Skip to content

Loader Wide Source Surface Three Plan

easylogic edited this page Oct 10, 2026 · 5 revisions

Root exact adoption closure — bounded implementation delivered

Actual Integration single-parent adoption c41a5d08939cebcbf94f4ded1a8c94d398a19b56 → f00e2d190fed7121b1a726f565992aa6180c4657 applies native d96315f09b9e161f5bab1f57282efe013db2bb2a → 533f95bc50a29d62b78472868d411a009e4d8a99. Integration closed this implementation leaf in receipt 6099567892. Root independently audited the exact16pathdelta: fifteen new blobs/original bytes match; CURRENT full README retains exactly one native45line suffix; all current38 development/published maps and current SDK/provider files remain. Native187-module graph has186 byte-identical modules; only the CAD barrel has preserved native prefix plus already available additive APIs. Native author commit is not an ancestor; exact scoped bytes establish adoption.

Root read-only adoption audit SHA256 a85386f5fd6ded976cdef350e6c53fc116f88fb0678b61aff797827c3d4c0675 at /Users/user/.barocss-ai/v3/evidence-1340-loader/adoption-audit.json. First reviewer metadata read used receipt.native instead of actual receipt.child; corrected only this audit field. No provider, functional, build or browser replay. Native FIRST verifier-label failure/one-string repair, CRLF check false positive and browser operational receipts remain in the native receipt. Eight literal301165B and generated450 native hashes remain pinned.

Issue1340 is CLOSED for bounded native implementation delivery. Actual source/emitted187inputs, headed6phases/14refusals/fullnative-buffer-camera-RGBA/cold-file/lifetimes, strict177DTS and five affected gates are retained author evidence 6099395490, not new current-root tests. Required composed source/emitted/types/UI/file/recovery/context/lifetime checks remain UNRUN in existing1254/674. No general CAD/Solid/global-error/manufacturing/release acceptance. #801 HELD. Next existing1325 is active against available1348; no duplicate Issue.


Current #1340 native owner completion — exact local adoption pending

Clean immutable native d96315f09b9e161f5bab1f57282efe013db2bb2a → 533f95bc50a29d62b78472868d411a009e4d8a99, single commit/16ownedpaths/992additions; managed /Users/user/.codex/worktrees/wide-surface-three-1340/barocss branchcodex/issue-1340-wide-surface-three, easylogic. Final before-code6099033898/Wiki95fb46b; three disjoint implementation workers STATICONLY thenSTOP; Root FIRST functional/source-before-own-build/headed/emitted/DTS/build/commit. 11123unowned hashes unchanged/all37development+publishedmaps unchanged/450own-generated hashes pinned. FULLparentREADME+EXACT45suffixonce; no SDK/src/map/provider/root/lock/policy change. Eight exact original pins301165B preserve CRLF/source/-0/wholeModel3.

FIRSTsource exit1/0.637963s/stderr957B, before spawned native flow: virtualstdin label matched strict older-example import guard. ONE verifier string private-wide-source-surface-consumer.mjs→wide-source-surface-three-private-consumer.mjs; other15paths and all assertions/caps/runtime/native unchanged. True first rawsource-first retained; correctedsource exit0/1.819521s/empty stderr. Existing failure6099145743 and ONE LIVE6746099145932 retained/updated. Git cachedcheck default exit2 flagged pinned CRLF; onecommand cr-at-eol awarecheck0, no config or byte rewrite. Incidental favicon404 and CLI wrongURL/function/staleref/large-parent-screenshot operations are separate browser-operations receipts; no provider repair.

Actual source187src/0dist and compiled187dist/0src CPU sixphase file/HTTP/realThreeobject flows0; compiled1.859793s. WholeCPU comparison405950Object.is/326numeric-0/mismatch0, ONLY6actualprogressURLorigins normalized outside native data. Four actually saved candidateCSS files exact original bytes/SHA1481/7870. Both actual headed Chrome/WebGL2 sixphase flows complete: degree5 original/refusals→edited→maximum original→edited→fresh4files/publiccoldURL→doublecleanup. 9genuine sync(6native+2hostbinding+1F32)+5actualtransport refusals; getter0/causeidentity/acceptedwholeCPU-buffer-camera-fullRGBA retained. SourceURL187/compiled0 versus compiledsource0/actualbundle1. Both12pins/16literalHTTP/5Groups/10geometry-materialpairs/peak4/callback6/finalowned0; each10geometry and10material disposeevent1; callerScene/camera/marker/renderer/canvasdisposal0. 122GLchecks per mode all0/runtimeerrors0. Renderer900x640/pixelRatio1; actualcanvasphotos1800x1280 saved/viewed, no falseviewportDPRclaim. ContextPlane attached/visible atidentity honestlyofftargetcamera; nativeCurvewhole/unrendered.

Complete commonbrowser compare2884114Object.is/3282numeric-0/mismatch0; independent signedNativeJSON2217713/1994-0/mismatch0; outer/signed agreement0. ONLY ten physical meshUUID/geometryUUID/materialUUID identity maps normalized; nativeIDs/source/proof/numbers/camera/buffers unchanged. SixphaseRGBA+14refusalRGBA each2304000B per mode exact; maximumedited/coldframe equal. Source/emitted CPUtransport controls use degree5ORIGINAL CSS, headedbrowser controls use CANDIDATE CSS; preserve that actualscope difference. Selected strictTS5.9.3/noEmit/skipLibCheck177ownDTS0diagnostic/fallback0/all37maps. FiveaffectedCADbuild/type andinteropbuild/type/lint each0/empty stderr. Owned source browserclosed0/serverCtrlCactualexit1; emittedbrowserclosed0/serverCtrlCexit130.

External native-handoff.json and exact evidence hashes: /Users/user/.barocss-ai/v3/evidence-1340-loader/. Root direct Issue/Wiki roadmap management. Integration receives the immutable16pathdelta once, preserves CURRENT FULLREADME+45suffix/allcurrent38maps, and records exactadoption/minimumcompatibility. Issue staysOPEN until actualadoption; currentcomposedRoot/build/UI/SaveOpen/recovery1254/674UNRUN, #801HELD. No productpush/PR/npm/release. Next existing #1325 actual1348dependency is available; private4MiB family/whole6chunks/readiness contract6099370117/Wiki03fd9a4 published before externalwriting; no duplicate Issue/Plannerapproval.


Before-code contract and prior private planning history

#1340 FINAL before-code implementation contract

Root final before-code contract. Product implementation and the full14-refusal/cold/transport/source-emitted flow remain UNRUN at publication. Root owns final publication, first gates, README append, native commit and Issue/Wiki records. This draft performs no native/provider/target call.

Immutable parent, ownership and current evidence

Managed /Users/user/.codex/worktrees/wide-surface-three-1340/barocss, branch codex/issue-1340-wide-surface-three, actual parent d96315f09b9e161f5bab1f57282efe013db2bb2a. Root baseline11124 tracked SHA/37 maps/easylogic/Node22 offline frozen install0/empty stderr/own CAD+interop DIST absent. Public CAD1147 adoptiond090c20a is available with exact provider blob14a15d5057fa5df9b7db056be1e91fe34bbe1ee4. Native1333 adoption is not a prerequisite. No later develop state, unmerged branch or shared-root composition is added.

Exactly16 frozen owned paths, all under packages/barocss-cad-interop/: README.md; examples/wide-source-surface-three.html; .mjs; .config.mjs; -fixture.mjs; -checkpoint.mjs; -observer.mjs; -verify.mjs; and the eight unchanged literal files below in examples/wide-source-surface-three-data/. No SDK src, package manifest/map, CAD/GPU/Viewer, root/lock/policy, new dependency, transport or old example module import. Preserve all37 existing development/published entries and all11123 tracked files outside README; new example files were not in the baseline. Root assigns disjoint implementation paths after final publication.

Measured private native-neutral FIRST: Node22/180CAD+5interop=185source/0dist/no engine peer; exactly2 direct writer calls,2 direct whole-validator calls,4 neutral original/edited admissions. Entire actual writer eight-field outputs equal original saved owned results with Object.is; reports/caller aliases0, input/source/Model/siblings/pins unchanged. Patches4 and1024; native report D1 attempts18/evaluated18/refused0 per chosen family. Direct call ledger excludes the validator's internal reconstruction and producer internals. This is not product acceptance.

Separate measured private negative FIRST: exactly4 direct negative writer calls+2 whole-validator negatives, no positive direct calls. Source180CAD/0interop/0dist/no peers/exit0/empty stderr/getter0. Six genuine names/codes/cause are frozen below. Original first-family request/result/all11 numeric negative-zero paths and pinned files remained unchanged. No broad51-negative campaign or provider repair.

Measured private Three CPU/headed readiness: source187/0dist, four unchanged source parses/four Groups/eight actual geometry-material pairs, double disposal once. Independent camera projection and actual WebGL2 frames passed for both families. Five actual saved photos were viewed by the target helper. No new native writer/validator replay occurred in that target task. Initial admission failures NONE; incidental favicon404 was recorded separately. Private source/body/target/camera evidence does not substitute the product cold/refusal/emitted flow.

Literal original input pins

Directory /Users/user/.barocss-ai/v3/evidence-native-surface-source-cad/demo-output/. Eight files, 301165B total. Copy byte-for-byte; no number/knot/degree/source rewrite, reduced donor or positive regeneration.

File Bytes SHA256
actual_degree5_u_v_native_coordinates.complete-original.source0.css 1482 583b5ab3b6fd62a40a980c03254bb85cc346f9ce99238c86bedfc0ec90e420a8
actual_degree5_u_v_native_coordinates.complete-candidate.source0.css 1481 ceb2a5843e2edd9bd3e313959ab155230c086073385a022ff33f57bb262d3ad8
actual_degree5_u_v_native_coordinates.authored-request.json 1692 18863dd92f2fb93584888301f7de77b7237ba6e277d387b821cbc418abbad83b
actual_degree5_u_v_native_coordinates.owned-result.json 14821 b477d15e27a12c70e17cf15b7c1877f557a87927da0f95ff2ede4f057676915b
actual_16_by_16_256_poles_1024_fields.complete-original.source0.css 5822 a64ad0ee7d3a70c3bc068ee76a85510662540bfc65d222b9c72e17fe8db075ed
actual_16_by_16_256_poles_1024_fields.complete-candidate.source0.css 7870 669974116a82e074a025c2d7988402424f899aacb0521076cca92e2a4a237ed1
actual_16_by_16_256_poles_1024_fields.authored-request.json 25717 3054b9931c7b9d7a81418d44815c5d57b2817838987acf47b7d90e36e79d54e5
actual_16_by_16_256_poles_1024_fields.owned-result.json 242280 d55819ed7794ce49fd7f070f66301f7acf7959e89530180c5caa18b315d118a2

Native source0/mm Models3 retain ordered context_curve,target_surface,context_plane. First family target U5/V5 grid6x6/36poles; second U5/V5 grid16x16/256poles/1024 changed fields+patches. Owned results have11 and8 numeric negative zeros; original/edited Models retain5 and4 respectively. Native D0 evaluation may naturally produce different zero signs from a stored pole; compare actual packet/buffer outputs, not an invented pole-sign inheritance.

Actual public API, proof and readout

Use existing public editSourceSurfaceControlNetWide(request) and validateSourceSurfaceControlNetWideEdit(result). Request source/sourceVersion/surfaceId/edits. Result EXACT request/originalModel/model/source/surface/provenance/patches/report; validator returns an independent REPORT. Preserve complete original and actual rebuilt result, not only the selected Surface or report. Actual operation must equal saved result and exact candidate CSS; whole validation of the bit-equal saved/actual result, source patch replacement and every untouched span, unselected Model object, scalar bit, degree/knot/domain/grid/ID must agree.

Readout stays pure CPU data: complete saved/native result and actual report; original/candidate source and Models; actual selected Surface; patch/provenance; nine original-domain before/after D0 observations and nine before/after native D1 unions; original report quality, preservation/directCounts/workScope, IDs/units and target approximation/native UV. Display route/state/mode belongs outside pure readout so max edited and cold readouts compare exactly. Keep source-specific native and example binding receipts distinct. Any result mutation does not retroactively certify a stale Loft recipe or topology.

Existing public neutral parseBaroCadSource and Three new BaroCADLoader(options).parse(source) / .loadAbortable(url,transport) only. Transport types are exported from public native entry, not assumed from Three. Three constructor retains its options reference; this example passes private complete options and does not promise a new SDK-wide asynchronous mutation guarantee.

Exact options: {sourceVersion:0,countU:17,countV:9,unitsPerMillimeter:0.001}. No curveDisplay/nativeCapacity. Both native Surfaces render at identity; context_curve stays whole/unrendered. Each packet153vertices/256triangles/459position values/459normal values/306 nativeUV values/768indices. Prepared mesh position/normal/parameter arrays Float32; indices Uint16. Native XYZ/mm scales once to renderer units. Ordinary Three BufferGeometry position/normal/_CAD_UV and index/DoubleSide MeshNormalMaterial stay unchanged. Native UV is not texture UV. Neutral buffers and target copies/refs are separately observed.

Normals are actual sampled-D0 triangle cross-product sums, not analytic D1/smoothness. Selected reports retain all18 successful D1 observations; do not claim no-refusal for the general provider. Global geometry, topology, Solid, manufacturing, persistent/parametric recipe binding and old Loft validity remain unsupported native flags.

Exact measured two camera frames and caller lifetime

Actual viewport900x640/DPR1/noAA/preserveDrawingBuffer/WebGL2; background matches private frame [16,27,44]. One caller-owned Scene, OrthographicCamera, renderer, canvas, SphereGeometry(1,8,6) and green MeshBasicMaterial. Create marker geometry/material once; move and scale the same Mesh only on the family transition. Do not recreate or dispose caller resources. Preserve exact camera/marker poses for each family's original->edited->cold and every refusal. Change framing only when admitting a different family; a failed candidate must not change it.

Property degree5 frame maximum frame
Camera position [20.862000274658204,29.591999816894532,0.872000389099121] [20.314525000572207,29.675274999380115,0.5626500010490417]
Target/center [20.25,30.255000114440918,0.005] [20.007625,30.00775,0.12787500023841858]
Up [0,1,0] [0,1,0]
Quaternion [0.26267957968900363,0.2908011371886961,-0.08337125990040256,0.9162332508956379] [0.26267957968900263,0.29080113718869693,-0.08337125990040249,0.916233250895638]
Ortho halfX/halfY 0.48921154960939894 /0.34788376861112813 0.19589872917408213 /0.13930576296823619
Near/far 0.00000510000228881836 /10.200004577636719 0.0000025575000047683716 /5.115000009536743
Caller marker position [19.9439998626709,30.43350019454956,0.132500057220459] [19.854174999713898,30.097262500166895,0.19181250035762787]
Marker scale each axis 0.007650003433227539 0.0038362500071525574
Projection sites/maxAbsNDCXY 441 /0.8474576271186441 881 /0.8474576271186441

Use the recorded quaternion directly and actual projection/world matrices, not a fresh lookAt result with different bits. Keep signed zero in raw matrices. context_plane remains visible=true, attached at authored identity and included in native/buffer/Scene checks, even though it is outside the target-focused frustum. Do not hide/remove/reframe it and then claim full-source display. Actual visibility claim concerns target_surface and caller marker only.

Measured private original/edited full frame hashes: degree5 4196234401/3077631230, target isolated146654/147145pixels/caller145, edited delta3403pixels; maximum3106715782/4021977325, target7837/7838/caller223, delta867. Actual on/off isolation restored full RGBA; cleanup caller-only hash705374661/223 greenpixels. GL checks42/errors0/runtime0 in private flow. These are private observations, not required fabricated counts for the new product flow; record actual product checks/pixels and same-source/emitted full frames.

Proposed product host, staged ownership and six states

Frozen example API: createWideSourceSurfaceThreeHost({scene,onChange}); loadOriginal(asset), applyEdit(asset), coldReopen(freshAsset,url,transport={}), runRefusals(asset,afterRefusal=()=>{}), runTransportRefusals(url,afterRefusal=()=>{}), dispose(); accepted/records/allResources/allGroups/events/counts. Fixture exports CASE_KEYS/PINS/createNativeOptions/loadCase/proveCase/requireFact/sameNative/assertNative/assertBuffer. Assets expose key/pins/originalSource/candidateSource/request/owned. Proof exposes edit/validationReport/originalModel/model/observations/patchCount/centers/unrenderedCurveIds. Observer exports observeWideSourceSurfaceResult(result) with actual refs and independent copies. These names are fixed example interfaces, not new public SDK APIs.

Records retain assetKey/family/state/asset/proof/source/model/result/resources/readout; source/state/mode is not allowed to contaminate native pure readout equality. Observer rows capture actual original Mesh/geometry/material, all attribute/index refs and independent CPU copies, geometryDisposals/materialDisposals, original native packet/UV and CPU buffers. Actual instances' events only, no global class/prototype patch. Mesh refs must be captured before result.dispose clears Group.children. Do not call a nonexistent Group.dispose.

All native/copy/binding and detached target checks finish before attach. Attach new Group, update accepted, remove/dispose previous owned result, then callback/render. Observe live resources immediately after detached candidate allocation, before prior release. Dispose twice is harmless; clear accepted before cleanup callback while preserving all native and cached CPU values. Never dispose caller Scene/camera/geometry/material/renderer/canvas.

Planned product six phases, still UNRUN:

  1. degree5 original admission; run9 synchronous source/native/host/target refusals and5 real transport refusals while this accepted record/frame stays unchanged.
  2. actual degree5 edited candidate admission.
  3. maximum original admission and one family camera/marker transition.
  4. actual maximum edited candidate admission.
  5. fresh four literal max-grid files plus actual public candidate URL load/cold admission; complete fresh asset/proof/native/readout/buffers agree with previous edited record.
  6. double cleanup; only caller remains, with retained native/readout/CPU copies accessible.

Successful product arithmetic is planned, not already observed product:5 actual result Groups,10 distinct geometry/material pairs, peak4 live pairs during replacement, final0 owned live pairs,6 callbacks including cleanup, every owned geometry/material exactly1 disposal/caller0. Negative paths create no successful pairs; F32 candidate must refuse before a Three target Group is accepted. No artificial allocation-failure or extra controlled target population is introduced.

Exactly14 refusal slots; evidence status explicit

Six measured native controls use authentic degree5 request/result fresh copies. Every failed input and whole original request/result/-0/files stays unchanged. Native name is SourceSurfaceControlNetWideError for all six:

Slot Actual path/action Actual code/cause
1 request.edits.poleEdits[0].weight2.25->0 NATIVE; actual cause Error (not RangeError), Weights must be in [1e-6, 1e6]
2 request.surfaceId target_surface->missing_surface TARGET; no cause
3 request.source enumerable getter INPUT; getter0; no cause
4 request.edits.poleEdits[0].xMM20325->Infinity INPUT; no cause
5 owned.patches[0].replacementText20325->203250 OWNED; no cause
6 owned.source append ASCII space, receipt unchanged OWNED; no cause

Native messages match native-refusal-plan/final-summary.json exactly; do not invent a common host error class or coerce codes.

Slots7–8 are example-only stale request source and incomplete whole-asset binding guards before provider/target allocation. Proposed LoaderWideSourceSurfaceHostBindingError with source-specific codes SOURCE_BINDING and INCOMPLETE_ASSET; new example contract, UNRUN until FIRST product flow. A guard must be shared by the real admission path and negative path; no unconditional synthetic refusal outside it. SOURCE_BINDING message is Request source differs from accepted complete asset; recipe fresh degree5 request.source=candidateSource while original accepted. INCOMPLETE_ASSET message is Candidate source differs from full public edit result source; recipe candidateSource + ASCII space with full valid owned proof. Both name LoaderWideSourceSurfaceHostBindingError, cause absent. Real admission calls the same guards: applyEdit guards request before provider; candidate guard compares supplied complete source with validated whole.source, then full compiled Model. Guards are contract requirements, not previously measured SDK claims.

Slot9 is actual measured existing Three/native Float32 refusal using the unchanged first-family whole original and unitsPerMillimeter=1e35, same17x9: RangeError/code=null/cause=null/message Invalid CAD preview packet: Float32 conversion is not finite. Frozen plan then ONE candidate, no scale search; accepted source/fullModel/fullnativeSurfaces/buffers+references/Scenechildren/camera/caller pose unchanged, accepted/caller disposals0. Separate static Three native-beforeGroup ordering is not dynamic allocation telemetry. Actual summary SHA58a7c2c1e8249fd75f66e6126d6cce8341a42b58fbb00c5f28c6ceeb7523d18a in target-refusal-plan. Regular .001 options and positive donors unchanged.

Slots10–14 use actual public loadAbortable URL and existing transport:

  • pre-aborted AbortSignal -> actual AbortError/ABORT_ERR, expected request delta0;
  • onProgress returns false -> actual AbortError/ABORT_ERR, expected delta1;
  • onProgress aborts signal -> actual AbortError/ABORT_ERR, expected delta1;
  • onProgress throws a saved caller Error -> the SAME caller Error identity, expected delta1;
  • own onProgress accessor -> actual TypeError/no code/getter0, expected delta0.

These five routes/error semantics are source-backed from current transport.ts and shared previous flows; this product5transport flow is UNRUN. Record actual byte/chunk progress, errors/causes/identity, getter counts, accepted Scene/caller/pose/CPU/native/buffers/frame refs before and after EACH failure. Use synchronous/awaited per-refusal callback to render and compare complete RGBA; don't only compare at batch end. Native/target/refusal/HTTP counts stay actual ledger values, not static native telemetry.

Literal HTTP and cold rules

Serve exact eight basename allowlisted files before Vite CSS transforms. Original CSS is Content-Type text/plain;charset=utf-8 with exact Content-Length; JSON application/json. Every actual initial/fresh response status/header/bytes/SHA is recorded. Initial8 pin reads and fresh4 maximum pin reads are separate from progress-refusal source requests and one successful public cold candidate URL.

Expected transport file-request deltas [0,1,1,1,0] are assertions to execute, not observed traffic. On this precise proposed route set the arithmetic is8initial+4fresh+3refusal+1cold=16 literal file requests and12 initial/fresh pin observations; ledger fetches/browser module/HMR/favicon traffic is counted separately. Do not freeze16 as an executed result before the product ledger proves it. If bytes arrive in different chunk counts, keep actual progress and still require semantic abort/error and exact request deltas. No fetch mock, CSS import transformation or post-cache fabricated receipt. Server header/body-close cleanup must be real, bounded and preserve caller-owned previous results.

Frozen port5340, LOADER1340_COMPILED_BUNDLE, ledger route /loader1340-request-log.json. Browser marker window.loader1340Evidence with readonly snapshot(includeRGBA=false). UI IDs status/view/readout/source-text/full-proof/refusal-readout/run-refusals/apply-edit/original-maximum/cold-reopen/dispose. Add runAll() to evidence bridge for the exact six-phase sequence; buttons use the same actions. Strict loopback server, exact allowlist/raw bytes, noDiscovery actualThree include. source HTML imports normal public source entry through existing explicit package aliases; compiled HTML runs only actual published browser.bundle.mjs. Readiness/busy/error markers must stop dependent browser steps on initial failure. Suggested readonly window.loader1340Evidence.snapshot(includeRGBA=false) includes six phases/rawnative/proof/readout/actualresources/camera/caller/GL/errors/pins/refusals/cold/cleanup, with full RGBA opt-in.

First product source/emitted gates and completion

After Root's measured final publication only: helpers implement disjoint owned paths, Node22 syntax/static checks then STOP. Root snapshots all16 paths,37 maps/full README current prefix+exact45line suffix,11123 unowned tracked files and own-DIST absence before FIRST product source gate.

Root FIRST source ordinary-public CPU/file/real Three object host flow, with no DOM/GPU claim from Node; then actual headed source six phases/14refusals/cold/HTTP/fullRGBA/GL/photos viewed before own CAD/interop build. Preserve every first failure and repair. Build/type CAD and build/type/lint interop only as affected gates. Actual emitted-public resolver, strict selected NodeNext/noEmit/skipLibCheck CAD wide/result/report/native transport/Three declarations, all37 existing maps unchanged, zero own-source fallback; repeat same whole CPU+actual headed source/emitted flow and compare raw whole bit-faithful native/inputs/source/readout/buffers/camera/frames/files. Normalize only genuine random physical resource UUIDs/request environment if necessary; never native IDs, numbers/signs or quality.

Native/source/emitted frame/code/generated counts are measured at gates, not copied from private187 or another card. Full private/source/emitted CPU raw evidence uses Object.is and example-only native-data signed-zero serialization; no public serializer. Source native reports/counters and sampled approximation observations are not new kernel telemetry/global error certificate. Complete after exact clean parent->child/16paths/first gate receipts/one#674/native handoff; Integration alone adopts exact delta once. Current-root1254/674/release acceptance remains separate; #801 held, no product push/PR/npm/deploy/release.

Final interfaces and commands

Workers must preserve these shared interfaces. Host exposes accepted, records, allResources, events, counts, observations(), and guardRequest/guardCandidate for the shared refusal path. Record exposes assetKey/state/source/model/result/resources/proof/sourceEdit/readout; readout contains pure complete native data and no mode/state/resource UUIDs. coldReopen(freshAsset,url,transport) uses actual public loadAbortable, validates fresh proof and accepted whole binding before attach, and retains identical pure readout. runRefusals and runTransportRefusals are awaited and invoke afterRefusal once after EACH retained failure. Include error/cause name/code/message, exact slot recipe, getter counts, caller Error identity and request delta in evidence.

Fixture owns the signed-native-only private save helper; no new public serializer. JSON output uses numeric -0 tokens. Independent raw summaries are emitted in source and compiled modes. Save both full owned results and both candidate CSS exactly in external output; cold file flow uses the fresh maximum original/request/owned/candidate files, not the saved previous object.

Verifier CLI: Node22 packages/barocss-cad-interop/examples/wide-source-surface-three-verify.mjs --output ABS_DIR; compiled adds --compiled. Source requires own CAD and interop DIST absent. Verifier uses an actual own loopback literal HTTP server for CPU flow and closes it in finally. It builds only external write:false consumer/browser/config artifacts. Compiled resolves bare public @barocss/cad and @barocss/cad-interop/* via their existing published dist maps, never src; emits browser.bundle.mjs and strict selected declaration check receipt. Root owns functional execution, five affected gates, browser sequence, signed comparison and commit. All helpers may run Node22 --check/static diff only then STOP; no functional/build/browser/provider/native commit.

Exactly45-line README suffix SHA575c7df8e3fdd535b2ee8528cb7d7bf661d3af77c8888e5533d27f6f52db08f9 is fixed. Source/emitted/body/current integrated/release statuses remain separate. No product push, PR, npm publication or deployment.


Previous planning evidence

#1340 actual PRIVATE readiness — product implementation UNRUN

Fixed clean managed actuald96315f0/11124trackedSHA/37maps/Node22offlinefrozeninstall/easylogic/ownCADinteropDISTabsent. Three helpers measured independent native-neutral, actualThree/camera, static contracts/pins and real native refusals; no productwrites/builds.

Private FIRSTnative-neutral source185=180CAD+5interop/0dist/nopeers, direct2actualwidewriters+2wholevalidators+4neutraladmissions all0/empty stderr. Bothactualfull8fieldresults Object.is exactly retained originalownedfiles; matchingactualreportindependent/calleraliases0/request/originalsource/candidate/patcheduntouchedspans/model3/twoSurfaces+unrenderedCurve/-0 preserved. Twoactualdegrees5×5 grids36/256poles, changedpatches4/1024; eachSurface153vertices/256triangles/positions459F32/normals459F32/nativeUV306F32/indices768U16. NativeD1stored18evaluated0refusedeach; neutralnormals useD0triangle crossproducts, notD1. Fourpinquartets8original301165B unchanged.

SeparatePRIVATE6genuinerefusals frozenBEFOREexecution: weight0→actualWideError NATIVE/causeWeightsmustbein[1e-6,1e6];unknownSurface→TARGET;sourcegetter→INPUT/getter0; xMMInfinity→INPUT;actualpatchreplacement20325→203250→OWNED;whole.sourceappendspace→OWNED. Direct6negativecalls/no positiveouterwriter; nativeown180CADsource0interop0dist/nopeers,exit0/emptystderr; acceptedoriginalrequest/result/11-0/candidate unchanged. No old51nativecampaign.

PrivateThreeCPU4completeModel3original/editedadmissions using actualexistingBaroCADLoader17×9/.001/noCurve/noCapacity;4Groups/8actualgeometry-materialpairs/freshFloat32attributes andsame-resultsharedUint16index asactualAPI (no falseallbuffer-independence). Fixedperfamily authoredcamera+callerSphere, bothSurfacesremainidentityattached;contextPlanehonestlyoffcamera. ActualheadedChrome/WebGL2 source187HTTP187/0dist/197requests;actual4CSSoriginalbyteSHA/MIME/headers;42GL0/runtime0. Degree5actualvisibleSurfacepixels146654→147145 and3403changedpixels;maxgrid7837→7838 and867changedpixels. Caller145/223pixelsretained. Eachoriginal→editedcameraunchanged/sites441/881/NDCmax≤.8474576271. FivephotosSAVEDandVIEWED;ownedbrowserloader1340camera CLOSED/server5340 stopped. Doublecleanup8pairsdisposeonce/callergeometry-material-renderer-canvas0. FullprivateRGBA/onoff/restoration measured; defaultbrowserJSONreadout is notsigned-zero certificate (signedCPUdata is). Incidental favicon404preserved separately, no native/targetfirstfailure.

Exactnative/refusal/CPU/rawsignedcamera/frame/resources/graphs/pins/stdoutstderr/photo evidence: evidence-wide-surface-three-loader-plan/{native-neutral,native-refusal-plan,target-camera,contracts}. TargetsummarySHA9b80fd059eb5c18e7b4479a2c25d47c3f33848cada05abfc7e8db9376ff0b564. ProductsourceCPU/headed/cold/HTTPtransport/refusals/fullreplacement/lifetimes/emittedJS+strictDTS/buildtype/fileflow remainUNRUN. Rootfinalmeasuredcontract must fix16paths/exactREADME/camera/options/errors/onefullsource-emittedflow BEFOREanyproductcode. Privatepreparation is notnativecompletion orcurrentcomposed1254/674 acceptance. No SDKmap/profile/transport/math widening.


Issue #1340. Status SELECTED PRIVATE READINESS, PRODUCT UNRUN.

Complete degree-five Surface edit and replacement in an external Three host

Selected scope and before-code status

Root owns this Loader Issue, Wiki, final contract, FIRST product gates and native handoff. Reuse actual existing CAD1147 wide scalar source writer/whole validator and native/Three Surface loader. Do not add a new SDK capacity profile, map, transport or CAD provider. This is a bounded actual edit/copy/replacement consumer for two authentic complete degreeU/V5 mixed Source0 families, retaining two Surfaces and the unrendered Curve. It is independent of native1333 adoption and actual1330Graph ingestion.

ALL-state duplicate audit found no corresponding wide1147 external Three host card; older closed1094 is narrow control-net consumer and GPU1149 is separate CPU native/GPU evidence. Actual parent available d96315f09b9e161f5bab1f57282efe013db2bb2a contains CAD1147adoptiond090c20a/provider14a15d5057fa5df9b7db056be1e91fe34bbe1ee4. Private first checks may use this fixed actual local parent with external scripts/evidence; no product edits/build/adoption/browser acceptance is implied.

Exact planned ownership (16 paths, subject to measured final freeze BEFORE code)

Under packages/barocss-cad-interop/:

  • README.md: one measured exact additive suffix; preserve FULL current parent.
  • examples/wide-source-surface-three.html
  • examples/wide-source-surface-three.mjs
  • examples/wide-source-surface-three.config.mjs
  • examples/wide-source-surface-three-fixture.mjs
  • examples/wide-source-surface-three-checkpoint.mjs
  • examples/wide-source-surface-three-observer.mjs
  • examples/wide-source-surface-three-verify.mjs
  • examples/wide-source-surface-three-data/: exact eight authentic filenames/pins listed below.

No package manifest/exports/root/lock/policy/CAD/kernel/GPU/Viewer paths. Product implementation must use a managed isolated branch with actual immutable integrated parent and baseline; only Integration writes shared develop.

Private readiness start, measurements, stop conditions

Before product code, independently measure (1) two complete original/edited eight-field writer receipts plus actual whole validator and existing CAD-neutral Surface admission, (2) existing Three typed/resource/buffer admission and real headed visible target/camera per family, (3) contracts/pins/default-options/current file/API closure. Use exactly these original donors; no positive producer regeneration, number/knot/degree perturbation, reduced donor or D1-to-D0 relabeling. Native target triangles use actual D0-derived area-weighted normals; retained native D1 successes/refusals remain distinct data. SourceVersion0,countU17,countV9,unitsPerMillimeter.001 proposed default until actual measured admission. No new nativeCapacity/curveDisplay. Source mixed Model3 stays whole; actual both Surfaces identity pose.

Record true FIRST private failures/refusals and bounded repair separately from product FIRST gates. If genuine native D0/triangle/F32 admission fails, retain original/provider failure and plan concrete next dependency; do not widen SDK or manufacture successful data. Actual camera may be different across the differently scaled families, but each original→edited→cold family must keep fixed native authored framing. Measure rendered visibility and resource arithmetic rather than assume tenpairs/fiveGroups.

Root publishes final exact API/options/cases/paths/README/ownership/camera/refusals/HTTP and full source/emitted flow BEFORE any product implementation. Helpers private evidence only until final freeze; each product worker thereafter owns disjoint paths and Node22staticONLY/STOP.

Planned product completion (not executed)

Real writer operation and eight-field whole validation preserve incoming complete original Source0/Models/siblings, selected Surface/control fields, source patch/untouched spans/provenance/degree/knots/domains/native data/report/-0. Preserve independently copied complete result and actual validator report. Both actual Surface targets stage before attaching/replacing; rejected candidate leaves current native proof, buffers, camera and caller resources unchanged. Old owned results dispose before callback, doublecleanup does not dispose twice/callergeometry stayslive.

One short flow: firstfamilyoriginal→actualedited→maxgridoriginal→actualmaxgridedited→unchanged maxgridfiles/publiccoldload→doublecleanup. Root measures/fixes actual refusal names/codes/nativecause including genuine writerweight0/unknownSurface/ownedpatch mismatch/stalesourcebinding/getter0/F32 and existing transport controls before asserting resource or callback counts. No old native51-refusal campaign.

Root FIRST source CPU and realheaded source-before-ownbuild; affected CAD+interop builds/types/lint; actual emittedJS zeroownsourcefallback/selectedstrictDTS/same actualheaded flow. Whole originalbits/native/actualtargetbuffers/camera/fileSHA/HTTP/lifetimes/callerretention/visibleRGBA compare. Save photos and view them. All old maps unchanged. Native author evidence, exact local adoption, currentcomposed1254/674 and release remain separate. #801HELD. No productpushPRnpmdeployrelease.

Actual prerequisite audit and immutable inputs

Bounded next Loader readiness audit

Read-only/static result. No functional provider or loader call, build, browser, producer replay, product/Issue/Wiki edit or commit. Root owns selection. Captured local develop: d96315f09b9e161f5bab1f57282efe013db2bb2a.

One concrete independent candidate

Propose: complete original degree-five Surface scalar edits and replacement in an external Three host, using the already public CAD1147 whole-source writer and the existing native/Three Surface loader. This is a new authentic input/authoring consumer, not a request to widen a kernel/transport or invent a Surface renderer API. Ready for bounded private admission/camera preparation; new Three source/emitted/runtime acceptance is UNRUN.

An external app retains the complete original and edited mixed Source0 Models, applies the real coordinate/weight edits, and replaces its display only after complete native edit/owned/binding and actual target admission succeed. It exposes actual patch/untouched-source/native D0/D1 readouts beside real degreeU/V5 geometry, without claiming a smooth Loft or a persistent recipe. #1094 covers the earlier degree<=3 editor/profile; it does not prove this exact wide256-pole/1024-field provider and external target flow. The whole mixed source stays intact; do not extract a synthetic single-Surface original.

Actual dependencies

CAD1147 native 9e97d402517487c04c38cdda536ddaf83d9418f4 -> a37f02e33fee4902c36fff7a78ed25a47dcd366c, adopted d090c20a32661d112f80b54182cbd81e2b2b1823. Adoption is an ancestor of captured develop. Provider source native/adopt/current blob is exactly 14a15d5057fa5df9b7db056be1e91fe34bbe1ee4.

Public CAD editSourceSurfaceControlNetWide / validateSourceSurfaceControlNetWideEdit and four request/patch/report/result types are present in src/index.ts:297–298. Native result EXACT request/originalModel/model/source/surface/provenance/patches/report. Actual whole validator returns a REPORT, not the eight-field result. Preserve independently copied full result and actual separate report.

Actual old reader is not degree3-limited: interop native.ts:224–230 calls public tessellateSurface; CAD preview.ts:71–116 validates and samples true native Surface D0, then constructs summed triangle normals. It does not call D1. CAD math admits native degree1..5, axes2..16/poles<=256. Thus no new wide-Surface SDK profile is justified by degree5 alone. Real collapsed triangles/zero normals/native D0/F32 underflow may still refuse; private actual admission is required.

Existing default parse options sourceVersion0/countU17/countV9/unitsPerMillimeter.001, no curveDisplay/nativeCapacity, can statically cover two native Surfaces and retain the unrendered Curve in these wholeModel3 inputs. This is a proposed actual profile, not an executed target certificate. Draw both original mixed-source Surfaces with identity pose unless a later named selection contract is genuinely required; do not imply the old parser exposes selected-Surface admission.

Duplicate/context result

ALL-state narrow Loft/degree-five/wide-Surface/Surface-edit Loader title searches plus all open Loader titles found no named wide1147 external Three authoring/replacement card. Existing closed1094 is older narrow Surface editor. Closed GPU1149 does consume these authentic inputs with existing GPU mesh CPU/cold preparation; its actual receipt explicitly says GL/editor/currentViewer/Loader acceptance is separate. It is useful preserved CPU precedent, not a duplicate external Three host or a new Three renderer pass. Existing Renderer1113 import, Viewer1166 normal-angle and Loader685 GLB are different roles. No matching PLANNED Loader card was found in current Loader Wiki pages; roadmap1147 references are historical future-provider notes.

Eight unchanged authentic files

Directory /Users/user/.barocss-ai/v3/evidence-native-surface-source-cad/demo-output/. These pins were byte-hashed and metadata-decoded only. Total301165B. First family has true U5/V5 six-by-six poles with coordinates beyond the older10000mm profile; second has true U5/V5 sixteen-by-sixteen/256poles/all1024changed fields and patches. Both original/edited Models retain context_curve,target_surface,context_plane.

File Bytes SHA256
actual_degree5_u_v_native_coordinates.complete-original.source0.css 1482 583b5ab3b6fd62a40a980c03254bb85cc346f9ce99238c86bedfc0ec90e420a8
actual_degree5_u_v_native_coordinates.complete-candidate.source0.css 1481 ceb2a5843e2edd9bd3e313959ab155230c086073385a022ff33f57bb262d3ad8
actual_degree5_u_v_native_coordinates.authored-request.json 1692 18863dd92f2fb93584888301f7de77b7237ba6e277d387b821cbc418abbad83b
actual_degree5_u_v_native_coordinates.owned-result.json 14821 b477d15e27a12c70e17cf15b7c1877f557a87927da0f95ff2ede4f057676915b
actual_16_by_16_256_poles_1024_fields.complete-original.source0.css 5822 a64ad0ee7d3a70c3bc068ee76a85510662540bfc65d222b9c72e17fe8db075ed
actual_16_by_16_256_poles_1024_fields.complete-candidate.source0.css 7870 669974116a82e074a025c2d7988402424f899aacb0521076cca92e2a4a237ed1
actual_16_by_16_256_poles_1024_fields.authored-request.json 25717 3054b9931c7b9d7a81418d44815c5d57b2817838987acf47b7d90e36e79d54e5
actual_16_by_16_256_poles_1024_fields.owned-result.json 242280 d55819ed7794ce49fd7f070f66301f7acf7959e89530180c5caa18b315d118a2

No positive producer regeneration/normalization is needed. Native request scalar writer and whole validator, actual Source0 recompilation and actual native/target admission are the future runtime flow. A resulting edit cannot validate an old independent Loft recipe merely because Curve siblings remain intact.

Proposed bounded ownership/start/done

At most16 product paths: one seven-file Three example set (HTML/runtime/config/fixture/checkpoint/observer/verifier), eight literal files, and README suffix. No package manifest/root exports/CAD/kernel/transport/new public runtime changes. Native typed consumer can remain virtual inside the verifier, using actual existing emitted declarations.

Before final code freeze, privately measure exactly these two complete originals/owned results and actual existing neutral+Three profile. Retain real refusal if native D0/triangle/F32 admission fails; do not lower degree, perturb knots, relabel D1 refusal or replace a positive donor. Independently derive a genuine camera per authored geometry family and confirm visible edited target plus retained context/caller using actual Three/WebGL2. Fixed camera across a before/after/cold sequence is required; the two differently scaled families may need explicit authored framing controls frozen after measurements. Do not borrow GPU CPU evidence as visible target proof.

Root freezes exact case selection, public API/options/geometry ownership/HTTP source/whole readout/error order/camera/staging/paths and one source/emitted flow before code. Whole final source and actual saved edit must pass the real eight-field validator; changed fields/patches/untouched spans/unselected siblings/degree-knots-domain-grid/-0 stay exact. Preserved native report D1 evaluated/refused unions remain data; target normals are area-weighted D0-triangle normals.

Suggested one flow: degree5 original -> real edited candidate -> max-grid original -> real max-grid candidate -> fresh unchanged max-grid files/public cold source load -> double cleanup. Candidate complete native proof and both Surface targets stage before attaching/replacing; old results dispose before render callback. Expected resource arithmetic is a planning upper bound until measured: five actual result Groups, ten actual geometry/material pairs, temporary peak four pairs, six callbacks including cleanup; no fabricated allocation fault. A minimal meaningful refusal set uses real weight0/unknownSurface/owned patch mismatch/stale source binding/getter0/unsafe F32 conversion and existing five actual transport controls, not the native51-refusal campaign. Root must measure and freeze actual names/codes/cause and successful allocations before promises.

Completion: one source-first public provider/neutral/ThreeCPU and real browser source flow before own builds, literal files/cold/whole numeric bits/CPU buffers/caller/lifetimes/actual visibility, affected builds/type/lint, emitted public JS+strict selected DTS and same real browser/frame/refusal retention. Existing maps stay unchanged. Native/adoption/#1254/currentRoot/publication remain separate. #801 held.

Already planned dependencies retained

  • #1330 is actually adopted at current d96315f0; its complete Graph/update CPU reader is not a wide-edit display prerequisite or a certificate for editing an old Loft recipe.
  • #1333 independent World XYZ reader is still in active product/native flow at this audit; do not create a second reader/card.
  • #1325 already PLANNED remains blocked by an actual public bounded trimmed-six-Face boundary packet/provider and seam/approximation contract. A rectangular Support preview is not that boundary. Do not implement a speculative provider or create a duplicate packet plan.
  • #801 remains held. Open1033/1038/1053/1067/1070/1074 have preserved native/consumer completion history; audit current closure separately, do not select them as a new feature solely because their Issue state remains OPEN.

Clone this wiki locally