dancerudiments 0.3.0__tar.gz → 0.4.1__tar.gz

{dancerudiments-0.3.0 → dancerudiments-0.4.1}/.gitattributes

@@ -37,3 +37,8 @@ tools/recording_wasm.cpp text eol=lf
 include/dancerudiments/recording_view.hpp text eol=lf
 python/dancerudiments_authoring/harness_assets/recording.wasm.json text eol=lf
 python/dancerudiments_authoring/harness_assets/recording.wasm.b64 text eol=lf
+
+# Numbered rig profiles and source provenance remain reproducible on Windows.
+python/dancerudiments_authoring/rig_profiles/** text eol=lf
+python/dancerudiments_authoring/motion_sources/** text eol=lf
+examples/rig-motion/** text eol=lf

dancerudiments-0.4.1/.github/workflows/demo-release.yml

@@ -0,0 +1,319 @@
+name: Release demo
+on:
+  push:
+    tags:
+      - 'v*.*.*'
+  workflow_dispatch:
+    inputs:
+      release_tag:
+        description: 'Published release tag containing the complete demo tools (vMAJOR.MINOR.PATCH)'
+        required: true
+        type: string
+permissions:
+  contents: read
+concurrency:
+  group: release-demo-${{ github.event_name == 'push' && github.ref_name || inputs.release_tag }}
+  cancel-in-progress: false
+jobs:
+  render:
+    runs-on: ubuntu-latest
+    timeout-minutes: 40
+    outputs:
+      version: ${{ steps.identity.outputs.version }}
+      commit: ${{ steps.identity.outputs.commit }}
+      tag: ${{ steps.identity.outputs.tag }}
+    env:
+      RELEASE_TAG: ${{ github.event_name == 'push' && github.ref_name || inputs.release_tag }}
+      PLAYWRIGHT_BROWSERS_PATH: ${{ github.workspace }}/.cache/release-demo/browsers
+      PYTHONUNBUFFERED: '1'
+    steps:
+      - uses: actions/checkout@v6
+        with:
+          ref: refs/tags/${{ github.event_name == 'push' && github.ref_name || inputs.release_tag }}
+          fetch-depth: 0
+          persist-credentials: false
+      - uses: actions/setup-python@v6
+        with:
+          python-version: '3.13'
+      - uses: actions/setup-node@v6
+        with:
+          node-version: '24'
+          cache: npm
+      - name: Validate the tag and source version
+        id: identity
+        env:
+          GH_TOKEN: ${{ github.token }}
+        run: |
+          python - <<'PY'
+          import json, os, re, subprocess
+          from pathlib import Path
+          tag = os.environ['RELEASE_TAG']
+          if not re.fullmatch(r'v[0-9]+\.[0-9]+\.[0-9]+', tag):
+              raise SystemExit('release_tag must be vMAJOR.MINOR.PATCH')
+          def git(*args):
+              return subprocess.check_output(['git', *args], text=True).strip()
+          commit = git('rev-parse', 'HEAD')
+          if commit != git('rev-parse', '--verify', f'refs/tags/{tag}^{{commit}}'):
+              raise SystemExit('Checkout differs from the requested tag commit')
+          if os.environ['GITHUB_EVENT_NAME'] == 'push':
+              if commit != git('rev-parse', '--verify', os.environ['GITHUB_SHA'] + '^{commit}'):
+                  raise SystemExit('Tag changed after the triggering push')
+          else:
+              release = json.loads(subprocess.check_output([
+                  'gh', 'release', 'view', tag, '--repo', os.environ['GITHUB_REPOSITORY'],
+                  '--json', 'tagName,isDraft'], text=True))
+              if release['tagName'] != tag or release['isDraft']:
+                  raise SystemExit('Manual builds require an existing published release')
+          with Path(os.environ['GITHUB_ENV']).open('a') as stream:
+              stream.write(f'DEMO_VERSION={tag[1:]}\nDEMO_COMMIT={commit}\n')
+          with Path(os.environ['GITHUB_OUTPUT']).open('a') as stream:
+              stream.write(f'version={tag[1:]}\ncommit={commit}\ntag={tag}\n')
+          PY
+          python tools/release_version.py verify-tag "$RELEASE_TAG"
+      - name: Preflight project-local temporary and output directories
+        run: |
+          python - <<'PY'
+          import os, tempfile
+          from pathlib import Path
+          temporary_root = Path('.cache/release-demo/tmp').resolve()
+          for parent in (temporary_root, Path('dist/demo'), Path('dist/pages')):
+              parent.mkdir(parents=True, exist_ok=True)
+              with tempfile.TemporaryDirectory(prefix='preflight-', dir=parent) as name:
+                  p = Path(name) / 'probe'
+                  p.write_bytes(b'ready')
+                  assert p.read_bytes() == b'ready'
+                  p.rename(p.with_name('renamed'))
+                  p.with_name('renamed').unlink()
+          with Path(os.environ['GITHUB_ENV']).open('a') as stream:
+              stream.write(f'TMPDIR={temporary_root}\n')
+          PY
+          node --input-type=module - <<'JS'
+          import {mkdtemp, writeFile, readFile, rename, rm} from 'node:fs/promises';
+          const dir = await mkdtemp('.cache/release-demo/tmp/node-preflight-');
+          await writeFile(dir + '/probe', 'ready');
+          if (await readFile(dir + '/probe', 'utf8') !== 'ready') throw Error('Temporary readback failed');
+          await rename(dir + '/probe', dir + '/renamed');
+          await rm(dir, {recursive: true});
+          JS
+      - name: Verify generated packs and default registration
+        run: |
+          python tools/build_initial_collection.py --check
+          python tools/build_expansion_collection.py --check
+          python tools/build_atlas_collection.py --check
+          python tools/build_continuum_collection.py --check
+          python tools/build_club_collection.py --check
+          python tools/build_dancefloor_collection.py --check
+          python tools/build_default_catalogue.py --check
+      - name: Install build-only tools and this checkout's native library
+        run: |
+          sudo apt-get update
+          sudo apt-get install --yes clang lld
+          python -m pip install '.[motion-import]' playwright==1.64.0
+          python -m playwright install --with-deps chromium
+          npm ci
+      - name: Test the package loader, mesh assets and site packaging
+        run: |
+          npm test
+          python -m unittest discover -s tests/python -p test_mesh_demo_assets.py -v
+          python -m unittest discover -s tests/python -p test_release_pages.py -v
+      - name: Generate the exact tagged native catalogue
+        run: python tools/release_demo.py --version "$DEMO_VERSION" --commit "$DEMO_COMMIT" --output-dir dist/demo
+      - name: Verify the full visualizer's MIDI transport
+        run: python tools/test_midi_harness.py "dist/demo/DanceRudiments-demo-v$DEMO_VERSION.html"
+      - name: Render, test, and package
+        run: python tools/render_release_demo.py "dist/demo/DanceRudiments-demo-v$DEMO_VERSION.html"
+      - name: Build and render the rhythm-and-audio audition page
+        run: |
+          python tools/build_club_demo.py --version "$DEMO_VERSION" --commit "$DEMO_COMMIT" --output "dist/demo/DanceRudiments-demo-club-v$DEMO_VERSION.html"
+          python tools/render_club_demo.py "dist/demo/DanceRudiments-demo-club-v$DEMO_VERSION.html"
+      - name: Build and render all beat mappings
+        run: |
+          python tools/build_dancefloor_demo.py --version "$DEMO_VERSION" --commit "$DEMO_COMMIT" --output "dist/demo/DanceRudiments-demo-dancefloor-v$DEMO_VERSION.html"
+          python tools/render_dancefloor_demo.py "dist/demo/DanceRudiments-demo-dancefloor-v$DEMO_VERSION.html"
+      - name: Stable self-contained visualizer download aliases
+        run: |
+          cp "dist/demo/DanceRudiments-demo-v$DEMO_VERSION.html" dist/demo/DanceRudiments-visualizer.html
+          cp "dist/demo/DanceRudiments-demo-v$DEMO_VERSION.json" dist/demo/DanceRudiments-visualizer.json
+          (cd dist/demo && sha256sum DanceRudiments-visualizer.html DanceRudiments-visualizer.json > DanceRudiments-visualizer.sha256)
+      - name: Build two pinned, independently loaded mesh dances
+        run: |
+          python tools/build_mesh_demo_assets.py --output-dir generated/mesh-demo-assets --cache-root .cache/motion-sources/cmu-dance --download
+          node tools/build_mesh_demo.mjs --assets-dir generated/mesh-demo-assets --output-dir dist/pages/meshes --version "$DEMO_VERSION" --commit "$DEMO_COMMIT"
+          python tools/package_release_pages.py prepare --pages-dir dist/pages --visualizer "dist/demo/DanceRudiments-demo-v$DEMO_VERSION.html" --version "$DEMO_VERSION" --commit "$DEMO_COMMIT"
+      - name: Verify actual skinned mesh playback in desktop and mobile Chromium
+        run: |
+          python tools/test_mesh_demo_browser.py --site-dir dist/pages --output-dir dist/demo --prefix "DanceRudiments-mesh-demos-v$DEMO_VERSION"
+      - name: Seal the complete tested site and distinct release downloads
+        run: |
+          python tools/package_release_pages.py seal --pages-dir dist/pages --output-dir dist/demo --qa-report "dist/demo/DanceRudiments-mesh-demos-v$DEMO_VERSION-browser.json" --version "$DEMO_VERSION" --commit "$DEMO_COMMIT"
+          (cd dist/demo && sha256sum --check ./*.sha256)
+      - uses: actions/upload-artifact@v6
+        with:
+          name: release-demo
+          path: dist/demo/*
+          if-no-files-found: error
+      - uses: actions/upload-artifact@v6
+        if: vars.DANCERUDIMENTS_PAGES_ENABLED == 'true'
+        with:
+          name: release-pages-manifest
+          path: dist/pages/site-manifest.json
+          if-no-files-found: error
+      - uses: actions/upload-pages-artifact@v4
+        if: vars.DANCERUDIMENTS_PAGES_ENABLED == 'true'
+        with:
+          path: dist/pages
+      - uses: actions/upload-artifact@v6
+        if: failure()
+        with:
+          name: release-demo-failure-evidence
+          path: dist/demo/*
+          if-no-files-found: warn
+  attach:
+    needs: render
+    runs-on: ubuntu-latest
+    timeout-minutes: 10
+    permissions:
+      contents: write
+    steps:
+      - uses: actions/download-artifact@v6
+        with:
+          name: release-demo
+          path: demo
+      - name: Attach to the existing release and verify uploaded bytes
+        env:
+          GH_TOKEN: ${{ github.token }}
+          RELEASE_TAG: ${{ needs.render.outputs.tag }}
+          DEMO_COMMIT: ${{ needs.render.outputs.commit }}
+        shell: bash
+        run: |
+          set -euo pipefail
+          for attempt in {1..60}; do
+            gh release view "$RELEASE_TAG" --repo "$GITHUB_REPOSITORY" >/dev/null 2>&1 && break
+            if [ "$attempt" = 60 ]; then
+              echo "::error::GitHub Release $RELEASE_TAG was not created by release-tag.yml"
+              exit 1
+            fi
+            sleep 2
+          done
+          (cd demo && sha256sum --check ./*.sha256)
+          python - <<'PY'
+          import json, os, re, subprocess
+          from pathlib import Path
+          repo, tag = os.environ['GITHUB_REPOSITORY'], os.environ['RELEASE_TAG']
+          def gh(*args):
+              return subprocess.check_output(['gh', *args], text=True)
+          release = json.loads(gh('release', 'view', tag, '--repo', repo, '--json', 'tagName,isDraft,assets'))
+          if release['tagName'] != tag or release['isDraft']:
+              raise SystemExit('Expected the published release for the validated tag')
+          obj = json.loads(gh('api', f'repos/{repo}/git/ref/tags/{tag}'))['object']
+          for _ in range(8):
+              if obj['type'] != 'tag':
+                  break
+              obj = json.loads(gh('api', f'repos/{repo}/git/tags/{obj["sha"]}'))['object']
+          if obj['type'] != 'commit' or obj['sha'] != os.environ['DEMO_COMMIT']:
+              raise SystemExit('Remote tag no longer matches the tested commit')
+          existing = {asset['name'] for asset in release['assets']}
+          files = sorted(Path('demo').iterdir())
+          verified = Path('verified'); verified.mkdir()
+          for path in files:
+              if not path.is_file() or not re.fullmatch(r'DanceRudiments-[A-Za-z0-9_.-]+', path.name):
+                  raise SystemExit(f'Unexpected release attachment: {path.name}')
+              if path.name in existing:
+                  gh('release', 'download', tag, '--repo', repo, '--pattern', path.name, '--dir', str(verified))
+                  if (verified / path.name).read_bytes() != path.read_bytes():
+                      raise SystemExit(f'Existing release asset differs; refusing to overwrite {path.name}')
+          # Check every collision before uploading any missing attachment.
+          for path in files:
+              if path.name not in existing:
+                  gh('release', 'upload', tag, str(path), '--repo', repo)
+                  gh('release', 'download', tag, '--repo', repo, '--pattern', path.name, '--dir', str(verified))
+              if (verified / path.name).read_bytes() != path.read_bytes():
+                  raise SystemExit(f'Uploaded release asset differs: {path.name}')
+          PY
+          (cd verified && sha256sum --check ./*.sha256)
+  pages-target:
+    if: vars.DANCERUDIMENTS_PAGES_ENABLED == 'true'
+    needs: [render, attach]
+    runs-on: ubuntu-latest
+    outputs:
+      deploy: ${{ steps.latest.outputs.deploy }}
+    steps:
+      - name: Publish Pages only for the latest stable release
+        id: latest
+        env:
+          GH_TOKEN: ${{ github.token }}
+          RELEASE_TAG: ${{ needs.render.outputs.tag }}
+        run: |
+          latest_tag=$(gh api "repos/$GITHUB_REPOSITORY/releases/latest" --jq '.tag_name')
+          if [ "$latest_tag" = "$RELEASE_TAG" ]; then
+            echo 'deploy=true' >> "$GITHUB_OUTPUT"
+          else
+            echo 'deploy=false' >> "$GITHUB_OUTPUT"
+            echo "::notice::Release downloads verified; Pages skipped because $RELEASE_TAG is not the latest stable release ($latest_tag)."
+            echo "Pages was not deployed: $RELEASE_TAG is not the latest stable release ($latest_tag)." >> "$GITHUB_STEP_SUMMARY"
+          fi
+  deploy:
+    if: vars.DANCERUDIMENTS_PAGES_ENABLED == 'true' && needs.pages-target.outputs.deploy == 'true'
+    needs: [render, attach, pages-target]
+    runs-on: ubuntu-latest
+    timeout-minutes: 15
+    permissions:
+      contents: read
+      pages: write
+      id-token: write
+    concurrency:
+      group: dancerudiments-pages
+      cancel-in-progress: false
+    environment:
+      name: github-pages
+      url: ${{ steps.deployment.outputs.page_url }}
+    steps:
+      - name: Recheck the latest release after waiting for deployment concurrency
+        id: current
+        env:
+          GH_TOKEN: ${{ github.token }}
+          RELEASE_TAG: ${{ needs.render.outputs.tag }}
+        run: |
+          latest_tag=$(gh api "repos/$GITHUB_REPOSITORY/releases/latest" --jq '.tag_name')
+          if [ "$latest_tag" = "$RELEASE_TAG" ]; then
+            echo 'deploy=true' >> "$GITHUB_OUTPUT"
+          else
+            echo 'deploy=false' >> "$GITHUB_OUTPUT"
+            echo "::notice::Pages skipped: $latest_tag became the latest stable release while $RELEASE_TAG waited."
+            echo "Pages was not deployed: a newer stable release is now current ($latest_tag)." >> "$GITHUB_STEP_SUMMARY"
+          fi
+      - uses: actions/checkout@v6
+        if: steps.current.outputs.deploy == 'true'
+        with:
+          ref: ${{ needs.render.outputs.commit }}
+          persist-credentials: false
+      - uses: actions/setup-python@v6
+        if: steps.current.outputs.deploy == 'true'
+        with:
+          python-version: '3.13'
+      - uses: actions/download-artifact@v6
+        if: steps.current.outputs.deploy == 'true'
+        with:
+          name: release-pages-manifest
+          path: expected-pages
+      - name: Read existing Pages configuration
+        if: steps.current.outputs.deploy == 'true'
+        uses: actions/configure-pages@v5
+        with:
+          enablement: false
+      - name: Deploy the complete tagged visualizer and mesh gallery
+        id: deployment
+        if: steps.current.outputs.deploy == 'true'
+        uses: actions/deploy-pages@v4
+      - name: Verify the live routes and every public asset against the tested artifact
+        if: steps.current.outputs.deploy == 'true'
+        env:
+          PAGE_URL: ${{ steps.deployment.outputs.page_url }}
+        run: |
+          python tools/package_release_pages.py verify --url "$PAGE_URL" --manifest expected-pages/site-manifest.json --report deployed-pages-verification.json --attempts 12 --retry-seconds 5
+      - uses: actions/upload-artifact@v6
+        if: steps.current.outputs.deploy == 'true'
+        with:
+          name: deployed-pages-verification
+          path: deployed-pages-verification.json
+          if-no-files-found: error

dancerudiments-0.4.1/.github/workflows/rig-motion.yml

@@ -0,0 +1,68 @@
+name: Rigify motion
+
+on:
+  push:
+    branches: [main]
+  pull_request:
+  workflow_dispatch:
+
+permissions:
+  contents: read
+
+jobs:
+  blender-native:
+    name: Blender 5.2.2 and native motion
+    runs-on: ubuntu-latest
+    timeout-minutes: 30
+    env:
+      DANCERUDIMENTS_REQUIRE_NATIVE: '1'
+      PIP_CACHE_DIR: ${{ github.workspace }}/.cache/pip
+      TMPDIR: ${{ github.workspace }}/.cache/tmp
+    steps:
+      - uses: actions/checkout@v6
+        with:
+          persist-credentials: false
+      - uses: actions/setup-python@v6
+        with:
+          python-version: '3.13'
+      - name: Probe project-local temporary output
+        run: |
+          python - <<'PY'
+          import os
+          from pathlib import Path
+          import tempfile
+          parent = Path(os.environ['TMPDIR'])
+          parent.mkdir(parents=True, exist_ok=True)
+          with tempfile.TemporaryDirectory(dir=parent) as directory:
+              path = Path(directory) / 'probe'
+              path.write_bytes(b'rig-motion')
+              assert path.read_bytes() == b'rig-motion'
+              renamed = path.with_name('renamed')
+              path.rename(renamed)
+              assert renamed.read_bytes() == b'rig-motion'
+              renamed.unlink()
+          PY
+      - name: Install Blender runtime libraries
+        run: |
+          sudo apt-get update
+          sudo apt-get install -y libx11-6 libxxf86vm1 libxi6 libxfixes3 libxrender1 libsm6 libgl1 libegl1
+      - name: Install this native package and the pinned official bpy runtime
+        run: python -m pip install '.[motion-import]' bpy==5.2.2
+      - name: Validate profiles, interchange, clock and native playback
+        run: |
+          python -m unittest discover -s tests/python -p 'test_motion*.py' -v
+          python -m unittest discover -s tests/python -p 'test_rig*.py' -v
+          python -m unittest discover -s tests/python -p 'test_bvh_import.py' -v
+          python -m unittest discover -s tests/python -p 'test_acquire*.py' -v
+      - name: Exercise the installed CLI and synthetic timed motion
+        run: |
+          dancerudiments-rig profile human --output generated/human.profile.json
+          dancerudiments-rig channels generated/human.profile.json --output generated/human.channels.csv
+          python examples/rig-motion/quickstart.py --output generated/rig-motion --native
+          dancerudiments-rig inspect generated/rig-motion/synthetic.motion.json
+      - name: Verify generated rig, capture, native samples and actual skin deformation
+        run: python tools/test_blender_rigify_bridge.py --output-dir .cache/rigify-bridge-smoke
+      - name: Verify real BVH, FBX and glTF imports and capture timing
+        run: python tools/test_blender_motion_imports.py --output-dir .cache/blender-imports
+      - name: Verify multi-action extraction, source carriers and explicit Rigify mapping
+        run: python tools/test_blender_motion_batch.py --output-dir .cache/blender-batch

{dancerudiments-0.3.0 → dancerudiments-0.4.1}/.github/workflows/visualizer.yml

@@ -44,24 +44,5 @@ jobs:
           name: standalone-pattern-visualizer
           path: dist/visualizer/
           if-no-files-found: error
-      - uses: actions/upload-pages-artifact@v4
-        if: github.ref == 'refs/heads/main' && github.event_name != 'pull_request' && vars.DANCERUDIMENTS_PAGES_ENABLED == 'true'
-        with:
-          path: dist/visualizer
-  deploy:
-    if: github.ref == 'refs/heads/main' && github.event_name != 'pull_request' && vars.DANCERUDIMENTS_PAGES_ENABLED == 'true'
-    needs: build
-    runs-on: ubuntu-latest
-    permissions:
-      contents: read
-      pages: write
-      id-token: write
-    environment:
-      name: github-pages
-      url: ${{ steps.deployment.outputs.page_url }}
-    steps:
-      - name: Configure Pages
-        uses: actions/configure-pages@v5
-      - name: Deploy visualizer only
-        id: deployment
-        uses: actions/deploy-pages@v4
+      # Main/PR previews remain artifacts. Only demo-release.yml publishes the
+      # complete tagged site, so this preview cannot erase its /meshes/ gallery.

{dancerudiments-0.3.0 → dancerudiments-0.4.1}/.gitignore

@@ -15,6 +15,7 @@ CMakeUserPresets.json
 /.npm-cache/
 /venv/
 /.venv/
+/.cache/
 __pycache__/
 *.py[cod]
 
@@ -26,3 +27,10 @@ Thumbs.db
 
 # Locally compiled authoring outputs
 /generated/
+
+# Optional rig motion datasets are independent downloads, never base-package assets.
+/motion-packs/
+/optional-motion-packs/
+
+# Project-local model weights and caches
+models/

dancerudiments-0.4.1/AGENTS.md

@@ -0,0 +1,83 @@
+# Agent instructions for DanceRudiments
+
+- Read README.md, docs/ and the binding examples. Check the native catalogue, integer-pip timing, compositions and the C++, Python, WASM and C# bindings before adding a pattern or adapter.
+- Use the relevant existing capabilities as fully as the task warrants. Always look for a useful improvement to this tool. Fix a reusable gap here rather than copying its engine or carrying a private workaround; record why no change is justified when that is the result.
+- Submit improvements as PRs to https://github.com/kieransimkin/DanceRudiments/pulls. Never leave a completed reusable improvement only in a local fork. Keep changes focused and preserve the tool's identity and compatibility contracts.
+- Add relevant regression coverage, documentation and a reproducible example when behaviour changes. Use tools/release_version.py and tools/check_release_version.py. Run the native and relevant binding tests from .github/workflows/ before packaging.
+- Run `python tools/check_package_docs.py` before packaging; every nested first-party `README.md` in the package input trees must retain the canonical author music link. Preserve third-party `sources/` attribution and keep the actual archive checks enabled.
+- Keep credentials, account data, private media and rights records out of source, fixtures, logs and packages. Use synthetic fixtures or explicitly authorised public examples and preserve their provenance/licences.
+- Use [CONTRIBUTING.md](CONTRIBUTING.md) for review. Maintainers publish accepted, validated improvements as a fresh matching GitHub release and verify configured registry destinations. Preserve existing tags and release assets; publication and deployment remain subject to applicable authorisation.
+- Website: https://kieransimkin.co.uk/danceflow/
+
+## Keep README documentation current
+
+- Whenever a feature is added or changed, update the relevant README.md in the same change to reflect the resulting behaviour. This applies to every feature addition or modification, including APIs, commands, configuration, defaults, integrations and removals.
+- Update affected feature descriptions, usage instructions, options, examples and limitations. For tools or packages with their own README.md, update that README as well as the repository README when its overview or usage is affected.
+- Check the README against the implemented and verified behaviour before committing, opening or merging a PR, publishing a release or handing off the work. A feature change is incomplete until its README documentation is current; a changelog or other documentation does not replace this requirement.
+
+## Released viewers and coordinated CI/CD
+
+- Read [docs/released-viewers.md](docs/released-viewers.md) before changing dependency, build or release behaviour. The sibling layout is `DanceRudiments/`, `react-timeline-sequence/`, and `stemlab/` under one parent.
+- Release the two companions first (React Timeline Sequence, then DanceRudiments), verify their configured publication workflows and public registries, then synchronize/rebuild/test/release StemLab. A merge or tag alone is not a verified release.
+- StemLab must target the **latest stable official releases**. No unreleased main commit, mutable development override, local `file:` archive or vendor package may substitute for a missing release. Latest is resolved before the build and locked to exact published versions, release commits and registry hashes for that run; fail visibly on stale or incompatible dependencies rather than falling back silently.
+- Use the canonical `stemlab/scripts/Release-DanceFlow.ps1` coordinator from the shared parent directory. Preview first; `-Execute` explicitly performs scoped commits, normal pushes and fresh tags; `-Resume` must preserve source identities and existing tags/assets. Never force-push, move release tags, commit unrelated work, bypass failed checks or change approvals/protections/credentials to manufacture a pass.
+- Update this repository's README.md and AGENTS.md in the same change whenever release policy, dependency rules, automation, commands, controls or validation change. Keep relevant package/feature READMEs current too. A separate guide or changelog does not replace the root README update.
+- Preserve the master-plus-drums/percussion beat-routing contract, 64-pips-per-beat native recording clock, per-dimension bars and combined waveform/spectrogram lanes. New UI features must be supplied by released shared APIs and genuinely rebuilt frontend assets, not copied engines or marker strings.
+- Distinguish source CI, package publication, full-song inference, browser/audio QA, artifact packaging, actual Pages deployment and live URL/audio verification. Keep all four Arcadians pages together; do not report unexecuted, skipped or older-commit checks as success. CI playback evidence is not subjective listening QA.
+
+## Full ecosystem and release preflight
+
+Before every new workflow run, check the latest stable official release and observe the actual runtime used by the job. Follow [the shared preflight](https://github.com/kieransimkin/DanceFlow/blob/main/docs/workflows/release-preflight.md) and this project's [people-and-agent guide](docs/ECOSYSTEM.md). Review the complete relevant capability inventory rather than only a familiar command. Consider every DanceFlow component against the actual task; use and compose all applicable supported capabilities, and improve a concrete reusable gap in its canonical repository. Record why existing capabilities suffice when no change is justified. No catalogue checklist expands the task, authorises model downloads/training, or proves integration. Preserve exact source/package identity, clocks, model-local storage, privacy, costs, immutable releases and separate deployment gates.
+
+## Release mesh demos and Pages
+
+- Read `docs/release-demo.md` and `docs/mesh-demos.md` before changing demo builds or deployment. Keep the root native visualizer and `meshes/` gallery together in `dist/pages`. `demo-release.yml` is the sole Pages publisher; main/PR `visualizer.yml` runs remain artifact-only and must not erase a released mesh route.
+- Build from the exact validated tag and commit. Use tag pushes or manual dispatch for an existing compatible published tag; do not depend on a `release.published` event created with `GITHUB_TOKEN`. Old tags without the gallery cannot be retrofitted, moved or overwritten.
+- Retain the `DANCERUDIMENTS_PAGES_ENABLED == 'true'` guard, `github-pages` environment, approvals and protections. Read Pages configuration without enabling or changing it. Only the latest stable official release may deploy, with a second latest-release check after waiting for the shared deployment concurrency slot. Older-tag attachment builds must report a Pages skip accurately.
+- A `main` branch deployment rule does not authorize version tags. If the environment rejects a tag, report the exact annotation and request the maintainer's explicit tag-rule authorization; do not bypass it. Once authorized, retry the failed deployment from the same run while its artifact remains available. Do not rebuild or overwrite completed release attachments to recover a deployment-only failure.
+- Keep original mesh geometry separate from captured source motion. The selected two-source builder may download only its explicitly requested, pinned files and must retain CMU/converter terms, hashes, units, axes and unverified musical timing. Optional motion files must remain outside the default catalogue and base package artifacts.
+- Run `npm test`, `test_mesh_demo_assets.py`, `test_release_pages.py`, the existing native visualizer/MIDI browser gates, and `tools/test_mesh_demo_browser.py` for the complete site before sealing release assets. Preserve the shared native 64-pip sampler, exact profile bindings, lazy scene loading and resource disposal. A `--gallery-only` receipt is local evidence and cannot seal a complete release site.
+- Bind browser evidence to every packaged site file and the exact release identity. Keep archives outside the Pages tree. Existing release assets are immutable: compare every collision before upload, retain identical bytes and refuse changed assets; never use `--clobber` for demo releases.
+- Distinguish source tests, browser QA, sealed artifacts, attachment verification, actual Pages deployment and live route/asset verification. Check hosted precompressed motion bytes without HTTP content decoding. Do not report a successful main preview or older-commit deployment as a verified mesh release.
+
+## Rigify motion validation
+
+For rig-motion changes, read `docs/rig-motion.md`, `docs/rigify-catalogue.md` and
+`docs/motion-sources.md`. Keep native 64-pip playback and the existing normalized
+Recording contract; do not introduce another live sampler. Preserve each saved
+profile's numbered channels and fingerprint. Regenerate built-in profiles only
+with the explicitly pinned Blender/Rigify source, and label contextual components
+and custom rigs accurately. Run the `test_motion*.py` and `test_rig*.py` suites
+and `tools/test_blender_rigify_bridge.py` in the pinned `bpy` environment for
+Blender-facing changes. For interchange changes, also run
+`tools/test_blender_motion_imports.py --output-dir .cache/blender-imports`.
+The `Rigify motion` workflow supplies that optional
+integration gate. Use synthetic fixtures; research catalogue entries do not
+authorize downloading or bundling third-party motion, models or media.
+
+## Optional motion packages
+
+Read `docs/motion-packages.md` and `docs/blender-motion-import.md` for changes to
+optional model recordings. Keep motion payloads in ignored `motion-packs/`,
+outside base npm/Python/native artifacts and the default catalogue. Do not add
+automatic downloads, global data registration or a second live sampler.
+Source-package downloads require task authorization and source-specific rights;
+retain licence, attribution, source hash and conversion changes with every pack.
+Never label a source skeleton as a Rigify retarget or time-only data as musical
+beat alignment. Preserve complete-action pip bounds and distinguish action counts
+from chunk counts.
+
+Run `test_motion_packages.py`, `test_bvh_import.py`, the TypeScript package/page
+tests via `npm test`, and the existing rig/recording tests. Blender import changes
+also require `tools/test_blender_motion_batch.py` in the pinned runtime. The
+`motion-import` extra supplies NumPy only for offline BVH conversion. Verify
+base-package file lists exclude generated motion data before packaging; npm's
+separate recording WASM asset must match its checked-in source hashes.
+
+## Preflight temporary-directory access
+
+Before any long, costly, model-backed, media-rendering, build, test, packaging or release command that creates private or atomic temporary directories, run a disposable preflight with the exact runtime, user or sandbox, and intended output parent. The probe must create a unique directory, write and read a file, atomically rename it, then remove the file and directory.
+
+Keep temporary data and caches under the owning project on `Z:`; model weights and model-specific caches remain under that project's ignored `models/`. If the probe returns `WinError 5`, access denied, a rename failure or a cleanup failure, stop before the expensive command. Preserve the exact error and use the documented narrowly approved unrestricted recovery from the outset only when the task requires it. Use a fresh output directory and do not repeat the already-failing full job in the restricted shell.
+
+After any unrestricted recovery, verify that the final output is readable and writable from the normal managed environment. If it is not, copy the completed bytes into a pre-created project-local directory that passed the probe, verify hashes, and retain the original failure and recovery evidence. Do not edit global ACLs, switch caches to `C:`, terminate unrelated processes or claim the underlying permission problem is fixed. Repositories that own temporary-directory creation should provide and test a reusable preflight helper rather than relying only on this instruction.

{dancerudiments-0.3.0 → dancerudiments-0.4.1}/CMakeLists.txt

@@ -1,5 +1,5 @@
 cmake_minimum_required(VERSION 3.20)
-project(DanceRudiments VERSION 0.3.0
+project(DanceRudiments VERSION 0.4.1
   DESCRIPTION "Deterministic rhythmic position functions for DanceFlow. Music: https://kieransimkin.co.uk/my-songs/"
   HOMEPAGE_URL "https://kieransimkin.co.uk/my-songs/"
   LANGUAGES CXX)
@@ -120,6 +120,8 @@ install(DIRECTORY docs/ DESTINATION "${DANCERUDIMENTS_DOC_DIR}/docs"
   FILES_MATCHING PATTERN "*.md" PATTERN "*.png" PATTERN "*.svg" PATTERN "capture.json")
 install(DIRECTORY examples/bindings/ DESTINATION "${DANCERUDIMENTS_DOC_DIR}/examples/bindings"
   PATTERN "dist" EXCLUDE PATTERN "bin" EXCLUDE PATTERN "obj" EXCLUDE PATTERN "__pycache__" EXCLUDE)
+install(DIRECTORY examples/rig-motion/ DESTINATION "${DANCERUDIMENTS_DOC_DIR}/examples/rig-motion"
+  PATTERN "__pycache__" EXCLUDE)
 
 
 # .NET is built by dotnet, not by CMake. Only the optional native bridge is built here.

{dancerudiments-0.3.0 → dancerudiments-0.4.1}/CONTRIBUTING.md

@@ -10,3 +10,11 @@ Agents and people are welcome to improve DanceRudiments. Review its current capa
 Maintainers review accepted changes, reserve a fresh version and publish a matching GitHub release from the validated source. They verify installable assets, checksums and each configured registry separately. Existing tags and release assets remain immutable. A submitted PR is a contribution awaiting review, not a published release or permission for unrelated deployment.
 
 Website: [https://kieransimkin.co.uk/danceflow/](https://kieransimkin.co.uk/danceflow/).
+
+## Before every new workflow
+
+Check the latest stable official release and the actual installed/imported version before starting; do not infer currency from a directory name or a development checkout. Read the current release notes, tagged capability documentation and relevant Potential problems. Use the [DanceFlow release preflight](https://github.com/kieransimkin/DanceFlow/blob/main/docs/workflows/release-preflight.md) and [complete capability references](https://github.com/kieransimkin/DanceFlow/blob/main/docs/capabilities/index.md).
+
+People and agents should consider the full ecosystem, use all capabilities that materially serve the task, compose supported files/APIs, and improve a demonstrated reusable gap in its canonical tool. Record why no worthwhile change is justified when that is the result. Keep independent tool identities, compatibility, source clocks, privacy, model/download costs and publication/deployment permissions intact. Store weights and model-specific caches in the owning project's ignored `models/`.
+
+Read [the people-and-agent ecosystem guide](docs/ECOSYSTEM.md) before selecting or extending a tool.