@datamoc/mw_games 0.44.2 → 0.46.0

package/CHANGELOG.md

@@ -1,3196 +0,0 @@
-# Changelog
-
-All notable changes to `mwg` are documented here. Format follows
-[Keep a Changelog](https://keepachangelog.com/en/1.1.0/), and versioning follows
-[Semantic Versioning](https://semver.org/) as of this first release - a 0.y.z version means
-the public API may still change between minor versions.
-
-## [Unreleased]
-
-## [0.44.2] - 2026-10-17
-
-Hardening of `.mwp` content package loading, found by security reviews of 0.44.0 and 0.44.1.
-Versions 0.44.0 and 0.44.1 were tagged and released on GitHub but their npm stages were rejected and
-they were never published, so 0.44.2 is the first public release of everything in their entries below.
-
-### Fixed
-
-- A WAV header with a zero sample rate or block align fell back to its declared `byteRate`, so
-  a lying header could still shorten the measured duration. The rate is now the lowest of the
-  declared one, `sampleRate * blockAlign` and `sampleRate * channels * ceil(bits / 8)`, and a zero in
-  any of them refuses the file as unreadable.
-
-## [0.44.1] - 2026-10-17
-
-> Superseded by 0.44.2 and never published to npm.
-
-Hardening of `.mwp` content package loading, found by a security review of 0.44.0.
-
-### Fixed
-
-- A package could multiply its work through repeated file imports: depth was bounded at 4 but
-  the total was not. Imports now share a budget of 64 reads per package document.
-- An import or a `main` document named like an `Object.prototype` member (`constructor`) crashed
-  the loader with a `TypeError`; lookups are now own-property only and report a
-  `PackageFormatError`.
-- A WAV header declaring a large `byteRate` could shorten the duration measured against
-  `maxAudioSeconds`; the lower of the declared rate and `sampleRate * blockAlign` is used.
-
-## [0.44.0] - 2026-10-17
-
-> Superseded by 0.44.2 and never published to npm.
-
-Retro-audio integration contracts (a MIDI engine registry, streaming playback, budgets, content packages and a command line tool), player-facing audio settings, and the interface follow-ups of the last Pontifex round. The parked items 393, 394, Syzygy and NNUE are closed rather than waiting on files or weights that will not arrive, and a simplification pass over the whole tree removes duplicated code.
-
-### Added
-
-- Pontifex follow-up points 51-54 (roadmap 443-446): `ScrollBox` now owns its `hitArea`
-  (its viewport, kept current by `resize`/`setContentHeight`, with a `viewportWidth`
-  getter); `DropdownView` and `ScrollText` gain `resize(width)`, and `DropdownViewOptions`
-  gains `maxWidth` capping `autoWidth`; a transition requested while one is playing is
-  ignored by default, with `queue: true` / `interrupt: true` in `TransitionOptions` and the
-  `transitionDisposition` rule exported, `Game.transitioning` also reporting a queued
-  transition; and `Dropdown.setHighlight` now opens the list as documented, so
-  `setHighlight(i); confirm()` picks a row and the next opening shows it.
-- Retro-audio integration (roadmap 431-442): a named `MidiSynth` engine
-  registry with fallback diagnostics, the streaming `Playable` contract, bus render budgets
-  and decoder guards, `.mwp` content packages with capability policy and ROM refusal, data
-  sound effects, an off-main-thread audio host, adaptive music, the `mwg-audio` tool, and
-  the `testing` doubles (`FakeRetroPlayer`, fake WebAudio graph) - documented in the
-  README's "Retro audio" section, REFERENCE and `docs/listening-protocol.md`. Player-facing
-  settings (`AudioSettings` with PAL/NTSC, dynamics and softening rules), live Web MIDI
-  (`connectWebMidi`), dropped `.syx` banks with DX7 patch names and audition (`SyxBank`),
-  and the oscilloscope/tracker data cores (`waveformEnvelope`, `trackerPattern`) complete
-  item 441.
-
-### Changed
-
-- Simplification pass over the tree, with no change to the public API: one shared radix-2 FFT
-  in `audio`, `HexSkirmish.reachableCosts` built on `core`'s `weightedFlood` (a negative
-  terrain move cost is now ignored instead of accepted), `tourney` and `Tactics` using the
-  `Engine` job default and `core`'s `cellInside`, a single byte-joining helper in the
-  `mwl` package container, and hand-written clamps replaced by `core`'s `clamp` across
-  `ui`, `render`, `battle`, `physics` and `audio`.
-- Roadmap: items 393 (Ableton and Reaper groove formats), 394 (the Magenta humanizer tier),
-  Syzygy and NNUE are closed; 401 is the only numbered item left, waiting on a port session.
-
-## [0.43.0] - 2026-10-17
-
-Scrolling, tooltips and screen transitions for interface-heavy games, a MIDI music player and
-SoundFont tooling, and the shipped command line tools made to work from an installed package on
-Node 20.19. `@datamoc/pyroeis` moves to 0.9.1, which ends the last moderate audit advisory.
-
-### Added
-
-- Scrolling and transitions asked for by a bridge game (Pontifex feedback 45-50):
-  - `ScrollBox`: `touch` (drag to scroll, coasting on release, `ScrollDrag`), `handleKey` for line, page and
-    ends, a draggable scrollbar thumb and a clickable track, and `autoHeight`. A drag no longer clicks the row
-    it ends on.
-  - `DropdownView`: `maxVisibleRows` (the list scrolls), an opaque backdrop, `autoWidth`, opening with the chosen
-    row in view, `handleKey`, `handleOutsideClick` and `fitBelow`.
-  - `ScrollText` (a wrapped label that sizes itself and scrolls), `MarqueeLabel` (a long line sliding inside
-    its width, still under reduced motion), `ellipsize` and `truncateLines`.
-  - `TooltipHost`: tooltips on a touch long-press and on disabled buttons, from rectangles instead of pointer
-    events. `Button` gains `tooltip`, `setIcon` and a second icon for the selected state (`iconSelected`).
-  - `Game.switchScene(Next, { transition, duration, easing, pause })`, `Game.transition(swap, options)` and
-    `Scene2D.transitionTo`: `tileShrink`, `shrink`, `pop`, `grow`, `slide`, `iris` and `dissolve` over a snapshot of
-    the outgoing scene, skipped under reduced motion, with `Game.transitioning` and `Game.active`. `Window.open`
-    and `Window.close` take an animation (`pop`, `grow`, `slide`, `fade`). The bridge example switches level
-    with `tileShrink`.
-  - The dist grew 3.8% with them; the size baseline is moved to match.
-- `limits` (`SoundFontLimits`: `sampleFrames`, `totalFrames`) on `decodeSoundFont`, `loadSoundFont` and
-  `webAudioSampleDecoder` raises or lowers what a SoundFont 3 may decode to, instead of the fixed 16 M
-  frames per sample and 128 M per font. The sample-rate bounds stay: the format itself stops at 50 kHz.
-- `@example`s for the `3d` functions that need no renderer (`gridPoint3D`, `cellAt`, `heightAt`,
-  `buildHeightIndex`, `resolveCapsuleAgainstGrid`, `parseVox`). The generated API reference now covers
-  the subpaths the root barrel does not re-export (`3d`, `physics`, `ai/lua`, `mwl/pyroeis`, `testing`,
-  `threads`, `headless`, `assets/binary`), so the examples index links 803 of 813 symbols to a page.
-- `npm run build:bridge-tutorial` regenerates the bridge tutorial from `tools/templates` and the example's
-  own source. `npm run bins:smoke` packs the project, installs it in an empty folder and runs every `mwg-*`
-  bin with `--help`; CI runs it, with the library build, on Node 20.19.0, the floor `engines` claims.
-- `.gitattributes` (`* text=auto eol=lf`) ends the CRLF warnings on Windows checkouts.
-- An optional, reproducible 314 KB SoundFont subset covering six essential presets,
-  with provenance and synthetic fallback for the instruments outside it.
-- `AudioBus` loads embedded audio and MIDI by default through `createAudioLoader`, with
-  shared decoding, worker MIDI rendering and optional SoundFont settings across lifetimes.
-- `MusicPlayer` controls rendered MIDI or decoded buffers with pause, resume, seek,
-  volume and a track-completion signal; `toAudioBuffer` copies rendered stereo samples
-  into a Web Audio buffer. The README shows the supplied SoundFont and worker playback path.
-- Page byte budgets and potentially unused asset reports in the standalone build pipeline.
-- XPBD link payloads, explicit rupture, geometric queries and state comparison helpers.
-- Schema-directed `nodesToObjects` conversion and optional literal unions generated from
-  MWL table columns. Optional attributes are documented alongside the schema.
-- Generated starter projects include a pre-commit hook for typecheck and tests, an activation
-  command and ignores for local agent state.
-- Sawtooth sound synthesis, playback attempt counts and a shared browser test exposure hook.
-
-### Fixed
-
-- `mwg-uci`, `mwg-openings` and `mwg-tablebases` imported `../src/...`, which the package does not ship, so
-  they failed in every installed copy; they load `dist` there, as the other tools already did.
-- The bridge example keeps a saved best only when the new crossing costs less, or costs the same and sags
-  less, instead of replacing it by any cheaper one.
-- Fixed waits that failed on a loaded machine: the browser smoke waits for drawn frames instead of 250 ms,
-  the driver test polls for its tap instead of sleeping 300 ms, and the WebP noise test is seeded.
-
-## [0.42.0] - 2026-10-16
-
-The documentation and asset follow-ups to 0.41.0: SVG minification, a policy for the instruments a
-SoundFont lacks, a playable bridge game with its tutorial, an examples index, and function-level
-examples. One behaviour changes: a drum kit a font lacks now falls back to the standard kit instead of
-a melodic preset.
-
-### Added
-
-- Function-level `@example`s where the examples used to sit on a file or an interface, so an
-  editor's hover shows them: `SaveSystem` (with a migration), `parseDialogueLines`,
-  `parseTwee` (walking a story), `motionDuration` (reduced motion on a slide and on a
-  meaningful bar) and `Theme` (a custom theme, `themeChanged`, the high-contrast swap).
-- `XpbdWorld` documents a bridge: a Warren truss with beams, a `tensionOnly` cable note and a
-  breaking load, tested to hold a light cart, break under a heavy one and repeat exactly.
-- `REFERENCE.md` records what subsetting the bundled bank costs (piano and drums 264 KB,
-  eight essential programs 421 KB, sixteen 585 KB) and what plays for a program the font lacks.
-- `svgo: true` on `compileResources`, `emitPage` and `mwgPage` (and `--svgo` on `mwg-emit`) minifies
-  embedded `.svg` assets through the optional `svgo` package, version 4 or newer, imported only when
-  used. Ids and the `viewBox` are left alone, a file is embedded optimised only when that is smaller,
-  and one svgo cannot parse fails the build by name. On the repository's own 30 SVGs: 13.6%
-  smaller, worst rendered pixel difference 1 in 255. `@datamoc/mw_games/tools/svg-optimise` is the
-  standalone half.
-- `missingProgram: 'piano' | 'synth'` on `parseSoundFont`, `loadSoundFont` and
-  `renderMidiToBufferAsync`: what plays for a program the font lacks, the font's own piano as
-  before or the built-in synthesizer, so a game with a trimmed bank hears the synthesizer's timbre
-  for an instrument it did not ship instead of a piano line.
-- `missingSoundFontPrograms` (`audio`) lists the programs a MIDI usage asks for that a SoundFont 2 or
-  3 does not carry. The asset compiler runs it: each embedded font's result has a `missing` list and
-  `mwg-emit` and `compile-resources` warn about them.
-- `examples/bridge` and the "Build a bridge game" tutorial (`webpage/tutorials/bridge`): a playable
-  truss builder on `XpbdWorld` (three levels, a budget, cables, beams coloured by load, breaking),
-  a deterministic replay of the player's build through `Recorder`/`Player`, best results through
-  `SaveSystem`, reduced motion and the high-contrast theme. The simulation is renderer-free and
-  tested, every tutorial snippet is checked to appear verbatim in the example, and the interface
-  step points at `examples/mwl-presentation` for HUD and windows described as MWL content.
-- An examples index (`tools/build-example-index.mjs`, written by `npm run webpage:docs` to
-  `documentation/examples.html`): for each public module every exported symbol with an `@example`,
-  its first lines and a link to its API page, plus the runnable examples that import the module.
-
-### Fixed
-
-- A request for a drum kit the font lacks falls back to the standard kit, never to a melodic
-  preset: it used to take the same program number from bank 0, so a font with a piano and no drums
-  played the piano where the kick should be.
-
-## [0.41.0] - 2026-10-16
-
-`microgm-opt` stays the default SoundFont, and a game that wants another one can now pick it:
-a licence-classified catalogue of a per-instrument collection, a tool that fetches only the
-instruments the game plays, and SoundFont 3 support from the build to the browser, so the
-font reaches the page compressed and is decoded at load.
-
-### Added
-
-- `mwg-soundfonts` (`list`, `fetch`, `convert`, and `@datamoc/mw_games/tools/soundfonts`):
-  `data/soundfont-catalog.json` lists the bundled bank and 18 fonts of the marmooo
-  free-soundfonts collection with each licence classified (public domain, permissive and
-  attribution fetch freely; share-alike, copyleft and unclear ones need `--accept-licence`;
-  TimGM6mb is listed as GPL-2.0 where the collection says public domain). `fetch` takes the
-  instruments named by `--midi` files or `--programs` and merges them into one SoundFont 3 with
-  a `.credits.txt` beside it: nothing is decoded, so no `ffmpeg`. `--sf2` and `convert` decode
-  to a plain SoundFont 2 instead (Ogg Vorbis through `ffmpeg`, a developer-machine tool), about
-  eight times larger.
-- `loadSoundFont`, `decodeSoundFont` and `webAudioSampleDecoder` (`audio`): a game reads the
-  SoundFont 2 or 3 it ships with `loadSoundFont`, a SoundFont 3 decoded once at load through
-  `decodeAudioData` (each sample in a context at its own rate, so no resampling), or through a
-  decoder the caller passes. Checked in Chrome against `ffmpeg`: the same frames, rates and
-  loop points, and the same render. `decodeSoundFont` returns the SoundFont 2 bytes for
-  anything that takes them.
-- `compileResources`, `emitPage` and `mwgPage` embed `.sf3` assets and subset them to the
-  programs the game's MIDI files use, the Ogg bytes copied untouched.
-- `mergeSoundFonts` (`audio`): joins SoundFont 2 files, or SoundFont 3 files with their Ogg
-  bytes untouched, into one, the first font winning a shared (bank, program).
-
-### Fixed
-
-- `parseSoundFont` refuses a SoundFont 3 by name (pointing at `loadSoundFont`) instead of
-  reading its Ogg bytes as PCM and playing noise.
-- A SoundFont whose sample offsets point outside its sample data is refused when read, rather
-  than read beyond it.
-- Decoding a SoundFont 3 bounds what the file can make it allocate: a sample rate outside 400 to
-  200000 Hz is refused, a decoded sample is capped at sixteen million frames and a whole font at
-  134 million (256 MB of audio), in both `decodeSoundFont` and the WebAudio decoder.
-- `mwg-soundfonts` treats the font as untrusted input: a sample whose offsets point outside the
-  sample data is refused instead of copied from beyond it, and `ffmpeg` only ever receives bytes
-  that start with the Ogg magic, with the demuxer forced to Ogg and only the `pipe` protocol
-  allowed, so a crafted "sample" cannot be probed as a playlist that names local files.
-
-## [0.40.1] - 2026-10-15
-
-The published package now carries its documentation the way npm expects to find it: a
-homepage that opens the documentation site, the reference and the tools guide inside the
-tarball, declared Node support, and a `--help` on every command line tool.
-
-### Added
-
-- `package.json` declares `homepage` (the documentation site, so `npm docs` opens it
-  instead of the GitHub README), `bugs` and `engines` (`node >=20.19.0`), and exports
-  `./package.json` so a tool can read an installed module's metadata. `@datamoc/mwg`
-  inherits all of them, plus the keywords it lacked.
-- `REFERENCE.md` and `tools.md` ship in the tarball, so the README's relative links
-  resolve offline from `node_modules`.
-- `REFERENCE.md` sections for `skeleton`, `physics` and `mwl/pyroeis`.
-- JSDoc on the exported symbols of the least documented entry points
-  (`mwl/presentation`, `ai/lua`, `physics/xpbd`, `two-d/presentation`, `3d`, `mwl/pyroeis`,
-  `physics`).
-
-### Fixed
-
-- `mwg-bench`, `mwg-size`, `mwg-sbom`, `mwg-lockstep-server`, `mwg-mwl`, `mwg-uci` now print
-  their usage for `--help` instead of running. `mwg-init --help` no longer creates a folder
-  named `--help`, `mwg-scenarios --help` no longer hangs, and `mwg-placeholder-assets --help`
-  no longer rewrites the assets.
-
-## [0.40.0] - 2026-10-15
-
-A game that plays sampled MIDI no longer ships a whole SoundFont: the asset
-compiler subsets the bank to the instruments its tracks actually use, and the
-package now carries a small WTFPL General MIDI bank to subset from.
-
-### Added
-
-- Build-time SoundFont subsetting: `compileResources`, `emitPage` and `mwgPage` now
-  embed `.mid`/`.midi` and `.sf2` assets, and every embedded SoundFont is subset to
-  the programs the embedded MIDI files actually use (`collectSoundFontUsage` over
-  the shipped tracks, drums as bank 128). `soundFont: false` embeds a font whole,
-  `soundFontUsage` (or `--soundfont-usage=bank:program,...`) names the programs
-  explicitly, and a font with no shipped MIDI embeds whole. An unreadable MIDI or
-  SoundFont fails the build by name instead of shipping silently. The result and
-  both CLIs report each font's kept programs and byte saving: the reference bank
-  `data/microgm-opt.sf2` (2.6 MB, 137 presets, WTFPL, shipped in the npm package
-  for a game to copy into its assets) embeds as 25 KB for a piano-only track.
-
-
-## [0.39.1] - 2026-10-15
-
-Fixes the 0.39.0 publish gate on Linux: the WebP skip-shrink test asserted one
-platform's encoder answer instead of the real guarantee, and failed where sharp
-genuinely shrinks the noise fixture.
-
-### Fixed
-
-- The WebP test embeds whichever encoding is smaller and asserts byte-exact output
-  with a lossless round-trip either way, instead of assuming the conversion always
-  loses on tiny noise.
-
-## [0.39.0] - 2026-10-15
-
-The skeleton cluster (two-bone IK, joint limits, full clip channels, diagnostics, SVG
-parts loading), the asset and deformation cluster (pinned deformation, SVG skeletons,
-asset filtering and the embedded assets report), and the effects cluster (cloth, spring,
-haze and neon glow, each with a stated frame budget and reduced-motion handling).
-`PhysicsWorld` leaves `matter-js` behind for an in-repo solver, so the dependency is gone.
-
-### Added
-
-- Pinned sprite deformation with atomic vertex batches and one GPU upload per batch, checked
-  against a local Pontifex bird with fixed attachments and unchanged UVs.
-- `loadSvgSkeleton`: SVG limb extraction, authored/manifest pivots, rest-angle normalization
-  and automatic `SkeletalSprite` binding, including nested parts without duplicate drawing.
-- `assetFiles` on `mwgPage`, `emitPage` and `compileResources`: exact embedding lists with
-  named failures for unknown entries and unchanged defaults when omitted.
-- `mwg-assets` (`assetReport`): per-file raw/gzip/brotli weights with each share of
-  the compressed page, plus the embedded source inventory with byte-identical
-  duplicates grouped by hash.
-
-- Two-bone skeleton IK with named unreachable-target failures, absolute local joint limits,
-  and translation/scale clip channels through `sampleTransformPose` and `advancePose`.
-- Explicit `SkeletalSprite.setDiagnostics` overlay for bones, pivots, joints and tips.
-- `loadSvgParts` / `releaseSvgParts`: named SVG group textures with resolution-aware caching,
-  compiled local-file asset support and a browser check against a local Pontifex vehicle.
-
-- Pinned-point cloth (`Cloth` Verlet mesh plus textured `ClothSprite` on the 414 mesh
-  path) with gravity, wind, damping and a browser drape check; a damped 2D chase
-  `Spring` for secondary motion with a stated O(1) frame budget, plus a `SpringSprite`
-  debug line.
-- `HazeLayer` (with `hazeField` / `paintHazePixels`): drifting atmospheric sheets on
-  stacked depth planes, checked in the browser over a painted harbour; `NeonGlow`
-  (with `glowFalloff` / `paintGlowPixels`): additive neon light with colour, radius,
-  intensity and flicker, checked in the browser over a dark lane of signs.
-
-### Removed
-
-- The `matter-js` (and `@types/matter-js`) dependency: `PhysicsWorld` is recoded in TypeScript in this repo (semi-implicit Euler, impulse contacts, projected distance joints) with the same options, methods and signals. Bodies no longer spin: `angle` stays a display offset. The dropped `engine` field exposed the whole matter engine; nothing in this repo used it.
-### Fixed
-
-- SVG group splitting retains group transforms, shared definitions and styles, and handles
-  nested self-closing groups. Skeleton creation reports cycles instead of overflowing the stack.
-
-## [0.38.0] - 2026-10-14
-
-Optional MWL scene and UI composition with its bridge-editor example, the
-all-scenarios browser verifier, instance palette setters, and a powered-by badge
-games can carry on their login screen. Roadmap 393 and 394 move to parked: no
-fixture files for the proprietary groove formats, and the neural humanizer costs
-more than the game use case justifies.
-
-### Added
-
-- Optional MWL presentation compiler (`mwl/presentation`) and Pixi runtime
-  (`two-d/presentation`): scene layers, camera, reusable UI, responsive layouts, keyed
-  collections, typed bindings and biome-selected palette/scenery overrides. The local-file
-  bridge-editor example checks keyboard/pointer focus, modal input, cleanup and update cost.
-- `Button.setColors`, `Window.setColors` and `Bar.setBackground` update instance palettes
-  without rebuilding widgets.
-
-- `mwg-scenarios`: verifies every scenario in one local-file browser page through game-owned
-  `SceneControls` steps for entry, bot turns, assertions and cleanup, with bounded execution
-  and per-scenario failures.
-- `webpage/assets/powered-by-mwg.svg`: a badge games can copy onto their login screen,
-  linked to the framework site, with the snippet in the README's new "Powered by mwg"
-  section and the badge itself in the website footer.
-
-## [0.37.0] - 2026-10-14
-
-Fixes and additions from the first outside game built on mwg (Pontifex, on 0.36.0): sounds compose with synthesized tones, two physics modules (matter-js rigid bodies and a deterministic XPBD structure solver), pointer and dropdown widgets, a project scaffold, and the `@datamoc/mwg` short-name package.
-
-### Added
-
-- `audio.synthesizeSound(tone, options)`: a pooled `Sound` over a synthesized tone.
-- `core.FixedStepper`: turns the variable frame `dt` into fixed simulation steps with a substep cap.
-- `core.StoredValue` and `core.defaultStorage` are public, so a game can keep structured JSON progress under one key.
-- `Button.setSelected`, `Label.setWrapWidth`, `Window({ closeButton: true })` (a visible ✕), and `ui.flowLayout` (wrapping rows with alignment).
-- `ParticleEmitter.burst(count, { x, y, tint })`, `Shape2D.dashedLine`, `Camera.fit(worldWidth, worldHeight)` and `SpriteSheet.strip(path, frames)`.
-- `BrowserDriver.drag(fromX, fromY, toX, toY, steps)` on Chrome (CDP) and Firefox (in-page pointer events).
-- `Input.attachPointer`: down, move, drag and up signals with target-relative and world positions.
-- `physics.PhysicsWorld` (`@datamoc/mw_games/physics`, optional peer `matter-js`): rigid bodies, constraints, contact events and breakable joints (`maxStretch`, `onBreak`, `stretchOf`) on a fixed clock.
-- `physics.XpbdWorld` (`@datamoc/mw_games/physics/xpbd`, no `matter-js`): a deterministic XPBD structure solver with per-link loads, breaking at a real strength and ground collision, extracted from Pontifex.
-- `ui.DropdownView`, the widget over the `Dropdown` model.
-- `mwg-init <folder>`: writes a starter project that builds to a double-clickable page.
-- `assets/credits.json` becomes `CREDITS.txt` in the compiled output (`compileResources`, `creditsText`).
-- `@datamoc/mwg`, the short name for the package, generated into `packages/mwg` by `npm run alias:write` (publishing it is a separate step).
-- Roadmap 412 is the owner-only step left: publishing `@datamoc/mwg`.
-
-### Changed
-
-- `assets.resolve` returns a `data:` or `blob:` URL unchanged, so a synthesized tone or a runtime blob composes with `Sound`, `Music` and textures.
-- `SpriteSheet.grid` warns when the frame size does not divide the sheet instead of cutting distorted frames silently.
-- The README status line names the current version and the core row no longer calls the loop fixed-step.
-
-### Fixed
-
-- `compile-resources`, `compress-dist`, `play-uci`, `build-tablebases` and `compile-openings` took any importer whose file name was a suffix of theirs (`t.mjs` for `compress-dist.mjs`) for their own command line and ran it on import; they now compare real paths.
-- A sound that is missing from the build plays as silence with a warning instead of rejecting inside `Game.start` and leaving a black screen.
-- `tools/vite.mjs` and the build tools it imports no longer use top-level await, so a `vite.config.ts` in a project without `"type": "module"` loads.
-- `mwgPage()` and the examples stop printing the `EMPTY_IMPORT_META` warning on every build.
-
-## [0.36.1] - 2026-10-13
-
-A maintenance release: the optional Lua dependency catches up with Pyroeis 0.9.0, and the CI no longer hangs on a stuck browser.
-
-### Changed
-
-- The optional `@datamoc/pyroeis` dependency moves from `^0.6.0` to `^0.9.0`. No API change on the mwg side.
-- The Actions group is bumped (`actions/setup-node` 7.1.0 and `actions/upload-artifact`).
-- The scheduled browser benchmark uses floors fit for a software-rendered runner (10 fps, p95 250 ms) instead of the GPU defaults it failed every week; the 15% history comparison still catches regressions.
-
-### Fixed
-
-- The browser driver kills the whole browser process group when it times out or closes, instead of only the launcher. Surviving helper processes held the output pipes and kept `npm test` alive until the runner's 6 hour limit.
-- The browser start-up budget is 90 s and the CI `check` job is capped at 30 minutes; Linux Chrome runs with `--disable-dev-shm-usage --disable-gpu`.
-
-## [0.36.0] - 2026-10-12
-
-The optional Lua integration uses Pyroeis, with a matching public subpath, factories and types. Games using the Lua host must update their imports to `mwl/pyroeis` and the `Pyroeis` names.
-
-### Changed
-
-- Replace the optional `@datamoc/fengari` dependency with `@datamoc/pyroeis` `^0.6.0` and use `PyroeisVm`. Rename the public Lua subpath to `mwl/pyroeis`, the factories to `createPyroeisScriptHost` and `createPyroeisRuntime`, and all associated `Fengari*` types to `Pyroeis*`.
-
-- Docs: the 1.0 checklist's ports line is restated as an external condition rather than an open box, `LuaAI` is described as the Lua 5.4 provider it is, and the Lua host's byte budget is described as the VM's per-call allocation limit rather than the `lua_setallocf` hook it no longer rides. The 0.35.0 entry names the `^0.5.2` range that release shipped with.
-
-## [0.35.1] - 2026-10-11
-
-The Lua host moves to `@datamoc/fengari` 0.5.4: tighter execution limits and a simpler `ScriptHost` setup.
-
-### Changed
-
-- The optional Lua dependency moves to `@datamoc/fengari` `^0.5.4`. The `ScriptHost` uses its `print: 'native'` option instead of building the VM without libraries and re-opening them, which also drops the `string.dump` and `__random` clean-up the re-open made necessary. Execution limits now also hold against a limit overrun hidden by a script-created coroutine, global-path lookups and `Coroutine#close()`.
-
-## [0.35.0] - 2026-10-11
-
-A Lua integration host for games that need synchronous API results and resumable dialogue, an offline Lua to JavaScript translator, and the Lua dependency moves to `@datamoc/fengari` 0.5.2.
-
-### Added
-
-- `createFengariRuntime` on the optional `mwl/fengari` subpath: synchronous host functions with results, live indexed table bindings, owned Lua callback/table references, embedded `require`/`dofile`, and host-driven coroutines with request values and scene answers. `luaToJs` translates Lua source to readable JavaScript offline (fengari 0.5.0's `lua2js`), flagging untranslatable constructs, for a game leaving Lua scripting. The existing JSON-only `ScriptHost` stays unchanged. Calls, module compilation and coroutine resumes share bounded execution, with a fresh budget for each top-level operation.
-
-### Changed
-
-- The optional Lua dependency moves to `@datamoc/fengari` `^0.5.2`, whose shipped TypeScript declarations replace the old `@ts-expect-error` import and the hand-written `luaToJs` types, and whose `vm.protect` and `vm.throwLuaError` replace the host-side protected-call code. The host reuses `FengariVm`'s execution guard while retaining text-only compilation, JSON-shaped tables and seeded randomness.
-
-### Fixed
-
-- Lua instruction limits now interrupt native table moves and string searches, and cannot be swallowed by `pcall`, `xpcall` message handlers or coroutine resumes. Parsing and execution still share the per-call string/buffer allocation budget. The `ScriptHost` sandbox also drops `string.dump` and fengari's internal `__random`, which scripts could still reach.
-
-## [0.34.0] - 2026-10-10
-
-Hex grids for the cave, dungeon and overworld generators, and the Lua host moves to the `@datamoc/fengari` 0.3.0 fork (`<const>`, `<close>`, `coroutine.close`).
-
-### Added
-
-- `shape: 'hex'` on `generateDungeon`/`generateDungeonGraph`, `generateCave` and `generateOverworld`: the generators lay their output out on a hex grid (odd-q offsets, as `Level` does) instead of squares. The dungeon and cave `Level` carry the hex shape; a dungeon corridor leg runs as a hex line and `furthestRoom` counts hex steps on a hex level; a cave grows chambers by hex distance and walks passages by true on-screen distance, so a chamber is round rather than a skewed diamond; the overworld samples its value noise where each hex is drawn and steps rivers and roads across the six edges, with settlement spacing and the near-water test in hex steps. Square output is unchanged byte for byte.
-- `generateCave` accepts `random`, a `RandomSource`, in place of `seed`: the cave draws from that stream and advances it, and the ambient `Random` stack is left alone. Passing neither is refused by name.
-
-### Changed
-
-- `@datamoc/fengari` moves to `^0.3.0`. Lua scripts in `mwl/fengari` and `ai/lua` now accept `<const>` and `<close>` variables and `coroutine.close`; a limit error (instructions or memory) unwinds through pending `__close` handlers, and a handler cannot buy extra instructions after the limit fired.
-
-### Fixed
-
-- `mwg_emit(name, payload)` called from inside a coroutine read its payload from the main thread's stack, so it returned garbage or failed; it now reads from the calling coroutine.
-
-## [0.33.0] - 2026-10-10
-
-Seven roadmap items in one release: the Wesnoth port's proposal file is now fully answered
-(405 shipped with 0.32.0, 406/407/409 this release, 408's first half, 401 parked with the
-port), alongside the skeletal puppet pair (399/400), SVG as inbound data (398), the overworld
-generator (410), and the Lua host riding the fork's new allocation hook.
-
-### Added
-
-- `skeleton`, a new renderer-free root module (roadmap 399): a bone tree where a pose is one
-  rotation per bone, keyframed clips (plain JSON, interpolation, looping, playback rate,
-  crossfade), and additive layers mixing by priority that displace only the bones they name.
-  `two-d/render` gains the drawing half (400): `SkeletalSprite` binds parts to bones by
-  name, and `ArticulatedChain`/`ChainRig` draw a follower-rule spine with per-segment
-  rotation limits.
-- `roguelike.generateCave` (407): chambers grown as blobs (`jagged`), winding passages
-  (`windiness`, `width`, `chance`), starts with cleared rings, village density, and a forced
-  join so a cave is always connected. `roguelike.generateOverworld` (410): seeded elevation
-  and moisture fields classify seven terrains behind a `seaLevel` knob, rivers run downhill
-  to the sea and drown lakes at ridges, settlements place themselves by suitability and join
-  into a road tree that prefers flat ground (water a ford, not a wall), points of interest
-  carry `leadsTo`, and every cell carries a coarse region id.
-- `assets` SVG inbound rules (398): `sanitizeSvg` refuses what it cannot prove inert by name,
-  `svgScaleVariants` rasterizes one source per named scale, `splitSvgGroups` loads one part
-  per top-level `<g>` group.
-- `testing` gains `createSceneControls` (408's first half): named steps a game opts into,
-  driven by name, refused by name when unknown - the seam a headless driver calls a game's
-  private scene flow through.
-
-### Changed
-
-- `mwl/fengari` now requires `@datamoc/fengari@^0.2.0` and enforces `memoryLimit` through the
-  fork's per-state allocation hook (`lua_setallocf`) instead of swapping the global
-  `Uint8Array` constructor mid-call: no global mutation (and so no reentrancy hazard between
-  hosts on one page), parsing is inside the budget, host callbacks allocate freely, and a
-  refused allocation surfaces to scripts as Lua's standard `not enough memory` while the
-  host still rejects the call.
-- MWL `test=` expressions can call `have_unit`/`have_location` and registered predicate hooks
-  directly (406), `[while]` traces `while_limit` when its cap is reached with the condition
-  still true (`on_limit=error` makes it a hard failure), and `[condition]` accepts free
-  predicate attributes.
-
-## [0.32.0] - 2026-10-10
-
-The optional Lua host hardens around what the `@datamoc/fengari` fork offers, and the
-phantom-leader bug the Wesnoth port's scenarios exposed is fixed.
-
-### Changed
-
-- `mwl/fengari` moves to the `@datamoc/fengari` fork (Lua 5.4) and opens only the
-  sandbox-safe Lua standard libraries (base, coroutine, math, string, table, utf8) through
-  the fork's `luaL_openselectedlibs`: `io`, `os`, `debug` and `package` with its `require`
-  are never constructed - identically in Node and the browser - instead of being opened and
-  then nil'd. Chunks now compile in text mode, so a binary `\x1bLua` dump is rejected instead
-  of reaching the bytecode undumper.
-- Roadmap item 390 (the tourney chess engine) is closed by accepting its recorded split:
-  4-piece tablebases stay a `tools/build-tablebases.mjs` run away rather than shipping tens
-  of megabytes per ending; the compiled 3-piece tables stay under `data/tablebases`.
-
-### Fixed
-
-- `MwlRuntime` no longer spawns a phantom leader when a `[side]`'s `leader=` names an
-  already-declared unit: the named unit is the leader, a known unit type still spawns one
-  leader per free start cell with its real stats, and a value that is neither is refused by
-  name instead of creating a 1-hp, 0-move ghost (roadmap 405, which broke about ten of the
-  Wesnoth port's scenarios with "unknown unit type").
-
-## [0.31.0] - 2026-10-09
-
-Two pixel-dungeon proposals: P43, `SpriteMotion` (squash, hop, bob, wobble, spin, shear and flip over `Tweener`, reduced-motion aware), and P42, camera snapping in whole device pixels, which closes the thin tile seams at a fractional `devicePixelRatio`.
-
-### Added
-
-- `two-d/render` `SpriteMotion` (pixel-dungeon proposal P43): squash, hop, bob, wobble, spin,
-  shear and flip over any display object's transform, through a `Tweener`. Effects compose from
-  a captured rest pose, never drift, cancel cleanly, and follow `setReducedMotion` (a looping
-  bob holds still; `intent: 'meaningful'` is shortened instead of dropped).
-
-### Fixed
-
-- `Camera` rounded its screen offset to a whole CSS pixel, which at a fractional
-  `devicePixelRatio` (Windows at 150%) left thin seams between tiles. The offset now rounds to
-  whole device pixels through the new `CameraOptions.resolution` (supplied by `createCamera`,
-  read live), and `snapZoom` takes an optional `resolution` so `pixelPerfectTileSize` snaps to
-  whole device pixels too.
-
-## [0.30.0] - 2026-10-07
-
-P41, the browser driver's four measured gaps: the viewport option (inner size through the
-protocol, not window flags), the trusted keyboard channel (press through CDP key events and
-BiDi key actions, with the WebDriver key-value table), the Firefox tap that actually reaches
-Pixi 8's EventSystem (the in-page synthetic sequence, measured and documented), and headed
-mode. Live-verified on Chrome and Firefox: exact 800x600 viewport, keys delivered, the
-Firefox tap advancing a real Pixi page.
-
-## [0.29.0] - 2026-10-07
-
-P37's touch half: the on-screen keyboard. Rows of keys as data, rendered through the
-theme's own Button, each tap feeding the same core.Input paths a physical key travels -
-dispatchText for a typing key, the new dispatchAction for an action key - so a TextPrompt
-cannot tell the two apart. TextPrompt grows a keyboard option that hosts one beneath the
-field and resizes the window to fit it, UPPERCASE_KEYBOARD is one shipped default, and
-the interface example's Name prompt carries it as the reviewed touch pattern.
-
-## [0.28.0] - 2026-10-07
-
-The 0.27.0 consumer wave sharpened asks: the pixel-dungeon port proposal file
-audited what 0.27 shipped against what a real consumer needs, and this release
-closes the four framework-side gaps it found. Flights fades and spins in the
-units games author (fadeIn: progress, spinDegrees), Beam thins as it fades and
-stretches a single art asset along its span with anchor control,
-ParticleEmitter.attach gates visibility (fog-of-war) beside emission, and the
-interface example carries the reviewed TextPrompt hosting pattern a seed or name
-prompt can be copied from.
-
-### Added
-
-- `Flights` fade and spin in the units consumers author them in (P40): `fadeIn:
-  'progress'` (or `true`) eases a sprite's alpha 0 to 1 along the flight's own
-  progress - the tween's clock, so the fade cannot desynchronise from a duration
-  the caller re-computed - while a number keeps its seconds-from-launch meaning,
-  and `spinDegrees` is `spin` in degrees per second, converted once, so an
-  authored angular speed needs no radian arithmetic at the call site.
-
-- `Beam` thins and stretches (P35): `thin: true` narrows the body with its own
-  remaining life the way the alpha fades (a plain line's stroke, a strip's height,
-  a stretched sprite's `scale.y`), and the `texture` option's object form -
-  `{ source, stretch?, anchor? }` - stretches one art asset along the whole span
-  instead of tiling it, anchored across the thickness (0.5 by default) for ray
-  art that repeats badly. The bare-texture form tiles exactly as it always has.
-
-- `ParticleEmitter.attach` takes a `visible` callback beside `enabled` (P36): a
-  false return hides the emitter and every particle it has in the air, so a
-  fog-of-war gate keeps an aura's spray out of unexplored space without the
-  consumer re-placing `visible` every frame. Drawing only - the simulation
-  keeps stepping behind the invisibility, emission keeps following `enabled`,
-  and `detach()` leaves the emitter visible.
-
-- The interface example's new Name button is the reviewed `TextPrompt` hosting
-  pattern (P37): push it on a `WindowStack` and it owns typing, caret edits,
-  confirm-gated-by-`validate`, cancellation and closing - a seed or name prompt
-  with no DOM `<input>` overlay to copy around.
-
-## [0.27.0] - 2026-10-07
-
-Two strands in one release. A run is durable and drives the AI (roadmap 396-397): the
-versioned replay envelope refuses another game or framework build by name, `LastRun` keeps
-the newest recording, `runCheckpoint`/`resumeRunPlayer` restore a run mid-run, and the
-`file://` plumbing (download, picker, Blob read) ships with it; `imitationFromReplay` turns
-a recorded run into training samples against its own seeded environment, `runSeededEpisode`
-plays a whole run from a named seed behind any deterministic chooser, and `ai.Suggester`
-is the throttled, non-mutating hint source. The render and UI strand: `Flights` owns live
-projectile flights, `Beam`/`Beams` draw one-shot beams, `TextPrompt` asks for one line with
-IME and screen-reader support, `MessageLog.lastEntries` reads retained entries back, and
-`ParticleEmitter.attach` follows a target; `core.FloatSource` narrows the injectable random
-stream for float-only helpers.
-
-### Added
-
-- `core.FloatSource` splits `core.RandomSource`: helpers that draw floats only
-  (`float`, `chance`, `weighted`, `weightedKey`) accept the narrower
-  `{ float(): number }`, so a float-only stream needs no dead `int`. The
-  integer helpers (`int`, `range`, `normalRange`, `element`, `shuffle`) keep
-  requiring the full source; `element` stays wide deliberately, because it
-  draws through `int()` and re-spelling that draw would change its stream.
-
-- `MessageLog.lastEntries(n)` reads the newest retained entries back as plain
-  `{ text, level }` records, oldest first, without scraping rendered children:
-  entries the wrapped-line budget already dropped are gone, over-count reads
-  everything retained, and zero or negative reads nothing. The slice lives in
-  the pure `takeLastEntries` beside the existing `linesToDrop` budget, so the
-  readback contract is testable without a renderer.
-
-- `ParticleEmitter.attach(target)` follows a display object or position thunk on
-  every update tick and every `burst()`, with `offsetX`/`offsetY`, an `enabled`
-  callback gating tick emission, and auto-detach for destroyed targets;
-  `detach()` keeps the last position. The follow math is tested headless through
-  textureless emitters.
-
-- `Flights` owns a scene's live projectile flights over the existing `Projectile`:
-  `add(sprite | texture, from, to, { speed, tint?, spin?, fadeIn?, onArrive? })`
-  returns a handle, `update(dt)` drives positions with per-flight spin and fade,
-  each arrival dispatches once after leaving the list, and `cancel()`/`clear()`
-  forget without dispatching. Caller sprites stay caller-owned; texture-built
-  sprites are parented here and destroyed with their flight.
-
-- `Beam`/`Beams` draw one-shot beams between two screen points: a fading line by
-  default, a fading repeating texture strip with `texture`, additive blend unless
-  opted out, `retarget` for tracking endpoints, and `update` reporting expiry
-  exactly once so the `Beams` group can remove finished beams itself.
-
-- `TextPrompt` asks for one line of text over a `TextModel`: typing through
-  `onText` (the newest open prompt wins), caret and edits through
-  `left`/`right`/`backspace`/`delete` actions, `confirm` gated by `validate` and
-  `cancel` giving up. IME compositions preview until they commit, and the
-  message plus validation errors announce through `screenReader` (assertive for
-  the errors), with an injectable announcer for tests.
-
-- A run is durable now (roadmap 396): `exportReplayFile`/`importReplayFile` wrap a
-  recording in a versioned, self-describing envelope that refuses another game or
-  framework build by name, `LastRun` keeps the newest recording (one deep, bounded,
-  over the same storage a save slot uses), and `runCheckpoint`/`resumeRunPlayer`
-  pair the partial recording with the saved state so a restored run resumes mid-run
-  instead of restarting - `Recorder` and `Player` both take `fromFrame`, and
-  `parseReplayEvents` factors out the half of `deserializeReplay`'s check that
-  validates an already-parsed array. The `file://` plumbing rides along:
-  `downloadReplayFile` (a Blob download, never `fetch()`), `pickReplayFile`
-  (the file picker, null on cancel) and `readReplayFile` (any `Blob`, headless
-  Node included).
-
-- Replays train and drive the AI (roadmap 397): `imitationFromReplay` walks a
-  recorded run against the same seeded `TrainingEnvironment` it was played on and
-  returns the `(observation, action)` samples a game's own trainer fits;
-  `runSeededEpisode` plays a whole run with any deterministic chooser (a heuristic,
-  a `NeuralPolicy`'s argmax, not just a `NeuralModel` like `runRollouts`) from a
-  named seed, recording every chosen action so runs compare across builds and
-  policies; and `ai.Suggester` is the in-game suggestion mode, the same decision
-  call pointed at a hint UI instead of the world, throttled by a frame-count budget
-  and never mutating state to compute a hint.
-
-## [0.26.1] - 2026-10-07
-
-The 0.26.0 follow-up: its Chrome end-to-end test failed on every CI run, so the
-`tools/browser-driver` Chrome engine never actually worked on a CI machine (a cold
-Windows runner never reached the debugging endpoint in the old budget; an Ubuntu
-runner crashed in Chrome's sandbox). Chrome now launches against its own profile,
-the endpoint is watched on both output streams with a cold-start budget and a
-diagnostic that names what the browser printed, `close` releases the profile and
-the stdio pipes only after the child exits, and the CI workflows pass
-`--no-sandbox` on Linux through the driver's own `MWG_DRIVER_CHROME_ARGS` channel.
-0.26.0 was tagged before this was known and its npm publish never ran.
-
-### Fixed
-
-- `tools/browser-driver`'s Chrome engine launches against its own profile
-  (`options.profileDir`, or a temp dir the driver creates and removes on `close`)
-  instead of the machine's default one, watches both stdout and stderr for the
-  debugging endpoint (which stream a build prints it on is not something to bet
-  on), waits up to 30 s instead of 15 (a cold CI machine's first Chrome start can
-  outrun the old budget), and names what the browser printed when the endpoint
-  never arrives. This is the fix for the Chrome end-to-end test failing on every
-  CI run since the driver landed: the default profile on a fresh runner never
-  reached the endpoint in time. `close` now also destroys the child's stdio
-  pipes (surviving browser helper processes could hold a suite open past the
-  browser's own death) and releases the profile only after the child exits.
-  The failing configuration is now diagnosed, not just reported: the timeout
-  names what the browser printed. CI's Linux jobs pass `--no-sandbox` through
-  the driver's `MWG_DRIVER_CHROME_ARGS` channel, since an Ubuntu 23.10+ runner
-  that disables unprivileged user namespaces is a property of that machine,
-  not of the tool.
-
-## [0.26.0] - 2026-10-07
-
-The machine-readable surface and the audit tooling around it: `api-surface.json` ships as the
-`./api-manifest` subpath (one `{ name, kind, subpath, declaringModule }` row per export), the
-blessed `mwg/headless` entry imports every renderer-free module in one line, `tools/audit-adoptions`
-checks a consumer's imports and local definitions against that manifest, and the dependency-free
-`tools/browser-driver` harness drives real Chrome and Firefox. `core` gained injectable `RandomSource`
-streams for every derived helper and the shared square-grid rulers (`chebyshev`, `manhattan`,
-`euclidean`, `distance` by `DistanceMetric`), the coverage gate now enforces `two-d/ui` instead of
-excluding the whole tree, and the bundle-size baseline is refreshed for the growth those brought.
-
-### Added
-
-- Exported the types a public signature already names: `mwl` move/evolution/matchup
-  definitions, `core` achievement criteria and hex shape types, particle curve and spawn
-  area types, screen effect steps, `rpg` route targets, asset loader options, and the
-  `core.HttpTransport` base class its four clients already extend.
-
-- `core.NEIGHBOURS4`/`NEIGHBOURS8`/`CIRCLE8` share one frozen square-grid offset table
-  instead of each module keeping its own: axial, row-major eight, and the clockwise ring
-  (`roguelike`'s `neighbourOffsets` returns these now); `core.euclidean` is the
-  straight-line ruler beside `roguelike`'s `chebyshevDistance`.
-
-- `core.chebyshev` is the king-move ruler beside `euclidean` (a diagonal costs one
-  step) and `core.manhattan` the orthogonal-step count; `core.distance` measures with
-  the ruler a `DistanceMetric` names, so a data-authored rule picks its geometry by
-  name. `roguelike`'s `chebyshevDistance` delegates to `chebyshev` instead of spelling
-  the arithmetic out again.
-
-- `api-surface.json` is the machine-readable API surface: one
-  `{ name, kind, subpath, declaringModule }` entry per export per subpath,
-  generated by the same `tools/api-report.mjs` pass that maintains
-  `API_REPORT.md`, shipped in the package behind the `./api-manifest` subpath,
-  and pinned by `tests/api-manifest.test.ts` (shape and coverage) plus the
-  existing `--check` (agreement with the declarations). `node
-  tools/api-report.mjs --diff OLD NEW` diffs two releases' surfaces, and the
-  report parser no longer drops `export type { ... }` re-export lists.
-
-- `core.RandomSource` lets every derived helper (`chance`, `element`,
-  `weighted`, `weightedKey`, `shuffle`, `int`, `range`, `normalRange`) draw
-  from an injected stream: pass a rule-local `Generator` (or any
-  `float`/`int` pair) as the trailing `source` and the ambient stream is left
-  untouched, with identical draws and the same `null` reporting.
-
-- `node tools/api-report.mjs --diff OLD NEW` lists added, removed and
-  kind-changed exports between two `api-surface.json` manifests, so a version
-  bump yields a one-command surface diff.
-
-- `mwg/headless` is the blessed renderer-free entry: `core`, `simulation`,
-  `mwl`, `i18n`, `actors`, `world`, `battle`, `roguelike`, `board`, `audio`,
-  `rpg`, `ai`, `testing` and the two renderer-free asset halves, in one import
-  with no DOM or WebGL globals. `tests/headless-smoke.test.ts` imports it in
-  plain Node, walks the reachable graph for a renderer leak, and replays a
-  seeded scenario through it.
-
-- `tools/audit-adoptions` (also `mwg-audit-adoptions`) is the shipped consumer
-  adoption auditor: manifest plus reasons file plus config (type-only
-  directories, subpath deny-lists, per-pattern import budgets), reporting
-  unadopted exports, stale reasons, shadowing collisions and config violations
-  with `file:line` and a non-zero exit.
-
-- `two-d/pixi-interop` now states the interop-only rationale on each
-  re-exported primitive's own declaration: every histogram symbol
-  (`Rectangle`, `Texture`, `Container`, `Sprite`, `Graphics`, `FillGradient`,
-  `TilingSprite`) already has a facade family, so the note names the
-  Pixi-typed seam that keeps the raw export, and `tests/pixi-interop-coverage`
-  pins both halves.
-
-- `tools/browser-driver` is the dependency-free browser harness: a self-served
-  static directory on an OS-chosen free port, Chrome over CDP and Firefox over
-  WebDriver BiDi behind one surface (`goto`/`waitReady`/`tap` at canvas
-  fractions/`evaluate`/`script`/`screenshot`/`consoleErrors`/`close`), reusing
-  the `browser-smoke` readiness contract. Verified live on both engines.
-
-### Changed
-
-- The coverage gate now enforces `two-d/ui` instead of excluding the whole tree:
-  the widget tests the suite already ran carry it (97.3/92.6/94.3 against the
-  88/89/82 floors), so the exclusion was stale, and a wildcard also left every
-  new UI file silently ungated. `EventDialogue` stays excluded as intended, under
-  its real path (`two-d/ui`, where the old flag pointed at a nonexistent
-  `two-d/stage` copy), and `SelectionModel` gained a direct contract test that
-  covers it fully, where before only its embedding widgets exercised it.
-
-## [0.25.0] - 2026-10-05
-
-Framework support for the Pixel Dungeon port's simulation and content proposals: numeric
-handle leases for clone-safe commands, journal-free dispatch, one shared random stream for
-scene and simulation draws, MWL node-namespace references, and type-safe table rows with a
-type-emission helper for game build scripts.
-
-### Added
-
-- `core.Random.active()` returns the ambient generator the free functions draw from, so a
-  `SimulationRuntime` constructed with it shares one stream with scene code; `snapshot`/
-  `restore` of that generator replay identical continuations.
-- `SimulationRuntime.restore()` accepts `random` to adopt an externally-owned generator
-  (such as the global one), keeping scene and command draws in lockstep across restore.
-- `core.createHandles()`/`Handles` - numeric leases for values a plain-data command cannot
-  carry, with a scoped `with(value, body)` lease that drops even when the body throws.
-- `SimulationRuntime` accepts `journal: null` for a journal-free dispatch facade: no append
-  cost, an empty journal in `snapshot()`, and plainly documented replay/undo semantics.
-- `mwl.MwlTableReference` accepts a node-id namespace target (`references: { node: 'monster' }`),
-  checking table cells against authored node ids with the same table/row/value report.
-- `mwl.typedRows()`/`MwlTypedRow`/`MwlColumnValueType` read table rows through their declared
-  columns (every field optional, an absent cell omits the key), and `mwl.emitTableTypes()`
-  emits one named row interface plus one typed accessor per table for a game's build script,
-  so a changed column type or a removed column fails type-checking at every use.
-
-## [0.24.1] - 2026-10-02
-
-Dependency refresh: Babylon.js 9.29, `@capacitor/cli` held at 8.5.2 so it matches the other Capacitor
-packages, and the SBOM and bundle-size baseline regenerated. The global bundle grew 2.5% gzipped
-(356504 to 365318 B) from the newer Pixi and Babylon releases, which is accepted.
-
-### Changed
-
-- Updated npm dependencies; `cap:sync` verified against Capacitor 8.5.2 on Android.
-- Refreshed `sbom.cdx.json` and `tools/bundle-size.json`.
-
-## [0.24.0] - 2026-10-02
-
-Small neural policies and renderer-free training now share game simulation rules,
-with worker batches for larger workloads. A playable maze chase AI lab demonstrates
-live controller switching, and chess search keeps the interface responsive.
-
-### Added
-
-- A playable maze chase example with independent player and ghost AI selectors,
-  random turns, chase rules, path heuristics and a small neural policy trained
-  without a UI on the same original simulation rules. Includes keyboard and touch
-  steering, live mode switching, power dots and local-file browser checks.
-
-- `ai.NeuralPolicy`: validated, dependency-free dense-model inference with shared
-  weights, legal-action masks, seeded softmax sampling, existing `JavaScriptAI`
-  behaviour integration and cancellable worker inference batches.
-- `simulation.TrainingEnvironment`, `runRollouts` and `runRolloutsAsync`: seeded,
-  UI-free episodes over game-owned simulation rules, distinct termination and
-  truncation, bounded trajectories, resumable environment snapshots and worker
-  batches that reuse a model throughout each episode shard.
-- A generated courier example with headless evolution training, resumable trainer
-  checkpoints, exported browser weights, serial/parallel benchmarks and a `file://`
-  regression check for frame time, input latency and cancellation of stale results.
-- `searchTourneyAsync` returns `rootScores` for choosing among near-best moves using
-  the same worker search.
-
-### Fixed
-
-- Chess example fuzzy moves now search on workers, with cancellation on reset and
-  timeout. Clock and memory updates refresh text without rebuilding the board;
-  worker lanes are capped at four and timeout fallback selects a legal move without
-  blocking on another search.
-
-## [0.23.0] - 2026-09-30
-
-MIDI humanization and groove tooling (`audio`), plus RPG Maker map details from the MWGP
-player: shadow layers, A2 table-edge strips and richer move routes.
-
-### Added
-
-- `TileMap.addShadowLayer`: RPG Maker's per-cell shadow bits (map layer 4) as translucent
-  quarter-tile quads, editable with `setTile` and left alone by `setCellColor`.
-- `AutotileSet.tableEdge` (MV slot 1) and `rpgmTableEdgeCells`: the front-edge strip the engine
-  draws under an A2 table (`Tilemap._drawTableEdge`), with the engine's rule for which cells
-  get one (a table tile above, none here, no A3/A4 wall on the ground layer).
-
-- `MoveRouteStep` covers what RPG Maker routes use beyond the four directions: `{ step: { dx, dy } }`
-  (diagonals), `{ dir: 'forward' | 'backward' }` (from the mover's facing), `{ turn: 'around' | 'left90' | 'right90' }`,
-  `{ turn: 'toward' | 'away' }`, and a `target: () => { x, y }` on `toward`/`away` steps for a target
-  that keeps moving (`RouteTarget`).
-- MIDI humanization: `humanizeMidi` and `HumanizerFactory` run one shared pass that moves note
-  events and nothing else (tempo, program, controller and meta events pass through untouched,
-  note durations survive, `intensity: 0` reproduces the input exactly, a `seed` reproduces a
-  run, and nothing lands before tick 0) under either shipped engine. `LiteHumanizer` shakes
-  timing and velocity with gaussian noise over a seeded gradient drift, scaled by `style`, and
-  holds the kick and the lowest notes near their slots; `GrooveHumanizer` applies a
-  `GrooveTemplate`'s per-slot offsets and velocities instead, converted through the file's own
-  tempo map (a mismatch reports itself through `onWarn`) and accenting local melody peaks. The
-  `'magenta'` tier stays in the API and throws naming what it needs, since neither
-  `@magenta/music` nor a PerformanceRNN checkpoint can be fetched from a `file://` build, and
-  `MidiPlayer.create(file, { humanize })` humanizes before it schedules.
-- `GrooveExtractor` builds a `GrooveTemplate` three ways, each reduced to the median of each
-  slot's deviations: a played pass against a straight one (matching within half a slot), a
-  single file projected onto its own implied grid, or an `AudioBuffer` (hand-rolled spectral
-  flux onset detection, no analysis dependency, tempo as an argument because a recording
-  carries none). `GrooveConverter` round-trips a template through JSON exactly and through a
-  Standard MIDI File within a tick and a hundredth, with the MIDI path enforcing its anchor
-  and velocity bounds rather than rounding past them and reading back with a dedicated parser
-  for the metas `parseMidi` drops; `ableton-agr` and `reaper-groove` are named in the format
-  union and throw as not shipped. `subdivisionCount`/`assertGrooveTemplate` are the invariants
-  both the extractor and the converter run on.
-
-### Fixed
-
-- `RPGM_FLOOR_AUTOTILE_TABLE[46]` had the wrong bottom-left quadrant (`[0, 3]`, the engine has
-  `[0, 5]`), so shape 46 of every floor-table kind, A4 `mixed` wall tops included, drew a stray
-  corner.
-
-## [0.22.0] - 2026-09-29
-
-Audio and event-runner asks from the MWGP player, plus the small widgets the Pixel
-Dungeon port was carrying (roadmap item 392): a message log, liquid and fog layers, a
-window zoom fit, a Java-compatible random generator, and native A4 autotiles.
-
-### Added
-
-- Item 392, the small widgets the Pixel Dungeon port and the MWGP player were carrying:
-  `two-d/ui.MessageLog` (coloured, line-capped message pane, with `linesToDrop`),
-  `fitWindowZoom`/`sharpenText` (window zoom fit and crisp text under a zoomed container),
-  `two-d/render.LiquidLayer` (scrolling liquid cells with ripples), `FogLayer`/`paintFogPixels`
-  (smooth sub-tile fog), `TileMap.stampRect`, `AutotileSet.mode: 'mixed'` (the MV A4 sheet's
-  floor and wall rows on one native autotile layer; the default for A4 stays the wall table),
-  and `core.JavaRandom` (`java.util.Random` bit for bit, with a draw trace).
-- `rpg.EventRunnerOptions.onUnknownCommand`: called for any command the runner has no
-  handler for, and for a `goto` in a straight `run()` (which then ends the list rather
-  than throwing), so a converter's dropped commands can be made loud instead of silent.
-- `audio.parseVorbisLoopTags`/`loopRegionFromTags`: read the `LOOPSTART`/`LOOPLENGTH`
-  comments of an Ogg Vorbis file (a bounded page walk, null on malformed input) and turn
-  them into the `LoopRegion` a bus loader returns.
-- `audio.AudioBus.setMixer`/`mixer`: a per-kind (BGM, BGS, ME, SE) volume and mute on top
-  of each track's own volume; snapshots keep reporting the level the game asked for.
-
-### Changed
-
-- MIDI rendering voices pitch bend: each note is bent by the amount in effect when it
-  starts (two semitones either way). `ScheduledNote.bend` carries it and is absent when the
-  channel is centered, so files without bends render bit-identically.
-
-### Fixed
-
-- `Label` ignores `setText`, `setColor` and the reveal calls after `destroy()`, which
-  used to throw from Pixi's text update on the released texture (the confirm-spam
-  `_getFinalPadding` error seen on a choice loop).
-
-## [0.21.0] - 2026-09-27
-
-A tournament chess engine beside the small deterministic one, a playable options
-panel around it, and the missing standard form controls: radio groups, multiline
-text, and multi-select lists.
-
-### Added
-
-- `board` bitboards: the chess rules on twelve 64-bit boards (`startingBitboard`,
-  `bitboardFromChess`, `bitboardMoves`, `makeMove`/`unmakeMove`, `perft`), the mutable
-  board the tournament engine will search. Differential tests keep it in agreement
-  with `chess.ts`, and perft matches the published node counts.
-- `board.probeBook`/`parseUciMove` look a position up in a compiled opening book (ECO,
-  name and UCI continuations) and read UCI moves back; `tools/compile-openings`
-  (`mwg-openings`) builds the book from vendored CC0 tables, so the framework ships
-  the probe and no table.
-- `board` tournament search: `searchTourney`/`searchTourneyAsync` over one
-  self-contained `tourneyThink` task (negamax alpha-beta with PVS, null-move pruning,
-  late-move reductions, iterative deepening with aspiration windows, a bounded Zobrist
-  table, quiescence, hash/MVV-LVA/killer/history ordering, in-house piece-square
-  evaluation), beside the small deterministic `board/Engine`, which the minigame path
-  keeps.
-- `board` tablebases: `probeTablebase`/`loadTablebaseEnding`/`tablebaseId` plus the
-  `huffEncode`/`huffDecode` codec, with WDL-plus-distance 3-piece endings compiled
-  under `data/tablebases`; `tools/build-tablebases` (`mwg-tablebases`) generates and
-  verifies 3-to-4-piece endings in parallel over `threads.spawn`.
-- `tools/play-uci` (`mwg-uci`): a UCI adapter over book, tablebase and tournament
-  search for GUIs and rating runs, a Node tool never in the browser bundle.
-- `two-d/ui` form controls: `RadioGroup` (exactly one choice among several, arrows
-  select at once), multiline `TextModel` (real newlines with row navigation and a
-  sticky goal column; single-line fields strip them), and multi-select `ListView`
-  (`multiple` checks rows instead of picking one).
-
-### Changed
-
-- The chess example plays through the tournament engine (`board.searchTourneyAsync`,
-  worker-parallel with a bounded synchronous fallback), with a thinking indicator,
-  play-as-black, engine depth choice, a promotion picker, an in-check highlight, and
-  arrow keys that move the cursor the way the board points.
-- The chess example gains an options panel: checkboxes for play-black, fuzzy moves,
-  pondering, blitz clock, opening book and WDL tables, a FIDE time-control slider, a
-  live search readout (depth reached, score, nodes, best line, opening name, clocks,
-  workers and memory), a concede button, and a new-game offer at game over. The
-  webpage Examples page shows the stronger game with its keys documented.
-
-## [0.20.0] - 2026-09-27
-
-Long synchronous work leaves the main thread: a new worker runtime runs self-contained
-functions on a blob worker in the browser and on worker threads in Node, the offline
-MIDI render and the chess search each gain an async twin on top of it, and the
-build-time compressor works files in parallel.
-
-### Added
-
-- `threads.spawn` runs a self-contained function on a worker thread: a blob worker under
-  the shipped `file://` CSP in the browser, `node:worker_threads` in Node, one worker per
-  task with transferable results, a failure that rejects instead of hanging, and `timeout`
-  / `AbortSignal` cancellation. Off the root barrel: `@datamoc/mw_games/threads`.
-- `audio.renderMidiToBufferAsync` renders raw MIDI bytes (and optional raw SoundFont bytes)
-  on a worker thread, so the seconds a real track costs no longer freeze the caller's
-  thread; the result is bit-identical to `renderMidiToBuffer`, because both paths call the
-  same render function.
-- `tools/compress-dist` compresses files in parallel over async `zlib`, with the lane
-  count from `MWG_COMPRESS_JOBS` (else the machine's thread count, else 4) or the new
-  `jobs` option; rows keep walk order, so the report is identical at any lane count.
-- `ai.rootSplits`/`ai.firstWins` are the root-split halves of an off-thread search: the
-  split pairs each root move with its child in game order, first-wins reduces scored
-  moves keeping the earlier move on ties.
-- `board.searchAsync` scores each chess root move on a worker thread and combines the
-  scores first-wins, so the 90 ms a depth-3 search costs no longer drops the caller's
-  frames; inside the node budget it chooses exactly the move `search` returns, past it
-  (or when cancelled) it resolves `{ move: null }` the same way.
-
-## [0.19.0] - 2026-09-26
-
-A game that plays five instruments no longer ships all 128: the audio module learns which
-programs its MIDI files actually use and writes a smaller SoundFont carrying only those.
-
-### Added
-
-- `audio.collectSoundFontUsage` lists the (bank, program) pairs scheduled notes request
-  across MIDI files, with drums mapped to bank 128 the way the renderer maps them.
-- `audio.subsetSoundFont` writes a smaller, valid SoundFont 2 file carrying only the used
-  programs, with zones, ranges, tuning, envelopes and sample loops copied verbatim and
-  every index remapped, so a compiled game ships just the samples it plays.
-
-## [0.18.0] - 2026-09-25
-
-### Added
-
-- `audio.parseMidi` keeps program-change, control-change and pitch-bend events and reports
-  the controller-111 loop marker as `loopStartTick`; `scheduleMidi` notes carry their channel
-  voice (`MidiVoice`: program, bank, gain, pan) and `midiLoopStart` resolves the marker to seconds.
-- `audio.renderMidiToBuffer` renders a parsed MIDI file to stereo PCM frames, offline and
-  deterministic, voiced by an optional game-supplied `SoundFont` or the built-in waveform
-  synth, with the loop region attached.
-- `audio.parseSoundFont` reads SoundFont 2 bytes into layered preset voices.
-- `audio.Channel` (a seekable buffered WebAudio voice with volume, pitch, pan and a loop
-  region) and `audio.AudioBus` (independent BGM/BGS loops, ME jingles that suspend and resume
-  the BGM, overlapping SE one-shots, save and replay with playheads, plain-data snapshots).
-## [0.17.1] - 2026-09-25
-
-### Fixed
-
-- A page built on a Windows checkout refused its own inline script. The HTML parser turns
-  newlines into LF before it hashes an inline script, while `contentSecurityPolicy` hashed the
-  CRLF bytes a `core.autocrlf=true` checkout hands over, so Chrome computed a different hash
-  from the one the policy allowed. The page logged a Content-Security-Policy violation that
-  `mwg-smoke`, the visual smoke and `mwg-bench` read as a page error, the source-page fallback
-  script never ran, and the same build on Linux stayed quiet - which is why no browser job had
-  caught it. Inline scripts are now hashed after CRLF and lone CR become LF; the standalone
-  page's unpacker scripts stay hashed as written, since no parser touches those. A CRLF
-  checkout and an LF checkout now produce the same policy, pinned by a test.
-- The committed-artifact checks no longer read the checkout's line endings. `api:check`,
-  `stats:check`, `sbom:check` and the committed-SBOM test compared generated text against the
-  committed file byte for byte, so a Windows clone failed them on a tree `git diff` called
-  clean; `bundle.distRaw` summed the bytes `tsc` copies out of a source file's comments, which
-  recorded who generated the file rather than what ships.
-
-### Changed
-
-- The `check` job runs on `windows-latest` alongside `ubuntu-latest`, so the two failures above
-  fail the push instead of reaching a Windows contributor. The gates themselves are unchanged,
-  and `fail-fast` is off so one OS failing still shows the other.
-
-## [0.17.0] - 2026-09-25
-
-### Security
-
-- One inbound pipeline, on by default (item 372). `core.parseInbound` runs the size cap,
-  the control-character check and a `JSON.parse` that refuses `__proto__`/`constructor`/
-  `prototype` at any depth. `SaveSystem.load`/`list`/`importSlot`, `Collection`, the stored
-  values behind `PlayerStats`/`RunHistory`/`NewsSeenTracker`, `Settings`, `NewsClient` and
-  `LockstepClient` all use it, with no call for a game to add. The reason: under `file://`,
-  Chromium shares one `localStorage` between every local page, so any HTML file opened on
-  the same machine can read or rewrite a game's saves. `load` now returns `null`, and `list`
-  skips the slot, for a tampered or malformed slot (a corrupt slot used to make `list`
-  throw). `importSlot` checks the `meta` shape and throws a named error.
-  `LockstepClient` caps server messages at `maxMessageBytes` (1 MB), type-checks `welcome`/
-  `tick`/`rejected`, and reports anything else on the new `onProtocolError` signal instead of
-  throwing out of `onmessage`. An unknown message type, which was silently ignored, is
-  reported there too.
-- The Lua host bounds memory, not only instructions (item 373): `memoryLimit` (32 MB by
-  default, also accepted by `LuaAI`) charges every string and buffer a call allocates, so
-  `string.rep("x", 2^28)` or a doubling `s = s .. s` loop fails with "Lua memory limit
-  exceeded" in milliseconds instead of allocating hundreds of megabytes and freezing the tab.
-  A script-level `pcall` cannot swallow it. `getmetatable("")` no longer exposes the string
-  library.
-- Every page `emitPage` finishes carries a Content-Security-Policy (item 374), so every
-  example and every game built through `mwgPage()`/`mwg-emit` gets it with no configuration:
-  `default-src 'none'`, scripts from the page's own folder plus hashes of its inline scripts
-  (including the scripts a compressed standalone page unpacks), images/fonts/media from
-  `data:`/`blob:` only, and `connect-src` limited to `data:`/`blob:` plus the origins a game
-  declares (`csp: { connect: [...] }`). Measured in Chromium from `file://`: a `fetch`, an image
-  beacon, a remote script and an injected inline script are all refused, and all 22 examples
-  and both standalone variants still start. `'unsafe-eval'` stays allowed, because Pixi 8
-  refuses to start without it unless the game imports `pixi.js/unsafe-eval` (`eval: false`
-  then drops it). `csp: false` leaves the policy out.
-- Transport defaults (item 375): `FeedbackClient`, `NewsClient`, `SaveSyncClient`,
-  `TelemetryClient` and `LockstepClient` throw at construction for an `http:`/`ws:` url to
-  anything but this machine, unless `allowInsecure: true`. Response bodies stream through
-  `maxResponseBytes` (10 MB), checked against `content-length` first and cancelled as soon as
-  they pass it. `SaveSyncClient.download`/`list` parsed their JSON envelope with a bare
-  `response.json()`; they now go through `parseInbound` like every other reader.
-- The reference lockstep server could be stopped by any one client (item 385): `ws` reports
-  an oversized or malformed frame as an `error` event on the socket, and with no listener that
-  event threw and ended the process, every room with it. It now has a listener, caps messages
-  at `maxMessageBytes` (64 KB, where `ws` accepted 100 MiB), reads them through `parseInbound`
-  (an input carrying `__proto__` counts as missing), closes a connection naming an invalid
-  room (1008) or a full one (`maxClientsPerRoom`, 64; 1013).
-- `TelemetryClient` bounds what leaves the machine (item 378): strings (event name, property
-  names and values) are cut at `maxStringLength` (256), at most `maxProperties` (32) are sent,
-  and `allowedProperties`, when given, drops every other name. A path or an error message
-  passed by mistake leaves as a bounded fragment.
-- README and `SaveSystem`'s doc state the rule item 377 settled on: under `file://`, any local
-  page shares a game's `localStorage`, so nothing in a save is private and no secret belongs
-  there.
-- CI hardening (item 379): every GitHub Action is pinned to a commit SHA (the tag kept as a
-  comment), `ci.yml` and `benchmark-browser.yml` run with a read-only token, and Dependabot
-  keeps both the action pins and the npm dependencies current. `tests/workflows.test.ts`
-  fails on an unpinned action or a workflow without `permissions`.
-- `extract-rgssad` wrote each entry to `path.join(outDir, name)` with the name taken from the
-  archive, so a crafted entry (`../x`, or `..\x` on Windows) could write outside the output
-  folder. Entry names are now normalised and refused unless they resolve inside it (item 389).
-- Seeded fuzzing of every decoder that reads outside input (item 376) found four defects, all
-  fixed: `mwl.parseExpression` overflowed the stack on 13 000 nested parentheses (now bounded at
-  256 levels and 4096 operators, which also bounds `evaluateExpression`'s recursion, and it no
-  longer copies the rest of the source for every token); `parseMapFile` trimmed lines with a
-  backtracking `/[,\s]+$/` that took a second on 28 000 spaces; `parseTerrain` spread every row
-  into `Math.max`, which overflows past about 100 000 rows, and had no size bound (now 1024x1024
-  cells); and `rpg.decodeMarshal` overflowed the stack on nested arrays (now 1000 levels).
-
-### Added
-
-- The build step a game needs, shipped (item 381): `@datamoc/mw_games/tools/vite`'s
-  `mwgPage(options)` plugin makes `vite build` alone produce a page that opens from
-  `file://` (IIFE `game.js`, `base: './'`, `assets/` served in dev and compiled into the
-  build, raw copies left out, optional `singleFile`/`compress`/`toWebp`).
-  `@datamoc/mw_games/tools/emit-page` exports the underlying `emitPage(options)`, which every
-  example here still uses through its command line. The getting-started page's step 10 is
-  now that one plugin line; it used to tell users to make the edit by hand.
-- `mwg-size dist` (`@datamoc/mw_games/tools/bundle-size`, item 386): the size budget this
-  repository gates its own build with, for a game's build. Every file a player receives, raw and
-  gzipped, plus the total, against `size-budget.json` (written on first run or with `--update`),
-  failing past `--tolerance` (2 %).
-- `mwg-bench <page | dist>` (`@datamoc/mw_games/tools/benchmark-browser`'s `measurePage`, item
-  387): a game's own frame-rate gate in headless Chrome, with mean fps, 95th-percentile frame
-  time, an optional history compared against its best run, and the software-WebGL switch for a
-  runner with no GPU.
-- `@datamoc/mw_games/testing` (item 388): `memoryStorage`, `fakeAudio`/`fakeAudioWithEnded`,
-  `FakeSocket`, `fakeFetch` and `fakeGamepad`, the doubles for the seams mwg takes by injection. Off the root
-  barrel, renderer-free. This repository's own tests now use them, which removed twelve copies
-  of the same in-memory storage, six of the same fake audio element, two fake sockets and two fake gamepads.
-  `core.MemoryStorage`, the fallback `defaultStorage()` already used, is exported.
-- Two developer tools ship (item 389): `mwg-placeholder-assets <folder>` writes the generated,
-  licence-free placeholder set the examples use (refusing to overwrite without `--force`), and
-  `mwg-extract-rgssad <archive> <outDir>` unpacks an RPG Maker XP/VX archive through the
-  vendored MIT decoder, now in the package with its licence.
-- The translation editor ships (item 384): `npx mwg-i18n <base> <target> [--check]`
-  (`@datamoc/mw_games/tools/i18n-edit`) runs from an installed package, loading `dist` there
-  and the TypeScript sources inside this repository, so a game's CI can gate its translations
-  with `--check`.
-- The reference lockstep server ships (item 385): `npx mwg-lockstep-server [port]
-  [--host=]` (`@datamoc/mw_games/tools/multiplayer-server`), with `ws` an optional peer. The
-  command listens on 127.0.0.1 unless `--host` says otherwise.
-- CycloneDX SBOMs for a game (item 380): `mwgPage()` writes `dist/sbom.cdx.json`, the SBOM
-  of what the build ships (the packages vite's module graph put in the bundle, with versions
-  and licences, and every shipped file with its SHA-256; `sbom: false` skips it). For a small
-  consumer project, 8 packages and 3 files, where its lockfile lists 60 components.
-  `mwg-sbom [folder]` (`@datamoc/mw_games/tools/sbom`) writes the lockfile SBOM of any
-  project, an `application` when the project is `private`. The framework's own
-  `sbom.cdx.json` now ships in the package.
-- `mwg-smoke <page | dist>` and `@datamoc/mw_games/tools/browser-smoke`'s `smokePage` (item
-  383): a game's CI can prove its build still opens from `file://` (no page error, a ready game
-  on a WebGL/WebGPU canvas, non-blank pixels, a screenshot), exiting non-zero otherwise.
-  `playwright-core` is an optional peer. The Chrome lookup now also finds the newest Chromium
-  Playwright installed, whatever its revision, and knows the macOS install paths, so a
-  container or CI image no longer needs `CHROME_PATH`.
-- `bin` entries (item 382): `mwg-emit <folder> [--dist=] [--assets=]` and `mwg-mwl`, so `npx`
-  runs them instead of a `node node_modules/...` path.
-- `core.cloneData`/`core.uncloneablePath` - `structuredClone` whose failure names the first
-  value that cannot be copied and where it sits (`action.target.reactions.rules[0].when`),
-  plus that path lookup on its own for a game to assert its commands are plain data.
-
-### Fixed
-
-- `SimulationRuntime.dispatch` committed a command's state and scheduler cost before
-  journalling it, so a command that could not be copied (one carrying a live actor that owns
-  a `ReactionTable`, say) threw a bare `DataCloneError` after the turn had already
-  happened. It now copies the event batch, the command and (with `history`) the checkpoint
-  state first, and on failure throws a `TypeError` naming the path and restores the random
-  stream, leaving state, scheduler and journal untouched. The plain-data contract for
-  `Command`, `Event` and `State` is now stated on the class.
-- `ActionJournal.append` stored the caller's action object by reference, so mutating it
-  afterwards rewrote history; the action is now copied like the events, and a refused
-  append no longer consumes a sequence number.
-- `Campaign.completeCurrent` assigned the carried-over state before copying the level's
-  result, so a result that could not be copied left the new state applied and the result
-  missing. Both are copied first now. `CanonicalState`, `StateRegistry`, `Campaign`,
-  `runHeadlessScenario` and the MWL save reader copy incoming values through
-  `core.cloneData`, so a non-data value names its path there too.
-
-## [0.16.0] - 2026-09-19
-
-### Added
-
-- First-class autotile layers on `TileMap` (item 370): `addAutotileLayer` takes raw
-  MV tile ids or XP tile values plus one `AutotileSet` per family slot (MV) or image
-  index (XP), and the map assembles each cell's quadrant halves straight from the
-  source sheet, no prebuilt atlas canvas in between. `setAutotileFrame`/
-  `getAutotileFrame` advance and read the animation frame (MV kind cycles, XP frame
-  stripes, wrapping); `setTile`/`getTile` keep working with raw ids. The standard MV
-  floor/wall shape tables ship as `RPGM_FLOOR_AUTOTILE_TABLE`/
-  `RPGM_WALL_AUTOTILE_TABLE` with the family address facts
-  (`RPGM_AUTOTILE_SLOT_BASES`/`RPGM_AUTOTILE_SLOT_COUNTS`, `rpgmAutotileSlot`), and
-  the XP side ships `XP_AUTOTILE_PATTERNS`/`XP_NEIGHBORS_TO_PATTERN` with
-  `xpAutotileRef` (baked cells) and `xpAutotilePattern` (procedural neighbourhoods);
-  `autotileCellParts`/`assertAutotileLayout` resolve and validate one cell
-  renderer-free.
-
-## [0.15.0] - 2026-09-19
-
-### Added
-
-- `mwl.MwlTableReference` and `MwlValidationOptions.tableReferences` - declarative
-  cross-table reference checks (item 362, from the Pixel Dungeon study's proposal P21). A
-  table column declares `references: { table, column }` or `oneOf: [...]`, and
-  `validateCatalog` checks every cell once for all tables, reporting `MWL_TABLE_REFERENCE`
-  with the table, the row, and the offending value. The declarations' contents (which column
-  points where, which set is legal) stay game data in the consuming repository; absent or
-  empty cells are skipped and a `list` cell checks each entry under the table's own
-  delimiter.
-
-- `core.Settings`/`GameSettings`/`SettingsOptions`/`CustomSettingValue` - persisted
-  player settings (item 363): music and sound-effect levels, master mute, zoom
-  preference, key bindings applied to `Input` on load, and a game-defined `custom` bag
-  (`hints`, `violence`, ...). `defaultSettings` names the fresh-game values,
-  `effectiveMusicVolume`/`effectiveSfxVolume` read 0 while muted, and corrupt storage
-  reads as defaults.
-
-- `two-d/ui.SettingsScreen`/`SettingsCustomRow` - a ready-made settings screen over
-  `core.Settings` (item 364): music/sfx sliders, mute checkbox, zoom slider, one row
-  per `custom` descriptor (boolean/number/choice), an embedded controls page that
-  writes rebinds back into `Settings` on exit, and a reset row.
-
-- Auto-pause and auto-mute on page hide (item 365): `Game` suspends the loop and
-  silences its `audio` rig while hidden and resumes both on show (`autoPause`, on by
-  default), via `suspend`/`resume` that park the clock at 0 and route through the top
-  scene's `onSuspend`/`onResume`. `Music`/`Sound`/`Orchestrator` gain matching
-  `suspend`/`resume`, and the player's own mute setting is never touched.
-
-- Frame-time quality scaling over the static device fit (item 366): a `QualityScaler`
-  steps the backing-store ratio down after sustained over-budget frames and back up
-  only after a much longer streak inside budget, wired to `Game` via the
-  `qualityScaling` option (off unless given) with the fitted ratio as its ceiling.
-
-- Audio ducking for dialogue and menus (item 367): `Music.duck` glides to an
-  attenuated level until `unduck`, through the existing fade path, with tracks started
-  while ducked starting ducked and pending fades retargeted. `Sound` is untouched.
-
-- A discrete meter widget, `two-d/ui.Meter` (item 368): N icons with a value filled,
-  the heart row or star rating to `Bar`'s continuous fill. Fractions clip mid-icon
-  through a mask, so halves need no extra art; flat theme pips by default, a
-  game-supplied filled/empty texture pair otherwise.
-
-- Animate only what is on screen, `two-d/render.SpriteGroup`/`isOnScreen` (item 369):
-  `update(camera, dt)` advances the members inside `camera.view` (plus `margin`) and leaves
-  the rest on their current frame. Members are `AnimatedSprite`s, `ParticleEmitter`s, or
-  anything with `x`/`y` in world units plus `update(dt)`; skipped members resume where they
-  left off, and a rotated camera tests the same over-inclusive box `TileMap.cull` uses, so
-  nothing visible ever freezes.
-
-## [0.14.0] - 2026-09-15
-
-### Added
-
-- `core.cellInside`/`cellIndex`/`cellX`/`cellY`/`cellKey`/`cellFromKey` - bounded-grid
-  indexing as one statement of the row-major convention, asked for by the Wesnoth port's own
-  MWG backlog ("primitives `inside`, `cellIndex` and coordinate keys", with the exit criterion
-  "no more duplicated indexing in the game systems; out-of-bounds tested"). The framework had
-  four private copies of exactly these two lines (`roguelike.Level`, `board.Classics`,
-  `board.FogOfWar`, `board/HexSkirmish`); all four now forward to the shared functions and
-  keep their own out-of-bounds policy, which is what differs between them: `Classics` still
-  throws, `FogOfWar` still answers `-1`, and `Level`'s public shape is unchanged. `cellIndex`
-  itself is deliberately unchecked arithmetic so a hot loop pays nothing for a check it has
-  already done, and `cellKey`/`cellFromKey` are the `'x,y'` spelling a `Map`/`Set` wants, which
-  consumers were each inventing for themselves (item 361).
-
-- `tools.md`'s "Packaging as a native app" section now covers the mobile (Capacitor/Android)
-  target beside the desktop one: the two toolchain prerequisites that stop a clean machine (JDK
-  21 with `JAVA_HOME`, an SDK that Gradle can find), the five commands from a game's own folder
-  to an installed app on a device, and the three things the generated project gets wrong once and
-  never revisits. Each was reproduced rather than restated: the `.gz`/`.br` sidecars break the
-  asset merge (`mergeDebugAssets FAILED ... Duplicate resources`), `ignoreAssetsPattern` gaining
-  `:!*.gz:!*.br` clears it, and an unchanged `versionCode` refuses the second install
-  (`INSTALL_FAILED_VERSION_DOWNGRADE`). Finishes what item 351 left as a scaffold-only
-  verification and P18 asked for (item 357).
-
-- Package subpaths for the three shipped `tools/*.mjs` helpers a game imports as a library -
-  `./tools/classic-html`, `./tools/extract-html` and `./tools/single-file` - beside the three
-  that already had one. An `exports` map blocks every deep path it does not name, so naming
-  three of the seven shipped helpers left the other four unimportable outright:
-  `import { toClassicScript } from '@datamoc/mw_games/tools/classic-html'` failed with
-  `ERR_PACKAGE_PATH_NOT_EXPORTED` even though the file ships, pushing a consumer to hardcode a
-  `node_modules/@datamoc/mw_games/...` path that stops existing the moment the package is
-  installed under an npm alias. `tools/classic-html.mjs`'s own `@example` showed the
-  `.mjs`-suffixed spelling, which is exactly what the map refuses; it now shows the specifier
-  that resolves. `tools/mwl.mjs` deliberately keeps no subpath: it reads its arguments and
-  dispatches at import time, so one would make importing it run the CLI. Its library half,
-  `@datamoc/mw_games/mwl`, is the typed, already-exported entry point. `tests/package-tools.test.ts`
-  holds all of that (item 358).
-
-### Changed
-
-- `desktop/MwgDesktopHost` loads the built game page named as its first argument instead of
-  only this repository's own `tower-defense` example, and a page it cannot find is reported in
-  a dialog naming what it looked for rather than an unhandled `FileNotFoundException`. With no
-  argument it still walks up to the example, so `npm run desktop:run` is unchanged. This is what
-  makes the reference host usable by a game that merely *uses* `mwg`: the published package
-  ships no packaging scaffold at all (`files` excludes `desktop/`, and every `desktop:`/`cap:`
-  script is repo-relative), so such a game copies the host's two files rather than installing
-  them. The consumer recipe is now written up, with the `dotnet publish` line and the
-  `--no-compress` requirement a native build needs, in `tools.md`'s new "Packaging as a native
-  app" section, in `desktop/README.md`, and as an optional step 11 of the getting-started page;
-  README's status note says where the packaging lives, and stops claiming v0.7.7, instead of
-  leaving the distance between its claim and the package for a consumer to discover. The mobile
-  (Capacitor) half of the same recipe followed as item 357, in the same section of `tools.md`.
-
-- `Game` keeps the renderer's resolution inside what the device reports it can make. The canvas
-  was sized to `window x devicePixelRatio` whatever the viewport, and a backing store past the
-  GPU's `MAX_TEXTURE_SIZE` is refused by WebGL *silently*, by clamping the drawing buffer: the
-  game carries on rendering into a surface that is not the one it asked for, and nothing is
-  reported anywhere. A full-window 816x1812 canvas at `devicePixelRatio` 2.625 asks for
-  2121x4709, which a device reporting a 4096 limit answered with a 2121x4096 buffer (item 360).
-  That process also painted an entirely black screen, and that is *not* attributed here: the
-  failure never reproduced (every later run of the same emulator reported 8192) and a
-  deliberately clamped 1050x10500 request rendered correctly, so the black screen has no cause
-  recorded against it. What stands on its own is the clamped request the game never made. The
-  resolution is now reduced to the largest whole number that fits, with a warning naming the
-  limit, and re-fitted on rotation and on a `devicePixelRatio` change; a device that can afford
-  what it asked for is untouched.
-
-- `ROADMAP.md`'s one open 1.0 exit-checklist line (both reference ports complete and playable)
-  was corrected and its framework half tested, since the premise it was written on had gone
-  stale. It named a `mwg-wesno` directory that was never used: the Wesnoth port is `mwg-wesnoth`
-  inside a Wesnoth source checkout, and it was pinned at mwg 0.9.0, so it had never been tested
-  against this release. With 0.13.0 placed in its install for both names it imports, that port
-  typechecks, passes all 334 of its tests, builds (124 MB `dist/game.js`) and passes its own
-  headless-browser verification with `"errors": []`; the Pixel Dungeon port, already on
-  `^0.13.0`, builds and plays in a browser. Neither port's README claims completeness, so the
-  line stays unchecked with that evidence recorded beside it.
-
-### Fixed
-
-- `tools/single-file.mjs`'s `output` is now documented and enforced as a file *name* written
-  inside `dist`. An absolute path used to be joined onto `dist` and fail later inside
-  `writeFile` with an `ENOENT` naming a doubled-up path; a value containing a separator is now
-  refused up front with an error naming the argument and the value, since the argument is what
-  was wrong. `tools/single-file.d.mts` and `tools/compress-dist.d.mts` gained the prose their
-  `.mjs` counterparts had and their declarations did not: `output` is a name, not a path,
-  `compressDist`'s `dir` is rewritten in place (its `.gz`/`.br`/`.xz` siblings appear inside it,
-  originals untouched), and each result field's meaning is stated, including that an unwritten
-  sibling reports 0 rather than being absent (item 359).
-
-## [0.13.0] - 2026-09-15
-
-### Added
-
-- `core.parseDialogueLines`/`DialogueLine` and `core.parseTwee`/`TweeCommand`/`TweeChoice`/
-  `TweeStory` - the two-speaker `@id`/`-` dialogue-text state machine and the Twee-notation
-  passage/link parser, each shared by a `two-d/stage` and an `rpg` wrapper (`parseDialogueText`,
-  `importTwee`) rather than copied between them, the same precedent `core.parseCSV` already
-  set for a generic text-format parser other modules build a typed result around.
-  `TweeCommand`/`TweeChoice` are structurally compatible with both `StoryScript`/`StageChoice`
-  and `EventStoryScript`/`EventChoice`, so neither wrapper needs a per-field conversion.
-- `two-d/stage.parseDialogueText`/`extractDialogueCatalog` and `rpg.parseDialogueText`/
-  `extractDialogueCatalog` - a terse line-based dialogue format, alongside `importTwee`, for
-  straight (non-branching) scenes: `@id text` names the speaker, an unprefixed line
-  narrates, and `- text` alternates between the first two speakers a scene establishes
-  (capped at two; a third distinct speaker is refused rather than guessed at). Each is a
-  thin wrapper around `core.parseDialogueLines` naming its own command shape (`StageCommand`'s
-  `as` versus `EventCommand`'s `speaker`), so a text-only RPG needs no Pixi dependency to use
-  it and a Pixi-based visual novel needs no `rpg` dependency either. Each module's
-  `extractDialogueCatalog` builds an identity `i18n` catalog from the result (`two-d/stage`'s
-  also reads a `StoryScript`), the same shape MWL's `extractCatalog` builds from
-  `_("...")`-marked strings, so a translator has real entries to start from (item 355).
-- `rpg.EventRunner.runStory`/`EventStoryScript`/`EventCommand`'s new `goto` variant/
-  `EventChoice.goto` - a named-passage graph for map-event scripts, the `EventCommand`
-  counterpart to `StageScript.runStory`/`StoryScript`: a `goto` command or a choice's own
-  `goto` jumps to a different passage, and a plain `run()` refuses a stray `goto` instead of
-  silently ignoring it.
-- `rpg.importTwee`/`EventTwineStory` - imports Twee-notation Twine stories into
-  `EventStoryScript`, a thin wrapper around `core.parseTwee` (the same engine
-  `two-d/stage.importTwee` wraps for `StageCommand`/`StoryScript` instead), so a text-only
-  RPG can import a branching Twee story with no `two-d`/Pixi dependency (item 356).
-
-## [0.12.0] - 2026-09-14
-
-### Added
-
-- `rpg.EventRunner`'s `DialogueRequest` (and `EventCommand`'s `say`/`ask`) gained an optional
-  `portrait` field, threaded through to `two-d/ui.messageBoxPresenter` and `MessageBox`'s own
-  pre-existing `portrait` support - a portrait-bearing line no longer has to bypass `present`
-  and build its own `MessageBox` directly (item 352).
-- `rpg.GridMover.jumpBy` - an instant reposition with no tween and no walk animation, for a
-  "jump" move-route step over terrain `moveBy`'s glide has no way to skip.
-- `rpg.MoveRouteRunner`/`MoveRoute`/`MoveRouteStep`/`MoveRouteOptions` - drives any `GridMover`
-  through a scripted route (fixed/random/toward/away steps, turn, jump, wait) with `repeat` and
-  `skippable` policies, built entirely on `GridMover`'s existing primitives (item 353).
-- `audio.Sound.play(gain, pitch)` - an optional pitch parameter as `HTMLAudioElement.
-  playbackRate`. No matching `pan`: a plain `<audio>` element has none to set, the same reason
-  `Positional.audioPan` only ever reported a number rather than owning a panner node (item 354).
-
-### Fixed
-
-- `mobile:build` (and everything built on it: `cap:sync`, `cap:add:android`, `desktop:build`,
-  `desktop:run`) now passes `--no-compress` to `emit-page.mjs`. Item 349/350's `.gz`/`.br`
-  sidecar files, written by default into every build since those items shipped, broke the
-  Android/Capacitor asset merge (`Duplicate resources` from AAPT, which treats `game.js` and
-  `game.js.gz` as colliding) the first time the full pipeline was actually built and run
-  end to end (item 351) - those sidecars were always dead weight for a packaged native app
-  with no server to negotiate `Content-Encoding` for, so this drops them at the source rather
-  than special-casing the generated `android/` project.
-
-### Changed
-
-- `android/` is no longer `.gitignore`d (item 110's original choice, kept since). The
-  Capacitor-scaffolded project's own generated `.gitignore` already excludes build output,
-  `local.properties`, and the copied web assets/config that `cap sync` regenerates every
-  build - the 53 files it leaves are ordinary scaffold source (manifest, Java, gradle files,
-  launcher/splash resources), the same kind of thing worth tracking as any other native
-  wrapper customization: this session's own `ignoreAssetsPattern` fix (above) would otherwise
-  have been silently lost the next time someone ran `cap add android` fresh.
-- `webpage/assets/0c_framework_architecture.svg` regenerated - it had gone stale since the
-  `ai` and `mwl` modules were added to `src/`, so the "generated, never hand-drawn" diagram
-  was quietly wrong about the current module list until `npm run webpage:diagrams` was
-  actually re-run (item 351's Android/Windows verification pass turned this up while
-  double-checking related documentation).
-- `webpage/design/architecture-explorer.html`, the interactive module-graph explorer, was
-  regenerated via the archify skill for the same reason: authored once at release 0.4.3, it
-  had never been updated and was missing `ai`/`mwl` entirely despite linking to itself as
-  "generated straight from src/'s own import graph". Rebuilt with real, verified import-graph
-  data for all 15 current modules and a fourth guided view ("mwl as data-authoring backbone").
-- `desktop/README.md` documented only the older, unwired `desktop/webview2` host and never
-  mentioned `desktop/MwgDesktopHost` - the one `desktop:build`/`desktop:run` actually build -
-  or its `SetVirtualHostNameToFolderMapping` capability. Rewritten to cover both hosts and
-  which job each is for.
-
-## [0.11.0] - 2026-09-14
-
-### Added
-
-- `tools/webp-convert.mjs` (`toWebp`) and `compileResources`'s `toWebp`/`webpLossless`/
-  `webpQuality` options - convert `.png`/`.jpg`/`.jpeg` build assets to WebP before embedding,
-  lossless by default (verified pixel-for-pixel identical to the source) and only kept when
-  actually smaller, under the asset's unchanged key so `load('sprite.png')` keeps working the
-  same in dev and built modes. Needs the optional `sharp` devDependency, dynamically imported
-  only when `toWebp` is used, so a build that never asks for it never needs it installed
-  (item 350).
-- `single-file.mjs`'s `algorithm: 'gzip' | 'brotli'` option (`--brotli[=quality]` on the CLI,
-  `--single-file-brotli[=quality]` on `emit-page`) - brotli compression for the single-file
-  build alongside the existing gzip path. gzip stays the broadly-supported default: a real
-  Chrome (153) tested directly during this feature's own verification throws for
-  `DecompressionStream('br')`, so brotli is documented as an advanced, narrower-reach option
-  rather than an assumed-safe default (item 350).
-
-### Fixed
-
-- `single-file.mjs`'s generated bootstrap: `new DecompressionStream(format)` throws
-  synchronously for an unsupported format rather than rejecting a promise, which escaped the
-  bootstrap's own error handling entirely and left the splash screen stuck forever instead of
-  failing visibly - found live in the browser while verifying item 350's brotli option, fixed
-  for both gzip and brotli by converting the throw into a rejection.
-- `assets.load`'s `data:` URI format hint now comes from the URI's own MIME type first, falling
-  back to the asset path's extension only when that is unavailable. Found while reviewing
-  item 350's WebP conversion: `toWebp` can compile a `sprite.png` path into `image/webp` bytes
-  (keeping the `.png` key so dev and built modes keep agreeing), and the old, path-only hint
-  would have told Pixi's resolver to run the PNG parser over WebP data.
-
-## [0.10.0] - 2026-09-14
-
-### Added
-
-- `tools/single-file.mjs` and `emit-page --single-file [--single-file-compress[=level]]` -
-  a genuinely single-file `file://` build with no sibling `.js` at all: every script an
-  example's build loads is inlined into one additional `standalone.html`, optionally gzipped
-  and unpacked at load through the browser's own `DecompressionStream` behind a splash
-  screen, additive to the existing multi-file output (item 349).
-
-## [0.9.1] - 2026-09-14
-
-### Added
-
-- `rpgmAutotileFrame` and `RpgmAutotileAtlas` - renderer-neutral RPG Maker MV autotile
-  atlas geometry, including four-slot decoding, quadrant selection, validation, and cached
-  frame descriptions (roadmap item 348).
-
-## [0.9.0] - 2026-09-13
-
-### Added
-
-- `core.CanonicalState` - a defensive, JSON-safe root state combined with `StateRegistry`
-  extensions, with snapshots, version migrations, transactions, and atomic restore covering
-  both pieces together (item 341).
-- `simulation.validateSimulationReplay`, and an optional `history` option on `SimulationRuntime`:
-  replay a recorded journal from a checkpoint and compare deterministic event batches, and
-  restore complete state/scheduler/RNG/journal undo-redo checkpoints (item 341).
-- `LockstepClient`/`createLockstepServer` carry a session seed and initial state, validate
-  game-supplied commands, and exchange per-tick state checksums, with new `onReject`/`onDesync`
-  signals reporting rejected input and diverging peers (item 341).
-- MWL JSON5 authoring accepts schema-neutral named-node sugar (`{ unit_type: { id: 'hero' } }`
-  and repeated object children) alongside the generic `tag`/`children` envelope, lowered before
-  validation runs (item 338).
-- `MwlDomainHook`/`MwlDomainHookRegistry`/`MwlDomainHookDeclaration` - game-declared hook
-  namespaces (`item-effect:potion-strength`) get a typed context/input/output boundary that MWG
-  validates and emits without knowing the domain's own types or rules (item 342).
-- `HookWorld.random` - every MWL hook, built-in or domain, draws from the runtime's own seeded
-  `core.Generator` instead of `Math.random()`, via the new `MwlRuntimeOptions.random`; the draw
-  position is carried on `MwlWorld.random` and resumes exactly across save/restore (item 342).
-  Any game hand-building its own `HookWorld` (only `MwlRuntime` constructs one today) must now
-  provide this field too, the same rule item 319's `variableAt` addition already established.
-- `MwlSaveableHookState`/`MwlHookRegistry.saveable` - a game may explicitly expose JSON-safe hook
-  state; `MwlRuntime.save()`/`restore()` round-trip it through the same save envelope (item 341).
-- `MwlRuntime.journal`/`MwlRuntimeAction` - public runtime operations (running a trigger, firing
-  an event or a moveto watch, answering a dialogue choice) are recorded in order and persisted
-  with the save (item 341).
-- The MWL parser and compiler retain exact JSON5 attribute and value source locations
-  (`MwlNode.attributeLocations`/`valueLocations`), used by schema, catalog, and macro
-  diagnostics instead of falling back to the owning node's own location (item 342).
-- Unknown MWL macros and hook references are errors by default, with file/line/column
-  diagnostics; `MwlPreprocessOptions.macroPolicy: 'ignore'` restores the old silent-passthrough
-  behaviour for legacy content (item 342).
-- `schema10`/`MWL_SCHEMA_10` - the published MWL 1.0 vocabulary: required attributes and child
-  cardinalities on top of the unchanged 0.1 tag/value contract; `mwl migrate --to 1.0` performs
-  a lossless upgrade (item 342).
-- `validateCatalog` reports `MWL_ALIAS_CYCLE` for cycles in resolved `aliasof` chains, and the new
-  `MwlValidationOptions.mapBounds` rejects authored coordinates outside declared map dimensions
-  (item 342).
-- `readTableMap`/`readTableIndex`/`tableKey` - typed table-row projections with collision-free
-  native composite keys, and inverse indexes that retain every matching row (items 339, 346).
-- `mwl diagnostics`/`mwl ci` CLI modes emit stable, machine-readable JSON diagnostics; `mwl
-  format`/`mwl migrate --to 1.0` emit a deterministic canonical document (items 342, 346).
-- `tests/random.test.ts` gained a hardcoded-output compatibility test for `core.Generator`'s
-  stream, guarding fixed seeds against a future silent algorithm change (item 342).
-
-### Changed
-
-- `mwl/grammar.ts`'s macro expansion, gettext rewrite, and tag-site collection now share one
-  `skipStringOrComment` scan instead of three near-identical hand-rolled copies of it.
-- `LockstepClient.submitInput` accepts an optional per-tick checksum and an optional client-side
-  `validateInput`; rejected input reports through the new `onReject` signal instead of silently
-  going nowhere.
-
-### Fixed
-
-- `src/mwl/catalog.ts` carried a literal NUL byte, rather than an escaped `\0`, inside one
-  composite map key, which made the file register as binary to `git diff` and `grep`. Replaced
-  with the same `\0` escape already used for the identical purpose elsewhere in the file; no
-  behaviour change.
-
-## [0.9.0-alpha] - 2026-09-13
-
-### Changed
-
-- MWL authoring syntax is now JSON5 instead of the WML-inspired tag/`key=value`
-  form: every `.mwl` file is a top-level array of `{ tag, ...attributes, children }`
-  nodes, values are real JSON5 numbers, booleans and strings (stringified back to
-  the `Record<string, string>` the schema, compiler and runtime already see), and
-  translatable strings are marked `_("...")` via a preprocessor rewrite. The
-  `#define`/`#include`/`#ifdef` textual pass is unchanged. The `"""..."""` block
-  form (item 317) is superseded by JSON5 `\n` escapes and backslash line
-  continuations. Clean cutover: all fixtures, examples, tests and doc examples
-  are migrated, the old tag parser is deleted, and `json5` (pure JS, no native
-  build) is a runtime dependency.
-
-## [0.8.2] - 2026-09-13
-
-### Added
-
-- `tests/builtin-pipes.test.ts`: regression coverage confirming `TiledSprite`/`NinePatch`
-  resolve to Pixi's own registered `tilingSprite`/`nineSliceSprite` pipes, a guarantee previously
-  verified only by a downstream consumer's own uncommitted script (item 336).
-
-### Changed
-
-- `mwl/runtime.ts`'s `executeNode` (a 226-line `switch` over 28 command tags, its own case
-  bodies inline) is now a `commandHandlers` dispatch table plus one small, independently-named
-  private method per command. No public API or behaviour change: `API_REPORT.md`'s diff is
-  purely additive private-method stubs, and all 166 `mwl-*.test.ts` tests pass unmodified
-  (item 337).
-- `DEVELOPMENT.md` documents why `coverage`/`coverage:check` exclude `Game.ts`,
-  `ColorTransformBatcher.ts`, `Minimap.ts`, `three-d/Vox.ts`, `DialogueStage.ts`,
-  `EventDialogue.ts` and `two-d/ui/**` (Pixi rendering/layout, verified by the visual smokes
-  instead of a coverage percentage), and why `core` holds optional network-facing clients
-  alongside always-needed primitives (item 333, item 334).
-- `GameOptions.extensions`'s doc comment now names `TiledSprite`/`NinePatch` alongside
-  `TintedSprite` as self-registering their Pixi render pipe automatically, closing a
-  documentation gap that likely explains why a cautious consumer wasn't confident enough to rely
-  on it (item 336).
-
-### Fixed
-
-- `mwl`'s `validateWorld` rejects a `__proto__`/`constructor`/`prototype` key anywhere in a
-  decoded save (item 335): `MwlRuntime.restore` merges a decoded save into its own world with
-  `Object.assign`, which honours such a key as a prototype substitution rather than an ordinary
-  value. `core/Sanitize.ts` gains `assertNoForbiddenKeys`, the same rejection `validateSchema`
-  already applied to fixed-shape data, generalised to `mwl`'s dynamic, arbitrarily-nested world
-  shape.
-- `SaveSystem.load` returns `null` for a corrupted or malformed slot instead of throwing an
-  uncaught `SyntaxError`, the same outcome a missing slot already produced; `importSlot` throws a
-  labelled `SaveSystem.importSlot: payload is not valid save data` error instead of a bare parse
-  error (item 331).
-- `Container2D`/`Texture2D` in `two-d/render/Types2D.ts` each carried two adjacent JSDoc blocks,
-  so only the generic, less useful one reached generated documentation; merged into one comment
-  each (item 332).
-
-## [0.8.1] - 2026-09-12
-
-### Added
-
-- `MwlValue` is exported from the `mwl` barrel, alongside `MwlWorld`: the recursive
-  `string | number | boolean | MwlValue[] | { [key: string]: MwlValue }` that `MwlWorld.variables`
-  and a hook's own attributes already used, now nameable by a game's own code instead of only
-  inferred.
-- `MessageParams` takes nested records, and a `{token}` may be a dotted path into them (item 329):
-  `t('hit', { side })` resolves `{side.stored.hitpoints}` by walking the params it was handed, so a
-  game whose scenario state is a tree passes the tree rather than flattening it into names first.
-  A path that names nothing - a step missing, an object where a value belongs, a path past a
-  scalar - leaves the placeholder as written, and an exact entry still wins over the walk, so a
-  literal dotted key resolves as it always did. The placeholder grammar (`tokenizeMessage`, shared
-  with the editor's `diffPlaceholders`) is what widened: a dotted token carries its `:spec` and
-  `!conv` like any other.
-- `~ROTATE(degrees, linear)` and `rotatePixels`'s `RotateMode` (item 330): a rotation at an angle
-  that is not a quarter turn can now interpolate instead of sampling nearest-neighbour, which is
-  what keeps a tile rotated onto a hex grid from coming out as a staircase. `~ROTATE(45)` and
-  `rotatePixels(..., 'nearest')` are the default and are unchanged, still exact at multiples of 90
-  degrees; `'linear'` blends the four pixels around each sample point, premultiplied by alpha, so a
-  transparent neighbour contributes coverage and never colour - a straight RGBA blend would fringe
-  every cut-out sprite with whatever RGB its transparent pixels happen to hold, which is the one
-  way this can look worse than the fast path rather than better. Both modes are bake-time work, and
-  measured: `linear` costs 2.4 to 4.2 times `nearest` per image (0.45 ms against 0.12 ms for a
-  64x64 tile at 60 degrees, 3.6 ms against 1.5 ms at 256x256), once, while the texture is built.
-  `parseRotateMode` is the argument's parser, exported beside the other path parsers so a game
-  rendering `~ROTATE` through its own canvas pipeline reads the same names.
-
-### Changed
-
-- `parsePo` treats a `#, fuzzy` entry as untranslated (the Wesnoth port's non-adoption review),
-  which is what gettext's own tools make of it: the key is left out and the base language wins,
-  rather than shipping a translation a translator has not signed off on. Flags were previously
-  dropped on the floor along with comments; every other flag still changes nothing.
-- `paletteRangeMapping` shades a reference palette by brightness rather than by position (item 327),
-  which is what a Wesnoth `[color_range]` team colour is defined by: the reference's first colour
-  is its anchor and becomes `mid`, every other entry blends towards `min` or `max` in proportion to
-  how its own channel average compares with the anchor's, and the arithmetic is the engine's own -
-  a floored average, a truncated blend, no rounding - so the shades come out byte for byte as
-  Wesnoth's `recolor_palette` gives them. A list no longer has to be sorted lightest-first for the
-  mapping to make sense, only to keep its anchor first, and the mode it pairs with is `'exact'`:
-  the mapping covers the reference exactly, so the pixels outside it (anti-aliased edges, outlines)
-  stay as the artists painted them, where the previous documentation pointed at `'nearest'` for it
-  and would have repainted the whole image. Verified against the port's own transliteration of the
-  engine over 699,996 sampled colours across five ranges, including the all-black and all-white
-  anchors, with no mismatch.
-
-## [0.8.0] - 2026-09-12
-
-### Added
-
-- `MwlHookDeclaration` and `validateHookAttributes` (item 321), plus `validAttributeValue`/
-  `attributeTypeDescription`: a hook declares the attributes its own `[hook]` calls carry, and
-  `validateCatalog`'s `hooks` option takes that declaration where a bare `type:name` id used to
-  be the only accepted shape. A typo in a hook attribute is now a compile-time `MWL_VALUE` or
-  `MWL_UNKNOWN_ATTRIBUTE` instead of a throw mid-scenario. The tag schema's own value check now
-  calls the same two exported functions, so the two cannot disagree.
-- `HookWorld.variableAt(path)` (item 319): the read that matches `Emit.setVariable`'s write, both
-  resolving a nested variable through the same walker `[variable] name=` uses, so a hook no
-  longer has to cast away `Readonly` and walk paths itself (which produced flat dotted keys no
-  reader finds). `Emit.setVariable` is documented as the write half. Any game implementing its
-  own `HookWorld` must now provide the method; only the runtime constructs one today.
-- `[set_variable] path=` (item 318), on both spellings: the computed target a converter needs for
-  a dynamic name, expanded from `$name`/`$(expression)` references before the same path walker a
-  literal `name=` uses resolves it. `name=`/`target=` keep their literal meaning.
-- `[set_variable] mode=literal|number|expression` (item 316), on both spellings of the effect
-  (`[set_variable]` and `[command] name="set_variable"`): content declares what its own `value=`
-  means instead of `MwlRuntime` inferring it from the text. `literal` keeps the text exactly as
-  written, `number` parses it and throws on anything that is not one, `expression` evaluates it
-  through the same context `[if] test=` uses. A value with no `mode` is inferred as before, so
-  hand-authored content is unaffected.
-- `mwl.MwlAttributeType` (item 316): a schema attribute's type may be the closed list of values
-  it accepts, not only one of the shared value types. A value outside the list is a compile-time
-  `MWL_VALUE` diagnostic naming the alternatives.
-- `key="""..."""` attribute values (item 317): the one form that may span lines, taken exactly
-  as written, so wrapped message, objective and option-label text no longer needs a converter to
-  collapse its whitespace. The `_` gettext marker applies to it as to any other value.
-- `roguelike.coneSector` (item 322): a circular sector aimed at an angle. Rays are cast every 0.5
-  degrees across an arc of `degrees`, each clamped to `range` and stopped by the first wall, so a
-  wall shadows the part of the cone behind it while the rest still reaches. `coneCells` snaps the
-  aim to one of the eight directions and sprays linearly from there; a sector keeps the angle it
-  was aimed at, which is what a breath weapon, a searchlight or a gas cloud wants. It needs the
-  level - that is what stops its rays - so it is a function rather than one of `AreaShape`'s kinds,
-  whose resolver works without one. Ray offsets round away from zero, so a sector aimed along an
-  axis is exactly symmetric rather than a cell wider on one side. Six tests in
-  `tests/targeting-shapes.test.ts`.
-- `ParticleEmitter` colour ranges, curves and flicker (item 323): `tint` takes a `[from, to]` pair
-  each particle draws its own colour from (mixed channel by channel, where interpolating the packed
-  value would carry from one channel into the next), `scale`/`alpha` take a `ParticleCurve` of the
-  particle's own age instead of only the birth-to-death pair, and `flicker` multiplies the scale by
-  a seeded draw every frame, which is a torch's wobble rather than its fade. Each of those draws
-  happens only when its option is used, so an existing seeded spray is unchanged, and reduced
-  motion drops the flicker along with the travel. Five tests in `tests/particles.test.ts`.
-- `Window({ blocker: true })` (item 324): a full-viewport child under the window's chrome that
-  swallows clicks, so a window over a map or a toolbar stops passing them to what is underneath,
-  and dismisses the window when the click lands outside it. A window's own widgets are hit first,
-  and a click on the frame or an empty part of the body is swallowed without dismissing, so the
-  body is never a close button by accident. `handleOutsideClick(x, y)` is that decision on its own,
-  headless-testable the way `handleAction` is. Off by default: it changes what the whole screen
-  answers to. Seven tests in `tests/window-blocker.test.ts`.
-- `WindowStack.handleAction(action)` is public (item 325): a scene with its own keyboard handling
-  can now ask the windows before acting, instead of discovering that registration order decided it.
-  `Input.onAction` offers an action to the most recently registered listener first, and the stack
-  registers in its constructor, so a scene that builds its stack in `create()` and registers a
-  handler after it is offered every key before the open window is, and returning true for one takes
-  it away from the window. The class doc spells the race out and gives the one-line chain
-  (`stack.handleAction(action) || myOwnHandling(action)`), and the same doc now says what a scene
-  that does not chain has to do instead. `Window`'s own doc gains the other half: its frame and
-  empty body are not clickable, which `blocker` is the option that changes. Three tests in
-  `tests/window-stack-routing.test.ts`.
-- `SpriteSheet.rect(index, x, y, width, height)` (item 326): arbitrary rectangles for the sheets
-  that are not grids - a hand-packed icon atlas, a strip of bar segments, a nine-patch's corners,
-  an item whose art is smaller than its cell. A rect is cached under its index exactly like a grid
-  frame, so `get`/`region`/`name`/`pick` treat it as one and asking twice returns the same
-  `Texture`, where the hand-written path built a fresh one per site (about twenty of them in the
-  port, plus its own helper). Declaring a rect over a grid index replaces that frame, which is what
-  a tightened sub-rect is. `grid`/`fromTexture` now take no frame size at all, leaving a sheet with
-  no grid and only the rects declared on it. Five tests in `tests/sprite-sheet-rects.test.ts`.
-
-### Changed
-
-- `MessageBox` swallows clicks by default (item 324), through the same `blocker` layer: a box with
-  a page still to read, or a choice to answer, is not something a click on the world should be able
-  to act past. It is not closable, so this can only ever swallow a click, never dismiss the box,
-  and `blocker: false` is the opt-out for a box the player is meant to click past (the same case
-  `dims: false` is for). `examples/interface` uses both new halves: its bag window takes
-  `blocker: true`, and its map handler now asks `windows.handleAction` rather than relying on
-  having registered before the stack did.
-- `sbom.cdx.json` carries a `serialNumber` (item 315): a version-5 UUID over the document's own
-  content, so it stays stable for a given lockfile and changes when the dependency set does, which
-  keeps the drift check and gives the serial the meaning CycloneDX asks of it. `metadata.timestamp`
-  stays absent on purpose: a generation time stamped into a committed file is one stale moment
-  every later read is dated to, and `CHANGELOG.md` already dates each version.
-
-## [0.7.9] - 2026-09-12
-
-### Added
-
-- `tools/sbom.mjs` with `npm run sbom`/`npm run sbom:check` (item 315): a CycloneDX 1.6 SBOM
-  (`sbom.cdx.json`) for the framework, built from `package.json` and `package-lock.json` alone
-  with no network access or added dependency, and checked in CI so a dependency change moves the
-  supply-chain document with it.
-- `core.clamp`, replacing two byte-identical private `clamp` helpers in `rpg.Collision` and
-  `two-d.render.Camera`.
-- `two-d/pixi-interop`'s `registerBuiltinPipes()` (item 297), plus re-exporting
-  `TilingSpritePipe`/`NineSliceSpritePipe` themselves, for a consumer bundler that tree-shook
-  a built-in Pixi pipe away despite importing the full `pixi.js` package.
-- `ui.ListView.tapRow(index)` (item 299), the `IconGrid.tapCell`-shaped public method for the
-  select-and-confirm-in-one-step tap a row's own `pointerdown` handler already did.
-- `assets.setAssetMap(map)` (item 300): hands `resolve`/`has`/`paths`/`isCompiled` a game's
-  own path-to-URI map directly, taking priority over `window.__MWG_ASSETS__` while set, for a
-  game whose own bundler compiles assets a different way than `tools/compile-resources`.
-- `two-d.render.StatusVisuals.flash(color, strength, duration)` (item 301): a one-shot,
-  linearly-decaying additive pulse layered on top of whatever statuses are active.
-- `two-d.render.ScreenEffects.sequence(steps)` and a new `hold` phase (item 302): chains
-  fade/hold/flash steps end to end as one call, for the hold-then-fade-back transition
-  `fadeOut`/`fadeIn`/`flash` alone cannot express; `update` keeps returning false at every
-  step boundary, true only once the whole sequence finishes.
-- `two-d.render.Camera.shakeScreen(intensity, duration)` (item 303): `shake` taking screen
-  pixels instead of world units.
-- `mwl.MwlValidationOptions.rowIdScope` (item 304): `'file'` scopes `MWL_DUPLICATE_ID`'s
-  `tag:id` key per source file instead of the whole compiled catalog, for a game whose id
-  convention reuses ids across files on purpose.
-- `two-d.render.spriteColorMatrix(sprite, matrix)` (item 309): attaches any of
-  `blendMatrix`/`channelScaleMatrix`/`channelSwapMatrix`/`colorShiftMatrix` (or a game's own
-  matrix) to a sprite as a `ColorMatrixFilter`, without needing a direct `pixi.js` import just
-  to construct that one class.
-- `assets.load` now supplies Pixi's `Assets.add` a `format` hint (the original path's own
-  extension) whenever the resolved `src` is a compiled build's `data:` URI (item 308), since
-  the URI itself carries no extension for Pixi's resolver to pick a parser from. No new
-  argument: a game still calls `load(['tiles.png'])` exactly as before.
-- `[item]` accepts `image`/`icon` (item 307), carried through
-  `MwlItemDefinition.image`/`.icon`; both were already recognised as asset attributes by the
-  manifest scanner, so this closes the schema gate that was blocking them.
-- `tools/classic-html.mjs`'s `toClassicScript(html)` (item 306), shipped in the npm package:
-  rewrites a bundler build's `<script type="module">` entry tag to a classic deferred one, so
-  the page opens via `file://`. `tools/emit-page.mjs` now uses it too, instead of its own copy
-  of the same rewrite.
-- `two-d.render.applyAllImageModifiers(sprite, parsed, probe?, scale?)` (item 310): runs
-  `applyTextureModifiers`'s exact pixel-level baking and `applyImageModifiers`'s sprite-level
-  modifiers in the order a caller with a `~BLEND`/`~ROTATE` path needs, so the two no longer
-  have to be driven by hand.
-- `two-d.render.createLayers(parent, names)` (item 312): builds one labeled `Node2D` per name,
-  attached to `parent` in the order given and returned keyed by name, for the conventionally
-  ordered layer stack (terrain, units, effects, UI, ...) a game otherwise hand-wires.
-- `ui.RichLabel`/`ui.MarkupText` take `tagStyles` (item 313), the same custom-inline-tag option a
-  bare `Text2D` takes. `markup.parseMarkup` gained `MarkupOptions.tags` and a `MarkupSpan.tag`
-  field so the parser stays renderer-neutral: `MarkupText` applies each tag's Pixi style to its
-  run and measures under it, while `RichLabel` keeps a registered tag as a real element for
-  `HTMLText` and still escapes an unregistered one.
-- `two-d.render.Projectile` takes an optional `animation` (item 311): the projectile advances
-  the flight frames with its own elapsed time and reports the current one through
-  `frame`/`frameOffset`, so a missile with `[missile_frame]` art no longer needs a parallel
-  animation and clock kept in step by the game.
-
-### Changed
-
-- **Breaking:** `two-d.render.StatusVisuals` now composes every active status's colour
-  additively (each channel clipping at 1) instead of one status winning by declaration order,
-  and never writes the multiply `tint` any more, so a sprite's own identity tint survives
-  underneath (item 301). `TintTarget` is now just `{ colorAdd: number }`; `lerpTint`/
-  `resetColor` are no longer part of its contract.
-
-### Fixed
-
-- Documented, in `tools/mwl.mjs` and README's MWL section, that a game needing more than
-  `mwl build`'s three standard files should write its own build script against the public MWL
-  library API rather than look for a CLI flag (item 305).
-- Corrected two contradictory doc comments (item 298): `Shape2D.ts` claimed `Container2D` was
-  a type alias a game could not `new`, when it is a value re-export and always was; and
-  `pixi-interop.ts`'s "no registration needed" guarantee is `pixi.js`'s own `sideEffects` list
-  surviving the consumer's own bundler, not a universal property.
-- `withTextureCanvas`'s pixel-level modifiers (`~BLIT`/`~MASK`/`~BLEND`/`~ROTATE` in
-  `applyTextureModifiers`, and `recolorTexture`) called a real
-  `CanvasRenderingContext2D.putImageData` with a plain `{data, width, height}` object, which a
-  real browser rejects (it needs an actual `ImageData`); a test-supplied `probe.createCanvas`
-  never hit the real canvas path, so the bug had no unit-test coverage. `withTextureCanvas` now
-  wraps the real context's `putImageData` to build a proper `ImageData` itself, so every
-  pixel-level modifier keeps writing the same plain object.
-- `[filter]`/`[have_unit]` `x`/`y` now accept the comma-separated lists and inclusive ranges
-  (`x=1,2,4-5`) a moveto event's own `x`/`y` already did (item 314); the schema types them
-  `coordinate` and `unitMatchesFilter` reads them through the one `coordinateMatches`.
-
-## [0.7.8] - 2026-09-12
-
-### Added
-
-- Unit identity usable by the AI. MWL units now carry their own `name`, `role`/function and
-  `can_recruit` leader flag: `[unit]` sets them, a side's own leader is `can_recruit`, `[role]`
-  stamps the role onto the units it matches, `[store_unit]`/save keep them, and `unitMatchesFilter`
-  reads all three - which also wires up the `can_recruit` the `[filter]` schema already allowed but
-  the runtime ignored. On the AI side, `ScoreSubject` and `HeuristicCandidate` carry
-  `type`/`role`/`can_recruit`/`name`, and the new `subjectsWhere`/`ScoreSubjectFilter` select a world
-  on any of them, so a mind can find "the enemy leader" without re-deriving it from ids.
-- Leader identity on the unit (item 296). An autospawned `[side] leader=` unit carries `leader: true`
-  beside its `can_recruit`, `[store_unit]`/unstore and a save keep it, and `unitMatchesFilter` reads
-  it, so `[filter] leader=yes` finds the side's own leader without recomputing
-  `sides[id].leader === id`.
-- One variable-path resolver for every reader (item 295). `$name` resolution, `[condition]`/
-  `[filter_condition]` variable reads, message interpolation and the bare `$name` copy all resolve
-  through the same path walker `set_variable` writes with, so a dotted name like `a.b` reads what
-  `[set_variable] name=a.b` wrote. Array indices are in scope (`a[0].b` reads the node `a.0.b` or
-  `a[0].b` wrote), an index that is not a whole number is refused by name rather than becoming a
-  literal key, and the `id` schema type accepts brackets so such a name compiles.
-- `TerrainGraphicsLayer` (item 257): the renderer half of `[terrain_graphics]`, drawing
-  `resolveTerrainGraphics`'s placements as one `Sprite2D` per placement, in `layer` order (a stable
-  sort, so the rule pass's own row-major walk survives within a layer) at the pixel position a
-  caller-supplied `project` callback reports, with images resolved through the asset resolver.
-  `setPlacements` redraws in place.
-- The canvas backend for inline markup, closing the three pieces item 258's acceptance still
-  named as open: `positionMarkupLines` places `layoutMarkupLines`'s lines into positioned
-  `PositionedMarkupSpan` runs under a `MarkupLayout`'s `direction`/`align`, so an `rtl` line flows
-  right to left and alignment defaults to the direction's own edge, and `MarkupText` draws them as
-  the counterpart to `RichLabel`'s HTML text - one `Text2D` per styled run, one `Sprite2D` per
-  `<img>` span resolved through the asset resolver, so an image is drawn rather than left to the
-  caller to position. An RTL sample is now covered by `tests/markup.test.ts`.
-
-### Fixed
-
-- One rule for the `id` value type, shared by the schema and `mwl.readers`. The schema accepts a
-  bracketed path like `a[0].b` as an `id` (a variable name legitimately carries index brackets),
-  but `readAttributes`' `id` and `id-list` kept a stricter copy of the pattern, so an adapter
-  reading a variable-name attribute raised `MWL_FIELD_TYPE` for a name the compiler had already
-  accepted. Both now call the exported `isMwlId`. One test in `tests/mwl.test.ts`.
-- `actors.sell` is transactional again. It ignored the result of `Inventory.add`, so selling into
-  a shop stock with no room paid the seller and lost the item: two potions sold into a
-  capacity-1 stock produced 10 gold from nothing and left the potions nowhere. It now rolls the
-  bag back and refuses, exactly as `buy` already did for a full bag. One test in
-  `tests/shop.test.ts`.
-- `board.goScore` counts territory again. Its `group` helper returned nothing for an empty
-  square, so the area-scoring loop never saw an enclosed empty region and only stones were
-  scored: four stones ringing a 3x3 board reported 4 instead of 9. `group` now groups connected
-  cells by value with `null` included, which leaves `liberties`/`playGo` unchanged because they
-  only ever pass a stone. One test, plus new coverage for `rollBackgammonDice`, a foundation
-  move from a tableau column, and `DiceCup.clearKept`, in `tests/classics.test.ts`.
-- `board.addTacticalUnit` remembers each unit's own action budget, so `endTacticalTurn` refreshes
-  `actions` to it instead of a hardcoded two. A unit created with `actions: 3` was silently reset
-  to 2 every turn; the per-turn maximum is now `TacticalUnit.maxActions`, filled from the initial
-  `actions` when the caller does not set it. Six tests in `tests/tactics.test.ts`, which also
-  cover the overwatch reaction and attack paths that had none.
-- `board.backgammonMoves` follows the bearing-off rules. It offered a bear-off from any point
-  whose roll reached past the off edge, so at the opening position a 6 came off from point 18
-  while checkers still sat on 0, 11 and 16. A bear-off now needs every checker in the home
-  board with none on the bar; an exact roll still takes any home checker, and an over-roll takes
-  only the checker nearest the off edge, since a checker must never skip past another. Three
-  tests in `tests/classics.test.ts`.
-- An `[if]` branch no longer tries to execute its own `[condition]` child. The schema allows a
-  branch to carry one, but the executor ran every child, so an `[if]` whose condition held threw
-  `unknown MWL command: condition` instead of running its body; a false condition hid it because
-  the body never ran. `[if]`/`[else]` now run their command children only, the same rule
-  `[while]` already followed. Two tests in `tests/mwl-conditions.test.ts`.
-- An `[else]` following an `[if]` is that branch's other half, so only one of the two runs. A
-  taken `[if]` used to run its own body and then fall through to the `[else]` as well, so both
-  branches executed; the `[else]` is now skipped when the `[if]` was taken, and run as the
-  fallback when it was not. Independent pairs still work, and a free-standing `[else]` with no
-  `[if]` before it still runs. Two tests in `tests/mwl-conditions.test.ts`.
-- `[while]` had the same defect as `[if]`, so a loop body carrying a `[condition]` child threw.
-  It now runs its command children too. One test in `tests/mwl-variables.test.ts`.
-- The variable-path readers item 295 named are now complete, closing three that were still flat:
-  a dialogue `[choice]`'s `variable=` gate, `[store_unit]`/`[unstore_unit]`/`[recall]`'s stored
-  list, and the hook host's `setVariable`, plus the public `execute()`'s `set_variable`. An
-  indexed path now builds a real array (`a[0]`, `a[1]`), so a stored list and an indexed write
-  agree on their shape. One test each in `tests/mwl-dialogue.test.ts`, `tests/mwl-actions.test.ts`
-  and `tests/mwl.test.ts`, and the `a[0].b` test now asserts the array.
-
-### Changed
-
-- `board.skirmishMoves` computes every reachable cell from one Dijkstra pass over the map
-  instead of one per candidate cell. The old per-cell search also re-sorted its own frontier
-  every step and `shift()`ed it, so it went quadratic in path length; the pass now uses a
-  binary min-heap. Behaviour is unchanged, verified by a differential run of the old and new
-  implementations over 58 randomised terrain maps. A `[complexity]` test keeps 20 calls on a
-  40x40 map under a ceiling far below the old cost, and a test pins that a cell held by
-  another unit is never offered as a move.
-
-## [0.7.7] - 2026-09-11
-
-### Added
-
-- Heuristic AI (item 269): `Aspects`, `Difficulty`, `Goals`, `RecruitmentPattern`, and a
-  `HeuristicAI` candidate/stage pipeline with `defaultWeigh`/`keepAwayScore`/`goalScore`. Aspects
-  ship no values; the numbers stay content, and `keep_away` is a real penalty.
-- Achievements and battle statistics (item 273): `core.Achievements` gained sub-achievements
-  (multi-criterion unlocks via `AchievementDef.criteria`, read back with `subProgress`), and
-  `battle.BattleStats` tracks recruits/recalls/advances/kills/deaths/damage dealt/damage taken by
-  unit type for a `PlayerStats`/`RunHistory` summary to fold in.
-- Free map rotation (item 286): `Camera.rotateTo`/`animateRotationTo` turn the view to any angle,
-  not only a grid's whole steps, sharing 285's layer-level transform and taking the shorter way
-  around a full turn when animated.
-- Battle UI models (item 265): `AttackPreview` (damage totals and an animated frame timeline from
-  the game's own numbers), `AttackDialog` (the selector plus the preview and its clock),
-  `UnitSelector` (attacker then target), and `Whiteboard` (planned orders with undo/redo). All
-  renderer-free; the dialog's pixels are `Bar`/`Label` a game composes.
-- Story screens (item 264): `StoryScreen` (a full-screen backdrop, title and text advanced by a
-  click) over the renderer-free `StorySequence` (`advance`/`back`/`goTo`/`skip`/`restart`, with the
-  current beat's `music` reported as a signal). `StoryBeat` matches `MwlWorld.story`'s shape.
-- Data-driven shell layout and skins (item 263): `Layout` (`resolveAnchor`/`anchorAlign` over nine
-  named anchors plus `fill`, and a `Grid` of `size`-or-`grow` tracks) and `Skins` (per-widget,
-  per-state looks with a widget-state -> widget-idle -> wildcard fallback chain, and `Skins.from`
-  for plain data). Both renderer-free.
-- The missing UI widgets (item 261): `Slider` (`sliderFraction`/`sliderValueAt`), `Checkbox`,
-  `Spinner` (`spinValue`), `Dropdown`, `TextModel`, `DataTable`, `TreeView` and `ScrollBox`
-  (`scrollOffset`). The rule-bearing parts are pure functions or renderer-free models tested
-  headlessly, the drawing is a thin theme-driven shell, and text fields pair `TextModel` with a
-  `Label` rather than a separate `TextArea`.
-- Fixed-angle view rotation on `Camera` (item 285): `grid: 'square' | 'hex'` sets four quarter turns
-  or six 60-degree steps, `setRotationStep`/`rotate` move through them, `toScreen`/`toWorld` invert
-  the turn, `view` reports the box around the turned viewport for culling, and `uprightRotation`
-  keeps a label drawn into the world upright.
-- WML action vocabulary in `[event]` (item 250): `fire_event`, `store_unit`/`unstore_unit`/`recall`,
-  `modify_unit`/`heal_unit`, `set_terrain`, `capture_village`, `clear_shroud`, and the scenario-level
-  `[role]`/`[object]`/`[story]`, backed by `MwlWorld.villages`/`clearedShroud`/`roles`/`objects`/
-  `story` (all saved). WML's scenario `[item]` is deliberately not added: the tag already means an
-  inventory item definition.
-- `blendPixels`/`rotatePixels` in `ImageModifiers.ts`: `~BLEND` and `~ROTATE` moved from a
-  runtime sprite-property/`ColorMatrixFilter` approximation to an exact, baked-once per-pixel
-  operation in `applyTextureModifiers` (`~ROTATE` in particular now rotates the source pixels
-  and expands the surface, which a sprite's own `rotation` cannot do - needed for terrain and
-  anything else that must keep tiling after the rotation). `blendMatrix` stays available for a
-  caller that explicitly wants the cheaper live approximation instead.
-- `PaletteRemapMode` (`'exact'` | `'nearest'`) on `remapPixels`/`recolorTexture`, defaulting to
-  `'exact'`: a pixel is now repainted only on an exact match to a `from` colour unless
-  `'nearest'` is asked for explicitly. The old always-nearest behaviour silently recoloured an
-  entire image the first time `~RC`/`~PAL` met a short, specific palette instead of a full
-  covering; `paletteRangeMapping`'s own gradient usage opts into `'nearest'` explicitly, since
-  that is the one case it is correct for.
-- `ImageTextureProbe.resolveColor` and the exported `parseColorPairs`/`parsePaletteLists`: `~RC`
-  and `~PAL` now accept a named colour (`~RC(magenta>red)`), not hex only, and `~PAL`'s two
-  comma-separated colour lists parse correctly instead of only the first colour of each list
-  (`parseImagePath`'s own comma split does not respect that list's internal boundary, which
-  `parsePaletteLists` now reconstructs).
-- `~BLIT`/`~MASK` now hand `resolveTexture` the argument exactly as written, nested modifiers
-  included (`~BLIT(unit.png~RC(magenta>red),0,0)` calls it with the full string, not a bare
-  path with the modifier silently dropped).
-- `withTextureCanvas` is now exported from `two-d/render`, so a caller building its own
-  texture-level modifier can reuse the same canvas bookkeeping `recolorTexture`/`~BLIT`/`~MASK`/
-  `~BLEND`/`~ROTATE` all share instead of duplicating it.
-
-- `mwl.parseMapFile`/`MwlMapFile` (item 284): a Wesnoth-shaped `.map` loader. The `key=value`
-  header is split off and kept (keys not interpreted), and the comma-separated grid goes through
-  the same `parseTerrain` an inline `[map] terrain=` uses.
-- `actors.craft` category-shaped ingredients (item 289): `Ingredient` now accepts `id` as a string
-  or a list, a `category` matched against the item definition's new `InventoryItem.category`
-  (kind-level, so it stays out of saves), or a `matches(item)` predicate. `craft` allocates against
-  a working copy so two flexible ingredients cannot count one stack twice.
-- `two-d/render/SpriteAttachment.ts`: `SpriteAttachment` (item 291), ties a second sprite's
-  position to a first one's - `follow(x, y)` applies an offset, an optional `duration` makes
-  `update(dt)` report `done` once it elapses, so a permanent shadow and a temporary status icon
-  are the same class with different options. Renderer-neutral like `Projectile`/`LightningArc`.
-
-- `two-d/render/LightningArc.ts`: `LightningArc` (item 292), the position data for a jittered
-  line between two points - a lightning bolt, a tether, a chain-lightning link - geometry only,
-  drawn by the caller through `Shape2D`'s `Graphics`. `retarget` moves either endpoint for a
-  tether following two moving units; an optional `flickerInterval` re-rolls the jitter on a
-  timer instead of holding one fixed shape.
-- `assets.load`'s `optional`/`onMissing` options (item 287): paths a game can do without load
-  separately from the required batch, so one missing file never aborts the rest; `texture`/`get`
-  take a `fallback` value returned instead of a throw for a path that never loaded.
-
-- `MultiTurnBeam` fronts, `blocker`, `onCell` and saved shape identity (item 278): a beam is now a
-  sequence of per-turn fronts rather than one captured cell per turn, so a game-supplied
-  `fronts(previous, turn)` expresses a cone, burst, fork or moving front. `BeamBlocker` replaces
-  the implicit blocker flags with one policy, `BeamStep.cells` reports every reached cell, and a
-  save carries the shape name so `fromJSON` refuses a mismatched shape; pre-fronts saves still load.
-- `two-d/render/PaletteRemap.ts`: `remapPixels`/`paletteRangeMapping`/`recolorTexture` (item
-  256), a nearest-colour palette remap for team-colour-by-range - `paletteRangeMapping` places a
-  reference palette's own lightest-to-darkest order along a `min -> mid -> max` gradient,
-  `remapPixels` is the renderer-free pixel core, and `recolorTexture` (via the new shared
-  `withTextureCanvas` helper) is the canvas-backed wrapper.
-- Eleven more `image~MOD` suffixes in `ImageModifiers.ts` (item 255): `~O`, `~R`/`~G`/`~B`,
-  `~BLEND` and `~CHAN` join `~FL`/`~SCALE`/`~GS`/`~CS` as sprite-property/`ColorMatrixFilter`
-  operations on `applyImageModifiers`; `~ROTATE` sets the sprite's own rotation. `~RC`, `~PAL`,
-  `~BLIT` and `~MASK` needed real pixel access or a sibling texture, so they are the new
-  `applyTextureModifiers`, built on 256's `withTextureCanvas`. `~GS` no longer replaces a filter
-  already on the sprite (was clobbering, now appends).
-- `two-d/render/TerrainGraphics.ts`: `resolveTerrainGraphics`/`TerrainRule`/`matchTerrainRule`/
-  `squareRotate`/`hexRotate` (item 257), a rule-driven `[terrain_graphics]`-style transition pass
-  generalising `Autotile`'s fixed 47-shape blob table: arbitrary flag conditions at arbitrary
-  offsets, multi-image placement (so a piece bigger than one cell is one rule's own data, not
-  something `TileMap`'s one-sprite-per-cell grid has to hold), rotation and probability. Returns
-  plain placement data; drawing it through a renderer is still open.
-- `markupToHtml` now renders colour and size as an inline style; `markupAccessibilityText` is a
-  proper accessibility projection for markup (an image becomes a caller-described string instead
-  of its raw path); `layoutMarkupLines` wraps already-parsed spans word by word, each word
-  measured under its own span's style, so a bold or larger run wraps where its own wider glyphs
-  actually land (item 258's remaining acceptance, in part - see ROADMAP for what is still open).
-
-- `ParticleEmitter` spawn bounds (item 279): `ParticleSpawnArea` is an optional `spawn` on the
-  emitter's options, a `rect` or `ellipse` in local space so a burst spreads across an extent
-  instead of every particle starting at the emitter's single origin (a forge mouth, a flame
-  column, rain across a room). A point emitter draws nothing extra, so the seeded sequence an
-  existing replay recorded is unchanged.
-- `roguelike.TargetingController` (item 280): the input-facing half of targeting, renderer-free.
-  A cursor moved by `move(dx, dy)` or a caller-resolved `moveTo(cell)`, range and line-of-sight
-  validation with an optional `validate` hook, a `preview()` of the shape's cells and a
-  `confirm()`/`cancel()` result carrying cells only, so damage, legality details and drawing stay
-  with the game. Hex levels step by their own six neighbours and measure in hex distance.
-- `AudioListener`/`SoundSource`/`audioGain`/`audioPan`/`AudioFalloff` (item 271): positional
-  audio, renderer-free. A listener the game moves and turns, a `Sound` placed at a world point,
-  and the distance gain and stereo pan between them. `SoundSource.playFor(listener)` applies the
-  gain through `Sound.play`, which now takes an optional gain argument.
-- `Input.onText`/`Input.onComposition`/`Input.textFromKey`/`Input.dispatchText`/
-  `Input.dispatchComposition` (item 262): the character a key press produces, and the three
-  phases of an input-method composition, so a free text field can be built. `onText` is a
-  stack-mode signal a focused field can consume.
-- `MersenneTwister`/`MersenneTwisterState`/`RandomStreams` (item 266): MT19937 with the reference
-  `mt_rng`'s `seed`/`discard`/`discardCount` bookkeeping (verified against the standard test
-  vector) and named, independent streams derived from one base seed, so per-entity and per-usage
-  draws never shift each other. C++'s `uniform_int_distribution` is implementation-defined, so the
-  int mapping is MWG's own and documented as such.
-- `i18n.parsePo`/`PoOptions` (item 270): a gettext `.po` loader into the same `Catalog` surface
-  as `parseFTL`, with `msgctxt`, `msgstr[N]` mapped onto the locale's CLDR categories,
-  untranslated entries left out for base fallback, and gettext `domain`-prefixed keys.
-- `world.SideTurns`/`SideTurn`/`TimeOfDay`/`TimeArea`/`Alignment`/`alignmentBonus` (item 267): the
-  reference's outer turn model, sides in order with a schedule that steps per round, and a per-hex
-  `lawfulBonusAt` where a `TimeArea` overrides the global time of day.
-- `ui.TabbedList`/`ListTab`/`TabbedListOptions` (item 281): a renderer-free model for a tabbed,
-  filtered, paged list with selection and a detail/close state, over caller-supplied rows and
-  predicates. The page is derived from the selection, so the two cannot disagree.
-- `simulation.EventPresentation`/`EventPresentationOptions` (item 282): the documented recipe
-  tying a `SimulationRuntime` to a `PresentationQueue` - command result, animation lock,
-  scheduled secondary actor, cancellation, and save/load that resumes idle.
-- `MwlWorld.sideStatus` and per-side `[victory]`/`[defeat]` under `[side]` (item 283): a side's
-  own condition is evaluated after the scenario-wide `[objectives]` ones, its result recorded by
-  side id, and `[win]`/`[lose]` record the side they name too. `MwlCommand`'s `win`/`lose` gained an
-  optional `side`.
-- `simulation.CampaignSave`/`CampaignSaveState`/`CampaignSaveParts` (item 249): one `SaveSystem`
-  slot for a whole campaign, holding the campaign, world and simulation snapshots together, with
-  the world payload left opaque.
-- `core.stateChecksum`/`core.SyncGuard` (item 272): a key-order-stable 32-bit checksum of JSON
-  state and a guard comparing the checksums peers compute per tick, so a lockstep run can notice
-  and locate a divergence.
-- `ai.personalScoreView`/`ai.sideScoreView`/`ai.scoreWith`, over `ScoreSubject`/`ScoreView`/
-  `ScorePersonality` (items 274-276): the numbers a mind needs when a search is the wrong tool.
-  The game supplies what anything is worth, the framework assembles the view (own, allies and
-  enemies kept apart, with a `seen` count), and a personality is weights over the three, so a
-  selfish scout and a loyal one are content rather than two AI implementations. A unit's sight and a
-  whole side's read through the same two functions and differ only in the visibility set they are
-  handed, and `board.FactionFog.sees(side)` is that set as a predicate: it reads the shroud as it is
-  when called, not as it was when the predicate was made.
-- `Animation`/`AnimatedSprite` frame timing (item 254): a frame is now a texture or
-  `{ texture, duration, offsetX, offsetY }`, so a frame carries its own time and its own place, as
-  Wesnoth's `image=a.png:120,b.png:80` does, and `AnimationOptions.startTime` is signed the way
-  Wesnoth writes it: positive holds the first frame, negative starts partway in (`start_time=-450`
-  over frames of 100ms opens on the fifth, which is how a swing is lined up with its damage frame).
-  `Animation.frameAt`/`frameIndexAt` are the rule, the sprite advances on its own elapsed time
-  rather than a leftover timer, and a frame's offset is reported through `AnimatedSprite.frameOffset`
-  for the caller to add where it already positions the sprite.
-- `FactionFog.share(factions)` (item 268): factions put on one map, what is lit now and the shroud
-  they remember alike, which is what Wesnoth's `share_vision` means. Nothing shares until asked,
-  growing a group widens it rather than replacing it, and a share declared after a `sync` still
-  counts because the group is read when a cell is asked about. `sees(side)` follows it, so a side's
-  score view reads the team's eyes.
-- `campaignChain` (item 247): a `[campaign]` pointed at `simulation.Campaign`. `first_scenario` opens
-  it, each `[scenario]`'s `next_scenario` is where it goes when it is won, and the chain ends where a
-  scenario has no next one. The order is content and the playing stays the game's, since the runner
-  is a callback; a scenario that decides for itself keeps its decision, which is where a runtime
-  `[endlevel]` will hook in. Malformed chains (no scenarios, one id twice, an unknown
-  `first_scenario`) throw by name. The `[campaign]` schema now accepts `first_scenario`, and
-  `contentCatalog` exposes each campaign's scenario links.
-- `[endlevel]` and carry-over (item 248): a scenario ends with `result=victory|defeat`, and what it
-  hands on is `endLevelCarryover` - `bonus` plus a share of the side's gold (`carryover_percentage`,
-  80% when unset, which is the reference's own default rather than an invented one), the units of
-  that side still standing as the recall list, and `next_scenario` for where the campaign goes (the
-  hook `campaignChain` already honours). `carryoverIntoScenario` is the other half of the rule: the
-  carried share is added to what the next scenario declares when `carryover_add` asks for it, and is
-  otherwise a floor under it. `MWL_DEFAULT_CARRYOVER_PERCENTAGE` names the default.
-- `[kill]` as a filter (item 251): naming a unit that is not there still throws, while a `[kill]`
-  whose attributes are a filter over the world's units is a no-op when it matches nobody, as WML's
-  own `[kill]` is. It reads the same attributes an event filter does, an empty filter matches every
-  unit (there as here), and the schema entry is open on attributes so a filter can say what it
-  means.
-- A scenario turn limit, as a native condition (item 253): `[game] turn_limit=N` makes the runtime
-  set `time_over` as a world variable and fire the `time_over` event once the turn counter passes N.
-  Content tests it like any variable and answers it like any event, `[endlevel]` included, because a
-  limit is usually a defeat and sometimes the whole scenario.
-- An inline-markup contract, first half of item 258: `MarkupSpan` plus `parseMarkup`/`stripMarkup`/
-  `markupToHtml`/`escapeHtml` in `src/two-d/ui/markup.ts`. Nested emphasis, named and hex colours, a
-  size, a line break, an image span carrying a path, `$name` interpolation supplied by the caller,
-  and the five entities as escapes. Unknown or malformed tags and unset variables stay literal
-  rather than vanishing, and output text is escaped so no raw HTML can leak. What the item's
-  acceptance still wants (backend equivalence, wrapping after styling, images through the asset
-  resolver, an accessibility projection) is recorded on the item rather than implied here.
-- The `[side]` surface, and one key of it with behaviour (item 252): the Wesnoth keys `team_name`,
-  `user_team_name`, `share_vision`, `village_gold`, `heal`, `fog`, `shroud`, `hidden` and `flag` are
-  read onto `MwlWorld.sides` as written (`yes`/`no` as booleans), and `sideVisionGroups` turns
-  `team_name` with `share_vision` into the groups `FactionFog.share` takes.
-- Hex projection options, first half of item 259: `hexToPixel`/`pixelToHex` take
-  `HexShape`/`HexOrientation`/`HexOffset`, so a grid can be flat-top or pointy-top with either
-  offset parity, and the default is the flat-top odd-q layout the module always had. The inverse is
-  the nearest cell centre, which cannot disagree with the projection at a hex's edge.
-- `Halo` (item 260): the glow around a unit, an aura, a shrine's light. An `AnimatedSprite` that
-  `follow(x, y)`s a target with its own offset applied once, additive by default, with z-order left
-  to the caller. `[halo_frame]` needed nothing new after 254 gave frames their own timing.
-
-### Fixed
-
-- `FloatingTextStack` stacked the wrong way round: it moved the **newcomer** down by
-  `height + 1`, where Java's `FloatingText.push()` anchors the newcomer on the target and lifts
-  the lines already there to `below.top - height - 4`. A second pop-up on one target in one turn
-  therefore landed *below* the target instead of above the first - found by a consumer measuring
-  it, not by the tests, which asserted the offset's magnitude and never its direction.
-  `floatingTextStackOffset` is replaced by `floatingTextStackLift` (the position the older line
-  must take, rather than an offset the caller adds, so the sign cannot be got wrong quietly) and
-  by `floatingTextStackMoves`, the whole policy: which lines move, newest first, where each one
-  ends up, and what age each is forced to. The loop is arithmetic now, so it is checked as
-  arithmetic rather than through a rendered label. `FLOATING_TEXT_STACK_GAP` names Java's 4px gap.
-- The lift survived exactly one frame. `FloatingText.update` wrote its own `y` from a base captured
-  on the first frame, so a line the stack had just moved snapped back on the next one: measured, a
-  line lifted to 166.6 was back at 194.4 beside the newcomer at 200, still overlapping it. The rise
-  now moves the pop-up's inner layer and never its position, which belongs to the caller and to the
-  stack; `baseY` is gone. A consumer repositioning a pop-up mid-flight no longer loses the position
-  on the next frame either.
-- A pop-up scaled *after* `push` was measured before the scale, because a `FloatingText`'s `height`
-  includes its own scale. A port rasterising at 21px and drawing at 7 therefore spaced lifted lines
-  33.4 world pixels apart for lines 9.8 tall. `push` now takes a `scale`, applied before the pop-up
-  is measured, so the entry records the size the line is actually drawn at.
-
-### Changed
-
-- `FloatingText.shortenLife(seconds)` becomes `FloatingText.ageAtLeast(seconds)`, which does what
-  Java's rule says rather than something close: `above.timeLeft = Math.min(above.timeLeft,
-  LIFESPAN - numBelow / 5f)` caps what is *left*, and a cap on what is left is a floor under the
-  age. A line that has already lived past the floor keeps the age it has, where subtracting the
-  floor shortened it a second time. `floatingTextAgeAtLeast` is that arithmetic as a pure function,
-  so the difference is checked by a test; `floatingTextStackLifePenalty(linesBelow)` stays the
-  floor itself, a fifth of a second per line below.
-- A stack keys on `key` alone, as Java's `stacks.get(key)` does. The old rule wanted the same key
-  *and* the same origin, which this framework had invented. A caller that reused one key for two
-  different targets now sees their lines stacked together, and has to give each target its own key.
-- One side identity in `MwlWorld` (item 277): `unit.side`, `MwlMessage.side`, `MwlMap.starts` keys
-  and every `side`/`side_filter` attribute now hold the string `id` `[side]` declares, so a named
-  side (`id=rebels`) works throughout. `MwlSideRef` is just that id. The `[side] id` and the other
-  side-identifying schema attributes accept a string (numbers still validate), and the map
-  `<side> <code>` keep marker accepts a name.
-
-### Fixed
-
-- `ui.Window` (item 290): `closed` is now a getter to guard a caller's reference after `close()`,
-  `close()` is idempotent, input and layout on a closed window are no-ops rather than throws on
-  freed Pixi internals, and `WindowStack.push` refuses a closed window with a named error.
-
-## [0.7.6] - 2026-09-11
-
-### Added
-
-- `Blob.spread` returns the cells it just emptied, in reading order, so a game can turn the ground
-  under a fire to embers at the moment the flames leave it instead of diffing `cellsAbove` between
-  two steps to notice. Cells emptied before the step (a doused one) are not reported.
-
-### Changed
-
-- `pixi.js` moved from `dependencies` to an optional peer dependency, the treatment
-  `@babylonjs/core` already had (item 175's 1.0 decision). The install line now names it:
-  `npm install @datamoc/mw_games pixi.js vite`. A game that only uses the renderer-free modules
-  never downloads it. Verified from an empty directory on all three documented paths: the
-  registry install, the `npm pack` tarball installed by path, and the no-install
-  `mw_games.global.js` script tag.
-
-## [0.7.4] - 2026-09-11
-
-### Added
-
-- `FloatingTextStack` owns the pop-ups a game spawns over world points: one `push` per number, one
-  `update(dt)` to drive them all, and pop-ups sharing a key and an origin stack apart instead of
-  overprinting. `FloatingText` gained a `hold` option for the classic hold-then-fade curve, and its
-  rise now moves an inner layer rather than the container itself - it used to overwrite the
-  container's own `y`, so a pop-up positioned at a world point jumped to `y = 0` on its first
-  update. The fade curve and the stacking rule are exported as pure functions, so both are tested
-  without a DOM.
-- `ParticleEmitter` accepts a `frames` texture sequence, walked per particle across its own life -
-  the four frames of a flame, the puff of smoke - in place of the single `texture`. The current
-  frame is exposed as `Particle.frame` for the same reason the rest of the particle state is.
-- `Bar` recolours its fill at runtime with `setColor(color)` and takes a `background` colour for its
-  track; both are readable back through `color`/`background`, and a runtime colour counts as
-  explicit so a later theme change cannot throw it away. These were the two blockers for a consumer
-  whose bars change colour with state (a health bar going red as it empties) and whose track is
-  black rather than the theme's panel fill.
-
-## [0.7.3] - 2026-09-11
-
-### Added
-
-- Hex-map parity for targeting, cones, area resolution, minimaps, markers, automap validation,
-  and multi-turn beam traversal, with topology-specific tests.
-- The `multi-turn-beam` example demonstrates blockers, moving targets, per-turn damage, and
-  deterministic multi-turn action state.
-
-### Changed
-
-- The public reference and API report document the new hex-aware map capabilities.
-
-## [0.7.2] - 2026-09-11
-
-### Added
-
-- Renderer-free JavaScript and optional Lua AI modules, including bounded alpha-beta search for
-  local actors and top-level controllers.
-- MWL typed tables, references, campaign metadata, deterministic artifact emission, and richer
-  event, dialogue, expression, and persistence support.
-- Stable caller-chosen entity ids, typed 2D value exports, affix pool filtering, and shared
-  CSV/MWL cell coercion.
-
-### Changed
-
-- The chess example now uses the shared MWG alpha-beta primitive.
-- The standalone bundle baseline, API report, documentation, and roadmap were updated.
-- Release checks now isolate npm audit and package-smoke caches from user-level npm settings.
-
-## [0.7.1] - 2026-09-10
-
-### Added
-
-- MWL content-directory builds now generate game data, i18n, and asset manifests, with the
-  battle example consuming generated MWL content.
-- `extract:html` extracts inline scripts, styles, data URLs, CSS data URLs, and `srcset`
-  resources from a self-contained HTML file.
-
-### Changed
-
-- MWL generated-source diagnostics now use deterministic relative paths.
-
-## [0.7.0] - 2026-09-10
-
-### Added
-
-- MWL build-time compilation with one command producing compiled data, i18n, and asset manifests.
-- Generic MWL item adapters for inventory, equipment slots, and stat modifiers.
-- Catalog validation for duplicate ids, slots, effects, and hook references, with source locations.
-- Game-provided numeric expressions and versioned MWL save migrations.
-- Wesnoth CFG asset fields including images, profiles, icons, and sounds.
-
-## [0.6.0] - 2026-09-10
-
-This is a pre-alpha, not an "early release" any more, and the project says so in README. The
-same note records the naming plan for future major versions: 1.0 takes a name beginning with A,
-2.0 one beginning with B, and so on, none of them chosen yet. Code-wise this release is the
-reduced-motion cluster from WebKit's "Responsive Design for Motion", done properly rather than
-as a single media query.
-
-### Added
-- Reduced motion beyond the media feature (roadmap items 199-202): `MotionIntent` and
-  `motionDuration` let a caller say whether a motion is decorative or meaningful, so a trigger
-  can be replaced by a fade rather than deleted; `Tweener.tween` takes `{ intent, alternate }`;
-  camera follow and `FloatingText`'s rise now respect the preference (and `AnimatedSprite`
-  documents why it deliberately does not); `watchReducedMotion` reports a change while a game is
-  running, so an in-flight tween, burst or fade stops instead of finishing; and the interface
-  example gained a motion demo that `npm run motion:smoke` opens three ways (no preference,
-  `prefers-reduced-motion: reduce` before load, and a flip mid-session) in a real browser.
-
-## [0.5.5] - 2026-09-10
-
-Accessibility reaches the framework floor: a reduced-motion switch the tween, particle, camera
-and screen-effect paths already consult, WCAG contrast helpers for a `theme` palette, and a
-screen-reader bridge `Window` and `MessageBox` announce through. The verification story catches
-up as well - a published-package `file://` smoke, a bundle-size budget, a coverage floor,
-cross-version save fixtures and a build of every example, all gated in CI. `Blob` moves to
-`core` (a breaking import change) with a per-cell `clear`, `assets.load` can rasterize a vector
-source at a chosen resolution, and a new benchmark settles the CSS/SVG-animation question in
-Pixi's favour.
-
-### Added
-- `assets.load(paths, { resolution })` (roadmap item 198): rasterizes a vector source (SVG)
-  at a multiple of its intrinsic size instead of only at intrinsic size, so a game that zooms
-  into an icon asks for `2` or `3` rather than shipping a soft bitmap. Passing `onProgress`
-  alone still works. The colour-transform example loads its gem SVG at 2x.
-- `npm run benchmark:animation`: measures CSS/SVG element animation against Pixi sprites (and
-  both at once) at increasing counts, sampling rAF intervals in headless Chrome. On an RTX
-  3070, 4000 composer-animated SVG elements fell to ~14 fps while 4000 Pixi sprites held 60.
-- Accessibility (roadmap item 192): `core.reducedMotion`/`setReducedMotion`/
-  `prefersReducedMotion` (the OS `prefers-reduced-motion` preference with a per-game override,
-  consulted by `Tweener`, `Camera`, `ScreenEffects` and `ParticleEmitter`),
-  `ui.contrastRatio`/`meetsContrast`/`relativeLuminance` for WCAG-checking a palette, and
-  `ui.screenReader`, a hidden `aria-live` mirror that `Window` (its title) and `MessageBox`
-  (each page and its choices) already announce through.
-- `npm run package:smoke` (roadmap item 193): packs the tarball, installs it into a scratch
-  directory outside the repo, builds the tutorial's own tiny game and opens both that page and
-  the standalone `mw_games.global.js` from `file://` in headless Chrome.
-- `npm run size:check` / `size:update` (194): the global bundle and `dist` against the
-  committed `tools/bundle-size.json`, failing past a 2% growth.
-- `npm run coverage:check` (195): the existing suite under Node's line/branch/function floors.
-- Cross-version save fixtures (196): committed `tests/fixtures/saves/` blobs for a floor,
-  a `GameState` and a `Blob`, loaded by `tests/save-compat.test.ts`.
-- `npm run examples:build` (197): runs every `example:*:build` script, so a vite or
-  `emit-page` regression in any example is caught, not just the benchmarked ones.
-- `npm run coverage` and `npm run visual:smoke:ui`. Coverage reuses the existing Node test
-  suite through `--experimental-test-coverage`, so measuring it costs no dependency. The
-  visual smoke builds the interface example, opens it from `file://` in headless Chrome, and
-  fails when the page errors or the canvas paints nothing, attaching the screenshot as a
-  GitHub artifact; CI runs it on every pull request.
-- `core.Blob` gained a per-cell `clear(x, y)` (roadmap item 191): it zeroes one cell's
-  volume and leaves its neighbours alone, so a game can douse a single tile, seal a breach,
-  or put out one patch of fire without rebuilding the field.
-- `npm run api:report` / `npm run api:check`, backed by the new committed `API_REPORT.md`:
-  a generated index of every public export and its declaration, so API renames, removals
-  and signature changes are visible in review instead of discovered by consumers.
-  `tests/api-surface.test.ts` emits declarations with `tsc --emitDeclarationOnly` and fails
-  when the committed report drifts; CI also runs `api:check` after the build.
-- `tests/barrel-collisions.test.ts`: a guard that fails when two `export *` sources in the
-  same barrel export the same name, which TypeScript would otherwise resolve by silently
-  exporting neither.
-- `@datamoc/mw_games/two-d/pixi-interop` is now a real published subpath, matching the
-  escape hatch ADR-001 already documented.
-
-### Changed
-- CI now runs the coverage floor, the bundle-size budget, `examples:build` and the
-  published-package smoke alongside its existing check/test/build/api gates, so neither
-  coverage, bundle growth, an unbuildable example nor a broken packed install can land
-  unnoticed.
-- Formatting is now gated: Prettier over `src`, `tests`, `examples` and `tools`
-  (`.prettierrc.json`, `npm run format`/`format:check`, run in CI). No ESLint rule set comes
-  with it, and the reformat changes no behaviour (line wrapping, trailing commas and the
-  like); `barrel-collisions.test.ts` now tolerates Prettier wrapping a long
-  `export { ... } from './...'` across lines.
-- ROADMAP.md: five verification gaps are recorded as the open backlog at the tail (193, a
-  published-package `file://` smoke; 194, a bundle-size budget; 195, a coverage floor; 196,
-  cross-version save fixtures; 197, building every example in CI), each with the concrete
-  number or path it should assert against. The 1.0 checklist's API line widens from
-  `DEPRECATED` alone to a full stability-marker contract (`@experimental` plus `DEPRECATED`).
-- ROADMAP.md: item 192 records the accessibility gaps the list had never named (screen-reader
-  text for `ui` widgets, `prefers-reduced-motion`, palette contrast) as one open backlog item
-  at the tail; the roadmap-progress test now guards that open items sit after every shipped
-  one rather than forbidding them, so a recorded idea needs no test edit. The 1.0 exit
-  checklist now decides the published `dist` map files explicitly instead of leaving them to
-  drift.
-- **Breaking: `Blob` moved from `mwg/roguelike` to `mwg/core`.** A grid of volumes is not a
-  dungeon-crawl concern, so the field now lives in the renderer-free `core` module (still
-  reachable at the top level from `mw_games`) and imports nothing. Import it from
-  `@datamoc/mw_games/core` instead of `@datamoc/mw_games/roguelike`. `spread`'s predicate
-  parameter is now named `open` rather than `passable`; positional callers are unaffected.
-- Documentation page is now the `REFERENCE.md` module guide (with a sidebar TOC), and
-  the TypeDoc symbol dump lives under `documentation/api/` instead of being the front
-  door.
-- ROADMAP.md: the last open item (175, the `pixi.js` dependency-shape question) is closed
-  by decision - `pixi.js` stays a direct dependency for the 0.x line and moves to an
-  optional peer dependency with 1.0. The stale priority prose is replaced with a current
-  statement, and the new "Parked decisions" and "1.0 exit checklist" sections record what
-  actually remains before 1.0.
-- ADR-001's known gap is narrowed: `Sprite2D` closed the constructible-sprite half; the
-  remaining value-level exception is the one documented pixi-interop file.
-
-## [0.5.4] - 2026-09-10
-
-Inline sound markers now travel with translated dialogue strings and fire at their visible
-position during `MessageBox` reveals. The reference docs, webpage features, and string-editor
-example now document and demonstrate `{sound:path}` markers.
-
-## [0.5.3] - 2026-09-10
-
-Closes ROADMAP items 184-190, the string stack requested directly across one session:
-translation editing (CLI and web), sound cues, f-string specs, markdown, and progressive
-display.
-
-### Added
-- `examples/string-editor` (roadmap item 190) - the string editor as a playable page:
-  an English reference beside an editable French translation, rendered live through
-  `RichLabel` with an adjustable `{HP_loose}` variable, placeholder-drift warnings, and
-  a blip/hit/pickup cue per string that fires on the progressive reveal. Listed on the
-  website's examples page with its own generated diagram.
-- `i18n:edit` cue preview (roadmap item 189) - `Ctrl+P` plays the current row's sound
-  cue through the OS player (`afplay`, `aplay`/`paplay`/`ffplay`, Windows WAV via
-  SoundPlayer; `MWG_SFX_PLAYER` names a replacement), falling through only when the
-  command itself is missing. Plain `p` stays unbound so previews never start by accident.
-- Shared progressive display (roadmap item 188) - `ui.startReveal`/`advanceReveal`/
-  `completeReveal`/`revealComplete` behind `Label.showProgressive`/`updateReveal` and
-  `RichLabel`'s markdown-aware counterpart (markers never count or leak, via
-  `ui.sliceSpans`); `MessageBox` now runs on the same primitive with its
-  confirm-completes-then-advances rule unchanged.
-- `i18n:edit` placeholder and markdown rendering (roadmap item 187) - panes preview
-  markdown as terminal bold/italic (`v` toggles raw source), flag placeholder drift
-  with a `≠` marker and per-row detail, hint the needed tokens in the edit prompt, and
-  report both in `--check` mode. Backed by `i18n.tokenizeMessage`/`diffPlaceholders`,
-  the same grammar `t()` interpolates with, so the check cannot disagree with runtime.
-- `ui.RichLabel`/`parseMarkdown`/`stripMarkdown` (roadmap item 186) - basic inline
-  markdown for UI text (`**bold**`, `*italic*`, combined `***both***`, backslash
-  escapes) through Pixi `HTMLText`. The parser is pure and unit-tested; unmatched
-  markers stay literal. Heavier than `Label`, so meant for descriptions and help
-  bodies, not per-frame numbers or typewriter reveal.
-- `i18n.formatSpec` (roadmap item 185) - Python f-string-style value formatting for
-  catalog placeholders (`{dmg:03d}`, `{hp:.1%}`, `{name:>12}`), with `!s`/`!r`/`!a`
-  conversions and `=` debugging, wired into `t()`/`tRaw` and FTL parsing. Verified case
-  by case against CPython output; an ill-fitting spec leaves its placeholder untouched.
-  The one divergence nothing can close: JavaScript numbers carry no int/float
-  distinction, so integer-valued floats take the integer path.
-- `i18n` semantic `audio` channel (roadmap item 184) - `format(message, 'audio')`
-  resolves `<type>.audio` to a sound path a game plays through `mwg/audio`'s `Sound`,
-  one more presentation of the same simulation event. Resolves raw via the new `tRaw`
-  (no typographic spacing, no RTL wrapping), returns `''` when no cue is declared, and
-  never falls back to a bare type holding a sentence. `validateMessageAudio` flags empty
-  and non-string audio entries.
-- `tools/i18n-edit.mjs` (roadmap item 184) - a split-screen terminal translation editor:
-  reference language left, translation right, either side any language (`x` swaps them),
-  per-string cue editing (`s`, one cue per semantic family), JSON/FTL auto-detection,
-  and a `--check` mode for CI. Pure session logic lives in `i18n/EditSession.ts`.
-
-## [0.5.2] - 2026-09-09
-
-Closes ROADMAP items 178-182, five ideas raised against a reference game whose `main.ts` had
-grown to roughly 7,800 lines. 178 and 181 turned out to describe the same mechanism and were
-built as one primitive rather than two.
-
-### Added
-- `core.Registry` (roadmap item 180) - a named lookup registered once and read back by name,
-  the dispatch primitive underneath a catalog of factories or handlers, in place of a
-  hand-written `if`/`switch` cascade. No auto-discovery: a game still imports and registers
-  each entry itself.
-- `core.SceneComponentHost`/`SceneComponent` (roadmap items 178, 181) - composes a scene out
-  of named sections (map logic, encounter logic, UI wiring), each its own module with
-  whichever `Scene` lifecycle hooks it needs, instead of one scene class accreting every
-  responsibility. Composition, not a base class, so it works whether a scene extends `Scene`
-  or `two-d.Scene2D`; uses `core.Registry` internally for its by-name lookup.
-- `rpg.questsFromRows`/`QuestStageRow` (roadmap item 179) - groups a flat table of stage rows
-  (typically a `core.parseCSV` result, one row per stage sharing a `questId`) into
-  `QuestDefinition`s a `QuestLog` can `define`, the same relational shape `core.parseCSV`
-  already models elsewhere, in place of a hand-written `.ts` object literal nesting each
-  quest's stage array.
-- `actors.toEntitySaveState`/`fromEntitySaveState`/`EntitySaveState` (roadmap item 182) - a
-  `BuiltEntity`'s mutable state (base stat values, level/experience, the carried item) in the
-  same "definitions supplied fresh on load" shape `StatBlock`/`Progression` already draw;
-  `fromEntitySaveState` rebuilds via `buildEntity` from the same row and catalog, then
-  overlays the saved state on top.
-
-## [0.5.1] - 2026-09-09
-
-Closes ROADMAP item 148 (the last item open before this pass) and corrects an overstated
-renderer-boundary claim found while auditing the roadmap for anything still open.
-
-### Added
-- `board.HexSkirmish` (roadmap item 148) - `startingSkirmish`/`setSkirmishTerrain`/
-  `canPlaceSkirmishUnit`/`addSkirmishUnit`/`skirmishMoves`/`moveSkirmishUnit`/
-  `skirmishAttack`/`skirmishIncome`/`endSkirmishTurn`, a Wesnoth-style hex army-game rules
-  layer distinct from `board.Tactics`: per-terrain movement cost and defence, adjacency-only
-  attacks where a surviving defender always strikes back, capturable villages that grant
-  income and heal their owner's units, no zone of control.
-- `two-d/render.Sprite2D` - a bare, untinted, MWG-named re-export of Pixi's `Sprite`,
-  alongside the existing `Node2D`/`Shape2D`/`Text2D`. Closes half the gap ADR-001 and
-  ROADMAP item 167 had overstated as fully closed (see Fixed below); prefer
-  `render.TintedSprite` the moment a colour transform is needed.
-- `core.parseCSV` (roadmap item 176) - a header-row CSV string into an array of typed row
-  objects, so a table shaped like `actors.AffixTable` can be authored as a spreadsheet
-  instead of a hand-written `.ts` object literal. `columns` coerces named fields to
-  `'number'`/`'boolean'`/`'list'`/`'map'`; an empty cell omits that field entirely, the same
-  as an optional property never set. Takes a raw string with no opinion on how it was
-  loaded, the same boundary `i18n.parseFTL` already draws.
-- `actors.buildEntity`/`buildEntities` (roadmap item 177) - one hero/monster file row
-  (typically a `core.parseCSV` result) into a fully wired entity: a `StatBlock` of base
-  stats (every non-reserved column), an optional `Progression` against a named growth
-  curve, a starting item carrying a named starting affix, and a `core.ReactionTable`
-  already holding a low-HP rule if the row names a threshold. Every named reference
-  resolves through a game-supplied `EntityTemplateCatalog` - `mwg` never invents what a
-  name means, the same boundary `AffixDef.id` already draws.
-
-### Fixed
-- `ADR.md`'s ADR-001 and ROADMAP item 167 claimed the renderer boundary was fully closed
-  ("nothing left... not a gap"). Corrected (ROADMAP item 173): every *type* position across
-  the public API genuinely no longer names a `pixi.js` type, but `two-d/pixi-interop.ts` is
-  itself a literal re-export from `pixi.js`, and `package.json`'s `dependencies` still lists
-  `pixi.js` directly - a real, still-open gap at the value level, tracked as ROADMAP item
-  175 rather than rushed through as a breaking dependency-shape change to an
-  already-published version.
-
-## [0.5.0] - 2026-09-09
-
-A declarative reactions primitive, closing the "branch cascade of `if HP < n`" gap named
-directly, plus a new website page collecting the framework's original, non-obvious
-mechanisms for a game-developer audience.
-
-### Added
-- `core.ReactionTable`/`ReactionRule` (roadmap item 172) - named `when`/`action` rules
-  checked against any state shape (a `StatBlock`'s values, or a plain object's own fields
-  such as an item's durability), firing `action` the moment `when` turns true and staying
-  quiet while it remains true - edge-triggered the same way `roguelike.BossPhases` tracks
-  entered phases. A `once` rule retires after firing; the default re-fires on the next
-  rising edge. Lives in `core`, not `actors`, so the same table watches a character or an
-  inanimate object without either module depending on the other.
-- `webpage/features/index.html` - ten specific, original mwg mechanisms (declarative
-  reactions, the per-sprite multiply-and-add colour transform, `Barrier`'s outermost-first
-  layered absorption, `Advancement`'s unified points/branch/capstone track, `Affix`'s
-  trigger-routed curse-derived enchantments, `TriggerTracker`'s turn-window streaks, i18n's
-  bidi-isolate/typographic rules, `StatStages`'s bounded ladder as one modifier, `Scramble`'s
-  honestly-scoped obfuscation, and the deliberate `Scheduler`/`TurnClock` split), linked from
-  every hand-authored page's nav.
-
-## [0.4.3] - 2026-09-08
-
-A simplification pass across storage, selection, and text options, one pathfinding
-allocation fix, a new opt-in build tool, and an interactive architecture diagram on the
-website.
-
-### Added
-- `tools/compress-dist.mjs` (`@datamoc/mw_games/tools/compress-dist`) - writes precompressed
-  `.gz`/`.br` siblings (optionally `.xz` via a system `xz` binary) next to a build's text
-  files, for a server that can negotiate `Content-Encoding`; the originals are untouched, so
-  a `file://` page keeps working unchanged. Wired into `tools/emit-page.mjs`'s example build
-  step (`--no-compress`/`MWG_NO_COMPRESS=1` to skip, `--xz` to also archive).
-- `webpage/design/architecture-explorer.html` - an interactive, pannable/searchable diagram
-  of `mwg`'s real module dependency graph (which modules reach `core`, which reach a
-  renderer), generated from `src/`'s own import graph rather than hand-drawn, linked from
-  the design page's "Module boundaries" section.
-
-### Changed
-- `core.StoredValue` - the read-with-fallback/write/remove trio `PlayerStats`, `RunHistory`
-  and `NewsSeenTracker` each hand-rolled slightly differently now share one implementation.
-- `core.NewsClient` is rebuilt on the shared `HttpTransport` every other injectable HTTPS
-  client here already used, rather than its own hand-rolled timeout/abort handling.
-- `two-d/ui.SelectionModel` - the highlight/select/confirm/wrap-at-both-ends contract
-  `ListView` and `IconGrid` had begun to implement slightly differently now lives in one
-  place; each widget keeps only what actually differs (1-D rows vs. 2-D cells).
-- `two-d/ui`'s `Label`/`BitmapLabel` share their text-option shape and RTL-aware default
-  alignment through a new internal `themedText` helper instead of two copies.
-- `rpg`'s `FreeMover`/`GridMover` share their "play this animation if the sprite has it"
-  guard; `actors`'s `applyStatusEffect`/`applyItemStatusEffect` share their clock-lease/
-  cancel logic. Both were identical code living in two places.
-- `vite.lib.config.ts` and the examples' shared Vite config turn off `reportCompressedSize`:
-  the estimate cost a full in-memory gzip of the bundle for a number `tools/compress-dist.mjs`
-  reports for real now.
-- `roguelike.Level` gained `forEachNeighbor` (visits a cell's neighbours via callback instead
-  of allocating an array), used by `Pathfinder`'s flood fills and `Placement.cellsNear` - the
-  hottest per-cell allocation in map generation, now gone.
-
-## [0.4.2] - 2026-09-08
-
-A roadmap-management pass alongside three real capability gaps closed: deterministic dungeon
-content placement, i18n catalog content tooling, and 2D/3D asset loading unified where it
-correctly can be.
-
-### Added
-- `tools/roadmap-progress.mjs`/`roadmapProgress.js` gained an item-management panel: search,
-  "only open items", and local (never committed to `ROADMAP.md`) priority/status/assignee
-  triage per item, with export/import.
-- `roguelike.candidateCells`/`cellsNear`/`selectDistinctCells` - deterministic content
-  placement over a `Level`: terrain/occupancy/region filters, radius-based clustering, and
-  bounded distinct-cell selection with a JSON-safe roll trace, composing for neighbouring
-  items, scattered decorations, and single room/branch rewards.
-- `i18n.messageText`/`levenshteinDistance`/`findSimilarMessages` - near-duplicate catalog
-  message detection by edit distance.
-- `i18n.catalogUsage`/`catalogCompleteness`/`pluralFormCoverage` - catalog statistics: used
-  vs. unused keys against a caller-supplied reference list, translated-fraction completion,
-  and CLDR plural-category coverage.
-- `i18n.mergeCatalogKeys` - drops a merged key from a catalog, keeping the surviving key's
-  text; rewriting call sites stays the caller's own job.
-- `assets.loadBinary`/`getBinary`/`isBinaryLoaded`/`releaseBinary` (also its own
-  `@datamoc/mw_games/assets/binary` entry point) - a renderer-free raw-byte cache, the
-  direct fix for `three-d`'s `Vox.parseVox` needing a game to fetch bytes itself.
-- `3d/models`' `loadModelContainer3D`/`isModelContainerLoaded`/`releaseModelContainer` -
-  loads a glTF/GLB source once, caching the Babylon `AssetContainer`; a game calls the
-  container's own `instantiateModelsToScene()` for each independent, unaliased copy it
-  wants placed, rather than importing (and re-fetching) the same model every time.
-
-### Fixed
-- `two-d/ui`'s right-to-left mirroring was incomplete: `Bar`'s fill always grew from the
-  left, `IconGrid` always laid its columns left-to-right and never swapped what the
-  `'left'`/`'right'` actions meant, and `HelpScreen` always put its topic list on the left.
-  All three now mirror under `theme().direction === 'rtl'`, matching `Window`/`ListView`/
-  `Button`/`Label`, which already did.
-- `ROADMAP.md` had two items both numbered 161, a genuine duplicate; the misplaced one was
-  renumbered and moved to the true end of the list before being implemented.
-- `tools/build-webpage-docs.mjs`'s nested `npm install` could fail when the caller's own
-  global `~/.npmrc` set an `allow-scripts` value npm rejects for a project-scoped install;
-  that env var is now explicitly cleared for the nested call.
-
-## [0.4.1] - 2026-09-07
-
-A study of `mwg-pixel-dungeon` (a reference game, not in this repo) recommended closing the
-PixiJS boundary the rest of the way, a formal simulation runtime, stable entity identity, and
-semantic messaging as framework primitives. All of it landed this release, plus the eight
-architecture decisions it proposed, recorded in the new `ADR.md`.
-
-### Added
-- `core.EntityRegistry`/`EntityId` - assigns and looks up stable string ids for live objects,
-  so events, saves, AI targets and buffs can name a creature or item without holding it.
-  `idOf` is what a game passes as `Scheduler.toJSON`'s or `SimulationRuntime.snapshot`'s
-  `actorId`.
-- `core.PresentationQueue` - plays a batch of simulation events one at a time, each waiting on
-  its own `play()`-returned duration, freed of any renderer - the presentation-side
-  counterpart to a `SimulationRuntime.dispatch()`/`runScenario()` result.
-- `simulation.SimulationRuntime`/`SimulationContext`/`SimulationOutcome`/
-  `SimulationRuntimeRule`/`SimulationSnapshot` - a facade over one state + one
-  `roguelike.Scheduler` + one `core.Generator` for the interactive half of a turn-based
-  simulation: `dispatch` runs a single command, threading `random`/`scheduler` as context and
-  charging any returned cost; `snapshot`/`restore` capture and rebuild the whole triple.
-  Composes with the existing `advanceToInput`/`runScenario` rather than replacing them.
-  `simulation` also re-exports `Scheduler`/`Actor`/`SchedulerSnapshot` from `roguelike`.
-- `roguelike.Scheduler` gained `postpone` (delaying an actor other than the current one) and
-  `toJSON`/`restore` (a deterministic snapshot keyed by a caller-supplied actor id), making it
-  the sole, serialisable authority on logical time.
-- `i18n.SemanticMessage`/`MessageChannel`/`MessageFormatter`/`createCatalogFormatter` - a
-  typed `{ type, params }` communication intent rendered differently per channel (log/
-  compact/accessibility/debug) from the same catalog, built on the existing `t()`/plural/
-  Fluent machinery rather than a parallel implementation.
-- `i18n.formatNumber`/`formatDate`/`formatList` - locale-aware `Intl` formatting for a message
-  that needs more than `{token}` substitution.
-- `i18n.diffCatalogKeys`/`validateCatalog` - catalog consistency checks: two catalogs' key
-  sets compared, and one catalog's own empty messages/incomplete plural forms flagged.
-- `two-d.render.Container2D`/`Texture2D`/`Rect`/`TextureRegion`/`rectOf` - plain,
-  renderer-free public types in place of `pixi.js`'s own `Container`/`Texture`/`Rectangle`;
-  `Scene2D.stage` is now typed `Container2D`, `SpriteSheet.region` returns a `TextureRegion`.
-- `two-d.render.Node2D`/`Shape2D`/`Text2D`/`TiledSprite`/`Gradient` - bare, MWG-named
-  re-exports of Pixi's `Container`/`Graphics`/`Text`/`TilingSprite`/`FillGradient`, so a game
-  never has to name `pixi.js` for a plain layer, vector drawing, one-off text, a scrolling
-  tile, or a gradient fill.
-- `two-d.pixi-interop` - the one sanctioned, explicit escape hatch for the rare Pixi-specific
-  need the facade above does not cover.
-- `TintedSprite` (and everything built on it - `AnimatedSprite`, `TileMap`, `DialogueStage`)
-  now registers its own colour-transform Pixi pipe automatically on import; a game no longer
-  passes `{ extensions: [registerColorTransform] }` to `Game`.
-- `ADR.md` - the eight architecture decisions from the `mwg-pixel-dungeon` study, each
-  recorded against the code and tests that enforce it.
-
-### Fixed
-- `ButtonSkin.texture`, `ButtonOptions.icon`, `IconGridItem.icon`, `ListItem.icon`, and
-  `Theme.panel` were still typed as raw `pixi.js` `Texture`/`Container` in public interfaces;
-  all retyped to `Texture2D`/`Container2D` (the same underlying type, not a breaking change).
-
-## [0.4.0] - 2026-09-06
-
-**The reshaping release, and intended to be the last one.**
-
-`mwg` grew fast, and grew by accretion: the renderer ended up inside `mwg/core`, an event
-interpreter ended up importing a widget library, the same idea got solved three or four
-different ways in different modules, and several names meant a different thing depending on
-which file you were reading. None of that was going to get cheaper to fix. A rename costs a
-line in this file today; after 1.0 it costs somebody else's build.
-
-So this release spends the breakage budget deliberately, all at once, while the version
-number still says it is allowed:
-
-- **The renderer is no longer part of the core.** `mwg/core` now holds the scene lifecycle,
-  input, saves, RNG and signals, and pulls in no renderer at all. `Game` and the display half
-  of `Scene` moved to the new `mwg/two-d`, which is where `render`, `ui` and `stage` now live
-  as well. `mwg/3d` is its Babylon counterpart, and neither costs a game anything if it is
-  not used.
-- **Game logic is renderer-free too.** `mwg/rpg` was the last module reaching a renderer by
-  accident; its event interpreter now takes an injected dialogue presenter. So dungeon
-  generation, map events, quests, stats, turn order, inventory and battles all run under a 2D
-  game, a 3D game, or a headless test, unchanged. `tests/renderer-isolation.test.ts` walks the
-  real import graph and enforces exactly which modules may reach PixiJS or Babylon.
-- **One idea, one spelling.** `advance(turns)` is turns and `update(dt)` is real seconds.
-  `toJSON`/`fromJSON` is how a class saves. "Nothing to pick" is `null`, not `-1` or
-  `undefined`. Two identical hook registries became one.
-- **The character sheet can be saved.** `Inventory`, `StatBlock`, `EquipmentSlots`,
-  `Progression`, `SkillPoints` and `Charges` gained serialization, so a game stops hand-rolling
-  the most important half of its own save file.
-
-The hope, stated plainly: **1.0 should be this shape.** What remains before it is coverage and
-confidence, not another reshuffle. Additions rather than renames from here.
-
-### Added
-- `two-d.ParticleEmitter` - a pooled, seeded particle emitter (sparks, dust, rain). The pool
-  is allocated once at `max` and never grows, and every draw goes through `core.Random`, so a
-  replayed run reproduces the same spray. Given no `texture` it runs the simulation and draws
-  nothing, which is how it is tested without a DOM.
-- `two-d.ScreenEffects` - a full-screen colour wash: `fadeOut`/`fadeIn`/`flash`/`setTint`,
-  driven by `update(dt)` returning true on the frame an effect completes.
-- `two-d.Tooltip` - a hover explanation over a themed `Window`, with a frame-driven delay and
-  edge-aware placement that flips rather than running off screen.
-- `roguelike.RoomBuilder`/`hallBuilder`/`eligibleBuilders`/`pickBuilder`, and
-  `DungeonOptions.builders` - composable room interiors: the generator places and joins rooms,
-  a builder carves each one. A room no builder fits falls back to a plain hall.
-- `roguelike.generateDungeonGraph` - the same pipeline as `generateDungeon`, also returning the
-  room graph, a rejected-placement retry count, and which builder carved each room.
-  `DungeonOptions.hooks` fires `onRoomPlaced`/`onCorridorCarved` as the pipeline runs.
-- `roguelike.FeatureLayer` - a floor feature/event layer: named kinds with
-  `inspect`/`interact`/`consequence`/`persistent` rules attached to generated cells.
-- `roguelike.rollRoster` - a variant-spawn/content-roll API: rare additions, per-entry
-  alternative swaps, then a shuffle, with every roll traced (including an explicitly deferred
-  one) for parity tests.
-- `roguelike.compareDungeonArtifacts`/`checkDeterminism` - a dungeon parity harness that tags
-  every mismatch `'graph'` or `'paint'`.
-- **Save/load for the character sheet.** `Inventory`, `StatBlock`, `EquipmentSlots`,
-  `Progression`, `SkillPoints` and `Charges` all gain `toJSON`/`fromJSON`. `Inventory` saves
-  per-item instance state (level, wear, affix, `instanceId`) while taking kind-level fields
-  from the game's own item table on load, so rebalancing reaches old saves. `StatBlock` saves
-  base values and deliberately no modifiers, since whatever applied them reapplies them.
-  `Charges` saves banked regeneration progress, so reloading cannot shorten a recharge.
-- `core.HookRegistry` - the named-event registry `battle.BattleHooks` and
-  `roguelike.CombatHooks` are now both built on.
-- `two-d/ui.messageBoxPresenter` - wires `rpg.EventRunner`'s dialogue to a `MessageBox` in one
-  argument.
-- `rpg.MovableSprite`, `rpg.AutomapTarget`, `rpg.DialoguePresenter` - the structural shapes
-  that replaced concrete renderer types in `mwg/rpg`'s signatures.
-- `core.Input` gains touch input: `touchCode`/`bindTouch`/`pressTouch`/`releaseTouch` follow
-  the same synthetic-code pattern `bindButton`/`pollGamepads` already use for a gamepad, so
-  `isDown`/`justPressed`/`justReleased` work unmodified for a touch-driven action. `attachSwipe`
-  resolves a one-finger drag into one of 8 directional action pulses by angle, or a `tap`
-  action for a short drag. `core.PlayerInput` gains matching `bindTouch`/`pressTouch`/
-  `releaseTouch` wrappers.
-- `ui.Button` gains `onPress`/`onRelease` signals (pointerdown, and pointerup/pointerupoutside),
-  the hook a virtual on-screen d-pad button needs to feed `pressTouch`/`releaseTouch` for
-  hold-to-repeat movement, independent of `onClick`.
-- `mwg/3d` gains `Collision3D.ts` (`buildHeightIndex`, `cellAt`, `heightAt`,
-  `resolveCapsuleAgainstGrid`): horizontal collision against `createTileGrid3D`'s stepped
-  grid, stopping a moving capsule/AABB at a raised column's edge instead of clipping through
-  it. `Character3D` takes an optional third constructor argument, `collideXZ`, to plug this
-  in; omitted, movement behaves exactly as before.
-- `assets.fetchWithByteProgress` reports real cumulative bytes transferred (and the known
-  total, from `Content-Length`) for a real origin - a dev server, or a desktop host serving
-  through a virtual origin rather than `file://`. `desktop/MwgDesktopHost` now serves the
-  built game through `CoreWebView2.SetVirtualHostNameToFolderMapping` (a real `https://`
-  origin) instead of a plain `file://` navigation, which is what makes this - and any other
-  real network call - actually usable inside it.
-
-### Changed
-
-- **Breaking: `mwg/render`, `mwg/ui` and `mwg/stage` moved under `mwg/two-d`.** The Pixi half
-  of the framework is now one module, symmetric with `mwg/3d`. Import from
-  `@datamoc/mw_games/two-d` (or the granular `two-d/render`, `two-d/ui`, `two-d/stage`). No
-  legacy aliases were kept.
-- **Breaking: `Game` moved from `mwg/core` to `mwg/two-d`, and `Scene` split.** `core.Scene` is
-  now the renderer-free lifecycle (`create`/`update`/`resize`/`onSuspend`/`onResume`/`destroy`);
-  `two-d.Scene2D` adds the Pixi container and is what a 2D game extends. `SceneStack` is generic
-  over the scene type, so a Babylon game gets scene management, suspend/resume and minigame
-  stacking. **`mwg/core` now pulls in no renderer at all**, and neither does `mwg/rpg`.
-- **Breaking: `rpg.EventRunner` takes `present: DialoguePresenter` instead of `windows`.** The
-  event interpreter no longer builds a `MessageBox`; use
-  `present: messageBoxPresenter(this.windows)` for the previous behaviour. `boxWidth`,
-  `boxHeight` and `speed` moved onto the presenter.
-- **Breaking: `loadTiledMap` moved from `mwg/rpg` to `mwg/two-d/render`**, where the `TileMap`
-  and `SpriteSheet` it builds already lived.
-- **Breaking: every "pick one" now returns `null`.** `Random.weighted` returned `-1` and
-  `Random.element`/`Random.weightedKey` returned `undefined`; all three now match
-  `rollEncounter`/`rollLoot`.
-- **Breaking: one meaning per name.** `advance(turns)` is turns or rounds and `update(dt)` is
-  real seconds, so `EnvironmentClock.advance(seconds)` became `update(dt)`,
-  `Barrier.decay(ticks)` and `AbilityCycle.tick()` became `advance(turns)`,
-  `BossPhases.update(hpFraction)` became `check(hpFraction)`, and `QuestLog.advance` became
-  `advanceStage`. `EnvironmentClock.snapshot`/`restore` and `SupportLedger.save`/`restore`
-  became `toJSON`/`fromJSON`.
-- **Breaking: `GridMover`/`FreeMover` take a `MovableSprite`** rather than an `AnimatedSprite`,
-  so a static sprite (or anything with `x`/`y`) works; the animation members are optional.
-- `mwg/assets` split into renderer-free path resolution (`assets/paths`, its own export
-  subpath) and the Pixi-backed loader, which is what took Pixi out of `mwg/3d` and `mwg/audio`.
-- Per-module export subpaths now ship TypeScript types; previously only the package root did,
-  so `@datamoc/mw_games/core` resolved to `any` under `moduleResolution: bundler`/`node16`.
-- `sideEffects` narrowed from a blanket `false` to the two `mwg/3d` files with real
-  side-effect imports, so a bundler can no longer drop Babylon's glTF and thin-instance
-  registrations.
-
-### Fixed
-- `examples/three-d`'s hero now actually collides with the raised ridge its demo path crosses,
-  rather than the path being hand-routed around it.
-
-## [0.3.1] - 2026-09-05
-
-### Added
-- `audio.Music.playTracks(paths, fadeDuration)` plays a playlist rather than one looping
-  track: each track plays once, `HTMLAudioElement.onended` (when the backend exposes it)
-  advances to the next, and the sequence cycles once it reaches the end. `play()`/`stop()`
-  cancel an active playlist so a stale `onended` from a track already replaced cannot advance
-  a newer one.
-
-## [0.3.0] - 2026-09-05
-
-### Added
-- `core.PlayerStats` (a lifetime total, folded per run - deliberately not derived from
-  `RunHistory`, which can drop old entries), `ui.StatsScreen` (a `label: value` display
-  recipe), and `core.TelemetryClient` (automatic structured events, off by default until a
-  game calls `setConsent(true)`).
-- `tools/benchmark-browser.mjs` now records each run's fps/p95/memory to a per-page history
-  file (`benchmark-results/`, gitignored) and fails on a regression against the best-seen
-  prior run, not only its fixed gate. `npm run benchmark:tower-defense`/`benchmark:ui` cover
-  those examples the same way `benchmark:browser`/`benchmark:3d` already did.
-  `tools/benchmark-simulation.mjs` (`npm run benchmark:simulation`) measures headless
-  `runScenario`/`advanceToInput` throughput, with the same history tracking.
-- `core.LockstepClient` and a reference server, `tools/multiplayer-server.mjs` (real-time
-  multiplayer's one exception to "`mwg` ships no backend"): lockstep tick authority over a
-  plain `WebSocket`, server-assigned identity, and a `?room=` matchmaking string. Run it with
-  `npm run multiplayer:server`.
-- `core.SaveSyncClient.list()` returns every save-profile slot name an endpoint holds, so a
-  player's multiple named profiles (`SaveSystem` already supports as many as a game creates)
-  can each sync independently against one endpoint.
-- `desktop/MwgDesktopHost`, a minimal WebView2 (WinForms, net8.0-windows) reference host that
-  loads a built example's own `index.html` via `file://` unmodified. `npm run desktop:build`/
-  `desktop:run` mirror the existing `cap:*` scripts' naming and target the same `tower-defense`
-  reference build. Verified with a real `dotnet build`/`dotnet run` and a screenshot of the
-  running window showing the game actually rendered.
-- `assets.load` and `assets.AssetStream`'s `preload`/`preloadLikely` take an optional
-  `onProgress` (asset-count fraction, not literal bytes), threaded through `examples/loading`'s
-  own tasks into `LoadQueue.report`. Eviction under a tight budget was verified in a real
-  browser across 300 preload/evict cycles: resident texture count stayed pinned to the budget
-  throughout.
-- `render.StatusVisuals` maps active status-effect names to a tint on a sprite (priority by
-  declaration order, an optional pulsing strength), bridging `actors.applyStatusEffect`'s
-  game-side data to what a character looks like without either module importing the other.
-- `mwg/simulation` (`Simulation` on the standalone build): `advanceToInput` runs a
-  scheduler's automatic actions up to a budget until an actor needs input, and
-  `runScenario` applies a finite command sequence against caller-supplied rules. Both
-  are headless, with no rendering or browser imports, and take random state explicitly
-  for reproducibility.
-- Button accepts a per-instance nine-patch skin with state tints and caption styling, including captions created later with setText.
-- Label accepts stroke, resolution and roundPixels options. Existing defaults are unchanged. Textures remain owned by the caller.
-
-### Changed
-- **Breaking:** `core.SaveSyncClient.upload`/`download` now take a `slot` name -
-  `upload(payload)`/`download()` are `upload(slot, payload)`/`download(slot)` - so one
-  endpoint can hold more than one player profile.
-
-
-## [0.2.1] - 2026-09-05
-
-### Fixed
-- `Sound.play()`, `Music.play()` and `Synth.playTone()` discarded the `Promise` that
-  `HTMLAudioElement.play()` returns with no rejection handler. Reusing a pooled `Sound`
-  instance before its prior `play()` settled, or `Music`'s crossfade pausing the previous
-  track while the incoming one was still loading, rejects that promise ("The fetching
-  process for the media resource was aborted..."), which surfaced as an unhandled
-  rejection instead of being silently absorbed, the correct handling for an interruption
-  that is expected, not an error.
-- `Camera.update()` computed its deadzone size through the `view` getter, which also
-  clamps to bounds and allocates a rectangle object - two needless allocations every
-  frame for values the deadzone calculation never used.
-
-## [0.2.0] - 2026-09-05
-
-### Added
-
-**Core**
-- `Tweener`/`Easing`, `UndoHistory`, `PlayerInput` (rebindable action-to-key mapping),
-  `RunHistory` (per-run reports and rankings, no online component), `News` (`NewsClient`,
-  `NewsSeenTracker`), `Sanitize` (`checkSize`, `checkNoControlCharacters`,
-  `sanitizeInboundText`, `validateSchema` - a 10MB default size cap and no embedded control
-  characters on any inbound save/news/sync data), `Scramble`, `SaveSync` (`SaveSyncClient`),
-  `Save.exportSlot`/`importSlot`, `Loading` (`LoadQueue`), `Feedback` (`FeedbackClient`),
-  `Input.onWheel` (wheel scroll as a first-class input signal alongside keys, not just a
-  `ListView` feature - horizontal-scroll and zoom modifier keys resolve to a
-  `WheelAction`/`WheelInput` the game interprets, distinct from the browser's own scroll/zoom).
-- `version`: `mwg`'s own version string, exported from `mwg/core` and kept in sync with
-  `package.json` by a dedicated test.
-
-**Render**
-- `Viewport`/`splitScreenHalves` (local split-screen multiplayer), `Camera.setViewport`
-  screen offset, `ColorBlindness` (`createColorBlindnessFilter`, accessible colour modes),
-  `Capabilities.inspectGraphicsCapabilities`/`detectWebGpu` (real WebGPU shader-compile
-  probe, not just a `navigator.gpu` existence check), `Streaming.AssetStream`.
-
-**UI**
-- `BitmapLabel`, `Toast`, `theme.highContrastTheme`, `LoadingScreen`, pointer and wheel
-  support on `ListView`/`IconGrid`, `Bar` fill/background textures with pixel rounding.
-
-**Audio**
-- `Synth` (`synthesizeTone`, `playTone`), `Midi` (`parseMidi`, `scheduleMidi`,
-  `MidiPlayer`, `noteToFrequency`), `Captions` (`onCaption` - subtitles for accessibility).
-
-**Actors / World / Board / RPG**
-- `Support` (`SupportLedger`), `ItemStatusEffect.applyItemStatusEffect` (temporary item
-  status), `Environment` (`EnvironmentClock`), `FogOfWar.FactionFog`, `Collision`
-  (`aabbOverlap`, `circleOverlap`, `circleAabbOverlap`, `resolveAabbAgainstTiles`).
-
-**i18n / Stage**
-- `Fluent.parseFTL`, typographic apostrophes, `StageScript.history`/`showLast`/`skipSeen`,
-  `MessageBox` `nvl` mode and `autoAdvance`.
-
-**3D, mobile and desktop**
-- `Character3D.playAnimation`/`stopAnimation`/`currentAnimation`,
-  `Heightmap.createHeightmapTerrain3D`, an Ionic Capacitor integration for native
-  iOS/Android packaging, and a WebView2 desktop host reference under `desktop/`.
-
-**Examples**
-- `examples/loading` (`LoadQueue`/`LoadingScreen`/`AssetStream` end to end, including a
-  deliberately-failing-once task exercising retry), `examples/three-d`,
-  `examples/tower-defense`.
-
-### Changed
-- `graphics-capabilities`'s `wgsl` capability now defaults to `false` unless a real
-  WebGPU shader-compile probe supplies it, instead of asserting true from
-  `navigator.gpu`'s mere existence.
-- `tools/find-chrome.mjs` extracted from the byte-identical `findChrome()` duplicated in
-  `benchmark-browser.mjs` and `graphics-capabilities.mjs`.
-
-## [0.1.2] - 2026-09-03
-
-### Added
-- `Session`: counts how many times a game has launched, persisted across page loads (the
-  same `SaveStorage` abstraction `SaveSystem` uses) - the signal a native wrapper needs to
-  decide whether to ask for a store rating. `mwg` counts; it never prompts, and bundles no
-  store/ads/IAP SDK of any kind.
-
-### Changed
-- **Breaking:** `Game` no longer registers `mwg/render`'s colour-transform batcher
-  automatically. `mwg/core` imported from `mwg/render` to do this, meaning a game that
-  only imported `mwg/core` still compiled in the whole render module. `GameOptions` gained
-  `extensions`, a list of Pixi-extension registration functions the caller supplies
-  instead: a game using `TintedSprite` (directly, or via `TileMap`/`DialogueStage`/
-  `AnimatedSprite`) now passes `{ extensions: [registerColorTransform] }` explicitly.
-  `mwg/core` now imports from no other module.
-
-## [0.1.1] - 2026-09-03
-
-First tagged release. Everything below shipped on `main` before this tag existed; nothing
-in it is new as of the tag, only now given a version number to refer to.
-
-### Added
-
-**Core**
-- `Game` (owns the Pixi `Application`, the frame loop, current `Scene`), `Scene`, `Signal`
-  (typed event emitter, stack-mode listener order), seeded `Random` (save/restorable state,
-  `withSeed` for scoped determinism), keyboard `Input` with rebinding.
-- `Achievements`: named milestones unlocked by counters crossing a target - unlocking is
-  derived, never stored; the increment that earns one reports it, `drainNew()` queues
-  announcements, and loaded counts announce nothing.
-- `Game.step(dt)`, to drive a frame by hand - needed because Chrome throttles
-  `requestAnimationFrame` in a background tab.
-- `SaveSystem`: named, versioned save slots over `localStorage`, with an in-memory fallback.
-- `Recorder`/`Player`: action recording and replay for testing - every `Input.onAction`
-  stamped against the `Game.onFrame` count, re-dispatched at the same counts while the loop
-  is driven by hand with `Game.step(dt)`; `serializeReplay`/`deserializeReplay` round-trip
-  the log with validation.
-- `Collection`: named record collections over `localStorage` (quest logs, bestiaries,
-  achievements) - `all`/`get`/`put`/`remove`/`where`/`clear` reading storage directly, so
-  there is no cached copy to go stale; `SaveSystem`'s memory fallback is now shared.
-- `SceneStack` with `Game.pushScene`/`popScene`: a scene suspends underneath another and
-  resumes with a result via `Scene.onSuspend`/`onResume` - only the top scene updates, all
-  render, so overlays and opaque scenes both work.
-- `Logger`: categories and severity over bare `console.log` - four levels, a filter, and a
-  sink tests capture instead of the console.
-- `Hex`: cube-coordinate hex grid math (`hexNeighbors`, `hexDistance`, `hexLine`, `hexRange`,
-  `hexToPixel`/`pixelToHex`), orientation-agnostic and shared by `roguelike` and `render`.
-
-**Render**
-- `Camera`, `TileMap` (chunked and culled against the camera; `square`, `hex`, `isometric`, and
-  `staggered` projections, all culled through one shape-agnostic bounding-box method), `SpriteSheet`, `AnimatedSprite`,
-  `TintedSprite`, and `ColorTransformBatcher` - a per-sprite multiply-and-add colour transform
-  in the batch shader, which Pixi's built-in tint cannot do.
-- `LayeredSprite`, for characters built from swappable parts (skin, hair, garment).
-- `ActorAnimator`: the idle/move/action animation-state convention `AnimatedSprite` and
-  `GridMover` never had on their own, with the one rule that makes them coherent - an action
-  interrupts idle/move, but is not itself interruptible while it plays.
-- `Projectile`: tweens a sprite's position in a straight line, the render-side half of aiming
-  a thrown item or a wand bolt.
-- `blobIndex`/`autotileFrames`/`BLOB_SHAPES`: the classic 256-combination-to-47-shape blob-tile
-  reduction for auto-tiling a terrain edge or corner from many small pieces.
-- Verified: SVG textures load correctly through the compiled `data:` URI path; the render path
-  holds 60fps at 4000 tinted sprites and over a 160,000-cell synthetic map, with no silent
-  fallback off WebGL.
-- `TileMap` reads one sheet per tileset (`tileFrame` packs naming the sheet; plain indices
-  still read as sheet 0), and cells carry an elevation: `setCellHeight` lifts the top tile
-  by `heightStep` per level, growing two shaded side faces per level on the diamond
-  projections, with `tileCenter` riding along so occupants stand on top.
-
-**Assets**
-- `load`/`texture`/`get`/`resolve`, synchronous after one `load()` call per scene.
-- `tools/compile-resources.mjs`: turns every asset into a `data:` URI script, so a compiled
-  build never needs `fetch`/XHR (both blocked from `file://`).
-
-**UI**
-- `Window`, `WindowStack` (keyboard focus to the top window only), `ListView`, `MessageBox`,
-  `Label`, `NinePatch`, `VerticalLabel` (for vertical writing systems), `theme`.
-- `IconGrid`: a multi-column icon grid alongside `ListView`, for SPD-sized item counts. Tap-
-  then-tap reordering and a frame-driven long-press-to-quickslot timer, both plain methods a
-  test can drive without simulating pointer events.
-
-**i18n**
-- Message tables, `Intl.PluralRules`-backed plurals, `{token}` interpolation, and
-  `direction()` (ltr/rtl), which `ui`'s `Theme.direction` reads from a game's own glue code.
-
-**Actors**
-- `StatBlock` (base + derived stats through a fixed add→multiply→set modifier order),
-  `EquipmentSlots` (ties an item's modifiers to a stat block on equip/unequip),
-  `Progression`/`powerCurve` (levels and experience over a replaceable growth curve),
-  `Inventory` (stacking, weight, containers), `skillCheck`.
-- `SkillPoints`: a per-stat spendable ledger over a `StatBlock`, with a rising cost-per-rank
-  callback and an optional cap - deliberately not a wrapper around `Progression`, just bridged
-  to it by the points a level-up grants.
-- `craft(inventory, recipe)`: consumes every ingredient and adds the result atomically - an
-  ingredient shortfall or a result that doesn't fit rolls back everything already removed.
-- `applyStatusEffect`: a temporary buff/debuff - applies `StatBlock` modifiers and registers
-  their removal against any clock shaped like `TurnClock`'s `add`/`remove`, returning a handle
-  whose `cancel()` removes them early (a cure, a remove-curse scroll).
-- `identify`/`enchant`/`damageItem`/`repairItem`: item-depth functions over a plain
-  `InventoryItem`, which gained `level`, `durability` and `maxDurability` fields - durability
-  is opt-in per item, a no-op without `maxDurability` set.
-- `Charges`: a resource that regenerates on its own as turns pass (a wand's limited charges),
-  distinct from a `StatBlock` stat spent per use and restored only by an explicit event.
-- `rollLoot`: a weighted drop table, the same shape as `world.rollEncounter` - roll whether
-  anything drops, then weight-pick which.
-- `buy`/`sell`: a shop transaction between two `Inventory`s paid from a `StatBlock` currency
-  stat, all-or-nothing like `craft()` - a full stock/buyer-capacity rollback on failure.
-- `Advancement`: tiered specialization (level-gated point tiers, one permanent branch choice,
-  one capstone) with a point ledger - never the spend rule, which stays game-side.
-- `rollAffix`/`applyAffix`/`removeAffix`/`affixOf`: named item affixes carrying only trigger,
-  weight and curse flag; `InventoryItem` gained an optional `affix` field.
-- `scaledModifiers`: `{stat, op, base, perLevel}` templates resolved to plain `Modifier`s at
-  a given item level.
-- `Appearances`: per-run seeded shuffling of which look each unidentified kind wears, with
-  `toJSON`/`fromJSON`.
-- `canAfford`/`spend`: a spendable per-use resource (mana, stamina) over a `StatBlock`
-  pool - one cost or several, all-or-nothing `craft()`-shaped, with a negative cost
-  refused as an authoring error rather than a refund.
-
-**Roguelike**
-- `FieldOfView` (visible/explored/remembered), `Pathfinder` (A*, a Dijkstra distance map,
-  `autoExplore`), `Scheduler` (energy-cost turn order), `generateDungeon` (seeded, with an
-  optional `kinds` list for a game's own terrain ids alongside wall/floor).
-- `decideMonsterAI`: a wander/hunt/flee behaviour loop over a monster's own `FieldOfView`
-  (not the player's), built entirely from already-shipped primitives.
-- `Secrets`: discoverable/hidden tile state (secret doors, undiscovered traps). A concealed
-  cell is disguised straight in `Level`'s own terrain, so `FieldOfView`/`Pathfinder` need no
-  changes to support it.
-- `chebyshevDistance`/`traceLine`/`hasLineOfSight`/`canTarget`/`resolveArea`: targeting via a
-  Bresenham line trace (a different, cheaper question than `FieldOfView`'s shadowcast), with
-  `single`/`line`/`burst` area resolution.
-- `decideMonsterAI` gained a `disposition` option (`hostile`/`neutral`/`peaceful`, defaulting
-  to `hostile`, unchanged) and a `provoked` flag - a peaceful/neutral monster always wanders
-  until either overrides it back to hunting.
-- `Doors`: open/closed/locked door state, `Secrets`' own shape reused - the state is just
-  terrain, swapped between a door's own open/closed kinds; locking is a separate flag that
-  keeps a door closed and unopenable until `unlock` is called.
-- `BossPhases`/`AbilityCycle`: HP-fraction thresholds reporting newly entered phases in
-  order, plus named ability cooldowns with `tick`/`ready`/`use` - both JSON round-trippable.
-- `Blob`: per-cell volumes diffused into passable neighbours and decayed per step, with
-  `cellsAbove` for the game to apply its own effects on.
-- `Level`, `Secrets` and `Doors` gained `toJSON`/`fromJSON` - the game's own `kinds` table
-  (or live level) is supplied fresh on load, `QuestLog`'s own convention.
-- `Elevation`: a discrete height per cell, in the `Secrets`/`Doors` sidecar shape.
-  `FieldOfView.update` takes it for asymmetric cliff sight (a cell blocks exactly when
-  above viewer and target alike), and `Pathfinder` takes it with a climb limit (ascent
-  capped, descent free).
-
-**World**
-- `World` (many maps, each created once and kept alive, with an explicit non-persistent mode
-  for SPD-shaped floors that rebuild fresh every visit), `Overworld`, `TurnClock`,
-  `rollEncounter`.
-
-**RPG**
-- `loadTiledMap` (orthogonal, single embedded tileset, uncompressed CSV layers; isometric and
-  staggered orientations too, each mapped to the matching `TileMap` shape), `GameState`
-  (switches/variables), `MapEvent`/`activePage` (last matching page wins), `EventRunner`,
-  `GridMover` (tweened tile movement, a walk cycle, and `turnTo` for facing without moving).
-- `QuestLog`: staged quest/mission definitions (`canStart`/`start`/`advance`/`status`), with
-  `toJSON`/`fromJSON` for `SaveSystem`.
-- `loadTiledMap` reads any number of tilesets - embedded or external (fetching an external
-  `.tsx`/JSON stays the caller's asset loading) - resolving each gid by Tiled's own
-  greatest-firstgid-at-or-below rule.
-- `automap`: Tiled-style automapping rules - `input` patterns matched anywhere (`EMPTY`
-  constrains nothing), one `output` variant written per match (`EMPTY` leaves the cell
-  alone), rules applied in order with each rule's matches collected before any write.
-
-**Stage**
-- `DialogueStage` (backdrop, characters standing in front of it, expressions, speaker focus)
-  and `StageScript`, a small command interpreter run as one awaited call.
-- `StageScript.runStory`: a story as a graph of named passages - `{goto}` commands and
-  `StageChoice` jumps between them, falling off a passage ending the story.
-- `importTwee`: Twine's Twee notation (plain text, no DOM needed) into a `StoryScript`:
-  text lines become `say`, `[[links]]` in all three forms become one closing `ask`, and
-  dangling links, doubled passages and setter links are refused rather than half-read.
-
-**Battle**
-- `Creature` (wraps `actors.StatBlock`/`Progression`), `TypeMatrix`, `Party`, `battleOrder`,
-  `checkEvolution` (last-match-wins, so a multi-stage chain reaches its final form).
-- `StatStages`: a bounded, symmetric stage ladder over a `StatBlock` stat (Swords Dance's own
-  shape) - replaces rather than stacks a stat's current modifier, and `resetAll()` clears
-  every stage in one call for the switch-out rule.
-- `chooseMove`/`chooseSwitch`: battle AI built on `TypeMatrix.multiplierFor` - a move scored
-  by type effectiveness (or a custom `score`), and a switch suggested only when the bench has
-  a genuinely better defensive matchup than staying in.
-- `BattleHooks`: a battle-scoped event/hook system for passive abilities and held items,
-  keyed by a plain event-name string a game's own battle loop defines; `offSource` removes
-  every hook tied to one source (an ability leaving the field on faint).
-- `Field`: named, optionally-timed battle-wide conditions (weather, terrain, a screen) a game
-  reads directly (`field.has('rain')`) - distinct from any one creature's own `StatBlock`.
-
-**Board**
-- `mwg/board`: a generic `BoardGrid` (owned pieces on a cell grid, move/capture) plus four
-  traditional games built on it - chess (`startingChess`/`legalMoves`/`applyMove`, FEN
-  parsing, check/mate/stalemate/draw detection, and a material-evaluation alpha-beta
-  `chooseMove`/`search` engine), checkers (forced captures, multi-jump chains, king
-  promotion), go (placement, capture-by-surrounding, ko, area scoring after two passes),
-  and backgammon (points, bar/off, dice, hitting a blot).
-- `startingTactics`/`tacticalMoves`/`tacticalAttack`/`setTacticalOverwatch`: a small
-  grid-tactics layer (move/shoot/overwatch, one action budget per unit per turn) for an
-  XCOM-shaped turn.
-- `createDeck`/`shuffleDeck`/`deal`: a standard 52-card deck (with optional jokers), shuffled
-  and dealt into equal hands; `trickWinner` resolves one trick - highest trump, or highest of
-  the lead suit with no trump played - leaving bidding and stakes to the game.
-- `dealSolitaire`/`drawSolitaire`/`moveSolitaireTableau`/`moveSolitaireToFoundation`/
-  `solitaireWon`: a seeded Klondike deal and its four moves - stock/waste draw with
-  waste-recycling, alternating-colour descending tableau moves, ace-up same-suit foundation
-  moves, and the all-four-full win check.
-- `rollDice`/`rollExpression`: `NdM` and `NdM±K` dice notation over `Random`. `DiceCup`: a
-  kept-die reroll cup (`keep`/`reRoll`/`clearKept`). `scoreDice`: all thirteen standard
-  Yahtzee-shaped categories over a five-die hand.
-
-**Roguelike**
-- `CombatHooks`: named-event listeners for a grid actor's combat lifecycle
-  (`beforeAttack`/`beforeDamage`/`afterDamage`/`onKill`, or any game-defined event string),
-  optionally tagged by source for bulk removal; `modifyDamage` runs the `beforeDamage` seam
-  and clamps/reports whether the hit was fully prevented. HP, formulas and when each event
-  fires stay game-side.
-
-**Audio**
-- `Sound` (pooled, round-robin) and `Music` (crossfade via `update(dt)`), both taking an
-  injectable `create()` in place of `new Audio()` for testing.
-
-**Examples**
-- `colour-transform`, `interface`, `dialogue`, `village` (an NPC with switch-selected
-  conversation pages and an autorun cutscene), `battle`, `dungeon` - an SPD-shaped
-  mockup wiring together most of the above: generated floors, three-state fog of war,
-  bump-to-attack, wander/hunt/flee monsters, secret doors and hidden traps, a thrown flask
-  of oil, a dense icon-grid inventory, autosave-on-descend with permadeath - and `chess`, a
-  playable board against `mwg/board`'s search engine, moved by click-to-select-then-move or
-  a held/repeating arrow-key cursor.
-
-**Project**
-- A project website with a live colour-transform demo, the capability-spec table, and the
-  roadmap, deployed to GitHub Pages.
-- TypeDoc-generated API documentation, built through an isolated toolchain (TypeDoc needs
-  TypeScript's classic compiler API, which TS7 no longer exposes through its main package).
-
-### Changed
-- `generateDungeon` gained an optional `kinds` list, so a game can add its own terrain ids
-  (a trap kind, say) alongside the generator's wall/floor without forking it.
-- `Targeting`'s `AreaShape` gained `cone`, and `coneCells`/`chainTargets`/`knockbackPath`
-  cover sprays, arcs and shoves alongside the existing `single`/`line`/`burst` resolution.
-- `EquipmentSlots` gained an optional `locked` predicate - a locked slot reports `isLocked()`
-  and refuses both `unequip` and swaps; without it every slot behaves exactly as before.
-- `examples/dungeon`'s inventory screen is an `IconGrid` now, not a `ListView`.
-- `TurnClock`'s `TimedEffect` gained an optional `onExpire` callback, fired once right before
-  an effect whose duration has run out is removed - what `applyStatusEffect` needed to tie a
-  status effect's expiry to removing the `StatBlock` modifiers it applied.
-- `Game`'s scenes run as a stack: `switchScene` replaces everything, `pushScene`/`popScene`
-  suspend and resume; only the top scene updates, all render, and resize reaches the whole
-  stack.
-- `Pathfinder`'s search loops check the step (both ends on the map, climb within limit)
-  rather than the destination cell alone.
-
-### Fixed
-- `checkEvolution` was first-match-wins; a multi-stage evolution chain could get stuck on an
-  earlier form instead of reaching its final one. Now last-match-wins, matching
-  `Event.activePage`'s own convention.
-- `GridMover` never updated `facing` on a *blocked* move, so approaching an NPC from certain
-  angles left a player unable to turn to face it. Added `turnTo`.
-- A vault's floor and treasure (behind a secret door) were rendering through the "solid" wall
-  before the door was ever found, because the vault cell was carved eagerly instead of
-  staying genuinely undiscovered rock until the door opened.
-- Sprites looked blurry under `pixelArt: true` on a hidpi display, even though nearest-neighbour
-  texture sampling was already on. The browser does a second, separate resize compositing the
-  canvas element onto the page (its backing buffer is rarely the same size as its CSS display
-  size), and that step defaults to smoothing regardless of anything Pixi does. Fixed by adding
-  a `.mwg-pixel-art { image-rendering: pixelated }` class to the canvas - a class survives
-  `autoDensity`/`resizeTo` rewriting the canvas's `style` attribute wholesale, where an inline
-  style did not.
-- Off-map neighbours could alias real cells through `Level.index` (which does not
-  bounds-check), writing distances into the wrong cell once a search looked at the
-  step's origin rather than only its destination. Steps now refuse either end off
-  the map before any index is touched.