@instruktlabs/kiln 1.2.0 → 1.2.2

package/docs/install.md

@@ -1,6 +1,7 @@
 # Install Kiln for your coding agent
 
-This guide describes **Kiln 1.1** under the package name `@instruktlabs/kiln`.
+This guide covers the stable `@instruktlabs/kiln` package. Feature-specific
+minimum versions are noted where they matter.
 Use a version available in the [npm registry](https://www.npmjs.com/package/@instruktlabs/kiln),
 or build a [local package](#install-a-local-package) to test an unpublished checkout.
 [CHANGELOG.md](../CHANGELOG.md) lists changes; read the
@@ -154,7 +155,7 @@ For agent-assisted installation, give your agent the repository URL and ask:
 
 ## Release compatibility
 
-The current candidate's connected MCP server lists the fourteen tools in the
+The packaged local MCP server lists the fourteen base tools in the
 [generated tool reference](tools.md), plus `kiln_project`, `kiln_material` and
 `kiln_review` from the packaged local host: seventeen in all. When installing an
 older release, use the documentation and receipt attached to that release; newer
@@ -163,7 +164,7 @@ tools and migration changes are not retroactively available there.
 Package publication requires per-platform receipts (Linux, Windows, macOS arm64,
 macOS x64) and `SHA256SUMS.txt` for the exact tarball. Check the artifacts actually
 attached to the selected release; do not treat an older receipt or a source archive
-as qualification of the current candidate.
+as qualification of a different package version.
 
 A successful local build or an unreleased fix does not update the GitHub release: a
 checkout can be ahead of it. Registry and GitHub release receipts each identify the
@@ -483,7 +484,7 @@ The v1 local plugin below uses a smaller bundle and creates an explicit workspac
 
 ## Local Claude Code and Codex plugins
 
-The commands below select the 1.1.0 plugin, which supports new workspaces and
+The commands below select the 1.2.1 plugin, which supports new workspaces and
 existing-project adoption. Use them once the matching GitHub tag and npm version
 are available. To qualify an unpublished candidate, select its exact source ref
 and supply the matching local engine archive as described in its bundled setup
@@ -498,14 +499,14 @@ does not start a second global Kiln MCP server.
 For Claude Code:
 
 ```sh
-claude plugin marketplace add instruktlabs/kiln#v1.1.0 --sparse .claude-plugin plugins/kiln-engine
+claude plugin marketplace add instruktlabs/kiln#v1.2.1 --sparse .claude-plugin plugins/kiln-engine
 claude plugin install kiln-engine@instruktlabs
 ```
 
 For Codex:
 
 ```sh
-codex plugin marketplace add instruktlabs/kiln --ref v1.1.0 --sparse .agents/plugins --sparse plugins/kiln-engine
+codex plugin marketplace add instruktlabs/kiln --ref v1.2.1 --sparse .agents/plugins --sparse plugins/kiln-engine
 codex plugin add kiln-engine@instruktlabs
 ```
 

package/docs/migration.md

@@ -4,6 +4,22 @@ Existing inline-code transport and the legacy capture format remain supported. T
 Discovery and authoring-helper changes below require explicit migration; retired
 names have no callable compatibility aliases.
 
+## Changes in 1.2
+
+Version 1.2.0 adds an opt-in named-operation presentation derived from the shared
+tool registry. The default local MCP interface retains its seventeen tools;
+ordinary local callers need no migration. Embedding hosts can adopt the
+[named-operation presentation](sdk.md#named-operation-presentation), including
+consolidated asset search and material operations. Host capabilities determine
+which tools are available; do not maintain a separate schema copy.
+
+Version 1.2.1 fixes embedded texture loading in the shared presentation viewer
+under restrictive MCP Apps content security policies, reports failed texture
+decoding, and advances the widget resource URI to refresh cached components.
+Upgrade the installed package and rebuild embedding hosts to use those fixes.
+No tool-count change or saved-asset migration is required. Package publication
+does not establish that a particular hosted deployment has been upgraded.
+
 ## Changes in 1.1
 
 Version 1.1 adds existing-project setup

package/docs/runtime.md

@@ -133,9 +133,9 @@ Advanced geometry callbacks also have operation-specific input limits. Those che
 
 ### Bake defaults
 
-The rigid-group `full` contract and `rigid-v1` rebuild policy below are included in
-1.0 and its release candidate. They are not implemented by the downloadable 0.10.0
-package; see the [migration notes](migration.md#changes-in-10).
+The rigid-group `full` contract and `rigid-v1` rebuild policy below are supported
+in stable Kiln releases from 1.0 onward. When upgrading a 0.10.0 integration,
+see the [migration notes](migration.md#changes-in-10).
 
 `KILN_BAKE_OPTIMIZE` and `KILN_BAKE_INSTANCE` choose the bake passes for a render that does not pass `optimize` or `instance`; a value the call passes always wins.
 

package/docs/sdk.md

@@ -22,7 +22,7 @@ const result = await renderGLB(code);
 ```
 
 The complete authoring and host APIs remain available through documented subpaths.
-The original 55 export paths are retained; version 1.1 adds four
+The original 55 export paths are retained; version 1.1 added four
 host entrypoints below. The root exposes rendering, validation,
 Discovery and engine identity; it does not re-export every name from every module.
 CommonJS is not part of this release's contract.
@@ -53,7 +53,7 @@ entrypoint list. Files inside `lib/`, including declaration dependencies under
 
 ## Stability in 1.x
 
-The table classifies all 59 public entrypoints in version 1.1. The root and every listed subpath
+The table classifies all 59 public entrypoints. The root and every listed subpath
 except `implicit` are stable entrypoints for v1: their declared public signatures,
 record shapes and documented behavior receive normal semantic-versioning
 compatibility. Optional dependencies do not make the two agent APIs experimental.

package/lib/asset-widget-uri.d.ts

@@ -6,4 +6,4 @@
  * engine has loaded. Neither of those may import the other, so the literal
  * lives here on its own.
  */
-export declare const KILN_ASSET_WIDGET_URI = "ui://kiln/asset-v5.html";
+export declare const KILN_ASSET_WIDGET_URI = "ui://kiln/asset-v6.html";

package/lib/asset-widget-uri.js

@@ -6,4 +6,4 @@
  * engine has loaded. Neither of those may import the other, so the literal
  * lives here on its own.
  */
-export const KILN_ASSET_WIDGET_URI = 'ui://kiln/asset-v5.html';
+export const KILN_ASSET_WIDGET_URI = 'ui://kiln/asset-v6.html';

package/lib/engine-identity.d.ts

@@ -26,7 +26,7 @@
  * `src/__tests__/package-contents.test.ts` fails if it disagrees with the manifest
  * or with any plugin manifest, which is what keeps the literal honest.
  */
-export declare const ENGINE_VERSION = "1.2.0";
+export declare const ENGINE_VERSION = "1.2.2";
 /**
  * Where this engine was loaded from, as a `file://` URL of the package root.
  *

package/lib/engine-identity.js

@@ -26,7 +26,7 @@
  * `src/__tests__/package-contents.test.ts` fails if it disagrees with the manifest
  * or with any plugin manifest, which is what keeps the literal honest.
  */
-export const ENGINE_VERSION = '1.2.0';
+export const ENGINE_VERSION = '1.2.2';
 /**
  * Where this engine was loaded from, as a `file://` URL of the package root.
  *

package/lib/mcp-core.d.ts

@@ -23,7 +23,7 @@ import { type ServeStdioOptions, type StdioServerHandle } from '@modelcontextpro
 import type { AssetLink } from "./assets-resources.js";
 /** Server identity reported in the handshake and stamped into every 2026-07-28 result. */
 export declare const MCP_SERVER_NAME = "kiln";
-export declare const MCP_SERVER_VERSION = "1.2.0";
+export declare const MCP_SERVER_VERSION = "1.2.2";
 /**
  * The spec's optional `instructions` field, returned by `initialize` and
  * `server/discover`.

package/lib/tools/registry.d.ts

@@ -17,7 +17,7 @@ import { type ViewRenderTimeoutContextProvider, type ViewRenderTimeoutResolver }
 import { ViewEvidenceHistoryStore } from "../views/evidence-history.js";
 import { type BackdropId } from "../views/background.js";
 import type { TextureUsage } from "../textures.js";
-export declare const KILN_ASSET_WIDGET_URI = "ui://kiln/asset-v5.html";
+export { KILN_ASSET_WIDGET_URI } from "../asset-widget-uri.js";
 export interface KilnToolDef {
     /** Shared action ownership and requirements; never hand-maintained by transports. */
     actionContract?: Readonly<Record<string, import("./operation-contract.js").KilnActionContract>>;
@@ -793,4 +793,3 @@ export declare function newestRevision(target: {
 export declare function buildProgramAssetDraft(code: string, context: KilnToolContext, backdrop?: BackdropId): Promise<Pick<import("../assets.js").AssetDraft, 'code' | 'glb' | 'preview' | 'previewInfo' | 'build'>>;
 /** All asset operation schemas live here, alongside the existing tool definitions. */
 export declare function createKilnAssetDefs(context: KilnToolContext, presentation?: 'grouped' | 'operations'): KilnToolDef[];
-export {};

package/lib/tools/registry.js

@@ -35,7 +35,8 @@ import { persistedPreviewFidelity } from "./preview-fidelity.js";
 // =============================================================================
 // Tool definition contract
 // =============================================================================
-export const KILN_ASSET_WIDGET_URI = 'ui://kiln/asset-v5.html';
+export { KILN_ASSET_WIDGET_URI } from "../asset-widget-uri.js";
+import { KILN_ASSET_WIDGET_URI } from "../asset-widget-uri.js";
 function proceduralTextureMaterialContract(rendered, context) {
     const required = [...new Set(context.requiredProceduralTextureUsages ?? [])];
     if (required.length === 0)

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@instruktlabs/kiln",
-  "version": "1.2.0",
+  "version": "1.2.2",
   "description": "Create and refine procedural 3D assets with JavaScript, image feedback, and reusable source revisions.",
   "license": "MIT",
   "author": "Matthew Kissinger",

package/plugin.json

@@ -2,7 +2,7 @@
   "name": "kiln",
   "displayName": "Kiln",
   "description": "Build and revise 3D assets with your coding agent. Write JavaScript, inspect selected views, edit saved source revisions, and export GLB files locally.",
-  "version": "1.2.0",
+  "version": "1.2.2",
   "license": "MIT",
   "homepage": "https://github.com/instruktlabs/kiln",
   "keywords": [

package/plugins/kiln-engine/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "kiln-engine",
-  "version": "1.2.0",
+  "version": "1.2.2",
   "description": "Set up a local Kiln workspace to create, inspect and revise editable 3D assets with Claude Code or Codex.",
   "author": {
     "name": "Instrukt Labs",

package/plugins/kiln-engine/README.md

@@ -1,7 +1,7 @@
 # Kiln local plugin
 
-Plugin version 1.2.0, maintained by Instrukt Labs under the MIT license.
-This plugin pins engine 1.2.0. Registry setup requires that exact version
+Plugin version 1.2.2, maintained by Instrukt Labs under the MIT license.
+This plugin pins engine 1.2.2. Registry setup requires that exact version
 to be published. Use a published release tag for normal installation or a reviewed
 local archive for development qualification. The installation ID remains
 `kiln-engine@instruktlabs`.
@@ -31,7 +31,7 @@ codex plugin add kiln-engine@instruktlabs
 Restart or reload your coding agent's plugins as its installation message directs.
 Then ask it to set up a Kiln workspace. The maintained setup skill runs this
 plugin's `bin/kiln-setup-workspace.mjs` with Node, installs
-`@instruktlabs/kiln@1.2.0` outside the project and configures your chosen
+`@instruktlabs/kiln@1.2.2` outside the project and configures your chosen
 workspace. The same initializer supports existing projects and new workspaces.
 
 The plugin registers setup only. The workspace supplies authoring skills and one

package/plugins/kiln-engine/package-provenance.json

@@ -1,20 +1,20 @@
 {
   "schemaVersion": 1,
   "kind": "kiln-local-plugin",
-  "pluginVersion": "1.2.0",
-  "engineVersion": "1.2.0",
+  "pluginVersion": "1.2.2",
+  "engineVersion": "1.2.2",
   "executables": [
     "bin/kiln-setup-workspace.mjs"
   ],
   "files": {
     ".claude-plugin/icon.png": "sha256:b4b651c402793b7e27cab780f04b14f80daec6d0cd5b7e4e90313930581a54e9",
-    ".claude-plugin/plugin.json": "sha256:616a6a61da072fcfdd4d0e1cf513e0e91bf1e56fb61b9b02d23e72fa291556bc",
+    ".claude-plugin/plugin.json": "sha256:8f4586ed437f4a0478de900547cdf5ace59f0e125a0f0b8d7e717e44061509e9",
     "bin/kiln-setup-workspace.mjs": "sha256:3d9a30236919a6ca91acb6b26f808cec442e6edc3dd88fe010645b010d76e838",
     "LICENSE": "sha256:cdba278ebf1d6de618869936226bf03be4887179c128efc7aaa13d22034826a5",
-    "plugin.json": "sha256:3437107d46ad4fef4a710a8e821e56b43894cc1722504fe4e8ff0120fa6a8d8d",
+    "plugin.json": "sha256:937211437e673cef141599c5ec5e99902596a9bedf6d772694f50a39f9d8e6dd",
     "PRIVACY.md": "sha256:5f58d981667e40441e21c2dec411f269a9a67a6141cec61976d27088fb12573b",
-    "README.md": "sha256:0b82e6eb8b679f8b991c1a5567957574ed7b3341a87ef989403e5521f83ab50e",
-    "runtime.json": "sha256:5ebac8387f4bedcc7cac02a36f73c5ffba969ce6c8c6e2b0e356ef569168d0a5",
+    "README.md": "sha256:2224bb16ed6645a1861fce4fbcf6801e4b81a0cb918970ad95c21e75be511eb7",
+    "runtime.json": "sha256:cbb2367a7435583074f589e44162739db5f972d8e6656f6f1fb4b790ad6eddcc",
     "skills/kiln-setup-workspace/references/plugin-install.md": "sha256:c338fb792e7fad0364c3e1a13c94c506afa1395489ec1b6e83b36d04728935fb",
     "skills/kiln-setup-workspace/references/renderer-setup.md": "sha256:b743b1b2827fa814385990e1e5b849391cb427413e9c016d273aa19cebd46031",
     "skills/kiln-setup-workspace/SKILL.md": "sha256:65ed926b3503a33f4fe793e84e4a045ce36e3967f0e6b340e456a15dd010ce54"

package/plugins/kiln-engine/plugin.json

@@ -1,7 +1,7 @@
 {
   "$schema": "https://agent-plugins.org/schemas/1.0.0/plugin.schema.json",
   "name": "kiln-engine",
-  "version": "1.2.0",
+  "version": "1.2.2",
   "description": "Set up a local Kiln workspace to create, inspect and revise editable 3D assets with Claude Code or Codex.",
   "author": {
     "name": "Instrukt Labs",

package/plugins/kiln-engine/runtime.json

@@ -1,6 +1,6 @@
 {
   "name": "@instruktlabs/kiln",
-  "version": "1.2.0",
+  "version": "1.2.2",
   "harnesses": [
     "claude",
     "codex",

package/skills/kiln-author-asset/SKILL.md

@@ -97,7 +97,7 @@ node kiln.mjs render RETURNED_REF --out asset-v1.glb --views asset-v1.png
 
 Replace `RETURNED_REF` with the final reference returned by Kiln. Keep `.kiln/programs`, including its mappings, while using saved references. Pass `--out` whenever you want a GLB: `render` with neither `--out` nor `--views` writes `out.glb` in the current directory.
 
-Add `--json` to CLI `render` for a receipt with the source reference, requirements, output paths, image fidelity and the compact review (`--detail full` only when every instance of a finding matters); read the image file separately. On failure, check `ok` and `files`: a GLB may have been written before a failed image.
+Use `render --json` for the source reference, requirements, paths, fidelity and compact review (`--detail full` only for a closer look). Read images separately. Check `ok` and `files` on every export, even when redirected; a later command can hide failure. Deliver source, GLB and bundles from the same final reference or revision.
 
 To save a chosen camera view, write the `capture` object to `cameras.json` and run `node kiln.mjs render RETURNED_REF --capture cameras.json --views hero.png`, the same camera schema and pipeline as MCP; the CLI is the route that writes review PNGs to disk. With `"output": "separate"` it writes `hero.shot-01.png`, `hero.shot-02.png` and so on and lists each in `files`; add `--backdrop light` or `dark` when the grey hides the silhouette. Do not copy image base64 into shell commands.
 

package/skills/kiln-author-asset/references/camera-cli.md

@@ -31,3 +31,16 @@ shots share the grid. With `"output": "separate"` the CLI writes one file per sh
 beside the `--views` path (`hero.shot-01.png`, `hero.shot-02.png`, ...) and lists each
 in `files` with its shot name. MCP delivers the same shots as separate image blocks. `--backdrop neutral|dark|light` sets the backdrop of
 any `--views` sheet, with or without `--capture`, and wins over the recipe's own `backdrop`.
+
+## Verify exported files
+
+Read each command's JSON receipt, including output redirected to a file. Check
+`ok`, the returned reference and each entry in `files`; a GLB can exist even when
+an image failed. A subsequent successful shell command does not establish that
+an earlier export succeeded. Source export refuses to overwrite an existing file;
+choose a new path instead of assuming that the old file was refreshed.
+
+After an edit, export from the final reference or exact saved revision. Any source,
+GLB and ZIP you hand over must describe that same revision. Regenerate a bundle
+when its contents changed, or clearly identify it as an older revision rather than
+listing it as the latest delivery.

package/skills/kiln-author-asset/references/geometry-recipes.md

@@ -69,6 +69,16 @@ four transformed corners against the intended frame plane and opening, then
 inspect an oblique view where an out-of-plane pane is visible. Matching centers
 or bounding boxes alone cannot establish this fit.
 
+For blocks or panels around a cylinder, separate their radial positions from
+their orientation. A `boxGeo(length, height, thickness)` has its long axis along
+local X. At `[radius * Math.cos(theta), y, radius * Math.sin(theta)]`, Y rotation
+`-thetaDeg` points that axis radially outward; `90 - thetaDeg` makes it tangent
+to the ring (`theta` is radians, `thetaDeg` is degrees). Derive the orientation
+again when the geometry's long axis or parent frame differs. Check one part at
+each quarter turn before repeating it. For a continuous wall, inspect neighboring
+edges on both its inside and outside, including staggered courses: correct centers
+and tangency alone do not guarantee closure. Preserve intentional openings.
+
 For attached veins, ribs or seams, discover `recipe:surface-detail-v1`. Its strip
 shares the carrier mesh's sampled boundary vertices and rises along local normals.
 A shared equation followed by a separately interpolated curve does not establish

package/src/asset-widget-uri.ts

@@ -6,4 +6,4 @@
  * engine has loaded. Neither of those may import the other, so the literal
  * lives here on its own.
  */
-export const KILN_ASSET_WIDGET_URI = 'ui://kiln/asset-v5.html';
+export const KILN_ASSET_WIDGET_URI = 'ui://kiln/asset-v6.html';

package/src/engine-identity.ts

@@ -27,7 +27,7 @@
  * `src/__tests__/package-contents.test.ts` fails if it disagrees with the manifest
  * or with any plugin manifest, which is what keeps the literal honest.
  */
-export const ENGINE_VERSION = '1.2.0';
+export const ENGINE_VERSION = '1.2.2';
 
 /**
  * Where this engine was loaded from, as a `file://` URL of the package root.

package/src/generated/mcp-manifest.json

@@ -1733,13 +1733,13 @@
       },
       "_meta": {
         "ui": {
-          "resourceUri": "ui://kiln/asset-v5.html",
+          "resourceUri": "ui://kiln/asset-v6.html",
           "visibility": [
             "model"
           ]
         },
-        "openai/outputTemplate": "ui://kiln/asset-v5.html",
-        "ui/resourceUri": "ui://kiln/asset-v5.html"
+        "openai/outputTemplate": "ui://kiln/asset-v6.html",
+        "ui/resourceUri": "ui://kiln/asset-v6.html"
       },
       "outputSchema": {
         "type": "object",
@@ -2018,7 +2018,7 @@
   ],
   "resources": [
     {
-      "uri": "ui://kiln/asset-v5.html",
+      "uri": "ui://kiln/asset-v6.html",
       "name": "kiln-asset-viewer",
       "mimeType": "text/html;profile=mcp-app",
       "description": "Interactive Kiln asset viewer and downloads",

package/src/tools/registry.ts

@@ -94,7 +94,8 @@ import type { TextureUsage } from '../textures';
 // Tool definition contract
 // =============================================================================
 
-export const KILN_ASSET_WIDGET_URI = 'ui://kiln/asset-v5.html';
+export { KILN_ASSET_WIDGET_URI } from '../asset-widget-uri';
+import { KILN_ASSET_WIDGET_URI } from '../asset-widget-uri';
 export interface KilnToolDef {
   /** Shared action ownership and requirements; never hand-maintained by transports. */
   actionContract?: Readonly<Record<string, import('./operation-contract').KilnActionContract>>;

package/src/viewer/chat-app.ts

@@ -51,6 +51,8 @@ function encode(bytes: Uint8Array) {
 async function show(input: unknown) {
   const revision = ++presentationRevision;
   record = undefined;
+  element('stats').textContent = '';
+  element<HTMLSelectElement>('clips').hidden = true;
   for (const button of document.querySelectorAll<HTMLButtonElement>('button[data-download]'))
     button.disabled = true;
   try {
@@ -116,14 +118,16 @@ async function showResult(
     status.textContent = 'Drag to orbit · Scroll to zoom';
   } catch (error) {
     if (revision !== presentationRevision) return;
+    stage?.dispose();
+    stage = undefined;
     const preview = record.files['preview.png'];
     if (preview) {
       const image = new Image();
-      image.alt = record.manifest.name;
+      image.alt = `${record.manifest.name} · saved preview image`;
       image.src = `data:image/png;base64,${encode(preview)}`;
       element('stage').replaceChildren(image);
     }
-    status.textContent = `3D preview unavailable: ${String(error)}`;
+    status.textContent = `${preview ? 'Showing saved preview. ' : ''}3D preview unavailable: ${String(error)}`;
   }
   for (const button of document.querySelectorAll<HTMLButtonElement>('button[data-download]'))
     button.disabled = false;

package/src/viewer/glb-loader.ts

@@ -0,0 +1,78 @@
+import {
+  LoadingManager,
+  TextureLoader,
+  Texture,
+  type Object3D,
+  type Mesh,
+  type BufferGeometry,
+  type Material,
+} from 'three';
+import { GLTFLoader } from 'three/addons/loaders/GLTFLoader.js';
+import { validateAssetGlb } from '../assets';
+
+export function disposeAssetModel(model: Object3D) {
+  const geometries = new Set<BufferGeometry>();
+  const materials = new Set<Material>();
+  const textures = new Set<Texture>();
+  model.traverse((object) => {
+    const mesh = object as Mesh;
+    if (!mesh.isMesh) return;
+    geometries.add(mesh.geometry);
+    for (const material of Array.isArray(mesh.material) ? mesh.material : [mesh.material]) {
+      materials.add(material);
+      for (const value of Object.values(material))
+        if (value instanceof Texture) textures.add(value);
+    }
+  });
+  for (const value of [...geometries, ...materials, ...textures]) value.dispose();
+}
+
+/**
+ * Parse self-contained GLBs under MCP Apps' img-src data: / connect-src none policy.
+ * ImageBitmapLoader fetches even blob/data URLs. Use the documented image handler
+ * instead, preserving GLTFLoader's sampler, UV, color-space and extension logic.
+ * Only the parser's private JSON copy changes; downloaded GLB bytes remain exact.
+ */
+export async function loadAssetGlb(bytes: Uint8Array) {
+  validateAssetGlb(bytes);
+  const manager = new LoadingManager();
+  let imageFailed = false;
+  manager.onError = () => {
+    imageFailed = true;
+  };
+  manager.addHandler(/^data:image\//, new TextureLoader(manager));
+  manager.setURLModifier((url) => {
+    if (!url.startsWith('blob:') && !url.startsWith('data:'))
+      throw new Error('External model resources are not loaded');
+    return url;
+  });
+  const loader = new GLTFLoader(manager);
+  loader.register((parser) => ({
+    name: 'KILN_embedded_images',
+    async beforeRoot() {
+      for (const image of parser.json.images ?? []) {
+        if (image.bufferView === undefined) continue;
+        const buffer = new Uint8Array(await parser.getDependency('bufferView', image.bufferView));
+        let binary = '';
+        for (let i = 0; i < buffer.length; i += 8192)
+          binary += String.fromCharCode(...buffer.subarray(i, i + 8192));
+        if (!/^image\/(png|jpeg|webp|avif)$/.test(image.mimeType ?? ''))
+          throw new Error('Unsupported embedded image type');
+        image.uri = `data:${image.mimeType};base64,${btoa(binary)}`;
+        delete image.bufferView;
+      }
+    },
+  }));
+  const gltf = await loader.parseAsync(Uint8Array.from(bytes).buffer, '');
+  if (imageFailed) {
+    for (const scene of gltf.scenes) disposeAssetModel(scene);
+    throw new Error('An embedded texture could not be decoded.');
+  }
+  // GLTFLoader deliberately converts failed images to null maps. Never commit a
+  // material-degraded scene, including resources loaded later for detached LODs.
+  return Object.assign(gltf, {
+    assertTexturesLoaded() {
+      if (imageFailed) throw new Error('An embedded texture could not be decoded.');
+    },
+  });
+}

package/src/viewer/scene.ts

@@ -1,9 +1,8 @@
 /// <reference lib="dom" />
 import * as THREE from 'three';
-import { GLTFLoader } from 'three/addons/loaders/GLTFLoader.js';
 import { OrbitControls } from 'three/addons/controls/OrbitControls.js';
 import { RoomEnvironment } from 'three/addons/environments/RoomEnvironment.js';
-import { validateAssetGlb } from '../assets';
+import { loadAssetGlb, disposeAssetModel as disposeModel } from './glb-loader';
 import { frameAssetBounds } from './framing';
 import {
   captureCameraView,
@@ -156,22 +155,6 @@ export function createAssetStage(container: HTMLElement) {
       ],
     };
   };
-  const disposeModel = (model: THREE.Object3D) => {
-    const geometries = new Set<THREE.BufferGeometry>();
-    const materials = new Set<THREE.Material>();
-    const textures = new Set<THREE.Texture>();
-    model.traverse((object) => {
-      const mesh = object as THREE.Mesh;
-      if (!mesh.isMesh) return;
-      geometries.add(mesh.geometry);
-      for (const material of Array.isArray(mesh.material) ? mesh.material : [mesh.material]) {
-        materials.add(material);
-        for (const value of Object.values(material))
-          if (value instanceof THREE.Texture) textures.add(value);
-      }
-    });
-    for (const value of [...geometries, ...materials, ...textures]) value.dispose();
-  };
   const reset = () => {
     if (!root) return;
     const box = drawnBounds(root);
@@ -263,17 +246,17 @@ export function createAssetStage(container: HTMLElement) {
       const loadStarted = performance.now();
       const current = ++generation;
       cancelMeasurement('The artifact changed during measurement. Measure the new revision again.');
-      validateAssetGlb(bytes);
-      const manager = new THREE.LoadingManager();
-      manager.setURLModifier((url) => {
-        if (!url.startsWith('blob:') && !url.startsWith('data:'))
-          throw new Error('External model resources are not loaded');
-        return url;
-      });
-      const parsed = await new GLTFLoader(manager).parseAsync(Uint8Array.from(bytes).buffer, '');
+      const parsed = await loadAssetGlb(bytes);
       // three's loader draws every node; hide what KHR_node_visibility hides before counting.
       applyNodeVisibility(parsed, [parsed.scene]);
       const parsedLevels = await loadViewerLevels(parsed);
+      try {
+        parsed.assertTexturesLoaded();
+      } catch (error) {
+        disposeModel(parsed.scene);
+        for (const level of detachedLevels(parsedLevels)) disposeModel(level);
+        throw error;
+      }
       const gltf = acceptLoadedResource(
         parsed,
         () => !disposed && current === generation && options.isCurrent?.() !== false,