@vgai/engine 0.5.15 → 0.5.17

package/src/adapter/seam-evidence.ts

@@ -0,0 +1,336 @@
+/**
+ * Evidence that a protocol seam tells the truth.
+ *
+ * A property existing on an object proves only SHAPE. It does not prove that
+ * calling it works, that its effect reaches the consumer, or that an authored
+ * effect survives a cold remount. Those are deliberately separate stages so a
+ * declaration can never be promoted to a green capability merely because it
+ * has the right spelling.
+ *
+ * Receipts are scoped to a SUBJECT and an EPOCH. A provider from a prior mount
+ * is not evidence about the current mount, even when both mounts use the same
+ * project and node ids. This is the generic answer to stale adapter registries,
+ * late provider registration, and project switching: old receipts simply do
+ * not participate in the new verdict.
+ */
+
+export const SEAM_PROOF_STAGES = ['claim', 'shape', 'operation', 'effect', 'round-trip'] as const;
+
+export type SeamProofStage = (typeof SEAM_PROOF_STAGES)[number];
+export type SeamEvidenceOutcome = 'pass' | 'fail' | 'absent';
+export type SeamEvidenceSource =
+  | 'declaration'
+  | 'shape-check'
+  | 'consumer'
+  | 'conformance-probe'
+  | 'round-trip';
+
+/** One directly observed fact. `detail` names the observation, never a claim
+ * such as "supported" with no described bar behind it. */
+export interface SeamEvidenceReceipt {
+  readonly seam: string;
+  readonly subject: string;
+  readonly epoch: string;
+  readonly stage: SeamProofStage;
+  readonly outcome: SeamEvidenceOutcome;
+  readonly source: SeamEvidenceSource;
+  readonly detail: string;
+}
+
+export type SeamEvidenceState = 'verified' | 'failed' | 'absent' | 'unverified' | 'not-applicable';
+
+export interface SeamEvidenceVerdict {
+  readonly seam: string;
+  readonly subject: string;
+  readonly epoch: string;
+  readonly required: SeamProofStage;
+  readonly state: SeamEvidenceState;
+  /** The strongest current-epoch receipt, or null when nobody has measured the
+   * seam. A not-applicable verdict carries its reason here instead. */
+  readonly receipt: SeamEvidenceReceipt | null;
+  readonly detail: string;
+}
+
+const STAGE_RANK: Readonly<Record<SeamProofStage, number>> = {
+  claim: 0,
+  shape: 1,
+  operation: 2,
+  effect: 3,
+  'round-trip': 4,
+};
+
+export function seamStageAtLeast(observed: SeamProofStage, required: SeamProofStage): boolean {
+  return STAGE_RANK[observed] >= STAGE_RANK[required];
+}
+
+/**
+ * Grade one seam from receipts for ONE subject epoch.
+ *
+ * The strongest stage wins. At the same stage, the last receipt wins so a
+ * successful retry can close a failure and a later failure can reopen it.
+ * Lower-stage evidence can never overrule a stronger observation: a completed
+ * cold-remount round trip is not invalidated by a later shape census.
+ */
+export function gradeSeamEvidence(options: {
+  readonly seam: string;
+  readonly subject: string;
+  readonly epoch: string;
+  readonly required: SeamProofStage;
+  readonly receipts: readonly SeamEvidenceReceipt[];
+  readonly notApplicable?: string | undefined;
+}): SeamEvidenceVerdict {
+  const { seam, subject, epoch, required } = options;
+  if (options.notApplicable !== undefined) {
+    return {
+      seam,
+      subject,
+      epoch,
+      required,
+      state: 'not-applicable',
+      receipt: null,
+      detail: options.notApplicable,
+    };
+  }
+
+  let strongest: SeamEvidenceReceipt | null = null;
+  for (const receipt of options.receipts) {
+    if (receipt.seam !== seam || receipt.subject !== subject || receipt.epoch !== epoch) continue;
+    if (!strongest || STAGE_RANK[receipt.stage] >= STAGE_RANK[strongest.stage]) {
+      strongest = receipt;
+    }
+  }
+
+  if (!strongest) {
+    return {
+      seam,
+      subject,
+      epoch,
+      required,
+      state: 'unverified',
+      receipt: null,
+      detail: `no current-epoch evidence has reached the required ${required} stage`,
+    };
+  }
+  if (strongest.outcome === 'fail') {
+    return {
+      seam,
+      subject,
+      epoch,
+      required,
+      state: 'failed',
+      receipt: strongest,
+      detail: strongest.detail,
+    };
+  }
+  if (strongest.outcome === 'absent') {
+    return {
+      seam,
+      subject,
+      epoch,
+      required,
+      state: 'absent',
+      receipt: strongest,
+      detail: strongest.detail,
+    };
+  }
+  if (!seamStageAtLeast(strongest.stage, required)) {
+    return {
+      seam,
+      subject,
+      epoch,
+      required,
+      state: 'unverified',
+      receipt: strongest,
+      detail: `${strongest.detail}; this proves ${strongest.stage}, but this seam requires ${required}`,
+    };
+  }
+  return {
+    seam,
+    subject,
+    epoch,
+    required,
+    state: 'verified',
+    receipt: strongest,
+    detail: strongest.detail,
+  };
+}
+
+/** In-memory current-session ledger. It is evidence, not a project file and
+ * therefore introduces no VGAI data format. */
+export class SeamEvidenceLedger {
+  readonly #receipts: SeamEvidenceReceipt[] = [];
+
+  record(receipt: SeamEvidenceReceipt): void {
+    if (!receipt.seam || !receipt.subject || !receipt.epoch || !receipt.detail.trim()) {
+      throw new Error('seam evidence requires non-empty seam, subject, epoch, and detail');
+    }
+    this.#receipts.push(receipt);
+  }
+
+  receipts(options?: {
+    readonly subject?: string | undefined;
+    readonly epoch?: string | undefined;
+  }): readonly SeamEvidenceReceipt[] {
+    return this.#receipts.filter(
+      (receipt) =>
+        (options?.subject === undefined || receipt.subject === options.subject) &&
+        (options?.epoch === undefined || receipt.epoch === options.epoch),
+    );
+  }
+
+  verdict(options: {
+    readonly seam: string;
+    readonly subject: string;
+    readonly epoch: string;
+    readonly required: SeamProofStage;
+    readonly notApplicable?: string | undefined;
+  }): SeamEvidenceVerdict {
+    return gradeSeamEvidence({ ...options, receipts: this.#receipts });
+  }
+
+  clearSubject(subject: string): void {
+    for (let index = this.#receipts.length - 1; index >= 0; index -= 1) {
+      if (this.#receipts[index]?.subject === subject) this.#receipts.splice(index, 1);
+    }
+  }
+
+  clear(): void {
+    this.#receipts.length = 0;
+  }
+}
+
+type NonUndefined<T> = Exclude<T, undefined>;
+type MemberKind<T> = NonUndefined<T> extends (...args: never[]) => unknown ? 'function' : 'value';
+
+/** A compiler-pinned description of every member of `T`. Adding, removing, or
+ * changing the optionality/kind of a contract member breaks its descriptor. */
+export type SeamShape<T> = {
+  readonly [K in keyof T]-?: {
+    readonly optional: undefined extends T[K] ? true : false;
+    readonly kind: MemberKind<T[K]>;
+    readonly required: SeamProofStage;
+  };
+};
+
+export function defineSeamShape<T>() {
+  return <const TShape extends SeamShape<T>>(shape: TShape): TShape => shape;
+}
+
+function memberShapeReceipt(options: {
+  readonly seam: string;
+  readonly value: unknown;
+  readonly optional: boolean;
+  readonly kind: 'function' | 'value';
+  readonly subject: string;
+  readonly epoch: string;
+}): SeamEvidenceReceipt {
+  if (options.value === undefined) {
+    return {
+      seam: options.seam,
+      subject: options.subject,
+      epoch: options.epoch,
+      stage: 'shape',
+      outcome: options.optional ? 'absent' : 'fail',
+      source: 'shape-check',
+      detail: options.optional
+        ? `${options.seam} is not exposed by this subject`
+        : `${options.seam} is required by the contract but is absent`,
+    };
+  }
+  const actual = typeof options.value;
+  const valid = options.kind === 'function' ? actual === 'function' : actual !== 'function';
+  return {
+    seam: options.seam,
+    subject: options.subject,
+    epoch: options.epoch,
+    stage: 'shape',
+    outcome: valid ? 'pass' : 'fail',
+    source: 'shape-check',
+    detail: valid
+      ? `${options.seam} has the contract's ${options.kind} shape`
+      : `${options.seam} is ${actual}; the contract requires a ${options.kind}`,
+  };
+}
+
+/** Shape is intentionally only shape. Successful members produce `shape`
+ * receipts; callers must add operation/effect/round-trip receipts from actual
+ * consumers or conformance probes before those seams can verify. */
+export function inspectSeamShape<T extends object>(options: {
+  readonly prefix: string;
+  readonly value: unknown;
+  readonly shape: SeamShape<T>;
+  readonly subject: string;
+  readonly epoch: string;
+}): readonly SeamEvidenceReceipt[] {
+  const receipts: SeamEvidenceReceipt[] = [];
+  const object =
+    options.value !== null &&
+    (typeof options.value === 'object' || typeof options.value === 'function')
+      ? (options.value as Record<string, unknown>)
+      : null;
+  const members = Object.entries(options.shape) as Array<
+    [string, { readonly optional: boolean; readonly kind: 'function' | 'value' }]
+  >;
+  for (const [member, spec] of members) {
+    const seam = `${options.prefix}.${member}`;
+    const value = object?.[member];
+    receipts.push(
+      memberShapeReceipt({
+        seam,
+        subject: options.subject,
+        epoch: options.epoch,
+        value,
+        optional: spec.optional,
+        kind: spec.kind,
+      }),
+    );
+  }
+  return receipts;
+}
+
+/**
+ * Grade a carrier and every member it actually advertises.
+ *
+ * Optional-and-absent is honest degradation. Optional-and-present is a real
+ * promise and is held to exactly the same proof bar as a required member. This
+ * is the shared rule that prevents each coverage family from inventing a
+ * different meaning for “provider present”.
+ */
+export function gradeSeamCarrier(options: {
+  readonly seam: string;
+  readonly required: SeamProofStage;
+  readonly shape?: SeamShape<object> | undefined;
+  readonly subject: string;
+  readonly epoch: string;
+  readonly receipts: readonly SeamEvidenceReceipt[];
+}): SeamEvidenceVerdict {
+  const base = gradeSeamEvidence(options);
+  if (base.state === 'absent' || base.state === 'failed' || !options.shape) return base;
+
+  for (const [member, spec] of Object.entries(options.shape)) {
+    const memberVerdict = gradeSeamEvidence({
+      seam: `${options.seam}.${member}`,
+      subject: options.subject,
+      epoch: options.epoch,
+      required: spec.required,
+      receipts: options.receipts,
+    });
+    if (spec.optional && memberVerdict.state === 'absent') continue;
+    if (memberVerdict.state === 'failed' || memberVerdict.state === 'absent') {
+      return {
+        ...base,
+        state: 'failed',
+        receipt: memberVerdict.receipt,
+        detail: `${options.seam} is malformed: ${memberVerdict.detail}`,
+      };
+    }
+    if (memberVerdict.state !== 'verified') {
+      return {
+        ...base,
+        state: 'unverified',
+        detail: `${options.seam} has the required shape, but ${memberVerdict.seam} is unverified: ${memberVerdict.detail}`,
+      };
+    }
+  }
+  return base;
+}

package/src/adapter/setup-three-root-adapter.ts

@@ -64,7 +64,7 @@ import {
   type DebugRegistry,
   getDebugRegistry,
 } from '../runtime/debug-registry';
-import { devLayersEnabled } from '../runtime/dev-layers';
+import { devBuildEnabled } from '../runtime/dev-build';
 import { disposeDebrisSubtree, type RootFrameHooks } from '../runtime/game';
 import type { EditorPreview, GameCleanup, GameContext, GameSetupFn } from '../runtime/types';
 import { type AudioContext as GameAudio, setupAudio } from '../setup/setup-audio';
@@ -119,9 +119,8 @@ export interface MountedSetupThreeRoot extends MountedThreeRoot {
    * `Game.runFrame` is the CANONICAL driver going forward: it calls
    * `frame.runPhase` once per (phase, substep) for every world, then
    * `frame.endFrame` once per substep after all roots finish all phases.
-   * `update` (below) remains the legacy/direct entry point to the exact same
-   * `SystemRunner` — direct callers (editor HMR, adapter conformance tests)
-   * keep using it unchanged.
+   * `update` is the direct entry point to the same `SystemRunner` for hosts
+   * that do not partition phases themselves.
    */
   readonly frame: RootFrameHooks;
 }
@@ -168,9 +167,8 @@ export class SetupThreeRootAdapter implements RootAdapter {
 
     setAssetPrefix(assetPrefix);
 
-    // --- Scene view (scene/camera/composer). Browser: the canonical builder, so
-    //     behavior is byte-identical to the old create-runtime. Headless: plain
-    //     scene/camera + a no-op composer (no GPU). ---
+    // --- Scene view (scene/camera/composer). Browser: canonical builder.
+    //     Headless: plain scene/camera + a no-op composer (no GPU). ---
     let scene: THREE.Scene;
     let camera: THREE.PerspectiveCamera;
     let composer: EffectComposer;
@@ -593,8 +591,8 @@ export class SetupThreeRootAdapter implements RootAdapter {
     // registry, with no capability to install and nothing for a game to write.
     //
     // THE GATE, in one place. Three conditions, and the reason for each:
-    //  1. `devLayersEnabled()` — the ONE owner of "is this a dev/editor
-    //     context" (`runtime/dev-layers.ts`). A ship build registers nothing,
+    //  1. `devBuildEnabled()` — the ONE owner of "is this a dev/editor
+    //     context" (`runtime/dev-build.ts`). A ship build registers nothing,
     //     subscribes to nothing, and never enables the profiler.
     //  2. a `Game` shell exists — the readings are folded out of that game's
     //     profiler frames, and a bare mount has no profiler to fold.
@@ -622,12 +620,12 @@ export class SetupThreeRootAdapter implements RootAdapter {
       // The packaged runtime bakes `import.meta.env.DEV = false` into its
       // prebuilt bundle, which is a fact about how the EDITOR was built, not
       // about whether this mount is a dev session — found live: a
-      // package-native project's vitals never seeded while its dev menu,
-      // capabilities, and every project-graph dev layer ran fine. The
-      // override argument is dev-layers' own documented seam for exactly
-      // this caller-knows-better case; a standalone/ship mount (no
-      // editorPreview) still resolves purely from the build env.
-      if (!host.game || headless || !devLayersEnabled(editorPreview ? true : undefined)) return;
+      // package-native project's vitals never seeded while its capabilities
+      // and every other project-graph module ran fine. The override argument
+      // is `devBuildEnabled`'s own documented seam for exactly this
+      // caller-knows-better case; a standalone/ship mount (no editorPreview)
+      // still resolves purely from the build env.
+      if (!host.game || headless || !devBuildEnabled(editorPreview ? true : undefined)) return;
       renderVitals?.dispose();
       host.game.profiler.enabled = true;
       renderVitals = registerRenderVitals({

package/src/adapter/system-adapter.ts

@@ -340,7 +340,9 @@ export interface NavCrowdAgentState {
  * editor's Navigation panel (re)build and persist a navmesh through the seam —
  * the first-party recast implementation (`createNavigationAdapter`) is the
  * blessed implementer — while an external game that owns its build simply
- * omits them. `crowdAgents` feeds the play-mode crowd debug draw.
+ * omits them. `clear` lets that same owner release its navmesh; the editor never
+ * disposes implementation handles itself. `crowdAgents` feeds the play-mode
+ * crowd debug draw.
  */
 export interface NavigationAdapter {
   hasNavMesh(): boolean;
@@ -352,6 +354,9 @@ export interface NavigationAdapter {
   /** Serialize the current navmesh to a binary blob (the editor persists it
    *  as the scene's `.navmesh` sidecar). Throws when nothing is built. */
   exportData?(): Uint8Array;
+  /** Release the current navmesh and any debug object it attached to `scene`.
+   * Optional because an external game's navigation may be inspect-only. */
+  clear?(scene: THREE.Scene): void;
   /** Live crowd-agent snapshots for debug draw. Empty when no crowd. */
   crowdAgents?(): NavCrowdAgentState[];
 }

package/src/adapter/system-seam-contract.ts

@@ -0,0 +1,121 @@
+/** Exhaustive proof requirements for mounted SystemAdapters. A bound slot is
+ * availability, not success: each nested operation has its own required proof
+ * stage and therefore cannot hide behind `active[slot] != null`. */
+
+import type { PhysicsAdapter2D } from '../pixi/system-adapters';
+import { defineSeamShape, type SeamShape } from './seam-evidence';
+import type {
+  AudioAdapter,
+  CameraAdapter,
+  DebugAdapter,
+  NavigationAdapter,
+  NetworkingAdapter,
+  PhysicsAdapter,
+  RenderDebugAdapter,
+  SystemAdapters,
+} from './system-adapter';
+
+export const SYSTEM_ADAPTERS_SHAPE = defineSeamShape<SystemAdapters>()({
+  physics: { optional: true, kind: 'value', required: 'effect' },
+  networking: { optional: true, kind: 'value', required: 'operation' },
+  navigation: { optional: true, kind: 'value', required: 'operation' },
+  audio: { optional: true, kind: 'value', required: 'effect' },
+  camera: { optional: true, kind: 'value', required: 'effect' },
+  debug: { optional: true, kind: 'value', required: 'operation' },
+  renderDebug: { optional: true, kind: 'value', required: 'effect' },
+});
+
+export const PHYSICS_ADAPTER_SHAPE = defineSeamShape<PhysicsAdapter>()({
+  keyedBy: { optional: true, kind: 'value', required: 'shape' },
+  ownerOf: { optional: false, kind: 'function', required: 'operation' },
+  freeze: { optional: false, kind: 'function', required: 'effect' },
+  commit: { optional: false, kind: 'function', required: 'effect' },
+  unfreeze: { optional: false, kind: 'function', required: 'effect' },
+  debugDraw: { optional: true, kind: 'function', required: 'operation' },
+  setDebugDrawEnabled: { optional: true, kind: 'function', required: 'effect' },
+  contactPoints: { optional: true, kind: 'function', required: 'operation' },
+  colliders: { optional: true, kind: 'function', required: 'operation' },
+  previewCollider: { optional: true, kind: 'function', required: 'effect' },
+  joints: { optional: true, kind: 'function', required: 'operation' },
+  previewJointAnchor: { optional: true, kind: 'function', required: 'effect' },
+});
+
+export const PHYSICS_2D_ADAPTER_SHAPE = defineSeamShape<PhysicsAdapter2D>()({
+  keyedBy: { optional: false, kind: 'value', required: 'shape' },
+  ownerOf: { optional: false, kind: 'function', required: 'operation' },
+  freeze: { optional: false, kind: 'function', required: 'effect' },
+  commit: { optional: false, kind: 'function', required: 'effect' },
+  unfreeze: { optional: false, kind: 'function', required: 'effect' },
+});
+
+export const NETWORKING_ADAPTER_SHAPE = defineSeamShape<NetworkingAdapter>()({
+  peers: { optional: false, kind: 'function', required: 'operation' },
+  networkId: { optional: false, kind: 'function', required: 'operation' },
+  authority: { optional: false, kind: 'function', required: 'operation' },
+  editable: { optional: false, kind: 'function', required: 'operation' },
+  getConnectionState: { optional: false, kind: 'function', required: 'operation' },
+  getRoomInfo: { optional: false, kind: 'function', required: 'operation' },
+  getReplicationStats: { optional: false, kind: 'function', required: 'operation' },
+  subscribe: { optional: false, kind: 'function', required: 'effect' },
+  getStateSnapshot: { optional: true, kind: 'function', required: 'operation' },
+  messageEvents: { optional: true, kind: 'function', required: 'operation' },
+  getRates: { optional: true, kind: 'function', required: 'operation' },
+  getConditioning: { optional: true, kind: 'function', required: 'operation' },
+  setConditioning: { optional: true, kind: 'function', required: 'effect' },
+  getServerConfig: { optional: true, kind: 'function', required: 'operation' },
+  getPlayerIdentity: { optional: true, kind: 'function', required: 'operation' },
+  setPlayerIdentity: { optional: true, kind: 'function', required: 'effect' },
+});
+
+export const NAVIGATION_ADAPTER_SHAPE = defineSeamShape<NavigationAdapter>()({
+  hasNavMesh: { optional: false, kind: 'function', required: 'operation' },
+  findPath: { optional: false, kind: 'function', required: 'effect' },
+  debugMesh: { optional: false, kind: 'function', required: 'operation' },
+  bake: { optional: true, kind: 'function', required: 'effect' },
+  exportData: { optional: true, kind: 'function', required: 'operation' },
+  clear: { optional: true, kind: 'function', required: 'effect' },
+  crowdAgents: { optional: true, kind: 'function', required: 'operation' },
+});
+
+export const AUDIO_ADAPTER_SHAPE = defineSeamShape<AudioAdapter>()({
+  resume: { optional: true, kind: 'function', required: 'effect' },
+  setMuted: { optional: false, kind: 'function', required: 'effect' },
+  isMuted: { optional: false, kind: 'function', required: 'operation' },
+  graphSnapshot: { optional: true, kind: 'function', required: 'operation' },
+  transportState: { optional: true, kind: 'function', required: 'operation' },
+  acquireMeters: { optional: true, kind: 'function', required: 'effect' },
+  acquireRecordingStream: { optional: true, kind: 'function', required: 'effect' },
+  audioEvents: { optional: true, kind: 'function', required: 'operation' },
+});
+
+export const CAMERA_ADAPTER_SHAPE = defineSeamShape<CameraAdapter>()({
+  snapshot: { optional: false, kind: 'function', required: 'operation' },
+  subscribe: { optional: false, kind: 'function', required: 'effect' },
+});
+
+export const DEBUG_ADAPTER_SHAPE = defineSeamShape<DebugAdapter>()({
+  providers: { optional: false, kind: 'function', required: 'operation' },
+  state: { optional: false, kind: 'function', required: 'operation' },
+  stateAll: { optional: false, kind: 'function', required: 'operation' },
+  commands: { optional: false, kind: 'function', required: 'operation' },
+  invoke: { optional: false, kind: 'function', required: 'effect' },
+  events: { optional: false, kind: 'function', required: 'operation' },
+});
+
+export const RENDER_DEBUG_ADAPTER_SHAPE = defineSeamShape<RenderDebugAdapter>()({
+  captureFrame: { optional: false, kind: 'function', required: 'effect' },
+  memorySnapshot: { optional: true, kind: 'function', required: 'operation' },
+});
+
+type NonPhysicsSystemSlot = Exclude<keyof SystemAdapters, 'physics'>;
+
+export const SYSTEM_PROVIDER_SHAPES: {
+  readonly [K in NonPhysicsSystemSlot]: SeamShape<NonNullable<SystemAdapters[K]>>;
+} = {
+  networking: NETWORKING_ADAPTER_SHAPE,
+  navigation: NAVIGATION_ADAPTER_SHAPE,
+  audio: AUDIO_ADAPTER_SHAPE,
+  camera: CAMERA_ADAPTER_SHAPE,
+  debug: DEBUG_ADAPTER_SHAPE,
+  renderDebug: RENDER_DEBUG_ADAPTER_SHAPE,
+};