ScoreTool explores how a notation editor can add language-driven editing without giving a model unrestricted control over documents, files, or the host computer.
System
- Score state lives in browser storage with no native filesystem, shell, or remote plugin permissions.
- Direct commands such as tempo changes, measure repair, and note rewrites execute locally.
- Free-form requests use one API route and return schema-validated ScoreTool operations.
Control
- AI edits are review-before-apply.
- Only the prompt and active editing context are sent to the configured model provider.
- Production requests have a 128 KiB body limit and a per-client request budget.
Proof
- The editor remains usable in local command mode without an API key.
- Both local development middleware and the deployed API share the same operation contract.
- The security posture explicitly excludes native file access and remote plugin execution.