feat(catalog): add the seven 3D-motion pieces as installable registry blocks (#4056)

* feat(catalog): add the seven 3D-motion pieces as installable registry blocks

Each piece ships as a registry block with a CDN poster and preview, a live
catalog detail page and its source. Scripts travel inside the catalog payload
(shared vendor libraries fetched once, item scripts inline, the one HDR as a
data URI) because the docs host only serves fonts, images and JSON.

NO_ESSAY_COMMENTS_OK: the long comment blocks are in vendored libraries and
the ported frost source under registry/blocks, not hand-written here.
HF_MAX_NONLFS_KB=6000: four hosted texture PNGs under docs/public/catalog/items
are runtime assets the docs host must serve as files.
fallow skipped locally: it audits against origin/main and this branch is
stacked on an older main.

* chore(catalog): regenerate gallery data and nav after rebasing onto main

* fix(catalog): read the install manifest through the bounded project reader

* fix(catalog): a script the inliner missed fails the payload instead of shipping a dead URL

* refactor(catalog): the leftover-script check reuses the reference finder

* fix(catalog): frost and glass textures load from the CDN and the iteration presets are gone

* chore(catalog): regenerate the frost and glass payloads and nav

* fix(catalog): frost and glass textures are hosted through the registry url field, not hardcoded

* chore(catalog): regenerate the frost and glass payloads against the hosted texture URLs

* fix(catalog): the hosted-reference rewrite refuses a bare name it cannot safely replace

* ci(catalog): verify changed catalog payloads in headless Chrome and check the docs catalog

* feat(catalog): every item page follows the shared layout with a Tune panel and tabs

* fix(catalog): let the texture-mask item host its masks so its tile plays live

* chore(catalog): regenerate item pages, gallery data and the texture-mask payload

* chore(catalog): regenerate item pages after merging main

* fix(catalog): declared-only variables get the Tune panel, Code and Docs tabs capped

* feat(catalog): give the blend-difference caption a demo scene so its tile plays live

* chore(catalog): live payload for the blend-difference caption

* perf(catalog): heavy 3d pieces compile and draw before ready, not on the first visible frame

* feat(catalog): the avatar promo card hosts its videos, audio and fonts on the CDN

* feat(catalog): the avatar promo card tile plays live from its CDN-hosted media

* chore(catalog): the avatar promo card plays live, no allowlist left

* chore(catalog): shorten two comment blocks

* chore(catalog): trim first-party comment blocks to the comment-check limits

* chore(catalog): shorten two frost source comments

* fix(catalog): the Docs tab renders as prose again, and the detail page honours reduced motion

Frame-mode pages carry no prose wrapper, and the detail component sat inside
not-prose, so the Docs slot's headings, paragraphs, links and lists had no
styling at all. The slots now carry their own prose classes and the chrome
around them keeps not-prose.

The recorded clip also gets the reduced-motion guard the docs-snippet check
requires, and the generator reads stability from the source metadata type so
the scripts typecheck passes.

* fix(catalog): docs-tab paragraphs render as blocks

Mintlify emits paragraphs as inline spans, so two paragraphs in the Docs slot ran together.

* fix(ci): drop the duplicate docs_catalog job output

git's line-based auto-merge silently duplicated the outputs key when
main and this branch each added it on non-adjacent lines during the
rebase; oxfmt's yaml parser rejects the repeated map key.

* fix(catalog): close four CodeQL alerts in the frost source

* chore(catalog): allowlist the avatar-promo-card CDN asset deletions, format sync-docs-catalog

check-no-main-deletions.mjs was rejecting 11 local mp4/font files this branch
already deleted in favor of CDN hosting; scripts/sync-docs-catalog.mjs had one
line over the 100-col print width from an earlier edit in this branch.

* fix(catalog): detail tabs use docs prose spacing, Install first; previews skip no-WebGPU runners

* fix(catalog): the docs tab scrolls with the page instead of a capped inner box

* refactor(catalog): split the payload asset and verify scripts into single-purpose helpers

* refactor(catalog): split the preview generator into single-purpose helpers

* ci(catalog): fail when the committed catalog differs from generator output

The docs host serves the committed catalog and nothing regenerates it, so a stale
copy shipped silently. The catalog payloads job now generates into a temp dir and
compares it with the committed tree.

* chore(catalog): regenerate docs/public/catalog with the refactored scripts

One full regeneration from an empty output tree with the current scripts. The tree grows
from 58.4 MB to 65.1 MB. Two hosted assets are about 2 MB each (an avatar png and a wav);
the same bytes are already committed under assets/, so HF_MAX_NONLFS_KB is raised for
this commit only.

* fix(catalog): run the catalog script tests under the runner they are written for

The rebase put three node:test files in the vitest half of test:scripts, where they report
"No test suite found". They now sit in the node --test list.

* fix(catalog): a WebGPU item without an adapter shows its recorded clip and says why

* ci(catalog): the drift check runs from a committed fetch mirror with no network

Generation now serves every font and CDN script fetch from scripts/catalog-fetch-mirror and fails
when a fetch is not in it, even if the caller swallowed the error. CATALOG_FETCH_MIRROR=record
refreshes the mirror from the live network. The docs_catalog filter also watches packages/core,
packages/producer and the mirror, and the 13 re-hashed font files are listed in ALLOWED_DELETIONS.

* chore(catalog): clean up the temp font cache and sort the mirror index without a locale

* fix(catalog): hide Tune when the clip stands in, time out the adapter request, share one check

* fix(catalog): the adapter probe survives a sync throw and a hang; test the clip guard

* fix(catalog): keep the adapter probe inside the component, Mintlify evaluates only exports

* fix(catalog): run the detail and page generator tests in CI; no Tune flash while probing WebGPU

* docs(catalog): credit vendored libraries and make each SKILL.md list what the block installs

CREDITS.md names every vendored dependency with its upstream and licence, and flags the two leaf
textures whose origin is still to be confirmed. Each SKILL.md Files table now comes from the block
manifest and its install and render paths point at compositions/<name>/. A test checks that every
path a SKILL.md names is a manifest file that exists.

* fix(catalog): a declared WebGPU item passes verify by its manifest tag, not by console wording

verify-catalog-payloads forgave a missing adapter only by matching the markup and the message, which
library-reported errors and widgets never satisfy. The webgpu tag in the item manifest is now the
owner: a tagged item ignores its page and console errors, an untagged one gets no forgiveness, and a
marker payload with no html is listed instead of crashing the run.

* docs(catalog): correct the credits per block and guard the mount and render paths

CREDITS.md states the three.js version and vendored-or-CDN status per block, adds d3-delaunay,
Clipper on the CDN and the Google Fonts loads, and lists every texture with no known origin.
The SKILL.md test now also checks the mount and render paths against the manifest composition.

* test(catalog): read each block manifest once in the SKILL.md file test

The two checks shared a copied manifest read, which fallow flagged as a clone with a high score.

* fix(catalog): commit the hosted item files a gitignore rule kept out, and check git not the disk

The compositions/ and *-ad/ ignore rules matched folder names under docs/public/catalog/items,
so 33 hosted fonts, textures and marks were generated but never committed and would 404 on
the docs host. The rules now have a negation for that tree and the files are added.

The drift check read the checkout, where git-ignored files still exist, so it passed locally
and failed only in CI. It now unpacks HEAD with git archive and compares that.

* fix(catalog): a tile keeps its poster until the composition has painted

* fix(catalog): a tagged WebGPU item forgives only the adapter-absent error, and test the wiring

The manifest webgpu tag now decides whether an item may lack an adapter, and the error wording
decides which lines are that absence. Any other page or console error on the item, and every
failed request, still fails. The per-item decision is one exported function the tests drive,
marker payloads are parsed by a tested helper, and the SKILL.md variable counts are checked
against their tables (cuboid-carousel said forty-nine for forty).

* fix(catalog): the pinned group's posters load eagerly at high priority

* fix(catalog): type the tile reveal test so the scripts typecheck passes

* fix(catalog): stop the adapter signature matching an unrelated failed adapter request

failed to request .*adapter also matched errors about other adapters. It now matches only a
request for the WebGPU adapter, so a tagged item cannot hide an unrelated failure behind it.

* test(catalog): a tagged item still fails on an error about some other adapter

* feat(catalog): the install command sits above the preview, as on the live catalog

* fix(catalog): find the install slot through Mintlify's child wrapper

* fix(docs): catalog copy buttons keep their size when the label swaps to Copied

* refactor(docs): name the shown copy label once in the catalog copy button

* fix(docs): primary catalog button keeps a readable label on hover and after copy

* fix(docs): inset the catalog tab strip and tab content to match the boxed panels

Author: miguel-heygen

.fallowrc.jsonc

@@ -967,8 +967,8 @@
       // file-level fingerprint invalidation re-flags the inherited findings even at
       // unchanged line numbers.
       "packages/core/src/runtime/picker.ts",
-      // generate-catalog-payloads.ts: hostsOwnDirectory, parseArgs and main are
-      // untouched. buildPayload's canvas-draw-element branch now writes a marker
+      // generate-catalog-payloads.ts: hostsOwnDirectory, parseArgs and generate (the
+      // former main body, moved unchanged) are untouched. buildPayload's canvas-draw-element branch now writes a marker
       // via a small writePayload helper instead of dropping the payload, but at
       // the same branch count — its flagged 14-branch CRAP score predates this PR.
       "scripts/generate-catalog-payloads.ts",

.github/workflows/ci.yml

@@ -61,7 +61,11 @@ jobs:
             docs_catalog:
               - "docs/**"
               - "registry/**"
-              - "scripts/*docs-catalog*"
+              - "scripts/*catalog*"
+              - "scripts/catalog-fetch-mirror/**"
+              - "scripts/docs-catalog-shared.mjs"
+              - "packages/core/**"
+              - "packages/producer/**"
               - "package.json"
               - ".github/workflows/ci.yml"
             code:
@@ -168,6 +172,30 @@ jobs:
       - run: bun run lint
       - run: bun run check:docs-catalog
 
+  # Loads every catalog payload a PR changes in headless Chrome. A static scan of the
+  # markup cannot see an asset a script fetches, and the docs host serves only fonts,
+  # images and JSON, so a payload that runs locally can 404 there.
+  catalog-payloads:
+    name: Catalog payloads
+    needs: changes
+    if: needs.changes.outputs.docs_catalog == 'true'
+    runs-on: ubuntu-latest
+    timeout-minutes: 15
+    steps:
+      - uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
+        with:
+          fetch-depth: 0
+      - uses: oven-sh/setup-bun@0c5077e51419868618aeaa5fe8019c62421857d6 # v2
+      - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4
+        with:
+          node-version: 22
+      - run: bash scripts/ci/install-workspace-dependencies.sh
+      - run: bun run --filter '@hyperframes/{parsers,lint,studio-server}' build
+      - run: bun run --cwd packages/core build
+      - run: bun run --cwd packages/core build:hyperframes-runtime
+      - run: bun run verify:catalog-payloads --changed origin/main
+      - run: bun run check:catalog-drift
+
   # `fallow audit` runs dead-code + complexity + duplication analysis scoped to
   # the changed files. The default `--gate new-only` means existing legacy
   # findings don't fail the build — only NEW issues introduced by the PR do.

.gitignore

@@ -188,3 +188,7 @@ tmp/
 
 # Local Chrome-for-Testing downloads (large binaries, never commit)
 chrome/
+
+# Hosted catalog item files are generated output the docs host serves; the rules above match their folder names
+!docs/public/catalog/items/**/compositions/
+!docs/public/catalog/items/*-ad/

.oxlintrc.json

@@ -13,6 +13,8 @@
     "packages/producer/tests/**/src/vendor/**",
     "docs/public/catalog/",
     "registry/blocks/**/lib/*.iife.js",
+    "registry/blocks/{glass-shard-title,code-slice-hero,cuboid-carousel,frost-sequence-camera-orbit,orbit-card}/**/*.{js,mjs}",
+    "registry/blocks/frost-sequence-camera-orbit/source/**",
     "chrome/"
   ],
   "overrides": [

.prettierignore

@@ -12,6 +12,23 @@ packages/**/__goldens__/
 # vendored third-party bundles inside skills — never reformat
 skills/**/assets/vendor/
 skills/**/*.min.js
+# vendored/bundled third-party JS inside registry blocks — never reformat.
+# Without this the format hook silently re-pretty-prints a minified bundle,
+# roughly doubling its size. Listed by exact file: these blocks also ship
+# hand-authored source (glass-main.mjs, surface.js, orbit-scene.js, etc) that must stay formattable.
+registry/blocks/**/lib/*.iife.js
+registry/blocks/frost-sequence-camera-orbit/assets/frost.js
+registry/blocks/frost-sequence-camera-orbit/assets/motion.js
+registry/blocks/frost-sequence-camera-orbit/assets/gsap-3.14.2.min.js
+registry/blocks/glass-shard-title/assets/glass-main.js
+registry/blocks/code-slice-hero/assets/gsap-3.14.2.min.js
+registry/blocks/cuboid-carousel/assets/three.core.min.js
+registry/blocks/cuboid-carousel/assets/three.module.min.js
+registry/blocks/cuboid-carousel/assets/gsap-3.14.2.min.js
+registry/blocks/cuboid-carousel/assets/addons/**/*.js
+registry/blocks/orbit-card/assets/three.core.min.js
+registry/blocks/orbit-card/assets/three.module.min.js
+registry/blocks/orbit-card/assets/gsap-3.14.2.min.js
 # reference snippets with intentional pseudo-markup (literal "..." attributes)
 skills/talking-head-recut/references/frames/polaroid.html
 # repo-native skill examples with intentional pseudo-markup placeholders

CREDITS.md

@@ -28,3 +28,34 @@ broader Node.js ecosystem.
 - **[mediabunny](https://github.com/Vanilagy/mediabunny)** — media toolkit used
   in the studio for fast metadata extraction from file headers. Licensed under
   the [Mozilla Public License 2.0 (MPL-2.0)](https://mozilla.org/MPL/2.0/).
+- The seven 3D-motion catalog pieces (`canopy-part-title`, `glass-shard-title`,
+  `code-slice-hero`, `frost-sequence-camera-orbit`, `cuboid-carousel`,
+  `orbit-card`, `wireframe-portal-title`) are contributed with their author's
+  permission under this repository's license. What they vendor or load, by upstream:
+  - **[three.js](https://threejs.org)**, MIT. Vendored as r185 in `frost-sequence-camera-orbit`,
+    `cuboid-carousel` and `orbit-card` (`Three-LICENSE.txt` beside the copy); bundled as r181 inside
+    `glass-shard-title`'s `glass-main.js`; loaded from the jsDelivr CDN by `canopy-part-title`
+    (0.170.0) and `wireframe-portal-title` (0.181.2).
+  - **[GSAP](https://gsap.com)** 3.14.2, under the [GSAP Standard License](https://gsap.com/standard-license)
+    (not an OSI open-source licence). Vendored in `code-slice-hero`, `cuboid-carousel`,
+    `frost-sequence-camera-orbit` and `orbit-card` with `GSAP-NOTICE.txt`; loaded from the CDN by
+    `glass-shard-title`, `canopy-part-title` and `wireframe-portal-title`.
+  - **[three-mesh-bvh](https://github.com/gkjohnson/three-mesh-bvh)** 0.9.14 and
+    **[opentype.js](https://github.com/opentypejs/opentype.js)** 2.x (range in the block's
+    `source/package.json`), both MIT, bundled into the frost block's `frost.js`.
+  - **[Clipper](https://sourceforge.net/projects/jsclipper/)** 6.4.2 (JavaScript port of Angus
+    Johnson's Clipper), Boost Software License 1.0: build-time source of `frost-sequence-camera-orbit`
+    and loaded from the CDN as `clipper-lib` by `wireframe-portal-title`.
+  - **[d3-delaunay](https://github.com/d3/d3-delaunay)** 6.0.4, ISC, loaded from the CDN by
+    `glass-shard-title`.
+  - **[Geist](https://github.com/vercel/geist-font)**, **[Archivo](https://github.com/Omnibus-Type/Archivo)**
+    and **[Cormorant Garamond](https://github.com/CatharsisFonts/Cormorant)**, SIL Open Font License 1.1,
+    vendored with their licence text; `canopy-part-title` (Gelasio) and `cuboid-carousel` (Inter) load
+    their fonts from Google Fonts at run time.
+  - **[Ferndale Studio 01](https://polyhaven.com/a/ferndale_studio_01)** HDR from Poly Haven, CC0
+    (`glass-shard-title`); it needs no licence text.
+  - Origin to be confirmed with the author: `canopy-part-title/assets/leaf-surface-color.webp` and
+    `leaf-surface-normal.webp`, `glass-shard-title/assets/matcap-1.png`,
+    `frost-sequence-camera-orbit/assets/shards-atlas.png`,
+    `frost-sequence-camera-orbit/assets/textures/ice-inclusions-generated.png` and
+    `frost-sequence-camera-orbit/assets/textures/bluenoise64.png`.