npm - motionloom - Versions diffs - 2.0.0 → 2.1.0 - Mend

motionloom 2.0.0 → 2.1.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (42) hide show

package/CHANGELOG.md +41 -0
package/CODE_OF_CONDUCT.md +19 -0
package/CONTRIBUTING.md +65 -0
package/README.md +187 -134
package/ROADMAP.md +32 -0
package/SECURITY.md +27 -0
package/SKILL.md +33 -8
package/SUPPORT.md +23 -0
package/agent-card.json +21 -6
package/bin/motionloom.mjs +23 -5
package/docs/STATUS.md +33 -0
package/docs/audits/2.1.0-deep-stress-evaluation.md +97 -0
package/docs/audits/data/2.1.0-deep-stress-6900.json +329 -0
package/docs/audits/data/deep-stress-latest.json +329 -0
package/docs/audits/external-project-corpus-2026-08-13.md +26 -0
package/docs/releases/2.1.0.md +23 -0
package/docs/releases/npm-publish-from-workstation.md +6 -6
package/package.json +52 -26
package/references/intelligence-core.md +1 -1
package/schemas/project-memory.schema.json +180 -0
package/scripts/analyze.py +56 -0
package/scripts/capture-runtime-telemetry.py +119 -0
package/scripts/devlab.py +126 -0
package/scripts/docs-audit.py +96 -0
package/scripts/eval-intelligence.py +23 -0
package/scripts/eval-projects.py +156 -0
package/scripts/intelligence.py +106 -6
package/scripts/pr.py +150 -0
package/scripts/prepack-clean.mjs +37 -0
package/scripts/project-memory.py +483 -0
package/scripts/project_memory_loader.py +31 -0
package/scripts/release-verify.py +52 -0
package/scripts/render.py +65 -0
package/scripts/report.py +44 -2
package/scripts/review-hook.py +13 -2
package/scripts/skill-doctor.py +12 -2
package/scripts/to-dotlottie.mjs +26 -20
package/src/core/analyzer.py +174 -25
package/tests/evals/intelligence-cases.json +10 -0
package/tests/evals/project-corpus.json +51 -0
package/tests/scripts/run_tests.py +52 -1
package/tests/scripts/test_project_memory.py +129 -0

package/docs/audits/data/2.1.0-deep-stress-6900.json ADDED Viewed

@@ -0,0 +1,329 @@
+{
+  "schema_version": "1.0",
+  "audit": "motionloom-deep-stress",
+  "generated_at": "2026-08-13T08:44:23.535422Z",
+  "seed": 20260813,
+  "requested_iterations": 5000,
+  "actual_iterations": 6900,
+  "fixture": {
+    "task_id": "browser-review-smoke-task",
+    "scene": "browser-review-smoke"
+  },
+  "summary": {
+    "passed": 6900,
+    "failed": 0,
+    "pass_rate": 1.0,
+    "false_positive": 0,
+    "false_negative": 0,
+    "clean_contracts_preserved": true,
+    "faults_rejected_without_false_negative": true,
+    "approval_false_invariant_preserved": true
+  },
+  "metrics": {
+    "canonical-json-metamorphic": {
+      "attempts": 600,
+      "passed": 600,
+      "failed": 0,
+      "false_positive": 0,
+      "false_negative": 0,
+      "codes": {
+        "equal": 600
+      },
+      "p50_ms": 0.018963,
+      "p95_ms": 0.027028,
+      "max_ms": 0.215561,
+      "pass_rate": 1.0
+    },
+    "dsse-ed25519-roundtrip": {
+      "attempts": 250,
+      "passed": 250,
+      "failed": 0,
+      "false_positive": 0,
+      "false_negative": 0,
+      "codes": {
+        "verified": 250
+      },
+      "p50_ms": 0.128048,
+      "p95_ms": 0.144034,
+      "max_ms": 0.163253,
+      "pass_rate": 1.0
+    },
+    "dsse-ed25519-tamper": {
+      "attempts": 250,
+      "passed": 250,
+      "failed": 0,
+      "false_positive": 0,
+      "false_negative": 0,
+      "codes": {
+        "invalid-signature": 250
+      },
+      "p50_ms": 0.130132,
+      "p95_ms": 0.140209,
+      "max_ms": 0.178904,
+      "pass_rate": 1.0
+    },
+    "statement-contract": {
+      "attempts": 600,
+      "passed": 600,
+      "failed": 0,
+      "false_positive": 0,
+      "false_negative": 0,
+      "codes": {
+        "valid": 200,
+        "rejected": 400
+      },
+      "p50_ms": 0.007181,
+      "p95_ms": 0.008413,
+      "max_ms": 0.059516,
+      "pass_rate": 1.0
+    },
+    "attestation-verifier-boundary": {
+      "attempts": 1500,
+      "passed": 1500,
+      "failed": 0,
+      "false_positive": 0,
+      "false_negative": 0,
+      "codes": {
+        "0": 375,
+        "11": 375,
+        "14": 375,
+        "13": 375
+      },
+      "p50_ms": 0.303064,
+      "p95_ms": 0.505011,
+      "max_ms": 0.842255,
+      "pass_rate": 1.0
+    },
+    "strict-quality-gate-clean": {
+      "attempts": 400,
+      "passed": 400,
+      "failed": 0,
+      "false_positive": 0,
+      "false_negative": 0,
+      "codes": {
+        "accepted": 400
+      },
+      "p50_ms": 24.511679,
+      "p95_ms": 29.717216,
+      "max_ms": 45.587579,
+      "pass_rate": 1.0
+    },
+    "intelligence-p1-clean": {
+      "attempts": 400,
+      "passed": 400,
+      "failed": 0,
+      "false_positive": 0,
+      "false_negative": 0,
+      "codes": {
+        "accepted": 400
+      },
+      "p50_ms": 17.860905,
+      "p95_ms": 21.976583,
+      "max_ms": 32.027403,
+      "pass_rate": 1.0
+    },
+    "replay-hash-clean": {
+      "attempts": 475,
+      "passed": 475,
+      "failed": 0,
+      "false_positive": 0,
+      "false_negative": 0,
+      "codes": {
+        "clean": 475
+      },
+      "p50_ms": 8.02739,
+      "p95_ms": 10.20982,
+      "max_ms": 13.31553,
+      "pass_rate": 1.0
+    },
+    "semantic-lint-clean": {
+      "attempts": 475,
+      "passed": 475,
+      "failed": 0,
+      "false_positive": 0,
+      "false_negative": 0,
+      "codes": {
+        "clean": 475
+      },
+      "p50_ms": 0.044806,
+      "p95_ms": 0.062948,
+      "max_ms": 0.120889,
+      "pass_rate": 1.0
+    },
+    "continuity-clean": {
+      "attempts": 475,
+      "passed": 475,
+      "failed": 0,
+      "false_positive": 0,
+      "false_negative": 0,
+      "codes": {
+        "clean": 475
+      },
+      "p50_ms": 0.036813,
+      "p95_ms": 0.053581,
+      "max_ms": 0.1014,
+      "pass_rate": 1.0
+    },
+    "approval-invariant": {
+      "attempts": 475,
+      "passed": 475,
+      "failed": 0,
+      "false_positive": 0,
+      "false_negative": 0,
+      "codes": {
+        "approval=false": 475
+      },
+      "p50_ms": 0.103737,
+      "p95_ms": 0.148545,
+      "max_ms": 0.202869,
+      "pass_rate": 1.0
+    },
+    "fault-graph-task-id": {
+      "attempts": 100,
+      "passed": 100,
+      "failed": 0,
+      "false_positive": 0,
+      "false_negative": 0,
+      "codes": {
+        "rejected": 100
+      },
+      "p50_ms": 14.465091,
+      "p95_ms": 16.091659,
+      "max_ms": 16.891256,
+      "pass_rate": 1.0
+    },
+    "fault-motion-ir-scene": {
+      "attempts": 100,
+      "passed": 100,
+      "failed": 0,
+      "false_positive": 0,
+      "false_negative": 0,
+      "codes": {
+        "rejected": 100
+      },
+      "p50_ms": 2.367015,
+      "p95_ms": 2.776738,
+      "max_ms": 3.812271,
+      "pass_rate": 1.0
+    },
+    "fault-provenance-task-id": {
+      "attempts": 100,
+      "passed": 100,
+      "failed": 0,
+      "false_positive": 0,
+      "false_negative": 0,
+      "codes": {
+        "rejected": 100
+      },
+      "p50_ms": 0.913747,
+      "p95_ms": 1.226514,
+      "max_ms": 1.544532,
+      "pass_rate": 1.0
+    },
+    "fault-replay-path-escape": {
+      "attempts": 100,
+      "passed": 100,
+      "failed": 0,
+      "false_positive": 0,
+      "false_negative": 0,
+      "codes": {
+        "rejected": 100
+      },
+      "p50_ms": 8.533108,
+      "p95_ms": 10.344097,
+      "max_ms": 11.235017,
+      "pass_rate": 1.0
+    },
+    "fault-p1-fix-plan-hash": {
+      "attempts": 100,
+      "passed": 100,
+      "failed": 0,
+      "false_positive": 0,
+      "false_negative": 0,
+      "codes": {
+        "rejected": 100
+      },
+      "p50_ms": 0.827828,
+      "p95_ms": 1.029271,
+      "max_ms": 1.439878,
+      "pass_rate": 1.0
+    },
+    "fault-p1-wrong-scene": {
+      "attempts": 100,
+      "passed": 100,
+      "failed": 0,
+      "false_positive": 0,
+      "false_negative": 0,
+      "codes": {
+        "rejected": 100
+      },
+      "p50_ms": 0.710469,
+      "p95_ms": 1.010883,
+      "max_ms": 1.146831,
+      "pass_rate": 1.0
+    },
+    "fault-continuity-structure": {
+      "attempts": 100,
+      "passed": 100,
+      "failed": 0,
+      "false_positive": 0,
+      "false_negative": 0,
+      "codes": {
+        "rejected": 100
+      },
+      "p50_ms": 0.069471,
+      "p95_ms": 0.091397,
+      "max_ms": 0.11505,
+      "pass_rate": 1.0
+    },
+    "fault-semantic-structure": {
+      "attempts": 100,
+      "passed": 100,
+      "failed": 0,
+      "false_positive": 0,
+      "false_negative": 0,
+      "codes": {
+        "rejected": 100
+      },
+      "p50_ms": 0.068215,
+      "p95_ms": 0.095822,
+      "max_ms": 0.118719,
+      "pass_rate": 1.0
+    },
+    "fault-attestation-approval": {
+      "attempts": 100,
+      "passed": 100,
+      "failed": 0,
+      "false_positive": 0,
+      "false_negative": 0,
+      "codes": {
+        "10": 100
+      },
+      "p50_ms": 0.220256,
+      "p95_ms": 0.316655,
+      "max_ms": 0.349047,
+      "pass_rate": 1.0
+    },
+    "fault-attestation-payload": {
+      "attempts": 100,
+      "passed": 100,
+      "failed": 0,
+      "false_positive": 0,
+      "false_negative": 0,
+      "codes": {
+        "11": 100
+      },
+      "p50_ms": 0.284957,
+      "p95_ms": 0.388469,
+      "max_ms": 0.452502,
+      "pass_rate": 1.0
+    }
+  },
+  "failures": [],
+  "interpretation": {
+    "logical_trials": "Each trial executes a real repository validator/helper against canonical fixture bytes or a controlled mutation; this is not a claim that 5,000 browser renders were performed.",
+    "false_positive": "A clean canonical case was rejected.",
+    "false_negative": "A controlled tamper, binding, revocation or invalid-contract case was accepted."
+  },
+  "wall_time_s": 25.883117
+}

package/docs/audits/data/deep-stress-latest.json ADDED Viewed

@@ -0,0 +1,329 @@
+{
+  "schema_version": "1.0",
+  "audit": "motionloom-deep-stress",
+  "generated_at": "2026-08-13T10:13:55.979988Z",
+  "seed": 20260813,
+  "requested_iterations": 5000,
+  "actual_iterations": 6900,
+  "fixture": {
+    "task_id": "browser-review-smoke-task",
+    "scene": "browser-review-smoke"
+  },
+  "summary": {
+    "passed": 6900,
+    "failed": 0,
+    "pass_rate": 1.0,
+    "false_positive": 0,
+    "false_negative": 0,
+    "clean_contracts_preserved": true,
+    "faults_rejected_without_false_negative": true,
+    "approval_false_invariant_preserved": true
+  },
+  "metrics": {
+    "canonical-json-metamorphic": {
+      "attempts": 600,
+      "passed": 600,
+      "failed": 0,
+      "false_positive": 0,
+      "false_negative": 0,
+      "codes": {
+        "equal": 600
+      },
+      "p50_ms": 0.018526,
+      "p95_ms": 0.019782,
+      "max_ms": 0.034744,
+      "pass_rate": 1.0
+    },
+    "dsse-ed25519-roundtrip": {
+      "attempts": 250,
+      "passed": 250,
+      "failed": 0,
+      "false_positive": 0,
+      "false_negative": 0,
+      "codes": {
+        "verified": 250
+      },
+      "p50_ms": 0.127995,
+      "p95_ms": 0.141972,
+      "max_ms": 0.244296,
+      "pass_rate": 1.0
+    },
+    "dsse-ed25519-tamper": {
+      "attempts": 250,
+      "passed": 250,
+      "failed": 0,
+      "false_positive": 0,
+      "false_negative": 0,
+      "codes": {
+        "invalid-signature": 250
+      },
+      "p50_ms": 0.131456,
+      "p95_ms": 0.144911,
+      "max_ms": 0.257528,
+      "pass_rate": 1.0
+    },
+    "statement-contract": {
+      "attempts": 600,
+      "passed": 600,
+      "failed": 0,
+      "false_positive": 0,
+      "false_negative": 0,
+      "codes": {
+        "valid": 200,
+        "rejected": 400
+      },
+      "p50_ms": 0.007304,
+      "p95_ms": 0.008605,
+      "max_ms": 0.063033,
+      "pass_rate": 1.0
+    },
+    "attestation-verifier-boundary": {
+      "attempts": 1500,
+      "passed": 1500,
+      "failed": 0,
+      "false_positive": 0,
+      "false_negative": 0,
+      "codes": {
+        "0": 375,
+        "11": 375,
+        "14": 375,
+        "13": 375
+      },
+      "p50_ms": 0.300549,
+      "p95_ms": 0.484133,
+      "max_ms": 0.866072,
+      "pass_rate": 1.0
+    },
+    "strict-quality-gate-clean": {
+      "attempts": 400,
+      "passed": 400,
+      "failed": 0,
+      "false_positive": 0,
+      "false_negative": 0,
+      "codes": {
+        "accepted": 400
+      },
+      "p50_ms": 25.817357,
+      "p95_ms": 28.37167,
+      "max_ms": 35.746459,
+      "pass_rate": 1.0
+    },
+    "intelligence-p1-clean": {
+      "attempts": 400,
+      "passed": 400,
+      "failed": 0,
+      "false_positive": 0,
+      "false_negative": 0,
+      "codes": {
+        "accepted": 400
+      },
+      "p50_ms": 19.18085,
+      "p95_ms": 21.672868,
+      "max_ms": 29.969583,
+      "pass_rate": 1.0
+    },
+    "replay-hash-clean": {
+      "attempts": 475,
+      "passed": 475,
+      "failed": 0,
+      "false_positive": 0,
+      "false_negative": 0,
+      "codes": {
+        "clean": 475
+      },
+      "p50_ms": 7.51816,
+      "p95_ms": 7.916555,
+      "max_ms": 11.545468,
+      "pass_rate": 1.0
+    },
+    "semantic-lint-clean": {
+      "attempts": 475,
+      "passed": 475,
+      "failed": 0,
+      "false_positive": 0,
+      "false_negative": 0,
+      "codes": {
+        "clean": 475
+      },
+      "p50_ms": 0.024703,
+      "p95_ms": 0.03313,
+      "max_ms": 0.08727,
+      "pass_rate": 1.0
+    },
+    "continuity-clean": {
+      "attempts": 475,
+      "passed": 475,
+      "failed": 0,
+      "false_positive": 0,
+      "false_negative": 0,
+      "codes": {
+        "clean": 475
+      },
+      "p50_ms": 0.024346,
+      "p95_ms": 0.033119,
+      "max_ms": 0.052678,
+      "pass_rate": 1.0
+    },
+    "approval-invariant": {
+      "attempts": 475,
+      "passed": 475,
+      "failed": 0,
+      "false_positive": 0,
+      "false_negative": 0,
+      "codes": {
+        "approval=false": 475
+      },
+      "p50_ms": 0.063713,
+      "p95_ms": 0.080847,
+      "max_ms": 0.1211,
+      "pass_rate": 1.0
+    },
+    "fault-graph-task-id": {
+      "attempts": 100,
+      "passed": 100,
+      "failed": 0,
+      "false_positive": 0,
+      "false_negative": 0,
+      "codes": {
+        "rejected": 100
+      },
+      "p50_ms": 13.765242,
+      "p95_ms": 15.757552,
+      "max_ms": 17.026196,
+      "pass_rate": 1.0
+    },
+    "fault-motion-ir-scene": {
+      "attempts": 100,
+      "passed": 100,
+      "failed": 0,
+      "false_positive": 0,
+      "false_negative": 0,
+      "codes": {
+        "rejected": 100
+      },
+      "p50_ms": 2.148835,
+      "p95_ms": 2.448147,
+      "max_ms": 2.860418,
+      "pass_rate": 1.0
+    },
+    "fault-provenance-task-id": {
+      "attempts": 100,
+      "passed": 100,
+      "failed": 0,
+      "false_positive": 0,
+      "false_negative": 0,
+      "codes": {
+        "rejected": 100
+      },
+      "p50_ms": 0.857105,
+      "p95_ms": 1.049827,
+      "max_ms": 1.36859,
+      "pass_rate": 1.0
+    },
+    "fault-replay-path-escape": {
+      "attempts": 100,
+      "passed": 100,
+      "failed": 0,
+      "false_positive": 0,
+      "false_negative": 0,
+      "codes": {
+        "rejected": 100
+      },
+      "p50_ms": 8.091177,
+      "p95_ms": 9.353946,
+      "max_ms": 10.112846,
+      "pass_rate": 1.0
+    },
+    "fault-p1-fix-plan-hash": {
+      "attempts": 100,
+      "passed": 100,
+      "failed": 0,
+      "false_positive": 0,
+      "false_negative": 0,
+      "codes": {
+        "rejected": 100
+      },
+      "p50_ms": 0.730294,
+      "p95_ms": 0.866361,
+      "max_ms": 1.132574,
+      "pass_rate": 1.0
+    },
+    "fault-p1-wrong-scene": {
+      "attempts": 100,
+      "passed": 100,
+      "failed": 0,
+      "false_positive": 0,
+      "false_negative": 0,
+      "codes": {
+        "rejected": 100
+      },
+      "p50_ms": 0.675249,
+      "p95_ms": 0.807189,
+      "max_ms": 1.103894,
+      "pass_rate": 1.0
+    },
+    "fault-continuity-structure": {
+      "attempts": 100,
+      "passed": 100,
+      "failed": 0,
+      "false_positive": 0,
+      "false_negative": 0,
+      "codes": {
+        "rejected": 100
+      },
+      "p50_ms": 0.066832,
+      "p95_ms": 0.081028,
+      "max_ms": 0.100648,
+      "pass_rate": 1.0
+    },
+    "fault-semantic-structure": {
+      "attempts": 100,
+      "passed": 100,
+      "failed": 0,
+      "false_positive": 0,
+      "false_negative": 0,
+      "codes": {
+        "rejected": 100
+      },
+      "p50_ms": 0.064075,
+      "p95_ms": 0.081449,
+      "max_ms": 0.116428,
+      "pass_rate": 1.0
+    },
+    "fault-attestation-approval": {
+      "attempts": 100,
+      "passed": 100,
+      "failed": 0,
+      "false_positive": 0,
+      "false_negative": 0,
+      "codes": {
+        "10": 100
+      },
+      "p50_ms": 0.204615,
+      "p95_ms": 0.265782,
+      "max_ms": 0.341527,
+      "pass_rate": 1.0
+    },
+    "fault-attestation-payload": {
+      "attempts": 100,
+      "passed": 100,
+      "failed": 0,
+      "false_positive": 0,
+      "false_negative": 0,
+      "codes": {
+        "11": 100
+      },
+      "p50_ms": 0.262104,
+      "p95_ms": 0.301103,
+      "max_ms": 0.414031,
+      "pass_rate": 1.0
+    }
+  },
+  "failures": [],
+  "interpretation": {
+    "logical_trials": "Each trial executes a real repository validator/helper against canonical fixture bytes or a controlled mutation; this is not a claim that 5,000 browser renders were performed.",
+    "false_positive": "A clean canonical case was rejected.",
+    "false_negative": "A controlled tamper, binding, revocation or invalid-contract case was accepted."
+  },
+  "wall_time_s": 25.354826
+}

package/docs/audits/external-project-corpus-2026-08-13.md ADDED Viewed

@@ -0,0 +1,26 @@
+# External Project Corpus Evidence — 2026-08-13
+## Purpose
+This is a labeled analyzer evaluation, not a claim that MotionLoom has been validated across the entire animation ecosystem. The runner reads explicit checkouts only; it does not install dependencies, execute external project code, or treat an absent checkout as a pass.
+## Reproducibility
+The evaluation used `python3 scripts/eval-projects.py` with the default bounded scan policy: at most 2,500 files, 25,000,000 bytes and 10 seconds per project. The first-party repository was evaluated from the local MotionLoom checkout. External checkouts were placed under `external/` in a temporary workspace and pinned to the following observed commits.
+| Case | Source | Observed revision | Result | Signals checked |
+|---|---|---|---|---|
+| MotionLoom | [lenhonbp/MotionLoom](https://github.com/lenhonbp/MotionLoom) | local checkout | PASS | `name=motionloom` |
+| Motion One | [motiondivision/motion](https://github.com/motiondivision/motion) | `adaf7a4e5368d704ea350669f6ac674fb26ff270` | PASS | `name=motion-one`, `framework=motion` |
+| GSAP | [greensock/GSAP](https://github.com/greensock/GSAP) | `13e2b790546426a1a2e0e9b409f3f8dc6d6611f2` | PASS | `framework=gsap` |
+| Rive React | [rive-app/rive-react](https://github.com/rive-app/rive-react) | `c05ec1842324a4a61d01f8e49dfd2ac2c37ae72c` | PASS | `name=rive-react`, `framework=rive` |
+The final report was `status=pass`, with 3/3 required external projects available and 4/4 total cases passing. All four scans reported `scan_truncated=false` under the stated budgets.
+## Interpretation
+The package-identity precedence change is material. Motion One is a monorepo whose root workspace contains GSAP tooling; a dependency-only detector labeled it GSAP. Rive React similarly contains React dependencies but should expose a Rive runtime signal. MotionLoom now prefers an exact package identity (`motion`, `motion-one`, `framer-motion`, Rive packages) before generic dependency fallback, while retaining the bounded scan metadata.
+This evidence supports a **small, reproducible analyzer corpus signal**. It does not prove animation quality, runtime correctness, visual fidelity, accessibility, licensing compliance, or first-pass acceptance. Those remain separate gates requiring runtime evidence, Dev Lab review and explicit user confirmation.
+When external checkouts are not supplied, the same command intentionally reports `insufficient_evidence`; CI uses `--allow-insufficient` for visibility without converting missing product evidence into a green product claim.