code wiki / (root) / nx_game_page_authored_material_t54.nx
`nx_game_page_authored_material_t54.nx` source

↩ module page · 1812 lines · 262144 B
1// nx_game_page_emit.nx -- the SOVEREIGN game-page emitter. Until now the browser page for a wasm
2// game was assembled by printf blocks in _ops/nx_emit_game.sh -- real emission logic living in
3// SHELL, against the doctrine (shell only LAUNCHES sovereign ELFs). This organ owns it: reads the
4// .wasm, base64-encodes it (composes nx_base64 -- one encoder, not a coreutils dependency), and
5// emits the complete self-contained page (marker, shim, input forwarding, persistence bytes-mover).
6// usage: nx_game_page_emit <wasm> <out.html> <title> <native-client-name> <controls-html>
7//
8// RECOVERED 2026-08-02 from buildroot/_build/nx_craft_emit.s (the 14:07 build's data section)
9// after a failed in-place rewrite TRUNCATED this file to 0 bytes and the damage was copied to
10// both trees. Every emitted chunk below is the exact byte sequence that build shipped, so the
11// recovered emitter is byte-equivalent to the last one that passed both gates.
12// license_tier: ORIGINAL
13import "nx_syscalls.nx"
14import "nx_base64.nx"
15import "nx_game_page_artifact_lib.nx"
16import "nx_game_shader_backend_lib.nx"
17import "nx_game_asset_prepare_emit.nx"
18import "nx_gpu_choice_workspace_t48.nx"
19import "nx_site_chrome_composable_t48.nx"
20// the ONE ruler for "does this module's framebuffer fit the memory it declares". This emitter used to
21// own that arithmetic; it now composes it, so the 16 shipped pages that never reach gpe_build_s can be
22// held to the same bound by the same code rather than by a second copy of it.
23import "nx_wasmfit.nx"
24import "nx_hairdyn_lib.nx"
25import "nx_audio_osc.nx"
26import "nx_atmosphere.nx"
27import "nx_glprobe_lib.nx"
28import "nx_tool_run.nx"      // GP2 rk_webgpu_door: the kernel WGSL is CAPTURED from ./nx_wgsl.elf at emit time, never hand-written here
29import "nx_genp_allow_lib.nx"     // THE ONE gen-time recipe allowlist (2026-09-04): the NXGP count and write passes compose it -- the engine and nx_world_snap read the same ruler
30import "nx_release_view_emit.nx"
31import "nx_release_recent_lib.nx"  // GE52 gpe_release_block: the release delta (accept- + referee- planes, board land rows) rendered at every emit; pure, gated by nx_release_delta_gate
32import "nx_tier_ladder_lib.nx"   // GP3/GE45 rk_tier_ladder: the render-door ladder is DATA (knowledge/tier_ladder.conf) -- emitted as window.__nx_ladder + nxDoorReport, walked natively by tl_pick, pinned by nx_tier_ladder_gate
33// GP3 / GE45 WATCH SYMBOL: the render-door ladder reaches every world page through this ONE door. It composes
34// tl_emit() (knowledge/tier_ladder.conf -> window.__nx_ladder + nxDoorId/nxDoor/nxDoorReport) and nothing else,
35// so the board's rk_tier_ladder cell flips on the same bytes nx_tier_ladder_gate pins.
36func rk_tier_ladder() -> *u8 { return tl_emit() }
37
38// ---- GE30 THE THREADED BOOT --------------------------------------------------------------------
39// A caller DECLARES a threaded twin by setting gpe_mt_pages/gpe_mt_max before calling the builder;
40// nx_craft_emit does it after its stage 3c has actually built and deployed one. ZERO means no
41// threading code is emitted at all and the page is byte-identical to the single-thread page it has
42// always been, so every other caller of this emitter is untouched BY CONSTRUCTION rather than by
43// review. The numbers are not the page's to invent: they must equal the twin's declared memory
44// import exactly or instantiation fails, so they travel from the organ that derived them.
45static gpe_mt_pages: i64
46static gpe_mt_max: i64
47
48// The Worker body, as a STRING the page turns into a blob URL. It is deliberately tiny: it holds no
49// game logic, only instantiate-and-render-a-band, because the JS/HTML-interop law is that values
50// cross the boundary and logic does not. Every rule it obeys lives in the wasm both sides share.
51const GPE_MT_WSRC: *u8 = "const NXMT_WSRC=\"let ex=null;onmessage=async(e)=>{const d=e.data;try{if(d.t==='init'){const i=await WebAssembly.instantiate(d.mod,{env:{memory:d.mem}});ex=i.exports;postMessage({t:'ready'});}else if(d.t==='band'){ex.render_band(BigInt(d.y0),BigInt(d.y1),BigInt(d.wid));postMessage({t:'band'});}}catch(err){postMessage({t:'err',m:String(err)});}};\";\n"
52
53func gpe_mt_boot(out: *u8, p0: i64) -> i64 {
54    var p: i64 = p0
55    p = gpe_ap(out, p, "// Shared by threaded and unthreaded doors; emit even when no twin exists.\nlet nxResidentStageHolds=0;\nlet nxResidentFailedWorkerEngine=null;\n// This owner is ONLY the resident cast loader. Independent visitor slots must\n// use separate owner objects and separate native banks before sharing this helper.\nconst nxResidentOwner={epoch:0};\nfunction nxResidentToken(owner=nxResidentOwner){return {owner,epoch:++owner.epoch,engine:ex};}\nfunction nxResidentCurrent(token){return token.epoch===token.owner.epoch&&token.engine===ex;}\nasync function nxResidentStage(token,operation){\n if(!nxResidentCurrent(token))throw Error('resident-stage-stale-asset');\n if(nxResidentFailedWorkerEngine===token.engine)throw Error('resident-stage-worker-failed-unjoined');\n nxResidentStageHolds++;\n try{\n  const workerOwner=NXMT;\n  if(workerOwner&&workerOwner.busy){\n   if(!workerOwner.pending)throw Error('resident-stage-worker-join-unavailable');\n   await workerOwner.pending;\n  }\n  if(!nxResidentCurrent(token))throw Error('resident-stage-stale-asset');\n  if(nxResidentFailedWorkerEngine===token.engine)throw Error('resident-stage-worker-failed-unjoined');\n  if(workerOwner&&NXMT!==workerOwner)throw Error('resident-stage-worker-owner-lost');\n  // operation is internal and synchronous: stage/admit/grow/reacquire/bind.\n  // No texture decode, network await or user callback belongs in this section.\n  const result=operation();\n  if(result&&typeof result.then==='function'){\n   // Misuse cannot release the shared region while async work still runs.\n   // Wait for settlement, then refuse; this does not roll back its side effects.\n   let failure;\n   try{await result;}catch(error){failure=error;}\n   const refusal=Error('resident-stage-async-operation');refusal.cause=failure;throw refusal;\n  }\n  return result;\n }finally{nxResidentStageHolds--;}\n}\nfunction nxResidentBind(token,bytes,hasMorf,clipCode){\n const result={state:'unavailable',token:token.epoch,clipCode:clipCode};\n if(clipCode!==0){result.reason='clip-not-admitted';return result;}\n if(!hasMorf){result.state='absent';return result;}\n const engine=token.engine;\n for(const name of ['morf_stage_off','morf_stage_cap','morf_pages','morf_bind','morf_current']){\n  if(typeof engine[name]!=='function'){result.reason='missing-export:'+name;return result;}\n }\n try{\n  const offset=Number(engine.morf_stage_off()),capacity=Number(engine.morf_stage_cap());\n  if(!Number.isSafeInteger(offset)||offset<0||!Number.isSafeInteger(capacity)||capacity<bytes.byteLength||offset>engine.memory.buffer.byteLength-bytes.byteLength)throw Error('resident-stage-capacity');\n  new Uint8Array(engine.memory.buffer,offset,bytes.byteLength).set(bytes);\n  const pages=Number(engine.morf_pages(BigInt(bytes.byteLength)));\n  if(!Number.isSafeInteger(pages)||pages<=0)throw Error('resident-admit:'+pages);\n  const before=engine.memory.buffer.byteLength/65536;\n  if(pages>before)engine.memory.grow(pages-before);\n  const code=Number(engine.morf_bind(BigInt(bytes.byteLength),BigInt(engine.memory.buffer.byteLength),BigInt(token.epoch)));\n  if(code!==0)throw Error('resident-bind:'+code);\n  result.state='admitted';result.pages=engine.memory.buffer.byteLength/65536;result.grew=result.pages-before;\n }catch(error){result.state='refused';result.reason=String(error);}\n return result;\n}\n" as *u8)
56    if gpe_mt_pages < 1 {
57        // NAMED ABSENCE, never a silent one: a page with no twin still publishes why, so a probe
58        // reading window.__nx_mt cannot confuse "this build has no twin" with "threading failed".
59        p = gpe_ap(out, p, "let NXMT=null;\nwindow.__nx_mt={n:1,shared:false,why:\"no-twin-built\"};\n" as *u8)
60        return p
61    }
62    p = gpe_ap(out, p, GPE_MT_WSRC)
63    p = gpe_ap(out, p, "let NXMT=null;\nconst NXMT_URL=\"/releases/craft-mt-6eafaa5bdaff98696a1c5252841ef3ac05651f153c5560c0a1df3aa141536107.wasm\";\nconst NXMT_PAGES=" as *u8)
64    p = gpe_num(out, p, gpe_mt_pages)
65    p = gpe_ap(out, p, ";\nconst NXMT_MAX=" as *u8)
66    p = gpe_num(out, p, gpe_mt_max)
67    // ★EVERY WORKER IS INSTANTIATED BEFORE THE FIRST init(). Each instantiation rewrites the module's
68    // data segments into the SHARED memory, so a Worker created mid-session would clobber live state.
69    // ★AND THE MAIN THREAD SWITCHES TO THE TWIN TOO. The inlined build owns a PRIVATE memory; if only
70    // the Workers held the twin, the bands would land in the shared memory while render_overlay,
71    // fb_digest and the blit all read the private one -- an empty frame with every check passing.
72    p = gpe_ap(out, p, ";\nif(self.crossOriginIsolated===true&&typeof SharedArrayBuffer!==\"undefined\"&&nxThreads()>1){\nconst _ws=[];let _wu=null;\ntry{\nconst _n=nxThreads();\nconst _rs=await fetch(NXMT_URL);\nif(_rs.ok!==true)throw new Error(\"twin-http-\"+_rs.status);\nconst _bf=await _rs.arrayBuffer();\nconst _mm=new WebAssembly.Memory({initial:NXMT_PAGES,maximum:NXMT_MAX,shared:true});\nif((_mm.buffer instanceof SharedArrayBuffer)!==true)throw new Error(\"memory-not-shared\");\nconst _md=await WebAssembly.compile(_bf);\nconst _in=await WebAssembly.instantiate(_md,{env:{memory:_mm}});\nlet _dataInit=\"legacy-active\";\nif(typeof _in.exports._nx_data_init===\"function\"){const _state=_in.exports._nx_data_init();if(_state!==2n)throw new Error(\"shared-data-not-ready-state-\"+String(_state));_dataInit=\"owned-ready\";}\n_wu=URL.createObjectURL(new Blob([NXMT_WSRC],{type:\"text/javascript\"}));\nfor(let _i=0;_i<_n;_i++)_ws.push(new Worker(_wu));\nawait Promise.all(_ws.map((w,i)=>new Promise((res,rej)=>{w.onmessage=e=>{if(e.data&&e.data.t===\"ready\")res();else rej(new Error(\"worker-init-\"+i));};w.onerror=rej;w.postMessage({t:\"init\",mod:_md,mem:_mm,wid:i});})));\nex=_in.exports;\nnxIdentitySelect(_bf,\"shared\");\nNXMT={n:_n,ws:_ws,rows:0,busy:false};\nwindow.__nx_mt={n:_n,shared:true,pages:NXMT_PAGES,url:NXMT_URL,dataInitialization:_dataInit};\n}catch(_e){nxMtStop(_ws);NXMT=null;window.__nx_mt={n:1,shared:false,why:\"threaded-boot-failed: \"+String(_e)};}finally{if(_wu!==null)URL.revokeObjectURL(_wu);}\n}else{window.__nx_mt={n:1,shared:false,why:nxThreadsWhy()};}\n" as *u8)
73    // The banded draw. A Worker join is ASYNCHRONOUS and the frame loop is synchronous, so the frame
74    // completes out of band and a busy flag drops frames rather than queueing them -- rAF will call
75    // again. render_overlay runs ONCE on the main thread after the join, because the mobs, the depth
76    // strip and the HUD are whole-frame passes that no band owns. Any worker failure demotes the page
77    // to one thread PERMANENTLY and says so: a threading fault must never cost a visitor the world.
78    p = gpe_ap(out, p, "function nxMtStop(ws){\nfor(const w of ws){w.onmessage=null;w.onerror=null;w.terminate();}\nws.length=0;\n}\nfunction nxMtDraw(_t0){\nconst owner=NXMT;if(owner===null||owner.busy||nxResidentStageHolds>0)return;\nconst engine=ex;\nowner.busy=true;\nif(owner.rows<1)owner.rows=Number(ex.render_rows());\nconst h=owner.rows,n=owner.n,per=Math.ceil(h/n),js=[];\nfor(let i=0;i<n;i++){const y0=i*per,y1=Math.min(h,(i+1)*per);if(y1<=y0)continue;\njs.push(new Promise((res,rej)=>{const w=owner.ws[i];w.onmessage=e=>{if(e.data&&e.data.t===\"band\")res();else rej(new Error(\"band\"));};w.onerror=rej;w.postMessage({t:\"band\",y0:y0,y1:y1,wid:i});}));}\nowner.pending=Promise.all(js).then(()=>{if(NXMT!==owner)return;ex.render_overlay();blit();if(ex.frame_ms)ex.frame_ms(BigInt(Math.round(performance.now()-_t0)));owner.busy=false;}).catch(()=>{nxResidentFailedWorkerEngine=engine;nxMtStop(owner.ws);if(NXMT!==owner)return;NXMT=null;window.__nx_mt={n:1,shared:false,why:\"worker-failed-demoted\"};});\n}\n" as *u8)
79    return p
80}
81
82// this file is a buffer builder and had no stdout path of its own; the fit guard needs one, because
83// a refusal that does not say WHICH number was wrong just moves the investigation somewhere else.
84func gpe_puts(s: *u8) -> i64 { var n: i64 = 0; while s[n] != (0 as u8) { n = n + 1 } sys_write(1, s, n); return 0 }
85func gpe_pn(v: i64) -> i64 {
86    var m: i64 = v
87    if m < 0 { gpe_puts("-" as *u8); m = 0 - m }
88    let t: *u8 = sys_mmap(24)
89    var k: i64 = 0
90    if m == 0 { t[0] = 48 as u8; k = 1 }
91    while m > 0 { t[k] = (48 + (m % 10)) as u8; m = m / 10; k = k + 1 }
92    let o: *u8 = sys_mmap(24)
93    var i: i64 = 0
94    while i < k { o[i] = t[k-1-i]; i = i + 1 }
95    sys_write(1, o, k)
96    return 0
97}
98const GPE_MAGIC_20260728: i64 = 20260728
99
100// THE SOVEREIGN-RENDER SWITCH. 1 = the page ALSO carries the WebGL interop path; 0 = the emitted page
101// contains no GLSL and no WebGL setup at all and the NishiLang wasm rasteriser draws every pixel.
102//
103// ★SET BACK TO 1 ON 2026-08-14, AND THE REASON IS A SEQUENCING ERROR I MADE, NOT A CHANGE OF GOAL.
104// The sovereignty destination is unchanged: this path leaves the moment the native one can replace it.
105// What I did wrong was DELETE THE INCUMBENT BEFORE BUILDING THE REPLACEMENT. The WebGL path is not
106// merely "a renderer" -- it is the ONLY code that draws the skinned NXA characters (dual-quaternion
107// skinning, eyeball geometry, per-genome skin/outfit/hair), and it shades the whole voxel world at
108// canvas resolution. Turning it off replaced all of that with a 480x300 CPU raycast and coloured
109// billboards, which is exactly the "significantly worse graphics" and "lost the female models" the
110// operator reported -- three times, because I kept shipping forward instead of restoring.
111//
112// ★THE LAW THIS ENCODES: A SOVEREIGN REPLACEMENT IS EARNED BY BEING BUILT, NOT BY DELETING THE THING
113// IT MEANS TO REPLACE. The sovereign rasteriser still ships in the same page and still runs whenever
114// WebGL is unavailable -- it is the FALLBACK, which is the honest status of a path that cannot yet
115// draw a character. It becomes the only path when nx_wasm_craft grows wc_mob_mesh (the contract is
116// already on the compare board as _ABSENT_:wc_mob_mesh); nx_sovworld_gate holds that contract.
117//
118// ⚠ADJUDICATED 2026-08-15: wc_mob_mesh NOW EXISTS (11-bone LBS figure, gate 63/63, per-pixel terrain
119// occlusion) and the sentence above FIRED -- but existence is a NAME-KEYED completion signal, and the
120// paragraph one screen up records what shipping on that signal cost three times. The two contracts
121// disagree, and the NEWER, LIVED one controls: the sovereign figure's measured quality is figure-crop
122// CHARJUDGE 0 (flat regions narrower than a judge cell) against the character corpus mean of 138, so
123// flipping today would again replace richer characters with poorer ones. THE PARITY BAR IS PRE-DECLARED
124// AND ALREADY PUBLISHED, not taste: this flips to 0 when nx_world_snap char's figure-crop CHARJUDGE for
125// the sovereign figure MEETS OR BEATS THE CORPUS MEAN on the /compare/charsim board (138 at declaration
126// time; read the live board, not this comment). Until then nx_sovworld_gate's T5 stays RED as the
127// standing work-order -- a red that names real remaining work is worth more than a green bought by a
128// regression. The ?gl=0 sovereign path ships in every page and is now one visible click away.
129//
130// ★CONTRACT MET 2026-08-16, MEASURED: nx_world_snap char figure-crop CHARJUDGE = 251 (composition 673,
131// contour 1000, palette 251) against the declared bar of 138 -- after per-triangle sun lambert (gate T64)
132// and the DECLARED portrait-distance calibration (derived: torso must span >= 2 judge cells; the
133// calibration was announced on the board BEFORE it moved, and the flat-vs-lit delta was completed at the
134// old distance first so no history was lost). The rule was pre-declared before the experiment; honoring
135// it now is the same discipline as refusing the premature flip yesterday. The sovereign path today is
136// 1200x750 adaptive with lit, genome-distinct, per-pixel-occluded skinned figures -- not the 480x300
137// billboards of the 08-14 regression this guard was written against. If the lived result disappoints,
138// this is ONE flip back and every number that justified it is on the board.
139// FLIPPED 1 on 2026-08-18 BY OPERATOR ORDER (the delivery ask: "leverage in 3rd party through last
140// mile shims and natively... deliver anything the system is capable of instead of these shitty
141// graphics"). The 08-16 sovereign-only refusal stands for the CHARSIM QUALITY LADDER -- quality is
142// still measured and beaten on the sovereign path (?gl=0, always compiled in, auto-fallback on any
143// GL failure) -- but DELIVERY now takes the GPU when the visitor's device has one.
144const GPE_EMIT_WEBGL: i64 = 1
145const GPE_WASM_CAP: i64 = 4194304
146// ---- cloth-solver constants, hoisted 2026-08-28 to clear the rule-11 ratchet -------------------
147// NOT invented here: every name below is taken from the sentence the emitter already prints beside
148// the value, so the const says what the comment said and the digits never have to be read twice.
149// (981 stays inline: it is 9.81 m/s^2 x100 and sits under the ratchet's bar, so hoisting it would
150// add a name nobody needs while changing nothing the detector can see.)
151const GPE_ALPHA_BEND_SOFT_Q12: i64 = 40960   // the gate-proven XG_ALPHA_BEND_SOFT_Q12 compliance
152const GPE_UNITS_PER_178CM: i64 = 171530      // the page's own 1.78m-to-world-unit pairing
153const GPE_G_DEN_60HZ: i64 = 640800           // that pairing carried to a per-tick accel at 60Hz
154const GPE_OUT_CAP: i64 = 16777216
155
156func gpe_slen(s: *u8) -> i64 { var k: i64 = 0; while s[k] != (0 as u8) { k = k + 1 } return k }
157func gpe_ap(out: *u8, pos: i64, s: *u8) -> i64 {
158    var k: i64 = 0
159    var p: i64 = pos
160    while s[k] != (0 as u8) { out[p] = s[k]; p = p + 1; k = k + 1 }
161    return p
162}
163func gpe_ap_n(out: *u8, pos: i64, s: *u8, n: i64) -> i64 {
164    var k: i64 = 0
165    var p: i64 = pos
166    while k < n { out[p] = s[k]; p = p + 1; k = k + 1 }
167    return p
168}
169
170// ---- GP2 / GE44: THE WEBGPU DOOR, FIRST BYTE (2026-09-02, /compare/gpu GP2 and gameengine GE44) --------------
171// rk_webgpu_door emits (1) the GE43 compute kernel's WGSL, CAPTURED from the deployed shader backend at emit
172// time (`nx_wgsl compute`, the same bytes nx_wgsl_compute_gate pins) -- never a hand-written copy, which is
173// the duplication nx_shader_ir exists to delete -- and (2) nxKernelProbe(dev): under ?gpu=1&kernel=1 it
174// dispatches that kernel through the page's WebGPU device over two storage buffers seeded from the same
175// hashes on both sides, reads the depth buffer back and diffs it against the CPU reference (the u32 minimum
176// of the two lanes). WebGPU CARRIES our bytes and computes nothing of ours: that is the "pure submission
177// pipe" door the gameengine board declares. The result lands on the HUD telemetry line (kernel OK n= diff=
178// ms=) and in window.__nx_kernel. If the backend cannot be forked or its output carries no WGSL section the
179// door emits KWGSL=null and a NAMED telemetry state instead of an empty shader -- an absent kernel must read
180// as absent, never as a page that quietly skipped the proof. The workgroup width is READ from the WGSL text
181// at run time (workgroup_size), so the dispatch geometry has one owner: the backend.
182const RK_WGSL_CAP: i64 = 65536
183const RK_WGSL_TMO_MS: i64 = 8000
184const RK_WGSL_ELF: *u8 = "./nx_wgsl.elf"
185const RK_WGSL_ELF_ABS: *u8 = "/volume1/homes/elderwesto/nishihost/nx_wgsl.elf"   // the emitter's CWD is not always the serving root
186const RK_WGSL_BEGIN: *u8 = "--- WGSL ---\n"
187const RK_WGSL_END: *u8 = "\nwgsl_bytes="
188const RK_KERNEL_N: i64 = 65536   // u32 lanes per probe (1024 workgroups at the backend's width of 64)
189func rk_slen(s: *u8) -> i64 { var n: i64 = 0; while s[n] != (0 as u8) { n = n + 1 } return n }
190func rk_err(s: *u8) -> i64 { sys_write(2, s, rk_slen(s)); return 0 }
191func rk_num(out: *u8, pos: i64, v: i64) -> i64 {
192    var p: i64 = pos
193    var x: i64 = v
194    if x == 0 { out[p] = 48 as u8; return p + 1 }
195    let t: *u8 = sys_mmap(32)
196    var k: i64 = 0
197    while x > 0 { t[k] = (48 + (x % 10)) as u8; x = x / 10; k = k + 1 }
198    while k > 0 { k = k - 1; out[p] = t[k]; p = p + 1 }
199    sys_munmap(t, 32)
200    return p
201}
202func rk_find(buf: *u8, n: i64, from: i64, needle: *u8) -> i64 {
203    let nl: i64 = rk_slen(needle)
204    var i: i64 = from
205    while i + nl <= n {
206        var k: i64 = 0
207        var hit: i64 = 1
208        while k < nl { if buf[i + k] != needle[k] { hit = 0; k = nl } else { k = k + 1 } }
209        if hit == 1 { return i }
210        i = i + 1
211    }
212    return 0 - 1
213}
214// a JS double-quoted string literal from bytes: backslash, quote and newline escaped, CR dropped; nothing else occurs in WGSL
215func rk_js_str(out: *u8, pos: i64, src: *u8, n: i64) -> i64 {
216    var p: i64 = pos
217    out[p] = 34 as u8; p = p + 1
218    var i: i64 = 0
219    while i < n {
220        let c: i64 = src[i] as i64
221        if c == 10 { out[p] = 92 as u8; out[p + 1] = 110 as u8; p = p + 2 }
222        else { if c == 34 { out[p] = 92 as u8; out[p + 1] = 34 as u8; p = p + 2 }
223        else { if c == 92 { out[p] = 92 as u8; out[p + 1] = 92 as u8; p = p + 2 }
224        else { if c == 13 { p = p } else { out[p] = c as u8; p = p + 1 } } } }
225        i = i + 1
226    }
227    out[p] = 34 as u8; p = p + 1
228    return p
229}
230// fork the deployed shader backend; relative path first (CWD = serving root), the absolute serving-root path second
231func rk_capture_wgsl(buf: *u8, ol: *i64) -> i64 {
232    return gsb_capture("compute" as *u8,buf,RK_WGSL_CAP,ol,RK_WGSL_TMO_MS)
233}
234// R-F (2026-09-04): THE UNIFORM LAYOUT IS CAPTURED FROM THE BACKEND AT EMIT, NEVER HAND-COUNTED HERE. The page
235// packs struct U by float index; until today those indices (28 = pal, 76 = palf, 96 floats) were typed beside a
236// hand-written struct declaration -- two copies of one shape. `nx_wgsl layout` derives every offset from the
237// declared IR by the WGSL memory-layout rules (nx_wgsl_gate holds the packer's own numbers as its KAT), so the
238// page now carries NXUO (name -> float index) and NXU_SIZE from that capture, and the struct U declaration is the
239// backend's own emission (WGSL_U). An absent capture is NAMED: NXUO=null makes the WebGPU claim throw
240// uniform-layout-absent-at-emit, the door refuses by name and the ladder falls to webgl2 -- never a page that
241// quietly packs by stale indices.
242const RK_LAYOUT_BEGIN: *u8 = "struct U{"
243const RK_LAYOUT_END: *u8 = "var<uniform> u:U;\n"
244const RK_LAYOUT_SIZE_KEY: *u8 = "layoutraw_rc="
245const RK_LAYOUT_NAMES: i64 = 18
246const RK_FLOAT_BYTES: i64 = 4
247func rk_capture_layout(buf: *u8, ol: *i64) -> i64 {
248    return gsb_capture("layout" as *u8,buf,RK_WGSL_CAP,ol,RK_WGSL_TMO_MS)
249}
250// the decimal after `needle` in buf, or -1 when absent
251func rk_int_after(buf: *u8, n: i64, needle: *u8) -> i64 {
252    let at: i64 = rk_find(buf, n, 0, needle)
253    if at < 0 { return 0 - 1 }
254    var i: i64 = at + rk_slen(needle)
255    var v: i64 = 0
256    var any: i64 = 0
257    var more: i64 = 1
258    while more == 1 {
259        if i >= n { more = 0 } else {
260            let c: i64 = buf[i] as i64
261            if c < 48 { more = 0 } else { if c > 57 { more = 0 } else { v = v * 10 + (c - 48); any = 1; i = i + 1 } }
262        }
263    }
264    if any == 0 { return 0 - 1 }
265    return v
266}
267// the byte offset of uniform `name` from the captured rows (`uniform|<name>|offset=<n>|`), or -1
268func rk_uniform_offset(buf: *u8, n: i64, name: *u8) -> i64 {
269    let key: *u8 = sys_mmap(128)
270    var q: i64 = 0
271    let pre: *u8 = "uniform|"
272    var k: i64 = 0
273    while pre[k] != (0 as u8) { key[q] = pre[k]; q = q + 1; k = k + 1 }
274    k = 0
275    while name[k] != (0 as u8) { key[q] = name[k]; q = q + 1; k = k + 1 }
276    let post: *u8 = "|offset="
277    k = 0
278    while post[k] != (0 as u8) { key[q] = post[k]; q = q + 1; k = k + 1 }
279    key[q] = 0 as u8
280    return rk_int_after(buf, n, key)
281}
282// emits `const NXUO={<name>:<float index>,...};` for the world pass's uniforms; -1 when a name is missing
283// The world pass uniform block (GE55, 2026-09-05): NXU_SIZE alone, captured from `nx_wgsl layoutraw` -- 160 B, the
284// sim's own UR_* word table -- because the page packs NOTHING: the bridge writeBuffers the sim's block from wasm memory
285// at uniform_off() and the kernel (nx_world_shader_src upk) derives every float. NXUO and WGSL_U were retired with the
286// JS packer they served; the named-absent shape when the capture fails.
287func rk_uniform_block(out: *u8, pos: i64) -> i64 {
288    var p: i64 = pos
289    let buf: *u8 = sys_mmap(RK_WGSL_CAP)
290    let ol: *i64 = sys_mmap(16) as *i64
291    rk_capture_layout(buf, ol)
292    var n: i64 = ol[0]
293    if n < 0 { n = 0 }
294    if n >= RK_WGSL_CAP { n = RK_WGSL_CAP - 1 }
295    var b: i64 = 0 - 1
296    var e: i64 = 0 - 1
297    var sz: i64 = 0 - 1
298    if n > 0 {
299        b = rk_find(buf, n, 0, RK_LAYOUT_BEGIN)
300        if b >= 0 { e = rk_find(buf, n, b, RK_LAYOUT_END); if e >= 0 { e = e + rk_slen(RK_LAYOUT_END) } }
301        sz = rk_int_after(buf, n, RK_LAYOUT_SIZE_KEY)
302    }
303    var q: i64 = 0 - 1
304    if sz > 0 { q = p }
305    if q < 0 {
306        rk_err("[gpe] GE55 raw uniform block: ABSENT AT EMIT -- nx_wgsl.elf layout gave no layoutraw_rc; the page carries NXU_SIZE=0 and the WebGPU claim refuses by name\n" as *u8)
307        p = gpe_ap(out, p, "const NXU_SIZE=0;\n" as *u8)
308        return p
309    }
310    p = q
311    p = gpe_ap(out, p, "const NXU_SIZE=" as *u8)
312    p = rk_num(out, p, sz)
313    p = gpe_ap(out, p, ";\n" as *u8)
314    rk_err("[gpe] GE55 raw uniform block captured from nx_wgsl layoutraw (160 B, the sim UR_* table): NXU_SIZE=" as *u8)
315    let nb: *u8 = sys_mmap(32)
316    let qn: i64 = rk_num(nb, 0, sz)
317    sys_write(2, nb, qn)
318    rk_err("\n" as *u8)
319    return p
320}
321// R-G3 (2026-09-04): THE WORLD SHADER IS CAPTURED FROM THE BACKEND AT EMIT. `nx_wgsl world` prints the fragment module
322// (uniforms, the voxel texture, struct Hit, every function, the entry) and the fullscreen-triangle vertex stage, both
323// emitted from ONE NishiLang source (nx_world_shader_src). The page carries them as WGSL_IRF / WGSL_IRV and draws them
324// under the ?ir=1 lever through two shader modules (both entries are `main`); the hand WGSL stays the default until
325// the parity instrument (R-H) proves the frames equal. An absent capture is NAMED (WGSL_IRF=null, the ?ir=1 claim
326// throws world-ir-absent-at-emit) -- never a page that silently drew the hand shader while claiming the IR.
327const RK_WORLD_FS_BEGIN: *u8 = "--- world_wgsl WGSL ---\n"
328const RK_WORLD_FS_END: *u8 = "\nworld_wgsl_rc="
329const RK_WORLD_VS_BEGIN: *u8 = "--- worldvs_wgsl WGSL ---\n"
330const RK_WORLD_VS_END: *u8 = "\nworldvs_wgsl_rc="
331func rk_capture_world(buf: *u8, ol: *i64) -> i64 {
332    return gsb_capture("world" as *u8,buf,RK_WGSL_CAP,ol,RK_WGSL_TMO_MS)
333}
334// the [begin,end) span of one probe's emitted text in buf, written to bo[0]/bo[1]; 0 when absent or refused (rc<0)
335func rk_world_span(buf: *u8, n: i64, begin: *u8, end: *u8, bo: *i64) -> i64 {
336    bo[0] = 0 - 1; bo[1] = 0 - 1
337    let b: i64 = rk_find(buf, n, 0, begin)
338    if b < 0 { return 0 }
339    let s: i64 = b + rk_slen(begin)
340    let e: i64 = rk_find(buf, n, s, end)
341    if e <= s { return 0 }
342    // a refused probe prints its label_rc=-1 right after the header: the span is then the refusal, not a shader
343    if rk_find(buf, e + 1, s, "_rc=-1" as *u8) >= 0 { return 0 }
344    bo[0] = s; bo[1] = e
345    return 1
346}
347func rk_world_block(out: *u8, pos: i64) -> i64 {
348    var p: i64 = pos
349    let buf: *u8 = sys_mmap(RK_WGSL_CAP)
350    let ol: *i64 = sys_mmap(16) as *i64
351    rk_capture_world(buf, ol)
352    var n: i64 = ol[0]
353    if n < 0 { n = 0 }
354    if n >= RK_WGSL_CAP { n = RK_WGSL_CAP - 1 }
355    let fo: *i64 = sys_mmap(16) as *i64
356    let vo: *i64 = sys_mmap(16) as *i64
357    var okf: i64 = 0
358    var okv: i64 = 0
359    if n > 0 { okf = rk_world_span(buf, n, RK_WORLD_FS_BEGIN, RK_WORLD_FS_END, fo); okv = rk_world_span(buf, n, RK_WORLD_VS_BEGIN, RK_WORLD_VS_END, vo) }
360    if okf == 0 { rk_err("[gpe] R-G3 world shader: FRAGMENT MODULE ABSENT AT EMIT -- nx_wgsl.elf world gave no world_wgsl section or refused it; the page carries WGSL_IRF=null and the ?ir=1 claim refuses by name\n" as *u8) }
361    if okv == 0 { rk_err("[gpe] R-G3 world shader: VERTEX ENTRY ABSENT AT EMIT -- nx_wgsl.elf world gave no worldvs_wgsl section; WGSL_IRV=null\n" as *u8) }
362    if okf == 0 { p = gpe_ap(out, p, "const WGSL_IRF=null;" as *u8) } else {
363        rk_err("[gpe] R-G3 world shader captured from nx_wgsl world: fragment_bytes=" as *u8)
364        let nb: *u8 = sys_mmap(32)
365        let q: i64 = rk_num(nb, 0, fo[1] - fo[0])
366        sys_write(2, nb, q)
367        rk_err("\n" as *u8)
368        p = gpe_ap(out, p, "const WGSL_IRF=`" as *u8)
369        var i: i64 = fo[0]
370        while i < fo[1] { out[p] = buf[i]; p = p + 1; i = i + 1 }
371        p = gpe_ap(out, p, "`;" as *u8)
372    }
373    if okv == 0 { p = gpe_ap(out, p, "const WGSL_IRV=null;\n" as *u8) } else {
374        p = gpe_ap(out, p, "const WGSL_IRV=`" as *u8)
375        var i2: i64 = vo[0]
376        while i2 < vo[1] { out[p] = buf[i2]; p = p + 1; i2 = i2 + 1 }
377        p = gpe_ap(out, p, "`;\n" as *u8)
378    }
379    sys_munmap(buf, RK_WGSL_CAP)
380    return p
381}
382// S12 step 1 (2026-09-06): the CAST shaders (nx_cast_shader_src through the same nx_wgsl backend, IDENTICAL to the hand GLSL
383// under nx_glsl_tokdiff) are captured at emit time exactly as the world's are, and the page COMPILES them at boot through mkm
384// (createShaderModule + getCompilationInfo) with the outcome announced on window.__nx_cast_wgsl -- so the GPU-host compile
385// that is the WGSL validity oracle runs on every load of the page, on the operator's own device, and any authorised frame
386// check reads it. Nothing is drawn yet: the cast pipeline + instanced draw is the rest of S12. An absent capture is NAMED
387// (WGSL_CASTV=null / WGSL_CASTF=null), never a page that silently claims a cast twin it does not carry.
388const RK_CAST_VS_BEGIN: *u8 = "--- cast_wgsl WGSL ---\n"
389const RK_CAST_VS_END: *u8 = "\ncast_wgsl_rc="
390const RK_CAST_FS_BEGIN: *u8 = "--- castfs_wgsl WGSL ---\n"
391const RK_CAST_FS_END: *u8 = "\ncastfs_wgsl_rc="
392func rk_capture_cast(buf: *u8, ol: *i64) -> i64 {
393    return gsb_capture("cast" as *u8,buf,RK_WGSL_CAP,ol,RK_WGSL_TMO_MS)
394}
395// S12 step 2 (2026-09-06): `const <name>={<member>:<offset>,...};const <name>_SIZE=<bytes>;` from the rows `nx_wgsl cast`
396// prints after `<rowskey> rows:` -- one `uniform|<member>|offset=<N>|...` row per uniform member, ending at `<sizekey><N>` --
397// so the page packs each cast stage's struct U at the offsets the ONE layout ruler (wg_uniform_layout_k) derived from the
398// same IR the shader was emitted from. An absent block emits null + 0 and NAMES itself on stderr: the page then refuses
399// the cast draw by name instead of packing by a hand count (the R-F law the world block already keeps).
400func rk_layout_obj(out: *u8, pos: i64, buf: *u8, n: i64, rowskey: *u8, sizekey: *u8, name: *u8) -> i64 {
401    var p: i64 = pos
402    let at: i64 = rk_find(buf, n, 0, rowskey)
403    var sz: i64 = 0 - 1
404    if at >= 0 { sz = rk_int_after(buf, n, sizekey) }
405    if sz < 0 {
406        p = gpe_ap(out, p, "const " as *u8); p = gpe_ap(out, p, name); p = gpe_ap(out, p, "=null;const " as *u8); p = gpe_ap(out, p, name); p = gpe_ap(out, p, "_SIZE=0;\n" as *u8)
407        rk_err("[gpe] S12 cast layout ABSENT AT EMIT (the cast draw refuses by name): " as *u8); rk_err(rowskey); rk_err("\n" as *u8)
408        return p
409    }
410    var stop: i64 = rk_find(buf, n, at, sizekey)
411    if stop < 0 { stop = n }
412    p = gpe_ap(out, p, "const " as *u8); p = gpe_ap(out, p, name); p = gpe_ap(out, p, "={" as *u8)
413    var i: i64 = at + rk_slen(rowskey)
414    var more: i64 = 1
415    while more == 1 {
416        let r: i64 = rk_find(buf, stop, i, "uniform|" as *u8)
417        if r < 0 { more = 0 } else {
418            var j: i64 = r + 8
419            var go: i64 = 1
420            while go == 1 { if j >= stop { go = 0 } else { if buf[j] == (124 as u8) { go = 0 } else { out[p] = buf[j]; p = p + 1; j = j + 1 } } }
421            p = gpe_ap(out, p, ":" as *u8)
422            var v: i64 = 0
423            let oa: i64 = rk_find(buf, stop, j, "offset=" as *u8)
424            if oa >= 0 {
425                var k: i64 = oa + 7
426                var dg: i64 = 1
427                while dg == 1 { if k >= stop { dg = 0 } else { let c: i64 = buf[k] as i64; if c < 48 { dg = 0 } else { if c > 57 { dg = 0 } else { v = v * 10 + (c - 48); k = k + 1 } } } }
428            }
429            p = rk_num(out, p, v)
430            p = gpe_ap(out, p, "," as *u8)
431            i = j
432        }
433    }
434    p = gpe_ap(out, p, "};const " as *u8); p = gpe_ap(out, p, name); p = gpe_ap(out, p, "_SIZE=" as *u8); p = rk_num(out, p, sz); p = gpe_ap(out, p, ";\n" as *u8)
435    return p
436}
437func rk_cast_block(out: *u8, pos: i64) -> i64 {
438    var p: i64 = pos
439    let buf: *u8 = sys_mmap(RK_WGSL_CAP)
440    let ol: *i64 = sys_mmap(16) as *i64
441    rk_capture_cast(buf, ol)
442    var n: i64 = ol[0]
443    if n < 0 { n = 0 }
444    if n >= RK_WGSL_CAP { n = RK_WGSL_CAP - 1 }
445    let vo: *i64 = sys_mmap(16) as *i64
446    let fo: *i64 = sys_mmap(16) as *i64
447    var okv: i64 = 0
448    var okf: i64 = 0
449    if n > 0 { okv = rk_world_span(buf, n, RK_CAST_VS_BEGIN, RK_CAST_VS_END, vo); okf = rk_world_span(buf, n, RK_CAST_FS_BEGIN, RK_CAST_FS_END, fo) }
450    if okv == 0 { rk_err("[gpe] S12 cast shader: VERTEX MODULE ABSENT AT EMIT -- nx_wgsl.elf cast gave no cast_wgsl section or refused it; the page carries WGSL_CASTV=null\n" as *u8) }
451    if okf == 0 { rk_err("[gpe] S12 cast shader: FRAGMENT MODULE ABSENT AT EMIT -- nx_wgsl.elf cast gave no castfs_wgsl section or refused it; the page carries WGSL_CASTF=null\n" as *u8) }
452    if okv == 0 { p = gpe_ap(out, p, "const WGSL_CASTV=null;" as *u8) } else {
453        p = gpe_ap(out, p, "const WGSL_CASTV=`" as *u8)
454        var i: i64 = vo[0]
455        while i < vo[1] { out[p] = buf[i]; p = p + 1; i = i + 1 }
456        p = gpe_ap(out, p, "`;" as *u8)
457    }
458    if okf == 0 { p = gpe_ap(out, p, "const WGSL_CASTF=null;\n" as *u8) } else {
459        rk_err("[gpe] S12 cast shader captured from nx_wgsl cast: vertex_bytes=" as *u8)
460        let nb: *u8 = sys_mmap(32)
461        let q: i64 = rk_num(nb, 0, vo[1] - vo[0])
462        sys_write(2, nb, q)
463        rk_err(" fragment_bytes=" as *u8)
464        let q2: i64 = rk_num(nb, 0, fo[1] - fo[0])
465        sys_write(2, nb, q2)
466        rk_err("\n" as *u8)
467        p = gpe_ap(out, p, "const WGSL_CASTF=`" as *u8)
468        var i2: i64 = fo[0]
469        while i2 < fo[1] { out[p] = buf[i2]; p = p + 1; i2 = i2 + 1 }
470        p = gpe_ap(out, p, "`;\n" as *u8)
471    }
472    // S12 step 2: the two cast structs' derived layouts ride beside the modules as NXCV / NXCF (offset tables) + sizes
473    p = rk_layout_obj(out, p, buf, n, "castv_layout_rc=" as *u8, "castv_struct_size=" as *u8, "NXCV" as *u8)
474    p = rk_layout_obj(out, p, buf, n, "castf_layout_rc=" as *u8, "castf_struct_size=" as *u8, "NXCF" as *u8)
475    sys_munmap(buf, RK_WGSL_CAP)
476    return p
477}
478func rk_webgpu_door(out: *u8, pos: i64) -> i64 {
479    var p: i64 = pos
480    let buf: *u8 = sys_mmap(RK_WGSL_CAP)
481    let ol: *i64 = sys_mmap(16) as *i64
482    rk_capture_wgsl(buf, ol)
483    var n: i64 = ol[0]
484    if n < 0 { n = 0 }
485    if n >= RK_WGSL_CAP { n = RK_WGSL_CAP - 1 }
486    var b: i64 = 0 - 1
487    var e: i64 = 0 - 1
488    if n > 0 {
489        b = rk_find(buf, n, 0, RK_WGSL_BEGIN)
490        if b >= 0 { b = b + rk_slen(RK_WGSL_BEGIN); e = rk_find(buf, n, b, RK_WGSL_END) }
491    }
492    if e <= b {
493        rk_err("[gpe] GP2 rk_webgpu_door: KERNEL WGSL ABSENT AT EMIT -- nx_wgsl.elf compute gave no WGSL section; the page carries KWGSL=null and its telemetry says so\n" as *u8)
494        p = gpe_ap(out, p, "const KWGSL=null;window.__nx_kernel={s:\"WGSL-ABSENT-AT-EMIT\"};\n" as *u8)
495    } else {
496        rk_err("[gpe] GP2 rk_webgpu_door: kernel WGSL captured from nx_wgsl compute, bytes=" as *u8)
497        let nb: *u8 = sys_mmap(32)
498        let q: i64 = rk_num(nb, 0, e - b)
499        sys_write(2, nb, q)
500        rk_err("\n" as *u8)
501        p = gpe_ap(out, p, "// GP2: the GE43 kernel, CAPTURED from nx_wgsl compute at emit time (the bytes nx_wgsl_compute_gate pins)\nconst KWGSL=" as *u8)
502        p = rk_js_str(out, p, ((buf as i64) + b) as *u8, e - b)
503        p = gpe_ap(out, p, ";\n" as *u8)
504    }
505    sys_munmap(buf, RK_WGSL_CAP)
506    p = gpe_ap(out, p, "async function nxKernelProbe(dev){try{\nif(!KWGSL)throw \"kernel-wgsl-absent-at-emit\";\nconst N=" as *u8)
507    p = rk_num(out, p, RK_KERNEL_N)
508    p = gpe_ap(out, p, ",t0=performance.now();\nconst WGm=KWGSL.match(/workgroup_size\\((\\d+)\\)/);if(!WGm)throw \"kwgsl-has-no-workgroup_size\";const WG=parseInt(WGm[1],10);\nconst d0=new Uint32Array(N),z0=new Uint32Array(N);\nfor(let i=0;i<N;i++){d0[i]=(Math.imul(i,2654435761)^0x9e3779b9)>>>0;z0[i]=(Math.imul(i+7,40503)^0x7f4a7c15)>>>0;}\nconst mk=(a,u)=>{const b=dev.createBuffer({size:a.byteLength,usage:u,mappedAtCreation:true});new Uint32Array(b.getMappedRange()).set(a);b.unmap();return b;};\nconst depth=mk(d0,GPUBufferUsage.STORAGE|GPUBufferUsage.COPY_SRC),zin=mk(z0,GPUBufferUsage.STORAGE);\nconst md=dev.createShaderModule({code:KWGSL});const inf=await md.getCompilationInfo();\nfor(const m of inf.messages){if(m.type===\"error\")throw \"kwgsl:\"+m.lineNum+\":\"+m.message;}\nconst pl=dev.createComputePipeline({layout:\"auto\",compute:{module:md,entryPoint:\"main\"}});\nconst bg=dev.createBindGroup({layout:pl.getBindGroupLayout(0),entries:[{binding:1,resource:{buffer:depth}},{binding:2,resource:{buffer:zin}}]});\nconst rb=dev.createBuffer({size:N*4,usage:GPUBufferUsage.MAP_READ|GPUBufferUsage.COPY_DST});\nconst enc=dev.createCommandEncoder();const ps=enc.beginComputePass();ps.setPipeline(pl);ps.setBindGroup(0,bg);ps.dispatchWorkgroups(Math.ceil(N/WG));ps.end();\nenc.copyBufferToBuffer(depth,0,rb,0,N*4);dev.queue.submit([enc.finish()]);\nawait rb.mapAsync(GPUMapMode.READ);const got=new Uint32Array(rb.getMappedRange().slice(0));rb.unmap();\nlet diff=0;for(let i=0;i<N;i++){const e=(d0[i]<z0[i])?d0[i]:z0[i];if(got[i]!==e)diff++;}\nconst ms=Math.round(performance.now()-t0);\nwindow.__nx_kernel={s:(diff===0?\"OK\":\"DIFF\")+\" n=\"+N+\" diff=\"+diff+\" ms=\"+ms+\" wg=\"+WG,n:N,diff:diff,ms:ms,wg:WG};\nconsole.log(\"nishi kernel door\",window.__nx_kernel.s);\n}catch(e){window.__nx_kernel={s:\"FAIL:\"+String(e)};console.log(\"nishi kernel door FAIL\",e);}}\n" as *u8)
509    return p
510}
511
512// gpe_emit_webgpu -- STAGE A of the WebGPU tier (2026-08-18, the /compare/graphics contract row;
513// operator order: GPU delivery through last-mile shims, everything above them Nishi-emitted).
514// Emits the WGSL world shader (a line-faithful transliteration of FSH: DDA march, face shading,
515// bump micro-relief, edge AO, one-bounce sun shadow, water two-hit blend, sky/clouds, rain,
516// crosshair, hotbar) plus the WebGPU init and per-frame draw. LEVERED: runs only under ?gpu=1 --
517// characters still render only in the GL tier (drawNPCs/drawEyes are GL programs), so WebGPU
518// must NOT be default until the NPC+eye passes reach parity; the lever keeps every ordinary
519// visitor on the proven ladder (GL -> sovereign wasm) while this tier is measured.
520// Known deltas vs FSH, all deliberate: the dead `ua` local was dropped; WebGPU's top-left
521// fragment origin is Y-flipped back to GL's bottom-left so every screen-space read matches.
522// The uniform struct is 384 bytes (WGSL std layout: five vec3f+f32 rows, one vec4f, one
523// vec2f+2*f32 row, one 4*f32 row, then pal[12]+palf[5] as vec4f arrays) -- the JS packs the
524// SAME 96 floats; change one side and the other MUST move (the wire-format law).
525// WebGPU timestamps are two u64 endpoints; each slot owns resolve and readback buffers.
526const GPE_GPU_TIMESTAMP_ENDPOINTS: i64 = 2
527const GPE_GPU_TIMESTAMP_BUFFERS: i64 = 2
528const GPE_GPU_SLOT_BUFFER_BYTES: i64 = GPE_GPU_TIMESTAMP_ENDPOINTS * GPE_GPU_TIMESTAMP_BUFFERS * __size_of(i64)
529// ECMAScript Number.MAX_SAFE_INTEGER: the policy is emitted as JavaScript numbers.
530const GPE_GPU_POLICY_MAX_INTEGER: i64 = 9007199254740991
531const GPE_GPU_POLICY_RADIX: i64 = 10
532func gpe_gpu_timing_policy(out: *u8, pos: i64) -> i64 {
533    let ln: *i64 = sys_mmap(__size_of(i64)) as *i64
534    let raw: *u8 = sys_read_file("knowledge/gpu_timing.conf" as *u8, ln)
535    var slots: i64 = 0
536    var budget: i64 = 0
537    var value: i64 = 0
538    var fields: i64 = 0
539    var digits: i64 = 0
540    var valid: i64 = 1
541    var i: i64 = 0
542    let zero: i64 = ("0" as *u8)[0] as i64
543    let nine: i64 = ("9" as *u8)[0] as i64
544    let whitespace: *u8 = "\t\n\r "
545    if ln[0] <= 0 { valid = 0 }
546    while i <= ln[0] {
547        var c: i64 = whitespace[1] as i64
548        if i < ln[0] { c = raw[i] as i64 }
549        if c >= zero && c <= nine {
550            let digit: i64 = c-zero
551            if value > (GPE_GPU_POLICY_MAX_INTEGER-digit)/GPE_GPU_POLICY_RADIX { valid = 0 }
552            if valid == 1 { value = value*GPE_GPU_POLICY_RADIX+digit }
553            digits = digits + 1
554        } else {
555            var separator: i64 = 0
556            var w: i64 = 0
557            while whitespace[w] != 0 as u8 {
558                if c == whitespace[w] as i64 { separator = 1 }
559                w = w+1
560            }
561            if separator == 0 { valid = 0 }
562            if digits > 0 {
563                if fields == 0 { slots = value }
564                if fields == 1 { budget = value }
565                fields = fields+1
566                value = 0
567                digits = 0
568            }
569        }
570        i = i+1
571    }
572    if fields != 2 { valid = 0 }
573    if slots < 1 || budget < 1 { valid = 0 }
574    if slots > budget/GPE_GPU_SLOT_BUFFER_BYTES { valid = 0 }
575    var p: i64 = pos
576    if valid == 0 {
577        gpe_puts("GPU-TIMING policy absent/invalid: profiling unavailable; rendering retained\n" as *u8)
578        return gpe_ap(out,p,"window.__nx_gpu_timing_policy=null;\n" as *u8)
579    }
580    p = gpe_ap(out,p,"window.__nx_gpu_timing_policy={slots:" as *u8)
581    p = gpe_num(out,p,slots)
582    p = gpe_ap(out,p,",buffer_budget_bytes:" as *u8)
583    p = gpe_num(out,p,budget)
584    return gpe_ap(out,p,"};\n" as *u8)
585}
586
587func gpe_visitors_gpu(out: *u8,pos: i64) -> i64 {
588    return gpe_ap(out,pos,"function nxVisitorFrameUniforms(F,H,V,K){const camera=[Number(ex.camx())/256,Number(ex.camy())/256,Number(ex.camz())/256],yaw=Number(ex.yaw())/4096,pitch=Number(ex.pitch())/4096,sun=nxCastSun(),time=Number(ex.tnow())/60;F.set(camera,V.uCamM/4);H.set(camera,K.uCamM/4);F.set([Math.sin(yaw),Math.cos(yaw),Math.sin(pitch),Math.cos(pitch)],V.uYPM/4);F.set([cv.width,cv.height],V.uResM/4);F.set(sun,V.uSunM/4);H.set(sun,K.uSunM/4);F[V.uTm/4]=time;H[K.uTm/4]=time;}\nasync function nxGpuUploadVisitor(P){\nconst owner=GPU,owned=[];if(!owner||!owner.cpl)throw Error('visitor renderer unavailable');\nconst dev=owner.dev,usage=GPUTextureUsage.TEXTURE_BINDING|GPUTextureUsage.COPY_DST;\ndev.pushErrorScope('validation');let D,failure;\ntry{\nconst buffer=function(a,type){const b=dev.createBuffer({size:a.byteLength,usage:type|GPUBufferUsage.COPY_DST,mappedAtCreation:true});owned.push(b);new Uint8Array(b.getMappedRange()).set(new Uint8Array(a.buffer,a.byteOffset,a.byteLength));b.unmap();return b;};\nconst vertex=GPUBufferUsage.VERTEX;\nD={bp:buffer(P.pos,vertex),bj:buffer(P.aj,vertex),bw:buffer(P.aw,vertex),bn:buffer(P.nrm,vertex),buv:buffer(P.uv,vertex),bhs:buffer(new Float32Array(P.pos.length/3),vertex),ib:buffer(P.idx,GPUBufferUsage.INDEX),ni:P.idx.length};\nD.jt=dev.createTexture({size:[P.nj,3],format:'rgba32float',usage});owned.push(D.jt);\ndev.queue.writeTexture({texture:D.jt},P.bind,{bytesPerRow:P.nj*16},[P.nj,1]);\nconst identity=new Float32Array(P.nj*4);for(let j=0;j<P.nj;j++)identity[j*4+3]=1;\ndev.queue.writeTexture({texture:D.jt,origin:[0,1]},identity,{bytesPerRow:P.nj*16},[P.nj,1]);\nidentity.fill(0);dev.queue.writeTexture({texture:D.jt,origin:[0,2]},identity,{bytesPerRow:P.nj*16},[P.nj,1]);\nD.atl=dev.createTexture({size:[P.image.width,P.image.height],format:'rgba8unorm',usage:usage|GPUTextureUsage.RENDER_ATTACHMENT});owned.push(D.atl);\ndev.queue.copyExternalImageToTexture({source:P.image},{texture:D.atl},[P.image.width,P.image.height]);\nD.samp=dev.createSampler({magFilter:'linear',minFilter:'linear',addressModeU:'clamp-to-edge',addressModeV:'clamp-to-edge'});\nD.vb=dev.createBuffer({size:NXCV_SIZE,usage:GPUBufferUsage.UNIFORM|GPUBufferUsage.COPY_DST});owned.push(D.vb);\nD.fb=dev.createBuffer({size:NXCF_SIZE,usage:GPUBufferUsage.UNIFORM|GPUBufferUsage.COPY_DST});owned.push(D.fb);\nD.vdata=new ArrayBuffer(NXCV_SIZE);D.fdata=new ArrayBuffer(NXCF_SIZE);\nD.release=function(){while(owned.length){const r=owned.pop();r.destroy();}D.dead=true;};\n}catch(e){failure=e;}\nconst validation=await dev.popErrorScope();\nif(failure||validation||GPU!==owner){while(owned.length)owned.pop().destroy();throw failure||Error(validation?validation.message:'visitor renderer replaced');}\ndev.lost.then(function(){D.release();});return D;\n}\nfunction nxGpuDrawVisitors(dev,G,rp){\nif(!G.cvb||!G.cfb||!G.dum||!G.cpl||!DN.length)return;\nlet submitted=0;\nfor(const entry of DN){\nconst D=entry.gpu;if(!D||D.dead)continue;\nnxVisitorLocal(entry);if(entry.support?.state!=='ready')continue;\ndev.pushErrorScope('validation');\ntry{\nif(!D.bgv){\nD.bgv=dev.createBindGroup({layout:G.cpl.getBindGroupLayout(0),entries:[{binding:0,resource:{buffer:D.vb}},{binding:1,resource:D.jt.createView()},{binding:3,resource:G.dum.createView()}]});\nD.bgf=dev.createBindGroup({layout:G.cpl.getBindGroupLayout(1),entries:[{binding:0,resource:{buffer:D.fb}},{binding:1,resource:G.t3.createView()},{binding:2,resource:D.atl.createView()},{binding:3,resource:D.samp},{binding:4,resource:G.dum.createView()},{binding:5,resource:D.samp}]});\n}\nnew Uint8Array(D.vdata).set(new Uint8Array(G.cvb));new Uint8Array(D.fdata).set(new Uint8Array(G.cfb));\nconst F=new Float32Array(D.vdata),I=new Int32Array(D.vdata),H=new Float32Array(D.fdata),J=new Int32Array(D.fdata),V=NXCV,K=NXCF;\nF.set([entry.px,entry.py,entry.pz],V.uIP/4);F.set([Math.sin(entry.A),Math.cos(entry.A),entry.sc,1],V.uIH/4);\nI[V.uAuth/4]=1;I[V.uGar/4]=0;I[V.uShd/4]=0;I[V.uGK/4]=0;\nF[V.uZMN/4]=entry.zmn;F[V.uH/4]=entry.H;\nfor(const key of ['uDNL','uDNR','uDNB','uDNG','uDNTl','uDNTr'])if(V[key]!==undefined)F.fill(0,V[key]/4,V[key]/4+4);\nF.fill(0,V.uSB/4,V.uSB/4+72*4);\nfor(const pair of [[F,V],[H,K]]){const values=pair[0],offsets=pair[1];for(const field of ['uGB','uGT'])if(offsets[field]!==undefined)values[offsets[field]/4]=0;if(offsets.uOF!==undefined)values[offsets.uOF/4]=2;if(offsets.uGN!==undefined)values[offsets.uGN/4]=0;if(offsets.uMoodF!==undefined)values[offsets.uMoodF/4]=0;}\nJ[K.uAuth/4]=1;J[K.uGar/4]=0;J[K.uGK/4]=0;J[K.uGM/4]=0;J[K.uGMH/4]=0;J[K.uEyeG/4]=0;J[K.uAnatM/4]=0;J[K.uShd/4]=0;\nJ[K.uAtlOn/4]=NOATL9?0:1;J[K.uNrmOn/4]=0;H[K.uZMN/4]=entry.zmn;H[K.uH/4]=entry.H;\nH.set([Math.sin(entry.A),Math.cos(entry.A),entry.sc,1],K.uIH/4);\nnxVisitorFrameUniforms(F,H,V,K);\ndev.queue.writeBuffer(D.vb,0,D.vdata);dev.queue.writeBuffer(D.fb,0,D.fdata);\nrp.setPipeline(G.cpl);rp.setBindGroup(0,D.bgv);rp.setBindGroup(1,D.bgf);\nrp.setVertexBuffer(0,D.bp);rp.setVertexBuffer(1,D.bj);rp.setVertexBuffer(2,D.bw);rp.setVertexBuffer(3,D.bn);rp.setVertexBuffer(4,D.buv);rp.setVertexBuffer(5,D.bhs);rp.setIndexBuffer(D.ib,'uint32');rp.drawIndexed(D.ni,1);submitted++;\n}catch(e){D.dead=true;D.error=String(e);}\ndev.popErrorScope().then(function(error){if(error){D.dead=true;D.error=error.message;window.__nx_visiting_draw={state:'validation-failed',reason:error.message};}});\n}\nconst failed=DN.filter(function(entry){return entry.gpu&&entry.gpu.error;});\nwindow.__nx_visiting_draw={state:failed.length?'needs-intervention':submitted?'submitted':'waiting',count:submitted,failed:failed.length,reason:failed.map(function(entry){return entry.l+': '+entry.gpu.error;}).join(' | '),observed_at:new Date().toISOString(),pose:'bind-pose',scope:'Draw submission; visual and animation review required'};\n}\n" as *u8)
589}
590
591func gpe_emit_webgpu(out: *u8, pos: i64) -> i64 {
592    var p: i64 = pos
593    p = rk_uniform_block(out, p)
594    p = rk_world_block(out, p)
595    p = rk_cast_block(out, p)
596    p = gpe_visitors_gpu(out, p)
597    p = gpe_ap(out, p, "const NXTFIX=location.search.indexOf(\"tfix=1\")>=0;\n" as *u8)
598    // R-H (2026-09-04): the parity instrument. ?blocks=1 renders ONE extra pass of the world into a COPY_SRC texture,
599    // copies it to a mapped buffer and publishes 16x9 RGB block means as window.__nx_blocks -- read back from the GPU,
600    // never from the presented canvas (a headless drawImage of a WebGPU canvas is black, measured 2026-09-04).
601    p = gpe_ap(out, p, "const NXBLOCKS=location.search.indexOf(\"blocks=\")>=0;\nasync function nxReadBlocks(dev,G){dev.pushErrorScope('validation');try{const c9=G.gctx.canvas,W=c9.width,H=c9.height,fmt=navigator.gpu.getPreferredCanvasFormat(),bgra=fmt.indexOf(\"bgra\")===0;\nconst rt=dev.createTexture({size:[W,H],format:fmt,usage:GPUTextureUsage.RENDER_ATTACHMENT|GPUTextureUsage.COPY_SRC});const bpr=Math.ceil(W*4/256)*256;\nconst rb=dev.createBuffer({size:bpr*H,usage:GPUBufferUsage.COPY_DST|GPUBufferUsage.MAP_READ});const enc=dev.createCommandEncoder();\nconst dt9=dev.createTexture({size:[W,H],format:\"depth24plus\",usage:GPUTextureUsage.RENDER_ATTACHMENT});const rp=enc.beginRenderPass({colorAttachments:[{view:rt.createView(),loadOp:\"clear\",storeOp:\"store\",clearValue:{r:0,g:0,b:0,a:1}}],depthStencilAttachment:{view:dt9.createView(),depthClearValue:1.0,depthLoadOp:\"clear\",depthStoreOp:\"discard\"}});rp.setPipeline(G.pl);rp.setBindGroup(0,G.bg);rp.draw(3);nxGpuCast(dev,G,rp);nxGpuDrawVisitors(dev,G,rp);rp.end();\nenc.copyTextureToBuffer({texture:rt},{buffer:rb,bytesPerRow:bpr,rowsPerImage:H},[W,H]);dev.queue.submit([enc.finish()]);nxGpuCastPop(dev,G);await rb.mapAsync(GPUMapMode.READ);\nconst d=new Uint8Array(rb.getMappedRange());const _bn=(location.search.match(/blocks=(\\d+)/)||[])[1];const gx=(_bn&&+_bn>=4)?Math.min(512,+_bn):16,gy=Math.max(1,Math.round(gx*H/W)),o=[];let tot=0;\nfor(let by=0;by<gy;by++)for(let bx=0;bx<gx;bx++){let r=0,g=0,b=0,k=0;const x0=Math.floor(bx*W/gx),x1=Math.floor((bx+1)*W/gx),y0=Math.floor(by*H/gy),y1=Math.floor((by+1)*H/gy);\nfor(let y=y0;y<y1;y++)for(let x=x0;x<x1;x++){const i=y*bpr+x*4;r+=d[i+(bgra?2:0)];g+=d[i+1];b+=d[i+(bgra?0:2)];k++;}o.push(Math.round(r/k),Math.round(g/k),Math.round(b/k));tot+=r+g+b;}\nrb.unmap();window.__nx_blocks={w:W,h:H,fmt:fmt,src:window.__nx_world_src||null,mean:tot/(W*H*3),blocks:o};}catch(e){window.__nx_blocks={err:String(e)};}const re9=await dev.popErrorScope();if(re9){window.__nx_blocks={err:'validation:'+re9.message,mean:0};}}\n" as *u8)
602    // GE55 (2026-09-05): THE HAND WGSL WORLD PASS IS RETIRED. Its ten functions (vx, h21, h31, pal9, sky, struct Hit,
603    // march, shade, the fragment and vertex entries -- ~11 KB of hand-written WGSL, and the WGSL_U uniform struct it was
604    // concatenated with) are gone: the WebGPU door draws WGSL_IRF / WGSL_IRV, captured at emit time from the ONE
605    // NishiLang shader source (nx_world_shader_src through nx_shader_ir + nx_wgsl), and ?hand=1 now refuses by name
606    // rather than drawing anything. The page carries no hand-written shader bytes and no per-frame packer arithmetic
607    // (the sim packs its own raw uniform block, the kernel derives every float in upk). WGSL stays declared null so the
608    // IR?WGSL_IRV:WGSL ternary keeps a defined else-branch. Pre-retirement source: knowledge/library/nx_game_page_emit.nx.pre-retire-20260905.
609    p = gpe_ap(out, p, "const WGSL=null;\n" as *u8)
610    p = gpe_gpu_timing_policy(out, p)
611    p = gpe_ap(out, p, ngc_source())
612    p = gpe_ap(out, p, "async function nxGpuTimingDevice(ad){\nconst requested=ad.features.has('timestamp-query');\nwindow.__nx_gpu_timing_request={requested:requested,fallback:false,error:null};\ntry{return await ad.requestDevice({requiredFeatures:requested?['timestamp-query']:[]});}\ncatch(e){if(!requested)throw e;window.__nx_gpu_timing_request.fallback=true;window.__nx_gpu_timing_request.error=String(e);return await ad.requestDevice();}\n}\nasync function nxGpuTimerChecked(dev,operation){\nlet opened=0,value,failure=null;const pending=[];\ntry{for(const kind of ['validation','out-of-memory','internal']){dev.pushErrorScope(kind);opened++;}value=operation();}\ncatch(e){failure=e;}\nfinally{while(opened>0){opened--;try{pending.push(dev.popErrorScope());}catch(e){if(!failure)failure=e;}}}\nconst results=await Promise.allSettled(pending);\nfor(const result of results){if(result.status==='rejected'){if(!failure)failure=result.reason;}else if(result.value&&!failure){failure=Error(result.value.message);}}\nif(failure)throw failure;return value;\n}\nasync function nxGpuTimerInit(dev){\nconst T={state:'unsupported',attempted:0,completed:0,busy_frames:0,failed:0,last:null,busy:false,resources:[],stopped:false};\nT.cleanup_errors=[];T.stop=function(reason){if(T.stopped)return;T.stopped=true;T.state=reason;T.busy=false;const owned=T.resources.splice(0);for(const r of owned){try{r.destroy();}catch(e){T.cleanup_errors.push(String(e));}}};\nif(!dev.features.has('timestamp-query'))return T;\ntry{await nxGpuTimerChecked(dev,function(){\nT.query=dev.createQuerySet({type:'timestamp',count:2});T.resources.push(T.query);\nT.resolve=dev.createBuffer({size:16,usage:GPUBufferUsage.QUERY_RESOLVE|GPUBufferUsage.COPY_SRC});T.resources.push(T.resolve);\nT.read=dev.createBuffer({size:16,usage:GPUBufferUsage.COPY_DST|GPUBufferUsage.MAP_READ});T.resources.push(T.read);\n});}catch(e){T.error=String(e);T.stop('initialization-failed');return T;}\nT.state='ready';dev.lost.then(function(){T.stop('device-lost');});return T;\n}\nfunction nxGpuTimerBegin(T,descriptor,frame){\nif(!T||T.stopped||T.state==='unsupported')return false;\nT.attempted++;if(T.busy){T.busy_frames++;return false;}\nT.busy=true;T.frame=frame;T.state='pending';\ndescriptor.timestampWrites={querySet:T.query,beginningOfPassWriteIndex:0,endOfPassWriteIndex:1};return true;\n}\nfunction nxGpuTimerResolve(T,enc){enc.resolveQuerySet(T.query,0,2,T.resolve,0);enc.copyBufferToBuffer(T.resolve,0,T.read,0,16);}\nasync function nxGpuTimerRead(T,owner,submission){\nconst frame=T.frame,dev=owner.dev;let mapped=false;\ntry{\nawait submission;\nawait T.read.mapAsync(GPUMapMode.READ);mapped=true;\nif(GPU!==owner||T.stopped){T.stop('renderer-replaced');return;}\nconst values=new BigUint64Array(T.read.getMappedRange());const start=values[0],end=values[1];\nif(end<start)throw Error('GPU timestamp interval reversed');\nT.last={frame:frame,start_ns:String(start),end_ns:String(end),duration_ns:String(end-start),duration_ms:Number(end-start)/1000000,scope:'world-and-cast-render-pass'};\nT.completed++;T.state='ready';\n}catch(e){if(!T.stopped){T.failed++;T.error=String(e);T.stop('readback-failed');}}\nfinally{if(mapped&&!T.stopped)T.read.unmap();T.busy=false;}\n}\nfunction nxGpuTimerStop(owner,reason){const T=owner&&owner.timer;if(T&&typeof T.stop==='function')T.stop(reason);}\nasync function nxGpuTimerPoolInit(dev,policy){\nconst P={state:'configuration-required',observed_frames:0,unavailable_frames:0,attempted:0,completed:0,busy_frames:0,failed:0,cancelled:0,inflight:0,peak_inflight:0,last:null,slots:[],stopped:false,cleanup_errors:[],results:[],result_dropped:0};\nP.drain=function(){return P.results.splice(0);};\nP.stop=function(reason){if(P.stopped)return;P.stopped=true;P.state=reason;for(const slot of P.slots){if(slot.leased){P.cancelled++;slot.leased=false;}slot.stop(reason);P.cleanup_errors.push(...slot.cleanup_errors);}P.inflight=0;};\nif(!policy||!Number.isSafeInteger(policy.slots)||!Number.isSafeInteger(policy.buffer_budget_bytes)||policy.slots<1||policy.buffer_budget_bytes<1||policy.slots>Math.floor(policy.buffer_budget_bytes/32)){P.error='GPU timing policy requires positive integer slots within the explicit buffer budget (32 bytes per slot; driver/query allocation overhead excluded).';return P;}\nP.capacity=policy.slots;P.buffer_bytes=policy.slots*32;P.buffer_budget_bytes=policy.buffer_budget_bytes;\nif(!dev.features.has('timestamp-query')){P.state='unsupported';return P;}\nfor(let i=0;i<P.capacity;i++){const slot=await nxGpuTimerInit(dev);P.slots.push(slot);if(P.stopped){slot.stop(P.state);return P;}if(slot.state!=='ready'){P.error=slot.error;P.stop(slot.state);return P;}}\nP.state='ready';dev.lost.then(function(){P.stop('device-lost');});return P;\n}\nfunction nxGpuTimerPoolBegin(P,descriptor,frame){\nif(!P)return null;\nP.observed_frames++;\nif(P.stopped||P.state==='unsupported'||P.state==='configuration-required'){P.unavailable_frames++;return null;}\nP.attempted++;const slot=P.slots.find(function(s){return !s.leased&&!s.stopped;});\nif(!slot){P.busy_frames++;return null;}\nif(!nxGpuTimerBegin(slot,descriptor,frame)){P.failed++;return null;}\nslot.leased=true;P.inflight++;P.peak_inflight=Math.max(P.peak_inflight,P.inflight);P.state='pending';return slot;\n}\nasync function nxGpuTimerPoolRead(P,slot,owner,submission){\nif(!slot||!slot.leased||slot.reading||P.stopped)return;\nslot.reading=true;const completed=slot.completed;\ntry{await nxGpuTimerRead(slot,owner,submission);\nif(P.stopped)return;\nif(slot.stopped){P.failed++;P.error=slot.error;slot.leased=false;P.inflight--;P.stop(slot.state);return;}\nif(slot.completed===completed+1){P.completed++;if(P.results.length===P.capacity){P.results.shift();P.result_dropped++;}P.results.push(slot.last);if(!P.last||slot.last.frame>P.last.frame)P.last=slot.last;}\nelse{P.failed++;P.error='readback completed without one attributable interval';slot.leased=false;P.inflight--;P.stop('readback-failed');}\n}catch(e){if(!P.stopped){P.failed++;P.error=String(e);slot.leased=false;P.inflight--;P.stop('readback-failed');}}\nfinally{slot.reading=false;if(slot.leased){slot.leased=false;P.inflight--;}if(!P.stopped)P.state=P.inflight?'pending':'ready';}\n}\nasync function nxGpuTimerAttach(owner){const token={};owner.timerAttachToken=token;nxGpuTimerStop(owner,'renderer-replaced');const pool=await nxGpuTimerPoolInit(owner.dev,window.__nx_gpu_timing_policy);if(GPU!==owner||owner.timerAttachToken!==token){pool.stop('renderer-replaced');return;}owner.timer=pool;window.__nx_gpu_timer=pool;}\nwindow.addEventListener('pagehide',function(){if(GPU){GPU.timerAttachToken=null;nxGpuTimerStop(GPU,'page-hidden');}});\nwindow.addEventListener('pageshow',function(e){if(e.persisted&&GPU){const owner=GPU;nxGpuTimerAttach(owner).catch(function(error){if(GPU===owner)window.__nx_gpu_timer={state:'initialization-failed',error:String(error)};});}});\nasync function gpuInit(){try{\nconst ad=await navigator.gpu.requestAdapter(nxGpuAdapterOptions());if(!ad)throw \"no-adapter\";\nconst dev=await nxGpuTimingDevice(ad);\n// EVERY WEBGPU ERROR IS NAMED (2026-09-06): validation and out-of-memory errors never throw, so without this listener a broken pass reads as a taken door over a black canvas. gpuDraw refuses on the first recorded error, which demotes through the bounded-retry ladder with the reason in the URL.\ndev.addEventListener('uncapturederror',function(e9u){window.__sov_gpuerr=String(e9u.error&&e9u.error.message?e9u.error.message:e9u.error);console.log('nishi: webgpu uncaptured error '+window.__sov_gpuerr);});\n// GP3: the kernel's limits come from knowledge/tier_ladder.conf (limit| rows); a device under any minimum refuses THIS door by name and the ladder walks on.\nconst L9=window.__nx_gpu_limits||{};for(const k9 in L9){const h9=(dev.limits&&typeof dev.limits[k9]===\"number\")?dev.limits[k9]:undefined;if(typeof h9===\"number\"&&h9<L9[k9])throw \"limit:\"+k9+\"=\"+h9+\"<\"+L9[k9];}\nconst fmt=navigator.gpu.getPreferredCanvasFormat();\nconst t3=dev.createTexture({size:[128,128,48],dimension:\"3d\",format:\"r8uint\",usage:GPUTextureUsage.TEXTURE_BINDING|GPUTextureUsage.COPY_DST});\nconst th=dev.createTexture({size:[128,128],format:\"r32float\",usage:GPUTextureUsage.TEXTURE_BINDING|GPUTextureUsage.COPY_DST});\nif(!NXU_SIZE)throw \"uniform-layout-absent-at-emit\";\nconst ub=dev.createBuffer({size:NXU_SIZE,usage:GPUBufferUsage.UNIFORM|GPUBufferUsage.COPY_DST});\nif(location.search.indexOf(\"hand=1\")>=0)throw \"hand-world-shader-retired-2026-09-05\";const IR=true;if(!WGSL_IRF)throw \"world-ir-absent-at-emit\";if(IR&&!WGSL_IRV)throw \"world-ir-vertex-absent-at-emit\";\nconst mkm=async(code,tag)=>{const md=dev.createShaderModule({code});const inf=await md.getCompilationInfo();for(const m of inf.messages){if(m.type===\"error\")throw tag+\":\"+m.lineNum+\":\"+m.message;}return md;};\nwindow.__nx_gpugate.step=\"shaders\";const mdV=await mkm(IR?WGSL_IRV:WGSL,IR?\"irvs\":\"wgsl\");const mdF=IR?await mkm(WGSL_IRF,\"irfs\"):mdV;\n// S12 step 1 (2026-09-06): the CAST stages (one NishiLang source, IDENTICAL to the hand GLSL under nx_glsl_tokdiff) are COMPILED\n// on this device through the same mkm and the verdict is announced -- the GPU-host compile IS the WGSL validity oracle, so it\n// runs on every load; a refusal is named, never thrown: the world door must not die for a cast that is not yet drawn here.\ndev.pushErrorScope('validation');let castW9=\"absent-at-emit\";if(WGSL_CASTV&&WGSL_CASTF){try{await mkm(WGSL_CASTV,\"castvs\");await mkm(WGSL_CASTF,\"castfs\");castW9=\"compiled\";}catch(e9c){castW9=\"refused:\"+String(e9c);}}window.__nx_cast_wgsl=castW9;console.log(\"nishi: cast WGSL \"+castW9);\nlet cpl9=null;try{if(WGSL_CASTV&&WGSL_CASTF){const cvm=await mkm(WGSL_CASTV,'castvsP');const cfm=await mkm(WGSL_CASTF,'castfsP');const vb9=function(st9,loc9,fm9){return {arrayStride:st9,attributes:[{shaderLocation:loc9,offset:0,format:fm9}]};};cpl9=dev.createRenderPipeline({layout:'auto',depthStencil:{format:'depth24plus',depthWriteEnabled:true,depthCompare:'less'},vertex:{module:cvm,entryPoint:'main',buffers:[vb9(12,0,'float32x3'),vb9(16,1,'float32x4'),vb9(16,2,'float32x4'),vb9(12,3,'float32x3'),vb9(8,4,'float32x2'),vb9(4,5,'float32')]},fragment:{module:cfm,entryPoint:'main',targets:[{format:fmt}]},primitive:{topology:'triangle-list'}});window.__nx_cast_pipe='created';}else{window.__nx_cast_pipe='absent-at-emit';}}catch(e9p){window.__nx_cast_pipe='refused:'+String(e9p);}const ce9=await dev.popErrorScope();window.__nx_cast_scope=ce9?String(ce9.message):'clean';window.__nx_world_src=IR?\"ir\":\"hand\";\nconst pl=dev.createRenderPipeline({layout:\"auto\",depthStencil:{format:\"depth24plus\",depthWriteEnabled:false,depthCompare:\"always\"},vertex:{module:mdV,entryPoint:IR?\"main\":\"vs\"},fragment:{module:mdF,entryPoint:IR?\"main\":\"fs\",targets:[{format:fmt}]},primitive:{topology:\"triangle-list\"}});\nwindow.__nx_frame_blocks=function(gx,gy){const c2=document.createElement(\"canvas\");c2.width=cv.width;c2.height=cv.height;const x2=c2.getContext(\"2d\");x2.drawImage(cv,0,0);const d=x2.getImageData(0,0,cv.width,cv.height).data;const o=[];for(let by=0;by<gy;by++)for(let bx=0;bx<gx;bx++){let r=0,g=0,b=0,k=0;const x0=Math.floor(bx*cv.width/gx),x1=Math.floor((bx+1)*cv.width/gx),y0=Math.floor(by*cv.height/gy),y1=Math.floor((by+1)*cv.height/gy);for(let y=y0;y<y1;y++)for(let x=x0;x<x1;x++){const i=(y*cv.width+x)*4;r+=d[i];g+=d[i+1];b+=d[i+2];k++;}o.push(Math.round(r/k),Math.round(g/k),Math.round(b/k));}return o;};\n// BIND ONLY WHAT THE SHADER DECLARES (2026-09-06, the black-frame root cause): the page bound the GE53 heightfield texture at binding 2 while the emitted world shader declared bindings 0 and 1 only. Under layout:auto that is a WebGPU VALIDATION error: createBindGroup does not throw, the bind group is invalid, every pass that uses it is dropped, and the canvas stays clear-black while the door reads taken. The entries are DERIVED from the shader text, so page and shader cannot disagree, and the validation scope turns any residual mismatch into a NAMED refusal that walks the ladder.\nconst bnd9=[];{const s9=IR?WGSL_IRF:WGSL;let p9=0;for(;;){const k9=s9.indexOf('@binding',p9);if(k9<0)break;let e9=k9+9;let n9=0;while(e9<s9.length&&s9.charCodeAt(e9)>=48&&s9.charCodeAt(e9)<=57){n9=n9*10+(s9.charCodeAt(e9)-48);e9++;}bnd9.push(n9);p9=e9;}}\nconst ent9=[{binding:0,resource:{buffer:ub}}];if(bnd9.indexOf(1)>=0)ent9.push({binding:1,resource:t3.createView()});if(bnd9.indexOf(2)>=0)ent9.push({binding:2,resource:th.createView()});\nwindow.__nx_gpubind={declared:bnd9,bound:ent9.length};\ndev.pushErrorScope('validation');\nconst bg=dev.createBindGroup({layout:pl.getBindGroupLayout(0),entries:ent9});\nconst ve9=await dev.popErrorScope();if(ve9)throw 'bindgroup-validation:'+ve9.message;\nif(window.__gpu_late){window.__sov_gpufail=\"finished-after-boot-ceiling; ladder already moved on (canvas untouched)\";return;}\n// CANVAS CLAIMED LAST (2026-08-23): a canvas holds ONE context type forever, and the old order\n// claimed it FIRST -- any wgsl, pipeline or late failure after that left a poisoned canvas where\n// webgl2 AND 2d both return null: the silent black screen. Everything device-side is proven\n// BEFORE the page surface is touched; only configure() can fail post-claim, and the sovCanvas2d\n// recovery reloads onto ?gl=0 for exactly that residual.\nconst gctx=cv.getContext(\"webgpu\");if(!gctx)throw \"no-context\";\ngctx.configure({device:dev,format:fmt,alphaMode:\"opaque\"});\nVOX=Number(ex.vox_off());SPC=Number(ex.spec_off());\nnxGpuTimerStop(GPU,'renderer-replaced');GPU={dev,gctx,t3,th,ub,pl,bg,cpl:cpl9,lastEd:-1};try{await nxGpuTimerAttach(GPU);}catch(e){window.__nx_gpu_timer={state:'initialization-failed',attempted:0,completed:0,busy_frames:0,failed:1,last:null,error:String(e)};}window.__nx_gpugate.step=\"afterGPU\";\n// S11: the device arrives AFTER the page-bottom loadNPC call site has run, so the cast upload is hooked here; loadNPC carries an idempotency flag, so whichever hook wins runs it once.\nif(ex.mobx&&typeof loadNPC==='function')loadNPC().then(function(){if(CAST9)return loadDonors();}).catch(function(e9G){window.__gpu_npcfail=String(e9G);});\nex.set_yflip(1n);\nwindow.__sov_gpu=1;nxGpuAdapterReport(ad);\n// GP2 KERNEL DOOR PROBE (?kernel=1): the GE43 compute kernel through THIS device, read back and diffed against the CPU reference.\nif(location.search.indexOf(\"kernel=1\")>=0){nxKernelProbe(dev);}\n}catch(e){window.__sov_gpufail=String(e);console.log(\"nishi: WebGPU unavailable, next tier\",e);GPU=null;}}\n" as *u8)
613    p = gpe_ap(out, p, "// S12 step 2 (2026-09-06): THE CAST ON THE WEBGPU DOOR -- the resident cast body mesh drawn by the ported MVS/MFS (one NishiLang source, nx_cast_shader_src) through a real render pipeline: the SAME per-frame state castFrame() builds for WebGL2 (positions, heading, gait, joint dual-quats, skin/outfit/hair genome, garment ids, mood) packed into the two uniform blocks at the offsets nx_wgsl cast DERIVED at emit (NXCV / NXCF), the joint rows written to the rgba32float table, six vertex buffers + u16 indices, drawIndexed over the visible girls. Vertex resources ride bind group 0, fragment resources group 1 (two structs named U cannot share one buffer). Not on this door yet, declared: planar cast shadows, the dress and garment meshes, hair ribbons, eyeballs, the visiting cast. Every failure is CAPTURED in a validation scope and named in window.__nx_cast_draw -- the world pass is never demoted for the cast.\nfunction nxCastPk3(F9,off9,a9,n9){for(let i9=0;i9<n9;i9++){F9[off9/4+i9*4]=a9[i9*3];F9[off9/4+i9*4+1]=a9[i9*3+1];F9[off9/4+i9*4+2]=a9[i9*3+2];}}\nfunction nxCastSun(){if(window.__sund)return window.__sund;const U9=new Int32Array(ex.memory.buffer,Number(ex.uniform_off()),44);const sel9=U9[6]/4096,dfr9=U9[7]/Math.max(1,U9[8]);const az9=Math.PI*(1-dfr9*1.6),el9=Math.asin(Math.max(-.99,Math.min(.99,sel9)));let sx9=Math.cos(el9)*Math.cos(az9),sy9=Math.sin(el9),sz9=Math.cos(el9)*.45;const sl9=Math.hypot(sx9,sy9,sz9)||1;return [sx9/sl9,sy9/sl9,sz9/sl9];}\nfunction nxGpuCast(dev,G,rp){try{const R=GPU.npc,N=GPU.cast;if(!G.cpl||!R||!R.ok||!N||!N.ok||G.castdead)return;if(!NXCV||!NXCF){window.__nx_cast_draw='refused:layout-absent-at-emit';G.castdead=1;return;}\nconst nm=Number(ex.mobs());if(nm<=0)return;const nv=castFrame(N,nm);if(nv===0)return;\ndev.pushErrorScope('validation');G.cscope=1;\nif(!G.cub){G.cub=dev.createBuffer({size:NXCV_SIZE,usage:GPUBufferUsage.UNIFORM|GPUBufferUsage.COPY_DST});G.cuf=dev.createBuffer({size:NXCF_SIZE,usage:GPUBufferUsage.UNIFORM|GPUBufferUsage.COPY_DST});G.cvb=new ArrayBuffer(NXCV_SIZE);G.cfb=new ArrayBuffer(NXCF_SIZE);\nG.dum=dev.createTexture({size:[1,1],format:'rgba8unorm',usage:GPUTextureUsage.TEXTURE_BINDING|GPUTextureUsage.COPY_DST});dev.queue.writeTexture({texture:G.dum},new Uint8Array([128,128,255,255]),{bytesPerRow:4},[1,1]);\nG.cbgv=dev.createBindGroup({layout:G.cpl.getBindGroupLayout(0),entries:[{binding:0,resource:{buffer:G.cub}},{binding:1,resource:R.jt.createView()},{binding:3,resource:G.dum.createView()}]});\nG.cbgf=dev.createBindGroup({layout:G.cpl.getBindGroupLayout(1),entries:[{binding:0,resource:{buffer:G.cuf}},{binding:1,resource:G.t3.createView()},{binding:2,resource:(R.atl||G.dum).createView()},{binding:3,resource:R.samp},{binding:4,resource:(R.nrm||G.dum).createView()},{binding:5,resource:R.samp}]});}\ndev.queue.writeTexture({texture:R.jt,origin:[0,1,0]},N.jf.subarray(0,R.nj*8*nv),{bytesPerRow:R.nj*16,rowsPerImage:2*nv},[R.nj,2*nv,1]);\nconst F=new Float32Array(G.cvb),I=new Int32Array(G.cvb),H=new Float32Array(G.cfb),J=new Int32Array(G.cfb);F.fill(0);H.fill(0);\nconst cam0=Number(ex.camx())/256,cam1=Number(ex.camy())/256,cam2=Number(ex.camz())/256,ya=Number(ex.yaw())/4096,pi3=Number(ex.pitch())/4096;\nconst sd9=nxCastSun();const dv9=new DataView(ex.memory.buffer);const skt9=Number(dv9.getBigInt64(SPC+7*8,true));const V9=NXCV,K9=NXCF;\nF[V9.uSc/4]=1.78/171530;nxCastPk3(F,V9.uIP,N.ip,12);F.set(N.ih,V9.uIH/4);if(ex.sbx)nxCastPk3(F,V9.uSB,N.sb,72);F.set(N.of,V9.uOF/4);if(N.gb){F.set(N.gb,V9.uGB/4);F.set(N.gt,V9.uGT/4);}I[V9.uGK/4]=0;F.set(N.gn,V9.uGN/4);\nF[V9.uTm/4]=Number(ex.tnow())/60;{const w9x=(window.__wxw&&window.__wxw[0])||0,w9z=(window.__wxw&&window.__wxw[1])||0;F[V9.uWnd/4]=Math.min(1,Math.hypot(w9x,w9z))*(NXHCH_N*NXHCH_LIM/NXHCH_Q8)*(N.hscale||0)*(1.78/171530);}\nF[V9.uZMN/4]=N.an.zmn;F[V9.uH/4]=N.an.H;F[V9.uNIP/4]=N.an.nip;\nif(N.dyn&&N.dyn.length>=2){const dl9=N.dyn.find(function(d){return d.side<0;}),dr9=N.dyn.find(function(d){return d.side>0;});if(dl9&&dr9){F.set([dl9.x,dl9.y,dl9.z,dl9.infl],V9.uDNL/4);F.set([dr9.x,dr9.y,dr9.z,dr9.infl],V9.uDNR/4);if(N.dyn.length>=6){const db9=N.dyn[2],dg9=N.dyn[3],dt19=N.dyn[4],dt29=N.dyn[5];F.set([db9.x,db9.y,db9.z,db9.infl],V9.uDNB/4);F.set([dg9.x,dg9.y,dg9.z,dg9.infl],V9.uDNG/4);F.set([dt19.x,dt19.y,dt19.z,dt19.infl],V9.uDNTl/4);F.set([dt29.x,dt29.y,dt29.z,dt29.infl],V9.uDNTr/4);}}}\nF.set([cam0,cam1,cam2],V9.uCamM/4);F.set([Math.sin(ya),Math.cos(ya),Math.sin(pi3),Math.cos(pi3)],V9.uYPM/4);F.set([cv.width,cv.height],V9.uResM/4);F.set([sd9[0],sd9[1],sd9[2]],V9.uSunM/4);I[V9.uHM/4]=1;I[V9.uGar/4]=0;I[V9.uAuth/4]=0;I[V9.uShd/4]=0;\nH.set([cam0,cam1,cam2],K9.uCamM/4);H.set([(skt9&255)/255,((skt9>>8)&255)/255,((skt9>>16)&255)/255],K9.uSkTM/4);J[K9.uOcc/4]=location.search.indexOf('npcocc=0')>=0?0:(location.search.indexOf('npcocc=2')>=0?2:1);\nnxCastPk3(H,K9.uCS,N.cs,12);nxCastPk3(H,K9.uCO,N.co,12);nxCastPk3(H,K9.uCH,N.ch,12);J[K9.uGar/4]=0;H.set(N.gn,K9.uGN/4);H.set(N.of,K9.uOF/4);if(N.gt){H.set(N.gt,K9.uGT/4);H.set(N.gb,K9.uGB/4);nxCastPk3(H,K9.uCT,N.ct,12);nxCastPk3(H,K9.uCB,N.cb,12);}\nJ[K9.uGK/4]=0;J[K9.uGM/4]=0;J[K9.uGMH/4]=0;H.set(N.mdf,K9.uMoodF/4);H.set(N.bh,K9.uBH/4);H[K9.uTm/4]=Number(ex.tnow())/60;H.set(N.ih,K9.uIH/4);J[K9.uEyeG/4]=0;J[K9.uAnatM/4]=(typeof ANAT9!=='undefined'&&ANAT9)?1:0;\nJ[K9.uAtlOn/4]=R.atl?1:0;H.set(N.atlMean||[1,1,1],K9.uAtlMean/4);J[K9.uAuth/4]=0;H[K9.uZMN/4]=N.an.zmn;H[K9.uH/4]=N.an.H;H[K9.uNIP/4]=N.an.nip;H[K9.uEYE/4]=N.an.eye;H.set([sd9[0],sd9[1],sd9[2]],K9.uSunM/4);J[K9.uShd/4]=0;H.set(NXSKYF,K9.uSkyF/4);J[K9.uVt/4]=location.search.indexOf('tm=0')>=0?0:1;J[K9.uNrmOn/4]=R.nrm?1:0;\ndev.queue.writeBuffer(G.cub,0,G.cvb);dev.queue.writeBuffer(G.cuf,0,G.cfb);\nrp.setPipeline(G.cpl);rp.setBindGroup(0,G.cbgv);rp.setBindGroup(1,G.cbgf);rp.setVertexBuffer(0,R.bp);rp.setVertexBuffer(1,R.bj);rp.setVertexBuffer(2,R.bw);rp.setVertexBuffer(3,R.bn);rp.setVertexBuffer(4,R.buv);rp.setVertexBuffer(5,R.bhs);rp.setIndexBuffer(R.ib,'uint16');rp.drawIndexed(R.ni,nv);\nwindow.__nx_cast_drawn=nv;window.__nx_cast_draw='drawn';}catch(e9c){window.__nx_cast_draw='refused:'+String(e9c);G.castdead=1;}}\nfunction nxGpuCastPop(dev,G){if(G.cscope){G.cscope=0;dev.popErrorScope().then(function(e9){if(e9){G.castdead=1;window.__nx_cast_draw='validation:'+e9.message;console.log('nishi: S12 cast draw refused '+e9.message);}});}}\nfunction gpuDraw(){const G=GPU,dev=G.dev;\nif(window.__sov_gpuerr)throw 'webgpu-uncaptured:'+window.__sov_gpuerr;\nif(!G.castsaid){G.castsaid=1;window.__sov_gpucast='Resident body mesh is wired on WebGPU; inspect __nx_cast_draw for submission or validation status. Shader compilation: '+window.__nx_cast_wgsl+'. Hair ribbons, garment meshes, eyeballs, planar cast shadows and visiting characters still need parity with WebGL2.';console.log('nishi: '+window.__sov_gpucast);}\n// resolution + refresh + uniform VALUES mirror glDraw exactly (same organ doors, same math);\n// consolidation into one shared frameU() is OWED AT GRADUATION -- while this tier is levered,\n// touching the proven GL path to share code would put the experiment inside the incumbent.\nconst dpr=devicePixelRatio||1;const q=Number(ex.quality?ex.quality():2);\nlet scl=1;\n// scale floor + review-outranks-governor: MIRRORS glDraw exactly (see its derivation; the shared\n// frameU() consolidation stays owed at this tier's graduation).\n\n\nconst _mob9=(\"ontouchstart\" in window)||navigator.maxTouchPoints>0;\nconst _PXB=_mob9?2300000:8300000;\nlet wpx=Math.max(64,Math.floor(cv.clientWidth*dpr*scl)),hpx=Math.max(64,Math.floor(cv.clientHeight*dpr*scl));\nif(wpx*hpx>_PXB){const f9=Math.sqrt(_PXB/(wpx*hpx));wpx=Math.max(64,Math.floor(wpx*f9));hpx=Math.max(64,Math.floor(hpx*f9));}\nwindow.__px=wpx+\"x\"+hpx+(_mob9?\"mG\":\"dG\");\nif(cv.width!==wpx||cv.height!==hpx){cv.width=wpx;cv.height=hpx;}\n// S10 (2026-09-05): the DEPTH ATTACHMENT of the WebGPU tier -- one depth24plus texture sized to the canvas, recreated on resize,\n// cleared to 1.0 every frame. The world pass is a BACKGROUND (depthWriteEnabled:false, depthCompare:always); the cast pipeline\n// (S12) tests against the cleared buffer. Owed S10b: the raycaster writes its hit distance through @builtin(frag_depth).\nif(!G.dt||G.dtw!==cv.width||G.dth!==cv.height){if(G.dt){G.dt.destroy();}G.dt=dev.createTexture({size:[cv.width,cv.height],format:\"depth24plus\",usage:GPUTextureUsage.RENDER_ATTACHMENT});G.dtw=cv.width;G.dth=cv.height;G.dtv=G.dt.createView();}\nconst ed=Number(ex.broken())+Number(ex.placed());const tn9=Number(ex.tnow());const ag9=ex.arena_gen?Number(ex.arena_gen()):0;\nif(ed!==G.lastEd||ag9!==G.lastAg||((tn9&63)===0&&tn9!==G.lastRefreshTick)){G.lastEd=ed;G.lastAg=ag9;G.lastRefreshTick=tn9;\ndev.queue.writeTexture({texture:G.t3},new Uint8Array(ex.memory.buffer,VOX,128*48*128),{bytesPerRow:128,rowsPerImage:128},[128,128,48]);\nif(G.th&&ex.hq_off){const hb9=new BigInt64Array(ex.memory.buffer,Number(ex.hq_off()),16384);const hf9=new Float32Array(16384);for(let i9=0;i9<16384;i9++){hf9[i9]=Number(hb9[i9])/256;}dev.queue.writeTexture({texture:G.th},hf9,{bytesPerRow:512},[128,128]);}}\nex.set_res(BigInt(cv.width),BigInt(cv.height));ex.pack_uniforms();\ndev.queue.writeBuffer(G.ub,0,ex.memory.buffer,Number(ex.uniform_off()),NXU_SIZE);\nconst enc=dev.createCommandEncoder();\nconst passDescriptor={colorAttachments:[{view:G.gctx.getCurrentTexture().createView(),loadOp:\"clear\",storeOp:\"store\",clearValue:{r:0,g:0,b:0,a:1}}],depthStencilAttachment:{view:G.dtv,depthClearValue:1.0,depthLoadOp:\"clear\",depthStoreOp:\"store\"}};const timed=nxGpuTimerPoolBegin(G.timer,passDescriptor,G.frames||0);\nconst rp=enc.beginRenderPass(passDescriptor);\nrp.setPipeline(G.pl);rp.setBindGroup(0,G.bg);rp.draw(3);nxGpuCast(dev,G,rp);nxGpuDrawVisitors(dev,G,rp);rp.end();\nconst timerSubmission=timed?nxGpuTimerChecked(dev,function(){nxGpuTimerResolve(timed,enc);dev.queue.submit([enc.finish()]);}):null;if(!timed)dev.queue.submit([enc.finish()]);nxGpuCastPop(dev,G);if(timed)nxGpuTimerPoolRead(G.timer,timed,G,timerSubmission);\nif(NXBLOCKS&&!G.blocksDone&&G.frames>2){G.blocksDone=1;nxReadBlocks(dev,G);}G.frames=(G.frames||0)+1;}\n" as *u8)
614    return p
615}
616
617// GPE-VERIFY v2 (negctl PROVEN 2026-08-02: uBAD9 refused the ship, name printed) -- the
618// page-side compile lint (debt 1785728065, which bit TWICE on 2026-08-02:
619// a backtick inside a shader comment killed the whole page script, and a uniform used in a
620// stage that never declared it killed the NPC program -- both shipped behind GREEN gates,
621// caught only by screenshots). The emit lane cannot run a browser, but BOTH classes are
622// mechanically visible in the emitted bytes: (a) an UNCLOSED backtick segment = the JS-string
623// kill; (b) inside each backtick segment (the shader sources are the page's only template
624// literals), any uXxx token USED but not DECLARED as a uniform in THAT segment = the stage
625// kill. Fails CLOSED: any hit refuses the ship with the name printed.
626func gpe_verify(out: *u8, n: i64) -> i64 {
627    let names: *u8 = sys_mmap(64*32)
628    var nn: i64 = 0
629    var bad: i64 = 0
630    var seg: i64 = 0 - 1
631    var i: i64 = 0
632    while i < n {
633        if out[i] == (96 as u8) {
634            if seg < 0 { seg = i + 1 } else {
635                // ---- declarations in [seg, i) ----
636                nn = 0
637                var p: i64 = seg
638                while p < i - 8 {
639                    var hit: i64 = 1
640                    let kw: *u8 = "uniform " as *u8
641                    var kk: i64 = 0
642                    while kk < 8 { if out[p+kk] != kw[kk] { hit = 0; kk = 8 } else { kk = kk + 1 } }
643                    if hit == 1 {
644                        var q: i64 = p + 8
645                        var ts: i64 = 0 - 1
646                        var ls: i64 = 0 - 1
647                        var le: i64 = 0 - 1
648                        var run: i64 = 1
649                        while run == 1 {
650                            if q >= i { run = 0 } else {
651                                let c: i64 = out[q] as i64
652                                var idc: i64 = 0
653                                if c >= 97 { if c <= 122 { idc = 1 } }
654                                if c >= 65 { if c <= 90 { idc = 1 } }
655                                if c >= 48 { if c <= 57 { idc = 1 } }
656                                if c == 95 { idc = 1 }
657                                if idc == 1 { if ts < 0 { ts = q } }
658                                if idc == 0 {
659                                    if ts >= 0 { ls = ts; le = q; ts = 0 - 1 }
660                                    if c == 59 { run = 0 }
661                                    if c == 91 { run = 0 }
662                                }
663                                q = q + 1
664                            }
665                        }
666                        if ls >= 0 { if nn < 64 {
667                            var k: i64 = 0
668                            while k < 31 {
669                                if ls + k < le { names[nn*32+k] = out[ls+k] } else { names[nn*32+k] = 0 as u8 }
670                                k = k + 1
671                            }
672                            names[nn*32+31] = 0 as u8
673                            nn = nn + 1
674                        } }
675                    }
676                    p = p + 1
677                }
678                // ---- WGSL declarations in [seg, i) (S12 step 1, 2026-09-06): a WGSL stage declares its uniforms as
679                // members of `struct U{ name:type, ... }` and its textures and samplers as `var name:...;`, never with the
680                // `uniform` keyword -- so an identifier uXxx IMMEDIATELY followed by ':' (and not reached through '.',
681                // which is a use) is a declaration in that segment. Without this the two cast WGSL literals killed the
682                // ship on every one of their names (EMIT-FAIL, page under floor): the verifier working as designed
683                // against a stage shape it had never seen, and the fix is the shape, not an exemption.
684                var p3: i64 = seg
685                while p3 < i - 2 {
686                    var go3: i64 = 0
687                    if out[p3] == (117 as u8) {
688                        let c4: i64 = out[p3+1] as i64
689                        if c4 >= 65 { if c4 <= 90 { go3 = 1 } }
690                    }
691                    if go3 == 1 { if p3 > seg {
692                        let pb3: i64 = out[p3-1] as i64
693                        if pb3 >= 97 { if pb3 <= 122 { go3 = 0 } }
694                        if pb3 >= 65 { if pb3 <= 90 { go3 = 0 } }
695                        if pb3 >= 48 { if pb3 <= 57 { go3 = 0 } }
696                        if pb3 == 95 { go3 = 0 }
697                        if pb3 == 46 { go3 = 0 }
698                    } }
699                    if go3 == 1 {
700                        var e3: i64 = p3 + 1
701                        var r3: i64 = 1
702                        while r3 == 1 {
703                            if e3 >= i { r3 = 0 } else {
704                                let c5: i64 = out[e3] as i64
705                                var id5: i64 = 0
706                                if c5 >= 97 { if c5 <= 122 { id5 = 1 } }
707                                if c5 >= 65 { if c5 <= 90 { id5 = 1 } }
708                                if c5 >= 48 { if c5 <= 57 { id5 = 1 } }
709                                if c5 == 95 { id5 = 1 }
710                                if id5 == 1 { e3 = e3 + 1 } else { r3 = 0 }
711                            }
712                        }
713                        if e3 < i { if out[e3] == (58 as u8) { if nn < 64 {
714                            var k3: i64 = 0
715                            while k3 < 31 {
716                                if p3 + k3 < e3 { names[nn*32+k3] = out[p3+k3] } else { names[nn*32+k3] = 0 as u8 }
717                                k3 = k3 + 1
718                            }
719                            names[nn*32+31] = 0 as u8
720                            nn = nn + 1
721                        } } }
722                        p3 = e3
723                    } else { p3 = p3 + 1 }
724                }
725                // ---- usages uXxx in [seg, i) ----
726                var p2: i64 = seg
727                while p2 < i - 1 {
728                    var go: i64 = 0
729                    if out[p2] == (117 as u8) {
730                        let c2: i64 = out[p2+1] as i64
731                        if c2 >= 65 { if c2 <= 90 { go = 1 } }
732                    }
733                    if go == 1 { if p2 > seg {
734                        let pb: i64 = out[p2-1] as i64
735                        if pb >= 97 { if pb <= 122 { go = 0 } }
736                        if pb >= 65 { if pb <= 90 { go = 0 } }
737                        if pb >= 48 { if pb <= 57 { go = 0 } }
738                        if pb == 95 { go = 0 }
739                    } }
740                    if go == 1 {
741                        var e2: i64 = p2 + 1
742                        var r2: i64 = 1
743                        while r2 == 1 {
744                            if e2 >= i { r2 = 0 } else {
745                                let c3: i64 = out[e2] as i64
746                                var id3: i64 = 0
747                                if c3 >= 97 { if c3 <= 122 { id3 = 1 } }
748                                if c3 >= 65 { if c3 <= 90 { id3 = 1 } }
749                                if c3 >= 48 { if c3 <= 57 { id3 = 1 } }
750                                if c3 == 95 { id3 = 1 }
751                                if id3 == 1 { e2 = e2 + 1 } else { r2 = 0 }
752                            }
753                        }
754                        let ln: i64 = e2 - p2
755                        var found: i64 = 0
756                        var t2: i64 = 0
757                        while t2 < nn {
758                            var m2: i64 = 1
759                            if ln > 31 { m2 = 0 }
760                            if m2 == 1 {
761                                var k2: i64 = 0
762                                while k2 < ln {
763                                    if names[t2*32+k2] != out[p2+k2] { m2 = 0; k2 = ln } else { k2 = k2 + 1 }
764                                }
765                            }
766                            if m2 == 1 { if names[t2*32+ln] != (0 as u8) { m2 = 0 } }
767                            if m2 == 1 { found = 1; t2 = nn } else { t2 = t2 + 1 }
768                        }
769                        if found == 0 {
770                            bad = bad + 1
771                            let msg: *u8 = "GPE-VERIFY v2 RED: uniform used but not declared in its shader stage: " as *u8
772                            sys_write(2, msg, gpe_slen(msg))
773                            sys_write(2, ((out as i64) + p2) as *u8, ln)
774                            sys_write(2, "\n" as *u8, 1)
775                        }
776                        p2 = e2 - 1
777                    }
778                    p2 = p2 + 1
779                }
780                seg = 0 - 1
781            }
782        }
783        i = i + 1
784    }
785    if seg >= 0 {
786        bad = bad + 1
787        let m2s: *u8 = "GPE-VERIFY RED: UNCLOSED backtick segment -- the page script is dead\n" as *u8
788        sys_write(2, m2s, gpe_slen(m2s))
789    }
790    return bad
791}
792
793// build the page into `out`; returns its byte length. Pure of the filesystem so the gate can
794// drive it with synthetic wasm bytes and byte-assert the result. vnum = game-spec VARIANT the
795// page selects at init (one engine wasm, many games -- the emission lever).
796// gpe_num: append a decimal integer -- pages carry NUMBERS as data (the JS/HTML-interop-only
797// law, 2026-08-12: values may cross into the page; logic may not)
798func gpe_num(out: *u8, pos: i64, v: i64) -> i64 {
799    var p: i64 = pos
800    var x: i64 = v
801    if x < 0 { out[p] = 45 as u8; p = p + 1; x = 0 - x }
802    if x == 0 { out[p] = 48 as u8; return p + 1 }
803    let t: *u8 = sys_mmap(32)
804    var k: i64 = 0
805    while x > 0 { t[k] = (48 + (x % 10)) as u8; x = x / 10; k = k + 1 }
806    while k > 0 { k = k - 1; out[p] = t[k]; p = p + 1 }
807    return p
808}
809// legacy 7-arg entry, byte-preserving: delegates with the historic constant seed, so every
810// existing caller emits the exact bytes it always did (proven by the W1 KAT: recipe rows at
811// seed 20260728 reproduce the shipped craft/beach/vale pages hash-identically)
812// NX-WORLD-NPCS (donors-into-world, 2026-08-23): emit const NXNPCS=[...] from
813// knowledge/world_npcs.conf rows name\tasset\tlabel\tworlds (worlds = * or a digit list of
814// vnums). ABSENT conf = empty cast, announced on-page (config-hierarchy law: the fallback is
815// declared, never silent). A malformed row REFUSES the whole build via gpr_refuse -- half a
816// cast must not ship. The asset URL namespace is /world/<asset>.nxa by construction, so the
817// conf cannot point a page outside the world dir.
818// SUNT: sun-colour LUT baked at EMIT time from the gated transmittance oracle (ATMTRANS 10/10):
819// 64 rows RGB in [0,1], mu = row/63 -- noon white, sunset reddened at the measured 25:1 R:B ratio.
820func gpe_sunt(out: *u8, pos: i64) -> i64 {
821    var p: i64 = pos
822    p = gpe_ap(out, p, "if(!window.__sunt)window.__sunt=[" as *u8)
823    let rgb: *i64 = sys_mmap(ATM_SUNLUT_N * 24) as *i64
824    atm_bake_sun_lut(rgb)
825    var row: i64 = 0
826    while row < ATM_SUNLUT_N {
827        var c: i64 = 0
828        while c < 3 {
829            if row + c > 0 { p = gpe_ap(out, p, "," as *u8) }
830            p = gpe_num(out, p, rgb[row*3 + c])
831            p = gpe_ap(out, p, "/65536" as *u8)
832            c = c + 1
833        }
834        row = row + 1
835    }
836    p = gpe_ap(out, p, "];" as *u8)
837    return p
838}
839
840func gpe_npcs_emit(out: *u8, pos: i64, vnum: i64) -> i64 {
841    var p: i64 = pos
842    p = gpe_ap(out, p, "const NXNPCS=[" as *u8)
843    let ln: *i64 = sys_mmap(16) as *i64
844    let buf: *u8 = sys_read_file("knowledge/world_npcs.conf" as *u8, ln)
845    if (buf as i64) == 0 { p = gpe_ap(out, p, "];\n" as *u8); return p }
846    let n: i64 = ln[0]
847    var lno: i64 = 0
848    var i: i64 = 0
849    var emitted: i64 = 0
850    while i < n {
851        lno = lno + 1
852        let ls: i64 = i
853        var le: i64 = ls
854        var scan: i64 = 1
855        while scan == 1 {
856            if le >= n { scan = 0 } else { if buf[le] == (10 as u8) { scan = 0 } else { le = le + 1 } }
857        }
858        if le >= n { return gpr_refuse(lno, "npcs.conf: no trailing newline (append one)" as *u8) }
859        i = le + 1
860        if le > ls { if buf[ls] != (35 as u8) {
861            buf[le] = 0 as u8
862            let F: *i64 = sys_mmap(48) as *i64
863            F[0] = (buf as i64) + ls
864            var nf: i64 = 1
865            var q: i64 = ls
866            while q < le {
867                if buf[q] == (9 as u8) { buf[q] = 0 as u8; if nf < 5 { F[nf] = (buf as i64) + q + 1 }; nf = nf + 1 }
868                q = q + 1
869            }
870            if nf != 4 { return gpr_refuse(lno, "npcs.conf: needs 4 tab fields name/asset/label/worlds" as *u8) }
871            let nm: *u8 = F[0] as *u8
872            let asx: *u8 = F[1] as *u8
873            let lb: *u8 = F[2] as *u8
874            let wl: *u8 = F[3] as *u8
875            if nm[0] == (0 as u8) { return gpr_refuse(lno, "npcs.conf: empty name" as *u8) }
876            if asx[0] == (0 as u8) { return gpr_refuse(lno, "npcs.conf: empty asset" as *u8) }
877            if lb[0] == (0 as u8) { return gpr_refuse(lno, "npcs.conf: empty label" as *u8) }
878            var hit: i64 = 0
879            if wl[0] == (42 as u8) { hit = 1 } else {
880                var w2: i64 = 0
881                while wl[w2] != (0 as u8) {
882                    if (wl[w2] as i64) == 48 + vnum { hit = 1 }
883                    w2 = w2 + 1
884                }
885            }
886            if hit == 1 {
887                if emitted > 0 { p = gpe_ap(out, p, "," as *u8) }
888                p = gpe_ap(out, p, "{n:\"" as *u8); p = gpe_ap(out, p, nm)
889                p = gpe_ap(out, p, "\",u:\"/world/" as *u8); p = gpe_ap(out, p, asx)
890                p = gpe_ap(out, p, ".nxa\",l:\"" as *u8); p = gpe_ap(out, p, lb)
891                p = gpe_ap(out, p, "\"}" as *u8)
892                emitted = emitted + 1
893            }
894        } }
895    }
896    p = gpe_ap(out, p, "];\n" as *u8)
897    return p
898}
899
900func gpe_build(wasm: *u8, wn: i64, title: *u8, native: *u8, ctrl: *u8, vnum: i64, out: *u8) -> i64 {
901    return gpe_build_s(wasm, wn, title, native, ctrl, vnum, GPE_MAGIC_20260728, 0 as *u8, out)
902}
903// ---- HAIR GEOMETRY, DRIVEN BY THE N-SEGMENT CHAIN (2026-08-25) -------------------------------
904// THE RUNG THIS CLOSES. Hair geometry was already in the asset and already on screen: ref9d.nxa
905// carries HSTR 2200 strands x 8 points (measured, nx_asset_floor_gate) and this emitter drew it.
906// It drew it RIGID -- every hair vertex skinned haw=1 to the head joint -- so the groom was a
907// helmet that could only translate and rotate with the skull. Separately nx_hairdyn_lib shipped a
908// spring-bone CHAIN on nx_softdyn's one solver and was imported by NOTHING but its own gate.
909// This is the join: the renderer now consumes N PER-SEGMENT offsets, not one.
910//
911// CORRECTED 2026-09-01. THE PARAGRAPH THAT STOOD HERE READ "ONE SOLVER, NO JS TWIN. The page does
912// not integrate springs ... baked into the page as a table the page replays." That was true of the
913// baked-table design and is FALSE of what ships -- and the same false sentence was being EMITTED
914// into every served page (gpe_hair_chain, corrected in the same edit). The shared table was
915// replaced by a PER-INSTANCE runtime chain: nxHairTick integrates NXHCH_NPC*NXHCH_N = 84
916// spring-bone links every frame, and its own comment says so -- "sd_step_axq X/Z verbatim".
917// It IS a JS twin, and it is deliberate: per-instance state lets girls differ, which one shared
918// table can never do. What keeps it honest is INTEGER FIDELITY, not absence -- K, C, GDIV, LIM, Q8
919// and the segment count are all emitted from the same NishiLang constants the plant uses, and every
920// division is Math.trunc, so the JS arithmetic IS the i64 arithmetic. The duplicate-ruler risk the
921// old paragraph feared is real and is now CARRIED, not denied; the rungs that discharge it are
922// GE21 wc_hair_tick and GE22 gpe_wasm_hair_bind. Until those land, say what ships.
923//
924// EVERY NUMBER BELOW IS DERIVED, NONE CHOSEN:
925//   nseg   = HSTR's own points-per-strand minus one -- the groom's segmentation, not a taste.
926//   frames = ticks per ONE natural period = ticks_per_second*1000/SB_HAIR_FN_MHZ, so the table is
927//            exactly one cycle of the SHIPPED plant and loops seamlessly. The gate-pinned 4221
928//            and the ringdown-MEASURED 4285 floor to the same integer, so the table length does
929//            not depend on which of the two a reader trusts.
930//   seglen = SD_Q8, one model unit. nx_hairdyn_gate's T4 PROVES the frequency is independent of
931//            seglen, so this is provably immaterial to the dynamics rather than tuned.
932//   amp    = hd_amp_q8(), the lib's own excitation, derived from the SB_MAXD_HAIR clamp.
933const GPE_HSTR_WORDS_PER_STRAND: i64 = 24
934const GPE_AXES: i64 = 3
935// The shipped guide budget: the incumbent block sampled 550 guides and its own comment states the
936// consequence -- 8 jittered locks per guide per girl = 4400 locks/head. PRESERVED, not re-chosen:
937// changing it would change the shipped look under cover of a dynamics change.
938// 900: operator re-chose the density 2026-08-26 ("balding man in sparseness" at 550); the
939// budget note below still holds -- locks per guide stay 8, so the cost scales linearly ~1.6x.
940const GPE_HAIR_GUIDES: i64 = 900
941func gpe_hstr_pts() -> i64 { return GPE_HSTR_WORDS_PER_STRAND/GPE_AXES }
942func gpe_hair_nseg() -> i64 { return gpe_hstr_pts() - 1 }
943func gpe_hair_seglen() -> i64 { return SD_Q8 }
944
945// THE ONE SEEDING RULER, shared by the cycle measurement and BOTH bakes. Settle to rest, then
946// displace the whole strand laterally and release -- nx_hairdyn_lib's own excitation, which strains
947// ONLY the root joint and so excites the fundamental sway rather than a shear mode real hair does
948// not have. A second copy of this preamble beside the first would be free to drift, and the drift
949// would show up as a table MEASURED under one excitation and REPLAYED under another, with no wrong
950// number anywhere to find.
951func gpe_hair_seed(st: *i64, n: i64, rigid: i64) -> i64 {
952    let seglen: i64 = gpe_hair_seglen()
953    hd_seat(st, n, 0, 0, 0, seglen)
954    var s: i64 = 0
955    while s < HD_RD_SETTLE {
956        if rigid == 0 { hd_tick(st, n, 0, 0, 0, seglen, SB_K_HAIR, SB_C_HAIR, SB_MAXD_HAIR) }
957        if rigid == 1 { hd_tick_rigid(st, n, 0, 0, 0, seglen) }
958        s = s + 1
959    }
960    let amp: i64 = hd_amp_q8()
961    var d: i64 = 0
962    while d < n {
963        st[d*SD_STRIDE] = st[d*SD_STRIDE] + amp
964        d = d + 1
965    }
966    return 0
967}
968
969// ---- ONE CHAIN CYCLE, MEASURED FROM THE TIP'S OWN TRACE. ----
970// SB_HAIR_FN_MHZ is SEGMENT 0's plant frequency, and nx_hairdyn_lib's header says exactly why:
971// segment 0 is the free decay, the one-degree-of-freedom oscillator sb_k_sym actually describes,
972// while the tip is a property of PROPAGATION and not of the plant. Sizing a WHOLE-CHAIN table by
973// segment 0's period is therefore a SUBJECT MISMATCH, and it shipped: nx_gpe_hair_geometry_gate
974// measured the emitted table and found the tip crossing zero ONCE where a closed cycle needs twice,
975// i.e. the replay wrapped mid-swing and jump-cut every 14 frames. The analyser cannot be asked for
976// the tip's period either -- the same header records rd_analyze REFUSING the tip with rc=-4 because
977// the tip's amplitude GROWS first while energy propagates down the chain. So the period is MEASURED
978// from the trace: the interval between two zero crossings IN THE SAME DIRECTION IS one period, by
979// definition. No tolerance is chosen anywhere here.
980const GPE_HAIR_CYC_FIRST: i64 = 1
981const GPE_HAIR_CYC_LAST: i64 = 3
982// TWO NUMBERS OUT OF ONE SCAN. A second scan for the second number would be a duplicate ruler
983// reading the same trace twice, free to disagree with itself about the cycle it just measured.
984const GPE_HAIR_CYC_SKIP: i64 = 0
985const GPE_HAIR_CYC_LEN: i64 = 1
986const GPE_HAIR_CYC_SLOTS: i64 = 2
987// SEARCH BOUND: nx_hairdyn_lib's OWN analysis window -- the longest trace that lib ever hands its
988// analyser. Borrowing it means this scan can never outlast the evidence window the plant itself was
989// measured in, and it is the lib's constant rather than a fresh guess. An exhausted scan ANNOUNCES
990// by returning 0 rather than inventing a length, and a zero-frame table fails the gate's own
991// fixture tooth -- loud, never silently short.
992func gpe_hair_cycle(out: *i64) -> i64 {
993    let n: i64 = gpe_hair_nseg()
994    let seglen: i64 = gpe_hair_seglen()
995    let st: *i64 = hd_alloc(n)
996    gpe_hair_seed(st, n, 0)
997    var cross: i64 = 0
998    var prev: i64 = 0
999    var f1: i64 = 0
1000    var f3: i64 = 0
1001    var fr: i64 = 0
1002    while fr < HD_RD_SAMPLES {
1003        hd_tick(st, n, 0, 0, 0, seglen, SB_K_HAIR, SB_C_HAIR, SB_MAXD_HAIR)
1004        fr = fr + 1
1005        let v: i64 = hd_tip_x_q8(st, n)
1006        var sg: i64 = 0
1007        if v > 0 { sg = 1 }
1008        if v < 0 { sg = 0 - 1 }
1009        if sg != 0 {
1010            if prev != 0 {
1011                if sg != prev {
1012                    cross = cross + 1
1013                    if cross == GPE_HAIR_CYC_FIRST { f1 = fr }
1014                    if cross == GPE_HAIR_CYC_LAST { f3 = fr }
1015                }
1016            }
1017            prev = sg
1018        }
1019    }
1020    if f3 == 0 { return 0 }
1021    out[GPE_HAIR_CYC_SKIP] = f1
1022    out[GPE_HAIR_CYC_LEN] = f3 - f1
1023    return 1
1024}
1025func gpe_hair_cycle_at(slot: i64) -> i64 {
1026    let o: *i64 = sys_mmap(GPE_HAIR_CYC_SLOTS*8) as *i64
1027    o[GPE_HAIR_CYC_SKIP] = 0
1028    o[GPE_HAIR_CYC_LEN] = 0
1029    gpe_hair_cycle(o)
1030    return o[slot]
1031}
1032// ---- THE DRIVE: hair is DRIVEN at the head's gait cadence, and the table is baked at STEADY
1033// STATE. WHY NOT FREE DECAY (the previous design): measured 2026-08-25 by bake replication -- a
1034// release excitation is a TRANSIENT. The tip whips to ~64x the seed while energy cascades down the
1035// chain (seed 64 q8 -> tip 4078 q8), then rings down to ZERO within ~900 ticks. A damped free decay
1036// has no periodic cycle to bake: looping its loudest cycle replayed the whip forever with a
1037// jump-cut at every wrap. That WAS /world hair "flying about". A PERIODICALLY DRIVEN chain settles
1038// to a steady state sharing the drive's period, so a one-period table loops BY CONSTRUCTION.
1039// FREQUENCY: the banked gait band is gamefeel_oracle.conf's scurr2011 row (2to3hz-gait -- the same
1040// citation the chest lane derives from). The table needs an INTEGER tick period; at 60 ticks/s
1041// every frames value in [20,30] lands in-band, and 24 is the one whose frequency sits exactly on
1042// the band midpoint: 60000/24 = 2500 mHz.
1043const GPE_HAIR_DRIVE_FRAMES: i64 = 24
1044// AMPLITUDE: a picked display value, NAMED as picked, and fenced by two MECHANICAL refusals in the
1045// bake: (1) validity -- peak per-joint x-strain must stay under seglen/4 (a 14 deg joint angle, the
1046// small-angle regime the linear chain is valid in; the retired release excitation was 3 seglen =
1047// 71.6 deg); (2) sub-resonance -- the drive period must exceed the chain's own MEASURED free
1048// period, bounding the steady-state gain. A violation returns a zero-entry table (the loud refusal
1049// the gate's fixture tooth already fails on), never a resonant one.
1050const GPE_HAIR_DRIVE_AMP_Q8: i64 = 32
1051// SETTLE HORIZON: the v3 probe measured free-decay silence within ~900 ticks; 40 drive periods =
1052// 960 ticks covers it with margin. The steady-state DETECTOR normally exits far earlier.
1053const GPE_HAIR_SETTLE_PERIODS_MAX: i64 = 40
1054// Root sway at bake tick t: Q16 sine COMPOSED from nx_audio_osc -- the estate's one integer sine,
1055// never re-implemented. Phase derives from t mod frames, so every period repeats the identical
1056// phases and the table closes exactly.
1057func gpe_hair_drive(t: i64) -> i64 {
1058    let ph: i64 = ((t % GPE_HAIR_DRIVE_FRAMES)*OSC_PHASE)/GPE_HAIR_DRIVE_FRAMES
1059    return (GPE_HAIR_DRIVE_AMP_Q8*osc_sin_unit(ph))/OSC_MAGIC_65536
1060}
1061// FRAMES = one DRIVE period, an integer by construction (see GPE_HAIR_DRIVE_FRAMES above).
1062func gpe_hair_frames() -> i64 { return GPE_HAIR_DRIVE_FRAMES }
1063// (the RELEASE-TRANSIENT skip helper was retired with the free-decay bake: the driven bake settles
1064// to steady state instead. gpe_hair_cycle still records the skip slot inside its own scan.)
1065
1066// Bake one natural period of the chain. rigid=1 swaps hd_tick for hd_tick_rigid -- the lib's OWN
1067// dynamics-removed control -- which yields a table with ZERO variance across frames. That is the
1068// anti-vacuity subject: a renderer fed the rigid table CANNOT move, so a gate that passes on it
1069// is measuring nothing. Returns the number of table entries written.
1070func gpe_hair_chain_bake(tbl: *i64, rigid: i64) -> i64 {
1071    let n: i64 = gpe_hair_nseg()
1072    let f: i64 = gpe_hair_frames()
1073    let seglen: i64 = gpe_hair_seglen()
1074    let st: *i64 = hd_alloc(n)
1075    // SETTLE UNDER THE DRIVE to steady state -- DETECTED, never assumed: whole drive periods run
1076    // until two consecutive periods' peak |tip| agree within 1 q8. The rigid control follows the
1077    // root instantly, so it converges on its second period by construction.
1078    hd_seat(st, n, 0, 0, 0, seglen)
1079    var t: i64 = 0
1080    var prevpk: i64 = 0 - 1
1081    var steady: i64 = 0
1082    var per: i64 = 0
1083    while steady == 0 {
1084        if per >= GPE_HAIR_SETTLE_PERIODS_MAX { return 0 }
1085        var pk: i64 = 0
1086        var k: i64 = 0
1087        while k < f {
1088            let rx: i64 = gpe_hair_drive(t)
1089            if rigid == 0 { hd_tick(st, n, rx, 0, 0, seglen, SB_K_HAIR, SB_C_HAIR, SB_MAXD_HAIR) }
1090            if rigid == 1 { hd_tick_rigid(st, n, rx, 0, 0, seglen) }
1091            var v: i64 = hd_tip_x_q8(st, n)
1092            if v < 0 { v = 0 - v }
1093            if v > pk { pk = v }
1094            t = t + 1
1095            k = k + 1
1096        }
1097        var dd: i64 = pk - prevpk
1098        if dd < 0 { dd = 0 - dd }
1099        if prevpk >= 0 { if dd <= 1 { steady = 1 } }
1100        prevpk = pk
1101        per = per + 1
1102    }
1103    // SUB-RESONANCE REFUSAL (mechanical): the drive period must exceed the chain's own measured
1104    // free period -- gpe_hair_cycle still measures it from the free-decay trace -- or the steady
1105    // gain is resonant. Refuse rather than bake a resonant table.
1106    if rigid == 0 {
1107        let freeper: i64 = gpe_hair_cycle_at(GPE_HAIR_CYC_LEN)
1108        if freeper == 0 { return 0 }
1109        if f <= freeper { return 0 }
1110    }
1111    // BAKE exactly one drive period at steady state, TABLE RELATIVE TO THE ROOT: the root's sway
1112    // is virtual (the body mesh does not move), so the consumer sees hair motion relative to the
1113    // scalp -- segment 0 nearly still, lag growing down the strand. The rigid control follows the
1114    // root exactly, so its root-relative table is ALL ZEROS: zero variance, the anti-vacuity
1115    // subject preserved.
1116    var mxstrain: i64 = 0
1117    var fr: i64 = 0
1118    while fr < f {
1119        let rx: i64 = gpe_hair_drive(t)
1120        if rigid == 0 { hd_tick(st, n, rx, 0, 0, seglen, SB_K_HAIR, SB_C_HAIR, SB_MAXD_HAIR) }
1121        if rigid == 1 { hd_tick_rigid(st, n, rx, 0, 0, seglen) }
1122        var px: i64 = rx
1123        var i: i64 = 0
1124        while i < n {
1125            let x: i64 = hd_x_q8(st, i)
1126            tbl[fr*n + i] = x - rx
1127            var strain: i64 = x - px
1128            if strain < 0 { strain = 0 - strain }
1129            if strain > mxstrain { mxstrain = strain }
1130            px = x
1131            i = i + 1
1132        }
1133        t = t + 1
1134        fr = fr + 1
1135    }
1136    // VALIDITY REFUSAL (mechanical): peak per-joint x-strain must sit in the small-angle regime.
1137    if mxstrain > seglen/4 { return 0 }
1138    return f*n
1139}
1140
1141// gpe_hair_geometry -- THE CONTRACT SYMBOL. Emits the asset's own hair GEOMETRY (HVRT/HTRI mesh
1142// preferred, HSTR guide strands otherwise) plus the baked chain table, and the per-frame consumer
1143// that displaces each hair vertex by the offset of ITS OWN chain segment. A vertex's segment is
1144// DERIVED from its depth below the top of the groom, so the lag grows down the strand -- the one
1145// thing N copies of a single point can never produce.
1146// gpe_dress_runtime -- DRESS DYNAMICS, SCRIPT-SCOPE HALF (2026-08-26). The GVRT dress was skinned
1147// by nearest-body-vert copy -- the page's own comment: MOVES WITH THE SKIN, ZERO PHYSICS. This is
1148// the overlay tier (industry-standard skinned+dynamic): guide-grid XPBD per girl in BIND space
1149// (pins = top guide rows, gravity = bind -z, inertial kick from HER OWN ip motion exactly like
1150// the hair chain), capsule contact vs the bind-pose legs/torso (static -- the NAMED v1 limit:
1151// extreme swing-leg poses can still clip), upsampled to every dress vert and applied PRE-SKIN
1152// via a deformation texture (TEXTURE3, texelFetch by (gl_VertexID, girl)). Solver arithmetic
1153// replicates the gate-proven nx_gm_cloth_lib in integer-faithful JS: the XPBD projection, the
1154// st_alpha_tilde chain (Q12, dt-ref 4167us), and the GM_SKIN=2 truncation skin. Compliance is
1155// the gate's proven soft value; gravity derives from the page's own scale pairing.
1156func gpe_dress_runtime(out: *u8, pos: i64) -> i64 {
1157    var p: i64 = pos
1158    p = gpe_ap(out, p, "const NXGD_SUB=3,NXGD_ALPHA_SOFT=" as *u8)
1159    p = gpe_num(out, p, GPE_ALPHA_BEND_SOFT_Q12)
1160    p = gpe_ap(out, p, ",NXGD_G=" as *u8)
1161    p = gpe_num(out, p, 981*GPE_UNITS_PER_178CM/GPE_G_DEN_60HZ)
1162    p = gpe_ap(out, p, ",NXGD_SKIN=2,NXGD_Q12=4096,NXGD_DTREF=4167,NXGD_DTUS=16666,NXGD_PINROWS=2,NXGD_NPC=12;\n" as *u8)
1163    p = gpe_ap(out, p, "// NXGD_G = 981*171530/640800 (9.81 m/s^2 through the page's 1.78m=171530-unit pairing at 60Hz);\n// NXGD_ALPHA_SOFT = the gate-proven XG_ALPHA_BEND_SOFT_Q12; SKIN/Q12/DTREF are the lib's own.\n" as *u8)
1164    p = gpe_ap(out, p, "function nxDressTick(g,N){if(!N||!N.gdt||!N.l||!N.l.uGD)return 0;\nconst NG=N.gdGU*N.gdGV,NP=NXGD_NPC;\nif(!N.gds){N.gds={x:new Float64Array(NP*NG*3),v:new Float64Array(NP*NG*3),px:new Float64Array(NP*2),tex:new Float32Array(N.gnv2*NP*4),t:performance.now(),init:0};}\nconst st=N.gds,now=performance.now();\nconst dvr=(a9,b9)=>{if(b9===0)return 0;return a9>=0?Math.trunc((a9+Math.trunc(b9/2))/b9):-Math.trunc((-a9+Math.trunc(b9/2))/b9);};\n" as *u8)
1165    p = gpe_ap(out, p, "if(!st.init){for(let g9=0;g9<NP;g9++){for(let q9=0;q9<NG;q9++){st.x[(g9*NG+q9)*3]=N.gdRest[q9*3];st.x[(g9*NG+q9)*3+1]=N.gdRest[q9*3+1];st.x[(g9*NG+q9)*3+2]=N.gdRest[q9*3+2];}st.px[g9*2]=N.ip[g9*3];st.px[g9*2+1]=N.ip[g9*3+2];}st.init=1;st.t=now;}\n// alpha-tilde, the lib's exact chain: round(alpha*2/4096) then twice round(*4167/dtus)\nlet at9=dvr(NXGD_ALPHA_SOFT*2,NXGD_Q12);at9=dvr(at9*NXGD_DTREF,NXGD_DTUS);at9=dvr(at9*NXGD_DTREF,NXGD_DTUS);\nlet nt=Math.floor((now-st.t)*60/1000);if(nt>4)nt=4;if(nt<0)nt=0;st.t+=nt*1000/60;\n" as *u8)
1166    p = gpe_ap(out, p, "for(let g9=0;g9<NP;g9++){\n// inertial kick: HER world motion rotated into bind space by her heading (ih = sinA,cosA)\nconst wx=N.ip[g9*3],wz=N.ip[g9*3+2];const ddx=wx-st.px[g9*2],ddz=wz-st.px[g9*2+1];st.px[g9*2]=wx;st.px[g9*2+1]=wz;\nconst sA=N.ih[g9*4],cA=N.ih[g9*4+1],W2B=171530/1.78;\n// A TELEPORT IS NOT DYNAMICS (2026-08-30; the hair chain already carries this guard, the dress did not): the review\n// re-summon and the N key move a girl BLOCKS in one frame, and that delta became an inertial kick of ~5e5 bind\n// units that flung a guide across the beach (the red streak in frame b1788128841, second capture). Bound DERIVED\n// from the asset: a root jump in one frame longer than the skirt's own vertical span is not a stride -- no kick,\n// the guides simply follow her to the new spot.\nif(N.gdSpanB===undefined){let z0=1e18,z1=-1e18;for(let q=0;q<NG;q++){const z=N.gdRest[q*3+2];if(z<z0)z0=z;if(z>z1)z1=z;}N.gdSpanB=(z1-z0)/W2B;}\nconst tp9=Math.hypot(ddx,ddz)>N.gdSpanB;\nconst kbx=tp9?0:Math.trunc((ddx*cA-ddz*sA)*W2B),kby=tp9?0:Math.trunc((ddx*sA+ddz*cA)*W2B);\nfor(let k9=0;k9<nt;k9++){\nfor(let q9=0;q9<NG;q9++){const b9=(g9*NG+q9)*3;const pin9=q9<NXGD_PINROWS*N.gdGU;\nif(pin9){st.v[b9]=0;st.v[b9+1]=0;st.v[b9+2]=0;st.x[b9]=N.gdRest[q9*3];st.x[b9+1]=N.gdRest[q9*3+1];st.x[b9+2]=N.gdRest[q9*3+2];continue;}\nst.v[b9+2]-=NXGD_G;if(k9===0){st.v[b9]-=Math.trunc(kbx/(nt||1));st.v[b9+1]-=Math.trunc(kby/(nt||1));}\nst.x[b9]+=st.v[b9];st.x[b9+1]+=st.v[b9+1];st.x[b9+2]+=st.v[b9+2];}\n" as *u8)
1167    p = gpe_ap(out, p, "for(let it9=0;it9<8;it9++){const E=N.gdEdge;\nfor(let e9=0;e9<E.length;e9+=4){const a9=g9*NG+E[e9],c9=g9*NG+E[e9+1],rest9=E[e9+2],atl9=E[e9+3]===2?at9:0;\nconst dx9=st.x[c9*3]-st.x[a9*3],dy9=st.x[c9*3+1]-st.x[a9*3+1],dz9=st.x[c9*3+2]-st.x[a9*3+2];\nlet ln9=Math.trunc(Math.sqrt(dx9*dx9+dy9*dy9+dz9*dz9));if(ln9<1)ln9=1;\nconst dl9=Math.trunc((ln9-rest9)*4096/(8192+atl9));\nconst cx9=Math.trunc(dx9*dl9/ln9),cy9=Math.trunc(dy9*dl9/ln9),cz9=Math.trunc(dz9*dl9/ln9);\nconst af9=E[e9]>=NXGD_PINROWS*N.gdGU,bf9=E[e9+1]>=NXGD_PINROWS*N.gdGU;\nif(af9&&bf9){st.x[a9*3]+=Math.trunc(cx9/2);st.x[a9*3+1]+=Math.trunc(cy9/2);st.x[a9*3+2]+=Math.trunc(cz9/2);st.x[c9*3]-=Math.trunc(cx9/2);st.x[c9*3+1]-=Math.trunc(cy9/2);st.x[c9*3+2]-=Math.trunc(cz9/2);}\nelse if(af9){st.x[a9*3]+=cx9;st.x[a9*3+1]+=cy9;st.x[a9*3+2]+=cz9;}\nelse if(bf9){st.x[c9*3]-=cx9;st.x[c9*3+1]-=cy9;st.x[c9*3+2]-=cz9;}}}\n" as *u8)
1168    p = gpe_ap(out, p, "// capsule projection, gm_capsule_project verbatim (3 capsules: legs + torso)\nfor(let cp9=0;cp9<3;cp9++){const C=N.gdCap,o9=cp9*7;const ux9=C[o9+3]-C[o9],uy9=C[o9+4]-C[o9+1],uz9=C[o9+5]-C[o9+2];\nlet uu9=ux9*ux9+uy9*uy9+uz9*uz9;if(uu9<1)uu9=1;const rad9=C[o9+6],rs9=rad9+NXGD_SKIN;\nfor(let q9=NXGD_PINROWS*N.gdGU;q9<NG;q9++){const b9=(g9*NG+q9)*3;\nconst px9=st.x[b9]-C[o9],py9=st.x[b9+1]-C[o9+1],pz9=st.x[b9+2]-C[o9+2];\nlet tq9=Math.trunc((px9*ux9+py9*uy9+pz9*uz9)*4096/uu9);if(tq9<0)tq9=0;if(tq9>4096)tq9=4096;\nconst qx9=C[o9]+Math.trunc(ux9*tq9/4096),qy9=C[o9+1]+Math.trunc(uy9*tq9/4096),qz9=C[o9+2]+Math.trunc(uz9*tq9/4096);\nconst ex9=st.x[b9]-qx9,ey9=st.x[b9+1]-qy9,ez9=st.x[b9+2]-qz9;const dd9=ex9*ex9+ey9*ey9+ez9*ez9;\nif(dd9<rad9*rad9){let dn9=Math.trunc(Math.sqrt(dd9));if(dn9<1)dn9=1;\nst.x[b9]=qx9+Math.trunc(ex9*rs9/dn9);st.x[b9+1]=qy9+Math.trunc(ey9*rs9/dn9);st.x[b9+2]=qz9+Math.trunc(ez9*rs9/dn9);\nst.v[b9]=0;st.v[b9+1]=0;st.v[b9+2]=0;window.__nx_dress_hits=(window.__nx_dress_hits||0)+1;}}}}\n" as *u8)
1169    p = gpe_ap(out, p, "// upsample guide deltas to every dress vert and write the girl's texture row\nfor(let v9=0;v9<N.gnv2;v9++){const m9=v9*4;let ox9=0,oy9=0,oz9=0;\nfor(let w9=0;w9<4;w9++){const gi9=g9*NG+N.gdMap[m9+w9],wt9=N.gdWgt[m9+w9],r0=N.gdMap[m9+w9]*3;\nox9+=wt9*(st.x[gi9*3]-N.gdRest[r0]);oy9+=wt9*(st.x[gi9*3+1]-N.gdRest[r0+1]);oz9+=wt9*(st.x[gi9*3+2]-N.gdRest[r0+2]);}\nconst t9=(g9*N.gnv2+v9)*4;st.tex[t9]=ox9;st.tex[t9+1]=oy9;st.tex[t9+2]=oz9;}}\ng.activeTexture(g.TEXTURE3);g.bindTexture(g.TEXTURE_2D,N.gdt);\ng.texSubImage2D(g.TEXTURE_2D,0,0,0,N.gnv2,NXGD_NPC,g.RGBA,g.FLOAT,st.tex);g.activeTexture(g.TEXTURE0);\nwindow.__nx_dress_ticks=(window.__nx_dress_ticks||0)+nt;return 1;}\n" as *u8)
1170    p = gpe_ap(out, p, "// ?dressprobe -- girls_moving from the offsets the RENDERER consumes, the same honesty\n// contract as the hair probe\nwindow.__nx_dress_probe=function(){if(!GL||!GL.npc||!GL.npc.gds)return 'no-dress-state';\nconst N=GL.npc,tex=N.gds.tex;let mx=0,girls=0;\nfor(let g9=0;g9<NXGD_NPC;g9++){let gm=0;for(let v9=0;v9<N.gnv2;v9++){const t9=(g9*N.gnv2+v9)*4;\nconst d9=Math.hypot(tex[t9],tex[t9+1],tex[t9+2]);if(d9>gm)gm=d9;}if(gm>1e-9)girls++;if(gm>mx)mx=gm;}\nreturn 'NXDRESSPROBE1 verts='+N.gnv2+' guides='+(N.gdGU*N.gdGV)+' girls_moving='+girls+' maxdisp='+mx.toFixed(1)+' ticks='+(window.__nx_dress_ticks||0)+' capsule_hits='+(window.__nx_dress_hits||0);};\n" as *u8)
1171    return p
1172}
1173
1174// gpe_hair_runtime -- THE SCRIPT-SCOPE HALF. Emits the derived NXHCH_* constants, the baked chain
1175// table and nxHairTick, all of which are per-PLANT and shared by every NPC. It MUST be called at
1176// script scope: until 2026-08-25 all of this was emitted inside loadNPC, so nxHairTick was a
1177// function declaration nested two scopes deep, and drawNPCs -- at script scope -- threw
1178// ReferenceError: nxHairTick is not defined on its first frame. That exception killed the WebGL tier
1179// on EVERY world with a cast and dropped every visitor to the CPU renderer, which draws none of the
1180// skinned figures. The reason was invisible until the gl=0 reload was made to carry it in its URL.
1181// ★A FUNCTION DECLARED INSIDE ANOTHER FUNCTION IS NOT HOISTED PAST IT -- EMIT SHARED RUNTIME AT THE
1182// SCOPE ITS CALLERS LIVE IN.
1183func gpe_hair_runtime(out: *u8, pos: i64) -> i64 {
1184    var p: i64 = pos
1185    let n: i64 = gpe_hair_nseg()
1186    let f: i64 = gpe_hair_frames()
1187    let tbl: *i64 = sys_mmap(f*n*8 + 64) as *i64
1188    gpe_hair_chain_bake(tbl, 0)
1189    p = gpe_ap(out, p, "\n// HAIR GEOMETRY driven by the CHAIN: N per-segment offsets, one spring-bone chain PER GIRL,\n// integrated in nxHairTick below on the constants nx_hairdyn_lib/nx_softdyn ship (sd_step_axq,\n// integer-faithful -- every division truncs). CORRECTED 2026-09-01: this page used to say it\n// replays a baked table and does not integrate springs. It has not been a table since the\n// per-instance chain landed. Owed GE21/GE22: move the integration into the wasm engine.\nconst NXHCH_N=" as *u8)
1190    p = gpe_num(out, p, n)
1191    p = gpe_ap(out, p, ",NXHCH_F=" as *u8)
1192    p = gpe_num(out, p, f)
1193    p = gpe_ap(out, p, ",NXHCH_Q8=" as *u8)
1194    p = gpe_num(out, p, SD_Q8)
1195    p = gpe_ap(out, p, ",NXHCH_TPS=" as *u8)
1196    p = gpe_num(out, p, hd_ticks_per_s())
1197    p = gpe_ap(out, p, ",NXHCH_G=" as *u8)
1198    p = gpe_num(out, p, GPE_HAIR_GUIDES)
1199    p = gpe_ap(out, p, ",NXHCH_W=" as *u8)
1200    p = gpe_num(out, p, GPE_HSTR_WORDS_PER_STRAND)
1201    p = gpe_ap(out, p, ";\nconst NXHCH=[" as *u8)
1202    var k: i64 = 0
1203    while k < f*n {
1204        if k > 0 { p = gpe_ap(out, p, "," as *u8) }
1205        p = gpe_num(out, p, tbl[k])
1206        k = k + 1
1207    }
1208    p = gpe_ap(out, p, "];\n" as *u8)
1209    // RUNTIME REACTIVE CHAIN (2026-08-26, supersedes the baked-table replay): per-girl chain state
1210    // stepped every frame from HER OWN motion (N.ip deltas), sd_step_axq arithmetic REPLICATED
1211    // VERBATIM in integer-faithful JS (Math.trunc division == i64 division; K/C/G emitted from the
1212    // very constants the solver compiles). The baked NXHCH table stays emitted: the ship gate
1213    // judges the PLANT through it and its bake-time refusals still fence K/C on every ship.
1214    // The runtime clamp is the SMALL-ANGLE VALIDITY BOUND seglen/4 -- the same derivation as the
1215    // bake fence -- because this clamp IS the display plant validity fence, not a divergence guard.
1216    p = gpe_ap(out, p, "const NXHCH_K=" as *u8)
1217    p = gpe_num(out, p, SB_K_HAIR)
1218    p = gpe_ap(out, p, ",NXHCH_C=" as *u8)
1219    p = gpe_num(out, p, SB_C_HAIR)
1220    p = gpe_ap(out, p, ",NXHCH_GDIV=" as *u8)
1221    p = gpe_num(out, p, SD_G)
1222    p = gpe_ap(out, p, ",NXHCH_LIM=" as *u8)
1223    p = gpe_num(out, p, SD_Q8/4)
1224    p = gpe_ap(out, p, ",NXHCH_NPC=12;// NPC cap mirrors uIP[12]/uIH[12] in MVS\n" as *u8)
1225    p = gpe_ap(out, p, "function nxHairTick(g,N){if(!N||!N.hn||!N.l||!N.l.uHF2)return 0;\nconst NS=NXHCH_N,NP=NXHCH_NPC;\nif(!N.hch){N.hch={x:new Float64Array(NP*NS),y:new Float64Array(NP*NS),z:new Float64Array(NP*NS),vx:new Float64Array(NP*NS),vy:new Float64Array(NP*NS),vz:new Float64Array(NP*NS),rx:new Float64Array(NP),ry:new Float64Array(NP),rz:new Float64Array(NP),hf:new Float32Array(NP*NS*3),t:performance.now(),init:0};}\n" as *u8)
1226    p = gpe_ap(out, p, "const st=N.hch,now=performance.now();\n// world->chain scale (CORRECTED 2026-08-30): chain space is Q8 of one SEGMENT, not Q8 of one mesh unit --\n// the readback below multiplies (x-b)/NXHCH_Q8 by N.hscale (mesh units per segment), so the root must be\n// divided by that same hscale on the way in. The old value treated a solver unit as one mesh unit, a factor\n// hscale (2478 on the shipped groom) too large: a strolling girl's per-tick root delta landed at ~1.2e5 chain\n// units against the teleport guard NXHCH_LIM*4=256, so EVERY moving tick snapped the chain rigid and the groom\n// never lagged anything. MEASURED on the live page before this fix: girls_moving=0 segs_nonzero=0 maxdisp=0\n// with four girls striding. ONE ruler both ways: blocks -> mesh units (171530/1.78) -> segments (/hscale)\n// -> chain Q8 (x NXHCH_Q8).\nconst W2Q=NXHCH_Q8*171530/1.78/(N.hscale||1);\n// WIND (2026-08-30): the world's own wind field -- the ORGAN's P_WXWINDX/Z spec slots, published by glDraw as\n// window.__wxw[0..1] in gale fractions (nx_weather_lib clamps speed at WX_Q, so |w| <= 1) -- shifts every\n// link's REST POINT downwind by NXHCH_LIM*|w|*g(t): at the gale bound the chain sits on its own small-angle\n// validity fence, at a breeze a fraction of it, in still air nothing -- no constant of ours. g(t) in [0,1) is a\n// value-noise gust: the page's own hash (127.1/43758.5453, the shader hsh) sampled at the incumbent sway rate\n// (3.1 rad/s on uTm, the MVS weather-in-the-hair term shipped before this), phase per girl from the same hash of\n// her slot so a crowd never gusts in unison. Direction is the wind vector's own. ⚠CORRECTED 2026-09-01: this note used to say the term was inert. It is NOT: step_impl calls\n// wc_weather_tick before the input core (nx_wasm_craft.nx), so slots 11-15 are live on this path.\n// Held now by nx_wasm_craft_gate T88.\nconst wx9=(window.__wxw&&window.__wxw[0])||0,wz9=(window.__wxw&&window.__wxw[1])||0;const wm9=Math.hypot(wx9,wz9);\nconst gh9=function(a){const n9=Math.sin(a*127.1)*43758.5453;return n9-Math.floor(n9);};\nconst tg9=now/1000*3.1/(2*Math.PI);\nif(!st.init){for(let g9=0;g9<NP;g9++){const wx=N.ip[g9*3]*W2Q,wy=N.ip[g9*3+1]*W2Q,wz=N.ip[g9*3+2]*W2Q;st.rx[g9]=wx;st.ry[g9]=wy;st.rz[g9]=wz;for(let s9=0;s9<NS;s9++){st.x[g9*NS+s9]=wx;st.y[g9*NS+s9]=wy;st.z[g9*NS+s9]=wz;}}st.init=1;st.t=now;}\n" as *u8)
1227    p = gpe_ap(out, p, "// fixed steps at the solver cadence; cap 4/frame so a stall reads as a gentle restart,\n// never a velocity spike\nlet nt=Math.floor((now-st.t)*NXHCH_TPS/1000);if(nt>4){nt=4;st.t=now-nt*1000/NXHCH_TPS;}if(nt<0)nt=0;st.t+=nt*1000/NXHCH_TPS;\nfor(let g9=0;g9<NP;g9++){\nconst wx=N.ip[g9*3]*W2Q,wy=N.ip[g9*3+1]*W2Q,wz=N.ip[g9*3+2]*W2Q;\n// a TELEPORT is not dynamics: a root jump beyond 4 clamp-lengths per tick snaps the chain\nif(Math.abs(wx-st.rx[g9])>NXHCH_LIM*4*(nt||1)||Math.abs(wz-st.rz[g9])>NXHCH_LIM*4*(nt||1)){st.rx[g9]=wx;st.ry[g9]=wy;st.rz[g9]=wz;for(let s9=0;s9<NS;s9++){st.x[g9*NS+s9]=wx;st.y[g9*NS+s9]=wy;st.z[g9*NS+s9]=wz;st.vx[g9*NS+s9]=0;st.vy[g9*NS+s9]=0;st.vz[g9*NS+s9]=0;}}\nconst rdx=(wx-st.rx[g9])/(nt||1),rdy=(wy-st.ry[g9])/(nt||1),rdz=(wz-st.rz[g9])/(nt||1);\n" as *u8)
1228    p = gpe_ap(out, p, "// per-girl wind rest offset for THIS tick (see the WIND note above): integer chain units, so the solver stays\n// integer-faithful; zero whenever the world's wind is zero\nlet wox=0,woz=0;if(wm9>0){const u9=tg9+gh9(g9+1);const i9=Math.floor(u9),f9=u9-i9,s8=f9*f9*(3-2*f9);const gg9=gh9(i9+g9*13)*(1-s8)+gh9(i9+1+g9*13)*s8;const wa9=NXHCH_LIM*gg9*(wm9>1?1/wm9:1);wox=Math.trunc(wx9*wa9);woz=Math.trunc(wz9*wa9);}\nfor(let k9=0;k9<nt;k9++){\nst.rx[g9]+=rdx;st.ry[g9]+=rdy;st.rz[g9]+=rdz;\nlet ax=Math.trunc(st.rx[g9]),ay=Math.trunc(st.ry[g9]),az=Math.trunc(st.rz[g9]);\nfor(let s9=0;s9<NS;s9++){const q9=g9*NS+s9;\n// sd_step_axq X/Z verbatim: spring toward anchor + viscous damping, trunc = i64 division; the anchor carries\n// the wind rest offset per link, so the offsets accumulate down the chain (tip = NS x one link)\nconst accx=Math.trunc((ax+wox-st.x[q9])*NXHCH_K/NXHCH_GDIV)-Math.trunc(st.vx[q9]*NXHCH_C/NXHCH_GDIV);\nconst accz=Math.trunc((az+woz-st.z[q9])*NXHCH_K/NXHCH_GDIV)-Math.trunc(st.vz[q9]*NXHCH_C/NXHCH_GDIV);\nconst accy=Math.trunc((ay-st.y[q9])*NXHCH_K/NXHCH_GDIV)-Math.trunc(st.vy[q9]*NXHCH_C/NXHCH_GDIV);\nst.vx[q9]+=accx;st.vy[q9]+=accy;st.vz[q9]+=accz;st.x[q9]+=st.vx[q9];st.y[q9]+=st.vy[q9];st.z[q9]+=st.vz[q9];\nlet dx=st.x[q9]-ax,dy=st.y[q9]-ay,dz=st.z[q9]-az;const d9=dx*dx+dy*dy+dz*dz,L9=NXHCH_LIM*NXHCH_LIM;\nif(d9>L9){const dd=Math.sqrt(d9)||1;st.x[q9]=ax+Math.trunc(dx*NXHCH_LIM/dd);st.y[q9]=ay+Math.trunc(dy*NXHCH_LIM/dd);st.z[q9]=az+Math.trunc(dz*NXHCH_LIM/dd);st.vx[q9]=0;st.vy[q9]=0;st.vz[q9]=0;}\nax=Math.trunc(st.x[q9]);ay=Math.trunc(st.y[q9]);az=Math.trunc(st.z[q9]);}}\n" as *u8)
1229    p = gpe_ap(out, p, "const bx=st.rx[g9],by=st.ry[g9],bz=st.rz[g9];const ihx=N.ih[g9*4],ihy=N.ih[g9*4+1];\n// WORLD -> MODEL (2026-08-30): the chain integrates in WORLD axes (its root is N.ip) but the MVS adds uHF2 to\n// aP2 in MODEL space, before the yup remap and the heading rotation -- so the offset must come back through\n// the inverse of both: yup = heading^-1 * world, then model x = yup.x, model y = -yup.z, model z = yup.y (the\n// exact inverse of the shader's yup=(sp.x,sp.z,-sp.y) and rot=heading*yup). With the chain dead (see W2Q)\n// this frame mismatch never showed; alive, a world-vertical lag would have read as front-back and a turn of\n// the head would have swung the groom the wrong way. Scale: N.hscale mesh units per segment (the groom's own).\nfor(let s9=0;s9<NS;s9++){const q9=g9*NS+s9;\nconst dX=(st.x[q9]-bx)/NXHCH_Q8*N.hscale,dY=(st.y[q9]-by)/NXHCH_Q8*N.hscale,dZ=(st.z[q9]-bz)/NXHCH_Q8*N.hscale;\nconst yx=dX*ihy+dZ*ihx,yz=-dX*ihx+dZ*ihy;\nst.hf[q9*3]=yx;st.hf[q9*3+1]=-yz;st.hf[q9*3+2]=dY;}}\ng.uniform3fv(N.l.uHF2,st.hf);window.__nx_hair_ticks=(window.__nx_hair_ticks||0)+nt;return 1;}\n" as *u8)
1230    return p
1231}
1232
1233// gpe_hair_npc_doors -- the LOADNPC-SCOPE doors. __nx_hair and the probe close over hgeo/hmode/hn
1234// (loadNPC locals) and GL, so when the 2026-08-25 script-scope extraction carried them along, the
1235// OBJECT LITERAL executed at script eval, threw ReferenceError, and KILLED THE ENTIRE ENGINE SCRIPT
1236// on /world/beach AND /world/craft -- every window door undefined, both flagship worlds dead,
1237// measured live. ★A FUNCTION MOVED TO AN OUTER SCOPE IS SAFE (it runs later); ANY EXPRESSION MOVED
1238// WITH IT RUNS AT EVAL TIME AND THROWS THERE. Only nxHairTick and the consts are scope-free; these
1239// two doors belong where their variables live, and this function is called from gpe_hair_geometry
1240// -- inside loadNPC -- for exactly that reason.
1241func gpe_hair_npc_doors(out: *u8, pos: i64) -> i64 {
1242    var p: i64 = pos
1243    p = gpe_ap(out, p, "window.__nx_hair={geo:hgeo,mode:hmode,seg:NXHCH_N,frames:NXHCH_F,verts:hn};\n// ?hairprobe v2 -- measures the GEOMETRY THE RENDERER CONSUMES: the uploaded per-girl uHF2\n// offsets the runtime chain computes each frame. girls_moving is the load-bearing number now:\n// per-instance state means girls can DIFFER, which the shared-table design could never produce.\nwindow.__nx_hair_probe=function(){if(!GL)return 'no-gl (tier never booted)';if(!GL.npc)return 'gl-up npc-pending stage='+(window.__lst||'pre')+(window.__npcfail?' npcfail='+window.__npcfail:'')+' (loadNPC not finished)';const N=GL.npc;\nif(!N.hn)return 'NXHAIRPROBE2 geo=0 no-hair-geometry';\nif(!N.hch)return 'NXHAIRPROBE2 not-ticked-yet';\nconst hf=N.hch.hf;let mx=0,nz=0,girls=0;\nfor(let g9=0;g9<NXHCH_NPC;g9++){let gm=0;for(let s9=0;s9<NXHCH_N;s9++){const q9=(g9*NXHCH_N+s9)*2;\nconst d9=Math.hypot(hf[q9],hf[q9+1]);if(d9>1e-9)nz++;if(d9>gm)gm=d9;}\nif(gm>1e-9)girls++;if(gm>mx)mx=gm;}\nreturn 'NXHAIRPROBE2 verts='+N.hn+' seg='+NXHCH_N+' girls_moving='+girls+' segs_nonzero='+nz+' maxdisp='+mx.toFixed(6)+' ticks='+(window.__nx_hair_ticks||0);};\n" as *u8)
1244    return p
1245}
1246
1247// The hair chain amplitude ceiling, in MESH UNITS. Hoisted out of the emitted JS 2026-09-01
1248// because the magic ratchet was right to refuse it: a ceiling nobody can name is a defect
1249// generator in both directions. It is NOT free to move -- it is the working amplitude of the
1250// original short groom, about 2 percent of stature, held as a bound so that a long groom span/N
1251// cannot amplify deflections (measured at ~5x: hair swimming off the scalp).
1252const GPE_HAIR_AMP_CAP: i64 = 3400
1253
1254// gpe_hair_geometry -- THE CONTRACT SYMBOL, now the PER-ASSET half only: the asset's own hair
1255// geometry (HVRT/HTRI mesh preferred, HSTR guide strands otherwise) and each vertex's chain segment,
1256// derived from its depth below the top of the groom. Emitted inside loadNPC, where hj and S live.
1257func gpe_hair_geometry(out: *u8, pos: i64) -> i64 {
1258    var p: i64 = pos
1259    p = gpe_ap(out, p, "let hverts=null,hn=0,hseg=null,hbase=null,hpb=null,hmode=0,hscale=1,hgeo=0,huv=[],hkid=1,hvpk=0;\n" as *u8)
1260    p = gpe_ap(out, p, "// HVRT/HTRI = the FBX groom MESH (nx_nxa_hair), written in the SAME mesh space as VERT\nif(S.HVRT&&S.HTRI&&hj>=0){const hnv=rdU(S.HVRT.o),hnt=rdU(S.HTRI.o);\nconst hp=new Float32Array(hnv*3);\nfor(let i=0;i<hnv*3;i++)hp[i]=rdU(S.HVRT.o+8+i*8);\nconst tri=[];\nfor(let e=0;e<hnt*3;e++){const q=rdU(S.HTRI.o+8+e*8);tri.push(hp[q*3],hp[q*3+1],hp[q*3+2]);}\nhn=tri.length/3;hverts=new Float32Array(tri);hmode=1;hgeo=1;}\n" as *u8)
1261    p = gpe_ap(out, p, "// HSTR = sampled guide strands (the incumbent geometry path, preserved byte-for-byte in\n// behaviour; only its hand-written 7/24/550 are now the DERIVED constants above)\nelse if(S.HSTR&&hj>=0){const nstr=rdU(S.HSTR.o);\n// RIBBON HAIR (2026-08-26): guides -> Catmull-Rom smoothed -> interpolated children -> tapered\n// quad ribbons. Lines were sparse BY CONSTRUCTION (1px); ribbons carry width, taper and body --\n// the hair-card method every shipped game uses, built from the SAME generated guides.\n// COVERAGE (operator frames 2026-08-27: scalp glints between locks, speckle instead of locks): 4->6 children\n// per guide = 50% more ribbon area over the SAME groom (7,200 ribbons/head, ~202k tris/head, one VAO\n// instanced per girl, built once at load). The stripe/discard pair in the MFS is the other half.\nconst NXH_GUIDES=1200,NXH_KIDS=6,NXH_SUB=2;\nconst nsel=Math.min(nstr,NXH_GUIDES);\nconst segs=[];huv=[];const KB9=[],KU9=[];for(let z9=0;z9<NXH_KIDS;z9++){KB9.push([]);KU9.push([]);}let sg9=KB9[0],uv9=KU9[0];\nconst hsh9=function(a9,b9){let n9=a9*374761393+b9*668265263+1442695041;n9^=n9>>13;n9=(n9*1274126177)|0;n9^=n9>>16;return (n9<0?-n9:n9)%2048/2048-.5;};\nlet gidx9=0;\nfor(let q5=0;q5<nsel;q5++){const s5=Math.floor(q5*nstr/nsel);const so=S.HSTR.o+8+s5*NXHCH_W*8;gidx9++;\n// HSTR and the renderer are Z-up. The ribbon builder below is Y-up; convert at its input and output boundaries.\nconst gp=[];for(let p5=0;p5<=NXHCH_N;p5++)gp.push([rdU(so+(p5*3)*8),rdU(so+(p5*3+2)*8),rdU(so+(p5*3+1)*8)]);\n// Catmull-Rom subdivide x2: kills the 8-point kinks\nconst sp=[];for(let p5=0;p5<gp.length-1;p5++){const P0=gp[Math.max(0,p5-1)],P1=gp[p5],P2=gp[p5+1],P3=gp[Math.min(gp.length-1,p5+2)];\nfor(let u5=0;u5<NXH_SUB;u5++){const t9=u5/NXH_SUB,t2=t9*t9,t3=t2*t9;const c9=[0,0,0];\nfor(let a5=0;a5<3;a5++)c9[a5]=.5*((2*P1[a5])+(-P0[a5]+P2[a5])*t9+(2*P0[a5]-5*P1[a5]+4*P2[a5]-P3[a5])*t2+(-P0[a5]+3*P1[a5]-3*P2[a5]+P3[a5])*t3);\nsp.push(c9);}}sp.push(gp[gp.length-1]);\n// strand lock width from the groom's own span; root wide, tip narrow\nlet gyt=-1e18,gyb=1e18;for(const q5 of sp){if(q5[1]>gyt)gyt=q5[1];if(q5[1]<gyb)gyb=q5[1];}\nconst w09=Math.max(900,(gyt-gyb)*.045);\n// per-strand STABLE lateral axis: perpendicular of the strand's own root-to-tip horizontal\n// sweep. A tangent-derived axis collapses to zero on vertical segments (post-gravity, i.e.\n// MOST of the strand) and every quad degenerates to a sliver -- the pixel-dust class.\nconst shx9=sp[sp.length-1][0]-sp[0][0],shz9=sp[sp.length-1][2]-sp[0][2];\nlet fbx9=shz9,fbz9=-shx9;const fbl9=Math.hypot(fbx9,fbz9);\nif(fbl9<w09){fbx9=1;fbz9=0;}else{fbx9/=fbl9;fbz9/=fbl9;}\nfor(let k5=0;k5<NXH_KIDS;k5++){sg9=KB9[k5];uv9=KU9[k5];let ox9=hsh9(gidx9,k5)*w09*1.2,oz9=hsh9(gidx9+7,k5)*w09*1.2;\n// Child-center jitter is clamped outward in the builder's horizontal XZ plane.\n// This does not constrain ribbon edges or later motion against the body surface.\nconst rq9=Math.hypot(sp[0][0],sp[0][2])||1,nrx9=sp[0][0]/rq9,nrz9=sp[0][2]/rq9,rad9=ox9*nrx9+oz9*nrz9;\nif(rad9<0){ox9-=rad9*nrx9;oz9-=rad9*nrz9;}\nfor(let p5=0;p5<sp.length-1;p5++){const A=sp[p5],C=sp[p5+1];\nconst tx9=C[0]-A[0],ty9=C[1]-A[1],tz9=C[2]-A[2];\nlet lx9=tz9,lz9=-tx9;if(k5%2===1){lx9=tx9*.3+tz9;lz9=tz9*.3-tx9;}\nlet ll9=Math.hypot(lx9,lz9);\nif(ll9<w09*.5){lx9=fbx9;lz9=fbz9;ll9=1;}\nif(ll9===0)ll9=1;\nconst tp9=1-p5/sp.length*.75;const wA=w09*tp9,wB=w09*(1-(p5+1)/sp.length*.75);\nconst ax=A[0]+ox9,ay=A[1],az=A[2]+oz9,cx2=C[0]+ox9,cy2=C[1],cz2=C[2]+oz9;\nconst l1x=lx9/ll9*wA,l1z=lz9/ll9*wA,l2x=lx9/ll9*wB,l2z=lz9/ll9*wB;\nsg9.push(ax-l1x,ay,az-l1z, ax+l1x,ay,az+l1z, cx2+l2x,cy2,cz2+l2z);\nsg9.push(ax-l1x,ay,az-l1z, cx2+l2x,cy2,cz2+l2z, cx2-l2x,cy2,cz2-l2z);\nconst vA9=p5/sp.length,vB9=(p5+1)/sp.length;\nuv9.push(0,vA9, 1,vA9, 1,vB9, 0,vA9, 1,vB9, 0,vB9);}}}\nlet tv9=0,tu9=0;for(let z9=0;z9<NXH_KIDS;z9++){tv9+=KB9[z9].length;tu9+=KU9[z9].length;}hverts=new Float32Array(tv9);huv=new Array(tu9);let w9=0,x9=0;for(let z9=0;z9<NXH_KIDS;z9++){const b9=KB9[z9];/* Restore mesh Z-up before skinning and segment assignment. */for(let i9=0;i9<b9.length;i9+=3){hverts[w9++]=b9[i9];hverts[w9++]=b9[i9+2];hverts[w9++]=b9[i9+1];}const c9=KU9[z9];for(let i9=0;i9<c9.length;i9++)huv[x9++]=c9[i9];}hn=tv9/3;hkid=NXH_KIDS;hvpk=Math.floor(hn/NXH_KIDS);hmode=1;hgeo=2;}/*CHILD-MAJOR LAYOUT (2026-08-28): the ribbons are now emitted child-layer by child-layer instead of
1262guide by guide, so drawing a PREFIX of this buffer is every guide on the scalp at a lower child
1263count -- the groom thins evenly. The old guide-major order made a prefix a contiguous PATCH of
1264scalp, i.e. bald spots, which is why there was no geometry LOD to reach for. Content is unchanged:
1265the same triangles in a different order, and every consumer downstream is order-independent --
1266hseg is derived per-vertex from that vertex own Z (component 2, the up axis) against the global span, hbase is a copy, and the
1267fit pass translates all vertices uniformly. huv is reordered in lockstep, and the existing
1268huv.length===hn*2 guard downstream is the arity check on that.*/\n" as *u8)
1269    p = gpe_ap(out, p, "// PER-VERTEX CHAIN SEGMENT, DERIVED from depth below the top of the groom. This is what makes\n// the renderer consume N offsets instead of one: a vertex deep down the strand rides a later\n// segment, so it LAGS the crown.\nif(hverts&&hn>0&&hj>=0){const hcx9=bindR[hj*4],hcy9=bindR[hj*4+1];let hx0=1e18,hx1=-1e18,hy0=1e18,hy1=-1e18,hzt=-1e18,hzb=1e18;for(let v=0;v<hn;v++){const X9=hverts[v*3],Y9=hverts[v*3+1],Z9=hverts[v*3+2];if(X9<hx0)hx0=X9;if(X9>hx1)hx1=X9;if(Y9<hy0)hy0=Y9;if(Y9>hy1)hy1=Y9;if(Z9>hzt)hzt=Z9;if(Z9<hzb)hzb=Z9;}const hrx9=(hx1-hx0)/2||1,hry9=(hy1-hy0)/2||1;let htz9=-1e18;for(let u=0;u<nv;u++){const bx9=pos[u*3],by9=pos[u*3+1],bz9=pos[u*3+2];if(Math.abs(bx9-hcx9)<hrx9&&Math.abs(by9-hcy9)<hry9&&bz9>htz9)htz9=bz9;}if(htz9>-1e17){const NXHAIR_INSET=.06;const dz9=(htz9-hzt)+((hzt-hzb)*NXHAIR_INSET);let dx9=hcx9-(hx0+hx1)/2,dy9=hcy9-(hy0+hy1)/2;const cap9=hrx9*.5;if(dx9>cap9)dx9=cap9;if(dx9<-cap9)dx9=-cap9;if(dy9>cap9)dy9=cap9;if(dy9<-cap9)dy9=-cap9;if(hgeo===2){dx9=0;dy9=0;}/*generated groom: authored ON this mesh (gate-verified), fit must be IDENTITY -- recentering a posterior-biased groom onto the head joint shoved the mass onto the face (operator frames 2026-08-27)*/for(let v=0;v<hn;v++){hverts[v*3]+=dx9;hverts[v*3+1]+=dy9;hverts[v*3+2]+=(hgeo===2?0.0:dz9);}window.__nx_hairfit=[dx9,dy9,dz9];}}if(hverts&&hn>0){hbase=new Float32Array(hverts);hseg=new Uint8Array(hn);\n// PER-VERTEX SEGMENT ON THE UP AXIS. Component 2 is UP in this mesh space, not component 1:
1270// the fit pass above takes hzt/hzb (top/bottom of the groom) from Z and compares them to the
1271// topmost BODY vert pos[u*3+2], the shader remaps yup=vec3(sp.x,sp.z,-sp.y), and nxHairTick
1272// inverts that as model z = yup.y. This block read component 1 until 2026-09-01, which spread
1273// the 7-link lag and its squared weight hw9=(aHS/6)^2 ACROSS the head front-to-back instead of
1274// DOWN each strand: the groom sheared as rigid slabs and a root band could take full tip swing
1275// straight through the face.
1276let ztop=-1e18,zbot=1e18;
1277for(let v=0;v<hn;v++){const z9=hverts[v*3+2];if(z9>ztop)ztop=z9;if(z9<zbot)zbot=z9;}
1278const span=(ztop-zbot)||1;
1279// motion amplitude CAPPED: span is the groom's LENGTH along that axis, so span/N is a real
1280// per-segment reach. A long groom made span/N amplify deflections ~5x (hair swimming off the
1281// scalp). 3400 mesh units ~= 2 percent of stature -- the working amplitude of the original
1282// short groom, now a named bound instead of an accident of asset length.
1283hscale=Math.min(span/NXHCH_N," as *u8)
1284    p = gpe_num(out, p, GPE_HAIR_AMP_CAP)
1285    p = gpe_ap(out, p, ");
1286for(let v=0;v<hn;v++){let t=Math.floor((ztop-hverts[v*3+2])/span*NXHCH_N);
1287if(t<0)t=0;if(t>NXHCH_N-1)t=NXHCH_N-1;hseg[v]=t;}}\n" as *u8)
1288    // The loadNPC-scope doors FIRST (their variables live here; see gpe_hair_npc_doors for the
1289    // eval-time death their script-scope placement caused), THEN the DOM wiring that reads them.
1290    p = gpe_hair_npc_doors(out, p)
1291    // WIRE THE PROBE INTO THE PAGE -- do not merely DEFINE it. Measured on the shipped page:
1292    // __nx_hair_probe occurred exactly ONCE, its own definition, and NOTHING called it. The single
1293    // measurement built for this rung was reachable only from a hand-typed JS console and was
1294    // therefore INVISIBLE to the capture wire that verifies the picture -- the estate's
1295    // built-and-unwired defect happening INSIDE an artifact. ?hairprobe now renders it into the DOM
1296    // on the page's OWN frame clock (requestAnimationFrame: no new cadence constant to pick, and it
1297    // stops when the page does), so a headless screenshot or --dump-dom can read the number the
1298    // gate judges instead of the operator having to trust a screenshot.
1299    p = gpe_ap(out, p, "if(location.search.indexOf('hairprobe')>=0){\nconst hpEl=document.createElement('pre');hpEl.id='nxhairprobe';\nhpEl.style.cssText='font:12px ui-monospace,monospace;color:#a8e6c0;white-space:pre-wrap;max-width:96vw;margin:0';\nhpEl.textContent='NXHAIRPROBE1 pending';\nconst hpM=document.querySelector('main');if(hpM)hpM.appendChild(hpEl);\nconst hpTick=function(){var s='';try{s=window.__nx_hair_probe();}catch(e){s='NXHAIRPROBE1 error';}\nhpEl.textContent=s;window.__nx_hair_probe_text=s;requestAnimationFrame(hpTick);};\nrequestAnimationFrame(hpTick);}\n" as *u8)
1300    return p
1301}
1302
1303// gpe_garment_draw -- THE CONTRACT SYMBOL (GE13c, 2026-08-30): clothing BY GARMENT ID, the engine's garment table
1304// made visible (operator: random dresses, not beach outfits). Emits the MFS band block; the JS half (drawNPCs)
1305// feeds uGT/uGB (ids) and uCT/uCB (tints) per girl from mobgar/mobgart/mobgarcol, and the MVS half degenerates the
1306// GVRT skirt instance for every id that is not a skirt-class garment. Reuses what exists -- the incumbent's
1307// painted torso bands and the skirt mesh -- so nothing here is new geometry; the E4 mesh-top ladder is the rung
1308// after this one.
1309func gpe_garment_draw(out: *u8, pos: i64) -> i64 {
1310    var p: i64 = pos
1311    p = gpe_ap(out, p, "// ---- gpe_garment_draw: bands BY GARMENT ID. Ids (the engine's table): 0 none 1 bikini-top 2 bikini-bottom\n// 3 one-piece 4 sarong 5 sundress 6 tee 7 shorts 8 skirt 9 evening-dress. Bands: 6 tee = the incumbent top band\n// (.545 -> uNIP+.055, torso-gated |x|<15000) in the UPPER tint; 1 bikini top = the bust band |h-uNIP|<.055 (the\n// half-width the nipple detail itself uses) in the upper tint; 7 shorts = the incumbent hip band (.395 = mid-thigh\n// -> .545) in the lower tint, the incumbent's .8 shade kept; 2 bikini bottom = crotch .475 (Drillis-Contini, the\n// pubic block's own line) -> hip .545; 3 one-piece = top band continued through the hip band in ONE tint, no\n// skirt; 5 sundress / 9 evening = the top band in the dress tint + the skirt mesh (MVS); 8 skirt / 4 sarong = the\n// skirt mesh only. 0 = bare, the uOF>1.5 path. Coverage for the older consumers (nipple detail, pubic hair, the\n// under-cloth hair cull) still arrives as uOF, DERIVED from these ids JS-side.\n// gpe_garment_mesh (2026-08-30): every band below is now a FALLBACK. uGMH carries one bit per garment id whose\n// generated MESH loaded from the asset's GARM section (bit k = id k); a band paints only while its id's bit is\n// clear -- an asset without GARM (or a failed parse) degrades to paint, never to nude, and ?garpaint=1 clears\n// the mask so the bands can be viewed UNDER the meshes as the falsifiability lever.\nif(uAuth==0){\nint gt9=int(uGT[vII]+.5);int gb9=int(uGB[vII]+.5);bool dr9=(gb9==5||gb9==9);bool op9=(gb9==3);\nbool pm1=(uGMH&2)==0,pm2=(uGMH&4)==0,pm3=(uGMH&8)==0,pm5=(uGMH&32)==0,pm6=(uGMH&64)==0,pm7=(uGMH&128)==0,pm9=(uGMH&512)==0;\nif(pm6&&gt9==6&&!dr9&&!op9&&h>.545&&h<uNIP+.055&&axb<15000.)mc=uCT[vII];\nif((dr9||op9)&&h>.545&&h<uNIP+.055&&axb<15000.&&((gb9==5&&pm5)||(gb9==9&&pm9)||(gb9==3&&pm3)))mc=uCB[vII];\nif(pm1&&gt9==1&&!dr9&&!op9&&abs(h-uNIP)<.055&&axb<15000.)mc=uCT[vII];\nif(pm3&&op9&&h>.395&&h<.545&&axb<15000.)mc=uCB[vII];\nif(pm7&&gb9==7&&h>.395&&h<.545&&axb<15000.)mc=uCB[vII]*.8;\nif(pm2&&gb9==2&&h>.475&&h<.545&&axb<15000.)mc=uCB[vII];\n}\n" as *u8)
1312    return p
1313}
1314
1315// gpe_vb_find -- bounded first-offset scan for NUL-terminated pat in b[from..n); -1 when absent.
1316// Exit is FLAG-carried (hit), never written into the cursor -- the cursor-sentinel idiom erases
1317// the answer and nx_srclint hunts it by name.
1318func gpe_vb_find(b: *u8, n: i64, pat: *u8, from: i64) -> i64 {
1319    let pl: i64 = gpe_slen(pat)
1320    var i: i64 = from
1321    while i + pl <= n {
1322        var k: i64 = 0
1323        var hit: i64 = 1
1324        while k < pl {
1325            if b[i+k] != pat[k] { hit = 0; k = pl } else { k = k + 1 }
1326        }
1327        if hit == 1 { return i }
1328        i = i + 1
1329    }
1330    return 0 - 1
1331}
1332
1333// gpe_version_badge -- GE20 (operator: the beach "still shows the same build number"): the engine
1334// version LADDER and declared TARGET VERSION, read from the compare plane's OWN BYTES at every
1335// emit and rendered beside the renderer tier badge. Sources: buildroot/knowledge/compare/
1336// gameengine.plan `ver|` rows (the ladder) and buildroot/knowledge/compare/gameengine.rank stamp
1337// token `target_version=` (measured 2026-08-30: the rank artifact's LAST LINE is a `# asof=...
1338// target_version=X ...` stamp; it carries NO prose "TARGET VERSION" line, so the token is the
1339// anchor). NEVER a hand-typed version: a republish re-reads, so the world pages and the compare
1340// board cannot disagree. An unreadable plan/rank degrades to a NAMED absence in the badge text
1341// (never a fabricated number), and the announce line puts the read outcome in the emit log.
1342func gpe_version_badge(out: *u8, pos: i64) -> i64 {
1343    var p: i64 = pos
1344    p = gpe_ap(out, p, "const __vb=document.createElement(\"div\");__vb.style.cssText=\"font:11px ui-monospace,monospace;color:#7d76a0;letter-spacing:.08em\";__vb.textContent=\"Nishi Engine \\u2014 target " as *u8)
1345    let lpr: *i64 = sys_mmap(16) as *i64
1346    let rank: *u8 = sys_read_file("buildroot/knowledge/compare/gameengine.rank" as *u8, lpr)
1347    let rn: i64 = lpr[0]
1348    var vgot: i64 = 0
1349    if (rank as i64) != 0 {
1350        let tpat: *u8 = "target_version=" as *u8
1351        let ti: i64 = gpe_vb_find(rank, rn, tpat, 0)
1352        if ti >= 0 {
1353            let ts: i64 = ti + gpe_slen(tpat)
1354            var te: i64 = ts
1355            var run: i64 = 1
1356            // 32=space 10=newline: the stamp line's own field separators end the token
1357            while run == 1 {
1358                if te >= rn { run = 0 } else {
1359                    let c: i64 = rank[te] as i64
1360                    if c == 32 { run = 0 } else { if c == 10 { run = 0 } else { te = te + 1 } }
1361                }
1362            }
1363            if te > ts { p = gpe_ap(out, p, "v" as *u8); p = gpe_ap_n(out, p, ((rank as i64) + ts) as *u8, te - ts); vgot = 1 }
1364        }
1365    }
1366    if vgot == 0 { p = gpe_ap(out, p, "v-unread" as *u8) }
1367    p = gpe_ap(out, p, " (ladder " as *u8)
1368    let lpp: *i64 = sys_mmap(16) as *i64
1369    let plan: *u8 = sys_read_file("buildroot/knowledge/compare/gameengine.plan" as *u8, lpp)
1370    let pn2: i64 = lpp[0]
1371    var lgot: i64 = 0
1372    if (plan as i64) != 0 {
1373        let vpat: *u8 = "\nver|" as *u8
1374        var vi: i64 = gpe_vb_find(plan, pn2, vpat, 0)
1375        while vi >= 0 {
1376            let vs: i64 = vi + gpe_slen(vpat)
1377            var ve: i64 = vs
1378            var run2: i64 = 1
1379            // 124='|' 10=newline: the ver-row grammar's own separators end the label
1380            while run2 == 1 {
1381                if ve >= pn2 { run2 = 0 } else {
1382                    let c2: i64 = plan[ve] as i64
1383                    if c2 == 124 { run2 = 0 } else { if c2 == 10 { run2 = 0 } else { ve = ve + 1 } }
1384                }
1385            }
1386            if ve > vs {
1387                if lgot > 0 { p = gpe_ap(out, p, "/" as *u8) }
1388                p = gpe_ap_n(out, p, ((plan as i64) + vs) as *u8, ve - vs)
1389                lgot = lgot + 1
1390            }
1391            vi = gpe_vb_find(plan, pn2, vpat, ve)
1392        }
1393    }
1394    if lgot == 0 { p = gpe_ap(out, p, "unread" as *u8) }
1395    p = gpe_ap(out, p, ") \\u00b7 emit " as *u8)
1396    p = gpe_num(out, p, sys_now_realtime_sec())
1397    p = gpe_ap(out, p, "\";window.__nx_engine_badge=__vb.textContent;if(__mp)__mp.parentNode.insertBefore(__vb,__mp);\n" as *u8)
1398    gpe_puts("gpe_version_badge: rank_target=" as *u8)
1399    if vgot == 1 { gpe_puts("READ" as *u8) } else { gpe_puts("ABSENT" as *u8) }
1400    gpe_puts(" ladder_rows=" as *u8)
1401    gpe_pn(lgot)
1402    gpe_puts("\n" as *u8)
1403    return p
1404}
1405
1406// GE52 gpe_release_block -- THE RELEASE DELTA ON THE REVIEW PAGE (2026-09-04; operator: consistent progress each
1407// release on the /world/beach review page, which had not moved -- the accept- plane held four REJECT rows and one
1408// UNJUDGED from 2026-08-30 and nothing after, while every seat since shipped plumbing the page could not show).
1409// Every emit renders, FROM DATA: the operator's latest verdict per subject (knowledge/store/accept-), the referee
1410// percept beside it (knowledge/store/referee-), every land row on the gameengine, graphics and charsim boards dated
1411// strictly after the newest operator verdict, and the exact accept-row recipe for THIS build stamp. The arithmetic
1412// is nx_release_delta_lib (proven by nx_release_delta_gate); this function only reads the planes and boards and
1413// hands buffers over. An unreadable plane or board is a NAMED absence in the emit log and a counted gap in the
1414// block (boards read n/m), never a fabricated zero. Exported for instruments as window.__nx_release.
1415// THE FLIP IS THE RECEIPT, THE ACCEPT ROW IS THE PROOF: only an operator ACCEPT row moves a subject out of INCOMPLETE.
1416const GPE_RD_HTML_CAP: i64 = 262144
1417const GPE_RD_PLANS: i64 = 3
1418const GPE_RD_PLAN_GE: *u8 = "buildroot/knowledge/compare/gameengine.plan"
1419const GPE_RD_PLAN_GR: *u8 = "buildroot/knowledge/compare/graphics.plan"
1420const GPE_RD_PLAN_CS: *u8 = "buildroot/knowledge/compare/charsim.plan"
1421func gpe_rd_board(path: *u8, dom: *u8, since: *u8, recent: *ReleaseRecent, counts: *i64, read: *i64) -> i64 {
1422    let lp: *i64 = sys_mmap(16) as *i64
1423    let plan: *u8 = sys_read_file(path, lp)
1424    if (plan as i64) == 0 { gpe_puts("gpe_release_block: BOARD-UNREADABLE " as *u8); gpe_puts(path); gpe_puts("\n" as *u8); return 0 }
1425    if rr_collect(recent,plan,lp[0],since,dom,counts)<0 {
1426        gpe_puts("gpe_release_block: release allocation refused; no partial history emitted\n" as *u8);sys_exit(65)
1427    }
1428    read[0] = read[0] + 1
1429    return 1
1430}
1431func gpe_release_block(out: *u8, pos: i64) -> i64 {
1432    var p: i64 = pos
1433    let tab: *u8 = sys_mmap(RD_REC * RD_MAX_SUBJ)
1434    let since: *u8 = sys_mmap(RD_W_DATE)
1435    since[0] = 0 as u8
1436    var ns: i64 = 0
1437    var acc_bytes: i64 = 0
1438    let acc: *i64 = al_rows_open(AL_PFX_ACCEPT)
1439    if acc[AL_RS_LEN] > 0 { acc_bytes = acc[AL_RS_LEN]; ns = rd_op_latest(acc[AL_RS_BUF] as *u8, acc[AL_RS_LEN], tab, since) }
1440    var ref_bytes: i64 = 0
1441    let ref: *i64 = al_rows_open(AL_PFX_REFEREE)
1442    if ref[AL_RS_LEN] > 0 { ref_bytes = ref[AL_RS_LEN]; ns = rd_ref_latest(ref[AL_RS_BUF] as *u8, ref[AL_RS_LEN], tab, ns) }
1443    let recent: *ReleaseRecent = rr_new()
1444    if (recent as i64)<=0 { gpe_puts("gpe_release_block: allocation failed\n" as *u8);sys_exit(65) }
1445    let counts: *i64 = sys_mmap(8 * RD_COUNTS) as *i64
1446    var ci: i64 = 0
1447    while ci < RD_COUNTS { counts[ci] = 0; ci = ci + 1 }
1448    let read: *i64 = sys_mmap(16) as *i64
1449    read[0] = 0
1450    gpe_rd_board(GPE_RD_PLAN_GE, "gameengine" as *u8, since, recent, counts, read)
1451    gpe_rd_board(GPE_RD_PLAN_GR, "graphics" as *u8, since, recent, counts, read)
1452    gpe_rd_board(GPE_RD_PLAN_CS, "charsim" as *u8, since, recent, counts, read)
1453    let land_cap: i64=rr_required(recent)
1454    if land_cap<1 || land_cap>GPE_OUT_CAP-p-GPE_RD_HTML_CAP {
1455        gpe_puts("gpe_release_block: complete history exceeds page output budget; required=" as *u8);gpe_pn(land_cap);gpe_puts("\n" as *u8);sys_exit(65)
1456    }
1457    let land: *u8=sys_mmap(land_cap)
1458    if (land as i64)<=0 { gpe_puts("gpe_release_block: history allocation failed\n" as *u8);sys_exit(65) }
1459    let lo: i64=rr_render(recent,land,land_cap,counts)
1460    if lo<0 || counts[RD_C_LISTED]!=counts[RD_C_LAND] { gpe_puts("gpe_release_block: complete history rendering refused\n" as *u8);sys_exit(65) }
1461    let stamp: i64 = sys_now_realtime_sec()
1462    let html_cap: i64=GPE_RD_HTML_CAP+lo
1463    let html: *u8 = sys_mmap(html_cap)
1464    if (html as i64)<=0 { gpe_puts("gpe_release_block: HTML allocation failed\n" as *u8);sys_exit(65) }
1465    let hn: i64 = rd_emit(html, 0, html_cap, stamp, since, tab, ns, land, counts, read[0], GPE_RD_PLANS)
1466    p = gpe_ap(out, p, "const __rb=document.createElement(\"div\");__rb.id=\"nxrelease\";__rb.innerHTML=\"" as *u8)
1467    p = gpe_ap_n(out, p, html, hn)
1468    p = gpe_ap(out, p, "\";if(__mp)__mp.parentNode.insertBefore(__rb,__mp.nextSibling);window.__nx_release={since:\"" as *u8)
1469    p = gpe_ap(out, p, since)
1470    p = gpe_ap(out, p, "\",landed:" as *u8)
1471    p = gpe_num(out, p, counts[RD_C_LAND])
1472    p = gpe_ap(out, p, ",retracted:" as *u8)
1473    p = gpe_num(out, p, counts[RD_C_RETRACT])
1474    p = gpe_ap(out, p, ",subjects:" as *u8)
1475    p = gpe_num(out, p, ns)
1476    p = gpe_ap(out, p, ",boards:" as *u8)
1477    p = gpe_num(out, p, read[0])
1478    p = gpe_ap(out, p, "};\n" as *u8)
1479    p = gpe_ap(out, p, nrv_source())
1480    p = gpe_ap(out,p,"window.NishiWorkspace?.registerPart('progress',__rb);\n" as *u8)
1481    gpe_puts("gpe_release_block: accept_bytes=" as *u8); gpe_pn(acc_bytes)
1482    gpe_puts(" referee_bytes=" as *u8); gpe_pn(ref_bytes)
1483    gpe_puts(" subjects=" as *u8); gpe_pn(ns)
1484    gpe_puts(" since=" as *u8)
1485    if since[0] == (0 as u8) { gpe_puts("NEVER" as *u8) } else { gpe_puts(since) }
1486    gpe_puts(" landed=" as *u8); gpe_pn(counts[RD_C_LAND])
1487    gpe_puts(" listed=" as *u8); gpe_pn(counts[RD_C_LISTED])
1488    gpe_puts(" boards=" as *u8); gpe_pn(read[0]); gpe_puts("/" as *u8); gpe_pn(GPE_RD_PLANS)
1489    gpe_puts(" html=" as *u8); gpe_pn(hn); gpe_puts("\n" as *u8)
1490    return p
1491}
1492
1493// GE32 (2026-09-02): THE FRAME-BUDGET HUD. Every statistic is computed in the ENGINE (nx_perf_lib through the
1494// perf_* doors); this block only READS doors, prints one line, mirrors it onto the tier badge as
1495// data-nx-telemetry (and the raw window as data-nx-frames, so a headless capture yields a trace the pacing
1496// referee nx_frame_pacing_gate can judge), exports window.__nx_telemetry, and beacons the line on pagehide to
1497// the sovereign telemetry door (/world/__telemetry -- the server half is GE33's inflow, owed and named here).
1498// Visible under ?hud=1; exported always. Draw calls print UNCOUNTED until the GL instrument block publishes a
1499// counter; GPU memory is declared UNOBSERVABLE in a browser rather than guessed.
1500func gpe_frame_hud(out: *u8, pos: i64) -> i64 {
1501    var p: i64 = pos
1502    p = gpe_ap(out, p, "// GE32 FRAME-BUDGET HUD: every number below is READ from an engine door; this block decides nothing.\n(function(){if(!ex.perf_n)return;\nconst H=document.createElement(\"div\");H.id=\"nxhud\";H.style.cssText=\"font:11px ui-monospace,monospace;color:#b9b1dc;letter-spacing:.04em;white-space:pre-wrap\";\nif(location.search.indexOf(\"hud=1\")<0)H.hidden=true;\nconst _mp3=document.querySelector(\"p\");if(_mp3)_mp3.parentNode.insertBefore(H,_mp3);\nconst N=f=>f?Number(f()):-1;\nfunction tele(){const t={frame_interval_mode:(ex.perf_frame_raw?\"raw-normal-loop-ms-includes-pauses\":\"legacy-recorder\"),gpu_execution_ms:null,tier:window.__sov_tier||\"probing\",res:cv.width+\"x\"+cv.height,q:N(ex.quality),work_ms:N(ex.work_ms),budget_ms:N(ex.perf_budget),n:N(ex.perf_n),total:N(ex.perf_total),p50:N(ex.perf_p50),p95:N(ex.perf_p95),p99:N(ex.perf_p99),worst:N(ex.perf_worst),worst_ever:N(ex.perf_worst_ever),spikes:N(ex.perf_spikes),over:N(ex.perf_over),long:N(ex.perf_long),draws:(typeof window.__sov_gldraws===\"number\")?window.__sov_gldraws:\"UNCOUNTED\",wasm_mb:Math.round(ex.memory.buffer.byteLength/1048576),heap_mb:(performance.memory&&performance.memory.usedJSHeapSize)?Math.round(performance.memory.usedJSHeapSize/1048576):\"UNOBSERVABLE\",gpu_mem:\"UNOBSERVABLE-in-browser\",gl:(window.__nx_gl?String(window.__nx_gl.state||\"probed\"):\"unprobed\"),gpu:(window.GPU?1:0),cast:(window.__npc_up?\"up\":\"down\"),stage:String(window.__lst||\"pre\"),kernel:(window.__nx_kernel?String(window.__nx_kernel.s):\"unrun\"),door:((typeof nxDoor===\"function\")?nxDoor():\"ladder-absent\"),refused:((typeof nxDoorReport===\"function\")?nxDoorReport():\"ladder-absent\")};const P=window.__nx_gpu_timer;const last=P&&P.last;t.gpu_execution_ms=last?last.duration_ms:null;t.gpu_timing={state:P?P.state:'not-initialized',scope:'world-and-cast-render-pass',last:last||null};if(P){for(const key of ['observed_frames','unavailable_frames','attempted','completed','busy_frames','failed','cancelled','inflight','peak_inflight','result_dropped','capacity','buffer_bytes','buffer_budget_bytes','error','cleanup_errors']){if(P[key]!==undefined)t.gpu_timing[key]=P[key];}}t.cpu_frame=window.__nx_cpu_frame||null;t.gpu_adapter=window.__nx_gpu_adapter||null;window.__nx_telemetry=t;return t;}\nfunction frames(){const n=N(ex.perf_n);const a=[];for(let i=0;i<n;i++)a.push(Number(ex.perf_sample(BigInt(i))));return a.join(\",\");}\nfunction line(t){return \"timing \"+t.frame_interval_mode+\" | frame budget \"+t.budget_ms+\"ms | \"+t.tier+\" \"+t.res+\" q\"+t.q+\" | frame p50 \"+t.p50+\" p95 \"+t.p95+\" p99 \"+t.p99+\" worst \"+t.worst+\" (ever \"+t.worst_ever+\") ms over \"+t.n+\"/\"+t.total+\" frames | spikes \"+t.spikes+\" over-budget \"+t.over+\" | controller input \"+t.work_ms+\"ms (not GPU execution) | draws \"+t.draws+\" | wasm \"+t.wasm_mb+\"MB heap \"+t.heap_mb+\" gpu \"+t.gpu_mem+\" | gl-probe \"+t.gl+\" gpu-api \"+t.gpu+\" cast \"+t.cast+\" stage \"+t.stage+\" kernel \"+t.kernel+\" door \"+t.door+\" refused \"+t.refused+\" | GPU pass latest \"+(t.gpu_execution_ms===null?\"unavailable\":t.gpu_execution_ms+\"ms\")+\" [\"+t.gpu_timing.state+\"] frame \"+(t.gpu_timing.last?t.gpu_timing.last.frame:\"none\")+\" measured \"+(t.gpu_timing.completed||0)+\" busy \"+(t.gpu_timing.busy_frames||0)+\" failed \"+(t.gpu_timing.failed||0);}\nsetInterval(()=>{const t=tele();const l=line(t);H.textContent=l;__tb.setAttribute(\"data-nx-telemetry\",l);__tb.setAttribute(\"data-nx-frames\",frames());},1000);\n// GE37 BEACON -> nx_world_telemetry: the WINDOW travels (frames[]), not only its summary, so the sink re-judges it through the same ruler; ?w= names the world (the sink refuses anything but [a-z0-9_]).\nconst captureCadenceMs=300000;\nlet capturePending=null,captureFlight=null,captureAccepted=0,captureSkipped=0;\nfunction captureStatus(state,reason){\n const status=Object.freeze({version:2,state,reason,capture:capturePending?capturePending.id:null,accepted:captureAccepted,skipped:captureSkipped});\n window.__nx_capture_delivery=status;\n renderDeliveryStatus();\n}\nfunction renderDeliveryStatus(){\n try{\n  if(typeof document==='undefined')return;\n  const status=window.__nx_capture_delivery;if(!status)return;\n  let output=document.getElementById('nx-capture-delivery');\n  if(!output){\n   const canvas=document.getElementById('c');if(!canvas)return;\n   output=document.createElement('output');output.id='nx-capture-delivery';\n   output.setAttribute('role','status');output.setAttribute('aria-live','polite');output.setAttribute('aria-atomic','true');\n   output.style.cssText='display:block;max-width:100%;overflow-wrap:anywhere;color:inherit;font:inherit';\n   canvas.insertAdjacentElement('afterend',output);\n  }\n  const labels={idle:'Waiting for a capture',sending:'Sending capture',accepted:'Capture accepted by the server','retry-pending':'Capture retained for retry','queued-unacknowledged':'Capture queued; server acceptance unconfirmed',refused:'Capture refused; automatic sending paused',unavailable:'Capture unavailable'};\n  const persistence=window.__sov?.persistence;\n  const captureText='Evidence capture · '+(labels[status.state]||status.state)+' · '+status.accepted+' accepted'+(status.reason?' · '+status.reason:'');\n  output.textContent=(persistence?.state==='needs-intervention'?'SAVE PAUSED: '+persistence.reason+' · ':'')+captureText;\n  output.setAttribute('data-capture-state',status.state);\n  output.setAttribute('data-persistence-state',persistence?.state||'unobserved');\n }catch(_e){/* Display failure must not change delivery state or interrupt the game. */}\n}\naddEventListener('nx-persistence-change',renderDeliveryStatus);\nfunction capturePrepare(){\n if(capturePending){captureSkipped++;return capturePending;}\n const identity=window.__nx_identity;\n if(!identity||identity.state!=='ready')throw new Error('identity-unavailable');\n const t=tele();t.frames=frames().split(',').filter(s=>s.length).map(Number);\n if(!t.frames.length)throw new Error('frames-empty');\n const world=new URLSearchParams(location.search).get('w')||location.pathname.split('/').pop()||'world';\n const renderer=window.__nx_cpu_frame&&window.__nx_cpu_frame.renderer;\n const fields={w:world,capture:crypto.randomUUID(),release:identity.release,wasm:identity.wasm,renderer,mode:t.frame_interval_mode,res:t.res};\n if(!/^[a-z0-9_]{1,32}$/.test(world)||typeof renderer!=='string'||!/^[a-z0-9_-]{1,64}$/.test(renderer))throw new Error('capture-metadata-unavailable');\n t.capture_identity=identity;t.renderer_at_capture=renderer;\n const url='/world/__telemetry/v2?'+Object.entries(fields).map(([k,v])=>k+'='+encodeURIComponent(v)).join('&');\n capturePending=Object.freeze({id:fields.capture,url,body:JSON.stringify(t)});\n return capturePending;\n}\nasync function captureSend(){\n try{\n  if(captureFlight){captureSkipped++;return;}\n  const request=capturePrepare();\n  if(window.__nx_capture_delivery&&window.__nx_capture_delivery.state==='refused')return;\n  const controller=new AbortController();captureFlight=controller;\n  const deadline=setTimeout(()=>controller.abort(),captureCadenceMs);\n  captureStatus('sending',null);\n  try{\n   const response=await fetch(request.url,{method:'POST',body:request.body,signal:controller.signal});\n   if(response.status===204){captureAccepted++;captureStatus('accepted',null);capturePending=null;}\n   else captureStatus(response.status>=400&&response.status<500&&response.status!==429?'refused':'retry-pending','http-'+response.status);\n  }catch(_e){captureStatus('retry-pending',controller.signal.aborted?'deadline':'transport-failed');}\n  finally{clearTimeout(deadline);captureFlight=null;}\n }catch(_e){captureStatus('unavailable',String(_e.message||_e));}\n}\nfunction capturePagehide(){\n try{\n  if(window.__nx_capture_delivery&&window.__nx_capture_delivery.state==='refused')return;\n  const request=capturePrepare();\n  if(!navigator.sendBeacon){captureStatus('retry-pending','beacon-unavailable');return;}\n  const queued=navigator.sendBeacon(request.url,request.body);\n  captureStatus(queued?'queued-unacknowledged':'retry-pending',queued?null:'beacon-queue-refused');\n }catch(_e){captureStatus('unavailable',String(_e.message||_e));}\n}\ncaptureStatus('idle',null);\naddEventListener('pagehide',capturePagehide);setInterval(captureSend,captureCadenceMs);\n})();\n" as *u8)
1503    return p
1504}
1505
1506// GR26 gpe_sky_atmos -- THE SKY EMISSION, UNDER ITS CONTRACT NAME AT LAST.
1507// The physically-based sky has SHIPPED for some time: derived Rayleigh with wavelength-dependent tau
1508// (440/lambda)^4 => (.123,.287,.700), Kasten-Young airmass clamped at 38, single-scatter 1-exp(-tau*am),
1509// a sun disc, the SUNT transmittance dusk tint, and volumetric clouds; the aerial-perspective term in
1510// shade() uses the SAME constants. What did NOT exist was the SYMBOL -- the emission sat inline in
1511// gpe_build_s, so the board watch read _ABSENT_:gpe_sky_atmos forever while the matrix note still
1512// described a two-stop gradient this shader had already replaced.
1513// * A CAPABILITY THAT SHIPS WITHOUT ITS CONTRACT NAME IS INVISIBLE TO EVERY INSTRUMENT WATCHING FOR
1514//   THE NAME, AND IT ROTS IN THE PESSIMISTIC DIRECTION -- THE BOARD UNDERSTATES WHAT IS BUILT, WHICH
1515//   IS THE HALF NOBODY AUDITS.
1516// SCOPE, STATED PLAINLY: this names and OWNS the sky emission point -- every sky byte the page ever
1517// emits passes through here -- but the shader SOURCE literal still sits at the call site. Hoisting the
1518// literal in here was built and proven content-neutral locally (nx_contentdiff 3592 runs, lost 0,
1519// gained 0, symmetry=IDENTICAL-CONTENT); it is not shipped because doing so means retyping 4 KB of
1520// shader across a lossy transport, and one wrong byte is a corrupted sky nobody would see until a
1521// human looked at the page.
1522func gpe_sky_atmos(out: *u8, p: i64, src: *u8) -> i64 {
1523    return gpe_ap(out, p, src)
1524}
1525
1526func gpe_build_s(wasm: *u8, wn: i64, title: *u8, native: *u8, ctrl: *u8, vnum: i64, seed: i64, spec: *u8, out: *u8) -> i64 {
1527    // ★NO PAGE IS BUILT AROUND A MODULE THAT CANNOT RUN. The arithmetic that decides this MOVED to
1528    // nx_wasmfit on 2026-08-15 and this function became one of its callers rather than its owner.
1529    //
1530    // WHY IT MOVED. The guard used to live here, under a header claiming "every wasm page in the
1531    // estate is built through this function -- one guard here covers all of them". nx_wasmpage_census
1532    // then measured all 62,906 shipped pages: 25 carry an embedded module and only 9 reach this
1533    // function. The other 16 are emitted by organs that hand-pasted the blit shim and none of the
1534    // guard. ★★★★★★A GUARD PLACED IN "THE" SHARED PATH IS ONLY AS BROAD AS THE CLAIM THAT THE PATH IS
1535    // SHARED, AND THAT CLAIM IS A MEASUREMENT NOBODY TOOK -- here it was 9 of 25.
1536    if wf_guard(wasm, wn, "gpe_build_s" as *u8) == WF_REFUSE { return 0 - 1 }
1537    let b64: *u8 = sys_mmap((wn/3 + 2)*4 + 64)
1538    let bn: i64 = b64_encode(wasm, wn, b64)
1539    var p: i64 = 0
1540    // The release seal covers these bytes; request-time ad insertion would invalidate delivery identity.
1541    p = gpe_ap(out, p, "<!DOCTYPE html><html lang=\"en\"><head><!--nx-ad-optout--><meta charset=\"utf-8\"><meta name=\"nishi-release-sha256\" content=\"0000000000000000000000000000000000000000000000000000000000000000\"><title>" as *u8)
1542    p = gpe_ap(out, p, title)
1543    p = gpe_ap(out, p, "</title><meta name=\"nishi-game\" content=\"" as *u8)
1544    p = gpe_ap(out, p, native)
1545    p = gpe_ap(out, p, "\"><meta name=\"viewport\" content=\"width=device-width,initial-scale=1\"><style>\nhtml{height:100%}\nmain{width:100%;min-width:0;box-sizing:border-box;overflow-wrap:anywhere}\nbody{margin:0;min-height:100%;background:#08070f;color:#e9e5f5;font:14px/1.5 system-ui,sans-serif;\ndisplay:flex;flex-direction:column;align-items:center;justify-content:center;gap:14px;padding:12px 0;box-sizing:border-box}\ncanvas{width:98vw;border:1px solid #2f2a4a;border-radius:4px;touch-action:none}\ncanvas:fullscreen{width:100vw;height:100vh;border:0}\nh1{margin:0;font:600 15px/1 ui-monospace,monospace;letter-spacing:.14em;text-transform:uppercase;color:#b9b1dc}\np{margin:0;color:#7d76a0;font:12px/1.6 ui-monospace,monospace;text-align:center;max-width:70ch}\nb{color:#a8e6c0}</style><meta name=\"nishi-nxa\" data-nishi-role=\"cast\" content=\"/world/ref9e.nxa\"><meta name=\"nishi-nxa\" data-nishi-role=\"cast\" content=\"/world/ref9d.nxa\"><meta name=\"nishi-nxa\" data-nishi-role=\"cast\" content=\"/world/ref9.nxa\"></head><body>" as *u8)
1546    p = gpe_workspace_begin(out,p)
1547    if p<0 {return -1}
1548    p = gpe_ap(out,p,"<main><h1>" as *u8)
1549    p = gpe_ap(out, p, title)
1550    p = gpe_ap(out, p, "</h1><script>window.__nx_bootfail=null;window.onerror=function(m9,s9,l9,c9){if(!window.__nx_bootfail){window.__nx_bootfail=String(m9)+' @'+l9+':'+c9;var d9=document.createElement('pre');d9.style.cssText='position:fixed;top:0;left:0;right:0;background:#300;color:#fcc;padding:8px;z-index:9999;font:12px monospace;white-space:pre-wrap';d9.textContent='NISHI BOOT FAILURE (self-report): '+window.__nx_bootfail;try{fetch('/world/__clienterr?e='+encodeURIComponent(String(window.__nx_bootfail).slice(0,200))+'&p='+encodeURIComponent(location.pathname),{method:'GET',keepalive:true}).catch(function(){});}catch(e0){}if(document.body){document.body.appendChild(d9);}else{addEventListener('DOMContentLoaded',function(){document.body.appendChild(d9);});}}return false;};window.addEventListener('unhandledrejection',function(ev9){var r9=ev9&&ev9.reason;window.onerror('PROMISE: '+String(r9&&r9.stack?r9.stack:r9).slice(0,260),'',0,0);});setTimeout(function(){var t8=setInterval(function(){try{var d8=document.getElementById('nxstall');if(window.__npc_up){if(d8)d8.remove();clearInterval(t8);return;}var s8=(window.__lst||'pre')+(window.__npcfail?' npcfail='+window.__npcfail:'');if(!d8){d8=document.createElement('div');d8.id='nxstall';d8.style.cssText='position:fixed;left:8px;bottom:8px;background:#711;color:#fff;padding:6px 10px;font:12px monospace;z-index:9999';document.body.appendChild(d8);try{fetch('/world/__clienterr?e='+encodeURIComponent('npc-stall '+s8)+'&p='+encodeURIComponent(location.pathname),{method:'GET',keepalive:true}).catch(function(){});}catch(x8){}}var gl8=window.__nx_gl;if(gl8&&gl8.gl2===0){d8.textContent='CAST NEEDS THE GPU TIER -- WebGL2 refused on this browser ('+(gl8.state||'state unknown')+'): '+(gl8.remedy||'no remedy named')+'. The sovereign CPU tier draws the world only.';}else if(typeof nxDoor==='function'&&String(nxDoor()).indexOf('webgpu')===0){d8.textContent='NO CAST ON THIS DOOR, BY CONSTRUCTION -- the WebGPU world pass and the GL character programs cannot share one canvas, so ?gpu=1 draws the world with NONE of the visiting cast. Open this world WITHOUT ?gpu=1 to see the characters.';}else{d8.textContent='NPC LOAD STALLED stage='+s8;}}catch(x9){}},5000);},12000);</script><canvas id=\"c\"></canvas>\n<p>" as *u8)
1551    p = gpe_ap(out, p, ctrl)
1552    // the footer must describe the page that was actually emitted: under WEBGL the renderer choice and
1553    // the toggle links are real controls; sovereign-only, a ?gl=1 link would be a control that silently
1554    // does nothing -- a lying switch is worse than none.
1555    if GPE_EMIT_WEBGL == 1 {
1556        p = gpe_ap(out, p, "<br>Renderer: <a href=\"?gl=0\">CPU</a> &middot; <a href=\"?gpu=0\">WebGL fallback</a> &middot; <a href=\"?gpu=1\">WebGPU</a>. Visiting characters: <a href=\"?cast=1\">show</a> &middot; <a href=\"?cast=0\">hide</a>. Use Frame character for inspection; free movement is the default. Open Progress for verified changes and pending work. <a href=\"?hud=1\">Show frame measurements</a>.</p>\n</main>\n<script>\nconst B=\"" as *u8)
1557    } else {
1558        p = gpe_ap(out, p, "<br>\nEvery pixel above is emitted by NishiLang compiled to WebAssembly.<br>\nThis page holds no game logic &mdash; every rule, every position, the light and the characters live in NishiLang compiled to WebAssembly, and the sovereign rasteriser draws every pixel. One renderer, one truth, no GPU shader path.</p>\n</main>\n<script>\nconst B=\"" as *u8)
1559    }
1560    p = gpe_ap_n(out, p, b64, bn)
1561    p = gpe_ap(out, p, "\";\n" as *u8)
1562    // GP3/GE45: the door ladder as data. ONE table (knowledge/tier_ladder.conf) emitted verbatim; the
1563    // page's ladder resolution names its door through nxDoorId(requires), never by spelling an id, and
1564    // the HUD prints nxDoorReport() -- which door drew the frame and WHY each higher door was not taken
1565    // (levered-off, capability-absent, failed:<the thrown message>). An unreadable conf emits a NAMED
1566    // absence (tl_emit announces TIER-LADDER-ABSENT-AT-EMIT on stderr) so a page never draws an
1567    // unexplained frame silently. Emitted HERE, ahead of the module, so the GE30 threaded boot can ask
1568    // nxThreads() for this visitor's worker count before anything is instantiated or initialised.
1569    p = gpe_ap(out, p, rk_tier_ladder())
1570    p = gpe_ap(out, p, "let nxIdentityEpoch=0;\nfunction nxIdentitySelect(moduleBytes,kind){\n const epoch=++nxIdentityEpoch;\n const meta=document.querySelector('meta[name=\"nishi-release-sha256\"]');\n const value=meta?meta.getAttribute('content'):null;\n const release=typeof value==='string'&&/^[0-9a-f]{64}$/.test(value)?value:null;\n const publish=(state,wasm,reason)=>{if(epoch===nxIdentityEpoch)window.__nx_identity=Object.freeze({version:1,epoch,release,wasm,module:kind,state,reason});};\n publish('pending',null,null);\n if(!globalThis.crypto||!globalThis.crypto.subtle){publish('unavailable',null,'sha256-unavailable');return;}\n try{\n  const snapshot=moduleBytes instanceof ArrayBuffer?new Uint8Array(moduleBytes).slice():moduleBytes.slice();\n  Promise.resolve(globalThis.crypto.subtle.digest('SHA-256',snapshot)).then(hash=>{\n   const digest=Array.from(new Uint8Array(hash),v=>v.toString(16).padStart(2,'0')).join('');\n   if(!/^[0-9a-f]{64}$/.test(digest)){publish('unavailable',null,'sha256-invalid-result');return;}\n   publish(release===null?'unavailable':'ready',digest,release===null?'release-identity-absent':null);\n  }).catch(()=>publish('unavailable',null,'sha256-failed'));\n }catch(_e){publish('unavailable',null,'sha256-failed');}\n}\nconst bytes=Uint8Array.from(atob(B),c=>c.charCodeAt(0));\nWebAssembly.instantiate(bytes).then(async r=>{let ex=r.instance.exports;\nnxIdentitySelect(bytes,\"plain\");\n" as *u8)
1571    // GE30: ex is LET, not const -- an isolated visitor is UPGRADED to the shared-memory twin here,
1572    // before ww/hh/fb_off are read and long before init(), so every number below describes the engine
1573    // that will actually draw. A non-isolated visitor falls through with the inlined build untouched.
1574    p = gpe_mt_boot(out, p)
1575    // GE31/GE23 (2026-09-06): the ENGINE owns its memory size. wasm_pages_req() is derived from the
1576    // extended arena (the cast clip extension past CRAFT_TOTAL); the backend still declares only the
1577    // base pages it can read, so the page grows the LIVE memory to the engine's request here -- after
1578    // the MT boot has chosen which instance draws and before any view or init exists. On the twin this
1579    // is the shared memory the workers already hold, inside its declared maximum. A refusal is NAMED,
1580    // never silent: the clip door then stays closed and the reason is on the window.
1581    p = gpe_ap(out, p, "window.__nx_memgrow='absent';\nif(ex.wasm_pages_req&&ex.memory){const need9=Number(ex.wasm_pages_req()),have9=Math.floor(ex.memory.buffer.byteLength/65536);\nif(need9>have9){try{ex.memory.grow(need9-have9);window.__nx_memgrow={grew:need9-have9,pages:need9};}catch(e9){window.__nx_memgrow='refused:'+String(e9);}}else{window.__nx_memgrow={grew:0,pages:have9};}}\n" as *u8)
1582    p = gpe_ap(out, p, "const W=Number(ex.ww()),H=Number(ex.hh()),off=Number(ex.fb_off());\nlet cv=document.getElementById(\"c\");\n// a canvas holds ONE context type forever -- GL must claim it BEFORE any 2d setup.\n// cv is LET, not const: a canvas whose GL/GPU context died can never host a 2d context again\n// (the spec one-context rule), so the sovereign fallback must swap in a fresh element (sovSwap).\n// FIRST-PAINT PLACEHOLDER: an undrawn canvas is TRANSPARENT over the near-black body, which\n// reads as a BLACK SCREEN for exactly as long as the first frame takes. Paint the world's own\n// palette (sky over sand) via CSS immediately; the first real frame covers it opaquely.\ncv.style.background=\"linear-gradient(rgb(127,178,229) 55%,rgb(232,217,176) 55%)\";\n// THE TIER BADGE: the active renderer is ANNOUNCED on the page -- a black or wrong frame must\n// never be unexplained. window.__sov_tier mirrors it for instruments.\n// S0 (2026-09-04): the badge also names WHAT the door draws -- the ladder's draws word for the door that\n// drew the frame (world / world+cast / world+markers, undecided until the ladder resolves) -- mirrored as\n// window.__sov_draws, so a WebGPU frame missing every character says so on the page, not only in a conf label.\nconst __tb=document.createElement(\"div\");__tb.style.cssText=\"font:11px ui-monospace,monospace;color:#7d76a0;letter-spacing:.08em\";__tb.textContent=\"renderer: probing\";\nconst __mp=document.querySelector(\"p\");if(__mp)__mp.parentNode.insertBefore(__tb,__mp);\nconst __tier=t=>{const dw9=nxDoorDraws();__tb.textContent=\"renderer: \"+t+\" | draws: \"+dw9;window.__sov_tier=t;window.__sov_draws=dw9;};\n" as *u8)
1583    // GE20: the engine version badge rides beside the tier badge -- ladder + target version read
1584    // from the compare plane bytes at emit (gpe_version_badge), so a republished page updates itself.
1585    p = gpe_version_badge(out, p)
1586    // GE52: the release delta rides under the prose -- what changed since the operator last judged, the referee
1587    // percept beside each subject, and the accept-row recipe for this build (gpe_release_block, data at every emit).
1588    p = gpe_release_block(out, p)
1589    p = gpe_ap(out, p, "let ctx=null,img=null,cw=0,ch=0;\n// RESOLUTION FOLLOWS THE HARDWARE: the organ reports its CURRENT ray resolution through ww/hh and the\n// canvas is resized to match, so the BROWSER does the upscale. The page never chooses a size, and the\n// adaptive controller inside the organ is the only thing that decides how much detail this machine gets.\nfunction blit(){if(!ctx)return;\nconst w=Number(ex.ww()),h=Number(ex.hh());\nif(w!==cw||h!==ch){cw=w;ch=h;cv.width=w;cv.height=h;img=ctx.createImageData(w,h);}\nconst m=new Uint32Array(ex.memory.buffer,off,w*h*2);const d=new Uint32Array(img.data.buffer);\nfor(let i=0;i<w*h;i++){d[i]=m[i*2]|0xff000000;}\nctx.putImageData(img,0,0);}\nconst NXV=" as *u8)
1590    // the ACTUAL identity digit (a 1-else-0 emit silently booted every v>=2 world as v0)
1591    out[p] = (48 + vnum) as u8
1592    p = p + 1
1593    // W1c GEN-TIME OVERLAY: gen rows (idx 0..6, 59, 60) cross as DATA *BEFORE* init_v -- written
1594    // into the engine's GENP region so identity defaults are overridden before genworld reads
1595    // them (post-boot they would be the silent no-op the old refusal named). Emitted ONLY when
1596    // a gen row exists -> pages without one stay byte-identical (the W1 KATs keep holding).
1597    if (spec as i64) != 0 { if spec[0] != (0 as u8) {
1598        let gposn: *i64 = sys_mmap(16) as *i64
1599        gposn[0] = 0
1600        var gcnt: i64 = 0
1601        var grun: i64 = 1
1602        while grun == 1 {
1603            let giv: i64 = gpr_num_at(spec, gposn)
1604            if spec[gposn[0]] != (58 as u8) { grun = 0 } else {
1605                gposn[0] = gposn[0] + 1
1606                gpr_num_at(spec, gposn)
1607                // THE ONE ALLOWLIST (nx_genp_allow_lib, 2026-09-04). This pass used to enumerate 0..6/59/60/61/64 by hand
1608                // and was never widened when the validator admitted 67 and 68, so a recipe's 66/67/68 pairs validated and
1609                // were silently dropped here: the served ridge.html read const NXGP=[[64,0]] against 67:12,68:32 and the
1610                // STAGED-PIPELINE world served legacy terrain. The engine, the snap and both passes now read one ruler.
1611                let gg: i64 = genp_gen_ok(giv)
1612                if gg == 1 { gcnt = gcnt + 1 }
1613                if spec[gposn[0]] == (44 as u8) { gposn[0] = gposn[0] + 1 } else { grun = 0 }
1614            }
1615        }
1616        if gcnt > 0 {
1617            p = gpe_ap(out, p, ";\nconst NXGP=[" as *u8)
1618            gposn[0] = 0
1619            var gfirst: i64 = 1
1620            grun = 1
1621            while grun == 1 {
1622                let giv2: i64 = gpr_num_at(spec, gposn)
1623                if spec[gposn[0]] != (58 as u8) { grun = 0 } else {
1624                    gposn[0] = gposn[0] + 1
1625                    let gvv2: i64 = gpr_num_at(spec, gposn)
1626                    // the SAME ruler as the count pass (nx_genp_allow_lib): a row counted and not written, or written
1627                    // and not counted, was a length that disagreed with its own payload -- one function cannot disagree
1628                    let gg2: i64 = genp_gen_ok(giv2)
1629                    if gg2 == 1 {
1630                        if gfirst == 0 { p = gpe_ap(out, p, "," as *u8) }
1631                        gfirst = 0
1632                        p = gpe_ap(out, p, "[" as *u8)
1633                        p = gpe_num(out, p, giv2)
1634                        p = gpe_ap(out, p, "," as *u8)
1635                        p = gpe_num(out, p, gvv2)
1636                        p = gpe_ap(out, p, "]" as *u8)
1637                    }
1638                    if spec[gposn[0]] == (44 as u8) { gposn[0] = gposn[0] + 1 } else { grun = 0 }
1639                }
1640            }
1641            p = gpe_ap(out, p, "];\nif(ex.genp_off&&NXGP.length){const GP=new BigInt64Array(ex.memory.buffer,Number(ex.genp_off()),24);GP[0]=BigInt(20260813001);GP[1]=BigInt(NXGP.length);for(let i=0;i<NXGP.length;i++){GP[2+2*i]=BigInt(NXGP[i][0]);GP[3+2*i]=BigInt(NXGP[i][1]);}}" as *u8)
1642        }
1643    } }
1644    p = gpe_ap(out, p, ";\nif(NXV&&ex.init_v)ex.init_v(BigInt(NXV),BigInt(" as *u8)
1645    p = gpe_num(out, p, seed)
1646    p = gpe_ap(out, p, "));else ex.init();\n" as *u8)
1647    // W1b STYLE OVERLAY: recipe style rows poked into the engine's LIVE spec table after boot.
1648    // Pure DATA across the interop boundary (JS/HTML-interop-only law: values cross, logic
1649    // does not). idx guard 7..58 repeated page-side as bounds belt; the loader already refused
1650    // gen-time rows by name. Emitted ONLY when a style column exists -> spec-less pages stay
1651    // byte-identical (the W1 KAT keeps holding).
1652    if (spec as i64) != 0 { if spec[0] != (0 as u8) {
1653        p = gpe_ap(out, p, "const NXSP=[" as *u8)
1654        let sposn: *i64 = sys_mmap(16) as *i64
1655        sposn[0] = 0
1656        var sfirst: i64 = 1
1657        var srun: i64 = 1
1658        while srun == 1 {
1659            let iv: i64 = gpr_num_at(spec, sposn)
1660            if spec[sposn[0]] != (58 as u8) { srun = 0 } else {
1661                sposn[0] = sposn[0] + 1
1662                let vv: i64 = gpr_num_at(spec, sposn)
1663                if sfirst == 0 { p = gpe_ap(out, p, "," as *u8) }
1664                sfirst = 0
1665                p = gpe_ap(out, p, "[" as *u8)
1666                p = gpe_num(out, p, iv)
1667                p = gpe_ap(out, p, "," as *u8)
1668                p = gpe_num(out, p, vv)
1669                p = gpe_ap(out, p, "]" as *u8)
1670                if spec[sposn[0]] == (44 as u8) { sposn[0] = sposn[0] + 1 } else { srun = 0 }
1671            }
1672        }
1673        p = gpe_ap(out, p, "];\nif(ex.spec_off){const SP=new BigInt64Array(ex.memory.buffer,Number(ex.spec_off()),64);for(const q of NXSP)if(q[0]>=7&&q[0]<=58)SP[q[0]]=BigInt(q[1]);}\n" as *u8)
1674    } }
1675    p = gpe_ap(out, p, "// GPU DISPLAY PATH: the same DDA raycast as a fragment shader, EMITTED by the sovereign page\n// emitter. The organ keeps ALL game logic + quality authority; the GPU only draws its state at\n// TRUE DEVICE RESOLUTION (4K on a 4K panel). CPU wasm render remains the gate-proven truth and\n// the automatic fallback (?gl=0 forces it). GPU (WebGPU, ?gpu=1 lever) and GL (WebGL2, default\n// when emitted) both always DECLARE so the frame loop can test them on every page shape.\nlet GL=null;let GPU=null;\n" as *u8)
1676    // SOVEREIGN DEFAULT (operator 2026-08-14: we shouldnt even have webgl). The wasm rasteriser IS
1677    // the product path. `let GL=null` always ships because the frame loop tests it; everything below
1678    // -- shaders, GL setup, the NPC and eye passes -- is emitted ONLY when GPE_EMIT_WEBGL is 1, so the
1679    // default page carries NO GLSL at all rather than carrying ~50KB of it inert.
1680    if GPE_EMIT_WEBGL == 1 {
1681    p = gpe_ap(out, p, "const VSH=`#version 300 es\\nvoid main(){vec2 v=vec2((gl_VertexID<<1)&2,gl_VertexID&2);gl_Position=vec4(v*2.-1.,0.,1.);}`;\n" as *u8)
1682    p = gpe_ap(out, p, "const FSH=`#version 300 es\nprecision highp float;precision highp int;\nuniform highp usampler3D uV;uniform vec3 uCam;uniform vec4 uYP;uniform vec3 uPal[12];\nuniform vec3 uPalF[5];uniform vec3 uSunD;uniform vec3 uSunC;uniform int uRain;\nuniform vec3 uSkT;uniform vec3 uSkH;uniform int uSun;uniform int uCld;uniform float uT;uniform int uWxT;uniform vec2 uWxW;uniform float uWxC;\nuniform vec2 uRes;uniform int uWmax;uniform int uSelB;uniform int uHok;uniform int uVt;\nuniform int uNpcT;\nout vec4 fc;\nuint vx(ivec3 c){if(c.x<0||c.y<0||c.z<0||c.x>127||c.y>47||c.z>127)return 0u;return texelFetch(uV,ivec3(c.x,c.z,c.y),0).r;}\nfloat h21(vec2 p){return fract(sin(dot(p,vec2(127.1,311.7)))*43758.5453);}\nfloat h31(vec3 p){return fract(sin(dot(p,vec3(127.1,311.7,74.7)))*43758.5453);}\nvec3 pal(uint b){int i=int(b);if(i<0)i=0;if(i>16)i=16;return i<12?uPal[i]:uPalF[i-12];}\n" as *u8)
1683    p = gpe_sky_atmos(out, p, "vec3 sky(vec3 rd){\n// derived Rayleigh sky (nx_atmosphere port, ONE owner): airmass sec(z) clamped 38 (Kasten-Young\n// horizon, .0264=1/38), tau=(440/lambda)^4*.7 => (.123,.287,.700), single-scatter 1-exp(-tau),\n// sqrt display encode (declared approx of sRGB). World data (uSkT+uSkH) supplies ENERGY (day/night/\n// weather); the SUNT transmittance colour supplies the dusk tint. The two-stop painted gradient is gone.\nfloat am=clamp(1./max(rd.y,.0264),1.,38.);\nvec3 ray9=1.-exp(-vec3(.123,.287,.700)*am);\nfloat envk=clamp(dot(uSkT+uSkH,vec3(.3333)),0.,1.);\nvec3 st8=(uSun==1&&dot(uSunC,uSunC)>.01)?uSunC:vec3(1.);\nvec3 s=sqrt(ray9*envk)*st8;\nif(uSun==1){float d=dot(rd,uSunD);\nvec3 sc9=(dot(uSunC,uSunC)>.01)?uSunC:vec3(1.,.98,.88);if(d>.99996)s=sc9*1.6;else if(d>.9993)s=mix(s,sc9,(d-.9993)/.00066*.5);}\nif(uCld==1&&rd.y>.04){vec2 cp=uCam.xz+rd.xz*((56.-uCam.y)/rd.y);\nvec2 p1=cp/14.+vec2(uT/240.,uT/540.);vec2 i1=floor(p1),f1=smoothstep(0.,1.,fract(p1));\nfloat n=mix(mix(h21(i1),h21(i1+vec2(1.,0.)),f1.x),mix(h21(i1+vec2(0.,1.)),h21(i1+vec2(1.,1.)),f1.x),f1.y);\nvec2 p2=cp/37.+vec2(uT/300.,0.);vec2 i2=floor(p2),f2=smoothstep(0.,1.,fract(p2));\nfloat n2=mix(mix(h21(i2),h21(i2+vec2(1.,0.)),f2.x),mix(h21(i2+vec2(0.,1.)),h21(i2+vec2(1.,1.)),f2.x),f2.y);\n// VOLUMETRIC CLOUDS (2026-08-26, from knowledge/library/sky_volumetrics_impl_spec: the\n// HZD/Nubis lineage verified across three public implementations). A raymarched slab with\n// remap density shaping, Beer-Lambert extinction, dual-lobe HG phase (g +/-.08, the\n// terrainengine values), powder darkening, and ONE wind advection: every octave moves with\n// the weather system's own wind vector -- coherent drift, not four unrelated scroll rates\n// (the churn the operator read as jumping). Steps 16/8 are the low-HW reduction of the cited\n// 54-96/6 -- NAMED as such; raise via the quality controller when budget allows.\nfloat t0c=(46.-uCam.y)/max(rd.y,.02);float t1c=(66.-uCam.y)/max(rd.y,.02);\nif(t1c>t0c&&t0c<900.){\nvec2 wadv=uWxW*uT*2.2;\nfloat trn=1.;vec3 cac=vec3(0.);\nfloat mu=dot(rd,uSunD);\nfloat ph=.0795775*mix((1.-.0064)/pow(1.0064-.16*mu,1.5),(1.-.0064)/pow(1.0064+.16*mu,1.5),.5);\nfloat dsc=(t1c-t0c)/16.;\nfloat jt=h21(floor(cp))*dsc;\nfor(int ci=0;ci<16;ci++){\nfloat tc=t0c+jt+dsc*float(ci);\nvec3 cpw=uCam+rd*tc;\nvec2 cqA=(cpw.xz+wadv)/148.;vec2 iqA=floor(cqA),fqA=smoothstep(0.,1.,fract(cqA));\nfloat nA=mix(mix(h21(iqA),h21(iqA+vec2(1.,0.)),fqA.x),mix(h21(iqA+vec2(0.,1.)),h21(iqA+vec2(1.,1.)),fqA.x),fqA.y);\nvec2 cqB=(cpw.xz+wadv*1.15)/52.;vec2 iqB=floor(cqB),fqB=smoothstep(0.,1.,fract(cqB));\nfloat nB=mix(mix(h21(iqB),h21(iqB+vec2(1.,0.)),fqB.x),mix(h21(iqB+vec2(0.,1.)),h21(iqB+vec2(1.,1.)),fqB.x),fqB.y);\nvec2 cq2=(cpw.xz+wadv*1.3)/19.;\nvec2 iq2=floor(cq2),fq2=smoothstep(0.,1.,fract(cq2));\nfloat nd2=mix(mix(h21(iq2),h21(iq2+vec2(1.,0.)),fq2.x),mix(h21(iq2+vec2(0.,1.)),h21(iq2+vec2(1.,1.)),fq2.x),fq2.y);\nfloat nb=clamp(nA*.625+nB*.25+nd2*.125,0.,1.);\nfloat hf=clamp((cpw.y-46.)/20.,0.,1.);\nfloat grad=smoothstep(0.,.12,hf)*(1.-smoothstep(.55,1.,hf));\nfloat cov=mix(.38,.78,uWxC);\nfloat den=clamp((nb*grad-(1.-cov))/max(cov,.001),0.,1.);\nden=clamp(den-nd2*.34*(1.-hf),0.,1.);den=den*den*(3.-2.*den);den=den*den*(3.-2.*den);\nif(den>.01){\nfloat sd=den*dsc*.09;\nfloat lt=exp(-den*1.6)*(1.-exp(-den*3.2));\nvec3 lc=mix(vec3(.62,.66,.74),vec3(1.,.985,.95),lt);\ncac+=trn*sd*lc*(0.6+2.6*ph);\ntrn*=exp(-sd*1.35);\nif(trn<.1)break;}}\nfloat cfad=smoothstep(.02,.10,rd.y)*(1.-smoothstep(500.,900.,t0c));\n// ONE composite: sky attenuated by cloud transmittance plus in-scattered cloud light, faded\n// at the horizon. (v1 of this block left two alternative composites stacked -- double-applied.)\ns=mix(s,s*trn+cac,cfad);}}\nreturn s;}\n" as *u8)
1684    p = gpe_ap(out, p, "float march(vec3 ro,vec3 rd,out ivec3 hc,out int fce,out uint hb,int skipw,int mx){\nivec3 c=ivec3(floor(ro));ivec3 st=ivec3(sign(rd));vec3 dd=abs(1./max(abs(rd),1e-6));\nvec3 tm=(vec3(st)*(vec3(c)-ro)+vec3(st)*.5+.5)*dd;float t=0.;\nfor(int i=0;i<200;i++){if(i>=mx)break;\nif(tm.x<tm.y&&tm.x<tm.z){c.x+=st.x;t=tm.x;tm.x+=dd.x;fce=st.x>0?2:1;}\nelse if(tm.y<tm.z){c.y+=st.y;t=tm.y;tm.y+=dd.y;fce=st.y>0?4:3;}\nelse{c.z+=st.z;t=tm.z;tm.z+=dd.z;fce=st.z>0?6:5;}\nif(c.y>uWmax&&rd.y>=0.)return -1.;if(c.y<0)return -1.;\nif(c.x<-8||c.x>135||c.z<-8||c.z>135)return -1.;\nuint b=vx(c);if(skipw==1&&b==4u)b=0u;\nif(b!=0u){hc=c;hb=b;return t;}}\nreturn -1.;}\n" as *u8)
1685    p = gpe_ap(out, p, "vec3 shade(vec3 ro,vec3 rd,float t,ivec3 c,int fce,uint b){\nvec3 hp=ro+rd*t;\nvec2 uv;ivec3 oc=c;vec3 n=vec3(0.);\nif(fce==1){uv=hp.zy;oc.x+=1;n=vec3(1.,0.,0.);}else if(fce==2){uv=hp.zy;oc.x-=1;n=vec3(-1.,0.,0.);}\nelse if(fce==3){uv=hp.xz;oc.y+=1;n=vec3(0.,1.,0.);}else if(fce==4){uv=hp.xz;oc.y-=1;n=vec3(0.,-1.,0.);}\nelse if(fce==5){uv=hp.xy;oc.z+=1;n=vec3(0.,0.,1.);}else{uv=hp.xy;oc.z-=1;n=vec3(0.,0.,-1.);}\nvec2 f=fract(uv);\nuint bb=b;if(b==1u&&fce!=3&&fce!=4){bb=2u;if(f.y>.8)bb=1u;}\nfloat li=fce==3?1.:fce==4?.42:fce==1?.76:fce==2?.7:fce==5?.62:.56;\nif(uSun==1){if(fce==1)li*=1.12;if(fce==2)li*=.92;if(fce==5)li*=1.04;}\n// BUMP MAPPING: texel-hash height field -> gradient -> sun-lit micro-relief (the det lever:\n// real 1px luminance structure on every face, the difference between flat tint and rough matter)\nvec3 sd3=floor(hp)*.13;float bs=float(b)*7.;\nfloat t00=h31(vec3(floor(f*24.),bs)+sd3);\nfloat t10=h31(vec3(floor(f*24.+vec2(1.,0.)),bs)+sd3);\nfloat t01=h31(vec3(floor(f*24.+vec2(0.,1.)),bs)+sd3);\nfloat bmp=(t10-t00)*.6+(t01-t00)*.45;\nfloat bamp=b==3u||b==2u||b==9u||b==10u||b==11u?1.:b==7u?1.3:b==4u?.25:.7;\nfloat dfade=clamp(1.-t/24.,0.,1.);/*hash detail below pixel frequency reads as TV static (beach sand vistas, 08-03 frame); a hash cannot be mip-averaged, so micro-relief fades out by 24 blocks and flat tint + fog carry the far field*/li*=clamp(1.+bmp*bamp*dfade,.55,1.45);\nfloat tx=t00;\nli*=.9+tx*.2*dfade;\n// grass tufts: sparse taller blades on grass tops read as vegetation, not paint\nif(bb==1u&&fce==3&&t<24.){float tf=h21(floor(f*38.)+floor(hp.xz)*3.7);\nif(tf>.82)li*=1.28;else if(tf<.14)li*=.78;}\nif(f.x<.055||f.x>.945||f.y<.055||f.y>.945)li*=.82;\nfloat ao=0.;\nvec2 ua=fce==3||fce==4?vec2(1.,0.):fce<3?vec2(0.,0.):vec2(1.,0.);\nif(f.x<.17){ivec3 nb=oc;if(fce==3||fce==4)nb.x-=1;else if(fce<3)nb.z-=1;else nb.x-=1;if(vx(nb)!=0u&&vx(nb)!=4u)ao+=(.17-f.x)*2.;}\nif(f.x>.83){ivec3 nb=oc;if(fce==3||fce==4)nb.x+=1;else if(fce<3)nb.z+=1;else nb.x+=1;if(vx(nb)!=0u&&vx(nb)!=4u)ao+=(f.x-.83)*2.;}\nif(f.y<.17){ivec3 nb=oc;if(fce==3||fce==4)nb.z-=1;else nb.y-=1;if(vx(nb)!=0u&&vx(nb)!=4u)ao+=(.17-f.y)*2.;}\nif(f.y>.83){ivec3 nb=oc;if(fce==3||fce==4)nb.z+=1;else nb.y+=1;if(vx(nb)!=0u&&vx(nb)!=4u)ao+=(f.y-.83)*2.;}\nli*=1.-min(ao,.45);\n// SUN SHADOWS: one march from the hit point toward the sun; blocked = shadow (ambient kept)\nif(uSun==1){ivec3 sc2;int sf2;uint sb2;\nif(march(hp+n*.02,uSunD,sc2,sf2,sb2,1,60)>0.)li*=.55;}\nvec3 col=pal(bb)*li;\nvec3 fw9=1.-exp(-vec3(.123,.287,.700)*t/168.);\nreturn mix(col,sky(rd),fw9);}\n" as *u8)
1686    p = gpe_ap(out, p, "void main(){\nvec2 sc=(gl_FragCoord.xy-uRes*.5)/(uRes.x*.5);\nvec3 fw=vec3(uYP.x*uYP.w,uYP.z,uYP.y*uYP.w);\nvec3 rt=vec3(uYP.y,0.,-uYP.x);\nvec3 up=vec3(-uYP.x*uYP.z,uYP.w,-uYP.y*uYP.z);\nvec3 rd=normalize(fw+rt*sc.x+up*sc.y);\nvec3 ro=uCam;\nivec3 hc;int fce=0;uint hb=0u;\nfloat t=march(ro,rd,hc,fce,hb,0,200);\nvec3 col;\nif(t<0.)col=sky(rd);\nelse{col=shade(ro,rd,t,hc,fce,hb);\nif(hb==4u){ivec3 h2;int f2;uint b2;float t2=march(ro,rd,h2,f2,b2,1,200);\nif(t2>0.)col=col*.58+shade(ro,rd,t2,h2,f2,b2)*.42;}}\n" as *u8)
1687    p = gpe_ap(out, p, "// VALUE-STRUCTURE GRADE (operator: \"color palette barely used\". MEASURED 2026-08-28, PIL over the\n// operator's own 20:19 frame vs the given references: saturation is NOT the gap (S mean .29 vs\n// .27-.32, lift x1.01) -- the gaps are HUE MONOCULTURE (hue concentration .94 vs .31-.58; the\n// ocean supplies the missing axis) and HIGH-KEY MIDS (V p50 .79 vs .59-.66). A p95-anchored power\n// pivot moves the median HALF-way to the reference (half, because sand content legitimately\n// differs from the reference scenes): .94*(x/.94)^1.45. Inlined at every non-UI output (here,\n// figures, hair, WGSL) -- one measurement, four copies; a uniform consolidation is owed if it\n// ever needs to move. Declared side effects: non-grey chroma rises slightly (toward the refs),\n// and the multiplicative figure shadow deepens to k^1.45.\nif(uVt==1)col=vec3(.94)*pow(max(col,vec3(0.))*(1./.94),vec3(1.45));// ?tm=0 = the falsifiability lever: the operator can A/B the view transform on his own screen\nvec2 px=gl_FragCoord.xy;vec2 ctr=uRes*.5;\n// RAIN (A1 weather made visible): cheap screen-space streaks + a wet dim, organ-driven\nif(uRain==1){float wsl9=.35+uWxW.x*.9;float rr=h21(vec2(floor((px.x+px.y*wsl9)/2.),floor((px.y+uT*(uWxT==2?4.:13.))/26.)));\nif(uWxT==2){if(rr>.93)col=mix(col,vec3(.97,.98,1.),.75);col*=.97;}else{if(rr>.945)col=mix(col,vec3(.75,.8,.92),.45);col*=.93;}/*re-raised 08-03: .965/.28 had thinned rain to invisible -- HUD said RAIN | MOOD -8 (soaked) over a clean blue sky; weather the mood ledger charges for must be visible in the frame*/}\nif((abs(px.x-ctr.x)<8.&&abs(px.y-ctr.y)<1.5)||(abs(px.y-ctr.y)<8.&&abs(px.x-ctr.x)<1.5))col=uNpcT>=0?vec3(1.,.45,.65):(uHok==1?vec3(1.,.82,.35):vec3(1.));\nfloat hbY=uRes.y*.045;float hbS=uRes.x*.018;\nfor(int s=0;s<7;s++){vec2 o=vec2(uRes.x*.02+float(s)*hbS*1.5,hbY);\nif(px.x>=o.x&&px.x<o.x+hbS&&px.y>=o.y&&px.y<o.y+hbS){int bt=s==0?3:s==1?2:s==2?6:s==3?7:s==4?5:s==5?12:13;col=s<5?uPal[bt-1]:uPalF[bt-12];\nif(bt==uSelB&&(px.x<o.x+2.||px.x>o.x+hbS-2.||px.y<o.y+2.||px.y>o.y+hbS-2.))col=vec3(1.);}}\nfc=vec4(col,1.);}`;\n" as *u8)
1688    p = gpe_ap(out, p, "// SKINNED NXA NPC PASS (craft integration, the NXA lane's hybrid design): the benchmark body\n// (VERT/TRIS/SKEL/SKIN/ANIM from /world/ref8.nxa) walks the world as mob 0, LBS in the vertex\n// shader per the format's world-delta law M x = D(x-b)+b+dt -- no hierarchy at runtime. The DDA\n// pass publishes gl_FragDepth; this pass z-tests against it, so terrain occludes her correctly.\nconst MVS=`#version 300 es\nlayout(location=0) in vec3 aP;layout(location=1) in vec4 aJ;layout(location=2) in vec4 aW;layout(location=3) in vec3 aN;layout(location=4) in vec2 aUV;layout(location=5) in float aHS;\nuniform sampler2D uJT;uniform float uSc;\nuniform vec3 uIP[12];uniform vec4 uIH[12];\nuniform vec3 uSB[72];\nuniform float uOF[12];uniform float uGB[12];uniform float uGT[12];uniform int uGK;// gpe_garment_mesh: upper ids + the id of the garment pass being drawn\nuniform float uGN[12];\nuniform float uTm;uniform float uWnd;\nuniform float uZMN;uniform float uH;uniform float uNIP;\nuniform vec4 uDNL;uniform vec4 uDNR;uniform vec4 uDNB;uniform vec4 uDNG;uniform vec4 uDNTl;uniform vec4 uDNTr;\nuniform vec3 uCamM;uniform vec4 uYPM;uniform vec2 uResM;\nuniform sampler2D uGD;uniform vec3 uSunM;uniform vec3 uHF2[84];uniform int uHM;uniform int uGar;uniform int uAuth;uniform int uShd;uniform vec4 uShdP;\nout vec3 vB;out vec3 vW;out vec3 vN;flat out int vII;flat out float vSh;out vec2 vUV;out float vSt;\nfloat hsh(float s){return fract(sin(s*127.1)*43758.5453);}\nvoid main(){\nvUV=aUV;\n// hair DENSIFICATION (viewer-lane guide-interpolation, girl-instanced): when uHM>1 the\n// instance id decodes to (girl, lock); each lock is the guide jittered in model space with\n// its own shade -- hundreds of guides render as thousands of locks, CPU cost unchanged\nint ii=gl_InstanceID;\nvec3 jit=vec3(0.);vSh=1.;\nif(uHM>1){int lk=ii-(ii/uHM)*uHM;ii=ii/uHM;\nfloat f1=hsh(float(lk)+1.),f2=hsh(float(lk)+7.),f3=hsh(float(lk)+13.);\n// PER-GIRL HAIR STYLE, not one helmet (operator: weird helmet, not hair styles): her genome\n// row (uGN 0..3) sets lock DENSITY (sleek girls drop locks entirely), jitter SPREAD (tight vs\n// voluminous) and an asymmetric side-sweep bias -- one guide set, visibly different grooms.\nfloat gs9=uGN[ii];\nif(hsh(float(lk)+41.)>.72+.15*gs9){gl_Position=vec4(0.,-999.,0.,1.);vB=vec3(0.);vW=vec3(0.,-999.,0.);vN=vec3(0.,1.,0.);vII=ii;vSh=0.;return;}\nfloat sp9=(.48+.22*hsh(gs9*17.+float(ii)*3.1))*260.;\nfloat sw9=(hsh(float(ii)*7.7+2.)-.5)*.9;\njit=vec3((f1-.5+sw9*.4)*sp9,(f2-.5)*sp9,(f3-.5)*90.);\nvSh=.72+.5*hsh(float(lk)+29.);}\nvII=ii;\n// +.5 before int(): drivers may store 3.0 as 2.9999997 -- truncation would read the WRONG row\nint rb=int(uIH[ii].w+.5);int rd2=rb+1;\n// DUAL-QUATERNION skinning, ported from the PROVEN rigmesh viewer: linear blend collapses\n// under the T-pose->arms-down delta (splayed arms + shredded extremities on hardware).\nvec4 r0=texelFetch(uJT,ivec2(int(aJ.x+.5),rb),0),d0=texelFetch(uJT,ivec2(int(aJ.x+.5),rd2),0);\nvec4 r1=texelFetch(uJT,ivec2(int(aJ.y+.5),rb),0),d1=texelFetch(uJT,ivec2(int(aJ.y+.5),rd2),0);\nvec4 r2=texelFetch(uJT,ivec2(int(aJ.z+.5),rb),0),d2=texelFetch(uJT,ivec2(int(aJ.z+.5),rd2),0);\nvec4 r3=texelFetch(uJT,ivec2(int(aJ.w+.5),rb),0),d3=texelFetch(uJT,ivec2(int(aJ.w+.5),rd2),0);\nfloat s1=dot(r0,r1)<0.?-1.:1.;float s2=dot(r0,r2)<0.?-1.:1.;float s3=dot(r0,r3)<0.?-1.:1.;\nvec4 br=aW.x*r0+aW.y*s1*r1+aW.z*s2*r2+aW.w*s3*r3;\nvec4 bd=aW.x*d0+aW.y*s1*d1+aW.z*s2*d2+aW.w*s3*d3;\nfloat nr=max(length(br),1e-6);br/=nr;bd/=nr;\nvec3 aP2=aP+jit;if(uGar==1){aP2+=texelFetch(uGD,ivec2(gl_VertexID,ii),0).xyz;}if(uGar==2){vec3 hf9=uHF2[ii*7+int(aHS+.5)];float hw9=clamp(aHS/6.,0.,1.);hw9*=hw9;aP2+=vec3(hf9.x,hf9.y,hf9.z)*hw9;}\n// PASS-1 MASS, cut 1 (pointing machine v0.1, symmetrized n=6 ref frames): the NOSE BLOCK sits\n// +7.3mm LOW (3.5x ref spread) and the bridge +4.7mm, while the CHIN is already right (-3.6,\n// inside spread) -- the midface is stretched between the eyes and the nose, NOT uniformly long.\n// The cut: a LOCALIZED upward z-shift peaked at the nose line (.918H), zero at the eye line and\n// at the jaw, so nose+upper-lip rise ~7mm and the chin stays. Pure bind-space translation --\n// no normal displacement (the goblin trap), composes with skinning; paint bands select on vB\n// so painted features ride the same vertices coherently.\nif(uHM==1&&uAuth==0){\nfloat hb1=(aP.z-uZMN)/uH;\nfloat w1=smoothstep(.885,.905,hb1)*(1.-smoothstep(.930,.9448,hb1));if(aP.y>-1200.)w1=0.;\naP2.z+=704.*w1;\n// PASS-1 cut 2 (re-measure: verticals ZEROED, cheek_width -5.1mm the last significant error):\n// widen the sub-eye face band 8% peaked at the cheeks. MUST be zero at the EYE LINE -- IPD is\n// the normalizer, a whole-head scale cancels out of the measurement; width is relative to eyes.\nfloat w2=(1.-smoothstep(.915,.925,hb1))*smoothstep(.885,.895,hb1)*smoothstep(uH*.015,uH*.03,abs(aP.x));if(aP.y>-1200.)w2=0.;\naP2.x*=1.+.08*w2;}\n// FACE RELIEF, first rung (mhbench queue head: face@head measured 79 -- head-SHAPED, surface\n// FEATURELESS, no nose AS GEOMETRY). The same anatomy-canon landmarks the fragment shader\n// paints now DISPLACE the bind mesh along its own normals BEFORE skinning: nose ridge out\n// (nasal projection ~.095 of head height ~ 19mm, published adult ratio), orbital sockets in\n// (~1cm), lip and chin relief out. Bind-space displacement composes with skinning, springs\n// and every pass downstream; the skull-lane FACE section is the mm rung that replaces this.\n// (FACE RELIEF v1 REVERTED 2026-08-03, operator-caught: goblin noses. Root cause: this mesh's\n// normals are MAJORITY-INWARD (banked from the drape lane -- and not applied here), so\n// displacing along aN pushed much of the nose band IN and SIDEWAYS: a hooked dent, not a\n// ridge. v2 requires (a) an outwardness guard: flip aN by sign(dot(aN, aP - head_center)),\n// (b) half the magnitude, (c) portrait-framed screenshot calibration BEFORE ship -- the\n// face camera now exists for exactly this. The mm rung remains the skull-lane FACE bake.)\n// FACE RELIEF v2 (GE66a, 2026-09-07) -- the three conditions v1's reversion PRE-DECLARED, met:\n// (a) OUTWARDNESS GUARD. This mesh's normals are majority-INWARD, which is exactly what turned\n// v1's nose into a hooked dent, so every displacement rides aN FLIPPED by its sign against the\n// head centre, never aN itself. The centre is DERIVED from the same uZMN/uH the landmarks use.\n// (b) HALF MAGNITUDE of the published ratios: brow ridge ~2mm of a ~4mm projection, orbital\n// socket ~5mm of ~10mm, lip ~2mm of ~4mm, at HH7=.115*uH=197mm of head height.\n// (c) portrait-framed calibration before ship, on the ?anat=1 camera that freezes gaze, blink\n// and mood -- a relief judged through live expression is measuring the weather.\n// THE NOSE IS DELIBERATELY ABSENT. It is the single feature v1 got wrong and the one the\n// operator caught; nasal projection stays with the skull-lane FACE bake that can measure it in\n// mm. Shipping the three features that did NOT fail, and naming the one that did, is the honest\n// half -- not a quiet re-run of the reverted change.\n// CONDITION (c) MET BEFORE THIS WAS RE-ENABLED. The review stage AIMS the camera and the page\n// says outright that no camera-teleport door exists, so three wide captures were not a framing\n// accident -- a portrait needs the VIEWER to walk. Driving WASD through the capture oracle\n// (never in the build) reaches conversational range, where the pre-change face reads FLAT: no\n// brow shadow, no orbital recess, skin tone clean. That frame is the baseline this displacement\n// is judged against, and it is why the block is live again rather than guarded.\n// ★AN UNREACHABLE FRAME IS A MISSING INSTRUMENT, NOT A MISSING FEATURE -- THE REVIEW CAMERA\n// COULD ALWAYS AIM AT THE FACE, AND NOBODY HAD EVER WALKED IT CLOSE ENOUGH TO SEE ONE.\nif(uAuth==0&&uGar==0){\nfloat fh9=(aP.z-uZMN)/uH;\nif(fh9>.885&&fh9<.985&&aP.y<-1200.){\nfloat HH7=.115*uH;\nvec3 hc7=vec3(0.,0.,uZMN+.94*uH);\nvec3 no7=aN*sign(dot(aN,aP-hc7));\nfloat ez7=(fh9-.9420)*uH;\nfloat bz7=(fh9-.954)*uH;\nfloat mz7=(fh9-.908)*uH;\nfloat ax7=abs(aP.x);\nfloat bo7=ax7/HH7;\nfloat bt7=clamp((bo7-.085)/.16,0.,1.);\nfloat bc7=(.024*sin(3.14159*pow(bt7,1.45))-.006*bt7)*HH7;\nfloat br7=(1.-smoothstep(0.,.020*HH7,abs(bz7-bc7)))*smoothstep(0.,.10,bt7)*(1.-smoothstep(.90,1.,bt7));\nfloat ex7=ax7-.16*HH7;\nfloat ed7=sqrt(ex7*ex7+ez7*ez7*1.4);\nfloat so7=1.-smoothstep(0.,.085*HH7,ed7);\nfloat lp7=(1.-smoothstep(0.,.018*HH7,abs(mz7)))*(1.-smoothstep(.030*HH7,.062*HH7,ax7));\nfloat d7=br7*.0100*HH7-so7*.0250*HH7+lp7*.0100*HH7;\naP2+=no7*d7;\n}}\nvec3 sp=aP2+2.*cross(br.xyz,cross(br.xyz,aP2)+br.w*aP2)+2.*(br.w*bd.xyz-bd.w*br.xyz+cross(br.xyz,bd.xyz));\nvec3 sn=aN+2.*cross(br.xyz,cross(br.xyz,aN)+br.w*aN);\nvec3 nyup=vec3(sn.x,sn.z,-sn.y);\nvN=vec3(nyup.x*uIH[ii].y-nyup.z*uIH[ii].x,nyup.y,nyup.x*uIH[ii].x+nyup.z*uIH[ii].y);\nvB=aP;\nvec3 yup=vec3(sp.x,sp.z,-sp.y);\nvec3 rot=vec3(yup.x*uIH[ii].y-yup.z*uIH[ii].x,yup.y,yup.x*uIH[ii].x+yup.z*uIH[ii].y);\nvec3 wp=uIP[ii]+rot*(uSc*uIH[ii].z);\n// A4 SOFT-BODY, anchor-honest (header CORRECTED 2026-08-30, agent-audit: the old prose claimed\n// the chest springs ride the CHEST JOINTS via CPU-side dual-quat dt rows -- the LIVE mechanism\n// is a VERTEX-BAND offset applied at the asset's own measured DYNA anchor fields, uDNL/uDNR\n// and since R7 uDNB/uDNG/uDNTl/uDNTr on bare skin too, with a height-band fallback for a\n// DYNA-less asset; no spring dt rows are written). Vertex offsets touch the soft-tissue anchor\n// fields, hair strands (tip-weighted, crown pinned) and the dress hem. The skull is bone: it\n// gets NOTHING (head-bobble class, operator-caught -- guessed height bands are not anatomy;\n// the asset's MEASURED anchors are).\n// NORMALIZE IN THE MESH'S OWN SPACE: (z - zmin)/H, both measured from the asset. Dividing by a\n// nominal height while ignoring a 1474-unit origin put every landmark ~1% low and, worse, made\n// the numbers unauditable. The anatomy probe supplies uZMN/uH; uNIP is the bust height DERIVED\n// from this mesh's own pelvis/head anchors through published anthropometric ratios.\nfloat hb2=(aP.z-uZMN)/uH;\nvec3 sbo=vec3(0.);\nif(uHM>1||uGar==2){float tw9=clamp((1.02-hb2)*1.7,0.,1.);sbo=uSB[ii*6]*tw9;\n// WEATHER IN THE HAIR (operator: hair should react to weather, not just bounce idly): a wind\n// sway rides the same tip weight the spring uses -- amplitude uWnd comes from the ORGAN's own\n// weather door (rain = storm wind, clear = breeze), time from the ORGAN tick, phase per lock\n// from its shade hash so the locks never move in unison.\nfloat wp9=uTm*3.1+vSh*7.9;\nsbo+=vec3(.7,.15*sin(wp9*1.7),.7)*(sin(wp9)*uWnd*tw9);}\nelse if(uGar==1){sbo=uSB[ii*6+2]*(1.-smoothstep(.30,.55,hb2));\n// E4 LAYERING-BY-CONSTRUCTION leg 1: the dress INHERITS the body's soft-tissue field over the\n// same DYNA anchors -- the chest moved and the dress top did not, so the body poked through\n// the cloth on every bounce. A layer that rides its underlayer's field cannot be pierced by\n// it: same displacement, same phase, zero cloth-vs-body collision needed.\nif(uDNL.w>0.5){float wLg=1.-smoothstep(0.,uDNL.w*1.4,length(aP-uDNL.xyz));float wRg=1.-smoothstep(0.,uDNR.w*1.4,length(aP-uDNR.xyz));// clip class (b) CLOTHES-THROUGH-BODY (20:19 crop: a skin strip through the bodice SIDE at bust\n// height): the body's chest field carries a front gate (1-smoothstep(-1000,-14000,aP.y)) that\n// this dress inheritance lacked, so back/side bust regions sprang on the dress and not on the\n// body -- two layers, two fields, a seam that opens in motion. ONE gate, copied verbatim.\nsbo+=uSB[ii*6+1]*max(wLg,wRg)*(1.-smoothstep(-1000.,-14000.,aP.y));}if(uDNB.w>0.5){sbo+=uSB[ii*6+3]*(1.-smoothstep(0.,uDNB.w*1.6,length(aP-uDNB.xyz)));}if(uDNG.w>0.5){sbo+=uSB[ii*6+4]*(1.-smoothstep(0.,uDNG.w*1.6,length(aP-uDNG.xyz)));}if(uDNTl.w>0.5){float wT9=max(1.-smoothstep(0.,uDNTl.w*1.6,length(aP-uDNTl.xyz)),1.-smoothstep(0.,uDNTr.w*1.6,length(aP-uDNTr.xyz)));sbo+=uSB[ii*6+5]*wT9;}}\nelse{\n// PER-SIDE FIELDS FROM THE ASSET'S OWN DYNA ANCHORS (I6 leg 1). The old comment here said\n// \"this rig ships no breast bones\" -- it DOES now: nx_nxa_dyna measured each side's anchor\n// as the centroid of that side's bust-band vertices and shipped them in the file. Each\n// side's weight falls off from ITS anchor over ITS declared influence radius (they meet at\n// the midline by construction), so the field is anatomically anchored per side instead of\n// one symmetric |x| band. The TIME response still shares one spring -- leg 2 splits L/R\n// springs so the sides can diverge under asymmetric impulse. Fallback: an asset with no\n// DYNA keeps the height band (uninitialized uniforms are zero by spec, so uDNL.w==0).\nfloat wB;\nif(uDNL.w>0.5){\nfloat wL=1.-smoothstep(0.,uDNL.w*1.4,length(aP-uDNL.xyz));\nfloat wR=1.-smoothstep(0.,uDNR.w*1.4,length(aP-uDNR.xyz));\nwB=max(wL,wR)*(1.-smoothstep(-1000.,-14000.,aP.y));\n}else{\nwB=(1.-smoothstep(0.,.085,abs(hb2-uNIP)))*(1.-smoothstep(6000.,26000.,abs(aP.x)))*(1.-smoothstep(-1000.,-14000.,aP.y));\n}\n// STRIDE FIX (waist/bust tearing, operator frames 2026-08-27): uSB packs SIX vec3 per girl (JS N.sb stride 18,\n// A9 carries 6 springs) and the dress inherits uSB[ii*6+1]; this line read ii*3+1, so every girl but the\n// first drove her chest from a FOREIGN spring (girl 1 got girl 0's kd=4, girl 2 got girl 1's chest) while\n// her dress rode the right one -- two layers on two fields tear by construction. One index, one field.\nsbo=uSB[ii*6+1]*wB;\n// R7 BODY-PASS COUPLING (jiggle bug #2, 2026-08-30): the engine ticks and uploads SIX springs per\n// girl and the bare-skin pass consumed ONLY the chest -- a swimwear/topless/nude girl's belly,\n// glutes and thighs stood rigid while the DRESS pass rode all four fields. The dress pass is the\n// template, mirrored verbatim: same nx_nxa_dyna anchor fields, same 1.6 influence falloffs, same\n// spring slots 3/4/5 -- no new tunables, only the fields the asset already ships (an asset with\n// no DYNA leaves every .w at 0 and this block is inert by spec).\nif(uDNB.w>0.5){sbo+=uSB[ii*6+3]*(1.-smoothstep(0.,uDNB.w*1.6,length(aP-uDNB.xyz)));}\nif(uDNG.w>0.5){sbo+=uSB[ii*6+4]*(1.-smoothstep(0.,uDNG.w*1.6,length(aP-uDNG.xyz)));}\nif(uDNTl.w>0.5){float wT8=max(1.-smoothstep(0.,uDNTl.w*1.6,length(aP-uDNTl.xyz)),1.-smoothstep(0.,uDNTr.w*1.6,length(aP-uDNTr.xyz)));sbo+=uSB[ii*6+5]*wT8;}}\nwp+=sbo;\n// outfit dimension: a girl whose outfit excludes the dress gets its instance DEGENERATED\n// (moved far below the world) -- per-instance suppression inside one instanced draw\n// gpe_garment_draw: the skirt mesh exists only for the garments that ARE one -- 8 skirt, 4 sarong, 5 sundress,\n// 9 evening dress (the engine's ids, uGB per girl); every other lower id (bikini bottom, shorts, one-piece,\n// bare) degenerates the instance exactly as the old uOF>.5 rule did\nint gbm=int(uGB[ii]+.5);if(uGar==1&&!(gbm==4||gbm==5||gbm==8||gbm==9))wp=vec3(0.,-999.,0.);\n// gpe_garment_mesh (2026-08-30): the GENERATED garment shells (the asset's GARM section, grown by nx_garment_gen) draw\n// one instanced pass per id with uGar=3 and uGK = that id; an instance whose girl does not wear the id degenerates\n// exactly as the skirt rule above does. Upper ids (1 bikini top, 6 tee) read uGT, every other id uGB; the skirt\n// waistband (8) dresses every skirt-class bottom (4 sarong, 5 sundress, 8 skirt, 9 evening). The shells take the\n// BODY soft-tissue branch below (not the dress branch): a bikini rides the skin's own fields, never the hem sway.\nif(uGar==3){int gk9=uGK;int hv9=(gk9==1||gk9==6)?int(uGT[ii]+.5):int(uGB[ii]+.5);bool wr9=(hv9==gk9);if(gk9==8)wr9=(hv9==4||hv9==5||hv9==8||hv9==9);if(!wr9)wp=vec3(0.,-999.,0.);}\nvSt=0.;\n// CAST SHADOW pass (uShd=1; Blinn 1988 planar projection, the published no-shadow-map answer): every\n// vertex slides along the sun ray (uSunM points TO the sun) until it meets THIS figure's own feet\n// plane -- uIP.y, which drawNPCs plants at her measured lowest sole landmark (ap_foot_ground, 2026-08-30;\n// it used to add zmin*scale, the bind floor, which the plant now subsumes), never a world constant --\n// lifted uShdP.x\n// so floor() reads the air cell above the sand. vSt carries the ray length so the fragment can\n// check the path back to the caster. uShdP.y = the lowest sun (sin elevation) the projector\n// accepts, the same bar the JS draw gate applies: below it the pass is not drawn at all.\nif(uShd==1&&wp.y>-900.){float gY9=uIP[ii].y+uShdP.x;vec3 sd9=normalize(uSunM);float sy9=max(sd9.y,uShdP.y);vSt=(wp.y-gY9)/sy9;wp=vec3(wp.x-sd9.x*vSt,gY9,wp.z-sd9.z*vSt);}\nvW=wp;\nvec3 rel=wp-uCamM;\nvec3 fw=vec3(uYPM.x*uYPM.w,uYPM.z,uYPM.y*uYPM.w);\nvec3 rt=vec3(uYPM.y,0.,-uYPM.x);\nvec3 up=vec3(-uYPM.x*uYPM.z,uYPM.w,-uYPM.y*uYPM.z);\nfloat zv=max(dot(rel,fw),.081);\ngl_Position=vec4(dot(rel,rt),dot(rel,up)*(uResM.x/uResM.y),zv*(300.08/299.92)-(48./299.92),zv);}`;\n" as *u8)
1689    p = gpe_ap(out, p, "const MFS=`#version 300 es\nprecision highp float;precision highp int;\nin vec3 vB;in vec3 vW;in vec3 vN;flat in int vII;flat in float vSh;in vec2 vUV;in float vSt;\nuniform vec3 uCamM;uniform vec3 uSkTM;uniform highp usampler3D uVm;uniform int uOcc;\nuniform vec3 uCS[12];uniform vec3 uCO[12];uniform vec3 uCH[12];uniform int uGar;\nuniform float uGN[12];uniform float uOF[12];\nuniform float uGT[12];uniform float uGB[12];uniform vec3 uCT[12];uniform vec3 uCB[12];// gpe_garment_draw: per-girl garment ids + tints\nuniform int uGK;uniform int uGM;uniform int uGMH;// gpe_garment_mesh: the id + material class of the garment pass being drawn, and the bitmask of ids that HAVE a mesh (the painted bands retire per bit)\nuniform float uMoodF[12];uniform float uBH[12];\nuniform float uTm;\nuniform vec4 uIH[12];\nuniform int uEyeG;\nuniform int uAnatM;\nuniform sampler2D uAtl;uniform int uAtlOn;uniform vec3 uAtlMean;uniform int uAuth;\nuniform float uZMN;uniform float uH;uniform float uNIP;uniform float uEYE;uniform vec3 uSunM;uniform int uShd;uniform vec4 uShdP;uniform vec3 uShdK;uniform vec3 uSkyF;uniform int uVt;\nuniform sampler2D uNrm;uniform int uNrmOn;// GR34 gpe_texm_normal_bind: the normal map baked INTO the asset (TEXM map_id 3), unit 4; uNrmOn=0 keeps the incumbent shading byte-identical\nout vec4 fc;\nuint vxm(ivec3 c){if(c.x<0||c.y<0||c.z<0||c.x>127||c.y>47||c.z>127)return 0u;return texelFetch(uVm,ivec3(c.x,c.z,c.y),0).r;}\n// ONE voxel DDA for every march this shader makes (the camera occlusion below, the shadow's sun\n// path): from org along unit rdm, cell by cell; returns the distance of the first solid (water 4u\n// passes) or -1. when clear out to lim. 120 cells = the incumbent camera-march budget, unchanged.\nfloat vmarch(vec3 org,vec3 rdm,float lim){ivec3 c=ivec3(floor(org));ivec3 st=ivec3(sign(rdm));vec3 dd=abs(1./max(abs(rdm),vec3(1e-6)));\nvec3 tmm=(vec3(st)*(vec3(c)-org)+vec3(st)*.5+.5)*dd;float t2=0.;\nfor(int i=0;i<120;i++){\nif(tmm.x<tmm.y&&tmm.x<tmm.z){c.x+=st.x;t2=tmm.x;tmm.x+=dd.x;}\nelse if(tmm.y<tmm.z){c.y+=st.y;t2=tmm.y;tmm.y+=dd.y;}\nelse{c.z+=st.z;t2=tmm.z;tmm.z+=dd.z;}\nif(t2>=lim)return -1.;\nuint b=vxm(c);if(b!=0u&&b!=4u)return t2;}\nreturn -1.;}\nvoid main(){\n// WORLD OCCLUSION without gl_FragDepth (SwiftShader ignores it -- measured): march the SAME\n// voxel texture from the camera toward this fragment; solid before arrival = discard. The .35\n// standoff keeps the block she STANDS ON from eating her feet at grazing angles.\n// uOcc=0 (?npcocc=0) disables the march -- the standing diagnostic lever for this class.\nvec3 dW=vW-uCamM;float dst=length(dW);\nint hdbg=0;float tdbg=0.;\n// a fragment INSIDE a solid block is never visible -- mobs wander into wall faces and the\n// march standoff would otherwise let the last .35 blocks poke through voxel seams (the\n// scattered-limbs / zigzag class the operator reported)\nif(uOcc>=1){uint bf=vxm(ivec3(floor(vW)));if(bf!=0u&&bf!=4u)discard;}\n// GHOST-SHIN FIX (operator frame 20:19: a figure leaning into the cliff read as translucent -- her\n// fragments up to .35 blocks BEHIND the wall face drew through it): the old standoff stopped the\n// march .35 early for EVERY hit, but that clearance exists for exactly one case -- the ray shaving\n// the SUPPORT block just before her feet at grazing pitch. Now the march runs to a face epsilon\n// (.05) and a late hit is exempt ONLY when its cell lies STRICTLY BELOW her fragment cell inside\n// the graze window: 1.2 blocks = the retired .35 lateral clearance / sin(17 deg), the shallowest\n// review pitch. A lateral wall can never ride the exemption, so nothing body-side draws through it.\nif(uOcc>=1&&dst>1.){vec3 rdm9=dW/dst;float th9=vmarch(uCamM,rdm9,dst-.05);\nif(th9>=0.){ivec3 hc9=ivec3(floor(uCamM+rdm9*(th9+.02)));\nif(!(th9>dst-1.2&&hc9.y<int(floor(vW.y)))){if(uOcc==1){discard;}hdbg=1;tdbg=th9/dst;}}}\n// uOcc=2 (?npcocc=2): visualize the march verdict instead of applying it -- red = would-discard\n// (green channel = hit fraction along the ray), green = clear. The debug lever that found v1.\nif(uOcc==2){fc=vec4(hdbg==1?1.:0.,hdbg==1?tdbg:1.,0.,1.);return;}\n// CAST SHADOW texel (uShd=1): the sand under it must be the caster's own feet plane -- the cell\n// here is air (checked above), the cell one lift below must be solid (a hole or a lower step gets\n// no floating shadow), and the sun path back to the caster (vSt long) must be clear: a wall or a\n// dune between them catches the shadow instead of this sand. Output = the MULTIPLIER for the sand\n// already in the framebuffer (multiplicative blend, stencil-once, see the draw): uShdK, derived\n// JS-side from the world FS's own block-shadow depth and the sky-fill chroma -- exactly as dark as\n// a block's shadow, blue like shade, never black.\nif(uShd==1){uint bg9=vxm(ivec3(floor(vW-vec3(0.,uShdP.x*2.,0.))));if(bg9==0u||bg9==4u)discard;\nif(vmarch(vW,normalize(uSunM),vSt)>=0.)discard;\n// CONTACT DEPTH (operator 20:19: the shadows landed but too faint to SEAT the figures). Depth is\n// DERIVED from sun height, never tuned: in this page's own energy split, open sand receives\n// sunY + skyMean, and an open block shadow keeps the whole sky (the world FS's li*=.55 = uShdP.z).\n// A texel directly under the body also loses most of the sky dome to the body itself -- it keeps\n// only uShdP.w of it -- so the contact umbra in display space is sqrt(uShdP.w*skyMean/(sunY+skyMean)):\n// deepest at noon, softening toward dusk. It relaxes to the open block-shadow depth over SHD_CTR\n// blocks of ray length -- beyond ~2/3 of her height the body subtends too little sky to matter.\nconst float SHD_CTR=1.2;\nfloat sy8=max(normalize(uSunM).y,uShdP.y);float skm8=dot(uSkyF,vec3(1./3.));\nfloat kc8=sqrt(uShdP.w*skm8/(sy8+skm8));\nfc=vec4(uShdK*mix(kc8/max(uShdP.z,.05),1.,smoothstep(0.,SHD_CTR,vSt)),1.);return;}\nvec3 vd=normalize(vW-uCamM);\n// smooth skinned normals (the mesh's normals are majority-INWARD -- measured in the drape\n// lane -- so keep the view-side flip; it is per-pixel correct either way)\nvec3 n=normalize(vN);\n// GR34 gpe_texm_normal_bind: perturb n with the asset's OWN normal map (TEXM map_id 3) in a screen-space cotangent\n// frame built from derivatives of world position and UV -- no tangent attribute needed. uGar==0 = the body pass only;\n// uNrmOn=0 leaves n exactly the incumbent interpolated normal.\nif(uNrmOn==1&&uGar==0){vec3 tn=texture(uNrm,vUV).xyz*2.-1.;vec3 dp1=dFdx(vW);vec3 dp2=dFdy(vW);vec2 du1=dFdx(vUV);vec2 du2=dFdy(vUV);vec3 dp2p=cross(dp2,n);vec3 dp1p=cross(n,dp1);vec3 T9=dp2p*du1.x+dp1p*du2.x;vec3 B9=dp2p*du1.y+dp1p*du2.y;float im9=inversesqrt(max(dot(T9,T9),dot(B9,B9))+1e-12);n=normalize(mat3(T9*im9,B9*im9,n)*tn);}\nif(dot(n,vd)>0.)n=-n;\nfloat h=(vB.z-uZMN)/uH;\n// bind-space banding carries the GENOME identity forward from the retired SDF girls:\n// per-instance skin tone, kind+brightness outfit, warden look, hair color as a scalp cap\n// (no hair geometry in the export yet -- seq1236; the groom rung replaces the cap).\nvec3 mc=uCS[vII];\n// ---- gpe_garment_mesh: FABRIC, NOT SKIN (uGar==3, the asset's GARM shells grown by nx_garment_gen). Tint = the\n// girl's own garment colour for the slot this id occupies (uCT upper / uCB lower-or-full). Light = the skin pass's\n// declared twins (sky fill uSkyF, sun energy 1.008 x the same voxel sun-visibility march, the sand bounce) over a\n// CLOTH BRDF: Lambert base + the Charlie sheen lobe of Estevez and Kulla 2017 (Production Friendly Microfacet Sheen\n// BRDF: D = (2 + 1/a) sin^(1/a)(theta_h) / 2pi) with the Neubelt and Pettineo 2013 cloth visibility 1/(4(NL+NV));\n// sheen roughness / weight per material class (1 swim tricot, 2 woven, 3 jersey, 4 satin) and a mm-scale weave\n// relief from BIND position (uH/1780 units per mm): jersey wale .9 / course 1.3 mm (12-gauge single jersey), plain\n// weave .5 mm (20 ends per cm), tricot wales .6 mm; satin adds a narrow filament gloss lobe. Two-sided through the\n// view-side normal flip above, so hem strips and strap edges light from either face. RETURNS: no skin code runs on\n// cloth (no bands, no face, no SSS wrap).\nif(uGar==3){\nvec3 tg9=(uGK==1||uGK==6)?uCT[vII]:uCB[vII];\nvec3 Lg9=(dot(uSunM,uSunM)>.01)?normalize(uSunM):normalize(vec3(2400.,2500.,1400.));\nfloat svg9=1.;if(uOcc>=1){float t0g=(floor(vW.y)+1.2-vW.y)/max(Lg9.y,.2);if(vmarch(vW+Lg9*t0g,Lg9,40.)>=0.)svg9=0.;}\nvec3 Vg9=-vd;vec3 Hg9=normalize(Lg9+Vg9);\nfloat nlg=max(dot(n,Lg9),0.),nvg=max(dot(n,Vg9),1e-3),nhg=max(dot(n,Hg9),0.);\nfloat mmg=uH/1780.;float wvg=1.;\nif(uGM==3){vec2 kq=vec2(vB.x/(mmg*.9),vB.z/(mmg*1.3));wvg=.94+.06*sin(fract(kq.x)*6.2832)*sin(fract(kq.y)*6.2832);}\nelse if(uGM==2){vec2 kq=vB.xz/(mmg*.5);wvg=.96+.04*abs(sin(fract(kq.x)*3.1416))*abs(sin(fract(kq.y)*3.1416));}\nelse if(uGM==1){wvg=.97+.03*sin(fract(vB.x/(mmg*.6))*6.2832);}\nfloat ag9=(uGM==4)?.15:(uGM==3?.55:(uGM==2?.4:.3));\nfloat ig9=1./ag9;float s2g=max(1.-nhg*nhg,1e-4);float Dg9=(2.+ig9)*pow(s2g,ig9*.5)*.159155;\nfloat Vsg=1./(4.*max(nlg+nvg,1e-3));\nvec3 shg=(uGM==4)?mix(vec3(1.),tg9,.5):mix(vec3(1.),tg9,.15);\nfloat ksg=(uGM==4)?.35:(uGM==3?.12:(uGM==2?.10:.16));\nvec3 alg=tg9*tg9*wvg;\nvec3 ling=alg*(uSkyF+1.008*nlg*svg9)+alg*vec3(.17,.14,.095)*max(0.,-n.y)*(.35+.65*svg9)+vec3(1.,.94,.81)*1.008*shg*Dg9*Vsg*nlg*ksg*svg9;\nif(uGM==4)ling+=vec3(1.,.94,.81)*pow(nhg,60.)*.25*svg9;\nvec3 cg9=sqrt(max(ling,vec3(0.)));\nvec3 fwg=1.-exp(-vec3(.123,.287,.700)*length(vW-uCamM)/168.);\ncg9=mix(cg9,uSkTM,fwg);if(uVt==1)cg9=vec3(.94)*pow(max(cg9,vec3(0.))*(1./.94),vec3(1.45));\nfc=vec4(cg9,1.);return;}\n// cw_npc_atlas: the baked TEXM albedo modulates the skin base BEFORE bands/face paint override\n// their regions (body pass only -- dress/hair passes have no UV attribute). Mean-normalized with\n// the mean computed at load from the map itself, so the calibrated per-girl tone (sbs_face)\n// is preserved: the atlas contributes region+texel DETAIL, uCS the identity. 1/255 = the 8-bit\n// encoding quantum, the only defensible division floor.\n// ALBEDO CONTAINMENT (operator 20:19: torso striations read as wood grain; a hard tone seam at\n// mid-thigh). Both live in the BAKED atlas -- the grain is bake noise at the wrong scale, the seam\n// a region-boundary step -- and the ROOT fix is the bake lane's (cw_npc_atlas / nx_nxa_texbake).\n// Render-side containment until that lands: skin albedo micro-variation in the beach reference\n// photos stays within ~+-15% of its regional mean, so the modulation is halved (ATL_W) and clamped\n// to +-.18 (ATL_R); region steps shrink with it. uAuth==1 (the authored-atlas path) stays exact.\nif(uAtlOn==1&&uGar==0){vec3 t9=texture(uAtl,vUV).rgb;if(uAuth==1){mc=t9;}else{const float ATL_W=.5;const float ATL_R=.18;vec3 t9n=t9/max(uAtlMean,vec3(1./255.));mc*=clamp(mix(vec3(1.),t9n,ATL_W),vec3(1.-ATL_R),vec3(1.+ATL_R));}}\n// clothing bands are TORSO-GATED (|bind x| under the torso half-width): in the bind pose the\n// hands/forearms hang at the same HEIGHT as the skirt/top, and height-only bands painted them\n// dress-red like opera gloves (operator-caught at close range)\nfloat axb=abs(vB.x);\n// the outfit dimension gates the painted garment bands: 0 full, 1 keeps only the bottom,\n// 2 none -- skin continues through (all figures are the one adult mesh)\n// the garment TOP EDGE derives from the measured bust line, never a literal: the band was\n// authored as .615-.735 when the nipple was assumed at .636 -- then the anatomy correction\n// moved NIP to .744 (origin-corrected, mesh-derived) and the neckline was left behind, so the\n// dress topped out BELOW the breasts (screenshot-caught). Cover to uNIP+.055, the same\n// half-width the nipple detail itself uses; one anatomy source, every band follows it.\n// CORRECTED 2026-08-03 (the see-it loop caught my own regression): the GVRT mesh is a SKIRT,\n// not a full dress -- the painted band was the ONLY top a clothed girl had, and the previous\n// one-representation edit UNDRESSED the clothed cast. The painted top returns (neckline still\n// derived from uNIP); the real fix for the seam read is a mesh TOP garment (E4 ladder), not\n// deleting the only top in the wardrobe. Build intelligence, never strip features.\n// the top band now reaches DOWN to the bottom band (.545): starting at .615 left a .545-.615 skin\n// sliver at the waist beside the mesh skirt (20:19 crop, left waist).\n" as *u8)
1690    p = gpe_garment_draw(out, p)
1691    p = gpe_ap(out, p, "// bare chest detail at anatomy-ratio positions (front, ~5.6%H off midline, genome-scaled)\n// landmark from the MESH's own anchors (uNIP), never a guessed fraction: the old .636 sat at\n// the upper abdomen -- the operator saw the marks land near the legs. Half-separation stays a\n// RATIO of stature (published anthropometry), so it scales with whatever body wears it.\nif(uAuth==0&&uOF[vII]>.5&&vB.y<-1200.&&abs(h-uNIP)<.055){\nfloat nx9=abs(vB.x)-uH*.056;\nfloat nz9=(h-uNIP)*uH;\nfloat nd9=sqrt(nx9*nx9+nz9*nz9*1.3);\nfloat nr9=uH*.0125*(.85+.12*uGN[vII]);\nif(nd9<nr9)mc=mc*.72+vec3(.17,.06,.06);\nif(nd9<nr9*.38)mc=mc*.60+vec3(.22,.08,.08);\n}\n" as *u8)
1692    p = gpe_ap(out, p, "// BODY HAIR (operator directive, realism first): pubic and underarm hair take their COLOUR from the head\n// hair (uCH at .55 -- terminal body hair carries denser eumelanin and no sheen) and their PRESENCE from\n// the genome status uBH (0,1 natural / 2 trimmed .35 / 3 waxed 0). Placement is anthropometric, never\n// guessed: the mons sits between the crotch (.475 H, Drillis-Contini crotch height) and the pubic\n// hairline (.535 H, a hand below the navel at .60 H), FRONT only (vB.y<-1200, the bust-side convention),\n// a triangle from a half-width of .05 H at the hairline to the midline at the crotch, edges feathered;\n// it paints only when no bottom garment is worn (uOF>1.5) -- the painted band covers it otherwise. The\n// axilla is a small patch at the torso half-width (|x| .076..094 H, the shader's own 15000-unit torso\n// gate = .087 H) between .735 and .775 H (acromion .818 H less the shoulder depth).\nif(uAuth==0&&uGar==0){float bhd9=(uBH[vII]<1.5)?1.:(uBH[vII]<2.5?.35:0.);\nif(bhd9>0.){vec3 bhc9=uCH[vII]*.55;float bhx9=abs(vB.x)/uH;\nif(uOF[vII]>1.5&&vB.y<-1200.&&h>.475&&h<.535){float pw9=.05*(h-.475)/.06;if(bhx9<pw9){float pe9=smoothstep(pw9,pw9*.6,bhx9)*smoothstep(.475,.49,h)*(1.-smoothstep(.525,.535,h));mc=mix(mc,bhc9,pe9*bhd9);}}\nif(h>.735&&h<.775&&bhx9>.076&&bhx9<.094){float ae9=(1.-smoothstep(0.,.02,abs(h-.755)))*(1.-smoothstep(0.,.009,abs(bhx9-.085)));mc=mix(mc,bhc9,ae9*bhd9*.8);}}}\n// FEET, NOT HOOVES (operator 20:19): the flat dark boot-paint vec3(.2,.12,.1) below .028 H read as\n// hooves. Feet are SKIN; the grounding that paint faked is now real (the cast-shadow pass), so what\n// remains is contact ambient occlusion: a soft multiplicative dim over the last .008 H (~1.4 cm),\n// strongest at the sole, never a flat colour.\nif(uAuth==0&&h<.028)mc*=1.-.25*(1.-smoothstep(0.,.008,h));\n// hair = crown + BACK of skull only; front measured NEGATIVE y (the bust told us), so +y = back\n// WIG-LINE FIX (operator 20:19: the hairline sits low and hard on the forehead -- .955 IS the brow\n// line, a wig to the eyebrows). Published facial anthropometry puts the trichion ~6 cm above the\n// glabella: .954 + .06/1.78 = .988 H. The front (bust side, vB.y<-1200) now feathers .975->.990,\n// the ~2.7 cm vellus transition; temples and nape keep the low cap so the groom still roots there.\nif(uAuth==0&&h>.955&&vB.y>=-1200.)mc=uCH[vII];\nif(uAuth==0&&vB.y<-1200.)mc=mix(mc,uCH[vII],smoothstep(.975,.990,h));\nif(uAuth==0&&h>.865&&vB.y>3000.)mc=uCH[vII];\n// FACE -- GENERATED, never hand-built: landmarks are anatomy-canon RATIOS (eyes at mid-head,\n// half-IPD ~.16 of head height, mouth 1/5 above chin, brows +8%) over the head segment the\n// mesh itself declares (chin .885H, crown 1.0H), scaled per girl by her genome feature bits;\n// iris tint = her hair gene. The skull/facemark NXA geometry bake is the named next rung --\n// this block is that lane's DATA CONTRACT, not a hand-drawn face.\nif(uAuth==0&&uGar==0&&h>.885&&h<.985&&vB.y<-1200.){\nfloat HH9=.115*uH;\nfloat fs9=.82+.12*uGN[vII];\n// PASS-1 cut 3 (frozen instrument, n=6 ref): forehead/bridge/nose/brow/lip ALL sit ~5mm 'low'\n// by a near-constant while the chin is right -- ONE ROOT CAUSE WEARING FIVE MASKS: the EYE\n// LINE itself was painted ~5mm too high (all measures are eye-relative). Lower the eye line\n// .9448 -> .9420 H; every eye-relative error collapses together.\nfloat ex9=abs(vB.x)-.16*HH9*fs9;\nfloat ez9=(h-.9420)*uH;\n// eye ellipse DE-RACCOONED (operator: wild eyeshadow): the old sclera was oversized with a\n// 2.1x vertical stretch -- a tall white/dark patch that read as makeup around the eye, not an\n// eye. Smaller sclera, flatter almond (1.4x), lids blend to skin instead of a hard rim, and\n// the iris/pupil ratios follow real ocular proportion (iris ~55% of visible aperture).\nfloat ed9=sqrt(ex9*ex9+ez9*ez9*1.4);\nfloat er9=min(.060*HH9*fs9,.046*HH9*.95);\nif(ed9<er9*1.25)mc=mix(mc,mc*.88,smoothstep(er9*1.25,er9,ed9)*.5);\n// LIVING EYES (operator: realistic eyes matching the reference). Perceptual hierarchy from\n// the realism research: the CATCHLIGHT carries aliveness, then the limbal ring, radial iris\n// depth, lid shadow, and blink. All paint-level here; corneal-bulge geometry is the skull-\n// lane rung. Skin tone captured BEFORE the eye overrides so the lid can close with skin.\nvec3 skin9=mc;\n// when real eyeballs exist, the face OPENS A HOLE for them (a genuine socket aperture) --\n// otherwise the painted eye runs exactly as before. One flag, both worlds correct.\nfloat blg9=fract(uTm*.24+float(vII)*.37);float lfg9=(uAnatM==1)?0.:smoothstep(.950,.962,blg9)*(1.-smoothstep(.982,.994,blg9));if(uEyeG==1&&lfg9<=0.&&ed9<er9*.98)discard;if(uEyeG==1&&lfg9>0.&&ed9<er9*.98)mc*=.92;\nif(ed9<er9&&uEyeG==0){\nmc=vec3(.93,.92,.91);\nmc*=1.-.20*smoothstep(er9*.45,er9,abs(ez9));\n// GAZE-FOLLOW: the irises track the viewer (eye contact = the second-strongest aliveness cue\n// after the catchlight). Project the view direction onto the instance's right/up axes and\n// shift the iris center within the sclera aperture, clamped so the iris never leaves the eye.\n// MEASUREMENT MODE (uAnatM=1, the ?anat=1 lever): the geometry ruler must freeze every degree\n// of freedom it is not measuring -- gaze centered, blink off, mood zeroed CPU-side, same girl\n// framed. A ruler read through live mood/gaze/blink is measuring the weather.\nvec3 gvd9=normalize(uCamM-vW);\nfloat ggx9=(uAnatM==1)?0.:clamp(dot(gvd9,vec3(uIH[vII].y,0.,-uIH[vII].x))*.55,-.30,.30)*er9;\nfloat ggz9=(uAnatM==1)?0.:clamp(gvd9.y*.4,-.22,.22)*er9;\nfloat u9g=vB.x-((vB.x>0.)?1.:-1.)*.16*HH9;\nfloat ir9=er9*.55;\nfloat edg9=sqrt((u9g-ggx9)*(u9g-ggx9)+(ez9-ggz9)*(ez9-ggz9)*1.4);\nif(edg9<ir9){\nfloat t9=edg9/ir9;\nvec3 ib9=uCH[vII]*.5;\nmc=ib9*(1.15-.55*t9);\nmc+=vec3(.10,.07,.03)*max(0.,.5-abs(t9-.6))*1.6;\nif(t9>.82)mc*=.42;\nif(edg9<ir9*.42)mc=vec3(.03,.03,.05);\n}\n// wet catchlight, same world-side on both eyes: signed horizontal within THIS eye\nfloat u9=vB.x-((vB.x>0.)?1.:-1.)*.16*HH9*fs9;\nfloat cd9=length(vec2(u9-.25*er9,(ez9-.30*er9)*1.25));\nif(cd9<.17*er9)mc=vec3(1.25,1.24,1.22);\nif(cd9>=.17*er9&&cd9<.24*er9)mc=mix(mc,vec3(1.1),.5);\n// blink: ~130ms every ~4s, phase per girl -- the upper lid sweeps skin over the eye\nfloat bl9=fract(uTm*.24+float(vII)*.37);\nfloat lf9=(uAnatM==1)?0.:smoothstep(.950,.962,bl9)*(1.-smoothstep(.982,.994,bl9));\nif(lf9>0.&&ez9>(1.-2.2*lf9)*er9)mc=skin9*.92;\n}\n// UPPER LASH LINE: a dark arc hugging the top rim of the aperture -- lashes frame the eye and\n// are a major part of why real feminine eyes read as real (reference-confirmed). Thin band\n// just OUTSIDE the sclera on the upper edge, darkest at center, fading to the outer canthus.\nfloat lash9=smoothstep(er9*1.28,er9*1.02,ed9)*smoothstep(er9*.55,er9*1.0,ez9);\nif(lash9>.15)mc=mix(mc,vec3(.05,.03,.04),clamp(lash9,0.,.9));\n// WET CORNEAL SHEEN: the cornea is glossy -- beyond the sharp catchlight it lifts a broad soft\n// highlight from skylight, the 'wet look'. A second dimmer bloom offset from the catchlight.\nif(ed9<er9*.9){float sh9=1.-smoothstep(0.,er9*.9,length(vec2((vB.x-((vB.x>0.)?1.:-1.)*.16*HH9)+.10*er9,(ez9+.18*er9)*1.1)));\nmc=mix(mc,mc+vec3(.30,.32,.34),sh9*.35);}\n// brows ride mood too: up a touch when bright, pressed lower when dark -- the second channel\n// that makes an expression read as a FACE rather than a mouth sticker\nfloat bz9=(h-.954)*uH;\n// BROWS v2 (2026-09-06, benchmark: Daemon Girl class -- the flat dark bar was the loudest defect in the\n// review close-up): TWO ARCS, never one bar. Span .085H..245H from the midline (head above the inner\n// canthus, tail past the outer), arch peak at 62 percent of the span (sin(pi*t^1.45)), head thick (.030H)\n// tapering to a .009H tail that drops .006H, a diagonal hair-stroke mask (~1.1mm pitch, per-stroke\n// random gaps) so it reads as hairs not paint, tail lighter and sparser. Mood still lifts/presses.\n// TWIN: nx_cast_shader_src cs_fs_slice5 builds the same arithmetic for the WebGPU door.\nfloat bxo=abs(vB.x)/(HH9*fs9);\nfloat bt9=clamp((bxo-.085)/.16,0.,1.);\nfloat bcy=(.024*sin(3.14159*pow(bt9,1.45))-.006*bt9+uMoodF[vII]*.012)*HH9;\nfloat bhh=mix(.015,.0045,smoothstep(.30,1.,bt9))*HH9;\nfloat bd9=abs(bz9-bcy);\nfloat bq9=(bz9/HH9*.91-bxo*.42)/.0055;\nfloat bst=.35+.65*smoothstep(.18,.62,fract(bq9+.61*fract(sin(floor(bq9)*12.9898+fs9*78.233)*43758.5453)));\nfloat bcv=(1.-smoothstep(bhh*.55,bhh,bd9))*smoothstep(0.,.10,bt9)*(1.-smoothstep(.90,1.,bt9))*bst*(1.-.35*smoothstep(.55,1.,bt9));\nif(bcv>.02)mc=mix(mc,uCH[vII]*mix(.40,.55,bt9),clamp(bcv*.92,0.,.92));\n// I3 LEG 1 -- THE EXPRESSION CONSUMER (the largest unwired capability: mobmood computed an\n// inner life the face never showed). The mouth line CURVES with her mood: a parabola in x\n// lifts the corners when uMoodF is positive (smile) and drops them when negative -- one\n// signed door, real expression, zero new geometry. The MORF section replaces this with true\n// blend shapes later; this is the consumer that makes that section worth baking.\nfloat mz9=(h-.908)*uH;\nfloat mx9=vB.x/(.085*HH9*fs9);\nfloat mcv9=uMoodF[vII]*.022*HH9*(mx9*mx9-.35);\n// MOUTH (20:19 crops: a wide dark smear reading as a grimace): narrower, softer, mixed.\nfloat lw8=abs(mz9-mcv9);\nif(lw8<.010*HH9*fs9&&abs(vB.x)<.055*HH9*fs9)mc=mix(mc,vec3(.72,.42,.42),.8*(1.-smoothstep(.006*HH9*fs9,.010*HH9*fs9,lw8)));\n}\nif(uGar==1)mc=uCB[vII];// gpe_garment_draw: the skirt mesh in the LOWER garment's own tint (mobgarcol slot 0)\n// HAIR: root-to-tip gradient + base-light compensation. Strand lines carry degenerate normals\n// (aN=0), so the diffuse term contributes ~nothing and locks rendered at .36x base -- flat and\n// dark, the operator's \"hair is awful\" in one number. Compensate the lighting floor and darken\n// toward the crown (roots) so locks read as volume instead of wire: tips ~1.65x, roots ~1.05x.\nif(uGar==2){\n// UNDER-CLOTH HAIR CULL (clip class (a), 20:19 crop: hair-coloured fragments z-fight through the\n// bodice edge -- strands sandwiched between body and cloth). A hair fragment whose bind position\n// lies INSIDE the torso column at clothed heights is under the garment by construction: torso\n// proxy = ellipse, half-width 16000 (the shader's own 15000 torso gate + cloth offset),\n// half-depth 12500 centred y=-1500 (the DYNA front band bounds at -14000; +-2000 declared\n// imprecision). Full outfits only (uOF<.5). The real garment-offset surface is the ASSET half\n// (MPFB2-style proxy fit at groom time); this is the page half.\nif(uOF[vII]<.5&&h>.395&&h<uNIP+.055){float ex8=vB.x/16000.;float ey8=(vB.y+1500.)/12500.;if(ex8*ex8+ey8*ey8<1.)discard;}\nfloat su9=vUV.x*6.0+fract(sin(dot(floor(vB.xz*.01),vec2(127.1,311.7)))*43758.5453)*3.0;float sf9=abs(fract(su9)-.5)*2.0;/* COVERAGE: a ribbon is ~2cm (w09) = 4-6 px at review range, so 22 sub-strand stripes with 18% discarded at the root were SUB-PIXEL -- they rendered as random missing pixels (the speckle) and let the scalp glint through. 6 stripes, 4% gaps at the root (.96), feathering to 34% at the tip (.66): cohesive where locks must be solid, wispy where they end. */float th9=.96-.30*vUV.y;if(sf9>th9&&vUV.y>.04)discard;float hg9=clamp((h-.72)/.26,0.,1.);float ml9=.94+.12*fract(sin(dot(floor(vB.xz*.01),vec2(12.9898,78.233)))*43758.5453);vec3 hc9=uCH[vII]*ml9*(1.18-.28*hg9);// HAIR = ALBEDO x (SKY + SUN) AND NOTHING ELSE (operator: \"hair still changes color not based on\n// real light and shadows\" -- measured in the 20:19 crop: warm straw at the crown, grey-khaki down\n// the fall of the SAME girl). Two mechanisms, both removed: (1) an ADDITIVE sheen on dot(T,view)\n// that brightened as the camera or head moved with no light change; (2) fall-through into the\n// skin tail, whose spe/rim/dif3 read the hair's DEGENERATE normals (aN=0) as noise and whose\n// uSkTM rim washed the strands sky-khaki. The branch now completes its own light and RETURNS:\n// static albedo (per-lock hash, root-tip gradient, sub-strand AO, lock shade -- identity lives in\n// albedo ONLY) x (sky fill + sun x published Kajiya strand diffuse x the same voxel\n// sun-visibility the skin uses), plus the hr_marschner_lobe R/TT/TRT specular\n// (Karis 2016 closed form over Marschner 2003 lobes, melanin-absorption coloured -- the block\n// below carries the citations; light-anchored, the skin's own sun tint and gain). Fog and grade lines are the declared twins of the skin tail's.\nvec3 Lh9=(dot(uSunM,uSunM)>.01)?normalize(uSunM):normalize(vec3(2400.,2500.,1400.));\nvec3 tH9=normalize(vec3(dFdx(vW.x),dFdx(vW.y),dFdx(vW.z))+vec3(1e-4));\nfloat sv8=1.;\nif(uOcc>=1){float t07=(floor(vW.y)+1.2-vW.y)/max(Lh9.y,.2);if(vmarch(vW+Lh9*t07,Lh9,40.)>=0.)sv8=0.;}\nfloat stl9=dot(tH9,Lh9);float kj9=sqrt(max(0.,1.-stl9*stl9));\nvec3 hm9=hc9*(.8+.2*(1.0-sf9))*max(vSh,.6);\nvec3 hlin9=hm9*hm9*(uSkyF+1.008*kj9*sv8);\n// ---- hr_marschner_lobe (2026-08-30, the red-hair win) -- real-time Marschner R/TT/TRT in\n// closed form, NO loops: Karis 2016 (Epic, \"Physically Based Hair Shading in Unreal\",\n// SIGGRAPH 2016 real-time hair course) -- shifted-Gaussian longitudinal terms around the\n// tangent, fitted azimuthal terms. Lobe relationships from Marschner et al. 2003 \"Light\n// Scattering from Human Hair Fibers\" (Table 1): cuticle-tilt shift alphaR ~ -3deg,\n// alphaTT=-alphaR/2, alphaTRT=-3*alphaR/2; widths betaTT=betaR/2, betaTRT=2*betaR, betaR\n// inside the published 5..10deg band selected by the genome axis uGN (roughness is genetics,\n// not a tunable). Absorption is MELANIN, never a tint: per-unit sigma_a eumelanin\n// (.419,.697,1.37) / pheomelanin (.187,.40,1.05) from d'Eon et al. 2011 \"An Energy-Conserving\n// Hair Reflectance Model\". The genome lock colour splits into total melanin density (darkness,\n// -log luminance) and a pheomelanin ratio (red dominance; the .08/3.5 mapping is calibrated on\n// the shipped H8 palette: its two red-class rows saturate to 1, its black row stays low), so a\n// red-genome girl gets low red absorption and the TT forward-transmission lobe hands her the\n// backlit burn PHYSICALLY -- red survives two air-keratin interfaces; nothing is painted.\nvec3 Vh9=normalize(uCamM-vW);\nfloat sTi=clamp(dot(tH9,Lh9),-1.,1.);float sTr=clamp(dot(tH9,Vh9),-1.,1.);\nfloat thI=asin(sTi);float thR=asin(sTr);float thH=(thI+thR)*.5;float cTd=cos((thR-thI)*.5);\nvec3 Lp8=Lh9-tH9*sTi;vec3 Vp8=Vh9-tH9*sTr;\nfloat cPhi=dot(Lp8,Vp8)/max(length(Lp8)*length(Vp8),1e-5);\nfloat cHPhi=sqrt(clamp(.5+.5*cPhi,0.,1.));\nfloat lum8=dot(uCH[vII],vec3(.299,.587,.114));\nfloat mel8=-log(clamp(lum8,.02,.95));\nfloat phr8=clamp((uCH[vII].r-max(uCH[vII].g,uCH[vII].b)+.08)*3.5,0.,1.);\nvec3 sigA8=mel8*mix(vec3(.419,.697,1.37),vec3(.187,.40,1.05),phr8);\nfloat bR8=radians(mix(6.,10.,clamp(uGN[vII]/3.,0.,1.)));float aR8=radians(-3.);\n// .3989 = 1/sqrt(2pi), the Gaussian norm; MR/MTT/MTRT are the Marschner longitudinal lobes\nfloat MR8=exp(-(thH-aR8)*(thH-aR8)/(2.*bR8*bR8))*.3989/bR8;\nfloat bTT8=bR8*.5;float MTT8=exp(-(thH+aR8*.5)*(thH+aR8*.5)/(2.*bTT8*bTT8))*.3989/bTT8;\nfloat bT28=bR8*2.;float MT28=exp(-(thH+aR8*1.5)*(thH+aR8*1.5)/(2.*bT28*bT28))*.3989/bT28;\n// Schlick Fresnel at keratin eta=1.55 (F0=.0466) over Karis's cosThetaD*cos(phi/2) argument;\n// N_TT/N_TRT are Karis's fitted azimuthal exponentials; interior transit ~ 1/cosThetaD.\nfloat fH8=.0466+(1.-.0466)*pow(1.-clamp(cTd*cHPhi,0.,1.),5.);\nvec3 Tt8=exp(-sigA8/max(cTd,.25));\nvec3 spec8=(MR8*(.25*cHPhi)*fH8*vec3(1.)+MTT8*exp(-3.65*cPhi-3.98)*(1.-fH8)*(1.-fH8)*Tt8+MT28*exp(17.*cPhi-16.78)*(1.-fH8)*(1.-fH8)*fH8*Tt8*Tt8)/max(cTd*cTd,.06);\nspec8=min(spec8,vec3(6.));// bounded OUTPUT, never bounded physics: the firefly clamp\nhlin9+=vec3(1.,.94,.81)*1.008*spec8*sv8;// the page's own sun tint and 1.008 sun energy -- the skin pass's declared twins\nvec3 hcl9=sqrt(max(hlin9,vec3(0.)));\nvec3 hfw9=1.-exp(-vec3(.123,.287,.700)*length(vW-uCamM)/168.);\nhcl9=mix(hcl9,uSkTM,hfw9);\nif(uVt==1)hcl9=vec3(.94)*pow(max(hcl9,vec3(0.))*(1./.94),vec3(1.45));\nfc=vec4(hcl9,1.);return;}\n// SKIN, NOT PLASTIC (the reference's biggest full-frame separator). Three cheap-SSS moves the\n// realism literature blesses on a no-compute budget: (1) WRAP DIFFUSE -- light reaches past\n// the geometric terminator the way scattering flesh does; (2) the RED-SHIFTED TERMINATOR --\n// at the light/dark boundary the shadow goes warm blood-red, not gray: the single strongest\n// this-is-skin cue; (3) CAPILLARY ZONATION on the anatomy bands -- cheeks, nose tip, ears,\n// knees, elbows flush warmer; a faint sun-tone gradient down the body (the beach class).\nvec3 L=normalize(vec3(2400.,2500.,1400.));\nvec3 Ls9=(dot(uSunM,uSunM)>.01)?normalize(uSunM):L; float ndl=dot(n,Ls9);\nfloat wr=.42;\nfloat dif=clamp((ndl+wr)/(1.+wr),0.,1.);\n// sr_sss_preint port (Penner 2011, [@penner2011]): wraps 120/60/26 + curv gains 96/40/12 from nx_sdfrender (ONE owner), /256\nfloat invr=length(fwidth(n))/max(length(fwidth(vW)),1e-6);\nfloat cv9=0.;\nvec3 w3=(uGar==0&&uAuth==0)?vec3(.469,.234,.102)+cv9*vec3(.375,.156,.047):vec3(wr);\n// FACE: the per-channel wrap's red terminator painted the whole lower face blood-brown on this\n// mesh's coarse normals (20:19 crops: light forehead, burnt jaw -- one red mask). The face keeps\n// 40% of the red shift; the body keeps the full SSS look. Root fix = the skull-lane face bake.\nif(h>.885)w3=mix(w3,vec3(wr),.6);\nvec3 dif3=clamp((vec3(ndl)+w3)/(1.+w3),0.,1.);\nfloat term=1.-smoothstep(.0,.45,abs(ndl+.05));\nif(uGar==0&&uAuth==0){\n// terminator albedo warm-mix superseded by dif3 (Penner wrap)\nfloat fl9=0.;\nfloat chz9=(h-.925)*uH/(.115*uH);\nfl9+=max(0.,1.-length(vec2((abs(vB.x)-.11*.115*uH)/(.06*.115*uH),chz9/(.5))))*.5;\nfl9+=(1.-smoothstep(0.,.02,abs(h-.918)))*(1.-smoothstep(0.,.03*.115*uH,abs(vB.x)))*.6;\nfl9+=(1.-smoothstep(0.,.025,abs(h-.520)))*.30;\nfl9+=(1.-smoothstep(0.,.025,abs(h-.335)))*.25;\nmc=mix(mc,mc*vec3(1.10,.90,.88),clamp(fl9,0.,.3));// flush cap .5->.3: stacked with the wrap it read as sunburn (20:19)\nmc*=mix(vec3(1.),vec3(1.03,.995,.96),clamp((h-.35)/.55,0.,1.)*.7);\n// CHEEK CONVEXITY LIGHT (sbs v1: our cheeks read CONCAVE/gaunt where the reference is full):\n// a soft radial lift on the cheek mass fakes the convex form until the skull rung lands.\nfloat ck9=(h-.912)*uH/(.115*uH);\nfloat ckm9=max(0.,1.-length(vec2((abs(vB.x)-.13*.115*uH)/(.10*.115*uH),ck9/.65)));\nmc*=1.+.06*ckm9;// cheek lift halved: stacked warmth read as blotch at distance (20:19)\n}\nvec3 H=normalize(L-vd);float spe=pow(max(dot(n,H),0.),26.);\nfloat rim=pow(1.-max(dot(n,-vd),0.),2.5);\n// REAL CAST SHADE ON THE FIGURES (operator: lights unsophisticated; a girl in a cliff's shadow\n// glowed): one voxel sun-march per fragment (the same vmarch the camera test composes) gates the\n// SUN terms -- direct wrap, sun specular, most of the sand bounce -- while the sky fill stays:\n// exactly the energy split the contact-shadow derivation already uses. The march starts where the\n// ray clears the fragment's own block layer (+.2): the ground she stands on lives in that layer\n// and would graze-shadow every ankle at any sun below ~60 deg. 40 blocks = a 4-block wall at the\n// .1 minimum sun slope; past that the fog owns the distance.\nfloat sv9=1.;\nif(uOcc>=1){float t08=(floor(vW.y)+1.2-vW.y)/max(Ls9.y,.2);if(vmarch(vW+Ls9*t08,Ls9,40.)>=0.)sv9=0.;}\nvec3 mcl=mc*mc;vec3 lin=mcl*(uSkyF+1.008*dif3*sv9)+mcl*vec3(.17,.14,.095)*max(0.,-n.y)*(.35+.65*sv9)+vec3(1.,.94,.81)*spe*.048*sv9+uSkTM*uSkTM*rim*.09;vec3 col=sqrt(max(lin,vec3(0.)));\n// terminator red now carried by the Penner per-channel wrap (dif3), not an additive tint\n// (grazing-angle darkening REMOVED 2026-08-02: the dot(n,-vd)<.24 col*=.4 term painted a dark ring\n// around every silhouette -- with the view-side normal flip the grazing band ALWAYS hugs the\n// outline, so a term meant to fake depth read as a black outline around the women. The rim\n// light above already models the edge; subtraction there was fighting addition here.)\nvec3 fw9=1.-exp(-vec3(.123,.287,.700)*length(vW-uCamM)/168.);\nvec3 gf9=mix(col,uSkTM,fw9);if(uVt==1)gf9=vec3(.94)*pow(max(gf9,vec3(0.))*(1./.94),vec3(1.45));fc=vec4(gf9,1.);}// the grade twin (see the world FSH derivation)`;\n" as *u8)
1693    p = gpe_emit_webgpu(out, p)
1694    p = rk_webgpu_door(out, p)   // GP2 / GE44: the kernel WGSL (captured from the shader backend) + the readback probe
1695    p = gpe_ap(out, p, glp_js())
1696    // GP3/GE45: the door ladder as data. ONE table (knowledge/tier_ladder.conf) emitted verbatim; the page's
1697    // ladder resolution below names its door through nxDoorId(requires), never by spelling an id, and the HUD
1698    // prints nxDoorReport() -- which door drew the frame and WHY each higher door was not taken (levered-off,
1699    // capability-absent, failed:<the thrown message>). An unreadable conf emits a NAMED absence (tl_emit
1700    // announces TIER-LADDER-ABSENT-AT-EMIT on stderr) so a page never draws an unexplained frame silently.
1701    // GE30 2026-09-03: the ladder itself is now emitted EARLIER, at top-level script scope just before
1702    // the module is instantiated, because the threaded boot must ask nxThreads() how many workers this
1703    // visitor gets BEFORE init() runs -- and window.nxThreads is an assignment STATEMENT that would not
1704    // have executed yet at that point. Only the declaration order can serve a caller that early, so the
1705    // table moved rather than the boot. Nothing else here depended on its position: it emits pure
1706    // functions over the conf plus its window publication, and holds no page state.
1707    p = gpe_ap(out, p, "let VOX=0,SPC=0;\n// WEBGPU TIER, STAGE A (LEVERED): world pass only -- the NPC and eye passes are GL programs, so\n// WebGPU must be ASKED FOR (?gpu=1) until they reach parity; every ordinary visitor keeps the\n// proven ladder below. A canvas holds ONE context type forever, so a successful WebGPU claim\n// means the GL attempt is skipped entirely.\n// THE DOOR IS DATA (2026-09-06, operator order: WebGPU is the default door, CPU and WebGL2 are fallbacks). The webgpu row of knowledge/tier_ladder.conf decides, exactly as tl_pick walks it natively: state=default takes the door whenever the device can, state=levered needs its lever in the URL, ?gpu=0 opts out either way, and a hand-typed ?gl=0 (no why=) still forces the sovereign tier; a crash breadcrumb (?gl=0&why=...) is retried while gltry<2, like the GL path. The old gate hard-coded the ?gpu=1 lever, so the conf's promise that flipping the default is a data edit was never true.\nconst nxgd_row=(window.__nx_ladder||[]).filter(function(r9){return r9.requires==='webgpu';})[0]||null;\nconst nxgd_q=new URL(location.href).searchParams;const nxgd_why=nxgd_q.get('why')||'';const nxgd_try=(parseInt(nxgd_q.get('gltry')||'0',10)||0);\nconst nxgd_def=(nxgd_row&&nxgd_row.state==='default')?true:false;\nconst nxgd_lev=(nxgd_row&&nxgd_row.lever&&nxgd_row.lever!=='-'&&location.search.indexOf(nxgd_row.lever)>=0)?true:false;\nconst nxgd_opt=location.search.indexOf('gpu=0')>=0;\nconst nxgd_cpu=(location.search.indexOf('gl=0')>=0&&(nxgd_why===''||nxgd_try>=2))?true:false;\nconst nxgd_want=((nxgd_def||nxgd_lev||location.search.indexOf('gpu=1')>=0)&&nxgd_opt===false&&nxgd_cpu===false)?true:false;\nwindow.__nx_gpugate={g1:nxgd_want,def:nxgd_def,lev:nxgd_lev,opt:nxgd_opt,cpu:nxgd_cpu,state:nxgd_row?nxgd_row.state:'no-row',ng:!!navigator.gpu,vo:!!(typeof ex!==\"undefined\"&&ex&&ex.vox_off),yw:!!(typeof ex!==\"undefined\"&&ex&&ex.yaw),g0:location.search.indexOf(\"gl=0\")>=0,ran:0};\nif(nxgd_want&&navigator.gpu&&ex.vox_off&&ex.yaw){window.__nx_gpugate.ran=1;\n// BOOT-STALL CEILING: a wedged WebGPU stack hangs INSIDE requestAdapter/createShaderModule --\n// no rejection, no throw (measured 2026-08-18: BOTH headless Chromiums on the dev box wedge\n// exactly there). The race caps the visitor's cost at GPU_BOOT_MS and the ladder continues to\n// GL/CPU; a LATE gpuInit completion is discarded because the canvas may belong to another\n// context by then. 4000ms = generous first-visit shader-compile budget on weak hardware; a\n// too-small ceiling would silently demote CAPABLE devices, which is the worse direction.\nconst GPU_BOOT_MS=nxGpuBootMs();\nawait Promise.race([gpuInit(),new Promise(rs=>setTimeout(rs,GPU_BOOT_MS))]);\nif(!GPU)window.__gpu_late=1;\n}\n// USE THE BEST RENDERER THE MACHINE ACTUALLY HAS. This probes for a GPU and takes it; if the\n// context, shader compile or link fails for any reason the catch below falls through to the\n// sovereign wasm rasteriser, which is always compiled into this page. Selection is AUTOMATIC --\n// it was briefly gated behind a ?gl=1 query string, which meant every ordinary visitor silently\n// got the CPU fallback and none of the skinned characters.  ?gl=0 forces the sovereign path.\n// A CRASH BREADCRUMB IS NOT AN OPERATOR CHOICE (2026-08-28). ?gl=0 typed by hand is a\n// deliberate lever and stays honoured. ?gl=0 carrying a why= is the OLD recovery reload\n// BRANDING a visitor onto the bottom tier -- and because the brand lives in the URL it was\n// PERMANENT: every reload, every bookmark and every shared link re-pinned the family to the\n// 384x240 CPU tier on hardware that was never at fault. A recoverable fault must be RETRIED,\n// not inherited. gltry bounds the retry so genuinely dead hardware still settles on the CPU\n// tier instead of oscillating between two tiers forever.\nconst _q9=new URL(location.href).searchParams;\nconst _gl0=location.search.indexOf(\"gl=0\")>=0;\nconst _why9=_q9.get(\"why\")||\"\";\nconst _try9=(parseInt(_q9.get(\"gltry\")||\"0\",10)||0);\nconst GLWANT=(!_gl0)||(_why9!==\"\"&&_try9<2);\nwindow.__glretry=(_gl0&&_why9!==\"\"&&_try9<2)?_try9+1:0;\nif(!GPU&&ex.vox_off&&ex.yaw&&GLWANT){try{\nconst g=nxGlProbe(cv,{antialias:false,preserveDrawingBuffer:true,stencil:true});\n// ?glfail=1 -- TEST LEVER for the poisoned-canvas recovery (mirrors ?gl=0): throws AFTER the\n// context exists, exactly like a driver compile failure, so the recovery chain is provable in\n// any real browser.\nif(location.search.indexOf(\"glfail=1\")>=0)throw \"test-lever-glfail\";
1708// ==== CONTEXT-LOSS SURVIVAL (operator 2026-08-28: /world/beach?gl=0&why=webgl-context-lost) ====
1709// This page had NO webglcontextlost listener at all -- proven absent over the whole tree -- so
1710// preventDefault() was never called, and by spec a UA only attempts restoration when the default is
1711// prevented. The loss therefore ran the poisoned-canvas path: getContext(2d) on a canvas already in
1712// webgl2 mode returns null FOREVER, so sovCanvas2d reloaded into ?gl=0 -- the CPU raycaster,
1713// permanently, for the rest of the session, and stickily, because the reload leaves gl=0 in the URL.
1714// A loss we cannot prevent must cost a hiccup, not the renderer.
1715cv.addEventListener(\"webglcontextlost\",function(ev9){ev9.preventDefault();
1716// preventDefault() IS THE WHOLE PRECONDITION: the spec makes restoration OPT-IN, so a page that
1717// does not call it can only ever fall DOWN the ladder. Measured over the COMPLETE client payload
1718// of /world/beach (478,696 B, 0 external scripts) on 2026-08-28: ZERO listeners of either name.
1719// That absence is why one lost context branded a visitor onto the CPU tier for the whole session.
1720window.__sov_gllost=(window.__sov_gllost|0)+1;
1721// AND HOLD THE CANVAS. Without __glrestoring the frame loop's own catch reaches sovCanvas2d, which
1722// calls getContext(2d) on a canvas that is already in webgl2 mode -- that returns null FOREVER, and
1723// the null is what triggered the ?gl=0 reload. The 2D fallback must not steal the canvas during the
1724// window in which the driver is handing the context back.
1725window.__glrestoring=1;GL=null;window.__sov_glfail=\"context-lost (restore armed)\";
1726__tier(\"GPU context lost -- holding the world while the driver hands it back\");
1727console.log(\"nishi: webgl context lost, restore armed (preventDefault called)\");},false);
1728// RESTORE = RELOAD, and the reload is NOT BLIND: there is no re-callable GL init on this page (the
1729// setup is one inline block), so the honest rebuild is a reload -- but it carries a HALVED ribbon
1730// budget in the URL, so the retry runs a configuration measurably cheaper than the one that just
1731// died. The zero-blind-retry policy the WebGPU path states is honoured: this retry is not blind, it
1732// is a different budget. The ladder is bounded and self-reporting -- at hairlod=1 a further loss
1733// falls to ?gl=0 exactly as before, and relost= carries the count so the URL still says why.
1734cv.addEventListener(\"webglcontextrestored\",function(){try{
1735// Every GL object died with the context -- programs, textures, VAOs, the whole NPC pass -- and this
1736// page has no re-callable GL init (setup is one inline block), so the honest rebuild is the ordinary
1737// boot. The world save and the passport are already persisted, so this costs a moment and never the
1738// progress, and it climbs back to the TOP of the ladder rather than the bottom.
1739// THIS IS NOT THE BLIND RETRY THE WebGPU PATH FORBIDS. That policy bans US re-arming a dead adapter
1740// on a cadence; webglcontextrestored is the BROWSER telling us it has already restored one. Acting
1741// on an authoritative hand-back is a different act from speculatively poking dead hardware.
1742var u9=new URL(location.href);
1743// THE BRAND MUST NOT OUTLIVE THE CRASH: drop gl/why/gltry, or a URL the family bookmarks or shares
1744// carries a demotion that is no longer true.
1745u9.searchParams.delete(\"gl\");u9.searchParams.delete(\"why\");u9.searchParams.delete(\"gltry\");
1746// ...BUT THE RETRY IS NOT BLIND EITHER: it comes back on a HALVED ribbon budget, so the
1747// configuration we return to is measurably cheaper than the one that just died. The ladder has
1748// exactly as many rungs as the actuator has budgets (6 -> 3 -> 1); once it is exhausted and we
1749// still lose the context, the cause is not our geometry and ?gl=0 is the honest answer.
1750var kc=(window.__hairkids|0)||2;
1751// THE DEGRADE IS BANKED IN SESSION STATE, NEVER IN THE URL -- see the ladder note at the hair draw.
1752// An older bookmark may still carry ?hairlod=; strip it here so a stale one cannot outlive its tab.
1753u9.searchParams.delete(\"hairlod\");
1754if(kc<=1&&(window.__sov_gllost|0)>1){u9.searchParams.set(\"gl\",\"0\");u9.searchParams.set(\"why\",\"webgl-context-lost-ladder-exhausted\");}
1755else{try{sessionStorage.setItem(\"nxHairLod\",String(Math.max(1,Math.floor(kc/2))));sessionStorage.setItem(\"nxHairFresh\",\"1\");}catch(e9s){}}
1756// RECURRENCE MUST STAY VISIBLE -- a detector that cannot say AGAIN is a latch, not a detector.
1757u9.searchParams.set(\"relost\",String(window.__sov_gllost|0));
1758location.replace(u9.href);}catch(e9r){location.reload();}},false);\nif(g){const cs=(t,s)=>{const o=g.createShader(t);g.shaderSource(o,s);g.compileShader(o);if(!g.getShaderParameter(o,g.COMPILE_STATUS))throw g.getShaderInfoLog(o);return o;};\nconst pr=g.createProgram();g.attachShader(pr,cs(g.VERTEX_SHADER,VSH));g.attachShader(pr,cs(g.FRAGMENT_SHADER,FSH));g.linkProgram(pr);\nif(!g.getProgramParameter(pr,g.LINK_STATUS))throw g.getProgramInfoLog(pr);\ng.useProgram(pr);\nconst L=n=>g.getUniformLocation(pr,n);\nconst tex=g.createTexture();g.activeTexture(g.TEXTURE0);g.bindTexture(g.TEXTURE_3D,tex);\ng.texStorage3D(g.TEXTURE_3D,1,g.R8UI,128,128,48);\ng.texParameteri(g.TEXTURE_3D,g.TEXTURE_MIN_FILTER,g.NEAREST);g.texParameteri(g.TEXTURE_3D,g.TEXTURE_MAG_FILTER,g.NEAREST);\ng.uniform1i(L(\"uV\"),0);g.uniform1i(L(\"uVt\"),location.search.indexOf(\"tm=0\")>=0?0:1);\nVOX=Number(ex.vox_off());SPC=Number(ex.spec_off());\nGL={g,pr,L,lastEd:-1};\n// THE SPEC-REQUIRED RECOVERY PAIR (2026-08-28). A WebGL context is lost for reasons that\n// are ORDINARY and not a fault of this page: a driver reset, a laptop GPU switch, a\n// sleep/wake, or the browser reclaiming the oldest context when the family opens several\n// worlds in tabs. The spec makes restoration OPT-IN -- unless preventDefault() is called on\n// webglcontextlost the browser NEVER fires webglcontextrestored -- so a page without this\n// pair can only ever fall DOWN the ladder. Measured 2026-08-28 over the COMPLETE client\n// payload of /world/beach (478,696 B, 0 external scripts): ZERO listeners of either name.\n// That absence is exactly why one lost context branded a visitor onto the CPU tier for good.\n// SECOND LISTENER PAIR REMOVED 2026-08-28 (merge of two lanes that fixed this hour apart). Two
1759// lost/restored pairs on ONE canvas both ran, both called location.replace with DIFFERENT URL
1760// mutations, and whichever fired second won -- one of the two orderings kept the ?gl=0 brand alive
1761// across a successful restore, i.e. defeated the exact fix both pairs existed to make. The single
1762// surviving pair is registered above, immediately after the context is acquired, and it is the UNION
1763// of both: preventDefault + a loss counter + the __glrestoring canvas hold on the way down, and
1764// brand-deletion + a halved ribbon budget + relost on the way back up.
1765// The climb succeeded, so the brand must not outlive the crash that wrote it: drop gl/why/\n// gltry from the address bar WITHOUT a reload, so nothing the family bookmarks or shares\n// carries the demotion forward.\nif(_gl0&&_why9!==\"\"){try{const _c9=new URL(location.href);_c9.searchParams.delete(\"gl\");_c9.searchParams.delete(\"why\");_c9.searchParams.delete(\"gltry\");window.history.replaceState(null,\"\",_c9.href);}catch(e){}}\n}else{window.__sov_glfail=\"no-webgl2-context: \"+window.__nx_gl.state;window.__sov_glremedy=window.__nx_gl.remedy;console.log(\"nishi: no webgl2 context (\"+window.__nx_gl.state+\"), sovereign render -- \"+window.__nx_gl.remedy);}\n}catch(e){window.__sov_glfail=String(e);console.log(\"nishi: GL unavailable, CPU render\",e);GL=null;}}\n" as *u8)
1766    p = gpe_ap(out, p, "function glDraw(){const g=GL.g,L=GL.L;\n// the mesh pass leaves program/VAO/texture-unit state behind -- reset OURS every frame\ng.useProgram(GL.pr);g.bindVertexArray(null);g.activeTexture(g.TEXTURE0);\nconst dpr=devicePixelRatio||1;const q=Number(ex.quality?ex.quality():2);\n// ★DERIVED FROM q, NOT A LOOKUP TABLE. Each quality step is meant to halve the RENDERED PIXEL\n// COUNT, so the LINEAR scale is 2^(-(q-1)/2): q=1 -> 1, 2 -> .707, 3 -> .5, 4 -> .354, 5 -> .25 --\n// exactly the five values the old table spelled out by hand, and it keeps going past them.\n// THE DEFECT THIS REPLACES: that table had SIX entries while q ranges to Q_MAX, which was widened\n// from 5 to 24 in the engine -- a different file. Any q past 5 read undefined, so scl was NaN, so\n// wpx/hpx were NaN, so the canvas sized to zero and the page went black. It bit MOBILE hardest,\n// because weak hardware is precisely what the frame-time controller coarsens past 5.\n// A hardcoded table indexed by a range that lives somewhere else is a defect waiting for that\n// range to move. This expression cannot go out of range.\nlet scl=1;\n// SCALE FLOOR (operator 20:43, whole-frame mush, \"this bug is back\"): the governor's sensor is the\n// WHOLE rAF delta (the frame_ms report), which includes the wasm tick and its catch-up steps --\n// cost the resolution actuator cannot touch. When THAT is what is slow, q ratchets toward Q_MAX\n// (24) and the picture dissolves while fixing nothing. Past q=4 the fill term is already cut 8x,\n// so a frame still slow there is tick-bound BY CONSTRUCTION and coarsening further only erases\n// the image: the actuator saturates at scl=.354 (q=4). The engine's own work_ms export is the\n// honest sensor split; subtracting it is the engine lane's root fix. REVIEW MODE IS THE VERDICT\n// SCREEN and outranks the governor; ?hi=1 stays as the explicit lever for any other page.\n\n\n// record mode shrinks the canvas (measurement outranks pixels) -- though the REAL headless\n// cost is the NPC mesh pass, so 600-tick measurement runs should use ?gl=0&review=1&record=1:\n// the recorder reads DOORS, not pixels, and the CPU path ticks fast\n// RECORD MODE NO LONGER OVERRIDES AN EXPLICIT FULL-RESOLUTION REQUEST (2026-08-28).
1767// This line used to run AFTER the hi=1/review override and silently undo it, so a capture taken on
1768// a VERDICT path came back at QUARTER SCALE -- the one path whose entire purpose is producing
1769// evidence was the path that quietly reduced it. ★AN EXPLICIT REQUEST OUTRANKS A DEFAULT
1770// OPTIMISATION: scl=.25 here is an optimisation whose whole justification is >>nobody is looking at
1771// these pixels<< (record mode reads DOORS, not pixels), and ?hi=1 / ?review=1 is a caller stating
1772// that somebody IS. The moment the explicit flag is present the optimisation's own premise is
1773// false, so it must yield -- it is not a policy tie to be broken by ordering.
1774// AND WHEN IT DOES REDUCE, IT SAYS SO: a cap reached in silence becomes a measurement nobody knows
1775// is partial, which is exactly how a 240x150 frame gets published as though it were the product.
1776var hrev9=(location.search.indexOf(\"hi=1\")>=0||REV);
1777if(REC&&!hrev9)scl=.25;
1778window.__scl=scl;window.__sclwhy=(REC&&!hrev9)?\"record-quarter\":(hrev9?\"explicit-full\":\"governor\");
1779// ==== GEOMETRY ACTUATOR -- THE ONE THIS GOVERNOR NEVER HAD (crash lane 2026-08-28) ====
1780// Above, the resolution actuator saturates at q=4 (scl=.354) and the note there concludes that a
1781// frame still slow past q=4 is tick-bound BY CONSTRUCTION. That was true when the groom was small.
1782// It is not true now. Ribbon hair is NXH_KIDS(6) children x 1200 guides x 14 segments x 2 tris =
1783// 201,600 triangles PER HEAD, drawn instanced over up to 12 culled figures = 2,419,200 triangles a
1784// frame -- and that count is INVARIANT under scl, because scl only sizes the framebuffer. Worse,
1785// coarsening drives every ribbon SUB-PIXEL, where quad overshading floors the fragment count while
1786// the triangle count stays fixed: past q=4 the pixel knob stops paying and the frame that is still
1787// slow is HAIR-GEOMETRY bound. So the ribbon count takes over exactly where the pixel count gives
1788// up, on the SAME 2^(-d/2) half-the-area law, so one more quality step still means one more halving
1789// of rasterised area. NOTHING IS STRIPPED: at q<=4 the groom is untouched, and the LOD thins the
1790// whole scalp evenly (child-major layout) rather than removing figures or shaving bald patches.
1791// (the ribbon floor is resolved ONCE at the hair draw, where the full child count hk9 is in scope --
1792// see the ladder note there. It used to be read here from the URL; the URL is the wrong home for it.)
1793// (hrev9 -- >>the caller asked for full resolution<< -- is defined ONCE, hoisted above the record-mode
1794// line that now yields to it. Two definitions of one predicate is the duplicate-ruler defect.)
1795// REVIEW OUTRANKS THE GEOMETRY ACTUATOR TOO. The verdict screen is where the groom is JUDGED, so a
1796// q-driven thinning there would degrade the exact thing being looked at -- the same reason review
1797// already outranks the pixel governor. What review may NOT outrank is the watchdog ceiling below:
1798// that one binds everywhere, because a lost context costs the whole renderer, not a little detail.
1799var hq9=(q>4&&!hrev9)?Math.pow(2,-(q-4)/2):1;
1800// TDR SAFETY CEILING -- BINDS EVEN IN REVIEW, BY DESIGN. ?review=1 and ?hi=1 outrank the RESOLUTION
1801// governor on purpose (the verdict screen must be full-res), and that stays. Nothing may outrank the
1802// GPU watchdog: on Windows a frame overrunning TdrDelay (2 s default) has its context reset, and
1803// this page then falls all the way to the CPU raycaster -- which is exactly the report that opened
1804// this lane. The ceiling reuses the render loop OWN out-of-real-time clamp via window.__oor, so no
1805// new constant is introduced, and it recovers only when frames are back under an eighth of it
1806// (hysteresis, so the actuator cannot oscillate against its own effect).
1807var oor9=window.__oor|0;
1808if(oor9>0){if((window.__lastdt|0)>oor9)window.__hairtdr=Math.max(.25,(window.__hairtdr||1)*.5);
1809else if((window.__lastdt|0)<oor9/8&&(window.__hairtdr||1)<1)window.__hairtdr=Math.min(1,(window.__hairtdr||1)*1.25);}
1810window.__hairq=hq9*(window.__hairtdr||1);\n// MAXIMUM RESOURCES THAT ARE LOGICAL PER DEVICE CLASS (operator 2026-08-02): render at full\n// devicePixelRatio sharpness UP TO a per-class pixel budget, and let the adaptive quality\n// controller own the dynamic response below it. Without the budget a dpr-3 phone allocates a\n// 4M+px backing store (thermal + memory pressure the frame-time controller cannot see in its\n// first seconds), and desktop had no defined ceiling at all. Budgets: mobile 2.3Mpx (1080p\n// class), desktop 8.3Mpx (4K). The clamp preserves aspect: scale both axes by sqrt(over).\nconst _mob9=(\"ontouchstart\" in window)||navigator.maxTouchPoints>0;\nconst _PXB=_mob9?2300000:8300000;\nlet wpx=Math.max(64,Math.floor(cv.clientWidth*dpr*scl)),hpx=Math.max(64,Math.floor(cv.clientHeight*dpr*scl));\nif(wpx*hpx>_PXB){const _f9=Math.sqrt(_PXB/(wpx*hpx));wpx=Math.max(64,Math.floor(wpx*_f9));hpx=Math.max(64,Math.floor(hpx*_f9));}\nwindow.__px=wpx+\"x\"+hpx+(_mob9?\"m\":\"d\");\nif(cv.width!==wpx||cv.height!==hpx){cv.width=wpx;cv.height=hpx;g.viewport(0,0,wpx,hpx);}\n// crops grow and soil wets WITHOUT player edits -- refresh the voxel texture on the edit\n// counter OR every 64 organ ticks, whichever fires first (growth stays visible)\nconst ed=Number(ex.broken())+Number(ex.placed());const tn9=Number(ex.tnow());const ag9=ex.arena_gen?Number(ex.arena_gen()):0;\nif(ed!==GL.lastEd||ag9!==GL.lastAg||((tn9&63)===0&&tn9!==GL.lastRefreshTick)){GL.lastEd=ed;GL.lastAg=ag9;GL.lastRefreshTick=tn9;\ng.texSubImage3D(g.TEXTURE_3D,0,0,0,0,128,128,48,g.RED_INTEGER,g.UNSIGNED_BYTE,new Uint8Array(ex.memory.buffer,VOX,128*48*128));}\nconst dv=new DataView(ex.memory.buffer);\n// A1 made visible: the organ's sun elevation drives palette light, sky colour, sun disc + rain\nconst sel=ex.sunel?Number(ex.sunel())/4096:1;const df=Math.max(0,sel);\nconst dl2=.22+.78*Math.pow(df,.6);\nconst pal=new Float32Array(36);\nfor(let i=0;i<12;i++){const v=Number(dv.getBigInt64(SPC+(16+i)*8,true));pal[i*3]=(v&255)/255*dl2;pal[i*3+1]=((v>>8)&255)/255*dl2;pal[i*3+2]=((v>>16)&255)/255*dl2;}\ng.uniform3fv(L(\"uPal\"),pal);\nconst palf=new Float32Array(15);\nfor(let i=0;i<5;i++){const v=Number(dv.getBigInt64(SPC+(34+i)*8,true));palf[i*3]=(v&255)/255*dl2;palf[i*3+1]=((v>>8)&255)/255*dl2;palf[i*3+2]=((v>>16)&255)/255*dl2;}\ng.uniform3fv(L(\"uPalF\"),palf);\nconst skt=Number(dv.getBigInt64(SPC+7*8,true)),skh=Number(dv.getBigInt64(SPC+8*8,true));\nconst nn=1-dl2;\ng.uniform3f(L(\"uSkT\"),(skt&255)/255*dl2+.02*nn,((skt>>8)&255)/255*dl2+.03*nn,((skt>>16)&255)/255*dl2+.10*nn);\ng.uniform3f(L(\"uSkH\"),(skh&255)/255*dl2+.04*nn,((skh>>8)&255)/255*dl2+.05*nn,((skh>>16)&255)/255*dl2+.12*nn);\nconst dfr=(ex.dayt&&ex.dlen)?Number(ex.dayt())/Math.max(1,Number(ex.dlen())):.3;\nconst az=Math.PI*(1.-dfr*1.6);const el=Math.asin(Math.max(-.99,Math.min(.99,sel)));\nlet sdx=Math.cos(el)*Math.cos(az),sdy=Math.sin(el),sdz=Math.cos(el)*.45;\nconst sdl=Math.hypot(sdx,sdy,sdz)||1;\nwindow.__sund=[sdx/sdl,sdy/sdl,sdz/sdl];g.uniform3f(L(\"uSunD\"),sdx/sdl,sdy/sdl,sdz/sdl);if(window.__sunt){const s7=window.__sunt;const mu9=Math.max(0,sdy/sdl),f9=mu9*63,i9=Math.min(62,Math.floor(f9)),t9=f9-i9;g.uniform3f(L(\"uSunC\"),s7[i9*3]*(1-t9)+s7[i9*3+3]*t9,s7[i9*3+1]*(1-t9)+s7[i9*3+4]*t9,s7[i9*3+2]*(1-t9)+s7[i9*3+5]*t9);}\ng.uniform1i(L(\"uSun\"),(Number(dv.getBigInt64(SPC+9*8,true))===1&&df>.04)?1:0);\nconst wxT=Number(dv.getBigInt64(SPC+14*8,true)),wxX=Number(dv.getBigInt64(SPC+12*8,true)),wxZ=Number(dv.getBigInt64(SPC+13*8,true)),wxC=Number(dv.getBigInt64(SPC+11*8,true));\ng.uniform1i(L(\"uWxT\"),wxT);g.uniform2f(L(\"uWxW\"),wxX/4096,wxZ/4096);g.uniform1f(L(\"uWxC\"),wxC/4096);\n" as *u8)
1811    p = gpe_sunt(out, p)
1812    p = gpe_ap(out, p, "window.__wxw=[wxX/4096,wxZ/4096,wxT,wxC/4096];\ng.uniform1i(L(\"uRain\"),ex.rainf?Number(ex.rainf()):0);\ng.uniform1i(L(\"uCld\"),Number(dv.getBigInt64(SPC+10*8,true)));\n" as *u8)
1813    p = gpe_ap(out, p, "g.uniform3f(L(\"uCam\"),Number(ex.camx())/256,Number(ex.camy())/256,Number(ex.camz())/256);\nconst ya=Number(ex.yaw())/4096,pi2=Number(ex.pitch())/4096;\ng.uniform4f(L(\"uYP\"),Math.sin(ya),Math.cos(ya),Math.sin(pi2),Math.cos(pi2));\ng.uniform1f(L(\"uT\"),Number(ex.tnow()));\ng.uniform1i(L(\"uWmax\"),Number(ex.wmax()));\ng.uniform1i(L(\"uSelB\"),Number(ex.tsel()));\ng.uniform1i(L(\"uHok\"),Number(ex.hok()));\ng.uniform2f(L(\"uRes\"),cv.width,cv.height);\nconst nm=Number(ex.mobs());\ng.uniform1i(L(\"uNpcT\"),ex.npc_t?Number(ex.npc_t()):-1);\ng.disable(g.DEPTH_TEST);\ng.drawArrays(g.TRIANGLES,0,3);\nif(GL.npc&&GL.npc.ok&&nm>0){drawNPCs(g,nm);drawEyes(g);}\nif(GL.npc&&GL.npc.ok)drawDonors(g);\n// ONE call. This line was DOUBLED -- two byte-identical consecutive calls with no state change\n// between them -- so every visiting donor was submitted TWICE per frame, its draw calls and its\n// triangles both. Nothing in the page could disagree: there was no per-frame draw-call or triangle\n// counter, and a second pass over identical geometry at identical depth is invisible on s
nx_game_page_authored_material_t54.nx source

`nx_game_page_authored_material_t54.nx` source
