wip: CI snapshot for several cameras in the picture

.github/workflows/build.yml

@@ -52,10 +52,12 @@ jobs:
         uses: ./.github/actions/setup
 
       # STT is the bundled whisper-stt-server (whisper.cpp with native DTW token
-      # timestamps); no VAD model is fetched here. The binary is built by
-      # build-whisper-stt.yml and staged below — without that step the installer
-      # ships without speech-to-text. See
-      # technical-documentation/architecture/transcription-and-captions.md.
+      # timestamps); no model is fetched here. The binary is built by
+      # build-whisper-stt.yml and staged below, from the run built from this
+      # commit's helper sources — without that step the installer ships without
+      # speech-to-text. See
+      # technical-documentation/architecture/transcription-and-captions.md, and
+      # technical-documentation/engineering/release-and-secrets.md for the run.
       - name: Stage whisper-stt binaries
         shell: bash
         env:

.github/workflows/docs.yml

@@ -76,6 +76,17 @@ jobs:
       - name: Check media budget
         working-directory: website
         run: npm run check:media
+      # The demo loops are served from R2 (media.getopenscreen.com), not git, so
+      # nothing above would notice a loop a page names that was never uploaded,
+      # or a cut folder holding the wrong files. media/loops.json records what
+      # scripts/media/publish-loops.mjs uploaded; this holds the code to it and
+      # asks the CDN for every recorded file, paced under the zone's rate limit.
+      - name: Check demo loops
+        working-directory: website
+        run: npm run check:loops -- --live
+      - name: Check responsive backgrounds
+        working-directory: website
+        run: npm run check:backgrounds -- --live
       # The recreation's data is generated from the app's own source and a
       # vendored project document. It is committed, so it can go stale in either
       # direction — a locale key moves, a timeline constant changes — and the
@@ -137,4 +148,4 @@ jobs:
       id-token: write
     steps:
       - id: deployment
-        uses: actions/deploy-pages@cd2ce8fcbc39b97be8ca5fce6e763baed58fa128 # v5.0.0
+        uses: actions/deploy-pages@cd2ce8fcbc39b97be8ca5fce6e763baed58fa128 # v5.0.0

.gitignore

@@ -95,6 +95,9 @@ result-*
 /tools/stt-eval/whispercpp-dtw-poc/fixtures/*.wav
 /tools/stt-eval/whispercpp-dtw-poc/results/
 
+# Word-timing harness (tools/stt-eval/word-timing): TTS corpus and results.
+/tools/stt-eval/word-timing/data/
+
 opencode.json
 opencode.json
 

README.md

@@ -7,7 +7,7 @@
 <p align="center"><strong>A free, open-source desktop app for recording your screen and turning the result into polished product demos and walkthroughs.</strong></p>
 
 <p align="center">
-  <img src="docs/assets/demo.gif" alt="Editing a recording in OpenScreen: wallpaper and video effects, an AI-assisted cut driven from the chat, then export" width="100%" />
+  <img src="docs/assets/demo.gif" alt="Editing a recording in OpenScreen: one click restyles the whole video, deleting a sentence in the transcript cuts it from the video, and the editor's agent adds a zoom on every click" width="100%" />
 </p>
 
 <p align="center">

THIRD-PARTY-NOTICES.md

@@ -1,12 +1,14 @@
 # Third-party notices
 
 OpenScreen is MIT licensed (see [LICENSE](LICENSE)). The installers additionally
-bundle the pre-built native components below. This file ships inside the
+bundle the third-party components below. This file ships inside the
 application resources and satisfies the attribution and source-offer obligations
 that come with them.
 
 npm dependencies are not listed here: they are resolved from `package.json` and
-distributed by their own registries, not redistributed inside our binaries.
+distributed by their own registries, not redistributed inside our binaries. The
+exception is code bundled into the renderer whose licence asks for its notice in
+the distributed form (js-aruco2 below): the bundler strips the source headers.
 
 ---
 
@@ -38,6 +40,23 @@ distributed by their own registries, not redistributed inside our binaries.
   replace them with your own build of the same FFmpeg version by overwriting the
   DLLs in `resources/electron/native/bin/win32-*/`.
 
+## web-demuxer — WebAssembly demuxer
+
+- **Component**: `wasm/web-demuxer.wasm`, inside the application bundle.
+- **Used by**: the editor's streaming decoder, audio waveforms and caption audio
+  extraction, which demux recordings in the renderer with it.
+- **License**: MIT for web-demuxer itself — Copyright (c) 2024 ForeverSc, under the
+  same permission notice as OpenScreen's own [LICENSE](LICENSE). The module also
+  contains FFmpeg code compiled to WebAssembly, under the **GNU Lesser General
+  Public License v2.1 or later**, as web-demuxer's README states.
+- **Upstream**: the npm package `web-demuxer` 4.0.0,
+  <https://github.com/ForeverSc/web-demuxer>. The shipped file is byte-identical
+  to that release's `dist/wasm-files/web-demuxer.wasm`.
+- **Corresponding source**: the web-demuxer repository at the 4.0.0 release, whose
+  `lib/` directory holds the FFmpeg-derived sources and their build scripts.
+- **Replacing it**: the module is a separate file loaded at runtime, so it can be
+  replaced with your own build of the same version.
+
 ## whisper.cpp and ggml
 
 - **Components**: `whisper-stt-server` and its ggml backend sidecars, under
@@ -147,6 +166,132 @@ distributed by their own registries, not redistributed inside our binaries.
   - IBM Plex Mono 2.3 — Copyright © 2017 IBM Corp. `ofl/ibmplexmono/` of
     <https://github.com/google/fonts> at `23e54b51dd`.
 
+## Recordly — helper code
+
+- **Components**: parts of the zoom, motion-smoothing and custom-cursor code, and a
+  few lines elsewhere, the native capture helpers included.
+- **License**: MIT — Copyright (c) 2026 webadderall, under the same permission
+  notice as OpenScreen's own [LICENSE](LICENSE). Published by Recordly under MIT,
+  before its relicensing in March 2026.
+
+## js-aruco2 — ArUco marker detection
+
+- **Components**: `src/aruco.js` and `src/cv.js` of the npm package `js-aruco2`
+  2.0.0, compiled into the renderer bundle (`dist/assets/*.js`).
+- **Used by**: the camera calibration dialog, which finds the four printed corner
+  markers in a camera still.
+- **License**: MIT — Copyright (c) 2020 Damiano Falcioni, Copyright (c) 2011 Juan
+  Mellado, under the same permission notice as OpenScreen's own
+  [LICENSE](LICENSE).
+- **Upstream**: <https://github.com/damianofalcioni/js-aruco2>, release 2.0.0.
+
+## OpenCV — ArUco 4×4 dictionary codes
+
+- **Component**: the marker codes in js-aruco2's
+  `src/dictionaries/aruco_4x4_1000.js`, compiled into the renderer bundle. They
+  are taken from OpenCV's `predefined_dictionaries.hpp`; the marker sheet the
+  editor prints draws markers 0–3 of this dictionary.
+- **License**: BSD 3-Clause — Copyright (C) 2013, OpenCV Foundation, all rights
+  reserved. Third party copyrights are property of their respective owners.
+
+  > Redistribution and use in source and binary forms, with or without
+  > modification, are permitted provided that the following conditions are met:
+  >
+  > - Redistributions of source code must retain the above copyright notice,
+  >   this list of conditions and the following disclaimer.
+  > - Redistributions in binary form must reproduce the above copyright notice,
+  >   this list of conditions and the following disclaimer in the documentation
+  >   and/or other materials provided with the distribution.
+  > - Neither the names of the copyright holders nor the names of the
+  >   contributors may be used to endorse or promote products derived from this
+  >   software without specific prior written permission.
+  >
+  > This software is provided by the copyright holders and contributors "as is"
+  > and any express or implied warranties, including, but not limited to, the
+  > implied warranties of merchantability and fitness for a particular purpose
+  > are disclaimed. In no event shall copyright holders or contributors be liable
+  > for any direct, indirect, incidental, special, exemplary, or consequential
+  > damages (including, but not limited to, procurement of substitute goods or
+  > services; loss of use, data, or profits; or business interruption) however
+  > caused and on any theory of liability, whether in contract, strict liability,
+  > or tort (including negligence or otherwise) arising in any way out of the use
+  > of this software, even if advised of the possibility of such damage.
+
+## Rust crates — compiled into the compositor addon
+
+- **Component**: `compositor_view.node`, under
+  `resources/electron/native/bin/<platform>-<arch>/`.
+- **What is listed**: every third-party crate in the addon's dependency graph in
+  `crates/Cargo.lock`, across all platforms. Build-time crates (procedural macros,
+  build scripts) are included even though none of their code ships.
+- **Licenses**: as each crate publishes them on crates.io. Where a crate offers a
+  choice, OpenScreen uses it under MIT or Apache-2.0. Each crate's licence text is
+  in its source package at the version listed.
+- **MIT OR Apache-2.0** (155): android_system_properties 0.1.5, anyhow 1.0.103,
+  arrayvec 0.7.8, ash 0.38.0+1.3.281, autocfg 1.5.1, bit-set 0.8.0, bit-vec 0.8.0,
+  bitflags 1.3.2, bitflags 2.13.1, bumpalo 3.20.3, cc 1.2.67, cexpr 0.6.0, cfg-if
+  1.0.4, core-foundation 0.9.4, core-foundation-sys 0.8.7, core-graphics-types
+  0.1.3, cosmic-text 0.19.0, crc32fast 1.5.0, ctor 0.2.9, document-features
+  0.2.12, either 1.16.0, equivalent 1.0.2, fdeflate 0.3.7, find-msvc-tools 0.1.9,
+  flate2 1.1.9, font-types 0.11.3, font-types 0.12.2, foreign-types 0.5.0,
+  foreign-types-macros 0.2.4, foreign-types-shared 0.3.1, futures-core 0.3.33,
+  futures-task 0.3.33, futures-util 0.3.33, glob 0.3.3, gpu-alloc 0.6.2,
+  gpu-alloc-types 0.3.1, gpu-allocator 0.27.0, gpu-descriptor 0.3.2,
+  gpu-descriptor-types 0.2.0, hashbrown 0.15.5, hashbrown 0.17.1, heck 0.5.0,
+  image 0.25.10, indexmap 2.14.0, itertools 0.13.0, itoa 1.0.18, jni-sys 0.3.1,
+  jni-sys 0.4.1, jni-sys-macros 0.4.1, js-sys 0.3.103, khronos-egl 6.0.0, libc
+  0.2.186, linebender_resource_handle 0.1.1, litrs 1.0.0, lock_api 0.4.14, log
+  0.4.33, matrixmultiply 0.3.11, memmap2 0.9.11, metal 0.29.0, metal 0.31.0,
+  minimal-lexical 0.2.1, naga 24.0.0, ndarray 0.16.1, ndarray 0.17.2, ndk-sys
+  0.5.0+25.2.9519653, num-complex 0.4.6, num-integer 0.1.47, num-traits 0.2.19,
+  once_cell 1.21.4, ort 2.0.0-rc.13, ort-sys 2.0.0-rc.13, parking_lot 0.12.5,
+  parking_lot_core 0.9.12, paste 1.0.15, pin-project-lite 0.2.17, pkg-config
+  0.3.33, png 0.18.1, pollster 0.4.0, portable-atomic 1.15.0, portable-atomic-util
+  0.2.7, presser 0.3.1, prettyplease 0.2.37, proc-macro2 1.0.106, profiling
+  1.0.18, quote 1.0.46, range-alloc 0.1.5, rangemap 1.7.1, rawpointer 0.2.1,
+  read-fonts 0.37.0, read-fonts 0.41.0, regex 1.13.1, regex-automata 0.4.16,
+  regex-syntax 0.8.11, renderdoc-sys 1.1.0, roxmltree 0.20.0, rustc-hash 1.1.0,
+  rustc-hash 2.1.3, rustversion 1.0.23, scopeguard 1.2.0, semver 1.0.28, serde
+  1.0.228, serde_core 1.0.228, serde_derive 1.0.228, serde_json 1.0.150, shlex
+  1.3.0, shlex 2.0.1, skrifa 0.40.0, skrifa 0.44.0, smallvec 1.15.2, smol_str
+  0.3.6, static_assertions 1.1.0, swash 0.2.10, syn 2.0.119, syn 3.0.3, sys-locale
+  0.3.2, thiserror 1.0.69, thiserror 2.0.19, thiserror-impl 1.0.69, thiserror-impl
+  2.0.19, ttf-parser 0.25.1, unicode-bidi 0.3.18, unicode-script 0.5.8,
+  unicode-segmentation 1.13.3, unicode-width 0.1.14, unicode-xid 0.2.6,
+  version_check 0.9.5, wasm-bindgen 0.2.126, wasm-bindgen-futures 0.4.76,
+  wasm-bindgen-macro 0.2.126, wasm-bindgen-macro-support 0.2.126,
+  wasm-bindgen-shared 0.2.126, web-sys 0.3.103, wgpu 24.0.5, wgpu-core 24.0.5,
+  wgpu-hal 24.0.4, wgpu-types 24.0.0, windows 0.58.0, windows_aarch64_gnullvm
+  0.52.6, windows_aarch64_msvc 0.52.6, windows_i686_gnu 0.52.6,
+  windows_i686_gnullvm 0.52.6, windows_i686_msvc 0.52.6, windows_x86_64_gnu
+  0.52.6, windows_x86_64_gnullvm 0.52.6, windows_x86_64_msvc 0.52.6, windows-core
+  0.58.0, windows-implement 0.58.0, windows-interface 0.58.0, windows-link 0.2.1,
+  windows-result 0.2.0, windows-strings 0.1.0, windows-sys 0.61.2, windows-targets
+  0.52.6, yazi 0.2.1, zeno 0.3.3.
+- **MIT** (26): block 0.1.6, cfg_aliases 0.2.2, convert_case 0.6.0, core_maths
+  0.1.1, fontconfig-parser 0.5.8, fontdb 0.23.0, harfrust 0.5.2, libm 0.2.16,
+  malloc_buf 0.0.6, napi 2.16.17, napi-build 2.3.2, napi-derive 2.16.13,
+  napi-derive-backend 1.0.75, napi-sys 2.4.0, nom 7.1.3, objc 0.2.7, ordered-float
+  4.6.0, redox_syscall 0.5.18, simd-adler32 0.3.10, slab 0.4.12, strum 0.26.3,
+  strum_macros 0.26.4, tracing 0.1.44, tracing-core 0.1.36, xml-rs 0.8.28, zmij
+  1.0.23.
+- **MIT OR Apache-2.0 OR Zlib** (9): bytemuck 1.25.1, bytemuck_derive 1.11.0,
+  glow 0.16.0, miniz_oxide 0.8.9, raw-window-handle 0.6.2, tinyvec 1.12.0,
+  tinyvec_macros 0.1.1, zune-core 0.5.1, zune-jpeg 0.5.15.
+- **Apache-2.0** (7): clang-sys 1.8.1, codespan-reporting 0.11.1, gl_generator
+  0.14.0, glutin_wgl_sys 0.6.1, khronos_api 3.1.0, spirv 0.3.0+sdk-1.3.268.0,
+  unicode-linebreak 0.1.5.
+- **Unlicense OR MIT** (5): aho-corasick 1.1.4, byteorder-lite 0.1.0, memchr
+  2.8.3, termcolor 1.4.1, winapi-util 0.1.11.
+- **Zlib** (2): foldhash 0.1.5, slotmap 1.1.1.
+- **ISC** (2): libloading 0.8.9, libloading 0.9.0.
+- **BSD-3-Clause OR Apache-2.0** (2): moxcms 0.8.1, pxfm 0.1.30.
+- **0BSD OR MIT OR Apache-2.0** (1): adler2 2.0.1.
+- **BSD-3-Clause** (1): bindgen 0.70.1.
+- **CC0-1.0** (1): hexf-parse 0.2.1.
+- **Apache-2.0 OR GPL-2.0-only** (1): self_cell 1.3.0.
+- **(MIT OR Apache-2.0) AND Unicode-3.0** (1): unicode-ident 1.0.24.
+
 ## OpenScreen native helpers
 
 `wgc-capture` (Windows Graphics Capture), the ScreenCaptureKit helper (macOS),

crates/Cargo.toml

@@ -68,6 +68,7 @@ features = [
     "Win32_Graphics_Direct2D_Common", # D2D1_COLOR_F / PIXEL_FORMAT
     "Win32_Graphics_DirectWrite",    # mise en page + rastérisation du texte
     "Win32_Graphics_Gdi",            # brosses/police GUI de la preview (poc-d3d/src/app.rs)
+    "Win32_Security",                # IDXGIResource1::CreateSharedHandle (shared_frames.rs)
     "Win32_System_Performance",      # QueryPerformanceCounter / Frequency (§10)
     "Win32_System_LibraryLoader",    # GetModuleHandleW (hInstance)
     "Win32_UI_WindowsAndMessaging",  # fenêtres (harnais live + GUI du POC)