@pixel-point/toolcraft 0.0.18 → 0.0.19

package/templates/runtime/contracts/component-contracts.choices.test.ts

@@ -248,7 +248,7 @@ describe("Toolcraft template component contracts: choices and actions", () => {
       "Do not use panelActions for resetting controls; the controls panel header owns Reset controls.",
     );
     expect(contract.aiUsageRules).toContain(
-      "Handle product-specific non-export panelActions through ToolcraftApp onPanelAction. Typed export-image and export-video actions are runtime-owned and consume ToolcraftAppComposition.exportRenderer.",
+      "Handle product-specific non-export panelActions through ToolcraftApp onPanelAction. Typed export-image/export-video actions consume ToolcraftAppComposition.exportRenderer; typed export-svg consumes svgExportRenderer. All typed export actions are runtime-owned.",
     );
     expect(contract.aiUsageRules).toContain(
       "Async non-export product actions such as Download, Copy, Generate, or Apply must return the real Promise from onPanelAction and report progress through the onPanelAction reportProgress callback.",
@@ -263,7 +263,7 @@ describe("Toolcraft template component contracts: choices and actions", () => {
       "Every product must declare productReadiness.exportIntent before authoring export panelActions or settings sections.",
     );
     expect(contract.aiUsageRules).toContain(
-      'Export-labeled panelActions use icon "upload-simple", matching the Setup "Export Settings" action; do not use "download", "download-simple", or "export" icons for Export PNG or Export Video.',
+      'Export-labeled panelActions use icon "upload-simple", matching the Setup "Export Settings" action; do not use "download", "download-simple", or "export" icons for Export PNG, Export SVG, or Export Video.',
     );
     expect(contract.aiUsageRules).toContain(
       'Image export is the Toolcraft product default. Keep Export PNG unless productReadiness.exportIntent.image is "user-removed" with non-empty explicit user-removal evidence.',
@@ -283,6 +283,18 @@ describe("Toolcraft template component contracts: choices and actions", () => {
     expect(contract.aiUsageRules).toContain(
       "Image Export resolution controls the actual exported image long edge: 2K = 2048px, 4K = 4096px, 8K = 8192px. Runtime resolves the selected value and protected browser acceptance proves decoded image width and height.",
     );
+    expect(contract.aiUsageRules).toContain(
+      'Add Export SVG only when productReadiness.exportIntent.svg is "user-requested" with non-empty explicit user-request evidence.',
+    );
+    expect(contract.aiUsageRules).toContain(
+      "Export SVG means self-contained editable vector geometry/text. Do not wrap raster bytes in image, foreignObject, or data URLs and do not silently trace raster/WebGL/model output.",
+    );
+    expect(contract.aiUsageRules).toContain(
+      "SVG export has no settings section. Product code appends namespace-aware vector nodes through svgExportRenderer; runtime owns frame/viewBox, background, XML validation, serialization, download, progress, and typed failures.",
+    );
+    expect(contract.aiUsageRules).toContain(
+      "Protected SVG browser proof must inspect the exact downloaded bytes with strict XML parsing, namespace/vector-only policy, native decode, content hashing, and exact product vector expectations.",
+    );
     expect(contract.aiUsageRules).toContain(
       'Add Export Video only when productReadiness.exportIntent.video is "user-requested" with non-empty explicit user-request evidence.',
     );
@@ -305,7 +317,7 @@ describe("Toolcraft template component contracts: choices and actions", () => {
       'Video-only apps require explicit image user-removal evidence and place "Video Export" directly above sticky footer panelActions.',
     );
     expect(contract.aiUsageRules).toContain(
-      'Explicit no-export apps require image user-removal evidence with video "not-requested" and omit export actions and settings sections.',
+      'Explicit no-export apps require image user-removal evidence with SVG/video "not-requested" and omit export actions and settings sections.',
     );
     expect(contract.aiUsageRules).toContain(
       'The Video Export section must include format and resolution controls such as targets "export.video.format" and "export.video.resolution".',
@@ -358,6 +370,9 @@ describe("Toolcraft template component contracts: choices and actions", () => {
     expect(contract.aiUsageRules).toContain(
       "ToolcraftAppComposition.exportRenderer draws one deterministic product frame in scene coordinates for both image and video. Runtime owns canvas allocation, background, runtime media/model compositing, selected dimensions, encoding, download, progress, and typed failures.",
     );
+    expect(contract.aiUsageRules).toContain(
+      "ToolcraftAppComposition.svgExportRenderer appends one deterministic namespace-aware vector frame. Runtime owns SVG root/frame/background assembly, vector-only validation, strict XML serialization, download, progress, and typed failures.",
+    );
     expect(contract.aiUsageRules).toContain(
       "Product modules must not encode or download export canvases directly and must not instantiate MediaRecorder or VideoEncoder; the generated-source boundary rejects those duplicate export paths.",
     );

package/templates/runtime/contracts/component-contracts.choices.ts

@@ -360,18 +360,22 @@ export const TOOLCRAFT_CHOICE_COMPONENT_CONTRACTS = {
     aiUsageRules: [
       "Use panelActions only for sticky footer product actions such as Generate, Export, Copy, or Download.",
       "Do not use panelActions for resetting controls; the controls panel header owns Reset controls.",
-      "Handle product-specific non-export panelActions through ToolcraftApp onPanelAction. Typed export-image and export-video actions are runtime-owned and consume ToolcraftAppComposition.exportRenderer.",
+      "Handle product-specific non-export panelActions through ToolcraftApp onPanelAction. Typed export-image/export-video actions consume ToolcraftAppComposition.exportRenderer; typed export-svg consumes svgExportRenderer. All typed export actions are runtime-owned.",
       "Async non-export product actions such as Download, Copy, Generate, or Apply must return the real Promise from onPanelAction and report progress through the onPanelAction reportProgress callback.",
       "The sticky footer top accent indicator is determinate when reportProgress receives 0..1 values and falls back to pending state only when progress is unavailable.",
       "defineToolcraft hoists panelActions into the controls panel sticky footer automatically.",
       "Every product must declare productReadiness.exportIntent before authoring export panelActions or settings sections.",
-      'Export-labeled panelActions use icon "upload-simple", matching the Setup "Export Settings" action; do not use "download", "download-simple", or "export" icons for Export PNG or Export Video.',
+      'Export-labeled panelActions use icon "upload-simple", matching the Setup "Export Settings" action; do not use "download", "download-simple", or "export" icons for Export PNG, Export SVG, or Export Video.',
       'Image export is the Toolcraft product default. Keep Export PNG unless productReadiness.exportIntent.image is "user-removed" with non-empty explicit user-removal evidence.',
       'Every app with Export PNG must expose a separate "Image Export" controls section.',
       'The Image Export section must include "export.image.format" as a Select control with PNG and JPG choices, defaulting to "png".',
       'The Image Export section must include "export.image.resolution" as a Select control with 2K, 4K, and 8K choices, defaulting to "4k".',
       "Image Export format and resolution render as one compact two-column inline Select pair, matching the Video Export settings structure.",
       "Image Export resolution controls the actual exported image long edge: 2K = 2048px, 4K = 4096px, 8K = 8192px. Runtime resolves the selected value and protected browser acceptance proves decoded image width and height.",
+      'Add Export SVG only when productReadiness.exportIntent.svg is "user-requested" with non-empty explicit user-request evidence.',
+      "Export SVG means self-contained editable vector geometry/text. Do not wrap raster bytes in image, foreignObject, or data URLs and do not silently trace raster/WebGL/model output.",
+      "SVG export has no settings section. Product code appends namespace-aware vector nodes through svgExportRenderer; runtime owns frame/viewBox, background, XML validation, serialization, download, progress, and typed failures.",
+      "Protected SVG browser proof must inspect the exact downloaded bytes with strict XML parsing, namespace/vector-only policy, native decode, content hashing, and exact product vector expectations.",
       'Add Export Video only when productReadiness.exportIntent.video is "user-requested" with non-empty explicit user-request evidence.',
       'Animation, playback, keyframes, and timeline presence never add Export Video when productReadiness.exportIntent.video is "not-requested".',
       "Any app with Export Video must enable the top Toolcraft timeline; video duration, loop, and rendered timestamps come from runtime timeline state.",
@@ -379,7 +383,7 @@ export const TOOLCRAFT_CHOICE_COMPONENT_CONTRACTS = {
       'Apps with both Export PNG and Export Video must expose both "Image Export" and "Video Export"; Image Export sits immediately before Video Export.',
       'Image-only apps place "Image Export" directly above sticky footer panelActions.',
       'Video-only apps require explicit image user-removal evidence and place "Video Export" directly above sticky footer panelActions.',
-      'Explicit no-export apps require image user-removal evidence with video "not-requested" and omit export actions and settings sections.',
+      'Explicit no-export apps require image user-removal evidence with SVG/video "not-requested" and omit export actions and settings sections.',
       'The Video Export section must include format and resolution controls such as targets "export.video.format" and "export.video.resolution".',
       "Use Select controls for Video Export format and resolution; do not use Segmented unless the product has a deliberately tiny fixed output menu and browser tests prove every cell keeps padding.",
       'Place the Video Export section as the final controls section directly above sticky footer panelActions.',
@@ -397,6 +401,7 @@ export const TOOLCRAFT_CHOICE_COMPONENT_CONTRACTS = {
       'Product-output apps declare the standard background pair in an authored "Background" source section. Runtime removes that visible section and places Background plus Infinity canvas, then Background color, in Setup; Timeline is the final Setup control.',
       "Product-output apps call shouldIncludeToolcraftPreviewBackground(state) for bounded live preview background. Runtime artifact export owns Background semantics: PNG may be transparent, JPEG and video remain opaque, Infinity uses the full-viewport color, and Background off restores finite mode and disables Infinity.",
       "ToolcraftAppComposition.exportRenderer draws one deterministic product frame in scene coordinates for both image and video. Runtime owns canvas allocation, background, runtime media/model compositing, selected dimensions, encoding, download, progress, and typed failures.",
+      "ToolcraftAppComposition.svgExportRenderer appends one deterministic namespace-aware vector frame. Runtime owns SVG root/frame/background assembly, vector-only validation, strict XML serialization, download, progress, and typed failures.",
       "Product modules must not encode or download export canvases directly and must not instantiate MediaRecorder or VideoEncoder; the generated-source boundary rejects those duplicate export paths.",
       "Runtime video export keeps the selected background and uses getToolcraftVideoExportSize for current/4K output dimensions.",
       "Copy PNG can be a secondary action when clipboard output is useful, but copy does not replace export.",

package/templates/runtime/contracts/component-contracts.inputs.ts

@@ -19,12 +19,13 @@ export const TOOLCRAFT_INPUT_COMPONENT_CONTRACTS = {
         "AspectRatio belongs to the mandatory runtime Setup block before Canvas width and Canvas height.",
       ],
       requiredAcceptance: [
-        "Prove presets resize the current canvas and custom dimensions report the current reduced ratio.",
+        "Prove presets resize the current canvas and manual dimensions select Custom, retain the reduced ratio in state, and do not render duplicate ratio dimension fields.",
       ],
     }),
     aiUsageRules: [
       "AspectRatio is runtime-owned Setup UI and is not authored as a product control.",
       "Manual canvas dimension edits switch the value to Custom without changing the other dimension.",
+      "Custom keeps its reduced ratio in runtime state while Canvas width and Canvas height remain the sole numeric editors.",
     ],
   },
   slider: {

package/templates/runtime/contracts/component-contracts.runtime-acceptance.test.ts

@@ -17,7 +17,7 @@ describe("Toolcraft template component contracts: runtime and composition", () =
       "Every app entity introduced by the AI must have an acceptance test that proves its product responsibility.",
     );
     expect(contract.aiUsageRules).toContain(
-      "Any supplied video, GIF, screen-recording, contact-sheet, or extracted-frame reference requires a Video Reference Study before implementation: storyboard frames, frame-to-frame transition analysis, behavior decomposition, and acceptance mapping. Do not implement video references from a single screenshot or high-level summary.",
+      "Every supplied video, GIF, screen-recording, contact-sheet, or extracted-frame reference must be registered as a typed referenceInputs item and preprocessed with pnpm reference:study before product code. The protected study performs a full source scan, reviews dense 12 FPS evidence, partitions reviews above 120 frames, classifies every detected event, decomposes complete contiguous phases into behaviors, and maps each behavior bidirectionally to observable acceptance and browser reference-parity coverage. A no-reference app declares referenceInputs: [] and runs no preprocessing.",
     );
     expect(contract.aiUsageRules).toContain(
       "Compound control browser tests must explicitly exercise each required value part, not only one visible sub-control.",
@@ -25,6 +25,12 @@ describe("Toolcraft template component contracts: runtime and composition", () =
     expect(contract.aiUsageRules).toContain(
       "Acceptance tests must fail when an entity is disconnected from runtime state, renderer output, export output, or command side effects.",
     );
+    expect(contract.aiUsageRules).toContain(
+      "Built-in control values enter runtime state through one canonical codec for defaults, live edits, persistence, settings import, and keyframes.",
+    );
+    expect(contract.aiUsageRules).toContain(
+      "Selection-scoped property controls prove two distinct entities: the selected entity changes and the comparison entity remains unchanged in both selection directions.",
+    );
     expect(contract.aiUsageRules).toContain(
       "Do not accept typecheck, component existence, registered commands, runtime state mutation, renderer input objects, shader uniform presence, or signature strings as final proof.",
     );
@@ -63,6 +69,14 @@ describe("Toolcraft template component contracts: runtime and composition", () =
     );
   });
 
+  it("requires selected-layer properties to use the shared entity-isolation recipe", () => {
+    const contract = getToolcraftComponentContract("layersPanel");
+
+    expect(contract.aiUsageRules).toContain(
+      "Every selectedLayer.* control uses the shared two-entity isolation recipe in addition to selected-layer-controls coverage.",
+    );
+  });
+
   it("requires workload envelopes and render-plan assessment before renderer code", () => {
     const contract = getToolcraftComponentContract("performanceAcceptance");
     const rules = contract.aiUsageRules.join("\n");
@@ -75,10 +89,10 @@ describe("Toolcraft template component contracts: runtime and composition", () =
       TOOLCRAFT_PERFORMANCE_VERIFICATION_POLICY.functionalInitialDelivery,
     );
     expect(rules).toContain(
-      TOOLCRAFT_PERFORMANCE_VERIFICATION_POLICY.functionalTargetedDelivery,
+      TOOLCRAFT_PERFORMANCE_VERIFICATION_POLICY.focusedLaterEdits,
     );
     expect(rules).toContain(
-      "Functional delivery cannot silently invoke targeted performance",
+      "On a proven product without new performance authority it exits before inventory, tests, build, browser work, or checkpoint writes.",
     );
     expect(rules).toContain("performance-iteration");
     expect(rules).toContain(
@@ -212,7 +226,7 @@ describe("Toolcraft template component contracts: runtime and composition", () =
       "Reference clone acceptance must include referenceCoverage rows for canvas sizing, control mapping, renderer state, and any renderer loop, spawn/update cadence, pause/resume, export/copy, or media lifecycle behavior in the reference.",
     );
     expect(contract.aiUsageRules).toContain(
-      "Video reference assets used in a reference clone also require starterTransferMode.videoReferenceStudy with storyboard frames, frame-to-frame transition analysis, behavior decomposition, and acceptance mapping.",
+      "Motion reference assets used in a reference clone must use typed starterTransferMode.referenceInputs with nested studies backed by pnpm reference:study evidence; each study covers the fully scanned source through dense phases, classifies every detected event, maps behaviors through acceptanceId and motionReferenceCoverage, and requires browser reference-parity.",
     );
   });
 });

package/templates/runtime/contracts/component-contracts.runtime-shell.test.ts

@@ -94,7 +94,7 @@ describe("Toolcraft template component contracts: runtime and composition", () =
       "The runtime Canvas width and Canvas height block uses the mandatory headerless Setup controls block; do not add a separate Canvas section label above these fields.",
     );
     expect(contract.aiUsageRules).toContain(
-      "When the user manually edits Canvas width or Canvas height, the runtime keeps the typed dimension, keeps the other dimension unchanged, switches Aspect ratio to Custom, and shows the reduced current ratio in the custom ratio inputs.",
+      "When the user manually edits Canvas width or Canvas height, the runtime keeps the typed dimension, keeps the other dimension unchanged, switches Aspect ratio to Custom, stores the reduced current ratio in state, and keeps Canvas width and Canvas height as the sole custom numeric editors.",
     );
     expect(contract.aiUsageRules).toContain(
       "Aspect ratio presets are the only interaction that may resize both canvas dimensions from a preset; manual size inputs are exact output dimensions.",

package/templates/runtime/contracts/component-contracts.runtime.ts

@@ -39,7 +39,7 @@ export const TOOLCRAFT_RUNTIME_COMPONENT_CONTRACTS = {
       "Resolved canvas.size exists for every canvas app, but visible Canvas width and Canvas height controls are mandatory only for editable-output sizing and live in the mandatory runtime Setup section.",
       "If canvas.size is provided without an explicit sizing mode, defineToolcraft treats it as editable-output and adds Canvas width and Canvas height controls.",
       "The runtime Canvas width and Canvas height block uses the mandatory headerless Setup controls block; do not add a separate Canvas section label above these fields.",
-      "When the user manually edits Canvas width or Canvas height, the runtime keeps the typed dimension, keeps the other dimension unchanged, switches Aspect ratio to Custom, and shows the reduced current ratio in the custom ratio inputs.",
+      "When the user manually edits Canvas width or Canvas height, the runtime keeps the typed dimension, keeps the other dimension unchanged, switches Aspect ratio to Custom, stores the reduced current ratio in state, and keeps Canvas width and Canvas height as the sole custom numeric editors.",
       "Aspect ratio presets are the only interaction that may resize both canvas dimensions from a preset; manual size inputs are exact output dimensions.",
       "For non-vector raster, Canvas 2D, WebGL, and WebGPU previews, set canvas.renderScale: true so the runtime adds Resolution scale after canvas sizing. The scale changes backing pixels from 1 to 2 without changing visible canvas size.",
       TOOLCRAFT_PERFORMANCE_VERIFICATION_POLICY.renderScaleFidelity,
@@ -105,7 +105,7 @@ export const TOOLCRAFT_RUNTIME_COMPONENT_CONTRACTS = {
       runtimeSetupModeRowRule,
       runtimeSetupModeHelpRule,
       "Keep sticky footer panelActions for product delivery actions only, such as Export PNG, Export Video, Copy, Generate, Apply, or Download.",
-      "Typed Export PNG and Export Video actions are runtime-owned and consume one ToolcraftAppComposition.exportRenderer; use onPanelAction only for non-export product actions.",
+      "Typed Export PNG/Video actions consume ToolcraftAppComposition.exportRenderer and typed Export SVG consumes svgExportRenderer; all are runtime-owned, so use onPanelAction only for non-export product actions.",
     ],
     capabilities: ["settings-import-export"],
     commands: ["controls.setValue", "timeline.setCurrentTime", "timeline.setDuration"],
@@ -122,9 +122,11 @@ export const TOOLCRAFT_RUNTIME_COMPONENT_CONTRACTS = {
       "Compound controls must declare controlPartCoverage for every semantic value part required by their control type.",
       "Compound control browser tests must explicitly exercise each required value part, not only one visible sub-control.",
       "Acceptance tests must fail when an entity is disconnected from runtime state, renderer output, export output, or command side effects.",
+      "Built-in control values enter runtime state through one canonical codec for defaults, live edits, persistence, settings import, and keyframes.",
+      "Selection-scoped property controls prove two distinct entities: the selected entity changes and the comparison entity remains unchanged in both selection directions.",
       "Do not accept typecheck, component existence, registered commands, runtime state mutation, renderer input objects, shader uniform presence, or signature strings as final proof.",
       "Use product-level observables such as rendered pixels, exported image bytes, canvas hash, clipboard payload, cleared media preview, selected layer result, changed viewport, or timeline-rendered frame.",
-      "Any supplied video, GIF, screen-recording, contact-sheet, or extracted-frame reference requires a Video Reference Study before implementation: storyboard frames, frame-to-frame transition analysis, behavior decomposition, and acceptance mapping. Do not implement video references from a single screenshot or high-level summary.",
+      "Every supplied video, GIF, screen-recording, contact-sheet, or extracted-frame reference must be registered as a typed referenceInputs item and preprocessed with pnpm reference:study before product code. The protected study performs a full source scan, reviews dense 12 FPS evidence, partitions reviews above 120 frames, classifies every detected event, decomposes complete contiguous phases into behaviors, and maps each behavior bidirectionally to observable acceptance and browser reference-parity coverage. A no-reference app declares referenceInputs: [] and runs no preprocessing.",
       "A generic canvas hash difference is not enough for workload or semantic controls; assert the intended direction of the effect.",
       "Component variants are accepted entities too; tests should fail if a non-default Toolcraft control variant falls back to the default variant or custom markup.",
       "Conditional entities require fixtures that make the condition observable.",
@@ -216,7 +218,7 @@ export const TOOLCRAFT_RUNTIME_COMPONENT_CONTRACTS = {
       "Generated reference clone apps must declare starterTransferMode.referenceTimeline with mode none, toolcraft-playback, toolcraft-keyframes, or custom-reference-timeline.",
       "Custom reference timeline behavior needs referenceTimelineCoverage entries such as state-jump, trim-range, range-playback, all-range, jump-to-trim-start, and export-range.",
       "Reference clone acceptance must include referenceCoverage rows for canvas sizing, control mapping, renderer state, and any renderer loop, spawn/update cadence, pause/resume, export/copy, or media lifecycle behavior in the reference.",
-      "Video reference assets used in a reference clone also require starterTransferMode.videoReferenceStudy with storyboard frames, frame-to-frame transition analysis, behavior decomposition, and acceptance mapping.",
+      "Motion reference assets used in a reference clone must use typed starterTransferMode.referenceInputs with nested studies backed by pnpm reference:study evidence; each study covers the fully scanned source through dense phases, classifies every detected event, maps behaviors through acceptanceId and motionReferenceCoverage, and requires browser reference-parity.",
       "Browser tests must compare reference behavior or a reference-derived baseline, not only Toolcraft state mutation.",
     ],
     capabilities: [
@@ -292,6 +294,7 @@ export const TOOLCRAFT_RUNTIME_COMPONENT_CONTRACTS = {
       "Do not use selectedLayer.* targets when panels.layers is disabled; single-layer apps use app-specific targets.",
       "Layer-enabled apps need layerCoverage acceptance for selection, visibility, reorder, and grouping.",
       "Every selectedLayer.* control needs selected-layer-controls acceptance proving it edits the currently selected layer output.",
+      "Every selectedLayer.* control uses the shared two-entity isolation recipe in addition to selected-layer-controls coverage.",
       "Layer browser coverage must use real LayersPanel rows and buttons, not direct layers.* command dispatch.",
       "Layer-enabled custom renderers need layers.interactions coverage around real selection, visibility, reorder or grouping, and selected-layer output checks.",
     ],

package/templates/runtime/contracts/component-contracts.visual.test.ts

@@ -3,6 +3,14 @@ import { describe, expect, it } from "vitest";
 import { getToolcraftComponentContract } from "./component-contracts";
 
 describe("Toolcraft template component contracts: visual controls", () => {
+  it("keeps Color UI payloads behind the canonical string value model", () => {
+    const contract = getToolcraftComponentContract("color");
+
+    expect(contract.aiUsageRules).toContain(
+      "Color product state is a canonical hex string even though the UI callback payload is { hex }.",
+    );
+  });
+
   it("marks standalone controls as component-labeled standalone controls", () => {
     for (const id of [
       "palette",
@@ -70,6 +78,9 @@ describe("Toolcraft template component contracts: visual controls", () => {
     expect(contract.aiUsageRules).toContain(
       "Vector pad value labels render compact rounded coordinates. Do not expose raw floating-point strings such as -0.07070312499999998 in the controls panel.",
     );
+    expect(contract.aiUsageRules).toContain(
+      "Vector product state always stores finite numeric x and y values; decimal strings exist only at the visual input boundary and canonicalize before state or keyframes.",
+    );
     expect(contract.aiUsageRules).toContain(
       "Double-clicking a vector pad resets both axes to the control default through the normal runtime value update, matching section header reset semantics; if no default is defined, the fallback is 0,0. Do not add a separate custom reset UI for this basic pad reset behavior.",
     );
@@ -197,6 +208,9 @@ describe("Toolcraft template component contracts: visual controls", () => {
     expect(color.aiUsageRules).toContain(
       "Make color label visibility a group-level decision: do not mix labeled and unlabeled items inside one semantic color bank.",
     );
+    expect(color.aiUsageRules).toContain(
+      "In a mixed section with multiple plain Color controls, declare semanticGroup on every plain Color; runtime pairs only adjacent colors in the same semantic group. A color-only section is one implicit bank.",
+    );
     expect(color.aiUsageRules).toContain(
       "Keep visible labels when colors edit distinct user-facing entities or roles, such as Fill, Stroke, Background, Connector, Object, or Highlight.",
     );
@@ -348,6 +362,12 @@ describe("Toolcraft template component contracts: visual controls", () => {
     expect(contract.aiUsageRules).toContain(
       "Render multiple related color fields in one section with at most two colors per row.",
     );
+    expect(contract.decisionCatalog?.layoutConstraints).toContain(
+      "In a mixed section with multiple plain Color controls, declare semanticGroup on every plain Color; runtime pairs only adjacent colors in the same semantic group. A color-only section is one implicit bank.",
+    );
+    expect(contract.aiUsageRules).toContain(
+      "In a mixed section with multiple plain Color controls, declare semanticGroup on every plain Color; runtime pairs only adjacent colors in the same semantic group. A color-only section is one implicit bank.",
+    );
     expect(contract.aiUsageRules).toContain(
       "If a multi-color bank has an odd trailing plain Color, keep that last Color at half width; only ColorOpacity or intentionally full-width compound controls occupy a full row.",
     );

package/templates/runtime/contracts/component-contracts.visual.ts

@@ -127,6 +127,7 @@ export const TOOLCRAFT_VISUAL_COMPONENT_CONTRACTS = {
       "Use the default vector variant for spatial values such as position, offset, direction, focus, anchor, and light direction.",
       'Default spatial vector pads use coordinateMode: "screen": dragging left/up makes vector.x and vector.y smaller so canvas objects move left/up without renderer-side Y inversion.',
       "Vector pad value labels render compact rounded coordinates. Do not expose raw floating-point strings such as -0.07070312499999998 in the controls panel.",
+      "Vector product state always stores finite numeric x and y values; decimal strings exist only at the visual input boundary and canonicalize before state or keyframes.",
       "Double-clicking a vector pad resets both axes to the control default through the normal runtime value update, matching section header reset semantics; if no default is defined, the fallback is 0,0. Do not add a separate custom reset UI for this basic pad reset behavior.",
       "Holding Shift while dragging a vector pad locks movement to the dominant axis and must not select text or page content; do not build a custom pad just to support axis-constrained movement.",
       'Use coordinateMode: "cartesian" only when the product intentionally exposes mathematical Y-up coordinates instead of canvas/screen movement.',
@@ -206,6 +207,7 @@ export const TOOLCRAFT_VISUAL_COMPONENT_CONTRACTS = {
       ],
       layoutConstraints: [
         "Plain Color controls may render two per row only when no opacity is present.",
+        "In a mixed section with multiple plain Color controls, declare semanticGroup on every plain Color; runtime pairs only adjacent colors in the same semantic group. A color-only section is one implicit bank.",
         "Odd trailing plain Color controls in a multi-color bank keep the same half-width footprint as paired colors.",
         "Color label visibility depends on user usefulness: palette variation banks omit per-item labels; distinct color roles keep labels.",
       ],
@@ -229,10 +231,12 @@ export const TOOLCRAFT_VISUAL_COMPONENT_CONTRACTS = {
       "When one short numeric/text field and one Color field configure the same entity, keep them in one two-column inline layout group.",
       "Mixed inline rows usually require visible labels on both controls. Toggle-plus-parameter rows are the section-owned exception: keep the Switch/Checkbox label visible and set the non-toggle parameter label to false; if the parameter label is needed, stack the controls instead. All 50/50 inline rows use the same horizontal column gap as paired Select controls. Palette variation color banks are the other exception when the group/section label already names the color bank.",
       "Plain Color popovers must not show opacity controls. If opacity is editable, use ColorOpacity instead.",
+      "Color product state is a canonical hex string even though the UI callback payload is { hex }.",
       "Product-output apps always expose renderer-owned output background color as a schema color target such as appearance.background or scene.background.",
       'Declare renderer-owned output background color with export.includeBackground in one authored Background source section. Runtime normalizes them into Setup: a Switch labeled "Background" sits left of Infinity canvas in an equal-width row, Background color renders below, and Timeline remains the final Setup control.',
       "Preview, PNG export, video export, and the infinite runtime viewport must read the runtime background color value instead of hardcoding that background in CSS, Canvas fillStyle, or WebGL clearColor. Product renderers suppress their bounded background in Infinity mode while CanvasShell fills the complete viewport; export.includeBackground controls live preview product background and PNG alpha, and disabling it restores finite mode instead of leaving a transparent infinite workspace.",
       "Render multiple related color fields in one section with at most two colors per row.",
+      "In a mixed section with multiple plain Color controls, declare semanticGroup on every plain Color; runtime pairs only adjacent colors in the same semantic group. A color-only section is one implicit bank.",
       "If a multi-color bank has an odd trailing plain Color, keep that last Color at half width; only ColorOpacity or intentionally full-width compound controls occupy a full row.",
     ],
   },

package/templates/runtime/contracts/decision-contracts.test.ts

@@ -85,6 +85,9 @@ describe("Toolcraft template decision contract", () => {
     expect(getToolcraftDecisionRule("layers-enabled-behavior")?.level).toBe(
       "invariant",
     );
+    expect(
+      getToolcraftDecisionRule("layers-enabled-behavior")?.desiredBehavior,
+    ).toMatch(/selectedLayer\.\*[^.]*two-entity isolation/i);
     expect(getToolcraftDecisionRule("timeline-mode-choice")?.level).toBe("heuristic");
     expect(getToolcraftDecisionRule("timeline-mode-choice")?.desiredBehavior).toMatch(
       /Animation Intent Inventory/,
@@ -125,13 +128,15 @@ describe("Toolcraft template decision contract", () => {
     expect(rule?.desiredBehavior).toMatch(/productReadiness\.exportIntent/);
     expect(rule?.desiredBehavior).toMatch(/image[^.]*Toolcraft default/i);
     expect(rule?.desiredBehavior).toMatch(/video[^.]*explicit user request[^.]*evidence/i);
+    expect(rule?.desiredBehavior).toMatch(/SVG[^.]*explicit user request[^.]*evidence/i);
     expect(rule?.desiredBehavior).toMatch(
       /animation, playback, keyframes, or timeline[^.]*never/i,
     );
     expect(rule?.desiredBehavior).toMatch(/image[^.]*removed[^.]*explicit user[^.]*evidence/i);
     expect(rule?.desiredBehavior).toMatch(
-      /intent[^.]*correspond exactly[^.]*schema actions, settings sections, and acceptance coverage/i,
+      /intent[^.]*correspond exactly[^.]*typed schema actions, applicable settings sections, and artifact-specific acceptance coverage/i,
     );
+    expect(rule?.desiredBehavior).toMatch(/SVG[^.]*editable vector[^.]*never permits raster/i);
   });
 
   it("makes renderer technology a default with escape hatches", () => {
@@ -201,11 +206,12 @@ describe("Toolcraft template decision contract", () => {
     expect(rule?.level).toBe("invariant");
     expect(rule?.area).toBe("reference-analysis");
     expect(rule?.desiredBehavior).toMatch(/video, GIF, screen recording/i);
-    expect(rule?.desiredBehavior).toMatch(/storyboard/i);
-    expect(rule?.desiredBehavior).toMatch(/timecoded frame observations/i);
-    expect(rule?.desiredBehavior).toMatch(/frame-to-frame transitions/i);
-    expect(rule?.desiredBehavior).toMatch(/map those observed behaviors to acceptance rows/i);
-    expect(rule?.desiredBehavior).toMatch(/independent from loop duration or timeline choice/i);
+    expect(rule?.desiredBehavior).toMatch(/typed referenceInputs/i);
+    expect(rule?.desiredBehavior).toMatch(/full source scan/i);
+    expect(rule?.desiredBehavior).toMatch(/dense 12 FPS review/i);
+    expect(rule?.desiredBehavior).toMatch(/classifies every detected event/i);
+    expect(rule?.desiredBehavior).toMatch(/complete contiguous phases/i);
+    expect(rule?.desiredBehavior).toMatch(/browser reference-parity/i);
     expect(rule?.enforcement).toContain("acceptance-validator");
     expect(rule?.enforcement).toContain("starter-agents");
   });
@@ -225,7 +231,7 @@ describe("Toolcraft template decision contract", () => {
       /functional delivery plan with basis "initial"[\s\S]*complete functional proof[\s\S]*no measured performance/i,
     );
     expect(rule?.desiredBehavior).toMatch(
-      /functional delivery plan with basis "changed"[\s\S]*exact affected ownership-derived functional proof[\s\S]*no measured performance/i,
+      /proven product has no later functional delivery plan[\s\S]*feature-focused tests or browser inspection/i,
     );
     expect(rule?.desiredBehavior).toMatch(/development fixture/i);
     expect(rule?.desiredBehavior).toMatch(
@@ -235,13 +241,13 @@ describe("Toolcraft template decision contract", () => {
       /cannot claim targeted or full performance evidence/i,
     );
     expect(rule?.desiredBehavior).toMatch(/verify:delivery/);
-    expect(rule?.desiredBehavior).toMatch(/coherent user-visible delivery batch/i);
+    expect(rule?.desiredBehavior).toMatch(/first product version/i);
     expect(rule?.desiredBehavior).toMatch(
-      /tier, filename, subsystem, complaint repetition, and command selectors cannot authorize proof/i,
+      /changed files, verification tier, ownership classification, affected pass or path ids, and touched subsystems never authorize measured performance/i,
     );
     expect(rule?.desiredBehavior).toMatch(/ordinary-product-work/i);
     expect(rule?.desiredBehavior).toMatch(
-      /cannot silently invoke targeted performance, the full performance matrix/i,
+      /complete performance matrix remains outside conversational delivery/i,
     );
     expect(rule?.desiredBehavior).toMatch(/performance-iteration/i);
     expect(rule?.desiredBehavior).toMatch(/bounded targeted iteration/i);
@@ -273,9 +279,9 @@ describe("Toolcraft template decision contract", () => {
       /explicit natural-language request for the complete audit/i,
     );
     expect(rule?.desiredBehavior).toMatch(/user does not need to know the command name/i);
-    expect(rule?.desiredBehavior).toMatch(/targeted functional\/browser evidence/i);
+    expect(rule?.desiredBehavior).toMatch(/focused evidence for the functionality being edited/i);
     expect(rule?.desiredBehavior).toMatch(
-      /those changes never authorize measured performance/i,
+      /those changes never authorize an aggregate functional gate or measured performance/i,
     );
     expect(rule?.desiredBehavior).toMatch(
       /renderScaleCoverage "selected-backing-pixels" for interaction and steady, plus playback when timeline is enabled/i,

package/templates/runtime/contracts/decision-contracts.ts

@@ -58,7 +58,7 @@ export const TOOLCRAFT_DECISION_CONTRACT = [
     area: "runtime-shell",
     currentConstraint: "Apps must assemble through defineToolcraft and ToolcraftApp.",
     desiredBehavior:
-      "Generated apps use the Toolcraft runtime shell and keep product-specific rendering inside supported extension points: schema controls, bounded canvasContent product output, editor-only full-viewport infiniteCanvasContent product output, controlRenderers for true custom controls, one shared ToolcraftAppComposition.exportRenderer for typed image/video actions, ToolcraftApp onPanelAction for non-export product actions, and runtime commands. App-specific code must not import or render low-level runtime surfaces or built-in control components directly, instantiate encoders, or own artifact download mechanics.",
+      "Generated apps use the Toolcraft runtime shell and keep product-specific rendering inside supported extension points: schema controls, bounded canvasContent product output, editor-only full-viewport infiniteCanvasContent product output, controlRenderers for true custom controls, ToolcraftAppComposition.exportRenderer for typed image/video actions, svgExportRenderer for typed SVG, ToolcraftApp onPanelAction for non-export product actions, and runtime commands. App-specific code must not import or render low-level runtime surfaces or built-in control components directly, serialize artifacts, instantiate encoders, or own artifact download mechanics.",
     enforcement: [
       "cli-integrity-check",
       "acceptance-validator",
@@ -169,7 +169,7 @@ export const TOOLCRAFT_DECISION_CONTRACT = [
     currentConstraint:
       "Once layers are enabled, selection, visibility, reorder, grouping, media lifecycle, and selected-layer controls must work through the real LayersPanel UI.",
     desiredBehavior:
-      "Layer-enabled apps prove real layer interactions and product output changes instead of dispatching layer commands directly in browser tests.",
+      "Layer-enabled apps prove real layer interactions and product output changes instead of dispatching layer commands directly in browser tests. Every selectedLayer.* property uses the same protected two-entity isolation recipe as app-owned selected-entity properties: editing either selected entity changes only that entity while preserving the comparison entity.",
     enforcement: ["acceptance-validator", "browser-helper", "performance-validator"],
     id: "layers-enabled-behavior",
     level: "invariant",
@@ -217,7 +217,7 @@ export const TOOLCRAFT_DECISION_CONTRACT = [
     currentConstraint:
       "Product artifact delivery must match the required productReadiness.exportIntent declaration.",
     desiredBehavior:
-      'Every product declares productReadiness.exportIntent. Image export starts as the Toolcraft default and is removed only with explicit user-removal evidence; video export requires explicit user request evidence. Animation, playback, keyframes, or timeline presence never changes artifact delivery intent. Resolved intent capabilities correspond exactly to schema actions, settings sections, and acceptance coverage: image-only, image-plus-video, video-only, and explicit no-export products expose only the runtime-owned artifact surfaces their intent enables. Product apps declare the standard background pair and runtime places it in Setup: Background beside Infinity canvas, Color below, and Timeline last. One shared product exportRenderer draws deterministic scene-coordinate frames for enabled artifact types; runtime owns settings, scene crop, PNG/JPEG/video background semantics, visible runtime media/model composition, exact timestamped encoding, download, progress, and typed failures.',
+      'Every product declares productReadiness.exportIntent. Image export starts as the Toolcraft default and is removed only with explicit user-removal evidence; SVG and video require explicit user request evidence. Animation, playback, keyframes, or timeline presence never changes artifact delivery intent. Resolved intent capabilities correspond exactly to typed schema actions, applicable settings sections, and artifact-specific acceptance coverage. SVG means self-contained editable vector geometry/text and never permits raster bytes wrapped in SVG. Product apps declare the standard background pair and runtime places it in Setup: Background beside Infinity canvas, Color below, and Timeline last. Product code uses exportRenderer for deterministic image/video pixels and svgExportRenderer for namespace-aware vector nodes; runtime owns settings, scene crop/frame, background, visible runtime media/model composition, validation, encoding/serialization, download, progress, and typed failures.',
     enforcement: ["acceptance-validator", "performance-validator", "browser-helper", "starter-agents"],
     id: "output-export-required",
     level: "invariant",
@@ -326,7 +326,7 @@ export const TOOLCRAFT_DECISION_CONTRACT = [
     currentConstraint:
       "Video, GIF, and screen-recording references are often treated as static visual inspiration or summarized from a few frames.",
     desiredBehavior:
-      "Whenever a supplied reference is a video, GIF, screen recording, contact sheet, or extracted frame sequence, the agent studies it as behavioral evidence before implementation: extract or inspect a storyboard, record timecoded frame observations, compare frame-to-frame transitions, decompose changing entities and state into product behavior, and map those observed behaviors to acceptance rows. This applies to new Toolcraft apps and reference-runtime-clone work; it is independent from loop duration or timeline choice.",
+      "Whenever a supplied reference is a video, GIF, screen recording, contact sheet, or extracted frame sequence, the agent registers a typed referenceInputs item before implementation. Protected preprocessing performs one full source scan, produces a dense 12 FPS review with bounded partitions, and stores content-addressed evidence. The agent covers complete contiguous phases, classifies every detected event, decomposes product behaviors, and maps each behavior bidirectionally to observable acceptance rows plus browser reference-parity coverage. A no-reference product declares referenceInputs: [] and runs no preprocessing.",
     enforcement: ["acceptance-validator", "browser-helper", "docs", "starter-agents"],
     id: "video-reference-analysis",
     level: "invariant",

package/templates/runtime/contracts/performance-verification-policy.test.ts

@@ -29,29 +29,29 @@ describe("Toolcraft canonical performance verification policy", () => {
       complaintRouting:
         "Performance authority and path localization are separate decisions. Classifier output establishes complaint authority only and never path localization. A localized complaint lets the agent select canonical affected paths and run one targeted iteration without asking the user. An ambiguous or unresolved localization requires one user-facing clarification naming visible operations and offering targeted diagnosis or a complete review; never ask the user for internal path ids. Regardless of whether the classifier returned high-confidence performance-iteration or needs-agent-judgment, unresolved localization creates neither performance-iteration intent nor canonical path authority. A broad or honestly unlocalizable problem may justify recommending the complete review immediately, but only the user's explicit request or acceptance authorizes it. A direct request for a complete review runs the full audit without another clarification.",
       deliveryBatch:
-        "Classify and verify one coherent user-visible delivery batch instead of treating each internal implementation pass or steering correction as a separate aggregate verification boundary.",
+        "Run complete protected functional proof once for the first product version. Later ordinary edits are focused development work and never create another aggregate delivery boundary.",
       deliveryCommand:
-        "Use the protected pnpm verify:delivery command once at the delivery boundary; it derives selectors automatically. Tier, filename, subsystem, complaint repetition, and command selectors cannot authorize proof.",
+        "Use pnpm verify:delivery for the first complete product proof or one exact request-authorized performance iteration. On a proven product without new performance authority it exits before inventory, tests, build, browser work, or checkpoint writes.",
       demandOnlyPerformance:
         "Only exact request authority can create a performance-iteration plan and run measured targeted performance. Changed files, verification tier, ownership classification, affected pass or path ids, and touched subsystems never authorize measured performance.",
       functionalChangeEvidence:
-        "Renderer, canvas, animation, export, timeline, layers, canvas.renderScale, bug fixes, and performance-sensitive control changes require targeted functional/browser evidence. Those changes never authorize measured performance.",
+        "After first delivery, renderer, canvas, animation, export, timeline, layers, canvas.renderScale, bug fixes, and control changes use only focused evidence for the functionality being edited. Those changes never authorize an aggregate functional gate or measured performance.",
       fullAuditDiscovery:
         "The complete performance matrix remains outside conversational delivery. Complaints, repetition, tier, filename, and touched subsystem never launch it automatically. After two consecutive compatible protected performance iterations, the agent must offer a slower complete audit if the user remains unsatisfied; a demonstrably broad or unlocalizable cross-system problem may justify the same offer earlier. An explicit natural-language request for the complete audit, or explicit acceptance of the agent's offer, authorizes the agent acting as operator to run pnpm verify:perf; the user does not need to know the command name. After the audit, repair and rerun failed paths with focused checks, then run the complete matrix only once at the requested certification boundary.",
       performanceIterationDelivery:
         "The runtime request classifier is a tri-state guard, not a replacement for AI semantic judgment: high-confidence runtime complaints, responsiveness optimization, or excessive CPU, GPU, memory, or resource use classify as performance-iteration; high-confidence product motion, speed, freeze, terminology, or locally negated complaint commands classify as ordinary-product-work; ambiguous or unrecognized wording classifies as needs-agent-judgment and the AI decides from the actual user request. Ordinary work is rejected only for a high-confidence performance iteration. Every performance-iteration worklog intent quotes a nontrivial exact raw substring of Request; whitespace and Unicode code units must match before normalized tri-state classification. Invented, whitespace-collapsed, NFKC-equivalent, or mismatched evidence is rejected; high-confidence ordinary evidence is rejected; exact high-confidence performance-iteration evidence, or needs-agent-judgment evidence after semantic resolution, is accepted under agent ownership. Classifier output establishes complaint authority only and never path localization. Each performance iteration requires an exact reachable development fixture and fails with a configuration error instead of falling back to maximum. Only a localized complaint or a post-clarification targeted choice creates performance-iteration intent and one bounded iteration over exact canonical affected paths. Regardless of whether the classifier returned high-confidence performance-iteration or needs-agent-judgment, unresolved localization creates neither performance-iteration intent nor canonical path authority. Each repeated localized request may create one new bounded targeted iteration over its affected paths; repetition alone never expands scope or selects the complete performance matrix, creates or refreshes a durable baseline, or grants full-performance certification authority.",
       functionalInitialDelivery:
         'A functional delivery plan with basis "initial" runs complete functional proof and no measured performance. It preserves any independent full-performance baseline and cannot claim targeted or full performance evidence.',
-      functionalTargetedDelivery:
-        'A functional delivery plan with basis "changed" runs exact affected ownership-derived functional proof and no measured performance. Functional delivery cannot silently invoke targeted performance, the full performance matrix, or create or refresh a performance baseline.',
+      focusedLaterEdits:
+        "A proven product has no later functional delivery plan. Ordinary edits run only feature-focused tests or browser inspection chosen from the edited behavior; commit, push, deploy, and preview do not authorize aggregate proof.",
       renderScaleFidelity:
         'canvas.renderScale is visible functional fidelity. Raster products declare typed renderScaleCoverage "selected-backing-pixels" for interaction and steady, plus playback when timeline is enabled, and prove real canvas backing pixels in every declared state. Every measured path in a render-scale-enabled raster product proves actual CSS × devicePixelRatio × 2 backing after each measured phase. Never downsample, stretch a lower-resolution backing canvas, blur output, or clamp the selected render scale to pass a performance budget.',
     });
     expect(TOOLCRAFT_PERFORMANCE_VERIFICATION_LIFECYCLE).toEqual({
       delivery: {
         command: "verify:delivery",
-        modes: ["functional", "performance-iteration"],
-        selectors: "automatic",
+        modes: ["initial-functional", "performance-iteration"],
+        selectors: "initial-complete-or-authority-exact",
       },
       fullPerformance: {
         command: "verify:perf",
@@ -59,25 +59,25 @@ describe("Toolcraft canonical performance verification policy", () => {
       },
     });
     expect(TOOLCRAFT_PERFORMANCE_VERIFICATION_POLICY_TEXT).toMatch(
-      /one coherent user-visible delivery batch/i,
+      /complete protected functional proof once for the first product version/i,
     );
     expect(TOOLCRAFT_PERFORMANCE_VERIFICATION_POLICY_TEXT).toMatch(
       /verify:delivery/i,
     );
     expect(TOOLCRAFT_PERFORMANCE_VERIFICATION_POLICY_TEXT).toMatch(
-      /tier, filename, subsystem, complaint repetition, and command selectors cannot authorize proof/i,
+      /proven product without new performance authority it exits before inventory, tests, build, browser work, or checkpoint writes/i,
     );
     expect(TOOLCRAFT_PERFORMANCE_VERIFICATION_POLICY_TEXT).toMatch(
       /functional delivery plan with basis "initial"[\s\S]*complete functional proof[\s\S]*no measured performance/i,
     );
     expect(TOOLCRAFT_PERFORMANCE_VERIFICATION_POLICY_TEXT).toMatch(
-      /functional delivery cannot silently invoke targeted performance/i,
+      /proven product has no later functional delivery plan/i,
     );
     expect(TOOLCRAFT_PERFORMANCE_VERIFICATION_POLICY_TEXT).toMatch(
       /only exact request authority can create a performance-iteration plan and run measured targeted performance/i,
     );
     expect(TOOLCRAFT_PERFORMANCE_VERIFICATION_POLICY_TEXT).toMatch(
-      /functional delivery plan with basis "changed"[\s\S]*exact affected ownership-derived functional proof[\s\S]*no measured performance/i,
+      /ordinary edits run only feature-focused tests or browser inspection[\s\S]*commit, push, deploy, and preview do not authorize aggregate proof/i,
     );
     expect(TOOLCRAFT_PERFORMANCE_VERIFICATION_POLICY_TEXT).toMatch(
       /tri-state guard, not a replacement for AI semantic judgment/i,
@@ -137,7 +137,7 @@ describe("Toolcraft canonical performance verification policy", () => {
       /run the complete matrix only once at the requested certification boundary/i,
     );
     expect(TOOLCRAFT_PERFORMANCE_VERIFICATION_POLICY_TEXT).toMatch(
-      /renderer, canvas,[\s\S]*canvas\.renderScale[\s\S]*require targeted functional\/browser evidence[\s\S]*never authorize measured performance/i,
+      /after first delivery, renderer, canvas,[\s\S]*canvas\.renderScale[\s\S]*focused evidence[\s\S]*never authorize an aggregate functional gate or measured performance/i,
     );
     expect(TOOLCRAFT_PERFORMANCE_VERIFICATION_POLICY_TEXT).toMatch(
       /typed renderScaleCoverage "selected-backing-pixels" for interaction and steady, plus playback when timeline is enabled/i,