Semiotic Files

Network camera and semantic zoom

The opt-in semiotic/network/zoom camera keeps custom layouts in authored coordinates while synchronizing canvas, SVG, HTML cards, hit testing and keyboard focus. This release improves camera and pointer-update performance, adds discrete LOD subscriptions, viewport insets, mark-id navigation, camera anchoring across layout runs and retained-scene SVG export, and supports ordinary-arrow panning as an explicit keyboard policy. Existing charts and default arrow-key node navigation retain their behavior.

Added

• zoomOptions.keyboard: { arrowKeys: "pan" } opts ordinary arrow keys into 60-screen-pixel panning. Alt+arrows still pan and plus/minus still zoom. Boolean settings retain their behavior; { arrowKeys: "navigate" } explicitly selects default node navigation. Editable content and browser shortcuts are unaffected.
• exportNetworkViewSVG from semiotic/server, semiotic/server/node and semiotic/server/edge exports a retained network scene with a fitted, identity or explicit camera. SVG backgrounds, marks and card overlays are preserved; HTML cards require SVG equivalents. Fit supports explicit decoration bounds and scales outside the interactive camera's limits.
• Custom network layouts can return edgeHitTesting: false to keep node interactions while skipping edge hover, clicks, and cursors.
• useNetworkLODLevel(width, options) from semiotic/network/zoom returns a discrete detail level without rerendering cards for unchanged levels during camera movement. It preserves hysteresis, settle-only promotion, and focused editor detail through keepDetail.
• zoomOptions.insets reserves screen-pixel plot strips covered by chrome such as an inspect panel. Fit, reveal, pan bounds and centered zoom (buttons, plus/minus keys, locked axes) use the remaining viewport; changing insets alone does not move the camera. The handle adds centerOn(rectOrPoint, { k?, duration?, insets? }), and fitToContent accepts { padding, minZoom, maxZoom, duration }; padding may be set per side, and unspecified sides keep fitPadding.
• Mark-id camera navigation: getMarkBounds(id) reads an HTML mark's box, or else a scene node's, from the retained layout, alongside centerOnMark, fitToMarks and revealMark. zoomOptions.anchor: { markId } keeps that mark's center at the same screen position when the layout runs again, translating the camera once per layout commit. NetworkZoomSource adds "center" and "anchor".
• useNetworkZoom(selector, isEqual?) rerenders only when the selected camera value changes.
• Compositional DAG interfaces from semiotic/recipes/core: prepareCompositionalGraph validates versioned nodes, parts, ports, edges and explicit transfers, where every connection keeps its own ID; routeCompositionalGraph solves authored positions in route-only mode or explicit order freedoms in bounded optimize mode and reports infeasible pins, missing anchors, unsupported compound routing and congestion through diagnostics; compositionalDagLayout renders the solved layout through NetworkCustomChart. patchCompositionalGraph, traceCompositionalGraph, CompositionalLayoutController, createCompositionalWorkerEngine, installCompositionalWorker, projectCompositionalScroll and CompositionalMeasurementTransaction cover mutation, tracing, asynchronous engines, scrolling and measurement; CompositionalNavigator from semiotic/recipes/react adds keyboard access to parts and ports. Solved layouts are deeply frozen without freezing the caller's graph, view or geometry objects. See /custom-charts#compositional-dags, /examples/compositional-dag and /examples/pipeline-explorer.
• Network edge identity: frameProps={{ edgeIdentity: "id", edgeIdAccessor }} keys edges by their own IDs instead of the source+target pair, so duplicate connections between the same owners stay distinct across bounded data, pushes, updates and static rendering. The frame ref adds updateEdgeById(id, updater) and single-ID removeEdge(id). Clear retained push data before switching back to pair identity.
• EventDrop live mode: live enables incremental admission, camera follow, bounded body retirement and a historical ledger; emitters runs built-in fixed-step sources in sync or worker execution; arrival: { mode: "travel" } animates bodies from source tiles with history: "present" | "travel"; sources, sourceRail, sourceAccessor, onSourceClick and windowChrome describe and style sources and windows; timeUnit fixes pacing units; onLedgerChange, onWatermarkChange and onClockTick (throttled by clockTickMs) report admission, watermark and clock state; the handle adds getLedger, getSourceStats, getWatermark, getClock, setTimeScale, snapshot and restore. semiotic/physics exports useEmitters, syntheticArrivals, createSyntheticEmitter and the pure EventDropLedger. Live rows without a finite event time are skipped with a development warning, as replay already skipped them. See /examples/emitter-playground.
• registerPhysicsLivePrograms() from semiotic/physics enables PhysicsPipelineStore emitters and live eventDrop programs when you construct or restore a store yourself. EventDropChart and the physics worker register them automatically, so other physics charts no longer bundle the EventDrop live runtime: a GaltonBoardChart-only import drops from 100.6 to 93.3 KiB gzip.
• FlowCircuitChart, DependencyForestChart and MotifBraidChart accept tooltip. FlowCircuitChart's flat view now shows the same module and pipe tooltips as its projected view; pass tooltip={false} to hide them.
• Physics frames show tooltips for semantic items drawn in SVG overlays: an element whose data-semiotic-semantic-id names an item gets pointer hover, observations and dismissal, rendered by semanticItemTooltipContent or a chart's tooltip callback.
• Escape dismisses a pointer tooltip in every frame family without moving the pointer (WCAG 1.4.13); the next pointer move shows it again.

Changed

• Static SVG IDs carry a per-chart prefix, so the groups named for Figma layers read <prefix>-data-area, <prefix>-axes and so on. chartId sets the prefix; otherwise it derives from the rendered markup, so identical input renders byte-identical SVG while charts that differ in size, data, theme or any other rendered detail never share gradient, clip, pattern or title IDs when inlined in one document. Repeated identical charts share IDs unless they receive distinct chartId values. renderDashboard scopes its charts the same way.
• XY charts paint their background in an SVG layer beneath the grid and keep the mark canvas transparent, as ordinal charts do, so gridlines and axis baselines draw under data marks instead of over them. Browser PNG export composites those SVG background layers under the canvas. The first rect in an XY chart is now that full-frame backdrop, so select annotation shapes by their own classes.
• Zero-duration programmatic camera moves (zoomTo(view, 0), panBy, and zero-duration fit, center, reset and anchoring) apply in a microtask instead of the next animation frame. A correction made from a React effect therefore paints in the same frame as the layout change, with newly visible cards mounted; moves chained in one task compose. Wheel, drag, pinch and keyboard input still apply once per animation frame.

Fixed

• Physics tooltip={false} hides tooltips without stopping hover observations, linked hover or selection, as in every other family.
• Live physics stores report settled once handoffs, bounded producers and bodies finish, and an uncapped settle (including reduced motion) holds producers instead of advancing the live clock to the step limit.
• Live EventDrop changes to window size, units, origin or emitter source schedules start a new run instead of failing inside an effect.
• Physics worker mirrors keep host pushes, removals, pauses and restores through worker frames computed before the worker received them, including a worker restart; a removal during an in-flight tick no longer falls back to synchronous execution, and replacing a worker while a command is pending no longer disables worker execution for the chart.
• Compositional worker engines reject pending requests on a Worker error or port messageerror, and the worker reports a result it cannot post. Acceptance rejects unknown statuses and terminals attached to another node's display box. Large graphs no longer overflow the argument limit while bounding, and indexed terminal lookups halve route-only solves of 800 owners and 4,000 edges.
• Charts commit the overlay state a canvas repaint sets (axes, annotations, interactive graphics, network HTML marks and overlays) in the same animation frame, so a data or config update no longer shows new marks against the previous frame's axes, annotations or cards. Network data and layout rebuilds skip the 30 Hz overlay throttle, which still applies to animation and transition frames. A fresh client mount paints its canvas and overlay before the browser displays its first frame instead of one animation frame later.
• Physics chart resizes and encoding changes preserve arrival state: visible bodies stay visible, queued arrivals keep their deadlines and order, and removed bodies stay removed. This fixes late arrivals disappearing from the watermark lesson during responsive relayouts.
• Tooltips commit their placement before paint, including size changes that ResizeObserver reports after browser layout, while preserving flipping, boundary clamping, transitions and resize behavior.
• Static network exports apply default label colors without mutating retained labels, supporting frozen scenes and reuse across themes.
• Static network rendering preserves custom scenes and SVG decorations supplied without raw topology, including saved layouts used for export.
• Network content bounds include pointed and rotated symbol paths, preventing automatic fit from clipping triangles, stars and custom symbols.
• Network tooltip and keyboard-focus updates subscribe independently of the retained frame. Custom edge indexes preserve exact Canvas hits, node priority and paint order while pruning overlapping cubic links with conservative sub-curve bounds. Color-only restyles reuse the index; geometry, stroke and fill changes refresh it. Keyboard announcements now honor authored accessibility.tableFields, matching accessible data tables.
• Network path hits reject distant candidates using cached conservative bounds before exact Canvas tests. Custom layouts prepare a spatial index at scene commit, preserving first-hover responsiveness, stroke tolerance under zoom, filled bands, sharp joins, and changes to retained geometry or styles.
• Uncontrolled network camera updates apply HTML/SVG transforms and repaint canvas synchronously without rerendering the chart. Culling updates mounted cards only when membership changes; viewport reports, focused tooltips and annotation widgets stay current during motion. Existing projected-size and LOD hooks retain live sizes. Invisible semantic edge targets skip Canvas paint while remaining interactive.
• Network zoom gestures preserve node and edge clicks and touch taps while drag-to-pan is enabled. Pointer capture now stays on the original target; clicks following a drag remain suppressed.
• Tooltip content that paints its own surface inside a component (a styled-components tooltip, for example) shows one box. Semiotic reads data-semiotic-tooltip-chrome on the rendered root element, through any wrapper components, in addition to the element a renderer returns, so neither the renderer nor its wrappers need markTooltipChrome. Content that renders nothing, such as a wrapper component returning null, shows no box. This covers every frame tooltip (XY, ordinal, network, geo, physics, and ScatterplotMatrix) and TooltipRoot without an explicit chrome; an explicit chart chrome config still wins.
• A tooltip whose chrome is dropped after rendering is placed from its re-measured box, and that first placement jumps instead of easing from the chrome-sized position.

Security

• MCP HTTP mode now rejects browser origins unless explicitly listed in MCP_ALLOWED_ORIGINS and validates Host against the bind hostname by default. These checks also cover preflight, health, and challenge requests. Configure MCP_ALLOWED_HOSTS for hosted services and tunnels; binding to all interfaces does not disable Host validation. Native clients without Origin and the default stdio transport continue to work. CORS no longer grants wildcard access. A host:443 or host:80 entry also matches a Host header without a port, which HTTPS clients send, and a localhost bind accepts 127.0.0.1 and ::1. The hosted smoke test now requires a 403, without a CORS grant, for an unlisted browser Origin.
• The bundled MCP server builds against @modelcontextprotocol/sdk 1.32.0 (from 1.31.0), taking the SDK's October 2026 security releases. Semiotic does not use the affected task store, bearer-auth or client transports, and its own row, cell and nesting limits already bound tool input.