/browser evidence[\s\S]*never authorize measured performance/i,
+      /after first delivery, renderer, canvas,[\s\S]*canvas\.renderScale[\s\S]*focused evidence[\s\S]*never authorize an aggregate functional gate or measured performance/i,
     );
     expect(TOOLCRAFT_PERFORMANCE_VERIFICATION_POLICY_TEXT).toMatch(
       /typed renderScaleCoverage "selected-backing-pixels" for interaction and steady, plus playback when timeline is enabled/i,

package/templates/runtime/contracts/performance-verification-policy.ts

@@ -6,21 +6,21 @@ export const TOOLCRAFT_PERFORMANCE_VERIFICATION_POLICY = {
   complaintRouting:
     "Performance authority and path localization are separate decisions. Classifier output establishes complaint authority only and never path localization. A localized complaint lets the agent select canonical affected paths and run one targeted iteration without asking the user. An ambiguous or unresolved localization requires one user-facing clarification naming visible operations and offering targeted diagnosis or a complete review; never ask the user for internal path ids. Regardless of whether the classifier returned high-confidence performance-iteration or needs-agent-judgment, unresolved localization creates neither performance-iteration intent nor canonical path authority. A broad or honestly unlocalizable problem may justify recommending the complete review immediately, but only the user's explicit request or acceptance authorizes it. A direct request for a complete review runs the full audit without another clarification.",
   deliveryBatch:
-    "Classify and verify one coherent user-visible delivery batch instead of treating each internal implementation pass or steering correction as a separate aggregate verification boundary.",
+    "Run complete protected functional proof once for the first product version. Later ordinary edits are focused development work and never create another aggregate delivery boundary.",
   deliveryCommand:
-    "Use the protected pnpm verify:delivery command once at the delivery boundary; it derives selectors automatically. Tier, filename, subsystem, complaint repetition, and command selectors cannot authorize proof.",
+    "Use pnpm verify:delivery for the first complete product proof or one exact request-authorized performance iteration. On a proven product without new performance authority it exits before inventory, tests, build, browser work, or checkpoint writes.",
   demandOnlyPerformance:
     "Only exact request authority can create a performance-iteration plan and run measured targeted performance. Changed files, verification tier, ownership classification, affected pass or path ids, and touched subsystems never authorize measured performance.",
   functionalChangeEvidence:
-    "Renderer, canvas, animation, export, timeline, layers, canvas.renderScale, bug fixes, and performance-sensitive control changes require targeted functional/browser evidence. Those changes never authorize measured performance.",
+    "After first delivery, renderer, canvas, animation, export, timeline, layers, canvas.renderScale, bug fixes, and control changes use only focused evidence for the functionality being edited. Those changes never authorize an aggregate functional gate or measured performance.",
   fullAuditDiscovery:
     "The complete performance matrix remains outside conversational delivery. Complaints, repetition, tier, filename, and touched subsystem never launch it automatically. After two consecutive compatible protected performance iterations, the agent must offer a slower complete audit if the user remains unsatisfied; a demonstrably broad or unlocalizable cross-system problem may justify the same offer earlier. An explicit natural-language request for the complete audit, or explicit acceptance of the agent's offer, authorizes the agent acting as operator to run pnpm verify:perf; the user does not need to know the command name. After the audit, repair and rerun failed paths with focused checks, then run the complete matrix only once at the requested certification boundary.",
   performanceIterationDelivery:
     "The runtime request classifier is a tri-state guard, not a replacement for AI semantic judgment: high-confidence runtime complaints, responsiveness optimization, or excessive CPU, GPU, memory, or resource use classify as performance-iteration; high-confidence product motion, speed, freeze, terminology, or locally negated complaint commands classify as ordinary-product-work; ambiguous or unrecognized wording classifies as needs-agent-judgment and the AI decides from the actual user request. Ordinary work is rejected only for a high-confidence performance iteration. Every performance-iteration worklog intent quotes a nontrivial exact raw substring of Request; whitespace and Unicode code units must match before normalized tri-state classification. Invented, whitespace-collapsed, NFKC-equivalent, or mismatched evidence is rejected; high-confidence ordinary evidence is rejected; exact high-confidence performance-iteration evidence, or needs-agent-judgment evidence after semantic resolution, is accepted under agent ownership. Classifier output establishes complaint authority only and never path localization. Each performance iteration requires an exact reachable development fixture and fails with a configuration error instead of falling back to maximum. Only a localized complaint or a post-clarification targeted choice creates performance-iteration intent and one bounded iteration over exact canonical affected paths. Regardless of whether the classifier returned high-confidence performance-iteration or needs-agent-judgment, unresolved localization creates neither performance-iteration intent nor canonical path authority. Each repeated localized request may create one new bounded targeted iteration over its affected paths; repetition alone never expands scope or selects the complete performance matrix, creates or refreshes a durable baseline, or grants full-performance certification authority.",
   functionalInitialDelivery:
     'A functional delivery plan with basis "initial" runs complete functional proof and no measured performance. It preserves any independent full-performance baseline and cannot claim targeted or full performance evidence.',
-  functionalTargetedDelivery:
-    'A functional delivery plan with basis "changed" runs exact affected ownership-derived functional proof and no measured performance. Functional delivery cannot silently invoke targeted performance, the full performance matrix, or create or refresh a performance baseline.',
+  focusedLaterEdits:
+    "A proven product has no later functional delivery plan. Ordinary edits run only feature-focused tests or browser inspection chosen from the edited behavior; commit, push, deploy, and preview do not authorize aggregate proof.",
   renderScaleFidelity:
     'canvas.renderScale is visible functional fidelity. Raster products declare typed renderScaleCoverage "selected-backing-pixels" for interaction and steady, plus playback when timeline is enabled, and prove real canvas backing pixels in every declared state. Every measured path in a render-scale-enabled raster product proves actual CSS × devicePixelRatio × 2 backing after each measured phase. Never downsample, stretch a lower-resolution backing canvas, blur output, or clamp the selected render scale to pass a performance budget.',
 } as const;
@@ -28,8 +28,8 @@ export const TOOLCRAFT_PERFORMANCE_VERIFICATION_POLICY = {
 export const TOOLCRAFT_PERFORMANCE_VERIFICATION_LIFECYCLE = {
   delivery: {
     command: "verify:delivery",
-    modes: ["functional", "performance-iteration"],
-    selectors: "automatic",
+    modes: ["initial-functional", "performance-iteration"],
+    selectors: "initial-complete-or-authority-exact",
   },
   fullPerformance: {
     command: "verify:perf",
@@ -45,7 +45,7 @@ export const TOOLCRAFT_PERFORMANCE_VERIFICATION_POLICY_TEXT = [
   TOOLCRAFT_PERFORMANCE_VERIFICATION_POLICY.demandOnlyPerformance,
   TOOLCRAFT_PERFORMANCE_VERIFICATION_POLICY.functionalChangeEvidence,
   TOOLCRAFT_PERFORMANCE_VERIFICATION_POLICY.functionalInitialDelivery,
-  TOOLCRAFT_PERFORMANCE_VERIFICATION_POLICY.functionalTargetedDelivery,
+  TOOLCRAFT_PERFORMANCE_VERIFICATION_POLICY.focusedLaterEdits,
   TOOLCRAFT_PERFORMANCE_VERIFICATION_POLICY.renderScaleFidelity,
   TOOLCRAFT_PERFORMANCE_VERIFICATION_POLICY.performanceIterationDelivery,
   TOOLCRAFT_PERFORMANCE_VERIFICATION_POLICY.fullAuditDiscovery,

package/templates/runtime/export/artifact-download.ts

@@ -7,6 +7,7 @@ export type ToolcraftArtifactFileExtension =
   | ".jpg"
   | ".mp4"
   | ".png"
+  | ".svg"
   | ".webm";
 
 type ToolcraftDownloadAnchor = {