@forgeax/engine-render 0.1.33 → 0.1.35

package/src/record/frame.ts

@@ -1,15 +1,24 @@
 import { encodeAnalyticFogParams } from '../environment/analytic-fog';
 import type { FogFrame } from '../extract/environment';
-import { collectGpuDrivenMaterialArtifacts } from '../gpu-driven/material-artifacts';
-import { materialBindingKey, projectMaterialBindingClasses } from '../gpu-driven/material-bindings';
+import {
+  collectGpuDrivenMaterialArtifacts,
+  requiresProbeBlendRecord,
+} from '../gpu-driven/material-artifacts';
+import { projectMaterialBindingClasses } from '../gpu-driven/material-bindings';
+import type { RenderResourceScope } from '../publication/resource-scope';
+import { renderAssetByGuid, renderTime } from '../publication/resource-scope';
+import {
+  buildDispatchPlan,
+  cleanPerFrameCaches,
+  computeFoldBuckets,
+  validateRenderables,
+} from './fold-buckets';
 import { uploadMaterialUniforms } from './material-uniforms';
 // @forgeax/engine-runtime - RenderSystem record stage: frame.
 // Extracted from render-system-record.ts (feat-20260704 M3/w17, pure move).
 
-import { HANDLE_NINESLICE_QUAD, resolveAssetHandle } from '@forgeax/engine-assets-runtime';
-import { Time, type World } from '@forgeax/engine-ecs';
+import { resolveAssetHandle } from '@forgeax/engine-assets-runtime';
 import type { RenderReadLease } from '@forgeax/engine-ecs/projection';
-import { deriveVertexCount } from '@forgeax/engine-geometry';
 import { frustum, mat4, vec3 } from '@forgeax/engine-math';
 import {
   type CurrentFrameObservationLease,
@@ -25,8 +34,12 @@ import {
   type TextureFormat,
   type TextureView,
 } from '@forgeax/engine-rhi';
-import type { MaterialRenderState, MeshAsset } from '@forgeax/engine-types';
+import type { MaterialShaderArtifact } from '@forgeax/engine-shader';
+import type { MeshAsset } from '@forgeax/engine-types';
 import { BUILTIN_BASE, handleSlot, toShared } from '@forgeax/engine-types';
+import type { ExtractedCloudLayer } from '../cloud/extract';
+import { cloudShadowResolutionForQuality } from '../cloud/parameters';
+import { type CloudShadowProjection, createCloudShadowProjection } from '../cloud/shadow';
 import { CUBE_CAMERA_FACE_ORDER } from '../components/cube-camera';
 import type { DirectionalShadowQuality } from '../components/directional-shadow-filter';
 import type { MeshGpuHandles } from '../device/gpu-residency';
@@ -35,7 +48,7 @@ import {
   type ObservationUnavailableReason,
   RendererOperationError,
 } from '../errors/render';
-import { gpuDrivenDrawKey, gpuDrivenSourceDrawItemIndex } from '../extract/gpu-driven';
+import { BARREL_DISTORTION_POST_PROCESS_ID } from '../features/barrel-distortion';
 import {
   DEPTH_OF_FIELD_MSAA_POST_PROCESS_IDS,
   DEPTH_OF_FIELD_POST_PROCESS_IDS,
@@ -47,15 +60,8 @@ import {
 import type { GpuDrivenProduction, PreparedGpuDrivenFrame } from '../gpu-driven/production-raster';
 import type { ShadowViewIdentity } from '../gpu-driven/shadow-views';
 import type { GpuDrivenLodSubmitIdentity } from '../gpu-driven/view-gpu';
-import { GpuBuffer } from '../gpu-resource';
 import { GPU_TEXTURE_USAGE_COPY_SRC } from '../gpu-texture-usage';
-import {
-  GPU_BUFFER_USAGE_COPY_DST,
-  GPU_BUFFER_USAGE_MAP_READ,
-  GPU_BUFFER_USAGE_UNIFORM,
-  GPU_BUFFER_USAGE_VERTEX,
-} from '../gpu-usage';
-import { disposeTransientInstanceBuffers } from '../instance-buffer-cache';
+import { GPU_BUFFER_USAGE_COPY_DST, GPU_BUFFER_USAGE_MAP_READ } from '../gpu-usage';
 import { deriveRenderExtent } from '../pipeline/render-extent';
 import { inspectStandardLighting } from '../pipeline/standard-lighting/inspection';
 import { standardLightingTopologySignature } from '../pipeline/standard-lighting/topology';
@@ -71,7 +77,6 @@ import type {
   DispatchEntry,
   ExtractedLights,
   ExtractedVolumetricFog,
-  MaterialSnapshot,
   RenderableSnapshot,
   ShadowCasterMembership,
   SkyboxSnapshot,
@@ -89,14 +94,10 @@ import {
   type SsrSpatialAdmission,
 } from '../ssr/admission';
 import { createSsrHistoryOwner } from '../ssr/history';
-import {
-  getTransparentSortConfig,
-  TRANSPARENT_SORT_MODE_LAYER_Y,
-  TRANSPARENT_SORT_MODE_LAYER_Z,
-} from '../systems/transparent-sort-config';
+import type { SurfaceDynamicInputFrame } from '../surface/dynamic-input';
 import type { TransmissionDemand } from '../transmission/projection';
 import { hasVolumetricFogCapability } from '../volume/capability';
-import { inspectVolumetricFogResources, VOLUMETRIC_FOG_PARAMS_BYTES } from '../volume/resources';
+import { inspectVolumetricFogResources } from '../volume/resources';
 import { resolveVolumeTemporalReset, type VolumeTemporalSignature } from '../volume/temporal';
 import {
   buildPerFrameBindGroups,
@@ -114,7 +115,6 @@ import {
   type DispatchCounts,
   type FrameObservationSource,
   getTextureIdentity,
-  instanceCollectionCacheKey,
   makeZeroCameraFallbackSnapshot,
   type ReflectionFallbackReadbackRequest,
   type RenderFrameState,
@@ -122,28 +122,22 @@ import {
   validateGraphTargetCaptureReadback,
   worldEntityKey,
 } from './frame-snapshot';
-// feat-20260622-chunk-gpu-instancing-sprite-tilemap M1 / w4 (D-1 record-stage
-// fold operator). Pure linear-scan helper that groups transparent-dispatch
-// entries with equal (Layer.value, sortKey, materialHandle) into FoldBucket
-// descriptors. The drawIndexed swap (1 instanced draw per bucket vs N
-// per-entity draws) hooks into the sprite-pass dispatch loop below
-// (w4-record-swap), using {@link buildFoldDispatchPlan} to translate
-// renderableIndex-keyed buckets into validatedOrdered-index-keyed
-// head/skip maps.
-import {
-  buildFoldDispatchPlan,
-  evaluateFoldBucketUniformCap,
-  type FoldBucket,
-  type FoldDispatchPlan,
-  foldDispatchBuckets,
-  incrementFoldedDrawsMetric,
-} from './mesh-ssbo';
+import { emitGpuDrivenDrawReceipts, type RenderableDrawReceipt } from './gpu-draw-receipts';
+import { ensureProbeBlendRecordBuffer } from './probe-blend-buffer';
 import type {
   _InternalRenderPipelineContext,
   PipelineState,
   RenderSystemInternals,
 } from './render-context';
-
+import { prepareVolumetricFogFrame, stageVolumetricFogParams } from './volume-params';
+
+export {
+  buildDispatchPlan,
+  buildMaterialSlotPlan,
+  findRenderablePrefixForSlotCapacity,
+  materialSlotCountForPrefix,
+  validateRenderables,
+} from './fold-buckets';
 export type { FrameObservationSource } from './frame-snapshot';
 
 export type FrameObservationReadback = (
@@ -151,42 +145,20 @@ export type FrameObservationReadback = (
 ) => Promise<Result<Uint8Array, Error>>;
 
 /**
- * Fold World identity into the renderer-owned validation token. The GPU
+ * Fold RenderResourceScope identity into the renderer-owned validation token. The GPU
  * production owner receives only this opaque key; ECS identity and ordering
- * stay in the record owner where the World list is authoritative.
+ * stay in the record owner where the RenderResourceScope list is authoritative.
  */
-function residencyValidationCacheKey(world: World, worlds: readonly World[]): string {
+function residencyValidationCacheKey(
+  world: RenderResourceScope,
+  worlds: readonly RenderResourceScope[],
+): string {
   return [world.identity, ...worlds.map((candidate) => candidate.identity)].join('\u001f');
 }
-
 function renderableIdentity(snapshot: Pick<RenderableSnapshot, 'worldId' | 'entityKey'>): string {
   return `${snapshot.worldId}:${snapshot.entityKey}`;
 }
 
-/**
- * A GPU-owned indirect draw has no CPU submit callback. Keep the same
- * record-stage consumption proof for downstream lifecycle owners by checking
- * the concrete draw-key projection that was actually encoded for this frame.
- */
-function gpuDrivenRenderableConsumed(
-  entry: ValidatedRenderable,
-  drawKeys: ReadonlySet<string>,
-): boolean {
-  const draws = entry.source.gpuDrivenDraws;
-  if (draws === undefined || draws.length === 0) return false;
-  const worldEntity = worldEntityKey(entry.source.worldId, entry.source.entityKey);
-  return draws.some((draw, compactIndex) => {
-    const material = entry.source.materials[draw.materialSlot] ?? entry.source.material;
-    return drawKeys.has(
-      gpuDrivenDrawKey(
-        worldEntity,
-        material.materialHandle ?? -1,
-        gpuDrivenSourceDrawItemIndex(draw, compactIndex),
-      ),
-    );
-  });
-}
-
 /**
  * Project one shared validation result into a cull-specific renderable index
  * domain. The retained ShadowCaster projection is the superset; the primary
@@ -317,6 +289,10 @@ import {
 } from '../features/motion-blur/motion-blur-params';
 import { createTemporalView, resolveTemporalReset, type TemporalView } from '../temporal/view';
 import { inspectVolumetricFog } from '../volume/inspection';
+import {
+  packBarrelDistortionParams,
+  resolveSubmittedBarrelMapping,
+} from './barrel-distortion-frame';
 import {
   acquireSwapChainTarget,
   graphExecutionPhase,
@@ -329,12 +305,11 @@ import {
   computeViewMatrix,
   driveLazyEquirectProjection,
   selectLazyEquirectHandle,
-  variantSetFromDefines,
   warnMultiSkybox,
   warnMultiSkylight,
 } from './helpers';
 import { computeSplitLdrSprite } from './main-pass-sprite-draws';
-import { cleanPerEntityCache, ensureMeshSsboCapacity, uploadMeshSsboBatch } from './mesh-ssbo';
+import { uploadMeshSsboBatch } from './mesh-ssbo';
 import { writeShadowCasterUniforms } from './shadow-pass';
 import {
   type CubeCaptureGraphState,
@@ -342,6 +317,7 @@ import {
   executeCompiledFrameGraph,
   getRenderFeatureGraphState,
   type RenderFeatureGraphCandidate,
+  settleBarrelDistortionGraphCandidate,
   settleDepthOfFieldGraphCandidate,
   settleVolumetricFogGraphCandidate,
 } from './typed-frame-graph';
@@ -355,7 +331,7 @@ import {
 /**
  * Resolve the GPU mesh view used by the optional production raster before its
  * filtering pass runs. The result is keyed by the retained RenderScene slot,
- * which preserves the World namespace already used by gpuStore. User meshes
+ * which preserves the RenderResourceScope namespace already used by gpuStore. User meshes
  * are pull-resident during record; relying only on the boot-time builtin map
  * would make the first frame classify every imported mesh as a CPU fallback
  * and would hide its LOD ranges from the GPU cull. Builtins are the only
@@ -364,7 +340,7 @@ import {
 export function gpuDrivenMeshesForFrame(
   internals: RenderSystemInternals,
   pipelineState: PipelineState,
-  worlds: readonly World[],
+  worlds: readonly RenderResourceScope[],
   scene: PersistentGpuDrivenState | undefined,
 ): ReadonlyMap<number, MeshGpuHandles> {
   const meshes = new Map<number, MeshGpuHandles>();
@@ -385,7 +361,7 @@ export function gpuDrivenMeshesForFrame(
       const asset = resolveAssetHandle<MeshAsset>(world, sharedHandle);
       if (asset.ok) {
         const lodMeshes = slot.snapshot.lods?.map((lod) =>
-          internals.assets.lookup<MeshAsset>(lod.mesh),
+          renderAssetByGuid<MeshAsset>(world, internals.assets, lod.mesh),
         );
         const resolvedLodMeshes =
           lodMeshes?.every((lod): lod is MeshAsset => lod?.kind === 'mesh') === true
@@ -405,115 +381,12 @@ export function gpuDrivenMeshesForFrame(
   return meshes;
 }
 
-/**
- * A frame-local material table. Repeated snapshot objects share one UBO slot;
- * each renderable keeps only the slot index used by each authored material.
- */
-export interface MaterialSlotPlan<T extends object> {
-  readonly slotIndices: readonly (readonly number[])[];
-  readonly slots: readonly T[];
-  /** Index of the first renderable that referenced each slot. */
-  readonly slotOwners: readonly number[];
-}
-
-/**
- * Intern identical material snapshots into one frame-local slot table.
- * Snapshot identity is the extract layer's invalidation token, so this keeps
- * the same correctness boundary while avoiding duplicate payload assembly and
- * upload for repeated scene instances.
- */
-export function buildMaterialSlotPlan<T extends object>(
-  materialGroups: readonly (readonly T[])[],
-  bindingClass?: (material: T, owner: number) => string,
-): MaterialSlotPlan<T> {
-  const slotByMaterial = new Map<T, Map<string, number>>();
-  const slots: T[] = [];
-  const slotOwners: number[] = [];
-  const slotIndices = materialGroups.map((materials, ownerIndex) =>
-    materials.map((material) => {
-      const resourceClass = bindingClass?.(material, ownerIndex) ?? '';
-      let materialClasses = slotByMaterial.get(material);
-      if (materialClasses === undefined) {
-        materialClasses = new Map();
-        slotByMaterial.set(material, materialClasses);
-      }
-      const cached = materialClasses.get(resourceClass);
-      if (cached !== undefined) return cached;
-      const slot = slots.length;
-      slots.push(material);
-      slotOwners.push(ownerIndex);
-      materialClasses.set(resourceClass, slot);
-      return slot;
-    }),
-  );
-  return { slotIndices, slots, slotOwners };
-}
-
-/**
- * Return the largest complete renderable prefix supported by a shared
- * mesh/material capacity. Mesh rows consume one slot per renderable; material
- * rows use the deduplicated slot indices assigned in first-seen order.
- */
-export function findRenderablePrefixForSlotCapacity(
-  materialSlotIndices: readonly (readonly number[])[],
-  slotCapacity: number,
-): number {
-  const capacity = Math.max(0, Math.floor(slotCapacity));
-  const maxRenderableCount = Math.min(materialSlotIndices.length, capacity);
-  let renderableCount = 0;
-  while (renderableCount < maxRenderableCount) {
-    const slots = materialSlotIndices[renderableCount] ?? [];
-    if (slots.some((slot) => slot >= capacity)) break;
-    renderableCount += 1;
-  }
-  return renderableCount;
-}
-
-/** Count material slots reachable from a prefix of a first-seen slot plan. */
-export function materialSlotCountForPrefix(
-  materialSlotIndices: readonly (readonly number[])[],
-  renderableCount: number,
-): number {
-  let maxSlot = -1;
-  for (let index = 0; index < renderableCount; index += 1) {
-    for (const slot of materialSlotIndices[index] ?? []) maxSlot = Math.max(maxSlot, slot);
-  }
-  return maxSlot + 1;
-}
-
-type MeshSsboCapacityResult = ReturnType<typeof ensureMeshSsboCapacity>;
-
-/**
- * Resolve the actual mesh-SSBO ceiling after the shared grow contract ran.
- * A missing grow controller is the legacy/test surface with no renderer-owned
- * ceiling; a failed grow explicitly exposes the pre-grow capacity and must
- * constrain every row written by this frame, including retained shadow rows.
- */
-function meshSsboSlotCapacityAfterEnsure(
-  internals: Pick<RenderSystemInternals, 'growMeshSsbo' | 'meshSsboState'>,
-  neededSlots: number,
-  result: MeshSsboCapacityResult,
-): number {
-  if (internals.growMeshSsbo === undefined) return Number.POSITIVE_INFINITY;
-  if (!result.ok) return Math.max(0, result.degradedToSlotCount);
-  return internals.meshSsboState?.slotCount ?? neededSlots;
-}
-
-/**
- * Keep a row sequence inside the capacity published by the mesh-SSBO owner.
- * The caller has already reserved earlier rows (the primary view), so this
- * helper only accepts the remaining slots for the retained shadow sequence.
- */
-function limitRowsToMeshSsboCapacity<T>(rows: readonly T[], availableSlots: number): readonly T[] {
-  if (availableSlots === Number.POSITIVE_INFINITY) return rows;
-  return rows.slice(0, Math.max(0, Math.floor(availableSlots)));
-}
-
 export type RecordProfileRunner = <T>(phase: RenderRecordPhase, action: () => T) => T;
 
 export interface CubeCaptureFrameInput {
   readonly captureDispatch?: readonly DispatchEntry[];
   readonly snapshots: readonly CubeCameraSnapshot[];
+  readonly auxiliaryCameras: readonly CameraSnapshot[];
   readonly scheduler: import('../capture/scheduler').CubeCaptureScheduler;
   readonly state: CubeCaptureGraphState;
   readonly reflectionProbes?: import('./render-context').ReflectionProbeRecordState;
@@ -569,6 +442,18 @@ function prepareCubeCapture(
         (CUBE_CAPTURE_VIEW_SLOT_BASE + physicalWork.length) * VIEW_UNIFORM_SLOT_STRIDE,
     });
   }
+  for (const camera of input.auxiliaryCameras) {
+    if (camera.target === undefined) continue;
+    const physical = internals.getRenderTargetPhysical?.(camera.target);
+    if (physical?.descriptor.shape !== '2d') continue;
+    physicalWork.push({
+      target: camera.target,
+      faceIndex: 0,
+      physical,
+      faceCamera: camera,
+      viewBindGroupDynamicOffset: (CUBE_CAPTURE_VIEW_SLOT_BASE + 6) * VIEW_UNIFORM_SLOT_STRIDE,
+    });
+  }
   input.state.work = physicalWork;
   return physicalWork;
 }
@@ -738,46 +623,6 @@ async function mapReflectionFallbackReadback(
 
 const VOLUMETRIC_FOG_PASS_COUNT = 4;
 
-type VolumetricFogParamsSlot = 0 | 1;
-
-function nextVolumetricFogParamsSlot(frameState: RenderFrameState): VolumetricFogParamsSlot {
-  const accepted = frameState.volumetricFogParamsAcceptedSlot;
-  const pending = frameState.volumetricFogParamsPendingSlot;
-  if (pending !== null && pending !== accepted) return pending;
-  return accepted === null ? 0 : accepted === 0 ? 1 : 0;
-}
-
-function stageVolumetricFogParams(
-  internals: RenderSystemInternals,
-  frameState: RenderFrameState,
-  params: Float32Array,
-): Buffer | undefined {
-  const slot = nextVolumetricFogParamsSlot(frameState);
-  let buffer = frameState.volumetricFogParamsBuffers[slot];
-  if (buffer === null) {
-    const created = internals.device.createBuffer({
-      label: `volumetric-fog-params-${slot}`,
-      size: VOLUMETRIC_FOG_PARAMS_BYTES,
-      usage: GPU_BUFFER_USAGE_UNIFORM | GPU_BUFFER_USAGE_COPY_DST,
-      mappedAtCreation: false,
-    });
-    if (!created.ok) {
-      internals.errorRegistry.fire(created.error);
-      return undefined;
-    }
-    buffer = created.value;
-    frameState.volumetricFogParamsBuffers[slot] = buffer;
-  }
-  const written = internals.device.queue.writeBuffer(buffer, 0, params);
-  if (!written.ok) {
-    internals.errorRegistry.fire(written.error);
-    return undefined;
-  }
-  frameState.volumetricFogParamsPendingSlot = slot;
-  frameState.volumetricFogPendingParams = new Float32Array(params);
-  return buffer;
-}
-
 /** Retire parameter buffers only after the submit that stopped using them. */
 function retireVolumetricFogParams(
   internals: RenderSystemInternals,
@@ -814,6 +659,19 @@ function volumeRevision(values: readonly number[]): number {
   return hash;
 }
 
+/** Resolve the stable world-space projection shared by cloud and lighting. */
+function cloudShadowProjectionFor(
+  cloudLayer: ExtractedCloudLayer | undefined,
+): CloudShadowProjection | undefined {
+  if (cloudLayer?.sunDirection === undefined) return undefined;
+  return createCloudShadowProjection({
+    center: [0, 0, 0],
+    sunDirection: cloudLayer.sunDirection,
+    range: cloudLayer.params.shadowRange,
+    resolution: cloudShadowResolutionForQuality(cloudLayer.params.quality),
+  });
+}
+
 function volumeTemporalSignature(
   fog: ExtractedVolumetricFog,
   prepared: VolumetricFogFrameContext,
@@ -835,7 +693,7 @@ function volumeTemporalSignature(
     camera.orthoBottom,
     camera.orthoTop,
   ]);
-  const fogRevision =
+  let fogRevision =
     authored === undefined
       ? 0
       : volumeRevision([
@@ -846,6 +704,8 @@ function volumeTemporalSignature(
           ...authored.emission,
           authored.anisotropy,
           authored.maxDistance,
+          authored.sampling === 'density' ? 1 : 0,
+          ...Array.from(`${fog.guid}:${fog.digest}`, (char) => char.charCodeAt(0)),
         ]);
   const selectedSpot =
     fog.spotLightEntity === undefined
@@ -863,7 +723,7 @@ function volumeTemporalSignature(
     fog.lightKind === 'directional' && directional?.entity === fog.lightEntity
       ? directional
       : undefined;
-  const lightRevision =
+  let lightRevision =
     selectedSpot === undefined && selectedPoint === undefined && selectedDirectional === undefined
       ? 0
       : volumeRevision(
@@ -902,12 +762,30 @@ function volumeTemporalSignature(
                       selectedSpot.normalBias ?? 0.05,
                       selectedSpot.pcfKernelSize ?? 3,
                       selectedSpot.shadowAtlasTile,
+                      Number(selectedSpot.projectorHandle ?? 0),
+                      selectedSpot.projectorGeneration ?? 0,
+                      selectedSpot.projectorRevision ?? 0,
                       ...(selectedSpot.lightViewProj === undefined
                         ? []
                         : [...selectedSpot.lightViewProj]),
                     ]),
               ],
         );
+  for (const [index, member] of (fog.additional ?? []).entries()) {
+    const signature = volumeTemporalSignature(
+      member,
+      {
+        ...prepared,
+        densityGeneration: prepared.additional?.[index]?.densityGeneration ?? 0,
+      },
+      camera,
+      lights,
+      width,
+      height,
+    );
+    fogRevision = volumeRevision([fogRevision, signature.fogRevision, signature.densityGeneration]);
+    lightRevision = volumeRevision([lightRevision, signature.lightRevision]);
+  }
   return {
     cameraRevision,
     fogRevision,
@@ -969,137 +847,6 @@ function resolveVolumetricFogHistoryContext(
   };
 }
 
-/**
- * Resolve the authored density POD into the renderer-owned GPU resources used
- * by the graph.  This is deliberately a pull operation: a missing/stale
- * handle or failed upload produces a structured error and leaves the graph
- * candidate disabled for this frame rather than binding a synthetic density.
- */
-function prepareVolumetricFogFrame(
-  internals: RenderSystemInternals,
-  frameState: RenderFrameState,
-  world: World,
-  worlds: readonly World[],
-  fog: ExtractedVolumetricFog | undefined,
-  lights: ExtractedLights,
-  volumeCapability: boolean,
-  projector: SpotLightProjectorFrameContext | undefined,
-): VolumetricFogFrameContext | undefined {
-  if (
-    !volumeCapability ||
-    fog?.status !== 'available' ||
-    fog.fog === undefined ||
-    fog.densityHandle === undefined ||
-    fog.densityAsset === undefined ||
-    (fog.lightKind === 'spot'
-      ? lights.spot.find((light) => light.entity === fog.lightEntity) === undefined
-      : fog.lightKind === 'point'
-        ? lights.point.find((light) => light.entity === fog.lightEntity) === undefined
-        : lights.directional === undefined)
-  ) {
-    return undefined;
-  }
-  const ownerWorld = worlds[fog.worldId ?? 0] ?? world;
-  const resident = internals.gpuStore.ensureResident(
-    fog.densityHandle,
-    fog.densityAsset,
-    ownerWorld,
-  );
-  if (!resident.ok || !('texture' in resident.value)) {
-    if (!resident.ok) {
-      internals.errorRegistry.fire(
-        resident.error instanceof RhiError
-          ? resident.error
-          : new RhiError({
-              code: 'webgpu-runtime-error',
-              expected: 'volumetric density residency to resolve a GPU texture',
-              hint: 'repair the authored TextureAsset payload and retry the next frame',
-              detail: { error: resident.error },
-            }),
-      );
-    }
-    return undefined;
-  }
-  const params = new Float32Array(36);
-  params.set(fog.fog.bounds.min, 0);
-  params.set(fog.fog.bounds.max, 4);
-  params.set(fog.fog.extinction, 8);
-  params.set(fog.fog.albedo, 12);
-  params.set(fog.fog.emission, 16);
-  const selectedPoint =
-    fog.pointLightEntity === undefined
-      ? undefined
-      : lights.point.find((light) => light.entity === fog.pointLightEntity);
-  const selectedSpot =
-    fog.spotLightEntity === undefined
-      ? fog.lightKind === 'spot'
-        ? lights.spot.find((light) => light.entity === fog.lightEntity)
-        : undefined
-      : lights.spot.find((light) => light.entity === fog.spotLightEntity);
-  const lightDirection =
-    selectedSpot?.direction ?? lights.directional?.direction ?? vec3.create(0, -1, 0);
-  const lightColor = selectedSpot?.color ?? lights.directional?.color ?? vec3.create(0, 0, 0);
-  if (lightDirection === undefined || lightColor === undefined) return undefined;
-  params.set(lightDirection, 20);
-  // Reserved padding: render frame identity must not move volume samples.
-  params[23] = 0;
-  const selectedPointIndex =
-    selectedPoint === undefined
-      ? -1
-      : lights.point.findIndex((light) => light.entity === selectedPoint.entity);
-  const selectedSpotIndex =
-    selectedSpot === undefined
-      ? -1
-      : lights.spot.findIndex((light) => light.entity === selectedSpot.entity);
-  // Cluster light_data is one point/spot/rect array. Point slots are emitted
-  // first, so volume stores the global slot rather than a per-kind array index.
-  const selectedSpotClusterIndex =
-    selectedSpotIndex < 0 ? -1 : lights.point.length + selectedSpotIndex;
-  params.set(lightColor, 24);
-  params[19] = selectedPointIndex;
-  params[27] = selectedSpotClusterIndex;
-  params[28] = fog.fog.maxDistance;
-  params[29] = fog.fog.anisotropy;
-  params[30] =
-    selectedPoint !== undefined && selectedSpot !== undefined
-      ? 3
-      : selectedPoint !== undefined
-        ? 1
-        : selectedSpot !== undefined
-          ? 2
-          : 0;
-  // The temporal shader reads this lane after the record stage resolves the
-  // accepted graph/slot. It is overwritten on the next queue-visible frame;
-  // the first candidate deliberately starts with history disabled.
-  params[31] =
-    frameState.temporalFrame !== undefined && frameState.temporalFrame.resetReason === 'none'
-      ? 1
-      : 0;
-  // World elapsed time is the sole authored-medium clock. The adjacent
-  // frame phase above remains the deterministic sub-froxel jitter identity;
-  // it never advances density motion.
-  params[32] = fog.worldTimeSeconds ?? 0;
-
-  const paramsBuffer = stageVolumetricFogParams(internals, frameState, params);
-  if (paramsBuffer === undefined) return undefined;
-  return {
-    densityTexture: resident.value.texture.handle,
-    densityView: resident.value.view,
-    paramsBuffer,
-    densityGeneration: resident.value.receipt.generation,
-    historyReadSlot: null,
-    historyWriteSlot: 0,
-    historyValid: false,
-    ...(projector === undefined
-      ? {}
-      : {
-          projectorTexture: projector.texture,
-          projectorView: projector.view,
-          projectorSampler: projector.sampler,
-        }),
-  };
-}
-
 /**
  * Resolve the SpotLight-owned cookie independently of volumetric fog. Surface
  * lighting must keep the authored projector when the fog component is absent;
@@ -1110,8 +857,8 @@ function prepareVolumetricFogFrame(
  */
 function prepareSpotLightProjectorFrame(
   internals: RenderSystemInternals,
-  world: World,
-  worlds: readonly World[],
+  world: RenderResourceScope,
+  worlds: readonly RenderResourceScope[],
   lights: ExtractedLights,
   fog: ExtractedVolumetricFog | undefined,
 ): SpotLightProjectorFrameContext | undefined {
@@ -1252,15 +999,15 @@ interface FrameClockSample {
 
 /** Read the render sample clock from the camera's composition world once per frame. */
 function frameClockSample(
-  world: World,
-  worlds: readonly World[],
+  world: RenderResourceScope,
+  worlds: readonly RenderResourceScope[],
   camera: CameraSnapshot,
   sampleTimeSeconds?: number,
 ): FrameClockSample {
   const owner = worlds[camera.worldId ?? 0] ?? world;
   const invalidSampleTime = sampleTimeSeconds !== undefined && !Number.isFinite(sampleTimeSeconds);
   try {
-    const clock = owner.getResource(Time);
+    const clock = renderTime(owner);
     return {
       deltaSeconds: Number.isFinite(clock.delta) ? Math.max(0, clock.delta) : 0,
       // Keep the raw host sample even when ECS accepted only a clamped
@@ -1277,7 +1024,7 @@ function frameClockSample(
       invalidSampleTime,
     };
   } catch {
-    // Test and recovery callers may provide a minimal World-shaped owner. An
+    // Test and recovery callers may provide a minimal RenderResourceScope-shaped owner. An
     // absent clock is an invalid temporal pair and therefore safely resets.
     return {
       deltaSeconds: 0,
@@ -1642,7 +1389,7 @@ function updateVolumetricFogInspection(
 
 export function recordFrame(
   internals: RenderSystemInternals,
-  world: World,
+  world: RenderResourceScope,
   cameras: CameraSnapshot[],
   lights: ExtractedLights,
   renderables: readonly RenderableSnapshot[],
@@ -1662,7 +1409,7 @@ export function recordFrame(
   // the per-world extract stage). Optional + defaulting to `[world]` keeps the
   // pre-split single-world identity path (worldId always 0) byte-for-byte and
   // the existing unit-test callers (which pass a single mock world) valid.
-  worlds: readonly World[] = [world],
+  worlds: readonly RenderResourceScope[] = [world],
   profilePhase?: RecordProfileRunner,
   gpuDriven?: {
     readonly owner: GpuDrivenProduction;
@@ -1673,6 +1420,10 @@ export function recordFrame(
     readonly telemetryCandidateCount?: number;
     readonly telemetrySubmit?: GpuDrivenLodSubmitIdentity;
     readonly occlusion?: OcclusionFrameProjection;
+    readonly frameTime?: number;
+    readonly deviceGeneration?: number;
+    readonly surfaceDynamicInput?: SurfaceDynamicInputFrame;
+    readonly geometryLane?: 'automatic' | 'direct';
   },
   renderReadLeases?: readonly RenderReadLease[],
   featureGraphCandidate?: RenderFeatureGraphCandidate,
@@ -1691,10 +1442,15 @@ export function recordFrame(
   shadowCasterWorldKeys?: readonly number[],
   preparedLighting?: ReturnType<typeof prepareFrameLighting>,
   ssrDependencies?: SsrDependenciesInspection,
-  onRenderableDraw?: (entry: ValidatedRenderable) => void,
+  onRenderableDraw?: (
+    entry: ValidatedRenderable,
+    submeshIndex?: number,
+    receipt?: RenderableDrawReceipt,
+  ) => void,
   analyticFog?: FogFrame,
   sampleTimeSeconds?: number,
   temporalReset = false,
+  cloudLayer?: ExtractedCloudLayer,
 ): boolean {
   void shadowCasterEntityKeys;
   frameState.reflectionFallbackObservationSource = undefined;
@@ -1905,6 +1661,7 @@ export function recordFrame(
       lights,
       volumetricFog,
     );
+    const cloudShadowProjection = cloudShadowProjectionFor(cloudLayer);
 
     const preparedVolumetricFog = prepareVolumetricFogFrame(
       internals,
@@ -1951,21 +1708,29 @@ export function recordFrame(
       (volumetricFog?.status === 'degraded' && acceptedFallback !== undefined);
 
     let preparedGpuDriven: PreparedGpuDrivenFrame | undefined;
+    let acceptedMaterialArtifacts: ReadonlyMap<string, MaterialShaderArtifact> | undefined;
+    let acceptedShadowMaterialArtifacts: ReadonlyMap<string, MaterialShaderArtifact> | undefined;
     let materialBindingClasses: ReadonlyMap<string, string> | undefined;
     const abortPreparedGpuDriven = (): void => {
       preparedGpuDriven?._abortResourceReplacement?.();
     };
     const cubeCaptureWork = prepareCubeCapture(internals, cubeCapture, camera);
-    const reflectionFallbackCandidate = cubeCapture?.reflectionProbes?.fallbackDemand === true;
+    const reflectionFallbackCandidate =
+      cubeCapture?.reflectionProbes?.fallbackDemand === true ||
+      (ssrDependencies?.requested === true && ssrDependencies.reflectionFallback !== undefined);
+    frameState.surfaceSubmissionObservation?.setActualLaneReason(
+      reflectionFallbackCandidate ? 'reflection-fallback-mrt' : undefined,
+    );
+    // The Standard PBR GPU raster owns one color target. Reflection fallback
+    // adds an MRT attachment, so keep this frame on the ordinary CPU producer
+    // instead of claiming rows that the one-target GPU pipeline cannot draw.
+    const frameGpuDriven = reflectionFallbackCandidate ? undefined : gpuDriven;
     // Capture views have independent draw ownership; display-camera GPU work
     // remains active while their faces and SSR fallback attachments are recorded.
-    // ProbeBlendRecord is an object-level fragment ABI. The scene-index GPU
-    // lane has no binding for that record yet, so claiming a probe-bearing
-    // row would silently fall back to Skylight and make local diffuse probes
-    // visually ineffective. Keep the whole frame on the CPU producer until
-    // the scene-index lane carries the same record contract.
-    const probeBlendFrame = renderables.some((entry) => entry.probeBlendRecord !== undefined);
-    const frameGpuDriven = probeBlendFrame ? undefined : gpuDriven;
+    // ProbeBlendRecord is a shared object-level fragment ABI. The prepared
+    // GPU owner receives the renderer-owned record buffer below and binds it
+    // at the same slot used by the direct material path, so probe-bearing rows
+    // remain eligible for the GPU lane.
 
     // Validate first so user meshes are resident in the same frame. The GPU
     // owner consumes this producer-owned map together with the builtin mesh
@@ -2090,16 +1855,37 @@ export function recordFrame(
               frameState.installedPipelineConfig?.ssao?.enabled === true),
           reflectionFallback: frameState.reflectionFallbackDemand === true,
         });
+      acceptedMaterialArtifacts = materialArtifacts;
+      acceptedShadowMaterialArtifacts = shadowMaterialArtifacts;
       const paletteUploadBytes = validatedForResidency.reduce(
         (total, row) => total + (row.source.skin?.uploadBytes ?? 0),
         0,
       );
+      const gpuProbeBlendRequested = [...materialArtifacts.values()].some((artifact) =>
+        requiresProbeBlendRecord(artifact),
+      );
+      const gpuProbeBlendBuffer = gpuProbeBlendRequested
+        ? ensureProbeBlendRecordBuffer(
+            internals.device,
+            frameState,
+            frameGpuDriven.scene?.probeBlend,
+          )
+        : undefined;
       const prepared = frameGpuDriven.owner.prepare({
         scene: frameGpuDriven.scene,
         camera,
         meshBySlot: gpuDrivenMeshes,
         viewBindGroupLayout: pipelineState.viewBindGroupLayout,
         meshResidencyEpoch: internals.gpuStore.meshResidencyEpoch,
+        // `hdrp` remains a compatibility stop for callers that cannot provide
+        // the clustered topology. The production frame supplies the explicit
+        // Standard topology below, so the GPU owner can select a matching
+        // published group(2) artifact and bind the existing cluster owner.
+        hdrp:
+          standard.kind === 'clustered' &&
+          (standard.prepared.local.length > 0 ||
+            frameState.installedPipelineConfig?.ssao?.enabled === true),
+        clustered: standard.kind === 'clustered',
         materialBindingClasses,
         ...(frameGpuDriven.activeEntityKeys === undefined
           ? {}
@@ -2114,6 +1900,13 @@ export function recordFrame(
           ? {}
           : { telemetrySubmit: frameGpuDriven.telemetrySubmit }),
         ...(frameGpuDriven.occlusion === undefined ? {} : { occlusion: frameGpuDriven.occlusion }),
+        ...(frameGpuDriven.frameTime === undefined ? {} : { frameTime: frameGpuDriven.frameTime }),
+        ...(frameGpuDriven.deviceGeneration === undefined
+          ? {}
+          : { deviceGeneration: frameGpuDriven.deviceGeneration }),
+        ...(frameGpuDriven.surfaceDynamicInput === undefined
+          ? {}
+          : { surfaceDynamicInput: frameGpuDriven.surfaceDynamicInput }),
         ...(frameGpuDriven.scene?.structureMetrics === undefined
           ? {}
           : {
@@ -2126,6 +1919,9 @@ export function recordFrame(
         ...(firstSkinArtifact === undefined ? {} : { materialSkinArtifact: firstSkinArtifact }),
         ...(materialArtifacts.size === 0 ? {} : { materialArtifacts }),
         ...(shadowMaterialArtifacts.size === 0 ? {} : { shadowMaterialArtifacts }),
+        ...(gpuProbeBlendBuffer === undefined
+          ? {}
+          : { probeBlendRecordBuffer: gpuProbeBlendBuffer }),
         materialPipelineState: pipelineState,
         ...(internals.getMaterialShaderPipelineEntry === undefined
           ? {}
@@ -2186,7 +1982,12 @@ export function recordFrame(
       }
     }
 
-    const gpuOwnedDrawKeys = preparedGpuDriven?.drawKeys ?? EMPTY_DRAW_KEYS;
+    // Direct acceptance keeps producer preparation/residency active so its
+    // page/frame/shared-time candidate is validated and committed through the
+    // same submit hooks. Only raster projection changes lanes.
+    const rasterGpuDriven =
+      frameGpuDriven?.geometryLane === 'direct' ? undefined : preparedGpuDriven;
+    const gpuOwnedDrawKeys = rasterGpuDriven?.drawKeys ?? EMPTY_DRAW_KEYS;
     // The GPU lane owns only the primary opaque raster today. Directional,
     // point, and spot shadow views consume the same CPU-validated rows; they do
     // not require a second residency walk because the first validation already
@@ -2203,6 +2004,7 @@ export function recordFrame(
       validated,
       gpuOwnedDrawKeys,
       validationInput.cacheKey,
+      rasterGpuDriven?.worldKeys,
     );
     const cacheValidated =
       validatedShadowForResidency === undefined
@@ -2245,7 +2047,7 @@ export function recordFrame(
         Math.max(1, internals.canvas.width),
         Math.max(1, internals.canvas.height),
         graphShadowMapSize,
-        preparedGpuDriven,
+        rasterGpuDriven,
         featureGraphCandidate,
         cubeCapture?.state,
         cameras.length === 0,
@@ -2257,7 +2059,13 @@ export function recordFrame(
         undefined,
         ssrAdmission,
         renderExtent,
+        validated.some((entry) =>
+          entry.source.materials.some(
+            (material) => material.surfaceModel === 'single-layer-medium',
+          ),
+        ),
         analyticFog !== undefined && analyticFog.density > 0 && analyticFog.maxOpacity > 0,
+        cloudShadowProjection?.resolution,
       ),
     );
     if (preflightGraph === null) {
@@ -2334,6 +2142,13 @@ export function recordFrame(
     const view = swapTarget.view;
     const targetW = swapTarget.targetW;
     const targetH = swapTarget.targetH;
+    const submittedBarrelMapping = resolveSubmittedBarrelMapping(
+      frameState,
+      preflightGraph,
+      camera,
+      targetW,
+      targetH,
+    );
 
     const previousTemporalView = frameState.lastSuccessfulTemporalView;
     const motionBlurDemand =
@@ -2472,7 +2287,7 @@ export function recordFrame(
       activeVolumetricFogSignature = resolvedHistory.signature;
       const previousTime = frameState.volumetricFogHistorySignature?.worldTimeSeconds;
       const currentTime = resolvedHistory.signature.worldTimeSeconds;
-      // Adjacent UBO lanes: validity, World time, elapsed time since accepted history.
+      // Adjacent UBO lanes: validity, RenderResourceScope time, elapsed time since accepted history.
       const historyParams = new Float32Array([
         activeVolumetricFogContext.historyValid ? 1 : 0,
         currentTime ?? 0,
@@ -2642,6 +2457,8 @@ export function recordFrame(
         // View UBO + CSM/spot-shadow matrix pack: assembled + uploaded in one
         // queue.writeBuffer round-trip. Extracted to view-ubo.ts (M3/w18) so
         // recordFrame stays an orchestration skeleton (D-2).
+        // The stable projection is carried in the View UBO. Direct-sun shader
+        // consumers sample the renderer-owned map at each receiver position.
         writeViewUbo(
           internals.device.queue,
           pipelineState.viewUniformBuffer,
@@ -2651,6 +2468,7 @@ export function recordFrame(
           frameState.spotShadowSnapshots,
           temporalView,
           preparedSpotLightProjector?.spotIndex,
+          cloudShadowProjection,
         );
         if (pipelineState.pointsLinesViewBuffer !== undefined) {
           writePointsLinesViewUbo(
@@ -2722,7 +2540,7 @@ export function recordFrame(
           internals,
           frameState,
           pipelineState,
-          validated.length > 0 || preparedGpuDriven !== undefined,
+          validated.length > 0 || rasterGpuDriven !== undefined,
           bindGroupCounts,
           undefined,
           true,
@@ -2740,6 +2558,7 @@ export function recordFrame(
         frameState.spotShadowSnapshots,
         capture.viewBindGroupDynamicOffset,
         preparedSpotLightProjector?.spotIndex,
+        cloudShadowProjection,
       );
     }
     for (const probe of cubeCapture?.reflectionProbes?.graph.work ?? []) {
@@ -2754,6 +2573,7 @@ export function recordFrame(
         frameState.spotShadowSnapshots,
         probe.viewBindGroupDynamicOffset,
         preparedSpotLightProjector?.spotIndex,
+        cloudShadowProjection,
       );
     }
 
@@ -2816,7 +2636,18 @@ export function recordFrame(
         framePostProcessParams.set(id, dofParams);
       }
     }
+    if (submittedBarrelMapping !== undefined && submittedBarrelMapping.strength > 0) {
+      framePostProcessParams.set(
+        BARREL_DISTORTION_POST_PROCESS_ID,
+        packBarrelDistortionParams(submittedBarrelMapping),
+      );
+    }
 
+    if (preparedGpuDriven !== undefined) {
+      frameState.surfaceSubmissionObservation?.setResourceGeneration(
+        preparedGpuDriven.standardPbrFrameResources.resourceGeneration,
+      );
+    }
     const passCtx: _InternalRenderPipelineContext = {
       assets: internals.assets,
       world,
@@ -2879,12 +2710,22 @@ export function recordFrame(
       ...(preparedGpuDriven === undefined
         ? {}
         : {
-            gpuDrivenStandardPbrFrameResources: preparedGpuDriven.standardPbrFrameResources,
-            gpuDrivenDrawKeys: preparedGpuDriven.drawKeys,
-            gpuDrivenShadowViews: preparedGpuDriven.shadowViewPool,
-            gpuDrivenShadowBatchProjections: preparedGpuDriven.shadowBatchProjections,
-            gpuDrivenShadowDrawKeys: preparedGpuDriven.shadowDrawKeys,
-            gpuDrivenShadowDrawKeysByView: preparedGpuDriven.shadowDrawKeysByView,
+            gpuDrivenStandardPbrFrameResources: {
+              ...preparedGpuDriven.standardPbrFrameResources,
+              ...(frameState.surfaceSubmissionObservation === undefined
+                ? {}
+                : { surfaceSubmissionObservation: frameState.surfaceSubmissionObservation }),
+            },
+            ...(rasterGpuDriven === undefined
+              ? {}
+              : {
+                  gpuDrivenDrawKeys: rasterGpuDriven.drawKeys,
+                  gpuDrivenWorldKeys: rasterGpuDriven.worldKeys,
+                  gpuDrivenShadowViews: rasterGpuDriven.shadowViewPool,
+                  gpuDrivenShadowBatchProjections: rasterGpuDriven.shadowBatchProjections,
+                  gpuDrivenShadowDrawKeys: rasterGpuDriven.shadowDrawKeys,
+                  gpuDrivenShadowDrawKeysByView: rasterGpuDriven.shadowDrawKeysByView,
+                }),
           }),
       ...(frameGpuDriven?.scene === undefined
         ? {}
@@ -2958,6 +2799,12 @@ export function recordFrame(
                 frameState.ssrHistoryCandidate = undefined;
               }
               preparedGpuDriven?._commitResourceReplacement();
+              const consumed = preparedGpuDriven?._consumeSurfaceDynamicInput?.(
+                frameState.frameNumber,
+              );
+              if (consumed !== undefined && !consumed.ok) {
+                internals.errorRegistry.fire(consumed.error);
+              }
               frameGpuDriven?.occlusion?.commit(true, frameState.frameNumber, profilePhase);
             },
             onAborted: () => {
@@ -2982,6 +2829,7 @@ export function recordFrame(
         cubeCaptureWork.length === 0 ? undefined : cubeCaptureWork.map((work) => work.faceIndex),
         (done) => {
           completion = done;
+          frameState.surfaceSubmissionObservation?.submit(done, frameState.graphGeneration);
           if (fallbackReadbackRequest !== undefined) {
             fallbackReadback = done.then(
               () =>
@@ -3000,21 +2848,34 @@ export function recordFrame(
         timingCapture,
       ),
     );
-    if (submitted && preparedGpuDriven?.drawKeys !== undefined && onRenderableDraw !== undefined) {
+    if (submitted && onRenderableDraw !== undefined && rasterGpuDriven?.drawKeys !== undefined) {
       for (const entry of validated) {
-        if (gpuDrivenRenderableConsumed(entry, preparedGpuDriven.drawKeys)) {
-          onRenderableDraw(entry);
-        }
+        emitGpuDrivenDrawReceipts(entry, rasterGpuDriven.drawKeys, onRenderableDraw);
       }
     }
     if (submitted) {
+      // `ensureCompiledFrameGraph` can deliberately return the accepted LKG
+      // while a topology candidate is still preparing. The submitted graph is
+      // the picture authority: an identity frame publishes an identity
+      // mapping, while a failed enable/disable candidate retains the previous
+      // mapping together with its old picture. Never pair an LKG graph with
+      // the live RenderResourceScope's newer camera component.
+      // The exact mapping used to populate the accepted graph's UBO is the
+      // only mapping promoted with its receipt. This keeps an identity frame,
+      // a retained barrel LKG and a normal nonzero frame on one context.
+      if (submittedBarrelMapping !== undefined) {
+        frameState.lastSuccessfulBarrelDistortion = submittedBarrelMapping;
+      }
       // Feature plans are submission-sensitive: VFX keeps queued fixed ticks
       // until the graph that consumed them is actually submitted. Acknowledge
       // the exact accepted graph here so successful frames do not replay every
       // prior tick into the next topology.
       acknowledgeRenderFeatureSubmission(getRenderFeatureGraphState(internals).plans);
     }
-    if (cubeCapture !== undefined && cubeCaptureWork.length > 0) {
+    if (
+      cubeCapture !== undefined &&
+      cubeCaptureWork.some((work) => work.physical.descriptor.shape === 'cube')
+    ) {
       const completed = cubeCapture.scheduler.completeSubmission(submitted, completion);
       if (!completed.ok) internals.errorRegistry.fire(completed.error);
     }
@@ -3046,6 +2907,8 @@ export function recordFrame(
         : null;
     }
     if (submitted) {
+      frameState.recoveryMaterialArtifacts = acceptedMaterialArtifacts;
+      frameState.recoveryShadowMaterialArtifacts = acceptedShadowMaterialArtifacts;
       if (graphVolumetricFog === undefined) {
         frameState.volumetricFogAccepted = undefined;
         frameState.volumetricFogAcceptedContext = undefined;
@@ -3098,12 +2961,13 @@ export function recordFrame(
       frameState.ssrHistoryOwner?.abortFrame(frameState.ssrHistoryCandidate, 'submit');
       frameState.ssrHistoryCandidate = undefined;
     }
-    // DoF and volume topology replacements are provisional until the queue
-    // submission succeeds. This runs for every early-return path as well, so a
-    // swapchain, encoder, or graph failure cannot leave a non-submitted
-    // candidate as the next frame's accepted graph.
+    // Output, DoF, and volume topology replacements are provisional until the
+    // queue submission succeeds. This runs for every early-return path as
+    // well, so a swapchain, encoder, or graph failure cannot leave a
+    // non-submitted candidate as the next frame's accepted graph.
     settleVolumetricFogGraphCandidate(frameState, submitted);
     settleDepthOfFieldGraphCandidate(frameState, submitted);
+    settleBarrelDistortionGraphCandidate(frameState, submitted);
     if (volumeInspectionReady && (submitted || volumeSubmissionAttempted)) {
       updateVolumetricFogInspection(
         frameState,
@@ -3136,7 +3000,7 @@ function readWorldState(lease: RenderReadLease): DirectionalShadowWorldState {
 
 function sameWorldState(
   cached: DirectionalShadowCache,
-  worlds: readonly World[],
+  worlds: readonly RenderResourceScope[],
   leases: readonly RenderReadLease[] | undefined,
 ): boolean {
   if (leases === undefined || leases.length !== worlds.length) return false;
@@ -3155,11 +3019,13 @@ function sameWorldState(
       changes = lease.readChanges(cachedState.version);
     } catch {
       // Treat malformed or foreign version evidence as stale and rebuild the
-      // atlas rather than reaching through World for a second mutation clock.
+      // atlas rather than reaching through RenderResourceScope for a second mutation clock.
       return false;
     }
-    if (changes.status !== 'ok') return false;
-    if (changes.world.changedComponentIds.length !== 0 || changes.sharedRefs.records.length !== 0) {
+    if (
+      changes.version.structureEpoch !== cachedState.version.structureEpoch ||
+      changes.world.changedComponentIds.length !== 0
+    ) {
       return false;
     }
   }
@@ -3201,7 +3067,7 @@ function sameDirectionalShadowQuality(
 function prepareDirectionalShadowCache(
   internals: RenderSystemInternals,
   frameState: RenderFrameState,
-  worlds: readonly World[],
+  worlds: readonly RenderResourceScope[],
   leases: readonly RenderReadLease[] | undefined,
   lights: ExtractedLights,
   shadowMapSize: number | undefined,
@@ -3256,7 +3122,7 @@ function prepareDirectionalShadowCache(
   if (leases === undefined || leases.length !== worlds.length) {
     // Direct record-stage test harnesses may omit the host-owned leases. They
     // still exercise the real shadow encoder, but without the ECS read owner
-    // they must conservatively rebuild rather than inspect World internals.
+    // they must conservatively rebuild rather than inspect RenderResourceScope internals.
     return { reuse: false, next: null };
   }
   const worldStateTokens = leases.map(readWorldState);
@@ -3277,716 +3143,3 @@ function prepareDirectionalShadowCache(
     },
   };
 }
-
-/**
- * feat-20260704 M3/w18: validate renderable handles + collect the render plan,
- * extracted verbatim from `recordFrame`. Empty `renderables` input or all-
- * unregistered handles both yield an empty result (the Case E clear-pass-only
- * path). Builds per-entry renderState / stencilReference overlays from the
- * transparent-dispatch entries, resolves each MeshFilter.assetHandle through
- * the AssetRegistry + GPU store (with the sprite 9-slice mesh swap), and fires
- * structured `asset-not-registered` errors for handles that fail to resolve.
- *
- * @internal
- */
-export function validateRenderables(
-  internals: RenderSystemInternals,
-  world: World,
-  // feat-20260709-editor-world-partition ENGINE-fix-round2 (defect 2): the full
-  // worlds[] list. Each renderable's mesh handle is a user-tier slot in its OWN
-  // world's sharedRefs; resolving against a foreign world either misses
-  // (asset-not-registered) or resolves the wrong slot payload. `world` (the
-  // resource-owner) is retained as the fallback for renderables whose worldId
-  // is out of range (defensive; extractFrames always stamps a valid index).
-  worlds: readonly World[],
-  pipelineState: PipelineState,
-  frameState: RenderFrameState,
-  renderables: readonly RenderableSnapshot[],
-  transparentDispatch: readonly DispatchEntry[],
-  excludedEntityKeys: ReadonlySet<number> = new Set<number>(),
-  worldKeys?: readonly number[],
-): ValidatedRenderable[] {
-  // bug-20260527-renderstate-pipeline-dispatch-gap D-4:
-  // build a renderableIndex -> renderState map from dispatch entries
-  // so each ValidatedRenderable carries its per-material renderState
-  // override without an O(n^2) back-scan in the draw loop.
-  const renderStateByRenderableIdx = new Map<number, MaterialRenderState | undefined>();
-  // w10: also build a renderableIndex -> stencilReference map from
-  // dispatch entries for per-draw setStencilReference calls.
-  const stencilRefByRenderableIdx = new Map<number, number | undefined>();
-  const variantSetByRenderableIdx = new Map<number, string | undefined>();
-  // Keep these three independent maps because each overlay has its own
-  // consumer and the last dispatch entry remains authoritative.  Populate
-  // them in one pass: the old code walked the same dispatch list three times
-  // and repeated the same renderableIndex branch / hash writes.
-  for (const de of transparentDispatch) {
-    const renderableIndex = de.renderableIndex;
-    if (renderableIndex === undefined) continue;
-    renderStateByRenderableIdx.set(renderableIndex, de.renderState);
-    stencilRefByRenderableIdx.set(renderableIndex, de.stencilReference);
-    variantSetByRenderableIdx.set(renderableIndex, variantSetFromDefines(de.defines));
-  }
-  const validated: ValidatedRenderable[] = [];
-  for (let rIdx = 0; rIdx < renderables.length; rIdx++) {
-    const r = renderables[rIdx];
-    if (r === undefined) continue;
-    if (excludedEntityKeys.has(worldEntityKey(worldKeys?.[r.worldId] ?? r.worldId, r.entityKey)))
-      continue;
-    // feat-20260709-editor-world-partition ENGINE-fix-round2 (defect 2): resolve
-    // this renderable's mesh against the world it was EXTRACTED from
-    // (worlds[r.worldId]) — NOT the single resource-owner `world`. Builtin mesh
-    // slots (< BUILTIN_BASE) resolve process-statically regardless of world, so
-    // the per-world pick only matters for user-tier handles, but selecting it
-    // unconditionally keeps a single code path. Falls back to the resource-owner
-    // world if worldId is out of range (defensive; extractFrames always stamps
-    // a valid index into worlds[]).
-    const renderableWorld = worlds[r.worldId] ?? world;
-    const assetRes = resolveAssetHandle<MeshAsset>(
-      renderableWorld,
-      toShared<'MeshAsset'>(r.assetHandle),
-    );
-    if (!assetRes.ok) {
-      internals.errorRegistry.fire(
-        new RhiError({
-          code: 'asset-not-registered',
-          expected: 'MeshFilter.assetHandle in AssetRegistry',
-          hint: 'use HANDLE_CUBE / HANDLE_TRIANGLE imports; custom mesh register path: feat-future-asset-system',
-          detail: { assetHandle: r.assetHandle },
-        }),
-      );
-      continue;
-    }
-    // feat-20260601-device/gpu-residency-extraction M1 (D-1): builtin meshes
-    // (slots through HANDLE_NINESLICE_QUAD) keep the createRenderer step-3
-    // direct-upload + `pipelineState.meshes` path -- they are NOT routed
-    // through `ensureResident`. User-registered meshes pull through the store
-    // on first access (the register->upload push was severed in this M1);
-    // the POD fetched above (assetRes.value) is passed in, store holds no
-    // registry ref (D-2). A first-access miss builds the GPU buffers; later
-    // frames hit the O(1) cache.
-    const meshAssetHandle = toShared<'MeshAsset'>(r.assetHandle);
-    let meshHandles = internals.gpuStore.getMeshGpuHandles(meshAssetHandle, renderableWorld);
-    const lodMeshes = r.lods?.map((lod) => internals.assets.lookup<MeshAsset>(lod.mesh));
-    const resolvedLodMeshes =
-      lodMeshes?.every((lod): lod is MeshAsset => lod?.kind === 'mesh') === true
-        ? lodMeshes
-        : undefined;
-    if (meshHandles === undefined && r.assetHandle > handleSlot(HANDLE_NINESLICE_QUAD)) {
-      const residentRes = internals.gpuStore.ensureResident(
-        meshAssetHandle,
-        assetRes.value,
-        renderableWorld,
-        resolvedLodMeshes,
-      );
-      if (residentRes.ok) {
-        meshHandles = residentRes.value;
-      } else if (residentRes.error instanceof RhiError) {
-        internals.errorRegistry.fire(residentRes.error);
-      }
-    }
-    meshHandles = meshHandles ?? pipelineState.meshes.get(r.assetHandle);
-    if (meshHandles === undefined) {
-      internals.errorRegistry.fire(
-        new RhiError({
-          code: 'asset-not-registered',
-          expected: 'GPU mesh buffers uploaded for assetHandle',
-          hint: 'await renderer.initialization before draw([world], { cameraOwner: 0, resourceOwner: 0 }); ensure AssetRegistry.configureGpuDevice ran so user meshes are uploaded',
-          detail: { assetHandle: r.assetHandle },
-        }),
-      );
-      continue;
-    }
-    // feat-20260527-sprite-nineslice M2 / w11 (plan-strategy section D-2):
-    // sprite branch with non-zero `slicesAndMode` (post-w12 paramSnapshot
-    // entry name) overrides the user-supplied mesh handle (typically
-    // HANDLE_QUAD = 3) with the 16-vertex / 54-index HANDLE_NINESLICE_QUAD
-    // (id=5) topology so the vertex shader sees the 4x4 grid required for
-    // 9-region anchor mapping. Default slicesAndMode ([0, 0, 0, 0]) keeps
-    // the legacy HANDLE_QUAD path; a flip from zero to non-zero on the
-    // same entity routes here per-frame so AI users can toggle 9-slice
-    // on the fly without re-spawning the entity (charter F1 minimum
-    // surface). The HANDLE_NINESLICE_QUAD GPU buffers are seeded by
-    // createRenderer step-3.
-    //
-    // feat-20260625-refactor-sprite-as-transparent-mesh M3 / w13: judgement
-    // key migrated from `shadingModel === 'sprite'` to
-    // `materialShaderId === 'forgeax::sprite'` (plan-strategy D-10); slices
-    // sourced from `paramSnapshot.slicesAndMode` (post-w12 UBO-aligned
-    // overlay path).
-    //
-    // feat-20260624-sprite-lit-shading-model-pure-2d-lighting M1' / t7:
-    // sprite-lit shares the sprite paramSchema (5 fields, t4 mirror) so
-    // the 9-slices mesh swap applies identically.
-    let effectiveMeshHandles = meshHandles;
-    if (
-      r.material.materialShaderId === 'forgeax::sprite' ||
-      r.material.materialShaderId === 'forgeax::sprite-lit'
-    ) {
-      const slicesArr = r.material.paramSnapshot?.slicesAndMode as readonly number[] | undefined;
-      if (
-        slicesArr !== undefined &&
-        slicesArr.length >= 4 &&
-        (slicesArr[0] !== 0 || slicesArr[1] !== 0 || slicesArr[2] !== 0 || slicesArr[3] !== 0)
-      ) {
-        const nineSliceHandles = pipelineState.meshes.get(handleSlot(HANDLE_NINESLICE_QUAD));
-        if (nineSliceHandles !== undefined) {
-          effectiveMeshHandles = nineSliceHandles;
-        }
-      }
-    }
-    if (r.morph !== undefined) {
-      const morphed = prepareMorphMesh(
-        internals,
-        frameState,
-        worldEntityKey(r.worldId, r.entityKey),
-        effectiveMeshHandles,
-        assetRes.value,
-        r.morph,
-      );
-      if (morphed !== undefined) effectiveMeshHandles = morphed;
-    }
-    validated.push({
-      source: r,
-      world: renderableWorld,
-      mesh: effectiveMeshHandles,
-      renderableIndex: rIdx,
-      renderState: renderStateByRenderableIdx.get(rIdx),
-      variantSet: variantSetByRenderableIdx.get(rIdx),
-      stencilReference: stencilRefByRenderableIdx.get(rIdx),
-    });
-  }
-  return validated;
-}
-
-// Keep the primary record-stage name explicit at its call site while sharing
-// the same owner implementation for the complete retained ShadowCaster view.
-
-function prepareMorphMesh(
-  internals: RenderSystemInternals,
-  frameState: RenderFrameState,
-  cacheKey: number,
-  base: MeshGpuHandles,
-  mesh: MeshAsset,
-  morph: RenderableSnapshot['morph'],
-): MeshGpuHandles | undefined {
-  if (morph === undefined || frameState.morphBuffers === undefined) return undefined;
-  const targets = mesh.morphTargets;
-  if (targets === undefined || targets.length !== morph.targetCount) return undefined;
-  const position = base.layoutProjection.attributes.find(
-    (attribute) => attribute.key === 'position',
-  );
-  if (
-    position === undefined ||
-    position.offset !== 0 ||
-    position.shaderLocation !== 0 ||
-    position.format !== 'float32x3' ||
-    position.byteLength !== 12
-  ) {
-    return undefined;
-  }
-  const vertexCount = deriveVertexCount(mesh.vertices, base.layoutProjection);
-  if (vertexCount === undefined || vertexCount !== base.vertexCount || vertexCount <= 0) {
-    return undefined;
-  }
-  const stride = base.layoutProjection.arrayStride / Float32Array.BYTES_PER_ELEMENT;
-
-  let active = false;
-  for (const weight of morph.weights) {
-    if (weight !== 0) {
-      active = true;
-      break;
-    }
-  }
-  if (!active) {
-    frameState.morphBuffers.get(cacheKey)?.buffer.destroy();
-    frameState.morphBuffers.delete(cacheKey);
-    return undefined;
-  }
-
-  const vertices = new Float32Array(mesh.vertices);
-  for (let targetIndex = 0; targetIndex < targets.length; targetIndex += 1) {
-    const weight = morph.weights[targetIndex] ?? 0;
-    const positions = targets[targetIndex]?.position;
-    if (positions === undefined || positions.length !== base.vertexCount * 3) return undefined;
-    for (let vertex = 0; vertex < base.vertexCount; vertex += 1) {
-      const vertexBase = vertex * stride;
-      const positionBase = vertex * 3;
-      vertices[vertexBase] = (vertices[vertexBase] ?? 0) + (positions[positionBase] ?? 0) * weight;
-      vertices[vertexBase + 1] =
-        (vertices[vertexBase + 1] ?? 0) + (positions[positionBase + 1] ?? 0) * weight;
-      vertices[vertexBase + 2] =
-        (vertices[vertexBase + 2] ?? 0) + (positions[positionBase + 2] ?? 0) * weight;
-    }
-  }
-
-  let cached = frameState.morphBuffers.get(cacheKey);
-  if (cached === undefined || cached.byteLength !== vertices.byteLength) {
-    if (cached !== undefined && !cached.buffer.isDestroyed) {
-      const destroyed = cached.buffer.destroy();
-      if (!destroyed.ok) internals.errorRegistry.fire(destroyed.error);
-    }
-    const created = internals.device.createBuffer({
-      label: `morph-${cacheKey}-vbo`,
-      size: vertices.byteLength,
-      usage: GPU_BUFFER_USAGE_VERTEX | GPU_BUFFER_USAGE_COPY_DST,
-      mappedAtCreation: false,
-    });
-    if (!created.ok) {
-      internals.errorRegistry.fire(created.error);
-      frameState.morphBuffers.delete(cacheKey);
-      return undefined;
-    }
-    const buffer = new GpuBuffer(internals.device, created.value);
-    internals.deviceScope._adopt('buffer', buffer, (owned) => {
-      if (!owned.isDestroyed) owned.destroy();
-    });
-    cached = {
-      buffer,
-      byteLength: vertices.byteLength,
-    };
-    frameState.morphBuffers.set(cacheKey, cached);
-  }
-  const written = internals.device.queue.writeBuffer(cached.buffer.handle, 0, vertices);
-  if (!written.ok) {
-    internals.errorRegistry.fire(written.error);
-    return undefined;
-  }
-  return { ...base, vertexBuffer: cached.buffer };
-}
-
-/**
- * feat-20260704 M3/w18: build the dispatch-ordered render plan, extracted
- * verbatim from `recordFrame`. (1) M3/w26 dispatch-ordered reorder: reorder
- * `validated` to follow the transparent-dispatch order (extract-order fallback
- * for unmatched entries). (2) feat-20260608 mesh-SSBO capacity gate: size the
- * mesh-SSBO + material-UBO pair to the larger of entity vs cumulative
- * material-slot count, truncating on ceiling (graceful degradation). (3)
- * feat-20260622 fold dispatch plan: build + apply the WebGL2 uniform-cap
- * fallback + bump the folded-draws metric.
- *
- * @internal
- */
-export function buildDispatchPlan(
-  internals: RenderSystemInternals,
-  validated: readonly ValidatedRenderable[],
-  transparentDispatch: readonly DispatchEntry[],
-  foldBuckets: readonly FoldBucket[],
-  shadowValidated: readonly ValidatedRenderable[] = [],
-  materialBindingClasses?: ReadonlyMap<string, string>,
-): {
-  validatedOrdered: readonly ValidatedRenderable[];
-  shadowValidatedOrdered: readonly ValidatedRenderable[];
-  foldDispatchPlan: FoldDispatchPlan | null;
-  materialSlotIndices: readonly (readonly number[])[];
-  materialSlots: readonly MaterialSnapshot[];
-  materialSlotOwners: readonly ValidatedRenderable[];
-  materialSlotCount: number;
-} {
-  // A production GPU-owned frame has no CPU validated rows by design. The
-  // dispatch list can still contain one entry per authored entity, but no
-  // CPU plan, material table, or fold bucket is consumed in that lane. Return
-  // the empty plan without walking that list so a steady 100k scene remains
-  // bounded by the persistent GPU batches rather than per-entity record work.
-  if (validated.length === 0 && shadowValidated.length === 0) {
-    const meshSsboCapResult = ensureMeshSsboCapacity(internals, shadowValidated.length);
-    const meshSsboSlotCapacity = meshSsboSlotCapacityAfterEnsure(
-      internals,
-      shadowValidated.length,
-      meshSsboCapResult,
-    );
-    return {
-      validatedOrdered: [],
-      shadowValidatedOrdered: limitRowsToMeshSsboCapacity(shadowValidated, meshSsboSlotCapacity),
-      foldDispatchPlan: null,
-      materialSlotIndices: [],
-      materialSlots: [],
-      materialSlotOwners: [],
-      materialSlotCount: 0,
-    };
-  }
-  // M3 / w26: dispatch-ordered render. The dispatch list is pre-sorted
-  // by queue (ascending, stable) by the extract stage per plan-strategy D-3.
-  // Reorder validated renderables to follow the dispatch order, falling
-  // back to extract order for renderables with no matching dispatch entry.
-  let dispatchOrderMatchesValidated = transparentDispatch.length === validated.length;
-  if (dispatchOrderMatchesValidated) {
-    for (let i = 0; i < validated.length; i++) {
-      if (transparentDispatch[i]?.renderableIndex !== validated[i]?.renderableIndex) {
-        dispatchOrderMatchesValidated = false;
-        break;
-      }
-    }
-  }
-  let validatedOrdered: readonly ValidatedRenderable[] = dispatchOrderMatchesValidated
-    ? validated
-    : [...validated];
-  if (transparentDispatch.length > 0 && !dispatchOrderMatchesValidated) {
-    const validatedByRenderableIdx = new Map<number, ValidatedRenderable>();
-    const seen = new Set<number>();
-    for (const v of validated) {
-      validatedByRenderableIdx.set(v.renderableIndex, v);
-    }
-    const ordered: ValidatedRenderable[] = [];
-    for (const de of transparentDispatch) {
-      if (de.renderableIndex === undefined) continue;
-      const v = validatedByRenderableIdx.get(de.renderableIndex);
-      if (v !== undefined && !seen.has(de.renderableIndex)) {
-        seen.add(de.renderableIndex);
-        ordered.push(v);
-      }
-    }
-    // Append renderables not in the dispatch list (e.g. default-material entities)
-    for (const v of validated) {
-      if (!seen.has(v.renderableIndex)) {
-        ordered.push(v);
-      }
-    }
-    validatedOrdered = ordered;
-  }
-
-  // Shadow-only/off-camera CPU residuals consume the same material UBO as
-  // visible draws. Their preparation must not depend on main-view visibility.
-  const materialRows = [...validatedOrdered, ...shadowValidated];
-  const materialGroups = materialRows.map((entry): readonly MaterialSnapshot[] => {
-    const shaderId = entry.source.material.materialShaderId;
-    if (shaderId === 'forgeax::sprite' || shaderId === 'forgeax::sprite-lit') {
-      return [entry.source.material];
-    }
-    return entry.source.materials.length > 0 ? entry.source.materials : [entry.source.material];
-  });
-  const materialSlotPlan = buildMaterialSlotPlan(materialGroups, (material, owner) => {
-    const row = materialRows[owner];
-    return row === undefined
-      ? ''
-      : (materialBindingClasses?.get(
-          materialBindingKey(row.source, material.materialHandle ?? -1),
-        ) ?? '');
-  });
-  let materialSlotIndices = materialSlotPlan.slotIndices;
-  let materialSlots = materialSlotPlan.slots;
-  let materialSlotOwners = materialSlotPlan.slotOwners.map((index) => {
-    const owner = materialRows[index];
-    if (owner === undefined) throw new Error('material slot has no validated owner');
-    return owner;
-  });
-  let materialSlotCount = materialSlots.length;
-  let materialRenderableCount = materialRows.length;
-
-  // feat-20260608-mesh-ssbo-dynamic-grow-l1-lift-1024-entity-cap M3 / T-M3-04:
-  // ensure the mesh-SSBO + material-UBO buffer pair is large enough to hold
-  // the render plan BEFORE the first per-entity writeBuffer.
-  // On `ok:false` the controller has already fired a structured RuntimeError
-  // (`mesh-ssbo-ceiling-reached` / `mesh-ssbo-capacity-exceeded`); we truncate
-  // the draw list to the largest complete entity prefix whose cumulative
-  // material slots fit `degradedToSlotCount` (graceful degradation per
-  // plan-strategy D-2): render the subset that fits, discard overflow, no
-  // black frame. The helper is idempotent across same-frame re-calls (AC-09)
-  // and short-circuits on length=0 / length<=slotCount (boundary table).
-  //
-  // bug-20260609: feat-20260608 M5 amend made the material UBO indexed by
-  // cumulative *material-slot* count (one slot per submesh material),
-  // which is >= entity count once an entity carries `materials.length>1`.
-  // The mesh + material buffer pair share `slotCount` (single allocator),
-  // so we size against the larger of the two requirements: entity count
-  // (mesh-SSBO consumer) vs cumulative material-slot count (material-UBO
-  // consumer). Sprite entities collapse to 1 slot in the material table,
-  // mirroring the same rule (sprite per-submesh OOS-1;
-  // post-w13 judgement key migrated to materialShaderId).
-  //
-  // feat-20260624 M1' / t7: sprite-lit treated identically to sprite
-  // for material-slot accounting (paramSchema mirror, t4).
-  const neededSlots = Math.max(validatedOrdered.length + shadowValidated.length, materialSlotCount);
-  const meshSsboCapResult = ensureMeshSsboCapacity(internals, neededSlots);
-  const meshSsboSlotCapacity = meshSsboSlotCapacityAfterEnsure(
-    internals,
-    neededSlots,
-    meshSsboCapResult,
-  );
-  if (!meshSsboCapResult.ok) {
-    // Graceful degradation: the controller reports slots, but this stage
-    // consumes entities. Find a complete prefix instead of slicing at the
-    // numeric slot count; a multi-material entity can consume several slots.
-    const degradedRenderableCount = findRenderablePrefixForSlotCapacity(
-      materialSlotIndices,
-      meshSsboCapResult.degradedToSlotCount,
-    );
-    materialRenderableCount = degradedRenderableCount;
-    materialSlotCount = materialSlotCountForPrefix(materialSlotIndices, degradedRenderableCount);
-    materialSlotIndices = materialSlotIndices.slice(0, degradedRenderableCount);
-    materialSlots = materialSlots.slice(0, materialSlotCount);
-    materialSlotOwners = materialSlotOwners.slice(0, materialSlotCount);
-    validatedOrdered = validatedOrdered.slice(0, degradedRenderableCount);
-  }
-  const shadowValidatedOrdered = limitRowsToMeshSsboCapacity(
-    shadowValidated,
-    Math.min(meshSsboSlotCapacity, materialRenderableCount) - validatedOrdered.length,
-  );
-
-  // feat-20260622-chunk-gpu-instancing-sprite-tilemap M1 / w4-record-swap
-  // (D-1): build the fold dispatch plan once `validatedOrdered` is final
-  // (post truncation by mesh-SSBO capacity gate). The plan re-keys each
-  // non-singleton bucket from `renderableIndex` to the validated-ordered
-  // index `i` consumed by the dispatch loops; the loops use it to skip
-  // non-head bucket members and emit one instanced drawIndexed per
-  // bucket head. Empty plan (no fold-eligible buckets) is a byte-
-  // identical no-op for the dispatch loops below (charter P3: silent
-  // pass-through, no error path).
-  let renderableToValidatedIdx: Map<number, number> | null = null;
-  let foldDispatchPlan: FoldDispatchPlan | null = null;
-  if (foldBuckets.length > 0) {
-    renderableToValidatedIdx = new Map<number, number>();
-    for (let i = 0; i < validatedOrdered.length; i++) {
-      const e = validatedOrdered[i];
-      if (e === undefined) continue;
-      renderableToValidatedIdx.set(e.renderableIndex, i);
-    }
-    foldDispatchPlan = buildFoldDispatchPlan(foldBuckets, renderableToValidatedIdx);
-
-    // feat-20260622 M2 / w11 (D-2 + D-9 + AC-05): WebGL2 uniform-fallback
-    // per-bucket instance-count cap. When caps.storageBuffer===false AND
-    // a fold bucket carries more than FOLD_UNIFORM_INSTANCE_CAP (128)
-    // instances, fire RhiError({code:'instancing-exceeds-uniform-cap'})
-    // AND remove the bucket from the dispatch plan so its members fall
-    // through to the per-entity drawIndexed exit (the same exit the
-    // mode-gate bypass uses — D-9 "shared fallback exit"). The frame
-    // stays visually correct (charter proposition 9 graceful
-    // degradation: no identity-collapse / black screen) while the cap
-    // event surfaces structurally for AI users (proposition 4 explicit
-    // failure on .code).
-    //
-    // Scope discrimination: tilemap-chunk-extract-system encodes
-    // Layer.value = (layerOrder<<20) | (chunkIndex & 0xfffff), so a
-    // bucket whose head entry carries non-zero low-20-bits is
-    // definitively a tilemap-chunk dispatch site. Plain sprite buckets
-    // use SPRITE_LAYER_VALUE = layerOrder<<20 (low-20 zero) by the
-    // documented convention (apps/hello/asi-world main.ts pattern).
-    // The chunkIndex===0 edge case maps to 'sprite' (the helper's
-    // default branch) — a one-bucket ambiguity per layerOrder that is
-    // acceptable for the AI-user affordance level (the error semantics
-    // — "this bucket exceeded the cap" — is the actionable signal;
-    // scope=sprite vs tilemap-chunk only refines the recovery hint).
-    if (foldDispatchPlan.headBuckets.size > 0 && !internals.device.caps.storageBuffer) {
-      const filteredHeads = new Map<number, FoldBucket>(foldDispatchPlan.headBuckets);
-      const filteredSkips = new Set<number>(foldDispatchPlan.skipIndices);
-      let filteredCount = foldDispatchPlan.foldedBucketCount;
-      for (const [headIdx, bucket] of foldDispatchPlan.headBuckets) {
-        const scope: 'sprite' | 'tilemap-chunk' =
-          (bucket.layer & 0xfffff) !== 0 ? 'tilemap-chunk' : 'sprite';
-        const decision = evaluateFoldBucketUniformCap(bucket, internals.device.caps, scope);
-        if (decision.fallback && decision.error !== undefined) {
-          internals.errorRegistry.fire(decision.error);
-          filteredHeads.delete(headIdx);
-          filteredCount -= 1;
-          for (let j = 1; j < bucket.entries.length; j++) {
-            const memberEntry = bucket.entries[j];
-            if (memberEntry === undefined) continue;
-            const memberValidatedIdx = renderableToValidatedIdx.get(memberEntry.renderableIndex);
-            if (memberValidatedIdx !== undefined) {
-              filteredSkips.delete(memberValidatedIdx);
-            }
-          }
-        }
-      }
-      if (filteredCount !== foldDispatchPlan.foldedBucketCount) {
-        foldDispatchPlan = {
-          headBuckets: filteredHeads,
-          skipIndices: filteredSkips,
-          foldedBucketCount: filteredCount,
-        };
-      }
-    }
-
-    // feat-20260622-chunk-gpu-instancing-sprite-tilemap M3 / w13 (D-3 +
-    // AC-06): increment `render.instancing.foldedDraws` once per fold-
-    // eligible head bucket retained after the cap-fallback filter above.
-    // The metric tracks instanced drawIndexed call count for this frame
-    // — cap-overrun buckets routed through the per-entity fallback exit
-    // are removed from `foldDispatchPlan` and therefore not counted, by
-    // construction (M2 / w11 cap-fallback + plan-strategy D-3 semantics).
-    // Singleton buckets (mode-bypass under D-5, or non-foldable under
-    // mode 0) carry `bucketSize === 1` and never enter `headBuckets`, so
-    // the per-entity drawIndexed path correctly does not count.
-    // SSOT helper lives in this record owner — engine code never
-    // hardcodes the metric key string.
-    incrementFoldedDrawsMetric(foldDispatchPlan, internals.metrics);
-  }
-
-  return {
-    validatedOrdered,
-    shadowValidatedOrdered,
-    foldDispatchPlan,
-    materialSlotIndices,
-    materialSlots,
-    materialSlotOwners,
-    materialSlotCount,
-  };
-}
-
-/**
- * feat-20260704 M3/w18: per-frame cache clean-up (despawn eviction), extracted
- * verbatim from `recordFrame`.
- *
- * feat-20260531-per-frame-bind-group-cache M4 / w14 (D-5): drop per-entity BG
- * cache entries (materialBgPerEntity / instancesBgPerEntity) + instance buffers
- * whose outer-Map entityKey (packed Entity u32) is absent from the current
- * validated set, preventing unbounded growth after entity despawn. view + mesh
- * caches are frame-shared (keyed by GPU resource handle objects, WeakMap chains
- * naturally bounded) and are not touched. feat-20260619 M4 / F11: destroy the
- * GPU instance buffer before Map.delete (D-6 symmetric release); failure fires
- * errorRegistry + continues the sweep.
- *
- * @internal
- */
-function cleanPerFrameCaches(
-  internals: RenderSystemInternals,
-  frameState: RenderFrameState,
-  validated: readonly ValidatedRenderable[],
-  retainedEntityKeys: ReadonlySet<number> = new Set<number>(),
-): void {
-  if (frameState.transientInstanceBuffers !== undefined) {
-    disposeTransientInstanceBuffers(frameState.transientInstanceBuffers, internals.errorRegistry);
-  }
-  // Build a Set<number> of worldEntityKey composites from the validated
-  // renderables. D-1a #4: validatedEntityKeys are worldEntityKey(worldId, entityKey)
-  // composites matching the write-side keys of #1-#3 — cross-world false eviction
-  // is prevented because worldEntityKey(0, k) !== worldEntityKey(1, k).
-  const validatedEntityKeys = new Set<number>(retainedEntityKeys);
-  const validatedInstanceKeys = new Set<number>(retainedEntityKeys);
-  for (const v of validated) {
-    const entityKey = worldEntityKey(v.source.worldId, v.source.entityKey);
-    validatedEntityKeys.add(entityKey);
-    validatedInstanceKeys.add(entityKey);
-    if (v.source.instances !== undefined) {
-      validatedInstanceKeys.add(instanceCollectionCacheKey(v.source.worldId, v.source.instances));
-    }
-  }
-
-  // Clean per-entity material BG cache: drop outer-Map entries whose
-  // entityKey is absent from the current validated set. The shared and
-  // singleton material caches have no entityKey and are not touched here.
-  cleanPerEntityCache(frameState.materialBgPerEntity, validatedEntityKeys);
-
-  // Clean per-entity instances BG cache.
-  cleanPerEntityCache(frameState.instancesBgPerEntity, validatedEntityKeys);
-
-  // D-5 retrofit: instanceBuffers clean-up. The instanceBuffers Map is
-  // keyed by cacheKey (packed Entity u32, same as entityKey on
-  // RenderableSnapshot). Drop entries whose key is no longer in the
-  // validated set (OQ-3 / R-4). feat-20260619 M4 / F11: destroy the GPU
-  // buffer before Map.delete so despawned entities release their
-  // instance-buffer backing memory symmetrically (D-6).
-  //
-  // D-1a #1: instanceBuffers keys on the positive half (>= 0) are
-  // worldEntityKey composites matching the write side. Negative half
-  // fold-bucket keys (< 0) are NOT worldEntityKey; they are
-  // material-handle-based and cross-world collision is semantically
-  // correct (same material renders in same fold bucket).
-  for (const [key, entry] of frameState.instanceBuffers.entries()) {
-    if (!validatedInstanceKeys.has(key)) {
-      if (!entry.buffer.isDestroyed) {
-        const r = entry.buffer.destroy();
-        if (!r.ok) internals.errorRegistry.fire(r.error);
-      }
-      frameState.instanceBuffers.delete(key);
-    }
-  }
-
-  // Chunk keys are `${worldEntityKey}:${chunkStart}`. Keep the key opaque to
-  // the authoring API, but retain the numeric owner prefix for eviction.
-  if (frameState.instanceBufferChunks !== undefined) {
-    for (const [key, entry] of frameState.instanceBufferChunks.entries()) {
-      const separator = key.indexOf(':');
-      const ownerKey = separator < 0 ? Number.NaN : Number(key.slice(0, separator));
-      if (validatedInstanceKeys.has(ownerKey)) continue;
-      if (!entry.buffer.isDestroyed) {
-        const r = entry.buffer.destroy();
-        if (!r.ok) internals.errorRegistry.fire(r.error);
-      }
-      frameState.instanceBufferChunks.delete(key);
-    }
-  }
-
-  if (frameState.morphBuffers !== undefined) {
-    for (const [key, entry] of frameState.morphBuffers.entries()) {
-      if (validatedEntityKeys.has(key)) continue;
-      if (!entry.buffer.isDestroyed) {
-        const result = entry.buffer.destroy();
-        if (!result.ok) internals.errorRegistry.fire(result.error);
-      }
-      frameState.morphBuffers.delete(key);
-    }
-  }
-}
-
-/**
- * feat-20260704 M3/w18: record-stage fold operator linear scan, extracted
- * verbatim from `recordFrame`.
- *
- * feat-20260622-chunk-gpu-instancing-sprite-tilemap M1 / w4 + w5 (D-1, D-5):
- * groups transparent-sort-ordered dispatch entries with equal (Layer.value,
- * sortKey, materialHandle) into fold buckets. Mode-gate (D-5 extended): modes 0
- * (LAYER_Z) and 1 (LAYER_Y) fold using the pos z/y lanes; modes 2/3 bypass per-entity
- * (each entry a singleton bucket). Records `frameState.lastFoldBucketCount` =
- * fold-eligible buckets (bucketSize > 1) for the AC-06 metric. Empty dispatch
- * short-circuits (test fixtures pass null world).
- *
- * @internal
- */
-function computeFoldBuckets(
-  world: World,
-  frameState: RenderFrameState,
-  transparentDispatch: readonly DispatchEntry[],
-  renderables: readonly RenderableSnapshot[],
-): readonly FoldBucket[] {
-  if (transparentDispatch.length === 0) {
-    frameState.lastFoldBucketCount = 0;
-    return [];
-  }
-  const transparentSortCfg = getTransparentSortConfig(world);
-
-  // Only layer-Z / layer-Y modes can produce non-singleton fold buckets.
-  // The other modes make one inert singleton per entry, which is discarded by
-  // buildFoldDispatchPlan. Returning the same empty plan here avoids allocating
-  // a transform matrix for every renderable when folding is disabled by mode.
-  if (
-    transparentSortCfg.mode !== TRANSPARENT_SORT_MODE_LAYER_Z &&
-    transparentSortCfg.mode !== TRANSPARENT_SORT_MODE_LAYER_Y
-  ) {
-    frameState.lastFoldBucketCount = 0;
-    return [];
-  }
-
-  // `transparentDispatch` is the legacy name for the complete sorted dispatch
-  // list. Opaque entries can never participate in the transparent-only fold
-  // plan, yet foldDispatchBuckets must preserve its general helper contract and
-  // therefore materializes an inert singleton (including a Float32Array(16))
-  // for each one. Filter only at this private production call site so the fold
-  // helper keeps its testable semantics while record avoids work whose result
-  // is provably discarded.
-  let transparentCount = 0;
-  for (const entry of transparentDispatch) {
-    if (renderables[entry.renderableIndex]?.material.transparent === true) {
-      transparentCount += 1;
-    }
-  }
-  if (transparentCount === 0) {
-    frameState.lastFoldBucketCount = 0;
-    return [];
-  }
-  const foldCandidates =
-    transparentCount === transparentDispatch.length
-      ? transparentDispatch
-      : transparentDispatch.filter(
-          (entry) => renderables[entry.renderableIndex]?.material.transparent === true,
-        );
-  const foldBuckets = foldDispatchBuckets(foldCandidates, transparentSortCfg.mode, renderables);
-  // Count only fold-eligible buckets (bucketSize > 1) so the metric
-  // surfaces fold actually reducing draws — singleton buckets under
-  // mode bypass do not change draw count, so they do not contribute.
-  let foldEligibleCount = 0;
-  for (const b of foldBuckets) {
-    if (b.bucketSize > 1) foldEligibleCount += 1;
-  }
-  frameState.lastFoldBucketCount = foldEligibleCount;
-  return foldBuckets;
-}