Settle appearance panel scrolling before targeting Search (#6079)

* claim: #6076

* test(render): settle appearance scroll before resolving Search (#6076)

Expanded starter swatches moved under the scenario click while the existing scroll animation was active. Advance 20 deterministic harness frames before resolving the Search handle. No wall-clock sleep, timeout change, assertion deletion or production change. Original native reproduction fails at the empty-state assertion; all 124 scenarios now pass with one pre-existing ignored adhoc entry.

.cargo/mutants.toml

@@ -1,9 +1,14 @@
 # cargo-mutants (docs/mutation-testing.md). Mutants are judged by the black-box suites that will
-# outlive the kernel backend: the reference tests (tests/oracle, through the oracle_cases test).
-# The kernel's own unit tests are left out on purpose: a mutant only they catch is a behaviour the
+# outlive the kernel backend: the reference tests (tests/oracle, through the oracle_cases test)
+# and the pull-request sample of the robustness goldens (every 8th seed, as ci.yml). The
+# kernel's own unit tests are left out on purpose: a mutant only they catch is a behaviour the
 # backend-neutral suites would miss when the kernel is swapped.
 profile = "mutants"
 additional_cargo_test_args = [
-    "--test", "oracle_cases", "--", "--include-ignored",
+    "--test", "oracle_cases", "--lib", "--", "--include-ignored",
     "oracle_suite",
+    "robustness_goldens::seed_00", "robustness_goldens::seed_08", "robustness_goldens::seed_16",
+    "robustness_goldens::seed_24", "robustness_goldens::seed_32", "robustness_goldens::seed_40",
+    "robustness_goldens::seed_48", "robustness_goldens::seed_56", "robustness_goldens::seed_64",
+    "robustness_goldens::seed_72", "robustness_goldens::seed_80", "robustness_goldens::seed_88",
 ]

.coderabbit.yaml

@@ -1,181 +0,0 @@
-# yaml-language-server: $schema=https://coderabbit.ai/integrations/schema.v2.json
-reviews:
-  auto_review:
-    # Dependabot bumps are checked by CI; skip CodeRabbit reviews on them.
-    ignore_usernames:
-      - "dependabot[bot]"
-  path_instructions:
-    - path: "**"
-      instructions: |
-        Project rule: don't change anyone's existing defaults unless the change is purely additive and belongs in the application.
-        Flag any change to something a user already relies on: a default setting or preference value, what a command or tool does when used the usual way, the UI's default layout or behaviour, a keyboard or mouse shortcut, or the result an existing saved design rebuilds to.
-        Don't flag purely additive changes: a new command, a new setting whose default keeps today's behaviour, or a new option that appears only when someone chooses it. Don't flag bug fixes that only turn a crash or an error into the result the feature always promised.
-        When you flag one, start the comment with "Changes a default:", say what a user sees before and after, whether a setting keeps the old behaviour, and whether the PR description's `Changes a default:` line says so.
-
-    # Where code goes, SolidCraft or SolidCore: solidcore/docs/layers.md.
-    - path: "{apps,crates}/**"
-      instructions: |
-        Layers (solidcore/docs/layers.md): SolidCraft is a consumer of solidcore. It holds state,
-        selection, commands, settings, history and UI, and computes no geometry.
-        - Flag any new geometric computation here: a dot or cross product, normalising, sqrt or trig
-          on coordinates, a solve, a derivative, an intersection, a fit, a distance or area. Say which
-          layer it belongs in: a kernel primitive in solidcore/crates/solidcore if it computes
-          geometry, or a recipe in solidcore/crates/solidcore-ops if it only sequences kernel calls.
-        - Flag a new dependency on any solidcore crate other than solidcore-ops, solidcore-tess and
-          solidcore-record.
-        - Flag a new line in xtask/mesh-decisions.txt; that list only shrinks.
-        - Flag a second implementation of something solidcore already has (STEP, meshing, SSI,
-          tangent chains, frames).
-
-    # The vendored SolidCore kernel: its own review rules (from solidcore/.coderabbit.yaml, which
-    # CodeRabbit reads only at the repository root), with its paths under solidcore/.
-    - path: "solidcore/**"
-      instructions: |
-        The vendored SolidCore kernel (solidcore/). Paths in these instructions (AGENTS.md, docs/,
-        crates/) are under solidcore/.
-
-        Review for design quality as well as correctness. solidcore's rules are in AGENTS.md;
-        read the reference doc for the area a change touches before judging it.
-
-        - Flag code smells: logic duplicated from elsewhere in the kernel, special cases
-          bolted onto a general routine, tolerances or constants with no derivation, flags
-          or switches that keep an old path alive, fallbacks that hide a failure, and error
-          paths that lose the reason.
-        - Flag patches that make a symptom go away without fixing its cause: a widened
-          tolerance, a retry, an early return that skips the hard case, a test changed to
-          match new output. Ask what the root cause is and whether the change removes it.
-        - When a change reads like a patch, look at the other open pull requests and recent
-          changes in the same area. If several fixes keep touching the same code, say so,
-          and ask for the bigger picture: the shared cause, and the design that removes it.
-        - It is fine to recommend stopping and narrowing the scope. A smaller change that is
-          right, or an issue that states the real problem, is better than a larger change
-          that adds code which will have to be undone. Say so when that is the better path.
-        - Each fix needs a test that fails without it, and tests should check values a
-          wrong result would change. Tests gate on counts and values, never on timings.
-
-        The contract every construction keeps (docs/definitions-and-certificates.md):
-        - A face's surface is its definition S; its B-spline net B is an exact copy or a
-          certified approximation within a stored, proved epsilon. Every face of a result is
-          exact or certified. An operation that cannot build that refuses with a typed error
-          naming its cause and, where one exists, the size that builds. A correct refusal is a
-          correct result; a body built on a bare fitted face, an estimated bound or a widened
-          tolerance is not.
-        - A final answer (an intersection, a projection, a check, a continuity grade) reads S,
-          or B only inside a `NetScope` that asks for at least epsilon. A bound is enclosed,
-          never sampled or estimated, and rounding is counted.
-        - Layers (docs/layers.md): the kernel computes; ops decides and sequences and never
-          computes a geometric quantity; the applications compute nothing.
-        - No compatibility flags: a fix changes the default result, listing the cases it moves
-          and why each is right; no new `UpstreamFixes` field, no old path kept behind a switch.
-        - Show the problem first (AGENTS.md): a change to a case's result shows it before and
-          after from the same view, a VectorCraft schematic where the problem is a mechanism,
-          and the literature it follows. Ask for them when they are missing.
-        - Library code: no `unwrap`, `expect`, `panic!` or unchecked indexing; deterministic
-          results; input-dependent recursion bounded. Licence: only the upstream paths AGENTS.md
-          lists; never GPL/LGPL code.
-
-        The layer split (solidcore/docs/layers.md): solidcore is shared by every client, so flag
-        anything specific to one application: UI, command ids, application defaults or settings,
-        document state (selection, timeline, history). In solidcore/crates/solidcore-ops, also flag
-        any geometric quantity computed directly (a dot or cross product, normalizing, a square
-        root or trigonometry on coordinates, a linear solve, a derivative formula) instead of
-        through a kernel call: per solidcore/docs/layers.md it becomes a kernel primitive with its
-        own tests, and ops calls it.
-
-    - path: "solidcore/crates/solidcore/src/blend/**"
-      instructions: |
-        Fillets, chamfers, corners and setbacks: docs/generic-blend.md. They are one rolling-ball
-        construction (spine, rails, section, ends, corners, fold check, overflow); a failing case
-        means one of those parts is wrong for it, never a reason for a special case. Each blend
-        face carries its definition (`procedural_blend()`), or has an entry in the definition
-        ledger (crates/solidcore/tests/data/blend_definition_ledger/) and a test asserting which.
-        Cases are events decided from the geometry (a tangent end, a knife edge, a fold, a corner
-        type), not one construction tried and then the next. A round never ends at a seam's vertex
-        with a step: a picked edge continues across a seam into the rest of the same curve between
-        the same two faces, or the blend refuses. A size that does not fit is refused naming the
-        size that does.
-
-    - path: "solidcore/crates/solidcore/src/boolean/**"
-      instructions: |
-        Booleans: docs/booleans.md. The result is the regularized set operation decided on the
-        exact surfaces, or a typed refusal. Every decision point (a ray hit, a step-off point, an
-        imprinted vertex) is a root on S; no step reads a display mesh. A face set takes its class
-        (inside, outside, on) from a sector at a common edge, a ray or a coincident pair, and
-        nothing is kept or dropped for any other reason. A trimmed or copied face keeps its
-        surface's definition. Angle cut-offs and sampled coincidence are open work in the doc;
-        flag new ones standing in for a proof.
-
-    - path: "solidcore/crates/solidcore/src/offset/**"
-      instructions: |
-        Offset, shell and thicken: docs/offset-and-shell.md. A face's offset is the offset of its
-        definition S, never of its net B: exact for the analytic kinds, certified otherwise. Where
-        the distance reaches the least radius of curvature on the displaced side (towards the
-        centre of curvature) the offset collapses or folds; that is refused naming the largest
-        wall that builds, never built and repaired. A wall on the other side never folds from
-        curvature alone. The offset body's tolerance
-        is the input body's. The five-stage construction (face offsets, mitres with the extension
-        reach, arrangement, winding-number cavity rule, extraction) is the design; flag work that
-        extends the old executive instead of it.
-
-    - path: "solidcore/crates/solidcore/src/sweep/**"
-      instructions: |
-        Swept surfaces and threads: docs/procedural-sweep.md. A sweep is its definition (profile,
-        path, frame); its net is exact where the doc says so and certified otherwise. Check a
-        change against the doc's invariants and its exact-net cases.
-
-    - path: "solidcore/crates/solidcore/src/intersect/**"
-      instructions: &ssi |
-        Surface/surface intersection: docs/ssi.md. Curves come from closed forms where they exist
-        (line, circle, ellipse) and are traced otherwise; tangent contacts and branch points are
-        events with their own handling, not a retry with a smaller step. Every reported point is a
-        root on both definitions within its stated tolerance.
-    - path: "solidcore/crates/ssi/**"
-      instructions: *ssi
-    - path: "solidcore/crates/solidcore-ssi/**"
-      instructions: *ssi
-
-    - path: "solidcore/crates/solidcore/src/topology/**"
-      instructions: &validity |
-        B-rep validity, tolerances and healing: docs/validity-and-tolerances.md. A tolerance may
-        grow only to a bound: for imported data, to an enclosed (not sampled) gap, recorded; for a
-        construction, to its certificates' delta + max epsilon. A measured gap larger than that
-        means the construction is wrong: refuse, or recompute the curve from its surfaces'
-        intersection. No tube or ball may reach an entity it does not bound. A seam is an edge; a
-        face crossing its surface's seam carries it.
-    - path: "solidcore/crates/solidcore/src/heal/**"
-      instructions: *validity
-
-    - path: "solidcore/crates/solidcore-tess/**"
-      instructions: |
-        Tessellation is for display and export only (docs/layers.md): it decides nothing about the
-        model. Flag any model decision made from a mesh.
-
-    - path: "solidcore/crates/solidcore-ops/**"
-      instructions: |
-        Ops is the modelling API (docs/layers.md): it chooses entities, parameters and defaults and
-        sequences kernel calls; it never computes a geometric quantity itself (distances,
-        curvatures, intersections, fits). Results go through `finish`, which refuses a body that is
-        not a valid outward solid where a solid was asked for.
-
-    - path: "solidcore/docs/**"
-      instructions: |
-        A doc points to code, tests, records and the literature, never to a pull request or an
-        issue: no `#NNNN` and no PR or issue links, so a page reads the same whatever happens to the
-        tracker. A new page under docs/ needs the maintainers' agreement on its issue; one the
-        maintainers asked for in the pull request is fine. Figures are drawn in VectorCraft with
-        live text, their `.vectorcraft` source beside them, palette in docs/agent-style.md.
-
-    - path: "solidcore/crates/solidcore/tests/kernel_cases/**"
-      instructions: |
-        A kernel case's outcome changes in the case itself: its JSON expectation (and its
-        `gallery_note` if needed), its line in `known_failing.json` and its render beside it, never
-        a doc (the site's case gallery is generated from them). An expectation is graded on closed
-        forms or invariants of the geometry, not on another kernel's measured result; a refusal is
-        graded on the size it names.
-  pre_merge_checks:
-    custom_checks:
-      - name: "Existing defaults unchanged"
-        mode: "warning"
-        instructions: |
-          Pass if the pull request changes no default a user already relies on (default setting or preference values, what a command or tool does when used the usual way, the UI's default layout or behaviour, shortcuts, or the result an existing saved design rebuilds to), or if its changes are purely additive.
-          Fail otherwise, naming each changed default and what a user sees before and after. Also fail if the description says `Changes a default: no` while the code changes one.

.config/nextest.toml

@@ -1,6 +1,5 @@
 # cargo-nextest settings for CI (`cargo xtask test` does not use nextest).
-# CI builds the tests once and runs them in one job on a 32 vCPU runner (.github/workflows/ci.yml),
-# except the GPU path tracer's tests (the gpu-path group below), which run in four shards of their own.
+# CI builds the tests once and runs them in one job on a 32 vCPU runner (.github/workflows/ci.yml).
 
 [profile.ci]
 # Heavy tests (one to twelve minutes each on a CI runner) that pull requests skip. They run on
@@ -12,6 +11,7 @@ not (
     (package(solidcraft-engine) & (
         test(=tests::hostile_params_never_panic)
         | test(/^tests::robustness::/)
+        | test(/^tests::robustness_goldens::seed_/)
         | test(=pattern_suppress_tests::enclosure_arc_extinction_keeps_a_real_sharp_inner_lip_after_resize_and_reopen)
         | test(=pattern_suppress_tests::enclosure_datums_follow_wall_height_and_board_depth_with_material_proofs)
         | test(=cmd::plastic::tests::enclosure_snap_fit_follows_resized_front_wall)
@@ -33,12 +33,6 @@ slow-timeout = { period = "60s" }
 [profile.ci.junit]
 path = "junit.xml"
 
-# Bound the whole test process, including Vulkan host initialization and teardown.
-# Cold runs can warm multiple pipelines before the first image starts rendering.
-[[profile.ci.overrides]]
-filter = "package(=solidcraft-ui-egui) & test(=render_workspace::tests::progressive_image_controls_route_to_the_registered_host)"
-slow-timeout = { period = "60s", terminate-after = 20 }
-
 # The action matrix sample runs its designs in parallel workers (ACTION_MATRIX_JOBS, set to match in
 # ci.yml). Its workers reserve that many of nextest's threads, so the cores are not oversubscribed
 # (a pi-case hole that takes 8 s alone went past the matrix's 90 s action limit when they were),
@@ -48,13 +42,15 @@ filter = "binary(action_matrix) & test(=action_matrix_sample)"
 threads-required = 12
 priority = 100
 
+
 # The slowest tests start first, so a shard does not end with one of them running alone on a
-# core while the others sit idle. Medians from the CI test timings (the junit artifacts), slowest
-# first; a test over ~100 s belongs here.
+# core while the others sit idle (seed_81 alone takes about 20 minutes under CI load). Medians
+# from the CI test timings (the junit artifacts), slowest first; a test over ~100 s belongs here.
 [[profile.ci.overrides]]
 filter = """
 (package(solidcraft-engine) & (
-    test(/^tests::robustness::/)
+    test(/^tests::robustness_goldens::seed_(81|45|20|24|95|02|57|40|18|48|32|46|85|61)$/)
+    | test(/^tests::robustness::/)
     | test(=tests::hostile_params_never_panic)
     | test(=cmd::clearance::tests::distances_are_exact_on_edges_and_curved_faces)
     | test(=cmd::clipboard::tests::a_pasted_coil_joins_the_pasted_body)
@@ -77,7 +73,6 @@ priority = 100
 # Each nextest test has its own process/device. Concurrent cold lavapipe path
 # compiles contend for CPU and can exhaust the 600 s pipeline setup budget.
 # Serialize this module per CI shard; other tests retain their normal parallelism.
-# CI runs these in their own job (GPU path tests in ci.yml), split into count partitions.
 [test-groups.gpu-path]
 max-threads = 1
 
@@ -96,13 +91,14 @@ threads-required = "num-cpus"
 priority = 100
 
 [[profile.local-ci.overrides]]
-filter = "package(solidcraft-kernel) & test(=tspline::tests::hostile_tsplines_never_panic)"
+filter = "(package(solidcraft-engine) & test(=tests::robustness_goldens::seed_81)) | (package(solidcraft-kernel) & test(=tspline::tests::hostile_tsplines_never_panic))"
 priority = 99
 
 [[profile.local-ci.overrides]]
 filter = """
 (package(solidcraft-engine) & (
-    test(/^tests::robustness::/)
+    test(/^tests::robustness_goldens::seed_(81|45|20|24|95|02|57|40|18|48|32|46|85|61)$/)
+    | test(/^tests::robustness::/)
     | test(=tests::hostile_params_never_panic)
     | test(=cmd::clearance::tests::distances_are_exact_on_edges_and_curved_faces)
     | test(=cmd::clipboard::tests::a_pasted_coil_joins_the_pasted_body)

.gitattributes

@@ -1,12 +0,0 @@
-# Preserve canonical source receipts and the runtime icon-discovery snapshot.
-.gitattributes text eol=lf
-/assets/icons/ui/design/requested_icons.txt text eol=lf
-# Shaders reach the code through include_str!, and tests match multi-line WGSL excerpts
-# written as Rust strings (always LF), so a CRLF checkout must not change them (#13138).
-*.wgsl text eol=lf
-# SolidCraft designs (.sc): a JSON document or a ZIP container, never Scala source, so they
-# stay out of GitHub's language statistics. Git's own text/binary detection handles both kinds.
-*.sc -linguist-detectable
-# The kernel is vendored with git subtree, keeping its own history and licence: it must not look
-# like SolidCraft source in GitHub's language statistics.
-solidcore/** linguist-vendored

.github/CODEOWNERS

@@ -1,7 +0,0 @@
-# Code owners: a pull request that changes these paths needs an approving review from an owner
-# listed here when the branch ruleset requires review from Code Owners. Later lines take
-# precedence over earlier ones.
-
-# The vendored SolidCore kernel, owned as in SolidCore's own CODEOWNERS
-# (solidcore/.github/CODEOWNERS, which GitHub reads only at a repository's root).
-/solidcore/ @jyviko @bherbruck

.github/ISSUE_TEMPLATE/bug.yml

@@ -6,7 +6,6 @@ body:
     attributes:
       value: |
         Thanks for taking the time to report this! Inside the app, **Report an Issue** fills most of this in for you, with the command, its settings and your environment.
-        Before reporting a boolean or modelling failure, please try to reproduce it on the latest nightly or a build from current `main`, and say which build you used.
   - type: textarea
     id: what
     attributes:
@@ -19,8 +18,7 @@ body:
     attributes:
       label: Steps to reproduce
       description: |
-        What you clicked or typed, in order. For a problem on a particular design, `solidcraft-cli script design.sc --out repro.json` turns its history into a script that `solidcraft-cli eval repro.json` replays; attach it, trimmed to the failing step if you can.
-        Using an AI agent with SolidCraft's MCP server? The `solidcraft-reporting` skill in [`skills/`](https://github.com/tangency-labs/solidcraft/tree/main/skills) has it reproduce the problem in a fresh design and write these steps for you.
+        What you clicked or typed, in order. For a problem on a particular design, `solidcraft-cli script design.solidcraft --out repro.json` turns its history into a script that `solidcraft-cli eval repro.json` replays; attach it, trimmed to the failing step if you can.
       placeholder: |
         1. Sketch a circle on the XY plane
         2. Extrude it 10 mm

.github/pull_request_template.md

@@ -1,14 +1,6 @@
-<!-- Title: which part of the app changes and what a user now sees or can do, clear to someone who hasn't seen your chat, the issue or the code. -->
-
 ## Change
 
-Start with what this is, in plain words someone new to the project would understand: what it does and who it's for. Don't assume anyone knows the name of your tool, project or feature. Then describe the problem and resulting behavior. Link the issue when applicable.
-
-Changes a default: no
-
-<!-- Required line, replace "no" if this changes what a user gets out of the box (a default value, key binding, setting, tool behaviour):
-Changes a default: yes — <what>, old behaviour kept behind preference <name>
-Docs-only and bot PRs are exempt. -->
+Describe the problem and resulting behavior. Link the issue when applicable.
 
 ## Validation
 
@@ -16,8 +8,6 @@ What did you run, and what were the results? Include expected and measured value
 
 ## Screenshots of the behavior (when observable)
 
-Put the picture or video here in the description. A file in the diff doesn't count: a maintainer has to be able to see what this is without opening the changed files.
-
 For observable CAD, UI or model behavior, include actual descriptive screenshots or a short recording from a small reproduction. This includes kernel, geometry, assembly and backend effects that can be shown in the app. Coding agents should run the app and capture the evidence themselves, rather than asking a human for evidence they can produce. Show the actual failure/result, preferably before and after, with brief steps, expected/actual behavior and annotations where helpful.
 
 Flowcharts and Mermaid diagrams cannot substitute for evidence of visible behavior. Use diagrams for architectural reasoning when actual screenshots cannot illustrate the point. Changes with no useful observable behavior may omit screenshot/video evidence. Exclude private designs and sensitive details; attach media or link to an accessible recording rather than committing generated review artifacts.

.github/release-notes.md

@@ -9,10 +9,9 @@ parameter to watch the timeline rebuild. [Documentation](https://docs.solidcraft
 [ROADMAP](https://github.com/bherbruck/solidcraft/blob/main/ROADMAP.md#known-limitations) lists
 the known limitations. Designs from every earlier version open in this one.
 
-**New app ID.** The app ID is now `io.tangencylabs.solidcraft` (it was `ai.storyteller.solidcraft`,
-and `ai.storyteller.solvecraft` up to 0.7): `flatpak update` offers to replace the old app, the
-`.deb`, `.rpm` and AppImage remove the old menu entry, and settings stay. On macOS the bundle ID
-changed too, so macOS asks once more for the permissions it had granted.
+**Upgrading from 0.7 or earlier.** 0.8 changed the Linux app ID to `ai.storyteller.solidcraft`:
+`flatpak update` offers to replace the old app, and the `.deb`, `.rpm` and AppImage remove the old
+menu entry.
 
 **Upgrading from 0.5 or earlier.** 0.6 renamed SolveCraft to SolidCraft and made the zip
 container the default save format. `.solvecraft` designs, old settings folders and
@@ -43,16 +42,16 @@ installing SolidCraft; keep both remotes in the same user installation:
 ```sh
 flatpak remote-add --user --if-not-exists flathub https://dl.flathub.org/repo/flathub.flatpakrepo
 flatpak remote-add --user --if-not-exists solidcraft https://docs.solidcraft.io/flatpak/solidcraft.flatpakrepo
-flatpak install --user solidcraft io.tangencylabs.solidcraft
-flatpak run io.tangencylabs.solidcraft
+flatpak install --user solidcraft ai.storyteller.solidcraft
+flatpak run ai.storyteller.solidcraft
 ```
 
 A remote added from the old `bherbruck.github.io` address no longer finds updates: run
 `flatpak remote-modify --user --url=https://docs.solidcraft.io/flatpak/repo/ solidcraft`, then
 `flatpak update --user`.
 
-Flatpak installs under an old ID (`ai.storyteller.solidcraft`, or `ai.storyteller.solvecraft` from 0.7 or
-earlier): `flatpak update --user` offers to replace it with `io.tangencylabs.solidcraft`, and settings move along.
+Flatpak installs from 0.7 or earlier use the old ID `ai.storyteller.solvecraft`: `flatpak update --user`
+offers to replace it with `ai.storyteller.solidcraft`, and settings move along.
 
 Single-file `.flatpak` bundles include the runtime repository address; missing runtimes
 still need an internet connection. [Linux installation details](https://docs.solidcraft.io/guide/getting-started.html#linux-flatpak).

.github/workflows/external-corpus.yml

@@ -1,42 +0,0 @@
-# Nightly import checks on real-world STEP files (#1397): the external corpus in
-# tests/external-corpus.toml is downloaded (hash-verified), imported headless, and checked
-# against tolerance-based expectations — body counts, total volume and area, time and memory
-# budgets. It is not part of `cargo xtask ci`: it downloads from the internet.
-#
-# Import results should improve over time (healing, edge merging, meshing). When a check fails
-# because the numbers moved for the better (or the source changed upstream), re-record with
-# `cargo xtask external-corpus --bless "why"` in a pull request, never by editing numbers.
-name: External corpus
-
-on:
-  schedule:
-    - cron: '40 3 * * *'
-  workflow_dispatch:
-    inputs:
-      only:
-        description: "Run only this corpus entry name (empty = every entry)"
-        type: string
-        default: ""
-
-permissions:
-  contents: read
-
-jobs:
-  corpus:
-    name: Import the external STEP corpus
-    runs-on: ubuntu-24.04
-    timeout-minutes: 120
-    steps:
-      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
-      - uses: dtolnay/rust-toolchain@stable
-      - name: Build the CLI
-        run: cargo build --profile ci -p solidcraft-cli
-      - name: Import and check every entry
-        env:
-          ONLY: ${{ inputs.only }}
-        run: |
-          if [ -z "$ONLY" ]; then
-            cargo run -q -p xtask -- external-corpus --cli target/ci/solidcraft-cli
-          else
-            cargo run -q -p xtask -- external-corpus --cli target/ci/solidcraft-cli --only "$ONLY"
-          fi

.github/workflows/fillet-rig.yml

@@ -1,110 +0,0 @@
-# The fillet rig as a regression gate: a pull request that touches fillet code (the paths below)
-# runs every case in tests/kernel-cases/fillets/ through one release build of
-# solidcraft-cli, and fails on a regression (a case that fails and
-# tests/kernel-cases/fillets/KNOWN_FAILING does not list) or on a listed case that now passes
-# (it is fixed: remove its line, so the list only shrinks). See tests/kernel-cases/README.md.
-#
-# GitHub filters a workflow by whole files, so the fillet parts of crates/doc/src/eval*.rs and
-# crates/engine/src/cmd/features.rs select it whenever those files change. Pushes to main and
-# develop that touch the same paths run it too and save the compiler cache (a Blacksmith sticky
-# disk) that pull requests then mount read-only.
-name: Fillet rig
-
-on:
-  pull_request:
-    types: [opened, synchronize, reopened, ready_for_review]
-    paths:
-      - "crates/kernel/src/blend*.rs"
-      - "crates/kernel/src/fillet*.rs"
-      - "crates/kernel/src/*corner*.rs"
-      - "crates/kernel/src/continuity*.rs"
-      - "crates/smlib/**"
-      - "crates/doc/src/eval*.rs"
-      - "crates/engine/src/cmd/features.rs"
-      - "tests/kernel-cases/fillets/**"
-      # The rig itself: the grading, the runner and this workflow.
-      - "apps/solidcraft-cli/src/kernel_cases.rs"
-      - "xtask/src/kernel_cases.rs"
-      - ".github/workflows/fillet-rig.yml"
-  push:
-    branches: [main, develop]
-    # The same paths as pull_request.
-    paths:
-      - "crates/kernel/src/blend*.rs"
-      - "crates/kernel/src/fillet*.rs"
-      - "crates/kernel/src/*corner*.rs"
-      - "crates/kernel/src/continuity*.rs"
-      - "crates/smlib/**"
-      - "crates/doc/src/eval*.rs"
-      - "crates/engine/src/cmd/features.rs"
-      - "tests/kernel-cases/fillets/**"
-      # The rig itself: the grading, the runner and this workflow.
-      - "apps/solidcraft-cli/src/kernel_cases.rs"
-      - "xtask/src/kernel_cases.rs"
-      - ".github/workflows/fillet-rig.yml"
-  workflow_dispatch:
-
-permissions:
-  contents: read
-
-concurrency:
-  group: fillet-rig-${{ github.ref }}
-  cancel-in-progress: ${{ github.event_name == 'pull_request' }}
-
-env:
-  CARGO_TERM_COLOR: always
-
-jobs:
-  fillets:
-    name: Fillet rig
-    # Draft pull requests run no CI, as in ci.yml.
-    if: github.event_name != 'pull_request' || !github.event.pull_request.draft
-    runs-on: blacksmith-8vcpu-ubuntu-2404
-    timeout-minutes: 60
-    env:
-      CARGO_INCREMENTAL: "0"
-      RUSTC_WRAPPER: sccache
-      SCCACHE_DIR: /home/runner/.cache/sccache
-      SCCACHE_CACHE_SIZE: 10G
-    steps:
-      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
-      - name: Size parallel compiles to the job's memory
-        run: scripts/ci/build-jobs.sh
-      - uses: dtolnay/rust-toolchain@stable
-      # Only main and develop commit the cache; pull requests and forks mount a clone and never
-      # write back.
-      - name: Mount the compiler cache
-        uses: useblacksmith/stickydisk@3f6be1451e3cad893b778bc93495c80452a5da26 # v1.7.2
-        continue-on-error: true
-        with:
-          key: ${{ github.repository }}-sccache-fillet-rig
-          path: /home/runner/.cache/sccache
-          commit: ${{ (github.ref == 'refs/heads/main' || github.ref == 'refs/heads/develop') && 'on-change' || 'false' }}
-      - uses: Swatinem/rust-cache@6323deb102c322ba6fcbdcafc7e3dddab59af2b6 # v2.9.2
-        with:
-          key: fillet-rig
-          save-if: ${{ github.ref == 'refs/heads/main' || github.ref == 'refs/heads/develop' }}
-      - name: Set up compiler cache
-        id: sccache
-        uses: mozilla-actions/sccache-action@fc920bf0ec8de6ee65d409111f7ec508035751ba # v0.0.11
-        with:
-          version: v0.16.0
-        # A failed download of sccache (GitHub release outages answer 504) must not fail the build.
-        continue-on-error: true
-      - name: Build without the compiler cache if it could not be set up
-        if: steps.sccache.outcome == 'failure'
-        run: echo "RUSTC_WRAPPER=" >> "$GITHUB_ENV"
-      - name: Build the CLI (release)
-        run: cargo build --release --locked -p solidcraft-cli
-      - name: Run the fillet cases against the known-failing list
-        run: >-
-          cargo run -q --locked -p xtask -- kernel-cases --area fillets
-          --cli target/release/solidcraft-cli --out "$RUNNER_TEMP/fillet-rig"
-          --known-failing tests/kernel-cases/fillets/KNOWN_FAILING
-      - name: Keep the results
-        if: always()
-        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
-        with:
-          name: fillet-rig-results
-          path: ${{ runner.temp }}/fillet-rig/results.json
-          if-no-files-found: ignore

.github/workflows/flatpak-pages.yml

@@ -21,8 +21,6 @@ concurrency:
 jobs:
   publish:
     name: Request the combined docs, web, and Flatpak deployment
-    # A pre-release stays off the Flatpak feed: the feed's one branch is what `flatpak update` offers.
-    if: github.event_name == 'workflow_dispatch' || !github.event.release.prerelease
     runs-on: ubuntu-24.04
     env:
       GH_TOKEN: ${{ github.token }}

.github/workflows/generated.yml

@@ -1,8 +1,6 @@
 # Files generated from the code are rewritten here, on main, after each merge, so pull requests
 # never edit them (two pull requests that each regenerated one would always conflict):
 # THIRD-PARTY-LICENSES.txt (`cargo xtask licences`) and docs/features.md (`cargo xtask features`).
-# Pending files (assets/locales/pending, attribution/pending) are folded into the catalogs and
-# ATTRIBUTION.md by `cargo xtask fold-pending`.
 name: Generated files
 
 on:
@@ -15,16 +13,10 @@ on:
       - "Cargo.lock"
       - "**/Cargo.toml"
       - "vendor/**"
-      # solidcore's licence files are embedded in THIRD-PARTY-LICENSES.txt.
-      - "solidcore/LICENSE"
-      - "solidcore/NOTICE"
-      - "solidcore/ATTRIBUTION.md"
       - "assets/fonts/**"
       - "crates/engine/**"
       - "apps/solidcraft-cli/**"
       - "xtask/**"
-      - "assets/locales/pending/*.json"
-      - "attribution/pending/*.md"
       - ".github/workflows/generated.yml"
   workflow_dispatch:
 
@@ -56,15 +48,13 @@ jobs:
         run: cargo xtask licences
       - name: docs/features.md
         run: cargo xtask features
-      - name: Pending locale strings and attribution rows
-        run: cargo xtask fold-pending
       - name: Commit if changed
         run: |
-          if [ -z "$(git status --porcelain)" ]; then echo "unchanged"; exit 0; fi
+          if git diff --quiet -- THIRD-PARTY-LICENSES.txt docs/features.md; then echo "unchanged"; exit 0; fi
           git config user.name "github-actions[bot]"
           git config user.email "41898282+github-actions[bot]@users.noreply.github.com"
-          git add -A THIRD-PARTY-LICENSES.txt docs/features.md assets/locales ATTRIBUTION.md attribution
-          git commit -m "Regenerate generated files and fold pending files [skip ci]"
+          git add THIRD-PARTY-LICENSES.txt docs/features.md
+          git commit -m "Regenerate THIRD-PARTY-LICENSES.txt and docs/features.md [skip ci]"
           for _ in 1 2 3; do
             git pull --rebase origin main && git push origin HEAD:main && exit 0
             sleep 10

.github/workflows/kernel-paused.yml

@@ -1,7 +1,6 @@
-# While a new geometry kernel is evaluated, new issues and discussions about kernel work, and new
-# pull requests that change the kernel directories, are labelled `kernel-paused` for a maintainer to
-# answer (CONTRIBUTING.md, "Kernel work is paused"). The logic is in scripts/kernel-paused/ (tested
-# in ci.yml).
+# While a new geometry kernel is evaluated, new issues, pull requests and discussions about kernel
+# work are labelled `kernel-paused` for a maintainer to answer (CONTRIBUTING.md, "Kernel work is
+# paused"). The logic is in scripts/kernel-paused/ (tested in ci.yml).
 name: Kernel paused
 
 on:
@@ -17,7 +16,7 @@ on:
 permissions:
   contents: read # to check out scripts/kernel-paused
   issues: write
-  pull-requests: write # to list a PR's changed paths and add its label
+  pull-requests: read # to list a PR's changed paths
   discussions: write
 
 concurrency:

.github/workflows/kernel-rig.yml

@@ -1,241 +0,0 @@
-# The kernel rig and the complexity ladder as a regression gate. A plan job maps a pull request's
-# changed files to the rig areas they can affect (scripts/ci/kernel_rig_plan.py): an area runs
-# when a file its tests/kernel-cases/<area>/PATHS lists changes, or one of its cases; every area
-# runs when the shared core in tests/kernel-cases/PATHS-ALL changes, including the vendored
-# SolidCore source in solidcore; the ladder runs whenever any
-# area does. One job then builds solidcraft-cli once (release), checks that every
-# registry command has a case or an exemption (tests/kernel-cases/EXEMPT), and hands the CLI to a
-# matrix of shards as an artifact, one per selected area plus the ladder, in parallel, so the
-# wall time is the build plus the slowest shard. See tests/kernel-cases/README.md.
-#
-# - An area fails on a regression (a case that fails and its tests/kernel-cases/<area>/KNOWN_FAILING
-#   does not list) or on a listed case that passes (it is fixed: remove its line in the same pull
-#   request, so the list only shrinks).
-# - The ladder fails on any case whose status or counts differ from
-#   tests/kernel-cases/ladder/golden.json; a right change is re-recorded (`--record "why"`).
-#
-# The trigger paths are whole folders that hold every area's PATHS (a self-test,
-# scripts/ci/test_kernel_rig_plan.py, checks they do), so a pull request that touches none of
-# them (the UI, docs, packaging) starts no runner at all, and a new area needs no edit here: the
-# plan finds the areas from the folders. Pushes to main and develop on the same paths, merge groups
-# (once the queue is on), the release gate (release-gate.yml, workflow_call) and a run by hand run
-# every area; those pushes also commit the compiler cache (a Blacksmith sticky disk) that every
-# other run mounts read-only.
-name: Kernel rig
-
-on:
-  pull_request:
-    types: [opened, synchronize, reopened, ready_for_review]
-    paths:
-      - "crates/kernel/**"
-      - "crates/geom/**"
-      - "crates/smlib/**"
-      - "crates/step/**"
-      - "crates/io/src/**"
-      - "crates/doc/src/**"
-      - "crates/engine/src/**"
-      - "tests/kernel-cases/**"
-      # The vendored kernel: a change here runs every area (tests/kernel-cases/PATHS-ALL).
-      - "solidcore/**"
-      # The rig itself: the grading, the runner, the selection and this workflow.
-      - "apps/solidcraft-cli/src/kernel_cases.rs"
-      - "xtask/src/kernel_cases.rs"
-      - "xtask/src/kernel_ladder.rs"
-      - "scripts/ci/kernel_rig_plan.py"
-      - "scripts/ci/test_kernel_rig_plan.py"
-      - ".github/workflows/kernel-rig.yml"
-  push:
-    branches: [main, develop]
-    # The same paths as pull_request.
-    paths:
-      - "crates/kernel/**"
-      - "crates/geom/**"
-      - "crates/smlib/**"
-      - "crates/step/**"
-      - "crates/io/src/**"
-      - "crates/doc/src/**"
-      - "crates/engine/src/**"
-      - "tests/kernel-cases/**"
-      # The vendored kernel: a change here runs every area (tests/kernel-cases/PATHS-ALL).
-      - "solidcore/**"
-      # The rig itself: the grading, the runner, the selection and this workflow.
-      - "apps/solidcraft-cli/src/kernel_cases.rs"
-      - "xtask/src/kernel_cases.rs"
-      - "xtask/src/kernel_ladder.rs"
-      - "scripts/ci/kernel_rig_plan.py"
-      - "scripts/ci/test_kernel_rig_plan.py"
-      - ".github/workflows/kernel-rig.yml"
-  merge_group:
-  workflow_call:
-  workflow_dispatch:
-
-permissions:
-  contents: read
-
-concurrency:
-  # A new push to a pull request replaces its old run.
-  group: kernel-rig-${{ github.event_name }}-${{ github.ref }}
-  cancel-in-progress: ${{ github.event_name == 'pull_request' }}
-
-env:
-  CARGO_TERM_COLOR: always
-
-jobs:
-  plan:
-    name: Select the rig areas
-    # Draft pull requests run no CI, as in ci.yml.
-    if: github.event_name != 'pull_request' || !github.event.pull_request.draft
-    runs-on: blacksmith-2vcpu-ubuntu-2404
-    timeout-minutes: 5
-    outputs:
-      # The shard matrix (JSON list of areas and the ladder; [] when nothing is selected).
-      shards: ${{ steps.plan.outputs.shards }}
-      # Whether the build job, and with it the coverage check, runs.
-      build: ${{ steps.plan.outputs.build }}
-    steps:
-      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
-        with:
-          # A pull request's diff needs its base's history.
-          fetch-depth: ${{ github.event_name == 'pull_request' && '0' || '1' }}
-      - name: Selection self-test
-        run: python3 -I scripts/ci/test_kernel_rig_plan.py
-      - id: plan
-        name: Map the changed files to areas
-        env:
-          EVENT_NAME: ${{ github.event_name }}
-          BASE_SHA: ${{ github.event.pull_request.base.sha }}
-          HEAD_SHA: ${{ github.event.pull_request.head.sha }}
-        run: |
-          # Pull requests run the areas their diff reaches; pushes, merge groups, the release
-          # gate and a run by hand run every area.
-          if [ "$EVENT_NAME" = pull_request ]; then
-            git diff --no-renames --name-only -z "$BASE_SHA...$HEAD_SHA" > "$RUNNER_TEMP/rig-paths"
-            python3 -I scripts/ci/kernel_rig_plan.py --paths "$RUNNER_TEMP/rig-paths" \
-              --github-output "$GITHUB_OUTPUT"
-          else
-            python3 -I scripts/ci/kernel_rig_plan.py --all --github-output "$GITHUB_OUTPUT"
-          fi
-
-  build:
-    name: Build the CLI
-    needs: plan
-    if: needs.plan.outputs.build == 'true'
-    runs-on: blacksmith-8vcpu-ubuntu-2404
-    timeout-minutes: 60
-    env:
-      CARGO_INCREMENTAL: "0"
-      RUSTC_WRAPPER: sccache
-      SCCACHE_DIR: /home/runner/.cache/sccache
-      SCCACHE_CACHE_SIZE: 10G
-    steps:
-      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
-      - name: Size parallel compiles to the job's memory
-        run: scripts/ci/build-jobs.sh
-      - uses: dtolnay/rust-toolchain@stable
-      # Only pushes to main and develop commit the cache; pull requests, merge groups and forks
-      # mount a clone and never write back.
-      - name: Mount the compiler cache
-        uses: useblacksmith/stickydisk@3f6be1451e3cad893b778bc93495c80452a5da26 # v1.7.2
-        continue-on-error: true
-        with:
-          key: ${{ github.repository }}-sccache-kernel-rig
-          path: /home/runner/.cache/sccache
-          commit: ${{ github.event_name == 'push' && (github.ref == 'refs/heads/main' || github.ref == 'refs/heads/develop') && 'on-change' || 'false' }}
-      - uses: Swatinem/rust-cache@6323deb102c322ba6fcbdcafc7e3dddab59af2b6 # v2.9.2
-        with:
-          key: kernel-rig
-          save-if: ${{ github.event_name == 'push' && (github.ref == 'refs/heads/main' || github.ref == 'refs/heads/develop') }}
-      - name: Set up compiler cache
-        id: sccache
-        uses: mozilla-actions/sccache-action@fc920bf0ec8de6ee65d409111f7ec508035751ba # v0.0.11
-        with:
-          version: v0.16.0
-        # A failed download of sccache (GitHub release outages answer 504) must not fail the build.
-        continue-on-error: true
-      - name: Build without the compiler cache if it could not be set up
-        if: steps.sccache.outcome == 'failure'
-        run: echo "RUSTC_WRAPPER=" >> "$GITHUB_ENV"
-      - name: Build the CLI (release) and the rig's runner
-        run: |
-          cargo build --release --locked -p solidcraft-cli
-          cargo build --locked -p xtask
-      # A tar keeps the executable bits, which an artifact drops. xtask finds the repository from
-      # the path it was built in (CARGO_MANIFEST_DIR), which is the same checkout path in every
-      # job of this workflow.
-      # Every registry command is used by a case or listed in tests/kernel-cases/EXEMPT.
-      - name: Every command has a case
-        run: target/debug/xtask kernel-cases --coverage --cli target/release/solidcraft-cli
-      # A coverage-only run (the registry or the cases changed, no area selected) runs no shard.
-      - name: Pack the binaries
-        if: needs.plan.outputs.shards != '[]'
-        run: tar -cf "$RUNNER_TEMP/kernel-rig-bin.tar" -C target release/solidcraft-cli debug/xtask
-      - uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
-        if: needs.plan.outputs.shards != '[]'
-        with:
-          name: kernel-rig-bin
-          path: ${{ runner.temp }}/kernel-rig-bin.tar
-          retention-days: 1
-      - name: Compiler cache statistics
-        if: always()
-        run: if command -v sccache >/dev/null; then sccache --show-stats; else echo "sccache was not set up; built without it"; fi
-
-  shard:
-    name: Kernel rig (${{ matrix.shard }})
-    needs: [plan, build]
-    if: needs.plan.outputs.shards != '[]'
-    runs-on: blacksmith-4vcpu-ubuntu-2404
-    timeout-minutes: 30
-    strategy:
-      fail-fast: false
-      matrix:
-        # The areas of tests/kernel-cases/ the plan selected, and the ladder. On the build box
-        # (aarch64, 4 cases at a time) the slowest areas took about 1 minute (booleans, 212 s of
-        # cases with one of 84 s; threads, 161 s) and the ladder, one case at a time, 92 s: no area
-        # needs splitting.
-        shard: ${{ fromJSON(needs.plan.outputs.shards) }}
-    steps:
-      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
-      - uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2
-        with:
-          name: kernel-rig-bin
-          path: ${{ runner.temp }}
-      - name: Unpack the binaries
-        run: mkdir -p target && tar -xf "$RUNNER_TEMP/kernel-rig-bin.tar" -C target
-      - name: Run the cases against the known-failing list (the ladder against its golden)
-        env:
-          SHARD: ${{ matrix.shard }}
-        run: |
-          if [ "$SHARD" = ladder ]; then
-            set -- --ladder --gate
-          else
-            set -- --area "$SHARD" --known-failing "tests/kernel-cases/$SHARD/KNOWN_FAILING"
-          fi
-          target/debug/xtask kernel-cases "$@" --cli target/release/solidcraft-cli --out "$RUNNER_TEMP/kernel-rig"
-      - name: Keep the results
-        if: always()
-        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
-        with:
-          name: kernel-rig-results-${{ matrix.shard }}
-          path: ${{ runner.temp }}/kernel-rig/**/results.json
-          if-no-files-found: ignore
-
-  # One check for the whole gate, for branch protection and the merge queue.
-  kernel-rig:
-    name: kernel-rig
-    needs: [plan, build, shard]
-    if: always() && (github.event_name != 'pull_request' || !github.event.pull_request.draft)
-    runs-on: blacksmith-2vcpu-ubuntu-2404
-    steps:
-      # A skipped build or shard counts as passed only when the plan selected none.
-      - name: Every selected job passed
-        env:
-          PLAN: ${{ needs.plan.result }}
-          WANT_BUILD: ${{ needs.plan.outputs.build }}
-          WANT_SHARDS: ${{ needs.plan.outputs.shards }}
-          BUILD: ${{ needs.build.result }}
-          SHARDS: ${{ needs.shard.result }}
-        run: |
-          echo "plan=$PLAN build=$BUILD shards=$SHARDS selected=$WANT_SHARDS"
-          test "$PLAN" = success
-          if [ "$WANT_BUILD" = true ]; then test "$BUILD" = success; else test "$BUILD" = skipped; fi
-          if [ "$WANT_SHARDS" != '[]' ]; then test "$SHARDS" = success; else test "$SHARDS" = skipped; fi

.github/workflows/packaging-lint.yml

@@ -39,8 +39,6 @@ jobs:
         run: python3 packaging/tests/nightly_test.py
       - name: Windows executable icon validation regression
         run: python3 packaging/tests/windows_icon_test.py
-      - name: AppImage CLI wrapper regression
-        run: python3 packaging/tests/apprun_test.py
       - name: Flatpak desktop smoke validation regression
         run: python3 packaging/tests/flatpak_test.py
       - name: PowerShell
@@ -55,15 +53,13 @@ jobs:
       - name: XML, desktop entry, AppStream, Flatpak manifest
         run: |
           xmllint --noout assets/platforms/windows/solidcraft.wxs assets/platforms/windows/solidcraft.en-us.wxl assets/platforms/macos/*.plist* assets/platforms/linux/*.xml*
-          desktop-file-validate assets/platforms/linux/io.tangencylabs.solidcraft.desktop
-          # The window's X11 class is its app id; the old ids stay only as the rename shims.
-          grep -qx 'StartupWMClass=io.tangencylabs.solidcraft' assets/platforms/linux/io.tangencylabs.solidcraft.desktop
-          grep -q '<id>ai.storyteller.solidcraft</id>' assets/platforms/linux/io.tangencylabs.solidcraft.metainfo.xml.in
-          grep -q '<id>ai.storyteller.solvecraft</id>' assets/platforms/linux/io.tangencylabs.solidcraft.metainfo.xml.in
-          grep -qx 'X-Flatpak-RenamedFrom=ai.storyteller.solidcraft.desktop;ai.storyteller.solvecraft.desktop;' assets/platforms/linux/io.tangencylabs.solidcraft.desktop
+          desktop-file-validate assets/platforms/linux/ai.storyteller.solidcraft.desktop
+          # The window's X11 class is its app id; the old id stays only as the rename shims.
+          grep -qx 'StartupWMClass=ai.storyteller.solidcraft' assets/platforms/linux/ai.storyteller.solidcraft.desktop
+          grep -q '<id>ai.storyteller.solvecraft</id>' assets/platforms/linux/ai.storyteller.solidcraft.metainfo.xml.in
           grep -qF -e '--end-of-life-rebase=' packaging/flatpak-site.sh
-          sed -e 's/@VERSION@/0.0.0/' -e 's/@DATE@/2026-01-01/' assets/platforms/linux/io.tangencylabs.solidcraft.metainfo.xml.in >"$RUNNER_TEMP/io.tangencylabs.solidcraft.metainfo.xml"
-          appstreamcli validate --no-net --explain "$RUNNER_TEMP/io.tangencylabs.solidcraft.metainfo.xml"
-          python3 -c "import yaml; m = yaml.safe_load(open('packaging/linux/flatpak/io.tangencylabs.solidcraft.bundle.yml')); assert m['id'] == 'io.tangencylabs.solidcraft' and m['command'] == 'solidcraft'"
+          sed -e 's/@VERSION@/0.0.0/' -e 's/@DATE@/2026-01-01/' assets/platforms/linux/ai.storyteller.solidcraft.metainfo.xml.in >"$RUNNER_TEMP/ai.storyteller.solidcraft.metainfo.xml"
+          appstreamcli validate --no-net --explain "$RUNNER_TEMP/ai.storyteller.solidcraft.metainfo.xml"
+          python3 -c "import yaml; m = yaml.safe_load(open('packaging/linux/flatpak/ai.storyteller.solidcraft.bundle.yml')); assert m['id'] == 'ai.storyteller.solidcraft' and m['command'] == 'solidcraft'"
           python3 -c "import yaml; m = yaml.safe_load(open('packaging/linux/snap/snapcraft.yaml')); assert m['name'] == 'solidcraft' and m['confinement'] == 'strict' and m['apps']['solidcraft']['command'] == 'usr/bin/solidcraft'"
           python3 -m py_compile packaging/linux/snap-smoke.py

.github/workflows/pages.yml

@@ -1,6 +1,5 @@
 # The documentation site on GitHub Pages: the book (docs/book) at https://docs.solidcraft.io/
-# and the web app at /app/ (the latest release), /app-rc/ (the newest release candidate) and
-# /app-edge/ (this commit). Needs Settings → Pages → Source = GitHub Actions; skipped while the
+# and the bundled web app at /app/. Needs Settings → Pages → Source = GitHub Actions; skipped while the
 # repository is private.
 name: Pages
 
@@ -66,11 +65,7 @@ jobs:
         run: |
           mkdir -p site
           cp -r target/book/. site/
-          bash docs/book/seo.sh site  # canonical links, robots.txt, sitemap.xml
-      - name: Add the web app channels (stable and release candidate from their releases, edge from this build)
-        env:
-          GH_TOKEN: ${{ github.token }}
-        run: bash packaging/web-channels.sh site dist/web
+          cp -r dist/web site/app
       - uses: actions/configure-pages@v5
         id: pages
       - name: Install Flatpak repository tools

.github/workflows/pr-checks.yml

@@ -1,85 +0,0 @@
-# Three quick checks on every pull request (CONTRIBUTING.md, "Sending a change"): no second open PR
-# for an issue a lower-numbered one already closes, the "Changes a default:" line is filled in, and
-# a PR adding to the showcase shows a picture. None is a required status check. The logic is in scripts/pr-checks/pr-checks.js (tested in ci.yml).
-name: PR checks
-
-on:
-  # pull_request, never pull_request_target: nothing here checks out or runs the PR's code, and the
-  # token is read-only for fork PRs. Only scripts/pr-checks from the PR's own merge commit is run.
-  pull_request:
-    types: [opened, edited, synchronize, reopened, ready_for_review, labeled, unlabeled]
-
-permissions:
-  contents: read
-  pull-requests: read
-
-concurrency:
-  group: pr-checks-${{ github.event.pull_request.number }}
-  cancel-in-progress: true
-
-jobs:
-  duplicate:
-    name: Duplicate PR check
-    runs-on: ubuntu-24.04
-    timeout-minutes: 5
-    steps:
-      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
-        with:
-          sparse-checkout: scripts/pr-checks
-      - uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
-        with:
-          script: |
-            const checks = require('./scripts/pr-checks/pr-checks.js');
-            const r = await checks.checkDuplicate({ github, context, core });
-            core.info(JSON.stringify(r));
-
-  defaults:
-    name: Defaults line check
-    runs-on: ubuntu-24.04
-    timeout-minutes: 5
-    steps:
-      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
-        with:
-          sparse-checkout: scripts/pr-checks
-      - uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
-        with:
-          script: |
-            const checks = require('./scripts/pr-checks/pr-checks.js');
-            const r = await checks.checkDefaults({ github, context, core });
-            core.info(JSON.stringify(r));
-
-  picture:
-    name: Picture check
-    runs-on: ubuntu-24.04
-    timeout-minutes: 5
-    steps:
-      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
-        with:
-          sparse-checkout: scripts/pr-checks
-      - uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
-        with:
-          script: |
-            const checks = require('./scripts/pr-checks/pr-checks.js');
-            const r = await checks.checkPicture({ github, context, core });
-            core.info(JSON.stringify(r));
-
-  # Labelling needs write access, which a fork PR's token never has, so it is its own job and best
-  # effort: a fork PR just doesn't get the `changes-default` label from here.
-  label:
-    name: Label changes-default
-    if: github.event.pull_request.head.repo.full_name == github.repository
-    runs-on: ubuntu-24.04
-    timeout-minutes: 5
-    continue-on-error: true
-    permissions:
-      contents: read
-      pull-requests: write
-    steps:
-      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
-        with:
-          sparse-checkout: scripts/pr-checks
-      - uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
-        with:
-          script: |
-            const checks = require('./scripts/pr-checks/pr-checks.js');
-            await checks.syncDefaultLabel({ github, context, core });

.github/workflows/release-gate.yml

@@ -1,74 +0,0 @@
-# The release gate: everything, in full and in parallel, on one branch's head, before that branch
-# replaces main as a release (develop, rebased onto main). Run it by hand:
-#   gh workflow run release-gate.yml --ref develop
-# It calls the workflows that own each check instead of copying their jobs:
-# - ci.yml as Run workflow with cross-compilation: every native suite in full (not scoped), the
-#   reference tests, the doc tests, the GPU path tests, the action matrix (all 16 shards) and its
-#   determinism check, the property tests, the repository checks (web-offline among them),
-#   WebAssembly and RISC-V, Windows D3D12 FXC and Windows app startup;
-# - kernel-rig.yml: every rig area against its KNOWN_FAILING and the ladder against its golden;
-# - release.yml as a dry run (draft false, packages_only): the Linux, Flatpak, Snap, FreeBSD,
-#   macOS, Windows and web packages with their smoke tests and package checks, unsigned (no
-#   secrets are passed, so no signing secret or SignPath quota is used) and without the release
-#   job (checksums, update signing, publishing).
-# The gate passes only when all three pass. Before main is replaced, tag the old main
-# (main-before-develop-<date>) and push the tag.
-name: Release gate
-
-on:
-  workflow_dispatch:
-
-permissions:
-  contents: read
-
-concurrency:
-  group: release-gate-${{ github.ref }}
-  cancel-in-progress: false
-
-jobs:
-  ci:
-    name: CI
-    uses: ./.github/workflows/ci.yml
-    permissions:
-      contents: read
-      # Select checks reads this commit's other runs.
-      actions: read
-    with:
-      cross_compile: true
-
-  kernel-rig:
-    name: Kernel rig
-    uses: ./.github/workflows/kernel-rig.yml
-    permissions:
-      contents: read
-
-  packages:
-    name: Packages
-    uses: ./.github/workflows/release.yml
-    # No secrets: the signing steps skip without them. GitHub checks a called workflow's job
-    # permissions before the run, skipped jobs included, so the release job's contents: write must
-    # be granted here; packages_only skips that job, and no step that runs writes to the
-    # repository. actions: read is the Windows job's.
-    permissions:
-      contents: write
-      actions: read
-    with:
-      draft: false
-      packages_only: true
-
-  release-gate:
-    name: release-gate
-    needs: [ci, kernel-rig, packages]
-    if: always()
-    runs-on: blacksmith-2vcpu-ubuntu-2404
-    steps:
-      - name: Every part passed
-        env:
-          CI: ${{ needs.ci.result }}
-          KERNEL_RIG: ${{ needs.kernel-rig.result }}
-          PACKAGES: ${{ needs.packages.result }}
-        run: |
-          echo "ci=$CI kernel-rig=$KERNEL_RIG packages=$PACKAGES"
-          test "$CI" = success
-          test "$KERNEL_RIG" = success
-          test "$PACKAGES" = success

.github/workflows/release.yml

@@ -4,15 +4,11 @@
 # comes from [workspace.package] in Cargo.toml. An agent verifies the artifacts and publishes
 # the draft separately; see docs/releasing.md. Tags and pushes to main do not trigger releases.
 # At midnight Eastern, changed main commits build and publish a nightly pre-release.
-# A version with a suffix (0.2.0-rc.1) is a pre-release.
-# The macOS app is signed and notarized when the APPLE_* secrets exist. The Windows binaries and
-# MSI are Authenticode-signed through SignPath Foundation when the SIGNPATH_API_TOKEN secret exists
-# (see the windows job). Nothing else is signed yet.
+# A version with a suffix (0.2.0-rc.1) is a pre-release. Nothing is signed yet.
 #
 #   Linux x86_64, aarch64   AppImage (+ .zsync), .deb, .rpm, .flatpak, .snap, .tar.gz packaging/linux
-#   Arch Linux x86_64, aarch64  .pkg.tar.zst, repackaged from the .tar.gz         the arch job
 #   FreeBSD x86_64          .tar.gz (built in a FreeBSD VM)                        packaging/freebsd
-#   macOS universal         .dmg, and the CLI as a .zip (both archs built in parallel)  packaging/macos
+#   macOS universal         .dmg, and the CLI as a .zip                            packaging/macos
 #   Windows x64, x86, arm64 .msi and a portable .zip; x64 also the plain .exe      packaging/windows
 #   Web                     a .zip of the static site                              packaging/web
 #
@@ -21,10 +17,6 @@
 # releases/latest/download/<name> links in the README keep working across releases.
 #
 # A dry run: dispatch with draft=false (the default). Only the release branch may create drafts.
-# The release gate (release-gate.yml) calls it as such a dry run, without secrets (unsigned) and
-# without the release job (packages_only).
-# A dry run from any branch also test-signs the Windows files when SIGNPATH_API_TOKEN exists:
-#   gh workflow run release.yml --ref <branch> -f draft=false [-f signpath_signing_policy=test-signing]
 name: Release
 
 on:
@@ -39,29 +31,6 @@ on:
         description: "Create/update a draft (release branch only; off: build artifacts only)"
         type: boolean
         default: false
-      signpath_signing_policy:
-        description: "SignPath signing policy for the Windows files (empty: the repository variable, else test-signing)"
-        type: string
-        default: ""
-  # The release gate (release-gate.yml): a dry run (draft false) of every package and its checks.
-  # The event stays the caller's (workflow_dispatch), so a call runs as a dispatched dry run does.
-  # The gate passes no secrets, so nothing is signed (the signing steps skip without their
-  # secrets, as on a fork), and packages_only skips the release job (checksums, update signing,
-  # publishing).
-  workflow_call:
-    inputs:
-      packages_only:
-        description: "Build and check every package only: no release job"
-        type: boolean
-        default: false
-      draft:
-        description: "Create/update a draft (release branch only; off: build artifacts only)"
-        type: boolean
-        default: false
-      signpath_signing_policy:
-        description: "SignPath signing policy for the Windows files (empty: the repository variable, else test-signing)"
-        type: string
-        default: ""
 
 permissions:
   contents: read
@@ -228,66 +197,6 @@ jobs:
           path: dist/release/*.flatpak
           if-no-files-found: error
 
-  arch:
-    name: Arch Linux ${{ matrix.arch }}
-    needs: [version, linux]
-    if: needs.version.outputs.build == 'true'
-    # makepkg only repackages the tarball's prebuilt binaries, so both architectures build here.
-    runs-on: ubuntu-24.04
-    # A pre-release or nightly without an Arch package is still worth having; a stable release isn't.
-    continue-on-error: ${{ contains(needs.version.outputs.version, '-') }}
-    strategy:
-      fail-fast: false
-      matrix:
-        arch: [x86_64, aarch64]
-    env:
-      VERSION: ${{ needs.version.outputs.version }}
-    steps:
-      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
-      - uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2
-        with:
-          name: release-linux-${{ matrix.arch }}
-          path: dist/linux
-      # The Craft apps' shared Arch packaging (storytold/craft-common-actions, MIT OR Apache-2.0):
-      # makepkg in an archlinux:base-devel container. The package is named after the tarball's
-      # .desktop file (io.tangencylabs.solidcraft) and written as
-      # dist/release/solidcraft-<version>-linux-<arch>.pkg.tar.zst.
-      # An Arch version can't hold a hyphen, and the action reads the version from the tarball's name
-      # (a hyphenated one comes out as 0.0.0): 0.40.0-rc.1 goes in as 0.40.0rc.1, which pacman sorts
-      # before 0.40.0, and the package keeps the release's name.
-      - id: pkgver
-        name: Arch version
-        run: |
-          pkgver="${VERSION//-/}"
-          echo "pkgver=$pkgver" >>"$GITHUB_OUTPUT"
-          if [ "$pkgver" != "$VERSION" ]; then
-            cp "dist/linux/solidcraft-$VERSION-linux-$ARCH.tar.gz" "dist/linux/solidcraft-$pkgver-linux-$ARCH.tar.gz"
-          fi
-        env:
-          ARCH: ${{ matrix.arch }}
-      - uses: storytold/craft-common-actions/actions/arch-package@fa5ef18780cf5e7d5d3b8de068de56cffc83cac5 # main
-        with:
-          tarball: dist/linux/solidcraft-${{ steps.pkgver.outputs.pkgver }}-linux-${{ matrix.arch }}.tar.gz
-          arch: ${{ matrix.arch }}
-      - name: The package under the release's version
-        if: steps.pkgver.outputs.pkgver != env.VERSION
-        env:
-          ARCH: ${{ matrix.arch }}
-          PKGVER: ${{ steps.pkgver.outputs.pkgver }}
-        run: sudo mv "dist/release/solidcraft-$PKGVER-linux-$ARCH.pkg.tar.zst" "dist/release/solidcraft-$VERSION-linux-$ARCH.pkg.tar.zst"
-      - name: Check the package
-        env:
-          PKG: dist/release/solidcraft-${{ env.VERSION }}-linux-${{ matrix.arch }}.pkg.tar.zst
-        run: |
-          tar --zstd -tf "$PKG" | grep -E '^usr/bin/solidcraft$|^usr/bin/solidcraft-cli$|^usr/share/applications/io\.tangencylabs\.solidcraft\.desktop$'
-          tar --zstd -xOf "$PKG" .PKGINFO | grep -E '^(pkgname|pkgver|arch) = '
-          tar --zstd -xOf "$PKG" .PKGINFO | grep -qx 'pkgname = io.tangencylabs.solidcraft'
-      - uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
-        with:
-          name: release-arch-${{ matrix.arch }}
-          path: dist/release/*.pkg.tar.zst
-          if-no-files-found: error
-
 
 
   snap:
@@ -379,26 +288,18 @@ jobs:
             export CARGO_TARGET_DIR=/var/tmp/solidcraft-target CARGO_BUILD_JOBS=4
             bash packaging/freebsd/package.sh
             tar -tzf dist/release/solidcraft-*-freebsd-x86_64.tar.gz \
-              | grep -E '/bin/solidcraft$|/bin/solidcraft-cli$|/share/applications/io\.tangencylabs\.solidcraft\.desktop$|/share/doc/solidcraft/THIRD-PARTY-LICENSES\.txt$'
+              | grep -E '/bin/solidcraft$|/bin/solidcraft-cli$|/share/applications/ai\.storyteller\.solvecraft\.desktop$|/share/doc/solidcraft/THIRD-PARTY-LICENSES\.txt$'
       - uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
         with:
           name: release-freebsd-x86_64
           path: dist/release/*
           if-no-files-found: error
 
-  # The two halves of the universal binary build in parallel on their own runners (each alone
-  # took about half of the old single job's 45 minutes); `macos` below joins and packages them.
-  macos-build:
-    name: macOS build ${{ matrix.arch }}
+  macos:
+    name: macOS universal
     needs: version
     if: needs.version.outputs.build == 'true'
-    runs-on: macos-15
-    strategy:
-      fail-fast: false
-      matrix:
-        include:
-          - { arch: aarch64, target: aarch64-apple-darwin }
-          - { arch: x86_64, target: x86_64-apple-darwin }
+    runs-on: macos-14
     env:
       SOLIDCRAFT_VERSION: ${{ needs.version.outputs.version }}
       SOLIDCRAFT_BUILD_DATE: ${{ needs.version.outputs.date }}
@@ -406,58 +307,12 @@ jobs:
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
       - uses: dtolnay/rust-toolchain@stable
         with:
-          targets: ${{ matrix.target }}
+          targets: aarch64-apple-darwin, x86_64-apple-darwin
       - uses: Swatinem/rust-cache@6323deb102c322ba6fcbdcafc7e3dddab59af2b6 # v2.9.2
         with:
-          key: release-macos-${{ matrix.arch }}
-      - name: Build
-        run: packaging/macos/package.sh --build-only ${{ matrix.target }}
-      # Not named release-*: the release job collects every release-* artifact as an asset.
-      - uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
-        with:
-          name: macos-bin-${{ matrix.arch }}
-          path: |
-            target/${{ matrix.target }}/release/solidcraft
-            target/${{ matrix.target }}/release/solidcraft-cli
-            target/${{ matrix.target }}/release/solvecraft-cli
-          if-no-files-found: error
-
-  macos:
-    name: macOS universal
-    needs: [version, macos-build]
-    if: needs.version.outputs.build == 'true'
-    runs-on: macos-15
-    env:
-      SOLIDCRAFT_VERSION: ${{ needs.version.outputs.version }}
-      SOLIDCRAFT_BUILD_DATE: ${{ needs.version.outputs.date }}
-    steps:
-      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
-      - uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2
-        with:
-          name: macos-bin-aarch64
-          path: target/aarch64-apple-darwin/release
-      - uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2
-        with:
-          name: macos-bin-x86_64
-          path: target/x86_64-apple-darwin/release
-      - name: Set up Developer ID signing and notarization
-        # Optional until the APPLE_* secrets exist (docs/releasing.md, "macOS signing"). Without
-        # them (forks, dry runs) the app keeps its ad-hoc signature and is not notarized.
-        env:
-          APPLE_CERTIFICATE_P12: ${{ secrets.APPLE_CERTIFICATE_P12 }}
-          APPLE_CERTIFICATE_PASSWORD: ${{ secrets.APPLE_CERTIFICATE_PASSWORD }}
-          APPLE_API_KEY_P8: ${{ secrets.APPLE_API_KEY_P8 }}
-          APPLE_API_KEY_ID: ${{ secrets.APPLE_API_KEY_ID }}
-          APPLE_API_ISSUER: ${{ secrets.APPLE_API_ISSUER }}
-        run: packaging/macos/signing.sh --setup
-      - name: Join, sign, package and check (dmg, CLI zip; the dmg is mounted and checked)
-        run: |
-          # Artifacts don't keep the executable bit.
-          chmod +x target/*-apple-darwin/release/solidcraft target/*-apple-darwin/release/solidcraft-cli target/*-apple-darwin/release/solvecraft-cli
-          packaging/macos/package.sh --arch universal --skip-build ${MACOS_SIGN_IDENTITY:+--sign}
-      - name: Remove the signing keychain and API key
-        if: always()
-        run: packaging/macos/signing.sh --cleanup
+          key: release-macos-universal
+      - name: Build and package (dmg, CLI zip; the dmg is mounted and checked)
+        run: packaging/macos/package.sh --arch universal
       - uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
         with:
           name: release-macos
@@ -468,14 +323,7 @@ jobs:
     name: Windows ${{ matrix.arch }}
     needs: [version, icons]
     if: needs.version.outputs.build == 'true'
-    # Must stay a GitHub-hosted runner, like every job before it: SignPath's open-source policy
-    # only signs builds whose jobs all ran on GitHub-hosted runners.
     runs-on: windows-latest
-    # actions: read lets the SignPath action read this job's details and fetch the uploaded
-    # artifact with GITHUB_TOKEN (the workflow default above grants contents: read only).
-    permissions:
-      contents: read
-      actions: read
     strategy:
       fail-fast: false
       matrix:
@@ -486,16 +334,6 @@ jobs:
           - { arch: arm64, target: aarch64-pc-windows-msvc }
     env:
       SOLIDCRAFT_VERSION: ${{ needs.version.outputs.version }}
-      # Authenticode signing through SignPath Foundation (docs/releasing.md, "Windows signing").
-      # Only when the API token secret exists: forks and repositories without it build unsigned,
-      # exactly as before. `if:` can't read secrets, so the check goes through this variable.
-      SIGN_WINDOWS: ${{ secrets.SIGNPATH_API_TOKEN != '' }}
-      # The one switch between the self-signed test certificate (test-signing) and the real one
-      # (release-signing): a dispatch input, else the SIGNPATH_SIGNING_POLICY repository variable,
-      # else test-signing.
-      SIGNPATH_SIGNING_POLICY: ${{ inputs.signpath_signing_policy || vars.SIGNPATH_SIGNING_POLICY || 'test-signing' }}
-      SIGNPATH_ORGANIZATION_ID: fa603ff4-c702-404b-8588-a524371c7a4e
-      SIGNPATH_PROJECT_SLUG: solidcraft
     steps:
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
       - uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2
@@ -514,109 +352,10 @@ jobs:
           dotnet tool install --global wix --version 5.0.2
           wix extension add -g WixToolset.UI.wixext/5.0.2 WixToolset.Util.wixext/5.0.2
       - name: Build and package (msi, portable zip)
-        if: env.SIGN_WINDOWS != 'true'
         shell: pwsh
         env:
           SOLIDCRAFT_ICONS: ${{ github.workspace }}/icons
         run: ./packaging/windows/package.ps1 -Arch ${{ matrix.arch }}
-
-      # ---- signed path ---------------------------------------------------------------------------
-      # SignPath's GitHub integration (docs.signpath.io/trusted-build-systems/github): the files go
-      # up as a workflow artifact, SignPath fetches that artifact itself (so it can verify it came
-      # from this workflow run), signs it, and the action downloads the signed copy. GitHub stores
-      # artifacts as zips, so packaging/windows/signpath-artifact-configuration.xml (pasted into the
-      # SignPath project) describes a zip holding the files at its top level.
-      # Two rounds: the .exe files first, so the MSI, the portable zip and the plain .exe all carry
-      # signed binaries; then the MSI built from them.
-      - name: Build and stage the binaries for signing
-        if: env.SIGN_WINDOWS == 'true'
-        shell: pwsh
-        env:
-          SOLIDCRAFT_ICONS: ${{ github.workspace }}/icons
-        run: ./packaging/windows/package.ps1 -Arch ${{ matrix.arch }} -Phase stage
-      - name: Upload the unsigned binaries
-        id: unsigned-exes
-        if: env.SIGN_WINDOWS == 'true'
-        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
-        with:
-          name: signpath-unsigned-exes-windows-${{ matrix.arch }}
-          path: target/windows-package/${{ matrix.arch }}/*.exe
-          if-no-files-found: error
-          retention-days: 3
-      - name: Sign the binaries (SignPath, ${{ env.SIGNPATH_SIGNING_POLICY }})
-        if: env.SIGN_WINDOWS == 'true'
-        uses: signpath/github-action-submit-signing-request@f6d04783b4569d051e0c80105fe66e82819d0092 # v3.0
-        with:
-          api-token: ${{ secrets.SIGNPATH_API_TOKEN }}
-          organization-id: ${{ env.SIGNPATH_ORGANIZATION_ID }}
-          project-slug: ${{ env.SIGNPATH_PROJECT_SLUG }}
-          signing-policy-slug: ${{ env.SIGNPATH_SIGNING_POLICY }}
-          github-artifact-id: ${{ steps.unsigned-exes.outputs.artifact-id }}
-          wait-for-completion: true
-          # release-signing requests wait for a person to approve them in SignPath; give that an
-          # hour instead of the default 10 minutes. test-signing requests finish in seconds.
-          wait-for-completion-timeout-in-seconds: 3600
-          output-artifact-directory: target/windows-package/signed-exes-${{ matrix.arch }}
-      - name: Put the signed binaries in place
-        if: env.SIGN_WINDOWS == 'true'
-        shell: pwsh
-        run: |
-          $ErrorActionPreference = 'Stop'
-          $stage = "target/windows-package/${{ matrix.arch }}"
-          foreach ($exe in 'solidcraft.exe', 'solidcraft-cli.exe', 'solvecraft-cli.exe') {
-            $signed = "target/windows-package/signed-exes-${{ matrix.arch }}/$exe"
-            # The artifact configuration matches each file optionally, so check that every file
-            # actually came back signed rather than trusting the request's success.
-            $sig = Get-AuthenticodeSignature $signed
-            if (-not $sig.SignerCertificate) { throw "$exe came back from SignPath without a signature ($($sig.Status))" }
-            # The test certificate is self-signed, so Status is not Valid until release-signing.
-            Write-Output "$exe signed by $($sig.SignerCertificate.Subject) (status: $($sig.Status))"
-            Copy-Item -Force $signed "$stage/$exe"
-          }
-      - name: Package the signed binaries (msi, portable zip)
-        if: env.SIGN_WINDOWS == 'true'
-        shell: pwsh
-        env:
-          SOLIDCRAFT_ICONS: ${{ github.workspace }}/icons
-        run: ./packaging/windows/package.ps1 -Arch ${{ matrix.arch }} -Phase package
-      - name: Upload the unsigned MSI
-        id: unsigned-msi
-        if: env.SIGN_WINDOWS == 'true'
-        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
-        with:
-          name: signpath-unsigned-msi-windows-${{ matrix.arch }}
-          path: dist/release/*.msi
-          if-no-files-found: error
-          retention-days: 3
-      - name: Sign the MSI (SignPath, ${{ env.SIGNPATH_SIGNING_POLICY }})
-        if: env.SIGN_WINDOWS == 'true'
-        uses: signpath/github-action-submit-signing-request@f6d04783b4569d051e0c80105fe66e82819d0092 # v3.0
-        with:
-          api-token: ${{ secrets.SIGNPATH_API_TOKEN }}
-          organization-id: ${{ env.SIGNPATH_ORGANIZATION_ID }}
-          project-slug: ${{ env.SIGNPATH_PROJECT_SLUG }}
-          signing-policy-slug: ${{ env.SIGNPATH_SIGNING_POLICY }}
-          github-artifact-id: ${{ steps.unsigned-msi.outputs.artifact-id }}
-          wait-for-completion: true
-          wait-for-completion-timeout-in-seconds: 3600
-          output-artifact-directory: target/windows-package/signed-msi-${{ matrix.arch }}
-      - name: Put the signed MSI in place
-        if: env.SIGN_WINDOWS == 'true'
-        shell: pwsh
-        run: |
-          $ErrorActionPreference = 'Stop'
-          $msi = Get-Item "dist/release/*.msi"
-          $signed = "target/windows-package/signed-msi-${{ matrix.arch }}/$($msi.Name)"
-          $sig = Get-AuthenticodeSignature $signed
-          if (-not $sig.SignerCertificate) { throw "$($msi.Name) came back from SignPath without a signature ($($sig.Status))" }
-          Write-Output "$($msi.Name) signed by $($sig.SignerCertificate.Subject) (status: $($sig.Status))"
-          Copy-Item -Force $signed $msi.FullName
-          "Windows ${{ matrix.arch }}: Authenticode-signed through SignPath (policy $env:SIGNPATH_SIGNING_POLICY, $($sig.SignerCertificate.Subject))." >> $env:GITHUB_STEP_SUMMARY
-      - name: Note the unsigned build
-        if: env.SIGN_WINDOWS != 'true'
-        shell: pwsh
-        run: '"Windows ${{ matrix.arch }}: unsigned (no SIGNPATH_API_TOKEN secret)." >> $env:GITHUB_STEP_SUMMARY'
-
       - uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2
         with:
           name: release-windows-${{ matrix.arch }}
@@ -653,9 +392,8 @@ jobs:
 
   release:
     name: GitHub Release or dry-run artifacts
-    needs: [version, linux, flatpak, arch, snap, freebsd, macos, windows, web]
-    # Not for the release gate (packages_only): it builds and checks the packages, nothing more.
-    if: needs.version.outputs.build == 'true' && !inputs.packages_only
+    needs: [version, linux, flatpak, snap, freebsd, macos, windows, web]
+    if: needs.version.outputs.build == 'true'
     runs-on: ubuntu-latest
     permissions:
       contents: write
@@ -680,7 +418,7 @@ jobs:
           shopt -s nullglob
           for f in "solidcraft-$VERSION-"*; do
             case "$f" in
-              *.msi | *-portable.zip | *.dmg | *.AppImage | *.deb | *.rpm | *.flatpak | *.snap | *.pkg.tar.zst)
+              *.msi | *-portable.zip | *.dmg | *.AppImage | *.deb | *.rpm | *.flatpak | *.snap)
                 cp -- "$f" "solidcraft-${f#"solidcraft-$VERSION-"}" ;;
             esac
           done
@@ -725,16 +463,10 @@ jobs:
         run: |
           tag="v$VERSION"
           sha256sum --check SHA256SUMS.txt
-          # Generated notes start at the newest published release, pre-releases included. Left
-          # to GitHub they start at the Latest stable one, and the list outgrows the 125,000
-          # characters a release body may have.
-          start=()
-          prev="$(gh release list --exclude-drafts --limit 30 --json tagName,publishedAt --jq 'sort_by(.publishedAt) | last | .tagName // empty')"
-          if [ -n "$prev" ]; then start=(--notes-start-tag "$prev"); fi
           # Stage all packages before publishing. Published tags are never replaced.
           gh release create "$tag" --draft --prerelease --latest=false \
             --title "SolidCraft v$VERSION (nightly)" --target "$GITHUB_SHA" \
-            --notes-file ../notes.md --generate-notes "${start[@]}" -- *
+            --notes-file ../notes.md --generate-notes -- *
           gh release edit "$tag" --draft=false --prerelease --latest=false
           echo "### Published nightly: $tag (\`${GITHUB_SHA::9}\`)" >>"$GITHUB_STEP_SUMMARY"
       - name: Create or update the draft release
@@ -766,13 +498,8 @@ jobs:
               --target "$GITHUB_SHA" --prerelease="$PRERELEASE"
             gh release upload "$tag" --clobber -- *
           else
-            # As for nightlies: start the generated notes at the newest published release.
-            start=()
-            prev="$(gh release list --exclude-drafts --limit 30 --json tagName,publishedAt --jq 'sort_by(.publishedAt) | last | .tagName // empty')"
-            if [ -n "$prev" ]; then start=(--notes-start-tag "$prev"); fi
             gh release create "$tag" --draft --title "SolidCraft v$VERSION" \
-              --target "$GITHUB_SHA" --notes-file ../notes.md --generate-notes "${start[@]}" \
-              "${pre[@]}" -- *
+              --target "$GITHUB_SHA" --notes-file ../notes.md --generate-notes "${pre[@]}" -- *
           fi
           {
             echo "Draft **SolidCraft v$VERSION** at \`${GITHUB_SHA::9}\`:"

.github/workflows/solidcore-mirror.yml

@@ -1,142 +0,0 @@
-# Mirror SolidCraft's vendored kernel to its own repository.
-#
-# `solidcore` is the SolidCore kernel, vendored with `git subtree`, so `main` keeps
-# SolidCore's history. This workflow pushes the commits under `solidcore` back to
-# tangency-labs/solidcore, so the same history can be read from either repository.
-#
-# It mirrors incrementally (scripts/ci/solidcore-mirror.sh): one mirror commit per new main
-# commit that changes solidcore/, a merged branch's commits included, each with exactly that
-# commit's solidcore/ tree, its author, dates and message, and a `solidcraft: <sha>` trailer. The
-# last one records the main commit it reached (`solidcraft-main:`), where the next run starts; the
-# first run starts from the vendoring merge. Never `git subtree split`: it replays main's whole
-# history (about 100 minutes) and overflows dash's recursion limit.
-#
-# The push is always a fast-forward. A force push would rewrite SolidCore's history, so the
-# workflow stops instead when the two have diverged, or when a mirror commit would not be the
-# kernel alone.
-#
-# SolidCore's `main` is protected. The deploy key must have write access to that repository and
-# must bypass its `protect-main` ruleset (see the pull request that added this file).
-name: Mirror to SolidCore
-
-on:
-  push:
-    branches: [main]
-    # Only a change to the vendored kernel can move SolidCore. Editing this file rehearses it.
-    paths:
-      - "solidcore/**"
-      - ".github/workflows/solidcore-mirror.yml"
-      - "scripts/ci/solidcore-mirror.sh"
-  workflow_dispatch:
-
-permissions:
-  contents: read
-
-# One run at a time, never cancelled: two pushes to SolidCore must not race.
-concurrency:
-  group: solidcore-mirror
-  cancel-in-progress: false
-
-env:
-  # The directory in SolidCraft that is the whole of SolidCore.
-  PREFIX: solidcore
-  SOLIDCORE_URL: git@github.com:tangency-labs/solidcore.git
-  SOLIDCORE_BRANCH: main
-
-jobs:
-  mirror:
-    name: Mirror main's kernel commits
-    runs-on: ubuntu-24.04
-    # Incremental: seconds per run.
-    timeout-minutes: 15
-    defaults:
-      run:
-        shell: bash
-    steps:
-      # Always the real main, and its whole history: the mirror walks main's ancestry since the
-      # last mirrored commit, which a shallow clone would not have.
-      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
-        with:
-          ref: main
-          fetch-depth: 0
-          persist-credentials: false
-
-      # The private half of a deploy key with write access to tangency-labs/solidcore. Fail here,
-      # with a readable message, instead of somewhere inside git.
-      - name: Set up the SolidCore deploy key
-        env:
-          SOLIDCORE_DEPLOY_KEY: ${{ secrets.SOLIDCORE_DEPLOY_KEY }}
-        run: |
-          if [ -z "$SOLIDCORE_DEPLOY_KEY" ]; then
-            echo "::error::The SOLIDCORE_DEPLOY_KEY secret is not set. Add the private half of a deploy key that has write access to tangency-labs/solidcore under Settings > Secrets and variables > Actions."
-            exit 1
-          fi
-          install -d -m 700 "$RUNNER_TEMP/ssh"
-          (umask 077 && printf '%s\n' "$SOLIDCORE_DEPLOY_KEY" > "$RUNNER_TEMP/ssh/solidcore")
-          # The fetch and the push inherit this, so both use the same key.
-          printf '%s\n' "GIT_SSH_COMMAND=ssh -i $RUNNER_TEMP/ssh/solidcore -o IdentitiesOnly=yes -o BatchMode=yes -o StrictHostKeyChecking=accept-new" >> "$GITHUB_ENV"
-
-      # Decide, before touching SolidCore, whether there is anything to mirror and whether it is a
-      # fast-forward. There are three states: in sync, SolidCore behind (push), diverged (fail).
-      - name: Check what needs mirroring
-        id: check
-        run: |
-          set -euo pipefail
-
-          # The remote tip, so the ancestry tests below compare against what SolidCore has.
-          if ! git fetch --no-tags "$SOLIDCORE_URL" "$SOLIDCORE_BRANCH"; then
-            echo "::error::Could not fetch $SOLIDCORE_URL $SOLIDCORE_BRANCH. Check that SOLIDCORE_DEPLOY_KEY is the private half of a solidcore deploy key with write access, and that the branch exists."
-            exit 1
-          fi
-          REMOTE=$(git rev-parse FETCH_HEAD)
-
-          # Mirror commits for main's solidcore/ commits since the last run, built incrementally on
-          # SolidCore's tip (never `git subtree split`, which replays main's whole history). The
-          # script fails on divergence or anything that is not a fast-forward of SolidCore's tip.
-          bash scripts/ci/solidcore-mirror.sh "$REMOTE" HEAD > "$RUNNER_TEMP/mirror.out"
-          cat "$RUNNER_TEMP/mirror.out"
-          STATE=$(sed -n 's/^state=//p' "$RUNNER_TEMP/mirror.out")
-          SPLIT=$(sed -n 's/^tip=//p' "$RUNNER_TEMP/mirror.out")
-          COUNT=$(sed -n 's/^count=//p' "$RUNNER_TEMP/mirror.out")
-          {
-            echo "state=$STATE"
-            echo "split=$SPLIT"
-            echo "remote=$REMOTE"
-          } >> "$GITHUB_OUTPUT"
-
-          {
-            echo "### Mirror to SolidCore"
-            echo
-            echo "| | commit |"
-            echo "| --- | --- |"
-            echo "| SolidCraft \`$PREFIX\` mirror ($COUNT new) | \`$SPLIT\` |"
-            echo "| solidcore \`$SOLIDCORE_BRANCH\` | \`$REMOTE\` |"
-            echo
-            case "$STATE" in
-              in-sync) echo "**In sync.** Nothing to mirror." ;;
-              fast-forward) echo "**Fast-forward push needed.** SolidCore is behind." ;;
-            esac
-          } >> "$GITHUB_STEP_SUMMARY"
-
-      # Push the checked commit itself. A plain push is also the safety net: git refuses a
-      # non-fast-forward.
-      - name: Push the mirror commit
-        if: steps.check.outputs.state == 'fast-forward'
-        env:
-          SPLIT: ${{ steps.check.outputs.split }}
-        run: |
-          set -euo pipefail
-
-          if ! git push "$SOLIDCORE_URL" "$SPLIT:refs/heads/$SOLIDCORE_BRANCH"; then
-            echo "::error::Push to solidcore failed. If git names a protected branch or GH006, SOLIDCORE_DEPLOY_KEY has no write access or does not bypass solidcore's protect-main ruleset. If git names a non-fast-forward, solidcore moved during this run; re-run."
-            exit 1
-          fi
-
-          # Confirm SolidCore now has exactly the commit this run checked.
-          PUSHED=$(git ls-remote "$SOLIDCORE_URL" "refs/heads/$SOLIDCORE_BRANCH" | cut -f1)
-          if [ "$PUSHED" != "$SPLIT" ]; then
-            echo "::error::solidcore $SOLIDCORE_BRANCH is $PUSHED after the push, expected $SPLIT."
-            exit 1
-          fi
-
-          { echo; echo "**Mirrored.** solidcore \`$SOLIDCORE_BRANCH\` is now \`$SPLIT\`."; } >> "$GITHUB_STEP_SUMMARY"

.github/workflows/solidcore-nightly.yml

@@ -1,69 +0,0 @@
-# SolidCore's slow checks, too expensive for every pull request: SolidCore's own nightly
-# (solidcore/.github/workflows/nightly.yml), run from solidcore/, since GitHub does not run a
-# subfolder's workflows.
-name: SolidCore nightly
-
-on:
-  schedule:
-    - cron: "41 3 * * *"
-  workflow_dispatch:
-
-permissions:
-  contents: read
-
-concurrency:
-  group: solidcore-nightly
-  cancel-in-progress: false
-
-env:
-  CARGO_TERM_COLOR: always
-  CARGO_INCREMENTAL: 0
-
-jobs:
-  slow:
-    name: SolidCore slow checks
-    runs-on: blacksmith-8vcpu-ubuntu-2404
-    timeout-minutes: 240
-    defaults:
-      run:
-        working-directory: solidcore
-    steps:
-      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
-      - name: Toolchain (solidcore/rust-toolchain.toml)
-        run: rustup show active-toolchain || rustup toolchain install
-
-      # solidcore/.github/actions/upstream, run from solidcore/ (a composite action's steps would
-      # run from the repository root): usd-brep at the pin in scripts/upstream-pin.env.
-      - name: Upstream sources (TestFiles)
-        run: |
-          while IFS='=' read -r k v; do
-            case "$k" in
-              UPSTREAM_REPO|UPSTREAM_VERSION|UPSTREAM_COMMIT) export "$k=$v" ;;
-            esac
-          done < scripts/upstream-pin.env
-          git init upstream
-          git -C upstream remote add origin "$UPSTREAM_REPO"
-          git -C upstream fetch --depth 1 origin "$UPSTREAM_COMMIT" \
-            || git -C upstream fetch origin
-          git -C upstream checkout --detach "$UPSTREAM_COMMIT"
-
-      - uses: Swatinem/rust-cache@6323deb102c322ba6fcbdcafc7e3dddab59af2b6 # v2.9.2
-        with:
-          workspaces: "solidcore -> bin"
-          key: solidcore-nightly
-
-      # Owner-approved (2026-10-26): a regression too slow for every PR (~3 min): the
-      # tiny-scale torus booleans finish under MAX_SOLVE_BRANCHES (geom::global_solver).
-      - name: Slow regressions
-        if: ${{ !cancelled() }}
-        run: cargo test -p solidcore --release --test max_solve_branches_tiny_torus -- --ignored
-
-      # Owner-approved (2026-10-27): the SolidCraft whole-corpus harness checks (every
-      # case reaches a verdict; every deferral names a plan unit) take minutes even
-      # optimised, so they run here instead of on every pull request.
-      - name: SolidCraft corpus harness checks
-        if: ${{ !cancelled() }}
-        run: >-
-          cargo test --profile goldens -p goldens --lib -- --ignored --exact
-          solidcraft::tests::every_case_reaches_a_verdict_without_a_harness_error
-          solidcraft::tests::deferrals_name_a_plan_unit

.github/workflows/solidcore-pages.yml

@@ -1,88 +0,0 @@
-# SolidCore's progress site (solidcore/site/build.py) and unit checklist
-# (solidcore/harness/plan/progress.py, published as PROGRESS.md), at the same address as before:
-# https://tangency-labs.github.io/solidcore/. SolidCore's own Pages workflow
-# (solidcore/.github/workflows/pages.yml), ported: GitHub does not run a subfolder's workflows.
-#
-# This repository's Pages site is SolidCraft's book and web app (pages.yml), and a repository has
-# one Pages site, so this one is pushed to tangency-labs/solidcore's gh-pages branch with the
-# mirror's deploy key (SOLIDCORE_DEPLOY_KEY, solidcore-mirror.yml). That repository's Settings ->
-# Pages -> Source must be "Deploy from a branch", gh-pages, / (root).
-#
-# The site reads SolidCore's history (its progress timeline) and paths from its repository root,
-# so it is built from a checkout of the mirror, tangency-labs/solidcore, whose main is exactly
-# this repository's solidcore/ once the mirror has run.
-#
-# Triggers:
-# - workflow_run of "Mirror to SolidCore" on main: every mirrored change.
-# - schedule (hourly): claims from open "port: <unit id>" pull requests (now in this repository),
-#   and main's newest solids report (SolidCore checks upload it). Not after every CI run on main,
-#   as SolidCore's did: SolidCraft's main runs CI far more often.
-# - workflow_dispatch: manual rebuild.
-name: SolidCore pages
-
-on:
-  workflow_run:
-    workflows: ["Mirror to SolidCore"]
-    types: [completed]
-    branches: [main]
-  schedule:
-    - cron: "17 * * * *"
-  workflow_dispatch:
-
-permissions:
-  contents: read
-  actions: read  # download main's solids report
-  pull-requests: read  # open "port:" PRs for the checklist's claims
-
-concurrency:
-  group: solidcore-pages
-  cancel-in-progress: false
-
-jobs:
-  build:
-    name: Build and publish SolidCore's site
-    runs-on: blacksmith-2vcpu-ubuntu-2404
-    timeout-minutes: 30
-    steps:
-      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
-        with:
-          repository: tangency-labs/solidcore
-          ref: main
-          fetch-depth: 0 # full history for the progress timeline
-          persist-credentials: false
-      # Main's solids report comes from this repository's CI now (SolidCore checks, tests).
-      - name: Fetch main's solids report
-        env:
-          GH_TOKEN: ${{ github.token }}
-          GITHUB_REPOSITORY: ${{ github.repository }}
-        run: scripts/fetch-solids.sh || echo "no solids report; the Solids page will say so"
-      - name: Test checklist generator
-        run: python3 -m unittest discover -s harness/plan -p 'test_*.py'
-      - name: Generate checklist
-        env:
-          GH_TOKEN: ${{ github.token }}
-          GH_REPO: ${{ github.repository }}
-        run: python3 harness/plan/progress.py --prs
-      # The site links and its own address are SolidCore's.
-      - name: Build site
-        run: GITHUB_REPOSITORY=tangency-labs/solidcore python3 site/build.py --out _site
-      - name: Publish to tangency-labs/solidcore's gh-pages
-        env:
-          SOLIDCORE_DEPLOY_KEY: ${{ secrets.SOLIDCORE_DEPLOY_KEY }}
-          SHA: ${{ github.sha }}
-        run: |
-          if [ -z "$SOLIDCORE_DEPLOY_KEY" ]; then
-            echo "::error::The SOLIDCORE_DEPLOY_KEY secret is not set (see solidcore-mirror.yml)."
-            exit 1
-          fi
-          install -d -m 700 "$RUNNER_TEMP/ssh"
-          (umask 077 && printf '%s\n' "$SOLIDCORE_DEPLOY_KEY" > "$RUNNER_TEMP/ssh/solidcore")
-          export GIT_SSH_COMMAND="ssh -i $RUNNER_TEMP/ssh/solidcore -o IdentitiesOnly=yes -o BatchMode=yes -o StrictHostKeyChecking=accept-new"
-          touch _site/.nojekyll
-          cd _site
-          git init -q -b gh-pages
-          git add -A
-          git -c user.name="github-actions[bot]" -c user.email="41898282+github-actions[bot]@users.noreply.github.com" \
-            commit -q -m "Site for solidcore $(git -C .. rev-parse --short HEAD) (SolidCraft $SHA)"
-          # The branch holds only the latest site: replacing it is the deploy.
-          git push -q --force git@github.com:tangency-labs/solidcore.git gh-pages

.github/workflows/solidcore-release.yml

@@ -1,54 +0,0 @@
-# Publishes the vendored SolidCore kernel's `solidcore` crate to crates.io when a tag
-# "solidcore-v<version>" is pushed, e.g. `git tag solidcore-v0.0.1 && git push origin solidcore-v0.0.1`.
-# SolidCore's own release workflow (solidcore/.github/workflows/release.yml), run from solidcore/:
-# GitHub does not run a subfolder's workflows. SolidCraft's releases use no tag trigger, so the
-# solidcore- prefix keeps the two apart.
-# Needs the repository secret CRATES_IO_TOKEN (crates.io token, scope publish-update), in the
-# crates-io environment.
-name: Release SolidCore
-
-on:
-  push:
-    tags: ["solidcore-v*"]
-
-permissions:
-  contents: read
-
-jobs:
-  publish:
-    runs-on: ubuntu-latest
-    environment: crates-io
-    defaults:
-      run:
-        working-directory: solidcore
-    steps:
-      # Pinned by SHA and no third-party actions: this job holds the crates.io token.
-      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
-        with:
-          persist-credentials: false
-          fetch-depth: 0 # full history, for the on-main check below
-      - name: Tagged commit is on main
-        run: |
-          git fetch --no-tags origin +refs/heads/main:refs/remotes/origin/main
-          if ! git merge-base --is-ancestor "$GITHUB_SHA" origin/main; then
-            echo "::error::$GITHUB_REF_NAME ($GITHUB_SHA) is not an ancestor of origin/main"
-            exit 1
-          fi
-      - name: Toolchain (solidcore/rust-toolchain.toml)
-        run: rustup show active-toolchain || rustup toolchain install
-      - name: Tag matches crate version
-        run: |
-          want="${GITHUB_REF_NAME#solidcore-v}"
-          have="$(cargo metadata --no-deps --format-version 1 \
-            | python3 -c 'import json,sys; print(next(p["version"] for p in json.load(sys.stdin)["packages"] if p["name"]=="solidcore"))')"
-          echo "tag $want, solidcore/crates/solidcore/Cargo.toml $have"
-          test "$want" = "$have"
-      - run: cargo test -p solidcore --locked
-      - run: rustup target add wasm32-unknown-unknown && cargo check -p solidcore --locked --target wasm32-unknown-unknown
-      # Package and verify without the token first; only the real publish sees it.
-      - name: Publish (dry run)
-        run: cargo publish -p solidcore --locked --dry-run
-      - name: Publish
-        run: cargo publish -p solidcore --locked
-        env:
-          CARGO_REGISTRY_TOKEN: ${{ secrets.CRATES_IO_TOKEN }}

.gitignore

@@ -11,7 +11,3 @@ __pycache__/
 
 # cargo-mutants output (docs/mutation-testing.md)
 mutants.out*/
-
-# external corpus downloads (cargo xtask external-corpus, #1397): fetched at test time,
-# hash-pinned in tests/external-corpus.toml; never commit case data
-/corpus/

AGENTS.md

@@ -1,51 +1,216 @@
-# SolidCraft: instructions for agents
+# SolidCraft — instructions for agents
 
-SolidCraft is a clean-room, pure-Rust parametric 3D CAD app (sketch solver, feature timeline, B-rep kernel, an egui UI that agents drive). This file is a router: the hard rules, then the skill to read for your task. Humans: CONTRIBUTING.md.
+SolidCraft is a clean-room, open-source, pure-Rust parametric 3D CAD application:
+sketches with a constraint solver, a parametric timeline of features, a B-rep
+kernel, and a desktop UI that agents can drive. Projects published by
+[storytold](https://github.com/storytold) can serve as references for implementation conventions.
+Any code adapted from other projects (MIT OR Apache-2.0) is noted in ATTRIBUTION.md.
 
-## Start here
-Work: ROADMAP.md, "Where help is wanted most" in CONTRIBUTING.md, issues labelled `help wanted`, `good first issue`, `needs-triage`; architecture in `docs/architecture.md`. Local `plan/` notes are optional.
+## Product name
+SolidCraft everywhere: crates `solidcraft-*`, binaries `solidcraft` and `solidcraft-cli`,
+`.solidcraft` designs, the `solidcraft/N` format tag, `SOLIDCRAFT_*` environment variables,
+settings and recovery folders, the MCP server name, docs, CI and packaging. The old name
+survives only in the explicit compatibility shims listed in `docs/compatibility.md`; don't add
+new uses of it anywhere else. Public docs/web/Flatpak deployments use project Pages
+`/solidcraft/`; do not add permanent old-name Pages aliases.
 
-## Hard rules (what enforces each)
-- Independent: never copy another product's code, icons, text or templates; never drive or take data from commercial CAD. `skills/solidcraft-ground-rules/SKILL.md`.
-- No GPL/LGPL/AGPL code, not even reading it (OpenCASCADE, FreeCAD, SolveSpace, CadQuery, LibreCAD, QCAD): `cargo xtask licences --check`.
-- Every asset is original or openly licensed with a row in ATTRIBUTION.md; read `assets/AGENTS.md` before icon work: `cargo xtask assets`, `cargo xtask icons`.
-- Never crash: no unwrap/expect/panic/unsafe in non-test code, errors are `Result`, input is hostile: clippy `-D warnings`, `hostile_params_never_panic`.
-- Model decisions (what an operation does, which bodies it touches, which face or edge a point or name means, depths, nearness) use exact geometry; a mesh is for display, export, previews and mesh bodies (`xtask/mesh-decisions.txt` only shrinks): `cargo xtask mesh-decisions`.
-- Everything is a command and programmatic calls never open dialogs: `skills/solidcraft-commands/SKILL.md`.
-- Layering; only `crates/kernel` uses truck; solidcore only via `solidcore-ops`/`-tess`/`-record` (`xtask/solidcore-seam.txt`): `cargo xtask layers`; see `solidcore/docs/layers.md`.
-- One outer UI container, one camera path (`navigation::handle`), colours from theme tokens: `cargo xtask ui-containers`.
-- Application code is Rust only and builds for wasm: `cargo xtask wasm`, `cargo xtask web-offline-test`.
-- The product name is SolidCraft; the old name lives only in `docs/compatibility.md`.
-- Sorted lists (message catalogs, `mod` lines, languages) stay sorted: `cargo xtask lists`. Never edit generated files (`docs/features.md`, `THIRD-PARTY-LICENSES.txt`) in a PR.
-- A design-format change is ONE new file in `crates/doc/src/format/pending/`: `scripts/test-format-pending.sh`.
-- A command has input and output schemas (will become required; `schema/unconverted.txt` only shrinks): `skills/solidcraft-commands/SKILL.md`.
-- New UI strings go in `assets/locales/pending/<slug>.json`, ATTRIBUTION rows in `attribution/pending/<slug>.md`: `cargo xtask lists`.
-- A changed default keeps the old behaviour behind a preference and fills the PR's `Changes a default:` line: `pr-checks.yml`.
-- A regression test goes in the area's existing test file, never a per-bug file (#3226).
-- Look at open PRs first, claim with a draft PR (lowest number wins), one topic per PR: `skills/solidcraft-contributing/SKILL.md`.
-- A PR's title and first sentence make sense to someone who never saw your chat or the issue: `skills/solidcraft-contributing/SKILL.md`.
-- Code, comments, commit messages and docs are in English; independent work runs in parallel, dependent work stays sequential: `skills/solidcraft-contributing/SKILL.md` ("Working as an agent").
-- Show observable changes with real screenshots or a recording, captured yourself.
-- Run `cargo xtask ci` before every commit. `cargo xtask skills` keeps this file and `skills/` honest.
+## Start every session here
+1. Read `plan/STATUS.md` (current milestone, next task), then the task in `plan/execution-plan.md`
+   and the relevant `plan/architecture.md` section.
+2. Kernel and library decisions: `plan/adr/0001-geometry-kernel.md` (what we may depend on, what
+   is rejected for licence reasons).
+3. Follow the autonomous operation protocol (`plan/execution-plan.md` §6). Don't stop to ask
+   unless it lists the decision as the owner's.
 
-## Working on X: read the skill first
-| Working on | Read |
-|---|---|
-| A PR, a claim, review, CI or evidence | `skills/solidcraft-contributing/SKILL.md` |
-| Licences, assets, clean-room, the name | `skills/solidcraft-ground-rules/SKILL.md` |
-| Non-test Rust, hostile input, a crash report | `skills/solidcraft-crash-safety/SKILL.md` |
-| A command, a crate boundary | `skills/solidcraft-commands/SKILL.md` |
-| SolidCraft or solidcore, kernel, geometry | `skills/solidcraft-layers/SKILL.md` |
-| A dialog, panel, camera, icon, colour | `skills/solidcraft-ui/SKILL.md` |
-| Labels, messages, translations | `skills/solidcraft-ui-text/SKILL.md` |
-| Saving something new in a design, import, export | `skills/solidcraft-file-formats/SKILL.md` |
-| Preferences, a changed default | `skills/solidcraft-preferences/SKILL.md` |
-| Writing or running tests | `skills/solidcraft-tests/SKILL.md` |
-| Slow work, the window thread, wasm | `skills/solidcraft-performance/SKILL.md` |
-| Releases, installers, packages | `skills/solidcraft-packaging/SKILL.md` |
-| Running the app, control channel, MCP tools | `skills/solidcraft-agent-tools/SKILL.md` |
-| Building a part over MCP | `skills/solidcraft-modeling/SKILL.md` |
-| Changing an existing design | `skills/solidcraft-editing/SKILL.md` |
-| A bug report, a crash, a wrong result | `skills/solidcraft-reporting/SKILL.md` |
-| Checking, porting, designs in git | `skills/solidcraft-checking/SKILL.md` |
-| Assemblies, joints, motion | `skills/solidcraft-mechanisms/SKILL.md` |
+`plan/` is gitignored (local only).
+
+## Never crash
+People trust SolidCraft with their designs; a crash loses their work. **This outranks feature work.**
+- **No panics in non-test code:** no `unwrap()`, `expect()`, `panic!`, `unreachable!`, `todo!`,
+  `unimplemented!`; no `unsafe` (`unsafe_code = "forbid"`). The exceptions, in the app crate and in
+  `crates/threedx-client` (which deny it instead), have no safe API: the macOS-only
+  `crates/threedx-client/src/macos.rs` (loads the 3Dconnexion driver's client framework at run time
+  and calls through its function pointers), two functions in
+  `apps/solidcraft/src/open_documents.rs` (macOS hands Finder files only to an Objective-C
+  method), the Windows-only `apps/solidcraft/src/native_crash.rs` (the exception filter that
+  records crashes inside native code such as graphics drivers), the Windows-only
+  `apps/solidcraft/src/native_frame.rs` (the window procedure that answers the resize-border hit
+  test of the window without OS decorations) and the Windows-only
+  `apps/solidcraft/src/space_mouse/windows_hid.rs` (asks Plug and Play which HID interfaces are 3D
+  mice, so no other device is sent anything).
+- **Errors are `Result<T, E>`** through the crate's error type and `?`. An unfinished feature
+  returns an error ("not supported yet: …"); it never panics.
+- **Input-derived numbers are hostile** (command parameters, design files, control-channel
+  input): `get()` not `[i]`, finite checks, caps on sizes and loop counts.
+- **Third-party kernel calls are guarded:** everything that calls `truck` goes through
+  `solidcraft_kernel::guard`, which turns a panic into `KernelError::Internal`.
+- **Last-resort guard:** `Session::execute` runs every command under `catch_unwind`; an escaped
+  panic restores the design and reports `EngineError::Internal`.
+- **Crash reports:** the desktop app writes every panic and every unclean exit to a local crash folder,
+  with the design and the commands that reproduce it (`solidcraft_engine::crash`, docs/crash-reports.md).
+  When someone says the app crashed, look there first: `solidcraft-cli crashes`, `crashes show <id>`,
+  `crashes replay <id>` (or the `diagnostics.crash_reports` command / MCP `crash_reports` tool).
+- **Prove it:** every crash fix lands with a regression test (see `hostile_params_never_panic`); a
+  crash report's `design.solidcraft` + `replay.json` is the test's starting point.
+- **Where tests go:** a regression test goes into the existing test file for its area (booleans, blends,
+  shell, sweep, STEP, naming…), never a new file named after the bug (#3226).
+- Every production crate root carries
+  `#![deny(clippy::unwrap_used, clippy::expect_used, clippy::panic, clippy::unimplemented, clippy::todo, clippy::unreachable)]`.
+
+## Non-negotiables
+- **Independent.** SolidCraft is independent. Behaviour is designed from public documentation,
+  general CAD conventions and user feedback. Reference tests use analytic values and open-source
+  tools. Never copy another product's code, icons, artwork, help text, tooltips, templates or
+  materials. File formats come from public specifications.
+- **No commercial CAD products.** Agents must not drive, script, automate or extract data from
+  commercial CAD products (Fusion, SolidWorks, Onshape, …) for this project: no test data,
+  measurements, command lists, ids or files produced with them.
+- **Never read, copy or link GPL/LGPL/AGPL code**: OpenCASCADE, FreeCAD (incl. planegcs),
+  SolveSpace, CadQuery/OCP, LibreCAD, QCAD — don't even read their sources. (`tools/freecad-oracle/`
+  runs FreeCAD as a separate program through its public scripting API to compute reference values;
+  nothing from FreeCAD is linked, vendored or shipped.) The sketch solver and the blend
+  operations are our own.
+- **Assets — absolutely essential.** SolidCraft contains **no iconography, images, fonts or
+  artwork from commercial CAD products — ever.** Command icons are the original SVG masters in
+  `assets/icons/ui/design/svg/`, compiled through `crates/ui-egui/src/icon_svg.rs`.
+  **Before any icon, icon assignment or media edit, read `assets/AGENTS.md`,
+  `assets/icons/ui/AGENTS.md` and `assets/icons/ui/STYLE_GUIDE.md`.** Use the canonical
+  bases and named finished references there; never invent a parallel icon style. Any file asset must be original or openly licensed and **must have a row in ATTRIBUTION.md**
+  (`cargo xtask assets` enforces it). Screenshots of commercial CAD software are never committed.
+  Breaking this rule is the most serious mistake you can make in this repo.
+- **Everything is a command.** User-visible behaviour = a command in `crates/engine/src/cmd/*`
+  (`CommandSpec`: id = our own dotted, lower-case id `<area>.<thing>[.<variant>]` such as
+  `solid.extrude` or `sketch.rectangle.two_point`, never another product's command id; label;
+  toolbar tab and panel; icon; shortcut; params doc; `enabled`; JSON `run`) + tests. The toolbar,
+  dialogs, sketch tools, palette, scripts, CLI and control channel all reach the same commands.
+- **Programmatic calls never open dialogs.** `engine.execute` runs the JSON form; only toolbar
+  clicks (`ui.start`) start interactive tools and dialogs, which then run commands.
+- **Layering** is enforced by `cargo xtask layers`: L0 `geom` → L1 `sketch`, `kernel`, `render`
+  → L2 `doc` → L3 `io` → L4 `engine` → L5 `ui-egui` → apps. Nothing below L5 depends on
+  egui/eframe/winit/wgpu/rfd. **The UI crate is swappable.** Only `crates/kernel` may use `truck`.
+- **The UI is thin**: panels read engine state and act through `app.run(id, params)` /
+  `app.start(id)`. Colours come from `theme::Tokens`.
+- **One outer UI container**: all panels, floating sheets, menus, overlays and platform UI
+  windows use `ui_kit::Container` (directly or through `Panel`, `Window`, `Confirm`, `Menu`).
+  Declare the semantic `Surface`; workspace panels use its shared layout policy and chrome.
+  System/report windows use `ui_kit::Window`; its low-level host builder is kit-private.
+  Do not construct raw egui hosts, outer popup/window frames or shadows in feature modules.
+  `cargo xtask ui-containers` recursively checks source/examples in all current and future crates
+  and apps. It runs in the fast repository CI job and `cargo xtask ci`, with no caller allowances.
+  See `docs/ui-container-audit.md` for the inventory and legitimate content/native exceptions.
+- **One set of camera controls**: every page or canvas with a camera (viewport, Render
+  preview, future flat pattern or drawing pages) calls `navigation::handle` with its `NavCaps`
+  (orbit off for flat 2D pages). New canvases must use `navigation::handle`; never hand-roll
+  camera input (a test rejects it).
+- **Application code is Rust only.** Units are millimetres and radians internally; Z is up.
+  Local asset authoring, lint and review tools use Python 3.11+ as documented in
+  `assets/AGENTS.md`; Python is not an application runtime dependency. The application exception is
+  JavaScript the browser requires: the service worker `apps/solidcraft-web/sw.js` (browsers only
+  run service workers as JavaScript) and the small inline scripts in `apps/solidcraft-web/index.html`.
+  Keep them minimal; `cargo xtask web-offline-test` covers the service worker.
+- **Quality gates** before every commit: `cargo xtask ci` (fmt, clippy -D warnings, tests,
+  assets, layers). Commit after every feature arc that builds.
+- **Publishing**: the repository is github.com/tangency-labs/solidcraft. Changes land through
+  **pull requests** and the **merge queue**: push a branch and open a PR. The heavy CI jobs start
+  when a maintainer adds `approved-for-ci` after reviewing the code. Approved PRs go into the queue
+  with `gh pr merge N -R tangency-labs/solidcraft --squash --auto`; the queue runs the full suite
+  on each group before it lands on `main`. Keep each PR to one topic and one issue, and never
+  force-push `main`. Never commit `plan/`, build dirs (`target*/`) or generated reference data;
+  check `git ls-files` before pushing.
+- **Never break wasm**: everything below the apps must build for `wasm32-unknown-unknown`
+  (`cargo xtask wasm`, part of `cargo xtask ci`).
+
+## Showing and following through on changes
+
+- Help reviewers see what is broken or changed. For observable CAD, UI or model behavior,
+  issues and PRs must include actual descriptive screenshots or a short recording from a
+  small reproduction. This includes kernel, geometry, assembly and backend changes whose
+  effects can be shown in the app. Coding agents should run the app and capture this evidence
+  themselves; do not ask a human for evidence the agent can produce. Show the actual failure
+  or result, preferably before and after, with brief reproduction steps, expected/actual
+  behavior and annotations that point out the relevant detail.
+- Flowcharts and Mermaid diagrams cannot substitute for screenshots or recordings of visible
+  behavior. Use diagrams for architectural reasoning when actual screenshots cannot illustrate
+  the point. Changes with no useful observable behavior do not need screenshot or video evidence.
+- Use a small public-safe example and check for private designs, paths, account details or
+  other sensitive content before sharing. Attach media to the issue/PR or link to an accessible
+  recording; do not commit generated screenshots or videos just to provide review evidence.
+- Throughout the work and before handoff, check the relevant PR's merge status. Don't push to
+  an open PR only to catch up with `main` (no merge of `main`, no Update branch, no rebase for
+  that alone): every push restarts the whole CI run, and `main`'s own run catches what lands in
+  between, to be fixed forward. When you push a change anyway, or GitHub reports a conflict,
+  rebase onto the latest `main` (push your own branch with `--force-with-lease`); never merge
+  `main` into a PR. Resolve conflicts without discarding others' work; never force-push `main`.
+  Don't re-run CI on an unchanged commit: a real failure fails again. Re-run only a job that
+  runner trouble cancelled, with "Re-run failed jobs". Report the PR state you checked and any
+  conflicts resolved. If a PR remains open, keep monitoring it while the task is active and
+  make its pending status clear at handoff; do not claim it merged without checking.
+
+## Before you start: look at what is already open
+- Work with an authenticated GitHub CLI (`gh auth status`) and `git`; the checks below need both.
+- Pull the whole list, not one search: `gh pr list -R tangency-labs/solidcraft --state open --limit 500`
+  (drafts included) and `gh issue list -R tangency-labs/solidcraft --state open --limit 500`. Look for
+  work on the same issue, the same feature under another number, and PRs that change the files
+  you are about to change (`gh pr list ... --json number,title,files`).
+- If someone already has it, comment on their PR or issue instead of opening a second one. Two
+  PRs for one change can't both land, and one of them is wasted work and CI.
+
+## Claim = a draft PR
+- Before working on issue #N, check nobody has it: `gh pr list -R tangency-labs/solidcraft --state open --search "#N"`.
+- If none, branch from the latest `origin/main`, `git commit --allow-empty -m "claim: #N"`, push,
+  and open a **draft** PR titled `<summary> (#N)` right away. **The lowest-numbered open PR for an
+  issue wins**; if yours lost, close it. Opening the PR is the claim: the bot assigns you and
+  labels the issue `in progress` (or says on your PR who holds it). Reference `#N` in the PR title
+  so the bot can find it. Don't claim by editing files; comment `/claim` on the issue only to stake
+  a claim before you have a branch.
+- Push work in progress at least daily. A draft with no pushes for 72 hours may be taken over:
+  comment on it first, then open your own claim (you may start from its branch).
+  This takeover policy is separate from the bot's automatic cleanup deadlines in CONTRIBUTING.md.
+- On a shared build machine, check the load before a big build (`cut -d' ' -f1 /proc/loadavg`)
+  and wait while it is over 24; build with `nice`.
+
+## Design file format
+A change that saves something new in a design adds ONE file, `crates/doc/src/format/pending/<name>.rs`
+(a `//!` note, and `pub fn step` if older designs must be rewritten). Never edit `FORMAT`,
+`JSON_STEPS`, the history in `format.rs`, another change's file or a `v<N>/` folder: the build
+works out the number (the next one while anything is pending), and the release folds pending
+changes into `v<N>/` with `scripts/fold-format-pending.sh`. See CONTRIBUTING.md.
+
+## Application releases
+Development pushes are not application releases. Follow `docs/releasing.md` when asked to
+prepare or ship a release: choose the version from the actual changes, update Cargo.toml and
+Cargo.lock, pass the quality gates, advance `release` without force-pushing, and verify the
+resulting draft and its artifacts. When shipping is authorized, publish that verified draft
+and confirm its tag and downstream deployment. Do not auto-release every push to `main`, infer
+version bumps solely from commit prefixes, overwrite published versions, or push release tags
+before the draft is verified.
+
+## Running and looking at the app
+- `cargo run --release -p solidcraft -- --sample --control PORT` (sample design + control channel).
+  Pick a free port. Without a display, run it under `Xvfb :99` with `DISPLAY=:99`.
+- Drive it with JSON lines on `127.0.0.1:PORT` (see `docs/control-protocol.md`). The first
+  request on a connection carries the launch's token as `"token"`: read it from
+  `~/.local/share/solidcraft/control/PORT.token`, or start the app with
+  `SOLIDCRAFT_CONTROL_TOKEN=$(openssl rand -hex 32)` and send that.
+  - `{"id":1,"method":"engine.execute","params":{"command":"solid.extrude","params":{"distance":20}}}`
+  - `{"id":2,"method":"ui.start","params":{"command":"sketch.create"}}` then `ui.click {x, y}`
+  - `{"id":3,"method":"ui.screenshot","params":{"path":"/tmp/shot.png"}}` then read the PNG.
+- **For UI work, look at the result** (screenshot, read the PNG). Without a window use
+  `ui.render` or `solidcraft-cli snapshot`.
+- Headless: `solidcraft-cli run script.json --out part.step`, `solidcraft-cli eval design.solidcraft`,
+  `solidcraft-cli snapshot script.json --out shot.png`, `solidcraft-cli commands`.
+- Reference tests: `cargo xtask oracle` replays `tests/oracle/*/recipe.json` and compares with
+  each case's `expected.json` (analytic or FreeCAD values; writes `docs/oracle.md`). Expected
+  values never come from a commercial CAD product.
+- Build with `CARGO_TARGET_DIR=<repo>/target`. Windows: `cargo xwin build --release --target x86_64-pc-windows-msvc -p solidcraft`.
+
+## Roadmap
+`ROADMAP.md` (committed) tracks status, milestones and estimates. Update it whenever a
+milestone task lands. `docs/features.md` (SolidCraft's commands by area, from the registry) and
+`THIRD-PARTY-LICENSES.txt` are regenerated on `main` after each merge by the Generated files
+workflow; never regenerate them in a PR.
+
+## Lists many PRs add to
+Keep them conflict-free (CONTRIBUTING.md, "Lists many changes add to"): message catalogs sorted
+(`cargo xtask lists --fix`), `mod` lines in their sorted group, the language list English first
+then by id, generated files left to `main`, and a design-format change as one new file.

ATTRIBUTION.md

@@ -14,12 +14,6 @@ Editable drawing code, native projects and shipped exports are collected under `
 
 | File | Author | Source | Licence |
 |---|---|---|---|
-| assets/render/catalog/capabilities.json | SolidCraft contributors | Byte-identical runtime export of docs/render-materials/capabilities.json; generated and checked by tools/render-library/generate.py | MIT OR Apache-2.0 |
-| assets/render/catalog/environments.json | SolidCraft contributors | Byte-identical runtime export of docs/render-materials/environments.json; generated and checked by tools/render-library/generate.py | MIT OR Apache-2.0 |
-| assets/render/catalog/lighting.json | SolidCraft contributors | Byte-identical runtime export of docs/render-materials/lighting.json; generated and checked by tools/render-library/generate.py | MIT OR Apache-2.0 |
-| assets/render/catalog/materials.json | SolidCraft contributors | Byte-identical runtime export of docs/render-materials/materials.json; generated and checked by tools/render-library/generate.py | MIT OR Apache-2.0 |
-| assets/render/catalog/quality-presets.json | SolidCraft contributors | Byte-identical runtime export of docs/render-materials/quality-presets.json; generated and checked by tools/render-library/generate.py | MIT OR Apache-2.0 |
-| assets/render/catalog/scene-presets.json | SolidCraft contributors | Byte-identical runtime export of docs/render-materials/scene-presets.json; generated and checked by tools/render-library/generate.py | MIT OR Apache-2.0 |
 | examples/chebyshev-motion-trace.json | SolidCraft contributors | Original parametric Chebyshev lambda mechanism and associative-trace demo, constructed from analytic circle intersections; classical link proportions documented at https://doi.org/10.1002/rcs.70095; no external CAD geometry or artwork | MIT OR Apache-2.0 |
 | examples/material-card.json | SolidCraft contributors | original analytic box and explicitly synthetic engineering card; invented illustrative constants, no external material dataset | MIT OR Apache-2.0 |
 | examples/studio/author_sweep.py | SolidCraft contributors | original editable CAD scene and authoring metadata; no external assets | MIT OR Apache-2.0 |
@@ -33,12 +27,6 @@ Editable drawing code, native projects and shipped exports are collected under `
 | examples/studio/stage1-render.json | SolidCraft contributors | original studio camera and lighting parameters | MIT OR Apache-2.0 |
 | examples/render-studio.json | SolidCraft contributors | original procedural box/cylinder enclosure script for the integrated Render workspace | MIT OR Apache-2.0 |
 | examples/render-opaque-studio.json | SolidCraft contributors | original procedural sphere study varying opaque metal fraction and roughness independently; no external assets or engineering data | MIT OR Apache-2.0 |
-| crates/gpu/src/path/denoise.wgsl | SolidCraft contributors | original bounded edge-aware a-trous spatial filter; GPU2 donor d710e31, no external shader source | MIT OR Apache-2.0 |
-| crates/gpu/src/path/denoise_guides.wgsl | SolidCraft contributors | original deterministic centre-ray material and geometry guide pass; GPU2 donor d710e31, no external shader source | MIT OR Apache-2.0 |
-| crates/gpu/src/path/shadows.wgsl | SolidCraft contributors | original bounded area, sun and environment visibility transport; GPU2 donor d710e31, no external shader source | MIT OR Apache-2.0 |
-| crates/gpu/src/path/textures.wgsl | SolidCraft contributors | original planar colour and normal map sampling; GPU2 donor d710e31, no external shader source | MIT OR Apache-2.0 |
-| assets/appearances/starter_pack.rs | SolidCraft contributors | original illustrative optical recipes, authored scalar values and future procedural resource descriptors; no measured or external material dataset | MIT OR Apache-2.0 |
-| examples/material-finishes.json | SolidCraft contributors | original procedural sphere study of six illustrative opaque finishes with generic material densities; no external assets or measured optical data | MIT OR Apache-2.0 |
 | examples/render-path-studio.json | SolidCraft contributors | original procedural opaque enclosure, teal insert and metal fasteners for progressive rendering; no imported models | MIT OR Apache-2.0 |
 | crates/gpu/src/path/path.wgsl | SolidCraft contributors | original software BVH traversal and path integration using the existing SolidCraft surface/studio equations; no external shader source | MIT OR Apache-2.0 |
 | crates/gpu/src/pbr.rs | SolidCraft contributors | original WGSL translation of SolidCraft's opaque surface and fixed studio reference, embedded as Rust source; no external shader code | MIT OR Apache-2.0 |
@@ -51,10 +39,10 @@ Editable drawing code, native projects and shipped exports are collected under `
 | assets/icons/app/macos/exports/icon.icns | SolidCraft contributors | macOS fallback compiled by Apple's actool from the approved assets/icons/app/macos/source/SolidCraft.icon composition | MIT OR Apache-2.0 |
 | assets/models/test_boat.bin | 3DBenchy.com | 3DBenchy.com | Public Domain |
 | assets/models/make_test_boat.py | SolidCraft contributors | original script that packs a model into the compact file above | MIT OR Apache-2.0 |
-| docs/screenshots/class-a-blend.png | SolidCraft contributors | screenshot of SolidCraft itself: a 24 mm and a 10 mm box bridged by a `surface.blend` sheet (G1 at both edges), rendered by the app's `ui.render` in the dark theme with examples/demo/class_a_shots.py | MIT OR Apache-2.0 |
-| docs/screenshots/class-a-crown.png | SolidCraft contributors | screenshot of SolidCraft itself: a patch crowned with `surface.patch crown=0.3` over a skew four-line rim, rendered by the app's `ui.render` in the dark theme with examples/demo/class_a_shots.py | MIT OR Apache-2.0 |
-| docs/screenshots/class-a-boundary.png | SolidCraft contributors | screenshot of SolidCraft itself: a surface through two 3D sketch splines built by `surface.boundary`, rendered by the app's `ui.render` in the dark theme with examples/demo/class_a_shots.py | MIT OR Apache-2.0 |
-| docs/screenshots/sample-plate.png | SolidCraft contributors | screenshot of SolidCraft 0.22.1 itself (`solidcraft --sample`, default dark theme, 1600x1000) | MIT OR Apache-2.0 |
+| docs/screenshots/class-a-blend.png | SolidCraft contributors | screenshot of SolidCraft itself: two boxes bridged by `surface.blend` (a 40x10 sheet, `solidcraft-cli snapshot` of plan/evidence script ev_blend) | MIT OR Apache-2.0 |
+| docs/screenshots/class-a-crown.png | SolidCraft contributors | screenshot of SolidCraft itself: a patch crowned with `surface.patch crown=0.3` over a saddle rim (`solidcraft-cli snapshot`) | MIT OR Apache-2.0 |
+| docs/screenshots/class-a-boundary.png | SolidCraft contributors | screenshot of SolidCraft itself: a patch through two sketch lines built by `surface.boundary` with `crown: 0.4` (`solidcraft-cli snapshot`) | MIT OR Apache-2.0 |
+| docs/screenshots/sample-plate.png | SolidCraft contributors | screenshot of SolidCraft itself (`solidcraft --sample`) | MIT OR Apache-2.0 |
 | assets/samples/exports/0.png | SolidCraft contributors | original Sample Plate from `crates/engine/src/sample.rs`, exported by the SolidCraft thumbnail renderer | MIT OR Apache-2.0 |
 | assets/samples/exports/1.png | SolidCraft contributors | original Sheet Metal Bracket from `crates/engine/src/sample.rs`, exported by the SolidCraft thumbnail renderer | MIT OR Apache-2.0 |
 | assets/samples/exports/2.png | SolidCraft contributors | original Hinge Assembly from `crates/engine/src/sample.rs`, exported by the SolidCraft thumbnail renderer | MIT OR Apache-2.0 |
@@ -62,10 +50,10 @@ Editable drawing code, native projects and shipped exports are collected under `
 | assets/samples/exports/4.png | SolidCraft contributors | original Bolted Flange from `crates/engine/src/sample.rs`, exported by the SolidCraft thumbnail renderer | MIT OR Apache-2.0 |
 | assets/samples/exports/5.png | SolidCraft contributors | original Vent Plate from `crates/engine/src/sample.rs`, exported by the SolidCraft thumbnail renderer | MIT OR Apache-2.0 |
 | assets/samples/exports/scripts.json | SolidCraft contributors | SHA-256 fingerprints of the original sample scripts, generated with the shipped thumbnails | MIT OR Apache-2.0 |
-| docs/screenshots/demo.gif | SolidCraft contributors | original screen recording of the actual SolidCraft 0.22.1 English desktop UI (default dark theme, software renderer) modelling an original Raspberry Pi 4 case (no logos or branding; the engraved text is set in the system's DejaVu Sans Bold), generated with examples/demo/record_ui.sh and its original animated pointer overlay (6× playback, idle pauses cut) | MIT OR Apache-2.0 |
-| docs/screenshots/demo.mp4 | SolidCraft contributors | original screen recording of the actual SolidCraft 0.22.1 English desktop UI (default dark theme, software renderer) modelling an original Raspberry Pi 4 case (no logos or branding; the engraved text is set in the system's DejaVu Sans Bold), generated with examples/demo/record_ui.sh and its original animated pointer overlay (6× playback, idle pauses cut) | MIT OR Apache-2.0 |
-| docs/screenshots/rover-build.gif | 0xlillith (model); SolidCraft contributors (recording) | screen recording of the actual SolidCraft 0.22.1 desktop UI (default dark theme, software renderer) replaying the timeline of the SELENE rover (`Rover-recorded.solidcraft` from https://github.com/0xlillith/solidcraft-rover, an original model by 0xlillith built through SolidCraft MCP); the model's lettering follows Ubuntu Light outlines (Canonical Ltd., Ubuntu Font Licence 1.0, as noted in that repository); the emblem is the SolidCraft project icon (15× playback, idle pauses cut, constant-rate camera orbit) | MIT OR Apache-2.0 |
-| docs/screenshots/rover-build.mp4 | 0xlillith (model); SolidCraft contributors (recording) | screen recording of the actual SolidCraft 0.22.1 desktop UI (default dark theme, software renderer) replaying the timeline of the SELENE rover (`Rover-recorded.solidcraft` from https://github.com/0xlillith/solidcraft-rover, an original model by 0xlillith built through SolidCraft MCP); the model's lettering follows Ubuntu Light outlines (Canonical Ltd., Ubuntu Font Licence 1.0, as noted in that repository); the emblem is the SolidCraft project icon | MIT OR Apache-2.0 |
+| docs/screenshots/demo-0.8.gif | SolidCraft contributors | original screen recording of the actual SolidCraft 0.8 English desktop UI modelling an original Raspberry Pi 4 case (no logos or branding; the engraved text is set in the system's DejaVu Sans Bold), generated with examples/demo/record_ui.sh and its original animated pointer overlay (9× playback) | MIT OR Apache-2.0 |
+| docs/screenshots/demo-0.8.mp4 | SolidCraft contributors | original screen recording of the actual SolidCraft 0.8 English desktop UI modelling an original Raspberry Pi 4 case (no logos or branding; the engraved text is set in the system's DejaVu Sans Bold), generated with examples/demo/record_ui.sh and its original animated pointer overlay (9× playback) | MIT OR Apache-2.0 |
+| docs/screenshots/rover-build.gif | 0xlillith (model); SolidCraft contributors (recording) | screen recording of the actual SolidCraft desktop UI replaying the timeline of the SELENE rover (`Rover-recorded.solidcraft` from https://github.com/0xlillith/solidcraft-rover, an original model by 0xlillith built through SolidCraft MCP); the model's lettering follows Ubuntu Light outlines (Canonical Ltd., Ubuntu Font Licence 1.0, as noted in that repository); the emblem is the SolidCraft project icon (2× playback) | MIT OR Apache-2.0 |
+| docs/screenshots/rover-build.mp4 | 0xlillith (model); SolidCraft contributors (recording) | screen recording of the actual SolidCraft desktop UI replaying the timeline of the SELENE rover (`Rover-recorded.solidcraft` from https://github.com/0xlillith/solidcraft-rover, an original model by 0xlillith built through SolidCraft MCP); the model's lettering follows Ubuntu Light outlines (Canonical Ltd., Ubuntu Font Licence 1.0, as noted in that repository); the emblem is the SolidCraft project icon | MIT OR Apache-2.0 |
 | docs/design/ux-redesign/model-floating.png | SolidCraft contributors | original UX mockup (Model tab, floating layout) rendered from an HTML mockup that uses the original Technical Accent icon set; no third-party artwork, and not a screenshot of any other CAD product | MIT OR Apache-2.0 |
 | docs/design/ux-redesign/model-compact.png | SolidCraft contributors | original UX mockup (Model tab, compact docked layout) rendered from an HTML mockup that uses the original Technical Accent icon set; no third-party artwork, and not a screenshot of any other CAD product | MIT OR Apache-2.0 |
 | docs/design/ux-redesign/sketch.png | SolidCraft contributors | original UX mockup (Sketch tab) rendered from an HTML mockup that uses the original Technical Accent icon set; no third-party artwork, and not a screenshot of any other CAD product | MIT OR Apache-2.0 |
@@ -82,9 +70,8 @@ Editable drawing code, native projects and shipped exports are collected under `
 | assets/fonts/ibm-plex-mono/IBMPlexMono-Regular.ttf | IBM Corp. (IBM Plex Mono) | https://github.com/IBM/plex (via google/fonts), unmodified; licence text in assets/fonts/ibm-plex-mono/OFL.txt; the interface monospace font | SIL OFL 1.1 |
 | assets/fonts/ibm-plex-sans/IBMPlexSans-Variable.ttf | IBM Corp. (IBM Plex Sans, variable wdth and wght) | https://github.com/IBM/plex (via google/fonts), unmodified; licence text in assets/fonts/ibm-plex-sans/OFL.txt; the default interface font | SIL OFL 1.1 |
 | docs/book/src/generated/tool-preview.png | SolidCraft contributors | rendered by `cargo xtask book` (`solidcraft-cli snapshot docs/book/scripts/tool-preview.json`; gitignored) | MIT OR Apache-2.0 |
+| assets/fonts/liberation-sans/LiberationSans-Regular.ttf | Red Hat, Inc. (Liberation Fonts 2.x; digitized data Google) | https://github.com/liberationfonts (Debian fonts-liberation), unmodified; licence text in assets/fonts/liberation-sans/OFL.txt; used for sketch Text outlines | SIL OFL 1.1 |
 | assets/fonts/biz-udp-gothic/BIZUDPGothic-Regular.ttf | The BIZ UDGothic Project Authors | https://github.com/googlefonts/morisawa-biz-ud-gothic (Google Fonts), unmodified; licence text in assets/fonts/biz-udp-gothic/OFL.txt; used for web UI Japanese font | SIL OFL 1.1 |
-| assets/fonts/craft-ui-sc/CraftUI-SC.otf | Adobe / Google Inc. (Noto Sans SC); SolidCraft subset | https://github.com/notofonts/noto-cjk Sans/SubsetOTF/SC Regular, glyph-subset for assets/locales/zh.json and renamed Craft UI SC (OFL reserved-name); licence text in assets/fonts/craft-ui-sc/OFL.txt; web UI Simplified Chinese | SIL OFL 1.1 |
-| assets/fonts/craft-ui-tc/CraftUI-TC.otf | Adobe / Google Inc. (Noto Sans TC); SolidCraft subset | https://github.com/notofonts/noto-cjk Sans/SubsetOTF/TC Regular, glyph-subset for assets/locales/zh-TW.json and renamed Craft UI TC (OFL reserved-name); licence text in assets/fonts/craft-ui-tc/OFL.txt; web UI Traditional Chinese | SIL OFL 1.1 |
 | tests/step-conformance/cone_point.step | step-conformance contributors | generated from formulas by https://github.com/dan335/step-conformance (corpus/generated, 96f30bb); import regression fixture | CC0-1.0 |
 | tests/step-conformance/cone_point_vertex.step | step-conformance contributors | generated from formulas by https://github.com/dan335/step-conformance (corpus/generated, 96f30bb); import regression fixture | CC0-1.0 |
 | tests/step-conformance/cylinder.step | step-conformance contributors | generated from formulas by https://github.com/dan335/step-conformance (corpus/generated, 96f30bb); import regression fixture | CC0-1.0 |
@@ -102,23 +89,6 @@ Editable drawing code, native projects and shipped exports are collected under `
 | tests/step-conformance/tiny_pin.step | step-conformance contributors | generated from formulas by https://github.com/dan335/step-conformance (corpus/generated, 96f30bb); import regression fixture | CC0-1.0 |
 | tests/step-conformance/torus_ring_nurbs.step | step-conformance contributors | generated from formulas by https://github.com/dan335/step-conformance (corpus/generated, 96f30bb); import regression fixture | CC0-1.0 |
 | tests/step-conformance/washer.step | step-conformance contributors | generated from formulas by https://github.com/dan335/step-conformance (corpus/generated, 96f30bb); import regression fixture | CC0-1.0 |
-| tests/kernel-cases/import/1721-closed-bspline-tube-face/input.step | step-conformance contributors | copy of tests/step-conformance/cylinder_nurbs.step (generated from formulas by https://github.com/dan335/step-conformance, corpus/generated, 96f30bb); kernel regression case for tangency-labs/solidcraft#1721 | CC0-1.0 |
-| tests/kernel-cases/import/2043-outer-bound-opposing-surface-sense/input.step | SolidCraft contributors | synthetic STEP file written by hand from ISO 10303-21 for the kernel regression case of tangency-labs/solidcraft#2043 | MIT OR Apache-2.0 |
-| tests/kernel-cases/import/258-cone-point-vertex/input.step | step-conformance contributors | copy of tests/step-conformance/cone_point_vertex.step (generated from formulas by https://github.com/dan335/step-conformance, corpus/generated, 96f30bb); kernel regression case for tangency-labs/solidcraft#258 | CC0-1.0 |
-| tests/kernel-cases/import/258-cone-to-point/input.step | step-conformance contributors | copy of tests/step-conformance/cone_point.step (generated from formulas by https://github.com/dan335/step-conformance, corpus/generated, 96f30bb); kernel regression case for tangency-labs/solidcraft#258 | CC0-1.0 |
-| tests/kernel-cases/import/258-tiny-pin/input.step | step-conformance contributors | copy of tests/step-conformance/tiny_pin.step (generated from formulas by https://github.com/dan335/step-conformance, corpus/generated, 96f30bb); kernel regression case for tangency-labs/solidcraft#258 | CC0-1.0 |
-| tests/kernel-cases/import/3098-bspline-edges-over-tiny-knot-span/input.step | SolidCraft contributors | synthetic STEP file written by hand from ISO 10303-21 for the kernel regression case of tangency-labs/solidcraft#3098 | MIT OR Apache-2.0 |
-| tests/kernel-cases/import/3208-extruded-ellipse-face-over-parameter-seam/input.step | SolidCraft contributors | synthetic STEP file written by hand from ISO 10303-21 for the kernel regression case of tangency-labs/solidcraft#3208 | MIT OR Apache-2.0 |
-| tests/kernel-cases/import/3352-vertex-off-its-edge-curve/input.step | SolidCraft contributors | synthetic STEP file written by hand from ISO 10303-21 for the kernel regression case of tangency-labs/solidcraft#3352 | MIT OR Apache-2.0 |
-| tests/kernel-cases/import/3730-void-oriented-shell-false/input.step | SolidCraft contributors | synthetic STEP file written by hand from ISO 10303-21 for the kernel regression case of tangency-labs/solidcraft#3730 | MIT OR Apache-2.0 |
-| tests/kernel-cases/import/3880-cylinder-seam-edge/input.step | step-conformance contributors | copy of tests/step-conformance/cylinder_seam.step (generated from formulas by https://github.com/dan335/step-conformance, corpus/generated, 96f30bb); kernel regression case for tangency-labs/solidcraft#3880 | CC0-1.0 |
-| tests/kernel-cases/import/3880-nurbs-hemisphere-dome/input.step | step-conformance contributors | copy of tests/step-conformance/dome_nurbs.step (generated from formulas by https://github.com/dan335/step-conformance, corpus/generated, 96f30bb); kernel regression case for tangency-labs/solidcraft#3880 | CC0-1.0 |
-| tests/kernel-cases/import/3963-closed-spline-edge-vertex-past-start/input.step | SolidCraft contributors | synthetic STEP file written by hand from ISO 10303-21 for the kernel regression case of tangency-labs/solidcraft#3963 | MIT OR Apache-2.0 |
-| tests/kernel-cases/import/4005-cylinder-written-as-near-zero-cone/input.step | SolidCraft contributors | synthetic STEP file written by hand from ISO 10303-21 for the kernel regression case of tangency-labs/solidcraft#4005 | MIT OR Apache-2.0 |
-| tests/kernel-cases/import/4006-plane-written-as-cone-of-nearly-right-angle/input.step | SolidCraft contributors | synthetic STEP file written by hand from ISO 10303-21 for the kernel regression case of tangency-labs/solidcraft#4006 | MIT OR Apache-2.0 |
-| tests/ssi-corpus/cases/*.json.gz, tests/ssi-corpus/LICENSE-MIT, tests/ssi-corpus/LICENSE-APACHE | ssi-corpus contributors (jyviko) | 119 surface/surface intersection cases with exact ground truth from https://github.com/jyviko/ssi-corpus (cases/data, b04c8a6), gzip-compressed, unchanged; SSI scorer fixtures (tests/ssi-corpus/README.md) | MIT OR Apache-2.0 |
-| tests/ssi-corpus/cases/y23_*.json.gz | Yang, Jia and Yan (paper authors: published surfaces, figures and topology); ssi-corpus contributors (reconstructions and truth) | 25 cases built from Yang, Jia & Yan 2023, "Topology Guaranteed B-Spline Surface/Surface Intersection", ACM Transactions on Graphics 42(6), Article 211; each cites the paper in its `source` field | CC-BY 4.0 (paper); MIT OR Apache-2.0 (case files) |
-| tests/step-regressions/rod_doubled_edge.step | SolidCraft contributors | written by SolidCraft from the commands of #4598 (a bored rod moved 100 mm and exported); import regression fixture | MIT OR Apache-2.0 |
 | tests/oracle/17-loft/reference.stl | SolidCraft contributors | triangulation of our own recipe (tests/oracle/17-loft/recipe.json) built with FreeCAD as an external tool by tools/freecad-oracle | MIT OR Apache-2.0 |
 | tests/oracle/23-bracket-multifeature/reference.stl | SolidCraft contributors | triangulation of our own recipe (tests/oracle/23-bracket-multifeature/recipe.json) built with FreeCAD as an external tool by tools/freecad-oracle | MIT OR Apache-2.0 |
 | tests/oracle/28-blind-pocket-fillets/reference.stl | SolidCraft contributors | triangulation of our own recipe (tests/oracle/28-blind-pocket-fillets/recipe.json) built with FreeCAD as an external tool by tools/freecad-oracle | MIT OR Apache-2.0 |
@@ -140,20 +110,19 @@ Editable drawing code, native projects and shipped exports are collected under `
 | tests/oracle/63-hinge-knuckle/reference.stl | SolidCraft contributors | triangulation of our own recipe (tests/oracle/63-hinge-knuckle/recipe.json) built with FreeCAD as an external tool by tools/freecad-oracle | MIT OR Apache-2.0 |
 | tests/oracle/65-sketch-gear-tooth/reference.stl | SolidCraft contributors | triangulation of our own recipe (tests/oracle/65-sketch-gear-tooth/recipe.json) built with FreeCAD as an external tool by tools/freecad-oracle | MIT OR Apache-2.0 |
 | assets/appearances/library.rs | SolidCraft contributors | Original SolidCraft resource data or drawing code, collected without redesign | MIT OR Apache-2.0 |
-| assets/appearances/opaque_finishes.rs | SolidCraft contributors | original illustrative opaque finish values; no external dataset, textures or measured engineering data | MIT OR Apache-2.0 |
+| assets/appearances/starter_pack.rs | SolidCraft contributors | original illustrative optical recipes, authored scalar values and future procedural resource descriptors; no measured or external material dataset | MIT OR Apache-2.0 |
 | assets/fonts/biz-udp-gothic/OFL.txt | The BIZ UDGothic Project Authors | Unmodified accompanying font licence | SIL OFL 1.1 |
-| assets/fonts/craft-ui-sc/OFL.txt | Adobe / Google Inc. (Noto CJK); SolidCraft header | Accompanying OFL for CraftUI-SC.otf | SIL OFL 1.1 |
-| assets/fonts/craft-ui-tc/OFL.txt | Adobe / Google Inc. (Noto CJK); SolidCraft header | Accompanying OFL for CraftUI-TC.otf | SIL OFL 1.1 |
 | assets/fonts/ibm-plex-mono/OFL.txt | IBM Corp. | Unmodified accompanying font licence | SIL OFL 1.1 |
 | assets/fonts/ibm-plex-sans/OFL.txt | IBM Corp. | Unmodified accompanying font licence | SIL OFL 1.1 |
-| assets/icons/app/linux/exports/hicolor/128x128/apps/io.tangencylabs.solidcraft.png | SolidCraft contributors | Generated from assets/icons/app/shared/source/app_icon.rs with the original CLI/ICO encoders | MIT OR Apache-2.0 |
-| assets/icons/app/linux/exports/hicolor/16x16/apps/io.tangencylabs.solidcraft.png | SolidCraft contributors | Generated from assets/icons/app/shared/source/app_icon.rs with the original CLI/ICO encoders | MIT OR Apache-2.0 |
-| assets/icons/app/linux/exports/hicolor/24x24/apps/io.tangencylabs.solidcraft.png | SolidCraft contributors | Generated from assets/icons/app/shared/source/app_icon.rs with the original CLI/ICO encoders | MIT OR Apache-2.0 |
-| assets/icons/app/linux/exports/hicolor/256x256/apps/io.tangencylabs.solidcraft.png | SolidCraft contributors | Generated from assets/icons/app/shared/source/app_icon.rs with the original CLI/ICO encoders | MIT OR Apache-2.0 |
-| assets/icons/app/linux/exports/hicolor/32x32/apps/io.tangencylabs.solidcraft.png | SolidCraft contributors | Generated from assets/icons/app/shared/source/app_icon.rs with the original CLI/ICO encoders | MIT OR Apache-2.0 |
-| assets/icons/app/linux/exports/hicolor/48x48/apps/io.tangencylabs.solidcraft.png | SolidCraft contributors | Generated from assets/icons/app/shared/source/app_icon.rs with the original CLI/ICO encoders | MIT OR Apache-2.0 |
-| assets/icons/app/linux/exports/hicolor/512x512/apps/io.tangencylabs.solidcraft.png | SolidCraft contributors | Generated from assets/icons/app/shared/source/app_icon.rs with the original CLI/ICO encoders | MIT OR Apache-2.0 |
-| assets/icons/app/linux/exports/hicolor/64x64/apps/io.tangencylabs.solidcraft.png | SolidCraft contributors | Generated from assets/icons/app/shared/source/app_icon.rs with the original CLI/ICO encoders | MIT OR Apache-2.0 |
+| assets/fonts/liberation-sans/OFL.txt | Red Hat, Inc.; Liberation Fonts contributors | Unmodified accompanying font licence | SIL OFL 1.1 |
+| assets/icons/app/linux/exports/hicolor/128x128/apps/ai.storyteller.solidcraft.png | SolidCraft contributors | Generated from assets/icons/app/shared/source/app_icon.rs with the original CLI/ICO encoders | MIT OR Apache-2.0 |
+| assets/icons/app/linux/exports/hicolor/16x16/apps/ai.storyteller.solidcraft.png | SolidCraft contributors | Generated from assets/icons/app/shared/source/app_icon.rs with the original CLI/ICO encoders | MIT OR Apache-2.0 |
+| assets/icons/app/linux/exports/hicolor/24x24/apps/ai.storyteller.solidcraft.png | SolidCraft contributors | Generated from assets/icons/app/shared/source/app_icon.rs with the original CLI/ICO encoders | MIT OR Apache-2.0 |
+| assets/icons/app/linux/exports/hicolor/256x256/apps/ai.storyteller.solidcraft.png | SolidCraft contributors | Generated from assets/icons/app/shared/source/app_icon.rs with the original CLI/ICO encoders | MIT OR Apache-2.0 |
+| assets/icons/app/linux/exports/hicolor/32x32/apps/ai.storyteller.solidcraft.png | SolidCraft contributors | Generated from assets/icons/app/shared/source/app_icon.rs with the original CLI/ICO encoders | MIT OR Apache-2.0 |
+| assets/icons/app/linux/exports/hicolor/48x48/apps/ai.storyteller.solidcraft.png | SolidCraft contributors | Generated from assets/icons/app/shared/source/app_icon.rs with the original CLI/ICO encoders | MIT OR Apache-2.0 |
+| assets/icons/app/linux/exports/hicolor/512x512/apps/ai.storyteller.solidcraft.png | SolidCraft contributors | Generated from assets/icons/app/shared/source/app_icon.rs with the original CLI/ICO encoders | MIT OR Apache-2.0 |
+| assets/icons/app/linux/exports/hicolor/64x64/apps/ai.storyteller.solidcraft.png | SolidCraft contributors | Generated from assets/icons/app/shared/source/app_icon.rs with the original CLI/ICO encoders | MIT OR Apache-2.0 |
 | assets/icons/app/shared/source/app_icon.rs | SolidCraft contributors | Original SolidCraft drawing code: the borderless mark, drawn from the faces and gradients of assets/icons/app/macos/source/SolidCraft.icon/Assets/03-solid-blue-cutout.svg | MIT OR Apache-2.0 |
 | assets/icons/app/shared/source/windows_ico.rs | SolidCraft contributors | Original SolidCraft resource data or drawing code, collected without redesign | MIT OR Apache-2.0 |
 | assets/icons/app/windows/exports/solidcraft-executable.ico | SolidCraft contributors | Generated from assets/icons/app/shared/source/app_icon.rs with the original CLI/ICO encoders | MIT OR Apache-2.0 |
@@ -176,7 +145,6 @@ Editable drawing code, native projects and shipped exports are collected under `
 | assets/locales/ja.json | SolidCraft contributors | Original SolidCraft resource data or drawing code, collected without redesign | MIT OR Apache-2.0 |
 | assets/locales/ko.json | SolidCraft contributors | Original SolidCraft resource data or drawing code, collected without redesign | MIT OR Apache-2.0 |
 | assets/locales/ms.json | A.Hakim (a-hakim) | Malay translation of the English message catalog | MIT OR Apache-2.0 |
-| assets/locales/nb.json | SolidCraft contributors | Original Norwegian Bokmål translation of SolidCraft's English catalog; no commercial CAD text used | MIT OR Apache-2.0 |
 | assets/locales/nl.json | SolidCraft contributors | Original Dutch translation of SolidCraft's English catalog; no commercial CAD text used | MIT OR Apache-2.0 |
 | assets/locales/pl.json | cyryllo | Polish translation of the English catalog, contributed upstream | MIT OR Apache-2.0 |
 | assets/locales/ru.json | Alex Pro (del000) | Russian translation of the English catalog, contributed upstream | MIT OR Apache-2.0 |
@@ -189,20 +157,21 @@ Editable drawing code, native projects and shipped exports are collected under `
 | assets/locales/zh.json | SolidCraft contributors | Original SolidCraft resource data or drawing code, collected without redesign | MIT OR Apache-2.0 |
 | assets/locales/zh-TW.json | SolidCraft contributors | Original Traditional Chinese (Taiwan) translation of SolidCraft's English catalog; no commercial CAD text used | MIT OR Apache-2.0 |
 | assets/materials/library.rs | SolidCraft contributors | Original SolidCraft resource data or drawing code, collected without redesign | MIT OR Apache-2.0 |
-| assets/platforms/linux/io.tangencylabs.solidcraft.desktop | PhotoCraft / SolidCraft contributors | PhotoCraft packaging templates (https://github.com/storytold/photocraft), adapted for SolidCraft | Apache-2.0 |
-| assets/platforms/linux/io.tangencylabs.solidcraft.metainfo.xml.in | PhotoCraft / SolidCraft contributors | PhotoCraft packaging templates (https://github.com/storytold/photocraft), adapted for SolidCraft | Apache-2.0 |
-| assets/platforms/linux/io.tangencylabs.solidcraft.mime.xml | PhotoCraft / SolidCraft contributors | PhotoCraft packaging templates (https://github.com/storytold/photocraft), adapted for SolidCraft | Apache-2.0 |
-| assets/platforms/macos/dmg/background.tiff | SolidCraft contributors | original disk image window background (blueprint sheet: grid, double border, circles, centre lines, leader arrow, title block) drawn by assets/platforms/macos/dmg/make_background.py in IBM Plex Sans/Mono; 1x and 2x representations | MIT OR Apache-2.0 |
-| assets/platforms/macos/dmg/make_background.py | SolidCraft contributors | authoring script that draws the disk image background (Pillow); not part of any build | MIT OR Apache-2.0 |
-| assets/platforms/macos/dmg/layout.json | SolidCraft contributors | disk image window size, icon size and icon positions shared by the background script and settings.py | MIT OR Apache-2.0 |
-| assets/platforms/macos/dmg/settings.py | SolidCraft contributors | dmgbuild settings (MIT, https://github.com/dmgbuild/dmgbuild) for the SolidCraft disk image; original settings, no dmgbuild code copied | MIT OR Apache-2.0 |
+| assets/platforms/linux/ai.storyteller.solidcraft.desktop | PhotoCraft / SolidCraft contributors | PhotoCraft packaging templates (https://github.com/storytold/photocraft), adapted for SolidCraft | Apache-2.0 |
+| assets/platforms/linux/ai.storyteller.solidcraft.metainfo.xml.in | PhotoCraft / SolidCraft contributors | PhotoCraft packaging templates (https://github.com/storytold/photocraft), adapted for SolidCraft | Apache-2.0 |
+| assets/platforms/linux/ai.storyteller.solidcraft.mime.xml | PhotoCraft / SolidCraft contributors | PhotoCraft packaging templates (https://github.com/storytold/photocraft), adapted for SolidCraft | Apache-2.0 |
 | assets/platforms/macos/Info.plist.in | PhotoCraft / SolidCraft contributors | PhotoCraft packaging templates (https://github.com/storytold/photocraft), adapted for SolidCraft | Apache-2.0 |
 | assets/platforms/macos/README.txt | PhotoCraft / SolidCraft contributors | PhotoCraft packaging templates (https://github.com/storytold/photocraft), adapted for SolidCraft | Apache-2.0 |
 | assets/platforms/windows/solidcraft.en-us.wxl | PhotoCraft / SolidCraft contributors | PhotoCraft packaging templates (https://github.com/storytold/photocraft), adapted for SolidCraft | Apache-2.0 |
 | assets/platforms/windows/solidcraft.wxs | PhotoCraft / SolidCraft contributors | PhotoCraft packaging templates (https://github.com/storytold/photocraft), adapted for SolidCraft | Apache-2.0 |
 | assets/shaders/viewport.wgsl | SolidCraft contributors | Original SolidCraft resource data or drawing code, collected without redesign | MIT OR Apache-2.0 |
+| assets/styles/ui/palettes.rs | SolidCraft contributors | Original SolidCraft resource data or drawing code, collected without redesign | MIT OR Apache-2.0 |
 | assets/styles/ui/themes/gruvbox-dark.json | SolidCraft contributors | original SolidCraft theme file mapping SolidCraft's UI colours to the Gruvbox palette's colour values (Gruvbox by Pavel Pertsev, https://github.com/morhetz/gruvbox, MIT) | MIT OR Apache-2.0 |
+| assets/styles/ui/themes/gruvbox-dark-hard.json | SolidCraft contributors | original SolidCraft theme file mapping SolidCraft's UI colours to the Gruvbox palette's colour values (Gruvbox by Pavel Pertsev, https://github.com/morhetz/gruvbox, MIT) | MIT OR Apache-2.0 |
+| assets/styles/ui/themes/gruvbox-dark-soft.json | SolidCraft contributors | original SolidCraft theme file mapping SolidCraft's UI colours to the Gruvbox palette's colour values (Gruvbox by Pavel Pertsev, https://github.com/morhetz/gruvbox, MIT) | MIT OR Apache-2.0 |
 | assets/styles/ui/themes/gruvbox-light.json | SolidCraft contributors | original SolidCraft theme file mapping SolidCraft's UI colours to the Gruvbox palette's colour values (Gruvbox by Pavel Pertsev, https://github.com/morhetz/gruvbox, MIT) | MIT OR Apache-2.0 |
+| assets/styles/ui/themes/gruvbox-light-hard.json | SolidCraft contributors | original SolidCraft theme file mapping SolidCraft's UI colours to the Gruvbox palette's colour values (Gruvbox by Pavel Pertsev, https://github.com/morhetz/gruvbox, MIT) | MIT OR Apache-2.0 |
+| assets/styles/ui/themes/gruvbox-light-soft.json | SolidCraft contributors | original SolidCraft theme file mapping SolidCraft's UI colours to the Gruvbox palette's colour values (Gruvbox by Pavel Pertsev, https://github.com/morhetz/gruvbox, MIT) | MIT OR Apache-2.0 |
 | assets/styles/ui/themes/solidcraft-95.json | SolidCraft contributors | original SolidCraft theme file | MIT OR Apache-2.0 |
 | assets/styles/ui/themes/platinum-9.json | SolidCraft contributors | original SolidCraft theme file | MIT OR Apache-2.0 |
 | assets/styles/ui/themes/cupertino.json | SolidCraft contributors | original SolidCraft theme file | MIT OR Apache-2.0 |
@@ -212,14 +181,11 @@ Editable drawing code, native projects and shipped exports are collected under `
 | assets/styles/ui/themes/one-dark.json | SolidCraft contributors | original SolidCraft theme file with colours adapted from the One Dark palette (Atom One Dark by GitHub Atom, https://github.com/atom/atom, MIT) | MIT OR Apache-2.0 |
 | assets/styles/ui/themes/tokyo-night.json | SolidCraft contributors | original SolidCraft theme file adapting the colours of a published palette (Tokyo Night by enkia, https://github.com/enkia/tokyo-night-vscode-theme, MIT) | MIT OR Apache-2.0 |
 | assets/styles/ui/themes/solarized-light.json | SolidCraft contributors | original SolidCraft theme file adapting the colours of a published palette (Solarized by Ethan Schoonover, https://github.com/altercation/solarized, MIT) | MIT OR Apache-2.0 |
-| assets/styles/ui/themes/solarized-dark.json | SolidCraft contributors | original SolidCraft theme file adapting the colours of a published palette (Solarized by Ethan Schoonover, https://github.com/altercation/solarized, MIT) | MIT OR Apache-2.0 |
 | assets/styles/ui/themes/nord.json | SolidCraft contributors | original SolidCraft theme file adapting the colours of a published palette (Nord by Sven Greb and the Nord contributors, https://github.com/nordtheme/nord, MIT) | MIT OR Apache-2.0 |
 | assets/styles/ui/themes/high-contrast.json | SolidCraft contributors | original SolidCraft theme file | MIT OR Apache-2.0 |
 | assets/styles/ui/themes/graphite.json | SolidCraft contributors | original SolidCraft theme file | MIT OR Apache-2.0 |
 | assets/styles/ui/themes/nosferatu.json | SolidCraft contributors | original SolidCraft theme file adapting the colours of a published palette (Dracula by Zeno Rocha and the Dracula Theme contributors, https://github.com/dracula/dracula-theme, MIT) | MIT OR Apache-2.0 |
 | assets/styles/ui/themes/catppuccin-mocha.json | SolidCraft contributors | original SolidCraft theme file adapting the colours of a published palette (Catppuccin by the Catppuccin organisation, https://github.com/catppuccin/catppuccin, MIT) | MIT OR Apache-2.0 |
-| assets/styles/ui/themes/okibi.json | SolidCraft contributors (Kai Evans) | original SolidCraft theme file mapping SolidCraft's UI colours to the Okibi palette (dark) of the Okibi design system by Kai Evans (https://kaievns.github.io/okibi-akiri-design-system-spec/) | MIT OR Apache-2.0 |
-| assets/styles/ui/themes/akari.json | SolidCraft contributors (Kai Evans) | original SolidCraft theme file mapping SolidCraft's UI colours to the Akari palette (light) of the Okibi design system by Kai Evans (https://kaievns.github.io/okibi-akiri-design-system-spec/) | MIT OR Apache-2.0 |
 | assets/styles/web/loading-logo.svg | SolidCraft contributors | Animation of the SolidCraft mark, built from the paths and gradients of assets/icons/app/macos/source/SolidCraft.icon/Assets/03-solid-blue-cutout.svg; original animation | MIT OR Apache-2.0 |
 | assets/styles/web/loading.css | SolidCraft contributors | Original SolidCraft resource data or drawing code, collected without redesign | MIT OR Apache-2.0 |
 | crates/io/src/native_cad/fixtures/block.FCStd | SolidCraft contributors | original 10 × 20 × 30 mm test box saved by FreeCAD 1.1.4 run as an external program (`make_block_fcstd.py` beside it); no third-party geometry | MIT OR Apache-2.0 |
@@ -243,18 +209,6 @@ Editable drawing code, native projects and shipped exports are collected under `
 | assets/icons/ui/design/svg/flat/plus.svg | SolidCraft contributors | single-colour application/navigation icon master (64 grid), original SolidCraft artwork | MIT OR Apache-2.0 |
 | assets/icons/ui/design/svg/flat/pan.svg | SolidCraft contributors | single-colour application/navigation icon master (64 grid), original SolidCraft artwork | MIT OR Apache-2.0 |
 | assets/icons/ui/design/svg/flat/perspective.svg | SolidCraft contributors | single-colour application/navigation icon master (64 grid), original SolidCraft artwork | MIT OR Apache-2.0 |
-| assets/icons/ui/design/svg/flat/prefs_appearance.svg | SolidCraft contributors | original icon master (64 grid) | MIT OR Apache-2.0 |
-| assets/icons/ui/design/svg/flat/prefs_assistant.svg | SolidCraft contributors | original icon master (64 grid) | MIT OR Apache-2.0 |
-| assets/icons/ui/design/svg/flat/prefs_design.svg | SolidCraft contributors | original icon master (64 grid) | MIT OR Apache-2.0 |
-| assets/icons/ui/design/svg/flat/prefs_general.svg | SolidCraft contributors | original icon master (64 grid) | MIT OR Apache-2.0 |
-| assets/icons/ui/design/svg/flat/prefs_graphics.svg | SolidCraft contributors | original icon master (64 grid) | MIT OR Apache-2.0 |
-| assets/icons/ui/design/svg/flat/prefs_layout.svg | SolidCraft contributors | original icon master (64 grid) | MIT OR Apache-2.0 |
-| assets/icons/ui/design/svg/flat/prefs_mouse3d.svg | SolidCraft contributors | original icon master (64 grid) | MIT OR Apache-2.0 |
-| assets/icons/ui/design/svg/flat/prefs_navigation.svg | SolidCraft contributors | original icon master (64 grid) | MIT OR Apache-2.0 |
-| assets/icons/ui/design/svg/flat/prefs_plugins.svg | SolidCraft contributors | original icon master (64 grid) | MIT OR Apache-2.0 |
-| assets/icons/ui/design/svg/flat/prefs_shortcuts.svg | SolidCraft contributors | original icon master (64 grid) | MIT OR Apache-2.0 |
-| assets/icons/ui/design/svg/flat/prefs_sketch.svg | SolidCraft contributors | original icon master (64 grid) | MIT OR Apache-2.0 |
-| assets/icons/ui/design/svg/flat/prefs_tools.svg | SolidCraft contributors | original icon master (64 grid) | MIT OR Apache-2.0 |
 | assets/icons/ui/design/svg/flat/redo.svg | SolidCraft contributors | single-colour application/navigation icon master (64 grid), original SolidCraft artwork | MIT OR Apache-2.0 |
 | assets/icons/ui/design/svg/flat/save.svg | SolidCraft contributors | single-colour application/navigation icon master (64 grid), original SolidCraft artwork | MIT OR Apache-2.0 |
 | assets/icons/ui/design/svg/flat/settings.svg | SolidCraft contributors | single-colour application/navigation icon master (64 grid), original SolidCraft artwork | MIT OR Apache-2.0 |
@@ -314,56 +268,8 @@ Editable drawing code, native projects and shipped exports are collected under `
 | assets/icons/ui/design/svg/model/circle_tt.svg | SolidCraft contributors | two-tone modelling icon master (64 grid), original SolidCraft artwork | MIT OR Apache-2.0 |
 | assets/icons/ui/design/svg/model/circle_ttt.svg | SolidCraft contributors | two-tone modelling icon master (64 grid), original SolidCraft artwork | MIT OR Apache-2.0 |
 | assets/icons/ui/design/svg/model/coil.svg | SolidCraft contributors | two-tone modelling icon master (64 grid), original SolidCraft artwork | MIT OR Apache-2.0 |
-| assets/icons/ui/design/svg/model/colored_components.svg | SolidCraft contributors | original icon master (64 grid) | MIT OR Apache-2.0 |
 | assets/icons/ui/design/svg/model/combine.svg | SolidCraft contributors | two-tone modelling icon master (64 grid), original SolidCraft artwork | MIT OR Apache-2.0 |
 | assets/icons/ui/design/svg/model/component.svg | SolidCraft contributors | two-tone modelling icon master (64 grid), original SolidCraft artwork | MIT OR Apache-2.0 |
-
-### Render workspace icon drafts
-
-Original SolidCraft drawings, Open for owner review; no runtime assignments.
-
-| File | Author | Source | Licence |
-|---|---|---|---|
-| assets/icons/ui/design/svg/model/render_all_shots.svg | SolidCraft contributors | original Camera icon master (64 grid): stacked camera bodies with a lower-right play badge | MIT OR Apache-2.0 |
-| assets/icons/ui/design/svg/model/render_appearance.svg | SolidCraft contributors | original Looks icon master (64 grid): shaded look sphere on the top corner of an accent-shaded cube | MIT OR Apache-2.0 |
-| assets/icons/ui/design/svg/model/render_aspect_frame.svg | SolidCraft contributors | original Camera icon master (64 grid): wide rounded frame with two opposite corner brackets | MIT OR Apache-2.0 |
-| assets/icons/ui/design/svg/model/render_backdrop.svg | SolidCraft contributors | original Studio icon master (64 grid): grey cube in front of a tall upright accent panel | MIT OR Apache-2.0 |
-| assets/icons/ui/design/svg/model/render_cancel.svg | SolidCraft contributors | original Output icon master (64 grid): picture with a lower-right round stop badge | MIT OR Apache-2.0 |
-| assets/icons/ui/design/svg/model/render_check.svg | SolidCraft contributors | original Output icon master (64 grid): picture with a lower-right round check badge | MIT OR Apache-2.0 |
-| assets/icons/ui/design/svg/model/render_compare.svg | SolidCraft contributors | original Output icon master (64 grid): two grey pictures split by a vertical slider with opposed arrows | MIT OR Apache-2.0 |
-| assets/icons/ui/design/svg/model/render_copy_look.svg | SolidCraft contributors | original Looks icon master (64 grid): look sphere in a square frame offset from a second frame outline | MIT OR Apache-2.0 |
-| assets/icons/ui/design/svg/model/render_execute.svg | SolidCraft contributors | original Output icon master (64 grid): picture with a lower-right round play badge | MIT OR Apache-2.0 |
-| assets/icons/ui/design/svg/model/render_export_image.svg | SolidCraft contributors | original Output icon master (64 grid): picture with a large outward diagonal arrow at the upper right | MIT OR Apache-2.0 |
-| assets/icons/ui/design/svg/model/render_exposure.svg | SolidCraft contributors | original Camera icon master (64 grid): split light and accent disc with plus and minus marks | MIT OR Apache-2.0 |
-| assets/icons/ui/design/svg/model/render_fit_product.svg | SolidCraft contributors | original Camera icon master (64 grid): grey cube inside four corner brackets | MIT OR Apache-2.0 |
-| assets/icons/ui/design/svg/model/render_frame_guides.svg | SolidCraft contributors | original Camera icon master (64 grid): rounded frame with a rule-of-thirds grid and four accent nodes | MIT OR Apache-2.0 |
-| assets/icons/ui/design/svg/model/render_from_material.svg | SolidCraft contributors | original Looks icon master (64 grid): look sphere struck through above a plain grey slab | MIT OR Apache-2.0 |
-| assets/icons/ui/design/svg/model/render_ground.svg | SolidCraft contributors | original Studio icon master (64 grid): grey cube on a slab with an accent contact patch | MIT OR Apache-2.0 |
-| assets/icons/ui/design/svg/model/render_lens.svg | SolidCraft contributors | original Camera icon master (64 grid): concentric lens rings around an accent centre | MIT OR Apache-2.0 |
-| assets/icons/ui/design/svg/model/render_library.svg | SolidCraft contributors | original Studio icon master (64 grid): row of three look spheres, middle one accent, on a shelf bar | MIT OR Apache-2.0 |
-| assets/icons/ui/design/svg/model/render_light_area.svg | SolidCraft contributors | original Lights icon master (64 grid): slanted flat panel above a dotted accent stem | MIT OR Apache-2.0 |
-| assets/icons/ui/design/svg/model/render_light_by_highlight.svg | SolidCraft contributors | original Lights icon master (64 grid): shaded sphere with a ringed highlight target and dotted stem arriving from above | MIT OR Apache-2.0 |
-| assets/icons/ui/design/svg/model/render_light_point.svg | SolidCraft contributors | original Lights icon master (64 grid): round source disc with centre dot above a dotted accent stem | MIT OR Apache-2.0 |
-| assets/icons/ui/design/svg/model/render_light_spot.svg | SolidCraft contributors | original Lights icon master (64 grid): cone source with curved rim above a dotted accent stem | MIT OR Apache-2.0 |
-| assets/icons/ui/design/svg/model/render_lighting_presets.svg | SolidCraft contributors | original Studio icon master (64 grid): two stacked cards, the front one holding a light bulb | MIT OR Apache-2.0 |
-| assets/icons/ui/design/svg/model/render_output_size.svg | SolidCraft contributors | original Output icon master (64 grid): picture frame with a diagonal double-headed dimension arrow | MIT OR Apache-2.0 |
-| assets/icons/ui/design/svg/model/render_paint.svg | SolidCraft contributors | original Looks icon master (64 grid): flat brush with an accent tip, light ferrule and slate handle | MIT OR Apache-2.0 |
-| assets/icons/ui/design/svg/model/render_pick_up.svg | SolidCraft contributors | original Looks icon master (64 grid): eyedropper with a grey bulb, slate crossbar and accent sampling tip | MIT OR Apache-2.0 |
-| assets/icons/ui/design/svg/model/render_quality.svg | SolidCraft contributors | original Output icon master (64 grid): three rising bars, the tallest in accent | MIT OR Apache-2.0 |
-| assets/icons/ui/design/svg/model/render_replace_all.svg | SolidCraft contributors | original Looks icon master (64 grid): grey sample sphere with an arrow to an accent sphere beside a second one | MIT OR Apache-2.0 |
-| assets/icons/ui/design/svg/model/render_results.svg | SolidCraft contributors | original Output icon master (64 grid): stack of two pictures, the front one showing a landscape | MIT OR Apache-2.0 |
-| assets/icons/ui/design/svg/model/render_same_look.svg | SolidCraft contributors | original Looks icon master (64 grid): look sphere and three cubes, the two matching cubes ringed | MIT OR Apache-2.0 |
-| assets/icons/ui/design/svg/model/render_shot.svg | SolidCraft contributors | original Camera icon master (64 grid): camera body with a lower-right plus badge | MIT OR Apache-2.0 |
-| assets/icons/ui/design/svg/model/render_shots_strip.svg | SolidCraft contributors | original Camera icon master (64 grid): strip of three small frames, the middle one in accent | MIT OR Apache-2.0 |
-| assets/icons/ui/design/svg/model/render_solo_light.svg | SolidCraft contributors | original Lights icon master (64 grid): point source and dotted stem inside four corner focus brackets | MIT OR Apache-2.0 |
-| assets/icons/ui/design/svg/model/render_sun.svg | SolidCraft contributors | original Lights icon master (64 grid): source disc with eight short radial rays | MIT OR Apache-2.0 |
-| assets/icons/ui/design/svg/model/render_transparent_background.svg | SolidCraft contributors | original Output icon master (64 grid): grey cube on a checker tile | MIT OR Apache-2.0 |
-| assets/icons/ui/design/svg/model/render_update_shot.svg | SolidCraft contributors | original Camera icon master (64 grid): camera body with a lower-right refresh badge | MIT OR Apache-2.0 |
-
-### UI icon masters (continued)
-
-| File | Author | Source | Licence |
-|---|---|---|---|
 | assets/icons/ui/design/svg/model/compute.svg | SolidCraft contributors | two-tone modelling icon master (64 grid), original SolidCraft artwork | MIT OR Apache-2.0 |
 | assets/icons/ui/design/svg/model/configuration_table.svg | SolidCraft contributors | two-tone modelling icon master (64 grid), original SolidCraft artwork | MIT OR Apache-2.0 |
 | assets/icons/ui/design/svg/model/conic.svg | SolidCraft contributors | two-tone modelling icon master (64 grid), original SolidCraft artwork | MIT OR Apache-2.0 |
@@ -453,21 +359,6 @@ Original SolidCraft drawings, Open for owner review; no runtime assignments.
 | assets/icons/ui/design/svg/flat/shield.svg | SolidCraft contributors | original icon master (64 grid) | MIT OR Apache-2.0 |
 | assets/icons/ui/design/svg/model/status_recovery.svg | SolidCraft contributors | original icon master (64 grid) | MIT OR Apache-2.0 |
 | assets/icons/ui/design/svg/model/frame_member.svg | SolidCraft contributors | original icon master (64 grid) | MIT OR Apache-2.0 |
-| assets/icons/ui/design/svg/model/render_environment.svg | SolidCraft contributors | original Studio icon master (64 grid): dome with a grey cube inside | MIT OR Apache-2.0 |
-| assets/icons/ui/design/svg/flat/style_shaded.svg | SolidCraft contributors | original icon master (64 grid) | MIT OR Apache-2.0 |
-| assets/icons/ui/design/svg/flat/style_wireframe.svg | SolidCraft contributors | original icon master (64 grid) | MIT OR Apache-2.0 |
-| assets/icons/ui/design/svg/flat/style_hidden_edges.svg | SolidCraft contributors | original icon master (64 grid) | MIT OR Apache-2.0 |
-| assets/icons/ui/design/svg/flat/style_translucent.svg | SolidCraft contributors | original icon master (64 grid) | MIT OR Apache-2.0 |
-| assets/icons/ui/design/svg/flat/select_faces_edges.svg | SolidCraft contributors | original icon master (64 grid) | MIT OR Apache-2.0 |
-| assets/icons/ui/design/svg/flat/select_bodies.svg | SolidCraft contributors | original icon master (64 grid) | MIT OR Apache-2.0 |
-| assets/icons/ui/design/svg/flat/select_features.svg | SolidCraft contributors | original icon master (64 grid) | MIT OR Apache-2.0 |
-| assets/icons/ui/design/svg/flat/select_parts.svg | SolidCraft contributors | original icon master (64 grid) | MIT OR Apache-2.0 |
-| assets/icons/ui/design/svg/flat/select_components.svg | SolidCraft contributors | original icon master (64 grid) | MIT OR Apache-2.0 |
-| assets/icons/ui/design/svg/flat/select_sketch.svg | SolidCraft contributors | original icon master (64 grid) | MIT OR Apache-2.0 |
-| assets/icons/ui/design/svg/flat/display.svg | SolidCraft contributors | original icon master (64 grid) | MIT OR Apache-2.0 |
-| assets/icons/ui/design/svg/flat/grid.svg | SolidCraft contributors | original icon master (64 grid) | MIT OR Apache-2.0 |
-| assets/icons/ui/design/svg/flat/ground_shadow.svg | SolidCraft contributors | original icon master (64 grid) | MIT OR Apache-2.0 |
-| assets/icons/ui/design/svg/flat/ambient_occlusion.svg | SolidCraft contributors | original icon master (64 grid) | MIT OR Apache-2.0 |
 | assets/icons/ui/design/svg/model/placeholder.svg | SolidCraft contributors | two-tone modelling icon master (64 grid), original SolidCraft artwork | MIT OR Apache-2.0 |
 | assets/icons/ui/design/svg/model/plane.svg | SolidCraft contributors | two-tone modelling icon master (64 grid), original SolidCraft artwork | MIT OR Apache-2.0 |
 | assets/icons/ui/design/svg/model/plane_angle.svg | SolidCraft contributors | two-tone modelling icon master (64 grid), original SolidCraft artwork | MIT OR Apache-2.0 |
@@ -609,240 +500,6 @@ Original SolidCraft drawings, Open for owner review; no runtime assignments.
 
 | docs/book/src/og.png | SolidCraft contributors | copy of assets/branding/web/source/og.png staged by cargo xtask book (gitignored) | MIT OR Apache-2.0 |
 | docs/sponsors/blacksmith-ci-powered.png | Blacksmith (blacksmith.sh) | "CI powered by Blacksmith" sponsor banner supplied by Blacksmith for the sponsorship credit; used only to credit the sponsor, not part of the application | © Blacksmith, used with permission |
-| assets/icons/ui/design/svg/model/path_flange.svg | SolidCraft contributors | original icon master (64 grid) | MIT OR Apache-2.0 |
-| docs/book/src/generated/hem.png | SolidCraft contributors | rendered by `cargo xtask book` (`solidcraft-cli snapshot docs/book/scripts/hem.json`; gitignored), original sheet metal demonstration | MIT OR Apache-2.0 |
-| docs/book/scripts/hem.json | SolidCraft contributors | original parametric recipe for an 80 × 50 mm sheet with an 8 mm returned edge, authored for the command guide | MIT OR Apache-2.0 |
-| assets/styles/ui/themes/clay.json | SolidCraft contributors | original SolidCraft theme file (Clay, light): warm paper palette chosen for SolidCraft | MIT OR Apache-2.0 |
-| assets/styles/ui/themes/clay-dark.json | SolidCraft contributors | original SolidCraft theme file (Clay Dark): warm charcoal palette chosen for SolidCraft | MIT OR Apache-2.0 |
-| assets/icons/ui/design/svg/model/cone.svg | SolidCraft contributors | original icon master (64 grid) | MIT OR Apache-2.0 |
-| assets/locales/ar.json | Abdullah (A-AL-ANAZI) | Original Arabic translation of SolidCraft's English catalog; no commercial CAD text used | MIT OR Apache-2.0 |
-| assets/locales/he.json | SolidCraft contributors | Original Hebrew translation of SolidCraft's English catalog; no commercial CAD text used | MIT OR Apache-2.0 |
-| assets/styles/ui/themes/cga.json | SolidCraft contributors | original SolidCraft theme file using the 16 colours of the IBM Color Graphics Adapter (black, cyan, magenta, and white of its high-intensity palette 1 for the interface) | MIT OR Apache-2.0 |
-| assets/styles/ui/themes/1-bit.json | SolidCraft contributors | original SolidCraft theme file | MIT OR Apache-2.0 |
-| assets/styles/ui/themes/1-bit-dark.json | SolidCraft contributors | original SolidCraft theme file | MIT OR Apache-2.0 |
-| `assets/locales/pending/navbar-customisation.json` | SolidCraft contributors | Original navigation bar editor translations | MIT OR Apache-2.0 |
-| `assets/locales/pending/navbar-slots.json` | SolidCraft contributors | Original navigation slot translations | MIT OR Apache-2.0 |
-| assets/locales/bs.json | Tarik Sijercic (tsijercic1) | Original Bosnian translation of SolidCraft's English catalog; no commercial CAD text used | MIT OR Apache-2.0 |
-| assets/locales/hr.json | Tarik Sijercic (tsijercic1) | Original Croatian translation of SolidCraft's English catalog; no commercial CAD text used | MIT OR Apache-2.0 |
-| assets/locales/sr.json | Tarik Sijercic (tsijercic1) | Original Serbian (ekavian, Cyrillic) translation of SolidCraft's English catalog; no commercial CAD text used | MIT OR Apache-2.0 |
-| assets/icons/ui/design/svg/model/finish_edit.svg | SolidCraft contributors | original icon master (64 grid) | MIT OR Apache-2.0 |
-| `assets/locales/pending/sketch-tracking-guides.json` | SolidCraft contributors | Original alignment-guide preference labels and help text | MIT OR Apache-2.0 |
-| assets/locales/pending/point-clouds.json | SolidCraft contributors | Original point-cloud UI strings and translations | MIT OR Apache-2.0 |
-| assets/icons/ui/design/svg/model/feature_group.svg | SolidCraft contributors | two-tone modelling icon master (64 grid), original SolidCraft artwork | MIT OR Apache-2.0 |
-| assets/icons/ui/design/svg/model/mesh_body.svg | SolidCraft contributors | two-tone modelling icon master (64 grid), original SolidCraft artwork | MIT OR Apache-2.0 |
-| assets/icons/ui/design/svg/model/timeline_play.svg | SolidCraft contributors | Original history playback icon; canonical grey_cube base and original action cue | MIT OR Apache-2.0 |
-| assets/icons/ui/design/svg/model/timeline_stop.svg | SolidCraft contributors | Original history playback icon; canonical grey_cube base and original action cue | MIT OR Apache-2.0 |
-| assets/icons/ui/design/svg/flat/status_pin.svg | SolidCraft contributors | Original analytic pin icon for persistent viewport results | MIT OR Apache-2.0 |
-| assets/locales/pending/render-wear.json | SolidCraft contributors | Original UI labels and translations | MIT OR Apache-2.0 |
-| assets/icons/ui/design/svg/model/equation_curve.svg | SolidCraft contributors | two-tone modelling icon master (64 grid), original SolidCraft artwork | MIT OR Apache-2.0 |
-| assets/locales/pending/sketch-recent-snap.json | SolidCraft contributors | Original preference messages for the recent centre and midpoint snap | MIT OR Apache-2.0 |
-| assets/icons/ui/design/svg/model/construction_line.svg | SolidCraft contributors | original icon master (64 grid) | MIT OR Apache-2.0 |
-| assets/icons/ui/design/svg/model/construction_line_horizontal.svg | SolidCraft contributors | original icon master (64 grid) | MIT OR Apache-2.0 |
-| assets/icons/ui/design/svg/model/construction_line_vertical.svg | SolidCraft contributors | original icon master (64 grid) | MIT OR Apache-2.0 |
-| assets/icons/ui/design/svg/model/construction_line_angle.svg | SolidCraft contributors | original icon master (64 grid) | MIT OR Apache-2.0 |
-| assets/icons/ui/design/svg/model/construction_line_parallel.svg | SolidCraft contributors | original icon master (64 grid) | MIT OR Apache-2.0 |
-| assets/icons/ui/design/svg/model/construction_line_perpendicular.svg | SolidCraft contributors | original icon master (64 grid) | MIT OR Apache-2.0 |
-| assets/icons/ui/design/svg/model/construction_line_tangent_external.svg | SolidCraft contributors | original icon master (64 grid) | MIT OR Apache-2.0 |
-| assets/icons/ui/design/svg/model/construction_line_tangent_at.svg | SolidCraft contributors | original icon master (64 grid) | MIT OR Apache-2.0 |
-| assets/icons/ui/design/svg/model/construction_line_tangent_two.svg | SolidCraft contributors | original icon master (64 grid) | MIT OR Apache-2.0 |
-| assets/icons/ui/design/svg/model/construction_line_bisector.svg | SolidCraft contributors | original icon master (64 grid) | MIT OR Apache-2.0 |
-| docs/book/src/generated/equation-circle.png | SolidCraft contributors | rendered by `cargo xtask book` (`solidcraft-cli snapshot docs/book/scripts/equation-circle.json`; gitignored) | MIT OR Apache-2.0 |
-| docs/book/src/generated/equation-flower.png | SolidCraft contributors | rendered by `cargo xtask book` (`solidcraft-cli snapshot docs/book/scripts/equation-flower.json`; gitignored) | MIT OR Apache-2.0 |
-| docs/book/src/generated/equation-involute.png | SolidCraft contributors | rendered by `cargo xtask book` (`solidcraft-cli snapshot docs/book/scripts/equation-involute.json`; gitignored) | MIT OR Apache-2.0 |
-| docs/book/src/generated/equation-line.png | SolidCraft contributors | rendered by `cargo xtask book` (`solidcraft-cli snapshot docs/book/scripts/equation-line.json`; gitignored) | MIT OR Apache-2.0 |
-| docs/book/src/generated/equation-parabola.png | SolidCraft contributors | rendered by `cargo xtask book` (`solidcraft-cli snapshot docs/book/scripts/equation-parabola.json`; gitignored) | MIT OR Apache-2.0 |
-| docs/book/src/generated/equation-spiral.png | SolidCraft contributors | rendered by `cargo xtask book` (`solidcraft-cli snapshot docs/book/scripts/equation-spiral.json`; gitignored) | MIT OR Apache-2.0 |
-| docs/book/src/generated/equation-wave.png | SolidCraft contributors | rendered by `cargo xtask book` (`solidcraft-cli snapshot docs/book/scripts/equation-wave.json`; gitignored) | MIT OR Apache-2.0 |
-| assets/icons/ui/design/svg/model/print_face.svg | SolidCraft contributors | two-tone modelling icon master (64 grid), original SolidCraft artwork | MIT OR Apache-2.0 |
-| assets/locales/fi.json | SolidCraft contributors | Original Finnish translation of SolidCraft's English catalog, AI-assisted (Claude Code) clean-room from the English and not yet reviewed line by line by a native speaker; no commercial CAD text used | MIT OR Apache-2.0 |
-| assets/icons/ui/design/svg/model/plane_axis_point.svg | SolidCraft contributors | original icon master (64 grid) | MIT OR Apache-2.0 |
-| docs/design/preferences/figures/aa-2x.dark.svg | SolidCraft contributors | original SolidCraft artwork drawn for the Preferences redesign (tracker #9863), extracted from the design board as a standalone SVG | MIT OR Apache-2.0 |
-| docs/design/preferences/figures/aa-2x.light.svg | SolidCraft contributors | original SolidCraft artwork drawn for the Preferences redesign (tracker #9863), extracted from the design board as a standalone SVG | MIT OR Apache-2.0 |
-| docs/design/preferences/figures/aa-4x.dark.svg | SolidCraft contributors | original SolidCraft artwork drawn for the Preferences redesign (tracker #9863), extracted from the design board as a standalone SVG | MIT OR Apache-2.0 |
-| docs/design/preferences/figures/aa-4x.light.svg | SolidCraft contributors | original SolidCraft artwork drawn for the Preferences redesign (tracker #9863), extracted from the design board as a standalone SVG | MIT OR Apache-2.0 |
-| docs/design/preferences/figures/aa-8x.dark.svg | SolidCraft contributors | original SolidCraft artwork drawn for the Preferences redesign (tracker #9863), extracted from the design board as a standalone SVG | MIT OR Apache-2.0 |
-| docs/design/preferences/figures/aa-8x.light.svg | SolidCraft contributors | original SolidCraft artwork drawn for the Preferences redesign (tracker #9863), extracted from the design board as a standalone SVG | MIT OR Apache-2.0 |
-| docs/design/preferences/figures/aa-off.dark.svg | SolidCraft contributors | original SolidCraft artwork drawn for the Preferences redesign (tracker #9863), extracted from the design board as a standalone SVG | MIT OR Apache-2.0 |
-| docs/design/preferences/figures/aa-off.light.svg | SolidCraft contributors | original SolidCraft artwork drawn for the Preferences redesign (tracker #9863), extracted from the design board as a standalone SVG | MIT OR Apache-2.0 |
-| docs/design/preferences/figures/agent-pointer-speed.dark.svg | SolidCraft contributors | original SolidCraft artwork drawn for the Preferences redesign (tracker #9863), extracted from the design board as a standalone SVG | MIT OR Apache-2.0 |
-| docs/design/preferences/figures/agent-pointer-speed.light.svg | SolidCraft contributors | original SolidCraft artwork drawn for the Preferences redesign (tracker #9863), extracted from the design board as a standalone SVG | MIT OR Apache-2.0 |
-| docs/design/preferences/figures/ao-on.dark.svg | SolidCraft contributors | original SolidCraft artwork drawn for the Preferences redesign (tracker #9863), extracted from the design board as a standalone SVG | MIT OR Apache-2.0 |
-| docs/design/preferences/figures/ao-on.light.svg | SolidCraft contributors | original SolidCraft artwork drawn for the Preferences redesign (tracker #9863), extracted from the design board as a standalone SVG | MIT OR Apache-2.0 |
-| docs/design/preferences/figures/assembly-move.dark.svg | SolidCraft contributors | original SolidCraft artwork drawn for the Preferences redesign (tracker #9863), extracted from the design board as a standalone SVG | MIT OR Apache-2.0 |
-| docs/design/preferences/figures/assembly-move.light.svg | SolidCraft contributors | original SolidCraft artwork drawn for the Preferences redesign (tracker #9863), extracted from the design board as a standalone SVG | MIT OR Apache-2.0 |
-| docs/design/preferences/figures/browser-card.dark.svg | SolidCraft contributors | original SolidCraft artwork drawn for the Preferences redesign (tracker #9863), extracted from the design board as a standalone SVG | MIT OR Apache-2.0 |
-| docs/design/preferences/figures/browser-card.light.svg | SolidCraft contributors | original SolidCraft artwork drawn for the Preferences redesign (tracker #9863), extracted from the design board as a standalone SVG | MIT OR Apache-2.0 |
-| docs/design/preferences/figures/browser-column.dark.svg | SolidCraft contributors | original SolidCraft artwork drawn for the Preferences redesign (tracker #9863), extracted from the design board as a standalone SVG | MIT OR Apache-2.0 |
-| docs/design/preferences/figures/browser-column.light.svg | SolidCraft contributors | original SolidCraft artwork drawn for the Preferences redesign (tracker #9863), extracted from the design board as a standalone SVG | MIT OR Apache-2.0 |
-| docs/design/preferences/figures/colour-vision-axes.dark.svg | SolidCraft contributors | original SolidCraft artwork drawn for the Preferences redesign (tracker #9863), extracted from the design board as a standalone SVG | MIT OR Apache-2.0 |
-| docs/design/preferences/figures/colour-vision-axes.light.svg | SolidCraft contributors | original SolidCraft artwork drawn for the Preferences redesign (tracker #9863), extracted from the design board as a standalone SVG | MIT OR Apache-2.0 |
-| docs/design/preferences/figures/colour-vision-bends.dark.svg | SolidCraft contributors | original SolidCraft artwork drawn for the Preferences redesign (tracker #9863), extracted from the design board as a standalone SVG | MIT OR Apache-2.0 |
-| docs/design/preferences/figures/colour-vision-bends.light.svg | SolidCraft contributors | original SolidCraft artwork drawn for the Preferences redesign (tracker #9863), extracted from the design board as a standalone SVG | MIT OR Apache-2.0 |
-| docs/design/preferences/figures/colour-vision-draft.dark.svg | SolidCraft contributors | original SolidCraft artwork drawn for the Preferences redesign (tracker #9863), extracted from the design board as a standalone SVG | MIT OR Apache-2.0 |
-| docs/design/preferences/figures/colour-vision-draft.light.svg | SolidCraft contributors | original SolidCraft artwork drawn for the Preferences redesign (tracker #9863), extracted from the design board as a standalone SVG | MIT OR Apache-2.0 |
-| docs/design/preferences/figures/colour-vision-failed.dark.svg | SolidCraft contributors | original SolidCraft artwork drawn for the Preferences redesign (tracker #9863), extracted from the design board as a standalone SVG | MIT OR Apache-2.0 |
-| docs/design/preferences/figures/colour-vision-failed.light.svg | SolidCraft contributors | original SolidCraft artwork drawn for the Preferences redesign (tracker #9863), extracted from the design board as a standalone SVG | MIT OR Apache-2.0 |
-| docs/design/preferences/figures/colour-vision-fixed.dark.svg | SolidCraft contributors | original SolidCraft artwork drawn for the Preferences redesign (tracker #9863), extracted from the design board as a standalone SVG | MIT OR Apache-2.0 |
-| docs/design/preferences/figures/colour-vision-fixed.light.svg | SolidCraft contributors | original SolidCraft artwork drawn for the Preferences redesign (tracker #9863), extracted from the design board as a standalone SVG | MIT OR Apache-2.0 |
-| docs/design/preferences/figures/colour-vision-projected.dark.svg | SolidCraft contributors | original SolidCraft artwork drawn for the Preferences redesign (tracker #9863), extracted from the design board as a standalone SVG | MIT OR Apache-2.0 |
-| docs/design/preferences/figures/colour-vision-projected.light.svg | SolidCraft contributors | original SolidCraft artwork drawn for the Preferences redesign (tracker #9863), extracted from the design board as a standalone SVG | MIT OR Apache-2.0 |
-| docs/design/preferences/figures/direct-interaction.dark.svg | SolidCraft contributors | original SolidCraft artwork drawn for the Preferences redesign (tracker #9863), extracted from the design board as a standalone SVG | MIT OR Apache-2.0 |
-| docs/design/preferences/figures/direct-interaction.light.svg | SolidCraft contributors | original SolidCraft artwork drawn for the Preferences redesign (tracker #9863), extracted from the design board as a standalone SVG | MIT OR Apache-2.0 |
-| docs/design/preferences/figures/frame-rate.dark.svg | SolidCraft contributors | original SolidCraft artwork drawn for the Preferences redesign (tracker #9863), extracted from the design board as a standalone SVG | MIT OR Apache-2.0 |
-| docs/design/preferences/figures/frame-rate.light.svg | SolidCraft contributors | original SolidCraft artwork drawn for the Preferences redesign (tracker #9863), extracted from the design board as a standalone SVG | MIT OR Apache-2.0 |
-| docs/design/preferences/figures/history-bottom.dark.svg | SolidCraft contributors | original SolidCraft artwork drawn for the Preferences redesign (tracker #9863), extracted from the design board as a standalone SVG | MIT OR Apache-2.0 |
-| docs/design/preferences/figures/history-bottom.light.svg | SolidCraft contributors | original SolidCraft artwork drawn for the Preferences redesign (tracker #9863), extracted from the design board as a standalone SVG | MIT OR Apache-2.0 |
-| docs/design/preferences/figures/history-in-browser.dark.svg | SolidCraft contributors | original SolidCraft artwork drawn for the Preferences redesign (tracker #9863), extracted from the design board as a standalone SVG | MIT OR Apache-2.0 |
-| docs/design/preferences/figures/history-in-browser.light.svg | SolidCraft contributors | original SolidCraft artwork drawn for the Preferences redesign (tracker #9863), extracted from the design board as a standalone SVG | MIT OR Apache-2.0 |
-| docs/design/preferences/figures/history-left.dark.svg | SolidCraft contributors | original SolidCraft artwork drawn for the Preferences redesign (tracker #9863), extracted from the design board as a standalone SVG | MIT OR Apache-2.0 |
-| docs/design/preferences/figures/history-left.light.svg | SolidCraft contributors | original SolidCraft artwork drawn for the Preferences redesign (tracker #9863), extracted from the design board as a standalone SVG | MIT OR Apache-2.0 |
-| docs/design/preferences/figures/history-under-browser.dark.svg | SolidCraft contributors | original SolidCraft artwork drawn for the Preferences redesign (tracker #9863), extracted from the design board as a standalone SVG | MIT OR Apache-2.0 |
-| docs/design/preferences/figures/history-under-browser.light.svg | SolidCraft contributors | original SolidCraft artwork drawn for the Preferences redesign (tracker #9863), extracted from the design board as a standalone SVG | MIT OR Apache-2.0 |
-| docs/design/preferences/figures/layout-schematic.dark.svg | SolidCraft contributors | original SolidCraft artwork drawn for the Preferences redesign (tracker #9863), extracted from the design board as a standalone SVG | MIT OR Apache-2.0 |
-| docs/design/preferences/figures/layout-schematic.light.svg | SolidCraft contributors | original SolidCraft artwork drawn for the Preferences redesign (tracker #9863), extracted from the design board as a standalone SVG | MIT OR Apache-2.0 |
-| docs/design/preferences/figures/measure-axis-distances.dark.svg | SolidCraft contributors | original SolidCraft artwork drawn for the Preferences redesign (tracker #9863), extracted from the design board as a standalone SVG | MIT OR Apache-2.0 |
-| docs/design/preferences/figures/measure-axis-distances.light.svg | SolidCraft contributors | original SolidCraft artwork drawn for the Preferences redesign (tracker #9863), extracted from the design board as a standalone SVG | MIT OR Apache-2.0 |
-| docs/design/preferences/figures/mouse-mapping.dark.svg | SolidCraft contributors | original SolidCraft artwork drawn for the Preferences redesign (tracker #9863), extracted from the design board as a standalone SVG | MIT OR Apache-2.0 |
-| docs/design/preferences/figures/mouse-mapping.light.svg | SolidCraft contributors | original SolidCraft artwork drawn for the Preferences redesign (tracker #9863), extracted from the design board as a standalone SVG | MIT OR Apache-2.0 |
-| docs/design/preferences/figures/navigator-axes.dark.svg | SolidCraft contributors | original SolidCraft artwork drawn for the Preferences redesign (tracker #9863), extracted from the design board as a standalone SVG | MIT OR Apache-2.0 |
-| docs/design/preferences/figures/navigator-axes.light.svg | SolidCraft contributors | original SolidCraft artwork drawn for the Preferences redesign (tracker #9863), extracted from the design board as a standalone SVG | MIT OR Apache-2.0 |
-| docs/design/preferences/figures/navigator-cube.dark.svg | SolidCraft contributors | original SolidCraft artwork drawn for the Preferences redesign (tracker #9863), extracted from the design board as a standalone SVG | MIT OR Apache-2.0 |
-| docs/design/preferences/figures/navigator-cube.light.svg | SolidCraft contributors | original SolidCraft artwork drawn for the Preferences redesign (tracker #9863), extracted from the design board as a standalone SVG | MIT OR Apache-2.0 |
-| docs/design/preferences/figures/orbit-centre.dark.svg | SolidCraft contributors | original SolidCraft artwork drawn for the Preferences redesign (tracker #9863), extracted from the design board as a standalone SVG | MIT OR Apache-2.0 |
-| docs/design/preferences/figures/orbit-centre.light.svg | SolidCraft contributors | original SolidCraft artwork drawn for the Preferences redesign (tracker #9863), extracted from the design board as a standalone SVG | MIT OR Apache-2.0 |
-| docs/design/preferences/figures/orbit-cursor.dark.svg | SolidCraft contributors | original SolidCraft artwork drawn for the Preferences redesign (tracker #9863), extracted from the design board as a standalone SVG | MIT OR Apache-2.0 |
-| docs/design/preferences/figures/orbit-cursor.light.svg | SolidCraft contributors | original SolidCraft artwork drawn for the Preferences redesign (tracker #9863), extracted from the design board as a standalone SVG | MIT OR Apache-2.0 |
-| docs/design/preferences/figures/orbit-origin.dark.svg | SolidCraft contributors | original SolidCraft artwork drawn for the Preferences redesign (tracker #9863), extracted from the design board as a standalone SVG | MIT OR Apache-2.0 |
-| docs/design/preferences/figures/orbit-origin.light.svg | SolidCraft contributors | original SolidCraft artwork drawn for the Preferences redesign (tracker #9863), extracted from the design board as a standalone SVG | MIT OR Apache-2.0 |
-| docs/design/preferences/figures/orientation-y-up.dark.svg | SolidCraft contributors | original SolidCraft artwork: the Orientation figure copied from the app and extracted from the Preferences redesign board as a standalone SVG | MIT OR Apache-2.0 |
-| docs/design/preferences/figures/orientation-y-up.light.svg | SolidCraft contributors | original SolidCraft artwork: the Orientation figure copied from the app and extracted from the Preferences redesign board as a standalone SVG | MIT OR Apache-2.0 |
-| docs/design/preferences/figures/orientation-z-up.dark.svg | SolidCraft contributors | original SolidCraft artwork: the Orientation figure copied from the app and extracted from the Preferences redesign board as a standalone SVG | MIT OR Apache-2.0 |
-| docs/design/preferences/figures/orientation-z-up.light.svg | SolidCraft contributors | original SolidCraft artwork: the Orientation figure copied from the app and extracted from the Preferences redesign board as a standalone SVG | MIT OR Apache-2.0 |
-| docs/design/preferences/figures/quick-measure.dark.svg | SolidCraft contributors | original SolidCraft artwork drawn for the Preferences redesign (tracker #9863), extracted from the design board as a standalone SVG | MIT OR Apache-2.0 |
-| docs/design/preferences/figures/quick-measure.light.svg | SolidCraft contributors | original SolidCraft artwork drawn for the Preferences redesign (tracker #9863), extracted from the design board as a standalone SVG | MIT OR Apache-2.0 |
-| docs/design/preferences/figures/select-bodies.dark.svg | SolidCraft contributors | original SolidCraft artwork drawn for the Preferences redesign (tracker #9863), extracted from the design board as a standalone SVG | MIT OR Apache-2.0 |
-| docs/design/preferences/figures/select-bodies.light.svg | SolidCraft contributors | original SolidCraft artwork drawn for the Preferences redesign (tracker #9863), extracted from the design board as a standalone SVG | MIT OR Apache-2.0 |
-| docs/design/preferences/figures/select-faces-edges.dark.svg | SolidCraft contributors | original SolidCraft artwork drawn for the Preferences redesign (tracker #9863), extracted from the design board as a standalone SVG | MIT OR Apache-2.0 |
-| docs/design/preferences/figures/select-faces-edges.light.svg | SolidCraft contributors | original SolidCraft artwork drawn for the Preferences redesign (tracker #9863), extracted from the design board as a standalone SVG | MIT OR Apache-2.0 |
-| docs/design/preferences/figures/sketch-conflict.dark.svg | SolidCraft contributors | original SolidCraft artwork drawn for the Preferences redesign (tracker #9863), extracted from the design board as a standalone SVG | MIT OR Apache-2.0 |
-| docs/design/preferences/figures/sketch-conflict.light.svg | SolidCraft contributors | original SolidCraft artwork drawn for the Preferences redesign (tracker #9863), extracted from the design board as a standalone SVG | MIT OR Apache-2.0 |
-| docs/design/preferences/figures/sketch-exit-keep.dark.svg | SolidCraft contributors | original SolidCraft artwork drawn for the Preferences redesign (tracker #9863), extracted from the design board as a standalone SVG | MIT OR Apache-2.0 |
-| docs/design/preferences/figures/sketch-exit-keep.light.svg | SolidCraft contributors | original SolidCraft artwork drawn for the Preferences redesign (tracker #9863), extracted from the design board as a standalone SVG | MIT OR Apache-2.0 |
-| docs/design/preferences/figures/sketch-exit-previous.dark.svg | SolidCraft contributors | original SolidCraft artwork drawn for the Preferences redesign (tracker #9863), extracted from the design board as a standalone SVG | MIT OR Apache-2.0 |
-| docs/design/preferences/figures/sketch-exit-previous.light.svg | SolidCraft contributors | original SolidCraft artwork drawn for the Preferences redesign (tracker #9863), extracted from the design board as a standalone SVG | MIT OR Apache-2.0 |
-| docs/design/preferences/figures/sketch-exit-unless-turned.dark.svg | SolidCraft contributors | original SolidCraft artwork drawn for the Preferences redesign (tracker #9863), extracted from the design board as a standalone SVG | MIT OR Apache-2.0 |
-| docs/design/preferences/figures/sketch-exit-unless-turned.light.svg | SolidCraft contributors | original SolidCraft artwork drawn for the Preferences redesign (tracker #9863), extracted from the design board as a standalone SVG | MIT OR Apache-2.0 |
-| docs/design/preferences/figures/sketch-guides.dark.svg | SolidCraft contributors | original SolidCraft artwork drawn for the Preferences redesign (tracker #9863), extracted from the design board as a standalone SVG | MIT OR Apache-2.0 |
-| docs/design/preferences/figures/sketch-guides.light.svg | SolidCraft contributors | original SolidCraft artwork drawn for the Preferences redesign (tracker #9863), extracted from the design board as a standalone SVG | MIT OR Apache-2.0 |
-| docs/design/preferences/figures/sketch-hide-glyphs.dark.svg | SolidCraft contributors | original SolidCraft artwork drawn for the Preferences redesign (tracker #9863), extracted from the design board as a standalone SVG | MIT OR Apache-2.0 |
-| docs/design/preferences/figures/sketch-hide-glyphs.light.svg | SolidCraft contributors | original SolidCraft artwork drawn for the Preferences redesign (tracker #9863), extracted from the design board as a standalone SVG | MIT OR Apache-2.0 |
-| docs/design/preferences/figures/sketch-state-icons.dark.svg | SolidCraft contributors | original SolidCraft artwork drawn for the Preferences redesign (tracker #9863), extracted from the design board as a standalone SVG | MIT OR Apache-2.0 |
-| docs/design/preferences/figures/sketch-state-icons.light.svg | SolidCraft contributors | original SolidCraft artwork drawn for the Preferences redesign (tracker #9863), extracted from the design board as a standalone SVG | MIT OR Apache-2.0 |
-| docs/design/preferences/figures/style-shaded-edges.dark.svg | SolidCraft contributors | original SolidCraft artwork drawn for the Preferences redesign (tracker #9863), extracted from the design board as a standalone SVG | MIT OR Apache-2.0 |
-| docs/design/preferences/figures/style-shaded-edges.light.svg | SolidCraft contributors | original SolidCraft artwork drawn for the Preferences redesign (tracker #9863), extracted from the design board as a standalone SVG | MIT OR Apache-2.0 |
-| docs/design/preferences/figures/tess-coarse.dark.svg | SolidCraft contributors | original SolidCraft artwork drawn for the Preferences redesign (tracker #9863), extracted from the design board as a standalone SVG | MIT OR Apache-2.0 |
-| docs/design/preferences/figures/tess-coarse.light.svg | SolidCraft contributors | original SolidCraft artwork drawn for the Preferences redesign (tracker #9863), extracted from the design board as a standalone SVG | MIT OR Apache-2.0 |
-| docs/design/preferences/figures/tess-fine.dark.svg | SolidCraft contributors | original SolidCraft artwork drawn for the Preferences redesign (tracker #9863), extracted from the design board as a standalone SVG | MIT OR Apache-2.0 |
-| docs/design/preferences/figures/tess-fine.light.svg | SolidCraft contributors | original SolidCraft artwork drawn for the Preferences redesign (tracker #9863), extracted from the design board as a standalone SVG | MIT OR Apache-2.0 |
-| docs/design/preferences/figures/tess-normal.dark.svg | SolidCraft contributors | original SolidCraft artwork drawn for the Preferences redesign (tracker #9863), extracted from the design board as a standalone SVG | MIT OR Apache-2.0 |
-| docs/design/preferences/figures/tess-normal.light.svg | SolidCraft contributors | original SolidCraft artwork drawn for the Preferences redesign (tracker #9863), extracted from the design board as a standalone SVG | MIT OR Apache-2.0 |
-| docs/design/preferences/figures/tess-ultra.dark.svg | SolidCraft contributors | original SolidCraft artwork drawn for the Preferences redesign (tracker #9863), extracted from the design board as a standalone SVG | MIT OR Apache-2.0 |
-| docs/design/preferences/figures/tess-ultra.light.svg | SolidCraft contributors | original SolidCraft artwork drawn for the Preferences redesign (tracker #9863), extracted from the design board as a standalone SVG | MIT OR Apache-2.0 |
-| docs/design/preferences/figures/theme-dark.dark.svg | SolidCraft contributors | original SolidCraft artwork drawn for the Preferences redesign (tracker #9863), extracted from the design board as a standalone SVG | MIT OR Apache-2.0 |
-| docs/design/preferences/figures/theme-dark.light.svg | SolidCraft contributors | original SolidCraft artwork drawn for the Preferences redesign (tracker #9863), extracted from the design board as a standalone SVG | MIT OR Apache-2.0 |
-| docs/design/preferences/figures/theme-gruvbox.dark.svg | SolidCraft contributors | original SolidCraft artwork drawn for the Preferences redesign (tracker #9863), extracted from the design board as a standalone SVG | MIT OR Apache-2.0 |
-| docs/design/preferences/figures/theme-gruvbox.light.svg | SolidCraft contributors | original SolidCraft artwork drawn for the Preferences redesign (tracker #9863), extracted from the design board as a standalone SVG | MIT OR Apache-2.0 |
-| docs/design/preferences/figures/theme-imported.dark.svg | SolidCraft contributors | original SolidCraft artwork drawn for the Preferences redesign (tracker #9863), extracted from the design board as a standalone SVG | MIT OR Apache-2.0 |
-| docs/design/preferences/figures/theme-imported.light.svg | SolidCraft contributors | original SolidCraft artwork drawn for the Preferences redesign (tracker #9863), extracted from the design board as a standalone SVG | MIT OR Apache-2.0 |
-| docs/design/preferences/figures/theme-light.dark.svg | SolidCraft contributors | original SolidCraft artwork drawn for the Preferences redesign (tracker #9863), extracted from the design board as a standalone SVG | MIT OR Apache-2.0 |
-| docs/design/preferences/figures/theme-light.light.svg | SolidCraft contributors | original SolidCraft artwork drawn for the Preferences redesign (tracker #9863), extracted from the design board as a standalone SVG | MIT OR Apache-2.0 |
-| docs/design/preferences/figures/theme-system-dark-half.dark.svg | SolidCraft contributors | original SolidCraft artwork drawn for the Preferences redesign (tracker #9863), extracted from the design board as a standalone SVG | MIT OR Apache-2.0 |
-| docs/design/preferences/figures/theme-system-dark-half.light.svg | SolidCraft contributors | original SolidCraft artwork drawn for the Preferences redesign (tracker #9863), extracted from the design board as a standalone SVG | MIT OR Apache-2.0 |
-| docs/design/preferences/figures/theme-system-light-half.dark.svg | SolidCraft contributors | original SolidCraft artwork drawn for the Preferences redesign (tracker #9863), extracted from the design board as a standalone SVG | MIT OR Apache-2.0 |
-| docs/design/preferences/figures/theme-system-light-half.light.svg | SolidCraft contributors | original SolidCraft artwork drawn for the Preferences redesign (tracker #9863), extracted from the design board as a standalone SVG | MIT OR Apache-2.0 |
-| docs/design/preferences/figures/tool-cursor.dark.svg | SolidCraft contributors | original SolidCraft artwork drawn for the Preferences redesign (tracker #9863), extracted from the design board as a standalone SVG | MIT OR Apache-2.0 |
-| docs/design/preferences/figures/tool-cursor.light.svg | SolidCraft contributors | original SolidCraft artwork drawn for the Preferences redesign (tracker #9863), extracted from the design board as a standalone SVG | MIT OR Apache-2.0 |
-| docs/design/preferences/figures/tool-extrude.dark.svg | SolidCraft contributors | original SolidCraft artwork drawn for the Preferences redesign (tracker #9863), extracted from the design board as a standalone SVG | MIT OR Apache-2.0 |
-| docs/design/preferences/figures/tool-extrude.light.svg | SolidCraft contributors | original SolidCraft artwork drawn for the Preferences redesign (tracker #9863), extracted from the design board as a standalone SVG | MIT OR Apache-2.0 |
-| docs/design/preferences/figures/tool-hole.dark.svg | SolidCraft contributors | original SolidCraft artwork drawn for the Preferences redesign (tracker #9863), extracted from the design board as a standalone SVG | MIT OR Apache-2.0 |
-| docs/design/preferences/figures/tool-hole.light.svg | SolidCraft contributors | original SolidCraft artwork drawn for the Preferences redesign (tracker #9863), extracted from the design board as a standalone SVG | MIT OR Apache-2.0 |
-| docs/design/preferences/figures/tool-placement.dark.svg | SolidCraft contributors | original SolidCraft artwork drawn for the Preferences redesign (tracker #9863), extracted from the design board as a standalone SVG | MIT OR Apache-2.0 |
-| docs/design/preferences/figures/tool-placement.light.svg | SolidCraft contributors | original SolidCraft artwork drawn for the Preferences redesign (tracker #9863), extracted from the design board as a standalone SVG | MIT OR Apache-2.0 |
-| docs/design/preferences/figures/vertex-markers.dark.svg | SolidCraft contributors | original SolidCraft artwork drawn for the Preferences redesign (tracker #9863), extracted from the design board as a standalone SVG | MIT OR Apache-2.0 |
-| docs/design/preferences/figures/vertex-markers.light.svg | SolidCraft contributors | original SolidCraft artwork drawn for the Preferences redesign (tracker #9863), extracted from the design board as a standalone SVG | MIT OR Apache-2.0 |
-| docs/design/preferences/figures/view-angles.dark.svg | SolidCraft contributors | original SolidCraft artwork drawn for the Preferences redesign (tracker #9863), extracted from the design board as a standalone SVG | MIT OR Apache-2.0 |
-| docs/design/preferences/figures/view-angles.light.svg | SolidCraft contributors | original SolidCraft artwork drawn for the Preferences redesign (tracker #9863), extracted from the design board as a standalone SVG | MIT OR Apache-2.0 |
-| docs/design/preferences/figures/view-grid.dark.svg | SolidCraft contributors | original SolidCraft artwork drawn for the Preferences redesign (tracker #9863), extracted from the design board as a standalone SVG | MIT OR Apache-2.0 |
-| docs/design/preferences/figures/view-grid.light.svg | SolidCraft contributors | original SolidCraft artwork drawn for the Preferences redesign (tracker #9863), extracted from the design board as a standalone SVG | MIT OR Apache-2.0 |
-| docs/design/preferences/figures/view-perspective.dark.svg | SolidCraft contributors | original SolidCraft artwork drawn for the Preferences redesign (tracker #9863), extracted from the design board as a standalone SVG | MIT OR Apache-2.0 |
-| docs/design/preferences/figures/view-perspective.light.svg | SolidCraft contributors | original SolidCraft artwork drawn for the Preferences redesign (tracker #9863), extracted from the design board as a standalone SVG | MIT OR Apache-2.0 |
-| docs/design/preferences/figures/view-shadow.dark.svg | SolidCraft contributors | original SolidCraft artwork drawn for the Preferences redesign (tracker #9863), extracted from the design board as a standalone SVG | MIT OR Apache-2.0 |
-| docs/design/preferences/figures/view-shadow.light.svg | SolidCraft contributors | original SolidCraft artwork drawn for the Preferences redesign (tracker #9863), extracted from the design board as a standalone SVG | MIT OR Apache-2.0 |
-| `assets/locales/pending/sketch-offset-instances.json` | SolidCraft contributors | Original offset instance-count label and translations | MIT OR Apache-2.0 |
-| assets/icons/ui/design/svg/flat/settings_profile.svg | SolidCraft contributors | single-colour application/navigation icon master (64 grid), original analytic head and shoulder geometry for settings profiles | MIT OR Apache-2.0 |
-| tests/kernel-cases/import/4561-convert-box-mesh-with-a-zero-area-triangle/box-degenerate.stl | SolidCraft contributors | synthetic ASCII STL written by hand: a box with one zero-area triangle, for the kernel regression case of tangency-labs/solidcraft#4561 | MIT OR Apache-2.0 |
-| assets/locales/pending/theme-blur-ui.json | SolidCraft contributors | Original blur controls, notices and translations | MIT OR Apache-2.0 |
-| crates/ui-egui/tests/fixtures/theme-blur.json | SolidCraft contributors | Original theme for blur option scenarios and manager review | MIT OR Apache-2.0 |
-| assets/locales/ka.json | David Machakhelidze (devius) | Original Georgian translation of SolidCraft's English catalog, written with Claude Code from the meaning of each English string; terminology and doubtful strings decided by a native Georgian speaker; no commercial CAD text used | MIT OR Apache-2.0 |
-| assets/branding/logo/solidcraft-mark.svg | SolidCraft contributors | static SolidCraft mark: the five faces and gradients of assets/icons/app/macos/source/SolidCraft.icon/Assets/03-solid-blue-cutout.svg (the final frame of assets/styles/web/loading-logo.svg), cropped to the mark's bounds; original artwork | MIT OR Apache-2.0 |
-| assets/branding/logo/solidcraft-mark-mono-black.svg | SolidCraft contributors | one-colour (black) version of assets/branding/logo/solidcraft-mark.svg, same paths; original artwork | MIT OR Apache-2.0 |
-| assets/branding/logo/solidcraft-mark-mono-white.svg | SolidCraft contributors | one-colour (white) version of assets/branding/logo/solidcraft-mark.svg, same paths; original artwork | MIT OR Apache-2.0 |
-| assets/branding/logo/solidcraft-mark-512.png | SolidCraft contributors | transparent 512 px render of assets/branding/logo/solidcraft-mark.svg (cairosvg); original artwork | MIT OR Apache-2.0 |
-| assets/branding/logo/solidcraft-mark-1024.png | SolidCraft contributors | transparent 1024 px render of assets/branding/logo/solidcraft-mark.svg (cairosvg); original artwork | MIT OR Apache-2.0 |
-| assets/branding/logo/solidcraft-mark-2048.png | SolidCraft contributors | transparent 2048 px render of assets/branding/logo/solidcraft-mark.svg (cairosvg); original artwork | MIT OR Apache-2.0 |
-| assets/branding/logo/solidcraft-wordmark.svg | SolidCraft contributors | the name SolidCraft set like the loading logo's wordmark (bold, +0.02 em tracking, #15499e) in IBM Plex Sans Bold from assets/fonts/ibm-plex-sans (SIL OFL 1.1, IBM Corp.), outlined to paths; no font file is embedded | MIT OR Apache-2.0 |
-| assets/branding/logo/solidcraft-lockup-horizontal.svg | SolidCraft contributors | assets/branding/logo/solidcraft-mark.svg beside assets/branding/logo/solidcraft-wordmark.svg, in the proportions of assets/branding/web/source/og.png; original artwork | MIT OR Apache-2.0 |
-| assets/styles/ui/themes/onyx.json | SolidCraft contributors | original Onyx stone-grey palette, option overlays and semantic icon-role mapping; existing SolidCraft artwork is unchanged | MIT OR Apache-2.0 |
-| docs/book/src/media/ui-tour/window.png | SolidCraft contributors | screenshot of SolidCraft 0.29.0 itself (`solidcraft --sample`, default dark theme, software renderer, 1280x800) with original numbered callouts (digits set in DejaVu Sans Bold), captured with examples/demo/doc_shots.py | MIT OR Apache-2.0 |
-| docs/book/src/media/ui-tour/navigate.mp4 | SolidCraft contributors | original screen recording of the actual SolidCraft 0.29.0 English desktop UI (`--sample`, default dark theme, software renderer) orbiting, panning and zooming, with the original drawn pointer of examples/demo/overlay.py and labels set in DejaVu Sans Bold, captured with examples/demo/doc_shots.py | MIT OR Apache-2.0 |
-| assets/locales/pending/sketch-tool-hints.json | carlymx | Original sketch tool hints and engine error translations | MIT OR Apache-2.0 |
-| assets/locales/pending/primitive-pick-field-tips.json | SolidCraft contributors | Original primitive pick-field tooltip translations | MIT OR Apache-2.0 |
-| assets/locales/pending/ribbon-panel-hover.json | SolidCraft contributors | Original ribbon panel menu preference labels and translations | MIT OR Apache-2.0 |
-| docs/screenshots/box-insert-designer.gif | Shawn Marx | original recording made with BoxInsertDesigner's own Motion export (its three.js viewer) of its example game `examples/ccg-example` (https://github.com/ShawnMarx/BoxInsertDesigner): a card game box insert whose trays were built by SolidCraft through `solidcraft-cli`; the published card, board and box art in it is pixelated beyond recognition, and no logos or game names are shown (2.5× playback, 800 px wide) | MIT OR Apache-2.0 |
-| docs/screenshots/box-insert-designer.mp4 | Shawn Marx | original recording made with BoxInsertDesigner's own Motion export (its three.js viewer) of its example game `examples/ccg-example` (https://github.com/ShawnMarx/BoxInsertDesigner): a card game box insert whose trays were built by SolidCraft through `solidcraft-cli`; the published card, board and box art in it is pixelated beyond recognition, and no logos or game names are shown (1280×720) | MIT OR Apache-2.0 |
-| assets/locales/pending/agent-http-consent.json | SolidCraft contributors | Original endpoint-specific HTTP consent messages and translations | MIT OR Apache-2.0 |
-| assets/locales/pending/ground-shadow-placement.json | SolidCraft contributors | Original ground-shadow placement preference messages and translations | MIT OR Apache-2.0 |
-| docs/book/src/media/assemblies/components.mp4 | SolidCraft contributors | original screen recording of the actual SolidCraft 0.29.0 English desktop UI (default dark theme, software renderer) making components from two original hinge-leaf bodies, with the original drawn pointer of examples/demo/overlay.py and labels set in DejaVu Sans Bold, captured with examples/demo/doc_shots.py | MIT OR Apache-2.0 |
-| docs/book/src/media/assemblies/joint.mp4 | SolidCraft contributors | original screen recording of the actual SolidCraft 0.29.0 English desktop UI (default dark theme, software renderer) creating a revolute joint between two hinge leaves, with the original drawn pointer of examples/demo/overlay.py and labels set in DejaVu Sans Bold, captured with examples/demo/doc_shots.py | MIT OR Apache-2.0 |
-| docs/book/src/media/assemblies/drag.mp4 | SolidCraft contributors | original screen recording of the actual SolidCraft 0.29.0 English desktop UI (default dark theme, software renderer) dragging a jointed hinge leaf, with the original drawn pointer of examples/demo/overlay.py and labels set in DejaVu Sans Bold, captured with examples/demo/doc_shots.py | MIT OR Apache-2.0 |
-| docs/book/src/media/assemblies/drive.mp4 | SolidCraft contributors | original screen recording of the actual SolidCraft 0.29.0 English desktop UI (default dark theme, software renderer) driving a revolute joint between two hinge leaves, with the original drawn pointer of examples/demo/overlay.py and labels set in DejaVu Sans Bold, captured with examples/demo/doc_shots.py | MIT OR Apache-2.0 |
-| docs/book/src/media/features/extrude.mp4 | SolidCraft contributors | original screen recording of the actual SolidCraft 0.29.0 English desktop UI (default dark theme, software renderer) extruding a sketch's profile, with the original drawn pointer of examples/demo/overlay.py and labels set in DejaVu Sans Bold, captured with examples/demo/doc_shots.py | MIT OR Apache-2.0 |
-| docs/book/src/media/features/shell.mp4 | SolidCraft contributors | original screen recording of the actual SolidCraft 0.29.0 English desktop UI (default dark theme, software renderer) shelling a block, with the original drawn pointer of examples/demo/overlay.py and labels set in DejaVu Sans Bold, captured with examples/demo/doc_shots.py | MIT OR Apache-2.0 |
-| docs/book/src/media/features/fillet.mp4 | SolidCraft contributors | original screen recording of the actual SolidCraft 0.29.0 English desktop UI (default dark theme, software renderer) filleting four edges, with the original drawn pointer of examples/demo/overlay.py and labels set in DejaVu Sans Bold, captured with examples/demo/doc_shots.py | MIT OR Apache-2.0 |
-| docs/book/src/media/features/edit.mp4 | SolidCraft contributors | original screen recording of the actual SolidCraft 0.29.0 English desktop UI (default dark theme, software renderer) editing a feature from the timeline, with the original drawn pointer of examples/demo/overlay.py and labels set in DejaVu Sans Bold, captured with examples/demo/doc_shots.py | MIT OR Apache-2.0 |
-| docs/book/src/media/features/hole.mp4 | SolidCraft contributors | original screen recording of the actual SolidCraft 0.29.0 English desktop UI (default dark theme, software renderer) placing a hole, with the original drawn pointer of examples/demo/overlay.py and labels set in DejaVu Sans Bold, captured with examples/demo/doc_shots.py | MIT OR Apache-2.0 |
-| docs/book/src/media/features/pattern.mp4 | SolidCraft contributors | original screen recording of the actual SolidCraft 0.29.0 English desktop UI (default dark theme, software renderer) patterning a hole around an axis, with the original drawn pointer of examples/demo/overlay.py and labels set in DejaVu Sans Bold, captured with examples/demo/doc_shots.py | MIT OR Apache-2.0 |
-| docs/book/src/media/parameters/dialog.png | SolidCraft contributors | screenshot of SolidCraft 0.29.0 itself (default dark theme, software renderer) showing the Parameters dialog, with original numbered callouts (digits set in DejaVu Sans Bold), captured with examples/demo/doc_shots.py | MIT OR Apache-2.0 |
-| docs/book/src/media/files/menu.png | SolidCraft contributors | screenshot of SolidCraft 0.29.0 itself (`--sample`, default dark theme, software renderer) showing the File menu, with original numbered callouts (digits set in DejaVu Sans Bold), captured with examples/demo/doc_shots.py | MIT OR Apache-2.0 |
-| docs/book/src/media/getting-started/start.png | SolidCraft contributors | screenshot of SolidCraft 0.29.0 itself (default dark theme, software renderer, 1280x800) showing the start page with its built-in sample thumbnails, with original numbered callouts (digits set in DejaVu Sans Bold), captured with examples/demo/doc_shots.py | MIT OR Apache-2.0 |
-| docs/book/src/media/getting-started/sample.mp4 | SolidCraft contributors | original screen recording of the actual SolidCraft 0.29.0 English desktop UI (default dark theme, software renderer) opening the built-in Sample Plate from the start page, with the original drawn pointer of examples/demo/overlay.py and labels set in DejaVu Sans Bold, captured with examples/demo/doc_shots.py | MIT OR Apache-2.0 |
-| docs/book/src/media/sheet-metal/base.mp4 | SolidCraft contributors | original screen recording of the actual SolidCraft 0.29.0 English desktop UI (default dark theme, software renderer) making a sheet metal base flange, with the original drawn pointer of examples/demo/overlay.py and labels set in DejaVu Sans Bold, captured with examples/demo/doc_shots.py | MIT OR Apache-2.0 |
-| docs/book/src/media/sheet-metal/flange.mp4 | SolidCraft contributors | original screen recording of the actual SolidCraft 0.29.0 English desktop UI (default dark theme, software renderer) adding sheet metal edge flanges, with the original drawn pointer of examples/demo/overlay.py and labels set in DejaVu Sans Bold, captured with examples/demo/doc_shots.py | MIT OR Apache-2.0 |
-| docs/book/src/media/sheet-metal/flat.mp4 | SolidCraft contributors | original screen recording of the actual SolidCraft 0.29.0 English desktop UI (default dark theme, software renderer) showing a sheet metal flat pattern, with the original drawn pointer of examples/demo/overlay.py and labels set in DejaVu Sans Bold, captured with examples/demo/doc_shots.py | MIT OR Apache-2.0 |
-| docs/book/src/media/sketching/create.mp4 | SolidCraft contributors | original screen recording of the actual SolidCraft 0.29.0 English desktop UI (default dark theme, software renderer) starting a sketch on the Top plane, with the original drawn pointer of examples/demo/overlay.py and labels set in DejaVu Sans Bold, captured with examples/demo/doc_shots.py | MIT OR Apache-2.0 |
-| docs/book/src/media/sketching/draw.mp4 | SolidCraft contributors | original screen recording of the actual SolidCraft 0.29.0 English desktop UI (default dark theme, software renderer) drawing a rectangle and a circle with typed values, with the original drawn pointer of examples/demo/overlay.py and labels set in DejaVu Sans Bold, captured with examples/demo/doc_shots.py | MIT OR Apache-2.0 |
-| docs/book/src/media/sketching/dimension.mp4 | SolidCraft contributors | original screen recording of the actual SolidCraft 0.29.0 English desktop UI (default dark theme, software renderer) dimensioning a sketch until it is fully constrained, with the original drawn pointer of examples/demo/overlay.py and labels set in DejaVu Sans Bold, captured with examples/demo/doc_shots.py | MIT OR Apache-2.0 |
-| docs/book/src/media/sketching/parts.png | SolidCraft contributors | screenshot of SolidCraft 0.29.0 itself (default dark theme, software renderer, 1280x800) showing a fully constrained sketch, with original numbered callouts (digits set in DejaVu Sans Bold), captured with examples/demo/doc_shots.py | MIT OR Apache-2.0 |
-| docs/book/src/media/sketching/offset.mp4 | SolidCraft contributors | original screen recording of the actual SolidCraft 0.29.0 English desktop UI (default dark theme, software renderer) offsetting a sketch outline, with the original drawn pointer of examples/demo/overlay.py and labels set in DejaVu Sans Bold, captured with examples/demo/doc_shots.py | MIT OR Apache-2.0 |
-| docs/book/src/media/sketching/trim.mp4 | SolidCraft contributors | original screen recording of the actual SolidCraft 0.29.0 English desktop UI (default dark theme, software renderer) trimming a notch in a sketch, with the original drawn pointer of examples/demo/overlay.py and labels set in DejaVu Sans Bold, captured with examples/demo/doc_shots.py | MIT OR Apache-2.0 |
-| assets/locales/ca.json | carlymx | Catalan translation of the English catalog, contributed upstream | MIT OR Apache-2.0 |
-| assets/locales/pending/sketch-mirror-auto-line.json | SolidCraft contributors | Original Mirror preference label and translations | MIT OR Apache-2.0 |
-| docs/screenshots/7452/demo-01-extrude5-edge-frame.png | SamD98 | screenshot of the actual SolidCraft desktop UI showing the revolve axis pick on the Cat Post Topper repro design (docs/screenshots/7452/revolve-edge-frame.solidcraft), for #7452 | MIT OR Apache-2.0 |
-| docs/screenshots/7452/demo-04-preview-outer-l11.png | SamD98 | screenshot of the actual SolidCraft desktop UI showing the revolve axis pick on the Cat Post Topper repro design (docs/screenshots/7452/revolve-edge-frame.solidcraft), for #7452 | MIT OR Apache-2.0 |
-| docs/screenshots/7452/demo-05-preview-inner-l8.png | SamD98 | screenshot of the actual SolidCraft desktop UI showing the revolve axis pick on the Cat Post Topper repro design (docs/screenshots/7452/revolve-edge-frame.solidcraft), for #7452 | MIT OR Apache-2.0 |
-| docs/screenshots/7452/demo-06-result-outer-120.png | SamD98 | screenshot of the actual SolidCraft desktop UI showing the revolve axis pick on the Cat Post Topper repro design (docs/screenshots/7452/revolve-edge-frame.solidcraft), for #7452 | MIT OR Apache-2.0 |
-| docs/screenshots/7452/demo-07-preview-360.png | SamD98 | screenshot of the actual SolidCraft desktop UI showing the revolve axis pick on the Cat Post Topper repro design (docs/screenshots/7452/revolve-edge-frame.solidcraft), for #7452 | MIT OR Apache-2.0 |
-| docs/screenshots/7452/demo-08-cancelled.png | SamD98 | screenshot of the actual SolidCraft desktop UI showing the revolve axis pick on the Cat Post Topper repro design (docs/screenshots/7452/revolve-edge-frame.solidcraft), for #7452 | MIT OR Apache-2.0 |
-| docs/screenshots/7452/demo-13-colliding-id.png | SamD98 | screenshot of the actual SolidCraft desktop UI showing the revolve axis pick on the Cat Post Topper repro design (docs/screenshots/7452/revolve-edge-frame.solidcraft), for #7452 | MIT OR Apache-2.0 |
-| docs/screenshots/7452/demo-14-surface-l1.png | SamD98 | screenshot of the actual SolidCraft desktop UI showing the revolve axis pick on the Cat Post Topper repro design (docs/screenshots/7452/revolve-edge-frame.solidcraft), for #7452 | MIT OR Apache-2.0 |
-| docs/screenshots/7452/demo-15-surface-result.png | SamD98 | screenshot of the actual SolidCraft desktop UI showing the revolve axis pick on the Cat Post Topper repro design (docs/screenshots/7452/revolve-edge-frame.solidcraft), for #7452 | MIT OR Apache-2.0 |
-| docs/screenshots/7452/revolve-selected-edge.mp4 | SamD98 | screen recording of the actual SolidCraft desktop UI showing the revolve axis pick on the Cat Post Topper repro design (docs/screenshots/7452/revolve-edge-frame.solidcraft), for #7452 | MIT OR Apache-2.0 |
-| assets/locales/bg.json | Yasen-55 | Original translation | MIT OR Apache-2.0 |
-| crates/sketch/assets/fonts/liberation-sans/LiberationSans-Regular.ttf | Red Hat, Inc. (Liberation Fonts 2.x; digitized data Google) | https://github.com/liberationfonts (Debian fonts-liberation), unmodified; licence text in crates/sketch/assets/fonts/liberation-sans/OFL.txt; used for sketch Text outlines | SIL OFL 1.1 |
-| crates/sketch/assets/fonts/liberation-sans/OFL.txt | Red Hat, Inc.; Liberation Fonts contributors | Unmodified accompanying font licence | SIL OFL 1.1 |
-| assets/locales/pending/drag-to-zoom.json | SolidCraft contributors | Original drag-to-zoom labels and translations | MIT OR Apache-2.0 |
-| `assets/locales/pending/hole-group-folder.json` | SolidCraft contributors | Original Hole grouping preference labels and translations | MIT OR Apache-2.0 |
-| assets/locales/pending/press-pull-dialog-title.json | SolidCraft contributors | Original Press Pull dialog title translations for SolidCraft's English catalog; no external text used | MIT OR Apache-2.0 |
 
 ## Code adapted from sibling projects
 
@@ -882,19 +539,10 @@ in THIRD-PARTY-LICENSES.txt; no images or artwork from that project are copied.
 The glTF test files are built by the tests themselves (crates/io/src/gltf_in_tests.rs,
 crates/engine/src/tests/gltf_import.rs); no third-party models are committed.
 
-## Geometry kernel crates
-
-| Crate | Used for | Licence |
-|---|---|---|
-| solidcore (https://github.com/tangency-labs/solidcore, vendored at solidcore/) | the Rust port of NVIDIA's SMLib: the B-rep kernel behind crates/smlib | Apache-2.0 (its NOTICE credits NVIDIA's USD BRep) |
-
-Linked as a crate; no code from it is copied into SolidCraft. Its licence text and NOTICE go
-into THIRD-PARTY-LICENSES.txt when `main` regenerates it.
-
 ## FreeCAD and Rhino import library
 
 FreeCAD `.FCStd` and Rhino `.3dm` files are read with [cadmpeg](https://github.com/cadmpeg/cadmpeg)
-0.6.7 (Apache-2.0), linked as the crates `cadmpeg-core`, `cadmpeg-ir`, `cadmpeg-registry`,
+0.6.3 (Apache-2.0), linked as the crates `cadmpeg-core`, `cadmpeg-ir`, `cadmpeg-registry`,
 `cadmpeg-container`, `cadmpeg-codec-freecad`, `cadmpeg-codec-rhino` and `cadmpeg-codec-step`
 in native and browser builds (`crates/io/src/native_cad.rs`). Only those open-format codecs are built: no
 default features, so cadmpeg's codecs for commercial CAD formats and its ShapeManager/ACIS
@@ -906,16 +554,26 @@ copied into SolidCraft.
 | SolidCraft file | Original contribution | Licence |
 |---|---|---|
 | crates/ui-egui/src/viewport.rs (`nearest_quarter_turn`, `axis_view_orbit`) | N3MI-DG's [PR #101](https://github.com/bherbruck/solidcraft/pull/101): [minimal TOP/BOTTOM turns](https://github.com/bherbruck/solidcraft/commit/c28e780f52490784ef5886f094b9d3f6d10c3e3f) and [drag-to-orbit](https://github.com/bherbruck/solidcraft/commit/f30b30be6ecc4e2e6544a851243137c01a354934), adapted to the axis gizmo | MIT OR Apache-2.0 |
-| crates/smlib/src/core/offset.rs (`draft`: the tilted planes and `SmBrep::LocalOperation`, the tail of the capi's `draft_faces`) | ablasik's `draft` in `crates/smlib/src/ffi/rs_ops2.rs` on [ablasik/solidcraft `app/solidcore-backend-on-develop`](https://github.com/ablasik/solidcraft/blob/9c7e8e31565e1823f0591b58e2967351c32af13f/crates/smlib/src/ffi/rs_ops2.rs), adapted to `core::offset`'s errors and checks | MIT OR Apache-2.0 |
 
 ## Vendored third-party code
 
 | Directory | Source | Licence | Changes |
 |---|---|---|---|
+| examples/studio/author_sweep.py | SolidCraft contributors | original editable CAD scene and authoring metadata; no external assets | MIT OR Apache-2.0 |
+| examples/studio/author_scene.py | SolidCraft contributors | original editable CAD scene and authoring metadata; no external assets | MIT OR Apache-2.0 |
+| examples/studio/materials.json | SolidCraft contributors | original editable CAD scene and authoring metadata; no external assets | MIT OR Apache-2.0 |
+| examples/studio/coffee-exploded-sweep.json | SolidCraft contributors | original editable CAD scene and authoring metadata; no external assets | MIT OR Apache-2.0 |
+| examples/studio/coffee-exploded-render.json | SolidCraft contributors | original editable CAD scene and authoring metadata; no external assets | MIT OR Apache-2.0 |
+| examples/studio/coffee-exploded.json | SolidCraft contributors | original editable CAD scene and authoring metadata; no external assets | MIT OR Apache-2.0 |
+| vendor/truck-meshalgo | truck-meshalgo 0.4.0, https://github.com/ricosjp/truck (RICOS Co. Ltd.) | Apache-2.0 | meshing: bounded parameter searches, collapsed-boundary projection, subdivision and provisional fixed-grid previews (vendor/README.md) |
+| vendor/truck-stepio | truck-stepio 0.3.0, https://github.com/ricosjp/truck (RICOS Co. Ltd.) | Apache-2.0 | STEP writer: intersection-curve surfaces written at unique ids (vendor/README.md) |
+| vendor/truck-shapeops | truck-shapeops 0.4.0, https://github.com/ricosjp/truck (RICOS Co. Ltd.) | Apache-2.0 | robust meshing and nearest-parameter fallback in booleans; degenerate intersection-curve rejection; face and edge history of booleans; trace macro; corner choice at vertices several intersection curves end on; reuse of an operand's meshes (vendor/README.md) |
+| vendor/truck-geometry | truck-geometry 0.5.0, https://github.com/ricosjp/truck (RICOS Co. Ltd.) | Apache-2.0 | intersection curves divided from their neighbours' surface parameters; surface second derivatives (vendor/README.md) |
+| vendor/matext4cgmath | matext4cgmath 0.1.0, https://github.com/ricosjp/matext4cgmath (RICOS Co. Ltd.) | Apache-2.0 | root refinement stops after 100 Newton steps (vendor/README.md) |
 
 ## Vendored renderer compatibility fix
 
-`vendor/egui-wgpu` is egui-wgpu 0.37.0 from https://github.com/emilk/egui
+`vendor/egui-wgpu` is egui-wgpu 0.36.2 from https://github.com/emilk/egui
 (MIT OR Apache-2.0; both original licence texts are included). Rust sources and
 its original `egui.wgsl` shader are retained; no images or other artwork are copied.
 SolidCraft's narrow patch selects a safe 1x MSAA path on the chosen OpenGL adapter
@@ -997,381 +655,3 @@ The original studio generators produce local ignored PNG maps and an RGBE gradie
 Generated image bytes are not source assets; their authorship, licences and expected
 hashes are documented under `examples/studio/textures`. Rendered evidence belongs
 on the results branch. No photographs, scans or external image assets are included.
-
-## Additional render and showcase resources
-
-| File | Author | Source | Licence |
-|---|---|---|---|
-| assets/render/starter/tools/check_all.py | SolidCraft contributors | original read-only authored/native resource validation orchestration and evidence receipts | MIT OR Apache-2.0 |
-| assets/render/starter/tools/test_check_all.py | SolidCraft contributors | original validation-runner regression fixtures and subprocess tests | MIT OR Apache-2.0 |
-| assets/render/starter/tools/requirements.txt | SolidCraft contributors | pinned offline authoring tool requirements; no application dependency changes | MIT OR Apache-2.0 |
-| crates/render/examples/validate_starter.rs | SolidCraft contributors | original native resource conformance checker using public SolidCraft decoding, normalization, sampling and mip APIs | MIT OR Apache-2.0 |
-| .gitattributes | SolidCraft contributors | original canonical line-ending policy for the existing runtime icon-discovery manifest; no artwork or icon-assignment changes | MIT OR Apache-2.0 |
-| assets/render/.gitattributes | SolidCraft contributors | original canonical line-ending policy for SHA-256-pinned renderer authoring resources | MIT OR Apache-2.0 |
-| docs/render-materials/.gitattributes | SolidCraft contributors | original canonical line-ending policy for SHA-256-pinned renderer authoring resources | MIT OR Apache-2.0 |
-| assets/render/starter/environments/exports/assembly-bench-soft.hdr | SolidCraft contributors | original analytic relative-radiance HDR export; recipe, linear-sRGB primaries and SHA-256 in assets/render/starter/environments/manifest.json; not measured photometry | MIT OR Apache-2.0 |
-| assets/render/starter/environments/exports/automotive-turntable.hdr | SolidCraft contributors | original analytic relative-radiance HDR export; recipe, linear-sRGB primaries and SHA-256 in assets/render/starter/environments/manifest.json; not measured photometry | MIT OR Apache-2.0 |
-| assets/render/starter/environments/exports/black-metal-strips.hdr | SolidCraft contributors | original analytic relative-radiance HDR export; recipe, linear-sRGB primaries and SHA-256 in assets/render/starter/environments/manifest.json; not measured photometry | MIT OR Apache-2.0 |
-| assets/render/starter/environments/exports/cnc-overhead.hdr | SolidCraft contributors | original analytic relative-radiance HDR export; recipe, linear-sRGB primaries and SHA-256 in assets/render/starter/environments/manifest.json; not measured photometry | MIT OR Apache-2.0 |
-| assets/render/starter/environments/exports/esd-bench-neutral.hdr | SolidCraft contributors | original analytic relative-radiance HDR export; recipe, linear-sRGB primaries and SHA-256 in assets/render/starter/environments/manifest.json; not measured photometry | MIT OR Apache-2.0 |
-| assets/render/starter/environments/exports/fdm-neutral-inspection.hdr | SolidCraft contributors | original analytic relative-radiance HDR export; recipe, linear-sRGB primaries and SHA-256 in assets/render/starter/environments/manifest.json; not measured photometry | MIT OR Apache-2.0 |
-| assets/render/starter/environments/exports/garage-door.hdr | SolidCraft contributors | original analytic relative-radiance HDR export; recipe, linear-sRGB primaries and SHA-256 in assets/render/starter/environments/manifest.json; not measured photometry | MIT OR Apache-2.0 |
-| assets/render/starter/environments/exports/hangar-skylight.hdr | SolidCraft contributors | original analytic relative-radiance HDR export; recipe, linear-sRGB primaries and SHA-256 in assets/render/starter/environments/manifest.json; not measured photometry | MIT OR Apache-2.0 |
-| assets/render/starter/environments/exports/home-workbench.hdr | SolidCraft contributors | original analytic relative-radiance HDR export; recipe, linear-sRGB primaries and SHA-256 in assets/render/starter/environments/manifest.json; not measured photometry | MIT OR Apache-2.0 |
-| assets/render/starter/environments/exports/makerspace-worklights.hdr | SolidCraft contributors | original analytic relative-radiance HDR export; recipe, linear-sRGB primaries and SHA-256 in assets/render/starter/environments/manifest.json; not measured photometry | MIT OR Apache-2.0 |
-| assets/render/starter/environments/exports/mechanical-bay.hdr | SolidCraft contributors | original analytic relative-radiance HDR export; recipe, linear-sRGB primaries and SHA-256 in assets/render/starter/environments/manifest.json; not measured photometry | MIT OR Apache-2.0 |
-| assets/render/starter/environments/exports/neutral-comparison.hdr | SolidCraft contributors | original analytic relative-radiance HDR export; recipe, linear-sRGB primaries and SHA-256 in assets/render/starter/environments/manifest.json; not measured photometry | MIT OR Apache-2.0 |
-| assets/render/starter/environments/exports/neutral-side-softbox.hdr | SolidCraft contributors | original analytic relative-radiance HDR export; recipe, linear-sRGB primaries and SHA-256 in assets/render/starter/environments/manifest.json; not measured photometry | MIT OR Apache-2.0 |
-| assets/render/starter/environments/exports/paint-inspection-bands.hdr | SolidCraft contributors | original analytic relative-radiance HDR export; recipe, linear-sRGB primaries and SHA-256 in assets/render/starter/environments/manifest.json; not measured photometry | MIT OR Apache-2.0 |
-| assets/render/starter/environments/exports/printed-part-photo.hdr | SolidCraft contributors | original analytic relative-radiance HDR export; recipe, linear-sRGB primaries and SHA-256 in assets/render/starter/environments/manifest.json; not measured photometry | MIT OR Apache-2.0 |
-| assets/render/starter/environments/exports/rework-offset-strips.hdr | SolidCraft contributors | original analytic relative-radiance HDR export; recipe, linear-sRGB primaries and SHA-256 in assets/render/starter/environments/manifest.json; not measured photometry | MIT OR Apache-2.0 |
-| assets/render/starter/environments/exports/robot-led-editorial.hdr | SolidCraft contributors | original analytic relative-radiance HDR export; recipe, linear-sRGB primaries and SHA-256 in assets/render/starter/environments/manifest.json; not measured photometry | MIT OR Apache-2.0 |
-| assets/render/starter/environments/exports/showroom-ribbons.hdr | SolidCraft contributors | original analytic relative-radiance HDR export; recipe, linear-sRGB primaries and SHA-256 in assets/render/starter/environments/manifest.json; not measured photometry | MIT OR Apache-2.0 |
-| assets/render/starter/environments/exports/spacecraft-clean-bay.hdr | SolidCraft contributors | original analytic relative-radiance HDR export; recipe, linear-sRGB primaries and SHA-256 in assets/render/starter/environments/manifest.json; not measured photometry | MIT OR Apache-2.0 |
-| assets/render/starter/environments/exports/sun-free-overcast.hdr | SolidCraft contributors | original analytic relative-radiance HDR export; recipe, linear-sRGB primaries and SHA-256 in assets/render/starter/environments/manifest.json; not measured photometry | MIT OR Apache-2.0 |
-| assets/render/starter/environments/exports/vacuum-black.hdr | SolidCraft contributors | original analytic relative-radiance HDR export; recipe, linear-sRGB primaries and SHA-256 in assets/render/starter/environments/manifest.json; not measured photometry | MIT OR Apache-2.0 |
-| assets/render/starter/environments/exports/warm-table-window.hdr | SolidCraft contributors | original analytic relative-radiance HDR export; recipe, linear-sRGB primaries and SHA-256 in assets/render/starter/environments/manifest.json; not measured photometry | MIT OR Apache-2.0 |
-| assets/render/starter/environments/exports/white-enveloping-studio.hdr | SolidCraft contributors | original analytic relative-radiance HDR export; recipe, linear-sRGB primaries and SHA-256 in assets/render/starter/environments/manifest.json; not measured photometry | MIT OR Apache-2.0 |
-| assets/render/starter/environments/exports/woodshop-window.hdr | SolidCraft contributors | original analytic relative-radiance HDR export; recipe, linear-sRGB primaries and SHA-256 in assets/render/starter/environments/manifest.json; not measured photometry | MIT OR Apache-2.0 |
-| assets/render/starter/environments/manifest.json | SolidCraft contributors | original clean-room renderer resource recipe or manifest; authored/unbound scope and source receipts in assets/render/starter/README.md | MIT OR Apache-2.0 |
-| assets/render/starter/environments/source/recipes.json | SolidCraft contributors | original clean-room renderer resource recipe or manifest; authored/unbound scope and source receipts in assets/render/starter/README.md | MIT OR Apache-2.0 |
-| assets/render/starter/lighting/exports/rigs.json | SolidCraft contributors | original clean-room renderer resource recipe or manifest; authored/unbound scope and source receipts in assets/render/starter/README.md | MIT OR Apache-2.0 |
-| assets/render/starter/lighting/recipe.json | SolidCraft contributors | original clean-room renderer resource recipe or manifest; authored/unbound scope and source receipts in assets/render/starter/README.md | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-001/base_color.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-001/height.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-001/metallic.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-001/normal_open_gl.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-001/roughness.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-002/base_color.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-002/height.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-002/metallic.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-002/normal_open_gl.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-002/roughness.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-003/base_color.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-003/height.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-003/metallic.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-003/normal_open_gl.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-003/roughness.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-004/base_color.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-004/height.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-004/metallic.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-004/normal_open_gl.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-004/roughness.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-005/base_color.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-005/height.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-005/metallic.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-005/normal_open_gl.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-005/roughness.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-006/base_color.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-006/height.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-006/metallic.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-006/normal_open_gl.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-006/roughness.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-007/base_color.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-007/height.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-007/metallic.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-007/normal_open_gl.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-007/roughness.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-008/base_color.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-008/height.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-008/metallic.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-008/normal_open_gl.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-008/roughness.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-009/base_color.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-009/height.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-009/metallic.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-009/normal_open_gl.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-009/roughness.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-010/base_color.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-010/height.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-010/metallic.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-010/normal_open_gl.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-010/roughness.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-011/base_color.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-011/height.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-011/metallic.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-011/normal_open_gl.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-011/roughness.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-012/base_color.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-012/height.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-012/metallic.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-012/normal_open_gl.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-012/roughness.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-013/base_color.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-013/height.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-013/metallic.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-013/normal_open_gl.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-013/roughness.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-014/base_color.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-014/height.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-014/metallic.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-014/normal_open_gl.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-014/roughness.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-015/base_color.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-015/height.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-015/metallic.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-015/normal_open_gl.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-015/roughness.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-016/base_color.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-016/height.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-016/metallic.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-016/normal_open_gl.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-016/roughness.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-017/base_color.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-017/height.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-017/metallic.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-017/normal_open_gl.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-017/roughness.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-018/base_color.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-018/height.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-018/metallic.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-018/normal_open_gl.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-018/roughness.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-019/base_color.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-019/height.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-019/metallic.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-019/normal_open_gl.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-019/roughness.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-020/base_color.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-020/height.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-020/metallic.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-020/normal_open_gl.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-020/roughness.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-021/base_color.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-021/height.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-021/metallic.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-021/normal_open_gl.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-021/roughness.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-022/base_color.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-022/height.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-022/metallic.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-022/normal_open_gl.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-022/roughness.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-023/base_color.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-023/height.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-023/metallic.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-023/normal_open_gl.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-023/roughness.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-024/base_color.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-024/height.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-024/metallic.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-024/normal_open_gl.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-024/roughness.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-025/base_color.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-025/height.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-025/metallic.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-025/normal_open_gl.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-025/roughness.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-026/base_color.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-026/height.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-026/metallic.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-026/normal_open_gl.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-026/roughness.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-027/base_color.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-027/height.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-027/metallic.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-027/normal_open_gl.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-027/roughness.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-028/base_color.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-028/height.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-028/metallic.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-028/normal_open_gl.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-028/roughness.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-029/base_color.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-029/height.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-029/metallic.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-029/normal_open_gl.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-029/roughness.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-030/base_color.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-030/height.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-030/metallic.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-030/normal_open_gl.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-030/roughness.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-031/base_color.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-031/height.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-031/metallic.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-031/normal_open_gl.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-031/roughness.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-032/base_color.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-032/height.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-032/metallic.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-032/normal_open_gl.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-032/roughness.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-033/base_color.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-033/height.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-033/metallic.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-033/normal_open_gl.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-033/roughness.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-034/base_color.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-034/height.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-034/metallic.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-034/normal_open_gl.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-034/roughness.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-035/base_color.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-035/height.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-035/metallic.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-035/normal_open_gl.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-035/roughness.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-036/base_color.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-036/height.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-036/metallic.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-036/normal_open_gl.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-036/roughness.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-037/base_color.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-037/height.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-037/metallic.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-037/normal_open_gl.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-037/roughness.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-038/base_color.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-038/height.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-038/metallic.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-038/normal_open_gl.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-038/roughness.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-039/base_color.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-039/height.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-039/metallic.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-039/normal_open_gl.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-039/roughness.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-040/base_color.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-040/height.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-040/metallic.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-040/normal_open_gl.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-040/roughness.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-041/base_color.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-041/height.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-041/metallic.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-041/normal_open_gl.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-041/roughness.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-042/base_color.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-042/height.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-042/metallic.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-042/normal_open_gl.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-042/roughness.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-043/base_color.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-043/height.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-043/metallic.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-043/normal_open_gl.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-043/roughness.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-044/base_color.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-044/height.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-044/metallic.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-044/normal_open_gl.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-044/roughness.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-045/base_color.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-045/height.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-045/metallic.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-045/normal_open_gl.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-045/roughness.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-046/base_color.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-046/height.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-046/metallic.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-046/normal_open_gl.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-046/roughness.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-047/base_color.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-047/height.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-047/metallic.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-047/normal_open_gl.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-047/roughness.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-048/base_color.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-048/height.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-048/metallic.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-048/normal_open_gl.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/exports/SURF-048/roughness.png | SolidCraft contributors | original deterministic periodic PBR map export; recipe, role, scale and SHA-256 in assets/render/starter/materials/manifest.json; not measured material data | MIT OR Apache-2.0 |
-| assets/render/starter/materials/manifest.json | SolidCraft contributors | original clean-room renderer resource recipe or manifest; authored/unbound scope and source receipts in assets/render/starter/README.md | MIT OR Apache-2.0 |
-| assets/render/starter/materials/source/recipes.json | SolidCraft contributors | original clean-room renderer resource recipe or manifest; authored/unbound scope and source receipts in assets/render/starter/README.md | MIT OR Apache-2.0 |
-| assets/render/starter/pack.json | SolidCraft contributors | original clean-room renderer resource recipe or manifest; authored/unbound scope and source receipts in assets/render/starter/README.md | MIT OR Apache-2.0 |
-| assets/render/starter/tools/environments.py | SolidCraft contributors | original clean-room offline resource authoring, numerical verification or validation tool; no application runtime dependency | MIT OR Apache-2.0 |
-| assets/render/starter/tools/lighting.py | SolidCraft contributors | original clean-room offline resource authoring, numerical verification or validation tool; no application runtime dependency | MIT OR Apache-2.0 |
-| assets/render/starter/tools/materials.py | SolidCraft contributors | original clean-room offline resource authoring, numerical verification or validation tool; no application runtime dependency | MIT OR Apache-2.0 |
-| assets/render/starter/tools/test_environments.py | SolidCraft contributors | original clean-room offline resource authoring, numerical verification or validation tool; no application runtime dependency | MIT OR Apache-2.0 |
-| assets/render/starter/tools/test_lighting.py | SolidCraft contributors | original clean-room offline resource authoring, numerical verification or validation tool; no application runtime dependency | MIT OR Apache-2.0 |
-| assets/render/starter/tools/test_materials.py | SolidCraft contributors | original clean-room offline resource authoring, numerical verification or validation tool; no application runtime dependency | MIT OR Apache-2.0 |
-| assets/render/starter/tools/validate_pack.py | SolidCraft contributors | original clean-room offline resource authoring, numerical verification or validation tool; no application runtime dependency | MIT OR Apache-2.0 |
-| assets/render/selene/licenses/UFL.txt | Canonical Ltd. | exact Ubuntu Font Licence 1.0 notice retained from https://github.com/0xlillith/solidcraft-rover/blob/b32437915372d32b71419dc8f5143fe22ff1e869/UFL.txt for the modelled Ubuntu Light lettering | Ubuntu Font Licence 1.0 |
-| assets/render/selene/materials/appearance-pack.json | SolidCraft contributors | original clean-room English appearance authoring data: 48 illustrative opaque PBR projections with separate advanced target specifications; no measured dataset or external assets | MIT OR Apache-2.0 |
-| assets/render/selene/materials/appearance-swatches.json | SolidCraft contributors | original analytic command script for 48 opaque box swatches and a support base, derived only from the adjacent original appearance pack; no external artwork or engineering properties | MIT OR Apache-2.0 |
-| assets/render/selene/models/SELENE-functional.solidcraft | SolidCraft contributors (native enhancements); 0xlillith (original rover); SychPL / Mateusz Sych (supplied showcase assembly); Canonical Ltd. (lettering outlines) | native-command derivative of the unchanged author-supplied source, with original bearing, suspension, gripper, electronics and presentation work; source and final hashes in assets/render/selene/SOURCE.md and VALIDATION.md | Model and showcase contributions: MIT OR Apache-2.0 (explicit SychPL grant https://github.com/tangency-labs/solidcraft/pull/5494#issuecomment-6375788360); lettering: Ubuntu Font Licence 1.0, notice retained in assets/render/selene/licenses/UFL.txt |
-| assets/render/selene/motion/interference-pairs.json | SolidCraft contributors | original authored exact-body pair selection for bounded native clearance checks on the functional SELENE derivative; not a generated collision result | MIT OR Apache-2.0 |
-| assets/render/selene/motion/mechanism-acceptance.json | SolidCraft contributors | original kinematic acceptance criteria, inspected source-container bindings and analytic planning checks from cited public SolidCraft documentation and the admitted native source; derivative runtime acceptance is recorded separately | MIT OR Apache-2.0 |
-| assets/render/selene/motion/preflight-commands.json | SolidCraft contributors | original read-only inventory script using existing project commands; no source-model selectors or state mutations | MIT OR Apache-2.0 |
-| assets/render/selene/motion/sample-sequence.json | SolidCraft contributors | original future lunar sampling and sealed-vial dynamics state specification; no simulation or physical calibration result | MIT OR Apache-2.0 |
-| assets/render/selene/scenes/roles.json | SolidCraft contributors | original semantic role and candidate-material authoring specification for the prepared SELENE demo; no native geometry or external assets bundled | MIT OR Apache-2.0 |
-| assets/render/selene/scenes/shots.json | SolidCraft contributors | original shot, framing and staged-sequence authoring specification for the prepared SELENE demo; no render or simulation result claimed | MIT OR Apache-2.0 |
-| assets/render/selene/scenes/stages.json | SolidCraft contributors | original stage composition and light-ownership authoring specification derived from the project render catalog; scientific context linked in scenes/README.md | MIT OR Apache-2.0 |
-| assets/render/selene/source-lock.json | SolidCraft contributors | original source-admission metadata and public-reference inventory pinning the supplied improved SELENE native file; original-model and font notices preserved in SOURCE.md | MIT OR Apache-2.0 |
-| assets/render/selene/source/SELENE-showcase.solidcraft | 0xlillith (original rover); SychPL / Mateusz Sych (showcase assembly and helpers); SolidCraft contributors (emblem); Canonical Ltd. (lettering outlines) | unchanged author-published native file from https://github.com/SychPL/solidcraft/blob/32ec1720447e3fcc6bb6cc53a63fb5b39cfa21b9/SELENE-showcase.solidcraft; source hash and license evidence in assets/render/selene/SOURCE.md | Model and showcase contributions: MIT OR Apache-2.0 (explicit SychPL grant https://github.com/tangency-labs/solidcraft/pull/5494#issuecomment-6375788360); lettering: Ubuntu Font Licence 1.0, notice retained in assets/render/selene/licenses/UFL.txt |
-| assets/render/selene/tools/bearings.py | SolidCraft contributors | original native-command authoring of grooved bearings, rolling-element kinematics, clamp hubs and arm/head clearances; analytic geometry, no copied CAD source | MIT OR Apache-2.0 |
-| assets/render/selene/tools/build.py | SolidCraft contributors | original Python development tool for pinned-source native command replay, staged checkpoints, command-trace and geometry health checks; no application runtime dependency | MIT OR Apache-2.0 |
-| assets/render/selene/tools/electronics.py | SolidCraft contributors | original native-command Raspberry Pi 5 visual reconstruction using public manufacturer mechanical dimensions; original package envelopes and connector internals, no manufacturer CAD or artwork copied | MIT OR Apache-2.0 |
-| assets/render/selene/tools/export_views.py | SolidCraft contributors | original native MCP preview export tool for three reusable showcase views; changes only transient visibility and cameras and verifies the source master hash | MIT OR Apache-2.0 |
-| assets/render/selene/tools/finishes.py | SolidCraft contributors | original native physical-material proxy and opaque PBR assignment generator preserving the supplied rover palette | MIT OR Apache-2.0 |
-| assets/render/selene/tools/mechanisms.py | SolidCraft contributors | original native-command gripper sleeves, pads, wheel ownership, joint limits and inspection studies with independent analytic suspension relation | MIT OR Apache-2.0 |
-| assets/render/selene/tools/prepare.py | SolidCraft contributors | original Python development tool for bounded native-container inspection and reviewed opaque body-assignment preparation; no application runtime dependency | MIT OR Apache-2.0 |
-| assets/render/selene/tools/presentation.py | SolidCraft contributors | original native-command browser organization, camera/render setups and closed sample-vial glass preparation | MIT OR Apache-2.0 |
-| assets/render/selene/tools/suspension.py | SolidCraft contributors | original native-command trailing-arm suspension, telescoping coilover loops, plain bushings, carrier gussets and local motion clearances derived from the admitted rover geometry; independent analytic pin-distance relation, no copied external CAD | MIT OR Apache-2.0 |
-| assets/render/selene/tools/validate_native.py | SolidCraft contributors | original bounded native MCP verification tool for sampled SELENE kinematics, independent analytic follower and world-coordinate checks, optional exact-name interference pairs and unchanged input hashes; no application runtime dependency | MIT OR Apache-2.0 |
-| assets/render/selene/tools/validate_prepared.py | SolidCraft contributors | original Python development validator for prepared SELENE resources, source status, references, hashes and command projections; no application runtime dependency | MIT OR Apache-2.0 |
-| assets/render/selene/tools/yaw_supports.py | SolidCraft contributors | original native-command plain yaw journals, flanged brass thrust bushings, recessed axial retaining pins and mounting-head clearances derived from the admitted rover geometry; no copied external CAD | MIT OR Apache-2.0 |
-| assets/render/selene/ui/demo-flow.json | SolidCraft contributors | original progressive-disclosure UI integration specification for the existing Render workspace; no copied UI artwork or runtime registration | MIT OR Apache-2.0 |
-| docs/render-materials/baseline-setup-commands.json | SolidCraft contributors | original clean-room English catalog, preset or analytic planning data; external references documented in docs/render-materials/SOURCES.md; no external assets bundled | MIT OR Apache-2.0 |
-| docs/render-materials/capabilities.json | SolidCraft contributors | original clean-room English catalog, preset or analytic planning data; external references documented in docs/render-materials/SOURCES.md; no external assets bundled | MIT OR Apache-2.0 |
-| docs/render-materials/environment-presets.json | SolidCraft contributors | original clean-room English catalog, preset or analytic planning data; external references documented in docs/render-materials/SOURCES.md; no external assets bundled | MIT OR Apache-2.0 |
-| docs/render-materials/environments.json | SolidCraft contributors | original clean-room English catalog, preset or analytic planning data; external references documented in docs/render-materials/SOURCES.md; no external assets bundled | MIT OR Apache-2.0 |
-| docs/render-materials/lighting.json | SolidCraft contributors | original clean-room English catalog, preset or analytic planning data; external references documented in docs/render-materials/SOURCES.md; no external assets bundled | MIT OR Apache-2.0 |
-| docs/render-materials/lunar-physics-fixtures.json | SolidCraft contributors | original clean-room English catalog, preset or analytic planning data; external references documented in docs/render-materials/SOURCES.md; no external assets bundled | MIT OR Apache-2.0 |
-| docs/render-materials/materials.json | SolidCraft contributors | original clean-room English catalog, preset or analytic planning data; external references documented in docs/render-materials/SOURCES.md; no external assets bundled | MIT OR Apache-2.0 |
-| docs/render-materials/provenance.json | SolidCraft contributors | original clean-room English catalog, preset or analytic planning data; external references documented in docs/render-materials/SOURCES.md; no external assets bundled | MIT OR Apache-2.0 |
-| docs/render-materials/quality-presets.json | SolidCraft contributors | original clean-room English catalog, preset or analytic planning data; external references documented in docs/render-materials/SOURCES.md; no external assets bundled | MIT OR Apache-2.0 |
-| docs/render-materials/roadmap.json | SolidCraft contributors | original clean-room English catalog, preset or analytic planning data; external references documented in docs/render-materials/SOURCES.md; no external assets bundled | MIT OR Apache-2.0 |
-| docs/render-materials/scene-presets.json | SolidCraft contributors | original clean-room English catalog, preset or analytic planning data; external references documented in docs/render-materials/SOURCES.md; no external assets bundled | MIT OR Apache-2.0 |
-| docs/render-materials/selene-bindings.json | SolidCraft contributors | original clean-room English catalog, preset or analytic planning data; external references documented in docs/render-materials/SOURCES.md; no external assets bundled | MIT OR Apache-2.0 |
-| docs/render-materials/simulation-requirements.json | SolidCraft contributors | original clean-room English catalog, preset or analytic planning data; external references documented in docs/render-materials/SOURCES.md; no external assets bundled | MIT OR Apache-2.0 |
-| docs/render-materials/studio-presets.json | SolidCraft contributors | original clean-room English catalog, preset or analytic planning data; external references documented in docs/render-materials/SOURCES.md; no external assets bundled | MIT OR Apache-2.0 |
-| docs/render-materials/ui-integration.json | SolidCraft contributors | original English UI integration specification and exact source-revision mappings from SolidCraft's own implemented shell, UI kit and accepted icons; no copied artwork or runtime registration | MIT OR Apache-2.0 |
-| docs/render-materials/ux.json | SolidCraft contributors | original clean-room English catalog, preset or analytic planning data; external references documented in docs/render-materials/SOURCES.md; no external assets bundled | MIT OR Apache-2.0 |
-| docs/render-materials/validate_catalog.py | SolidCraft contributors | original Python development validator for catalog references, preset composition and analytic specification fixtures; no application runtime dependency | MIT OR Apache-2.0 |
-
-### Built-in render resource adapters (personal integration batch, 2026-10-22)
-
-The original adapters in `crates/engine/src/cmd/render/library.rs`, the generated lookup `library_data.rs` and its generator `tools/render-library/generate.py` project the already attributed starter and SELENE resources without replacing their bytes or authoring manifests. The added scalar texture channels, explicit color/V conventions and immutable-source/GPU-payload sharing are original contributor work under MIT OR Apache-2.0. No external code, commercial CAD data or new third-party imagery was imported. Source metadata and the original authoring attribution remain authoritative; pending runtime acceptance is not a photometric or engineering qualification.
-
-## Physical reference resource additions
-
-| File | Author | Source | Licence |
-|---|---|---|---|
-| assets/render/physical/bindings.json | SolidCraft contributors | original physical-reference curation, associations or derived schema-1 export; per-fact public sources retained without relicensing their publications | MIT OR Apache-2.0 |
-| assets/render/physical/exports/coverage.json | SolidCraft contributors | original physical-reference curation, associations or derived schema-1 export; per-fact public sources retained without relicensing their publications | MIT OR Apache-2.0 |
-| assets/render/physical/exports/native-cards.json | SolidCraft contributors | original physical-reference curation, associations or derived schema-1 export; per-fact public sources retained without relicensing their publications | MIT OR Apache-2.0 |
-| assets/render/physical/profiles.json | SolidCraft contributors | original physical-reference curation, associations or derived schema-1 export; per-fact public sources retained without relicensing their publications | MIT OR Apache-2.0 |
-| assets/render/physical/quantities.json | SolidCraft contributors | original physical-reference curation, associations or derived schema-1 export; per-fact public sources retained without relicensing their publications | MIT OR Apache-2.0 |
-| assets/render/physical/sources.json | SolidCraft contributors | original physical-reference curation, associations or derived schema-1 export; per-fact public sources retained without relicensing their publications | MIT OR Apache-2.0 |
-| assets/render/physical/tools/check_physical.py | SolidCraft contributors | original offline physical-reference validation and projection tool | MIT OR Apache-2.0 |
-| assets/render/physical/tools/physical.py | SolidCraft contributors | original offline physical-reference validation and projection tool | MIT OR Apache-2.0 |
-| assets/render/physical/tools/test_physical.py | SolidCraft contributors | original offline physical-reference validation and projection tool | MIT OR Apache-2.0 |
-| assets/render/physical/tools/export_library.py | SolidCraft contributors | original explicit reference-library planner and native no-loss export verifier; no external code | MIT OR Apache-2.0 |
-| assets/render/physical/tools/test_export_library.py | SolidCraft contributors | original regressions for native capability refusal, source identity and physical-card preservation | MIT OR Apache-2.0 |
-
-| tools/render-library/selene_studio.py | SolidCraft contributors | original bounded native MCP studio orchestration with pinned editable master, explicit GPU policy and request/export receipts; no generated model or image substitutes | MIT OR Apache-2.0 |
-
-| tools/render-library/selene_recipe.py | SolidCraft contributors | original full-detail SELENE material/light composition and analytic camera fit; unchanged pinned native master, no external imagery or measured optical dataset | MIT OR Apache-2.0 |
-| tools/render-library/test_selene_recipe.py | SolidCraft contributors | original independent projection, scaling, nonmutation and input-refusal fixtures for the SELENE studio recipe | MIT OR Apache-2.0 |
-
-| assets/render/selene/scenes/studio-hero.json | SolidCraft contributors | original executable render intent and verified provenance for the selected native SELENE studio showcase; authored RGB appearance and relative light units, not measured optics or simulation results | MIT OR Apache-2.0 |
-| tools/render-library/publish_selene.py | SolidCraft contributors | original bounded native-frame publication checks for explicit visual review, source identity, resource hashes, PNG CRCs and scanline limits; copies completed native bytes without image synthesis or resampling | MIT OR Apache-2.0 |
-| tools/render-library/test_publish_selene.py | SolidCraft contributors | original tiny analytic PNG fixtures for source-size, CRC, expansion, dimensions and explicit-publication-consent regressions | MIT OR Apache-2.0 |
-
-| tools/render-library/package_selene.py | SolidCraft contributors | original byte-preserving packaging of the reviewed native SELENE PNG, public provenance and checksums; bounded resource/PNG verification, no fonts, executables or new render execution | MIT OR Apache-2.0 |
-| .github/workflows/selene-showcase.yml | SolidCraft contributors | original read-only artifact-delivery workflow for the reviewed native SELENE export; existing pinned repository actions, no compilation, package installation, secret use or renderer claims | MIT OR Apache-2.0 |
-
-| tools/render-library/verify_linear_master.py | SolidCraft contributors | original independent validation driver for native linear EXR output using the official OpenEXR Python reader as an external test oracle; no codec implementation copied or production dependency added | MIT OR Apache-2.0 |
-
-## Aging, effects and backgrounds showcase, 2026-10-23
-
-| File | Author | Source | Licence |
-|---|---|---|---|
-| tools/render-showcase/instrument.py | SolidCraft contributors | original native-scene authoring, checksum-verified editorial assembly or bounded delivery tool; no third-party source or font binary copied | MIT OR Apache-2.0 |
-| tools/render-showcase/compose.py | SolidCraft contributors | original native-scene authoring, checksum-verified editorial assembly or bounded delivery tool; no third-party source or font binary copied | MIT OR Apache-2.0 |
-| tools/render-showcase/package.py | SolidCraft contributors | original native-scene authoring, checksum-verified editorial assembly or bounded delivery tool; no third-party source or font binary copied | MIT OR Apache-2.0 |
-
-| distribution/SolidCraft-Render-Showcase.zip | SolidCraft contributors and the explicitly credited original model/UI/resource authors | byte-verified selected collaborator package of reviewed native media, editable sample, recipes and public provenance; contained attribution and existing SELENE lettering notices retained; no fonts or executable binaries | MIT OR Apache-2.0 for new contributions; referenced original notices retained |
-| distribution/SolidCraft-Render-Showcase.json | SolidCraft contributors | original verified delivery archive manifest with exact SHA-256, member count and bounded scope | MIT OR Apache-2.0 |

CONTRIBUTING.md

@@ -1,10 +1,8 @@
 # Contributing to SolidCraft
 
-Agents: start from the router in [AGENTS.md](AGENTS.md), which points to a short skill in [`skills/`](skills/README.md) for each kind of work. This page stays the full human guide.
-
 SolidCraft is an open-source parametric 3D CAD app written in pure Rust.
 You sketch on a plane, constrain the sketch, turn profiles into solids, and
-change a parameter to watch the timeline rebuild. It runs as a desktop app (Windows, macOS, Linux), in
+change a parameter to watch the timeline rebuild. It runs as a desktop app (Windows, Linux), in
 the browser (wasm + WebGPU/WebGL2), headless from a CLI, and as an MCP server that AI agents can
 model with.
 
@@ -13,19 +11,18 @@ build it, how the code is laid out, the few rules that aren't negotiable, and wh
 needed most.
 
 Before choosing a task, check the [command inventory](docs/features.md) and
-[roadmap](docs/roadmap-detail.md) for implemented capabilities and current priorities.
+[roadmap](ROADMAP.md) for implemented capabilities and current priorities.
 
 Questions, ideas or want to say what you're working on? Join the [Discord](https://discord.gg/FtU4NQNVDH).
 
 ## Kernel work is paused
 
-We're moving to a new geometry kernel. Until that's done, please don't open pull requests that
-change `crates/kernel/`, `crates/geom/` or the vendored kernel in `solidcore/`, or issues and discussions about kernel
-work: booleans, fillets, chamfers, shell, offsets, sweeps and lofts, threads and holes, STEP/IGES
-import and export, or tessellation. The pinned issue on the tracker explains it. New ones get the
-`kernel-paused` label (`.github/workflows/kernel-paused.yml`) and a maintainer answers them. Crashes
-and data loss are still taken as issues. Pull requests outside those directories carry on as normal,
-including the dialogs and tools for these features.
+We're evaluating a new geometry kernel. Until that's decided, please don't open issues, pull
+requests or discussions about kernel work: booleans, fillets, chamfers, shell, offsets, sweeps and
+lofts, threads and holes, STEP/IGES import and export, tessellation, or anything else that changes
+`crates/kernel/`. The pinned issue on the tracker explains it. New ones get the `kernel-paused`
+label (`.github/workflows/kernel-paused.yml`) and a maintainer answers them. Crashes and data loss
+are still taken as issues, and everything outside the kernel carries on as normal.
 
 ## Get it running (about 10 minutes on a fast machine)
 
@@ -88,13 +85,10 @@ The [architecture page](docs/architecture.md) has the layer table. The short ver
 
 - `crates/geom`: vectors, planes, meshes, measures.
 - `crates/sketch`: our own constraint solver, plus profile finding.
-- `crates/dynamics`: multibody dynamics: rigid bodies, joint constraints, gravity and springs,
-  integrated in time (RFC #9719). It depends only on `geom`.
-- `crates/kernel`: the B-rep kernel boundary: solids, extrude/revolve, booleans, fillets,
-  meshes, measures and STEP, behind our own API (implemented with `solidcore`). `crates/smlib` is
-  the safe wrapper around `solidcore`, and `solidcore` is vendored in this repository at
-  `solidcore/`; `.github/workflows/solidcore-mirror.yml` mirrors changes to it back to
-  [tangency-labs/solidcore](https://github.com/tangency-labs/solidcore).
+- `crates/kernel`: the B-rep kernel boundary. It wraps [truck](https://github.com/ricosjp/truck),
+  and it's the only crate allowed to touch truck. Fillets, chamfers, shell/offset, Delete Face,
+  Split Face, STEP/IGES read and write, and face provenance are our own code here. Patched
+  copies of three truck crates live in `vendor/` and are excluded from our fmt/clippy rules.
 - `crates/doc`: the document. It holds parameters and expressions, the feature timeline and its
   incremental rebuild, components and occurrences, joints, appearances, and persistent naming.
 - `crates/io`: design files and mesh formats (3MF, STL, OBJ).
@@ -107,12 +101,6 @@ The [architecture page](docs/architecture.md) has the layer table. The short ver
 
 `cargo xtask layers` fails the build if a lower layer depends on a higher one.
 
-Whether a change belongs in SolidCraft or in SolidCore is decided by
-[`solidcore/docs/layers.md`](solidcore/docs/layers.md). Its tests: the **kernel** (`solidcore`)
-computes geometry any client could use; **ops** (`solidcore-ops`) is a recipe of kernel calls for a
-workflow, with no geometric quantity of its own; the **app** (SolidCraft) holds state and maps input
-to commands, with no geometry math.
-
 ## Rules that aren't negotiable
 
 1. **Independent.** SolidCraft is independent. Behaviour is designed from public
@@ -127,8 +115,7 @@ to commands, with no geometry math.
    not.) Permissive
    dependencies are fine. Note which one you're adding and why in the PR. THIRD-PARTY-LICENSES.txt
    lists it once the change lands: the Generated files workflow rewrites it on `main`.
-   Nightly/manual CI also scans advisories, bans and sources with cargo-deny, and a PR that
-   changes Cargo.lock or a Cargo.toml checks the advisories; see
+   Nightly/manual CI also scans advisories, bans and sources with cargo-deny; see
    [the local command and coverage limits](docs/book/src/dev/testing.md#dependency-advisories).
 3. **Every asset is original or openly licensed and has a row in
    [ATTRIBUTION.md](ATTRIBUTION.md).** Icons are drawn in code (`crates/ui-egui/src/icons.rs`).
@@ -140,14 +127,11 @@ to commands, with no geometry math.
      `crates/threedx-client/src/macos.rs` (the 3Dconnexion driver's client API on macOS), and the
      compiler denies it.
    - An unsupported case returns an error ("not supported yet: …"); it never panics.
-   - Every call into the vendored kernel goes through `solidcraft_kernel::guard`.
+   - Every call into truck goes through `solidcraft_kernel::guard`.
    - Every crash fix comes with a regression test.
 5. **Everything is a command, with a test.** A new feature means a `CommandSpec` in
-   `crates/engine/src/cmd/` with input and output schemas (see
-   [Adding a command](docs/book/src/dev/commands.md#adding-a-command); a test warns about a
-   command without them, and will fail it once required), engine tests that measure the result (volume, area,
+   `crates/engine/src/cmd/`, engine tests that measure the result (volume, area,
    face/edge/vertex counts against a value you can derive), and for UI work a scenario (below).
-   A command on the toolbar also ships with its help tooltip (step 6 of Adding a command).
 6. **One set of camera controls.** Every page or canvas that shows a view (the modelling
    viewport, the Render preview, and any new page such as a flat pattern or drawing) calls
    `navigation::handle` (`crates/ui-egui/src/navigation.rs`) for its camera input, with
@@ -170,24 +154,9 @@ the most complete description of the house style.
 | UI scenarios | `crates/ui-egui/tests/scenarios/*.json` | part of `cargo test` |
 | Reference tests | `cargo xtask oracle` | `tests/oracle/` (see below) |
 
-The reference for what the kernel builds is the kernel-cases ladder (`tests/kernel-cases/ladder/`,
-`cargo xtask kernel-cases --ladder`, [docs/kernel-ladder.md](docs/kernel-ladder.md)).
-
-**Kernel cases go to solidcore.** A case that checks a kernel operation (a boolean, a blend, a
-shell, a sweep, an import's geometry) is a new entry in solidcore's corpus,
-`solidcore/crates/solidcore/tests/kernel_cases/<area>/` in this repository, with an answer
-in closed form or exact. Draft it as a rig case here, export it with
-`cargo xtask kernel-cases --area <area> --export DIR`, add `DIR/<area>/<case>.json` and its
-`.bodies.json.gz` under `solidcore`, and delete the draft; or write the entry by hand as
-that folder's README describes. The mirror workflow pushes the change to
-[tangency-labs/solidcore](https://github.com/tangency-labs/solidcore). `tests/kernel-cases/` takes
-no new cases: its `CASES` list only shrinks (`cargo xtask lists`). App-level cases (what a command
-does, the UI, product rules) stay in SolidCraft, as tests in their area's existing test file or UI
-scenarios.
-
-The naming corpus checks persistent names: every name a corpus design stores still finds a face or
-an edge, and two builds name its faces and edges alike
-(`cargo test --profile ci -p solidcraft-cli --test naming_corpus`).
+A geometry change that changes the robustness goldens re-records them in the same pull request:
+`ROBUSTNESS_GOLDENS_BLESS="why it changed" cargo test --profile ci -p solidcraft-engine --lib robustness_goldens::`
+(see [docs/robustness.md](docs/robustness.md)); CI runs every seed on pull requests that touch geometry.
 [docs/mutation-testing.md](docs/mutation-testing.md) shows how to find kernel behaviour these
 black-box suites miss.
 
@@ -213,20 +182,12 @@ Either include the fix in the same PR, or mark the test `#[ignore = "fails until
 (it can then merge right away), and remove that line in the PR that fixes the bug.
 
 **Use the `ci` profile.** CI runs the tests with `--profile ci`: light optimisation, line tables,
-no LTO, and debug assertions off. It
+no LTO, and debug assertions off (truck has debug-only assertions that reject valid geometry). It
 builds several times faster than `--release`. If a test fails only in a plain debug build, say so
 in the PR. `cargo xtask test` builds the tests with it and then runs every test binary at once
 (`cargo test` runs them one after another); arguments after `--` go to each binary, e.g.
-`cargo xtask test -- shell`. Set `SOLIDCRAFT_TEST_JOBS` to a positive integer to opt into a
-shared bound on top-level test/side commands for `cargo xtask test` and `cargo xtask ci`.
-For example, `SOLIDCRAFT_TEST_JOBS=2` allows two commands at once; the sequential wasm/doc
-worker consumes one of those slots. Every binary and side check still runs after failures.
-Without the variable the existing concurrency is unchanged. With it set, each test binary
-inherits `RUST_TEST_THREADS` and `ACTION_MATRIX_JOBS` of `max(1, cpus / jobs)` — the machine's
-parallelism shared between the binaries in flight — unless you set either one explicitly;
-explicit caller overrides always win. Cargo's build-job setting remains an independent caller
-override; this limit does not change test filters, timeouts or baselines.
-Tests run beside each other on a busy machine, so a test must not depend on wall-clock timing.
+`cargo xtask test -- shell`. Tests run beside each other on a busy machine, so a test must not
+depend on wall-clock timing.
 
 **Ready pull requests test what they touch.** CI maps changed files to workspace packages and
 runs Clippy, the test build and tests for those and their dependents. The
@@ -246,7 +207,8 @@ Pull requests skip a few heavy tests (one to twelve minutes each), which run in
 Check that validation after merging. They are listed in
 `.config/nextest.toml` and the [testing page](docs/book/src/dev/testing.md):
 
-- `solidcraft-engine`: `tests::hostile_params_never_panic`, everything in `tests::robustness`,
+- `solidcraft-engine`: `tests::hostile_params_never_panic`, everything in `tests::robustness` and
+  the seeds of `tests::robustness_goldens` (`seed_00` … `seed_95`; pull requests that change the kernel, truck or the goldens run all but the slowest, `SLOW_SEEDS` in `ci.yml`),
   `pattern_suppress_tests::enclosure_arc_extinction_keeps_a_real_sharp_inner_lip_after_resize_and_reopen`,
   `pattern_suppress_tests::enclosure_datums_follow_wall_height_and_board_depth_with_material_proofs`,
   `cmd::plastic::tests::enclosure_snap_fit_follows_resized_front_wall`, the `atomic_commands` contract tests
@@ -266,8 +228,7 @@ the surface itself). Expected values are either worked out in closed form
 (`tools/oracle-analytic/`) or computed by building the same recipe in FreeCAD, run as a separate
 program (`tools/freecad-oracle/`); each file says which. The generated
 [reference test report](docs/oracle.md) has the current case count and results. The reference-test
-CI job runs `cargo xtask oracle` during full validation, and on pull requests that reach
-`solidcraft-cli`. A case that
+CI job runs `cargo xtask oracle` during full validation; pull-request runs skip it. A case that
 fails because of a known bug names its issue in `expected.json` (`"known_failure": "#123"`);
 never change an expected value to match SolidCraft's output.
 
@@ -287,16 +248,14 @@ mean something else, it needs a format change. **Add one file, and edit nothing
    change's file, or any `v<N>/` folder: those are fixed once released.
 
 That's all. The build counts the files: while any are pending it writes the next format number,
-which no release reads, so a release warns about a design that has your change and keeps what it can't read of it.
+which no release reads, so a release refuses a design that has your change instead of losing it.
 A file also lists the pending changes it has (`format_pending`), so a later development build
 runs only the steps that file is missing. Two pull requests that each add a change merge without
 a conflict. `crates/doc/src/format/pending/README.md` has an example.
 
 **At release time** the maintainer runs `scripts/fold-format-pending.sh`, which moves the pending
 files into `crates/doc/src/format/v<N>/` and fixes that number for good (see
-[docs/releasing.md](docs/releasing.md)). Never add a file to a `v<N>/` folder afterwards. Drawings
-follow the same rules with their own numbers, from 1, in `crates/doc/src/drawing/format/` (see its
-`pending/README.md`), and the same script folds them.
+[docs/releasing.md](docs/releasing.md)). Never add a file to a `v<N>/` folder afterwards.
 
 ## Lists many changes add to
 
@@ -304,36 +263,17 @@ Some files gain an item in many pull requests at once. They are kept so that two
 each add an item only meet when their items are neighbours, which spares everyone a conflict
 and a fresh CI run:
 
-- **Growing Rust lists**: use slices (`const ITEMS: &[Item] = &[...];`) without a written
-  length. `cargo xtask lists` rejects non-test const/static arrays with more than ten lines
-  of entries, except fixed standard or algorithm tables listed with reasons in `xtask/src/lists.rs`.
-  Built-in themes need only a JSON file in `assets/styles/ui/themes/`, with a unique nonnegative
-  integer `order` (the picker order) and its own `provenance` line; keep existing order values.
 - **Message catalogs** (`assets/locales/*.json`): one message per line, sorted by id. Add your
   message anywhere and run `cargo xtask lists --fix`; `cargo xtask lists` (in `cargo xtask ci`
   and the Lists workflow) fails on an unsorted catalog or an id that appears twice.
 - **`mod` lines**: one per line, in the sorted group they belong to (`cargo fmt` keeps each group
   sorted). Add a new module into the existing group, not as a new group at the end.
-- **Commands without schemas** (`crates/engine/src/schema/unconverted.txt`): sorted, one id per
-  line, and it only shrinks. Converting a command removes its line; a new command is never added
-  to it.
-- **Toolbar commands without help** (`BACKLOG` in `crates/ui-egui/src/command_help.rs`): sorted,
-  one id per line, and it only shrinks. Writing a command's help removes its line; a new command
-  is never added to it.
-- **`ui.prefs` settings** (`docs/control-protocol.md`): one line per setting, sorted by name, in
-  the list under the protocol table; add a new setting on its own line rather than editing a shared
-  row.
 - **Languages** (`crates/ui-egui/src/i18n.rs`): one per line, English first, then by id (a test
   checks it).
 - **Generated files**: `THIRD-PARTY-LICENSES.txt` and `docs/features.md` are rewritten on `main`
   after each merge by the Generated files workflow (`cargo xtask licences`, `cargo xtask
   features`). Don't regenerate or edit them in a pull request.
 - **Design format**: one file per change, never an edit to a shared number (above).
-- **New UI strings and attribution rows**: one new file per change, `assets/locales/pending/<slug>.json`
-  and `attribution/pending/<slug>.md`, instead of editing the catalogs or the ATTRIBUTION.md table;
-  `cargo xtask fold-pending` folds them on `main` (see the README in each folder). A new English
-  message also needs every catalog delivered complete (`COMPLETE` in `crates/ui-egui/src/i18n.rs`:
-  today ar, he, ja, vi, and zh) in the same pending file; `cargo xtask i18n --check` reports any gap.
 
 ## Sending a change
 
@@ -360,21 +300,9 @@ and a fresh CI run:
    quick compile (`cargo check`) when you push. Once a maintainer has reviewed it they add the
    `approved-for-ci` label when the PR is ready to merge, which runs the full CI (build, tests,
    goldens, Clippy); every push after that runs the full set again. Maintainers merge approved
-   PRs in groups by area, so PRs that touch the same code meet a conflict at most once. The one
-   exception is the pull request that first vendored SolidCore: it must land with a real merge
-   commit, because a squash merge drops the subtree parent and the mirror can no longer
-   fast-forward SolidCore (`.github/workflows/solidcore-mirror.yml`).
+   PRs in groups by area, so PRs that touch the same code meet a conflict at most once.
 4. Reference the issue (`Fixes #12`). In the PR, say what you tested and how. For geometry work, include the measured numbers (and
    the expected ones).
-5. Write the PR title and first sentence for someone who hasn't seen your chat, the issue or the
-   code. Maintainers pick what to review from the title, and it becomes the commit on `main`. Say
-   which part of the app changes and what a user now sees or can do, and name things rather than
-   leaning on "there", "it" or "this".
-   - Unclear: `Send to Slicer: pick one print face per body there, and show print faces only while it is open`
-   - Clear: `3D printing: choose the face each body rests on in the Send to Slicer window, not the face menu`
-
-   Use plain, literal English in PR text: one idea per sentence, active voice, and one word for one
-   thing. This helps everyone, including readers whose first language isn't English.
 
 Commenting `/claim` assigns you, adds the `in progress` label, and replies with its automatic cleanup
 deadline. It frees a claim with no linked PR after 72 hours, or a claim with a PR after 14 days
@@ -383,13 +311,6 @@ without pushes. These automatic cleanup deadlines are separate from the daily pr
 `/unclaim` releases the bot claim early (only you or a maintainer can). Issues a maintainer has
 taken are never freed automatically.
 
-**A PR has to explain itself.** Start the description with what it is, in plain words someone new
-to the project would understand: what it does and who it's for. Don't assume anyone knows the name
-of your tool, project or feature. If there's anything to look at, show it in the description: a
-picture or video has to be visible there without opening the changed files. "The GIF is the change"
-doesn't count. A PR that doesn't do this waits until it does. For a PR that adds to
-`docs/showcase.md` or `docs/screenshots/`, the Picture check fails until the description shows one.
-
 Help reviewers see what the words mean. For observable CAD, UI or model behavior, please
 include actual descriptive screenshots or a short recording in the issue or PR. This evidence
 is required for changes or bugs that can be demonstrated in the app, including kernel,
@@ -404,16 +325,6 @@ Changes with no useful observable behavior do not need screenshot or video evide
 small example without private designs or sensitive details; attach the media or link to an
 accessible recording rather than committing generated review artifacts.
 
-To show a picture without committing it, attach the media to the PR (it goes to the PR's own
-attachment storage and renders inline in the comment). A gist is the better home for a log or
-another text file, and you link it; a gist does not render a picture inline. The review artifacts
-stay out of the diff that way, and nothing has to be pushed to a branch of its own.
-
-Attaching works in the browser for anyone who can comment: drag the file into a comment on the
-pull request. A command-line agent without a browser session usually cannot attach a file (the
-upload needs write access to this repository). Say so in the pull request, and the person running
-the agent or a maintainer can attach it.
-
 Keep an eye on your PR's status, but don't push to it only to catch up with `main` (no merge of
 `main`, no Update branch button, no rebase for that alone): every push restarts the whole CI
 run for everyone waiting behind it, and `main`'s own run catches what lands in between. When you
@@ -429,10 +340,6 @@ owning one area, with a human setting direction and reporting bugs. Their workin
 [AGENTS.md](AGENTS.md). Human contributors are just as welcome. Use whatever tools you like, as
 long as the change meets the rules above.
 
-Two quick checks run on every pull request (`.github/workflows/pr-checks.yml`, not required): it
-fails when a lower-numbered open PR by someone else already closes the same issue (the label
-`not-a-duplicate` skips it), or when the description lacks the `Changes a default: no` / `Changes a default: yes — <what>, old behaviour kept behind preference <name>` line (docs-only and bot PRs are exempt).
-
 ## Labels and triage
 
 The triage bot labels every new issue and PR (`.github/workflows/triage.yml`). It only adds labels;
@@ -456,20 +363,20 @@ correct them freely and it won't put them back.
 
 ## Where help is wanted most
 
-**Kernel speed (slow fillets, booleans, STEP):** report slow cases with a file under the `kernel-perf` label, and put kernel effort into the vendored kernel, [solidcore](https://github.com/tangency-labs/solidcore) ([progress](https://tangency-labs.github.io/solidcore/)). See [#1597](https://github.com/tangency-labs/solidcraft/issues/1597).
+**Kernel speed (slow fillets, booleans, STEP):** please don't rewrite the current kernel code for speed; it is being replaced by [solidcore](https://github.com/bherbruck/solidcore) ([progress](https://tangency-labs.github.io/solidcore/)). Report slow cases with a file under the `kernel-perf` label, and put kernel effort into solidcore instead. See [#1597](https://github.com/tangency-labs/solidcraft/issues/1597).
 
 See the [`help wanted`](https://github.com/tangency-labs/solidcraft/labels/help%20wanted) and
 [`good first issue`](https://github.com/tangency-labs/solidcraft/labels/good%20first%20issue) labels.
 In order of how much they'd help users:
 
-1. **Fillet and blend robustness.** Fillets are the vendored kernel's code (`solidcore`).
+1. **Fillet and blend robustness.** Fillets are our own code (truck has no fillet operation).
    Constant, variable-radius and chord fillets work, and so do corners where fillets of
    different radii meet, including three rounds meeting at a vertex. Next are setback corners, fillets along curved edges between curved
    faces, and fillets that consume neighbouring faces.
 2. **Boolean robustness.** A random-design fuzzer currently gets about half of its designs
    through without a kernel error. Each failing seed is a reproducible bug.
 3. **Drawings, CAM and mesh tools.** These are out of scope for now (see
-   [ROADMAP.md](docs/roadmap-detail.md)), but anyone who wants to own one is welcome.
+   [ROADMAP.md](ROADMAP.md)), but anyone who wants to own one is welcome.
 
 ## Updating the generated feature list
 
@@ -485,16 +392,6 @@ the same area), first resolve the command registry and source conflicts, then ru
 The generator tests cover stable ordering and additions that leave existing lines
 unchanged. The initial switch to sorted rows is a one-time larger diff.
 
-## Pictures in the user guide
-
-The user guide's screenshots and short clips (`docs/book/src/media/`) are captured from the real
-app by `examples/demo/doc_shots.py`, one function per figure. Each run starts a fresh app with its
-own settings, so your preferences never show. When a change makes a figure out of date, run
-`python3 examples/demo/doc_shots.py <page or shot>` (it needs Xvfb, ffmpeg, Pillow and a release
-build) and commit the new file. A new figure is a new function there, an ATTRIBUTION row in
-`attribution/pending/`, and a `<video>` (clips) or image link on the page. Keep a still under
-about 250 KB and a clip under about 1 MB.
-
 ## Licence
 
 By contributing you agree that your contribution is licensed as MIT OR Apache-2.0, like the rest

Cargo.toml

@@ -1,12 +1,11 @@
 [workspace]
 resolver = "3"
 members = ["crates/*", "apps/*", "xtask"]
-# Third-party code kept with local fixes (vendor/), and the vendored SolidCore kernel (solidcore/);
-# neither is linted as ours. See CONTRIBUTING.md, "How the code is laid out".
-exclude = ["solidcore", "vendor"]
+# Third-party code kept with local fixes (see vendor/README.md); not linted as ours.
+exclude = ["vendor"]
 
 [workspace.package]
-version = "0.40.0-rc.3"
+version = "0.21.0"
 edition = "2024"
 license = "MIT OR Apache-2.0"
 rust-version = "1.95"
@@ -14,41 +13,20 @@ authors = ["SolidCraft contributors"]
 repository = "https://github.com/bherbruck/solidcraft"
 
 [workspace.dependencies]
-robust = "1.2"
 # internal
 solidcraft-geom = { path = "crates/geom" }
-solidcraft-profile = { path = "crates/profile" }
 solidcraft-sketch = { path = "crates/sketch" }
 solidcraft-kernel = { path = "crates/kernel" }
-solidcraft-smlib = { path = "crates/smlib" }
-solidcraft-step = { path = "crates/step" }
 solidcraft-render = { path = "crates/render" }
-solidcraft-dynamics = { path = "crates/dynamics" }
 solidcraft-gpu = { path = "crates/gpu" }
 solidcraft-doc = { path = "crates/doc" }
 solidcraft-io = { path = "crates/io" }
 solidcraft-engine = { path = "crates/engine" }
 solidcraft-ui-egui = { path = "crates/ui-egui" }
-solidcraft-ui-registry = { path = "crates/ui-registry" }
-solidcraft-color = { path = "crates/color" }
-solidcraft-ui-text = { path = "crates/ui-text" }
-solidcraft-theme = { path = "crates/theme" }
 solidcraft-space-mouse = { path = "crates/space-mouse" }
 solidcraft-mcp = { path = "crates/mcp" }
-solidcraft-mcp-server = { path = "crates/mcp-server" }
-solidcraft-control = { path = "crates/control" }
-solidcraft-control-egui = { path = "crates/control-egui" }
 solidcraft-derive = { path = "crates/derive" }
 solidcraft-3dx-client = { path = "crates/threedx-client" }
-# The Rust port of NVIDIA's SMLib (Apache-2.0), the B-rep kernel behind crates/smlib. Vendored with
-# `git subtree` at solidcore: that tree is the source of truth, and
-# .github/workflows/solidcore-mirror.yml pushes changes in it back to its own repository (#13153).
-solidcore = { path = "solidcore/crates/solidcore" }
-# Geometry as data (solidcore's layers §1, "Record"): the B-rep record, its structural validation
-# and the native body file. Vendored with solidcore, in the same subtree.
-solidcore-record = { path = "solidcore/crates/solidcore-record" }
-# test tooling: a dev-dependency only (xtask/src/layers.rs)
-solidcraft-testkit = { path = "crates/testkit" }
 
 # foundation
 thiserror = "2"
@@ -66,7 +44,14 @@ sha2 = "0.10"
 moxcms = { version = "0.8.1", default-features = false, features = ["extended_range"] }
 semver = "1"
 
-# constrained Delaunay + Ruppert refinement for trimmed faces (MIT OR Apache-2.0).
+# geometry kernel (Apache-2.0; see plan/adr/0001-geometry-kernel.md). Only crates/kernel uses it.
+truck-modeling = "0.6"
+truck-shapeops = { version = "0.4", default-features = false }
+truck-meshalgo = { version = "0.4", default-features = false, features = ["tessellation", "analyzers"] }
+truck-stepio = { version = "0.3", default-features = false }
+truck-topology = "0.6"
+# constrained Delaunay + Ruppert refinement for trimmed faces (MIT OR Apache-2.0); already in the
+# tree through truck-meshalgo.
 spade = { version = "2.15", default-features = false, features = ["std"] }
 rayon = "1.12"
 
@@ -81,20 +66,17 @@ encoding_rs = "0.8"
 # glTF 2.0 import (MIT OR Apache-2.0): the document model and GLB container only; buffers are
 # read by crates/io itself, so no image decoding or file access comes with it.
 gltf = { version = "1.4", default-features = false, features = ["names"] }
-# The computer's name in a design's "open elsewhere" lock file (MIT OR Apache-2.0; already in the
-# tree through x11rb).
-gethostname = "1"
 
 # FreeCAD and Rhino import (Apache-2.0, pure Rust; native and browser builds).
 # Pinned: its IR and codec APIs change between minor versions. Open formats only: no default
 # features, so cadmpeg's codecs for commercial formats (f3d, sldprt, inventor, catia, creo, nx)
 # and its ShapeManager/ACIS `sat` codec are not compiled in. `step` is the writer we restate through.
-cadmpeg-core = "=0.6.7"
-cadmpeg-ir = "=0.6.7"
-cadmpeg-registry = { version = "=0.6.7", default-features = false, features = ["fcstd", "rhino", "step"] }
+cadmpeg-core = "=0.6.3"
+cadmpeg-ir = "=0.6.3"
+cadmpeg-registry = { version = "=0.6.3", default-features = false, features = ["fcstd", "rhino", "step"] }
 
 # fonts (sketch text outlines; MIT OR Apache-2.0, pure Rust)
-ttf-parser = { version = "0.25", default-features = false, features = ["std", "variable-fonts"] }
+ttf-parser = { version = "0.25", default-features = false, features = ["std"] }
 
 # Ends a process group with the system call (MIT; already in the tree through zip).
 nix = { version = "0.31", default-features = false, features = ["signal"] }
@@ -110,12 +92,11 @@ tiny-skia = { version = "0.12", default-features = false, features = ["std", "si
 toml = "1"
 
 # ui
-# default_fonts: the built-in Hack is the UI's symbol fallback (#2955); 0.37 no longer turns it on.
-egui = { version = "0.37", features = ["default_fonts"] }
-eframe = { version = "0.37", default-features = false, features = ["persistence"] }
+egui = "0.36"
+eframe = { version = "0.36", default-features = false, features = ["persistence"] }
 # Instant/SystemTime that also work in the browser (std panics on wasm32-unknown-unknown).
 web-time = "1"
-egui-wgpu = "0.37"
+egui-wgpu = "0.36"
 # the wgpu egui-wgpu uses, for compute (crates/gpu); backends come from the apps' features
 wgpu = { version = "30", default-features = false, features = ["std", "wgsl"] }
 naga = { version = "30", default-features = false }
@@ -140,7 +121,9 @@ opt-level = 2
 opt-level = 1
 
 # Tests and lints (`cargo xtask ci`, GitHub CI): quick to build, quick enough to run. Light
-# optimisation, line tables only (file:line in backtraces), no LTO, no debug assertions.
+# optimisation, line tables only (file:line in backtraces), no LTO. Debug assertions are off because
+# truck's debug-only checks reject valid geometry (seam edges, closed edges); that was the only
+# reason the tests used to build with --release, which cost most of CI's time.
 [profile.ci]
 inherits = "dev"
 opt-level = 1
@@ -163,16 +146,17 @@ codegen-units = 16
 # binary). See docs/crash-reports.md.
 debug = "line-tables-only"
 
-
-# Vendored crates with SolidCraft fixes (see vendor/README.md and ATTRIBUTION.md).
+# truck-shapeops with SolidCraft fixes (Apache-2.0, see vendor/truck-shapeops and ATTRIBUTION.md).
 [patch.crates-io]
+truck-geometry = { path = "vendor/truck-geometry" }
+truck-shapeops = { path = "vendor/truck-shapeops" }
+truck-stepio = { path = "vendor/truck-stepio" }
+truck-meshalgo = { path = "vendor/truck-meshalgo" }
+matext4cgmath = { path = "vendor/matext4cgmath" }
+
 # Keep OpenGL pipelines, resolve textures and CAD callbacks at the same safe sample count.
 egui-wgpu = { path = "vendor/egui-wgpu" }
 
-# Deliver trackpad pinch and rotation gestures on Wayland (zwp_pointer_gestures_v1), which
-# winit 0.30 never binds and eframe 0.37 still requires winit 0.30.
-winit = { path = "vendor/winit" }
-
 # Mutation testing (cargo-mutants, docs/mutation-testing.md): the ci profile with incremental
 # builds, since every mutant rebuilds the crates above the one it changes.
 [profile.mutants]

DISCLAIMER.md

@@ -1,44 +0,0 @@
-# Disclaimer
-
-This disclaimer covers the software, models, data, documentation and every other file in this
-repository and in the releases built from it (together, "the files").
-
-## No warranty
-
-The files are provided "as is", without warranty of any kind, express or implied, including
-warranties of accuracy, merchantability, fitness for a particular purpose and non-infringement.
-Results produced with the files, such as geometry, meshes, analyses and simulations, can be
-wrong. A qualified person must check them before anyone relies on them for a design,
-manufacturing or safety decision.
-
-## No liability
-
-To the fullest extent permitted by law, Tangency Labs and the contributors are not liable for any
-claim, damage, loss or other liability arising from the files or from their use, modification or
-distribution, whether in contract, tort or otherwise.
-
-## No indemnity
-
-Neither Tangency Labs nor any contributor indemnifies, defends or holds harmless anyone who uses,
-modifies or distributes the files, including against claims that the files infringe someone
-else's rights.
-
-## Harmful or unlawful use
-
-Tangency Labs and the contributors do not authorise, endorse or accept any responsibility for use
-of the files to harm people, animals, property or the environment, or for any unlawful use.
-Whoever uses the files is solely responsible for how they use them, for what they make with them
-and for complying with the laws that apply to them. Tangency Labs and the contributors must not be
-named or held out as responsible for any such use.
-
-## No endorsement
-
-Using, modifying or distributing the files does not mean that Tangency Labs or any contributor
-endorses you, your product or your results. Do not use the name of Tangency Labs or of a
-contributor to suggest such an endorsement without written permission.
-
-## Relation to the licence
-
-This disclaimer adds to the warranty and liability terms of the licence the files are distributed
-under. It does not restrict any right that licence grants; where the two differ, the licence
-governs.

NOTICE

@@ -7,11 +7,12 @@ Third-party material
 
 Software dependencies are listed in Cargo.lock; their licences are in THIRD-PARTY-LICENSES.txt
 (`cargo xtask licences`), which the programs also carry (Help > About > Licences,
-`solidcraft-cli licences`). The geometry kernel is solidcore, a Rust port of the SMLib and SM_API components of
-USD BRep (https://github.com/NVIDIA-Omniverse/usd-brep), licensed under the Apache License 2.0.
-solidcore is vendored in `solidcore/` together with its history; its own LICENSE, NOTICE and
-ATTRIBUTION.md are there. Copyright (c) 2026 The solidcore contributors; USD BRep is
-Copyright (c) 2020-2026 NVIDIA CORPORATION & AFFILIATES.
+`solidcraft-cli licences`). The geometry kernel builds on the truck crates
+(truck-modeling, truck-shapeops, truck-meshalgo, truck-stepio, truck-topology and their
+dependencies, https://github.com/ricosjp/truck), licensed under the Apache License 2.0 and used
+as libraries. truck-shapeops 0.4.0 is vendored in vendor/truck-shapeops with SolidCraft
+modifications (listed in vendor/README.md and marked in the source); its licence is in
+vendor/truck-shapeops/LICENSE. Copyright (c) RICOS Co. Ltd.
 
 Some code is adapted from sibling projects in the storytold family (CADCraft, GridCraft), which are
 licensed MIT OR Apache-2.0; ATTRIBUTION.md lists the files.

README.md

@@ -1,5 +1,5 @@
 <p align="center">
-  <img src="assets/icons/app/linux/exports/hicolor/256x256/apps/io.tangencylabs.solidcraft.png" width="96" height="96" alt="SolidCraft" />
+  <img src="assets/icons/app/linux/exports/hicolor/256x256/apps/ai.storyteller.solidcraft.png" width="96" height="96" alt="SolidCraft" />
 </p>
 
 <h1 align="center">SolidCraft</h1>
@@ -28,7 +28,7 @@
   <a href="https://docs.solidcraft.io/">Documentation</a> ·
   <a href="https://www.blacksmith.sh"><img src="https://img.shields.io/badge/CI-Blacksmith-000000?logo=githubactions&logoColor=white" alt="CI powered by Blacksmith" /></a>
   <a href="https://discord.gg/FtU4NQNVDH">Discord</a> ·
-  <a href="https://github.com/tangency-labs/solidcore">SolidCore</a>
+  <a href="https://github.com/bherbruck/solidcore">SolidCore</a>
 </p>
 
 <p align="center">
@@ -42,25 +42,25 @@
 </p>
 
 <p align="center">
-  <a href="https://trendshift.io/repositories/296178?utm_source=trendshift-badge&utm_medium=badge&utm_campaign=badge-trendshift-296178" target="_blank" rel="noopener noreferrer"><img src="https://trendshift.io/api/badge/trendshift/repositories/296178/daily" alt="tangency-labs%2Fsolidcraft | Trendshift" width="250" height="55"/></a>
-  <a href="https://trendshift.io/repositories/296178?utm_source=trendshift-badge&utm_medium=badge&utm_campaign=badge-trendshift-296178" target="_blank" rel="noopener noreferrer"><img src="https://trendshift.io/api/badge/trendshift/repositories/296178/daily?language=Rust" alt="tangency-labs%2Fsolidcraft | Trendshift (Rust)" width="250" height="55"/></a>
+  <a href="https://trendshift.io/repositories/296178?utm_source=trendshift-badge&amp;utm_medium=badge&amp;utm_campaign=badge-trendshift-296178" target="_blank" rel="noopener noreferrer"><img src="https://trendshift.io/api/badge/trendshift/repositories/296178/daily" alt="tangency-labs%2Fsolidcraft | Trendshift" width="250" height="55"/></a>
+  <a href="https://trendshift.io/repositories/296178?utm_source=trendshift-badge&amp;utm_medium=badge&amp;utm_campaign=badge-trendshift-296178" target="_blank" rel="noopener noreferrer"><img src="https://trendshift.io/api/badge/trendshift/repositories/296178/daily?language=Rust" alt="tangency-labs%2Fsolidcraft | Trendshift (Rust)" width="250" height="55"/></a>
 </p>
 
-![SolidCraft: model a Raspberry Pi 4 case from an empty design: a sketch dimensioned with parameters, extrude, fillets and shell, a rim rounded in one pick, standoffs patterned on the board's mounting holes, port cut-outs, vent slots, "Pi 4" engraved in a font, a PETG material with its mass in Properties, and a height change in Parameters](docs/screenshots/demo.gif)
+![SolidCraft 0.8: model a Raspberry Pi 4 case from an empty design: a sketch dimensioned with parameters, extrude, fillets and shell, a rim rounded in one pick, standoffs patterned on the board's mounting holes, port cut-outs, vent slots, "Pi 4" engraved in a font, a PETG material with its mass in Properties, and a height change in Parameters](docs/screenshots/demo-0.8.gif)
 
-*A Raspberry Pi 4 case from an empty design: a sketch dimensioned with the board's parameters, extrude, fillet, shell, the rim rounded in one pick, an M2.5 standoff patterned on the 58 × 49 mm hole rectangle, port cut-outs, vent slots, "Pi 4" engraved in DejaVu Sans Bold and a PETG material defined in the design, with its mass in Properties, then height 24 → 32 mm in Parameters and it all rebuilds. 6× playback with the idle pauses cut. [Full video](https://github.com/tangency-labs/solidcraft/raw/refs/heads/main/docs/screenshots/demo.mp4), recorded with the [demo script](examples/demo/record_ui.sh).*
+*A Raspberry Pi 4 case from an empty design: a sketch dimensioned with the board's parameters, extrude, fillet, shell, the rim rounded in one pick, an M2.5 standoff patterned on the 58 × 49 mm hole rectangle, port cut-outs, vent slots, "Pi 4" engraved in DejaVu Sans Bold and a PETG material defined in the design, with its mass in Properties, then height 24 → 32 mm in Parameters and it all rebuilds. 9× playback. [Full video](https://github.com/tangency-labs/solidcraft/raw/refs/heads/main/docs/screenshots/demo-0.8.mp4), recorded with the [demo script](examples/demo/record_ui.sh).*
 
 ## Download
 
-- **Windows:** the [installer][windows-msi].
+- **Windows:** the [installer][windows-msi], or `winget install bherbruck.SolidCraft`.
 - **macOS:** the [disk image][macos-dmg] (Apple silicon and Intel).
 - **Linux:** the [AppImage][linux-appimage], or `sudo snap install solidcraft` ([Snap Store][snap-store]).
 - **Web:** [try it in your browser][web-app], no install.
 
 ARM64 and 32-bit builds, portable zip, .deb, .rpm, Flatpak and the other packages are on the
-[downloads page](docs/downloads.md). The macOS app is signed with a Developer ID and notarized by
-Apple. The Windows downloads aren't signed yet: choose **More info**, then **Run anyway** in
-SmartScreen. On SolidCraft 0.11 to 0.14, download once by hand; see
+[downloads page](docs/downloads.md). The downloads aren't signed yet: on Windows choose
+**More info**, then **Run anyway** in SmartScreen; on macOS right-click SolidCraft and choose **Open**
+the first time. On SolidCraft 0.11 to 0.14, download once by hand; see
 [updating](https://docs.solidcraft.io/guide/updates.html#updating-from-011-to-014).
 
 ## What works
@@ -74,7 +74,7 @@ other is a tracked bug.
 - **Parameters and configurations** with unit-aware expressions.
 - **Assemblies** with joints, motion studies, contact sets, interference and mass properties.
 - **Sheet metal** with flanges, hems, fold/unfold and flat patterns, and plastic enclosure features.
-- **Files:** STEP, IGES, 3MF, STL, OBJ and glTF in and out where supported, URDF export, `.sc` designs (`.solidcraft` files from earlier releases still open).
+- **Files:** STEP, IGES, 3MF, STL, OBJ and glTF in and out where supported, URDF export, `.solidcraft` designs.
 - **Desktop app, browser app, headless CLI and MCP server**, all running the same commands.
 
 The full list is in [docs/capabilities.md](docs/capabilities.md) and [docs/features.md](docs/features.md);
@@ -96,10 +96,8 @@ More commands, the Windows cross-build and the browser build are in [docs/buildi
 
 `solidcraft-cli mcp` is a [Model Context Protocol](https://modelcontextprotocol.io) server. Headless it
 runs its own design session, or with `--connect` it drives the running app so you can watch.
-Claude Code: `claude mcp add solidcraft -- solidcraft-cli mcp`. If a terminal doesn't find
-`solidcraft-cli` (older Windows installers don't put it on `PATH`), give its full path (by default
-`"C:\\Program Files\\SolidCraft\\solidcraft-cli.exe"`). Tools, access rules and an example session:
-[docs/mcp.md](docs/mcp.md).
+Claude Code: `claude mcp add solidcraft -- solidcraft-cli mcp`. Tools, access rules and an
+example session: [docs/mcp.md](docs/mcp.md).
 
 ## Scripts
 
@@ -121,12 +119,6 @@ the clean-room and licence rules, and where help is wanted most. Open work is in
 SolidCraft's continuous integration runs on [Blacksmith](https://www.blacksmith.sh), which
 sponsors its CI minutes.
 
-## Disclaimer
-
-The files in this repository are provided as is, without warranty, liability or indemnity, and
-Tangency Labs and the contributors accept no responsibility for any harmful or unlawful use of
-them: read [DISCLAIMER.md](DISCLAIMER.md).
-
 ## Licence
 
 MIT OR Apache-2.0, at your option. Developed under the
@@ -150,4 +142,3 @@ Tinkercad are trademarks of their respective owners, named only to describe comp
 [linux-appimage]: https://github.com/tangency-labs/solidcraft/releases/latest/download/solidcraft-linux-x86_64.AppImage
 [snap-store]: https://snapcraft.io/solidcraft
 [web-app]: https://solidcraft.io/app
-

ROADMAP.md

@@ -1,85 +1,5 @@
 # SolidCraft roadmap
 
-The short version, for people who use SolidCraft. The detailed developer status (milestone
-tables, limitations, measurements) is in [docs/roadmap-detail.md](docs/roadmap-detail.md).
-
-## What SolidCraft is
-
-SolidCraft is open-source parametric 3D CAD written in Rust. You sketch, constrain, extrude, and
-change a parameter to watch the timeline rebuild. It runs as a desktop app and in the browser
-([try it](https://solidcraft.io/app)), and it has a command-line tool and an MCP server so that
-scripts and AI agents can drive the same commands you use.
-
-## Works today
-
-- Sketching with a constraint solver, and the usual create and modify tools.
-- Extrude, revolve, loft, sweep, coil, fillet, chamfer, shell, draft, holes, threads,
-  patterns, mirror and split.
-- Parameters with units and expressions, and configurations.
-- Faces and edges keep their names through edits, so references survive changes.
-- Components, assemblies, joints, motion studies and exploded views.
-- Sheet metal with flat patterns and DXF export, and a plastic-enclosure subset.
-- A Render workspace with GPU rendering, studio lighting, materials and image export
-  (first release in 0.22.0).
-- Import and export of STEP, IGES, 3MF, STL, OBJ and DXF, and FreeCAD and Rhino files.
-- Autosave and crash recovery, and the browser build of the same app.
-
-The full list of commands is in [docs/features.md](docs/features.md). Release notes for each
-version are on the [releases page](https://github.com/tangency-labs/solidcraft/releases).
-
-## In progress now
-
-Each feature below is a [milestone](https://github.com/tangency-labs/solidcraft/milestones) holding
-the issues for it, so the count shows how far along it is. Counts are as of 2026-10-25, one per
-feature or request. Work merged on a feature branch (`drawings`, `render`) counts as built but
-reaches the app only when that branch merges. They are rough, not a promise.
-
-- **[Rendering & materials](https://github.com/tangency-labs/solidcraft/milestone/17)**: in progress, 9 of 34 pieces done, 3 of them built only on the `render` branch and in the app when it merges. The basic Render workspace is already in releases (0.22.0); the interface rework (#6281) and the material and light libraries are what is left.
-- **[Drawings](https://github.com/tangency-labs/solidcraft/milestone/8)**: in progress, 3 of 21 pieces built (2 in releases, 1 on the `drawings` branch), and 3 more partly built there (sheets and borders, bill-of-materials types, the paper scene). Not in the app yet: it lands when the `drawings` branch merges. Today you can export the current view as a DXF.
-- **[Sheet metal](https://github.com/tangency-labs/solidcraft/milestone/15)**: in progress, 1 of 30 requests done. Flanges, hems, unfold and flat patterns already work; the 30 are extensions, mostly the per-edge flange options (segments, miters, partial flanges, reliefs) and bend allowance.
-- **[Sketching](https://github.com/tangency-labs/solidcraft/milestone/14)**: in progress, 12 of 50 pieces done. Dimension types, selection and snapping options.
-- **[Solid modeling](https://github.com/tangency-labs/solidcraft/milestone/2)**: in progress, 9 of 50 pieces done. Blends, holes, threads and patterns.
-- **[Assemblies & joints](https://github.com/tangency-labs/solidcraft/milestone/3)**: in progress, 4 of 19 pieces done. Joints, motion studies and exploded views already work; placement rules, linked sub-assemblies, fastener stacks and weldment corners are the pieces left.
-- **[Import & export](https://github.com/tangency-labs/solidcraft/milestone/5)**: in progress, 7 of 39 pieces done. FreeCAD, SolidWorks and point-cloud import, and mesh export options.
-- **[AI agents & MCP](https://github.com/tangency-labs/solidcraft/milestone/18)**: in progress, 2 of 8 pieces done. Agent chat and the MCP server.
-- **[Interface, web app & plugins](https://github.com/tangency-labs/solidcraft/milestone/4)**: in progress, 31 of 96 pieces done. Ribbon redesign, navigation, themes, the web app and plugins.
-- **[SMLib kernel migration](https://github.com/tangency-labs/solidcraft/milestone/1)**: in progress, 1 tracking issue open. The kernel is moving from truck to NVIDIA's SMLib (usd-brep, Apache-2.0) on the `kernel-smlib` branch; it is not in releases yet. Tracked in [#4012](https://github.com/tangency-labs/solidcraft/issues/4012).
-
-## Next
-
-- **[Surfacing](https://github.com/tangency-labs/solidcraft/milestone/16)**: next, 6 of 14 pieces done. Patch, trim, blend and match exist; the rest of the surface toolset is planned.
-- **[Manufacturing / CAM](https://github.com/tangency-labs/solidcraft/milestone/9)**: next, 1 pieces tracked, none done. There is no CAM in SolidCraft yet. Send to Slicer and a first toolpath slice are in review; proposals are [#1153](https://github.com/tangency-labs/solidcraft/issues/1153) and [#1621](https://github.com/tangency-labs/solidcraft/issues/1621).
-
-Features are not tied to a release or a date. Work lands in the daily releases as it is finished.
-Anything without a milestone, such as bug fixes, is not a feature and is not listed here.
-
-## How releases work
-
-- Releases ship daily, as numbered versions (v0.22.0, v0.22.1) with nightly pre-releases in
-  between. They are delivered through the in-app updater.
-- SolidCraft tells you when a newer stable release exists and never updates without asking.
-  Where it can replace itself safely (AppImage, Windows installer and portable builds) there is
-  an **Update now** button; downloads are checked against the release's SHA-256 list. See
-  [updates and privacy](docs/book/src/guide/updates.md).
-- Design files carry a format number. A new version opens designs from older versions, but an
-  older version refuses a design saved by a newer one (0.22.0 writes format 35, and 0.21.0 and
-  earlier will not open it). Each release's notes say when the format changed. Keep a copy of
-  an important design before you move to a new version.
-
-## Licence
-
-SolidCraft is licensed MIT OR Apache-2.0, at your option; see [LICENSE-MIT](LICENSE-MIT) and
-[LICENSE-APACHE](LICENSE-APACHE). Versions already released stay available under those licences
-permanently.
-
-## How to follow along
-
-- Feature milestones: <https://github.com/tangency-labs/solidcraft/milestones>
-- Issues: <https://github.com/tangency-labs/solidcraft/issues> (area labels such as
-  `area:kernel`, `area:sketch` and `area:ui` group them)
-- Discord: <https://discord.gg/FtU4NQNVDH>
-- Releases: <https://github.com/tangency-labs/solidcraft/releases>
-- Contributing: [CONTRIBUTING.md](CONTRIBUTING.md)
 Status as of **2026-10-14**. SolidCraft supports parametric modelling (sketch →
 features → parametric timeline) as an open, pure-Rust, agent-drivable application.
 
@@ -132,15 +52,13 @@ PCB / Package, Render, Animation, Simulation, Manufacture/CAM, Drawings.
 | M0 | Vertical slice | done | — |
 | M1 | Sketch depth: command coverage implemented — projection/intersect/include as linked geometry (auto-project on faces, lost-reference warnings, break link), full SKETCH create/modify set (slots, polygons, tangent arcs/circles, ellipse, fit/control splines, conic, text, trim/extend/break, fillet/chamfer, offset, mirror, patterns, move/scale, blend curve, centerline), constraints incl. curvature and polygon with over-constraint refusal, Shift-picked line midpoints in Horizontal/Vertical using persisted points and ordinary constraints (#2087), driven/arc-length/linear-diameter dimensions, AutoConstrain, DXF/SVG insert, 3D sketch curves (Project To Surface, Intersection Curve, Isoparametric Curve, Spun Profile), exact free-form profiles (B-spline/NURBS edges, any spline degree, curves cut by crossings), sweeps and pipes along 3D sketch curves, canvases and decals, curvature combs. Exact free-form Extend and certified associative offsets now preserve geometry and IDs through edits, deletion and reopen. Occurrence-frame 3D wires now store explicit coordinate spaces and retain points and analytic fits through moves, refresh, undo and reopen. Constructive sketch solving (Owen 1991, Fudos & Hoffmann 1997) ahead of the numerical solver: points and rigid clusters are placed on the branch the sketch had, so dimension edits and drags keep their solution; edits that would turn a sketch over are refused; drags re-solve only the sketch per frame. Remaining workflow repairs: mixed offset junctions, legacy natural-spline seams, and damaged legacy wire links lacking frame provenance | in progress | 4 |
 | M2 | Robust modelling: coplanar booleans in the kernel, holes (placed on faces, at distances from reference edges, and on sketch points), threads (cosmetic, then modelled), patterns, mirror, shell, draft, split, construction geometry | in progress | 16 |
-| M1 | Sketch depth: command coverage implemented — projection/intersect/include as linked geometry (auto-project on faces, lost-reference warnings, break link), full SKETCH create/modify set (slots, polygons, tangent arcs/circles, ellipse, fit/control splines, conic, text, trim/extend/break, fillet/chamfer, offset, mirror, patterns, move/scale, blend curve, centerline), constraints incl. curvature and polygon with over-constraint refusal, Shift-picked line midpoints in Horizontal/Vertical using persisted points and ordinary constraints (#2087), drawing snaps to where two lines, circles or arcs cross (#4967), driven/arc-length/linear-diameter dimensions, AutoConstrain, DXF/SVG insert, 3D sketch curves (Project To Surface, Intersection Curve, Isoparametric Curve, Spun Profile), exact free-form profiles (B-spline/NURBS edges, any spline degree, curves cut by crossings), sweeps and pipes along 3D sketch curves, canvases and decals, curvature combs. Exact free-form Extend and certified associative offsets now preserve geometry and IDs through edits, deletion and reopen. Occurrence-frame 3D wires now store explicit coordinate spaces and retain points and analytic fits through moves, refresh, undo and reopen. Constructive sketch solving (Owen 1991, Fudos & Hoffmann 1997) ahead of the numerical solver: points and rigid clusters are placed on the branch the sketch had, so dimension edits and drags keep their solution; edits that would turn a sketch over are refused; drags re-solve only the sketch per frame. Remaining workflow repairs: mixed offset junctions, legacy natural-spline seams, and damaged legacy wire links lacking frame provenance | in progress | 4 |
-| M2 | Robust modelling: coplanar booleans in the kernel, holes (placed on faces and on sketch points), threads (cosmetic, then modelled), patterns, mirror, shell, draft, split, construction geometry | in progress | 16 |
 | M3 | General fillets and chamfers (curved edges, chains, vertex blends); saddle rolling-ball surfaces now use continuous seam sections and arc-length fitting with shared contact boundaries and bounded accuracy checks; tiny rim edges remain selected instead of nearby wall seams when filleting (#2498) | in progress | 30 |
-| M4 | Files: STEP import (done — [docs/step-import.md](docs/step-import.md)), FreeCAD/Rhino solids through cadmpeg (done, desktop, browser and CLI), 3MF export and 3MF/STL import as mesh bodies (done), 3MF with B-rep face tags ([docs/formats/3mf-face-tags.md](docs/formats/3mf-face-tags.md), done), constant-section parametric mesh reconstruction, DXF sketches, OBJ import, PLY/XYZ point clouds as a modelling reference and PLY meshes (done — [docs/point-clouds.md](docs/point-clouds.md), #5151) | in progress | 6 |
+| M4 | Files: STEP import (done — [docs/step-import.md](docs/step-import.md)), FreeCAD/Rhino solids through cadmpeg (done, desktop, browser and CLI), 3MF export and 3MF/STL import as mesh bodies (done), 3MF with B-rep face tags ([docs/formats/3mf-face-tags.md](docs/formats/3mf-face-tags.md), done), constant-section parametric mesh reconstruction, DXF sketches, OBJ import | in progress | 6 |
 | M5 | Persistent naming of faces and edges (docs/book/src/dev/naming.md): faces named from their exact kernel-reported history (sketch curve sides, caps, revolve sections, primitive sides, blends, shell inner walls, pattern/mirror copies; split pieces told apart by the faces around them, lumps of a cut body named after their faces), edges by their faces; fillets/chamfers, sketches on faces, shell/draft/offset/replace faces, hole placements, joint origins and face appearances resolve by name first and warn when the entity split or vanished: done. sheet metal edges by base sketch line and flange side, shell inner faces, sweep and loft roles: done. kernel-reported face history: done (merged faces answer to every name; operations without history yet fall back to geometric names, flagged unverified; format 14 keeps older designs' geometric names). Left: history through sheet metal, plastic, surface and emboss features; FaceSource certificates through history | in progress | 20 |
-| M6 | UI depth: selection feedback and origin (done), timeline editing (done: hover and selection highlight modifier faces, including fillets and chamfers; edit feature, history marker drag, dependency-checked single and multi-item reorder, suppress, rename, delete with dependents, re-resolved references; redefining selections refreshes persistent edge/face references while retaining feature identity and dimension names; responsive feature history with width-driven icons/names/title, snapping width resize, bottom/left/browser-stack docking, shared-column collapse, rollback bar, multi-selection and persistent folders), right-docked dialogs (done), live previews for every feature dialog (done), keyboard-first commands with on-canvas value boxes and sketch inline dimensions (done), drag manipulators with automatic join/cut (done: extrude incl. two sides, fillet, shell, hole depth, move, pattern spacing, revolve rotator, extrude taper), dark theme (done), right-click menu with Repeat (done), measure tool (done), section analysis (done), selection filter (done), drag-solve of sketch points (done); appearance controls now preserve body/face/component targeting, named transparent looks, reuse/search and override removal; Browser Expand All / Collapse All (`browser.expand_all`, `browser.collapse_all`) on the design and component menus; preferences | in progress | 6 |
+| M6 | UI depth: selection feedback and origin (done), timeline editing (done: hover and selection highlight modifier faces, including fillets and chamfers; edit feature, history marker drag, dependency-checked single and multi-item reorder, suppress, rename, delete with dependents, re-resolved references; redefining selections refreshes persistent edge/face references while retaining feature identity and dimension names; responsive feature history with width-driven icons/names/title, snapping width resize, bottom/left/browser-stack docking, shared-column collapse, rollback bar, multi-selection and persistent folders), right-docked dialogs (done), live previews for every feature dialog (done), keyboard-first commands with on-canvas value boxes and sketch inline dimensions (done), drag manipulators with automatic join/cut (done: extrude incl. two sides, fillet, shell, hole depth, move, pattern spacing, revolve rotator, extrude taper), dark theme (done), right-click menu with Repeat (done), measure tool (done), section analysis (done), selection filter (done), drag-solve of sketch points (done); appearance controls now preserve body/face/component targeting, named transparent looks, reuse/search and override removal; preferences | in progress | 6 |
 | M7 | Thin extrude (walls along open or closed curves: centre, inside, outside or two sides; mitred corners, crossing walls joined; #721), sweep, loft (incl. to a point), rib and web (to next / depth), emboss (planar faces and exact radial emboss/deboss of bounded orthogonal profiles on complete exterior cylinders/sleeves), thread (cosmetic, and modelled M3–M20 outside and inside: the ISO profile screwed in as a faceted cut), coil (smooth B-spline helical walls), pipe, pattern on path, patterns of bodies and components, replace face (parallel), align, remove, feature copy/paste: done. Unique eligible cylindrical targets are inferred for new Emboss features. Left: general curved-face emboss and exact (unfaceted) modelled threads | in progress | 12 |
 | M8 | Surface workspace (#772). Done: Patch (sketch regions; edge loops filled G0, plus `crown`), Stitch, Thicken (planes and cylinders), Extend (straight edges of planar surfaces), Trim (by a plane, a face or sketch curves swept onto the surface, keeping a side or the picked regions; mutual trim of two surfaces, extended to meet and stitched, #767), Delete Face (healing), Boundary Fill, zebra/draft/curvature-map analysis, Surface Extrude/Revolve/Sweep/Loft from open and closed curves, Offset, Unstitch and Reverse Normal; the continuity-driven core (`kernel/src/bridge.rs`, G0–G3 Hermite rows) with **Blend** (`surface.blend`, #764: edge chains along one or several faces, closed rims paired seam to seam or from picked seams, a dialog), **Match** (`surface.match`), **Boundary** (`surface.boundary`, #763 — two sketch curves exact with G0–G3, three or four as the flat patch of their loop, and curve networks: Coons and Gordon surfaces through sketch, 3D-sketch or edge curves, a point for a three-sided side, G1/G2 against the faces along one direction's edges, joined into their body on request; G1/G2 on two sides that meet at a corner waits for the Gregory-type corner), **Fair** (`surface.fair`, CV fairing), **continuity analysis** (`inspect.continuity`, #770; a toolbar tool with edge markers and a legend, and curvature combs along face isocurves) and a multi-section **loft** with per-end continuity and crown, and guide rails on solid and surface lofts (one or two, scaling or stretching the sections between; #201). Also in the Class-A pass: G1…G4 blend curves in the sketch, chord and variable-radius fillets on curved edges (with honest refusals where the fit cannot hold), and a G2 corner patch where filleted edges meet (kernel; the command refuses until the patch's sections can be sewn to the blends' contacts). Left: bias/form-factor fillet sections (design recorded), a Gregory-type corner, surface Fillet between separate surface bodies (#769), Ruled (#762), Untrim (#761), curved-face Extend (#760), and every remaining #757–#772 item | deferred | — |
-| M9 | Components and assemblies: New Component / Create Components from Bodies, active component, per-component origin/bodies/sketches/timeline entries, occurrences with transforms, Copy/Paste vs Paste New, nested Browser tree with visibility and isolate; Ground, Move/Copy of occurrences, joints (rigid, revolute, slider, cylindrical, pin-slot, planar, ball) by joint origins with limits and Drive Joints, closed kinematic loops (four-bar, slider-crank: the loop's other joints follow the driven one on its branch, and driving stops where a loop can no longer close), cams (`joint.cam`: a revolute cam drives a slider or revolute follower along a closed sketch profile or the cam's edges, knife, roller or flat followers, worked out again when the profile changes; drives, studies, closed loops, contact sets), As-built Joint, Rigid Group, Contact Sets (driving and motion studies stop where bodies in a set would pass through each other), Motion Study (joint values keyed along a timeline, playback, export of occurrence positions as JSON/CSV), motion analysis (joint values and a point's path charted over a study as value, velocity and acceleration; the parts that collide along a study, with the steps where they do), Exploded views (automatic or by hand, shown without changing placements, and exported as an animation coming apart and back together); interference, per-component physical properties; STEP with assembly structure; URDF export for robot simulators (links with meshes, mass and inertia; joint chains whose values match Drive Joints; docs/urdf.md). Physical properties now measure material-aware component/occurrence placements, descendants and repeated instances, including pending moves and body reassignment offsets; contact geometry and automatic exploded centres respect those offsets. Groundwork done: component tree, occurrences with transforms (instances, Paste New), world placement, active component as authoring frame, ground, Capture/Revert Position, moving bodies and sketches. UI: ASSEMBLE panel dialogs for New Component, Joint (snaps on faces, edges, circles and vertices; animated motion preview; offsets, flip, limits), As-built Joint, Joint Origin, Rigid Group, Drive Joints (live slider), Motion Link, Cam and Interference (overlaps shown red); joints in the timeline and the Browser | in progress | 32 |
+| M9 | Components and assemblies: New Component / Create Components from Bodies, active component, per-component origin/bodies/sketches/timeline entries, occurrences with transforms, Copy/Paste vs Paste New, nested Browser tree with visibility and isolate; Ground, Move/Copy of occurrences, joints (rigid, revolute, slider, cylindrical, pin-slot, planar, ball) by joint origins with limits and Drive Joints, closed kinematic loops (four-bar, slider-crank: the loop's other joints follow the driven one on its branch, and driving stops where a loop can no longer close), cams (`joint.cam`: a revolute cam drives a slider or revolute follower along a closed sketch profile or the cam's edges, knife, roller or flat followers, worked out again when the profile changes; drives, studies, closed loops, contact sets), As-built Joint, Rigid Group, Contact Sets (driving and motion studies stop where bodies in a set would pass through each other), Motion Study (joint values keyed along a timeline, playback, export of occurrence positions as JSON/CSV), motion analysis (joint values and a point's path charted over a study as value, velocity and acceleration; the parts that collide along a study, with the steps where they do), Exploded views (automatic or by hand, shown without changing placements); interference, per-component physical properties; STEP with assembly structure; URDF export for robot simulators (links with meshes, mass and inertia; joint chains whose values match Drive Joints; docs/urdf.md). Physical properties now measure material-aware component/occurrence placements, descendants and repeated instances, including pending moves and body reassignment offsets; contact geometry and automatic exploded centres respect those offsets. Groundwork done: component tree, occurrences with transforms (instances, Paste New), world placement, active component as authoring frame, ground, Capture/Revert Position, moving bodies and sketches. UI: ASSEMBLE panel dialogs for New Component, Joint (snaps on faces, edges, circles and vertices; animated motion preview; offsets, flip, limits), As-built Joint, Joint Origin, Rigid Group, Drive Joints (live slider), Motion Link, Cam and Interference (overlaps shown red); joints in the timeline and the Browser | in progress | 32 |
 | M10 | Sheet metal: flange (base, edge, contour), hem, unfold/refold, convert, flat pattern + DXF, rules: done. PLASTIC enclosure subset: Boss, Rib, Web, Lip/Groove, Snap Fit, Rest, Plastic Rules (library, edit, assign; rule draft and clearance as feature defaults): done, tested against hand-computed geometry. UI: SHEET METAL and PLASTIC tabs with dialogs (live preview, Edit Feature, pre-selection) for Flange, Hem, Unfold/Refold, Convert, Sheet Metal Rules, Create Flat Pattern (flat view with bend lines, bend table CSV/JSON and DXF export with exact circle/arc/line cutouts), Boss, Lip/Groove, Snap Fit, Rest, Manage and Assign Plastic Rules; Fold (bend along a sketch line); flanges meeting at a corner closed at any angle with the rule's gap; edge flanges with their own angle and height per edge in one feature; corner reliefs (notch, round, rectangular, tear) chosen by the rule; Convert to Sheet Metal from a solid or shelled body by its bend edges (flat faces, sharp bends) | in progress | 36 |
 | M11 | 2D drawings | deferred | — |
 | M12 | Release: cross-platform packages, verification and deliberate publication implemented; original current-UI demo refreshed. Trusted distribution signing and broader performance work remain | in progress | 16 |
@@ -225,12 +143,6 @@ completed drawings publish atomically. The browser still exports synchronously.
 
 ## Render foundation
 
-- Wood surface images (#1345): native CPU and GPU opaque rendering share physical
-  repeat frames and filtered mip chains. Imported maps retain exact bytes and
-  declared provenance in the design, reopen offline, and expose grain-angle
-  controls. Scalar face appearances suppress body maps. Planar projection and
-  CPU encoding/optical limits remain explicit; see [portable surfaces](docs/render-portable-surfaces-and-stages.md).
-
 - Original starter appearances (#1722): 34 opaque recipes through existing commands, with six explicitly unavailable glass recipes and preserved legacy looks; see [the contract](docs/render-starter-appearances.md).
 
 - Bounded linear film accumulation (#1696) supplies caller-admitted mean/variance storage and complete-pass views; actual progressive consumers remain separate. See [the film contract](docs/render-film.md).
@@ -292,11 +204,6 @@ completed drawings publish atomically. The browser still exports synchronously.
 
 ## Dimensioning and error reporting
 
-- Operation length fields share design-unit defaults and input evaluation, including secondary
-  distances, thin walls, blend controls, sheet/plastic rules, joints and motion keys. Canvas
-  handles and sketch previews use the same lengths as committed geometry. Existing stored
-  millimetre values retain their size when edited in a design using another unit (#3271).
-
 - MCP `execute` accepts `verbose: false`, sharing the compact reply helper used by
   `batch`: body changes and created sketch IDs stay, while repeated lists are omitted.
   Both tools retain full replies by default.
@@ -340,9 +247,6 @@ completed drawings publish atomically. The browser still exports synchronously.
 - Sketch Dimension takes a line and a circle or arc (#1803): it measures from the line to the
   circle's edge (the gap, 0 when tangent, or how far the edge reaches past a line that cuts
   it), drives it like any other dimension and keeps the circle on its side of the line.
-- Sketch Dimension takes a point and a circle or arc, or two circles or arcs (#4064): it
-  measures to the circle's edge (from the point, or between the two edges: the gap, 0 when
-  they touch, how far they overlap, or the narrowest gap between nested circles).
 - Sketch annotations, live drawing lengths and Measure use document units. Inches show
   three decimals and retain a meaningful fourth digit. Bare length dimension entry captures
   the current design unit; changing units leaves existing geometry and expressions intact.
@@ -668,9 +572,7 @@ completed drawings publish atomically. The browser still exports synchronously.
   pieces survive unfold/refold as one logical sheet group, including split flanged sheets.
   Cut-outs made in the flat pattern cross bends at any angle or curved: their edges fold to
   helices and curves on the bend, their walls square to the sheet. Free-form bases use bounded
-  sampling. A fold crosses the sheet's own outer edges the same way, slanted or on any curve,
-  with the outline exact in the flat pattern and its DXF, and flanges and other folds still go
-  on the panels.
+  sampling.
   Parallel prismatic partial-depth cuts retain pocket side and depth through transfer and
   unfold/refold, with separate pocket contours in preview and DXF. Planar Intersect preserves
   exact holes and retained islands, including the union of multiple selected profiles, and
@@ -731,7 +633,7 @@ and reference-object placement remain separate work, as do loft rails and center
   a seekable reader defers original blobs until after provisional display.
   See [container format](docs/design-container.md) and [performance measurements](docs/perf.md).
 - Warm saves with explicit `cache: true` can include a versioned native B-rep cache through SolidCraft-owned topology
-  and geometry records, with a separate kernel adapter and bounded binary reader. Exact
+  and geometry records, with a separate truck adapter and bounded binary reader. Exact
   face-source certificates and operation history survive codec round trips. A provisional
   picture can be generated before original blobs are read; editing and measurement wait
   for authoritative reconstruction. Cached metadata binds preview and reconstruction to
@@ -780,6 +682,5 @@ and reference-object placement remain separate work, as do loft rails and center
   reported case returns from 86 to 49 faces with unchanged material and bounds; regressions
   cover stepped stock, STEP round trips and saved projections from removed pieces.
 
-solidcore (Apache-2.0), the Rust port of NVIDIA's SMLib, vendored in `solidcore` behind
-our own `kernel` crate, with our own boundary and boolean retry/validation; see
-`plan/adr/0001-geometry-kernel.md` (local) — summary in README.
+truck (Apache-2.0) behind our own `kernel` crate, with our own blend operation and boolean
+retry/validation; see `plan/adr/0001-geometry-kernel.md` (local) — summary in README.

SECURITY.md

@@ -3,7 +3,7 @@
 ## Supported versions
 
 SolidCraft is young and moves quickly, so only the latest release gets security fixes. Please
-update to the [latest release](https://github.com/tangency-labs/solidcraft/releases/latest) before
+update to the [latest release](https://github.com/bherbruck/solidcraft/releases/latest) before
 reporting, and check whether the problem is still on `main`.
 
 | Version | Supported |
@@ -15,46 +15,18 @@ reporting, and check whether the problem is still on `main`.
 ## Reporting a vulnerability
 
 Please **don't open a public issue** for a security problem. Report it privately through GitHub:
-open the repository's [Security tab](https://github.com/tangency-labs/solidcraft/security) and choose
+open the repository's [Security tab](https://github.com/bherbruck/solidcraft/security) and choose
 **Report a vulnerability**
-([direct link](https://github.com/tangency-labs/solidcraft/security/advisories/new)).
+([direct link](https://github.com/bherbruck/solidcraft/security/advisories/new)).
 
-Please include what you found, the steps you ran to reproduce it (a design file, command or MCP
-request), the version and platform, and what an attacker gains. I'll acknowledge the report as soon
-as I can, keep you updated in the advisory, and credit you when the fix is published unless you'd
-rather stay anonymous.
+Please include what you found, how to reproduce it (a design file, command or MCP request), the
+version and platform, and the impact you expect. I'll acknowledge the report as soon as I can,
+keep you updated in the advisory, and credit you when the fix is published unless you'd rather
+stay anonymous.
 
-## What counts as a security issue
+Areas where reports are especially useful:
 
-Advisories are for problems where someone gets something they shouldn't, without already having
-access to your computer or your account. For example:
-
-- opening a design, STEP, STL or 3MF file from someone else runs code, or reads or overwrites files
-  it shouldn't
-- a website or another computer can reach or control SolidCraft
-- an agent gets past a prompt that promised to ask you first
-- the web app reaches beyond the page's own storage
-- a release package or an update can be tampered with
-- an API key or token gets sent somewhere it shouldn't go
-
-## What to report as a normal bug
-
-Please [open an issue](https://github.com/tangency-labs/solidcraft/issues/new) for these. They're
-still worth fixing, but they aren't security issues:
-
-- anything that needs a program already running on your computer, or the control token. A program
-  running as you can already do what you can.
-- MCP's allowed folders. They guard against accidents, they aren't a security boundary, and an agent
-  with a shell of its own can already reach those files. Getting around them isn't a vulnerability.
-- crashes, hangs, or heavy memory or CPU use, unless they also lead to something in the list above
-- anything that only happens in an unusual setup you'd have to choose on purpose
-
-## Before you send it
-
-- **Run it.** Reproduce the problem on the latest release. If you only read the code, say so, and
-  expect it to wait.
-- **Check it yourself.** If a scanner or an AI agent found it, read the code and confirm it first.
-  These tools tend to overrate what they find.
-- **Say what's gained.** Name what the attacker needs and what they get. I set the final severity.
-
-Reports that don't fit will be closed with a short note, or moved to the issue tracker.
+- opening untrusted design, STEP, STL or 3MF files (crashes, excessive memory or CPU, path tricks)
+- the MCP server and the control API (file access outside the allowed folders, command injection)
+- the web app (anything reaching beyond the page's own storage)
+- release packages and the update paths (AppImage, Flatpak, MSI, deb, rpm, snap)

apps/solidcraft-cli/Cargo.toml

@@ -19,16 +19,7 @@ path = "src/main.rs"
 name = "solvecraft-cli"
 path = "src/alias.rs"
 
-[features]
-default = ["raytrace-cpu", "profile"]
-bundled-render-library = ["solidcraft-engine/bundled-render-library"]
-raytrace-cpu = ["solidcraft-engine/raytrace-cpu"]
-# The profiler, compiled in so any build can say where its time goes (`--profile`,
-# SOLIDCRAFT_PROFILE=1); it records nothing until asked.
-profile = ["solidcraft-engine/profile"]
-
 [dependencies]
-solidcore-record = { workspace = true }
 solidcraft-engine = { workspace = true }
 solidcraft-gpu = { workspace = true }
 solidcraft-mcp = { workspace = true }
@@ -38,5 +29,3 @@ serde_json = { workspace = true }
 [dev-dependencies]
 # Snapshot tests decode the pictures to compare them with a tolerance.
 image = { workspace = true }
-# Tests measure meshes at their own tolerances.
-solidcraft-kernel = { workspace = true }

apps/solidcraft-cli/examples/studio_evidence.rs

@@ -1,11 +1,9 @@
 //! Reproducible evidence through the production command/job interfaces.
 //! Usage: studio_evidence RECIPE.json RENDER-PARAMS.json OUTPUT.png
 //! Writes the editable design, command timings and actual adapter/job metadata beside PNG.
-//! Accepts runtime requests as well as inline or named saved render jobs.
 use serde_json::{Value, json};
 use solidcraft_engine::{
     Session,
-    doc::render_settings::{RenderJob, RenderSetup},
     render::job::{CpuHost, ErrorCode, JobId, Phase},
 };
 use std::{
@@ -23,35 +21,6 @@ fn read_json(path: &str) -> Result<Value, String> {
     serde_json::from_slice(&bytes).map_err(|e| format!("{path}: {e}"))
 }
 
-// Only decide which optional host must be installed. The production command
-// still validates and resolves the actual request without a second wire format.
-fn needs_gpu(session: &Session, params: &Value) -> Result<bool, String> {
-    let inline = params.get("settings").filter(|value| !value.is_null());
-    let named = params.get("setup").filter(|value| !value.is_null());
-    if inline.is_some() && named.is_some() {
-        return Err("choose either setup or settings".into());
-    }
-    let inline_setup = inline
-        .filter(|value| value.get("job").is_some_and(|job| !job.is_null()))
-        .map(|value| serde_json::from_value::<RenderSetup>(value.clone()).map_err(|e| e.to_string()))
-        .transpose()?;
-    let setup = if let Some(name) = named.and_then(Value::as_str) {
-        Some(session.doc.render.setups.get(name).ok_or("no saved render setup with that name")?)
-    } else {
-        inline_setup.as_ref()
-    };
-    if let Some(setup) = setup
-        && let Some(job) = &setup.job
-    {
-        if params.as_object().is_some_and(|object| object.keys().any(|key| !matches!(key.as_str(), "setup" | "settings" | "replace"))) {
-            return Err("saved render jobs cannot be mixed with runtime controls".into());
-        }
-        setup.validate().map_err(|e| e.to_string())?;
-        return Ok(matches!(job, RenderJob::GpuPath { .. }));
-    }
-    Ok(params.get("progressive").and_then(Value::as_bool) == Some(true))
-}
-
 fn run() -> Result<(), String> {
     let args: Vec<String> = std::env::args().skip(1).collect();
     let [recipe_path, params_path, output_path] = args.as_slice() else {
@@ -66,9 +35,9 @@ fn run() -> Result<(), String> {
     let mut session = Session::default();
     eprintln!("Generating original CAD scene from {recipe_path}");
     let generation_start = Instant::now();
-    let (commands, command_timings) = session.run_script_timed(&recipe, false, &mut |_, _| {}).map_err(|e| e.to_string())?;
+    let (commands, command_timings) = session.run_script_timed(&recipe, false).map_err(|e| e.to_string())?;
     let generation_seconds = generation_start.elapsed().as_secs_f64();
-    let design_path = output.with_extension(solidcraft_engine::io::DESIGN_EXT);
+    let design_path = output.with_extension("solidcraft");
     session.execute("file.save_as", &json!({"path":design_path})).map_err(|e| e.to_string())?;
     let scene = solidcraft_engine::product_scene::extract(&session).map_err(|e| e.to_string())?;
     let bodies: Vec<Value> = scene
@@ -78,36 +47,18 @@ fn run() -> Result<(), String> {
         .collect();
     drop(scene);
 
-    let cpu_host_start = Instant::now();
+    let policy = solidcraft_gpu::select::Policy::from_env().map_err(|e| e.to_string())?;
+    let (adapter, adapter_report) = solidcraft_gpu::select::pick(policy).ok_or("no adapter satisfies the requested GPU policy")?;
+    let host_start = Instant::now();
     session.set_render_job_host(Some(CpuHost::for_platform().map_err(|e| e.to_string())?)).map_err(|e| e.to_string())?;
-    let cpu_host_seconds = cpu_host_start.elapsed().as_secs_f64();
-    // Match runtime and saved-job dispatch. CPU evidence must not require a
-    // Vulkan device, parse GPU policy or initialize a GPU host.
-    let (adapter_report, gpu_host_seconds) = if needs_gpu(&session, &params)? {
-        let gpu_host_start = Instant::now();
-        let policy = solidcraft_gpu::select::Policy::from_env().map_err(|e| e.to_string())?;
-        let (adapter, report) =
-            solidcraft_gpu::select::pick_path(policy, |_| true).ok_or("no Vulkan or Metal adapter satisfies the requested GPU policy")?;
-        session.register_render_job_host(solidcraft_gpu::path::host_on_adapter(&adapter).map_err(|e| e.to_string())?).map_err(|e| e.to_string())?;
-        (Some(report), Some(gpu_host_start.elapsed().as_secs_f64()))
-    } else {
-        (None, None)
-    };
+    session.register_render_job_host(solidcraft_gpu::path::host_on_adapter(&adapter).map_err(|e| e.to_string())?).map_err(|e| e.to_string())?;
+    let host_seconds = host_start.elapsed().as_secs_f64();
     let preflight = session.execute("render.preflight", &params).map_err(|e| e.to_string())?;
     let start = Instant::now();
     let started = session.execute("render.start", &params).map_err(|e| e.to_string())?;
-    let executor = started
-        .get("resolved")
-        .and_then(|resolved| resolved.get("executor"))
-        .and_then(Value::as_str)
-        .ok_or("started job did not report the resolved image executor")?
-        .to_owned();
     let id: JobId = serde_json::from_value(started.get("job").cloned().ok_or("missing job id")?).map_err(|e| e.to_string())?;
     let handle = session.render_job_handle(id).map_err(|e| e.to_string())?;
-    eprintln!("Rendering through production {executor} executor");
-    if let Some(adapter) = &adapter_report {
-        eprintln!("GPU adapter: {adapter:?}");
-    }
+    eprintln!("Rendering through production gpu-path host: {adapter_report:?}");
     let status = loop {
         match handle.wait_timeout(Duration::from_secs(10)) {
             Ok(status) => break status,
@@ -133,11 +84,11 @@ fn run() -> Result<(), String> {
     }
     let exported = session.execute("render.export", &json!({"job":id,"path":output_path,"overwrite":true})).map_err(|e| e.to_string())?;
     let report = json!({
-        "recipe":recipe_path,"render_params":params,"executor":executor,"adapter":adapter_report,
+        "recipe":recipe_path,"render_params":params,"adapter":adapter_report,
         "environment":{"SOLIDCRAFT_GPU":std::env::var("SOLIDCRAFT_GPU").ok(),"WGPU_BACKEND":std::env::var("WGPU_BACKEND").ok()},
-        "cad_generation_seconds":generation_seconds,"cpu_host_setup_seconds":cpu_host_seconds,"gpu_host_setup_seconds":gpu_host_seconds,
+        "cad_generation_seconds":generation_seconds,"gpu_host_setup_seconds":host_seconds,
         "render_and_encode_seconds":render_and_encode_seconds,
-        "timing_scope":"wall time from render.start through completed PNG encoding; includes job preparation and readback, excludes CAD generation, preflight and initial CPU/GPU host setup; GPU setup timing includes adapter selection and pipelines when requested",
+        "timing_scope":"wall time from render.start through completed PNG encoding; includes job preparation and readback, excludes CAD generation and initial GPU pipeline setup",
         "bodies":bodies,"commands":commands,"command_timings":command_timings,
         "preflight":preflight,"export":exported,"editable_design":design_path
     });

apps/solidcraft-cli/src/alias.rs

@@ -11,7 +11,7 @@ use std::process::{Command, ExitCode};
 const TARGET: &str = "solidcraft-cli";
 
 fn main() -> ExitCode {
-    solidcraft_engine::note!("solvecraft-cli is deprecated and will be removed in a later release: use solidcraft-cli");
+    eprintln!("solvecraft-cli is deprecated and will be removed in a later release: use solidcraft-cli");
     let sibling = std::env::current_exe()
         .ok()
         .and_then(|exe| exe.parent().map(|dir| dir.join(format!("{TARGET}{}", std::env::consts::EXE_SUFFIX))))
@@ -23,7 +23,7 @@ fn main() -> ExitCode {
             None => ExitCode::FAILURE,
         },
         Err(e) => {
-            solidcraft_engine::note!("solvecraft-cli: could not run {}: {e}", program.to_string_lossy());
+            eprintln!("solvecraft-cli: could not run {}: {e}", program.to_string_lossy());
             ExitCode::FAILURE
         }
     }

apps/solidcraft-cli/src/bench_agent.rs

@@ -8,7 +8,7 @@
 //! no fixture.
 //!
 //! ```text
-//! solidcraft-cli bench-agent [--scale F] [--script-out script.json] [--save design.sc]
+//! solidcraft-cli bench-agent [--scale F] [--script-out script.json] [--save design.solidcraft]
 //! ```
 //! prints one JSON line per hundred commands (mean and max milliseconds, bodies so far), then the
 //! build total, then the phases `bench-open` prints for the saved design.
@@ -184,7 +184,7 @@ pub fn run(args: &[String]) -> Result<(), String> {
         s.execute(id, &c["params"]).map_err(|e| format!("command {i} ({id}): {e}"))?;
         run.push(t.elapsed().as_secs_f64() * 1000.0);
         let t = std::time::Instant::now();
-        s.world_state().map_err(|e| e.to_string())?.warm_meshes(|| true);
+        s.world_state().warm_meshes(|| true);
         shown.push(t.elapsed().as_secs_f64() * 1000.0);
         if run.len() == 100 || i + 1 == commands.len() {
             let mean = |v: &[f64]| v.iter().sum::<f64>() / v.len().max(1) as f64;
@@ -198,17 +198,14 @@ pub fn run(args: &[String]) -> Result<(), String> {
             shown.clear();
         }
     }
-    let world = s.world_state().map_err(|e| e.to_string())?;
+    let world = s.world_state();
     println!(
         "{}",
         json!({"step": "built", "ms": began.elapsed().as_secs_f64() * 1000.0, "commands": commands.len(), "features": s.doc.features.len(), "bodies": world.bodies.len()})
     );
     let path = match flag("--save") {
         Some(p) => p.clone(),
-        None => std::env::temp_dir()
-            .join(format!("bench-agent-{}.{}", std::process::id(), solidcraft_engine::io::DESIGN_EXT))
-            .to_string_lossy()
-            .into_owned(),
+        None => std::env::temp_dir().join(format!("bench-agent-{}.solidcraft", std::process::id())).to_string_lossy().into_owned(),
     };
     s.execute("file.save", &json!({"path": path})).map_err(|e| e.to_string())?;
     let r = crate::cmd_bench_open(std::slice::from_ref(&path));
@@ -236,7 +233,7 @@ mod tests {
             }
         }
         assert!(s.model.results.iter().all(|r| r.error.is_none()));
-        let world = s.world_state().unwrap();
+        let world = s.world_state();
         assert!(world.bodies.len() > 40, "{} bodies", world.bodies.len());
         assert!(world.bodies.iter().any(|b| b.name.contains("spoke")));
     }

apps/solidcraft-cli/src/bench_assistant.rs

@@ -68,9 +68,7 @@ impl Control {
         if !addr.ip().is_loopback() || addr.port() == 0 {
             return Err("--connect requires a loopback address and a nonzero port (the app listens on 127.0.0.1)".into());
         }
-        let token = solidcraft_engine::control_auth::APP
-            .client_token(addr.port(), token)
-            .map(|t| t.token)
+        let token = solidcraft_engine::control_auth::client_token(addr.port(), token)
             .ok_or("no control token: pass --token, set SOLIDCRAFT_CONTROL_TOKEN, or run on the app's computer (its token file)")?;
         if token.len() > 4096 {
             return Err("the control token is longer than 4096 bytes".into());
@@ -420,7 +418,7 @@ fn wait_for_turn(control: &mut Control, mut chat: Value, began: Instant, end: In
         let idle = !matches!(state, "busy" | "starting") && !turn && !queued;
         // A turn can start and end between two polls: then the conversation has its answer.
         let answered = chat["items"].as_array().into_iter().flatten().any(|i| i.get("user").is_none());
-        if idle && (seen_busy || answered || matches!(state, "exited" | "failed" | "auth" | "off") || began.elapsed() >= START_GRACE) {
+        if idle && (seen_busy || answered || matches!(state, "exited" | "auth" | "off") || began.elapsed() >= START_GRACE) {
             return Ok((chat, false));
         }
         let Some(left) = end.checked_duration_since(Instant::now()).filter(|d| !d.is_zero()) else { return Ok((chat, true)) };

apps/solidcraft-cli/src/fuzz.rs

@@ -33,25 +33,27 @@ pub fn one(args: &[String]) -> Result<(), String> {
     std::panic::set_hook(Box::new(|_| {
         PANICS.fetch_add(1, std::sync::atomic::Ordering::SeqCst);
     }));
-    solidcraft_engine::note!("design {seed}");
-    let run = fuzz::run_with(seed, steps, &mut |st| solidcraft_engine::note!("step {}", serde_json::to_string(st).unwrap_or_default()));
+    eprintln!("design {seed}");
+    let run = fuzz::run_with(seed, steps, &mut |st| eprintln!("step {}", serde_json::to_string(st).unwrap_or_default()));
     let mut design = json!({
         "outcome": run.outcome,
         "steps": run.steps.iter().map(|s| s.kind).collect::<Vec<_>>(),
         "unsupported": run.unsupported,
         "rejected": run.rejected,
+        "boolean_fallbacks": run.boolean_fallbacks,
+        "boolean_reports_truncated": run.boolean_reports_truncated,
         "panics": PANICS.swap(0, std::sync::atomic::Ordering::SeqCst),
     });
     if run.outcome.is_bug() {
         design["script"] = run.script();
         if minimise {
-            solidcraft_engine::note!("minimise");
+            eprintln!("minimise");
             let m = fuzz::minimise(&run);
             design["minimal"] = json!({"outcome": m.outcome, "steps": m.steps.iter().map(|s| s.kind).collect::<Vec<_>>(), "script": m.script()});
         }
     }
     let (a, b) = solidcraft_engine::fuzz::boolean_shapes(seed);
-    solidcraft_engine::note!("boolean {seed} {} {}", serde_json::to_string(&a).unwrap_or_default(), serde_json::to_string(&b).unwrap_or_default());
+    eprintln!("boolean {seed} {} {}", serde_json::to_string(&a).unwrap_or_default(), serde_json::to_string(&b).unwrap_or_default());
     let b = boolean_case(seed);
     let bp = PANICS.swap(0, std::sync::atomic::Ordering::SeqCst);
     println!("{}", json!({"seed": seed, "design": design, "boolean": b, "boolean_panics": bp}));
@@ -162,14 +164,11 @@ fn record(v: &Value, out_dir: Option<&str>) {
     let d = &v["design"];
     let bug = matches!(d["outcome"]["kind"].as_str(), Some("failed" | "panic" | "invalid" | "volume"));
     if bug || v.get("timeout").is_some() || v.get("crash").is_some() {
-        solidcraft_engine::note!(
-            "seed {seed}: {}",
-            if bug { format!("{} {}", d["outcome"]["kind"], d["outcome"]["detail"]) } else { format!("{v}") }
-        );
+        eprintln!("seed {seed}: {}", if bug { format!("{} {}", d["outcome"]["kind"], d["outcome"]["detail"]) } else { format!("{v}") });
     }
     let bk = v["boolean"]["outcome"].as_str().unwrap_or("ok");
     if bk != "ok" {
-        solidcraft_engine::note!("seed {seed}: boolean {bk} {}", v["boolean"]["detail"]);
+        eprintln!("seed {seed}: boolean {bk} {}", v["boolean"]["detail"]);
     }
     if let Some(dir) = out_dir {
         use std::io::Write;
@@ -192,9 +191,23 @@ fn summarise(results: &[Value], took: Duration) -> String {
     let mut boolean: BTreeMap<String, usize> = BTreeMap::new();
     let mut at_step: BTreeMap<String, usize> = BTreeMap::new();
     let mut unsupported: BTreeMap<String, usize> = BTreeMap::new();
+    let mut fallbacks: BTreeMap<String, [u64; 2]> = BTreeMap::new();
+    let mut truncated = [0usize; 2];
     let mut steps = 0;
     let (mut dp, mut bp) = (0, 0);
     for v in results {
+        for (i, group) in ["design", "boolean"].into_iter().enumerate() {
+            if v[group]["boolean_reports_truncated"].as_bool().unwrap_or(false) {
+                truncated[i] += 1;
+            }
+            if let Some(counts) = v[group]["boolean_fallbacks"].as_object() {
+                for (strategy, count) in counts {
+                    if let Some(total) = fallbacks.entry(strategy.clone()).or_default().get_mut(i) {
+                        *total = total.saturating_add(count.as_u64().unwrap_or(0));
+                    }
+                }
+            }
+        }
         dp += usize::from(v["design"]["panics"].as_u64().unwrap_or(0) > 0);
         bp += usize::from(v["boolean_panics"].as_u64().unwrap_or(0) > 0);
         let k = if v.get("timeout").is_some() {
@@ -233,6 +246,11 @@ fn summarise(results: &[Value], took: Duration) -> String {
     for (k, c) in &boolean {
         s += &format!("- {k}: {}\n", pct(*c));
     }
+    s += "\nSuccessful Boolean retries (events, including nested operations):\n";
+    for (strategy, [designs, checks]) in &fallbacks {
+        s += &format!("- {strategy}: designs {designs}, boolean checks {checks}\n");
+    }
+    s += &format!("- Capped reports: designs {}, boolean checks {}\n", truncated[0], truncated[1]);
     s
 }
 
@@ -241,13 +259,15 @@ mod tests {
     use super::*;
 
     #[test]
-    fn report_counts_outcomes_and_timeouts() {
+    fn report_counts_retry_events_separately_and_marks_incomplete_logs() {
         let results = [
-            json!({"design":{"outcome":{"kind":"ok"}},"boolean":{"outcome":"ok"}}),
-            json!({"design":{"outcome":{"kind":"ok"}},"boolean":{"outcome":"ok"}}),
+            json!({"design":{"outcome":{"kind":"ok"},"boolean_fallbacks":{"shifted_operands":2}},"boolean":{"outcome":"ok","boolean_fallbacks":{"shifted_operands":3},"boolean_reports_truncated":true}}),
+            json!({"design":{"outcome":{"kind":"ok"},"boolean_fallbacks":{"shifted_operands":1}},"boolean":{"outcome":"ok"}}),
             json!({"timeout":90}),
         ];
         let text = summarise(&results, Duration::ZERO);
+        assert!(text.contains("shifted_operands: designs 3, boolean checks 3"), "{text}");
+        assert!(text.contains("Capped reports: designs 0, boolean checks 1"), "{text}");
         assert!(text.contains("timeout: 1 (33.3 %)"), "{text}");
     }
 }

apps/solidcraft-cli/src/kernel_cases_export.rs

@@ -1,412 +0,0 @@
-//! `kernel-cases --export=DIR`: one kernel rig case as a corpus entry for solidcore's rig. The
-//! case's commands run as the rig runs them while the kernel's operations are traced
-//! (`smlib_trace`); the entry holds every operation in execution order, including discarded
-//! tool construction and handled refusals, each operand that came in as a record (the
-//! B-rep record, solidcore-record's JSON), the fix set, the case's expected values and the rig's
-//! own result. A case whose result no kernel operation alone accounts for is written too, with
-//! the reasons, so nothing is dropped silently.
-//!
-//! An entry's operation is expressible (`operation_expressible`) when the run failed in a kernel
-//! operation (the last one traced failed), or when every body the case ends with is the record a
-//! traced operation's output was written as, or an operand some traced operation took, as its
-//! record. The entry is wholly expressible (`expressible`) when, besides, every value it grades is
-//! the kernel's: none of `continuity`, `watertight`, `files`, `results`, `construction` or
-//! `flat_pattern` (SolidCraft computes them), no face, edge or vertex count that the rig's merging
-//! across analytic surfaces (`merged_topology`) changes, and no refusal graded on SolidCraft's
-//! wording of the kernel's error. Those are listed in `ungraded`.
-
-use std::collections::{BTreeMap, BTreeSet, HashMap};
-use std::path::{Path, PathBuf};
-
-use serde_json::{Value, json};
-use solidcore_record::brep::Brep;
-use solidcraft_engine::kernel::smlib_trace::{self, Event};
-
-use crate::read_json;
-
-/// What a traced case leaves for its entry: the trace of its commands, and the bodies it ends
-/// with by name or the engine's error.
-#[derive(Default)]
-pub struct Capture {
-    pub events: Vec<Event>,
-    pub ran: Option<Result<Vec<(String, Brep)>, String>>,
-}
-
-/// The expected values SolidCraft computes, never the kernel.
-const GRADER_ONLY: [&str; 6] = ["continuity", "watertight", "files", "results", "construction", "flat_pattern"];
-
-/// The case directory's area (its path under `tests/kernel-cases/`, a ladder case's tier under
-/// `ladder/`) and its id.
-fn area_and_id(dir: &str) -> Result<(String, String), String> {
-    let p = Path::new(dir);
-    let parts: Vec<String> = p.components().map(|c| c.as_os_str().to_string_lossy().to_string()).collect();
-    let at = parts.iter().rposition(|c| c == "kernel-cases").ok_or_else(|| format!("{dir}: not under tests/kernel-cases"))?;
-    let rest = parts.get(at + 1..).unwrap_or_default();
-    match rest.split_last() {
-        Some((id, area)) if !area.is_empty() => Ok((area.join("/"), id.clone())),
-        _ => Err(format!("{dir}: no area")),
-    }
-}
-
-/// The case's line in its area's `KNOWN_FAILING`: why it fails today; `None` when not listed.
-fn known_failing(dir: &str, id: &str) -> Option<String> {
-    let list = Path::new(dir).parent()?.join("KNOWN_FAILING");
-    let text = std::fs::read_to_string(list).ok()?;
-    text.lines().filter(|l| !l.trim_start().starts_with('#')).find_map(|l| {
-        let (case, why) = l.split_once(char::is_whitespace).unwrap_or((l, ""));
-        (case == id).then(|| why.trim().to_string())
-    })
-}
-
-/// The trace read as operations and the records that went in and came out.
-struct Trace<'a> {
-    /// Each operation: its name, operands, parameters and outputs or error.
-    calls: Vec<(&'static str, &'a [u64], &'a Value, &'a Result<Vec<u64>, String>)>,
-    /// The record each body made from a record was made from.
-    imports: HashMap<u64, (&'a Brep, bool, bool)>,
-    /// The records bodies were written as, in order.
-    exports: Vec<(u64, &'a Brep)>,
-    /// The operation that made each body.
-    producer: HashMap<u64, usize>,
-}
-
-impl<'a> Trace<'a> {
-    fn of(events: &'a [Event]) -> Trace<'a> {
-        let mut t = Trace { calls: Vec::new(), imports: HashMap::new(), exports: Vec::new(), producer: HashMap::new() };
-        for e in events {
-            match e {
-                Event::Import { id, record, trusted, keeping_splines } => {
-                    t.imports.insert(*id, (record, *trusted, *keeping_splines));
-                }
-                Event::Export { id, record } => t.exports.push((*id, record)),
-                Event::Call { op, inputs, params, outputs } => {
-                    if let Ok(made) = outputs {
-                        for id in made {
-                            t.producer.insert(*id, t.calls.len());
-                        }
-                    }
-                    t.calls.push((*op, inputs, params, outputs));
-                }
-            }
-        }
-        t
-    }
-
-    /// Bodies some operation took as an operand.
-    fn operands(&self) -> BTreeSet<u64> {
-        self.calls.iter().flat_map(|c| c.1.iter().copied()).collect()
-    }
-}
-
-/// The entry of case `dir`, run with result `out`, into `root/<area>/<id>.json`, and the fix set
-/// into `root/fixes.json`.
-pub fn write(root: &Path, dir: &str, out: &Value, capture: Capture) -> Result<(), String> {
-    let (area, id) = area_and_id(dir)?;
-    let want = read_json(&format!("{dir}/expected.json"))?;
-    let t = Trace::of(&capture.events);
-    // Why the operation is not the kernel's alone, and what the entry cannot grade without
-    // SolidCraft.
-    let mut why_not: Vec<String> = Vec::new();
-    let mut ungraded: Vec<String> = Vec::new();
-    let has = |k: &str| want.get(k).is_some_and(|v| !v.is_null());
-
-    if let Some(missing) = want["missing"].as_str() {
-        why_not.push(format!("SolidCraft has no command for it yet: {missing}"));
-    }
-    for k in GRADER_ONLY.iter().filter(|k| has(k)) {
-        ungraded.push(format!("{k}: SolidCraft computes it"));
-    }
-
-    let mut result: Vec<Value> = Vec::new();
-    let mut ends: Vec<u64> = Vec::new();
-    let mut failed_call: Option<usize> = None;
-    let mut outcome = json!({"ran": true});
-    match (&capture.ran, has("missing")) {
-        (_, true) => {}
-        (None, false) => why_not.push("the case did not run".into()),
-        (Some(Err(e)), false) => {
-            // The run stopped. It stopped in the kernel when the last operation that failed is
-            // followed by no operation but copies (a copy or a tagged copy, which build nothing):
-            // nothing was built after it, so the engine's error reports that failure in its own
-            // words. An operation that ran after it means the engine went on and failed itself.
-            outcome = json!({"ran": false, "engine_error": e});
-            let last_failed = t.calls.iter().rposition(|c| c.3.is_err());
-            let built_after = |i: usize| t.calls.iter().skip(i + 1).any(|c| !matches!(c.0, "copy" | "tagged"));
-            match last_failed.filter(|&i| !built_after(i)).and_then(|i| t.calls.get(i).map(|c| (i, c))) {
-                Some((i, c)) => {
-                    failed_call = Some(i);
-                    ends.extend(c.1.iter().copied());
-                    if let Err(k) = c.3 {
-                        outcome["kernel_error"] = json!(k);
-                        if let Some(why) = want["refusal"].as_str().filter(|w| !k.contains(*w)) {
-                            ungraded.push(format!("refusal {why:?}: SolidCraft's wording of the kernel's error"));
-                        }
-                    }
-                }
-                None if t.calls.is_empty() => why_not.push(format!("no kernel operation ran before the failure: {e}")),
-                None => why_not.push(format!("the failure is SolidCraft's, not a kernel operation's: {e}")),
-            }
-        }
-        (Some(Ok(world)), false) => {
-            let operands = t.operands();
-            let mut made = 0;
-            for (name, record) in world {
-                let from_op = t.exports.iter().rev().find(|(id, r)| *r == record && t.producer.contains_key(id)).map(|(id, _)| *id);
-                let operand = t.imports.iter().filter(|(i, (r, _, _))| *r == record && operands.contains(i)).map(|(i, _)| *i).min();
-                match (from_op, operand) {
-                    (Some(id), _) => {
-                        made += 1;
-                        ends.push(id);
-                        result.push(json!({"body": name, "made": format!("b{id}")}));
-                    }
-                    (None, Some(id)) => {
-                        ends.push(id);
-                        result.push(json!({"body": name, "operand": format!("b{id}")}));
-                    }
-                    (None, None) => why_not.push(format!(
-                        "body {name:?} is no kernel operation's output nor an operand: SolidCraft built it or changed the kernel's record"
-                    )),
-                }
-            }
-            if world.is_empty() {
-                why_not.push("the case ends with no body".into());
-            } else if made == 0 && why_not.is_empty() {
-                why_not.push("no kernel operation made a body the case ends with".into());
-            }
-            // Counts graded as SolidCraft merges them, where that differs from the records'.
-            let raw = |k: &str| -> u64 {
-                world
-                    .iter()
-                    .map(|(_, r)| match k {
-                        "faces" => r.faces.len(),
-                        "edges" => r.edges.len(),
-                        _ => r.vertices.len(),
-                    } as u64)
-                    .sum()
-            };
-            for k in ["faces", "edges", "vertices"] {
-                if let Some(merged) = out["measured"][k].as_u64().filter(|&m| has(k) && m != raw(k)) {
-                    ungraded.push(format!("{k}: graded merged across analytic surfaces ({merged}), the records have {}", raw(k)));
-                }
-            }
-            outcome["raw_counts"] = json!({"faces": raw("faces"), "edges": raw("edges"), "vertices": raw("vertices")});
-        }
-    }
-
-    let mut unknown = BTreeSet::new();
-    let mut available: BTreeSet<u64> = t.imports.keys().copied().collect();
-    for (_, inputs, _, outputs) in &t.calls {
-        unknown.extend(inputs.iter().filter(|id| !available.contains(id)).copied());
-        if let Ok(made) = outputs {
-            available.extend(made.iter().copied());
-        }
-    }
-    unknown.extend(ends.iter().filter(|id| !available.contains(id)).copied());
-    if !unknown.is_empty() {
-        why_not.push(format!("operands made by nothing traced: {unknown:?}"));
-    }
-    // Operand records: every body a call takes, or the case ends with, that came in as a record.
-    let mut bodies = BTreeMap::new();
-    let given = |id: u64, bodies: &mut BTreeMap<String, Value>| {
-        if let Some((record, trusted, splines)) = t.imports.get(&id) {
-            bodies.insert(format!("b{id}"), json!({"trusted": trusted, "keeping_splines": splines, "record": record}));
-        }
-    };
-    let mut calls: Vec<Value> = Vec::new();
-    for (i, (op, inputs, params, outputs)) in t.calls.iter().enumerate() {
-        for &id in inputs.iter() {
-            given(id, &mut bodies);
-        }
-        let mut c = json!({"op": op, "inputs": inputs.iter().map(|i| format!("b{i}")).collect::<Vec<_>>(), "params": params});
-        match outputs {
-            Ok(made) => c["outputs"] = json!(made.iter().map(|i| format!("b{i}")).collect::<Vec<_>>()),
-            Err(e) => {
-                c["error"] = json!(e);
-                // The application handled this refusal. Replay must continue to any later
-                // calls and grade the final bodies, even when this was the last attempt.
-                if failed_call != Some(i) {
-                    c["continued"] = json!(true);
-                }
-            }
-        }
-        calls.push(c);
-    }
-    for r in &result {
-        if let Some(id) = r["operand"].as_str().and_then(|b| b.strip_prefix('b')).and_then(|n| n.parse().ok()) {
-            given(id, &mut bodies);
-        }
-    }
-    let rig = json!({
-        "status": out["status"], "error": out["error"], "refused_with": out["refused_with"], "measured": out["measured"],
-        "known_failing": known_failing(dir, &id),
-    });
-    let operation_expressible = why_not.is_empty();
-    let entry = json!({
-        "case": id,
-        "area": area,
-        "sources": want["sources"],
-        "what": want["what"],
-        "expressible": operation_expressible && ungraded.is_empty(),
-        "operation_expressible": operation_expressible,
-        "why_not": why_not,
-        "ungraded": ungraded,
-        "expected": want,
-        "rig": rig,
-        "outcome": outcome,
-        "calls": calls,
-        "bodies": bodies,
-        "result": result,
-        "traced_ops": t.calls.iter().map(|c| c.0).collect::<Vec<_>>(),
-    });
-    let folder: PathBuf = root.join(&area);
-    std::fs::create_dir_all(&folder).map_err(|e| format!("{}: {e}", folder.display()))?;
-    let path = folder.join(format!("{id}.json"));
-    let text = serde_json::to_string(&entry).map_err(|e| e.to_string())?;
-    std::fs::write(&path, text).map_err(|e| format!("{}: {e}", path.display()))?;
-    // Cases run in parallel processes: each writes its own file and renames it over the shared
-    // one, so no reader sees a torn file (every process writes the same fix set).
-    let fixes = serde_json::to_string_pretty(&smlib_trace::fixes()).map_err(|e| e.to_string())?;
-    let own = root.join(format!("fixes.json.{}", std::process::id()));
-    std::fs::write(&own, fixes).map_err(|e| format!("{}: {e}", own.display()))?;
-    std::fs::rename(&own, root.join("fixes.json")).map_err(|e| format!("{}: {e}", root.display()))
-}
-
-#[cfg(test)]
-mod tests {
-    use super::*;
-
-    fn empty_record() -> Brep {
-        Brep { version: 4, tolerance: 1e-6, regions: Vec::new(), shells: Vec::new(), faces: Vec::new(), edges: Vec::new(), vertices: Vec::new() }
-    }
-
-    fn call(op: &'static str, inputs: &[u64], outputs: Result<Vec<u64>, String>) -> Event {
-        Event::Call { op, inputs: inputs.to_vec(), params: json!({}), outputs }
-    }
-
-    fn exported_case(name: &str, events: Vec<Event>, ran: Result<Vec<(String, Brep)>, String>) -> Value {
-        let root = std::env::temp_dir().join(format!("solidcraft-export-{}-{name}", std::process::id()));
-        let dir = root.join("tests/kernel-cases/traces").join(name);
-        std::fs::create_dir_all(&dir).unwrap();
-        std::fs::write(dir.join("expected.json"), "{}").unwrap();
-        let output = root.join("export");
-        write(&output, dir.to_str().unwrap(), &json!({"status": "pass"}), Capture { events, ran: Some(ran) }).unwrap();
-        let entry = output.join("traces").join(format!("{name}.json"));
-        serde_json::from_str(&std::fs::read_to_string(entry).unwrap()).unwrap()
-    }
-
-    #[test]
-    fn discarded_tool_construction_is_exported_in_execution_order() {
-        let record = empty_record();
-        let e = exported_case(
-            "discarded-tool",
-            vec![call("extrude", &[], Ok(vec![1])), call("extrude", &[], Ok(vec![2])), Event::Export { id: 1, record: Box::new(record.clone()) }],
-            Ok(vec![("Part".into(), record)]),
-        );
-        assert_eq!(e["calls"].as_array().unwrap().len(), 2);
-        assert_eq!(e["calls"][0]["outputs"], json!(["b1"]));
-        assert_eq!(e["calls"][1]["outputs"], json!(["b2"]));
-        assert_eq!(e["traced_ops"], json!(["extrude", "extrude"]));
-    }
-
-    #[test]
-    fn handled_refusals_are_exported_without_becoming_terminal() {
-        let record = empty_record();
-        let e = exported_case(
-            "handled-refusal",
-            vec![
-                call("extrude", &[], Ok(vec![1])),
-                call("fillet", &[1], Err("too large".into())),
-                call("fillet", &[1], Ok(vec![2])),
-                Event::Export { id: 2, record: Box::new(record.clone()) },
-            ],
-            Ok(vec![("Part".into(), record)]),
-        );
-        assert_eq!(e["calls"].as_array().unwrap().len(), 3);
-        assert_eq!(e["calls"][1]["error"], "too large");
-        assert_eq!(e["calls"][1]["continued"], true);
-    }
-
-    #[test]
-    fn a_handled_last_attempt_keeps_the_retained_body_as_the_result() {
-        let record = empty_record();
-        let e = exported_case(
-            "handled-last-attempt",
-            vec![
-                call("extrude", &[], Ok(vec![1])),
-                call("fillet", &[1], Err("too large".into())),
-                Event::Export { id: 1, record: Box::new(record.clone()) },
-            ],
-            Ok(vec![("Part".into(), record)]),
-        );
-        assert_eq!(e["calls"][1]["continued"], true);
-        assert_eq!(e["result"], json!([{"body": "Part", "made": "b1"}]));
-        assert_eq!(e["operation_expressible"], true);
-    }
-
-    #[test]
-    fn the_final_refusal_still_ends_replay() {
-        let e = exported_case(
-            "terminal-refusal",
-            vec![
-                call("extrude", &[], Ok(vec![1])),
-                call("fillet", &[1], Err("too large".into())),
-                call("fillet", &[1], Err("no room".into())),
-                call("copy", &[1], Ok(vec![2])),
-            ],
-            Err("no room".into()),
-        );
-        assert_eq!(e["calls"].as_array().unwrap().len(), 4);
-        assert_eq!(e["calls"][1]["continued"], true);
-        assert!(e["calls"][2].get("continued").is_none());
-        assert_eq!(e["outcome"]["kernel_error"], "no room");
-    }
-
-    #[test]
-    fn discarded_operations_still_require_their_operand_records() {
-        let record = empty_record();
-        let e = exported_case(
-            "missing-tool-operand",
-            vec![call("extrude", &[], Ok(vec![1])), call("copy", &[99], Ok(vec![2])), Event::Export { id: 1, record: Box::new(record.clone()) }],
-            Ok(vec![("Part".into(), record)]),
-        );
-        assert_eq!(e["operation_expressible"], false);
-        assert!(e["why_not"].as_array().unwrap().iter().any(|why| why.as_str().unwrap().contains("99")));
-    }
-
-    #[test]
-    fn discarded_operations_keep_their_imported_operands() {
-        let record = empty_record();
-        let e = exported_case(
-            "imported-tool-operand",
-            vec![
-                call("extrude", &[], Ok(vec![1])),
-                Event::Import { id: 9, record: Box::new(record.clone()), trusted: false, keeping_splines: true },
-                call("copy", &[9], Ok(vec![2])),
-                Event::Export { id: 1, record: Box::new(record.clone()) },
-            ],
-            Ok(vec![("Part".into(), record.clone())]),
-        );
-        assert_eq!(e["bodies"]["b9"], json!({"record": record, "trusted": false, "keeping_splines": true}));
-        assert_eq!(e["calls"][1]["inputs"], json!(["b9"]));
-        assert_eq!(e["operation_expressible"], true);
-    }
-
-    #[test]
-    fn a_later_output_cannot_supply_an_earlier_discarded_operation() {
-        let record = empty_record();
-        let e = exported_case(
-            "future-tool-operand",
-            vec![call("copy", &[9], Ok(vec![2])), call("extrude", &[], Ok(vec![9])), Event::Export { id: 9, record: Box::new(record.clone()) }],
-            Ok(vec![("Part".into(), record)]),
-        );
-        assert_eq!(e["operation_expressible"], false);
-        assert!(e["why_not"].as_array().unwrap().iter().any(|why| why.as_str().unwrap().contains("9")));
-    }
-
-    #[test]
-    fn the_area_is_the_path_under_kernel_cases() {
-        assert_eq!(area_and_id("tests/kernel-cases/booleans/1894-x").unwrap(), ("booleans".into(), "1894-x".into()));
-        assert_eq!(area_and_id("/r/tests/kernel-cases/ladder/07-fillets/003-y").unwrap(), ("ladder/07-fillets".into(), "003-y".into()));
-        assert!(area_and_id("/r/other/x").is_err());
-    }
-}

apps/solidcraft-cli/src/main.rs

@@ -1,31 +1,27 @@
 //! SolidCraft headless command line.
 //!
 //! ```text
-//! solidcraft-cli run <script.json|design.sc|part.step|mesh.3mf> [--in design|part.step|mesh.3mf] [--out FILE]... [--save FILE] [--quiet] [--results] [--timings] [--profile] [--json-out FILE] [--allow-errors]
-//!                    [--param-check off|warn|strict]
-//! solidcraft-cli eval <script.json|design.sc|part.step> [--in design.sc|part.step] [--json-out FILE] (alias: inspect) measurements as JSON
-//! solidcraft-cli script <design.sc> [--out script.json]     the design's history as a command script
-//! solidcraft-cli bench-open <design.sc | part.step> [--parse-only] [--save OUT.sc] [--display LEVEL [--edit NAME EXPR]] [--ops script.json] loading timings as JSON lines
+//! solidcraft-cli run <script.json|design.solidcraft|part.step|mesh.3mf> [--in design|part.step|mesh.3mf] [--out FILE]... [--save FILE] [--quiet] [--results] [--timings] [--profile] [--json-out FILE] [--allow-errors]
+//! solidcraft-cli eval <script.json|design.solidcraft|part.step> [--json-out FILE] (alias: inspect) measurements as JSON
+//! solidcraft-cli script <design.solidcraft> [--out script.json]     the design's history as a command script
+//! solidcraft-cli bench-open <design.solidcraft | part.step> [--parse-only] [--save OUT.solidcraft] [--display LEVEL [--edit NAME EXPR]] [--ops script.json] loading timings as JSON lines
 //! solidcraft-cli bench-agent [--scale F] [--save F] [--script-out F] a ~1,300-body design built command by command, timed
 //! solidcraft-cli bench-assistant --connect 127.0.0.1:PORT [--token T] --base-url URL --model NAME [--tasks 1,2,5] [--repeat N]
 //!                                 [--timeout-s 300] [--json out.json] [--markdown out.md]
 //!                                                             the standard Assistant model test (#4851) on a running app
-//! solidcraft-cli snapshot <script|design> [--in design|part.step] --out shot.png [--width W] [--height H] [--view iso|front|top|…|NAME | --camera JSON] [--no-grid] [--no-axes] [--quality LEVEL]
+//! solidcraft-cli snapshot <script|design> [--in design|part.step] --out shot.png [--width W] [--height H] [--view iso|front|top|…|NAME | --camera JSON] [--no-grid] [--no-axes]
 //!                                                             [--body NAME:opacity=0.3,color=#rrggbb]... [--tool NAME]... [--section z=27]
 //! solidcraft-cli exec <command> [json-params]                 run one command on an empty design
 //! solidcraft-cli commands                                     the command registry as JSON
 //! solidcraft-cli recipe <recipe.json>                         translate an oracle recipe to a script
 //! solidcraft-cli oracle <case-dir>...                         replay recipes and compare with expected.json
-//! solidcraft-cli kernel-cases [--json] [--dumps=DIR] [--validation=MODE] <case-dir>... the kernel regression rig (tests/kernel-cases)
 //! solidcraft-cli mcp [--headless] [--in design|script] [--connect HOST:PORT [--token T]] [--allow-path DIR]... [--allow-any-path]
-//!                    [--param-check off|warn|strict] [--compact]
+//!                    [--param-check off|warn|strict]
 //!                                                             MCP server on stdio (docs/mcp.md)
-//! solidcraft-cli mcp setup [--dry-run] [--client NAME] [--live] (alias: mcp install) add it to OpenCode, Claude Desktop, Claude Code, Cursor
 //! solidcraft-cli licences                                     SolidCraft's licence and the third-party licences
 //! solidcraft-cli icon --out F.png|F.ico [--size N]             the app icon (packaging; drawn, not a file)
 //!
 //! --debug (with any command)                                  SolidCraft's debug log on stderr (or RUST_LOG=LEVEL)
-//! --max-file-size SIZE (with any command)                     read STEP and design files up to SIZE (2GB, 1500MB; at most 16GB)
 //! ```
 #![deny(clippy::unwrap_used, clippy::expect_used, clippy::panic, clippy::unimplemented, clippy::todo, clippy::unreachable)]
 #![forbid(unsafe_code)]
@@ -34,12 +30,9 @@ mod bench_agent;
 mod bench_assistant;
 mod crashes;
 mod fuzz;
-mod kernel_cases;
-mod kernel_cases_export;
 mod logger;
 mod oracle;
 mod preview;
-mod profiling;
 mod recipe;
 mod render;
 mod spatial;
@@ -62,19 +55,19 @@ struct Command {
 }
 
 /// `run`'s lines in the usage.
-const USAGE_RUN: &str = "  solidcraft-cli run <script.json|design.sc|part.step> [--in design.sc|part.step] [--out FILE]... [--save FILE] [--quiet] [--results] [--timings] [--profile] [--profile-out trace.json] [--json-out FILE] [--allow-errors] [--validation each_step|each_feature|off]\n                     [--param-check off|warn|strict] [--quality standard|fine|finest]\n  solidcraft-cli run --in <design.sc|part.step> [--out FILE]...\n      (a timeline feature that fails fails the run and nothing is written; --allow-errors writes anyway)\n      (--quality: how closely an STL, OBJ or 3MF --out follows curved faces, as file.export's quality: a chord of\n       2e-4, 5e-5 or 1e-5 of each body's size, never under 1 µm, default standard)\n      (--validation: when SMLib's full check runs on the features computed (diagnostics.validation), default each_feature)\n      (--param-check checks each step against its command's contract: warn reports on stderr, strict stops the run)\n      (--timings prints {timings: [{index, command, ms}], total_ms} for a script, with --results its results too;\n       --profile adds each command's profile: {boolean_ms, tessellate_ms, other_ms}, the kernel's share)\n      (--profile also records where the time goes, SMLib's calls, kernel operations, features, commands and import stages,\n       and prints the table to stderr: count, total, self time and longest per span; --profile-out FILE writes the spans\n       as a Chrome trace for chrome://tracing or ui.perfetto.dev; SOLIDCRAFT_PROFILE=1 does the same for any command)\n";
+const USAGE_RUN: &str = "  solidcraft-cli run <script.json|design.solidcraft|part.step> [--in design.solidcraft|part.step] [--out FILE]... [--save FILE] [--quiet] [--results] [--timings] [--profile] [--json-out FILE] [--allow-errors]\n  solidcraft-cli run --in <design.solidcraft|part.step> [--out FILE]...\n      (a timeline feature that fails fails the run and nothing is written; --allow-errors writes anyway)\n      (--timings prints {timings: [{index, command, ms}], total_ms} for a script, with --results its results too;\n       --profile adds each command's profile: {boolean_ms, tessellate_ms, other_ms}, the kernel's share)\n";
 /// `eval`'s lines in the usage.
-const USAGE_EVAL: &str = "  solidcraft-cli eval <script.json|design.sc|part.step> [--in design.sc|part.step] [--json-out FILE] [--profile] [--profile-out trace.json] [--validation each_step|each_feature|off]     (alias: inspect)\n  solidcraft-cli eval --in <script.json|design.sc|part.step> [--json-out FILE]\n      (with both inputs, runs the positional script on --in before measuring; does not automatically save the modified design)\n      (--json-out FILE writes the JSON that run (with --results, else the measurement) and eval print to FILE instead of stdout,\n       as plain UTF-8: a shell's > can re-encode it, e.g. Windows PowerShell adds a byte-order mark)\n      (--profile, --profile-out and --validation as for run)\n";
+const USAGE_EVAL: &str = "  solidcraft-cli eval <script.json|design.solidcraft|part.step> [--json-out FILE]     (alias: inspect; or --in FILE)\n      (--json-out FILE writes the JSON that run (with --results, else the measurement) and eval print to FILE instead of stdout,\n       as plain UTF-8: a shell's > can re-encode it, e.g. Windows PowerShell adds a byte-order mark)\n";
 /// `script`'s lines in the usage.
-const USAGE_SCRIPT: &str = "  solidcraft-cli script <design.sc|script.json> [--out script.json]\n      (the design's history as a command script that eval and run replay)\n";
+const USAGE_SCRIPT: &str = "  solidcraft-cli script <design.solidcraft|script.json> [--out script.json]\n      (the design's history as a command script that eval and run replay)\n";
 /// `bench-open`'s lines in the usage.
-const USAGE_BENCH_OPEN: &str = "  solidcraft-cli bench-open <design.sc | part.step> [--parse-only] [--save OUT.sc] [--display LEVEL [--edit NAME EXPR]] [--ops script.json] [--profile] [--profile-out trace.json]\n      (--profile and --profile-out as for run)\n      (--ops: after opening, run each command of the script and undo it, timing the command, the\n       evaluations it caused and the view it leaves: placing and meshing what changed)\n";
+const USAGE_BENCH_OPEN: &str = "  solidcraft-cli bench-open <design.solidcraft | part.step> [--parse-only] [--save OUT.solidcraft] [--display LEVEL [--edit NAME EXPR]] [--ops script.json]\n      (--ops: after opening, run each command of the script and undo it, timing the command, the\n       evaluations it caused and the view it leaves: placing and meshing what changed)\n";
 /// `bench-agent`'s lines in the usage.
-const USAGE_BENCH_AGENT: &str = "  solidcraft-cli bench-agent [--scale F] [--save design.sc] [--script-out script.json]\n";
+const USAGE_BENCH_AGENT: &str = "  solidcraft-cli bench-agent [--scale F] [--save design.solidcraft] [--script-out script.json]\n";
 /// `bench-assistant`'s lines in the usage.
 const USAGE_BENCH_ASSISTANT: &str = "  solidcraft-cli bench-assistant --connect 127.0.0.1:PORT [--token T] --base-url URL --model NAME [--tasks 1,2,5] [--repeat N] [--timeout-s 300] [--json out.json] [--markdown out.md]\n";
 /// `snapshot`'s lines in the usage.
-const USAGE_SNAPSHOT: &str = "  solidcraft-cli snapshot <script|design> [--in design.sc|part.step] --out shot.png [--width W] [--height H] [--view NAME | --camera JSON] [--no-grid] [--no-axes]\n      [--body NAME:opacity=0.3,color=#rrggbb]... [--tool NAME]... [--section z=27] [--quality coarse|normal|fine|ultra]\n  solidcraft-cli snapshot --in <design.sc|part.step> --out shot.png ...\n      (as with run, --in starts from a design and the script runs on top of it; an option snapshot doesn't take is an error;\n       --view: iso, front, back, top, bottom, left, right, or the name of a view saved in the design with view.save;\n       --camera: {target: [x,y,z], yaw, pitch, distance, fov?} in mm and radians, as the MCP screenshot takes it (docs/mcp.md);\n       --no-grid and --no-axes leave the ground grid (on Z 0) and the origin's axes out of the picture;\n       --body: how one body is drawn, as appearance.assign takes it: opacity 0-1 (below 1 is see-through, so what is inside\n         it shows) and color #rrggbb, either or both, once per body;\n       --tool: draw this body solid in the tool colour and every other body see-through, so a cut's or a join's tool body\n         is visible inside the material it meets; a later --body overrides it;\n       --section: cut the model as inspect.section does, so the inside shows: z=27 (the plane through that world\n         coordinate, keeping the smaller side), add ,flip to keep the other side, or XY, XZ, YZ, or its own JSON;\n       --quality: the display quality the bodies are meshed at, as the app's setting (default normal))\n";
+const USAGE_SNAPSHOT: &str = "  solidcraft-cli snapshot <script|design> [--in design.solidcraft|part.step] --out shot.png [--width W] [--height H] [--view NAME | --camera JSON] [--no-grid] [--no-axes]\n      [--body NAME:opacity=0.3,color=#rrggbb]... [--tool NAME]... [--section z=27]\n  solidcraft-cli snapshot --in <design.solidcraft|part.step> --out shot.png ...\n      (as with run, --in starts from a design and the script runs on top of it; an option snapshot doesn't take is an error;\n       --view: iso, front, back, top, bottom, left, right, or the name of a view saved in the design with view.save;\n       --camera: {target: [x,y,z], yaw, pitch, distance, fov?} in mm and radians, as the MCP screenshot takes it (docs/mcp.md);\n       --no-grid and --no-axes leave the ground grid (on Z 0) and the origin's axes out of the picture;\n       --body: how one body is drawn, as appearance.assign takes it: opacity 0-1 (below 1 is see-through, so what is inside\n         it shows) and color #rrggbb, either or both, once per body;\n       --tool: draw this body solid in the tool colour and every other body see-through, so a cut's or a join's tool body\n         is visible inside the material it meets; a later --body overrides it;\n       --section: cut the model as inspect.section does, so the inside shows: z=27 (the plane through that world\n         coordinate, keeping the smaller side), add ,flip to keep the other side, or XY, XZ, YZ, or its own JSON)\n";
 /// `render`'s lines in the usage.
 const USAGE_RENDER: &str = "  solidcraft-cli render <script|design> --out image.png [--setup NAME] [--width W] [--height H] [--transparent] [--overwrite] [--timeout SECONDS]\n      [--progressive] [--samples N] [--max-depth N] [--seed N] [--exposure EV] [--lighting FILE.json] [--environment FILE.json] [--tone-map reinhard|aces_fitted]\n";
 /// `exec`'s lines in the usage.
@@ -85,13 +78,11 @@ const USAGE_COMMANDS: &str = "  solidcraft-cli commands\n";
 const USAGE_RECIPE: &str = "  solidcraft-cli recipe <recipe.json>\n";
 /// `oracle`'s lines in the usage.
 const USAGE_ORACLE: &str = "  solidcraft-cli oracle <case-dir>... [--json]\n";
-/// `kernel-cases`'s lines in the usage.
-const USAGE_KERNEL_CASES: &str = "  solidcraft-cli kernel-cases <case-dir>... [--json] [--dumps=DIR] [--export=DIR] [--validation=each_step|each_feature|off]\n      (the kernel regression rig, tests/kernel-cases, on SMLib; --dumps: each case's\n       failing SMLib calls leave their inputs for replay in DIR/<area>-<case>; --export: each case's\n       kernel operations, input records and expected values for solidcore's rig, in DIR/<area>/<case>.json; --validation: when SMLib's\n       full check runs (diagnostics.validation), default each_feature)\n";
 /// `fuzz`'s lines in the usage.
 const USAGE_FUZZ: &str =
     "  solidcraft-cli fuzz [--from N] [--count N] [--jobs J] [--timeout S] [--steps N] [--minimise] [--out DIR] [--report FILE]\n";
 /// `mcp`'s lines in the usage.
-const USAGE_MCP: &str = "  solidcraft-cli mcp [--headless] [--in design.sc|script.json] [--connect 127.0.0.1:PORT [--token T]] [--allow-path DIR]... [--allow-any-path]\n                     [--param-check off|warn|strict] [--render-gpu] [--compact]\n      (--compact, SOLIDCRAFT_MCP_COMPACT=1 or the app's Preferences › AI (with --connect): compact tool output for\n       agents: inspect_design summarises sketches and takes `sketches` by name and a `bodies` filter, and tool JSON\n       is not pretty-printed; off by default)\n  solidcraft-cli mcp setup [--dry-run] [--client opencode|claude-desktop|claude-code|cursor] [--live]\n      (adds a `solidcraft` server, with this program's path, to each installed AI client; --live adds `solidcraft-live` for the running app; alias: mcp install)\n";
+const USAGE_MCP: &str = "  solidcraft-cli mcp [--headless] [--in design.solidcraft|script.json] [--connect 127.0.0.1:PORT [--token T]] [--allow-path DIR]... [--allow-any-path]\n                     [--param-check off|warn|strict]\n";
 /// `crashes`'s lines in the usage.
 const USAGE_CRASHES: &str = "  solidcraft-cli crashes [list [--json] | show <id> | replay <id> | dir | clear [<id>]]\n";
 /// `licences`'s lines in the usage.
@@ -107,7 +98,7 @@ const USAGE_BENCH_EDIT: &str = "  solidcraft-cli bench-edit <script.json|recipe.
 /// `save-stress`'s lines in the usage: the file saved over and over.
 const USAGE_SAVE_STRESS: &str = "  solidcraft-cli save-stress <path> <rounds>\n";
 /// The flags every command takes, at the end of the top-level usage.
-const USAGE_DEBUG: &str = "  --debug, with any command: what SolidCraft logs (why a body has no display plan, why a save left its\n      model cache out), on stderr; RUST_LOG=error|warn|info|debug|trace sets one level for every crate\n  --max-file-size SIZE, with any command: read STEP and import files and design files up to SIZE for this run\n      (for example 2GB or 1500MB; at most 16GB; the defaults are 512 MB and 256 MB, and a smaller SIZE keeps them)\n";
+const USAGE_DEBUG: &str = "  --debug, with any command: what SolidCraft logs (why a body has no display plan, why a save left its\n      model cache out), on stderr; RUST_LOG=error|warn|info|debug|trace sets one level for every crate\n";
 
 /// The commands the CLI takes, in the order the top-level usage lists them.
 const COMMANDS: &[Command] = &[
@@ -124,7 +115,6 @@ const COMMANDS: &[Command] = &[
     Command { name: "commands", usage: USAGE_COMMANDS, listed: true },
     Command { name: "recipe", usage: USAGE_RECIPE, listed: true },
     Command { name: "oracle", usage: USAGE_ORACLE, listed: true },
-    Command { name: "kernel-cases", usage: USAGE_KERNEL_CASES, listed: true },
     Command { name: "fuzz", usage: USAGE_FUZZ, listed: true },
     Command { name: "fuzz-one", usage: USAGE_FUZZ_ONE, listed: false },
     Command { name: "mcp", usage: USAGE_MCP, listed: true },
@@ -140,23 +130,6 @@ const COMMANDS: &[Command] = &[
 fn main() -> ExitCode {
     let mut args: Vec<String> = std::env::args().skip(1).collect();
     logger::init(&mut args);
-    // `--profile` / `--profile-out` (run, eval, bench-open) or SOLIDCRAFT_PROFILE (any command):
-    // record from here, and print the table when the command ends.
-    let profiling = match args.first().map(String::as_str) {
-        Some("run" | "eval" | "inspect" | "bench-open") => profiling::start(&args[1..]),
-        _ => profiling::start(&[]),
-    };
-    let profiling = match profiling {
-        Ok(p) => p,
-        Err(e) => {
-            eprintln!("error: {e}");
-            return ExitCode::FAILURE;
-        }
-    };
-    if let Err(e) = max_file_size(&mut args) {
-        solidcraft_engine::note!("error: {e}");
-        return ExitCode::FAILURE;
-    }
     let r = match args.first().map(String::as_str) {
         // Asked-for help is not an error: the command's usage on stdout, exit 0. It is read
         // before the command runs, so `--help` never starts a run (a fuzz run, a server).
@@ -190,14 +163,9 @@ fn main() -> ExitCode {
             recipe::to_script(&v).map(|s| println!("{}", pretty(&s)))
         }),
         Some("oracle") => oracle::run(&args[1..]),
-        Some("kernel-cases") => kernel_cases::run(&args[1..]),
         Some("fuzz") => fuzz::run(&args[1..]),
         Some("fuzz-one") => fuzz::one(&args[1..]),
-        Some("mcp") => {
-            let result = cmd_mcp(&args[1..]);
-            solidcraft_mcp::cleanup_scratch_dir();
-            result
-        }
+        Some("mcp") => cmd_mcp(&args[1..]),
         Some("crashes") => crashes::run(&args[1..]),
         Some("icon") => cmd_icon(&args[1..]),
         Some("licences" | "licenses") => {
@@ -227,42 +195,15 @@ fn main() -> ExitCode {
         }
         _ => Err(usage()),
     };
-    // The table also when the command failed: where it spent its time before failing.
-    let r = match (r, profiling.map(profiling::Profiling::finish)) {
-        (Ok(()), Some(Err(e))) => Err(e),
-        (r, _) => r,
-    };
     match r {
         Ok(()) => ExitCode::SUCCESS,
         Err(e) => {
-            solidcraft_engine::note!("error: {e}");
+            eprintln!("error: {e}");
             ExitCode::FAILURE
         }
     }
 }
 
-/// Take `--max-file-size SIZE` (or `--max-file-size=SIZE`), which any command takes, out of the
-/// arguments and raise the file size limits for this run (#4086). A bad size is an error.
-fn max_file_size(args: &mut Vec<String>) -> Result<(), String> {
-    let mut size = None;
-    let mut i = 0;
-    while let Some(arg) = args.get(i) {
-        if arg == "--max-file-size" {
-            let value = args.get(i + 1).cloned().ok_or("--max-file-size needs a size, for example --max-file-size 2GB")?;
-            args.drain(i..i + 2);
-            size = Some(value);
-        } else if let Some(value) = arg.strip_prefix("--max-file-size=") {
-            size = Some(value.to_string());
-            args.remove(i);
-        } else {
-            i += 1;
-        }
-    }
-    let Some(size) = size else { return Ok(()) };
-    let bytes = solidcraft_engine::io::limits::parse_flag(&size).map_err(|e| format!("--max-file-size: {e}"))?;
-    solidcraft_engine::io::limits::set_override(Some(bytes))
-}
-
 fn pretty(v: &Value) -> String {
     serde_json::to_string_pretty(v).unwrap_or_default()
 }
@@ -299,12 +240,11 @@ fn wants_help(args: &[String]) -> bool {
 pub fn read_json(path: &str) -> Result<Value, String> {
     // Through the engine's file access, which refuses anything that is not a regular file and
     // reads no more than the cap: a character device or a FIFO would otherwise never end.
-    let s = solidcraft_engine::io::vfs::read_to_string(path, solidcraft_engine::io::limits::max_design_bytes())
-        .map_err(|e| format!("{path}: {}", solidcraft_engine::io::limits::explain(solidcraft_engine::io::limits::Kind::Design, e)))?;
+    let s = solidcraft_engine::io::vfs::read_to_string(path, solidcraft_engine::io::MAX_DESIGN_BYTES).map_err(|e| format!("{path}: {e}"))?;
     serde_json::from_str(&s).map_err(|e| format!("{path}: {e}"))
 }
 
-/// A session from a design file, a STEP/3MF/STL file, a point cloud, a command script, or an oracle recipe.
+/// A session from a design file, a STEP/3MF/STL file, a command script, or an oracle recipe.
 pub fn load(path: &str) -> Result<Session, String> {
     load_checked(path, solidcraft_engine::schema::ParamCheck::Off)
 }
@@ -312,36 +252,17 @@ pub fn load(path: &str) -> Result<Session, String> {
 /// `load`, with scripts and recipes run at the parameter-check level `check`, which the
 /// session keeps.
 fn load_checked(path: &str, check: solidcraft_engine::schema::ParamCheck) -> Result<Session, String> {
-    load_with(path, check, solidcraft_engine::kernel::Validation::default())
-}
-
-/// `load_checked`, the features computed under `validation` (`diagnostics.validation`), which
-/// the session keeps.
-fn load_with(path: &str, check: solidcraft_engine::schema::ParamCheck, validation: solidcraft_engine::kernel::Validation) -> Result<Session, String> {
-    let s = read_session(path, check, validation)?;
-    // A newer SolidCraft's file opens all the same; stderr says so, stdout stays the caller's.
-    for warning in s.doc.newer_file.iter().flat_map(|file| file.warnings()) {
-        eprintln!("{path}: warning: {warning}");
-    }
-    Ok(s)
-}
-
-fn read_session(
-    path: &str,
-    check: solidcraft_engine::schema::ParamCheck,
-    validation: solidcraft_engine::kernel::Validation,
-) -> Result<Session, String> {
     let mut s = Session::default();
     s.param_check = check;
-    s.set_validation(validation);
-    if solidcraft_engine::io::is_step_path(path) || solidcraft_engine::io::is_mesh_path(path) || solidcraft_engine::io::is_point_cloud_path(path) {
+    if solidcraft_engine::io::is_step_path(path) || solidcraft_engine::io::is_mesh_path(path) {
         s.execute("doc.open", &json!({"path": path})).map_err(|e| e.to_string())?;
         return Ok(s);
     }
-    let bytes = solidcraft_engine::io::limits::read(path, solidcraft_engine::io::limits::Kind::Design).map_err(|e| format!("{path}: {e}"))?;
+    let bytes = solidcraft_engine::io::vfs::read(path, solidcraft_engine::io::MAX_DESIGN_BYTES).map_err(|e| format!("{path}: {e}"))?;
     if solidcraft_engine::io::is_design_container(&bytes) {
         let doc = solidcraft_engine::io::read_design(&bytes).map_err(|e| format!("{path}: {e}"))?;
-        let mut session = Session::opened_at_validating(doc, None, Some(path), validation);
+        let mut session = Session::new(doc);
+        session.path = Some(path.to_owned());
         session.param_check = check;
         return Ok(session);
     }
@@ -350,36 +271,18 @@ fn read_session(
         s.execute("doc.open", &json!({"path": path})).map_err(|e| e.to_string())?;
     } else {
         let script = if v.get("features").is_some() && v.get("commands").is_none() { recipe::to_script(&v)? } else { v };
-        run_script_warning(&mut s, path, &script)?;
+        // Warn level: each step's `param_warnings` as it completes, even when a later step fails
+        // (stderr, so stdout stays the caller's).
+        let mut warn = |step: usize, r: &Value| {
+            for w in r.get("param_warnings").and_then(Value::as_array).into_iter().flatten() {
+                eprintln!("{path}: step {}: {}", step + 1, w.as_str().unwrap_or_default());
+            }
+        };
+        s.run_script_each(&script, &mut warn).map_err(|e| e.to_string())?;
     }
     Ok(s)
 }
 
-/// Run `script`, read from `path`, on `s`. At the warn level each step's `param_warnings` go to
-/// stderr as the step completes, even when a later step fails (stdout stays the caller's).
-fn run_script_warning(s: &mut Session, path: &str, script: &Value) -> Result<Vec<Value>, String> {
-    s.run_script_each(script, &mut |step, r| print_param_warnings(path, step, r)).map_err(|e| e.to_string())
-}
-
-/// Step `step`'s `param_warnings` on stderr, one per line, named after the script at `path`.
-fn print_param_warnings(path: &str, step: usize, r: &Value) {
-    for w in r.get("param_warnings").and_then(Value::as_array).into_iter().flatten() {
-        solidcraft_engine::note!("{path}: step {}: {}", step + 1, w.as_str().unwrap_or_default());
-    }
-}
-
-/// `--param-check off|warn|strict`: how calls that break a command's parameter contract are
-/// treated (docs/mcp.md); off when the option isn't given.
-fn parse_param_check(cmd: &str, args: &[String]) -> Result<solidcraft_engine::schema::ParamCheck, String> {
-    match flag(args, "--param-check") {
-        None if args.iter().any(|a| a == "--param-check") => Err(format!("{cmd}: --param-check wants off, warn or strict")),
-        None => Ok(solidcraft_engine::schema::ParamCheck::Off),
-        Some(v) => {
-            solidcraft_engine::schema::ParamCheck::parse(v).ok_or_else(|| format!("{cmd}: --param-check wants off, warn or strict, not `{v}`"))
-        }
-    }
-}
-
 fn flag<'a>(args: &'a [String], name: &str) -> Option<&'a str> {
     args.iter().position(|a| a == name).and_then(|i| args.get(i + 1)).map(String::as_str)
 }
@@ -405,16 +308,6 @@ fn positional(args: &[String]) -> Option<&String> {
     None
 }
 
-/// Is `path` a command script (or a recipe), not a design: JSON that is no saved design.
-fn is_script(path: &str) -> bool {
-    let Ok(bytes) = solidcraft_engine::io::vfs::read(path, solidcraft_engine::io::MAX_DESIGN_BYTES) else { return false };
-    if solidcraft_engine::io::is_design_container(&bytes) {
-        return false;
-    }
-    serde_json::from_slice::<Value>(&bytes)
-        .is_ok_and(|v| !v.get("format").and_then(Value::as_str).is_some_and(|f| solidcraft_engine::doc::format::version_of(f).is_some()))
-}
-
 /// `--json-out FILE`: where the JSON a command prints goes instead of stdout.
 fn json_out(args: &[String]) -> Result<Option<&str>, String> {
     if !args.iter().any(|a| a == "--json-out") {
@@ -446,69 +339,44 @@ fn print_json(v: &Value, file: Option<&str>) -> Result<(), String> {
 fn cmd_run(args: &[String]) -> Result<(), String> {
     install_renderer();
     let json_out = json_out(args)?;
-    // Before the option check, so a bare `--param-check` gets the words `mcp` uses.
-    let check = parse_param_check("run", args)?;
-    known_args(
-        "run",
-        args,
-        &["--in", "--out", "--save", "--json-out", "--param-check", "--profile-out", "--validation", "--quality"],
-        &["--quiet", "--results", "--timings", "--profile", "--allow-errors"],
-        true,
-    )?;
-    let validation = validation_flag("run", args)?;
-    let quality = export_quality("run", args)?;
     let base = flag(args, "--in");
     let path = positional(args);
     if path.is_none() && base.is_none() {
         return Err(usage());
     }
     let want_results = args.iter().any(|a| a == "--results");
-    // `--profile` records the profiler's spans (the table goes to stderr, `profiling.rs`); for a
-    // script it also times each command and splits out its kernel time, implying `--timings`.
-    let script = path.is_some_and(|p| is_script(p));
-    let profile = script && args.iter().any(|a| a == "--profile" || a == "--profile-out");
+    // `--profile` times each command and splits out its kernel time; it implies `--timings`.
+    let profile = args.iter().any(|a| a == "--profile");
     let timings = profile || args.iter().any(|a| a == "--timings");
     let (mut s, results) = if want_results || timings {
         // Collect every command's result or time (scripts only), then process requested files too.
         let mut s = match base {
-            Some(b) => load_with(b, check, validation)?,
-            None => {
-                let mut s = Session::default();
-                s.set_validation(validation);
-                s
-            }
+            Some(b) => load(b)?,
+            None => Session::default(),
         };
-        s.param_check = check;
         let needs = if want_results { "--results needs a script" } else { "--timings needs a script" };
-        let script = path.ok_or(needs)?;
-        let v = read_json(script)?;
+        let v = read_json(path.ok_or(needs)?)?;
         let out = if timings {
-            let (r, mut t) = s.run_script_timed(&v, profile, &mut |step, r| print_param_warnings(script, step, r)).map_err(|e| e.to_string())?;
+            let (r, mut t) = s.run_script_timed(&v, profile).map_err(|e| e.to_string())?;
             if want_results && let Some(o) = t.as_object_mut() {
                 o.insert("results".into(), Value::Array(r));
             }
             t
         } else {
-            Value::Array(run_script_warning(&mut s, script, &v)?)
+            Value::Array(s.run_script(&v).map_err(|e| e.to_string())?)
         };
         (s, Some(out))
     } else {
-        (open_validating(base, path, check, validation)?, None)
+        (open(base, path)?, None)
     };
     // A feature that fails leaves the bodies as they were before it (a parameter change can
     // break a feature without failing the command that made it): writing them would hand out
     // the wrong part with success, so fail the run unless asked to write it anyway.
-    // A feature only a newer SolidCraft can build isn't a broken design: saving the design keeps it
-    // and hands out no part. Exporting bodies without it would, so that still stops.
     if !args.iter().any(|a| a == "--allow-errors") {
-        timeline_ok(&s, flags(args, "--out").is_empty())?;
+        timeline_ok(&s)?;
     }
     for out in flags(args, "--out") {
-        let mut params = json!({"path": out});
-        if let Some(q) = quality {
-            params["quality"] = json!(q);
-        }
-        s.execute("file.export", &params).map_err(|e| e.to_string())?;
+        s.execute("file.export", &json!({"path": out})).map_err(|e| e.to_string())?;
     }
     if let Some(p) = flag(args, "--save") {
         s.execute("file.save_as", &json!({"path": p})).map_err(|e| e.to_string())?;
@@ -523,24 +391,13 @@ fn cmd_run(args: &[String]) -> Result<(), String> {
     Ok(())
 }
 
-/// The session `run`, `eval` and `snapshot` start from: `--in` (a design or STEP file) with the
-/// positional script run on top of it, or either one alone, with scripts run at `check`.
-fn open(base: Option<&str>, path: Option<&String>, check: solidcraft_engine::schema::ParamCheck) -> Result<Session, String> {
-    open_validating(base, path, check, solidcraft_engine::kernel::Validation::default())
-}
-
-/// [`open`], the features computed under `validation`.
-fn open_validating(
-    base: Option<&str>,
-    path: Option<&String>,
-    check: solidcraft_engine::schema::ParamCheck,
-    validation: solidcraft_engine::kernel::Validation,
-) -> Result<Session, String> {
-    let load = |p: &str| load_with(p, check, validation);
+/// The session `run` and `snapshot` start from: `--in` (a design or STEP file) with the
+/// positional script run on top of it, or either one alone.
+fn open(base: Option<&str>, path: Option<&String>) -> Result<Session, String> {
     match (base, path) {
         (Some(b), Some(p)) => {
             let mut s = load(b)?;
-            run_script_warning(&mut s, p, &read_json(p)?)?;
+            s.run_script(&read_json(p)?).map_err(|e| e.to_string())?;
             Ok(s)
         }
         (Some(b), None) => load(b),
@@ -549,29 +406,6 @@ fn open_validating(
     }
 }
 
-/// `--quality standard|fine|finest`: how closely the meshes `--out` writes (STL, OBJ, 3MF)
-/// follow curved faces, as `file.export`'s `quality` (#12270). Checked before anything runs;
-/// given twice it is refused, since only one quality can apply.
-fn export_quality<'a>(cmd: &str, args: &'a [String]) -> Result<Option<&'a str>, String> {
-    if flags(args, "--quality").len() > 1 {
-        return Err(format!("{cmd}: --quality is given more than once"));
-    }
-    match flag(args, "--quality") {
-        Some(q) if solidcraft_engine::io::MeshQuality::from_name(q).is_some() => Ok(Some(q)),
-        Some(q) => Err(format!("{cmd}: --quality must be standard, fine or finest, not `{q}`")),
-        None => Ok(None),
-    }
-}
-
-/// `--validation MODE` (`diagnostics.validation`): the default, each_feature, when not given.
-fn validation_flag(cmd: &str, args: &[String]) -> Result<solidcraft_engine::kernel::Validation, String> {
-    match flag(args, "--validation") {
-        Some(m) => solidcraft_engine::kernel::Validation::parse(m)
-            .ok_or_else(|| format!("{cmd}: --validation must be each_step, each_feature or off, not `{m}`")),
-        None => Ok(solidcraft_engine::kernel::Validation::default()),
-    }
-}
-
 /// Refuses an option `cmd` doesn't take, and one missing its value: a typo, or another
 /// command's option, would otherwise be ignored without a word. `positionals` says whether the
 /// command takes a word of its own (a file, a seed): `fuzz` takes none, and would start a run.
@@ -595,12 +429,8 @@ fn known_args(cmd: &str, args: &[String], valued: &[&str], switches: &[&str], po
 }
 
 /// Every failing timeline feature, one per line, as an error; Ok when none fails.
-fn timeline_ok(s: &Session, skip_newer_features: bool) -> Result<(), String> {
-    let newer = |id: u64| {
-        skip_newer_features && s.doc.feature(id).is_some_and(|f| matches!(f.kind, solidcraft_engine::doc::FeatureKind::NewerFileFeature { .. }))
-    };
-    let failed: Vec<String> =
-        s.model.results.iter().filter(|r| !newer(r.id)).filter_map(|r| r.error.as_ref().map(|e| format!("  {}: {e}", r.name))).collect();
+fn timeline_ok(s: &Session) -> Result<(), String> {
+    let failed: Vec<String> = s.model.results.iter().filter_map(|r| r.error.as_ref().map(|e| format!("  {}: {e}", r.name))).collect();
     if failed.is_empty() {
         return Ok(());
     }
@@ -611,15 +441,13 @@ fn timeline_ok(s: &Session, skip_newer_features: bool) -> Result<(), String> {
     ))
 }
 
-/// Runs `solidcraft-cli eval` (and its `inspect` alias), opening the input design or script with the requested `--validation` mode and reporting both `inspect.measure` and `document.inspect`.
 fn cmd_eval(args: &[String]) -> Result<(), String> {
     let json_out = json_out(args)?;
-    known_args("eval", args, &["--in", "--json-out", "--profile-out", "--validation"], &["--profile"], true)?;
-    let validation = validation_flag("eval", args)?;
-    let mut s = open_validating(flag(args, "--in"), positional(args), solidcraft_engine::schema::ParamCheck::Off, validation)?;
+    let path = flag(args, "--in").or_else(|| positional(args).map(String::as_str)).ok_or_else(usage)?;
+    let mut s = load(path)?;
     let m = s.execute("inspect.measure", &json!({})).map_err(|e| e.to_string())?;
     let d = s.execute("document.inspect", &json!({})).map_err(|e| e.to_string())?;
-    let mut out = json!({
+    let out = json!({
         "body_count": m["body_count"],
         "bodies": m["bodies"],
         "total": m["total"],
@@ -627,10 +455,6 @@ fn cmd_eval(args: &[String]) -> Result<(), String> {
         "params": d["params"],
         "sketches": d["sketches"],
     });
-    if let Some(file) = &s.doc.newer_file {
-        out["newer_file"] = file.report();
-        out["warnings"] = json!(file.warnings());
-    }
     print_json(&out, json_out)
 }
 
@@ -642,10 +466,10 @@ fn cmd_script(args: &[String]) -> Result<(), String> {
     let out = flag(args, "--out");
     let r = s.execute("timeline.export_script", &json!({"path": out})).map_err(|e| e.to_string())?;
     for what in r["omitted"].as_array().into_iter().flatten().filter_map(Value::as_str) {
-        solidcraft_engine::note!("note: the script leaves out {what}");
+        eprintln!("note: the script leaves out {what}");
     }
     match out {
-        Some(out) => solidcraft_engine::note!("{out}: {} steps", r["steps"]),
+        Some(out) => eprintln!("{out}: {} steps", r["steps"]),
         None => println!("{}", pretty(&r["script"])),
     }
     Ok(())
@@ -676,7 +500,7 @@ fn cmd_gpu(args: &[String]) -> Result<(), String> {
     );
     match s.lands_on {
         Some(solidcraft_gpu::select::Landing::Cpu) => {
-            solidcraft_engine::note!("warning: {}", solidcraft_engine::capture::CPU_WARNING);
+            eprintln!("warning: {}", solidcraft_engine::capture::CPU_WARNING);
             Ok(())
         }
         Some(_) => Ok(()),
@@ -701,7 +525,7 @@ fn cmd_snapshot(args: &[String]) -> Result<(), String> {
     known_args(
         "snapshot",
         args,
-        &["--in", "--out", "--width", "--height", "--view", "--camera", "--body", "--tool", "--section", "--quality"],
+        &["--in", "--out", "--width", "--height", "--view", "--camera", "--body", "--tool", "--section"],
         &["--no-grid", "--no-axes"],
         true,
     )?;
@@ -714,17 +538,7 @@ fn cmd_snapshot(args: &[String]) -> Result<(), String> {
         Some(x) => x.parse().ok().filter(|n| (16..=8192).contains(n)).ok_or_else(|| format!("{name} must be 16 to 8192 pixels, not `{x}`")),
     };
     let (w, h) = (size("--width", 1280)?, size("--height", 800)?);
-    // The display quality the bodies are meshed at, as the app's Display Quality setting: set
-    // before the design opens, so every display plan is made at it.
-    if let Some(q) = flag(args, "--quality") {
-        use solidcraft_engine::doc::display_quality::{DisplayQuality, set_current};
-        let level = DisplayQuality::parse(q).ok_or_else(|| {
-            let ids: Vec<&str> = DisplayQuality::ALL.iter().map(|q| q.id()).collect();
-            format!("--quality must be one of {}, not `{q}`", ids.join(", "))
-        })?;
-        set_current(level);
-    }
-    let mut s = open(flag(args, "--in"), positional(args), solidcraft_engine::schema::ParamCheck::Off)?;
+    let mut s = open(flag(args, "--in"), positional(args))?;
     // How the bodies are drawn and where the model is cut, through the commands the app's
     // Appearance dialog and Section Analysis run (`preview`).
     preview::apply(&mut s, &flags(args, "--body"), &flags(args, "--tool"), flag(args, "--section"))?;
@@ -743,17 +557,14 @@ fn cmd_snapshot(args: &[String]) -> Result<(), String> {
         }
         (None, None) => {}
     }
-    let cam = match s.camera {
-        Some(cam) => cam,
-        None => solidcraft_engine::view::home_camera(&s).map_err(|e| e.to_string())?,
-    };
+    let cam = s.camera.unwrap_or_else(|| solidcraft_engine::view::home_camera(&s));
     let guides = Guides { grid: !args.iter().any(|a| a == "--no-grid"), axes: !args.iter().any(|a| a == "--no-axes") };
-    let scene = solidcraft_engine::view::scene_with_guides(&s, &cam, s.section, guides).map_err(|e| e.to_string())?;
+    let scene = solidcraft_engine::view::scene_with_guides(&s, &cam, s.section, guides);
     let png = solidcraft_engine::capture::png(&scene, &cam, w, h)?;
     std::fs::write(out, &png.bytes).map_err(|e| format!("{out}: {e}"))?;
     let mut reply = json!({"path": out, "width": w, "height": h, "bytes": png.bytes.len(), "renderer": png.renderer});
     if let Some(w) = solidcraft_engine::capture::warning(png.renderer) {
-        solidcraft_engine::note!("warning: {w}");
+        eprintln!("warning: {w}");
         reply["warning"] = json!(w);
     }
     println!("{}", pretty(&reply));
@@ -814,49 +625,37 @@ fn cmd_exec(args: &[String]) -> Result<(), String> {
     Ok(())
 }
 
-/// `mcp setup`: add the server to each installed AI client, with this program's own path.
-fn cmd_mcp_setup(args: &[String]) -> Result<(), String> {
-    use solidcraft_engine::agent_setup as setup;
-    let (lines, ok) = setup::setup(args, &setup::Env::from_process(), &setup::current_exe()?)?;
-    for l in lines {
-        println!("{l}");
-    }
-    if ok { Ok(()) } else { Err("mcp setup: some clients could not be configured".into()) }
-}
-
 /// MCP server on stdio: headless (optionally starting from a design or script) or bridged to
 /// a running app's control port. stdout carries only protocol messages. Files the agent's tool
 /// calls reach are confined to `solidcraft_mcp::agent_scope` unless `--allow-any-path` is given.
 fn cmd_mcp(args: &[String]) -> Result<(), String> {
-    if matches!(args.first().map(String::as_str), Some("setup" | "install")) {
-        return cmd_mcp_setup(&args[1..]);
-    }
-    let render_gpu = args.iter().any(|arg| arg == "--render-gpu");
-    if render_gpu && flag(args, "--connect").is_some() {
-        return Err("mcp: --render-gpu installs a headless image host; a connected application owns its own device".into());
-    }
     install_renderer();
-    let options = solidcraft_mcp::Options::from_args_and_env(args).map_err(|e| format!("mcp: {e}"))?;
-    if options.compact {
-        eprintln!("solidcraft mcp: compact output (inspect_design summarises sketches; tool JSON is not pretty-printed)");
-    }
     let scope = (!args.iter().any(|a| a == "--allow-any-path"))
         .then(|| solidcraft_mcp::agent_scope(flags(args, "--allow-path").into_iter().map(std::path::PathBuf::from)));
     if let Some(s) = &scope {
         let roots: Vec<String> = s.roots().iter().map(|r| r.display().to_string()).collect();
-        solidcraft_engine::note!(
-            "solidcraft mcp: files limited to {} and the folders of designs opened or saved here (--allow-path DIR adds one, --allow-any-path lifts the limit)",
+        eprintln!(
+            "solidcraft mcp: files limited to {} and the open design's folder (--allow-path DIR adds one, --allow-any-path lifts the limit)",
             roots.join(", ")
         );
         let design_dir = flag(args, "--in")
             .and_then(|p| std::path::Path::new(p).parent())
             .map(|d| if d.as_os_str().is_empty() { std::path::Path::new(".") } else { d });
         if let Some(why) = design_dir.and_then(solidcraft_engine::io::vfs::design_folder_refusal) {
-            solidcraft_engine::note!("solidcraft mcp: the design's folder is left out because {why}; add it with --allow-path if you mean it");
+            eprintln!("solidcraft mcp: the design's folder is left out because {why}; add it with --allow-path if you mean it");
         }
     }
-    // How calls that break a command's parameter contract are treated, headless or bridged.
-    let param_check = parse_param_check("mcp", args)?;
+    // How a headless session treats calls that break a command's parameter contract (docs/mcp.md).
+    let param_check = match flag(args, "--param-check") {
+        None if args.iter().any(|a| a == "--param-check") => return Err("mcp: --param-check wants off, warn or strict".into()),
+        None => solidcraft_engine::schema::ParamCheck::Off,
+        Some(v) => {
+            solidcraft_engine::schema::ParamCheck::parse(v).ok_or_else(|| format!("mcp: --param-check wants off, warn or strict, not `{v}`"))?
+        }
+    };
+    if param_check != solidcraft_engine::schema::ParamCheck::Off && flag(args, "--connect").is_some() {
+        eprintln!("solidcraft mcp: --param-check applies to headless sessions; calls to the app are not checked yet");
+    }
     let backend: Box<dyn solidcraft_mcp::Backend> = match (flag(args, "--connect"), flag(args, "--in")) {
         (Some(_), Some(_)) => return Err("mcp: use either --connect or --in, not both".into()),
         (Some(addr), None) => {
@@ -864,59 +663,43 @@ fn cmd_mcp(args: &[String]) -> Result<(), String> {
                 return Err(format!("mcp: --connect wants HOST:PORT, such as 127.0.0.1:7878, not `{addr}`"));
             };
             // Serve without the app too: the tools connect once it runs, and say it isn't until then.
-            let mut remote = solidcraft_mcp::Remote::new(addr, flag(args, "--token")).with_param_check(param_check);
+            let mut remote = solidcraft_mcp::Remote::new(addr, flag(args, "--token"));
             if let Err(e) = remote.try_connect() {
-                solidcraft_engine::note!(
+                eprintln!(
                     "solidcraft mcp: no SolidCraft app at {addr} yet ({e}); start it with `solidcraft --control {port}` \
                      (or SOLIDCRAFT_CONTROL_PORT={port}), tool calls connect once it runs"
                 );
             }
             Box::new(remote)
         }
-        (None, Some(path)) => {
-            let mut headless = solidcraft_mcp::Headless::new(load_checked(path, param_check)?);
-            if render_gpu {
-                headless.session.register_render_job_host(solidcraft_gpu::path::host().map_err(|e| e.to_string())?).map_err(|e| e.to_string())?;
-            }
-            Box::new(headless)
-        }
+        (None, Some(path)) => Box::new(solidcraft_mcp::Headless::new(load_checked(path, param_check)?)),
+        // No arguments: the running desktop app, found through the discovery file it wrote
+        // (docs/control-protocol.md); none running (or `--headless`): a session of its own.
         (None, None) => {
-            let auto = !args.iter().any(|a| a == "--headless");
-            if auto && let Some(port) = discover_app() {
-                solidcraft_engine::note!("solidcraft mcp: bridged to the running app at 127.0.0.1:{port} (--headless starts a session of its own)");
-                let remote = solidcraft_mcp::Remote::new(&format!("127.0.0.1:{port}"), flag(args, "--token")).with_param_check(param_check);
-                return serve_mcp(Box::new(remote), scope, options);
+            if !args.iter().any(|a| a == "--headless")
+                && let Some(port) = discover_app()
+            {
+                eprintln!("solidcraft mcp: bridged to the running app at 127.0.0.1:{port} (--headless starts a session of its own)");
+                return serve_mcp(Box::new(solidcraft_mcp::Remote::new(&format!("127.0.0.1:{port}"), flag(args, "--token"))), scope);
             }
             let mut headless = solidcraft_mcp::Headless::default();
             headless.session.param_check = param_check;
-            if render_gpu {
-                headless.session.register_render_job_host(solidcraft_gpu::path::host().map_err(|e| e.to_string())?).map_err(|e| e.to_string())?;
-            }
-            if auto {
-                // The app may start after the agent: look for it again until there is work here.
-                Box::new(solidcraft_mcp::Auto::new(headless, Box::new(discover_app), flag(args, "--token")))
-            } else {
-                Box::new(headless)
-            }
+            Box::new(headless)
         }
     };
-    serve_mcp(backend, scope, options)
+    serve_mcp(backend, scope)
 }
 
-fn serve_mcp(
-    backend: Box<dyn solidcraft_mcp::Backend>,
-    scope: Option<solidcraft_engine::io::vfs::PathScope>,
-    options: solidcraft_mcp::Options,
-) -> Result<(), String> {
+fn serve_mcp(backend: Box<dyn solidcraft_mcp::Backend>, scope: Option<solidcraft_engine::io::vfs::PathScope>) -> Result<(), String> {
     let stdin = std::io::stdin();
     let stdout = std::io::stdout();
-    solidcraft_mcp::Server::new(backend).with_path_scope(scope).with_options(options).serve(stdin.lock(), stdout.lock()).map_err(|e| e.to_string())
+    solidcraft_mcp::Server::new(backend).with_path_scope(scope).serve(stdin.lock(), stdout.lock()).map_err(|e| e.to_string())
 }
 
 /// The port of the running desktop app: the one its discovery file names, if something listens
 /// there (a file left by an app that crashed names a closed port).
 fn discover_app() -> Option<u16> {
-    let port = solidcraft_engine::control_auth::APP.read_current_port()?;
+    let port = solidcraft_engine::control_auth::read_current_port()?;
     let addr = std::net::SocketAddr::from(([127, 0, 0, 1], port));
     std::net::TcpStream::connect_timeout(&addr, std::time::Duration::from_millis(500)).ok().map(|_| port)
 }
@@ -985,7 +768,7 @@ fn bench_ops(mut s: Session, script: &str) -> Result<Session, String> {
         let r = s.execute(id, p).map_err(|e| format!("{id}: {e}"))?;
         let ms = t.elapsed().as_secs_f64() * 1000.0;
         let t = std::time::Instant::now();
-        s.world_state().map_err(|e| e.to_string())?.warm_meshes(|| true);
+        s.world_state().warm_meshes(|| true);
         let view_ms = t.elapsed().as_secs_f64() * 1000.0;
         println!("{}", json!({"step": "op", "command": id, "ms": ms, "view_ms": view_ms}));
         Ok(r)
@@ -1005,11 +788,11 @@ fn bench_ops(mut s: Session, script: &str) -> Result<Session, String> {
 
 /// Separate file reading, JSON decoding/repair, timeline evaluation and display meshing.
 pub(crate) fn cmd_bench_open(args: &[String]) -> Result<(), String> {
-    let path = args.first().ok_or("usage: solidcraft-cli bench-open <design.sc | part.step> [--parse-only]")?;
+    let path = args.first().ok_or("usage: solidcraft-cli bench-open <design.solidcraft | part.step> [--parse-only]")?;
     let t = std::time::Instant::now();
     let step = solidcraft_engine::io::is_step_path(path);
-    let kind = if step { solidcraft_engine::io::limits::Kind::Step } else { solidcraft_engine::io::limits::Kind::Design };
-    let bytes = solidcraft_engine::io::limits::read(path, kind).map_err(|e| format!("{path}: {e}"))?;
+    let limit = if step { solidcraft_engine::io::MAX_STEP_BYTES } else { solidcraft_engine::io::MAX_DESIGN_BYTES };
+    let bytes = solidcraft_engine::io::vfs::read(path, limit).map_err(|e| format!("{path}: {e}"))?;
     let read_ms = t.elapsed().as_secs_f64() * 1000.0;
     println!("{}", json!({"step": "read", "ms": read_ms, "bytes": bytes.len()}));
     let t = std::time::Instant::now();
@@ -1031,7 +814,7 @@ pub(crate) fn cmd_bench_open(args: &[String]) -> Result<(), String> {
         return Ok(());
     }
     let t = std::time::Instant::now();
-    let s = Session::opened_at(doc, saved.as_ref(), (!step).then_some(path.as_str()));
+    let s = Session::opened(doc, saved.as_ref());
     drop(read);
     // Taken from the file: nothing evaluated (SOLIDCRAFT_NO_MODEL_CACHE evaluates anyway), or
     // only the features whose state a thinned file left out.
@@ -1041,7 +824,7 @@ pub(crate) fn cmd_bench_open(args: &[String]) -> Result<(), String> {
         println!("{}", json!({"step": "feature", "id": r.id, "name": r.name, "ms": r.ms, "error": r.error}));
     }
     let t = std::time::Instant::now();
-    let st = s.world_state().map_err(|e| e.to_string())?;
+    let st = s.world_state();
     let place_ms = t.elapsed().as_secs_f64() * 1000.0;
     // As the desktop app prepares a design it opened.
     st.warm_meshes(|| true);
@@ -1051,13 +834,13 @@ pub(crate) fn cmd_bench_open(args: &[String]) -> Result<(), String> {
         json!({"step": "mesh", "ms": t.elapsed().as_secs_f64() * 1000.0, "place_ms": place_ms, "bodies": st.bodies.len(), "triangles": triangles})
     );
     let flag = |name: &str| args.iter().position(|a| a == name);
-    // `--save PATH`: save the opened design without its model cache (to PATH.plain.sc) and
+    // `--save PATH`: save the opened design without its model cache (to PATH.plain.solidcraft) and
     // as the app does, with it, then read the cache back.
     let s = match flag("--save").and_then(|i| args.get(i + 1)) {
         Some(out) => {
             let mut s = s;
             // Without the cache first, for comparison.
-            let plain = format!("{out}.plain.{}", solidcraft_engine::io::DESIGN_EXT);
+            let plain = format!("{out}.plain.solidcraft");
             let t = std::time::Instant::now();
             s.execute("file.save_as", &json!({"path": plain, "cache": false})).map_err(|e| e.to_string())?;
             let plain_ms = t.elapsed().as_secs_f64() * 1000.0;
@@ -1111,7 +894,7 @@ pub(crate) fn cmd_bench_open(args: &[String]) -> Result<(), String> {
         let t = std::time::Instant::now();
         s.execute("parameters.change", &json!({"name": name, "expression": expr})).map_err(|e| e.to_string())?;
         let eval_ms = t.elapsed().as_secs_f64() * 1000.0;
-        let st = s.world_state().map_err(|e| e.to_string())?;
+        let st = s.world_state();
         let t = std::time::Instant::now();
         st.warm_meshes(|| true);
         let mesh_ms = t.elapsed().as_secs_f64() * 1000.0;

apps/solidcraft-cli/src/oracle.rs

@@ -5,7 +5,7 @@
 #![allow(clippy::needless_range_loop)]
 
 use serde_json::{Value, json};
-use solidcore_record::Vec3;
+use solidcraft_engine::geom::Vec3;
 
 use crate::spatial::{self, Tri};
 use crate::{read_json, recipe};
@@ -13,28 +13,28 @@ use crate::{read_json, recipe};
 /// Default relative tolerance for volume and area (our curved-face tessellation is within ~2e-4).
 pub const REL_TOL: f64 = 1e-3;
 /// Default tolerance for centre of mass and bounding box, as a fraction of the bbox diagonal.
-pub(crate) const ABS_FRAC: f64 = 1e-3;
+const ABS_FRAC: f64 = 1e-3;
 /// Chord tolerance used to triangulate our part for the surface-distance check (mm).
 const MESH_TOL: f64 = 0.01;
 /// Relative tolerance on the principal second moments of the two triangulations.
 const INERTIA_REL: f64 = 2e-3;
 
 /// What SolidCraft built: totals over every body.
-pub(crate) struct Got {
-    pub(crate) body_count: usize,
-    pub(crate) volume: f64,
-    pub(crate) area: f64,
-    pub(crate) com: [f64; 3],
-    pub(crate) bbox: ([f64; 3], [f64; 3]),
-    pub(crate) faces: u64,
+struct Got {
+    body_count: usize,
+    volume: f64,
+    area: f64,
+    com: [f64; 3],
+    bbox: ([f64; 3], [f64; 3]),
+    faces: u64,
 }
 
-pub(crate) fn v3(v: &Value) -> Option<[f64; 3]> {
+fn v3(v: &Value) -> Option<[f64; 3]> {
     let a = v.as_array()?;
     Some([a.first()?.as_f64()?, a.get(1)?.as_f64()?, a.get(2)?.as_f64()?])
 }
 
-pub(crate) fn totals(m: &Value) -> Got {
+fn totals(m: &Value) -> Got {
     let bodies = m["bodies"].as_array().cloned().unwrap_or_default();
     let (mut volume, mut area, mut faces) = (0.0, 0.0, 0);
     let mut moment = [0.0; 3];
@@ -57,21 +57,21 @@ pub(crate) fn totals(m: &Value) -> Got {
     Got { body_count: bodies.len(), volume, area, com, bbox: (lo, hi), faces }
 }
 
-pub(crate) struct Checks {
-    pub(crate) list: Vec<Value>,
-    pub(crate) pass: bool,
+struct Checks {
+    list: Vec<Value>,
+    pass: bool,
 }
 
 impl Checks {
-    pub(crate) fn push(&mut self, what: &str, got: Value, want: Value, ok: bool) {
+    fn push(&mut self, what: &str, got: Value, want: Value, ok: bool) {
         self.pass &= ok;
         self.list.push(json!({"check": what, "got": got, "want": want, "ok": ok}));
     }
-    pub(crate) fn rel(&mut self, what: &str, g: f64, w: Option<f64>, rel: f64) {
+    fn rel(&mut self, what: &str, g: f64, w: Option<f64>, rel: f64) {
         let ok = w.is_some_and(|w| g.is_finite() && (g - w).abs() <= rel * w.abs().max(1.0));
         self.push(what, json!(g), json!(w), ok);
     }
-    pub(crate) fn vec(&mut self, what: &str, g: [f64; 3], w: Option<[f64; 3]>, tol: f64) {
+    fn vec(&mut self, what: &str, g: [f64; 3], w: Option<[f64; 3]>, tol: f64) {
         let ok = w.is_some_and(|w| g.iter().zip(w).all(|(g, w)| g.is_finite() && (g - w).abs() <= tol));
         self.push(what, json!(g), json!(w), ok);
     }
@@ -186,8 +186,8 @@ fn step_export_check(s: &solidcraft_engine::Session, volume: f64) -> (bool, Stri
 /// Our part as a triangle soup (curved faces refined onto the surface).
 fn our_mesh(s: &solidcraft_engine::Session) -> Result<Vec<Tri>, String> {
     let mut ours: Vec<Tri> = Vec::new();
-    for b in &s.world_state().map_err(|e| e.to_string())?.bodies {
-        let m = b.body.mesh(&solidcraft_engine::kernel::MeshTolerance::chord(MESH_TOL)).map_err(|e| e.to_string())?;
+    for b in &s.world_state().bodies {
+        let m = b.body.tessellate_with(MESH_TOL, true).map_err(|e| e.to_string())?;
         let p = |i: u32| m.positions.get(i as usize).map(|v: &Vec3| [v.x, v.y, v.z]);
         for t in &m.triangles {
             if let (Some(a), Some(b), Some(c)) = (p(t[0]), p(t[1]), p(t[2])) {

apps/solidcraft-cli/src/profiling.rs

@@ -1,50 +0,0 @@
-//! `--profile` and `--profile-out FILE` for `run`, `eval` and `bench-open` (and
-//! `SOLIDCRAFT_PROFILE=1` for any command): record where the time goes, the kernel's calls to the
-//! commands, print the table to stderr when the command ends (stdout stays the command's JSON)
-//! and write the spans as a Chrome trace for chrome://tracing or Perfetto.
-
-use solidcraft_engine::profile;
-
-/// Rows the table prints.
-const TOP: usize = 30;
-
-/// A recording that prints its table when finished.
-pub struct Profiling {
-    trace: Option<String>,
-}
-
-/// Start recording when `args` (after the command) ask for it, or `SOLIDCRAFT_PROFILE` does.
-pub fn start(args: &[String]) -> Result<Option<Profiling>, String> {
-    let trace = match args.iter().position(|a| a == "--profile-out") {
-        Some(i) => match args.get(i + 1) {
-            Some(f) if !f.starts_with("--") => Some(f.clone()),
-            _ => return Err("--profile-out needs a FILE".into()),
-        },
-        None => None,
-    };
-    let asked = trace.is_some() || args.iter().any(|a| a == "--profile");
-    if !asked && !solidcraft_engine::timing::profile_from_env() {
-        return Ok(None);
-    }
-    if !profile::COMPILED {
-        return Err("this solidcraft-cli was built without the profiler (its `profile` feature)".into());
-    }
-    profile::reset();
-    profile::set_enabled(true);
-    Ok(Some(Profiling { trace }))
-}
-
-impl Profiling {
-    /// Stop recording, print the table on stderr and write the trace.
-    pub fn finish(self) -> Result<(), String> {
-        profile::set_enabled(false);
-        eprint!("{}", profile::report().table(TOP));
-        if let Some(path) = self.trace {
-            let mut bytes = Vec::new();
-            profile::write_chrome_trace(&mut bytes).map_err(|e| format!("{path}: {e}"))?;
-            std::fs::write(&path, bytes).map_err(|e| format!("{path}: {e}"))?;
-            eprintln!("profile: trace written to {path} (open it in chrome://tracing or ui.perfetto.dev)");
-        }
-        Ok(())
-    }
-}

apps/solidcraft-cli/src/render.rs

@@ -1,86 +1,32 @@
 //! Complete headless image-job workflow through the same engine commands as the UI/MCP.
-use serde_json::{Value, json};
+use serde_json::json;
 use solidcraft_engine::{
-    Session,
-    doc::render_settings::{RenderJob, RenderSetup},
-    render::job::{CpuHost, JobId, Phase, ToneMap},
+    doc::render_settings::RenderSetup,
+    render::job::{CpuHost, JobId, Phase},
 };
 
-/// Only explicit runtime CLI flags are stored here. A typed setup owns these
-/// values even when a supplied flag happens to match the saved value.
-#[derive(Default)]
-struct RuntimeOptions {
-    progressive: bool,
-    transparent: bool,
-    samples: Option<u32>,
-    max_depth: Option<u32>,
-    seed: Option<u32>,
-    lighting: Option<String>,
-    tone_map: Option<ToneMap>,
-    environment: Option<String>,
-}
-
-impl RuntimeOptions {
-    fn explicit_flag(&self) -> Option<&'static str> {
-        [
-            (self.progressive, "--progressive"),
-            (self.transparent, "--transparent"),
-            (self.samples.is_some(), "--samples"),
-            (self.max_depth.is_some(), "--max-depth"),
-            (self.seed.is_some(), "--seed"),
-            (self.lighting.is_some(), "--lighting"),
-            (self.tone_map.is_some(), "--tone-map"),
-            (self.environment.is_some(), "--environment"),
-        ]
-        .into_iter()
-        .find_map(|(present, flag)| present.then_some(flag))
-    }
-
-    fn request(&self, session: &Session, settings: RenderSetup) -> Result<(Value, bool), String> {
-        if let Some(job) = &settings.job {
-            if let Some(flag) = self.explicit_flag() {
-                return Err(format!("{flag} cannot accompany a typed saved render setup; change the saved job options instead"));
-            }
-            settings.validate().map_err(|e| e.to_string())?;
-            session.doc.render.validate_resources(&settings).map_err(|e| e.to_string())?;
-            let needs_gpu = matches!(job, RenderJob::GpuPath { .. });
-            return Ok((json!({"settings":settings}), needs_gpu));
-        }
-        // Legacy setups and unnamed requests retain their runtime wire contract.
-        settings.validate().map_err(|e| e.to_string())?;
-        let mut params = json!({"settings":settings,"transparent_background":self.transparent,
-            "progressive":self.progressive,"samples":self.samples,"max_depth":self.max_depth,"seed":self.seed});
-        if let Some(path) = &self.lighting {
-            let text = solidcraft_engine::io::vfs::read_to_string(path, 65536).map_err(|e| format!("could not read lighting: {e}"))?;
-            let lighting: solidcraft_engine::render::job::StudioLighting = serde_json::from_str(&text).map_err(|e| e.to_string())?;
-            params["lighting"] = json!(lighting);
-        }
-        if let Some(tone_map) = self.tone_map {
-            params["tone_map"] = json!(tone_map);
-        }
-        if let Some(path) = &self.environment {
-            let text = solidcraft_engine::io::vfs::read_to_string(path, 65536).map_err(|e| format!("could not read environment: {e}"))?;
-            params["environment"] = serde_json::from_str(&text).map_err(|e| e.to_string())?;
-        }
-        Ok((params, self.progressive))
-    }
-}
-
 pub fn run(args: &[String]) -> Result<(), String> {
     let input = args.first().filter(|p| !p.starts_with('-')).ok_or("render requires an input design or script")?;
     let mut out = None;
     let mut setup = None;
     let mut width = None;
     let mut height = None;
+    let mut progressive = false;
+    let mut samples = None;
+    let mut max_depth = None;
+    let mut seed = None;
     let mut exposure = None;
-    let mut runtime = RuntimeOptions::default();
+    let mut lighting = None;
+    let mut tone_map = None;
+    let mut environment = None;
+    let mut transparent = false;
     let mut overwrite = false;
     let mut timeout = 120u64;
     let mut i = 1;
     while let Some(arg) = args.get(i) {
         match arg.as_str() {
-            "--progressive" => runtime.progressive = true,
-            "--transparent" => runtime.transparent = true,
+            "--progressive" => progressive = true,
+            "--transparent" => transparent = true,
             "--overwrite" => overwrite = true,
             "--out" | "--setup" | "--width" | "--height" | "--timeout" | "--samples" | "--max-depth" | "--seed" | "--exposure" | "--lighting"
             | "--tone-map" | "--environment" => {
@@ -91,17 +37,23 @@ pub fn run(args: &[String]) -> Result<(), String> {
                     "--setup" => setup = Some(value.clone()),
                     "--width" => width = Some(value.parse::<u32>().map_err(|_| "invalid width")?),
                     "--height" => height = Some(value.parse::<u32>().map_err(|_| "invalid height")?),
-                    "--samples" => runtime.samples = Some(value.parse::<u32>().map_err(|_| "invalid samples")?),
-                    "--max-depth" => runtime.max_depth = Some(value.parse::<u32>().map_err(|_| "invalid depth")?),
-                    "--seed" => runtime.seed = Some(value.parse::<u32>().map_err(|_| "invalid seed")?),
+                    "--samples" => samples = Some(value.parse::<u32>().map_err(|_| "invalid samples")?),
+                    "--max-depth" => max_depth = Some(value.parse::<u32>().map_err(|_| "invalid depth")?),
+                    "--seed" => seed = Some(value.parse::<u32>().map_err(|_| "invalid seed")?),
                     "--exposure" => exposure = Some(value.parse::<f64>().map_err(|_| "invalid exposure")?),
-                    // Defer file reads until a saved job has rejected conflicting controls.
-                    "--environment" => runtime.environment = Some(value.clone()),
-                    "--lighting" => runtime.lighting = Some(value.clone()),
+                    "--environment" => {
+                        let text =
+                            solidcraft_engine::io::vfs::read_to_string(value, 65536).map_err(|e| format!("could not read environment: {e}"))?;
+                        environment = Some(serde_json::from_str::<serde_json::Value>(&text).map_err(|e| e.to_string())?);
+                    }
+                    "--lighting" => {
+                        let text = solidcraft_engine::io::vfs::read_to_string(value, 65536).map_err(|e| format!("could not read lighting: {e}"))?;
+                        lighting = Some(serde_json::from_str::<solidcraft_engine::render::job::StudioLighting>(&text).map_err(|e| e.to_string())?);
+                    }
                     "--tone-map" => {
-                        runtime.tone_map = Some(match value.as_str() {
-                            "reinhard" => ToneMap::Reinhard,
-                            "aces_fitted" => ToneMap::AcesFitted,
+                        tone_map = Some(match value.as_str() {
+                            "reinhard" => solidcraft_engine::render::job::ToneMap::Reinhard,
+                            "aces_fitted" => solidcraft_engine::render::job::ToneMap::AcesFitted,
                             _ => return Err("tone-map must be reinhard or aces_fitted".into()),
                         })
                     }
@@ -117,10 +69,21 @@ pub fn run(args: &[String]) -> Result<(), String> {
     }
     let out = out.ok_or("render requires --out FILE.png")?;
     let mut session = crate::load(input)?;
-    let mut settings = if let Some(name) = setup.as_deref() {
-        session.doc.render.setups.get(name).cloned().ok_or("no saved render setup with that name")?
+    session.set_render_job_host(Some(CpuHost::for_platform().map_err(|e| e.to_string())?)).map_err(|e| e.to_string())?;
+    if progressive {
+        session.register_render_job_host(solidcraft_gpu::path::host().map_err(|e| e.to_string())?).map_err(|e| e.to_string())?;
+    }
+    session.execute("render.scene", &json!({})).map_err(|e| e.to_string())?;
+    let mut settings = if let Some(name) = setup {
+        session.doc.render.setups.get(&name).cloned().ok_or("no saved render setup with that name")?
     } else {
-        RenderSetup::default()
+        let mut settings = RenderSetup::default();
+        if let Some(camera) = session.camera {
+            settings.camera = camera;
+        } else {
+            settings.camera.fit(&solidcraft_engine::product_scene::extract(&session).map_err(|e| e.to_string())?.bounds);
+        }
+        settings
     };
     if let Some(width) = width {
         settings.width = width;
@@ -131,24 +94,7 @@ pub fn run(args: &[String]) -> Result<(), String> {
     if let Some(exposure) = exposure {
         settings.exposure_ev = exposure;
     }
-    // Resolve saved intent before opening a GPU or explicitly settling geometry.
-    // Width/height/exposure only change this validated inline settings clone.
-    let (mut params, needs_gpu) = runtime.request(&session, settings)?;
-    session.set_render_job_host(Some(CpuHost::for_platform().map_err(|e| e.to_string())?)).map_err(|e| e.to_string())?;
-    if needs_gpu {
-        session.register_render_job_host(solidcraft_gpu::path::host().map_err(|e| e.to_string())?).map_err(|e| e.to_string())?;
-    }
-    session.execute("render.scene", &json!({})).map_err(|e| e.to_string())?;
-    if setup.is_none() {
-        let camera = if let Some(camera) = session.camera {
-            camera
-        } else {
-            let mut camera = RenderSetup::default().camera;
-            camera.fit(&solidcraft_engine::product_scene::extract(&session).map_err(|e| e.to_string())?.bounds);
-            camera
-        };
-        params["settings"]["camera"] = json!(camera);
-    }
+    let params = json!({"settings":settings,"transparent_background":transparent,"progressive":progressive,"samples":samples,"max_depth":max_depth,"seed":seed,"lighting":lighting,"tone_map":tone_map,"environment":environment});
     let preflight = session.execute("render.preflight", &params).map_err(|e| e.to_string())?;
     let started = session.execute("render.start", &params).map_err(|e| e.to_string())?;
     let id: JobId = serde_json::from_value(started["job"].clone()).map_err(|e| e.to_string())?;

apps/solidcraft-cli/tests/action_matrix.rs

@@ -21,7 +21,6 @@
 //! Each design runs in a child process (this test binary, [`action_matrix_worker`]) so an action
 //! that hangs or aborts is recorded as such and the rest of the design still runs.
 
-use solidcraft_engine::geom::prelude::*;
 use std::collections::{BTreeMap, BTreeSet};
 use std::io::{BufRead, Write};
 use std::path::{Path, PathBuf};
@@ -29,10 +28,10 @@ use std::process::{Command, Stdio};
 use std::time::{Duration, Instant};
 
 use serde_json::{Value, json};
-use solidcore_record::Vec3;
 use solidcraft_engine::Session;
 use solidcraft_engine::doc::kernel::{FaceSurface, face_surface};
 use solidcraft_engine::doc::{FaceAttachmentStatus, ModelBody, naming};
+use solidcraft_engine::geom::Vec3;
 
 /// One in this many actions runs on pull requests (by a stable hash of its key).
 const PR_SAMPLE: u64 = 40;
@@ -93,7 +92,7 @@ fn designs() -> Vec<(String, PathBuf)> {
     add("regressions", root.join("examples/regressions"), "json");
     add("demo", root.join("examples/demo"), "json");
     add("typical", root.join("tests/action_matrix/designs"), "json");
-    add("demo", root.join("tests/action_matrix/designs"), solidcraft_engine::io::DESIGN_EXT);
+    add("demo", root.join("tests/action_matrix/designs"), "solidcraft");
     let mut cases: Vec<PathBuf> =
         std::fs::read_dir(root.join("tests/oracle")).unwrap().flatten().map(|e| e.path()).filter(|p| p.join("recipe.json").is_file()).collect();
     cases.sort();
@@ -106,7 +105,7 @@ fn designs() -> Vec<(String, PathBuf)> {
 /// Build a design from its file.
 fn load(path: &Path) -> Result<Session, String> {
     let mut s = Session::default();
-    if solidcraft_engine::io::is_design_container_path(path) {
+    if path.extension().is_some_and(|x| x == "solidcraft") {
         s.execute("doc.open", &json!({"path": path.to_string_lossy()})).map_err(|e| e.to_string())?;
         return Ok(s);
     }
@@ -197,7 +196,7 @@ fn round3(x: f64) -> f64 {
 
 /// Every action on every entity of the design's final bodies, in a fixed order.
 fn actions(s: &Session) -> Vec<Action> {
-    let st = s.world_state().unwrap();
+    let st = s.world_state();
     let placed = s.placed_document();
     let paths: BTreeMap<String, Vec<u64>> =
         placed.body_frames_with_source(&s.model.state()).into_iter().map(|(world, _, _, path, _)| (world, path)).collect();
@@ -396,10 +395,8 @@ fn actions(s: &Session) -> Vec<Action> {
             let r = round3((shortest * 0.1).max(0.01));
             let mut add = |action, act| out.push(Action { entity: entity.clone(), action, act });
             if !smooth(e, mid) {
-                // The midpoint is interior to this edge, but other bodies (including component
-                // copies in their local frames) can have coincident edges. Retain the picked body.
-                add("edge.fillet", Act::Run("solid.fillet", json!({"body": world, "edges": [pt(mid)], "radius": r})));
-                add("edge.chamfer", Act::Run("solid.chamfer", json!({"body": world, "edges": [pt(mid)], "distance": r})));
+                add("edge.fillet", Act::Run("solid.fillet", json!({"edges": [pt(mid)], "radius": r})));
+                add("edge.chamfer", Act::Run("solid.chamfer", json!({"edges": [pt(mid)], "distance": r})));
             }
             let dir = straight(pts);
             if dir.is_some() {
@@ -1281,41 +1278,6 @@ fn rectangle(plane: Value, p0: [f64; 2], p1: [f64; 2]) -> [Value; 3] {
     ]
 }
 
-#[test]
-fn edge_round_actions_keep_the_picked_body() {
-    for (corner, length) in [([10, 0, 20], 4), ([0, 0, 0], 20)] {
-        let mut s = Session::default();
-        s.execute("solid.box", &json!({"length": 20, "width": 20, "height": 20, "body_name": "Plate"})).unwrap();
-        s.execute(
-            "solid.box",
-            &json!({"corner": corner, "length": length, "width": length, "height": length, "body_name": "Block", "operation": "new"}),
-        )
-        .unwrap();
-        let mut tried = 0;
-        for a in actions(&s) {
-            if !a.entity.starts_with("Plate/") || !matches!(a.action, "edge.chamfer" | "edge.fillet") {
-                continue;
-            }
-            let Act::Run(id, ref p) = a.act else { continue };
-            let q = &p["edges"][0];
-            let x = q[0].as_f64().unwrap();
-            if q[1] != 0.0 || q[2] != 20.0 || !(0.0..20.0).contains(&x) {
-                continue;
-            }
-            // Block either meets this midpoint or coincides with the whole edge.
-            assert_eq!(p["body"], "Plate", "{}: {p}", a.action);
-            assert_eq!(q, &json!([10.0, 0.0, 20.0]));
-            let mut unscoped = p.clone();
-            unscoped.as_object_mut().unwrap().remove("body");
-            let err = s.scratch().execute(id, &unscoped).unwrap_err().to_string();
-            assert!(err.contains("[10, 0, 20] lies on edges of 2 bodies, Plate and Block"), "{err}");
-            perform(&mut s.scratch(), &a.act, &errors(&s)).unwrap();
-            tried += 1;
-        }
-        assert_eq!(tried, 2);
-    }
-}
-
 #[test]
 fn a_fillet_or_chamfer_on_one_edge_ending_at_a_cylinder() {
     for (cmd, size) in [("solid.fillet", "radius"), ("solid.chamfer", "distance")] {
@@ -1339,9 +1301,7 @@ fn a_fillet_or_chamfer_on_one_edge_ending_at_a_cylinder() {
 fn a_round_on_a_knuckle_cap_circle() {
     for (cmd, size, removed) in [("solid.fillet", "radius", (2.4, 2.8)), ("solid.chamfer", "distance", (5.6, 6.3))] {
         let mut s = load(&root().join("tests/oracle/63-hinge-knuckle/recipe.json")).unwrap();
-        let volume = |s: &Session| {
-            s.model.state().bodies.iter().map(|b| b.body.mesh(&solidcraft_kernel::MeshTolerance::chord(0.001)).unwrap().measure().volume).sum::<f64>()
-        };
+        let volume = |s: &Session| s.model.state().bodies.iter().map(|b| b.body.tessellate(0.001).unwrap().measure().volume).sum::<f64>();
         let before = volume(&s);
         s.execute(cmd, &json!({"edges": [[40.0, 29.837_722, 6.449_490]], size: 0.728})).unwrap_or_else(|e| panic!("{cmd}: {e}"));
         check(&s, 0, &BTreeMap::new()).unwrap_or_else(|(kind, e)| panic!("{cmd}: {kind}: {e}"));
@@ -1361,9 +1321,7 @@ fn a_round_on_a_knuckle_cap_circle() {
 #[test]
 fn a_hair_thin_hole_on_a_ledge_beside_a_loft_cut() {
     let mut s = load(&root().join("examples/regressions/loft_cut_beside_round_hole.json")).unwrap();
-    let volume = |s: &Session| {
-        s.model.state().bodies.iter().map(|b| b.body.mesh(&solidcraft_kernel::MeshTolerance::chord(0.005)).unwrap().measure().volume).sum::<f64>()
-    };
+    let volume = |s: &Session| s.model.state().bodies.iter().map(|b| b.body.tessellate_with(0.005, true).unwrap().measure().volume).sum::<f64>();
     let before = volume(&s);
     s.execute("solid.hole", &json!({"diameter": 0.133, "position": [357.22, -150.993_333, 730.0]})).unwrap();
     check(&s, 0, &BTreeMap::new()).unwrap_or_else(|(kind, e)| panic!("{kind}: {e}"));
@@ -1380,9 +1338,7 @@ fn a_hair_thin_hole_on_a_ledge_beside_a_loft_cut() {
 #[test]
 fn a_small_hole_through_the_wall_of_a_plastic_rest() {
     let mut s = load(&root().join("apps/solidcraft-cli/tests/corpus/modern-plastic.solidcraft")).unwrap();
-    let volume = |s: &Session| {
-        s.model.state().bodies.iter().map(|b| b.body.mesh(&solidcraft_kernel::MeshTolerance::chord(0.002)).unwrap().measure().volume).sum::<f64>()
-    };
+    let volume = |s: &Session| s.model.state().bodies.iter().map(|b| b.body.tessellate_with(0.002, true).unwrap().measure().volume).sum::<f64>();
     let before = volume(&s);
     s.execute("solid.hole", &json!({"diameter": 0.8, "position": [63.069_841_5, 28.333_333, 4.0]})).unwrap();
     check(&s, 0, &BTreeMap::new()).unwrap_or_else(|(kind, e)| panic!("{kind}: {e}"));
@@ -1397,9 +1353,7 @@ fn a_small_hole_through_the_wall_of_a_plastic_rest() {
 #[test]
 fn a_hole_square_to_a_45_degree_flange() {
     let mut s = load(&root().join("tests/oracle/70-sm-flange-45/recipe.json")).unwrap();
-    let volume = |s: &Session| {
-        s.model.state().bodies.iter().map(|b| b.body.mesh(&solidcraft_kernel::MeshTolerance::chord(0.002)).unwrap().measure().volume).sum::<f64>()
-    };
+    let volume = |s: &Session| s.model.state().bodies.iter().map(|b| b.body.tessellate_with(0.002, true).unwrap().measure().volume).sum::<f64>();
     let before = volume(&s);
     s.execute("solid.hole", &json!({"diameter": 3.448, "position": [66.666_667, -4.511_845, 4.511_845]})).unwrap();
     check(&s, 0, &BTreeMap::new()).unwrap_or_else(|(kind, e)| panic!("{kind}: {e}"));
@@ -1567,7 +1521,7 @@ fn sketches_on_loft_and_sweep_faces() {
 #[test]
 fn press_pull_on_the_pi_case_floor() {
     reproduces(
-        Some("tests/action_matrix/designs/pi-case.sc"),
+        Some("tests/action_matrix/designs/pi-case.solidcraft"),
         json!([{"command": "solid.press_pull", "params": {"face": [30, 20, 0], "distance": 1}}]),
     );
 }
@@ -1657,7 +1611,7 @@ impl TipConstruction {
             other => panic!("expected an axis, got {other:?}"),
         }
     }
-    fn plane(&self) -> solidcore_record::Plane {
+    fn plane(&self) -> solidcraft_engine::geom::Plane {
         match &self.0 {
             solidcraft_engine::doc::construct::ConstructGeom::Plane(p) => *p,
             other => panic!("expected a plane, got {other:?}"),
@@ -1737,7 +1691,7 @@ fn the_ribbed_lid_builds_the_same_body_every_time() {
         st.bodies
             .iter()
             .map(|b| {
-                let mesh = b.body.mesh(&solidcraft_kernel::MeshTolerance::chord(0.1)).unwrap();
+                let mesh = b.body.tessellate(0.1).unwrap();
                 let bits = mesh.positions.iter().fold(0u64, |acc, p| {
                     acc.rotate_left(7).wrapping_add(p.x.to_bits() ^ p.y.to_bits().rotate_left(21) ^ p.z.to_bits().rotate_left(42))
                 });

apps/solidcraft-cli/tests/bracket_example.rs

@@ -4,7 +4,7 @@
 use std::f64::consts::PI;
 
 use serde_json::Value;
-use solidcore_record::Vec3;
+use solidcraft_engine::geom::Vec3;
 use solidcraft_engine::{Session, io, kernel};
 
 fn assert_two_through_holes(session: &Session, stage: &str) {
@@ -26,8 +26,8 @@ fn assert_two_through_holes(session: &Session, stage: &str) {
     let expected = 2.0 * PI * 4.0_f64.powi(2) * 6.0;
     assert!((removed - expected).abs() < expected * 1e-3, "{stage}: the two holes remove {removed} mm³, expected {expected} mm³");
 
-    let before_mesh = uncut.mesh(&solidcraft_kernel::MeshTolerance::chord(0.01)).unwrap();
-    let after_mesh = bracket.mesh(&solidcraft_kernel::MeshTolerance::chord(0.01)).unwrap();
+    let before_mesh = uncut.tessellate(0.01).unwrap();
+    let after_mesh = bracket.tessellate(0.01).unwrap();
     let down = Vec3::new(0.0, 0.0, -1.0);
     for y in [-15.0, -45.0] {
         let center = Vec3::new(25.0, y, 1.0);

apps/solidcraft-cli/tests/corpus/README.md

@@ -1,12 +1,10 @@
 # Design file corpus
 
 Designs saved by older SolidCraft builds. `tests/design_corpus.rs` opens each one with the
-current build and checks that it is upgraded to the current file format, that it evaluates
-(a feature may fail only by asking for a reference it lost to be picked again; what it rebuilds
-to is today's), and that damaged and hostile variants of it never panic. The `.expected.json`
-next to each is `solidcraft-cli eval` of that file by the build that saved it (bodies, volumes,
-areas, world bounding boxes), kept as a record of what that build made; no test compares with
-it.
+current build and checks that it evaluates as it did when saved (the `.expected.json` next to
+it is `solidcraft-cli eval` of that file by the build that saved it: bodies, volumes, areas,
+world bounding boxes), that it is upgraded to the current file format, and that damaged and
+hostile variants of it never panic.
 
 | File | Saved by | Era |
 |---|---|---|

apps/solidcraft-cli/tests/corpus/issue-489-stacked-join.expected.json

@@ -90,6 +90,10 @@
   ],
   "timeline": [
     {
+      "boolean_diagnostics": {
+        "events": [],
+        "truncated": false
+      },
       "error": null,
       "id": 1,
       "ms": 0.131943,
@@ -100,6 +104,10 @@
       "warning": null
     },
     {
+      "boolean_diagnostics": {
+        "events": [],
+        "truncated": false
+      },
       "error": null,
       "id": 2,
       "ms": 1.0812709999999999,
@@ -110,6 +118,10 @@
       "warning": null
     },
     {
+      "boolean_diagnostics": {
+        "events": [],
+        "truncated": false
+      },
       "error": null,
       "id": 3,
       "ms": 0.450002,
@@ -120,6 +132,10 @@
       "warning": null
     },
     {
+      "boolean_diagnostics": {
+        "events": [],
+        "truncated": false
+      },
       "error": null,
       "id": 4,
       "ms": 5.191514000000001,

apps/solidcraft-cli/tests/corpus/issue-616-lid-ribs.expected.json

@@ -54,6 +54,10 @@
   ],
   "timeline": [
     {
+      "boolean_diagnostics": {
+        "events": [],
+        "truncated": false
+      },
       "error": null,
       "id": 1,
       "ms": 1.178957,
@@ -64,6 +68,10 @@
       "warning": null
     },
     {
+      "boolean_diagnostics": {
+        "events": [],
+        "truncated": false
+      },
       "error": null,
       "id": 2,
       "ms": 83.24342399999999,
@@ -74,6 +82,10 @@
       "warning": null
     },
     {
+      "boolean_diagnostics": {
+        "events": [],
+        "truncated": false
+      },
       "error": null,
       "id": 3,
       "ms": 0.150889,
@@ -84,6 +96,10 @@
       "warning": null
     },
     {
+      "boolean_diagnostics": {
+        "events": [],
+        "truncated": false
+      },
       "error": null,
       "id": 4,
       "ms": 94.465481,
@@ -94,6 +110,10 @@
       "warning": null
     },
     {
+      "boolean_diagnostics": {
+        "events": [],
+        "truncated": false
+      },
       "error": null,
       "id": 5,
       "ms": 50.426736,
@@ -104,6 +124,10 @@
       "warning": null
     },
     {
+      "boolean_diagnostics": {
+        "events": [],
+        "truncated": false
+      },
       "error": null,
       "id": 6,
       "ms": 40.383005,
@@ -114,6 +138,10 @@
       "warning": null
     },
     {
+      "boolean_diagnostics": {
+        "events": [],
+        "truncated": false
+      },
       "error": null,
       "id": 7,
       "ms": 59.041461000000005,
@@ -124,6 +152,18 @@
       "warning": null
     },
     {
+      "boolean_diagnostics": {
+        "events": [
+          {
+            "face_shift_mm": 0.0,
+            "rotation_rad": 0.0,
+            "strategy": "planar_fallback",
+            "tolerance_mm": 0.0,
+            "translation_mm": 0.0
+          }
+        ],
+        "truncated": false
+      },
       "error": null,
       "id": 8,
       "ms": 562.5477970000001,
@@ -131,9 +171,13 @@
       "rolled_back": false,
       "suppressed": false,
       "type": "BoxFeature",
-      "warning": null
+      "warning": "Boolean retry: exact planar fallback (no displacement)"
     },
     {
+      "boolean_diagnostics": {
+        "events": [],
+        "truncated": false
+      },
       "error": null,
       "id": 9,
       "ms": 89.56076,
@@ -144,6 +188,10 @@
       "warning": null
     },
     {
+      "boolean_diagnostics": {
+        "events": [],
+        "truncated": false
+      },
       "error": null,
       "id": 10,
       "ms": 65.330634,
@@ -154,6 +202,10 @@
       "warning": null
     },
     {
+      "boolean_diagnostics": {
+        "events": [],
+        "truncated": false
+      },
       "error": null,
       "id": 11,
       "ms": 97.229403,

apps/solidcraft-cli/tests/corpus/move-bodies.expected.json

@@ -99,6 +99,10 @@
   ],
   "timeline": [
     {
+      "boolean_diagnostics": {
+        "events": [],
+        "truncated": false
+      },
       "error": null,
       "id": 1,
       "ms": 0.204585,
@@ -109,6 +113,10 @@
       "warning": null
     },
     {
+      "boolean_diagnostics": {
+        "events": [],
+        "truncated": false
+      },
       "error": null,
       "id": 2,
       "ms": 2.318662,
@@ -119,6 +127,10 @@
       "warning": null
     },
     {
+      "boolean_diagnostics": {
+        "events": [],
+        "truncated": false
+      },
       "error": null,
       "id": 3,
       "ms": 0.109196,
@@ -129,6 +141,10 @@
       "warning": null
     },
     {
+      "boolean_diagnostics": {
+        "events": [],
+        "truncated": false
+      },
       "error": null,
       "id": 4,
       "ms": 0.338859,
@@ -139,6 +155,10 @@
       "warning": null
     },
     {
+      "boolean_diagnostics": {
+        "events": [],
+        "truncated": false
+      },
       "error": null,
       "id": 5,
       "ms": 0.312259,
@@ -149,6 +169,10 @@
       "warning": null
     },
     {
+      "boolean_diagnostics": {
+        "events": [],
+        "truncated": false
+      },
       "error": null,
       "id": 6,
       "ms": 0.23144699999999999,

apps/solidcraft-cli/tests/design_corpus.rs

@@ -1,8 +1,6 @@
-//! Designs saved by older SolidCraft builds (tests/corpus, see its README) open, are upgraded to
-//! the current format and evaluate (what they rebuild to today is today's, not what the build
-//! that saved them made); damaged and hostile design files never panic.
+//! Designs saved by older SolidCraft builds (tests/corpus, see its README) open and evaluate as
+//! they did when they were saved; damaged and hostile design files never panic.
 
-use solidcraft_engine::geom::prelude::*;
 use std::path::{Path, PathBuf};
 
 use serde_json::{Value, json};
@@ -23,24 +21,67 @@ fn open(path: &Path) -> Session {
     s
 }
 
-/// Every corpus design opens, is upgraded to the current format, evaluates, and saves and reads
-/// back the same. A feature may fail only by asking for a reference it lost to be picked again
-/// (a name saved before format 14 finds nothing today).
+/// Differences that are deliberate behaviour changes made before the file format had versions
+/// (no migration can tell those files apart): (file, check, why).
+const KNOWN: [(&str, &str, &str); 2] = [
+    (
+        "m0-revolve-primitives",
+        "Body1 bbox",
+        "partial revolves turn toward the sketch normal since ac43365 (as most parametric CAD tools do); M0 turned them the other way",
+    ),
+    ("components-arm", "body_count", "Measure counted only the root component's bodies then; it measures every placed body now"),
+];
+
+fn known(file: &str, check: &str) -> bool {
+    KNOWN.iter().any(|(f, c, _)| *f == file && *c == check)
+}
+
+/// Volumes and areas then came from coarser tessellation (and curved booleans and fillets have
+/// become exact since): the same part within this relative tolerance (the oracle's).
+const REL: f64 = 1e-3;
+
+fn close(a: f64, b: f64, rel: f64) -> bool {
+    (a - b).abs() <= rel * b.abs().max(1.0)
+}
+
 #[test]
-fn old_designs_open_upgrade_and_evaluate() {
+fn old_designs_open_and_evaluate_as_saved() {
     let mut problems = Vec::new();
     for p in corpus() {
         let name = p.file_stem().unwrap_or_default().to_string_lossy().to_string();
+        let want: Value = serde_json::from_slice(&std::fs::read(p.with_extension("expected.json")).unwrap()).unwrap();
         let mut s = open(&p);
         for r in &s.model.results {
-            if let Some(e) = r.error.as_deref().filter(|e| solidcraft_engine::doc::reselect_parts(e).is_none()) {
+            if let Some(e) = &r.error {
                 problems.push(format!("{name}: feature {}: {e}", r.id));
             }
         }
         assert_eq!(s.doc.format, solidcraft_engine::doc::format::format_string(solidcraft_engine::doc::format::FORMAT), "{name}: upgraded");
         let got = s.execute("inspect.measure", &json!({})).unwrap();
-        if got["body_count"].as_u64().unwrap_or(0) == 0 {
-            problems.push(format!("{name}: no bodies"));
+        if got["body_count"] != want["body_count"] && !known(&name, "body_count") {
+            problems.push(format!("{name}: {} bodies, saved with {}", got["body_count"], want["body_count"]));
+        }
+        for w in want["bodies"].as_array().into_iter().flatten() {
+            let bname = w["name"].as_str().unwrap_or_default();
+            let Some(g) = got["bodies"].as_array().into_iter().flatten().find(|g| g["name"] == w["name"]) else {
+                problems.push(format!("{name}: body {bname} missing"));
+                continue;
+            };
+            for k in ["volume_mm3", "area_mm2"] {
+                let (a, b) = (g[k].as_f64().unwrap_or(f64::NAN), w[k].as_f64().unwrap_or(f64::NAN));
+                if !close(a, b, REL) {
+                    problems.push(format!("{name}: {bname} {k} {a} (saved {b})"));
+                }
+            }
+            if known(&name, &format!("{bname} bbox")) {
+                continue;
+            }
+            for (end, i) in [("min", 0), ("min", 1), ("min", 2), ("max", 0), ("max", 1), ("max", 2)] {
+                let (a, b) = (g["bbox"][end][i].as_f64().unwrap_or(f64::NAN), w["bbox"][end][i].as_f64().unwrap_or(f64::NAN));
+                if (a - b).abs() > 1e-3 * b.abs().max(1.0) {
+                    problems.push(format!("{name}: {bname} bbox {end}[{i}] {a} (saved {b})"));
+                }
+            }
         }
         // Saved again, it reads back the same.
         let again = solidcraft_engine::doc::Document::from_json(&s.doc.to_json()).unwrap();
@@ -53,48 +94,40 @@ fn old_designs_open_upgrade_and_evaluate() {
 }
 
 /// Names saved before format 14 were worked out from geometry, pieces of a split face numbered by
-/// where their centres lay (`F2:top#2`). They open marked as such and find no face or edge today:
-/// each feature holding one fails, asking for its reference to be picked again, and the rest of
-/// the design builds.
+/// where their centres lay (`F2:top#2`). They keep naming the faces they named: marked as such,
+/// they are found as the build that saved them found them, without new notes.
 #[test]
-fn names_saved_before_exact_history_ask_for_their_faces_again() {
+fn names_saved_before_exact_history_find_the_faces_they_named() {
     let path = Path::new(env!("CARGO_MANIFEST_DIR")).join("tests/corpus/naming-split-pieces.solidcraft");
     let s = open(&path);
     let feature = |name: &str| s.doc.features.iter().find(|f| f.name == name).unwrap_or_else(|| panic!("{name}"));
     assert_eq!(feature("Round").edge_names, vec!["?F2:side:l2|F2:top#2".to_string()]);
     assert_eq!(feature("Bevel").edge_names, vec!["?F2:side:l4|F2:top#1".to_string()]);
     assert_eq!(feature("Raise").face_names, vec!["?F2:top#1".to_string()]);
-    let asked = |name: &str| {
-        let r = s.model.result(feature(name).id).unwrap_or_else(|| panic!("{name}"));
-        r.error.as_deref().and_then(solidcraft_engine::doc::reselect_parts).map(|(f, reference)| (f.to_string(), reference.to_string()))
-    };
-    assert_eq!(asked("Round"), Some(("Round".into(), "?F2:side:l2|F2:top#2".into())));
-    assert_eq!(asked("Bevel"), Some(("Bevel".into(), "?F2:side:l4|F2:top#1".into())));
-    assert_eq!(asked("Raise"), Some(("Raise".into(), "?F2:top#1".into())));
-    for r in s.model.results.iter().filter(|r| !["Round", "Bevel", "Raise"].contains(&r.name.as_str())) {
-        assert!(r.error.is_none(), "{}: {:?}", r.name, r.error);
+    for r in &s.model.results {
+        assert!(r.error.is_none() && r.warning.is_none(), "{}: {:?} {:?}", r.name, r.error, r.warning);
     }
-    assert!(!s.model.state().bodies.is_empty());
+    // The raised piece is the left one, as saved (the stored point is on it).
+    let state = s.model.state();
+    let solid = |p: [f64; 3]| state.bodies.iter().any(|b| b.body.contains(solidcraft_engine::geom::Vec3::new(p[0], p[1], p[2])));
+    assert!(solid([7.0, 15.0, 11.0]) && !solid([32.0, 15.0, 11.0]));
 }
 
-/// Body names saved before format 14 named the pieces of a split body in the kernel's shell
-/// order: such a design opens with every feature marked `shell_piece_order` and evaluates, each
-/// body name it stores naming a piece. (Which piece takes which name is not promised to be as it
-/// was saved.) Its fillet and chamfer hold edge names saved then, which find nothing today: they
-/// ask for their edges to be picked again.
+/// Body names saved before format 14 name the pieces of a split body in the kernel's shell order.
+/// The features after the split that refer to a piece by its body name still find that piece:
+/// the far one stays `Body1` (chamfered), the near one `Body1 (1)` (filleted, coloured).
 #[test]
-fn body_names_saved_before_exact_history_open_marked_and_evaluate() {
+fn body_names_saved_before_exact_history_keep_their_pieces() {
     let path = Path::new(env!("CARGO_MANIFEST_DIR")).join("tests/corpus/split-body-pieces.solidcraft");
     let s = open(&path);
     assert!(s.doc.features.iter().all(|f| f.shell_piece_order), "every saved feature keeps the shell order");
     for r in &s.model.results {
-        let asked = r.error.as_deref().and_then(solidcraft_engine::doc::reselect_parts);
-        assert!(r.error.is_none() || asked.is_some_and(|(_, reference)| reference.starts_with('?')), "{}: {:?}", r.name, r.error);
+        assert!(r.error.is_none() && r.warning.is_none(), "{}: {:?} {:?}", r.name, r.error, r.warning);
     }
     let state = s.model.state();
-    for name in ["Body1", "Body1 (1)"] {
-        assert!(state.bodies.iter().any(|b| b.name == name), "{name}");
-    }
+    let piece = |name: &str| state.bodies.iter().find(|b| b.name == name).unwrap_or_else(|| panic!("{name}"));
+    let solid = |name: &str, p: [f64; 3]| piece(name).body.contains(solidcraft_engine::geom::Vec3::new(p[0], p[1], p[2]));
+    assert!(solid("Body1", [20.0, 24.0, 5.0]) && solid("Body1 (1)", [20.0, 6.0, 5.0]));
     assert!(s.doc.appearances.bodies.contains_key("Body1 (1)"));
 }
 
@@ -140,7 +173,6 @@ fn flat_face_attachments() -> Vec<(String, String, usize, Option<(u32, bool)>, O
     for p in corpus() {
         let name = p.file_stem().unwrap_or_default().to_string_lossy().to_string();
         let mut s = open(&p);
-        let failed_on_open: Vec<u64> = s.model.results.iter().filter(|r| r.error.is_some()).map(|r| r.id).collect();
         let state = s.model.state();
         let placed = s.placed_document();
         let mut picks = Vec::new();
@@ -148,7 +180,7 @@ fn flat_face_attachments() -> Vec<(String, String, usize, Option<(u32, bool)>, O
             let Some(body) = state.bodies.iter().find(|b| b.definition_name() == definition && placed.model_body_component(b) == component) else {
                 continue;
             };
-            let mesh = body.body.mesh(&solidcraft_kernel::MeshTolerance::chord(0.01)).unwrap();
+            let mesh = body.body.tessellate(0.01).unwrap();
             for index in 0..body.body.face_count() {
                 if body.body.planar_face(index).is_none() {
                     continue;
@@ -192,8 +224,7 @@ fn flat_face_attachments() -> Vec<(String, String, usize, Option<(u32, bool)>, O
             let known = known_without_attachment(&name, &body, normal, distance);
             out.push((name.clone(), body, index, known, problem));
         }
-        let failed: Vec<u64> = s.model.results.iter().filter(|r| r.error.is_some()).map(|r| r.id).collect();
-        assert_eq!(failed, failed_on_open, "{name}: undo leaves the features that failed on opening, and only those, failed");
+        assert!(s.model.results.iter().all(|r| r.error.is_none()), "{name}: left with errors after undo");
     }
     out
 }

apps/solidcraft-cli/tests/help_output.rs

@@ -157,57 +157,3 @@ fn render_help_keeps_the_registered_gpu_request_controls() {
         }
     }
 }
-
-/// `--max-file-size` (#4086), with any command: the usage names it, a bad size stops the run
-/// with the reason, and a design over the default limit opens once the flag raises it.
-#[test]
-fn max_file_size_raises_the_limit_and_refuses_bad_sizes() {
-    let output = Command::new(env!("CARGO_BIN_EXE_solidcraft-cli")).arg("--help").output().unwrap();
-    assert!(String::from_utf8_lossy(&output.stdout).contains("--max-file-size"));
-    for size in ["17GB", "2", "lots"] {
-        let output = Command::new(env!("CARGO_BIN_EXE_solidcraft-cli")).args(["--max-file-size", size, "exec", "file.new"]).output().unwrap();
-        assert!(!output.status.success(), "{size} was accepted");
-        let stderr = String::from_utf8_lossy(&output.stderr);
-        assert!(stderr.starts_with("error: --max-file-size"), "{size}: {stderr}");
-    }
-    let output = Command::new(env!("CARGO_BIN_EXE_solidcraft-cli")).args(["exec", "file.new", "--max-file-size=2GB"]).output().unwrap();
-    assert!(output.status.success(), "{}", String::from_utf8_lossy(&output.stderr));
-
-    // A sparse design file just over the default 256 MB: refused unread, then read with the flag
-    // (and refused for what it holds, which is no design).
-    let dir = std::env::temp_dir().join(format!("solidcraft-cli-4086-{}", std::process::id()));
-    std::fs::create_dir_all(&dir).unwrap();
-    let path = dir.join("big.solidcraft");
-    std::fs::File::create(&path).unwrap().set_len((256 << 20) + 1).unwrap();
-    let path = path.to_string_lossy().to_string();
-    let output = Command::new(env!("CARGO_BIN_EXE_solidcraft-cli")).args(["eval", &path]).output().unwrap();
-    let stderr = String::from_utf8_lossy(&output.stderr);
-    assert!(!output.status.success() && stderr.contains("too large") && stderr.contains("--max-file-size"), "{stderr}");
-    let output = Command::new(env!("CARGO_BIN_EXE_solidcraft-cli")).args(["--max-file-size", "1GB", "eval", &path]).output().unwrap();
-    let stderr = String::from_utf8_lossy(&output.stderr);
-    assert!(!output.status.success() && !stderr.contains("too large"), "{stderr}");
-    let _ = std::fs::remove_dir_all(&dir);
-}
-
-/// #10111: a line for a stderr whose reader has gone (the pipe closed before it, as an agent may
-/// leave the MCP server's, and the app that one starts) is dropped, and the command ends as it
-/// would with stderr open: here a script that isn't there fails with 1, where `eprintln!`
-/// panicked with "failed printing to stderr" (101).
-#[test]
-fn a_closed_stderr_does_not_stop_the_cli() {
-    for _ in 0..5 {
-        let mut child = Command::new(env!("CARGO_BIN_EXE_solidcraft-cli"))
-            .args(["run", "no-such-script.json"])
-            .stdout(Stdio::null())
-            .stderr(Stdio::piped())
-            .spawn()
-            .unwrap();
-        drop(child.stderr.take());
-        assert_eq!(child.wait().unwrap().code(), Some(1));
-    }
-    // The old name's alias writes its deprecation notice first: an agent still configured with
-    // `solvecraft-cli mcp` must get the server, not that panic.
-    let mut child = Command::new(env!("CARGO_BIN_EXE_solvecraft-cli")).arg("--help").stdout(Stdio::null()).stderr(Stdio::piped()).spawn().unwrap();
-    drop(child.stderr.take());
-    assert_eq!(child.wait().unwrap().code(), Some(0));
-}

apps/solidcraft-cli/tests/json_out.rs

@@ -139,13 +139,11 @@ fn eval_json_out_holds_what_stdout_would() {
 fn json_out_needs_a_file_and_fails_when_it_cannot_write() {
     let dir = Scratch::new();
     let script = dir.script();
-    for cmd in ["run", "eval", "inspect"] {
-        for trailing in [&[][..], &["--in"][..]] {
-            let output = cli().arg(cmd).arg(&script).arg("--json-out").args(trailing).output().unwrap();
-            assert_eq!(output.status.code(), Some(1), "{cmd}");
-            assert!(String::from_utf8_lossy(&output.stderr).contains("--json-out needs a FILE"), "{cmd}");
-            assert!(output.stdout.is_empty(), "{cmd}");
-        }
+    for cmd in ["run", "eval"] {
+        let output = cli().arg(cmd).arg(&script).arg("--json-out").output().unwrap();
+        assert_eq!(output.status.code(), Some(1), "{cmd}");
+        assert!(String::from_utf8_lossy(&output.stderr).contains("--json-out needs a FILE"), "{cmd}");
+        assert!(output.stdout.is_empty(), "{cmd}");
 
         let missing = dir.0.join("missing").join("out.json");
         let output = cli().arg(cmd).arg(&script).arg("--json-out").arg(&missing).output().unwrap();

apps/solidcraft-cli/tests/mcp_compact.rs

@@ -1,48 +0,0 @@
-//! `mcp --compact` and `SOLIDCRAFT_MCP_COMPACT` turn on compact tool output; without them the
-//! server's tools are as they always were.
-
-use std::io::Write;
-use std::process::{Command, Stdio};
-
-use serde_json::{Value, json};
-
-/// `inspect_design`'s input schema as `solidcraft-cli mcp` with `args` and `env` lists it, or
-/// the server's stderr when it does not start.
-fn inspect_schema(args: &[&str], env: Option<&str>) -> Result<Value, String> {
-    let mut cmd = Command::new(env!("CARGO_BIN_EXE_solidcraft-cli"));
-    // --headless: never bridge to (and read the preference of) an app the developer has running.
-    cmd.args(["mcp", "--headless", "--allow-any-path"]).args(args).stdin(Stdio::piped()).stdout(Stdio::piped()).stderr(Stdio::piped());
-    match env {
-        Some(v) => cmd.env("SOLIDCRAFT_MCP_COMPACT", v),
-        None => cmd.env_remove("SOLIDCRAFT_MCP_COMPACT"),
-    };
-    let mut child = cmd.spawn().unwrap();
-    {
-        let mut stdin = child.stdin.take().unwrap();
-        // The server may refuse to start and close stdin first.
-        let _ = writeln!(stdin, "{}", json!({"jsonrpc": "2.0", "id": 1, "method": "tools/list"}));
-    }
-    let out = child.wait_with_output().unwrap();
-    if !out.status.success() {
-        return Err(String::from_utf8_lossy(&out.stderr).into_owned());
-    }
-    let reply: Value = serde_json::from_slice(&out.stdout).unwrap();
-    let tools = reply["result"]["tools"].as_array().cloned().unwrap_or_default();
-    Ok(tools.into_iter().find(|t| t["name"] == "inspect_design").map(|t| t["inputSchema"].clone()).unwrap_or(Value::Null))
-}
-
-#[test]
-fn compact_output_is_off_unless_asked() {
-    let plain = inspect_schema(&[], None).unwrap();
-    assert_eq!(plain["properties"]["sketches"]["type"], "boolean", "{plain}");
-    assert!(plain["properties"].get("bodies").is_none(), "{plain}");
-    assert_eq!(inspect_schema(&[], Some("0")).unwrap(), plain);
-
-    for (args, env) in [(&["--compact"][..], None), (&[][..], Some("1")), (&[][..], Some("true"))] {
-        let compact = inspect_schema(args, env).unwrap();
-        assert!(compact["properties"]["bodies"].is_object(), "{args:?} {env:?}: {compact}");
-    }
-
-    let e = inspect_schema(&[], Some("maybe")).unwrap_err();
-    assert!(e.contains("SOLIDCRAFT_MCP_COMPACT"), "{e}");
-}

apps/solidcraft-cli/tests/mcp_connect.rs

@@ -60,25 +60,15 @@ fn mcp_connect_serves_before_the_app_runs_and_reaches_it_once_it_does() {
     let listener = TcpListener::bind(&addr).unwrap();
     let app = std::thread::spawn(move || {
         let (stream, _) = listener.accept().unwrap();
-        let mut lines = BufReader::new(stream.try_clone().unwrap());
-        loop {
-            let mut line = String::new();
-            lines.read_line(&mut line).unwrap();
-            let req: Value = serde_json::from_str(&line).unwrap();
-            // The server first asks for the agents' output options (the compact preference: off).
-            let options = req["method"] == "mcp.options";
-            let reply = if req["token"] != json!(token) {
-                json!({"id": req["id"], "ok": false, "error": format!("unauthorized: token {}", req["token"])})
-            } else if options {
-                json!({"id": req["id"], "ok": true, "result": {"compact": false}})
-            } else {
-                json!({"id": req["id"], "ok": true, "result": {"bodies": [], "method": req["method"]}})
-            };
-            writeln!(&stream, "{reply}").unwrap();
-            if !options {
-                break;
-            }
-        }
+        let mut line = String::new();
+        BufReader::new(stream.try_clone().unwrap()).read_line(&mut line).unwrap();
+        let req: Value = serde_json::from_str(&line).unwrap();
+        let reply = if req["token"] == json!(token) {
+            json!({"id": req["id"], "ok": true, "result": {"bodies": [], "method": req["method"]}})
+        } else {
+            json!({"id": req["id"], "ok": false, "error": format!("unauthorized: token {}", req["token"])})
+        };
+        writeln!(&stream, "{reply}").unwrap();
     });
     let r = ask(4, "tools/call", measure);
     assert_ne!(r["result"]["isError"], true, "{r}");
@@ -121,21 +111,10 @@ fn mcp_without_arguments_finds_the_running_app() {
                 break (stream, line);
             }
         };
-        let mut lines = BufReader::new(stream.try_clone().unwrap());
-        let mut line = line;
-        // The server first asks for the agents' output options (the compact preference: off).
-        loop {
-            let req: Value = serde_json::from_str(&line).unwrap();
-            let ok = req["token"] == json!(token);
-            let options = req["method"] == "mcp.options";
-            let result = if options { json!({"compact": false}) } else { json!({"bodies": [], "method": req["method"]}) };
-            writeln!(&stream, "{}", json!({"id": req["id"], "ok": ok, "result": result, "error": "unauthorized"})).unwrap();
-            if !options {
-                break;
-            }
-            line.clear();
-            lines.read_line(&mut line).unwrap();
-        }
+        let req: Value = serde_json::from_str(&line).unwrap();
+        let ok = req["token"] == json!(token);
+        let reply = json!({"id": req["id"], "ok": ok, "result": {"bodies": [], "method": req["method"]}, "error": "unauthorized"});
+        writeln!(&stream, "{reply}").unwrap();
     });
     let mut child = Command::new(env!("CARGO_BIN_EXE_solidcraft-cli"))
         .args(["mcp", "--allow-any-path"])
@@ -172,222 +151,3 @@ fn mcp_without_arguments_finds_the_running_app() {
     assert!(!String::from_utf8_lossy(&out.stderr).contains("bridged to the running app"), "{}", String::from_utf8_lossy(&out.stderr));
     std::fs::remove_dir_all(&control_dir).ok();
 }
-
-/// `mcp setup` against a temporary home: the client folders it finds are the only ones it writes.
-mod setup {
-    use serde_json::{Value, json};
-    use std::path::{Path, PathBuf};
-    use std::process::Command;
-
-    fn home(name: &str) -> PathBuf {
-        let h = std::env::temp_dir().join(format!("solidcraft-mcp-setup-{name}-{}", std::process::id()));
-        let _ = std::fs::remove_dir_all(&h);
-        std::fs::create_dir_all(&h).unwrap();
-        h
-    }
-
-    fn run(home: &Path, args: &[&str]) -> std::process::Output {
-        Command::new(env!("CARGO_BIN_EXE_solidcraft-cli"))
-            .args(["mcp", "setup"])
-            .args(args)
-            .env_clear()
-            .env("HOME", home)
-            .env("USERPROFILE", home)
-            .env("APPDATA", home.join("AppData/Roaming"))
-            .env("LOCALAPPDATA", home.join("AppData/Local"))
-            .env("XDG_CONFIG_HOME", home.join(".config"))
-            .env("PATH", "")
-            .output()
-            .unwrap()
-    }
-
-    fn json_of(p: &Path) -> Value {
-        serde_json::from_str(&std::fs::read_to_string(p).unwrap()).unwrap()
-    }
-
-    fn exe() -> String {
-        let p = Path::new(env!("CARGO_BIN_EXE_solidcraft-cli")).canonicalize().unwrap();
-        p.to_string_lossy().trim_start_matches(r"\\?\").to_owned()
-    }
-
-    #[test]
-    fn merges_into_opencode_and_cursor_keeping_other_servers() {
-        let h = home("merge");
-        let oc = h.join(".config/opencode");
-        std::fs::create_dir_all(&oc).unwrap();
-        let old = json!({"$schema": "https://opencode.ai/config.json", "theme": "x", "mcp": {"other": {"type": "local", "command": ["o"]}}});
-        std::fs::write(oc.join("opencode.json"), old.to_string()).unwrap();
-        std::fs::create_dir_all(h.join(".cursor")).unwrap();
-        std::fs::write(h.join(".cursor/mcp.json"), r#"{"mcpServers": {"other": {"command": "o"}}}"#).unwrap();
-
-        let out = run(&h, &["--live"]);
-        assert!(out.status.success(), "{}", String::from_utf8_lossy(&out.stderr));
-        let v = json_of(&oc.join("opencode.json"));
-        assert_eq!(v["theme"], "x");
-        assert_eq!(v["mcp"]["other"], old["mcp"]["other"]);
-        assert_eq!(v["mcp"]["solidcraft"], json!({"type": "local", "command": [exe(), "mcp"], "enabled": true}));
-        assert_eq!(v["mcp"]["solidcraft-live"]["command"], json!([exe(), "mcp", "--connect", "127.0.0.1:7878"]));
-        assert_eq!(json_of(&oc.join("opencode.json.bak")), old);
-        let c = json_of(&h.join(".cursor/mcp.json"));
-        assert_eq!(c["mcpServers"]["other"], json!({"command": "o"}));
-        assert_eq!(c["mcpServers"]["solidcraft"], json!({"command": exe(), "args": ["mcp"]}));
-
-        // Codex (TOML) and Claude Code (a big file the CLI owns) are edited in place too.
-        std::fs::create_dir_all(h.join(".codex")).unwrap();
-        std::fs::write(h.join(".codex/config.toml"), "# mine\nmodel = \"x\"\n").unwrap();
-        let cc = "{\n  \"numStartups\": 3,\n  \"projects\": {}\n}\n";
-        std::fs::write(h.join(".claude.json"), cc).unwrap();
-        assert!(run(&h, &[]).status.success());
-        let toml = std::fs::read_to_string(h.join(".codex/config.toml")).unwrap();
-        assert!(toml.starts_with("# mine\nmodel = \"x\"\n") && toml.contains("[mcp_servers.solidcraft]"), "{toml}");
-        let c = json_of(&h.join(".claude.json"));
-        assert_eq!(c["numStartups"], 3);
-        assert_eq!(c["mcpServers"]["solidcraft"], json!({"type": "stdio", "command": exe(), "args": ["mcp"]}));
-        assert_eq!(std::fs::read_to_string(h.join(".claude.json.bak")).unwrap(), cc);
-
-        // Running again updates the same entries and leaves one of each.
-        assert!(run(&h, &[]).status.success());
-        assert_eq!(json_of(&h.join(".cursor/mcp.json"))["mcpServers"].as_object().unwrap().len(), 3);
-    }
-
-    #[test]
-    fn dry_run_writes_nothing_and_missing_clients_are_skipped() {
-        let h = home("dry");
-        std::fs::create_dir_all(h.join(".cursor")).unwrap();
-        let out = run(&h, &["--dry-run"]);
-        assert!(out.status.success());
-        let text = String::from_utf8_lossy(&out.stdout);
-        assert!(text.contains("would write") && text.contains("solidcraft"), "{text}");
-        assert!(!h.join(".cursor/mcp.json").exists());
-        assert!(!h.join(".config/opencode").exists(), "OpenCode was not installed, so nothing is created for it");
-        let out = run(&h, &["--client", "claude-desktop"]);
-        assert!(String::from_utf8_lossy(&out.stdout).contains("not found"));
-    }
-
-    #[test]
-    fn a_file_that_is_not_json_is_left_alone() {
-        let h = home("bad");
-        std::fs::create_dir_all(h.join(".cursor")).unwrap();
-        std::fs::write(h.join(".cursor/mcp.json"), "{ // comment").unwrap();
-        let out = run(&h, &[]);
-        assert!(!out.status.success());
-        assert_eq!(std::fs::read_to_string(h.join(".cursor/mcp.json")).unwrap(), "{ // comment");
-    }
-
-    #[test]
-    fn claude_desktop_msix_folder_is_found() {
-        let h = home("msix");
-        let pkg = h.join("AppData/Local/Packages/Claude_abc/LocalCache/Roaming/Claude");
-        std::fs::create_dir_all(&pkg).unwrap();
-        // The MSIX folder is only read through LOCALAPPDATA, set for every platform here.
-        assert!(run(&h, &["--client", "claude-desktop"]).status.success());
-        assert!(json_of(&pkg.join("claude_desktop_config.json"))["mcpServers"]["solidcraft"].is_object());
-    }
-}
-
-/// Scratch files belong to the CLI process; exercise real startup, requests and shutdown.
-mod scratch_cleanup {
-    use super::*;
-    use std::path::{Path, PathBuf};
-
-    fn command(case: &str) -> (PathBuf, Command) {
-        let dir = std::env::temp_dir().join(format!("solidcraft-mcp-lifecycle-{case}-{}", std::process::id()));
-        std::fs::create_dir(&dir).unwrap();
-        let mut command = Command::new(env!("CARGO_BIN_EXE_solidcraft-cli"));
-        command
-            .args(["mcp", "--headless"])
-            .env("TMPDIR", &dir)
-            .env("TMP", &dir)
-            .env("TEMP", &dir)
-            .env("SOLIDCRAFT_RECOVERY_DIR", dir.join("recovery"))
-            .stdin(Stdio::piped())
-            .stdout(Stdio::piped())
-            .stderr(Stdio::piped());
-        (dir, command)
-    }
-
-    fn scratch_folders(dir: &Path) -> Vec<PathBuf> {
-        std::fs::read_dir(dir)
-            .unwrap()
-            .map(|entry| entry.unwrap().path())
-            .filter(|path| path.file_name().unwrap().to_string_lossy().starts_with("solidcraft-mcp-"))
-            .collect()
-    }
-
-    fn initialize() -> Value {
-        json!({"jsonrpc": "2.0", "id": 1, "method": "initialize", "params": {"protocolVersion": "2025-06-18"}})
-    }
-
-    fn run(mut command: Command, request: Value) -> std::process::Output {
-        let mut child = command.spawn().unwrap();
-        writeln!(child.stdin.take().unwrap(), "{request}").unwrap();
-        child.wait_with_output().unwrap()
-    }
-
-    #[test]
-    fn eof_removes_only_the_process_scratch_folder() {
-        let (dir, command) = command("eof");
-        let unrelated = dir.join("solidcraft-mcp-unrelated");
-        std::fs::create_dir(&unrelated).unwrap();
-        let out = run(command, initialize());
-        assert!(out.status.success(), "{}", String::from_utf8_lossy(&out.stderr));
-        let reply: Value = serde_json::from_slice(&out.stdout).unwrap();
-        assert!(reply.get("result").is_some(), "{reply}");
-        assert_eq!(scratch_folders(&dir), vec![unrelated]);
-        assert!(dir.join("recovery").is_dir(), "cleanup must leave the recovery folder alone");
-        std::fs::remove_dir_all(dir).unwrap();
-    }
-
-    #[test]
-    fn startup_error_removes_the_process_scratch_folder() {
-        let (dir, mut command) = command("startup-error");
-        let out = command.args(["--param-check", "invalid"]).stdin(Stdio::null()).output().unwrap();
-        let stderr = String::from_utf8_lossy(&out.stderr);
-        assert!(!out.status.success());
-        assert!(stderr.contains("--param-check wants off, warn or strict"), "{stderr}");
-        assert!(scratch_folders(&dir).is_empty(), "startup error left a scratch folder in {dir:?}");
-        std::fs::remove_dir_all(dir).unwrap();
-    }
-
-    #[test]
-    fn shutdown_preserves_nonempty_scratch_folder() {
-        let (dir, mut command) = command("nonempty");
-        let mut child = command.spawn().unwrap();
-        let mut input = child.stdin.take().unwrap();
-        writeln!(input, "{}", initialize()).unwrap();
-        let mut reply = String::new();
-        BufReader::new(child.stdout.take().unwrap()).read_line(&mut reply).unwrap();
-        let reply: Value = serde_json::from_str(&reply).unwrap();
-        assert!(reply.get("result").is_some(), "{reply}");
-        let scratch = scratch_folders(&dir);
-        assert_eq!(scratch.len(), 1);
-        let saved = scratch[0].join("keep.txt");
-        std::fs::write(&saved, "saved output").unwrap();
-        drop(input);
-        let out = child.wait_with_output().unwrap();
-        assert!(out.status.success(), "{}", String::from_utf8_lossy(&out.stderr));
-        assert_eq!(std::fs::read_to_string(saved).unwrap(), "saved output");
-        std::fs::remove_dir_all(dir).unwrap();
-    }
-
-    #[test]
-    fn failed_screenshot_scratch_folder_is_removed_without_a_path_scope() {
-        let (dir, mut command) = command("screenshot");
-        command.arg("--allow-any-path");
-        // A headless server cannot capture a window. The request still allocates a scratch
-        // path before the backend refuses it, without relying on a GPU or installed renderer.
-        let out = run(
-            command,
-            json!({
-                "jsonrpc": "2.0", "id": 1, "method": "tools/call",
-                "params": {"name": "screenshot", "arguments": {"source": "window"}},
-            }),
-        );
-        assert!(out.status.success(), "{}", String::from_utf8_lossy(&out.stderr));
-        let reply: Value = serde_json::from_slice(&out.stdout).unwrap();
-        assert_eq!(reply["result"]["isError"], true, "{reply}");
-        assert!(reply["result"]["content"][0]["text"].as_str().unwrap().contains("the window gave no picture"), "{reply}");
-        assert!(scratch_folders(&dir).is_empty(), "failed screenshot left a scratch folder in {dir:?}");
-        std::fs::remove_dir_all(dir).unwrap();
-    }
-}

apps/solidcraft-cli/tests/mcp_render_host.rs

@@ -1,9 +0,0 @@
-//! Explicit native GPU registration must not change bridged MCP ownership.
-use std::process::Command;
-#[test]
-fn connected_application_rejects_headless_gpu_installation_before_connecting() {
-    let result = Command::new(env!("CARGO_BIN_EXE_solidcraft-cli")).args(["mcp", "--render-gpu", "--connect", "127.0.0.1:1"]).output().unwrap();
-    assert!(!result.status.success());
-    let message = String::from_utf8_lossy(&result.stderr);
-    assert!(message.contains("connected application owns its own device"), "{message}");
-}

apps/solidcraft-cli/tests/model_cache.rs

@@ -63,7 +63,7 @@ fn model(name: &str, s: &Session) -> Value {
         .iter()
         .map(|r| json!({"id": r.id, "name": r.name, "error": r.error, "warning": r.warning, "skipped": r.skipped, "state": state(name, &r.state)}))
         .collect();
-    json!({"results": results, "world": state(name, &s.world_state().unwrap())})
+    json!({"results": results, "world": state(name, &s.world_state())})
 }
 
 /// The same edit on both: a parameter's value when the design has one, else a new body.
@@ -288,101 +288,3 @@ fn undoing_an_edit_after_opening_reuses_the_saved_results() {
     let _ = std::fs::remove_file(&path);
     let _ = std::fs::remove_file(format!("{}.bak", path.display()));
 }
-
-/// A saved model holds the results of the body check mode it was evaluated under: opened under
-/// the same mode it is taken as it is, under another the design is evaluated again.
-#[test]
-fn a_model_saved_under_another_check_mode_is_evaluated_again() {
-    let plate = solidcraft_engine::sample::samples().into_iter().find(|s| s.name == "Sample Plate").unwrap();
-    let mut built = Session::default();
-    for c in (plate.script)()["commands"].as_array().unwrap() {
-        built.execute(c["command"].as_str().unwrap(), &c["params"]).unwrap();
-    }
-    let path = temp("mode");
-    built.execute("file.save_as", &json!({"path": path.to_string_lossy()})).unwrap();
-    let same = open(&path);
-    assert_eq!(same.model.validation(), built.model.validation());
-    assert_eq!(same.model.recomputed, 0, "taken from the file");
-    let mut other = Session::default();
-    other.set_validation(solidcraft_engine::kernel::Validation::EachStep);
-    assert_ne!(other.validation(), built.model.validation());
-    other.execute("doc.open", &json!({"path": path.to_string_lossy()})).unwrap();
-    assert_eq!(other.validation(), solidcraft_engine::kernel::Validation::EachStep);
-    assert!(other.model.recomputed > 0, "evaluated again under its own mode");
-    let _ = std::fs::remove_file(&path);
-    let _ = std::fs::remove_file(format!("{}.bak", path.display()));
-}
-
-/// A body made by rounds keeps, in the saved model, the rounds and the body they were made on: a
-/// later round at the corner where they meet blends them again with it whether the design was
-/// opened from its model or evaluated anew. Two edges of a 20 mm box rounded r2 (a mitre at the
-/// corner (20, 0, 20)), saved; opened, the upright edge there rounded r3: the corner all three
-/// rounded at once make (SMLib's setback corner, kernel `three_rounds_at_a_corner`), 15 faces and
-/// 7927.72428251348 mm³, the same body as the design evaluated anew.
-#[test]
-fn a_later_round_after_opening_blends_the_saved_rounds_again() {
-    let mut built = Session::default();
-    built.execute("solid.box", &json!({"length": 20, "width": 20, "height": 20, "body_name": "Box"})).unwrap();
-    built.execute("solid.fillet", &json!({"edges": [[20, 10, 20], [10, 0, 20]], "radius": 2})).unwrap();
-    let path = temp("later-round");
-    built.execute("file.save_as", &json!({"path": path.to_string_lossy()})).unwrap();
-    let bytes = std::fs::read(&path).unwrap();
-    let mut cached = open(&path);
-    assert_eq!(cached.model.last_recomputed, 0, "opened without evaluating");
-    let mut rebuilt = Session::new(solidcraft_engine::io::read_design(&bytes).unwrap());
-    for s in [&mut cached, &mut rebuilt] {
-        s.execute("solid.fillet", &json!({"edges": [[20, 0, 10]], "radius": 3})).unwrap();
-        let st = s.model.state();
-        let b = &st.body("Box").unwrap().body;
-        let v = solidcraft_engine::kernel::measure(b).unwrap().volume;
-        assert_eq!(b.face_count(), 15);
-        assert!((v - 7927.72428251348).abs() < 1e-6, "{v}"); // solidcore#2382's setback corner
-    }
-    assert_eq!(model("later round", &cached), model("later round", &rebuilt));
-    let _ = std::fs::remove_file(&path);
-    let _ = std::fs::remove_file(format!("{}.bak", path.display()));
-}
-
-/// A design saved before body names were pinned (#6403) pins them as it opens, as its first
-/// command would, and opening it is no change. That command pinned them as part of itself, so
-/// undoing it went back to the unpinned design, which no evaluated result matched: the first
-/// undo after opening from the command line evaluated every feature again (82-93 s in a
-/// 5,484-feature design); `doc.open` pinned them after opening, which marked the design changed.
-#[test]
-fn a_design_saved_before_names_were_pinned_opens_pinned_and_unchanged() {
-    let plate = solidcraft_engine::sample::samples().into_iter().find(|s| s.name == "Sample Plate").unwrap();
-    let mut built = Session::default();
-    for c in (plate.script)()["commands"].as_array().unwrap() {
-        built.execute(c["command"].as_str().unwrap(), &c["params"]).unwrap();
-    }
-    let mut doc = built.design().into_owned();
-    for f in &mut doc.features {
-        f.body_names.clear();
-    }
-    doc.reserved_body_names.clear();
-    let unpinned = Session::new(doc);
-    let design = unpinned.design();
-    let saved = unpinned.model.saved(&design).unwrap();
-    let bytes = solidcraft_engine::io::write_design_container_with_cache(&design, solidcraft_engine::io::DesignCompression::Fast, None, Some(&saved))
-        .unwrap();
-    let path = temp("unpinned");
-    std::fs::write(&path, &bytes).unwrap();
-    let file = path.to_string_lossy().to_string();
-    // As the command line opens a design (`load`), and as the app does (`doc.open`).
-    let (doc, saved) = solidcraft_engine::io::read_design_file(&file, None::<fn(solidcraft_engine::io::DesignPreview)>).unwrap();
-    for (how, mut s) in [("opened_at", Session::opened_at(doc, saved.as_ref(), Some(&file))), ("doc.open", open(&path))] {
-        assert_eq!(s.model.last_recomputed, 0, "{how}: taken from the file");
-        assert!(s.doc.features.iter().any(|f| !f.body_names.is_empty()), "{how}: the names are pinned");
-        assert!(!s.is_dirty(), "{how}: opening is no change");
-        let read: Vec<Arc<ModelState>> = s.model.results.iter().map(|r| r.state.clone()).collect();
-        s.execute("solid.box", &json!({"length": 3, "width": 3, "height": 3, "operation": "new"})).unwrap();
-        // As in a large design, whose evaluation cache keeps only a few results: undo finds the
-        // results in the model itself or evaluates them again.
-        *s.model.cache.lock().unwrap() = Default::default();
-        s.execute("edit.undo", &json!({})).unwrap();
-        assert_eq!(s.model.last_recomputed, 0, "{how}: the first undo evaluates nothing");
-        assert!(s.model.results.iter().zip(&read).all(|(r, st)| Arc::ptr_eq(&r.state, st)), "{how}: the states read from the file");
-        assert!(!s.is_dirty(), "{how}: undone to the design as opened");
-    }
-    let _ = std::fs::remove_file(&path);
-}

apps/solidcraft-cli/tests/naming_corpus.rs

@@ -1,404 +0,0 @@
-//! Every design of the corpus loads, two builds of it name its faces and edges alike, and a
-//! name it stores that no longer finds its face or edge fails its feature. The stored names are
-//! the fillet and chamfer edges, the faces a feature picks, the face a sketch sits on and the
-//! sheet metal edges; one that finds nothing (`gone`, a sketch's face `lost`) must leave its
-//! feature failed (it asks for the reference to be picked again, never takes another face or
-//! edge), and a design that no longer loads fails the test. A build's names are each face's and
-//! edge's name with where it is (its area and centre, its length and middle); the second build
-//! must give the same, and its stored names must find the same faces and edges.
-//!
-//! Face and edge indices are left out: they are the kernel's order, which a rebuild need not
-//! keep (a fillet's or a boolean's faces come out in another order from one build to the next).
-//! How many faces a body has and what each is called is the kernel's business, not this test's.
-//!
-//! The corpus is the action matrix's (the old design files in `tests/corpus`, the examples, the
-//! demo and typical designs in `tests/action_matrix/designs`, the reference recipes), the sample
-//! designs, the engine's design fixtures and the older designs kept by the hole matrix, taper
-//! and projection tests.
-
-use solidcraft_engine::geom::prelude::*;
-use std::path::{Path, PathBuf};
-use std::process::Command;
-
-use serde_json::{Value, json};
-use solidcore_record::Vec3;
-use solidcraft_engine::Session;
-use solidcraft_engine::doc::{FaceAttachmentStatus, Feature, FeatureKind, ModelBody, ModelState, PlaneRef, naming};
-
-fn root() -> PathBuf {
-    Path::new(env!("CARGO_MANIFEST_DIR")).join("../..").canonicalize().unwrap()
-}
-
-/// Where a design comes from.
-enum Source {
-    File(PathBuf),
-    Sample(fn() -> Value),
-}
-
-/// Every design of the corpus: (`<group>/<design>`, where it comes from).
-fn designs() -> Vec<(String, Source)> {
-    let root = root();
-    let mut out = Vec::new();
-    let mut add = |prefix: &str, dir: PathBuf, ext: &str| {
-        let Ok(rd) = std::fs::read_dir(&dir) else { return };
-        let mut v: Vec<PathBuf> = rd.flatten().map(|e| e.path()).filter(|p| p.extension().is_some_and(|x| x == ext)).collect();
-        v.sort();
-        for p in v {
-            let stem = p.file_stem().unwrap_or_default().to_string_lossy().to_string();
-            out.push((format!("{prefix}/{stem}"), Source::File(p)));
-        }
-    };
-    add("corpus", root.join("apps/solidcraft-cli/tests/corpus"), "solidcraft");
-    add("examples", root.join("examples"), "json");
-    add("examples", root.join("examples/acceptance"), "json");
-    add("regressions", root.join("examples/regressions"), "json");
-    add("demo", root.join("examples/demo"), "json");
-    add("typical", root.join("tests/action_matrix/designs"), "json");
-    add("demo", root.join("tests/action_matrix/designs"), "solidcraft");
-    add("fixtures", root.join("crates/engine/src/tests/fixtures"), "solidcraft");
-    add("hole_matrix", root.join("tests/hole_matrix/old-0.9"), "json");
-    add("taper", root.join("tests/taper/before-1014"), "json");
-    add("projection", root.join("tests/projection/before-1508"), "json");
-    let mut cases: Vec<PathBuf> =
-        std::fs::read_dir(root.join("tests/oracle")).unwrap().flatten().map(|e| e.path()).filter(|p| p.join("recipe.json").is_file()).collect();
-    cases.sort();
-    for c in cases {
-        out.push((format!("oracle/{}", c.file_name().unwrap_or_default().to_string_lossy()), Source::File(c.join("recipe.json"))));
-    }
-    for sample in solidcraft_engine::sample::samples() {
-        let stem: String = sample.name.to_lowercase().split_whitespace().collect::<Vec<_>>().join("-");
-        out.push((format!("samples/{stem}"), Source::Sample(sample.script)));
-    }
-    out
-}
-
-/// Build a design: a design file (also a design saved as JSON) is opened, a script is run.
-fn load(source: &Source) -> Result<Session, String> {
-    let mut s = Session::default();
-    let script = match source {
-        Source::Sample(script) => script(),
-        Source::File(path) if path.extension().is_some_and(|x| x == "solidcraft") => {
-            s.execute("doc.open", &json!({"path": path.to_string_lossy()})).map_err(|e| e.to_string())?;
-            return Ok(s);
-        }
-        Source::File(path) if path.file_name().is_some_and(|n| n == "recipe.json") => {
-            let out = Command::new(env!("CARGO_BIN_EXE_solidcraft-cli")).arg("recipe").arg(path).output().map_err(|e| e.to_string())?;
-            if !out.status.success() {
-                return Err(format!("recipe: {}", String::from_utf8_lossy(&out.stderr).trim()));
-            }
-            serde_json::from_slice(&out.stdout).map_err(|e| e.to_string())?
-        }
-        Source::File(path) => {
-            let v: Value = serde_json::from_slice(&std::fs::read(path).map_err(|e| e.to_string())?).map_err(|e| e.to_string())?;
-            if v.get("features").is_some() {
-                s.execute("doc.open", &json!({"path": path.to_string_lossy()})).map_err(|e| e.to_string())?;
-                return Ok(s);
-            }
-            match v.get("steps").and_then(Value::as_array) {
-                // The demo's steps: an MCP `execute` each.
-                Some(steps) => {
-                    json!({"commands": steps.iter().map(|st| json!({"command": st["command"], "params": st["params"]})).collect::<Vec<_>>()})
-                }
-                None => v,
-            }
-        }
-    };
-    s.run_script(&script).map_err(|e| e.to_string())?;
-    if s.active_sketch.is_some() {
-        let _ = s.execute("sketch.finish", &json!({}));
-    }
-    Ok(s)
-}
-
-/// What decides a name beyond its text: `[geometric]` when it was worked out from geometry, not
-/// exact history.
-fn flags(list: &[(bool, &str)]) -> String {
-    let set: Vec<&str> = list.iter().filter(|(on, _)| *on).map(|(_, f)| *f).collect();
-    if set.is_empty() { String::new() } else { format!(" [{}]", set.join(", ")) }
-}
-
-/// Where each named face and edge of a body is, by name, sorted: a face's area and centre, an
-/// edge's length and middle, from the body's mesh. Two builds that name their faces alike give
-/// the same list.
-fn placed_names(b: &ModelBody) -> Vec<(String, [f64; 4])> {
-    if b.body.is_mesh() {
-        return Vec::new();
-    }
-    let m = b.mesh();
-    let faces = naming::face_names(b);
-    let mut sums = vec![[0.0f64; 4]; faces.len()];
-    for (t, f) in m.triangles.iter().zip(&m.tri_face) {
-        let [p, q, r] = t.map(|i| m.positions.get(i as usize).copied().unwrap_or(Vec3::ZERO));
-        let area = (q - p).cross(r - p).len() / 2.0;
-        let c = (p + q + r) / 3.0;
-        if let Some(s) = sums.get_mut(*f as usize) {
-            *s = [s[0] + area, s[1] + area * c.x, s[2] + area * c.y, s[3] + area * c.z];
-        }
-    }
-    let mut out: Vec<(String, [f64; 4])> = faces
-        .iter()
-        .zip(&sums)
-        .map(|(n, s)| {
-            let a = s[0].max(1e-300);
-            (format!("{} face {n}", b.name), [s[0], s[1] / a, s[2] / a, s[3] / a])
-        })
-        .collect();
-    for (n, line) in naming::edge_names(b).iter().zip(&m.edges) {
-        let length: f64 = line.windows(2).map(|w| w[1].dist(w[0])).sum();
-        let mid = line.iter().fold(Vec3::ZERO, |acc, p| acc + *p) / (line.len().max(1) as f64);
-        out.push((format!("{} edge {n}", b.name), [length, mid.x, mid.y, mid.z]));
-    }
-    out.sort_by(|x, y| x.0.cmp(&y.0).then(x.1.partial_cmp(&y.1).unwrap_or(std::cmp::Ordering::Equal)));
-    out
-}
-
-fn face_label(st: &ModelState, body: usize, face: usize) -> String {
-    match st.bodies.get(body) {
-        Some(b) => format!("{} face {}", b.name, naming::face_names(b).get(face).map(String::as_str).unwrap_or("?")),
-        None => format!("body #{body} face #{face}"),
-    }
-}
-
-/// Every name feature `f` stores, with what it finds in the model before it, as a feature
-/// rebuilding finds it, and whether it finds anything.
-fn record_refs(out: &mut Vec<(String, bool)>, s: &Session, f: &Feature) {
-    let doc = &*s.doc;
-    let who = format!("ref {} ({})", f.name, f.id);
-    let before = s.model.state_before(f.id);
-    // Faces a feature picks by point and stores by name (shell, draft, hole, …).
-    let explicit_emboss = matches!(&f.kind, FeatureKind::Emboss { face: Some(_), .. });
-    if f.face_names.iter().any(|n| !n.is_empty()) {
-        let fst = solidcraft_engine::doc::face_point_state(doc, &before, &f.kind, f.component).unwrap();
-        for (k, (p, n)) in f.kind.face_points().into_iter().zip(&f.face_names).enumerate() {
-            if n.is_empty() {
-                continue;
-            }
-            let (found, ok) = if explicit_emboss {
-                ("not checked (a cylindrical emboss finds its face on its own body)".to_string(), true)
-            } else {
-                match naming::locate_face_on_body(&fst, f.kind.face_body(), n, p) {
-                    Some(hit) => (format!("{}{}", face_label(&fst, hit.body, hit.face), flags(&[(!hit.verified, "geometric")])), true),
-                    None => ("gone".into(), false),
-                }
-            };
-            out.push((format!("{who} face {k} `{n}` -> {found}"), ok));
-        }
-    }
-    // Edges a feature picks by point and stores by name.
-    if f.edge_names.iter().any(|n| !n.is_empty()) {
-        let edge = |out: &mut Vec<(String, bool)>, b: &ModelBody, k: usize, n: &str, p: Vec3| {
-            let (found, ok) = match naming::locate_edge(b, n, p) {
-                Ok(hit) => (
-                    format!(
-                        "{} edge {}{}",
-                        b.name,
-                        naming::edge_names(b).get(hit.edge).map(String::as_str).unwrap_or("?"),
-                        flags(&[(!hit.verified, "geometric")])
-                    ),
-                    true,
-                ),
-                Err(e) => (format!("gone ({e})"), false),
-            };
-            out.push((format!("{who} edge {k} `{n}` -> {found}"), ok));
-        };
-        let named = |k: usize| f.edge_names.get(k).filter(|n| !n.is_empty());
-        match &f.kind {
-            FeatureKind::Fillet { edges, body, .. } | FeatureKind::Chamfer { edges, body, .. } => {
-                let pts: Vec<Vec3> = solidcraft_engine::doc::plain(edges);
-                match solidcraft_engine::doc::blend_target(&before, body, &pts).ok().and_then(|i| before.bodies.get(i)) {
-                    Some(b) => {
-                        for (k, p) in pts.iter().enumerate() {
-                            if let Some(n) = named(k) {
-                                edge(out, b, k, n, *p);
-                            }
-                        }
-                    }
-                    None => out.push((format!("{who} edges: no body to round"), false)),
-                }
-            }
-            FeatureKind::SheetConvert { body, bends, .. } => match before.body(body) {
-                Some(b) => {
-                    for (k, p) in solidcraft_engine::doc::plain::<Vec3, _>(bends).iter().enumerate() {
-                        if let Some(n) = named(k) {
-                            edge(out, b, k, n, *p);
-                        }
-                    }
-                }
-                None => out.push((format!("{who} bends: body `{body}` gone"), false)),
-            },
-            // Sheet metal edges are named by the sheet's panels, and found on its sheets.
-            FeatureKind::SheetFlange { .. } | FeatureKind::SheetHem { .. } => {
-                let pts: Vec<Vec3> = match &f.kind {
-                    FeatureKind::SheetFlange { edges, .. } => edges.iter().map(|e| e.point.0).collect(),
-                    FeatureKind::SheetHem { edges, .. } => solidcraft_engine::doc::plain(edges),
-                    _ => Vec::new(),
-                };
-                for (k, p) in pts.iter().enumerate() {
-                    let Some(n) = named(k) else { continue };
-                    let on: Vec<&str> = before.sheets.iter().filter(|sh| sh.edge_by_name(n, *p).is_some()).map(|sh| sh.body.as_str()).collect();
-                    let found = if on.is_empty() { "gone".to_string() } else { format!("sheet edge on {}", on.join(", ")) };
-                    out.push((format!("{who} sheet edge {k} `{n}` -> {found}"), !on.is_empty()));
-                }
-            }
-            other => {
-                for (k, n) in f.edge_names.iter().enumerate().filter(|(_, n)| !n.is_empty()) {
-                    out.push((format!("{who} edge {k} `{n}` -> not checked ({})", other.type_name()), true));
-                }
-            }
-        }
-    }
-    // The face a sketch sits on.
-    if let FeatureKind::Sketch { plane: PlaneRef::Face { name, anchor, at, .. }, .. } = &f.kind {
-        let mut ok = true;
-        let status = match doc.sketch_face_attachment(f.id, &s.model) {
-            FaceAttachmentStatus::Healthy { target, .. } => {
-                let faces = match before.body(&target.body) {
-                    Some(b) => match doc.anchored_face_indices(&before, b, &target) {
-                        Ok((indices, note)) => {
-                            let names = naming::face_names(b);
-                            let mut list: Vec<&str> = indices.iter().map(|i| names.get(*i).map(String::as_str).unwrap_or("?")).collect();
-                            list.sort();
-                            format!("{} faces {}{}", b.name, list.join(", "), flags(&[(note.is_some(), "changed cap")]))
-                        }
-                        Err(e) => {
-                            ok = false;
-                            format!("no faces ({e})")
-                        }
-                    },
-                    None => {
-                        ok = false;
-                        format!("body `{}` gone", target.body)
-                    }
-                };
-                format!("healthy: {faces}")
-            }
-            FaceAttachmentStatus::Lost { message, .. } => {
-                ok = false;
-                format!("lost: {message}")
-            }
-            FaceAttachmentStatus::Legacy { .. } => match name {
-                // The face its name finds, as the sketch finds it.
-                Some(n) => {
-                    let fst = solidcraft_engine::doc::state_in_frame(doc, &before, f.component).unwrap();
-                    match naming::locate_face(&fst, n, *at) {
-                        Some(hit) => format!("by name: {}{}", face_label(&fst, hit.body, hit.face), flags(&[(!hit.verified, "geometric")])),
-                        None => {
-                            ok = false;
-                            "by name: gone".into()
-                        }
-                    }
-                }
-                None => "by its pick".into(),
-            },
-            FaceAttachmentStatus::Sheet { .. } => "sheet face".into(),
-            FaceAttachmentStatus::Fixed { .. } => "fixed".into(),
-        };
-        let stored = match (anchor, name) {
-            (Some(a), _) => {
-                let kind =
-                    a.target.certificate.as_ref().and_then(|c| serde_json::to_value(c).ok()).and_then(|v| v["kind"].as_str().map(String::from));
-                format!("`{}` on {} ({})", a.target.name, a.target.body, kind.unwrap_or_else(|| "no certificate".into()))
-            }
-            (None, Some(n)) => format!("`{n}`"),
-            (None, None) => "by its pick".into(),
-        };
-        out.push((format!("{who} plane {stored} -> {status}"), ok));
-    }
-}
-
-/// A build of a design: where its faces and edges are by name, and what every name it stores
-/// finds.
-struct Build {
-    names: Vec<(String, [f64; 4])>,
-    refs: Vec<(String, bool)>,
-}
-
-fn build(s: &Session) -> Build {
-    let names = s.model.state().bodies.iter().flat_map(placed_names).collect();
-    let mut refs = Vec::new();
-    for f in s.doc.features.iter().filter(|f| !f.suppressed) {
-        let from = refs.len();
-        record_refs(&mut refs, s, f);
-        // A name that finds nothing is sound when its feature fails: it asks for the reference
-        // to be picked again.
-        if s.model.result(f.id).is_some_and(|r| r.error.is_some()) {
-            refs.iter_mut().skip(from).for_each(|(_, ok)| *ok = true);
-        }
-    }
-    Build { names, refs }
-}
-
-/// Where two builds name their faces and edges apart (at most `cap` of them): a name only one
-/// has, or a face or edge of that name somewhere else (1e-6 of its size, to the mesh's rounding).
-fn differences(a: &Build, b: &Build, cap: usize) -> Vec<String> {
-    let mut out = Vec::new();
-    if a.names.len() != b.names.len() {
-        out.push(format!("{} named faces and edges, then {}", a.names.len(), b.names.len()));
-    }
-    for ((n, x), (m, y)) in a.names.iter().zip(&b.names) {
-        let scale = x.iter().chain(y).fold(1.0f64, |s, v| s.max(v.abs()));
-        if n != m || x.iter().zip(y).any(|(p, q)| (p - q).abs() > 1e-6 * scale) {
-            out.push(format!("{n} at {x:?}, then {m} at {y:?}"));
-        }
-    }
-    for ((r, _), (q, _)) in a.refs.iter().zip(&b.refs) {
-        if r != q {
-            out.push(format!("{r}, then {q}"));
-        }
-    }
-    if a.refs.len() != b.refs.len() {
-        out.push(format!("{} stored names, then {}", a.refs.len(), b.refs.len()));
-    }
-    out.truncate(cap);
-    out
-}
-
-/// Designs whose names differ from one build to the next today: (design, why). Their
-/// differences are printed, not failed on, until the cause is fixed; a stored name that finds
-/// nothing still fails.
-const UNSTABLE: [(&str, &str); 1] = [(
-    "regressions/closed_sweep_torus_cut",
-    "the halves of each swept wall lie level along every axis, so which is `#1` and which `#2` follows the order the kernel gives the faces in, which changes from one build to the next",
-)];
-
-#[test]
-fn corpus_designs_name_alike_every_build_and_fail_where_a_reference_is_gone() {
-    let designs = designs();
-    let next = std::sync::atomic::AtomicUsize::new(0);
-    let results = std::sync::Mutex::new(Vec::new());
-    let workers = std::thread::available_parallelism().map_or(4, |n| n.get()).min(designs.len().max(1));
-    std::thread::scope(|scope| {
-        for _ in 0..workers {
-            scope.spawn(|| {
-                while let Some((name, source)) = designs.get(next.fetch_add(1, std::sync::atomic::Ordering::Relaxed)) {
-                    let got = load(source).and_then(|first| Ok((build(&first), build(&load(source)?))));
-                    results.lock().unwrap_or_else(|e| e.into_inner()).push((name.clone(), got));
-                }
-            });
-        }
-    });
-    let mut results = results.into_inner().unwrap_or_else(|e| e.into_inner());
-    results.sort_by(|a, b| a.0.cmp(&b.0));
-    let mut problems = Vec::new();
-    for (name, got) in &results {
-        let (first, second) = match got {
-            Ok(builds) => builds,
-            Err(e) => {
-                problems.push(format!("{name}: does not load: {e}"));
-                continue;
-            }
-        };
-        let lost: Vec<&str> = first.refs.iter().filter(|(_, ok)| !ok).map(|(r, _)| r.as_str()).collect();
-        if !lost.is_empty() {
-            problems.push(format!("{name}: stored names that find nothing, in features that build:\n  {}", lost.join("\n  ")));
-        }
-        let apart = differences(first, second, 40);
-        if !apart.is_empty() {
-            match UNSTABLE.iter().find(|(design, _)| design == name) {
-                Some((_, why)) => eprintln!("{name} (not checked: {why}):\n  {}", apart.join("\n  ")),
-                None => problems.push(format!("{name}: two builds name it apart (first, then second):\n  {}", apart.join("\n  "))),
-            }
-        }
-    }
-    assert!(problems.is_empty(), "{} of {} design(s) of the corpus:\n{}", problems.len(), results.len(), problems.join("\n"));
-}

apps/solidcraft-cli/tests/rebuild_topology.rs

@@ -9,7 +9,6 @@ use std::path::{Path, PathBuf};
 use serde_json::{Value, json};
 use solidcraft_engine::Session;
 use solidcraft_engine::doc::kernel::{FaceSurface, face_surface};
-use solidcraft_engine::geom::prelude::*;
 
 fn root() -> PathBuf {
     Path::new(env!("CARGO_MANIFEST_DIR")).join("../..").canonicalize().unwrap()
@@ -32,7 +31,7 @@ struct Topology {
 
 /// Every solid body's topology, by name.
 fn topology(s: &Session) -> BTreeMap<String, Topology> {
-    let st = s.world_state().unwrap();
+    let st = s.world_state();
     st.bodies
         .iter()
         .filter(|b| !b.body.is_mesh())
@@ -76,15 +75,12 @@ fn designs() -> Vec<(String, Session)> {
             .unwrap()
             .flatten()
             .map(|e| e.path())
-            .filter(|p| {
-                (solidcraft_engine::io::is_design_container_path(p) || p.extension().is_some_and(|x| x == "json"))
-                    && !p.to_string_lossy().ends_with(".expected.json")
-            })
+            .filter(|p| p.extension().is_some_and(|x| x == "solidcraft" || x == "json") && !p.to_string_lossy().ends_with(".expected.json"))
             .collect();
         files.sort();
         for p in files {
             let name = p.file_stem().unwrap_or_default().to_string_lossy().to_string();
-            let s = if solidcraft_engine::io::is_design_container_path(&p) {
+            let s = if p.extension().is_some_and(|x| x == "solidcraft") {
                 open(&p)
             } else {
                 let mut s = Session::default();
@@ -143,16 +139,18 @@ fn a_parameter_edit_rebuilds_like_a_fresh_build_and_reverts_exactly() {
     assert!(problems.is_empty(), "{}", problems.join("\n"));
 }
 
-/// The README demo's Raspberry Pi case (`examples/demo/enclosure_ui_mcp.py --story pi`): after
-/// each feature, each outer side (the four walls and the bottom) is one face and the case is as
-/// tall as its height, and a height changed in Parameters rebuilds the same topology as one
-/// built at that height: (a) built at height 24, (b) built at 24 and changed to 32, (c) built at
-/// 32. The port cut-outs and the floor vents used to split the long wall (or the end wall at 24)
-/// into strips along the openings' tops and bottoms.
+/// The README demo's Raspberry Pi case (`examples/demo/enclosure_ui_mcp.py --story pi`): its
+/// face count after each feature, and each outer side (the four walls and the bottom) one face
+/// throughout: (a) built at height 24, (b) built at 24 and changed to 32 in Parameters, (c)
+/// built at 32. The port cut-outs and the floor vents used to split the long wall (or the end
+/// wall at 24) into strips along the openings' tops and bottoms.
 #[test]
-fn pi_case_sides_stay_whole_at_both_heights() {
+fn pi_case_faces_per_step_at_both_heights() {
+    // Sketch1 (1) .. RectangularPattern2 (14): the faces once features 1..=k are built.
+    const FACES: [(usize, usize); 13] =
+        [(2, 6), (3, 10), (4, 19), (5, 19), (6, 25), (7, 43), (8, 43), (9, 55), (10, 55), (11, 59), (12, 59), (13, 63), (14, 79)];
     let dir = scratch_dir("pi");
-    let design: Value = serde_json::from_slice(&std::fs::read(root().join("tests/action_matrix/designs/pi-case.sc")).unwrap()).unwrap();
+    let design: Value = serde_json::from_slice(&std::fs::read(root().join("tests/action_matrix/designs/pi-case.solidcraft")).unwrap()).unwrap();
     let at = |height: &str, file: &str| {
         let mut d = design.clone();
         for p in d["params"].as_array_mut().unwrap() {
@@ -173,13 +171,12 @@ fn pi_case_sides_stay_whole_at_both_heights() {
     for (case, s, h) in [("(a) at 24", a, 24.), ("(b) 24 changed to 32", b, 32.), ("(c) at 32", c, 32.)] {
         assert!(errors(&s).is_empty(), "{case}: features fail: {:?}", errors(&s));
         let mut steps = Vec::new();
-        // Sketch1 (1) is no body; the box (2) .. RectangularPattern2 (14).
-        for k in 2..=14 {
+        for (k, want) in FACES {
             let mut t = s.scratch();
             t.execute("timeline.rollback", &json!({"position": k})).unwrap();
-            let st = t.world_state().unwrap();
+            let st = t.world_state();
             let body = st.bodies.iter().find(|b| b.name == "Body1").unwrap();
-            assert!(body.body.validity().is_empty(), "{case}: after feature {k}: {:?}", body.body.validity());
+            assert_eq!(body.body.face_count(), want, "{case}: faces after feature {k}");
             // Each outer side: the faces in its plane.
             for (n, d) in [([0., -1., 0.], 33.), ([0., 1., 0.], 33.), ([-1., 0., 0.], 47.5), ([1., 0., 0.], 47.5), ([0., 0., -1.], 0.)] {
                 let on = (0..body.body.face_count())

apps/solidcraft-cli/tests/run_results.rs

@@ -22,19 +22,6 @@ impl Scratch {
         std::fs::write(&path, json!({"commands": [{"command": "solid.box", "params": {"length": 2, "width": 3, "height": 4}}]}).to_string()).unwrap();
         path
     }
-
-    fn saving_script(&self) -> (PathBuf, PathBuf) {
-        let path = self.0.join("saving.json");
-        let saved = self.0.join("script-ran.solidcraft");
-        std::fs::write(
-            &path,
-            json!({"commands": [{"command": "solid.box", "params": {"length": 2, "width": 3, "height": 4}},
-                {"command": "file.save_as", "params": {"path": saved}}]})
-            .to_string(),
-        )
-        .unwrap();
-        (path, saved)
-    }
 }
 
 impl Drop for Scratch {
@@ -56,99 +43,10 @@ fn body_count(path: &Path) -> Value {
     json_output(cli().arg("eval").arg(path).output().unwrap())["body_count"].clone()
 }
 
-#[test]
-fn run_rejects_invalid_options_before_script_execution_or_output_writes() {
-    let dir = Scratch::new();
-    let (script, script_saved) = dir.saving_script();
-    let cases = [
-        (&["--out"][..], "--out needs a value"),
-        (&["--save"][..], "--save needs a value"),
-        (&["--in"][..], "--in needs a value"),
-        (&["--out", "--quiet"][..], "--out needs a value"),
-        (&["--ouut", "part.step"][..], "doesn't take --ouut"),
-        (&["--unknown"][..], "doesn't take --unknown"),
-        (&["--quality"][..], "--quality needs a value"),
-        (&["--quality", "best"][..], "--quality must be standard, fine or finest, not `best`"),
-        (&["--quality", "standard", "--quality", "best"][..], "--quality is given more than once"),
-    ];
-    for existing in [false, true] {
-        let saved = dir.0.join(format!("{existing}.solidcraft"));
-        let exported = dir.0.join(format!("{existing}.step"));
-        let report = dir.0.join(format!("{existing}.json"));
-        let outputs = [&saved, &exported, &report];
-        if existing {
-            for path in outputs {
-                std::fs::write(path, b"existing output").unwrap();
-            }
-        }
-        for (extra, message) in cases {
-            let output = cli()
-                .arg("run")
-                .arg(&script)
-                .arg("--save")
-                .arg(&saved)
-                .arg("--out")
-                .arg(&exported)
-                .arg("--json-out")
-                .arg(&report)
-                .args(extra)
-                .output()
-                .unwrap();
-            assert_eq!(output.status.code(), Some(1), "{extra:?}");
-            assert!(String::from_utf8_lossy(&output.stderr).contains(message), "{extra:?}: {}", String::from_utf8_lossy(&output.stderr));
-            assert!(output.stdout.is_empty());
-            assert!(!script_saved.exists(), "invalid arguments must be rejected before the script runs");
-            for path in outputs {
-                if existing {
-                    assert_eq!(std::fs::read(path).unwrap(), b"existing output");
-                } else {
-                    assert!(!path.exists());
-                }
-            }
-        }
-    }
-}
-
-#[test]
-fn eval_and_inspect_reject_invalid_options_before_script_execution_or_reporting() {
-    let dir = Scratch::new();
-    let (script, script_saved) = dir.saving_script();
-    let cases = [
-        (&["--in"][..], "--in needs a value"),
-        (&["--in", "--quiet"][..], "--in needs a value"),
-        (&["--out", "part.step"][..], "doesn't take --out"),
-        (&["--unknown"][..], "doesn't take --unknown"),
-    ];
-    for command in ["eval", "inspect"] {
-        for existing in [false, true] {
-            let report = dir.0.join(format!("{command}-{existing}.json"));
-            if existing {
-                std::fs::write(&report, b"existing report").unwrap();
-            }
-            for (extra, message) in cases {
-                let output = cli().arg(command).arg(&script).arg("--json-out").arg(&report).args(extra).output().unwrap();
-                assert_eq!(output.status.code(), Some(1), "{command} {extra:?}");
-                assert!(
-                    String::from_utf8_lossy(&output.stderr).contains(message),
-                    "{command} {extra:?}: {}",
-                    String::from_utf8_lossy(&output.stderr)
-                );
-                assert!(output.stdout.is_empty());
-                assert!(!script_saved.exists(), "invalid arguments must be rejected before the script runs");
-                if existing {
-                    assert_eq!(std::fs::read(&report).unwrap(), b"existing report");
-                } else {
-                    assert!(!report.exists());
-                }
-            }
-        }
-    }
-}
-
 #[test]
 fn cli_loads_both_design_encodings_by_contents() {
     let dir = Scratch::new();
-    for extension in ["sc", "solidcraft", "solvecraft", "json"] {
+    for extension in ["solidcraft", "solvecraft", "json"] {
         let saved = dir.0.join(format!("box.{extension}"));
         json_output(cli().arg("run").arg(dir.script()).arg("--save").arg(&saved).output().unwrap());
         let bytes = std::fs::read(&saved).unwrap();
@@ -161,118 +59,6 @@ fn cli_loads_both_design_encodings_by_contents() {
     }
 }
 
-/// #1369: a pending concept that did not land in the numbered release must not be silently
-/// dropped on open/resave, in either encoding: it opens with a warning, and saving keeps it.
-#[test]
-fn unknown_pending_concepts_preserve_the_open_design_and_output_files() {
-    use solidcraft_engine::{Session, doc, io};
-
-    let dir = Scratch::new();
-    for version in [33, doc::format::FORMAT] {
-        let mut experimental = doc::Document::new("Experimental");
-        experimental.format = doc::format::format_string(version);
-        experimental.format_pending.push("experimental-card".into());
-        for (extension, bytes) in [("json", io::write_design(&experimental)), ("solidcraft", io::write_design_container(&experimental).unwrap())] {
-            let source = dir.0.join(format!("experimental-{version}.{extension}"));
-            std::fs::write(&source, &bytes).unwrap();
-            let mut session = Session::default();
-            // It opens, and the reply says what it is.
-            let reply = session.execute("doc.open", &json!({"path": source})).unwrap();
-            let notice = reply["newer_file"]["notice"].as_str().unwrap().to_string();
-            assert!(notice.contains("experimental-card") && notice.starts_with("Saved by a newer SolidCraft"), "{notice}");
-            assert_eq!(reply["warnings"][0], notice.as_str());
-            assert_eq!(session.doc.name, "Experimental");
-
-            for existing in [false, true] {
-                let destination = dir.0.join(format!("output-{version}-{extension}-{existing}.{extension}"));
-                let backup = io::backup_path(&destination);
-                if existing {
-                    std::fs::write(&destination, b"existing design").unwrap();
-                }
-                let output = cli().args(["run", "--in"]).arg(&source).arg("--save").arg(&destination).output().unwrap();
-                let error = String::from_utf8_lossy(&output.stderr);
-                assert_eq!(output.status.code(), Some(0), "{error}");
-                assert!(error.contains("warning: Saved by a newer SolidCraft") && error.contains("experimental-card"), "{error}");
-                // Saved, it still says it has the change, and opens the same way.
-                let saved = io::read_design(&std::fs::read(&destination).unwrap()).unwrap();
-                assert!(saved.format_pending.iter().any(|name| name == "experimental-card"));
-                assert!(saved.newer_file.is_some());
-                if existing {
-                    assert_eq!(std::fs::read(&backup).unwrap(), b"existing design");
-                }
-                assert_eq!(std::fs::read(&source).unwrap(), bytes);
-            }
-        }
-    }
-}
-
-/// `eval` and `run` on a design one format newer, with a feature kind this version doesn't have:
-/// the rest builds, the reply names it, and the saved file still holds it, under the file's number.
-#[test]
-fn the_cli_opens_a_newer_design_and_saving_keeps_what_it_cant_read() {
-    use solidcraft_engine::{Session, doc, io};
-
-    let dir = Scratch::new();
-    let mut session = Session::default();
-    session.execute("solid.box", &json!({"length": 2, "width": 3, "height": 4})).unwrap();
-    let mut file: Value = serde_json::from_slice(&io::write_design(&session.doc)).unwrap();
-    let newer = doc::format::format_string(doc::format::FORMAT + 1);
-    file["format"] = json!(newer);
-    let future = json!({"id": 900, "name": "Lattice1", "type": "gyroid_lattice", "cell": 2.5});
-    file["features"].as_array_mut().unwrap().push(future.clone());
-    let source = dir.0.join("newer.json");
-    std::fs::write(&source, file.to_string()).unwrap();
-
-    let output = cli().args(["eval"]).arg(&source).output().unwrap();
-    let error = String::from_utf8_lossy(&output.stderr);
-    assert_eq!(output.status.code(), Some(0), "{error}");
-    assert!(error.contains("warning: Saved by a newer SolidCraft") && error.contains("Lattice1"), "{error}");
-    let reply: Value = serde_json::from_slice(&output.stdout).unwrap();
-    assert_eq!(reply["body_count"], 1);
-    assert!(reply["newer_file"]["not_understood"][0].as_str().unwrap().contains("gyroid_lattice"), "{reply}");
-    assert!(reply["warnings"][0].as_str().unwrap().starts_with("Saved by a newer SolidCraft"), "{reply}");
-
-    for extension in ["json", "sc"] {
-        let destination = dir.0.join(format!("saved.{extension}"));
-        let output = cli().args(["run", "--in"]).arg(&source).arg("--save").arg(&destination).output().unwrap();
-        assert_eq!(output.status.code(), Some(0), "{}", String::from_utf8_lossy(&output.stderr));
-        let saved = io::read_design(&std::fs::read(&destination).unwrap()).unwrap();
-        assert_eq!(saved.format, newer, "never a lower number");
-        let again: Value = serde_json::from_slice(&io::write_design(&saved)).unwrap();
-        assert_eq!(again["features"].as_array().unwrap().last().unwrap(), &future);
-    }
-}
-
-#[test]
-fn known_pending_concepts_and_released_files_round_trip_with_inert_metadata() {
-    use solidcraft_engine::{doc, io};
-
-    let dir = Scratch::new();
-    let current = doc::Document::new("Supported");
-    let mut released = current.clone();
-    released.format = doc::format::format_string(33);
-    released.format_pending.clear();
-    let mut experimental = released.clone();
-    experimental.format_pending.push("reserved-body-names".into());
-    for (index, mut document) in [current, released, experimental].into_iter().enumerate() {
-        document.metadata.0.insert("com.example.tool".into(), json!({"format_pending": ["experimental-card"], "physical_card": {"density": 700}}));
-        for (extension, bytes) in [("json", io::write_design(&document)), ("solidcraft", io::write_design_container(&document).unwrap())] {
-            let source = dir.0.join(format!("supported-{index}.{extension}"));
-            let destination = dir.0.join(format!("resaved-{index}.{extension}"));
-            std::fs::write(&source, &bytes).unwrap();
-            let output = cli().args(["run", "--in"]).arg(&source).arg("--save").arg(&destination).output().unwrap();
-            assert!(output.status.success(), "{}", String::from_utf8_lossy(&output.stderr));
-            let reopened = io::read_design(&std::fs::read(&destination).unwrap()).unwrap();
-            assert_eq!(reopened.metadata, document.metadata);
-            // #4907: `run --save` maps to Save As, and a borrowed design name
-            // follows the destination file's stem instead of keeping the old name.
-            assert_eq!(reopened.name, format!("resaved-{index}"));
-            assert_eq!(reopened.features, document.features);
-            assert_eq!(std::fs::read(&source).unwrap(), bytes);
-        }
-    }
-}
-
 #[test]
 fn results_still_save_and_export_the_script_once() {
     let dir = Scratch::new();
@@ -291,38 +77,6 @@ fn results_still_save_and_export_the_script_once() {
     }
 }
 
-/// The triangles of a binary STL: the count after its 80-byte header.
-fn stl_triangles(path: &Path) -> u32 {
-    let bytes = std::fs::read(path).unwrap();
-    u32::from_le_bytes(bytes[80..84].try_into().unwrap())
-}
-
-/// #12270: `run --out part.stl --quality fine` writes the mesh at that quality, as
-/// `file.export`'s `quality` does, without a script to say so.
-#[test]
-fn run_exports_meshes_at_the_quality_asked_for() {
-    let dir = Scratch::new();
-    let script = dir.0.join("cylinder.json");
-    std::fs::write(&script, json!({"commands": [{"command": "solid.cylinder", "params": {"diameter": 40, "height": 10}}]}).to_string()).unwrap();
-    let export = |name: &str, quality: Option<&str>| {
-        let stl = dir.0.join(name);
-        let mut command = cli();
-        command.arg("run").arg(&script).arg("--quiet").arg("--out").arg(&stl);
-        if let Some(q) = quality {
-            command.args(["--quality", q]);
-        }
-        let output = command.output().unwrap();
-        assert!(output.status.success(), "{quality:?}: {}", String::from_utf8_lossy(&output.stderr));
-        stl_triangles(&stl)
-    };
-    let default = export("default.stl", None);
-    let standard = export("standard.stl", Some("standard"));
-    let fine = export("fine.stl", Some("fine"));
-    let finest = export("finest.stl", Some("finest"));
-    assert_eq!(default, standard);
-    assert!(standard < fine && fine < finest, "standard {standard}, fine {fine}, finest {finest}");
-}
-
 #[test]
 fn results_with_base_design_and_quiet_still_report_and_save() {
     let dir = Scratch::new();
@@ -336,110 +90,6 @@ fn results_with_base_design_and_quiet_still_report_and_save() {
     assert_eq!(body_count(&base), 1);
 }
 
-/// `eval` and its alias must measure the script applied to the input design, rather than
-/// silently reporting the input alone (#6861).
-#[test]
-fn eval_runs_its_script_on_the_in_design() {
-    let dir = Scratch::new();
-    let base = dir.0.join("base.solidcraft");
-    let script = dir.0.join("add.json");
-    json_output(cli().arg("run").arg(dir.script()).arg("--save").arg(&base).output().unwrap());
-    let original = std::fs::read(&base).unwrap();
-    std::fs::write(
-        &script,
-        json!({"commands": [{"command": "solid.box", "params": {"length": 5, "width": 3, "height": 4, "corner": [10, 0, 0]}}]}).to_string(),
-    )
-    .unwrap();
-    for command in ["eval", "inspect"] {
-        // Both existing one-input forms still measure just the original body.
-        for input in [&base, &dir.script()] {
-            for named_input in [false, true] {
-                let mut c = cli();
-                c.arg(command);
-                if named_input {
-                    c.arg("--in");
-                }
-                let measured = json_output(c.arg(input).output().unwrap());
-                assert_eq!(measured["body_count"], 1);
-                assert!((measured["total"]["volume_mm3"].as_f64().unwrap() - 24.0).abs() < 1e-6);
-            }
-        }
-        for input_first in [false, true] {
-            for to_file in [false, true] {
-                let mut c = cli();
-                c.arg(command);
-                if input_first {
-                    c.arg("--in").arg(&base).arg(&script);
-                } else {
-                    c.arg(&script).arg("--in").arg(&base);
-                }
-                let report = dir.0.join("measurement.json");
-                if to_file {
-                    c.arg("--json-out").arg(&report);
-                }
-                let output = c.output().unwrap();
-                let measured = if to_file {
-                    assert!(output.status.success(), "{}", String::from_utf8_lossy(&output.stderr));
-                    assert!(output.stdout.is_empty());
-                    serde_json::from_slice(&std::fs::read(&report).unwrap()).unwrap()
-                } else {
-                    json_output(output)
-                };
-                assert_eq!(measured["body_count"], 2, "{command}, input_first={input_first}, to_file={to_file}");
-                assert!((measured["total"]["volume_mm3"].as_f64().unwrap() - 84.0).abs() < 1e-6);
-                assert_eq!(measured["timeline"].as_array().unwrap().len(), 2, "the script runs exactly once");
-                assert_eq!(std::fs::read(&base).unwrap(), original, "evaluation never saves its changes to the input");
-            }
-        }
-    }
-}
-
-#[test]
-fn eval_propagates_script_errors_before_writing_a_report() {
-    let dir = Scratch::new();
-    let base = dir.script();
-    let script = dir.0.join("bad.json");
-    for command in ["eval", "inspect"] {
-        for contents in ["{", r#"{"commands":[{"command":"missing.command","params":{}}]}"#] {
-            std::fs::write(&script, contents).unwrap();
-            let report = dir.0.join("report.json");
-            let output = cli().arg(command).arg(&script).arg("--in").arg(&base).arg("--json-out").arg(&report).output().unwrap();
-            assert_eq!(output.status.code(), Some(1));
-            assert!(!output.stderr.is_empty());
-            assert!(output.stdout.is_empty());
-            assert!(!report.exists());
-        }
-    }
-}
-
-#[test]
-fn eval_rejects_unknown_options_and_missing_input_values_before_writing_a_report() {
-    let dir = Scratch::new();
-    let script = dir.script();
-    let report = dir.0.join("report.json");
-    for command in ["eval", "inspect"] {
-        for (options, message) in [(&["--frobnicate", "1"][..], "doesn't take --frobnicate"), (&["--in"][..], "--in needs a value")] {
-            for options_first in [false, true] {
-                std::fs::write(&report, b"previous report").unwrap();
-                let mut c = cli();
-                c.arg(command);
-                if options_first {
-                    c.args(options).arg("--json-out").arg(&report).arg(&script);
-                } else {
-                    c.arg(&script).args(options).arg("--json-out").arg(&report);
-                }
-                // A following option also proves that --in cannot consume a flag as its value.
-                let output = c.output().unwrap();
-                assert_eq!(output.status.code(), Some(1), "{command}, {options:?}");
-                let error = String::from_utf8_lossy(&output.stderr);
-                assert!(error.contains(message), "{command}: {error}");
-                assert!(output.stdout.is_empty());
-                assert_eq!(std::fs::read(&report).unwrap(), b"previous report");
-            }
-        }
-    }
-}
-
 #[test]
 fn results_propagate_output_errors() {
     let dir = Scratch::new();
@@ -481,11 +131,6 @@ fn legacy_extension_and_format_tag_still_open() {
     assert_eq!(body_count(&resaved), 2);
     let reopened = solidcraft_engine::io::read_design(&std::fs::read(&resaved).unwrap()).unwrap();
     assert!(reopened.to_json().contains("\"solidcraft/"));
-    // `.solidcraft` (before `.sc`) opens as `--in` and as the design to evaluate; `.sc` too.
-    let current = dir.0.join("current.sc");
-    json_output(cli().args(["run", "--in"]).arg(&resaved).arg(dir.script()).arg("--save").arg(&current).output().unwrap());
-    assert_eq!(body_count(&current), 3);
-    assert!(solidcraft_engine::io::is_design_container(&std::fs::read(&current).unwrap()), "a .sc file is a design container");
 }
 
 /// `snapshot` starts from `--in` as `run` does (its script runs on that design), and refuses an
@@ -532,11 +177,7 @@ fn snapshot_runs_its_script_on_the_in_design() {
 fn unknown_command_suggests_the_closest_id() {
     let output = cli().args(["exec", "file.open"]).output().unwrap();
     assert_eq!(output.status.code(), Some(1));
-    assert!(
-        String::from_utf8_lossy(&output.stderr).contains("did you mean `doc.open` or `panel.open`?"),
-        "{}",
-        String::from_utf8_lossy(&output.stderr)
-    );
+    assert!(String::from_utf8_lossy(&output.stderr).contains("did you mean `doc.open`?"), "{}", String::from_utf8_lossy(&output.stderr));
 }
 
 /// #1833: `--timings` reports each command's time instead of the measurement, `--profile` adds
@@ -568,247 +209,3 @@ fn timings_and_profile_report_each_command() {
     assert!(!output.status.success());
     assert!(String::from_utf8_lossy(&output.stderr).contains("--timings needs a script"));
 }
-
-/// #6921: `--param-check` checks a script's steps against their contracts on every path `run`
-/// takes (a script alone, on an `--in` design or script, with `--results`, `--timings` or
-/// `--profile`), and a warning reaches stderr even when a later step fails.
-#[test]
-fn param_check_reaches_every_script_run_takes() {
-    let dir = Scratch::new();
-    let typo = dir.0.join("typo.json");
-    let step = json!({"command": "solid.box", "params": {"length": 2, "width": 3, "height": 4, "operaton": "new"}});
-    std::fs::write(&typo, json!({"commands": [step.clone()]}).to_string()).unwrap();
-    let base = dir.0.join("base.solidcraft");
-    json_output(cli().arg("run").arg(dir.script()).arg("--save").arg(&base).output().unwrap());
-    let saved = dir.0.join("saved.solidcraft");
-    let start = dir.script();
-    let (typo, base, saved_arg, start) = (typo.to_str().unwrap(), base.to_str().unwrap(), saved.to_str().unwrap(), start.to_str().unwrap());
-    let paths = [&[][..], &["--in", base], &["--in", start], &["--results"], &["--timings"], &["--timings", "--profile"]];
-    let run = |level: Option<&str>, extra: &[&str]| {
-        std::fs::remove_file(&saved).ok();
-        let check = level.map(|l| ["--param-check", l]).into_iter().flatten();
-        cli().args(["run", typo, "--save", saved_arg]).args(check).args(extra).output().unwrap()
-    };
-
-    // Off, the default: the step runs as it always has, without a word.
-    let off = run(None, &[]);
-    assert!(off.status.success() && !String::from_utf8_lossy(&off.stderr).contains("operaton"), "{off:?}");
-    assert_eq!(body_count(&saved), 1);
-
-    // Warn: each path runs the step, saves, and reports it on stderr; `--results` keeps it too.
-    for extra in paths {
-        let output = run(Some("warn"), extra);
-        let stderr = String::from_utf8_lossy(&output.stderr);
-        assert!(output.status.success(), "{extra:?}: {stderr}");
-        assert!(stderr.contains("step 1: unknown key `operaton`; did you mean `operation`?"), "{extra:?}: {stderr}");
-        assert!(saved.exists(), "{extra:?}");
-        if extra == ["--results"] {
-            let results: Value = serde_json::from_slice(&output.stdout).unwrap();
-            assert!(results[0]["param_warnings"][0].as_str().is_some_and(|w| w.contains("operaton")), "{results}");
-        }
-    }
-
-    // Strict: on each path the run stops at the step, and nothing is written.
-    for extra in paths {
-        let output = run(Some("strict"), extra);
-        let stderr = String::from_utf8_lossy(&output.stderr);
-        assert_eq!(output.status.code(), Some(1), "{extra:?}: {stderr}");
-        assert!(stderr.contains("unknown key `operaton`"), "{extra:?}: {stderr}");
-        assert!(!saved.exists(), "{extra:?}");
-    }
-
-    // Warn, with a later step that fails: the run fails, and the first step's warning is still
-    // reported, timed or not.
-    let failing = dir.0.join("failing.json");
-    let fail = json!({"command": "solid.extrude", "params": {"sketch": "Nope"}});
-    std::fs::write(&failing, json!({"commands": [step, fail]}).to_string()).unwrap();
-    for extra in [&[][..], &["--timings"]] {
-        let output = cli().arg("run").arg(&failing).args(["--param-check", "warn"]).args(extra).output().unwrap();
-        let stderr = String::from_utf8_lossy(&output.stderr);
-        assert_eq!(output.status.code(), Some(1), "{extra:?}: {stderr}");
-        assert!(stderr.contains("step 1: unknown key `operaton`") && stderr.contains("no sketch `Nope`"), "{extra:?}: {stderr}");
-    }
-
-    // A level it doesn't know and a missing value fail.
-    for (bad, says) in [
-        (&["--param-check", "loud"][..], "--param-check wants off, warn or strict, not `loud`"),
-        (&["--param-check"], "run: --param-check wants off, warn or strict"),
-    ] {
-        let output = cli().args(["run", typo]).args(bad).output().unwrap();
-        let stderr = String::from_utf8_lossy(&output.stderr);
-        assert_eq!(output.status.code(), Some(1), "{bad:?}: {stderr}");
-        assert!(stderr.contains(says), "{bad:?}: {stderr}");
-    }
-}
-
-fn render_setup_script(dir: &Scratch, job: Value) -> PathBuf {
-    let path = dir.0.join("render.json");
-    std::fs::write(
-        &path,
-        json!({"commands":[
-            {"command":"solid.box","params":{"length":10,"width":10,"height":10}},
-            {"command":"render.settings.set","params":{"name":"Portable setup","set":{"width":16,"height":16,"job":job}}}
-        ]})
-        .to_string(),
-    )
-    .unwrap();
-    path
-}
-
-#[cfg(feature = "raytrace-cpu")]
-#[test]
-fn render_uses_typed_cpu_setups_from_scripts_and_saved_designs() {
-    for options in [json!({}), json!({"progressive":{"samples_per_pixel":3,"seed":81},"lights":[]})] {
-        let dir = Scratch::new();
-        let script = render_setup_script(&dir, json!({"method":"cpu_raytrace","options":options}));
-        let image = dir.0.join("script.png");
-        let result = json_output(
-            cli()
-                .arg("render")
-                .arg(&script)
-                .args(["--setup", "Portable setup", "--out"])
-                .arg(&image)
-                .env("SOLIDCRAFT_GPU", "must-not-be-read-for-cpu")
-                .output()
-                .unwrap(),
-        );
-        assert_eq!(result["preflight"]["resolved"]["executor"], "cpu-raytrace");
-        assert_eq!(result["export"]["frame"]["executor"], "cpu-raytrace");
-        assert_eq!(result["preflight"]["request"]["integrator"], "raytrace");
-        assert_eq!(result["preflight"]["request"]["raytrace"].get("progressive"), options.get("progressive"));
-        let png = image::load_from_memory(&std::fs::read(&image).unwrap()).unwrap();
-        assert_eq!((png.width(), png.height()), (16, 16));
-
-        let saved = dir.0.join("portable.solidcraft");
-        json_output(cli().arg("run").arg(&script).arg("--save").arg(&saved).output().unwrap());
-        let original = std::fs::read(&saved).unwrap();
-        let overridden = dir.0.join("overridden.png");
-        let result = json_output(
-            cli()
-                .arg("render")
-                .arg(&saved)
-                .args(["--setup", "Portable setup", "--out"])
-                .arg(&overridden)
-                .args(["--width", "12", "--height", "8", "--exposure", "1.25"])
-                .env("SOLIDCRAFT_GPU", "must-not-be-read-for-cpu")
-                .output()
-                .unwrap(),
-        );
-        assert_eq!(result["preflight"]["request"]["width"], 12);
-        assert_eq!(result["preflight"]["request"]["height"], 8);
-        assert_eq!(result["preflight"]["request"]["raytrace"]["exposure_ev"], 1.25);
-        assert_eq!(result["export"]["frame"]["executor"], "cpu-raytrace");
-        assert_eq!(result["preflight"]["request"]["raytrace"].get("progressive"), options.get("progressive"));
-        let png = image::load_from_memory(&std::fs::read(overridden).unwrap()).unwrap();
-        assert_eq!((png.width(), png.height()), (12, 8));
-        assert_eq!(std::fs::read(saved).unwrap(), original, "CLI overrides must not rewrite saved intent");
-    }
-}
-
-#[test]
-fn render_preserves_typed_raster_and_legacy_runtime_controls() {
-    for job in [Value::Null, json!({"method":"raster","transparent_background":true})] {
-        let dir = Scratch::new();
-        let script = render_setup_script(&dir, job.clone());
-        let out = dir.0.join("raster.png");
-        let mut command = cli();
-        command
-            .arg("render")
-            .arg(&script)
-            .args(["--setup", "Portable setup", "--out"])
-            .arg(&out)
-            .env("SOLIDCRAFT_GPU", "must-not-be-read-for-raster");
-        if job.is_null() {
-            command.arg("--transparent");
-        }
-        let result = json_output(command.output().unwrap());
-        assert_eq!(result["preflight"]["resolved"]["executor"], "cpu-product");
-        assert_eq!(result["export"]["frame"]["executor"], "cpu-product");
-        assert_eq!(result["preflight"]["request"]["transparent_background"], true);
-        assert!(std::fs::read(out).unwrap().starts_with(b"\x89PNG\r\n\x1a\n"));
-    }
-}
-
-#[test]
-fn typed_render_rejects_explicit_runtime_flags_before_gpu_or_option_file_reads() {
-    let dir = Scratch::new();
-    let script = render_setup_script(&dir, json!({"method":"gpu_path","options":{"samples":64,"seed":0}}));
-    let out = dir.0.join("existing.png");
-    std::fs::write(&out, b"previous completed image").unwrap();
-    for flags in [
-        &["--progressive"][..],
-        &["--transparent"][..],
-        &["--samples", "64"][..],
-        &["--max-depth", "8"][..],
-        &["--seed", "0"][..],
-        &["--lighting", "deliberately-missing-lighting.json"][..],
-        &["--tone-map", "reinhard"][..],
-        &["--environment", "deliberately-missing-environment.json"][..],
-    ] {
-        let output = cli()
-            .arg("render")
-            .arg(&script)
-            .args(["--setup", "Portable setup", "--out"])
-            .arg(&out)
-            .arg("--overwrite")
-            .args(flags)
-            .env("SOLIDCRAFT_GPU", "must-not-be-read-for-conflicts")
-            .output()
-            .unwrap();
-        assert_eq!(output.status.code(), Some(1));
-        let error = String::from_utf8_lossy(&output.stderr);
-        assert!(error.contains(&format!("{} cannot accompany a typed saved render setup", flags[0])), "{error}");
-        assert!(output.stdout.is_empty());
-        assert_eq!(std::fs::read(&out).unwrap(), b"previous completed image");
-    }
-}
-
-#[test]
-fn typed_gpu_render_selects_its_host_without_a_progressive_runtime_flag() {
-    // A deliberately invalid policy proves that dispatch reached the GPU host
-    // without depending on an adapter or accepting a CPU fallback. The legacy
-    // --progressive path must still reach that same host-selection boundary.
-    for job in [json!({"method":"gpu_path","options":{"samples":2}}), Value::Null] {
-        let dir = Scratch::new();
-        let script = render_setup_script(&dir, job.clone());
-        let out = dir.0.join("gpu.png");
-        let mut command = cli();
-        command.arg("render").arg(&script).args(["--setup", "Portable setup", "--out"]).arg(&out).env("SOLIDCRAFT_GPU", "not-a-gpu-policy");
-        if job.is_null() {
-            command.arg("--progressive");
-        }
-        let output = command.output().unwrap();
-        assert_eq!(output.status.code(), Some(1));
-        let error = String::from_utf8_lossy(&output.stderr);
-        assert!(error.contains("SOLIDCRAFT_GPU must be auto, hardware, software or cpu"), "{error}");
-        assert!(!out.exists());
-    }
-}
-
-#[test]
-fn render_setup_overrides_obey_shared_validation_before_host_initialization() {
-    let dir = Scratch::new();
-    let script = render_setup_script(&dir, json!({"method":"cpu_raytrace","options":{"progressive":{"samples_per_pixel":64}}}));
-    let out = dir.0.join("invalid.png");
-    // 1024 * 1024 * 64 exceeds the unchanged default Compact camera-sample
-    // budget. Admission must name that envelope before initializing any host.
-    for (flags, message) in [
-        (&["--width", "1024", "--height", "1024"][..], "CPU Compact exceeds its 16777216 camera-sample admission"),
-        (&["--width", "0"][..], "render output must be at least"),
-        (&["--exposure", "NaN"][..], "render exposure must be finite"),
-    ] {
-        let output = cli()
-            .arg("render")
-            .arg(&script)
-            .args(["--setup", "Portable setup", "--out"])
-            .arg(&out)
-            .args(flags)
-            .env("SOLIDCRAFT_GPU", "must-not-be-read-for-invalid-settings")
-            .output()
-            .unwrap();
-        assert_eq!(output.status.code(), Some(1));
-        let error = String::from_utf8_lossy(&output.stderr);
-        assert!(error.contains(message), "{error}");
-        assert!(!out.exists());
-    }
-}

apps/solidcraft-cli/tests/run_strict.rs

@@ -65,10 +65,7 @@ fn allow_errors_writes_anyway_and_a_saved_design_keeps_failing() {
     let output = cli().arg("run").arg(dir.broken_script()).arg("--allow-errors").arg("--out").arg(&step).arg("--save").arg(&saved).output().unwrap();
     assert!(output.status.success(), "{}", String::from_utf8_lossy(&output.stderr));
     let measured: Value = serde_json::from_slice(&output.stdout).unwrap();
-    // SMLib integrates the volume (a relative accuracy of 1e-4 asked for; a box comes out within
-    // a few units in the last place), so the box's 4000 mm³ is checked to 1e-9, not to the bit.
-    let volume = measured["total"]["volume_mm3"].as_f64().unwrap();
-    assert!((volume - 4000.0).abs() < 4000.0 * 1e-9, "the box without its fillet: {volume}");
+    assert_eq!(measured["total"]["volume_mm3"], json!(4000.0), "the box without its fillet");
     assert!(std::fs::metadata(&step).unwrap().len() > 0);
     // The saved design still holds the failing feature: running it fails too, `eval` reports it.
     let again = dir.0.join("again.step");

apps/solidcraft-cli/tests/script_roundtrip.rs

@@ -123,42 +123,3 @@ fn a_design_naming_a_sketch_and_its_extrude_alike_replays_from_its_script() {
     assert_eq!(names, ["Block", "Block"], "{first:#}");
     assert_eq!(second["commands"], first["commands"], "the replayed design's script has the same steps");
 }
-
-/// #10230: script export must disclose the print-face state that replay leaves out.
-#[test]
-fn script_export_warns_about_omitted_print_faces_on_stderr() {
-    let dir = std::env::temp_dir().join(format!("solidcraft-print-face-script-{}", std::process::id()));
-    std::fs::create_dir_all(&dir).unwrap();
-    let saved = dir.join("block.sc");
-    let exported = dir.join("block.json");
-    let mut s = Session::default();
-    s.execute("solid.box", &json!({"length": 20, "width": 10, "height": 5, "body_name": "Block"})).unwrap();
-    s.execute("body.print_face", &json!({"body": "Block", "point": [10, 5, 0]})).unwrap();
-    s.execute("file.save", &json!({"path": saved})).unwrap();
-    let native = std::fs::read(&saved).unwrap();
-
-    for to_file in [false, true] {
-        let mut cmd = std::process::Command::new(env!("CARGO_BIN_EXE_solidcraft-cli"));
-        cmd.arg("script").arg(&saved);
-        if to_file {
-            cmd.arg("--out").arg(&exported);
-        }
-        let out = cmd.output().unwrap();
-        let stderr = String::from_utf8_lossy(&out.stderr);
-        assert!(out.status.success(), "{stderr}");
-        assert!(stderr.contains("note: the script leaves out print-face assignments (body.print_face)"), "{stderr}");
-        let script = if to_file {
-            assert!(out.stdout.is_empty(), "--out must keep stdout empty");
-            std::fs::read(&exported).unwrap()
-        } else {
-            out.stdout
-        };
-        let script: Value = serde_json::from_slice(&script).unwrap();
-        let mut replayed = Session::default();
-        replayed.run_script(&script).unwrap();
-        assert!(replayed.doc.print_faces.is_empty());
-        assert_eq!(replayed.doc.features, s.doc.features);
-        assert_eq!(std::fs::read(&saved).unwrap(), native, "export must not change the source design");
-    }
-    std::fs::remove_dir_all(dir).unwrap();
-}

apps/solidcraft-cli/tests/snapshot_camera.rs

@@ -171,9 +171,9 @@ fn a_saved_view_is_its_camera_and_a_standard_view_is_unchanged() {
     let top = dir.snapshot(&script, "top.png", &["--view", "top"]);
     let mut s = Session::default();
     s.run_script(&serde_json::from_slice(&std::fs::read(&script).unwrap()).unwrap()).unwrap();
-    let mut cam = solidcraft_engine::view::home_camera(&s).unwrap();
+    let mut cam = solidcraft_engine::view::home_camera(&s);
     cam.set_view(solidcraft_engine::render::StandardView::Top);
-    let scene = solidcraft_engine::view::scene(&s, &cam).unwrap();
+    let scene = solidcraft_engine::view::scene(&s, &cam);
     assert_same(&top, &solidcraft_engine::capture::png(&scene, &cam, SIZE.0, SIZE.1).unwrap().bytes, "the home camera turned to the top");
     assert_same(&top, &dir.mcp(&script, "mcp-top.png", json!({"view": "top"})), "the MCP top view");
     assert_differs(&top, &saved, "top and the saved view");
@@ -288,7 +288,7 @@ fn a_snapshot_shows_the_part_where_the_camera_puts_it() {
         let vp = c.view_proj(f64::from(SIZE.0) / f64::from(SIZE.1), 1000.0);
         let (mut elo, mut ehi) = ([f64::MAX; 2], [f64::MIN; 2]);
         for k in 0..8 {
-            let p = solidcore_record::Vec3::new(
+            let p = solidcraft_engine::geom::Vec3::new(
                 corner[0] + size[0] * f64::from(k & 1),
                 corner[1] + size[1] * f64::from((k >> 1) & 1),
                 corner[2] + size[2] * f64::from((k >> 2) & 1),
@@ -335,9 +335,9 @@ fn a_forced_cpu_snapshot_is_the_cpu_rasterizers_and_says_so() {
     assert!(stderr.contains("CPU rasterizer"), "{stderr}");
     let mut s = Session::default();
     s.run_script(&serde_json::from_slice(&std::fs::read(&script).unwrap()).unwrap()).unwrap();
-    let mut cam = solidcraft_engine::view::home_camera(&s).unwrap();
+    let mut cam = solidcraft_engine::view::home_camera(&s);
     cam.set_view(solidcraft_engine::render::StandardView::Top);
-    let scene = solidcraft_engine::view::scene(&s, &cam).unwrap();
+    let scene = solidcraft_engine::view::scene(&s, &cam);
     let cpu = solidcraft_engine::render::render_png(&scene, &cam, SIZE.0 as usize, SIZE.1 as usize).unwrap();
     assert_eq!(std::fs::read(dir.0.join("cpu.png")).unwrap(), cpu);
 }

apps/solidcraft-cli/tests/straight_edges_after_cuts.rs

@@ -1,21 +1,20 @@
 //! Straight edges stay one edge after many cuts (#1049). The owner's design
-//! (`tests/action_matrix/designs/crazy-geom-cuts.sc`, saved by 0.10.0): five extrudes,
+//! (`tests/action_matrix/designs/crazy-geom-cuts.solidcraft`, saved by 0.10.0): five extrudes,
 //! joins and cuts, over four sketches, three of them on faces of the body with the faces'
 //! edges projected. Cuts used to leave the straight edges of the walls they sliced split at
 //! vertices nothing else used, so an edge that is one straight line was drawn (and lit on hover)
 //! as many pieces, and a sketch on such a face projected every piece.
 
-use solidcraft_engine::geom::prelude::*;
 use std::collections::HashMap;
 use std::path::{Path, PathBuf};
 
 use serde_json::json;
-use solidcore_record::Vec3;
 use solidcraft_engine::Session;
 use solidcraft_engine::doc::kernel::{FaceSurface, face_surface};
+use solidcraft_engine::geom::Vec3;
 
 fn design() -> PathBuf {
-    Path::new(env!("CARGO_MANIFEST_DIR")).join("../../tests/action_matrix/designs/crazy-geom-cuts.sc")
+    Path::new(env!("CARGO_MANIFEST_DIR")).join("../../tests/action_matrix/designs/crazy-geom-cuts.solidcraft")
 }
 
 fn open(path: &Path) -> Session {
@@ -49,11 +48,11 @@ fn key(v: Vec3) -> [i64; 3] {
 fn straight_edges_are_one_edge_after_many_cuts() {
     for (what, s) in [("as saved", open(&design())), ("built from scratch", rebuilt())] {
         assert_eq!(errors(&s), vec![], "{what}: every feature evaluates");
-        let st = s.world_state().unwrap();
+        let st = s.world_state();
         let bodies: Vec<_> = st.bodies.iter().filter(|b| !b.body.is_mesh()).collect();
         assert_eq!(bodies.len(), 1, "{what}: one body");
         let body = &bodies[0].body;
-        let mesh = body.mesh(&solidcraft_kernel::MeshTolerance::chord(0.01)).unwrap();
+        let mesh = body.tessellate(0.01).unwrap();
         // Every edge is drawn as one polyline; a straight one as one segment.
         let mut at: HashMap<[i64; 3], Vec<usize>> = HashMap::new();
         for (i, e) in mesh.edges.iter().enumerate() {

apps/solidcraft-web/Cargo.toml

@@ -13,34 +13,22 @@ workspace = true
 name = "solidcraft-web"
 path = "src/main.rs"
 
-[features]
-default = ["profile"]
-bundled-render-library = ["solidcraft-engine/bundled-render-library"]
-# The profiler, compiled in so any build can say where its time goes (the Profile operations
-# preference, SOLIDCRAFT_PROFILE=1, diagnostics.profile); it records nothing until asked.
-profile = ["solidcraft-engine/profile"]
-
 [dependencies]
 solidcraft-engine = { workspace = true }
-solidcraft-control = { workspace = true }
 solidcraft-ui-egui = { workspace = true }
-solidcraft-ui-text = { workspace = true }
 egui = { workspace = true }
 log = { workspace = true }
-serde_json = { workspace = true }
-url = "2"
-percent-encoding = "2"
 
 [target.'cfg(target_arch = "wasm32")'.dependencies]
 eframe = { workspace = true, features = ["default_fonts", "wgpu", "accesskit"] }
 wasm-bindgen = "0.2"
 wasm-bindgen-futures = "0.4"
 js-sys = "0.3"
+serde_json = { workspace = true }
 web-sys = { version = "0.3", features = [
     "Window", "Document", "Element", "HtmlElement", "HtmlCanvasElement", "Location", "Navigator", "StorageManager",
-    "FileSystemHandle", "FileSystemDirectoryHandle", "FileSystemFileHandle", "FileSystemGetFileOptions", "FileSystemGetDirectoryOptions", "FileSystemWritableFileStream",
-    "WritableStream", "File", "FileList", "Blob", "BlobPropertyBag", "Url", "HtmlAnchorElement", "HtmlInputElement", "Storage", "StorageEvent",
+    "FileSystemHandle", "FileSystemDirectoryHandle", "FileSystemFileHandle", "FileSystemGetFileOptions", "FileSystemWritableFileStream",
+    "WritableStream", "File", "FileList", "Blob", "BlobPropertyBag", "Url", "HtmlAnchorElement", "HtmlInputElement", "Storage",
     "IdbFactory", "IdbDatabase", "IdbObjectStore", "IdbOpenDbRequest", "IdbRequest", "IdbTransaction", "IdbTransactionMode",
-    "Headers", "ReadableStream", "ReadableStreamDefaultReader",
-    "BeforeUnloadEvent", "Event", "EventTarget", "KeyboardEvent", "Response", "FormData", "RequestInit", "MediaQueryList", "Gamepad", "Performance",
+    "BeforeUnloadEvent", "Event", "EventTarget", "KeyboardEvent", "Response", "MediaQueryList", "Gamepad", "Performance",
 ] }

apps/solidcraft-web/build.rs

@@ -1,9 +0,0 @@
-//! Links the browser build with an 8 MiB stack: solidcore's kernel algorithms (subdivision,
-//! intersection, filleting) recurse legitimately, and wasm has no guard page to catch an
-//! overflow (solidcore's README recommends 8 MiB).
-
-fn main() {
-    if std::env::var("CARGO_CFG_TARGET_ARCH").is_ok_and(|a| a == "wasm32") {
-        println!("cargo:rustc-link-arg=-zstack-size=8388608");
-    }
-}

apps/solidcraft-web/channel-storage.txt

@@ -1,2 +0,0 @@
-This build keeps its designs and settings apart per release channel (src/channel.rs).
-packaging/web-channels.sh only offers a release candidate that has this file.

apps/solidcraft-web/index.html

@@ -9,7 +9,7 @@
   <meta property="og:site_name" content="SolidCraft">
   <meta property="og:title" content="SolidCraft: try it in your browser">
   <meta property="og:description" content="Open-source parametric CAD built in Rust. Desktop, browser, and MCP for AI agents.">
-  <meta property="og:url" content="https://app.solidcraft.io/">
+  <meta property="og:url" content="https://solidcraft.ai/">
   <meta property="og:image" content="https://docs.solidcraft.io/og.png">
   <meta property="og:image:width" content="1280">
   <meta property="og:image:height" content="640">
@@ -22,22 +22,17 @@
   <link data-trunk rel="rust" data-bin="solidcraft-web" data-wasm-opt="z" data-weak-refs />
   <link data-trunk rel="copy-file" href="../../assets/fonts/biz-udp-gothic/BIZUDPGothic-Regular.ttf" data-target-path="fonts" />
   <link data-trunk rel="copy-file" href="../../assets/fonts/biz-udp-gothic/OFL.txt" data-target-path="fonts" />
-  <link data-trunk rel="copy-file" href="../../assets/fonts/craft-ui-sc/CraftUI-SC.otf" data-target-path="fonts" />
-  <link data-trunk rel="copy-file" href="../../assets/fonts/craft-ui-sc/OFL.txt" data-target-path="fonts/craft-ui-sc" />
-  <link data-trunk rel="copy-file" href="../../assets/fonts/craft-ui-tc/CraftUI-TC.otf" data-target-path="fonts" />
-  <link data-trunk rel="copy-file" href="../../assets/fonts/craft-ui-tc/OFL.txt" data-target-path="fonts/craft-ui-tc" />
   <link data-trunk rel="css" href="../../assets/styles/web/loading.css" />
   <link data-trunk rel="copy-file" href="../../assets/styles/web/loading-logo.svg" />
   <!-- Installable as an app (manifest.webmanifest); the icons are the Linux exports of the app mark. -->
   <meta name="theme-color" content="#343840">
   <link rel="manifest" href="manifest.webmanifest">
-  <link rel="icon" type="image/png" sizes="32x32" href="icons/32x32/io.tangencylabs.solidcraft.png">
-  <link rel="apple-touch-icon" href="icons/256x256/io.tangencylabs.solidcraft.png">
+  <link rel="icon" type="image/png" sizes="32x32" href="icons/32x32/ai.storyteller.solidcraft.png">
+  <link rel="apple-touch-icon" href="icons/256x256/ai.storyteller.solidcraft.png">
   <link data-trunk rel="copy-file" href="manifest.webmanifest" />
-  <link data-trunk rel="copy-file" href="channel-storage.txt" />
-  <link data-trunk rel="copy-file" href="../../assets/icons/app/linux/exports/hicolor/32x32/apps/io.tangencylabs.solidcraft.png" data-target-path="icons/32x32" />
-  <link data-trunk rel="copy-file" href="../../assets/icons/app/linux/exports/hicolor/256x256/apps/io.tangencylabs.solidcraft.png" data-target-path="icons/256x256" />
-  <link data-trunk rel="copy-file" href="../../assets/icons/app/linux/exports/hicolor/512x512/apps/io.tangencylabs.solidcraft.png" data-target-path="icons/512x512" />
+  <link data-trunk rel="copy-file" href="../../assets/icons/app/linux/exports/hicolor/32x32/apps/ai.storyteller.solidcraft.png" data-target-path="icons/32x32" />
+  <link data-trunk rel="copy-file" href="../../assets/icons/app/linux/exports/hicolor/256x256/apps/ai.storyteller.solidcraft.png" data-target-path="icons/256x256" />
+  <link data-trunk rel="copy-file" href="../../assets/icons/app/linux/exports/hicolor/512x512/apps/ai.storyteller.solidcraft.png" data-target-path="icons/512x512" />
 </head>
 <body>
   <canvas id="solidcraft_canvas"></canvas>

apps/solidcraft-web/manifest.webmanifest

@@ -9,8 +9,8 @@
   "theme_color": "#343840",
   "categories": ["productivity", "utilities"],
   "icons": [
-    { "src": "icons/32x32/io.tangencylabs.solidcraft.png", "sizes": "32x32", "type": "image/png" },
-    { "src": "icons/256x256/io.tangencylabs.solidcraft.png", "sizes": "256x256", "type": "image/png" },
-    { "src": "icons/512x512/io.tangencylabs.solidcraft.png", "sizes": "512x512", "type": "image/png" }
+    { "src": "icons/32x32/ai.storyteller.solidcraft.png", "sizes": "32x32", "type": "image/png" },
+    { "src": "icons/256x256/ai.storyteller.solidcraft.png", "sizes": "256x256", "type": "image/png" },
+    { "src": "icons/512x512/ai.storyteller.solidcraft.png", "sizes": "512x512", "type": "image/png" }
   ]
 }

apps/solidcraft-web/src/api.rs

@@ -6,7 +6,7 @@ use std::sync::mpsc::{Receiver, Sender, TryRecvError};
 use std::time::Duration;
 
 use serde_json::{Value, json};
-use solidcraft_control::ControlRequest;
+use solidcraft_ui_egui::ControlRequest;
 use wasm_bindgen::{JsValue, closure::Closure};
 
 const MAX_PENDING: usize = 256;

apps/solidcraft-web/src/channel.rs

@@ -1,61 +0,0 @@
-//! Release channels. The site serves the stable web app at `/app/`, the release candidate at
-//! `/app-rc/` and the bleeding-edge build at `/app-edge/`: one origin, so one set of browser
-//! storage. A channel that kept its designs and settings in the same places could save a design
-//! in a file format the stable app can't open, or overwrite stable's settings. So each
-//! pre-release channel keeps everything under its own name, and stable (and any copy served from
-//! another path: the release zip, `trunk serve`) keeps the names it has always used, so what
-//! people have saved at `/app/` is untouched.
-//!
-//! The channel comes from the directory the app is served from, not from the build, so a build
-//! taken from a release zip is as separate as one built on the spot.
-
-/// The channel the app is served as, from the page's path: `"rc"`, `"edge"`, or `""` (stable).
-pub fn of_path(pathname: &str) -> &'static str {
-    match pathname.trim_end_matches("index.html").trim_end_matches('/').rsplit('/').next() {
-        Some("app-rc") => "rc",
-        Some("app-edge") => "edge",
-        _ => "",
-    }
-}
-
-/// `name` as this channel stores it: unchanged for stable, `rc:name` and `edge:name` otherwise.
-pub fn name_in(channel: &str, name: &str) -> String {
-    if channel.is_empty() { name.to_owned() } else { format!("{channel}:{name}") }
-}
-
-#[cfg(target_arch = "wasm32")]
-pub fn current() -> &'static str {
-    web_sys::window().and_then(|w| w.location().pathname().ok()).map_or("", |p| of_path(&p))
-}
-
-/// A storage key (local storage, IndexedDB database name) of the running channel.
-#[cfg(target_arch = "wasm32")]
-pub fn key(name: &str) -> String {
-    name_in(current(), name)
-}
-
-#[cfg(test)]
-mod tests {
-    use super::*;
-
-    #[test]
-    fn channel_follows_the_directory() {
-        assert_eq!(of_path("/app/"), "");
-        assert_eq!(of_path("/app/index.html"), "");
-        assert_eq!(of_path("/app-rc/"), "rc");
-        assert_eq!(of_path("/app-rc"), "rc");
-        assert_eq!(of_path("/app-rc/index.html"), "rc");
-        assert_eq!(of_path("/app-edge/"), "edge");
-        assert_eq!(of_path("/"), "");
-        assert_eq!(of_path("/solidcraft-web-0.30.1/"), "");
-        assert_eq!(of_path("/app/app-rc/"), "rc", "only the directory's own name counts");
-        assert_eq!(of_path("/app-rc/app/"), "");
-    }
-
-    #[test]
-    fn stable_keeps_its_names() {
-        assert_eq!(name_in("", "solidcraft.prefs"), "solidcraft.prefs");
-        assert_eq!(name_in("rc", "solidcraft.prefs"), "rc:solidcraft.prefs");
-        assert_ne!(name_in("rc", "x"), name_in("edge", "x"));
-    }
-}

apps/solidcraft-web/src/disk.rs

@@ -114,70 +114,10 @@ pub fn opens_design(extensions: &[&str]) -> bool {
     extensions.is_empty() || extensions.iter().any(|e| solidcraft_engine::io::DESIGN_EXTS.contains(e))
 }
 
-/// Where an Open for `extensions` (what the command reads; `&[]`: anything) is answered.
-#[derive(Clone, Copy, Debug, PartialEq)]
-pub enum OpenRoute {
-    /// The browser's open dialog for a design: the file keeps its handle, so Save writes back.
-    Disk,
-    /// The "Files in this browser" window, where the browser can't open a design from the disk.
-    Panel,
-    /// A plain file input that offers these types: the file is read into the engine's files and
-    /// the command runs on it (Insert DXF or SVG, images, meshes, imported settings).
-    Upload,
-}
-
-/// Choose how an Open for `extensions` asks for its file; `api`: the browser can open a file
-/// from the disk and keep its handle.
-pub fn open_route(api: bool, extensions: &[&str]) -> OpenRoute {
-    match (opens_design(extensions), api) {
-        (true, true) => OpenRoute::Disk,
-        (true, false) => OpenRoute::Panel,
-        (false, _) => OpenRoute::Upload,
-    }
-}
-
-/// The `accept` list of a file input for `extensions` (with or without their dot): ".dxf,.svg".
-pub fn accept_list(extensions: &[&str]) -> String {
-    let list: Vec<String> = extensions
-        .iter()
-        .map(|e| e.trim().trim_start_matches('.'))
-        .filter(|e| !e.is_empty())
-        .map(|e| format!(".{}", e.to_ascii_lowercase()))
-        .collect();
-    list.join(",")
-}
-
-/// The `accept` of a file input for `extensions` on this device (`apple_touch`: an iPhone or
-/// iPad). The picker there offers only files of a type the system knows from the list and greys
-/// out the rest, `.solidcraft` designs among them, since no system type has that extension
-/// (#6977). So it offers every file there, and the opener checks what it gets.
-pub fn input_accept(extensions: &[&str], apple_touch: bool) -> String {
-    if apple_touch { String::new() } else { accept_list(extensions) }
-}
-
-/// The browser runs on an iPhone or iPad (every browser there is WebKit), from its
-/// `navigator.userAgent` and `navigator.maxTouchPoints`. iPadOS presents itself as a Mac; only its
-/// touch screen tells them apart.
-pub fn apple_touch(user_agent: &str, touch_points: i32) -> bool {
-    ["iPhone", "iPad", "iPod"].iter().any(|d| user_agent.contains(d)) || (user_agent.contains("Macintosh") && touch_points > 1)
-}
-
-/// The largest file an upload for `extensions` reads: images go into a canvas, which has a size
-/// limit, so a bigger one is refused before it is read. `None`: the importer checks the file.
-pub fn upload_limit(extensions: &[&str]) -> Option<usize> {
-    let image = |e: &&str| ["png", "jpg", "jpeg"].contains(&e.trim_start_matches('.').to_ascii_lowercase().as_str());
-    (!extensions.is_empty() && extensions.iter().all(image)).then_some(solidcraft_engine::doc::canvas::MAX_CANVAS_BYTES)
-}
-
-/// The file type a Save As dialog offers for `name`: (description, MIME type, extension). A
-/// design is `.sc` unless the name already has an older design extension, which it keeps.
-pub fn save_type(name: &str) -> (&'static str, &'static str, String) {
-    let ext = std::path::Path::new(name).extension().and_then(|e| e.to_str()).map(str::to_ascii_lowercase);
-    match ext.as_deref() {
-        Some("json") => ("Plain JSON design", "application/json", ".json".into()),
-        Some(e) if solidcraft_engine::io::is_design_ext(e) => ("SolidCraft design", "application/octet-stream", format!(".{e}")),
-        _ => ("SolidCraft design", "application/octet-stream", format!(".{}", solidcraft_engine::io::DESIGN_EXT)),
-    }
+/// The file type a Save As dialog offers for `name`: (description, MIME type, extension).
+pub fn save_type(name: &str) -> (&'static str, &'static str, &'static str) {
+    let json = std::path::Path::new(name).extension().is_some_and(|e| e.eq_ignore_ascii_case("json"));
+    if json { ("Plain JSON design", "application/json", ".json") } else { ("SolidCraft design", "application/octet-stream", ".solidcraft") }
 }
 
 /// Is this a cancelled dialog (the browser's `AbortError`)? Not an error to show.
@@ -200,7 +140,7 @@ mod web {
     use wasm_bindgen_futures::{JsFuture, spawn_local};
     use web_sys::{FileSystemFileHandle, IdbDatabase, IdbObjectStore, IdbOpenDbRequest, IdbRequest, IdbTransactionMode};
 
-    use super::{HANDLE_MAX_AGE_MS, is_abort, make_id, parse, path, plan_prune, save_type};
+    use super::{HANDLE_MAX_AGE_MS, is_abort, make_id, opens_design, parse, path, plan_prune, save_type};
     use crate::files::{Files, err, read_handle};
 
     const DB: &str = "solidcraft-disk-handles";
@@ -269,7 +209,7 @@ mod web {
         let options = Object::new();
         let _ = Reflect::set(&options, &"suggestedName".into(), &name.into());
         let (description, mime, extension) = save_type(name);
-        let _ = Reflect::set(&options, &"types".into(), &types(description, mime, &extension));
+        let _ = Reflect::set(&options, &"types".into(), &types(description, mime, extension));
         options
     }
 
@@ -354,9 +294,7 @@ mod web {
         let options = Object::new();
         let _ = Reflect::set(&options, &"multiple".into(), &JsValue::FALSE);
         let extensions = Array::new();
-        let designs = solidcraft_engine::io::DESIGN_EXTS.iter().map(|e| format!(".{e}"));
-        let others = [".json", ".step", ".stp", ".3mf", ".stl", ".obj", ".glb", ".gltf", ".fcstd", ".3dm", ".dxf", ".svg"].map(String::from);
-        for e in designs.chain(others) {
+        for e in [".solidcraft", ".solvecraft", ".json", ".step", ".stp", ".3mf", ".stl", ".obj", ".glb", ".gltf", ".fcstd", ".3dm"] {
             extensions.push(&e.into());
         }
         let accept = Object::new();
@@ -377,6 +315,11 @@ mod web {
         p
     }
 
+    /// Does an Open for `extensions` use the browser's open dialog?
+    pub fn handles_open(extensions: &[&str]) -> bool {
+        supported() && opens_design(extensions)
+    }
+
     // ---- writing ------------------------------------------------------------------------
 
     /// Queue what a command wrote to a disk path. Writes go one at a time; a newer write of the
@@ -467,7 +410,7 @@ mod web {
 
     async fn open_db() -> Result<IdbDatabase, String> {
         let factory = web_sys::window().ok_or("no window")?.indexed_db().map_err(err)?.ok_or("this browser has no IndexedDB")?;
-        let request: IdbOpenDbRequest = factory.open_with_u32(&crate::channel::key(DB), 1).map_err(err)?;
+        let request: IdbOpenDbRequest = factory.open_with_u32(DB, 1).map_err(err)?;
         let target = request.clone();
         let upgrade = Closure::once_into_js(move || {
             if let Ok(db) = target.result().and_then(|r| r.dyn_into::<IdbDatabase>()) {
@@ -553,7 +496,7 @@ mod web {
     /// Open a design remembered from an earlier session (a recent one, after a reload): ask once
     /// for access to the file (call in the click), read it into the engine's files and queue it
     /// to open. A file that is gone is forgotten and dropped from the recent designs.
-    pub fn restore(files: &Rc<Files>, path: &str, on_opened: Option<Box<dyn FnOnce()>>) {
+    pub fn restore(files: &Rc<Files>, path: &str) {
         let Some((id, name)) = parse(path) else { return };
         let (files, path, id, name) = (files.clone(), path.to_string(), id.to_string(), name.to_string());
         spawn_local(async move {
@@ -568,9 +511,6 @@ mod web {
                     files.opened.borrow_mut().push(path);
                     files.wake();
                     touch(&id).await;
-                    if let Some(done) = on_opened {
-                        done();
-                    }
                 }
                 Err(e) => {
                     let gone = e.contains("NotFoundError") || e.contains("could not be found") || e.contains("no longer remembers");
@@ -637,8 +577,6 @@ mod tests {
         assert_eq!(route("/disk/18f-2a/Bracket.solidcraft"), WriteTo::Disk);
         assert_eq!(route("/downloads/part.step"), WriteTo::Download);
         assert_eq!(route("/upload/part.step"), WriteTo::Memory);
-        // The temporary folder (a screenshot without a path, #7192) stays in memory.
-        assert_eq!(route(&format!("{}/solidcraft-shot.png", solidcraft_engine::io::vfs::BROWSER_TEMP)), WriteTo::Memory);
     }
 
     #[test]
@@ -677,55 +615,17 @@ mod tests {
     #[test]
     fn only_design_opens_use_the_disk_dialog() {
         assert!(opens_design(&[]));
-        assert!(opens_design(&["sc"]));
         assert!(opens_design(&["solidcraft"]));
         assert!(opens_design(&["solvecraft"]));
         assert!(!opens_design(&["step", "stp"]));
         assert!(!opens_design(&["json"]));
     }
 
-    /// Insert DXF or SVG, images and other non-design files get a file input that offers their
-    /// types in every browser (#2052); designs keep the disk dialog or the browser's files.
-    #[test]
-    fn opens_of_other_files_use_a_file_input_for_their_types() {
-        assert_eq!(open_route(true, &["dxf"]), OpenRoute::Upload);
-        assert_eq!(open_route(false, &["png", "jpg", "jpeg"]), OpenRoute::Upload);
-        assert_eq!(open_route(true, &[]), OpenRoute::Disk);
-        assert_eq!(open_route(false, &["solidcraft"]), OpenRoute::Panel);
-        assert_eq!(accept_list(&["dxf"]), ".dxf");
-        assert_eq!(accept_list(&["png", ".JPG", "", "jpeg"]), ".png,.jpg,.jpeg");
-        assert_eq!(accept_list(&[]), "");
-        assert!(upload_limit(&["png", "jpg", "jpeg"]).is_some());
-        assert_eq!(upload_limit(&["dxf"]), None);
-    }
-
-    /// An iPhone or iPad greys out a `.solidcraft` design the `accept` list names, as it knows no
-    /// type for that extension, so its inputs offer every file; other devices keep the list (#6977).
-    #[test]
-    fn file_inputs_on_an_iphone_or_ipad_offer_every_file() {
-        let iphone =
-            "Mozilla/5.0 (iPhone; CPU iPhone OS 18_5 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.5 Mobile/15E148 Safari/604.1";
-        let mac = "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.5 Safari/605.1.15";
-        let chrome_ios = "Mozilla/5.0 (iPhone; CPU iPhone OS 18_5 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/138.0.7204.156 Mobile/15E148 Safari/604.1";
-        let chrome = "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/141.0.0.0 Safari/537.36";
-        assert!(apple_touch(iphone, 5));
-        assert!(apple_touch(chrome_ios, 5), "every browser on iOS has the same picker");
-        assert!(apple_touch(mac, 5), "an iPad presents itself as a Mac");
-        assert!(!apple_touch(mac, 0), "a Mac has no touch screen");
-        assert!(!apple_touch(chrome, 10), "a touch screen elsewhere filters as before");
-        assert!(!apple_touch("", 0), "hostile input is just not an iPhone");
-        let designs = ["solidcraft", "json", "step"];
-        assert_eq!(input_accept(&designs, true), "");
-        assert_eq!(input_accept(&designs, false), ".solidcraft,.json,.step");
-    }
-
     #[test]
     fn the_save_dialog_offers_the_type_of_the_name() {
-        assert_eq!(save_type("Plate.sc").2, ".sc");
-        assert_eq!(save_type("Plate.JSON").2, ".json");
-        assert_eq!(save_type("Plate").2, ".sc");
-        // A design opened under an older extension keeps it.
         assert_eq!(save_type("Plate.solidcraft").2, ".solidcraft");
+        assert_eq!(save_type("Plate.JSON").2, ".json");
+        assert_eq!(save_type("Plate").2, ".solidcraft");
     }
 
     #[test]

apps/solidcraft-web/src/easyprint.rs

@@ -1,40 +0,0 @@
-//! Open with EasyPrint in the browser: upload the model to Printables' import endpoint with
-//! `fetch` (it allows any origin) and answer with the address to open.
-
-use std::sync::mpsc::Sender;
-
-use js_sys::{Array, Uint8Array};
-use solidcraft_engine::easyprint::{IMPORT_URL, parse_import_response};
-use wasm_bindgen::JsCast as _;
-use wasm_bindgen_futures::{JsFuture, spawn_local};
-
-use crate::files::err;
-
-/// Start the upload; the answer arrives on `done`.
-pub fn upload(name: &str, bytes: Vec<u8>, done: Sender<Result<String, String>>) {
-    let name = name.to_string();
-    spawn_local(async move {
-        let _ = done.send(post(&name, &bytes).await);
-    });
-}
-
-async fn post(name: &str, bytes: &[u8]) -> Result<String, String> {
-    let window = web_sys::window().ok_or("no window")?;
-    let parts = Array::new();
-    parts.push(&Uint8Array::from(bytes));
-    let blob = web_sys::Blob::new_with_u8_array_sequence(&parts).map_err(err)?;
-    let form = web_sys::FormData::new().map_err(err)?;
-    form.append_with_blob_and_filename("file", &blob, name).map_err(err)?;
-    form.append_with_str("file_name", name).map_err(err)?;
-    let headers = web_sys::Headers::new().map_err(err)?;
-    headers.set("Accept", "application/json").map_err(err)?;
-    let init = web_sys::RequestInit::new();
-    init.set_method("POST");
-    init.set_body(&form);
-    init.set_headers(&headers);
-    let response = JsFuture::from(window.fetch_with_str_and_init(IMPORT_URL, &init)).await.map_err(err)?;
-    let response: web_sys::Response = response.dyn_into().map_err(|_| "response cast failed".to_string())?;
-    let status = response.status();
-    let text = JsFuture::from(response.text().map_err(err)?).await.map_err(err)?;
-    parse_import_response(status, text.as_string().unwrap_or_default().as_bytes())
-}

apps/solidcraft-web/src/files.rs

@@ -5,8 +5,7 @@
 //! and go out as downloads (exports, and "Download design"). Where the File System Access API
 //! exists a design also lives on the computer's disk, saved and opened through the browser's file
 //! dialogs (`disk.rs`). An autosave of unsaved work is kept in OPFS and offered again after a
-//! reload or a crash. With "keep unsaved work in this browser" on, each open design's unsaved
-//! changes are kept there instead, one copy per design (`keep.rs`, #10220).
+//! reload or a crash.
 
 use std::cell::{Cell, RefCell};
 use std::rc::Rc;
@@ -14,12 +13,10 @@ use std::rc::Rc;
 use js_sys::{Array, Function, Object, Reflect, Uint8Array};
 use solidcraft_engine::io::vfs;
 
-use crate::{disk, keep};
+use crate::disk;
 use wasm_bindgen::{JsCast as _, JsValue, closure::Closure};
 use wasm_bindgen_futures::{JsFuture, spawn_local};
-use web_sys::{
-    FileSystemDirectoryHandle, FileSystemFileHandle, FileSystemGetDirectoryOptions, FileSystemGetFileOptions, FileSystemWritableFileStream,
-};
+use web_sys::{FileSystemDirectoryHandle, FileSystemFileHandle, FileSystemGetFileOptions, FileSystemWritableFileStream};
 
 /// Where OPFS files appear to the engine.
 pub const OPFS: &str = disk::OPFS_PREFIX;
@@ -27,13 +24,11 @@ pub const OPFS: &str = disk::OPFS_PREFIX;
 pub const DOWNLOADS: &str = disk::DOWNLOADS_PREFIX;
 /// Files brought in from the computer.
 pub const UPLOAD: &str = "/upload/";
-/// The autosave of unsaved work (in OPFS: `recovery.sc` and `recovery.json`), named with
-/// `solidcraft_engine::io::DESIGN_EXT`.
-const RECOVERY: &str = "recovery.sc";
-/// The autosaves earlier releases kept, newest first, one per entry of
-/// `solidcraft_engine::io::LEGACY_DESIGN_EXTS` (compatibility shim, docs/compatibility.md): the
-/// newest is recovered when there is no current one.
-const LEGACY_RECOVERY: [&str; 2] = ["recovery.solidcraft", "recovery.solvecraft"];
+/// The autosave of unsaved work (in OPFS: `recovery.solidcraft` and `recovery.json`).
+const RECOVERY: &str = "recovery.solidcraft";
+/// The autosave earlier releases kept (compatibility shim, docs/compatibility.md): recovered
+/// when there is no current one.
+const LEGACY_RECOVERY: &str = "recovery.solvecraft";
 const RECOVERY_META: &str = "recovery.json";
 
 /// What to do with a file brought in from the computer.
@@ -43,8 +38,6 @@ pub enum Intent {
     Open,
     /// Add its bodies to the open design (STEP, 3MF, STL).
     Insert,
-    /// Import it as a theme: it was dropped on Preferences' Import tile (#8226).
-    Theme,
 }
 
 /// A stored design, as the file panel lists it.
@@ -80,16 +73,6 @@ pub struct Files {
     pub recovery: RefCell<Option<(String, Option<String>)>>,
     /// The app's context, to wake it when a browser call finishes.
     pub ctx: RefCell<Option<egui::Context>>,
-    /// This page's id: the copies it keeps are named after it (`keep::entry_id`).
-    pub keep_page: RefCell<String>,
-    /// Kept copies stored by this page, and the design revision each holds once its write ended.
-    pub kept: RefCell<std::collections::HashMap<String, Option<u64>>>,
-    /// Kept copies being written or removed now (one browser call at a time per copy).
-    pub keeping: RefCell<std::collections::HashSet<String>>,
-    /// When (ms) the last write of a copy failed, to wait before trying again (`keep::may_write`).
-    pub kept_failed: RefCell<std::collections::HashMap<String, f64>>,
-    /// Copies earlier pages left, newer than their design's last save: offered at start.
-    pub keep_offered: RefCell<Vec<keep::Entry>>,
 }
 
 impl Files {
@@ -124,7 +107,7 @@ thread_local! {
     static LOCAL: Cell<bool> = const { Cell::new(false) };
 }
 
-/// Local storage keys of stored files (under the channel's name, see `channel.rs`).
+/// Local storage keys of stored files.
 const LOCAL_PREFIX: &str = "solidcraft.file.";
 /// Local-storage files kept by earlier releases (compatibility shim, docs/compatibility.md):
 /// still listed and opened; removing one removes either key.
@@ -182,17 +165,7 @@ fn has(sm: &web_sys::StorageManager, method: &str) -> bool {
 async fn root() -> Result<FileSystemDirectoryHandle, String> {
     let sm = storage_manager().filter(|sm| has(sm, "getDirectory")).ok_or("this page has no private file storage (it needs https or localhost)")?;
     let dir = JsFuture::from(sm.get_directory()).await.map_err(err)?;
-    let dir = dir.dyn_into::<FileSystemDirectoryHandle>().map_err(|_| "this browser has no private file storage (OPFS)".to_string())?;
-    // Stable keeps its files in the root, where they have always been; a pre-release channel has a folder of its own.
-    match crate::channel::current() {
-        "" => Ok(dir),
-        channel => {
-            let opts = FileSystemGetDirectoryOptions::new();
-            opts.set_create(true);
-            let sub = JsFuture::from(dir.get_directory_handle_with_options(&format!("channel-{channel}"), &opts)).await.map_err(err)?;
-            sub.dyn_into::<FileSystemDirectoryHandle>().map_err(|_| "not a folder".to_string())
-        }
-    }
+    dir.dyn_into::<FileSystemDirectoryHandle>().map_err(|_| "this browser has no private file storage (OPFS)".to_string())
 }
 
 pub(crate) async fn read_handle(h: &FileSystemFileHandle) -> Result<Vec<u8>, String> {
@@ -214,7 +187,7 @@ async fn file_handle(dir: &FileSystemDirectoryHandle, name: &str, create: bool)
 async fn write_file(name: &str, bytes: &[u8]) -> Result<(), String> {
     if local_only() {
         return local()?
-            .set_item(&crate::channel::key(&format!("{LOCAL_PREFIX}{name}")), &encode(bytes))
+            .set_item(&format!("{LOCAL_PREFIX}{name}"), &encode(bytes))
             .map_err(|e| format!("local storage is full or blocked: {}", err(e)));
     }
     let dir = root().await?;
@@ -230,7 +203,7 @@ async fn remove_file(name: &str) -> Result<(), String> {
     if local_only() {
         let st = local()?;
         st.remove_item(&format!("{LEGACY_LOCAL_PREFIX}{name}")).map_err(err)?;
-        return st.remove_item(&crate::channel::key(&format!("{LOCAL_PREFIX}{name}"))).map_err(err);
+        return st.remove_item(&format!("{LOCAL_PREFIX}{name}")).map_err(err);
     }
     let dir = root().await?;
     JsFuture::from(dir.remove_entry(name)).await.map_err(err)?;
@@ -243,10 +216,7 @@ fn read_local() -> Result<Vec<(String, Vec<u8>, f64)>, String> {
     let mut out = Vec::new();
     for i in 0..st.length().unwrap_or(0).min(10_000) {
         let Some(k) = st.key(i).ok().flatten() else { continue };
-        let own = crate::channel::key(LOCAL_PREFIX);
-        // The old names belong to stable; a pre-release channel has none.
-        let legacy = crate::channel::current().is_empty().then_some(LEGACY_LOCAL_PREFIX);
-        let Some(name) = k.strip_prefix(own.as_str()).or_else(|| legacy.and_then(|l| k.strip_prefix(l))) else { continue };
+        let Some(name) = k.strip_prefix(LOCAL_PREFIX).or_else(|| k.strip_prefix(LEGACY_LOCAL_PREFIX)) else { continue };
         if let Some(v) = st.get_item(&k).ok().flatten() {
             out.push((name.to_string(), decode(&v), 0.0));
         }
@@ -299,9 +269,6 @@ pub fn start(files: &Rc<Files>) {
             let _ = JsFuture::from(p).await;
         });
     }
-    let page = keep::page_id(js_sys::Date::now(), js_sys::Math::random());
-    hold_page_lock(&page);
-    *files.keep_page.borrow_mut() = page;
     let files = files.clone();
     spawn_local(async move {
         match disk::known_ids().await {
@@ -314,12 +281,10 @@ pub fn start(files: &Rc<Files>) {
                     files.say("This page can't use the browser's file storage (it needs https or localhost): designs are kept in local storage, a few MB at most.", false);
                 }
                 let mut entries = Vec::new();
-                let kept = kept_copies(&all);
                 let has_recovery = all.iter().any(|(n, _, _)| n == RECOVERY);
-                let legacy = (!has_recovery).then(|| LEGACY_RECOVERY.into_iter().find(|l| all.iter().any(|(n, _, _)| n == l))).flatten();
                 for (name, bytes, modified) in all {
-                    if LEGACY_RECOVERY.contains(&name.as_str()) {
-                        if legacy == Some(name.as_str()) {
+                    if name == LEGACY_RECOVERY {
+                        if !has_recovery {
                             vfs::insert(&format!("{OPFS}{RECOVERY}"), bytes);
                         }
                         continue;
@@ -330,7 +295,7 @@ pub fn start(files: &Rc<Files>) {
                         *files.recovery.borrow_mut() = Some((n, meta["path"].as_str().map(str::to_string)));
                         continue;
                     }
-                    if name != RECOVERY && keep::parse_name(&name).is_none() {
+                    if name != RECOVERY {
                         entries.push(Entry { name: name.clone(), size: bytes.len() as u64, modified });
                     }
                     vfs::insert(&format!("{OPFS}{name}"), bytes);
@@ -341,7 +306,6 @@ pub fn start(files: &Rc<Files>) {
                 if !vfs::exists(&format!("{OPFS}{RECOVERY}")) {
                     *files.recovery.borrow_mut() = None;
                 }
-                sort_kept(&files, kept, &live_pages().await);
             }
             Err(e) => files.say(format!("browser storage: {e}"), true),
         }
@@ -359,7 +323,7 @@ pub fn flush(files: &Rc<Files>) {
                 {
                     let mut e = files.entries.borrow_mut();
                     e.retain(|x| x.name != name);
-                    if name != RECOVERY && name != RECOVERY_META && keep::parse_name(&name).is_none() {
+                    if name != RECOVERY && name != RECOVERY_META {
                         e.push(Entry { name: name.clone(), size: bytes.len() as u64, modified: js_sys::Date::now() });
                         e.sort_by_key(|a| a.name.to_lowercase());
                     }
@@ -460,9 +424,7 @@ pub fn autosave(files: &Rc<Files>, doc: Option<(&solidcraft_engine::doc::Documen
         }
         None => spawn_local(async move {
             let _ = remove_file(RECOVERY).await;
-            for legacy in LEGACY_RECOVERY {
-                let _ = remove_file(legacy).await;
-            }
+            let _ = remove_file(LEGACY_RECOVERY).await;
             let _ = remove_file(RECOVERY_META).await;
         }),
     }
@@ -486,26 +448,6 @@ pub fn recovery_path() -> String {
     format!("{OPFS}{RECOVERY}")
 }
 
-/// A recovery file lives in OPFS, but its relative links belong to the original design's
-/// folder (which can be on disk). Resolve them before Open sees the temporary file location.
-pub fn prepare_recovery(original_path: Option<&str>) -> Result<String, String> {
-    prepare_copy(recovery_path(), original_path)
-}
-
-/// The same for a kept copy (#10220).
-pub fn prepare_kept(id: &str, original_path: Option<&str>) -> Result<String, String> {
-    prepare_copy(format!("{OPFS}{}", keep::design_file(id)), original_path)
-}
-
-fn prepare_copy(path: String, original_path: Option<&str>) -> Result<String, String> {
-    let bytes = vfs::read(&path, solidcraft_engine::io::MAX_DESIGN_BYTES).map_err(|e| e.to_string())?;
-    let mut doc = solidcraft_engine::io::read_design(&bytes).map_err(|e| e.to_string())?;
-    solidcraft_engine::resolve_design_links(&mut doc, original_path);
-    let bytes = solidcraft_engine::io::write_design_container(&doc).map_err(|e| e.to_string())?;
-    vfs::insert(&path, bytes);
-    Ok(path)
-}
-
 /// Pick files on the computer: the File System Access picker where there is one, else an
 /// `<input type=file>`. Read files arrive in `files.incoming`.
 pub fn pick_from_disk(files: &Rc<Files>, intent: Intent) {
@@ -558,10 +500,9 @@ fn input_picker(files: &Rc<Files>, intent: Intent) {
     let Ok(input) = doc.create_element("input").map(|e| e.unchecked_into::<web_sys::HtmlInputElement>()) else { return };
     input.set_type("file");
     // Everything the browser build imports, from the format registry: cadmpeg is pure Rust, so
-    // FreeCAD and Rhino files are part of it; plus the DXF and SVG drawings Open and Insert take.
-    let mut extensions = solidcraft_engine::io::formats::open_extensions(true);
-    extensions.extend(["dxf", "svg"]);
-    input.set_accept(&disk::input_accept(&extensions, apple_touch()));
+    // FreeCAD and Rhino files are part of it.
+    let accept = solidcraft_engine::io::formats::open_extensions(true).iter().map(|e| format!(".{e}")).collect::<Vec<_>>().join(",");
+    input.set_accept(&accept);
     // Attached (hidden) while it is open: some browsers ignore a click on a detached input.
     let _ = input.set_attribute("style", "display:none");
     if let Some(body) = doc.body() {
@@ -586,233 +527,16 @@ fn input_picker(files: &Rc<Files>, intent: Intent) {
     input.click();
 }
 
-/// Ask for one file of these types (`extensions`, e.g. `["dxf"]`) with a plain file input, the
-/// dialog every browser has. The answer is the file's path in the engine's files (under
-/// [`UPLOAD`], as for a file picked in the disk dialog), so the command that asked runs on it;
-/// `None` when the dialog was closed or the file could not be read.
-pub fn pick_upload(files: &Rc<Files>, extensions: &[&str]) -> impl std::future::Future<Output = Option<String>> + use<> {
-    // Shown now, in the click: a file dialog needs the user's gesture.
-    let chosen = choose_file(&disk::input_accept(extensions, apple_touch()));
-    let limit = disk::upload_limit(extensions);
-    let files = files.clone();
-    async move {
-        let read = async {
-            let value = JsFuture::from(chosen?).await.map_err(err)?;
-            // Closing the dialog answers no file: nothing to say.
-            let Ok(file) = value.dyn_into::<web_sys::File>() else { return Ok(None) };
-            let name = file.name();
-            if limit.is_some_and(|max| !file.size().is_finite() || file.size() > max as f64) {
-                return Err(format!("{name}: the file is too large"));
-            }
-            let bytes = blob_bytes(&file).await.map_err(|e| format!("{name}: {e}"))?;
-            let path = format!("{UPLOAD}{name}");
-            vfs::insert(&path, bytes);
-            Ok(Some(path))
-        };
-        match read.await {
-            Ok(path) => path,
-            Err(e) => {
-                files.say(format!("open: {e}"), true);
-                None
-            }
-        }
-    }
-}
-
-/// The page runs on an iPhone or iPad, whose file inputs offer every file (`disk::input_accept`).
-fn apple_touch() -> bool {
-    web_sys::window().is_some_and(|w| {
-        let nav = w.navigator();
-        disk::apple_touch(&nav.user_agent().unwrap_or_default(), nav.max_touch_points())
-    })
-}
-
-/// Show a hidden `<input type=file>` offering `accept` (call in the click). The promise answers
-/// the picked `File`, or `null` when the dialog is closed (the input's `cancel` event).
-fn choose_file(accept: &str) -> Result<js_sys::Promise, String> {
-    let doc = web_sys::window().and_then(|w| w.document()).ok_or("this page can't show a file dialog")?;
-    let input = doc.create_element("input").map_err(err)?.dyn_into::<web_sys::HtmlInputElement>().map_err(|_| "no file input".to_string())?;
-    input.set_type("file");
-    input.set_accept(accept);
-    // Attached (hidden) while it is open: some browsers ignore a click on a detached input.
-    input.set_attribute("style", "display:none").map_err(err)?;
-    doc.body().ok_or("this page has no body")?.append_child(&input).map_err(err)?;
-    let promise = js_sys::Promise::new(&mut |resolve: Function, _reject: Function| {
-        // One answer for a pick or a cancel; read from the event, so it does not keep the input.
-        let done = Closure::once_into_js(move |event: web_sys::Event| {
-            let file = event.target().and_then(|t| t.dyn_into::<web_sys::HtmlInputElement>().ok()).and_then(|input| {
-                input.set_onchange(None);
-                input.set_oncancel(None);
-                input.remove();
-                input.files().and_then(|list| list.get(0))
-            });
-            let _ = resolve.call1(&JsValue::UNDEFINED, &file.map_or(JsValue::NULL, JsValue::from));
-        });
-        input.set_onchange(Some(done.unchecked_ref()));
-        input.set_oncancel(Some(done.unchecked_ref()));
-    });
-    input.click();
-    Ok(promise)
-}
-
 /// Read files dropped on the page.
-/// `theme`: the pointer is over Preferences' Import tile, so the files are themes.
-pub fn take_drops(files: &Rc<Files>, raw: &mut egui::RawInput, theme: bool) {
-    let intent = if theme { Intent::Theme } else { Intent::Insert };
+pub fn take_drops(files: &Rc<Files>, raw: &mut egui::RawInput) {
     for f in std::mem::take(&mut raw.dropped_files) {
         let files = files.clone();
         spawn_local(async move {
             let name = f.path().file_name().map(|n| n.to_string_lossy().to_string()).unwrap_or_else(|| "dropped".into());
             match f.bytes_async().await {
-                Ok(b) => files.arrive(name, b, intent),
+                Ok(b) => files.arrive(name, b, Intent::Insert),
                 Err(e) => files.say(format!("{name}: {e}"), true),
             }
         });
     }
 }
-
-/// Hold this page's browser lock while it runs, so other tabs know its kept copies are in use
-/// (`keep.rs`). Browsers without the Web Locks API hold none; their copies are then offered by
-/// any later page.
-fn hold_page_lock(page: &str) {
-    let Some(locks) = web_locks() else { return };
-    let Ok(request) = Reflect::get(&locks, &"request".into()).and_then(|f| f.dyn_into::<Function>()) else { return };
-    // A promise that never settles: the lock is let go only when the page goes.
-    let hold = Closure::<dyn FnMut(JsValue) -> js_sys::Promise>::new(|_lock: JsValue| js_sys::Promise::new(&mut |_, _| {}));
-    let name = format!("{}{page}", keep::LOCK_PREFIX);
-    if let Err(e) = request.call2(&locks, &name.into(), hold.as_ref().unchecked_ref()) {
-        log::info!("keep: no page lock: {}", err(e));
-    }
-    // The callback lives as long as the page.
-    hold.forget();
-}
-
-fn web_locks() -> Option<JsValue> {
-    let nav = web_sys::window()?.navigator();
-    Reflect::get(&nav, &"locks".into()).ok().filter(|l| l.is_object())
-}
-
-/// The pages still open (in this browser profile) that hold their lock.
-async fn live_pages() -> Vec<String> {
-    let query = async {
-        let locks = web_locks().ok_or("no Web Locks")?;
-        let f: Function = Reflect::get(&locks, &"query".into()).map_err(err)?.dyn_into().map_err(|_| "no query".to_string())?;
-        let p: js_sys::Promise = f.call0(&locks).map_err(err)?.dyn_into().map_err(|_| "no promise".to_string())?;
-        let state = JsFuture::from(p).await.map_err(err)?;
-        let held: Array = Reflect::get(&state, &"held".into()).map_err(err)?.dyn_into().map_err(|_| "no list".to_string())?;
-        Ok::<_, String>(
-            held.iter()
-                .take(10_000)
-                .filter_map(|l| Reflect::get(&l, &"name".into()).ok()?.as_string())
-                .filter_map(|n| n.strip_prefix(keep::LOCK_PREFIX).map(str::to_string))
-                .collect(),
-        )
-    };
-    query.await.unwrap_or_else(|e| {
-        log::info!("keep: open pages unknown ({e})");
-        Vec::new()
-    })
-}
-
-/// The kept copies among the stored files: (copy, when its design's file was last written), and
-/// the ids of designs stored without their metadata.
-struct Found {
-    copies: Vec<(keep::Entry, Option<f64>)>,
-    orphans: Vec<String>,
-}
-
-fn kept_copies(all: &[(String, Vec<u8>, f64)]) -> Found {
-    let modified = |path: &str| path.strip_prefix(OPFS).and_then(|n| all.iter().find(|(name, _, _)| name == n)).map(|(_, _, m)| *m);
-    let mut copies = Vec::new();
-    let mut designs = Vec::new();
-    for (name, bytes, _) in all {
-        match keep::parse_name(name) {
-            Some((id, keep::Part::Meta)) => {
-                if let Some(e) = keep::Entry::parse(id, bytes) {
-                    let saved = e.path.as_deref().and_then(modified);
-                    copies.push((e, saved));
-                }
-            }
-            Some((id, keep::Part::Design)) => designs.push(id.to_string()),
-            None => {}
-        }
-    }
-    // A copy is whole only with its design.
-    copies.retain(|(e, _)| designs.contains(&e.id));
-    let orphans = designs.into_iter().filter(|id| !copies.iter().any(|(e, _)| &e.id == id)).collect();
-    Found { copies, orphans }
-}
-
-/// Offer the copies earlier pages left that hold unsaved work, and remove those their design's
-/// later save made stale (and parts without the rest), leaving open pages' copies alone.
-fn sort_kept(files: &Rc<Files>, found: Found, live: &[String]) {
-    let mut offered = Vec::new();
-    let mut gone = Vec::new();
-    for (e, saved) in found.copies {
-        match keep::fate(&e, live, saved) {
-            keep::Fate::Offer => offered.push(e),
-            keep::Fate::Drop => gone.push(e.id),
-            keep::Fate::Leave => {}
-        }
-    }
-    gone.extend(found.orphans.into_iter().filter(|id| !keep::page_of(id).is_some_and(|p| live.iter().any(|l| l == p))));
-    keep::order_offered(&mut offered);
-    *files.keep_offered.borrow_mut() = offered;
-    for id in gone {
-        remove_kept(files, &id);
-    }
-}
-
-/// The path (in the engine's files) a kept copy opens from.
-pub fn kept_path(id: &str) -> String {
-    format!("{OPFS}{}", keep::design_file(id))
-}
-
-/// Write the copy of a design with unsaved changes (`bytes`, described by `entry`) that holds
-/// its revision `revision`. Its metadata goes last, so a copy is never offered half written.
-pub fn write_kept(files: &Rc<Files>, entry: &keep::Entry, bytes: Vec<u8>, revision: u64) {
-    let id = entry.id.clone();
-    if !files.keeping.borrow_mut().insert(id.clone()) {
-        return;
-    }
-    files.kept.borrow_mut().entry(id.clone()).or_insert(None);
-    let meta = entry.to_json();
-    let files = files.clone();
-    spawn_local(async move {
-        let r = async {
-            write_file(&keep::design_file(&id), &bytes).await?;
-            write_file(&keep::meta_file(&id), meta.as_bytes()).await
-        };
-        match r.await {
-            Ok(()) => {
-                files.kept.borrow_mut().insert(id.clone(), Some(revision));
-                files.kept_failed.borrow_mut().remove(&id);
-            }
-            Err(e) => {
-                files.kept_failed.borrow_mut().insert(id.clone(), js_sys::Date::now());
-                files.say(format!("keeping unsaved work in this browser: {e}"), true)
-            }
-        }
-        files.keeping.borrow_mut().remove(&id);
-        files.wake();
-    });
-}
-
-/// Remove kept copy `id` (its design was saved, closed, discarded or restored).
-pub fn remove_kept(files: &Rc<Files>, id: &str) {
-    let id = id.to_string();
-    if !files.keeping.borrow_mut().insert(id.clone()) {
-        return;
-    }
-    let _ = vfs::remove(&kept_path(&id));
-    files.kept_failed.borrow_mut().remove(&id);
-    let files = files.clone();
-    spawn_local(async move {
-        // The metadata first: what's left without it is never offered.
-        let _ = remove_file(&keep::meta_file(&id)).await;
-        let _ = remove_file(&keep::design_file(&id)).await;
-        files.kept.borrow_mut().remove(&id);
-        files.keeping.borrow_mut().remove(&id);
-        files.wake();
-    });
-}

apps/solidcraft-web/src/install.rs

@@ -23,9 +23,9 @@ fn prompt() {
         let _ = js_sys::Reflect::set(&window, &OFFER.into(), &JsValue::NULL);
     }
     let shown = js_sys::Reflect::get(&offer, &"prompt".into())
-        .and_then(|f| f.dyn_into::<js_sys::Function>())
+        .and_then(|f| f.dyn_into::<js_sys::Function>().map_err(JsValue::from))
         .and_then(|f| f.call0(&offer))
-        .and_then(|p| p.dyn_into::<js_sys::Promise>());
+        .and_then(|p| p.dyn_into::<js_sys::Promise>().map_err(JsValue::from));
     match shown {
         // Accepted or dismissed, the browser handles it; a refusal is only logged.
         Ok(p) => wasm_bindgen_futures::spawn_local(async move {

apps/solidcraft-web/src/keep.rs

@@ -1,403 +0,0 @@
-//! Keep unsaved work in this browser (#10220): the decisions, in plain Rust (tested natively).
-//!
-//! With Preferences › General › "Keep unsaved work in this browser instead of asking when the tab
-//! closes" on, each open design with unsaved changes has a copy in the browser's private storage:
-//! `keep-<id>.sc` (the design) and `keep-<id>.json` (its name, its file and when it last
-//! changed). The copy is written shortly after each change ([`due`]) and again when the page is
-//! hidden, so it is already current when the tab closes; the page then doesn't ask through the
-//! browser's "leave site?" box ([`asks_before_unload`]). A design that is saved, closed or
-//! discarded has its copy removed. The next visit offers the copies newer than their design's
-//! last save ([`fate`]) in SolidCraft's own window, answered with [`plan`].
-//!
-//! An id is `<page>-<n>`: the page that wrote it (each page load has its own) and the design's
-//! number in that page. A page holds a browser lock named after it while it runs, so another tab
-//! never offers, or removes, the copies of a page that is still open.
-#![cfg_attr(not(target_arch = "wasm32"), allow(dead_code))]
-
-use serde_json::{Value, json};
-
-/// The start of every kept file's name.
-pub const PREFIX: &str = "keep-";
-/// The browser lock a page holds while it runs: this, then its page id.
-pub const LOCK_PREFIX: &str = "solidcraft.keep.";
-/// A copy is written once the design has been still this long (ms)…
-pub const QUIET_MS: f64 = 800.0;
-/// …or at the latest this long after the first change it doesn't hold yet (ms).
-pub const MAX_WAIT_MS: f64 = 4000.0;
-/// The most copies offered at once (the rest wait for the next visit).
-pub const MAX_OFFERED: usize = 32;
-const MAX_ID: usize = 64;
-const MAX_NAME: usize = 256;
-const MAX_PATH: usize = 4096;
-/// Copies' metadata is small: a damaged or hostile one is not read.
-pub const MAX_META_BYTES: usize = 64 * 1024;
-
-/// Ids are short and safe in a file name: ASCII letters, digits and dashes, with a page part.
-pub fn valid_id(id: &str) -> bool {
-    !id.is_empty() && id.len() <= MAX_ID && id.chars().all(|c| c.is_ascii_alphanumeric() || c == '-') && page_of(id).is_some()
-}
-
-/// The page that wrote copy `id`.
-pub fn page_of(id: &str) -> Option<&str> {
-    id.rsplit_once('-').map(|(page, _)| page).filter(|p| !p.is_empty())
-}
-
-/// This page's id, from the time it started (ms since 1970) and a random number in 0..1:
-/// letters and digits only.
-pub fn page_id(now_ms: f64, random: f64) -> String {
-    let now = if now_ms.is_finite() && now_ms > 0.0 { now_ms.min(1e15) as u64 } else { 0 };
-    let random = if random.is_finite() { (random.clamp(0.0, 1.0) * f64::from(0xff_ffff)) as u64 } else { 0 };
-    format!("{now:x}{random:06x}")
-}
-
-/// The copy of design `uid` (`Session::uid`) open in page `page`.
-pub fn entry_id(page: &str, uid: u64) -> String {
-    format!("{page}-{uid}")
-}
-
-/// The stored file names of copy `id`: its design and its metadata.
-pub fn design_file(id: &str) -> String {
-    format!("{PREFIX}{id}.{}", solidcraft_engine::io::DESIGN_EXT)
-}
-pub fn meta_file(id: &str) -> String {
-    format!("{PREFIX}{id}.json")
-}
-
-/// Which part of a copy a stored file is.
-#[derive(Clone, Copy, Debug, PartialEq, Eq)]
-pub enum Part {
-    Design,
-    Meta,
-}
-
-/// A stored file's copy id and part; `None` for every other file.
-pub fn parse_name(name: &str) -> Option<(&str, Part)> {
-    let rest = name.strip_prefix(PREFIX)?;
-    let (id, part) = if let Some(id) = rest.strip_suffix(".json") {
-        (id, Part::Meta)
-    } else {
-        (rest.strip_suffix(solidcraft_engine::io::DESIGN_EXT)?.strip_suffix('.')?, Part::Design)
-    };
-    valid_id(id).then_some((id, part))
-}
-
-/// A kept copy, as its metadata describes it.
-#[derive(Clone, Debug, PartialEq)]
-pub struct Entry {
-    pub id: String,
-    /// The design's name.
-    pub name: String,
-    /// Its file (`None`: never saved).
-    pub path: Option<String>,
-    /// When the design last changed (ms since 1970).
-    pub changed_at: f64,
-}
-
-impl Entry {
-    pub fn to_json(&self) -> String {
-        json!({"name": self.name, "path": self.path, "changed_at": self.changed_at}).to_string()
-    }
-
-    /// Read copy `id`'s metadata. Anything malformed, oversized or not finite is no copy.
-    pub fn parse(id: &str, bytes: &[u8]) -> Option<Entry> {
-        if !valid_id(id) || bytes.len() > MAX_META_BYTES {
-            return None;
-        }
-        let v: Value = serde_json::from_slice(bytes).ok()?;
-        let name = v.get("name")?.as_str()?.chars().take(MAX_NAME).collect::<String>();
-        let path = match v.get("path") {
-            None | Some(Value::Null) => None,
-            Some(p) => Some(p.as_str().filter(|p| !p.is_empty() && p.len() <= MAX_PATH)?.to_string()),
-        };
-        let changed_at = v.get("changed_at")?.as_f64().filter(|t| t.is_finite() && *t >= 0.0)?;
-        Some(Entry { id: id.to_string(), name, path, changed_at })
-    }
-}
-
-/// Whether a copy that last changed at `changed_at` holds work its design's file doesn't:
-/// the file was last written at `saved_at` (ms since 1970; `None` or unknown: never saved, or
-/// the time can't be read, so the copy is kept rather than lost).
-pub fn newer_than_save(changed_at: f64, saved_at: Option<f64>) -> bool {
-    match saved_at {
-        Some(saved) if saved.is_finite() && saved > 0.0 => changed_at > saved,
-        _ => true,
-    }
-}
-
-/// What the next visit does with a copy it finds.
-#[derive(Clone, Copy, Debug, PartialEq, Eq)]
-pub enum Fate {
-    /// Offer it: "Restore unsaved design…?".
-    Offer,
-    /// Its design was saved after it: remove it without asking.
-    Drop,
-    /// Its page is still open (another tab): leave it alone.
-    Leave,
-}
-
-/// The copy `entry`, whose design's file was last written at `saved_at`, while the pages
-/// `live` are open.
-pub fn fate(entry: &Entry, live: &[String], saved_at: Option<f64>) -> Fate {
-    if page_of(&entry.id).is_some_and(|p| live.iter().any(|l| l == p)) {
-        Fate::Leave
-    } else if newer_than_save(entry.changed_at, saved_at) {
-        Fate::Offer
-    } else {
-        Fate::Drop
-    }
-}
-
-/// Copies to offer first: the most recently changed, at most [`MAX_OFFERED`].
-pub fn order_offered(entries: &mut Vec<Entry>) {
-    entries.sort_by(|a, b| b.changed_at.total_cmp(&a.changed_at).then_with(|| a.id.cmp(&b.id)));
-    entries.truncate(MAX_OFFERED);
-}
-
-/// Whether a design's copy is due to be written at `now`: the design last changed at
-/// `last_change`, and the copy has lacked a change since `first_unwritten` (all ms).
-pub fn due(now: f64, first_unwritten: f64, last_change: f64) -> bool {
-    now - last_change >= QUIET_MS || now - first_unwritten >= MAX_WAIT_MS
-}
-
-/// How long after a failed write of a design's copy it isn't tried again (ms).
-pub const RETRY_MS: f64 = 30_000.0;
-
-/// Whether a copy whose write last failed at `failed_at` (ms; `None`: it hasn't) may be written
-/// at `now`: not before [`RETRY_MS`] has passed, so a full or denied store isn't hit every tick.
-pub fn may_write(now: f64, failed_at: Option<f64>) -> bool {
-    failed_at.is_none_or(|t| !(now >= t) || now - t >= RETRY_MS)
-}
-
-/// Whether `wanted` is the design now open, given the open design's path.
-pub fn is_open(open: Option<&str>, wanted: &str) -> bool {
-    open == Some(wanted)
-}
-
-/// What follows once a design restored from a kept copy, or recovered, is open: it opens in
-/// stages, a few features a frame with progress and Cancel (#10198), so this waits for the answer.
-#[derive(Clone, Debug, PartialEq, Eq)]
-pub enum AfterOpen {
-    /// A kept copy (#10220): it is its own design again (saving goes to `path`, it is named
-    /// `name`), with its changes unsaved; then the copy `id` goes when `drop` says so.
-    KeptCopy { opened: String, id: String, path: Option<String>, name: String, drop: bool },
-    /// The saved design offered beside a kept copy: the copy `id` goes when `drop` says so.
-    KeptSaved { opened: String, id: String, drop: bool },
-    /// Unsaved work from the page's last visit: it belongs to `path` again, named `name`, unsaved.
-    Recovery { opened: String, path: Option<String>, name: String },
-}
-
-impl AfterOpen {
-    /// The file the open reads.
-    pub fn opened(&self) -> &str {
-        match self {
-            AfterOpen::KeptCopy { opened, .. } | AfterOpen::KeptSaved { opened, .. } | AfterOpen::Recovery { opened, .. } => opened,
-        }
-    }
-}
-
-/// Whether the open of `wanted` answered with `reply` put it in: the answer says so, and it is
-/// the design now open (`open`: the open design's path). A refusal, a Cancel or another file
-/// leaves the copy or the recovered work offered.
-pub fn opened(reply: &Value, open: Option<&str>, wanted: &str) -> bool {
-    reply["ok"].as_bool() == Some(true) && is_open(open, wanted)
-}
-
-/// Whether leaving the page asks through the browser's "leave site?" box: there is unsaved work,
-/// and either the user still wants to be asked or it isn't all kept in the browser yet (with the
-/// keep preference off it never is, so there the box always stays).
-pub fn asks_before_unload(persists: bool, keep: bool, also_ask: bool, any_unsaved: bool, all_kept: bool) -> bool {
-    persists && any_unsaved && (also_ask || !(keep && all_kept))
-}
-
-/// An answer in the "Restore unsaved design?" window.
-#[derive(Clone, Copy, Debug, PartialEq, Eq)]
-pub enum Answer {
-    /// Open the copy, with its unsaved changes, as the design it was (saving goes to its file).
-    Restore,
-    /// Open the design's file as last saved; the copy goes.
-    OpenSaved,
-    /// The copy goes.
-    Discard,
-}
-
-/// What an answer does.
-#[derive(Clone, Debug, PartialEq, Eq)]
-pub struct Plan {
-    /// Open the copy (and, once it is open, give it back its name and file).
-    pub open_copy: bool,
-    /// Open this saved file.
-    pub open_saved: Option<String>,
-    /// Remove the copy.
-    pub drop_copy: bool,
-}
-
-/// What `answer` does to copy `entry`; `saved_exists`: its file can still be opened. `None`: the
-/// answer isn't offered for it (Open saved version of a design never saved, or gone).
-pub fn plan(answer: Answer, entry: &Entry, saved_exists: bool) -> Option<Plan> {
-    match answer {
-        Answer::Restore => Some(Plan { open_copy: true, open_saved: None, drop_copy: true }),
-        Answer::OpenSaved => {
-            let path = entry.path.clone().filter(|_| saved_exists)?;
-            Some(Plan { open_copy: false, open_saved: Some(path), drop_copy: true })
-        }
-        Answer::Discard => Some(Plan { open_copy: false, open_saved: None, drop_copy: true }),
-    }
-}
-
-/// The answers the window offers for `entry`, in order.
-pub fn answers(entry: &Entry, saved_exists: bool) -> Vec<Answer> {
-    [Answer::Restore, Answer::OpenSaved, Answer::Discard].into_iter().filter(|a| plan(*a, entry, saved_exists).is_some()).collect()
-}
-
-#[cfg(test)]
-mod tests {
-    use super::*;
-
-    /// A restored or recovered design opens in stages (#10198): only an answer that it is in, for
-    /// the file asked for, counts; a refusal, a Cancel or another design open leaves it offered.
-    #[test]
-    fn a_staged_restore_counts_only_when_its_file_is_in() {
-        let copy = "/opfs/.kept/a.sc";
-        assert!(opened(&json!({"ok": true}), Some(copy), copy));
-        assert!(!opened(&json!({"ok": false, "error": "cancelled"}), Some(copy), copy));
-        assert!(!opened(&json!({"ok": false, "error": "not a design"}), None, copy));
-        assert!(!opened(&json!({"ok": true}), Some("/opfs/other.sc"), copy));
-        assert!(!opened(&json!({}), Some(copy), copy));
-        let after = AfterOpen::KeptCopy { opened: copy.into(), id: "a".into(), path: None, name: "Bracket".into(), drop: true };
-        assert_eq!(after.opened(), copy);
-    }
-
-    fn entry(id: &str, changed_at: f64, path: Option<&str>) -> Entry {
-        Entry { id: id.into(), name: "Bracket".into(), path: path.map(str::to_string), changed_at }
-    }
-
-    #[test]
-    fn a_failed_write_waits_before_the_next_try() {
-        assert!(may_write(1000.0, None));
-        assert!(!may_write(1000.0 + RETRY_MS - 1.0, Some(1000.0)));
-        assert!(may_write(1000.0 + RETRY_MS, Some(1000.0)));
-        // A clock that went back doesn't block for good.
-        assert!(may_write(10.0, Some(1000.0)));
-    }
-
-    #[test]
-    fn a_design_counts_as_opened_only_at_its_own_path() {
-        assert!(is_open(Some("a.sc"), "a.sc"));
-        assert!(!is_open(Some("b.sc"), "a.sc"));
-        assert!(!is_open(None, "a.sc"));
-    }
-
-    #[test]
-    fn copies_are_named_by_page_and_design_and_nothing_else_reads_as_one() {
-        let page = page_id(1_700_000_000_000.0, 0.5);
-        assert!(page.chars().all(|c| c.is_ascii_hexdigit()));
-        let id = entry_id(&page, 7);
-        assert!(valid_id(&id));
-        assert_eq!(page_of(&id), Some(page.as_str()));
-        assert_eq!(parse_name(&design_file(&id)), Some((id.as_str(), Part::Design)));
-        assert_eq!(parse_name(&meta_file(&id)), Some((id.as_str(), Part::Meta)));
-        for other in ["part.sc", "recovery.sc", "recovery.json", "keep-.sc", "keep-x.sc", "keep-a/b-1.sc", "keep-a-1.step", "keep-a-1sc"] {
-            assert_eq!(parse_name(other), None, "{other}");
-        }
-        // Hostile clocks still give a usable id.
-        for (now, random) in [(f64::NAN, f64::NAN), (f64::INFINITY, -1.0), (-5.0, 9.0)] {
-            assert!(valid_id(&entry_id(&page_id(now, random), 1)));
-        }
-    }
-
-    #[test]
-    fn metadata_round_trips_and_hostile_metadata_is_no_copy() {
-        let e = entry("a1-3", 1234.0, Some("/opfs/Bracket.sc"));
-        assert_eq!(Entry::parse("a1-3", e.to_json().as_bytes()), Some(e.clone()));
-        let never_saved = entry("a1-4", 99.0, None);
-        assert_eq!(Entry::parse("a1-4", never_saved.to_json().as_bytes()), Some(never_saved));
-        for bad in [
-            "",
-            "[]",
-            r#"{"name":"x","changed_at":"soon"}"#,
-            r#"{"name":"x","changed_at":-1}"#,
-            r#"{"name":"x","changed_at":1e999}"#,
-            r#"{"name":"x","path":7,"changed_at":1}"#,
-            r#"{"name":"x","path":"","changed_at":1}"#,
-            r#"{"changed_at":1}"#,
-        ] {
-            assert_eq!(Entry::parse("a1-3", bad.as_bytes()), None, "{bad}");
-        }
-        assert_eq!(Entry::parse("../x", e.to_json().as_bytes()), None);
-        assert_eq!(Entry::parse("a1-3", &vec![b' '; MAX_META_BYTES + 1]), None);
-        let long = json!({"name": "n".repeat(10_000), "changed_at": 1}).to_string();
-        assert_eq!(Entry::parse("a1-3", long.as_bytes()).map(|e| e.name.len()), Some(MAX_NAME));
-    }
-
-    #[test]
-    fn a_copy_newer_than_the_last_save_is_offered_an_older_one_dropped_an_open_pages_left() {
-        let e = entry("p1-1", 2000.0, Some("/opfs/Bracket.sc"));
-        // Changed after the file was last written: offered.
-        assert_eq!(fate(&e, &[], Some(1000.0)), Fate::Offer);
-        // Saved since (in this tab or another): nothing to offer.
-        assert_eq!(fate(&e, &[], Some(2000.0)), Fate::Drop);
-        assert_eq!(fate(&e, &[], Some(3000.0)), Fate::Drop);
-        // Never saved, or the save time can't be read: kept rather than lost.
-        for saved in [None, Some(0.0), Some(f64::NAN), Some(f64::INFINITY), Some(-4.0)] {
-            assert_eq!(fate(&e, &[], saved), Fate::Offer, "{saved:?}");
-        }
-        // Its page is still open in another tab: neither offered nor removed.
-        assert_eq!(fate(&e, &["p1".into()], Some(1000.0)), Fate::Leave);
-        assert_eq!(fate(&e, &["p1".into()], Some(3000.0)), Fate::Leave);
-        assert_eq!(fate(&e, &["p2".into()], Some(1000.0)), Fate::Offer);
-    }
-
-    #[test]
-    fn the_newest_copies_are_offered_first_and_at_most_a_windowful() {
-        let mut list: Vec<Entry> = (0..40).map(|i| entry(&format!("p-{i}"), f64::from(i), None)).collect();
-        order_offered(&mut list);
-        assert_eq!(list.len(), MAX_OFFERED);
-        assert_eq!(list.first().map(|e| e.id.as_str()), Some("p-39"));
-    }
-
-    #[test]
-    fn a_copy_is_written_once_the_design_is_still_or_after_the_longest_wait() {
-        // Still changing, not waited long: not yet.
-        assert!(!due(1000.0, 900.0, 900.0));
-        // Still for QUIET_MS: due.
-        assert!(due(900.0 + QUIET_MS, 900.0, 900.0));
-        // Changing all the time: due after MAX_WAIT_MS anyway.
-        assert!(!due(5000.0, 2000.0, 4900.0));
-        assert!(due(2000.0 + MAX_WAIT_MS, 2000.0, 2000.0 + MAX_WAIT_MS - 1.0));
-    }
-
-    #[test]
-    fn the_browser_asks_before_unload_unless_told_not_to_and_every_copy_is_current() {
-        // Keeping off: exactly as before, unsaved work asks, whatever the second option says.
-        assert!(asks_before_unload(true, false, true, true, true));
-        assert!(asks_before_unload(true, false, true, true, false));
-        assert!(asks_before_unload(true, false, false, true, true));
-        // Keeping on, asking on (the default): both, the box and the copy.
-        assert!(asks_before_unload(true, true, true, true, true));
-        // Keeping on, asking off, every unsaved design kept: no browser box.
-        assert!(!asks_before_unload(true, true, false, true, true));
-        // Keeping on, asking off, a copy still being written (or failed): the browser still asks.
-        assert!(asks_before_unload(true, true, false, true, false));
-        // Nothing unsaved, or an embedded page that keeps nothing: never.
-        assert!(!asks_before_unload(true, true, true, false, false));
-        assert!(!asks_before_unload(true, false, true, false, false));
-        assert!(!asks_before_unload(false, false, true, true, false));
-    }
-
-    #[test]
-    fn restore_open_saved_and_discard_each_do_one_thing_and_always_remove_the_copy() {
-        let saved = entry("p-1", 5.0, Some("/opfs/Bracket.sc"));
-        assert_eq!(plan(Answer::Restore, &saved, true), Some(Plan { open_copy: true, open_saved: None, drop_copy: true }));
-        assert_eq!(
-            plan(Answer::OpenSaved, &saved, true),
-            Some(Plan { open_copy: false, open_saved: Some("/opfs/Bracket.sc".into()), drop_copy: true })
-        );
-        assert_eq!(plan(Answer::Discard, &saved, true), Some(Plan { open_copy: false, open_saved: None, drop_copy: true }));
-        assert_eq!(answers(&saved, true), [Answer::Restore, Answer::OpenSaved, Answer::Discard]);
-        // A design never saved, or whose file is gone, has no saved version to open.
-        let never = entry("p-2", 5.0, None);
-        assert_eq!(plan(Answer::OpenSaved, &never, true), None);
-        assert_eq!(plan(Answer::OpenSaved, &saved, false), None);
-        assert_eq!(answers(&never, false), [Answer::Restore, Answer::Discard]);
-    }
-}

apps/solidcraft-web/src/linked.rs

@@ -1,161 +0,0 @@
-//! Bounded HTTPS or same-origin downloads, handed to the normal design-open command as unsaved copies.
-use std::{cell::RefCell, rc::Rc};
-
-use js_sys::{Reflect, Uint8Array};
-use solidcraft_engine::io::vfs;
-use solidcraft_ui_egui::{SolveApp, ui_kit};
-use wasm_bindgen::{JsCast as _, JsValue};
-use wasm_bindgen_futures::{JsFuture, spawn_local};
-
-use crate::{check_download_size, design_url};
-
-type Reply = Result<(String, Vec<u8>), String>;
-
-#[derive(Default)]
-pub struct Download {
-    reply: Rc<RefCell<Option<Reply>>>,
-    pending: Option<(String, Vec<u8>)>,
-    /// The downloaded design being opened (a few features a frame, #10198): the answer to come,
-    /// the name it takes and the file it was read from.
-    opening: Option<(std::sync::mpsc::Receiver<serde_json::Value>, String, String)>,
-}
-
-impl Download {
-    pub fn start(url: Option<&str>, ctx: &egui::Context) -> Self {
-        let download = Self::default();
-        if let Some(url) = url {
-            let url = url.to_owned();
-            let slot = download.reply.clone();
-            let ctx = ctx.clone();
-            spawn_local(async move {
-                *slot.borrow_mut() = Some(fetch(&url).await);
-                ctx.request_repaint();
-            });
-        }
-        download
-    }
-
-    pub fn tick(&mut self, app: &mut SolveApp, ctx: &egui::Context) {
-        self.opened(app);
-        if let Some(reply) = self.reply.borrow_mut().take() {
-            match reply {
-                Ok(file) => self.pending = Some(file),
-                Err(error) => app.set_status(format!("Could not open design link: {error}"), true),
-            }
-        }
-        if self.pending.is_none() || self.opening.is_some() || app.file_picker_busy() {
-            return;
-        }
-        if solidcraft_ui_egui::documents::any_dirty(app) {
-            let mut answer = None;
-            let closed = ui_kit::Window::new(egui::Id::unique("open_link"), "status_warning", solidcraft_ui_text::tr("web.open_link"))
-                .required()
-                .show_body(ctx, |ui| {
-                    ui.label(solidcraft_ui_text::tr("web.open_link_confirm"));
-                    ui.horizontal(|ui| {
-                        if ui_kit::button(ui, solidcraft_ui_text::tr("ui.open"), ui_kit::Button::Normal).clicked() {
-                            answer = Some(true);
-                        }
-                        if ui_kit::button(ui, solidcraft_ui_text::tr("ui.cancel"), ui_kit::Button::Normal).clicked() {
-                            answer = Some(false);
-                        }
-                    });
-                });
-            match answer {
-                Some(true) => {}
-                Some(false) => {
-                    self.pending = None;
-                    return;
-                }
-                None if closed => {
-                    self.pending = None;
-                    return;
-                }
-                None => return,
-            }
-        }
-        let Some((name, bytes)) = self.pending.take() else { return };
-        // The extension selects the design loader even when the URL has no extension. Named
-        // after the link, as the progress card shows the file's name.
-        let file: String = name.chars().map(|c| if matches!(c, '/' | '\\') { '_' } else { c }).collect();
-        let path = format!("/linked/{}.{}", if file.is_empty() { "design" } else { &file }, solidcraft_engine::io::DESIGN_EXT);
-        vfs::insert(&path, bytes);
-        // Opened as any design is, with its progress and Cancel; finished in `opened`.
-        self.opening = Some((app.open_path_answered(&path), name, path));
-        self.opened(app);
-    }
-
-    /// The downloaded design is in: it is an unsaved copy under the link's name.
-    fn opened(&mut self, app: &mut SolveApp) {
-        let Some((rx, _, _)) = &self.opening else { return };
-        let (ok, cancelled) = match rx.try_recv() {
-            Ok(reply) => (reply["ok"].as_bool() == Some(true), reply["error"].as_str().is_some_and(|e| e.contains("cancelled"))),
-            Err(std::sync::mpsc::TryRecvError::Empty) => return,
-            Err(std::sync::mpsc::TryRecvError::Disconnected) => (false, false),
-        };
-        let Some((_, name, path)) = self.opening.take() else { return };
-        if ok && app.session.path.as_deref() == Some(path.as_str()) {
-            app.session.path = None;
-            app.session.doc_mut().name = name;
-            app.session.mark_unsaved();
-        } else if !ok && !cancelled {
-            app.set_status("Could not open design link: the downloaded file is not a valid SolidCraft design", true);
-        }
-        let _ = vfs::remove(&path);
-    }
-}
-
-async fn fetch(value: &str) -> Reply {
-    let window = web_sys::window().ok_or("No browser window")?;
-    let page_origin = window.location().origin().map_err(|_| "Cannot read page origin")?;
-    let url = design_url(value, &page_origin)?;
-    let name = url.path_segments().and_then(|mut segments| segments.next_back()).filter(|name| !name.is_empty()).unwrap_or("Design");
-    let decoded = js_sys::decode_uri_component(name).ok().and_then(|name| name.as_string()).unwrap_or_else(|| name.to_owned());
-    // `arm.sc` (or a legacy `arm.solidcraft`) is named `arm`.
-    let stem = match decoded.rsplit_once('.') {
-        Some((stem, ext)) if !stem.is_empty() && solidcraft_engine::io::is_design_ext(ext) => stem,
-        _ => decoded.as_str(),
-    };
-    let name: String = stem.chars().take(255).collect();
-    let response = JsFuture::from(window.fetch_with_str(url.as_str())).await.map_err(|_| "Network request failed or the host refused CORS access")?;
-    let response: web_sys::Response = response.dyn_into().map_err(|_| "Invalid download response")?;
-    design_url(&response.url(), &page_origin).map_err(|_| "Design redirected to a URL that does not use HTTPS or the page's own origin")?;
-    if !response.ok() {
-        return Err(format!("HTTP {} {}", response.status(), response.status_text()));
-    }
-    let length = response
-        .headers()
-        .get("Content-Length")
-        .map_err(|_| "Cannot read download size")?
-        .map(|value| value.parse::<u64>().map_err(|_| "Invalid Content-Length"))
-        .transpose()?;
-    if let Some(length) = length {
-        check_download_size(0, length)?;
-    }
-    let stream = response.body().ok_or("Download has no body")?;
-    let reader: web_sys::ReadableStreamDefaultReader = stream.get_reader().dyn_into().map_err(|_| "Cannot read download stream")?;
-    let result = read(&reader).await;
-    if result.is_err() {
-        let _ = JsFuture::from(reader.cancel()).await;
-    }
-    // Fetch rejects interrupted HTTP bodies and decodes Content-Encoding. Content-Length
-    // can describe compressed bytes, so the streamed limit also checks the decoded size.
-    let bytes = result?;
-    Ok((name, bytes))
-}
-
-async fn read(reader: &web_sys::ReadableStreamDefaultReader) -> Result<Vec<u8>, String> {
-    let mut bytes = Vec::new();
-    // Bound even a stream which keeps returning empty chunks.
-    for _ in 0..1_000_000 {
-        let chunk = JsFuture::from(reader.read()).await.map_err(|_| "Download interrupted")?;
-        if Reflect::get(&chunk, &JsValue::from_str("done")).map_err(|_| "Invalid download stream")?.as_bool() == Some(true) {
-            return Ok(bytes);
-        }
-        let value = Reflect::get(&chunk, &JsValue::from_str("value")).map_err(|_| "Invalid download chunk")?;
-        let chunk: Uint8Array = value.dyn_into().map_err(|_| "Invalid download bytes")?;
-        check_download_size(bytes.len(), u64::from(chunk.length()))?;
-        bytes.extend_from_slice(&chunk.to_vec());
-    }
-    Err("Download returned too many chunks".into())
-}

apps/solidcraft/Cargo.toml

@@ -7,18 +7,9 @@ license.workspace = true
 publish = false
 default-run = "solidcraft"
 
-[features]
-default = ["raytrace-cpu", "bundled-render-library", "profile"]
-bundled-render-library = ["solidcraft-engine/bundled-render-library"]
-raytrace-cpu = ["solidcraft-engine/raytrace-cpu"]
-# The profiler, compiled in so any build can say where its time goes (the Profile operations
-# preference, SOLIDCRAFT_PROFILE=1, diagnostics.profile); it records nothing until asked.
-profile = ["solidcraft-engine/profile"]
-
 # The workspace lints, except unsafe_code: denied, not forbidden, so that src/open_documents.rs
-# (macOS file-open events), src/native_crash.rs (Windows exception filter), src/native_crash_macos.rs
-# (macOS crash signal handler) and src/native_frame.rs (Windows resize border, taskbar icon) can
-# allow it: none has a safe API. Keep the rest in sync with [workspace.lints].
+# (macOS file-open events), src/native_crash.rs (Windows exception filter) and src/native_frame.rs
+# (Windows resize border) can allow it: none has a safe API. Keep the rest in sync with [workspace.lints].
 [lints.rust]
 unsafe_code = "deny"
 
@@ -31,16 +22,10 @@ neg_cmp_op_on_partial_ord = "allow"
 
 [dependencies]
 solidcraft-engine = { workspace = true }
-solidcraft-control = { workspace = true }
-# The D3D12 shader compiler the window starts with (#6756).
-solidcraft-gpu = { workspace = true }
 solidcraft-ui-egui = { workspace = true }
-solidcraft-ui-text = { workspace = true }
-solidcraft-theme = { workspace = true }
 solidcraft-space-mouse = { workspace = true }
 eframe = { workspace = true, features = ["default_fonts", "wgpu", "accesskit", "wayland", "x11", "links"] }
 egui = { workspace = true }
-serde = { workspace = true }
 serde_json = { workspace = true }
 log = { workspace = true }
 rfd = { workspace = true }
@@ -48,6 +33,7 @@ rfd = { workspace = true }
 ron = "0.12"
 # Waits for wgpu's adapter list when choosing the graphics backend before the window opens.
 pollster = { workspace = true }
+getrandom = "0.3"
 # The update check (docs/updates.md): HTTPS with rustls, certificates from the operating system.
 ureq = { version = "3.4", default-features = false, features = ["rustls-no-provider", "platform-verifier"] }
 rustls = { version = "0.23", default-features = false, features = ["ring", "std", "tls12", "logging"] }
@@ -63,8 +49,7 @@ hidapi = { version = "2.6.7", default-features = false, features = ["windows-nat
 # The main window's handle for src/native_frame.rs (already in the tree through eframe and winit).
 raw-window-handle = "0.6"
 # Native crash capture (src/native_crash.rs): the exception filter, the faulting module, a minidump.
-# The window's resize border, DPI size and class icon (src/native_frame.rs): the window procedure, hit
-# test, DPI, the exe's icon.
+# The window's resize border and DPI size (src/native_frame.rs): the window procedure, hit test, DPI.
 # Finding 3D mice through Plug and Play without asking other devices anything (src/space_mouse/windows_hid.rs).
 windows-sys = { version = "0.61", features = [
     "Win32_Devices_DeviceAndDriverInstallation",
@@ -83,7 +68,6 @@ windows-sys = { version = "0.61", features = [
     "Win32_UI_HiDpi",
     "Win32_UI_WindowsAndMessaging",
 ] }
-winreg = "0.56"
 
 [target.'cfg(target_os = "macos")'.dependencies]
 muda = { version = "0.21.2", default-features = false }
@@ -92,28 +76,14 @@ solidcraft-3dx-client = { workspace = true }
 # The 3D mouse (src/space_mouse.rs), in the shared-device open mode so that a running 3DxWare
 # driver does not shut the app out.
 hidapi = { version = "2.6.7", default-features = false, features = ["macos-shared-device"] }
-# Files opened from Finder and the Dock (src/open_documents.rs), and the fullscreen title-bar
-# inset (src/main.rs); all already come with eframe and rfd.
+# Files opened from Finder and the Dock (src/open_documents.rs); all already come with eframe and rfd.
 objc2 = "0.6"
-objc2-app-kit = { version = "0.3", default-features = false, features = ["std", "NSAccessibility", "NSApplication", "NSResponder", "NSWindow", "NSWorkspace"] }
+objc2-app-kit = { version = "0.3", default-features = false, features = ["std", "NSApplication", "NSResponder"] }
 objc2-foundation = { version = "0.3", default-features = false, features = ["std", "block2", "NSArray", "NSNotification", "NSOperation", "NSProcessInfo", "NSString", "NSURL"] }
 block2 = "0.6"
-# Native crash capture (src/native_crash_macos.rs): the signal handler, the faulting module
-# (already in the tree through many crates).
-libc = "0.2"
 
 [target.'cfg(all(unix, not(target_os = "macos")))'.dependencies]
 winit = { version = "0.30", default-features = false, features = ["x11"] }
-# Bringing the window forward on X11 when a close asks about unsaved designs (src/come_forward.rs):
-# the window's id, and the window manager request winit doesn't send (MIT OR Apache-2.0; both
-# already in the tree through eframe and winit).
-raw-window-handle = "0.6"
-x11rb = { version = "0.13", default-features = false }
-
-[target.'cfg(target_os = "linux")'.dependencies]
-# The desktop's dark or light preference through the XDG Desktop Portal (src/desktop_theme.rs,
-# #7944); already in the tree through eframe's accessibility support (accesskit_unix).
-zbus = { version = "5", default-features = false, features = ["async-io", "blocking-api"] }
 
 [build-dependencies]
 embed-resource = "3.0.11"

apps/solidcraft/build.rs

@@ -4,7 +4,6 @@ fn main() -> Result<(), Box<dyn std::error::Error>> {
     let icon = std::path::Path::new(env!("CARGO_MANIFEST_DIR")).join("../../assets/icons/app/windows/exports/solidcraft-executable.ico");
     println!("cargo:rerun-if-changed={}", icon.display());
     println!("cargo:rerun-if-changed=build.rs");
-    println!("cargo:rerun-if-env-changed=CARGO_PKG_VERSION");
     if std::env::var("CARGO_CFG_TARGET_OS")? != "windows" {
         return Ok(());
     }
@@ -12,21 +11,7 @@ fn main() -> Result<(), Box<dyn std::error::Error>> {
     let copy = out.join("solidcraft.ico");
     std::fs::copy(icon, &copy)?;
     let rc = out.join("solidcraft.rc");
-    let icon_line = format!("1 ICON \"{}\"\n", copy.display().to_string().replace('\\', "/"));
-    std::fs::write(&rc, format!("{icon_line}{}", version_resource(&std::env::var("CARGO_PKG_VERSION")?)))?;
+    std::fs::write(&rc, format!("1 ICON \"{}\"\n", copy.display().to_string().replace('\\', "/")))?;
     embed_resource::compile_for(&rc, ["solidcraft"], embed_resource::NONE).manifest_required()?;
     Ok(())
 }
-
-/// The Windows version resource (what Explorer's Details tab shows and what a launcher reads).
-/// `FileVersion` and `ProductVersion` are the package version verbatim (`0.25.1`, `0.26.0-rc.1`):
-/// ArtCraft's launcher parses the `ProductVersion` string as semver, so a fourth `.0` would not
-/// read. The binary `FILEVERSION` fields need four numbers and take the leading `major.minor.patch`.
-fn version_resource(version: &str) -> String {
-    let mut numbers = version.split(['-', '+']).next().unwrap_or("").split('.').map(|p| p.parse::<u16>().unwrap_or(0));
-    let mut next = || numbers.next().unwrap_or(0);
-    let (major, minor, patch) = (next(), next(), next());
-    format!(
-        "1 VERSIONINFO\nFILEVERSION {major},{minor},{patch},0\nPRODUCTVERSION {major},{minor},{patch},0\nFILEOS 0x40004\nFILETYPE 0x1\n{{\nBLOCK \"StringFileInfo\"\n{{\nBLOCK \"040904B0\"\n{{\nVALUE \"CompanyName\", \"SolidCraft contributors\"\nVALUE \"FileDescription\", \"SolidCraft, parametric 3D CAD\"\nVALUE \"FileVersion\", \"{version}\"\nVALUE \"InternalName\", \"solidcraft\"\nVALUE \"OriginalFilename\", \"solidcraft.exe\"\nVALUE \"ProductName\", \"SolidCraft\"\nVALUE \"ProductVersion\", \"{version}\"\n}}\n}}\nBLOCK \"VarFileInfo\"\n{{\nVALUE \"Translation\", 0x0409, 1200\n}}\n}}\n"
-    )
-}

apps/solidcraft/src/come_forward.rs

@@ -1,234 +0,0 @@
-//! Bringing the window forward when a close stops at "save changes?".
-//!
-//! A close from the taskbar or a window switcher reaches the window while another app has the
-//! focus. The prompt it opens is only seen once the window comes forward, so the window asks for
-//! the focus then. A window the user is already in is left alone.
-//!
-//! winit's Focus asks as an application, which a window manager with focus-stealing prevention
-//! (KWin's default) refuses for a window used before the switch away: it only marks the taskbar
-//! entry. On X11 the request is sent again with the source EWMH gives "direct user actions"
-//! (`_NET_ACTIVE_WINDOW`, source 2), which is what this is: the prompt is the rest of the user's
-//! close. Native Wayland has no way for a window to raise itself, so there the attention request
-//! (xdg-activation) lets the compositor raise it or mark its taskbar entry.
-//!
-//! When: not at once. KWin raises the window, then the taskbar's closing context menu hands the
-//! focus back to the app that had it, a few milliseconds later, and the window would flicker
-//! forward and back. So the window asks once the menu is gone, `FIRST_AFTER` the close. It asks
-//! again only if the focus is taken back right after it came (a slow menu) or never came; a later
-//! switch is the user's own, and the window stays where the user put it.
-
-use std::time::{Duration, Instant};
-
-/// From the close to the first request: past the taskbar menu's focus hand-back (2 to 11 ms on
-/// KDE Plasma 6), too short to notice.
-const FIRST_AFTER: Duration = Duration::from_millis(120);
-/// After the first request, how long the window asks again when it loses the focus: short of
-/// anything the user does next.
-const KEEP_ASKING: Duration = Duration::from_millis(400);
-/// The least time between two requests.
-const AGAIN_AFTER: Duration = Duration::from_millis(100);
-/// Focus lost this soon after a request was taken back by the taskbar menu; later, by the user.
-const TAKEN_BACK_WITHIN: Duration = Duration::from_millis(50);
-
-/// The window coming forward after a close that asks about unsaved designs.
-#[derive(Default)]
-pub struct ComeForward {
-    /// The first request and the end of asking; `None`: not asking.
-    window: Option<(Instant, Instant)>,
-    /// The last request.
-    last: Option<Instant>,
-    /// The window has had the focus since the last request.
-    held: bool,
-}
-
-/// What a frame does while the window is coming forward.
-#[derive(Debug, PartialEq)]
-enum Step {
-    /// Ask for the focus now.
-    Ask,
-    /// Look again after this long.
-    Wait(Duration),
-    /// Done asking.
-    Done,
-}
-
-impl ComeForward {
-    /// A close stopped at the prompt: ask for the focus shortly.
-    pub fn start(&mut self, now: Instant) {
-        let first = now + FIRST_AFTER;
-        self.window = Some((first, first + KEEP_ASKING));
-        self.last = None;
-        self.held = false;
-    }
-
-    /// Every frame: ask once the taskbar menu is gone, and again while the focus is taken back.
-    pub fn tick(&mut self, ctx: &egui::Context, frame: &eframe::Frame) {
-        if self.window.is_none() {
-            return;
-        }
-        let (focused, minimized) = ctx.input(|i| (i.viewport().focused, i.viewport().minimized));
-        // The app may be idle: a frame to look again.
-        match self.step(Instant::now(), focused) {
-            Step::Ask => {
-                bring(ctx, frame, minimized);
-                ctx.request_repaint_after(AGAIN_AFTER);
-            }
-            Step::Wait(after) => ctx.request_repaint_after(after),
-            Step::Done => {}
-        }
-    }
-
-    fn step(&mut self, now: Instant, focused: Option<bool>) -> Step {
-        let Some((first, until)) = self.window else { return Step::Done };
-        if now >= until {
-            self.window = None;
-            return Step::Done;
-        }
-        if now < first {
-            return Step::Wait(first - now);
-        }
-        let Some(last) = self.last else {
-            if focused == Some(true) {
-                // The user went back to the window already.
-                self.window = None;
-                return Step::Done;
-            }
-            self.last = Some(now);
-            return Step::Ask;
-        };
-        if focused == Some(true) {
-            self.held = true;
-            return Step::Wait(until - now);
-        }
-        if self.held {
-            if now.duration_since(last) >= TAKEN_BACK_WITHIN {
-                // The user switched away: leave the window there.
-                self.window = None;
-                return Step::Done;
-            }
-            self.held = false;
-        }
-        let next = last + AGAIN_AFTER;
-        if now < next {
-            return Step::Wait(next - now);
-        }
-        self.last = Some(now);
-        Step::Ask
-    }
-}
-
-/// Ask for the focus once.
-fn bring(ctx: &egui::Context, frame: &eframe::Frame, minimized: Option<bool>) {
-    #[cfg(all(unix, not(target_os = "macos")))]
-    let raised = match x11_activate(frame) {
-        Ok(sent) => sent,
-        Err(e) => {
-            log::warn!("bringing the window forward through X11: {e}");
-            false
-        }
-    };
-    #[cfg(not(all(unix, not(target_os = "macos"))))]
-    let raised = {
-        let _ = frame;
-        false
-    };
-    for c in commands(minimized, raised) {
-        ctx.send_viewport_cmd(c);
-    }
-}
-
-/// The viewport commands for a window in the background; `raised`: the X11 request went out,
-/// which also restores a minimized window.
-fn commands(minimized: Option<bool>, raised: bool) -> Vec<egui::ViewportCommand> {
-    if raised {
-        return vec![egui::ViewportCommand::Focus];
-    }
-    let mut commands = Vec::new();
-    if minimized == Some(true) {
-        commands.push(egui::ViewportCommand::Minimized(false));
-    }
-    commands.push(egui::ViewportCommand::Focus);
-    commands.push(egui::ViewportCommand::RequestUserAttention(egui::UserAttentionType::Informational));
-    commands
-}
-
-/// Ask the X11 window manager to activate the window as a user action. `Ok(false)`: the window
-/// isn't an X11 window (native Wayland).
-#[cfg(all(unix, not(target_os = "macos")))]
-fn x11_activate(frame: &eframe::Frame) -> Result<bool, String> {
-    use raw_window_handle::{HasWindowHandle, RawWindowHandle};
-    use x11rb::connection::Connection;
-    use x11rb::protocol::xproto::{ClientMessageEvent, ConnectionExt, EventMask};
-
-    let handle = frame.window_handle().map_err(|e| e.to_string())?;
-    let window = match handle.as_raw() {
-        RawWindowHandle::Xlib(h) => u32::try_from(h.window).map_err(|e| e.to_string())?,
-        RawWindowHandle::Xcb(h) => h.window.get(),
-        _ => return Ok(false),
-    };
-    // A connection of its own: winit's isn't reachable, and a close that asks is rare.
-    let (conn, screen) = x11rb::connect(None).map_err(|e| e.to_string())?;
-    let root = conn.setup().roots.get(screen).ok_or("no X11 screen")?.root;
-    let atom = conn.intern_atom(false, b"_NET_ACTIVE_WINDOW").map_err(|e| e.to_string())?.reply().map_err(|e| e.to_string())?.atom;
-    // Source 2: a direct user action; the time is the server's current time.
-    let event = ClientMessageEvent::new(32, window, atom, [2, x11rb::CURRENT_TIME, 0, 0, 0]);
-    conn.send_event(false, root, EventMask::SUBSTRUCTURE_REDIRECT | EventMask::SUBSTRUCTURE_NOTIFY, event).map_err(|e| e.to_string())?;
-    conn.flush().map_err(|e| e.to_string())?;
-    Ok(true)
-}
-
-#[cfg(test)]
-mod tests {
-    use super::{AGAIN_AFTER, ComeForward, FIRST_AFTER, KEEP_ASKING, Step};
-    use eframe::egui::{UserAttentionType, ViewportCommand as C};
-    use std::time::{Duration, Instant};
-
-    /// The first request waits until the taskbar menu has handed the focus back. The window asks
-    /// again when the focus is taken back right after it came, or never came, no more often than
-    /// every `AGAIN_AFTER` and only for `KEEP_ASKING`; a later switch away is the user's.
-    #[test]
-    fn the_window_asks_once_the_taskbar_menu_is_gone() {
-        let t0 = Instant::now();
-        let ms = |n: u64| Duration::from_millis(n);
-        let at = |n: u64| t0 + ms(n);
-        let (first, again, keep) = (FIRST_AFTER.as_millis() as u64, AGAIN_AFTER.as_millis() as u64, KEEP_ASKING.as_millis() as u64);
-        let mut f = ComeForward::default();
-        assert_eq!(f.step(t0, Some(false)), Step::Done, "not started");
-        f.start(t0);
-        assert_eq!(f.step(t0, Some(false)), Step::Wait(FIRST_AFTER), "the menu is still closing");
-        assert_eq!(f.step(at(5), Some(false)), Step::Wait(ms(first - 5)));
-        assert_eq!(f.step(at(first), Some(false)), Step::Ask);
-        assert_eq!(f.step(at(first + 3), Some(true)), Step::Wait(ms(keep - 3)), "raised");
-        // A slow menu takes the focus back 10 ms later: ask again, not before AGAIN_AFTER.
-        assert_eq!(f.step(at(first + 10), Some(false)), Step::Wait(ms(again - 10)));
-        assert_eq!(f.step(at(first + again), Some(false)), Step::Ask);
-        assert_eq!(f.step(at(first + again + 3), Some(true)), Step::Wait(ms(keep - again - 3)));
-        // The user clicks another app 200 ms later: the window stays behind.
-        assert_eq!(f.step(at(first + again + 200), Some(false)), Step::Done);
-        assert_eq!(f.step(at(first + again + 300), Some(false)), Step::Done);
-
-        // Never raised (the request was refused): ask again every AGAIN_AFTER, for KEEP_ASKING.
-        f.start(t0);
-        assert_eq!(f.step(at(first), None), Step::Ask, "unknown focus counts as out of focus");
-        assert_eq!(f.step(at(first + again), Some(false)), Step::Ask);
-        assert_eq!(f.step(at(first + keep), Some(false)), Step::Done);
-
-        // Back in the window before the first request: nothing to do.
-        f.start(t0);
-        assert_eq!(f.step(at(first), Some(true)), Step::Done);
-    }
-
-    /// Without the X11 request: focus, and the attention mark where focus is refused; a minimized
-    /// window is restored first.
-    #[test]
-    fn a_window_closed_from_the_background_comes_forward() {
-        let forward = [C::Focus, C::RequestUserAttention(UserAttentionType::Informational)];
-        assert_eq!(super::commands(Some(false), false), forward);
-        assert_eq!(super::commands(None, false), forward, "unknown counts as not minimized");
-        let minimized = super::commands(Some(true), false);
-        assert_eq!(minimized.first(), Some(&C::Minimized(false)));
-        assert_eq!(minimized.get(1..), Some(&forward[..]));
-        // The window manager took the X11 request: nothing left to mark.
-        assert_eq!(super::commands(Some(true), true), [C::Focus]);
-    }
-}

apps/solidcraft/src/control_server.rs

@@ -1,122 +1,81 @@
-//! SolidCraft's control channel: the loopback listeners (the app's port and the agent chat's own
-//! endpoint) with their token files, served by the shared control server (`solidcraft_control`)
-//! with what SolidCraft's requests mean ([`SolidCraft`]).
+//! Loopback JSON-lines control server: one request per line, one reply per line.
+//! Agents and tests drive the app through it (adapted from CADCraft, MIT OR Apache-2.0).
 
-use std::net::TcpListener;
-use std::sync::mpsc::{Receiver, Sender, channel};
-use std::sync::{Arc, OnceLock};
+use std::io::{BufRead, BufReader, Write};
+use std::net::{TcpListener, TcpStream};
+use std::sync::atomic::{AtomicBool, AtomicU64, AtomicUsize, Ordering};
+use std::sync::mpsc::{Receiver, Sender, TryRecvError, channel};
+use std::sync::{Arc, Mutex, MutexGuard, PoisonError};
+use std::time::{Duration, Instant};
 
 use serde_json::{Value, json};
-use solidcraft_control::server::{self, Hub, Protocol, Summary};
-use solidcraft_control::{ControlRequest, auth};
 use solidcraft_engine::MAX_LINE;
-use solidcraft_engine::control_auth::APP;
+use solidcraft_engine::control_auth;
 use solidcraft_engine::control_pending;
+use solidcraft_ui_egui::ControlRequest;
 
-/// The token files this launch wrote (its control port, the agent chat's endpoint) and the
-/// token in each, removed when the app ends unless another launch has written the file since.
-static TOKEN_FILES: std::sync::Mutex<Vec<(std::path::PathBuf, String)>> = std::sync::Mutex::new(Vec::new());
+/// Connections served at once, so a flood must not be able to spawn threads without end.
+const MAX_CONNECTIONS: usize = 16;
+/// Lines that are not JSON before the connection is closed, so garbage cannot loop forever.
+const MAX_BAD_LINES: usize = 8;
 
-/// What SolidCraft's requests mean to the control server: commands by their ids, batches and
-/// scripts by their steps, and which ones read, write a file or change the design.
-struct SolidCraft;
+static OPEN: AtomicUsize = AtomicUsize::new(0);
+/// The token files this launch wrote (its control port, the agent chat's endpoint), removed
+/// when the app ends.
+static TOKEN_FILES: std::sync::Mutex<Vec<std::path::PathBuf>> = std::sync::Mutex::new(Vec::new());
 
-impl Protocol for SolidCraft {
-    fn summary(&self, method: &str, p: &Value) -> Summary {
-        let command = match method {
-            "engine.execute" | "command" => p.get("command").and_then(Value::as_str).and_then(solidcraft_engine::find_command).map(|c| c.id),
-            _ => None,
-        };
-        let steps = match method {
-            "engine.batch" | "engine.script" => p.get("commands").and_then(Value::as_array).map(Vec::len),
-            _ => None,
-        };
-        Summary {
-            what: control_pending::describe(method, p),
-            effect: control_pending::effect(method, p),
-            command,
-            steps,
-            long: method == "engine.batch",
-        }
-    }
-
-    fn document(&self) -> &'static str {
-        "design"
-    }
-
-    fn change_event(&self) -> &'static str {
-        "design.changed"
-    }
-
-    fn revision_method(&self) -> &'static str {
-        "document.revision"
-    }
-
-    fn docs(&self) -> &'static str {
-        "docs/control-protocol.md"
-    }
-
-    /// `param_check`: the levels `engine.execute`, `engine.batch` and `engine.script` take as a
-    /// request's own parameter check (#9184).
-    fn capabilities(&self) -> Value {
-        json!({"param_check": solidcraft_engine::schema::ParamCheck::ALL.map(|l| l.name())})
-    }
+/// A new random token: 32 bytes from the operating system, as hex.
+fn new_token() -> Option<String> {
+    let mut bytes = [0u8; 32];
+    getrandom::fill(&mut bytes).ok()?;
+    Some(bytes.iter().map(|b| format!("{b:02x}")).collect())
 }
 
-/// The app's control server, for both of its listeners, so `control.running` sees every request.
-fn hub(ctx: egui::Context) -> Arc<Hub> {
-    static HUB: OnceLock<Arc<Hub>> = OnceLock::new();
-    Arc::clone(HUB.get_or_init(|| Arc::new(Hub::new(SolidCraft, move || ctx.request_repaint(), MAX_LINE))))
-}
-
-/// Remove this launch's token files and discovery file (at exit), leaving any that another
-/// launch has written since (#8794).
+/// Remove this launch's token file (at exit).
 pub fn remove_token_file() {
     if let Ok(files) = TOKEN_FILES.lock() {
-        for (path, token) in files.iter() {
-            auth::remove_token_file(path, token);
+        for p in files.iter() {
+            let _ = std::fs::remove_file(p);
         }
     }
-    if let Some((port, token)) = APP_PORT.lock().ok().and_then(|p| p.clone()) {
-        APP.remove_current_port(port, &token);
+    if let Some(port) = APP_PORT.lock().ok().and_then(|p| *p) {
+        control_auth::remove_current_port(port);
     }
 }
 
-/// The port the app's own channel listens on and its token, for removing the discovery file at exit.
-static APP_PORT: std::sync::Mutex<Option<(u16, String)>> = std::sync::Mutex::new(None);
+/// The port the app's own channel listens on, for removing the discovery file at exit.
+static APP_PORT: std::sync::Mutex<Option<u16>> = std::sync::Mutex::new(None);
 
-pub fn start(listen_on: auth::Listen, ctx: egui::Context) -> Receiver<ControlRequest> {
+pub fn start(listen_on: control_auth::Listen, ctx: egui::Context) -> Receiver<ControlRequest> {
     let (tx, rx) = channel::<ControlRequest>();
     // Every connection must show the token before anything runs (docs/control-protocol.md).
-    match APP.env_token().or_else(server::new_token) {
+    match control_auth::env_token().or_else(new_token) {
         Some(token) => {
             let listener = match listen_on {
-                auth::Listen::Exact(port) => TcpListener::bind(("127.0.0.1", port)),
-                auth::Listen::Default => auth::bind_with_fallback(APP.default_port, auth::PORT_TRIES),
+                control_auth::Listen::Exact(port) => TcpListener::bind(("127.0.0.1", port)),
+                control_auth::Listen::Default => control_auth::bind_with_fallback(control_auth::DEFAULT_PORT, control_auth::PORT_TRIES),
             };
             match listener {
                 Ok(l) => {
-                    if let Some(port) = listen_on_listener(l, token.clone(), tx, ctx, false) {
-                        if matches!(listen_on, auth::Listen::Default) {
-                            solidcraft_engine::note!(
-                                "solidcraft: control channel on the default port 127.0.0.1:{port} (Preferences > Assistant turns it off)"
-                            );
+                    if let Some(port) = listen_on_listener(l, token, tx, ctx, false) {
+                        if matches!(listen_on, control_auth::Listen::Default) {
+                            eprintln!("solidcraft: control channel on the default port 127.0.0.1:{port} (Preferences > Assistant turns it off)");
                         }
                         // The discovery file: where `solidcraft-cli mcp` finds this app with no arguments.
-                        match APP.write_current_port(port) {
+                        match control_auth::write_current_port(port) {
                             Ok(_) => {
                                 if let Ok(mut p) = APP_PORT.lock() {
-                                    *p = Some((port, token));
+                                    *p = Some(port);
                                 }
                             }
-                            Err(e) => solidcraft_engine::note!("solidcraft: could not write the control discovery file ({e})"),
+                            Err(e) => eprintln!("solidcraft: could not write the control discovery file ({e})"),
                         }
                     }
                 }
-                Err(e) => solidcraft_engine::note!("solidcraft: control server failed to bind 127.0.0.1: {e}"),
+                Err(e) => eprintln!("solidcraft: control server failed to bind 127.0.0.1: {e}"),
             }
         }
-        None => solidcraft_engine::note!("solidcraft: control server not started: no random token available"),
+        None => eprintln!("solidcraft: control server not started: no random token available"),
     }
     rx
 }
@@ -126,14 +85,14 @@ pub fn start(listen_on: auth::Listen, ctx: egui::Context) -> Receiver<ControlReq
 /// token file, where the MCP server finds it, so the token never passes through the agent. Its
 /// requests go to `tx`, where the chat's gate reads them; one may wait long for the user's Allow.
 pub fn listen_agent(tx: Sender<ControlRequest>, ctx: egui::Context) -> Option<u16> {
-    let Some(token) = server::new_token() else {
-        solidcraft_engine::note!("solidcraft: agent chat endpoint not started: no random token available");
+    let Some(token) = new_token() else {
+        eprintln!("solidcraft: agent chat endpoint not started: no random token available");
         return None;
     };
     let listener = match TcpListener::bind(("127.0.0.1", 0)) {
         Ok(l) => l,
         Err(e) => {
-            solidcraft_engine::note!("solidcraft: control server failed to bind 127.0.0.1: {e}");
+            eprintln!("solidcraft: control server failed to bind 127.0.0.1: {e}");
             return None;
         }
     };
@@ -144,31 +103,371 @@ pub fn listen_agent(tx: Sender<ControlRequest>, ctx: egui::Context) -> Option<u1
 /// `patient`: every request may wait as long as a batch (a person decides on it).
 fn listen_on_listener(listener: TcpListener, token: String, tx: Sender<ControlRequest>, ctx: egui::Context, patient: bool) -> Option<u16> {
     let port = listener.local_addr().ok()?.port();
-    match APP.token_path(port) {
-        Some(path) => match APP.write_token_file(&path, &token) {
+    match control_auth::token_path(port) {
+        Some(path) => match control_auth::write_token_file(&path, &token) {
             Ok(()) => {
-                solidcraft_engine::note!("solidcraft: control server listening on 127.0.0.1:{port} (token in {})", path.display());
+                eprintln!("solidcraft: control server listening on 127.0.0.1:{port} (token in {})", path.display());
                 if let Ok(mut files) = TOKEN_FILES.lock() {
-                    files.push((path, token.clone()));
+                    files.push(path);
                 }
             }
-            Err(e) => solidcraft_engine::note!(
+            Err(e) => eprintln!(
                 "solidcraft: control server listening on 127.0.0.1:{port}, but its token file {} could not be written ({e}); \
                  clients need SOLIDCRAFT_CONTROL_TOKEN",
                 path.display()
             ),
         },
         None => {
-            solidcraft_engine::note!(
-                "solidcraft: control server listening on 127.0.0.1:{port}; no data folder for its token, clients need SOLIDCRAFT_CONTROL_TOKEN"
-            )
+            eprintln!("solidcraft: control server listening on 127.0.0.1:{port}; no data folder for its token, clients need SOLIDCRAFT_CONTROL_TOKEN")
         }
     }
-    match hub(ctx).listen(listener, token, tx, patient) {
-        Ok(()) => Some(port),
-        Err(e) => {
-            solidcraft_engine::note!("solidcraft: control server not started: {e}");
-            None
+    let token = std::sync::Arc::new(token);
+    std::thread::spawn(move || {
+        for stream in listener.incoming().flatten() {
+            if OPEN.fetch_add(1, Ordering::Relaxed) >= MAX_CONNECTIONS {
+                OPEN.fetch_sub(1, Ordering::Relaxed);
+                let mut refused = stream;
+                let _ = writeln!(refused, "{}", json!({"ok": false, "error": "too many connections"}));
+                continue;
+            }
+            let tx = tx.clone();
+            let ctx = ctx.clone();
+            let token = token.clone();
+            std::thread::spawn(move || {
+                serve(stream, &token, tx, ctx, patient);
+                OPEN.fetch_sub(1, Ordering::Relaxed);
+            });
+        }
+    });
+    Some(port)
+}
+
+/// One line without its newline, or `None` at the end of the stream. A client that sends
+/// gigabytes with no newline would otherwise make this thread allocate until the process is
+/// killed, so the line is refused as soon as it passes `max`.
+fn read_line(r: &mut impl BufRead, max: usize) -> std::io::Result<Option<Vec<u8>>> {
+    let mut line = Vec::new();
+    loop {
+        let (done, used) = {
+            let available = r.fill_buf()?;
+            if available.is_empty() {
+                return Ok((!line.is_empty()).then_some(line));
+            }
+            match available.iter().position(|b| *b == b'\n') {
+                Some(i) => {
+                    line.extend_from_slice(available.get(..i).unwrap_or(&[]));
+                    (true, i + 1)
+                }
+                None => {
+                    line.extend_from_slice(available);
+                    (false, available.len())
+                }
+            }
+        };
+        r.consume(used);
+        if done {
+            return Ok(Some(line));
+        }
+        if line.len() > max {
+            return Err(std::io::Error::new(std::io::ErrorKind::InvalidData, "request too large"));
+        }
+    }
+}
+
+/// The reply to a connection that didn't show the token; the connection is then closed.
+fn unauthorized() -> Value {
+    json!({"ok": false, "error": "unauthorized: send the control token as \"token\" (see docs/control-protocol.md)"})
+}
+
+/// Refuse the connection: the reply, then the end of what we send, then what the client had
+/// already sent read and dropped (a little, briefly). Closing a socket with unread input resets
+/// the connection, and a reset can reach the client before it has read the refusal.
+fn refuse(out: &mut TcpStream, reader: &mut BufReader<TcpStream>) {
+    use std::io::Read;
+    let _ = writeln!(out, "{}", unauthorized());
+    let _ = out.shutdown(std::net::Shutdown::Write);
+    let _ = reader.get_ref().set_read_timeout(Some(Duration::from_millis(500)));
+    let _ = std::io::copy(&mut reader.by_ref().take(64 * 1024), &mut std::io::sink());
+}
+
+/// How long a request waits for the app's reply: most requests, and a batch (or every request,
+/// on a patient connection).
+#[derive(Clone, Copy)]
+struct Waits {
+    short: Duration,
+    long: Duration,
+}
+
+const WAITS: Waits = Waits { short: Duration::from_secs(60), long: Duration::from_secs(3600) };
+
+/// A request that timed out but is still running in the app (#1618): its id and method, and where
+/// its reply will land.
+struct Pending {
+    id: Value,
+    method: String,
+    /// The request in messages ("`engine.execute` (solid.fillet)").
+    what: String,
+    reply: Receiver<Value>,
+}
+
+/// Every request the app has been sent and not answered yet, from every connection, for
+/// `control.running` (#3654). Each connection's own thread answers that, so it never waits behind
+/// a running request.
+struct Running {
+    list: Mutex<Vec<InFlight>>,
+    connections: AtomicU64,
+    keys: AtomicU64,
+}
+
+/// What `control.running` says about a request: never its parameters beyond the command id.
+struct InFlight {
+    key: u64,
+    connection: u64,
+    id: Value,
+    method: String,
+    command: Option<&'static str>,
+    steps: Option<usize>,
+    since: Instant,
+    started: Arc<AtomicBool>,
+}
+
+/// The app's requests, from both of its listeners.
+static RUNNING: Running = Running::new();
+
+impl Running {
+    const fn new() -> Self {
+        Running { list: Mutex::new(Vec::new()), connections: AtomicU64::new(0), keys: AtomicU64::new(0) }
+    }
+
+    fn lock(&self) -> MutexGuard<'_, Vec<InFlight>> {
+        self.list.lock().unwrap_or_else(PoisonError::into_inner)
+    }
+
+    /// List `req`, sent on `connection`, until the returned ticket is dropped.
+    fn add(&'static self, connection: u64, id: &Value, req: &ControlRequest) -> Ticket {
+        let key = self.keys.fetch_add(1, Ordering::Relaxed);
+        // Ids and methods come from the client: only short ones are repeated to the others.
+        let id = match id {
+            Value::Number(_) => id.clone(),
+            Value::String(s) if s.len() <= 64 => id.clone(),
+            _ => Value::Null,
+        };
+        let p = &req.params;
+        let command = match req.method.as_str() {
+            "engine.execute" | "command" => p.get("command").and_then(Value::as_str).and_then(solidcraft_engine::find_command).map(|c| c.id),
+            _ => None,
+        };
+        let steps = match req.method.as_str() {
+            "engine.batch" | "engine.script" => p.get("commands").and_then(Value::as_array).map(Vec::len),
+            _ => None,
+        };
+        let method = req.method.chars().take(64).collect();
+        let started = req.started.clone();
+        self.lock().push(InFlight { key, connection, id, method, command, steps, since: Instant::now(), started });
+        Ticket { running: self, key }
+    }
+
+    /// The `control.running` result, as `asker`'s connection sees it.
+    fn result(&self, asker: u64) -> Value {
+        let rows: Vec<Value> = self
+            .lock()
+            .iter()
+            .map(|e| {
+                let mut r = json!({
+                    "connection": e.connection,
+                    "id": e.id,
+                    "method": e.method,
+                    "running_s": (e.since.elapsed().as_secs_f64() * 10.0).round() / 10.0,
+                    "queued": !e.started.load(Ordering::Relaxed),
+                });
+                if let Some(c) = e.command {
+                    r["command"] = json!(c);
+                }
+                if let Some(n) = e.steps {
+                    r["steps"] = json!(n);
+                }
+                if e.connection == asker {
+                    r["self"] = json!(true);
+                }
+                r
+            })
+            .collect();
+        json!({"running": rows})
+    }
+}
+
+/// A listed request; dropped when its reply arrives.
+struct Ticket {
+    running: &'static Running,
+    key: u64,
+}
+
+impl Drop for Ticket {
+    fn drop(&mut self) {
+        let key = self.key;
+        self.running.lock().retain(|e| e.key != key);
+    }
+}
+
+/// The reply to a timed-out request, received on a thread of its own so the request stays listed
+/// until the app answers, also once its connection has closed (#3654).
+fn watch(reply: Receiver<Value>, ticket: Ticket) -> Receiver<Value> {
+    let (late_tx, late_rx) = channel();
+    // A small thread per timed-out request (each connection has at most one). If none can be
+    // made, the reply is lost and `control.pending` says the app ended the request without one.
+    // The reply is passed on before the request leaves the list: once `control.running` no longer
+    // shows it, its connection's `control.pending` has it.
+    let _ = std::thread::Builder::new().stack_size(64 * 1024).spawn(move || {
+        if let Ok(v) = reply.recv() {
+            let _ = late_tx.send(v);
+        }
+        drop(late_tx);
+        drop(ticket);
+    });
+    late_rx
+}
+
+/// The reply text for a request that outlasts its wait. A request that only reads changes
+/// nothing when it finishes; an export or a save still writes its file, and any other request
+/// still applies, as it was not cancelled.
+fn timeout_message(what: &str, effect: control_pending::Effect) -> String {
+    match effect {
+        control_pending::Effect::ReadsOnly => {
+            format!("timeout: {what} is still running in the app ({}); ask `control.pending` for its answer", effect.when_done())
+        }
+        control_pending::Effect::WritesFile => format!(
+            "timeout: {what} is still running in the app and will still write the file when it finishes (it was not cancelled: \
+             don't send it again; the design does not change); ask `control.pending` for its result"
+        ),
+        control_pending::Effect::Changes => format!(
+            "timeout: {what} is still running in the app and will still apply when it finishes (it was not cancelled: don't send it \
+             again); ask `control.pending` for its result"
+        ),
+    }
+}
+
+/// The reply text for a request refused because an earlier one on the connection still runs.
+fn busy_message(p: &Pending, method: &str) -> String {
+    let method: String = method.chars().take(128).collect();
+    format!(
+        "busy: request {} ({}) is still running, so `{method}` was not run; ask `control.pending` for that request's result, then \
+         send this one again",
+        p.id, p.what
+    )
+}
+
+fn serve(stream: TcpStream, token: &str, tx: Sender<ControlRequest>, ctx: egui::Context, patient: bool) {
+    serve_with(stream, token, tx, ctx, patient, WAITS, &RUNNING);
+}
+
+fn serve_with(
+    stream: TcpStream,
+    token: &str,
+    tx: Sender<ControlRequest>,
+    ctx: egui::Context,
+    patient: bool,
+    waits: Waits,
+    running: &'static Running,
+) {
+    let connection = running.connections.fetch_add(1, Ordering::Relaxed) + 1;
+    let Ok(read) = stream.try_clone() else { return };
+    let mut out = stream;
+    let mut reader = BufReader::new(read);
+    let mut bad = 0usize;
+    let mut authenticated = false;
+    let mut pending: Option<Pending> = None;
+    loop {
+        let line = match read_line(&mut reader, MAX_LINE) {
+            Ok(Some(l)) => String::from_utf8_lossy(&l).into_owned(),
+            Ok(None) => break,
+            Err(e) => {
+                let _ = writeln!(out, "{}", json!({"ok": false, "error": e.to_string()}));
+                break;
+            }
+        };
+        if line.trim().is_empty() {
+            continue;
+        }
+        let reply = match serde_json::from_str::<Value>(&line) {
+            Ok(msg) => {
+                // The first request must carry the token; later ones on the same connection may.
+                if !authenticated {
+                    match msg.get("token").and_then(Value::as_str) {
+                        Some(t) if control_auth::tokens_match(t, token) => authenticated = true,
+                        _ => {
+                            refuse(&mut out, &mut reader);
+                            break;
+                        }
+                    }
+                }
+                let id = msg.get("id").cloned().unwrap_or(Value::Null);
+                let method = msg.get("method").and_then(Value::as_str).unwrap_or("").to_string();
+                let params = msg.get("params").cloned().unwrap_or(json!({}));
+                // A request that timed out may have finished since (#1618). `control.running` only
+                // looks, so it leaves that reply where it is.
+                let late = pending.as_ref().filter(|_| method != "control.running").and_then(|p| match p.reply.try_recv() {
+                    Ok(reply) => Some(reply),
+                    Err(TryRecvError::Disconnected) => Some(json!({"ok": false, "error": "the app ended the request without a reply"})),
+                    Err(TryRecvError::Empty) => None,
+                });
+                let mut r = if method == "control.running" {
+                    json!({"ok": true, "result": running.result(connection)})
+                } else if method == "control.pending" {
+                    match (pending.take(), late) {
+                        (None, _) => json!({"ok": true, "result": {"pending": null}}),
+                        (Some(p), Some(reply)) => json!({"ok": true, "result": {"pending": p.id, "method": p.method, "done": true, "reply": reply}}),
+                        (Some(p), None) => {
+                            let r = json!({"ok": true, "result": {"pending": p.id, "method": p.method, "done": false}});
+                            pending = Some(p);
+                            r
+                        }
+                    }
+                } else if let Some(p) = pending.as_ref().filter(|_| late.is_none()) {
+                    // Nothing more is queued behind it, to run unseen when it ends.
+                    json!({"ok": false, "busy": true, "error": busy_message(p, &method)})
+                } else {
+                    if late.is_some() {
+                        // Finished, and the client moved on without asking: it is dropped.
+                        pending = None;
+                    }
+                    // A batch replaces many short requests: the whole of it may take long (#743).
+                    let wait = if patient || method == "engine.batch" { waits.long } else { waits.short };
+                    let what = control_pending::describe(&method, &params);
+                    let effect = control_pending::effect(&method, &params);
+                    let (req, rrx) = ControlRequest::new(method.clone(), params);
+                    let ticket = running.add(connection, &id, &req);
+                    if tx.send(req).is_err() {
+                        break;
+                    }
+                    ctx.request_repaint();
+                    match rrx.recv_timeout(wait) {
+                        Ok(r) => r,
+                        Err(_) => {
+                            let r = json!({"ok": false, "running": true, "error": timeout_message(&what, effect)});
+                            pending = Some(Pending { id: id.clone(), method, what, reply: watch(rrx, ticket) });
+                            r
+                        }
+                    }
+                };
+                if let Some(o) = r.as_object_mut() {
+                    o.insert("id".into(), id);
+                }
+                r
+            }
+            Err(_) if !authenticated => {
+                refuse(&mut out, &mut reader);
+                break;
+            }
+            Err(e) => {
+                bad += 1;
+                json!({"ok": false, "error": format!("bad JSON: {e}")})
+            }
+        };
+        if writeln!(out, "{reply}").is_err() {
+            break;
+        }
+        if bad >= MAX_BAD_LINES {
+            break;
         }
     }
 }
@@ -176,17 +475,80 @@ fn listen_on_listener(listener: TcpListener, token: String, tx: Sender<ControlRe
 #[cfg(test)]
 mod tests {
     use super::*;
-    use solidcraft_control::server::Waits;
-    use std::io::{BufRead, BufReader, Write};
-    use std::net::TcpStream;
-    use std::sync::atomic::Ordering;
-    use std::time::{Duration, Instant};
+
+    /// #1618: a request that outlasts its wait says it is still running; the connection keeps its
+    /// reply for `control.pending`, and refuses other requests as `busy` until it lands, so none
+    /// is queued to run unseen behind it.
+    #[test]
+    fn a_timed_out_request_can_be_asked_for_later() {
+        let token = "0123456789abcdef0123456789abcdef";
+        let listener = TcpListener::bind("127.0.0.1:0").unwrap();
+        let addr = listener.local_addr().unwrap();
+        let (tx, rx) = channel::<ControlRequest>();
+        // The slow request is held until the test has seen it time out, so the test does not
+        // race the clock on a loaded machine.
+        let (gate_tx, gate_rx) = channel::<()>();
+        let ran = std::sync::Arc::new(std::sync::Mutex::new(Vec::<String>::new()));
+        let seen = ran.clone();
+        std::thread::spawn(move || {
+            for req in rx {
+                seen.lock().unwrap().push(req.method.clone());
+                if req.method == "slow" {
+                    let _ = gate_rx.recv();
+                }
+                let _ = req.reply.send(json!({"ok": true, "result": req.method}));
+            }
+        });
+        let waits = Waits { short: Duration::from_millis(100), long: Duration::from_millis(100) };
+        static RUNNING: Running = Running::new();
+        std::thread::spawn(move || {
+            if let Some(stream) = listener.incoming().flatten().next() {
+                serve_with(stream, token, tx, egui::Context::default(), false, waits, &RUNNING);
+            }
+        });
+        let s = TcpStream::connect(addr).unwrap();
+        s.set_read_timeout(Some(Duration::from_secs(10))).unwrap();
+        let mut out = s.try_clone().unwrap();
+        let mut lines = BufReader::new(s);
+        let mut ask = |v: Value| -> Value {
+            writeln!(out, "{v}").unwrap();
+            let mut l = String::new();
+            lines.read_line(&mut l).unwrap();
+            serde_json::from_str(&l).unwrap()
+        };
+        let r = ask(json!({"id": 1, "method": "slow", "token": token}));
+        assert!(r["ok"] == false && r["running"] == true && r["error"].as_str().is_some_and(|e| e.starts_with("timeout")), "{r}");
+        let r = ask(json!({"id": 2, "method": "ui.view"}));
+        assert!(r["busy"] == true && r["id"] == 2, "{r}");
+        let r = ask(json!({"id": 3, "method": "control.pending"}));
+        assert_eq!((&r["result"]["pending"], &r["result"]["done"]), (&json!(1), &json!(false)), "{r}");
+        gate_tx.send(()).unwrap();
+        let deadline = std::time::Instant::now() + Duration::from_secs(10);
+        let r = loop {
+            let r = ask(json!({"id": 4, "method": "control.pending"}));
+            if r["result"]["done"] == true || std::time::Instant::now() > deadline {
+                break r;
+            }
+            std::thread::sleep(Duration::from_millis(10));
+        };
+        assert_eq!(
+            (&r["result"]["pending"], &r["result"]["done"], &r["result"]["reply"]["result"]),
+            (&json!(1), &json!(true), &json!("slow")),
+            "{r}"
+        );
+        let r = ask(json!({"id": 5, "method": "control.pending"}));
+        assert_eq!(r["result"]["pending"], Value::Null, "{r}");
+        let r = ask(json!({"id": 6, "method": "ui.view"}));
+        assert_eq!((&r["ok"], &r["result"]), (&json!(true), &json!("ui.view")), "{r}");
+        assert_eq!(*ran.lock().unwrap(), ["slow", "ui.view"], "the busy request never reached the app");
+    }
 
     /// #3654: `control.running` answers on every connection, at once, with what any connection
     /// has the app running or queued (command ids, never parameters); a timed-out request stays
     /// listed until the app answers it, and an idle app lists nothing.
     #[test]
     fn every_connection_sees_what_the_app_is_running() {
+        static RUNNING: Running = Running::new();
         let token = "0123456789abcdef0123456789abcdef";
         let listener = TcpListener::bind("127.0.0.1:0").unwrap();
         let addr = listener.local_addr().unwrap();
@@ -203,12 +565,11 @@ mod tests {
                 let _ = req.reply.send(json!({"ok": true, "result": req.method}));
             }
         });
-        let waits = Waits { short: Duration::from_millis(100), long: Duration::from_secs(60), token: Waits::default().token };
-        let hub = Arc::new(Hub::new(SolidCraft, || {}, MAX_LINE).with_waits(waits));
+        let waits = Waits { short: Duration::from_millis(100), long: Duration::from_secs(60) };
         std::thread::spawn(move || {
             for stream in listener.incoming().flatten() {
-                let (tx, hub) = (tx.clone(), Arc::clone(&hub));
-                std::thread::spawn(move || hub.serve(stream, token, tx, false));
+                let tx = tx.clone();
+                std::thread::spawn(move || serve_with(stream, token, tx, egui::Context::default(), false, waits, &RUNNING));
             }
         });
         let open = || {
@@ -237,9 +598,6 @@ mod tests {
         let mut watcher = open();
         let (r, rows) = running(&mut watcher, &|_| true);
         assert!(r["ok"] == true && rows.is_empty(), "idle: {r}");
-        // What the app's control channel does beyond the methods every version has (#9184).
-        let r = watcher(json!({"id": 0, "method": "control.capabilities", "token": token}));
-        assert_eq!((&r["ok"], &r["result"]["param_check"]), (&json!(true), &json!(["off", "warn", "strict"])), "{r}");
 
         let mut export = open();
         let path = "/private/part.step";
@@ -271,9 +629,6 @@ mod tests {
         let own: Vec<&Value> = r["result"]["running"].as_array().unwrap().iter().filter(|row| row["self"] == true).collect();
         assert_eq!(own.len(), 1, "{r}");
         assert_eq!(own[0]["command"], "file.export", "{r}");
-        // So may it ask what the app can do: answered at once, not refused as busy.
-        let r = export(json!({"id": 8, "method": "control.capabilities"}));
-        assert_eq!(r["result"]["param_check"], json!(["off", "warn", "strict"]), "{r}");
 
         gate_tx.send(()).unwrap();
         assert_eq!(queued.join().unwrap()["result"], "engine.batch");
@@ -288,8 +643,7 @@ mod tests {
     /// writes a file (an export, #1989); a change is, by name.
     #[test]
     fn timeout_text_tells_reads_from_changes() {
-        let says =
-            |method: &str, p: Value| server::timeout_message(&control_pending::describe(method, &p), control_pending::effect(method, &p), "design");
+        let says = |method: &str, p: Value| timeout_message(&control_pending::describe(method, &p), control_pending::effect(method, &p));
         let read = says("ui.inspect", json!({}));
         assert!(read.starts_with("timeout") && read.contains("only reads") && !read.contains("will still apply"), "{read}");
         let read = says("engine.execute", json!({"command": "sketch.inspect"}));
@@ -303,4 +657,97 @@ mod tests {
         let render = says("ui.render", json!({"path": "/tmp/a.png"}));
         assert!(render.contains("will still write the file"), "{render}");
     }
+
+    /// #205: a connection runs nothing until a request carries the launch's token; a wrong or
+    /// missing token, or garbage, is refused and the connection closed. Once shown, the token
+    /// need not be repeated on that connection.
+    #[test]
+    fn requests_run_only_after_the_token() {
+        use std::io::Read;
+        let token = "0123456789abcdef0123456789abcdef";
+        let listener = TcpListener::bind("127.0.0.1:0").unwrap();
+        let addr = listener.local_addr().unwrap();
+        let (tx, rx) = channel::<ControlRequest>();
+        let ran = std::sync::Arc::new(std::sync::Mutex::new(Vec::<String>::new()));
+        let seen = ran.clone();
+        std::thread::spawn(move || {
+            for req in rx {
+                seen.lock().unwrap().push(req.method.clone());
+                let _ = req.reply.send(json!({"ok": true, "result": null}));
+            }
+        });
+        std::thread::spawn(move || {
+            for stream in listener.incoming().flatten() {
+                let tx = tx.clone();
+                std::thread::spawn(move || serve(stream, token, tx, egui::Context::default(), false));
+            }
+        });
+        let session = |lines: &[String]| {
+            let mut s = TcpStream::connect(addr).unwrap();
+            s.set_read_timeout(Some(Duration::from_secs(10))).unwrap();
+            for l in lines {
+                let _ = writeln!(s, "{l}");
+            }
+            let _ = s.shutdown(std::net::Shutdown::Write);
+            let mut text = String::new();
+            let _ = s.read_to_string(&mut text);
+            text.lines().map(|l| serde_json::from_str::<Value>(l).unwrap()).collect::<Vec<_>>()
+        };
+        for first in [
+            json!({"id": 1, "method": "app.quit", "params": {"force": true}}).to_string(),
+            json!({"id": 1, "method": "app.quit", "token": "0123456789abcdef0123456789abcdee"}).to_string(),
+            json!({"id": 1, "method": "app.quit", "token": "0123"}).to_string(),
+            json!({"id": 1, "method": "app.quit", "token": 7}).to_string(),
+            "not json".to_string(),
+        ] {
+            let replies = session(&[first.clone(), json!({"id": 2, "method": "app.quit", "token": token}).to_string()]);
+            assert_eq!(replies.len(), 1, "{first}: closed after refusing: {replies:?}");
+            assert!(replies[0]["error"].as_str().is_some_and(|e| e.starts_with("unauthorized")), "{first}: {replies:?}");
+        }
+        assert!(ran.lock().unwrap().is_empty(), "nothing ran without the token");
+        let replies = session(&[
+            json!({"id": 1, "method": "ui.inspect", "token": token}).to_string(),
+            json!({"id": 2, "method": "engine.commands"}).to_string(),
+        ]);
+        assert_eq!(replies.len(), 2, "{replies:?}");
+        assert!(replies.iter().all(|r| r["ok"] == true), "{replies:?}");
+        assert_eq!(*ran.lock().unwrap(), ["ui.inspect", "engine.commands"]);
+    }
+
+    /// A request longer than the cap is refused instead of allocated.
+    #[test]
+    fn lines_past_the_cap_are_refused() {
+        let flood = vec![b'A'; MAX_LINE + 2];
+        let mut r = BufReader::new(flood.as_slice());
+        let e = read_line(&mut r, MAX_LINE).unwrap_err();
+        assert_eq!(e.kind(), std::io::ErrorKind::InvalidData);
+        assert!(e.to_string().contains("request too large"), "{e}");
+    }
+
+    /// Ordinary framing: lines split on newlines, blank lines kept, no trailing newline needed.
+    #[test]
+    fn lines_split_on_newlines() {
+        let text = b"{\"a\":1}\n\n{\"b\":2}\nlast".to_vec();
+        let mut r = BufReader::new(text.as_slice());
+        let mut got = Vec::new();
+        while let Some(line) = read_line(&mut r, MAX_LINE).unwrap() {
+            got.push(String::from_utf8(line).unwrap());
+        }
+        assert_eq!(got, vec!["{\"a\":1}", "", "{\"b\":2}", "last"]);
+        assert!(read_line(&mut r, MAX_LINE).unwrap().is_none());
+    }
+
+    /// A line that spans several reads of the underlying stream still arrives whole.
+    #[test]
+    fn lines_longer_than_one_buffer_arrive_whole() {
+        let long = "x".repeat(200_000);
+        let text = format!("{long}\n{long}\n").into_bytes();
+        let mut r = BufReader::with_capacity(64, text.as_slice());
+        assert_eq!(read_line(&mut r, MAX_LINE).unwrap().unwrap().len(), long.len());
+        assert_eq!(read_line(&mut r, MAX_LINE).unwrap().unwrap().len(), long.len());
+        assert!(read_line(&mut r, MAX_LINE).unwrap().is_none());
+        // The same line against a smaller cap is refused.
+        let mut r = BufReader::with_capacity(64, text.as_slice());
+        assert!(read_line(&mut r, 1000).is_err());
+    }
 }

apps/solidcraft/src/desktop_chooser.rs

@@ -1,100 +0,0 @@
-//! Is the file chooser that opens the desktop's own? (#10159)
-//!
-//! `rfd` opens the file chooser through the XDG desktop portal; without the portal it falls
-//! back to zenity, a window that does not belong to the app and that the app never mentions.
-//! The desktop's own chooser is the portal one, so the app has to know when it is not the one
-//! that opens, and say so in the session log.
-//!
-//! The session bus is asked once, on a thread of its own: a bus that answers late must not
-//! hold the window. What it answered is kept, and read when a file is opened.
-
-use std::sync::atomic::{AtomicBool, AtomicU8, Ordering};
-
-/// The portal's bus name: the desktop's own file chooser lives behind it.
-const PORTAL: &str = "org.freedesktop.portal.Desktop";
-
-/// The bus has not answered yet.
-const UNKNOWN: u8 = 0;
-/// There is no session bus to reach the portal on.
-const NO_SESSION_BUS: u8 = 1;
-/// The bus is there but the portal does not answer on it.
-const NO_PORTAL_SERVICE: u8 = 2;
-/// The bus is there and the portal answers on it.
-const PORTAL_THERE: u8 = 3;
-
-/// What the session bus said about the portal.
-static BUS: AtomicU8 = AtomicU8::new(UNKNOWN);
-/// A file chooser is opening: whether it is the desktop's own is to be said.
-static OPENING: AtomicBool = AtomicBool::new(false);
-
-/// Ask the session bus, on a thread of its own, whether the portal is there.
-pub fn start(ctx: &egui::Context) {
-    let thread_ctx = ctx.clone();
-    let probe = move || {
-        let answer = match session_bus() {
-            None => NO_SESSION_BUS,
-            Some(connection) => match portal_on(&connection) {
-                true => PORTAL_THERE,
-                false => NO_PORTAL_SERVICE,
-            },
-        };
-        BUS.store(answer, Ordering::Relaxed);
-        // The answer is in: a file chooser waiting for it can be told now.
-        thread_ctx.request_repaint();
-    };
-    if let Err(e) = std::thread::Builder::new().name("desktop-chooser".into()).spawn(probe) {
-        log::warn!("file chooser: no thread to ask the session bus: {e}");
-        // Nothing will answer: the desktop's own chooser cannot be told apart from the start.
-        BUS.store(PORTAL_THERE, Ordering::Relaxed);
-    }
-}
-
-/// The session bus, when there is one to talk to.
-fn session_bus() -> Option<zbus::blocking::Connection> {
-    zbus::blocking::Connection::session().ok()
-}
-
-/// Whether the portal answers on the bus: it is either running on it or waiting to be started.
-fn portal_on(connection: &zbus::blocking::Connection) -> bool {
-    let Ok(bus) = zbus::blocking::fdo::DBusProxy::new(connection) else { return false };
-    let named = |names: Vec<zbus::names::OwnedBusName>| names.iter().any(|name| name.as_str() == PORTAL);
-    // A portal that is running is on the bus; one that is not running yet is still there when
-    // the bus can start it, which is what the portal's service file is for.
-    match (bus.list_names().map(named), bus.list_activatable_names().map(named)) {
-        (Ok(running), Ok(startable)) => running || startable,
-        (Ok(running), Err(_)) => running,
-        (Err(_), Ok(startable)) => startable,
-        // The bus does not answer: nothing answers on it.
-        (Err(_), Err(_)) => false,
-    }
-}
-
-/// A file chooser is opening: ask for a frame, so that the reason it is not the desktop's own
-/// is said (#10159).
-pub fn note_opening(ctx: &egui::Context) {
-    OPENING.store(true, Ordering::Relaxed);
-    ctx.request_repaint();
-}
-
-/// The reason the file chooser that is opening is not the desktop's own, if it is not.
-///
-/// The decision is the one the test states: without a session bus there is no bus to reach the
-/// portal on; with a bus but no portal on it, `rfd` falls back to zenity; and under XWayland the
-/// window is an X11 one while the session is a Wayland one, which the portal refuses to parent
-/// its chooser to.
-pub fn take_reason() -> Option<&'static str> {
-    if !OPENING.load(Ordering::Relaxed) {
-        return None;
-    }
-    let (dbus_session, portal_service) = match BUS.load(Ordering::Relaxed) {
-        NO_SESSION_BUS => (false, false),
-        NO_PORTAL_SERVICE => (true, false),
-        PORTAL_THERE => (true, true),
-        // The bus has not answered yet: wait for it, and say nothing yet.
-        _ => return None,
-    };
-    OPENING.store(false, Ordering::Relaxed);
-    let wayland_display = std::env::var_os("WAYLAND_DISPLAY").is_some();
-    let x11_display = super::window_system_now() == Some("x11");
-    super::desktop_chooser_fallback(dbus_session, portal_service, wayland_display, x11_display)
-}

apps/solidcraft/src/desktop_theme.rs

@@ -1,195 +0,0 @@
-//! Linux: the desktop's dark or light preference, for Theme: System (#7944).
-//!
-//! The window toolkit does not pass it on everywhere: on GNOME (Wayland, or X11 through XWayland)
-//! the window never learns it, nor when it changes, so the app kept its colours. This reads the
-//! freedesktop setting through the XDG Desktop Portal's Settings interface on the session bus
-//! (`org.freedesktop.appearance color-scheme`, then GNOME's `color-scheme` and `gtk-theme`), the
-//! same setting other applications follow, and inside a Flatpak too. It runs on a thread of its
-//! own: the first reading, then the portal's `SettingChanged` signal; where the signal can't be
-//! had, a reading every few seconds. Without a portal it asks `gsettings` instead, on the same
-//! thread. The window reads the last answer with an atomic load
-//! (`solidcraft_ui_egui::Services::desktop_dark`), and the decision from the raw values is
-//! `solidcraft_ui_egui::prefs::desktop_prefers_dark`.
-
-use std::io::Read;
-use std::sync::Arc;
-use std::sync::atomic::{AtomicU8, Ordering};
-use std::time::Duration;
-
-use zbus::zvariant::{OwnedValue, Value};
-
-const UNKNOWN: u8 = 0;
-const DARK: u8 = 1;
-const LIGHT: u8 = 2;
-
-/// How often to read again where the portal's change signal is not available.
-const POLL: Duration = Duration::from_secs(5);
-/// How long one `gsettings` reading may take before it is given up.
-const GSETTINGS_TIMEOUT: Duration = Duration::from_secs(2);
-
-const PORTAL: &str = "org.freedesktop.portal.Desktop";
-const PORTAL_PATH: &str = "/org/freedesktop/portal/desktop";
-const SETTINGS: &str = "org.freedesktop.portal.Settings";
-const APPEARANCE: &str = "org.freedesktop.appearance";
-const GNOME: &str = "org.gnome.desktop.interface";
-
-/// Start following the desktop's preference; the closure answers the latest reading (`None`
-/// until there is one, or when the desktop says nothing).
-pub fn start(ctx: &egui::Context) -> Box<dyn Fn() -> Option<bool>> {
-    let state = Arc::new(AtomicU8::new(UNKNOWN));
-    let (thread_state, ctx) = (state.clone(), ctx.clone());
-    if let Err(e) = std::thread::Builder::new().name("desktop-theme".into()).spawn(move || follow(&thread_state, &ctx)) {
-        log::warn!("desktop theme: no thread to follow it: {e}");
-    }
-    Box::new(move || match state.load(Ordering::Relaxed) {
-        DARK => Some(true),
-        LIGHT => Some(false),
-        _ => None,
-    })
-}
-
-/// Keep `state` on the desktop's preference, asking for a frame whenever it changes.
-fn follow(state: &AtomicU8, ctx: &egui::Context) {
-    let publish = |dark: Option<bool>| {
-        let code = match dark {
-            Some(true) => DARK,
-            Some(false) => LIGHT,
-            None => UNKNOWN,
-        };
-        if state.swap(code, Ordering::Relaxed) != code {
-            ctx.request_repaint();
-        }
-    };
-    let portal = match portal() {
-        Ok(p) => Some(p),
-        Err(e) => {
-            log::info!("desktop theme: no settings portal ({e}); asking gsettings");
-            None
-        }
-    };
-    // The portal first; gsettings where there is none or it says nothing (its backend missing).
-    let read = |portal: Option<&zbus::blocking::Proxy<'static>>| portal.and_then(read_portal).or_else(read_gsettings);
-    let from_portal = portal.as_ref().and_then(read_portal);
-    let first = from_portal.or_else(read_gsettings);
-    publish(first);
-    // Wait for the portal's signal only when the portal answers: else the reading is gsettings',
-    // which only a new reading notices.
-    if let Some(p) = portal.as_ref().filter(|_| from_portal.is_some()) {
-        match p.receive_signal("SettingChanged") {
-            Ok(changes) => {
-                for message in changes {
-                    if relevant(&message) {
-                        publish(read(Some(p)));
-                    }
-                }
-                log::info!("desktop theme: the portal's change signal ended; reading every few seconds");
-            }
-            Err(e) => log::info!("desktop theme: no change signal ({e}); reading every few seconds"),
-        }
-    } else if portal.is_none() && first.is_none() && !gsettings_available() {
-        // Neither the portal nor gsettings: nothing to follow; the window toolkit's theme stays.
-        return;
-    }
-    loop {
-        std::thread::sleep(POLL);
-        publish(read(portal.as_ref()));
-    }
-}
-
-/// The portal's Settings interface on the session bus.
-fn portal() -> zbus::Result<zbus::blocking::Proxy<'static>> {
-    let connection = zbus::blocking::Connection::session()?;
-    zbus::blocking::Proxy::new(&connection, PORTAL, PORTAL_PATH, SETTINGS)
-}
-
-/// One reading through the portal.
-fn read_portal(portal: &zbus::blocking::Proxy<'static>) -> Option<bool> {
-    let appearance = read_setting(portal, APPEARANCE, "color-scheme").and_then(|v| as_u32(&v));
-    // The GNOME settings only matter when the freedesktop one has no preference.
-    if matches!(appearance, Some(1 | 2)) {
-        return solidcraft_ui_egui::prefs::desktop_prefers_dark(appearance, None, None);
-    }
-    let gnome = read_setting(portal, GNOME, "color-scheme").and_then(|v| as_string(&v));
-    let gtk_theme = read_setting(portal, GNOME, "gtk-theme").and_then(|v| as_string(&v));
-    solidcraft_ui_egui::prefs::desktop_prefers_dark(appearance, gnome.as_deref(), gtk_theme.as_deref())
-}
-
-/// A setting through `ReadOne` (portal version 2), else the older `Read`.
-fn read_setting(portal: &zbus::blocking::Proxy<'static>, namespace: &str, key: &str) -> Option<OwnedValue> {
-    let one: zbus::Result<OwnedValue> = portal.call("ReadOne", &(namespace, key));
-    one.or_else(|_| -> zbus::Result<OwnedValue> { portal.call("Read", &(namespace, key)) }).ok()
-}
-
-/// Whether a `SettingChanged` signal is about a setting the preference is read from.
-fn relevant(message: &zbus::Message) -> bool {
-    let body = message.body();
-    let Ok((namespace, key, _)) = body.deserialize::<(String, String, OwnedValue)>() else { return false };
-    matches!((namespace.as_str(), key.as_str()), (APPEARANCE, "color-scheme") | (GNOME, "color-scheme" | "gtk-theme"))
-}
-
-/// The value inside the variants `Read` wraps it in (a portal answers one or two deep).
-fn unwrap_variants<'v, 'a>(value: &'v Value<'a>) -> &'v Value<'a> {
-    let mut value = value;
-    for _ in 0..4 {
-        match value {
-            Value::Value(inner) => value = &**inner,
-            _ => break,
-        }
-    }
-    value
-}
-
-fn as_u32(value: &Value<'_>) -> Option<u32> {
-    match unwrap_variants(value) {
-        Value::U32(n) => Some(*n),
-        Value::I32(n) => u32::try_from(*n).ok(),
-        Value::U8(n) => Some(u32::from(*n)),
-        _ => None,
-    }
-}
-
-fn as_string(value: &Value<'_>) -> Option<String> {
-    match unwrap_variants(value) {
-        Value::Str(s) => Some(s.as_str().to_string()),
-        _ => None,
-    }
-}
-
-/// Without a portal: GNOME's settings through `gsettings` (`None` when it is not there).
-fn read_gsettings() -> Option<bool> {
-    let gnome = gsettings("color-scheme");
-    let gtk_theme = gsettings("gtk-theme");
-    solidcraft_ui_egui::prefs::desktop_prefers_dark(None, gnome.as_deref(), gtk_theme.as_deref())
-}
-
-fn gsettings_available() -> bool {
-    gsettings("gtk-theme").is_some()
-}
-
-/// `gsettings get org.gnome.desktop.interface <key>`, its quoted answer, or `None` when the
-/// program is missing, fails or does not answer in time.
-fn gsettings(key: &str) -> Option<String> {
-    let mut child = std::process::Command::new("gsettings")
-        .args(["get", GNOME, key])
-        .stdin(std::process::Stdio::null())
-        .stdout(std::process::Stdio::piped())
-        .stderr(std::process::Stdio::null())
-        .spawn()
-        .ok()?;
-    let started = std::time::Instant::now();
-    loop {
-        match child.try_wait() {
-            Ok(Some(status)) if status.success() => break,
-            Ok(None) if started.elapsed() < GSETTINGS_TIMEOUT => std::thread::sleep(Duration::from_millis(20)),
-            _ => {
-                let _ = child.kill();
-                let _ = child.wait();
-                return None;
-            }
-        }
-    }
-    let mut out = String::new();
-    child.stdout.take()?.take(4096).read_to_string(&mut out).ok()?;
-    let value = out.trim().trim_matches('\'').to_string();
-    (!value.is_empty()).then_some(value)
-}

apps/solidcraft/src/desktop_transparency.rs

@@ -1,63 +0,0 @@
-//! Cached accessibility signal, observed only while a theme offers blur. No UI-thread IO.
-use std::sync::{
-    Arc,
-    atomic::{AtomicBool, AtomicU8, Ordering},
-};
-
-#[derive(Default)]
-struct Reading {
-    needed: AtomicBool,
-    started: AtomicBool,
-    value: AtomicU8,
-}
-
-pub fn cached(ctx: &egui::Context) -> Box<dyn Fn(bool) -> Option<bool>> {
-    let state = Arc::new(Reading::default());
-    let ctx = ctx.clone();
-    Box::new(move |needed| {
-        state.needed.store(needed, Ordering::Relaxed);
-        if needed && !state.started.swap(true, Ordering::Relaxed) {
-            let weak = Arc::downgrade(&state);
-            let ctx = ctx.clone();
-            if let Err(error) = std::thread::Builder::new().name("desktop-transparency".into()).spawn(move || {
-                while let Some(state) = weak.upgrade() {
-                    if state.needed.load(Ordering::Relaxed) {
-                        let code = match read() {
-                            Some(true) => 1,
-                            Some(false) => 2,
-                            None => 0,
-                        };
-                        if state.value.swap(code, Ordering::Relaxed) != code {
-                            ctx.request_repaint();
-                        }
-                    }
-                    drop(state);
-                    std::thread::sleep(std::time::Duration::from_secs(5));
-                }
-            }) {
-                log::warn!("desktop transparency: could not observe accessibility setting: {error}");
-            }
-        }
-        match state.value.load(Ordering::Relaxed) {
-            1 => Some(true),
-            2 => Some(false),
-            _ => None,
-        }
-    })
-}
-
-#[cfg(target_os = "windows")]
-fn read() -> Option<bool> {
-    let key =
-        winreg::RegKey::predef(winreg::enums::HKEY_CURRENT_USER).open_subkey(r"Software\Microsoft\Windows\CurrentVersion\Themes\Personalize").ok()?;
-    match key.get_value::<u32, _>("EnableTransparency").ok()? {
-        0 => Some(true),
-        1 => Some(false),
-        _ => None,
-    }
-}
-
-#[cfg(target_os = "macos")]
-fn read() -> Option<bool> {
-    objc2::rc::autoreleasepool(|_| Some(objc2_app_kit::NSWorkspace::sharedWorkspace().accessibilityDisplayShouldReduceTransparency()))
-}

apps/solidcraft/src/device_lost.rs

@@ -5,25 +5,12 @@
 //! for recovery as a forced quit does, and starts again ([`restart`]), and the new start says what
 //! happened ([`note`]). A device lost again soon after such a restart starts the next one on the
 //! software renderer, which doesn't depend on the graphics driver.
-//!
-//! The old process ends without tearing down its GPU objects ([`end`]): on a lost NVIDIA device
-//! destroying the window's swap chain busy-waits in the driver and never returns (#9044).
 
 use crate::startup;
 
 /// Set on the start after a lost device: when the device was lost (seconds since 1970).
 pub const LOST_ENV: &str = "SOLIDCRAFT_DEVICE_LOST";
 
-/// Set on the start after a lost device: why it was lost, as wgpu said it. The old process's
-/// session journal, which recorded it, is gone by then.
-pub const REASON_ENV: &str = "SOLIDCRAFT_DEVICE_LOST_REASON";
-
-/// The longest reason passed on ([`REASON_ENV`]) and shown, in characters.
-const REASON_CHARS: usize = 300;
-
-/// How long the process may take to end ([`end`]) before it is aborted.
-const END_GRACE: std::time::Duration = std::time::Duration::from_secs(3);
-
 /// A loss this recent (seconds) counts for the start after it: its note, and a second loss
 /// within it starts on the software renderer. Inherited by later starts, an older stamp is
 /// ignored.
@@ -45,54 +32,27 @@ pub fn restart_on_software(after_recent_loss: bool, cpu_renderer: bool) -> bool
     after_recent_loss || cpu_renderer
 }
 
-/// `reason` on one line, at most [`REASON_CHARS`] long; None when there is nothing to say.
-pub fn reason(reason: Option<&str>) -> Option<String> {
-    let line = reason?.split_whitespace().collect::<Vec<_>>().join(" ");
-    (!line.is_empty()).then(|| line.chars().take(REASON_CHARS).collect())
-}
-
 /// What the start after a lost device tells the user, `software` when it runs on the software
-/// renderer, with what the driver reported ([`REASON_ENV`]).
-pub fn note(software: bool, reason: Option<&str>) -> String {
+/// renderer.
+pub fn note(software: bool) -> String {
     let mut note = String::from(
         "The graphics device was reset (the graphics driver stopped responding), so SolidCraft closed and started again. Unsaved changes were kept for recovery.",
     );
     if software {
         note.push_str(" This start uses software rendering, which doesn't depend on the graphics driver.");
     }
-    if let Some(reason) = self::reason(reason) {
-        note.push_str(&format!(" The graphics driver reported: {reason}"));
-    }
     note
 }
 
-/// The command that starts `exe` again with `args`, the loss stamped at `lost_at` and its
-/// `reason`, on the software renderer when `software`.
-fn command(
-    exe: std::path::PathBuf,
-    args: impl IntoIterator<Item = std::ffi::OsString>,
-    software: bool,
-    lost_at: u64,
-    reason: &str,
-) -> std::process::Command {
+/// Start SolidCraft again with the same arguments, the loss stamped at `lost_at`, on the software
+/// renderer when `software`.
+pub fn restart(software: bool, lost_at: u64) {
+    let Ok(exe) = std::env::current_exe() else { return };
     let mut command = std::process::Command::new(exe);
-    command.args(args).env(LOST_ENV, lost_at.to_string());
-    match self::reason(Some(reason)) {
-        Some(reason) => command.env(REASON_ENV, reason),
-        // Not one inherited from an earlier loss.
-        None => command.env_remove(REASON_ENV),
-    };
+    command.args(std::env::args_os().skip(1)).env(LOST_ENV, lost_at.to_string());
     if software {
         command.env(startup::RENDERER_ENV, "cpu");
     }
-    command
-}
-
-/// Start SolidCraft again with the same arguments, the loss stamped at `lost_at` and its `reason`,
-/// on the software renderer when `software`.
-pub fn restart(software: bool, lost_at: u64, reason: &str) {
-    let Ok(exe) = std::env::current_exe() else { return };
-    let mut command = command(exe, std::env::args_os().skip(1), software, lost_at, reason);
     #[cfg(windows)]
     {
         use std::os::windows::process::CommandExt;
@@ -104,23 +64,6 @@ pub fn restart(software: bool, lost_at: u64, reason: &str) {
     }
 }
 
-/// End the process now, without tearing down what is left on the lost device: the window's swap
-/// chain, the viewport's buffers and pipelines. On NVIDIA's Vulkan driver destroying the swap
-/// chain of a lost device busy-waits forever, which left the old window frozen at 100% of a core
-/// beside the new one (#9044). Should the exit itself get stuck in a library's exit handler, the
-/// process is aborted after [`END_GRACE`].
-pub fn end() -> ! {
-    let watchdog = std::thread::Builder::new().name("solidcraft-exit".into()).spawn(|| {
-        std::thread::sleep(END_GRACE);
-        solidcraft_engine::note!("SolidCraft graphics: still closing after the device was lost; aborting");
-        std::process::abort();
-    });
-    if let Err(e) = watchdog {
-        log::warn!("graphics: no exit watchdog: {e}");
-    }
-    std::process::exit(0)
-}
-
 #[cfg(test)]
 mod tests {
     /// Only a recent, well-formed stamp counts: a later start that inherited it says nothing.
@@ -141,34 +84,8 @@ mod tests {
         assert!(!super::restart_on_software(false, false));
         assert!(super::restart_on_software(true, false));
         assert!(super::restart_on_software(false, true));
-        assert!(super::note(true, None).contains("software rendering"));
-        assert!(!super::note(false, None).contains("software rendering"));
-        assert!(super::note(false, None).contains("kept for recovery"));
-    }
-
-    /// The start after a loss is told why (#9044): the old process's journal held the reason, and
-    /// it is deleted as that process closes.
-    #[test]
-    fn the_next_start_is_told_why_the_device_was_lost() {
-        let exe = std::path::PathBuf::from("solidcraft");
-        let args = ["--control".into(), "7979".into()];
-        let command = super::command(exe.clone(), args, true, 1_000, "Lost: Device lost\n  (vkQueueSubmit)");
-        let env = |command: &std::process::Command, name: &str| {
-            command.get_envs().find(|(k, _)| *k == name).map(|(_, v)| v.map(|v| v.to_string_lossy().into_owned()))
-        };
-        assert_eq!(env(&command, super::LOST_ENV), Some(Some("1000".into())));
-        assert_eq!(env(&command, super::REASON_ENV), Some(Some("Lost: Device lost (vkQueueSubmit)".into())), "on one line");
-        assert_eq!(env(&command, crate::startup::RENDERER_ENV), Some(Some("cpu".into())));
-        assert_eq!(command.get_args().collect::<Vec<_>>(), ["--control", "7979"]);
-        // No reason: none inherited from an earlier loss either.
-        let command = super::command(exe, Vec::new(), false, 1_000, "  ");
-        assert_eq!(env(&command, super::REASON_ENV), Some(None));
-        assert_eq!(env(&command, crate::startup::RENDERER_ENV), None);
-
-        let note = super::note(false, Some("Lost: Device lost"));
-        assert!(note.ends_with("The graphics driver reported: Lost: Device lost"), "{note}");
-        assert!(!super::note(false, Some(" \n ")).contains("reported"));
-        let long = "x".repeat(1_000);
-        assert_eq!(super::reason(Some(&long)).map(|r| r.chars().count()), Some(300));
+        assert!(super::note(true).contains("software rendering"));
+        assert!(!super::note(false).contains("software rendering"));
+        assert!(super::note(false).contains("kept for recovery"));
     }
 }

apps/solidcraft/src/native_crash_macos.rs

@@ -1,879 +0,0 @@
-//! macOS: what a crash in native code leaves behind (docs/crash-reports.md).
-//!
-//! A crash inside a graphics driver or another library (a segfault, an `abort()`, a stack
-//! overflow) is no Rust panic: the panic hook never runs and the next start only found "an
-//! unclean exit". A signal handler for SIGSEGV, SIGBUS, SIGILL, SIGFPE, SIGTRAP (how a trap
-//! instruction arrives on Apple silicon) and SIGABRT now writes, before the process goes, the
-//! same small JSON file as the Windows filter (`native_crash.rs`): the signal, the faulting
-//! module and the offset into it, and a short frame-pointer walk, next to the run's crash journal
-//! (`solidcraft_engine::crash::native_paths`). The next start puts it into the unclean exit's
-//! report. The signal then goes on to the handler that was there before (the standard library's
-//! stack overflow message) or to the default action, so the process still dies of it and macOS
-//! still writes its own crash report (`~/Library/Logs/DiagnosticReports`; the file names the
-//! `pid` the JSON records).
-//!
-//! Installing a signal handler and asking dyld which image holds an address have no safe API,
-//! hence the `unsafe_code` allowance on this module (the app crate denies it). The handler runs
-//! on a thread that may have a broken heap, or on the small alternate stack after a stack
-//! overflow: it doesn't allocate, formats into a buffer on the stack, and only reads memory on
-//! the thread's own stack. It writes what it knows from the signal first and only then calls
-//! `dladdr` (not on POSIX's async-signal-safe list; it takes dyld's recursive reader lock and
-//! doesn't allocate) to name the modules, rewriting the file, so a hang or a fault in there
-//! still leaves a record.
-#![allow(unsafe_code)]
-
-use std::ffi::{CStr, CString, c_int, c_void};
-use std::fmt::Write as _;
-use std::os::unix::ffi::OsStrExt;
-use std::sync::OnceLock;
-use std::sync::atomic::{AtomicBool, AtomicI32, AtomicUsize, Ordering};
-
-use libc::{SIGABRT, SIGBUS, SIGFPE, SIGILL, SIGSEGV, SIGTRAP, siginfo_t};
-
-/// The signals a crash arrives as, in the order of [`PREVIOUS`].
-const SIGNALS: [c_int; 6] = [SIGSEGV, SIGBUS, SIGILL, SIGFPE, SIGTRAP, SIGABRT];
-/// Frames the walk records (the faulting instruction first).
-const MAX_FRAMES: usize = 24;
-/// A fault this far below a thread's stack is taken for a stack overflow.
-const GUARD: usize = 64 << 10;
-
-/// Where the handler writes (NUL-terminated), set once by [`install`].
-static PATH: OnceLock<CString> = OnceLock::new();
-/// The handler that was installed before ours for each of [`SIGNALS`] (called after ours), as an
-/// address (`SIG_DFL` is 0, `SIG_IGN` 1), and its `sa_flags`.
-static PREVIOUS: [AtomicUsize; 6] = [const { AtomicUsize::new(libc::SIG_DFL) }; 6];
-static PREVIOUS_FLAGS: [AtomicI32; 6] = [const { AtomicI32::new(0) }; 6];
-/// The handler has started writing (a second signal while it does is only passed on).
-static BUSY: AtomicBool = AtomicBool::new(false);
-
-/// Catch native crashes from now on (after `solidcraft_engine::crash::install`; nothing without it).
-pub fn install() {
-    let Some((info, _)) = solidcraft_engine::crash::native_paths() else { return };
-    let Ok(path) = CString::new(info.as_os_str().as_bytes()) else { return };
-    if PATH.set(path).is_err() {
-        return;
-    }
-    for (slot, &signal) in SIGNALS.iter().enumerate() {
-        // SAFETY: `sigaction` is plain data; all zeros is a valid (empty) value.
-        let mut ours: libc::sigaction = unsafe { std::mem::zeroed() };
-        ours.sa_sigaction = handler as *const () as usize;
-        // On the alternate stack the standard library gives each of its threads, so that a stack
-        // overflow can still be recorded.
-        ours.sa_flags = libc::SA_SIGINFO | libc::SA_ONSTACK;
-        // SAFETY: as above.
-        let mut old: libc::sigaction = unsafe { std::mem::zeroed() };
-        // SAFETY: `handler` has the signature SA_SIGINFO calls it with and stays valid for the
-        // process's life; both structs are valid for the call.
-        if unsafe { libc::sigaction(signal, &ours, &mut old) } == 0
-            && old.sa_sigaction != ours.sa_sigaction
-            && let (Some(p), Some(f)) = (PREVIOUS.get(slot), PREVIOUS_FLAGS.get(slot))
-        {
-            f.store(old.sa_flags, Ordering::SeqCst);
-            p.store(old.sa_sigaction, Ordering::SeqCst);
-        }
-    }
-}
-
-/// The signal handler: record, then pass the signal on.
-unsafe extern "C" fn handler(signal: c_int, info: *mut siginfo_t, context: *mut c_void) {
-    // SAFETY: `__error` is this thread's errno, restored for whatever runs after us.
-    let errno = unsafe { *libc::__error() };
-    let slot = SIGNALS.iter().position(|&s| s == signal).unwrap_or(0);
-    let previous = PREVIOUS.get(slot).map_or(libc::SIG_DFL, |p| p.load(Ordering::SeqCst));
-    // SAFETY: the system passes a valid siginfo and the interrupted thread's context for the
-    // duration of an SA_SIGINFO handler.
-    let f = unsafe { fault(signal, info, context) };
-    // Someone sent a signal the app ignored before: still nothing to record.
-    let ignored = previous == libc::SIG_IGN && !f.fault;
-    if !ignored && !BUSY.swap(true, Ordering::SeqCst) {
-        record(&f);
-    }
-    // SAFETY: as above.
-    unsafe { pass_on(signal, slot, previous, f.fault, info, context) };
-    // SAFETY: as above.
-    unsafe { *libc::__error() = errno };
-}
-
-/// The signal comes from the faulting instruction itself (not `kill`, `raise` or `abort`), so
-/// returning runs it again: on arm64, the exception the thread last took matches the signal.
-/// macOS gives a SIGSEGV sent with `kill` the same `si_code` as a real one (SEGV_ACCERR), but
-/// the exception is then the thread's last system call (or something long past, whose fault
-/// address doesn't match).
-#[cfg(any(target_arch = "aarch64", test))]
-fn arm64_fault(signal: c_int, si_code: c_int, addr: usize, esr: u32, far: u64) -> bool {
-    const ABORTS: [u32; 4] = [0x20, 0x21, 0x24, 0x25];
-    const SVC: u32 = 0x15;
-    let class = esr >> 26;
-    signal != SIGABRT
-        && (1..0x10000).contains(&si_code)
-        && match signal {
-            SIGSEGV | SIGBUS => ABORTS.contains(&class) && far as usize == addr,
-            _ => class != SVC && !ABORTS.contains(&class),
-        }
-}
-
-/// As [`arm64_fault`], from the x86 trap number and page-fault address.
-#[cfg(any(target_arch = "x86_64", test))]
-fn x86_fault(signal: c_int, si_code: c_int, addr: usize, trapno: u16, faultvaddr: u64) -> bool {
-    signal != SIGABRT
-        && (1..0x10000).contains(&si_code)
-        && match signal {
-            SIGSEGV | SIGBUS => (trapno == 14 && faultvaddr as usize == addr) || matches!(trapno, 12 | 13),
-            SIGILL => trapno == 6,
-            SIGFPE => matches!(trapno, 0 | 16 | 19),
-            SIGTRAP => matches!(trapno, 1 | 3),
-            _ => false,
-        }
-}
-
-/// Hand the signal to the previous handler, or to the default action. A crash signal that was
-/// only sent goes to the default action: the handler before ours (the standard library's, for
-/// SIGSEGV and SIGBUS) expects a fault that happens again when it returns.
-unsafe fn pass_on(signal: c_int, slot: usize, previous: usize, fault: bool, info: *mut siginfo_t, context: *mut c_void) {
-    let ours = handler as *const () as usize;
-    if previous != libc::SIG_DFL && previous != libc::SIG_IGN && previous != ours && (fault || signal == SIGABRT) {
-        let flags = PREVIOUS_FLAGS.get(slot).map_or(0, |f| f.load(Ordering::SeqCst));
-        if flags & libc::SA_SIGINFO != 0 {
-            // SAFETY: the address came from `sigaction` as an SA_SIGINFO handler.
-            let previous: unsafe extern "C" fn(c_int, *mut siginfo_t, *mut c_void) = unsafe { std::mem::transmute(previous) };
-            // SAFETY: as for this handler.
-            unsafe { previous(signal, info, context) };
-        } else {
-            // SAFETY: the address came from `sigaction` as a plain handler.
-            let previous: unsafe extern "C" fn(c_int) = unsafe { std::mem::transmute(previous) };
-            // SAFETY: as for this handler.
-            unsafe { previous(signal) };
-        }
-        return;
-    }
-    if previous == libc::SIG_IGN && !fault {
-        return;
-    }
-    // SAFETY: as in `install`.
-    let mut default: libc::sigaction = unsafe { std::mem::zeroed() };
-    default.sa_sigaction = libc::SIG_DFL;
-    // SAFETY: a valid struct; restoring the default action is async-signal-safe.
-    unsafe { libc::sigaction(signal, &default, std::ptr::null_mut()) };
-    // A fault happens again when we return, now with the default action, so macOS reports it at
-    // the instruction; anything else is raised again, and arrives once this handler returns.
-    if !fault {
-        // SAFETY: async-signal-safe.
-        unsafe { libc::raise(signal) };
-    }
-}
-
-/// The darwin `ucontext_t`, up to the pointer to the machine context (`<sys/_types/_ucontext.h>`).
-#[repr(C)]
-struct UContext {
-    _onstack: c_int,
-    _sigmask: u32,
-    _stack: libc::stack_t,
-    _link: *mut c_void,
-    _mcsize: usize,
-    mcontext: *const MContext,
-}
-
-/// The darwin arm64 machine context: exception state, then the general registers
-/// (`<mach/arm/_structs.h>`; the floating-point state that follows isn't read).
-#[cfg(target_arch = "aarch64")]
-#[repr(C)]
-struct MContext {
-    far: u64,
-    esr: u32,
-    _exception: u32,
-    _x: [u64; 29],
-    fp: u64,
-    _lr: u64,
-    _sp: u64,
-    pc: u64,
-}
-
-/// The darwin x86_64 machine context: exception state, then the general registers
-/// (`<mach/i386/_structs.h>`; rax rbx rcx rdx rdi rsi rbp rsp r8–r15, then rip).
-#[cfg(target_arch = "x86_64")]
-#[repr(C)]
-struct MContext {
-    trapno: u16,
-    _cpu: u16,
-    err: u32,
-    faultvaddr: u64,
-    gpr: [u64; 16],
-    rip: u64,
-}
-
-/// What the faulting instruction did to its address, when the processor says.
-#[derive(Clone, Copy, Debug, PartialEq)]
-enum Access {
-    Unknown,
-    Read,
-    Write,
-    Execute,
-}
-
-/// What a crash signal says, read out of the signal before anything is looked up.
-#[derive(Clone, Copy, Debug)]
-struct Fault {
-    signal: c_int,
-    si_code: c_int,
-    /// `si_addr`: the address that faulted (for SIGILL, SIGFPE and SIGTRAP, the instruction).
-    addr: usize,
-    pc: usize,
-    fp: usize,
-    access: Access,
-    /// It comes from the faulting instruction (not `kill`, `raise` or `abort`).
-    fault: bool,
-    /// The process that sent the signal (0 or our own for a fault or an `abort()`).
-    sender: i32,
-    pid: i32,
-    thread: u64,
-    thread_name: [u8; 64],
-    /// The thread's stack, `[low, high)` (0, 0 when unknown).
-    stack: (usize, usize),
-}
-
-impl Fault {
-    /// The fault hit just below the thread's stack: the stack ran out.
-    fn overflow(&self) -> bool {
-        let (low, high) = self.stack;
-        matches!(self.signal, SIGSEGV | SIGBUS) && high > low && self.addr < low.saturating_add(4096) && self.addr >= low.saturating_sub(GUARD)
-    }
-
-    fn signal_name(&self) -> &'static str {
-        match self.signal {
-            SIGSEGV => "SIGSEGV",
-            SIGBUS => "SIGBUS",
-            SIGILL => "SIGILL",
-            SIGFPE => "SIGFPE",
-            SIGTRAP => "SIGTRAP",
-            SIGABRT => "SIGABRT",
-            _ => "signal",
-        }
-    }
-
-    fn name(&self) -> &'static str {
-        if self.overflow() {
-            return "stack overflow";
-        }
-        match self.signal {
-            SIGSEGV => "segmentation fault",
-            SIGBUS => "bus error",
-            SIGILL => "illegal instruction",
-            SIGFPE => "arithmetic exception",
-            SIGTRAP => "trap",
-            SIGABRT => "abort",
-            _ => "signal",
-        }
-    }
-
-    /// The `si_code` names that say something about a crash.
-    fn code_name(&self) -> Option<&'static str> {
-        Some(match (self.signal, self.si_code) {
-            (SIGSEGV, 1) => "SEGV_MAPERR",
-            (SIGSEGV, 2) => "SEGV_ACCERR",
-            (SIGBUS, 1) => "BUS_ADRALN",
-            (SIGBUS, 2) => "BUS_ADRERR",
-            (SIGBUS, 3) => "BUS_OBJERR",
-            (SIGFPE, 7) => "FPE_INTDIV",
-            (SIGFPE, 8) => "FPE_INTOVF",
-            _ => return None,
-        })
-    }
-
-    /// One line on what happened: the address read or written, a stack overflow, who sent it.
-    fn detail(&self, b: &mut Buf) {
-        if self.sender != 0 && self.sender != self.pid {
-            let _ = write!(b, "sent by process {}", self.sender);
-            return;
-        }
-        if !self.fault {
-            if self.signal != SIGABRT {
-                let _ = b.write_str("sent with kill or raise, not a fault");
-            }
-            return;
-        }
-        let what = match self.access {
-            Access::Read => "read of",
-            Access::Write => "write to",
-            Access::Execute => "execution at",
-            Access::Unknown => "access to",
-        };
-        if self.overflow() {
-            let _ = write!(b, "{what} 0x{:016X}, below the thread's stack", self.addr);
-        } else if matches!(self.signal, SIGSEGV | SIGBUS) {
-            let _ = write!(b, "{what} 0x{:016X}", self.addr);
-        } else {
-            let _ = write!(b, "at 0x{:016X}", self.addr);
-        }
-        if let Some(c) = self.code_name() {
-            let _ = write!(b, " ({c})");
-        }
-    }
-}
-
-/// An image that holds an address, as `dladdr` names it.
-struct Module<'a> {
-    path: &'a [u8],
-    base: usize,
-    symbol: Option<(&'a [u8], usize)>,
-}
-
-/// A fixed buffer to format into without allocating (what doesn't fit is cut off).
-struct Buf {
-    bytes: [u8; 8192],
-    len: usize,
-}
-
-impl Buf {
-    fn new() -> Buf {
-        Buf { bytes: [0; 8192], len: 0 }
-    }
-
-    fn room(&self) -> usize {
-        self.bytes.len().saturating_sub(self.len)
-    }
-
-    fn as_bytes(&self) -> &[u8] {
-        self.bytes.get(..self.len).unwrap_or_default()
-    }
-
-    /// `s` as the inside of a JSON string, at most `max` bytes of it (bytes that aren't UTF-8
-    /// and control characters become `?`).
-    fn escaped(&mut self, s: &[u8], max: usize) {
-        for chunk in s.get(..s.len().min(max)).unwrap_or_default().utf8_chunks() {
-            for c in chunk.valid().chars() {
-                let _ = match c {
-                    '"' => self.write_str("\\\""),
-                    '\\' => self.write_str("\\\\"),
-                    c if (c as u32) < 0x20 => self.write_str("?"),
-                    c => self.write_char(c),
-                };
-            }
-            if !chunk.invalid().is_empty() {
-                let _ = self.write_str("?");
-            }
-        }
-    }
-}
-
-impl std::fmt::Write for Buf {
-    fn write_str(&mut self, s: &str) -> std::fmt::Result {
-        let n = s.len().min(self.room());
-        if let (Some(to), Some(from)) = (self.bytes.get_mut(self.len..self.len + n), s.as_bytes().get(..n)) {
-            to.copy_from_slice(from);
-            self.len += n;
-        }
-        Ok(())
-    }
-}
-
-/// The last part of a path.
-fn file_name(path: &[u8]) -> &[u8] {
-    path.rsplit(|&c| c == b'/').next().unwrap_or(path)
-}
-
-/// The report: what the signal says, then (with `resolve`) the module of the faulting
-/// instruction and the `frames`. Always valid JSON: frames stop while there is room to close it.
-fn json(b: &mut Buf, f: &Fault, frames: &[usize], resolve: impl Fn(usize, bool) -> Option<Module<'static>>) {
-    let signal = f.signal_name();
-    let _ = write!(b, "{{\"signal\":\"{signal}\",\"number\":{},\"code\":\"{signal}\",\"name\":\"{}\"", f.signal, f.name());
-    let _ = write!(b, ",\"si_code\":{},\"address\":\"0x{:016X}\",\"thread\":{},\"pid\":{}", f.si_code, f.pc, f.thread, f.pid);
-    let name = f.thread_name.split(|&c| c == 0).next().unwrap_or_default();
-    if !name.is_empty() {
-        let _ = b.write_str(",\"thread_name\":\"");
-        b.escaped(name, 64);
-        let _ = b.write_str("\"");
-    }
-    let mark = b.len;
-    let _ = b.write_str(",\"detail\":\"");
-    let start = b.len;
-    f.detail(b);
-    if b.len == start {
-        b.len = mark;
-    } else {
-        let _ = b.write_str("\"");
-    }
-    if let Some(m) = resolve(f.pc, false) {
-        let _ = write!(b, ",\"offset\":\"0x{:X}\",\"module\":\"", f.pc.wrapping_sub(m.base));
-        b.escaped(m.path, 300);
-        let _ = b.write_str("\"");
-    }
-    if !frames.is_empty() {
-        let _ = b.write_str(",\"frames\":[");
-        for (i, &at) in frames.iter().enumerate() {
-            // A frame is at most ~300 bytes; keep room for it and the closing `]}`.
-            if b.room() < 400 {
-                break;
-            }
-            if i > 0 {
-                let _ = b.write_str(",");
-            }
-            let _ = b.write_str("\"");
-            // A return address points after the call: look up the call itself.
-            match resolve(at, i > 0) {
-                Some(m) => {
-                    b.escaped(file_name(m.path), 100);
-                    let _ = write!(b, "+0x{:X}", at.wrapping_sub(m.base));
-                    if let Some((symbol, start)) = m.symbol {
-                        let _ = b.write_str(" ");
-                        b.escaped(symbol, 160);
-                        let _ = write!(b, "+0x{:X}", at.wrapping_sub(start));
-                    }
-                }
-                None => {
-                    let _ = write!(b, "0x{at:016X}");
-                }
-            }
-            let _ = b.write_str("\"");
-        }
-        let _ = b.write_str("]");
-    }
-    let _ = b.write_str("}");
-}
-
-/// The return addresses up the frame-pointer chain from `fp`, after `pc`. `read` gives the word
-/// at an address; frames outside `stack`, misaligned or not going up end the walk.
-fn walk(pc: usize, fp: usize, stack: (usize, usize), read: impl Fn(usize) -> Option<usize>, out: &mut [usize; MAX_FRAMES]) -> usize {
-    let (low, high) = stack;
-    let mut n = 0;
-    if let Some(slot) = out.get_mut(n) {
-        *slot = pc;
-        n += 1;
-    }
-    let mut fp = fp;
-    while n < MAX_FRAMES {
-        let in_stack = fp >= low && fp.checked_add(16).is_some_and(|end| end <= high);
-        if !fp.is_multiple_of(8) || !in_stack {
-            break;
-        }
-        let (Some(next), Some(ret)) = (read(fp), read(fp + 8)) else { break };
-        let ret = strip_pointer_auth(ret);
-        if ret == 0 {
-            break;
-        }
-        if let Some(slot) = out.get_mut(n) {
-            *slot = ret;
-            n += 1;
-        }
-        if next <= fp {
-            break;
-        }
-        fp = next;
-    }
-    n
-}
-
-/// Return addresses saved by arm64e code carry a signature in their top bits.
-fn strip_pointer_auth(addr: usize) -> usize {
-    if cfg!(target_arch = "aarch64") { addr & 0x0000_7FFF_FFFF_FFFF } else { addr }
-}
-
-/// Read what the signal and the interrupted thread's registers say.
-unsafe fn fault(signal: c_int, info: *const siginfo_t, context: *const c_void) -> Fault {
-    let mut f = Fault {
-        signal,
-        si_code: 0,
-        addr: 0,
-        pc: 0,
-        fp: 0,
-        access: Access::Unknown,
-        fault: false,
-        sender: 0,
-        // SAFETY: async-signal-safe.
-        pid: unsafe { libc::getpid() },
-        thread: 0,
-        thread_name: [0; 64],
-        stack: (0, 0),
-    };
-    if !info.is_null() {
-        // SAFETY: the system passes a valid siginfo for the duration of the handler.
-        let info = unsafe { &*info };
-        f.si_code = info.si_code;
-        f.addr = info.si_addr as usize;
-        f.sender = info.si_pid;
-        // Without registers (never seen), the signal's own code has to do.
-        f.fault = signal != SIGABRT && (1..0x10000).contains(&f.si_code);
-    }
-    let context = context as *const UContext;
-    // SAFETY: an SA_SIGINFO handler's third argument is the interrupted thread's ucontext, whose
-    // machine context pointer the kernel fills in.
-    let mcontext = if context.is_null() { std::ptr::null() } else { unsafe { (*context).mcontext } };
-    if !mcontext.is_null() {
-        // SAFETY: as above.
-        let m = unsafe { &*mcontext };
-        #[cfg(target_arch = "aarch64")]
-        {
-            f.pc = strip_pointer_auth(m.pc as usize);
-            f.fp = m.fp as usize;
-            f.fault = arm64_fault(signal, f.si_code, f.addr, m.esr, m.far);
-            // A data abort says whether it was a write (WnR); an instruction abort is execution.
-            f.access = match m.esr >> 26 {
-                0x24 | 0x25 if m.esr & (1 << 6) != 0 => Access::Write,
-                0x24 | 0x25 => Access::Read,
-                0x20 | 0x21 => Access::Execute,
-                _ => Access::Unknown,
-            };
-        }
-        #[cfg(target_arch = "x86_64")]
-        {
-            f.pc = m.rip as usize;
-            f.fp = m.gpr.get(6).copied().unwrap_or(0) as usize;
-            f.fault = x86_fault(signal, f.si_code, f.addr, m.trapno, m.faultvaddr);
-            // A page fault's error code: bit 4 instruction fetch, bit 1 write.
-            f.access = match (m.trapno, m.err) {
-                (14, e) if e & 0x10 != 0 => Access::Execute,
-                (14, e) if e & 0x2 != 0 => Access::Write,
-                (14, _) => Access::Read,
-                _ => Access::Unknown,
-            };
-        }
-    }
-    if f.pc == 0 && matches!(signal, SIGILL | SIGFPE | SIGTRAP) {
-        f.pc = f.addr;
-    }
-    // SAFETY: these read the calling thread's own pthread structure; the buffers are as long as
-    // we say.
-    unsafe {
-        let me = libc::pthread_self();
-        libc::pthread_threadid_np(me, &mut f.thread);
-        libc::pthread_getname_np(me, f.thread_name.as_mut_ptr().cast(), f.thread_name.len());
-        let high = libc::pthread_get_stackaddr_np(me) as usize;
-        let size = libc::pthread_get_stacksize_np(me);
-        if let Some(low) = high.checked_sub(size) {
-            f.stack = (low, high);
-        }
-    }
-    f
-}
-
-/// The image that holds `addr` (the call before it, for a return address).
-fn resolve(addr: usize, return_address: bool) -> Option<Module<'static>> {
-    let at = if return_address { addr.saturating_sub(1) } else { addr };
-    // SAFETY: `Dl_info` is plain data; all zeros is a valid value.
-    let mut info: libc::Dl_info = unsafe { std::mem::zeroed() };
-    // SAFETY: `dladdr` only reads dyld's image list; the strings it returns live as long as the
-    // image, which a crashing process never unloads.
-    unsafe {
-        if libc::dladdr(at as *const c_void, &mut info) == 0 || info.dli_fname.is_null() {
-            return None;
-        }
-        let symbol = (!info.dli_sname.is_null()).then(|| (CStr::from_ptr(info.dli_sname).to_bytes(), info.dli_saddr as usize));
-        Some(Module { path: CStr::from_ptr(info.dli_fname).to_bytes(), base: info.dli_fbase as usize, symbol })
-    }
-}
-
-/// Write what the signal says into the info file, then again with the modules and frames.
-fn record(f: &Fault) {
-    let Some(path) = PATH.get() else { return };
-    // SAFETY: NUL-terminated path; the descriptor is closed below.
-    let fd = unsafe { libc::open(path.as_ptr(), libc::O_WRONLY | libc::O_CREAT | libc::O_TRUNC | libc::O_CLOEXEC, 0o600) };
-    if fd < 0 {
-        return;
-    }
-    let mut b = Buf::new();
-    json(&mut b, f, &[], |_, _| None);
-    let bytes = b.as_bytes();
-    // SAFETY: the buffer is as long as we say.
-    unsafe { libc::write(fd, bytes.as_ptr().cast(), bytes.len()) };
-    let mut frames = [0usize; MAX_FRAMES];
-    // SAFETY: `walk` only reads inside the thread's own stack, 8-byte aligned.
-    let n = walk(f.pc, f.fp, f.stack, |at| Some(unsafe { (at as *const usize).read() }), &mut frames);
-    b.len = 0;
-    json(&mut b, f, frames.get(..n).unwrap_or_default(), resolve);
-    let bytes = b.as_bytes();
-    // SAFETY: as above.
-    unsafe {
-        if libc::pwrite(fd, bytes.as_ptr().cast(), bytes.len(), 0) == bytes.len() as isize {
-            libc::ftruncate(fd, bytes.len() as libc::off_t);
-        }
-        libc::close(fd);
-    }
-}
-
-#[cfg(test)]
-mod tests {
-    use std::os::unix::process::ExitStatusExt;
-    use std::path::{Path, PathBuf};
-
-    use super::*;
-
-    fn fault(signal: c_int, si_code: c_int, addr: usize) -> Fault {
-        let mut thread_name = [0u8; 64];
-        thread_name[..4].copy_from_slice(b"main");
-        Fault {
-            signal,
-            si_code,
-            addr,
-            pc: 0x1_0000_1234,
-            fp: 0,
-            access: Access::Read,
-            fault: true,
-            sender: 0,
-            pid: 77,
-            thread: 4242,
-            thread_name,
-            stack: (0x7000_0000, 0x7080_0000),
-        }
-    }
-
-    fn report(f: &Fault, frames: &[usize]) -> serde_json::Value {
-        let mut b = Buf::new();
-        json(&mut b, f, frames, |at, _| {
-            (at >= 0x1_0000_0000).then_some(Module {
-                path: b"/Applications/SolidCraft.app/Contents/MacOS/solidcraft",
-                base: 0x1_0000_0000,
-                symbol: Some((b"_ZN4main17h0123456789abcdefE", 0x1_0000_1200)),
-            })
-        });
-        serde_json::from_slice(b.as_bytes()).unwrap()
-    }
-
-    #[test]
-    fn a_segfault_says_the_signal_the_address_read_and_the_module() {
-        let v = report(&fault(SIGSEGV, 1, 0x10), &[0x1_0000_1234, 0x1_0000_2000, 0x5000]);
-        assert_eq!(v["signal"], "SIGSEGV");
-        assert_eq!(v["code"], "SIGSEGV");
-        assert_eq!(v["name"], "segmentation fault");
-        assert_eq!(v["detail"], "read of 0x0000000000000010 (SEGV_MAPERR)");
-        assert_eq!(v["address"], "0x0000000100001234");
-        assert_eq!(v["module"], "/Applications/SolidCraft.app/Contents/MacOS/solidcraft");
-        assert_eq!(v["offset"], "0x1234");
-        assert_eq!(v["thread"], 4242);
-        assert_eq!(v["thread_name"], "main");
-        assert_eq!(v["pid"], 77);
-        let frames: Vec<&str> = v["frames"].as_array().unwrap().iter().map(|f| f.as_str().unwrap()).collect();
-        assert_eq!(
-            frames,
-            ["solidcraft+0x1234 _ZN4main17h0123456789abcdefE+0x34", "solidcraft+0x2000 _ZN4main17h0123456789abcdefE+0xE00", "0x0000000000005000"]
-        );
-    }
-
-    #[test]
-    fn a_fault_below_the_stack_is_a_stack_overflow() {
-        let mut f = fault(SIGBUS, 2, 0x7000_0000 - 0x100);
-        f.access = Access::Write;
-        let v = report(&f, &[]);
-        assert_eq!(v["name"], "stack overflow");
-        assert_eq!(v["code"], "SIGBUS");
-        assert_eq!(v["detail"], "write to 0x000000006FFFFF00, below the thread's stack (BUS_ADRERR)");
-        // Far below it, or inside it, it is not.
-        assert_eq!(report(&fault(SIGBUS, 2, 0x10), &[])["name"], "bus error");
-        assert_eq!(report(&fault(SIGSEGV, 2, 0x7040_0000), &[])["name"], "segmentation fault");
-        // Nor without knowing the stack.
-        let mut f = fault(SIGSEGV, 1, 0x7000_0000 - 0x100);
-        f.stack = (0, 0);
-        assert_eq!(report(&f, &[])["name"], "segmentation fault");
-    }
-
-    #[test]
-    fn an_abort_or_a_signal_sent_by_another_process_has_no_address_detail() {
-        let mut f = fault(SIGABRT, 0, 0);
-        f.fault = false;
-        f.sender = 77;
-        let v = report(&f, &[]);
-        assert_eq!(v["signal"], "SIGABRT");
-        assert_eq!(v["name"], "abort");
-        assert!(v.get("detail").is_none(), "{v}");
-        let mut f = fault(SIGSEGV, 0x10001, 0);
-        f.fault = false;
-        f.sender = 501;
-        assert_eq!(report(&f, &[])["detail"], "sent by process 501");
-        // `kill` without a sender, or `raise`.
-        f.sender = 0;
-        assert_eq!(report(&f, &[])["detail"], "sent with kill or raise, not a fault");
-        // A trap names the instruction.
-        assert_eq!(report(&fault(SIGTRAP, 1, 0x1_0000_1234), &[])["detail"], "at 0x0000000100001234");
-    }
-
-    #[test]
-    fn only_a_fault_runs_again_when_the_handler_returns() {
-        // Measured on an M5 Pro, macOS 27: a read of address 16, then `kill -SEGV` while the
-        // thread waits in a system call. Both have si_code 2.
-        assert!(arm64_fault(SIGSEGV, 2, 0x10, 0x9200_0046, 0x10));
-        assert!(!arm64_fault(SIGSEGV, 2, 0, 0x5600_0080, 0));
-        assert!(!arm64_fault(SIGBUS, 1, 0, 0x5600_0080, 0));
-        // A data abort long past, while the signal names no address.
-        assert!(!arm64_fault(SIGSEGV, 2, 0, 0x9200_0046, 0x10));
-        // A trap instruction (BRK) or an undefined one; but not a system call.
-        assert!(arm64_fault(SIGTRAP, 1, 0x1000, 0xF200_0001, 0));
-        assert!(arm64_fault(SIGILL, 1, 0x1000, 0x0200_0000, 0));
-        assert!(!arm64_fault(SIGILL, 1, 0x1000, 0x5600_0080, 0));
-        // Sent: SI_USER, no code, or an abort.
-        assert!(!arm64_fault(SIGSEGV, 0x10001, 0x10, 0x9200_0046, 0x10));
-        assert!(!arm64_fault(SIGTRAP, 0, 0, 0xF200_0001, 0));
-        assert!(!arm64_fault(SIGABRT, 1, 0, 0x5600_0080, 0));
-        // x86_64: a page fault at its address, a general protection fault, ud2, int3.
-        assert!(x86_fault(SIGSEGV, 1, 0x10, 14, 0x10));
-        assert!(!x86_fault(SIGSEGV, 1, 0, 14, 0x10));
-        assert!(x86_fault(SIGSEGV, 1, 0, 13, 0));
-        assert!(x86_fault(SIGILL, 1, 0x1000, 6, 0));
-        assert!(x86_fault(SIGTRAP, 1, 0x1000, 3, 0));
-        assert!(!x86_fault(SIGILL, 1, 0x1000, 14, 0));
-    }
-
-    #[test]
-    fn names_with_quotes_control_characters_or_bad_utf8_stay_valid_json() {
-        let mut f = fault(SIGILL, 1, 0x1_0000_1234);
-        f.thread_name = [0; 64];
-        f.thread_name[..7].copy_from_slice(b"a\"b\\\n\xFFc");
-        let v = report(&f, &[]);
-        assert_eq!(v["thread_name"], "a\"b\\??c");
-    }
-
-    #[test]
-    fn a_report_with_long_names_still_closes_its_json() {
-        let long: &'static [u8] = Box::leak(vec![b'x'; 4000].into_boxed_slice());
-        let f = fault(SIGSEGV, 1, 0x10);
-        let mut b = Buf::new();
-        json(&mut b, &f, &[0x1_0000_1234; MAX_FRAMES], |_, _| Some(Module { path: long, base: 0x1_0000_0000, symbol: Some((long, 0x1_0000_0000)) }));
-        let v: serde_json::Value = serde_json::from_slice(b.as_bytes()).unwrap();
-        assert_eq!(v["module"].as_str().unwrap().len(), 300);
-        let frames = v["frames"].as_array().unwrap();
-        assert!(!frames.is_empty() && frames.len() <= MAX_FRAMES, "{}", frames.len());
-    }
-
-    #[test]
-    fn the_frame_walk_stays_on_the_stack_and_goes_up() {
-        let stack = (0x1000, 0x2000);
-        // Three frames: 0x1100 -> 0x1200 -> 0x1300 -> 0 (end).
-        let memory = |at: usize| match at {
-            0x1100 => Some(0x1200),
-            0x1108 => Some(0xA),
-            0x1200 => Some(0x1300),
-            0x1208 => Some(0xB),
-            0x1300 => Some(0),
-            0x1308 => Some(0xC),
-            _ => None,
-        };
-        let mut out = [0; MAX_FRAMES];
-        let n = walk(0x9, 0x1100, stack, memory, &mut out);
-        assert_eq!(&out[..n], &[0x9, 0xA, 0xB, 0xC]);
-        // A frame pointer off the stack, misaligned, or one that doesn't go up ends the walk.
-        assert_eq!(walk(0x9, 0x3000, stack, memory, &mut out), 1);
-        assert_eq!(walk(0x9, 0x1101, stack, memory, &mut out), 1);
-        let looping = |at: usize| if at.is_multiple_of(16) { Some(at) } else { Some(0xA) };
-        assert_eq!(walk(0x9, 0x1100, stack, looping, &mut out), 2);
-        // A chain that never ends stops at MAX_FRAMES.
-        let endless = |at: usize| if at.is_multiple_of(16) { Some(at + 16) } else { Some(0xA) };
-        assert_eq!(walk(0x9, 0x1000, stack, endless, &mut out), MAX_FRAMES);
-    }
-
-    /// The child half: install crash reporting and the handler, then crash the way
-    /// `SOLIDCRAFT_NATIVE_CRASH_FAULT` says.
-    #[test]
-    fn child() {
-        let Some(dir) = std::env::var_os("SOLIDCRAFT_NATIVE_CRASH_CHILD") else { return };
-        let build = solidcraft_engine::crash::Build { version: "9.9.9", commit: "abc1234", built: "2026-10-25" };
-        let fresh = solidcraft_engine::crash::install(PathBuf::from(dir), build);
-        println!("FRESH {}", serde_json::to_string(&fresh).unwrap_or_default());
-        let Some(fault) = std::env::var_os("SOLIDCRAFT_NATIVE_CRASH_FAULT") else {
-            solidcraft_engine::crash::end_session();
-            return;
-        };
-        super::install();
-        solidcraft_engine::crash::phase("device creation");
-        match fault.to_str() {
-            Some("abort") => std::process::abort(),
-            Some("overflow") => println!("unreachable {}", recurse(0)),
-            Some("raise") => {
-                // SAFETY: none needed; this is the crash under test.
-                unsafe { libc::raise(SIGSEGV) };
-                println!("survived");
-            }
-            _ => segfault(),
-        }
-    }
-
-    /// Runs out of stack.
-    #[inline(never)]
-    fn recurse(n: u64) -> u64 {
-        let a = std::hint::black_box([n; 64]);
-        if n == u64::MAX { 0 } else { recurse(n + 1).wrapping_add(a[0]) }
-    }
-
-    /// The crash under test: a read of address 16, as a null struct pointer's field would be.
-    #[inline(never)]
-    fn segfault() {
-        // SAFETY: none; this is the crash under test.
-        let v = unsafe { std::ptr::read_volatile(std::hint::black_box(16usize) as *const u64) };
-        println!("unreachable {v}");
-    }
-
-    fn run(dir: &Path, fault: Option<&str>) -> std::process::Output {
-        let mut c = std::process::Command::new(std::env::current_exe().unwrap());
-        c.args(["--exact", "native_crash_macos::tests::child", "--test-threads=1", "--nocapture"]).env("SOLIDCRAFT_NATIVE_CRASH_CHILD", dir);
-        if let Some(f) = fault {
-            c.env("SOLIDCRAFT_NATIVE_CRASH_FAULT", f);
-        }
-        c.output().unwrap()
-    }
-
-    /// Crash a child the way `fault` says; returns what the handler wrote and the next start's report.
-    fn crash(name: &str, fault: &str, signal: c_int) -> (serde_json::Value, serde_json::Value, String) {
-        let dir = std::env::temp_dir().join(format!("solidcraft-native-crash-{name}-{}", std::process::id()));
-        let _ = std::fs::remove_dir_all(&dir);
-        let out = run(&dir, Some(fault));
-        assert_eq!(out.status.signal(), Some(signal), "the child died of the signal itself: {out:?}");
-        let stderr = String::from_utf8_lossy(&out.stderr).into_owned();
-        let info =
-            std::fs::read_dir(dir.join("sessions")).unwrap().flatten().map(|e| e.path()).find(|p| p.to_string_lossy().ends_with(".native.json"));
-        let info = info.expect("the handler wrote what it caught");
-        let v: serde_json::Value = serde_json::from_slice(&std::fs::read(info).unwrap()).unwrap();
-        // The next start reports it.
-        let out = run(&dir, None);
-        assert!(out.status.success(), "{out:?}");
-        let reports = solidcraft_engine::crash::list(&dir);
-        assert_eq!(reports.len(), 1, "{reports:?}");
-        let r = solidcraft_engine::crash::read(&dir, &reports[0].id).unwrap();
-        let _ = std::fs::remove_dir_all(&dir);
-        (v, r, stderr)
-    }
-
-    #[test]
-    fn a_segfault_is_reported_with_its_signal_module_frames_and_step() {
-        let (v, r, _) = crash("segv", "segv", SIGSEGV);
-        assert_eq!(v["signal"], "SIGSEGV", "{v}");
-        // Address 16 is in __PAGEZERO, mapped without access: SEGV_ACCERR.
-        assert_eq!(v["detail"], "read of 0x0000000000000010 (SEGV_ACCERR)", "{v}");
-        assert!(v["module"].as_str().unwrap().contains("solidcraft"), "the fault is in the test binary: {v}");
-        let frames = v["frames"].as_array().unwrap();
-        assert!(frames.len() >= 3, "{v}");
-        assert!(frames.iter().any(|f| f.as_str().unwrap().contains("child")), "the walk reaches the test that crashed: {v}");
-        let message = r["message"].as_str().unwrap();
-        assert!(message.contains("segmentation fault (SIGSEGV) in solidcraft"), "{r}");
-        assert!(message.contains("during startup (device creation"), "{r}");
-        assert_eq!(r["kind"], "unclean_exit");
-        assert_eq!(r["native"]["signal"], "SIGSEGV");
-        assert!(r["backtrace"].as_array().unwrap().iter().any(|f| f.as_str().unwrap().contains("segfault")), "{r}");
-    }
-
-    #[test]
-    fn an_abort_is_reported_as_sigabrt_with_the_code_that_called_it() {
-        let (v, r, _) = crash("abrt", "abort", SIGABRT);
-        assert_eq!(v["signal"], "SIGABRT", "{v}");
-        assert!(v.get("detail").is_none(), "{v}");
-        let frames = v["frames"].as_array().unwrap();
-        assert!(frames.iter().any(|f| f.as_str().unwrap().contains("abort")), "{v}");
-        assert!(r["message"].as_str().unwrap().contains("abort (SIGABRT)"), "{r}");
-    }
-
-    #[test]
-    fn a_stack_overflow_is_recorded_and_the_standard_library_still_says_so() {
-        // The fault on the guard page is recorded on the alternate stack; the standard library's
-        // handler, called after ours, prints its message and aborts.
-        let (v, r, stderr) = crash("overflow", "overflow", SIGABRT);
-        assert!(matches!(v["signal"].as_str(), Some("SIGSEGV" | "SIGBUS")), "{v}");
-        assert_eq!(v["name"], "stack overflow", "{v}");
-        assert!(v["detail"].as_str().unwrap().contains("below the thread's stack"), "{v}");
-        assert!(stderr.contains("has overflowed its stack"), "{stderr}");
-        assert!(r["message"].as_str().unwrap().contains("stack overflow ("), "{r}");
-    }
-
-    #[test]
-    fn a_segfault_signal_that_was_only_sent_still_ends_the_app() {
-        // The standard library's handler, which comes before ours, returns expecting the fault
-        // to happen again; a sent signal never does, so it goes to the default action instead.
-        let (v, r, _) = crash("raise", "raise", SIGSEGV);
-        assert_eq!(v["detail"], "sent with kill or raise, not a fault", "{v}");
-        assert!(r["message"].as_str().unwrap().contains("(SIGSEGV)"), "{r}");
-    }
-}

apps/solidcraft/src/native_frame.rs

@@ -15,14 +15,10 @@
 //! window rescales once at the crossing and stays under the pointer, instead of the OS's move
 //! loop and winit disagreeing about a frame the window doesn't have.
 //!
-//! Replacing a window procedure and setting a window class's icon have no safe API, hence the
-//! `unsafe_code` allowance on this module (the app crate denies it; see `native_crash.rs` and
-//! `open_documents.rs` for the others).
+//! Replacing a window procedure has no safe API, hence the `unsafe_code` allowance on this
+//! module (the app crate denies it; see `native_crash.rs` and `open_documents.rs` for the others).
 //! The procedure is installed once, on the thread that owns the window, for the main window only,
 //! and calls the previous one (winit's) for everything it doesn't answer.
-//!
-//! [`set_class_icon`] gives the window's class the exe's icon, so the taskbar button shows the
-//! mark even when the window is too busy to answer the taskbar's request for its icon.
 #![allow(unsafe_code)]
 
 use std::sync::atomic::{AtomicIsize, Ordering};
@@ -31,18 +27,12 @@ use raw_window_handle::{HasWindowHandle, RawWindowHandle};
 use solidcraft_ui_egui::titlebar;
 use windows_sys::Win32::Foundation::{HWND, LPARAM, LRESULT, RECT, SIZE, WPARAM};
 use windows_sys::Win32::Graphics::Gdi::{GetMonitorInfoW, MONITOR_DEFAULTTONEAREST, MONITORINFO, MonitorFromWindow};
-use windows_sys::Win32::System::LibraryLoader::GetModuleHandleW;
 use windows_sys::Win32::UI::HiDpi::{GetDpiForWindow, GetSystemMetricsForDpi};
 use windows_sys::Win32::UI::WindowsAndMessaging::{
-    CallWindowProcW, GCLP_HICON, GCLP_HICONSM, GWL_STYLE, GWLP_WNDPROC, GetClientRect, GetWindowLongPtrW, GetWindowRect, HTBOTTOM, HTBOTTOMLEFT,
-    HTBOTTOMRIGHT, HTLEFT, HTRIGHT, HTTOP, HTTOPLEFT, HTTOPRIGHT, IMAGE_ICON, IsIconic, IsZoomed, LR_DEFAULTCOLOR, LoadImageW, SM_CXICON,
-    SM_CXPADDEDBORDER, SM_CXSIZEFRAME, SM_CXSMICON, SetWindowLongPtrW, WM_GETDPISCALEDSIZE, WM_NCDESTROY, WM_NCHITTEST, WNDPROC, WS_THICKFRAME,
+    CallWindowProcW, GWL_STYLE, GWLP_WNDPROC, GetClientRect, GetWindowLongPtrW, GetWindowRect, HTBOTTOM, HTBOTTOMLEFT, HTBOTTOMRIGHT, HTLEFT,
+    HTRIGHT, HTTOP, HTTOPLEFT, HTTOPRIGHT, IsIconic, IsZoomed, SM_CXPADDEDBORDER, SM_CXSIZEFRAME, SetWindowLongPtrW, WM_GETDPISCALEDSIZE,
+    WM_NCDESTROY, WM_NCHITTEST, WNDPROC, WS_THICKFRAME,
 };
-// windows-sys has SetClassLongPtrW only on 64-bit targets; on 32-bit Windows it is SetClassLongW.
-#[cfg(target_pointer_width = "64")]
-use windows_sys::Win32::UI::WindowsAndMessaging::SetClassLongPtrW;
-#[cfg(target_pointer_width = "32")]
-use windows_sys::Win32::UI::WindowsAndMessaging::SetClassLongW as SetClassLongPtrW;
 
 /// The work area (the monitor without the taskbar) of the monitor nearest the window, in physical
 /// pixels: left, top, width, height.
@@ -64,48 +54,6 @@ pub fn work_area(window: &impl HasWindowHandle) -> Option<(i32, i32, i32, i32)>
     Some((rc.left, rc.top, rc.right - rc.left, rc.bottom - rc.top))
 }
 
-/// The exe's icon resource (`build.rs` embeds it as `1 ICON`).
-const ICON_RESOURCE: usize = 1;
-
-/// Give the main window's class the exe's icon, big and small. Call it before the window is
-/// shown (eframe's app creator).
-///
-/// The taskbar asks a window for its icon when the window appears. eframe sets the window's
-/// icon before that, while the window is still hidden, and then shows the window at the end of
-/// its first frame; if that frame is slow, or startup kept the thread busy long enough for
-/// Windows to mark the window as not responding, the request isn't answered in time. The taskbar then
-/// takes the window class's icon and doesn't ask again. winit registers its class without one,
-/// so the button showed Windows' generic icon for as long as the window was open.
-/// `false` if it isn't a Win32 window or the exe's icon doesn't load; SetClassLongPtrW's own
-/// failure can't be told from a class that had no icon (both return 0), so it isn't reported.
-pub fn set_class_icon(window: &impl HasWindowHandle) -> bool {
-    let Ok(handle) = window.window_handle() else { return false };
-    let RawWindowHandle::Win32(w) = handle.as_raw() else { return false };
-    let hwnd = w.hwnd.get() as HWND;
-    // SAFETY: a plain query on the live main window.
-    let dpi = unsafe { GetDpiForWindow(hwnd) };
-    let (Some(big), Some(small)) = (exe_icon(SM_CXICON, dpi), exe_icon(SM_CXSMICON, dpi)) else { return false };
-    // SAFETY: `hwnd` is the live main window and both icons are valid handles. The class keeps
-    // them for the rest of the process, so they are never destroyed. `as _`: on 32-bit Windows
-    // this is SetClassLongW (see the imports), which takes an i32.
-    unsafe {
-        SetClassLongPtrW(hwnd, GCLP_HICON, big as _);
-        SetClassLongPtrW(hwnd, GCLP_HICONSM, small as _);
-    }
-    true
-}
-
-/// The exe's icon at the size of system metric `metric` (`SM_CXICON`, `SM_CXSMICON`) at `dpi`.
-fn exe_icon(metric: i32, dpi: u32) -> Option<windows_sys::Win32::Foundation::HANDLE> {
-    // SAFETY: GetModuleHandleW(null) is this exe, loaded for the life of the process; the name
-    // is an integer resource id (MAKEINTRESOURCE), which LoadImageW accepts in place of a string.
-    let icon = unsafe {
-        let size = GetSystemMetricsForDpi(metric, dpi);
-        LoadImageW(GetModuleHandleW(std::ptr::null()), std::ptr::without_provenance(ICON_RESOURCE), IMAGE_ICON, size, size, LR_DEFAULTCOLOR)
-    };
-    (!icon.is_null()).then_some(icon)
-}
-
 /// The window procedure ours replaced (winit's), as an address; 0 before [`install`].
 static PREVIOUS: AtomicIsize = AtomicIsize::new(0);
 

apps/solidcraft/src/native_menu.rs

@@ -1,221 +1,135 @@
-//! SolidCraft's macOS menu bar: its entries as kit menu items
-//! (`solidcraft_ui_egui::window_chrome::native_menu`), each with a command id or a `ui.*` id, run
-//! through the same actions as the application bar's File menu (`toolbar::FileAction`).
-//!
-//! Entries that are control actions use their ids and do the same there: `app.quit`,
-//! `ui.prefs {open}` (Settings and Keyboard Shortcuts), `ui.agent_chat {toggle}`, `ui.help {item}`. Undo and Redo are the commands
-//! `edit.undo` and `edit.redo`. The other entries' ids are defined here: `ui.file.new`,
-//! `ui.file.open`, `ui.file.open_recent {path}`, `ui.file.clear_recent`, `ui.file.save`,
-//! `ui.file.save_as`, `ui.file.save_json`, `ui.file.export {format}`,
-//! `ui.file.export_mesh {format}`. Menus are `menu.file`, `menu.file.recent`, `menu.edit`,
-//! `menu.window` and `menu.help`.
-//!
-//! The menu bar itself is macOS's; the entries and their ids build everywhere, so their tests run
-//! on every system.
+//! macOS system menus, owned and updated on eframe's main thread.
 
-use serde_json::{Value, json};
-use solidcraft_ui_egui::{
-    SolveApp,
-    toolbar::FileAction,
-    ui_kit::Item,
-    window_chrome::native_menu::{self, MenuBar},
+use std::sync::mpsc::{Receiver, sync_channel};
+
+use muda::{
+    AboutMetadata, Menu, MenuEvent, MenuItem, PredefinedMenuItem, Submenu,
+    accelerator::{Accelerator, Code, Modifiers},
 };
+use solidcraft_ui_egui::{SolveApp, toolbar::FileAction};
 
-/// The Open Recent submenu, refilled when the recent designs change.
-const RECENT: &str = "menu.file.recent";
-const OPEN_RECENT: &str = "ui.file.open_recent";
-/// Recent designs listed.
-#[cfg(target_os = "macos")]
-const RECENT_COUNT: usize = 32;
-
-/// File > Insert entries.
-const INSERTS: [(&str, FileAction); 3] = [
-    ("Insert STEP\u{2026}", FileAction::Command("file.insert_step")),
-    ("Insert Mesh\u{2026}", FileAction::Command("file.insert_mesh")),
-    ("Insert Design", FileAction::Command("component.insert_design")),
-];
-
-/// File > Export entries.
-const EXPORTS: [(&str, FileAction); 7] = [
-    ("Export STL\u{2026}", FileAction::ExportMesh("stl")),
-    ("Export 3MF\u{2026}", FileAction::ExportMesh("3mf")),
-    ("Export STEP\u{2026}", FileAction::Export("step")),
-    ("Export Current View as DXF\u{2026}", FileAction::Command("file.export_view_dxf")),
-    ("Export OBJ\u{2026}", FileAction::Export("obj")),
-    ("Export URDF\u{2026}", FileAction::Export("urdf")),
-    ("Export Design as JSON\u{2026}", FileAction::Export("json")),
-];
-
-const DESIGN_PROPERTIES: FileAction = FileAction::Command("document.metadata");
-
-/// The other actions with a fixed id (all but Open Recent), to map an id back to its action.
-const FIXED: &[FileAction] = &[
-    FileAction::Settings,
-    FileAction::Shortcuts,
-    FileAction::Quit,
-    FileAction::New,
-    FileAction::Open,
-    FileAction::ClearRecent,
-    FileAction::Save,
-    FileAction::SaveAs,
-    FileAction::SaveJson,
-    DESIGN_PROPERTIES,
-    FileAction::Undo,
-    FileAction::Redo,
-    FileAction::AgentChat,
-];
-
-/// The Help menu's entries: the control channel's `ui.help {item}`.
-const HELP_ID: &str = "ui.help";
-/// The Help menu's items (`help::run`), top to bottom.
-const HELP: [&str; 7] = ["docs", "updates", "shortcuts", "messages", "report", "crashes", "install_cli"];
-
-fn help_label<'a>(app: &'a SolveApp, item: &str) -> &'a str {
-    match item {
-        "docs" => app.tr_label("Documentation"),
-        "updates" => app.tr("update.check_for_updates"),
-        "shortcuts" => app.tr_label("Keyboard Shortcuts"),
-        "messages" => app.tr_label("Messages\u{2026}"),
-        "report" => app.tr_label("Report an Issue\u{2026}"),
-        "crashes" => app.tr_label("Crash Reports\u{2026}"),
-        _ => app.tr_label("Install solidcraft-cli command"),
-    }
-}
-
-/// What a menu entry runs.
-#[derive(Debug, PartialEq)]
-enum Entry {
-    File(FileAction),
-    Help(&'static str),
-}
-
-/// The entry's id and parameters for `action`.
-fn id_of(action: &FileAction) -> (String, Option<Value>) {
-    let fixed = |id: &str| (id.to_string(), None);
-    match action {
-        FileAction::Settings => ("ui.prefs".into(), Some(json!({ "open": "General" }))),
-        FileAction::Shortcuts => ("ui.prefs".into(), Some(json!({ "open": "Shortcuts" }))),
-        FileAction::Quit => fixed("app.quit"),
-        FileAction::New => fixed("ui.file.new"),
-        FileAction::Open => fixed("ui.file.open"),
-        FileAction::OpenRecent(path) => (OPEN_RECENT.into(), Some(json!({ "path": path }))),
-        FileAction::ClearRecent => fixed("ui.file.clear_recent"),
-        FileAction::Save => fixed("ui.file.save"),
-        FileAction::SaveAs => fixed("ui.file.save_as"),
-        FileAction::SaveJson => fixed("ui.file.save_json"),
-        FileAction::Export(format) => ("ui.file.export".into(), Some(json!({ "format": format }))),
-        FileAction::ExportMesh(format) => ("ui.file.export_mesh".into(), Some(json!({ "format": format }))),
-        FileAction::Command(command) => fixed(command),
-        FileAction::Undo => fixed("edit.undo"),
-        FileAction::Redo => fixed("edit.redo"),
-        FileAction::AgentChat => ("ui.agent_chat".into(), Some(json!({ "toggle": true }))),
-    }
-}
-
-/// The entry with `id` and `params`, `None` for one this menu doesn't have.
-fn entry_of(id: &str, params: Option<&Value>) -> Option<Entry> {
-    if id == OPEN_RECENT {
-        return params.and_then(|p| p.get("path")).and_then(Value::as_str).map(|path| Entry::File(FileAction::OpenRecent(path.to_string())));
-    }
-    if id == HELP_ID {
-        let item = params.and_then(|p| p.get("item")).and_then(Value::as_str);
-        return HELP.into_iter().find(|h| Some(*h) == item).map(Entry::Help);
-    }
-    let wanted = (id.to_string(), params.cloned());
-    FIXED.iter().cloned().chain(INSERTS.map(|(_, a)| a)).chain(EXPORTS.map(|(_, a)| a)).find(|a| id_of(a) == wanted).map(Entry::File)
-}
-
-/// The entries with a key, as menu accelerators.
-const SHORTCUTS: [(FileAction, &str); 8] = [
-    (FileAction::Settings, "Cmd+,"),
-    (FileAction::Quit, "Cmd+Q"),
-    (FileAction::New, "Cmd+N"),
-    (FileAction::Open, "Cmd+O"),
-    (FileAction::Save, "Cmd+S"),
-    (FileAction::SaveAs, "Cmd+Shift+S"),
-    (FileAction::Undo, "Cmd+Z"),
-    (FileAction::Redo, "Cmd+Shift+Z"),
-];
-
-fn item(label: &str, action: &FileAction) -> Item {
-    let (id, params) = id_of(action);
-    let shortcut = SHORTCUTS.iter().find(|(a, _)| a == action).map_or("", |(_, k)| *k);
-    let mut item = Item::action(&id, label, "").key(shortcut);
-    item.params = params;
-    item
-}
-
-fn submenu(id: &str, label: &str, children: Vec<Item>) -> Item {
-    let mut menu = Item::action(id, label, "");
-    menu.children = children;
-    menu
-}
-
-fn recent_items(app: &SolveApp, paths: &[String]) -> Vec<Item> {
-    let mut items: Vec<Item> = paths.iter().map(|path| item(path, &FileAction::OpenRecent(path.clone()))).collect();
-    items.push(Item::sep());
-    items.push(item(app.tr("ui.clear_recent"), &FileAction::ClearRecent));
-    items
-}
-
-fn menu_bar(app: &SolveApp, recent: &[String]) -> MenuBar {
-    let more = |key: &str| format!("{}\u{2026}", app.tr(key));
-    let mut file = vec![
-        item(app.tr("ui.new_design"), &FileAction::New),
-        item(&more("ui.open"), &FileAction::Open),
-        submenu(RECENT, app.tr("ui.open_recent"), recent_items(app, recent)),
-        Item::sep(),
-    ];
-    file.extend(INSERTS.iter().map(|(label, action)| item(app.tr_label(label), action)));
-    file.extend([
-        Item::sep(),
-        item(app.tr("ui.save"), &FileAction::Save),
-        item(&more("ui.save_as"), &FileAction::SaveAs),
-        item(app.tr_label("Save As JSON\u{2026}"), &FileAction::SaveJson),
-        Item::sep(),
-    ]);
-    file.extend(EXPORTS.iter().map(|(label, action)| item(app.tr_label(label), action)));
-    file.extend([Item::sep(), item(app.tr_label("Design Properties"), &DESIGN_PROPERTIES)]);
-    let edit = vec![item(app.tr("ui.undo"), &FileAction::Undo), item(app.tr("ui.redo"), &FileAction::Redo)];
-    let window = vec![item(app.tr_label("Agent Chat"), &FileAction::AgentChat)];
-    let help = HELP.iter().map(|h| Item::action(HELP_ID, help_label(app, h), "").with(json!({ "item": h }))).collect();
-    MenuBar {
-        title: "SolidCraft".into(),
-        version: env!("CARGO_PKG_VERSION").into(),
-        app: vec![item(&more("ui.preferences"), &FileAction::Settings), item(&more("ui.keyboard_shortcuts"), &FileAction::Shortcuts)],
-        quit: item(&format!("{} SolidCraft", app.tr("ui.quit")), &FileAction::Quit),
-        menus: vec![
-            submenu("menu.file", app.tr("ui.file"), file),
-            submenu("menu.edit", app.tr_label("Edit"), edit),
-            submenu(native_menu::WINDOW, "Window", window),
-            submenu("menu.help", app.tr("ui.help"), help),
-        ],
-    }
-}
-
-/// The menu bar, owned and updated on eframe's main thread.
-#[cfg(target_os = "macos")]
 pub struct NativeMenu {
-    menu: native_menu::NativeMenu,
+    menu: Menu,
+    actions: Vec<(MenuItem, FileAction)>,
+    help_actions: Vec<(MenuItem, &'static str)>,
+    events: Receiver<MenuEvent>,
+    recent: Submenu,
     recent_paths: Vec<String>,
 }
 
-#[cfg(target_os = "macos")]
 impl NativeMenu {
-    pub fn new(app: &SolveApp, ctx: &egui::Context) -> Result<Self, String> {
-        let recent_paths: Vec<String> = app.home.recent.iter().take(RECENT_COUNT).cloned().collect();
-        let menu = native_menu::NativeMenu::new(&menu_bar(app, &recent_paths), ctx)?;
-        let native = Self { menu, recent_paths };
-        native.update(app, ctx);
+    pub fn new(app: &SolveApp, ctx: &egui::Context) -> muda::Result<Self> {
+        let menu = Menu::new();
+        let application = Submenu::new("SolidCraft", true);
+        let file = Submenu::new(app.tr("ui.file"), true);
+        let edit = Submenu::new(app.tr_label("Edit"), true);
+        let recent = Submenu::new(app.tr("ui.open_recent"), true);
+        let window = Submenu::new("Window", true);
+        let help = Submenu::new(app.tr("ui.help"), true);
+        let mut help_actions = Vec::new();
+        let mut actions = Vec::new();
+        let mut add = |parent: &Submenu, label: &str, action: FileAction, shortcut: Option<Accelerator>| -> muda::Result<()> {
+            let item = MenuItem::new(label, Self::action_enabled(&action, app, ctx), shortcut);
+            parent.append(&item)?;
+            actions.push((item, action));
+            Ok(())
+        };
+        application.append(&PredefinedMenuItem::about(
+            Some("About SolidCraft"),
+            Some(AboutMetadata { name: Some("SolidCraft".into()), version: Some(env!("CARGO_PKG_VERSION").into()), ..Default::default() }),
+        ))?;
+        application.append(&PredefinedMenuItem::separator())?;
+        add(
+            &application,
+            &format!("{}\u{2026}", app.tr("ui.preferences")),
+            FileAction::Settings,
+            Some(Accelerator::new(Modifiers::META, Code::Comma)),
+        )?;
+        add(&application, &format!("{}\u{2026}", app.tr("ui.keyboard_shortcuts")), FileAction::Shortcuts, None)?;
+        application.append(&PredefinedMenuItem::separator())?;
+        application.append(&PredefinedMenuItem::services(None))?;
+        application.append(&PredefinedMenuItem::separator())?;
+        application.append_items(&[
+            &PredefinedMenuItem::hide(Some("Hide SolidCraft")),
+            &PredefinedMenuItem::hide_others(None),
+            &PredefinedMenuItem::show_all(None),
+            &PredefinedMenuItem::separator(),
+        ])?;
+        add(&application, &format!("{} SolidCraft", app.tr("ui.quit")), FileAction::Quit, Some(Accelerator::new(Modifiers::META, Code::KeyQ)))?;
+        add(&file, app.tr("ui.new_design"), FileAction::New, Some(Accelerator::new(Modifiers::META, Code::KeyN)))?;
+        add(&file, &format!("{}\u{2026}", app.tr("ui.open")), FileAction::Open, Some(Accelerator::new(Modifiers::META, Code::KeyO)))?;
+        file.append(&recent)?;
+        file.append(&PredefinedMenuItem::separator())?;
+        for (label, command) in
+            [("Insert STEP\u{2026}", "file.insert_step"), ("Insert Mesh\u{2026}", "file.insert_mesh"), ("Insert Design", "component.insert_design")]
+        {
+            add(&file, app.tr_label(label), FileAction::Command(command), None)?;
+        }
+        file.append(&PredefinedMenuItem::separator())?;
+        add(&file, app.tr("ui.save"), FileAction::Save, Some(Accelerator::new(Modifiers::META, Code::KeyS)))?;
+        add(
+            &file,
+            &format!("{}\u{2026}", app.tr("ui.save_as")),
+            FileAction::SaveAs,
+            Some(Accelerator::new(Modifiers::META | Modifiers::SHIFT, Code::KeyS)),
+        )?;
+        add(&file, app.tr_label("Save As JSON\u{2026}"), FileAction::SaveJson, None)?;
+        file.append(&PredefinedMenuItem::separator())?;
+        for (label, action) in [
+            ("Export STL\u{2026}", FileAction::ExportMesh("stl")),
+            ("Export 3MF\u{2026}", FileAction::ExportMesh("3mf")),
+            ("Export STEP\u{2026}", FileAction::Export("step")),
+            ("Export Current View as DXF\u{2026}", FileAction::Command("file.export_view_dxf")),
+            ("Export OBJ\u{2026}", FileAction::Export("obj")),
+            ("Export URDF\u{2026}", FileAction::Export("urdf")),
+            ("Export Design as JSON\u{2026}", FileAction::Export("json")),
+        ] {
+            add(&file, app.tr_label(label), action, None)?;
+        }
+        file.append(&PredefinedMenuItem::separator())?;
+        add(&file, app.tr_label("Design Properties"), FileAction::Command("document.metadata"), None)?;
+        add(&edit, app.tr("ui.undo"), FileAction::Undo, Some(Accelerator::new(Modifiers::META, Code::KeyZ)))?;
+        add(&edit, app.tr("ui.redo"), FileAction::Redo, Some(Accelerator::new(Modifiers::META | Modifiers::SHIFT, Code::KeyZ)))?;
+        add(&window, app.tr_label("Agent Chat"), FileAction::AgentChat, None)?;
+        window.append(&PredefinedMenuItem::separator())?;
+        window.append_items(&[
+            &PredefinedMenuItem::minimize(None),
+            &PredefinedMenuItem::maximize(None),
+            &PredefinedMenuItem::fullscreen(None),
+            &PredefinedMenuItem::separator(),
+            &PredefinedMenuItem::bring_all_to_front(None),
+        ])?;
+        for (action, label) in [
+            ("docs", "Documentation"),
+            ("shortcuts", "Keyboard Shortcuts"),
+            ("messages", "Messages\u{2026}"),
+            ("report", "Report an Issue\u{2026}"),
+            ("crashes", "Crash Reports\u{2026}"),
+        ] {
+            let item = MenuItem::new(app.tr_label(label), true, None);
+            help.append(&item)?;
+            help_actions.push((item, action));
+        }
+        menu.append_items(&[&application, &file, &edit, &window, &help])?;
+        let (sender, events) = sync_channel(64);
+        let ctx = ctx.clone();
+        MenuEvent::set_event_handler(Some(move |event| {
+            let _ = sender.try_send(event);
+            ctx.request_repaint();
+        }));
+        menu.init_for_nsapp();
+        let mut native = Self { menu, actions, help_actions, events, recent, recent_paths: Vec::new() };
+        native.update_recent(app)?;
         Ok(native)
     }
 
     pub fn raw_input_hook(&mut self, app: &mut SolveApp, ctx: &egui::Context, raw: &mut egui::RawInput) {
-        for (id, params) in self.menu.events() {
-            match entry_of(&id, params.as_ref()) {
-                Some(Entry::Help(item)) => solidcraft_ui_egui::help::run(app, ctx, item),
-                // A focused text field takes its own Undo and Redo.
-                Some(Entry::File(action @ (FileAction::Undo | FileAction::Redo))) if ctx.egui_wants_keyboard_input() => {
+        for event in self.events.try_iter().take(64) {
+            if let Some((_, action)) = self.help_actions.iter().find(|(item, _)| item.id() == &event.id) {
+                solidcraft_ui_egui::help::run(app, ctx, action);
+            }
+            if let Some((_, action)) = self.actions.iter().find(|(item, _)| item.id() == &event.id) {
+                if matches!(action, FileAction::Undo | FileAction::Redo) && ctx.egui_wants_keyboard_input() {
                     raw.events.push(egui::Event::Key {
                         key: egui::Key::Z,
                         physical_key: None,
@@ -223,159 +137,53 @@ impl NativeMenu {
                         repeat: false,
                         modifiers: egui::Modifiers { command: true, mac_cmd: true, shift: matches!(action, FileAction::Redo), ..Default::default() },
                     });
+                } else {
+                    action.run(app);
                 }
-                Some(Entry::File(action)) => action.run(app),
-                None => log::warn!("native menu: no entry `{id}`"),
             }
         }
     }
 
-    fn update(&self, app: &SolveApp, ctx: &egui::Context) {
-        let focus = ctx.egui_wants_keyboard_input();
-        self.menu.update(|id, params| match entry_of(id, params) {
-            Some(Entry::File(action)) => action.menu_enabled(app, focus),
-            Some(Entry::Help(item)) => solidcraft_ui_egui::help::available(app, item),
-            None => false,
-        });
+    fn action_enabled(action: &FileAction, app: &SolveApp, ctx: &egui::Context) -> bool {
+        action.enabled(app)
+            || (matches!(action, FileAction::Undo | FileAction::Redo) && ctx.egui_wants_keyboard_input() && FileAction::Settings.enabled(app))
     }
 
     pub fn tick(&mut self, app: &mut SolveApp, ctx: &egui::Context) {
-        if !self.recent_paths.iter().eq(app.home.recent.iter().take(RECENT_COUNT)) {
-            self.recent_paths = app.home.recent.iter().take(RECENT_COUNT).cloned().collect();
-            if let Err(error) = self.menu.replace(RECENT, &recent_items(app, &self.recent_paths)) {
-                app.set_status(format!("Recent designs menu: {error}"), true);
+        for (item, action) in &self.actions {
+            let enabled = Self::action_enabled(action, app, ctx);
+            if item.is_enabled() != enabled {
+                item.set_enabled(enabled);
             }
         }
-        self.update(app, ctx);
+        if !self.recent_paths.iter().eq(app.home.recent.iter().take(32))
+            && let Err(error) = self.update_recent(app)
+        {
+            app.set_status(format!("Recent designs menu: {error}"), true);
+        }
+    }
+
+    fn update_recent(&mut self, app: &SolveApp) -> muda::Result<()> {
+        while self.recent.remove_at(0).is_some() {}
+        self.actions.retain(|(_, action)| !matches!(action, FileAction::OpenRecent(_) | FileAction::ClearRecent));
+        self.recent_paths = app.home.recent.iter().take(32).cloned().collect();
+        for path in &self.recent_paths {
+            let action = FileAction::OpenRecent(path.clone());
+            let item = MenuItem::new(path, action.enabled(app), None);
+            self.recent.append(&item)?;
+            self.actions.push((item, action));
+        }
+        self.recent.append(&PredefinedMenuItem::separator())?;
+        let clear = MenuItem::new(app.tr("ui.clear_recent"), !self.recent_paths.is_empty(), None);
+        self.recent.append(&clear)?;
+        self.actions.push((clear, FileAction::ClearRecent));
+        Ok(())
     }
 }
 
-#[cfg(test)]
-mod tests {
-    use super::*;
-
-    /// Every action the menu offers, Open Recent with a path.
-    fn actions() -> Vec<FileAction> {
-        let mut all: Vec<FileAction> = FIXED.iter().cloned().chain(INSERTS.map(|(_, a)| a)).chain(EXPORTS.map(|(_, a)| a)).collect();
-        all.push(FileAction::OpenRecent("/work/a.solidcraft".into()));
-        all
-    }
-
-    #[test]
-    fn every_action_and_help_item_round_trips_through_its_id() {
-        let mut seen = vec![];
-        for action in actions() {
-            let (id, params) = id_of(&action);
-            assert!(!seen.contains(&(id.clone(), params.clone())), "two actions share `{id}` {params:?}");
-            assert_eq!(entry_of(&id, params.as_ref()), Some(Entry::File(action)), "`{id}` {params:?}");
-            seen.push((id, params));
-        }
-        for h in HELP {
-            assert_eq!(entry_of(HELP_ID, Some(&json!({ "item": h }))), Some(Entry::Help(h)));
-        }
-        // The control channel's ids where it has one.
-        assert_eq!(id_of(&FileAction::Quit), ("app.quit".to_string(), None));
-        assert_eq!(id_of(&FileAction::Settings), ("ui.prefs".to_string(), Some(json!({"open": "General"}))));
-        assert_eq!(id_of(&FileAction::Shortcuts), ("ui.prefs".to_string(), Some(json!({"open": "Shortcuts"}))));
-        assert_eq!(id_of(&FileAction::AgentChat), ("ui.agent_chat".to_string(), Some(json!({"toggle": true}))));
-        assert_eq!(entry_of("ui.file.export", Some(&json!({"format": "step"}))), Some(Entry::File(FileAction::Export("step"))));
-        for (id, params) in [
-            ("ui.file.export", None),
-            ("ui.file.export", Some(json!({"format": "dwg"}))),
-            (HELP_ID, Some(json!({"item": "nothing"}))),
-            (HELP_ID, None),
-            ("ui.prefs", None),
-            ("solid.nothing", None),
-            (OPEN_RECENT, None),
-            (RECENT, None),
-            (native_menu::WINDOW, None),
-        ] {
-            assert_eq!(entry_of(id, params.as_ref()), None, "{id} {params:?}");
-        }
-    }
-
-    #[test]
-    fn every_shortcut_is_one_actions_and_the_menu_shows_it() {
-        for (i, (action, key)) in SHORTCUTS.iter().enumerate() {
-            assert!(SHORTCUTS.iter().skip(i + 1).all(|(a, k)| a != action && k != key), "{action:?} {key}");
-            assert_eq!(item("label", action).shortcut, *key);
-        }
-        assert_eq!(item("label", &FileAction::SaveJson).shortcut, "");
-    }
-
-    #[cfg(target_os = "macos")]
-    #[test]
-    fn menu_shortcuts_parse_as_the_keys_they_were() {
-        use muda::accelerator::{Accelerator, Code, Modifiers};
-        let (cmd, shift) = (Modifiers::META, Modifiers::META | Modifiers::SHIFT);
-        let want = [
-            Accelerator::new(cmd, Code::Comma),
-            Accelerator::new(cmd, Code::KeyQ),
-            Accelerator::new(cmd, Code::KeyN),
-            Accelerator::new(cmd, Code::KeyO),
-            Accelerator::new(cmd, Code::KeyS),
-            Accelerator::new(shift, Code::KeyS),
-            Accelerator::new(cmd, Code::KeyZ),
-            Accelerator::new(shift, Code::KeyZ),
-        ];
-        for ((action, key), want) in SHORTCUTS.iter().zip(want) {
-            assert_eq!(key.parse::<Accelerator>().ok(), Some(want), "{action:?}");
-        }
-    }
-
-    #[test]
-    fn every_entry_of_the_menu_bar_runs_its_action() {
-        fn leaves(items: &[Item], out: &mut Vec<Item>) {
-            for item in items {
-                if item.children.is_empty() {
-                    out.push(item.clone());
-                } else {
-                    leaves(&item.children, out);
-                }
-            }
-        }
-        let app = SolveApp::new(solidcraft_engine::Session::default(), Default::default());
-        let bar = menu_bar(&app, &["/work/a.solidcraft".to_string()]);
-        let mut entries = vec![];
-        leaves(&bar.app, &mut entries);
-        leaves(std::slice::from_ref(&bar.quit), &mut entries);
-        leaves(&bar.menus, &mut entries);
-        entries.retain(|i| i.id != "-");
-        // App menu 2 + Quit; File: New, Open, 1 recent, Clear, 3 inserts, Save, Save As, JSON,
-        // 7 exports, Properties; Edit 2; Window 1; Help 7.
-        assert_eq!(entries.len(), 3 + 4 + 3 + 3 + 7 + 1 + 2 + 1 + 7, "{:?}", entries.iter().map(|i| &i.id).collect::<Vec<_>>());
-        for item in &entries {
-            assert!(entry_of(&item.id, item.params.as_ref()).is_some(), "`{}` {:?} runs nothing", item.id, item.params);
-        }
-        assert!(bar.menus.iter().all(|m| m.id.starts_with("menu.")), "menu ids are never actions");
-    }
-
-    /// The entries whose ids are control actions do over the control channel what they do in
-    /// the menu.
-    #[test]
-    fn shared_ids_mean_the_same_over_the_control_channel() {
-        use solidcraft_ui_egui::scenario::Harness;
-        let mut h = Harness::new();
-        h.app.preferences.ai_features = true;
-        h.app.agent_chat.open = false;
-        let (id, params) = id_of(&FileAction::AgentChat);
-        for open in [true, false] {
-            let out = h.call(&id, params.clone().unwrap_or_default());
-            assert_eq!(out["ok"], true, "{out}");
-            assert_eq!(h.app.agent_chat.open, open, "Agent Chat toggles as in the menu");
-        }
-        for action in [FileAction::Settings, FileAction::Shortcuts] {
-            let (id, params) = id_of(&action);
-            let out = h.call(&id, params.unwrap_or_default());
-            assert_eq!(out["ok"], true, "{action:?}: {out}");
-        }
-        // install_cli links into the system; its menu and control paths are the same `help::run`.
-        for item in HELP.into_iter().filter(|h| *h != "install_cli") {
-            let out = h.call(HELP_ID, json!({ "item": item }));
-            assert_eq!(out["ok"], true, "{item}: {out}");
-        }
-        assert_eq!(h.call(HELP_ID, json!({"item": "nothing"}))["ok"], false, "an unknown help item is an error");
-        let out = h.call(&id_of(&FileAction::Quit).0, json!({}));
-        assert_eq!((out["ok"].clone(), h.app.quit_requested), (json!(true), true), "{out}");
+impl Drop for NativeMenu {
+    fn drop(&mut self) {
+        MenuEvent::set_event_handler(None::<fn(MenuEvent)>);
+        self.menu.remove_for_nsapp();
     }
 }

apps/solidcraft/src/nav_bridge.rs

@@ -1,463 +0,0 @@
-//! The navigation bridge: a 3D input device's own program (a homemade device's driver app) moves
-//! the view over a loopback connection, the way a 3D mouse driver hands its axes to the programs
-//! it supports, so the device emulates no mouse and the pointer stays the user's.
-//!
-//! The device app listens on `127.0.0.1:<port>`; with Preferences › Navigation › "Navigate with a
-//! device app" on (off by default), SolidCraft connects to it, says hello and reads one JSON
-//! object per line (docs/3d-mouse.md). The reader thread only sums the motion; the egui thread
-//! hands it to the view once per frame (`space_mouse::bridge_frame`). A device the app says it
-//! reads is left to it by the 3D mouse reader ([`Claim`]), so the view doesn't move twice.
-
-use std::io::{ErrorKind, Read, Write};
-use std::net::{Ipv4Addr, SocketAddr, TcpStream};
-use std::sync::{Arc, Mutex, MutexGuard};
-use std::time::Duration;
-
-use egui::Context;
-use serde_json::{Value, json};
-use solidcraft_ui_egui::SolveApp;
-use solidcraft_ui_egui::space_mouse::{BRIDGE_VIEWS, BridgeMotion, bridge_frame, bridge_step};
-
-/// The longest line read; a longer one is skipped to its end.
-const MAX_LINE: usize = 4096;
-/// Standard views waiting for the next frame; past this many, more are a flood and dropped.
-const MAX_VIEWS: usize = 8;
-/// The longest name a device app may give for itself or its device, in characters.
-const MAX_NAME: usize = 64;
-/// How long a connection attempt waits.
-const CONNECT_TIMEOUT: Duration = Duration::from_millis(500);
-/// How long a read waits for data before the reader looks at the preferences again.
-const READ_WAKE: Duration = Duration::from_millis(250);
-/// The wait before connecting again when no device app answered or one went away.
-const RETRY_AFTER: Duration = Duration::from_secs(1);
-/// In zoom mode, a motion of this many points along Y is one zoom step: with 8 % a step, the 1 %
-/// a point that a zoom drag moves.
-const POINTS_PER_ZOOM_STEP: f64 = 8.0;
-
-/// What the device's motion drives, as the device app last said (`mode`).
-#[derive(Clone, Copy, Debug, Default, PartialEq, Eq)]
-enum Mode {
-    #[default]
-    Orbit,
-    Pan,
-    Zoom,
-}
-
-/// What the reader thread and the egui thread share.
-#[derive(Debug, Default)]
-struct Shared {
-    /// The port the preferences ask to connect to; none while the bridge is off.
-    wanted: Option<u16>,
-    /// The device app connected, by the name it gave ("?" until it gives one).
-    connected: Option<String>,
-    /// The device the connected app reads, as it named it: the 3D mouse reader leaves that one alone.
-    device: Option<String>,
-    /// Motion since the egui thread last took it.
-    motion: BridgeMotion,
-    /// Standard views asked for since then.
-    views: Vec<String>,
-}
-
-fn lock(shared: &Mutex<Shared>) -> Option<MutexGuard<'_, Shared>> {
-    shared.lock().ok()
-}
-
-/// A name a device app gave, without control characters and cut to [`MAX_NAME`]; none when empty.
-fn name(value: Option<&Value>) -> Option<String> {
-    let name: String = value?.as_str()?.chars().filter(|c| !c.is_control()).take(MAX_NAME).collect();
-    let name = name.trim();
-    (!name.is_empty()).then(|| name.to_string())
-}
-
-/// A number of a message, finite and in range; none when it isn't one.
-fn number(msg: &Value, key: &str) -> f64 {
-    bridge_step(msg.get(key).and_then(Value::as_f64).unwrap_or(0.0))
-}
-
-/// Takes one line from the device app into `shared`. Lines that aren't a message this version
-/// knows are ignored. Returns whether the view has something new to show.
-fn consume(line: &[u8], mode: &mut Mode, shared: &mut Shared) -> bool {
-    let Ok(msg) = serde_json::from_slice::<Value>(line) else { return false };
-    let add = |shared: &mut Shared, motion: BridgeMotion| {
-        shared.motion = shared.motion.plus(motion);
-        !motion.is_still()
-    };
-    match msg.get("t").and_then(Value::as_str) {
-        Some("axis") => {
-            let (x, y) = (number(&msg, "x"), number(&msg, "y"));
-            let motion = match mode {
-                Mode::Orbit => BridgeMotion { orbit: [x, y], ..Default::default() },
-                Mode::Pan => BridgeMotion { pan: [x, y], ..Default::default() },
-                // Up zooms in, as a zoom drag does.
-                Mode::Zoom => BridgeMotion { zoom: -y / POINTS_PER_ZOOM_STEP, ..Default::default() },
-            };
-            add(shared, motion)
-        }
-        Some("zoom") => add(shared, BridgeMotion { zoom: number(&msg, "d"), ..Default::default() }),
-        Some("mode") => {
-            let on = msg.get("on").and_then(Value::as_bool).unwrap_or(false);
-            *mode = match msg.get("mode").and_then(Value::as_str) {
-                Some("pan") if on => Mode::Pan,
-                Some("zoom") if on => Mode::Zoom,
-                _ => Mode::Orbit,
-            };
-            false
-        }
-        Some("view") => {
-            let view = msg.get("name").and_then(Value::as_str).and_then(|n| BRIDGE_VIEWS.iter().find(|v| **v == n));
-            match view {
-                Some(view) if shared.views.len() < MAX_VIEWS => {
-                    shared.views.push((*view).to_string());
-                    true
-                }
-                _ => false,
-            }
-        }
-        Some("hello") => {
-            shared.connected = name(msg.get("server")).or_else(|| shared.connected.clone());
-            shared.device = name(msg.get("device"));
-            true
-        }
-        _ => false,
-    }
-}
-
-/// Splits what arrives into lines, across reads. A line longer than [`MAX_LINE`] is dropped up to
-/// its newline, so a peer that never sends one can't make the reader hold more than that.
-#[derive(Default)]
-struct Lines {
-    line: Vec<u8>,
-    skipping: bool,
-}
-
-impl Lines {
-    fn feed(&mut self, mut data: &[u8], mut each: impl FnMut(&[u8])) {
-        while !data.is_empty() {
-            let end = data.iter().position(|b| *b == b'\n');
-            let (part, rest) = match end {
-                Some(i) => (data.get(..i).unwrap_or_default(), data.get(i + 1..).unwrap_or_default()),
-                None => (data, &[][..]),
-            };
-            if !self.skipping {
-                let room = (MAX_LINE + 1).saturating_sub(self.line.len());
-                self.line.extend_from_slice(part.get(..room.min(part.len())).unwrap_or_default());
-                if self.line.len() > MAX_LINE {
-                    self.line.clear();
-                    self.skipping = true;
-                }
-            }
-            if end.is_some() {
-                if !self.skipping {
-                    each(self.line.strip_suffix(b"\r").unwrap_or(&self.line));
-                }
-                self.line.clear();
-                self.skipping = false;
-            }
-            data = rest;
-        }
-    }
-}
-
-/// What SolidCraft says first, so the device app knows which program it is driving.
-fn hello() -> Value {
-    json!({"t": "hello", "app": "solidcraft", "version": env!("CARGO_PKG_VERSION")})
-}
-
-/// Reads one connection until the device app closes it, it fails, or the preferences no longer
-/// ask for this port; then forgets what it had.
-fn serve(mut stream: TcpStream, port: u16, ctx: &Context, shared: &Mutex<Shared>) {
-    // Without a read timeout the reader couldn't notice the bridge being switched off.
-    if stream.set_read_timeout(Some(READ_WAKE)).is_err() || writeln!(stream, "{}", hello()).is_err() {
-        return;
-    }
-    let _ = stream.set_nodelay(true);
-    log::info!("navigation bridge: connected to 127.0.0.1:{port}");
-    if let Some(mut shared) = lock(shared) {
-        shared.connected = Some("?".into());
-    }
-    ctx.request_repaint();
-    let (mut lines, mut mode) = (Lines::default(), Mode::default());
-    let mut chunk = [0_u8; 4096];
-    while lock(shared).is_some_and(|shared| shared.wanted == Some(port)) {
-        match stream.read(&mut chunk) {
-            Ok(0) => break,
-            Ok(size) => {
-                let mut news = false;
-                if let Some(mut shared) = lock(shared) {
-                    lines.feed(chunk.get(..size).unwrap_or_default(), |line| news |= consume(line, &mut mode, &mut shared));
-                }
-                if news {
-                    ctx.request_repaint();
-                }
-            }
-            Err(error) if matches!(error.kind(), ErrorKind::WouldBlock | ErrorKind::TimedOut | ErrorKind::Interrupted) => {}
-            Err(error) => {
-                log::info!("navigation bridge: connection lost: {error}");
-                break;
-            }
-        }
-    }
-    if let Some(mut shared) = lock(shared) {
-        *shared = Shared { wanted: shared.wanted, ..Shared::default() };
-    }
-    ctx.request_repaint();
-}
-
-/// Connects to the device app while the preferences ask for it, again whenever it goes away.
-fn reader(ctx: Context, shared: Arc<Mutex<Shared>>) {
-    loop {
-        let Some(port) = lock(&shared).and_then(|shared| shared.wanted) else {
-            std::thread::sleep(READ_WAKE);
-            continue;
-        };
-        if let Ok(stream) = TcpStream::connect_timeout(&SocketAddr::from((Ipv4Addr::LOCALHOST, port)), CONNECT_TIMEOUT) {
-            serve(stream, port, &ctx, &shared);
-        }
-        std::thread::sleep(RETRY_AFTER);
-    }
-}
-
-/// Which 3D mouse the connected device app reads, for the 3D mouse reader to leave alone. Only
-/// the Windows and macOS readers know a device's strings to compare.
-#[derive(Clone)]
-#[cfg_attr(not(any(target_os = "windows", target_os = "macos")), allow(dead_code))]
-pub struct Claim(Arc<Mutex<Shared>>);
-
-#[cfg_attr(not(any(target_os = "windows", target_os = "macos")), allow(dead_code))]
-impl Claim {
-    /// Whether a device with these manufacturer and product strings is the one the connected
-    /// device app reads (its name appears in one, ignoring case).
-    pub fn claims(&self, strings: &[String]) -> bool {
-        let Some(device) = lock(&self.0).and_then(|shared| shared.device.clone()) else { return false };
-        let device = device.to_lowercase();
-        strings.iter().any(|s| s.to_lowercase().contains(&device))
-    }
-}
-
-pub struct NavBridge {
-    shared: Arc<Mutex<Shared>>,
-}
-
-impl NavBridge {
-    pub fn start(ctx: &Context) -> Self {
-        let shared = Arc::new(Mutex::new(Shared::default()));
-        let (worker_ctx, worker_state) = (ctx.clone(), Arc::clone(&shared));
-        if let Err(error) = std::thread::Builder::new().name("solidcraft-nav-bridge".into()).spawn(move || reader(worker_ctx, worker_state)) {
-            log::warn!("navigation bridge: reader could not start: {error}");
-        }
-        Self { shared }
-    }
-
-    #[cfg_attr(not(any(target_os = "windows", target_os = "macos")), allow(dead_code))]
-    pub fn claim(&self) -> Claim {
-        Claim(Arc::clone(&self.shared))
-    }
-
-    /// Each frame: passes the preferences to the reader, and the motion and views since the last
-    /// frame to the view. Motion that arrived while the window had no focus is dropped with it.
-    pub fn tick(&mut self, app: &mut SolveApp, ctx: &Context) {
-        let wanted = Some(app.preferences.nav_bridge_port).filter(|port| app.preferences.nav_bridge_enabled && *port != 0);
-        let Some((motion, views, connected)) = lock(&self.shared).map(|mut shared| {
-            shared.wanted = wanted;
-            (std::mem::take(&mut shared.motion), std::mem::take(&mut shared.views), shared.connected.clone())
-        }) else {
-            return;
-        };
-        app.space_mouse.bridge = connected.filter(|_| wanted.is_some());
-        if !motion.is_still() || !views.is_empty() {
-            bridge_frame(app, ctx, motion, &views);
-        }
-    }
-}
-
-#[cfg(test)]
-mod tests {
-    use super::*;
-    use std::io::{BufRead, BufReader};
-    use std::net::TcpListener;
-    use std::time::Instant;
-
-    fn feed(shared: &mut Shared, mode: &mut Mode, text: &str) -> bool {
-        let mut news = false;
-        Lines::default().feed(text.as_bytes(), |line| news |= consume(line, mode, shared));
-        news
-    }
-
-    #[test]
-    fn axis_motion_orbits_pans_or_zooms_as_the_mode_says() {
-        let (mut shared, mut mode) = (Shared::default(), Mode::default());
-        assert!(feed(&mut shared, &mut mode, "{\"t\":\"axis\",\"x\":3,\"y\":-2}\n{\"t\":\"axis\",\"x\":1.5,\"y\":0}\n"));
-        assert_eq!(shared.motion, BridgeMotion { orbit: [4.5, -2.0], ..Default::default() });
-        feed(&mut shared, &mut mode, "{\"t\":\"mode\",\"mode\":\"pan\",\"on\":true}\n{\"t\":\"axis\",\"x\":5,\"y\":6}\n");
-        assert_eq!(mode, Mode::Pan);
-        assert_eq!(shared.motion.pan, [5.0, 6.0]);
-        feed(&mut shared, &mut mode, "{\"t\":\"mode\",\"mode\":\"zoom\",\"on\":true}\n{\"t\":\"axis\",\"x\":0,\"y\":-16}\n");
-        assert_eq!(shared.motion.zoom, 2.0, "up zooms in, 8 points a step");
-        // Off, whichever mode it names, is back to orbit.
-        feed(&mut shared, &mut mode, "{\"t\":\"mode\",\"mode\":\"pan\",\"on\":false}\n");
-        assert_eq!(mode, Mode::Orbit);
-        // The ring's steps add up with the zoom mode's.
-        feed(&mut shared, &mut mode, "{\"t\":\"zoom\",\"d\":-0.5}\n");
-        assert_eq!(shared.motion.zoom, 1.5);
-    }
-
-    #[test]
-    fn views_are_queued_by_their_known_names_only() {
-        let (mut shared, mut mode) = (Shared::default(), Mode::default());
-        assert!(feed(&mut shared, &mut mode, "{\"t\":\"view\",\"name\":\"iso\"}\n{\"t\":\"view\",\"name\":\"fit\"}\n"));
-        assert!(!feed(&mut shared, &mut mode, "{\"t\":\"view\",\"name\":\"ISO\"}\n{\"t\":\"view\",\"name\":\"../etc\"}\n{\"t\":\"view\"}\n"));
-        assert_eq!(shared.views, ["iso", "fit"]);
-        let flood = "{\"t\":\"view\",\"name\":\"top\"}\n".repeat(100);
-        feed(&mut shared, &mut mode, &flood);
-        assert_eq!(shared.views.len(), MAX_VIEWS);
-    }
-
-    #[test]
-    fn hostile_lines_never_move_the_view_out_of_range() {
-        let (mut shared, mut mode) = (Shared::default(), Mode::default());
-        let lines = [
-            "not json",
-            "{\"t\":\"axis\",\"x\":\"5\",\"y\":null}",
-            "{\"t\":\"axis\",\"x\":1e308,\"y\":-1e308}",
-            "{\"t\":\"axis\",\"x\":1e999}",
-            "{\"t\":\"zoom\",\"d\":[1]}",
-            "{\"t\":42}",
-            "[1,2,3]",
-            "{\"t\":\"mode\",\"mode\":{\"x\":1},\"on\":\"yes\"}",
-            "\u{0}\u{1}\u{2}",
-        ];
-        for line in lines {
-            Lines::default().feed(format!("{line}\n").as_bytes(), |l| {
-                consume(l, &mut mode, &mut shared);
-            });
-        }
-        let limit = solidcraft_ui_egui::space_mouse::BRIDGE_MAX_STEP;
-        let values = shared.motion.orbit.into_iter().chain(shared.motion.pan).chain([shared.motion.zoom]);
-        for value in values {
-            assert!(value.is_finite() && value.abs() <= limit, "{value}");
-        }
-        assert_eq!(mode, Mode::Orbit);
-        // Invalid UTF-8 is no message either.
-        assert!(!consume(&[0xff, 0xfe, b'{', b'}'], &mut mode, &mut shared));
-    }
-
-    #[test]
-    fn lines_split_across_reads_and_long_ones_are_skipped_to_their_end() {
-        let mut got = Vec::new();
-        let mut lines = Lines::default();
-        for part in ["{\"t\":", "\"zoom\"}\r\n{\"a\"", ":1}\n"] {
-            lines.feed(part.as_bytes(), |line| got.push(String::from_utf8_lossy(line).to_string()));
-        }
-        assert_eq!(got, ["{\"t\":\"zoom\"}", "{\"a\":1}"]);
-        got.clear();
-        let long = vec![b'x'; MAX_LINE * 3];
-        lines.feed(&long, |line| got.push(String::from_utf8_lossy(line).to_string()));
-        lines.feed(&long, |line| got.push(String::from_utf8_lossy(line).to_string()));
-        assert!(lines.line.len() <= MAX_LINE + 1, "never holds more than one line");
-        lines.feed(b"tail\nnext\n", |line| got.push(String::from_utf8_lossy(line).to_string()));
-        assert_eq!(got, ["next"], "the long line is dropped to its newline, the next one read");
-    }
-
-    #[test]
-    fn the_device_app_names_itself_and_the_device_it_leaves_alone() {
-        let shared = Arc::new(Mutex::new(Shared::default()));
-        let claim = Claim(Arc::clone(&shared));
-        let strings = ["STMicroelectronics".to_string(), "MAKMOUSE 3D".to_string()];
-        assert!(!claim.claims(&strings), "nothing is claimed before an app says so");
-        let mut mode = Mode::default();
-        if let Ok(mut shared) = shared.lock() {
-            let hello = format!("{{\"t\":\"hello\",\"server\":\"Dev\\u0007App {}\",\"device\":\"makmouse\"}}\n", "x".repeat(200));
-            feed(&mut shared, &mut mode, &hello);
-            assert_eq!(shared.connected.as_deref().map(|n| n.chars().count()), Some(MAX_NAME));
-            assert!(shared.connected.as_deref().is_some_and(|n| n.starts_with("DevApp")));
-        }
-        assert!(claim.claims(&strings), "the name matches ignoring case");
-        assert!(!claim.claims(&["3Dconnexion".to_string(), "SpaceMouse Compact".to_string()]), "another 3D mouse stays the reader's");
-    }
-
-    /// Waits until `check` holds, or fails after a few seconds.
-    fn wait_for(what: &str, mut check: impl FnMut() -> bool) {
-        let deadline = Instant::now() + Duration::from_secs(5);
-        while !check() {
-            assert!(Instant::now() < deadline, "timed out waiting for {what}");
-            std::thread::sleep(Duration::from_millis(10));
-        }
-    }
-
-    #[test]
-    fn a_connection_says_hello_reads_the_stream_and_ends_when_the_bridge_is_switched_off() {
-        let listener = TcpListener::bind((Ipv4Addr::LOCALHOST, 0)).unwrap();
-        let port = listener.local_addr().unwrap().port();
-        let shared = Arc::new(Mutex::new(Shared { wanted: Some(port), ..Default::default() }));
-        let client = TcpStream::connect((Ipv4Addr::LOCALHOST, port)).unwrap();
-        let (mut server, _) = listener.accept().unwrap();
-        let worker = {
-            let shared = Arc::clone(&shared);
-            std::thread::spawn(move || serve(client, port, &Context::default(), &shared))
-        };
-        let mut hello_line = String::new();
-        BufReader::new(server.try_clone().unwrap()).read_line(&mut hello_line).unwrap();
-        let hello: Value = serde_json::from_str(&hello_line).unwrap();
-        assert_eq!((hello["t"].as_str(), hello["app"].as_str()), (Some("hello"), Some("solidcraft")));
-        server
-            .write_all(b"{\"t\":\"hello\",\"server\":\"MAKMOUSE\",\"device\":\"MAKMOUSE\"}\n{\"t\":\"axis\",\"x\":2,\"y\":1}\n{\"t\":\"view\",\"name\":\"top\"}\n")
-            .unwrap();
-        wait_for("the stream", || shared.lock().is_ok_and(|s| s.motion.orbit == [2.0, 1.0] && s.views == ["top"]));
-        assert_eq!(shared.lock().unwrap().connected.as_deref(), Some("MAKMOUSE"));
-        // Switched off: the connection ends and what it had is forgotten.
-        shared.lock().unwrap().wanted = None;
-        worker.join().unwrap();
-        let after = shared.lock().unwrap();
-        assert!(after.connected.is_none() && after.device.is_none() && after.motion.is_still() && after.views.is_empty());
-    }
-
-    #[test]
-    fn a_closed_connection_forgets_the_app() {
-        let listener = TcpListener::bind((Ipv4Addr::LOCALHOST, 0)).unwrap();
-        let port = listener.local_addr().unwrap().port();
-        let shared = Arc::new(Mutex::new(Shared { wanted: Some(port), ..Default::default() }));
-        let client = TcpStream::connect((Ipv4Addr::LOCALHOST, port)).unwrap();
-        let (server, _) = listener.accept().unwrap();
-        let worker = {
-            let shared = Arc::clone(&shared);
-            std::thread::spawn(move || serve(client, port, &Context::default(), &shared))
-        };
-        wait_for("the connection", || shared.lock().is_ok_and(|s| s.connected.is_some()));
-        drop(server);
-        worker.join().unwrap();
-        let after = shared.lock().unwrap();
-        assert_eq!((after.connected.as_deref(), after.wanted), (None, Some(port)), "still wanted, so the reader connects again");
-    }
-
-    #[test]
-    fn each_frame_hands_the_view_the_motion_and_passes_the_preferences_on() {
-        let mut app = SolveApp::new(solidcraft_engine::Session::default(), solidcraft_ui_egui::Services::default());
-        app.home.open = false;
-        let ctx = Context::default();
-        ctx.run_ui(egui::RawInput { focused: true, ..Default::default() }, |_| {}).textures_delta.clear();
-        let mut bridge = NavBridge { shared: Arc::new(Mutex::new(Shared::default())) };
-        let queue = |bridge: &NavBridge| {
-            let mut shared = bridge.shared.lock().unwrap();
-            shared.connected = Some("MAKMOUSE".into());
-            shared.motion = BridgeMotion { orbit: [10.0, 0.0], ..Default::default() };
-        };
-        // Off (the default): nothing is wanted, nothing reaches the view.
-        queue(&bridge);
-        bridge.tick(&mut app, &ctx);
-        assert_eq!(bridge.shared.lock().unwrap().wanted, None);
-        assert!(app.viewport.bridge_motion.is_none() && app.space_mouse.bridge.is_none());
-        // On: the port is passed to the reader and the motion to the view, once.
-        app.preferences.nav_bridge_enabled = true;
-        app.preferences.nav_bridge_port = 9123;
-        queue(&bridge);
-        bridge.tick(&mut app, &ctx);
-        assert_eq!(bridge.shared.lock().unwrap().wanted, Some(9123));
-        assert_eq!(app.space_mouse.bridge.as_deref(), Some("MAKMOUSE"));
-        assert_eq!(app.viewport.bridge_motion.map(|m| m.orbit), Some([10.0, 0.0]));
-        assert!(bridge.shared.lock().unwrap().motion.is_still(), "taken, not handed over twice");
-        // Port 0 is no port.
-        app.preferences.nav_bridge_port = 0;
-        bridge.tick(&mut app, &ctx);
-        assert_eq!(bridge.shared.lock().unwrap().wanted, None);
-    }
-}

apps/solidcraft/src/space_mouse.rs

@@ -241,7 +241,6 @@ struct Reading {
     device: Option<Source>,
     /// A source that is connected but has not yet shown a device behind it (spacenavd's socket answers
     /// with no mouse plugged in; its protocol has no enumeration, so the first record is the evidence).
-    #[cfg(target_os = "linux")]
     awaiting: Option<Source>,
     axes: Axes,
     /// When each of X, Y, Z, Rx, Ry and Rz last arrived. Each ages on its own: a device may send
@@ -288,7 +287,6 @@ impl Reading {
     }
 
     /// A record arrived from the source being waited on: there is a device.
-    #[cfg(target_os = "linux")]
     fn heard(&mut self) {
         if self.device.is_none() {
             self.device = self.awaiting.take();
@@ -298,7 +296,6 @@ impl Reading {
     fn new(now: Instant) -> Self {
         Self {
             device: None,
-            #[cfg(target_os = "linux")]
             awaiting: None,
             axes: Axes::default(),
             at: [now; 6],
@@ -463,20 +460,12 @@ fn connected(ctx: &Context, shared: &Mutex<Reading>, source: Source) {
         let now = Instant::now();
         let stale = now.checked_sub(STALE_AFTER).unwrap_or(now);
         // A daemon is not yet a device: it counts once a record comes from it.
-        let waiting = needs_evidence(source);
+        let (device, awaiting) = if needs_evidence(source) { (None, Some(source)) } else { (Some(source), None) };
         // A HID device reports the state of its buttons, so the first state seen is a baseline; the daemon
         // and the driver send presses and releases, which start from nothing down.
         let buttons_known = !matches!(source, Source::Hid(_));
         let generation = CONNECTIONS.fetch_add(1, Ordering::Relaxed).wrapping_add(1);
-        *reading = Reading {
-            device: (!waiting).then_some(source),
-            #[cfg(target_os = "linux")]
-            awaiting: waiting.then_some(source),
-            at: [stale; 6],
-            buttons_known,
-            generation,
-            ..Reading::new(now)
-        };
+        *reading = Reading { device, awaiting, at: [stale; 6], buttons_known, generation, ..Reading::new(now) };
     }
     ctx.request_repaint();
 }
@@ -521,175 +510,43 @@ fn hid_api() -> hidapi::HidResult<HidApi> {
     HidApi::new()
 }
 
-/// An open 3D-mouse interface: the device, how its reports are laid out, and its vendor and
-/// product ids.
-#[cfg(any(target_os = "windows", target_os = "macos", test))]
-struct Candidate<D> {
-    device: D,
-    layout: Layout,
-    ids: (u16, u16),
-    /// The device's manufacturer and product strings ([`device_strings`]).
-    #[cfg_attr(not(any(target_os = "windows", target_os = "macos")), allow(dead_code))]
-    strings: Vec<String>,
-}
-
-/// Input reports read with a timeout in milliseconds: hidapi's devices, and the tests' simulated
-/// ones. `Ok(0)` is a timeout; an error means the device is gone.
-#[cfg(any(target_os = "windows", target_os = "macos", test))]
-trait ReportSource {
-    fn read_report(&self, report: &mut [u8], timeout_ms: i32) -> Result<usize, String>;
-}
-
 #[cfg(any(target_os = "windows", target_os = "macos"))]
-impl ReportSource for hidapi::HidDevice {
-    fn read_report(&self, report: &mut [u8], timeout_ms: i32) -> Result<usize, String> {
-        self.read_timeout(report, timeout_ms).map_err(|error| error.to_string())
-    }
-}
-
-/// What following the candidates tells the reader.
-#[cfg(any(target_os = "windows", target_os = "macos", test))]
-enum Followed<'a> {
-    /// This device is the one read now, so its calibration applies. With the buttons it last
-    /// reported down, when it reported them while another was read: they are its baseline, so a
-    /// press that makes it the device in use counts as a press, not as a button already held.
-    Device((u16, u16), Option<u32>),
-    /// An input report from it.
-    Report(&'a Layout, &'a [u8]),
-    /// It is gone.
-    Gone,
-}
-
-/// Whether a report shows its device in use: an axis off zero or a button down. A cap at rest
-/// sends zeros at most, and an idle 3Dconnexion Universal Receiver sends nothing at all.
-#[cfg(any(target_os = "windows", target_os = "macos", test))]
-fn shows_use(layout: Layout, report: &[u8]) -> bool {
-    layout.decode(report).is_some_and(|decoded| decoded.axes.iter().flatten().any(|axis| *axis != 0) || decoded.buttons.is_some_and(|down| down != 0))
-}
-
-/// Reads every candidate and follows the one in use (#3988). The first is followed from the start,
-/// as when it was the only one read. Another takes over once it shows use while the followed one
-/// has shown none for `STALE_AFTER`, so two devices moved together don't hand the reading back
-/// and forth. An idle Universal Receiver opens fine and never fails; read on its own it kept a
-/// SpaceMouse next to it from ever being read. A candidate that fails is dropped. If it was the
-/// followed one, the reading is reset and the next takes over. Returns when none is left.
-#[cfg(any(target_os = "windows", target_os = "macos", test))]
-fn follow<D: ReportSource>(mut candidates: Vec<Candidate<D>>, now: impl Fn() -> Instant, mut emit: impl FnMut(Followed<'_>)) {
-    let Some(first) = candidates.first() else { return };
-    emit(Followed::Device(first.ids, None));
-    let mut followed = 0;
-    // When the followed device last showed use.
-    let mut used_at: Option<Instant> = None;
-    // The buttons each candidate last reported down, by index, as long as it has reported them.
-    let mut buttons: Vec<Option<u32>> = candidates.iter().map(|_| None).collect();
-    let mut report = [0_u8; REPORT_BUFFER_BYTES];
-    while !candidates.is_empty() {
-        // One device is waited on as before; several take turns, briefly, so none waits behind
-        // an idle one. Reports queue in the system meanwhile, so none is lost.
-        let timeout_ms = if candidates.len() == 1 { 100 } else { 10 };
-        let mut index = 0;
-        while let Some(candidate) = candidates.get(index) {
-            match candidate.device.read_report(&mut report, timeout_ms) {
-                Ok(0) => {}
-                Ok(size) => {
-                    let bytes = report.get(..size).unwrap_or_default();
-                    let before = buttons.get(index).copied().flatten();
-                    if let (Some(seen), Some(down)) = (buttons.get_mut(index), candidate.layout.decode(bytes).and_then(|decoded| decoded.buttons)) {
-                        *seen = Some(down);
-                    }
-                    if shows_use(candidate.layout, bytes) {
-                        let at = now();
-                        if index != followed && used_at.is_none_or(|used| at.duration_since(used) >= STALE_AFTER) {
-                            let (vendor, product) = candidate.ids;
-                            log::info!("3D mouse: reading {vendor:04x}:{product:04x}, the device in use");
-                            followed = index;
-                            emit(Followed::Device(candidate.ids, before));
-                        }
-                        if index == followed {
-                            used_at = Some(at);
-                        }
-                    }
-                    if index == followed {
-                        emit(Followed::Report(&candidate.layout, bytes));
-                    }
-                }
-                Err(error) => {
-                    log::info!("3D mouse disconnected: {error}");
-                    candidates.remove(index);
-                    if index < buttons.len() {
-                        buttons.remove(index);
-                    }
-                    if index == followed {
-                        emit(Followed::Gone);
-                        followed = 0;
-                        used_at = None;
-                        if let Some(next) = candidates.first() {
-                            emit(Followed::Device(next.ids, buttons.first().copied().flatten()));
-                        }
-                    } else if index < followed {
-                        followed -= 1;
-                    }
-                    continue;
-                }
-            }
-            index += 1;
-        }
-    }
-}
-
-/// The device's manufacturer and product strings, which say whether a device app has it
-/// ([`crate::nav_bridge::Claim`]). Asked of the opened 3D mouse only.
-#[cfg(any(target_os = "windows", target_os = "macos"))]
-fn device_strings(device: &hidapi::HidDevice) -> Vec<String> {
-    [device.get_manufacturer_string(), device.get_product_string()].into_iter().filter_map(|s| s.ok().flatten()).collect()
-}
-
-#[cfg(any(target_os = "windows", target_os = "macos"))]
-fn reader(ctx: Context, shared: Arc<Mutex<Reading>>, bridge: crate::nav_bridge::Claim) {
+fn reader(ctx: Context, shared: Arc<Mutex<Reading>>) {
     let Ok(mut api) = hid_api() else {
         log::warn!("3D mouse: HID initialization failed");
         return;
     };
     loop {
-        let open: Vec<_> = candidates(&mut api)
-            .into_iter()
-            .filter_map(|path| {
-                let device = api
-                    .open_path(&path)
-                    .inspect_err(|error| {
-                        // On macOS: missing Input Monitoring permission, or the 3DxWare helper holding the device.
-                        // The driver having the device is the reason it cannot be opened, not a problem.
-                        if !DRIVER_CONNECTED.load(Ordering::Relaxed) && !DRIVER_REGISTERED.load(Ordering::Relaxed) {
-                            log::warn!("3D mouse: cannot open the device: {error}");
-                        }
-                    })
-                    .ok()?;
-                // Read when the device was opened, from this device alone.
-                let info = device.get_device_info().ok()?;
-                let layout = device_layout(&device, info.vendor_id())?;
-                let strings = device_strings(&device);
-                Some(Candidate { device, layout, ids: (info.vendor_id(), info.product_id()), strings })
-            })
-            .collect();
-        let names: Vec<_> = open.iter().map(|candidate| (candidate.ids, candidate.strings.clone())).collect();
-        // Whether the device read now is one a device app has: it moves the view over the navigation
-        // bridge, so read here as well the device would move it twice. What was read before ages out.
-        let mut strings: &[String] = &[];
-        follow(open, Instant::now, |event| match event {
-            Followed::Device(ids, buttons) => {
-                strings = names.iter().find(|(known, _)| *known == ids).map_or(&[][..], |(_, strings)| strings.as_slice());
-                connected(&ctx, &shared, Source::Hid(Some(ids)));
-                // Taken over from another device: what it reported meanwhile is its baseline.
-                if let Some(buttons) = buttons
-                    && let Ok(mut reading) = shared.lock()
-                {
-                    reading.set_buttons(buttons);
+        if let Some((device, layout, ids)) = candidates(&mut api).into_iter().find_map(|path| {
+            let device = api
+                .open_path(&path)
+                .inspect_err(|error| {
+                    // On macOS: missing Input Monitoring permission, or the 3DxWare helper holding the device.
+                    // The driver having the device is the reason it cannot be opened, not a problem.
+                    if !DRIVER_CONNECTED.load(Ordering::Relaxed) && !DRIVER_REGISTERED.load(Ordering::Relaxed) {
+                        log::warn!("3D mouse: cannot open the device: {error}");
+                    }
+                })
+                .ok()?;
+            // Read when the device was opened, from this device alone.
+            let info = device.get_device_info().ok()?;
+            let layout = device_layout(&device, info.vendor_id())?;
+            Some((device, layout, (info.vendor_id(), info.product_id())))
+        }) {
+            connected(&ctx, &shared, Source::Hid(Some(ids)));
+            let mut report = [0_u8; REPORT_BUFFER_BYTES];
+            loop {
+                match device.read_timeout(&mut report, 100) {
+                    Ok(0) => {}
+                    Ok(size) => publish(&ctx, &shared, layout, report.get(..size).unwrap_or_default()),
+                    Err(error) => {
+                        log::info!("3D mouse disconnected: {error}");
+                        break;
+                    }
                 }
             }
-            Followed::Report(..) if bridge.claims(strings) => {}
-            Followed::Report(layout, report) => publish(&ctx, &shared, *layout, report),
-            Followed::Gone => reset(&ctx, &shared),
-        });
+            reset(&ctx, &shared);
+        }
         std::thread::sleep(RETRY_AFTER);
     }
 }
@@ -1071,8 +928,7 @@ pub struct SpaceMouse {
 }
 
 impl SpaceMouse {
-    /// Starts the reader. A device that `bridge` says its own app reads is left to that app.
-    pub fn start(ctx: &Context, bridge: crate::nav_bridge::Claim) -> Self {
+    pub fn start(ctx: &Context) -> Self {
         let now = Instant::now();
         let shared = Arc::new(Mutex::new(Reading::new(now)));
         let worker_state = Arc::clone(&shared);
@@ -1081,14 +937,11 @@ impl SpaceMouse {
         let drivers = Arc::new(Drivers::default());
         #[cfg(target_os = "linux")]
         let worker_drivers = Arc::clone(&drivers);
-        // hidraw names no device's strings to compare (`Claim`).
-        #[cfg(target_os = "linux")]
-        let _ = bridge;
         let spawned = std::thread::Builder::new().name("solidcraft-3d-mouse".into()).spawn(move || {
             #[cfg(target_os = "linux")]
             reader(worker_ctx, worker_state, worker_drivers, Machine);
             #[cfg(not(target_os = "linux"))]
-            reader(worker_ctx, worker_state, bridge);
+            reader(worker_ctx, worker_state);
         });
         if let Err(error) = spawned {
             log::warn!("3D mouse: reader could not start: {error}");
@@ -1430,175 +1283,6 @@ mod tests {
         assert!(shared.lock().unwrap().arrived, "but the report did arrive");
     }
 
-    /// A simulated 3D-mouse interface. Each read takes the next scripted step, a report or a
-    /// timeout (empty), and sets the shared clock to the step's time. Once the script runs out,
-    /// the device is unplugged.
-    struct Simulated<'a> {
-        clock: &'a std::cell::Cell<Instant>,
-        start: Instant,
-        steps: std::cell::RefCell<std::collections::VecDeque<(u64, Vec<u8>)>>,
-    }
-
-    impl ReportSource for Simulated<'_> {
-        fn read_report(&self, report: &mut [u8], _timeout_ms: i32) -> Result<usize, String> {
-            let (ms, bytes) = self.steps.borrow_mut().pop_front().ok_or_else(|| "unplugged".to_string())?;
-            self.clock.set(self.start + Duration::from_millis(ms));
-            report.get_mut(..bytes.len()).ok_or_else(|| "report too long".to_string())?.copy_from_slice(&bytes);
-            Ok(bytes.len())
-        }
-    }
-
-    #[derive(Debug, PartialEq)]
-    enum Seen {
-        /// The product id now read.
-        Device(u16),
-        /// The buttons it had reported down before it was read, its baseline.
-        Baseline(u32),
-        /// A report published, the product id read when it was, and whether it showed use.
-        Report(u16, Vec<u8>, bool),
-        Gone,
-    }
-
-    /// Follows simulated devices, given as (product id, scripted steps in ms), and returns what
-    /// the reader was told.
-    fn follow_simulated(devices: &[(u16, &[(u64, &[u8])])]) -> Vec<Seen> {
-        follow_simulated_with(Layout::default(), devices)
-    }
-
-    /// As `follow_simulated`, with every device's reports laid out as `layout`.
-    fn follow_simulated_with(layout: Layout, devices: &[(u16, &[(u64, &[u8])])]) -> Vec<Seen> {
-        let start = Instant::now();
-        let clock = std::cell::Cell::new(start);
-        let candidates = devices
-            .iter()
-            .map(|(product, steps)| Candidate {
-                device: Simulated {
-                    clock: &clock,
-                    start,
-                    steps: std::cell::RefCell::new(steps.iter().map(|(ms, bytes)| (*ms, bytes.to_vec())).collect()),
-                },
-                layout,
-                ids: (0x256f, *product),
-                strings: Vec::new(),
-            })
-            .collect();
-        let (mut seen, mut read) = (Vec::new(), 0);
-        follow(
-            candidates,
-            || clock.get(),
-            |event| match event {
-                Followed::Device((_, product), buttons) => {
-                    read = product;
-                    seen.push(Seen::Device(product));
-                    seen.extend(buttons.map(Seen::Baseline));
-                }
-                Followed::Report(layout, bytes) => seen.push(Seen::Report(read, bytes.to_vec(), shows_use(*layout, bytes))),
-                Followed::Gone => seen.push(Seen::Gone),
-            },
-        );
-        seen
-    }
-
-    const RECEIVER: u16 = 0xc652;
-    const SPACEMOUSE: u16 = 0xc63a;
-    const PUSH_X: &[u8] = &[1, 100, 0, 0, 0, 0, 0];
-    const AT_REST: &[u8] = &[1, 0, 0, 0, 0, 0, 0];
-    const TILT: &[u8] = &[2, 0, 0, 50, 0, 0, 0];
-
-    /// #3988: a Universal Receiver with nothing paired is found first and never fails, and a wired
-    /// SpaceMouse next to it was never read. The receiver is followed only until the SpaceMouse
-    /// moves; the SpaceMouse's reports, its zeros included, are read from then on.
-    #[test]
-    fn an_idle_receiver_does_not_keep_a_spacemouse_from_being_read() {
-        let receiver: &[(u64, &[u8])] = &[(0, &[]), (10, &[]), (20, &[]), (30, &[])];
-        let spacemouse: &[(u64, &[u8])] = &[(5, &[]), (15, PUSH_X), (25, AT_REST), (35, TILT)];
-        assert_eq!(
-            follow_simulated(&[(RECEIVER, receiver), (SPACEMOUSE, spacemouse)]),
-            [
-                Seen::Device(RECEIVER),
-                Seen::Device(SPACEMOUSE),
-                Seen::Report(SPACEMOUSE, PUSH_X.to_vec(), true),
-                Seen::Report(SPACEMOUSE, AT_REST.to_vec(), false),
-                Seen::Report(SPACEMOUSE, TILT.to_vec(), true),
-                // The receiver is unplugged first, then the SpaceMouse, the one being read.
-                Seen::Gone,
-            ]
-        );
-    }
-
-    /// Two devices in use at once don't trade the reading: the other takes over only after the
-    /// followed one has shown no use for `STALE_AFTER`. A report at rest or with an id the layout
-    /// doesn't know shows no use, and only the followed device's reports are published.
-    #[test]
-    fn another_device_takes_over_only_once_the_followed_one_is_still() {
-        let unknown_id: &[u8] = &[0x17, 80];
-        let first: &[(u64, &[u8])] = &[(0, PUSH_X), (100, AT_REST), (200, &[])];
-        let second: &[(u64, &[u8])] = &[(50, PUSH_X), (150, unknown_id), (250, TILT)];
-        assert_eq!(
-            follow_simulated(&[(0xc635, first), (SPACEMOUSE, second)]),
-            [
-                Seen::Device(0xc635),
-                Seen::Report(0xc635, PUSH_X.to_vec(), true),
-                // The second moves 50 ms after the first did: not yet. The first's own rest
-                // report is read, and the second's unknown report is not.
-                Seen::Report(0xc635, AT_REST.to_vec(), false),
-                // 250 ms after the first last moved, the second takes over.
-                Seen::Device(SPACEMOUSE),
-                Seen::Report(SPACEMOUSE, TILT.to_vec(), true),
-                Seen::Gone,
-            ]
-        );
-    }
-
-    /// One device is read as before: every report, until it fails. When the followed one of
-    /// several fails, the reading is reset and the next one is read.
-    #[test]
-    fn a_device_that_fails_hands_the_reading_to_the_next() {
-        let only: &[(u64, &[u8])] = &[(0, &[]), (1, AT_REST), (2, &[0x17, 80])];
-        assert_eq!(
-            follow_simulated(&[(SPACEMOUSE, only)]),
-            [
-                Seen::Device(SPACEMOUSE),
-                Seen::Report(SPACEMOUSE, AT_REST.to_vec(), false),
-                Seen::Report(SPACEMOUSE, vec![0x17, 80], false),
-                Seen::Gone
-            ]
-        );
-        let unplugged: &[(u64, &[u8])] = &[];
-        let next: &[(u64, &[u8])] = &[(1, PUSH_X)];
-        assert_eq!(
-            follow_simulated(&[(SPACEMOUSE, unplugged), (RECEIVER, next)]),
-            [Seen::Device(SPACEMOUSE), Seen::Gone, Seen::Device(RECEIVER), Seen::Report(RECEIVER, PUSH_X.to_vec(), true), Seen::Gone]
-        );
-        assert_eq!(follow_simulated(&[]), []);
-    }
-
-    /// A button press that makes a device the one in use is a press. The buttons it reported while
-    /// another was read are its baseline; the reader keeps them, so the press isn't taken for a
-    /// button already held, as a device's first button report is.
-    #[test]
-    fn a_press_that_takes_over_counts_as_a_press() {
-        let mut layout = Layout::default();
-        layout.buttons[0] =
-            Some(solidcraft_space_mouse::Field { report_id: 3, bit_offset: 0, bits: 1, logical_min: 0, logical_max: 1, relative: false });
-        let (none_down, first_down): (&[u8], &[u8]) = (&[3, 0], &[3, 1]);
-        let receiver: &[(u64, &[u8])] = &[(0, &[]), (10, &[]), (20, &[])];
-        let spacemouse: &[(u64, &[u8])] = &[(5, none_down), (15, first_down), (25, &[])];
-        assert_eq!(
-            follow_simulated_with(layout, &[(RECEIVER, receiver), (SPACEMOUSE, spacemouse)]),
-            [Seen::Device(RECEIVER), Seen::Device(SPACEMOUSE), Seen::Baseline(0), Seen::Report(SPACEMOUSE, first_down.to_vec(), true), Seen::Gone,]
-        );
-        // What the reader does with that: the press after the baseline is a tap.
-        let mut reading = Reading { buttons_known: false, ..Reading::new(Instant::now()) };
-        reading.set_buttons(0);
-        assert!(decode_report(first_down, layout, &mut reading, Instant::now()));
-        assert_eq!((reading.buttons, reading.taps), (1, 1));
-        // Without one, the same report is the baseline: held, not pressed.
-        let mut unseen = Reading { buttons_known: false, ..Reading::new(Instant::now()) };
-        assert!(decode_report(first_down, layout, &mut unseen, Instant::now()));
-        assert_eq!((unseen.buttons, unseen.taps), (1, 0));
-    }
-
     #[test]
     fn a_held_reading_stays_until_the_next_one_and_a_hid_reading_goes_stale() {
         let now = Instant::now();
@@ -1914,7 +1598,6 @@ mod tests {
 
     fn wheel() -> egui::Event {
         egui::Event::MouseWheel {
-            source: egui::MouseWheelSource::Unknown,
             unit: egui::MouseWheelUnit::Line,
             delta: egui::vec2(0.0, -1.0),
             modifiers: Default::default(),

apps/solidcraft/src/space_mouse/spacenavd.rs

@@ -40,10 +40,10 @@ fn connect_to(path: &Path) -> Option<UnixStream> {
 
 /// The axes of one record, or `None` for a record that is not motion.
 ///
-/// The daemon reports x to the right, y up and z away from the user; our raw HID frame is x
-/// right, y towards the user and z down. Swap and negate y/z and ry/rz to match that frame.
-/// With nothing set in `spnavcfg` the two readers give the same motion; what the user swaps
-/// or inverts there then carries over.
+/// The daemon's frame is right-handed with x to the right, y away from the user and z up; ours is
+/// the device's raw one, x right, y towards the user and z down, so y and z (and the rotations
+/// about them) change sign. With nothing set in `spnavcfg` the two give the same motion; what
+/// the user swaps or inverts there then carries over.
 fn decode(record: &[u8; RECORD_BYTES]) -> Option<Axes> {
     let mut data = [0_i32; 8];
     for (slot, bytes) in data.iter_mut().zip(record.as_chunks::<4>().0) {
@@ -51,8 +51,8 @@ fn decode(record: &[u8; RECORD_BYTES]) -> Option<Axes> {
     }
     let [kind, x, y, z, rx, ry, rz, _period] = data;
     (kind == 0).then(|| Axes {
-        translation: [unit(x), unit(-i64::from(z)), unit(-i64::from(y))],
-        rotation: [unit(rx), unit(-i64::from(rz)), unit(-i64::from(ry))],
+        translation: [unit(x), unit(-i64::from(y)), unit(-i64::from(z))],
+        rotation: [unit(rx), unit(-i64::from(ry)), unit(-i64::from(rz))],
     })
 }
 
@@ -149,28 +149,22 @@ mod tests {
 
     #[test]
     fn motion_records_become_axes_in_the_devices_raw_frame() {
-        // Each daemon axis reaches only its matching raw HID axis, in both directions.
-        for (daemon_axis, raw_axis, sign) in [(0, 0, 1), (1, 2, -1), (2, 1, -1), (3, 3, 1), (4, 5, -1), (5, 4, -1)] {
-            for value in [-500, 500] {
-                let mut data = [0; 8];
-                data[daemon_axis + 1] = value;
-                let mut expected = [0; 6];
-                expected[raw_axis] = sign * (value * 350 / 500) as i16;
-                assert_eq!(decode(&record(data)), Some(Axes::from(expected)), "daemon axis {daemon_axis}, value {value}");
-            }
-        }
+        // Full deflection of the daemon's x, y and z is the device's full scale, and y and z flip.
+        assert_eq!(decode(&record([0, 500, 500, 500, 0, 0, 0, 8])), Some(Axes { translation: [350, -350, -350], rotation: [0; 3] }));
+        // Rotations follow translations: right-handed in both frames, so ry and rz flip as y and z do.
+        assert_eq!(decode(&record([0, 0, 0, 0, 250, 250, 250, 8])), Some(Axes { translation: [0; 3], rotation: [175, -175, -175] }));
         // Rest is a motion record of zeros.
         assert_eq!(decode(&record([0, 0, 0, 0, 0, 0, 0, 1200])), Some(Axes::default()));
     }
 
     #[test]
     fn what_spnavcfg_swaps_reaches_the_view() {
-        // A push away is daemon z (raw y); swapping Y/Z makes it a lift (raw z).
-        // The same swap changes a sideways tilt (daemon rz, raw ry) into a twist (raw rz).
-        let before = decode(&record([0, 0, 0, 500, 0, 0, 250, 8]));
-        let after = decode(&record([0, 0, 500, 0, 0, 250, 0, 8]));
-        assert_eq!(before, Some(Axes { translation: [0, -350, 0], rotation: [0, -175, 0] }));
-        assert_eq!(after, Some(Axes { translation: [0, 0, -350], rotation: [0, 0, -175] }));
+        // The daemon sends a push away as y. With Y and Z swapped in spnavcfg it sends the same push
+        // as z, and the view gets a lift (raw z) instead of the zoom (raw y).
+        let before = decode(&record([0, 0, 500, 0, 0, 0, 0, 8])).map(|axes| axes.translation);
+        let after = decode(&record([0, 0, 0, 500, 0, 0, 0, 8])).map(|axes| axes.translation);
+        assert_eq!(before, Some([0, -350, 0]));
+        assert_eq!(after, Some([0, 0, -350]));
     }
 
     #[test]
@@ -185,7 +179,7 @@ mod tests {
         // Nothing overflows on the extremes of `i32`.
         let extreme = decode(&record([0, i32::MIN, i32::MIN, i32::MAX, i32::MAX, i32::MIN, i32::MIN, -1]));
         assert_eq!(extreme.map(|axes| axes.translation[0]), Some(i16::MIN));
-        assert_eq!(extreme.map(|axes| axes.translation), Some([i16::MIN, i16::MIN, i16::MAX]));
+        assert_eq!(extreme.map(|axes| axes.translation[1]), Some(i16::MAX));
         assert_eq!(extreme.map(|axes| axes.rotation[0]), Some(i16::MAX));
     }
 

apps/solidcraft/src/startup.rs

@@ -8,9 +8,8 @@
 //!   row the next launch starts in safe mode by itself.
 //! - **Safe mode** (`--safe-mode` or `SOLIDCRAFT_SAFE_MODE=1`): default settings (the saved ones
 //!   are left untouched), no recovery offer, the software renderer and CPU meshing.
-//! - **A renderer that cannot start**: on Windows, try the remaining graphics APIs in order,
-//!   then the software renderer (`SOLIDCRAFT_RENDERER=cpu`). An explicit `WGPU_BACKEND` fails
-//!   cleanly without switching. Exhausted retries show a message box with the error.
+//! - **No usable graphics device**: one retry on the software renderer
+//!   (`SOLIDCRAFT_RENDERER=cpu`), then a message box saying what failed and what to try.
 
 use std::path::{Path, PathBuf};
 
@@ -22,25 +21,6 @@ pub const RENDERER_ENV: &str = "SOLIDCRAFT_RENDERER";
 pub const FAILED_STARTS_FOR_SAFE_MODE: u32 = 2;
 const MARKER: &str = "starting";
 
-/// Explicit application-settings isolation for side-by-side builds and native UI
-/// acceptance. A supplied invalid path refuses startup rather than falling back
-/// to the user's ordinary settings. No directory is read or created here.
-pub fn settings_directory(override_path: Option<&std::ffi::OsStr>, default: Option<PathBuf>) -> Result<Option<PathBuf>, String> {
-    match override_path {
-        None => Ok(default),
-        Some(raw) => {
-            let path = PathBuf::from(raw);
-            if raw.is_empty() || !path.is_absolute() {
-                return Err("SOLIDCRAFT_SETTINGS_DIR must be a nonempty absolute directory path".into());
-            }
-            if path.exists() && !path.is_dir() {
-                return Err("SOLIDCRAFT_SETTINGS_DIR names a file, not a directory".into());
-            }
-            Ok(Some(path))
-        }
-    }
-}
-
 /// Whether an environment value switches something on.
 pub fn env_on(v: Option<&str>) -> bool {
     v.map(str::trim).is_some_and(|v| !v.is_empty() && v != "0" && !v.eq_ignore_ascii_case("false"))
@@ -130,53 +110,6 @@ pub fn pick_cpu_adapter(adapters: &[eframe::wgpu::Adapter], surface: Option<&efr
         })
 }
 
-/// Adapter properties used to choose a card without opening a device.
-#[derive(Clone, Debug)]
-pub struct AdapterChoice {
-    pub name: String,
-    pub compatible: bool,
-}
-
-/// Choose an adapter by name. The environment override follows wgpu's case-insensitive
-/// substring convention among surface-compatible adapters. A saved preference prefers an
-/// exact (then case-insensitive) name among compatible adapters, and if the named card is
-/// only listed as incompatible with the surface still picks it (#8341: otherwise the
-/// preference is kept in the dialog while wgpu silently uses another GPU).
-/// No match leaves selection to the normal wgpu request.
-pub fn choose_adapter(adapters: &[AdapterChoice], environment: Option<&str>, preference: Option<&str>) -> Option<usize> {
-    // wgpu's environment helper panics on a missing name; an override must remain recoverable.
-    let compatible = || adapters.iter().enumerate().filter(|(_, a)| a.compatible);
-    if let Some(name) = environment.filter(|s| !s.is_empty()) {
-        let name = name.to_lowercase();
-        if let Some((index, _)) = compatible().find(|(_, a)| a.name.to_lowercase().contains(&name)) {
-            return Some(index);
-        }
-    }
-    let name = preference.filter(|s| !s.is_empty())?;
-    let find = |pred: &dyn Fn(&AdapterChoice) -> bool, only_compatible: bool| {
-        adapters.iter().enumerate().find(|(_, a)| (!only_compatible || a.compatible) && pred(a)).map(|(i, _)| i)
-    };
-    find(&|a| a.name == name, true)
-        .or_else(|| find(&|a| a.name.eq_ignore_ascii_case(name), true))
-        .or_else(|| find(&|a| a.name == name, false))
-        .or_else(|| find(&|a| a.name.eq_ignore_ascii_case(name), false))
-}
-
-/// Leave Automatic on wgpu's normal request path; named choices may defer to it too.
-pub fn configure_adapter(setup: &mut eframe::egui_wgpu::WgpuSetupCreateNew, cpu: bool, environment: Option<String>, preference: Option<String>) {
-    if cpu {
-        setup.native_adapter_selector = Some(std::sync::Arc::new(|adapters, surface| pick_cpu_adapter(adapters, surface).map(Some)));
-    } else if environment.as_deref().is_some_and(|s| !s.is_empty()) || preference.as_deref().is_some_and(|s| !s.is_empty()) {
-        setup.native_adapter_selector = Some(std::sync::Arc::new(move |adapters, surface| {
-            let choices: Vec<_> = adapters
-                .iter()
-                .map(|a| AdapterChoice { name: a.get_info().name, compatible: surface.is_none_or(|s| a.is_surface_supported(s)) })
-                .collect();
-            Ok(choose_adapter(&choices, environment.as_deref(), preference.as_deref()).and_then(|i| adapters.get(i)).cloned())
-        }));
-    }
-}
-
 /// `WGPU_BACKEND`: when set, wgpu picks the backends from it and the order below is not used.
 pub const WGPU_BACKEND_ENV: &str = "WGPU_BACKEND";
 
@@ -224,34 +157,6 @@ pub fn choose_backends(
     Some(WINDOWS_ORDER.into_iter().find(|b| has_hardware(*b)).unwrap_or(Backends::DX12))
 }
 
-/// Internal, process-local retry choice; never written to the graphics preference.
-pub const RETRY_BACKEND_ENV: &str = "SOLIDCRAFT_STARTUP_BACKEND";
-/// Why this launch is using a fallback, carried to the new process for status and Preferences.
-pub const FALLBACK_NOTE_ENV: &str = "SOLIDCRAFT_GRAPHICS_FALLBACK";
-
-/// A handled startup failure tries each remaining Windows API once, then software rendering.
-/// An explicit environment choice is final, including when software rendering was requested.
-pub fn fallback_backend(windows: bool, explicit: bool, cpu: bool, failed: eframe::wgpu::Backends) -> Option<&'static str> {
-    if explicit || cpu {
-        return None;
-    }
-    if windows {
-        let last = WINDOWS_ORDER.iter().rposition(|backend| failed.intersects(*backend));
-        if let Some(next) = last.and_then(|i| WINDOWS_ORDER.get(i + 1)) {
-            return Some(if *next == eframe::wgpu::Backends::VULKAN { "vulkan" } else { "gl" });
-        }
-    }
-    Some("cpu")
-}
-
-/// Keep driver diagnostics on one bounded line, including across the finite retry chain.
-pub fn fallback_note(previous: &str, failed: eframe::wgpu::Backends, next: &str, error: &str) -> String {
-    let previous: String = previous.chars().take(2048).collect();
-    let error: String = error.chars().take(1024).collect();
-    let line = format!("{previous} Graphics fallback: {failed:?} failed ({error}); trying {next}.");
-    line.split_whitespace().collect::<Vec<_>>().join(" ").chars().take(4096).collect()
-}
-
 /// The device feature for a 32-bit float depth buffer with a stencil (reversed depth, #1434).
 pub const FLOAT_DEPTH_STENCIL: eframe::wgpu::Features = eframe::wgpu::Features::DEPTH32FLOAT_STENCIL8;
 
@@ -260,7 +165,7 @@ pub const FLOAT_DEPTH_STENCIL: eframe::wgpu::Features = eframe::wgpu::Features::
 /// asks for a float one only when whichever it picks has it.
 pub fn float_depth_everywhere(options: &eframe::egui_wgpu::WgpuConfiguration) -> bool {
     let eframe::egui_wgpu::WgpuSetup::CreateNew(setup) = &options.wgpu_setup else { return false };
-    let mut desc = solidcraft_gpu::instance_descriptor_from_env();
+    let mut desc = eframe::wgpu::InstanceDescriptor::new_without_display_handle_from_env();
     desc.backends = setup.instance_descriptor.backends;
     let instance = eframe::wgpu::Instance::new(desc);
     let adapters = pollster::block_on(instance.enumerate_adapters(setup.instance_descriptor.backends));
@@ -277,7 +182,6 @@ pub fn has_hardware_adapter(backends: eframe::wgpu::Backends) -> bool {
     let mut desc = eframe::wgpu::InstanceDescriptor::new_without_display_handle();
     desc.backends = backends;
     desc.flags = eframe::wgpu::InstanceFlags::from_build_config().with_env();
-    desc.backend_options.dx12.shader_compiler = solidcraft_gpu::dx12_compiler();
     let instance = eframe::wgpu::Instance::new(desc);
     let adapters = pollster::block_on(instance.enumerate_adapters(backends));
     let found: Vec<String> = adapters.iter().map(|a| format!("{} ({:?})", a.get_info().name, a.get_info().device_type)).collect();
@@ -285,107 +189,6 @@ pub fn has_hardware_adapter(backends: eframe::wgpu::Backends) -> bool {
     adapters.iter().any(|a| a.get_info().device_type != eframe::wgpu::DeviceType::Cpu)
 }
 
-/// The environment variable that switches wgpu's indirect-call validation on or off.
-pub const INDIRECT_VALIDATION_ENV: &str = "WGPU_VALIDATION_INDIRECT_CALL";
-
-/// The instance flags for the window. wgpu's indirect-call validation compiles a compute shader
-/// when the device is created, and on Intel Macs (macOS 12 with Intel Iris graphics, #3024,
-/// #3080, #4605) the Metal compiler refuses it: the device is lost and the window never opens.
-/// So on an Intel Mac the validation is left off, unless the user turned it on or off with
-/// `WGPU_VALIDATION_INDIRECT_CALL` themselves.
-pub fn window_instance_flags(flags: eframe::wgpu::InstanceFlags, intel_mac: bool, env: Option<&str>) -> eframe::wgpu::InstanceFlags {
-    if intel_mac && env.map(str::trim).is_none_or(str::is_empty) { flags - eframe::wgpu::InstanceFlags::VALIDATION_INDIRECT_CALL } else { flags }
-}
-
-/// The environment variable that makes the macOS compatibility shim report an older OS
-/// version to wgpu's Metal backend. On OCLP-patched machines the Metal compiler accepts
-/// only up to the MSL standard of the original GPU, not the one the patched OS reports,
-/// so wgpu picks a standard that the compiler refuses (`invalid value 'metal3.2'`).
-/// Setting this variable before the process starts causes the OS to report the older
-/// version and wgpu selects a supported MSL standard (#3080, #4605).
-#[cfg(target_os = "macos")]
-pub const SYSTEM_VERSION_COMPAT_ENV: &str = "SYSTEM_VERSION_COMPAT";
-
-/// The NVRAM variable that OpenCore Legacy Patcher writes on every OCLP-booted system.
-/// Its presence is the primary signal that `SYSTEM_VERSION_COMPAT=1` is needed.
-#[cfg(target_os = "macos")]
-pub const OCLP_NVRAM_KEY: &str = "4D1FDA02-38C7-4A6A-9CC6-4BCCA8B30102:OCLP-Version";
-
-/// Where macOS keeps its `nvram` tool.
-#[cfg(target_os = "macos")]
-const NVRAM_TOOL: &str = "/usr/sbin/nvram";
-
-/// `true` if the OCLP NVRAM key is present on this system.
-///
-/// Runs `/usr/sbin/nvram <key>` and treats exit 0 as present. The full path keeps a `PATH` that
-/// lacks `/usr/sbin`, or lists a look-alike first, from changing the answer. Any error (missing
-/// binary, permission denied, key absent) returns `false`: this is a best-effort probe.
-#[cfg(target_os = "macos")]
-pub fn oclp_nvram_present() -> bool {
-    std::process::Command::new(NVRAM_TOOL).arg(OCLP_NVRAM_KEY).output().map(|o| o.status.success()).unwrap_or(false)
-}
-
-/// Whether to re-launch with `SYSTEM_VERSION_COMPAT=1`: it is not set yet and OCLP shows through
-/// the NVRAM key. The probe runs only when it is needed, so a re-launched process (variable
-/// set) never starts `nvram`.
-#[cfg(target_os = "macos")]
-fn compat_wanted(compat_set: bool, nvram: impl FnOnce() -> bool) -> bool {
-    !compat_set && nvram()
-}
-
-/// If this process is running under OCLP and `SYSTEM_VERSION_COMPAT` has not been set,
-/// re-launch the current binary with `SYSTEM_VERSION_COMPAT=1` added to the environment,
-/// then exit with the child's status code.
-///
-/// `SYSTEM_VERSION_COMPAT=1` must be present **before** the process starts: setting it
-/// with `std::env::set_var` inside `main` is too late because the macOS frameworks have
-/// already queried the OS version by then, so the program starts itself again with the variable
-/// set and waits for that child.
-///
-/// Returns `Ok(false)` immediately when:
-/// - `SYSTEM_VERSION_COMPAT` is already set (re-launched process, no loop), or
-/// - the OCLP NVRAM key is absent.
-///
-/// Returns `Err` only when `std::env::current_exe()` fails or the child process cannot
-/// be spawned; the caller should log the error and continue normally.
-///
-/// Never returns `Ok(true)`: a successful re-launch exits the current process.
-#[cfg(target_os = "macos")]
-pub fn relaunch_with_version_compat() -> Result<bool, String> {
-    // A set variable means this is the re-launched process: no loop.
-    if !compat_wanted(std::env::var_os(SYSTEM_VERSION_COMPAT_ENV).is_some(), oclp_nvram_present) {
-        return Ok(false);
-    }
-    log::info!("startup: OCLP detected; re-launching with {}=1", SYSTEM_VERSION_COMPAT_ENV);
-    solidcraft_engine::note!("SolidCraft: OCLP detected; re-launching with {}=1", SYSTEM_VERSION_COMPAT_ENV);
-    let exe = std::env::current_exe().map_err(|e| format!("could not find own executable: {e}"))?;
-    let status = std::process::Command::new(&exe)
-        .args(std::env::args_os().skip(1))
-        .env(SYSTEM_VERSION_COMPAT_ENV, "1")
-        .status()
-        .map_err(|e| format!("could not re-launch with {}: {e}", SYSTEM_VERSION_COMPAT_ENV))?;
-    std::process::exit(status.code().unwrap_or(1));
-}
-
-/// Windows with OpenGL: the window keeps the system title bar (#2063). The window without OS
-/// decorations keeps its caption style while having no frame, and some OpenGL drivers (older
-/// Intel HD/UHD) then show the picture a caption's height lower than the window, so it no longer
-/// lines up with the pointer. Direct3D 12 and Vulkan draw it in place and keep the application bar
-/// as the title bar. `backends` are the ones wgpu starts: OpenGL alone is decided before the
-/// window opens.
-pub fn system_title_bar(windows: bool, backends: eframe::wgpu::Backends) -> bool {
-    use eframe::wgpu::Backends;
-    windows && backends.contains(Backends::GL) && !backends.intersects(Backends::DX12 | Backends::VULKAN)
-}
-
-/// The `--max-file-size` value (#4086): a size such as `2GB` or `1500MB`, at most 16 GB. It raises
-/// the largest STEP/import and design file this run reads, over the saved preference, without
-/// saving anything. A missing or bad value stops the start with this error.
-pub fn max_file_size(value: Option<&str>) -> Result<u64, String> {
-    let value = value.ok_or("--max-file-size needs a size, for example --max-file-size 2GB")?;
-    solidcraft_engine::io::limits::parse_flag(value).map_err(|e| format!("--max-file-size: {e}"))
-}
-
 /// The message shown when no window could be opened at all.
 pub fn no_window_message(error: &str, settings: Option<&Path>) -> String {
     let folder = settings.map(|d| d.display().to_string()).unwrap_or_else(|| "the SolidCraft settings folder".into());
@@ -404,68 +207,6 @@ pub fn no_window_message(error: &str, settings: Option<&Path>) -> String {
 mod tests {
     use super::*;
 
-    fn cards() -> Vec<AdapterChoice> {
-        ["Integrated", "Discrete small", "Discrete large"].into_iter().map(|name| AdapterChoice { name: name.into(), compatible: true }).collect()
-    }
-
-    #[test]
-    fn max_file_size_parses_sizes_and_refuses_bad_ones() {
-        assert_eq!(max_file_size(Some("2GB")), Ok(2 << 30));
-        assert_eq!(max_file_size(Some("1500MB")), Ok(1500 << 20));
-        for bad in [None, Some(""), Some("2"), Some("17GB"), Some("lots"), Some("-1GB")] {
-            let error = max_file_size(bad).unwrap_err();
-            assert!(error.contains("--max-file-size"), "{bad:?}: {error}");
-        }
-    }
-
-    #[test]
-    fn adapter_names_environment_override_and_missing_card_fallback() {
-        let cards = cards();
-        assert_eq!(choose_adapter(&cards, None, Some("Discrete small")), Some(1));
-        assert_eq!(choose_adapter(&cards, Some("LARGE"), Some("Discrete small")), Some(2));
-        assert_eq!(choose_adapter(&cards, None, Some("removed")), None);
-        assert_eq!(choose_adapter(&cards, Some("missing"), Some("Discrete small")), Some(1));
-        assert_eq!(choose_adapter(&cards, Some(""), Some("Discrete small")), Some(1));
-        assert_eq!(choose_adapter(&cards, None, Some("discrete small")), Some(1), "preference matches without regard to case");
-        assert_eq!(choose_adapter(&cards, None, Some("Discrete")), None, "a preference is the full name, not a substring");
-    }
-
-    #[test]
-    fn automatic_adapter_leaves_selection_to_wgpu() {
-        let mut cards = cards();
-        assert_eq!(choose_adapter(&cards, None, None), None);
-        assert_eq!(choose_adapter(&cards, Some(""), Some("")), None);
-        cards[2].compatible = false;
-        // Environment still needs a compatible adapter; a preference keeps the named card (#8341).
-        assert_eq!(choose_adapter(&cards, Some("large"), Some("Discrete large")), Some(2));
-        assert_eq!(choose_adapter(&cards, Some("small"), None), Some(1));
-        assert_eq!(choose_adapter(&[], None, None), None);
-    }
-
-    #[test]
-    fn preference_keeps_a_named_card_even_when_surface_says_incompatible() {
-        let mut cards = cards();
-        cards[1].compatible = false;
-        assert_eq!(choose_adapter(&cards, None, Some("Discrete small")), Some(1));
-        assert_eq!(choose_adapter(&cards, None, Some("discrete SMALL")), Some(1));
-    }
-
-    #[test]
-    fn automatic_adapter_preserves_the_previous_request_configuration() {
-        use eframe::egui_wgpu::WgpuSetupCreateNew;
-        let previous = WgpuSetupCreateNew::without_display_handle();
-        for preference in [None, Some(String::new())] {
-            let mut setup = WgpuSetupCreateNew::without_display_handle();
-            configure_adapter(&mut setup, false, None, preference);
-            assert!(setup.native_adapter_selector.is_none(), "Automatic must use the normal wgpu request");
-            assert_eq!(setup.power_preference, previous.power_preference);
-            assert_eq!(setup.instance_descriptor.backends, previous.instance_descriptor.backends);
-        }
-        let mut setup = WgpuSetupCreateNew::without_display_handle();
-        configure_adapter(&mut setup, false, Some("missing".into()), Some("removed".into()));
-        assert!(setup.native_adapter_selector.unwrap()(&[], None).unwrap().is_none(), "missing names must use the normal request too");
-    }
-
     fn scratch(name: &str) -> PathBuf {
         let d = std::env::temp_dir().join(format!("solidcraft-startup-{name}-{}", std::process::id()));
         let _ = std::fs::remove_dir_all(&d);
@@ -473,53 +214,6 @@ mod tests {
         d
     }
 
-    #[test]
-    fn isolated_settings_are_explicit_absolute_and_never_fall_back() {
-        let default = std::env::temp_dir().join("ordinary-settings");
-        assert_eq!(settings_directory(None, Some(default.clone())).unwrap(), Some(default.clone()));
-        let selected = std::env::temp_dir().join("solidcraft-isolated-settings-fixture");
-        assert_eq!(settings_directory(Some(selected.as_os_str()), Some(default.clone())).unwrap(), Some(selected));
-        for raw in ["", "relative/settings", "../ordinary"] {
-            assert!(settings_directory(Some(std::ffi::OsStr::new(raw)), Some(default.clone())).is_err());
-        }
-        let file = std::env::current_exe().unwrap();
-        assert!(settings_directory(Some(file.as_os_str()), Some(default)).is_err());
-    }
-
-    #[test]
-    fn intel_macs_start_without_indirect_call_validation() {
-        use eframe::wgpu::InstanceFlags as F;
-        let on = F::VALIDATION | F::VALIDATION_INDIRECT_CALL;
-        assert_eq!(window_instance_flags(on, true, None), F::VALIDATION);
-        assert_eq!(window_instance_flags(on, true, Some("  ")), F::VALIDATION);
-        // The user's own choice stands, on or off.
-        assert_eq!(window_instance_flags(on, true, Some("1")), on);
-        assert_eq!(window_instance_flags(F::VALIDATION, true, Some("0")), F::VALIDATION);
-        // Every other machine keeps what it had.
-        assert_eq!(window_instance_flags(on, false, None), on);
-    }
-
-    #[cfg(target_os = "macos")]
-    #[test]
-    fn oclp_relaunch_needs_the_signal_and_no_compat_variable() {
-        use super::compat_wanted;
-        let probed = std::cell::Cell::new(false);
-        let probe = |found: bool| {
-            let probed = &probed;
-            move || {
-                probed.set(true);
-                found
-            }
-        };
-        // The re-launched process has the variable: no probe, no second re-launch.
-        assert!(!compat_wanted(true, probe(true)));
-        assert!(!probed.get());
-        // The OCLP NVRAM key is the signal.
-        assert!(compat_wanted(false, probe(true)));
-        // No signal: an ordinary Mac starts as it is.
-        assert!(!compat_wanted(false, probe(false)));
-    }
-
     #[test]
     fn switches_read_from_the_environment() {
         assert!(env_on(Some("1")) && env_on(Some("yes")) && !env_on(Some("0")) && !env_on(Some(" ")) && !env_on(None) && !env_on(Some("false")));
@@ -596,54 +290,6 @@ mod tests {
         assert_eq!(choose_backends(true, false, false, Some(""), probe(&[Backends::GL])), Some(Backends::GL));
     }
 
-    #[test]
-    fn failed_windows_backends_fall_back_in_order_and_stop_after_software() {
-        use eframe::wgpu::Backends as B;
-        assert_eq!(fallback_backend(true, false, false, B::DX12), Some("vulkan"));
-        assert_eq!(fallback_backend(true, false, false, B::VULKAN), Some("gl"));
-        assert_eq!(fallback_backend(true, false, false, B::GL), Some("cpu"));
-        assert_eq!(fallback_backend(true, false, true, B::DX12), None);
-        assert_eq!(fallback_backend(true, false, false, B::DX12 | B::VULKAN), Some("gl"));
-        assert_eq!(fallback_backend(false, false, false, B::VULKAN), Some("cpu"));
-        let note = fallback_note("", B::DX12, "vulkan", "egui_pipeline\n0x80070057");
-        assert!(note.contains("egui_pipeline 0x80070057") && note.contains("vulkan") && !note.contains('\n'));
-        let long = fallback_note(&"x".repeat(5000), B::VULKAN, "gl", &"y".repeat(5000));
-        assert!(long.chars().count() <= 4096 && long.ends_with("trying gl."));
-    }
-
-    #[test]
-    fn explicit_backend_failure_never_switches_api_or_retries_software() {
-        use eframe::wgpu::Backends as B;
-        for windows in [false, true] {
-            for cpu in [false, true] {
-                for backend in [B::DX12, B::VULKAN, B::GL, B::all()] {
-                    assert_eq!(fallback_backend(windows, true, cpu, backend), None);
-                    let mut probed = false;
-                    assert_eq!(
-                        choose_backends(windows, true, cpu, Some("vulkan"), |_| {
-                            probed = true;
-                            false
-                        }),
-                        None
-                    );
-                    assert!(!probed);
-                }
-            }
-        }
-    }
-
-    #[test]
-    fn only_opengl_on_windows_gets_the_system_title_bar() {
-        use eframe::wgpu::Backends;
-        assert!(system_title_bar(true, Backends::GL));
-        for b in [Backends::DX12, Backends::VULKAN, Backends::DX12 | Backends::GL, Backends::VULKAN | Backends::GL, Backends::all()] {
-            assert!(!system_title_bar(true, b), "{b:?}");
-        }
-        for b in [Backends::GL, Backends::VULKAN, Backends::METAL] {
-            assert!(!system_title_bar(false, b), "{b:?}");
-        }
-    }
-
     #[test]
     fn wgpu_backend_the_preference_and_the_software_renderer_override_the_order() {
         use eframe::wgpu::Backends;
@@ -668,16 +314,9 @@ mod tests {
 
     #[test]
     fn probing_a_backend_alone_never_panics() {
-        // Whatever this machine has (often nothing): an answer, not a crash. On Windows the probe
-        // goes the way the app's does, stopping at the first backend with a GPU: a machine with
-        // D3D12 never loads its OpenGL driver into the test process, and AMD's (`atio6axx.dll`)
-        // aborted the process as it exited (#1156).
-        if cfg!(target_os = "windows") {
-            let _ = choose_backends(true, false, false, None, has_hardware_adapter);
-        } else {
-            for b in WINDOWS_ORDER {
-                let _ = has_hardware_adapter(b);
-            }
+        // Whatever this machine has (often nothing): an answer, not a crash.
+        for b in WINDOWS_ORDER {
+            let _ = has_hardware_adapter(b);
         }
     }
 
@@ -690,18 +329,8 @@ mod tests {
     #[test]
     fn the_software_adapter_is_preferred_and_its_absence_is_an_error_not_a_panic() {
         assert!(pick_cpu_adapter(&[], None).unwrap_err().contains("none"));
-        // The adapters the software renderer chooses among: it starts D3D12 alone on Windows
-        // (WARP), not every backend, so the test doesn't load the OpenGL driver either (#1156).
-        let options = crate::wgpu_options(true, None);
-        let eframe::egui_wgpu::WgpuSetup::CreateNew(setup) = &options.wgpu_setup else { panic!("the software renderer makes its own device") };
-        let backends = setup.instance_descriptor.backends;
-        if cfg!(target_os = "windows") && std::env::var_os(WGPU_BACKEND_ENV).is_none() {
-            assert_eq!(backends, eframe::wgpu::Backends::DX12);
-        }
-        let mut desc = solidcraft_gpu::instance_descriptor_from_env();
-        desc.backends = backends;
-        let instance = eframe::wgpu::Instance::new(desc);
-        let adapters = pollster::block_on(instance.enumerate_adapters(backends));
+        let instance = eframe::wgpu::Instance::new(eframe::wgpu::InstanceDescriptor::new_without_display_handle());
+        let adapters = pollster::block_on(instance.enumerate_adapters(eframe::wgpu::Backends::all()));
         if adapters.is_empty() {
             return;
         }

assets/README.md

@@ -17,15 +17,14 @@ assets/
     ui/design/tools/                 # authoring bases, checks and included review app
     ui/source/                       # Rust viewport glyphs, markers and navigation
   branding/web/source/og.png          # shared social preview card
-  branding/logo/                     # print/web logo files; guide in branding/README.md
+  styles/ui/palettes.rs               # light/dark defaults
   styles/web/loading.css             # web loading/canvas styles
   appearances/library.rs             # built-in visual presets
   materials/library.rs               # physical defaults and colours
   shaders/viewport.wgsl               # original viewport shader
-  fonts/biz-udp-gothic/              # unmodified font and OFL licence
+  fonts/{liberation-sans,biz-udp-gothic}/ # unmodified fonts and OFL licences
   locales/{en,de,ja,ko}.json          # shared offline catalogs
   platforms/{macos,linux,windows}/    # bundle, freedesktop and WiX templates
-  platforms/macos/dmg/                # disk image window: layout, dmgbuild settings, background art
   archive/icons/macos-v1/
     source/icon.vectorcraft          # earlier editable work, retained
                                      # redundant historical exports are retired
@@ -76,7 +75,7 @@ The CLI still supports arbitrary PNG/ICO exports with `solidcraft-cli icon`.
 | macOS | Composer master and paired exports; bundle installs `Assets.car` and `SolidCraft.icns` |
 | Windows executable | `solidcraft-executable.ico`: original DIB/mask representations at 16/24/32/48/64/128/256 px |
 | Windows installer | `solidcraft.ico`: PNG representations at 16/20/24/32/40/48/64/128/256 px; `SOLIDCRAFT_ICONS` override retained |
-| Linux, Nix, deb/rpm, tar, Flatpak, Snap | Copy canonical hicolor images; icon name stays `io.tangencylabs.solidcraft` |
+| Linux, Nix, deb/rpm, tar, Flatpak, Snap | Copy canonical hicolor images; icon name stays `ai.storyteller.solidcraft` |
 | AppImage | Uses the Linux 256 px image and `.DirIcon` alias |
 | FreeBSD | Shares Linux hicolor images and freedesktop metadata |
 | Web | HTML/Trunk and `manifest.webmanifest` stay in `apps/solidcraft-web/`; copies Japanese font/licence to `fonts/`, uses the collected CSS, and copies the Linux 32/256/512 px images to `icons/` for the favicon and installed app |
@@ -86,9 +85,7 @@ The CLI still supports arbitrary PNG/ICO exports with `solidcraft-cli icon`.
 
 Resources remain compiled by their owning layer through existing APIs:
 `ui-egui::icons::paint_icon` and `Tokens` at L5, model presets in L2 `doc`, and sketch
-fonts at L1. The sketch crate owns its built-in Liberation Sans font and OFL
-licence under `crates/sketch/assets/fonts/liberation-sans/`, so Cargo source
-packages and vendored builds include both files. State, projection, interaction, commands and GPU bindings stay in
+fonts at L1. State, projection, interaction, commands and GPU bindings stay in
 their current modules. Embedded data uses `CARGO_MANIFEST_DIR`; application code
 needs no runtime resource registry or repository lookup.
 

assets/appearances/library.rs

@@ -1,5 +1,5 @@
 //! Built-in model appearances: names, sRGB colours and metalness.
-pub const LIBRARY: &[(&str, [u8; 3], f64)] = &[
+pub const LIBRARY: [(&str, [u8; 3], f64); 20] = [
     ("Aluminum - Satin", [204, 208, 214], 1.0),
     ("Aluminum - Anodized Black", [44, 46, 50], 1.0),
     ("Aluminum - Anodized Blue", [52, 92, 160], 1.0),