`nx_world_snap.nx` source

↩ module page · 737 lines · 43394 B
1// nx_world_snap.nx -- THE WORLD-ART CAPTURE INSTRUMENT (operator 2026-08-12: "make sure you are
2// running the tools to evaluate the art and realism and quality"). The W1b style overlay applies
3// in the BROWSER page only, so no estate instrument had ever SEEN a styled world -- this organ
4// renders any (identity, seed, style-rows) world NATIVELY through the same engine source the wasm
5// is compiled from (nx_wasm_craft as a lib; its 54-tooth gate is the native-behavior proof), and
6// writes the frame as PNG for the judge battery (nx_uiq_visual analyze / nx_frame_score / eye).
7// The style poke here is semantically what the page's NXSP loop does: sp[idx]=val post-init,
8// idx bounded 7..58 (same belt as the page).
9// usage: nx_world_snap <out.png> [v] [seed] [style idx:val,...] [ticks]
10// exit: 0 written+read-back | 2 usage | 5 png-write-fail. license_tier: ORIGINAL
11// No hw writes (Rule 26).
12import "nx_wasm_craft.nx"
13import "nx_genp_allow_lib.nx"     // THE ONE gen-time allowlist (2026-09-04): the g8 chain below was a mirrored copy and it is now the same ruler the engine reads
14import "nx_png_write.nx"
15import "_hdl_build/nx_nxfh_lib.nx"
16const K_MAGIC_20260728: i64 = 20260728
17const K_MAGIC_4096: i64 = 4096
18const K_MAGIC_65536: i64 = 65536
19const K_MODE_RW: i64 = 420              // 0644 -- the .d16 raw depth plane, same mode nx_png_write uses
20// ★RESOLUTION POLICY CONSTANTS. None of these is a tuning number.
21// wc_rw(base) = W/q and wc_rh(base) = H/q, so q=1 IS one ray per pixel -- the engine's OWN definition
22// of native. The ceiling W x H is itself derived (nx_wasm_craft's const W: the page's min(98vw,1920px)
23// display cap), so no resolution literal below is chosen by hand.
24const WS_Q_NATIVE: i64 = 1
25const WS_CH_Q: i64 = 113                // ASCII 'q' -- first byte of the `q=<n>` reduction keyword
26const WS_CH_EQ: i64 = 61                // ASCII '='
27const WS_PERMIL: i64 = 1000             // permil base for the announced resolution fraction
28// The `q=` keyword is exactly the two named bytes above, so its length is a property of the keyword
29// rather than a number to remember: the scan resumes at the first byte AFTER them.
30const WS_QKW_LEN: i64 = 2
31const WS_CURSOR_BYTES: i64 = 16         // one i64 cursor cell, page-rounded by mmap
32// THE PERCEPT ANCHOR GEOMETRY. nx_percept's entire anchor corpus declares NXFH1 400 240 -- all twelve
33// of them -- so a 1920x1200 capture is scoreable by nx_frame_score and comparable to NOTHING in the
34// perceptual corpus. These two numbers are that corpus's shape, not a taste: they are the size the
35// consumer already publishes, and the downsample factor below is DERIVED from them against the
36// engine's own native ceiling rather than chosen.
37const WS_PERCEPT_W: i64 = 400
38const WS_PERCEPT_H: i64 = 240
39// The PORTRAIT SUBJECT'S GENOME is DERIVED FROM THE SEED, never chosen: every other appearance in
40// this organ is a deterministic function of (identity, seed), and a hand-picked genome would make
41// one girl's look a property of the instrument rather than of the world being judged. The genome
42// WIDTH is the engine's own (WATER_MAGIC_1048576, the modulus genmobs itself uses), read from the
43// engine rather than restated here, so the two can never disagree about how wide a genome is.
44// ★NAMED FOR THEIR PURPOSE, NOT THEIR VALUE (rule 11). Both were inline literals that predate this
45// lane: the magic ratchet reported magic=5 against a banked baseline of 0, so NO build of this organ
46// could ship until they were named -- a permanently-refusing gate on the estate's world-capture
47// instrument, and the refusal correctly named literals whose author was long gone. Fixed rather than
48// bypassed: a ratchet is only worth having if its author fixes what it finds.
49// The .d16 ground-truth plane stores each depth sample as a little-endian UNSIGNED 16-BIT word, so
50// its saturation value is a property of the format, not a tuning choice.
51const WS_D16_MAX: i64 = 65535
52// The normal channel normalises an integer gradient by binary-searching isqrt(m2). m2 is a sum of
53// three squares of clamped gradient terms, so bounding `hi` at 2^32 keeps mid*mid inside i64 for
54// every input the loop can be handed -- an OVERFLOW bound, not a magnitude guess.
55const WS_ISQRT_HI_BOUND: i64 = 4294967296
56// The engine's native ceiling, read through FUNCTION scope on purpose: main() later declares its own
57// `let W` for the RENDERED extent, and a single-pass compiler resolving one name to two different
58// things inside one body is exactly how a measurement silently reports the wrong subject.
59func ws2_natw() -> i64 { return W }
60func ws2_nath() -> i64 { return H }
61
62func ws2_slen(s: *u8) -> i64 { var n: i64 = 0; while s[n] != (0 as u8) { n = n + 1 } return n }
63func ws2_puts(s: *u8) -> i64 { sys_write(1, s, ws2_slen(s)); return 0 }
64func ws2_pn(v: i64) -> i64 {
  if v == 0 { sys_write(1, "0" as *u8, 1); return 0 }
  var m: i64 = v
  if m < 0 { sys_write(1, "-" as *u8, 1); m = 0 - m }
  let t: *u8 = sys_mmap(32)
  var k: i64 = 0
  while m > 0 { t[k] = (48 + (m % 10)) as u8; m = m / 10; k = k + 1 }
  let o: *u8 = sys_mmap(32)
  var i: i64 = 0
  while i < k { o[i] = t[k - 1 - i]; i = i + 1 }
  sys_write(1, o, k)
  return 0
76}
77func ws2_int(s: *u8) -> i64 {
  var v: i64 = 0
  var i: i64 = 0
  while s[i] != (0 as u8) {
      let c: i64 = s[i] as i64
      if c >= 48 { if c <= 57 { v = v*10 + (c - 48) } }
      i = i + 1
  }
  return v
86}
87func ws2_num_at(s: *u8, pos: *i64) -> i64 {
  var v: i64 = 0
  var i: i64 = pos[0]
  var run: i64 = 1
  while run == 1 {
      let c: i64 = s[i] as i64
      if c >= 48 { if c <= 57 { v = v*10 + (c-48); i = i + 1 } else { run = 0 } } else { run = 0 }
  }
  pos[0] = i
  return v
97}
98
99func ws2_streq(a: *u8, b: *u8) -> i64 {
  var i: i64 = 0
  while a[i] != (0 as u8) {
      if a[i] != b[i] { return 0 }
      i = i + 1
  }
  if b[i] != (0 as u8) { return 0 }
  return 1
107}
108
109func main(argc: i64, argv: *i64) -> i64 {
  // ★THE `char` VERB SHIFTS EVERY LATER ARGUMENT BY ONE AND CHANGES NOTHING ELSE ON THE WORLD PATH
  // (ao=0 there, so its argv indices are literally unchanged -- proven by behaveprobe IDENTICAL before
  // promote, which is also the experiment that caught the ARENA-0 extent defect this organ carried:
  // the first landing of this verb crashed, a full revert STILL crashed at the same address, and that
  // is what proved the fault was ww()/hh() reading a foreign arena rather than this change).
  // "char" cannot collide with the world path's first argument because that argument is an output PATH.
  var ao: i64 = 0
  var charmode: i64 = 0
  if argc > 1 { if ws2_streq(argv[1] as *u8, "char" as *u8) == 1 { charmode = 1; ao = 1 } }
  // ws_groundtruth_emit -- THE DATASET-FACTORY VERB (/compare/graphics contract row, 2026-08-18):
  // gt renders the identical world path with the engine's zero-cost depth plane KEPT (S_GT_KEEP), and
  // emits three ALIGNED channels beside the RGB: <out>.depth.png (16-bit gray, near = bright, the
  // engine's own 24-bit ray depth clamped to 16) and <out>.normal.png (screen-space normal from the
  // depth gradient, encoded 0..255 -- DERIVED from depth and labeled so; a G-buffer normal is the next
  // rung). Same argv shape as the world path after the verb. Infinigen's annotation pipeline is why its
  // datasets exist; this is that lane through OUR renderer, deterministic under the seed.
  var gtmode: i64 = 0
  if argc > 1 { if ws2_streq(argv[1] as *u8, "gt" as *u8) == 1 { gtmode = 1; ao = 1 } }
  if argc < 2 + ao {
      ws2_puts("usage: nx_world_snap <out.png> [v] [seed] [style idx:val,...] [ticks]\n" as *u8)
      ws2_puts("       nx_world_snap char <out.png> [v] [seed] [style idx:val,...] [ticks]  -- frame a girl (T59's placement)\n" as *u8)
      ws2_puts("       nx_world_snap gt <out.png> [v] [seed] [style idx:val,...] [ticks]    -- ground truth: +<out>.depth.png +<out>.normal.png\n" as *u8)
      return 2
  }
  let outp: *u8 = argv[1 + ao] as *u8
  var v: i64 = 0
  if argc > 2 + ao { v = ws2_int(argv[2 + ao] as *u8) }
  var seed: i64 = K_MAGIC_20260728
  if argc > 3 + ao { seed = ws2_int(argv[3 + ao] as *u8) }
  var ticks: i64 = 30
  if argc > 5 + ao { ticks = ws2_int(argv[5 + ao] as *u8) }
  let base: i64 = sys_mmap(CRAFT_TOTAL + K_MAGIC_4096) as i64
  // W1c: gen rows (0..6, 59, 60) in the SAME spec string are written into GENP *BEFORE* init --
  // without this a snap of a gen-row world renders the bare identity's terrain, i.e. the judge
  // measures the WRONG SUBJECT (debt 1786644871). The engine enforces the allowlist; the count
  // it actually applied is world truth (S_GENP) and is announced below.
  if argc > 4 + ao {
      let sp8: *u8 = argv[4 + ao] as *u8
      let gp8: *i64 = wgp(base)
      let pos8: *i64 = sys_mmap(16) as *i64
      pos8[0] = 0
      var gk8: i64 = 0
      var run8: i64 = 1
      while run8 == 1 {
          let iv8: i64 = ws2_num_at(sp8, pos8)
          if sp8[pos8[0]] != (58 as u8) { run8 = 0 } else {
              pos8[0] = pos8[0] + 1
              let vv8: i64 = ws2_num_at(sp8, pos8)
              // THE ONE ALLOWLIST (nx_genp_allow_lib, 2026-09-04): the engine's own ruler, read here instead of mirrored.
              let g8: i64 = genp_gen_ok(iv8)
              // 2026-09-01 this filter mirrored init_impl_v's chain index-for-index and named itself a DUPLICATE RULER
              // (debt 1788294505); 2026-09-04 the root fix landed -- nx_genp_allow_lib is the one list the engine, this
              // instrument and the page emitter all read, so an index admitted to the engine is seen here by construction.
              if g8 == 1 { if gk8 < GENP_MAXP {
                  gp8[2 + gk8*2] = iv8
                  gp8[3 + gk8*2] = vv8
                  gk8 = gk8 + 1
              } }
              if sp8[pos8[0]] == (44 as u8) { pos8[0] = pos8[0] + 1 } else { run8 = 0 }
          }
      }
      if gk8 > 0 { gp8[0] = GENP_MAGIC; gp8[1] = gk8 }
  }
  init_impl_v(base, v, seed)
  // ---- style poke: the page's NXSP loop, natively; applied count ANNOUNCED ----
  var applied: i64 = 0
  if argc > 4 + ao {
      let sp7: *u8 = argv[4 + ao] as *u8
      let sp: *i64 = wsp(base)
      let pos: *i64 = sys_mmap(16) as *i64
      pos[0] = 0
      var run: i64 = 1
      while run == 1 {
          let iv: i64 = ws2_num_at(sp7, pos)
          if sp7[pos[0]] != (58 as u8) { run = 0 } else {
              pos[0] = pos[0] + 1
              let vv: i64 = ws2_num_at(sp7, pos)
              if iv >= 7 { if iv <= 58 { sp[iv] = vv; applied = applied + 1 } }
              if sp7[pos[0]] == (44 as u8) { pos[0] = pos[0] + 1 } else { run = 0 }
          }
      }
  }
  var t: i64 = 0
  while t < ticks { tick_impl(base, 16); t = t + 1 }
  // ★FULL RESOLUTION IS THE DEFAULT ON EVERY PATH, NOT ONLY ON `char` (operator 2026-08-28: "when you
  // screenshot it needs to be full resolution not this bullshit sampled tiny stuff make sure this is
  // true everywhere, we are fine with the cost to make sure the product is the best it can be").
  // The `char` verb ALREADY set q=1 and derived exactly why (its comment is below, unchanged). The
  // WORLD path and the `gt` DATASET-FACTORY path did NOT, so they rendered at whatever the browser's
  // adaptive frame-time controller happened to land on during the tick loop above.
  // MEASURED 2026-08-28 on the bare default invocation: w=240 h=150 -- q=8, i.e. 36,000 of the
  // engine's 2,304,000 native pixels (15 permil of the product's own resolution). Two things follow
  // and both are defects: the published product frame (nx_world_emit -> /world/emit_craft.png) shipped
  // at 240x150, and every art verdict taken from this instrument was a verdict about 1/64 of the
  // picture. ★A CAPTURE WHOSE RESOLUTION IS SET BY A LOAD-SENSITIVE GOVERNOR MAKES EVERY VERDICT A
  // FUNCTION OF BOX LOAD RATHER THAN OF THE SUBJECT -- and it fails toward LESS evidence exactly when
  // the estate is busiest, which is when nobody has time to notice.
  // A REDUCTION IS STILL AVAILABLE AND MUST BE ASKED FOR BY NAME: `q=<n>` anywhere in argv. It is a
  // KEYWORD, never a positional, because every positional index here is load-bearing (nx_world_emit
  // forks this organ on a fixed 5-arg contract) and a new slot would silently reinterpret an existing
  // caller's arguments. The chosen q and the resulting fraction of native are ANNOUNCED below, so a
  // reduced capture can never pass itself off as a full one.
  let wsq: *i64 = wst(base)
  var qsel: i64 = WS_Q_NATIVE
  var qk: i64 = 1
  while qk < argc {
      let av: *u8 = argv[qk] as *u8
      if av[0] == (WS_CH_Q as u8) { if av[1] == (WS_CH_EQ as u8) {
          let qp: *i64 = sys_mmap(WS_CURSOR_BYTES) as *i64
          qp[0] = WS_QKW_LEN
          let qv: i64 = ws2_num_at(av, qp)
          if qv >= WS_Q_NATIVE { qsel = qv }
      } }
      qk = qk + 1
  }
  // clamp to the ENGINE's own declared range instead of declaring a second one: two guards for one
  // invariant is the duplicate-ruler defect, and the engine is the owner of what q may be.
  if qsel > Q_MAX { qsel = Q_MAX }
  wsq[S_Q] = qsel
  // THE `percept` KEYWORD, scanned anywhere in argv for exactly the reason `q=` is: every positional
  // index in this organ is load-bearing (nx_world_emit forks it on a fixed 5-arg contract) and a new
  // slot would silently reinterpret an existing caller's arguments. Put it LAST, after ticks.
  var perceptmode: i64 = 0
  var pck: i64 = 1
  while pck < argc {
      if ws2_streq(argv[pck] as *u8, "percept" as *u8) == 1 { perceptmode = 1 }
      pck = pck + 1
  }
  // ★CHARACTER FRAMING. The world snapshot renders whatever the spawn camera happens to face, and
  // MEASURED 2026-08-15 that frames no girl at all: judging craft before and after a genome-shading
  // change returned BYTE-IDENTICAL axes -- composition 246, palette 343, contour 933,
  // palette_buckets 176, edge_total 10761 -- because the subject was never in the picture. A referee
  // is only as good as the frame it is handed, and a capture that cannot see a character cannot grade
  // character work no matter how good the judge is.
  // The placement recipe is T59's (stand her along the camera forward axis, on the ground, camera at
  // eye height) -- but the DISTANCE diverged from the tooth's on 2026-08-16, deliberately and declared
  // on the board BEFORE it moved: T59 proves VISIBILITY at gameplay distance (4 blocks), while this
  // instrument takes a PORTRAIT for the figure judge, and the two subjects earn different framings.
  // The portrait distance is DERIVED, not tasted: composition needs shaded regions wider than the
  // judge's 16px cell, so the torso (diameter 2*chest radius = 44 q8) must span >= 2 cells (32px);
  // at q=1 (foc = 600) that requires vz <= 44*600/32 = 825 q8, and TWO BLOCKS (512) gives a 51px
  // torso -- about 3 cells with margin -- while her 308px height still fits the 750px frame.
  // ⚠CALIBRATION BREAK: crop numbers before/after this change are NOT comparable; the flat-vs-lit
  // delta was completed at the old distance first, precisely so this break costs no history.
  // Every other girl is parked far away so the judge's numbers are attributable to HER, not a crowd --
  // the same reason T59 moves them all for its negative control.
  var framed: i64 = 0
  var framed_gy: i64 = 0 - 1
  // DENOMINATOR FOR THE FRAMING CLAIM. framed=1 used to mean only "a ground cell was found and
  // en_nth(mc,0) returned a positive handle" -- and en_nth over an EMPTY store still hands back a
  // positive-looking handle, so an empty cast framed=1 with nothing in the picture to frame.
  // MEASURED 2026-09-01 on the beach: CHAR-FRAME framed=1 ground_y=11 followed immediately by
  // CHAR-CROP pixels=0, because genmobs only places a girl on a cell whose block is GRASS
  // (vget == 1) below the snow line -- a sand world spawns no cast at all, and the framing tooth
  // could not tell "she is standing there" from "there is nobody in this world".
  var framed_mobs: i64 = 0 - 1
  var framed_spawned: i64 = 0
  if charmode == 1 {
      let sc: *i64 = wst(base)
      let mc: *i64 = mobp(base)
      sc[S_PITCH] = 0
      // ★NATIVE CAPTURE AFFORDS FULL RESOLUTION. The browser's adaptive controller trades rays for
      // frame time; this instrument runs once, offline, so it renders at q=1. At the adaptive default
      // the girl is ~180px of a 36,000px frame -- below the judge's 16px cell statistics -- and a
      // subject crop of that is a handful of cells. At q=1 she is thousands of pixels: a real subject
      // image. Announced in the WORLD-SNAP line via w=/h=, so a capture that silently fell back to the
      // small frame is visible.
      // ★THE SETTER MOVED OUT OF THIS BRANCH ON 2026-08-28 AND NOW SERVES EVERY PATH (see the block
      // after the tick loop). It was correct here and absent from its two siblings -- the world path
      // and the `gt` dataset factory -- which is a third of a fix, and the two left undone were the
      // art-verdict path and the training-data factory. The literal "1200x750" this comment used to
      // quote was ALSO stale: the engine ceiling has been 1920x1200 since the render cap was derived
      // from the page's own display cap, so the number that justified the rule had drifted from the
      // rule. Nothing is set here now, deliberately: one owner of q, not two.
      let fxc: i64 = it_sin4096(sc[S_YAW])
      let fzc: i64 = it_cos4096(sc[S_YAW])
      let txc: i64 = sc[S_CX] + fxc*2*256/K_MAGIC_4096
      let tzc: i64 = sc[S_CZ] + fzc*2*256/K_MAGIC_4096
      let gyc: i64 = mob_ground(base, txc/256, WY-1, tzc/256)
      framed_mobs = en_count(mc)
      // THE PORTRAIT VERB OWNS ITS SUBJECT. If the world's own generator placed no cast, this
      // instrument spawns exactly one and says so -- so a portrait of an EMPTY world can never be
      // mistaken for a portrait of an inhabited one, and the figure judge is never handed scenery
      // and asked to grade a character. A world that already has a cast is untouched: this branch
      // cannot run there, so the behaviour of every existing caller is unchanged by construction.
      if framed_mobs == 0 { if gyc >= 0 {
          let hn0: i64 = en_spawn(mc)
          if hn0 > 0 {
              en_set(mc, hn0, MC_KIND, 0)
              en_set(mc, hn0, MC_PH, 0)
              en_set(mc, hn0, MC_DISG, 0)
              en_set(mc, hn0, MC_GENE, seed % WATER_MAGIC_1048576)
              framed_spawned = 1
              framed_mobs = en_count(mc)
          }
      } }
      // BIND THE HANDLE TO THE COUNT: over an empty store en_nth answers a handle that looks valid,
      // which is exactly how framed=1 was published for a world with nobody in it.
      var hc: i64 = 0
      if framed_mobs > 0 { hc = en_nth(mc, 0) }
      framed_gy = gyc
      if gyc >= 0 { if hc > 0 {
          var kc: i64 = 1
          while kc < en_count(mc) {
              let hk: i64 = en_nth(mc, kc)
              if hk > 0 { en_set(mc, hk, MC_X, 256); en_set(mc, hk, MC_Z, 256) }
              kc = kc + 1
          }
          en_set(mc, hc, MC_X, txc)
          en_set(mc, hc, MC_Z, tzc)
          en_set(mc, hc, MC_Y, (gyc+1)*256)
          // SEAT THE CAMERA ON THE HIGHER OF THE TWO COLUMNS, NEVER BLINDLY ON THE SUBJECT'S.
          // This line used to read `sc[S_CY] = (gyc+1)*256 + 128` -- the camera was re-seated onto the
          // ground height of a column TWO BLOCKS AWAY. Where that column is LOWER than the one the
          // camera stands on, the camera is planted inside its own column's top block and the subject
          // is occluded by the terrain between them. MEASURED 2026-09-01, and it is the WHOLE of the
          // CHAR-CROP pixels=0 defect: on craft (cam_ground 20 == subj_ground 20) the crop measures
          // 1866 subject pixels and on vale (29 == 29) 1990, while on beach and isle -- the only two
          // shipped worlds where the two DIFFER (12 vs 11) -- it measured exactly 0, at every q from
          // 1 to 8. Taking the MAXIMUM is BYTE-NEUTRAL wherever they are equal, which is every world
          // that already worked, so the fix cannot regress a capture that was already correct.
          var seat_gy: i64 = gyc
          let cam_gy0: i64 = mob_ground(base, sc[S_CX]/256, WY-1, sc[S_CZ]/256)
          if cam_gy0 > seat_gy { seat_gy = cam_gy0 }
          sc[S_CY] = (seat_gy+1)*256 + 128
          framed = 1
          // ATTRIBUTION FOR AN EMPTY CROP. CHAR-CROP pixels=0 says only "the two renders agree"; it
          // cannot say WHICH conjunct of "a subject is in this picture" failed, and a bare 0 reads as
          // "the crop is broken" when it may equally mean "she was placed somewhere the camera cannot
          // see". These four numbers separate those: cam_ground vs subj_ground says whether the camera
          // was re-seated onto a column two blocks away that is LOWER than the one it stands on (which
          // buries it inside the spawn column), and subj_vz_q8 is her view-space depth in the SAME q8
          // units mob_draw's own visibility window uses. The window itself is deliberately NOT restated
          // here: a second copy of the engine's bounds is a duplicate ruler that drifts silently. Pitch
          // is zero on this path by construction three lines above, so forward reduces to (sin, 0, cos).
          let cam_gy: i64 = mob_ground(base, sc[S_CX]/256, WY-1, sc[S_CZ]/256)
          let dqx: i64 = txc - sc[S_CX]
          let dqz: i64 = tzc - sc[S_CZ]
          let fvx: i64 = it_sin4096(sc[S_YAW])
          let fvz: i64 = it_cos4096(sc[S_YAW])
          let vzq: i64 = (dqx*fvx + dqz*fvz)/K_MAGIC_4096
          ws2_puts("CHAR-GEOM cam_ground=" as *u8); ws2_pn(cam_gy)
          ws2_puts(" subj_ground=" as *u8); ws2_pn(gyc)
          ws2_puts(" cam_y_q8=" as *u8); ws2_pn(sc[S_CY])
          ws2_puts(" subj_y_q8=" as *u8); ws2_pn((gyc+1)*256)
          ws2_puts(" subj_vz_q8=" as *u8); ws2_pn(vzq)
          ws2_puts("\n" as *u8)
      } }
  }
  // ★BIND THE POINTER, THEN INDEX IT. `wst(base)[S_GT_KEEP] = 1` does not parse as an assignment
  // target in this dialect -- the parser closes the expression after the postfix index and then meets
  // a bare `=` (token kind=45, "an operator starts this expression"). MEASURED 2026-08-28: this line
  // failed EVERY build of this organ, so the `gt` ground-truth verb could not be compiled at all and
  // the served binary predates it. The compiler's own remedy is the one taken here, and it is the
  // idiom this file already uses three lines up (`let sc: *i64 = wst(base)`).
  if gtmode == 1 {
      let gts: *i64 = wst(base)
      gts[S_GT_KEEP] = 1
  }
  render_impl(base)
  // ANNOUNCE THE FRAMING so its ABSENCE is visible in normal output -- a capture that silently fell
  // back to the world view is exactly how a null measurement gets read as a real one.
  if charmode == 1 {
      ws2_puts("CHAR-FRAME framed=" as *u8); ws2_pn(framed)
      ws2_puts(" ground_y=" as *u8); ws2_pn(framed_gy)
      ws2_puts(" mobs=" as *u8); ws2_pn(framed_mobs)
      ws2_puts(" spawned=" as *u8); ws2_pn(framed_spawned)
      ws2_puts("\n" as *u8)
  }
  // ★SUBJECT CROP: THE DIFF *IS* THE GIRL. T63's proven recipe promoted into the capture instrument:
  // bank the framed render, park her, render the SAME scene without her, and every differing pixel is
  // attributable to HER -- so the crop rectangle is MEASURED, never guessed, and the frame-level judge
  // can finally be pointed at the subject instead of at 36,000 pixels of scenery it already scored.
  // The margin is CHJ-cell-derived at the call site (the judge's own 16px composition cell), not a
  // taste constant. A framed=1 run with ZERO differing pixels announces pixels=0 and writes NO crop --
  // a capture that silently fell back to scenery is exactly how a null measurement reads as a real one.
  if charmode == 1 { if framed == 1 {
      let cw3: i64 = wc_rw(base)
      let ch3: i64 = wc_rh(base)
      let np3: i64 = cw3*ch3
      let fbm: *i64 = wfb(base)
      let s1: *i64 = sys_mmap(np3*8) as *i64
      var c1: i64 = 0
      while c1 < np3 { s1[c1] = fbm[c1]; c1 = c1 + 1 }
      // park the subject, re-render the identical scene
      let mc2: *i64 = mobp(base)
      let hc2: i64 = en_nth(mc2, 0)
      en_set(mc2, hc2, MC_X, 256)
      en_set(mc2, hc2, MC_Z, 256)
      render_impl(base)
      var cnt3: i64 = 0
      var bx0: i64 = cw3
      var bx1: i64 = 0 - 1
      var by0: i64 = ch3
      var by1: i64 = 0 - 1
      var d3: i64 = 0
      while d3 < np3 {
          if s1[d3] != fbm[d3] {
              cnt3 = cnt3 + 1
              let qx: i64 = d3 % cw3
              let qy: i64 = d3 / cw3
              if qx < bx0 { bx0 = qx }
              if qx > bx1 { bx1 = qx }
              if qy < by0 { by0 = qy }
              if qy > by1 { by1 = qy }
          }
          d3 = d3 + 1
      }
      // restore the FRAMED image into the fb so the main PNG below is the picture with her in it
      c1 = 0
      while c1 < np3 { fbm[c1] = s1[c1]; c1 = c1 + 1 }
      sys_munmap(s1 as *u8, np3*8)
      ws2_puts("CHAR-CROP pixels=" as *u8); ws2_pn(cnt3)
      if cnt3 > 0 { if bx1 >= bx0 { if by1 >= by0 {
          // margin = one judge composition cell (16px) of surrounding context on every side, clamped:
          // derived from the consumer's own cell size, so the crop always hands the judge at least one
          // ring of non-subject cells to hold composition against
          var mx0: i64 = bx0 - 16
          var my0: i64 = by0 - 16
          var mx1: i64 = bx1 + 16
          var my1: i64 = by1 + 16
          if mx0 < 0 { mx0 = 0 }
          if my0 < 0 { my0 = 0 }
          if mx1 > cw3-1 { mx1 = cw3-1 }
          if my1 > ch3-1 { my1 = ch3-1 }
          let ww4: i64 = mx1 - mx0 + 1
          let hh4: i64 = my1 - my0 + 1
          let fillb: i64 = (bx1-bx0+1)*(by1-by0+1)
          var fillp3: i64 = 0
          if fillb > 0 { fillp3 = cnt3*1000/fillb }
          ws2_puts(" bbox=" as *u8); ws2_pn(bx0); ws2_puts("," as *u8); ws2_pn(by0)
          ws2_puts("," as *u8); ws2_pn(bx1); ws2_puts("," as *u8); ws2_pn(by1)
          ws2_puts(" fill_permil=" as *u8); ws2_pn(fillp3)
          // crop path = <out>.crop.png -- a derived sibling, so one capture yields the pair the two
          // judges need: the frame for scene teeth, the crop for FIGURE quality
          let cpath: *u8 = sys_mmap(512)
          var co: i64 = 0
          while outp[co] != (0 as u8) { cpath[co] = outp[co]; co = co + 1 }
          let csfx: *u8 = ".crop.png" as *u8
          var cs2: i64 = 0
          while csfx[cs2] != (0 as u8) { cpath[co+cs2] = csfx[cs2]; cs2 = cs2 + 1 }
          cpath[co+cs2] = 0 as u8
          let crgb: *u8 = sys_mmap(ww4*hh4*3 + 16)
          var ry: i64 = 0
          while ry < hh4 {
              var rx2: i64 = 0
              while rx2 < ww4 {
                  let spx: i64 = fbm[(my0+ry)*cw3 + mx0+rx2]
                  let di: i64 = (ry*ww4 + rx2)*3
                  crgb[di]   = (spx % 256) as u8
                  crgb[di+1] = ((spx/256) % 256) as u8
                  crgb[di+2] = ((spx/K_MAGIC_65536) % 256) as u8
                  rx2 = rx2 + 1
              }
              ry = ry + 1
          }
          nx_png_write_rgb(cpath, crgb, ww4, hh4)
          sys_munmap(crgb, ww4*hh4*3 + 16)
          ws2_puts(" crop=" as *u8); ws2_pn(ww4); ws2_puts("x" as *u8); ws2_pn(hh4)
          ws2_puts(" wrote=" as *u8); ws2_puts(cpath)
      } } }
      ws2_puts("\n" as *u8)
  } }
  // ★READ THE EXTENT OF THE ARENA THIS ORGAN ACTUALLY RENDERED, NOT ARENA 0. ww()/hh() are the wasm
  // export surface and are hardwired to arena 0 -- wc_rw(0)/wc_rh(0) -- while every render above goes
  // into `base`, a fresh mmap this organ never registered as arena 0. The two agreed by luck; when they
  // stopped agreeing the RGB loop below walked W*H words over a framebuffer of a different size and the
  // process took SIGSEGV at an address ~1.15 MB out of range. MEASURED 2026-08-15: a full revert of this
  // organ did NOT fix it, which is what proved the fault was the ARENA MISMATCH and not the change on
  // top of it -- an unrelated edit to the craft module shifted arena 0's contents and turned a latent
  // wrong-subject read into a fatal one.
  // wc_rw/wc_rh take the base precisely so this cannot happen; the gate's own T58 already measures the
  // written extent that way.
  let W: i64 = wc_rw(base)
  let H: i64 = wc_rh(base)
  let fb: *i64 = wfb(base)
  let rgb: *u8 = sys_mmap(W*H*3 + 16)
  var p: i64 = 0
  while p < W*H {
      let px: i64 = fb[p]
      rgb[p*3]   = (px % 256) as u8
      rgb[p*3+1] = ((px/256) % 256) as u8
      rgb[p*3+2] = ((px/K_MAGIC_65536) % 256) as u8
      p = p + 1
  }
  nx_png_write_rgb(outp, rgb, W, H)
  if gtmode == 1 {
      // DEPTH CHANNEL: bits 32..55 of every framebuffer word (FB_DEPTH_SHIFT/FB_DEPTH_MAX are the
      // engine's own names). Sky/miss rays carry FB_DEPTH_MAX. Two artifacts per channel: a PNG for eyes
      // (8-bit gray = depth >> 16, near bright) and a raw little-endian u16 plane (.d16) with the exact
      // 24->16 clamped values, W*H*2 bytes, no header -- the dataset consumer reads W,H from the announce.
      let dp: *i64 = sys_mmap(W*H*8 + 16) as *i64
      var gq: i64 = 0
      var gmin: i64 = FB_DEPTH_MAX
      var gmax: i64 = 0
      var ghit: i64 = 0
      while gq < W*H {
          let d24: i64 = (fb[gq] / (K_MAGIC_65536*K_MAGIC_65536)) & FB_DEPTH_MAX
          dp[gq] = d24
          if d24 < FB_DEPTH_MAX { ghit = ghit + 1; if d24 < gmin { gmin = d24 } if d24 > gmax { gmax = d24 } }
          gq = gq + 1
      }
      // depth PNG (gray) + raw u16
      let dpng: *u8 = sys_mmap(W*H*3 + 16)
      let d16: *u8 = sys_mmap(W*H*2 + 16)
      gq = 0
      while gq < W*H {
          var d16v: i64 = dp[gq] / 256
          if d16v > WS_D16_MAX { d16v = WS_D16_MAX }
          let inv: i64 = WS_D16_MAX - d16v
          let g8: i64 = inv / 256
          dpng[gq*3] = g8 as u8; dpng[gq*3+1] = g8 as u8; dpng[gq*3+2] = g8 as u8
          d16[gq*2] = (d16v % 256) as u8; d16[gq*2+1] = (d16v / 256) as u8
          gq = gq + 1
      }
      let dpp: *u8 = sys_mmap(512)
      var dq: i64 = 0
      while outp[dq] != (0 as u8) { dpp[dq] = outp[dq]; dq = dq + 1 }
      var dsx: *u8 = ".depth.png" as *u8
      var dq2: i64 = 0
      while dsx[dq2] != (0 as u8) { dpp[dq+dq2] = dsx[dq2]; dq2 = dq2 + 1 }
      dpp[dq+dq2] = 0 as u8
      nx_png_write_rgb(dpp, dpng, W, H)
      ws2_puts("GT-DEPTH wrote=" as *u8); ws2_puts(dpp)
      ws2_puts(" hits=" as *u8); ws2_pn(ghit); ws2_puts(" of=" as *u8); ws2_pn(W*H)
      ws2_puts(" dmin=" as *u8); ws2_pn(gmin); ws2_puts(" dmax=" as *u8); ws2_pn(gmax); ws2_puts("\n" as *u8)
      dsx = ".d16" as *u8
      dq2 = 0
      while dsx[dq2] != (0 as u8) { dpp[dq+dq2] = dsx[dq2]; dq2 = dq2 + 1 }
      dpp[dq+dq2] = 0 as u8
      let dfd: i64 = sys_openat_wr(dpp, K_MODE_RW)
      if dfd >= 0 { sys_write(dfd, d16, W*H*2); sys_close(dfd); ws2_puts("GT-D16 wrote=" as *u8); ws2_puts(dpp); ws2_puts(" bytes=" as *u8); ws2_pn(W*H*2); ws2_puts(" w=" as *u8); ws2_pn(W); ws2_puts(" h=" as *u8); ws2_pn(H); ws2_puts("\n" as *u8) }
      // NORMAL CHANNEL, DERIVED FROM DEPTH: central differences on the depth plane, n = normalize(-dx, -dy, k),
      // integer, encoded (n+1)*127. Miss rays get the flat (128,128,255). Labeled DERIVED in the announce.
      let npng: *u8 = sys_mmap(W*H*3 + 16)
      var ny: i64 = 0
      while ny < H {
          var nx: i64 = 0
          while nx < W {
              let ci: i64 = ny*W + nx
              var r8: i64 = 128
              var g8b: i64 = 128
              var b8: i64 = 255
              if dp[ci] < FB_DEPTH_MAX {
                  var xl: i64 = nx - 1
                  var xr: i64 = nx + 1
                  var yu: i64 = ny - 1
                  var yd: i64 = ny + 1
                  if xl < 0 { xl = 0 }
                  if xr >= W { xr = W - 1 }
                  if yu < 0 { yu = 0 }
                  if yd >= H { yd = H - 1 }
                  var dxv: i64 = dp[ny*W + xr] - dp[ny*W + xl]
                  var dyv: i64 = dp[yd*W + nx] - dp[yu*W + nx]
                  // a miss neighbour would inject a cliff; clamp gradient at the object edge
                  if dp[ny*W + xr] >= FB_DEPTH_MAX { dxv = 0 }
                  if dp[ny*W + xl] >= FB_DEPTH_MAX { dxv = 0 }
                  if dp[yd*W + nx] >= FB_DEPTH_MAX { dyv = 0 }
                  if dp[yu*W + nx] >= FB_DEPTH_MAX { dyv = 0 }
                  // scale: depth units per pixel step -- k = 2 pixel-steps in depth units at this
                  // resolution; derived from the frame width so it does not drift with q
                  let kz: i64 = 2 * (FB_DEPTH_MAX / (W * 4))
                  var ax: i64 = 0 - dxv
                  var ay: i64 = 0 - dyv
                  var az: i64 = kz
                  // integer normalize via isqrt
                  let m2: i64 = ax*ax + ay*ay + az*az
                  var m: i64 = 1
                  if m2 > 1 { var lo: i64 = 1; var hi: i64 = m2; if hi > WS_ISQRT_HI_BOUND { hi = WS_ISQRT_HI_BOUND } while lo < hi { let mid: i64 = (lo + hi + 1) / 2; if mid*mid <= m2 { lo = mid } else { hi = mid - 1 } } m = lo }
                  if m < 1 { m = 1 }
                  r8 = 128 + ax*127/m
                  g8b = 128 + ay*127/m
                  b8 = 128 + az*127/m
                  if r8 < 0 { r8 = 0 } if r8 > 255 { r8 = 255 }
                  if g8b < 0 { g8b = 0 } if g8b > 255 { g8b = 255 }
                  if b8 < 0 { b8 = 0 } if b8 > 255 { b8 = 255 }
              }
              npng[ci*3] = r8 as u8; npng[ci*3+1] = g8b as u8; npng[ci*3+2] = b8 as u8
              nx = nx + 1
          }
          ny = ny + 1
      }
      dsx = ".normal.png" as *u8
      dq2 = 0
      while dsx[dq2] != (0 as u8) { dpp[dq+dq2] = dsx[dq2]; dq2 = dq2 + 1 }
      dpp[dq+dq2] = 0 as u8
      nx_png_write_rgb(dpp, npng, W, H)
      ws2_puts("GT-NORMAL wrote=" as *u8); ws2_puts(dpp); ws2_puts(" derived=from-depth-gradient\n" as *u8)
  }
  // ALSO emit NXFH1 text-hex beside the PNG so nx_frame_score (the game-frame art critic)
  // can judge the same frame -- one capture, two judges (debt 1786578438 second opinion)
  let fhp: *u8 = sys_mmap(512)
  var fq: i64 = 0
  let a1: *u8 = outp
  while a1[fq] != (0 as u8) { fhp[fq] = a1[fq]; fq = fq + 1 }
  let sfx: *u8 = ".nxfh" as *u8
  var fq2: i64 = 0
  while sfx[fq2] != (0 as u8) { fhp[fq+fq2] = sfx[fq2]; fq2 = fq2 + 1 }
  fhp[fq+fq2] = 0 as u8
  // COMPOSE THE CODEC, DO NOT RE-TYPE IT. This block used to be a hand-rolled NXFH1 writer -- header,
  // decimal width/height, a 16-byte hex table and the row-end newline -- sitting beside
  // _hdl_build/nx_nxfh_lib.nx's nxl_dump(path, fb, w, h), which is the estate's ONE owner of that
  // format and does exactly this. Two writers for one format is the duplicate-ruler defect: the day
  // the format gains a field, one of them gets it. The fb layout already matched (packed
  // r | g<<8 | b<<16, compact at stride w), so the swap is a pure composition, and NEUTRALITY IS
  // PROVEN RATHER THAN ASSERTED -- the emitted .nxfh is byte-identical before and after, hashed both
  // sides. The writer's return is ANNOUNCED so a failed open is visible in normal output instead of
  // being swallowed by an `if fd >= 0` with no else.
  let fhn: i64 = nxl_dump(fhp, fb, W, H)
  ws2_puts("SNAP-NXFH bytes=" as *u8); ws2_pn(fhn)
  ws2_puts(" wrote=" as *u8); ws2_puts(fhp); ws2_puts("\n" as *u8)
  // PERCEPT ANCHOR CAPTURE -- the second consumer this instrument could not reach. nx_frame_score
  // eats any size; nx_percept compares against a corpus that is 400x240 in every anchor, so a native
  // capture was scoreable but NOT COMPARABLE. This emits the same frame at the anchor geometry.
  // THE FACTOR IS DERIVED, NOT RESAMPLED: pk is the largest integer with 400*pk <= W and 240*pk <= H
  // (here 4, because 5 would need 2000 columns of a 1920-column frame), so the reduction is an exact
  // pk x pk BOX AVERAGE over a centred 400*pk x 240*pk crop. Two consequences, both deliberate:
  // there is no interpolation kernel to choose, and the ASPECT IS NEVER SQUASHED -- the crop is taken
  // at the anchor's own aspect first. A straight rescale of 8:5 into 5:3 would distort every contour
  // the perceptual judge measures, which is the measure-the-wrong-subject defect wearing a resize.
  // The crop rectangle and the factor are ANNOUNCED so a reader can tell what was thrown away.
  if perceptmode == 1 {
      var pcpk: i64 = W/WS_PERCEPT_W
      if H/WS_PERCEPT_H < pcpk { pcpk = H/WS_PERCEPT_H }
      if pcpk < 1 {
          // A NAMED ABSENCE, NEVER A SILENT SKIP: a frame smaller than the anchor cannot be reduced
          // to it without inventing pixels, and inventing them would hand the judge a fabrication.
          ws2_puts("PERCEPT REFUSED render=" as *u8); ws2_pn(W); ws2_puts("x" as *u8); ws2_pn(H)
          ws2_puts(" anchor=" as *u8); ws2_pn(WS_PERCEPT_W); ws2_puts("x" as *u8); ws2_pn(WS_PERCEPT_H)
          ws2_puts(" -- the render is smaller than the anchor; upscaling would invent pixels\n" as *u8)
      } else {
          let pccw: i64 = WS_PERCEPT_W*pcpk
          let pcch: i64 = WS_PERCEPT_H*pcpk
          let pcox: i64 = (W - pccw)/2
          let pcoy: i64 = (H - pcch)/2
          let pcn: i64 = pcpk*pcpk
          let pcfb: *i64 = sys_mmap(WS_PERCEPT_W*WS_PERCEPT_H*8) as *i64
          let pcrgb: *u8 = sys_mmap(WS_PERCEPT_W*WS_PERCEPT_H*3 + 16)
          var pcy: i64 = 0
          while pcy < WS_PERCEPT_H {
              var pcx: i64 = 0
              while pcx < WS_PERCEPT_W {
                  var pcsr: i64 = 0
                  var pcsg: i64 = 0
                  var pcsb: i64 = 0
                  var pcby: i64 = 0
                  while pcby < pcpk {
                      var pcbx: i64 = 0
                      while pcbx < pcpk {
                          let pcsi: i64 = ((pcoy + pcy*pcpk + pcby)*W + pcox + pcx*pcpk + pcbx)*3
                          pcsr = pcsr + (rgb[pcsi] as i64)
                          pcsg = pcsg + (rgb[pcsi+1] as i64)
                          pcsb = pcsb + (rgb[pcsi+2] as i64)
                          pcbx = pcbx + 1
                      }
                      pcby = pcby + 1
                  }
                  let pcr: i64 = pcsr/pcn
                  let pcg: i64 = pcsg/pcn
                  let pcb: i64 = pcsb/pcn
                  let pcdi: i64 = (pcy*WS_PERCEPT_W + pcx)*3
                  pcrgb[pcdi] = pcr as u8
                  pcrgb[pcdi+1] = pcg as u8
                  pcrgb[pcdi+2] = pcb as u8
                  pcfb[pcy*WS_PERCEPT_W + pcx] = pcr + pcg*256 + pcb*K_MAGIC_65536
                  pcx = pcx + 1
              }
              pcy = pcy + 1
          }
          let pcpp: *u8 = sys_mmap(512)
          var pcq: i64 = 0
          while outp[pcq] != (0 as u8) { pcpp[pcq] = outp[pcq]; pcq = pcq + 1 }
          let pcsx: *u8 = ".percept.png" as *u8
          var pcq2: i64 = 0
          while pcsx[pcq2] != (0 as u8) { pcpp[pcq+pcq2] = pcsx[pcq2]; pcq2 = pcq2 + 1 }
          pcpp[pcq+pcq2] = 0 as u8
          nx_png_write_rgb(pcpp, pcrgb, WS_PERCEPT_W, WS_PERCEPT_H)
          let pcnp: *u8 = sys_mmap(512)
          pcq = 0
          while outp[pcq] != (0 as u8) { pcnp[pcq] = outp[pcq]; pcq = pcq + 1 }
          let pcnx: *u8 = ".percept.nxfh" as *u8
          pcq2 = 0
          while pcnx[pcq2] != (0 as u8) { pcnp[pcq+pcq2] = pcnx[pcq2]; pcq2 = pcq2 + 1 }
          pcnp[pcq+pcq2] = 0 as u8
          let pcnb: i64 = nxl_dump(pcnp, pcfb, WS_PERCEPT_W, WS_PERCEPT_H)
          ws2_puts("PERCEPT anchor=" as *u8); ws2_pn(WS_PERCEPT_W); ws2_puts("x" as *u8); ws2_pn(WS_PERCEPT_H)
          ws2_puts(" factor=" as *u8); ws2_pn(pcpk)
          ws2_puts(" crop=" as *u8); ws2_pn(pccw); ws2_puts("x" as *u8); ws2_pn(pcch)
          ws2_puts("+" as *u8); ws2_pn(pcox); ws2_puts("+" as *u8); ws2_pn(pcoy)
          ws2_puts(" nxfh_bytes=" as *u8); ws2_pn(pcnb)
          ws2_puts(" wrote=" as *u8); ws2_puts(pcpp); ws2_puts(" " as *u8); ws2_puts(pcnp)
          ws2_puts("\n" as *u8)
      }
  }
  // readback: the FILE is the claim, never the writer's return
  let lp: *i64 = sys_mmap(16) as *i64
  let rb: *u8 = sys_read_file(outp, lp)
  if (rb as i64) == 0 { ws2_puts("SNAP-FAIL: png not written\n" as *u8); return 5 }
  ws2_puts("WORLD-SNAP v=" as *u8); ws2_pn(v)
  ws2_puts(" seed=" as *u8); ws2_pn(seed)
  ws2_puts(" ticks=" as *u8); ws2_pn(ticks)
  ws2_puts(" style_applied=" as *u8); ws2_pn(applied)
  ws2_puts(" gen_applied=" as *u8); ws2_pn(wst(base)[S_GENP])
  ws2_puts(" w=" as *u8); ws2_pn(W)
  ws2_puts(" h=" as *u8); ws2_pn(H)
  // ★EVERY CAPTURE DECLARES ITS RESOLUTION AS A FRACTION OF THE PRODUCT'S OWN NATIVE RESOLUTION.
  // w=/h= alone cannot answer "is this full resolution?" -- that question needs the ceiling beside the
  // measurement, and the ceiling lives in the engine, not in the reader's head. res_permil is DERIVED
  // from the two extents at emit time and res_class is derived from res_permil, so neither can agree
  // with a flag while disagreeing with the pixels. This is the field the capture-resolution gate reads:
  // a verdict built on a capture below the declared product resolution is refusable BECAUSE the
  // capture said so itself.
  ws2_puts(" q=" as *u8); ws2_pn(qsel)
  ws2_puts(" native_w=" as *u8); ws2_pn(ws2_natw())
  ws2_puts(" native_h=" as *u8); ws2_pn(ws2_nath())
  let ws_natpx: i64 = ws2_natw()*ws2_nath()
  var ws_permil: i64 = 0
  if ws_natpx > 0 { ws_permil = W*H*WS_PERMIL/ws_natpx }
  ws2_puts(" res_permil=" as *u8); ws2_pn(ws_permil)
  ws2_puts(" res_class=" as *u8)
  if ws_permil >= WS_PERMIL { ws2_puts("FULL" as *u8) } else { ws2_puts("REDUCED" as *u8) }
  ws2_puts(" skytop_rgb=" as *u8); ws2_pn(fb[0] % 256)
  ws2_puts("," as *u8); ws2_pn((fb[0]/256) % 256)
  ws2_puts("," as *u8); ws2_pn((fb[0]/K_MAGIC_65536) % 256)
  ws2_puts(" png_bytes=" as *u8); ws2_pn(lp[0])
  ws2_puts("\n" as *u8)
  return 0
737}
nx_world_snap.nx source

`nx_world_snap.nx` source
