Record Windows and Linux direct state editing acceptance

harness/TASK_LEDGER.md

@@ -1,66 +1,65 @@
 # Task Ledger — first release
 
-Authoritative objective: attachment `07aee762-7d27-4cbe-81c3-2e82c7170711/goal-objective.md`, read fully on 2026-09-05. STATE.md records execution evidence; PLAN.md is the living strategy; DECISIONS.md and linked release contracts retain detailed rationale.
+Authoritative objective: attachment07aee762-7d27-4cbe-81c3-2e82c7170711/
+goal-objective.md, read fully2026-09-06. STATE.md records execution; PLAN.md retains
+scope; DECISIONS.md and linked contracts preserve rationale.
 
 ## Goal and success criteria
 
-System engineers can develop a coherent OA→SA system model, including iterative changes and evidence, through equivalent graphical, textual and REST workflows. Rust/Iced Windows and Linux release, strict reST semantics, navigable offline concepts/tutorials, and reproducible build/run/evaluation instructions. Later Arcadia layers are future releases. Completion requires actual native workflows, automated invariants, and fresh cross-disciplinary acceptance, not compilation or a feature count.
+System engineers develop and iteratively reconcile OA/SA models through equivalent
+graphical, textual and REST workflows. Rust/Iced Windows/Linux, strict reST,
+traceability, navigable offline guidance and reproducible deployment. Acceptance
+requires native workflows, semantic evaluators and fresh independent review.
 
 ## Given facts
 
-- User prioritizes engineering usability and Capella domain fidelity, hierarchical containment/allocation displays, real function/component ports and intuitive transitions in both directions.
-- Text-only model development must be practical; modular files/includes are the proposed answer to the current huge flat file.
-- Drag selection must remain stable; behavior/scenario canvases must support direct editing consistent with architecture.
-- Git and worktrees are authorized. Remote publication is not requested.
-- Connection routes need explicit bend points/customization or sufficiently effective automatic routing. User observed straight connections prevent readable diagrams. Treat saved per-diagram routes and practical obstacle avoidance as a primary requirement, not visual decoration.
+- User prioritizes Capella domain fidelity, hierarchy, typed ports and intuitive
+  transitions in both directions, without its clutter and navigation friction.
+- Direct exchange drawing must avoid large endpoint dropdowns; ports must move
+  between sides; contextual menus should replace persistent action clutter.
+- Modular source must be practical for humans/AI and Git. Text/graph/API parity is
+  required. Behavior canvases must support editing and preserve drag selection.
+- Git/worktrees are authorized. Remote publication is not requested.
 
 ## Verified facts
 
-- Native modular source editing/reopen/repair/recovery passed on Windows at 1100×700. Production nested ownership, structural writeback and coupled REST source bundles now pass an initial 416-test workspace run. Actual service import/comment-only revision/cross-file move/stale ETag passed. Comment fidelity needs independent checks: review exposed owner-opening-line comment reassignment; root reproduced it and all 12 updater tests pass after the fix. Equal-model delete/recreate provenance was also reproduced and fixed in desktop and REST. Native nested workflow and final integrated review/checks remain.
+- Original Capella SAB creates FE function input/output endpoints; component ports
+  are separately Standard/Flow with explicit allocation. Native observations are in
+  release-capella-workflow-benchmark.md; adopted contracts preserve that distinction.
+- Explorer/port discovery, editable routing, nested modular source and coupled REST
+  bundles have scoped Windows/Linux acceptance. Evidence links are in STATE.md.
+- Direct palette connections, four-side port anchors, context menus and source
+  folders passed real Windows/Linux operation. Passive stacked Canvas fixes native
+  tooltip overprint; separate Frames did not. See release-port-drawing.md.
+- Persisted state editing now passes Windows/Linux native and independent review:
+  creation, movement, direct transitions, typed forms, reconnection, fold/reopen.
+  See release-state-editing.md. Scenario/process canvases still need direct editing.
+- Ordinary Document commands atomically synchronize source/model; failed writes
+  retain drafts. Source comments require occurrence/provenance-aware edits, not
+  whole-model equality or flat reformatting. Independent counterexamples were fixed.
+- R3 existing-target reconciliation remains name/description only. R6 data shape
+  expansion is active implementation, not accepted functionality.
 
-- Explorer/port usability accepted at `d364d3c`: actual Windows Actor → Standard port → Boundary Exchange, save/reopen and Undo/Redo; contextual duplicate-name search, 251-root paging, 12-level ancestry and 1100×700 inspection. Linux port save/reopen and font-dependent outline wrapping correction were verified. Exact evidence: release-explorer-usability.md. This resolves the latest discovery/navigation complaint without claiming broader release completeness.
+## Assumptions and open questions
 
-- Native Capella SAB authoring creates function input/output endpoints with an FE. Component ports separately carry Standard/Flow kind, orientation, interface roles and explicit allocated function ports. Details and successfully performed versus merely observed operations are in release-capella-workflow-benchmark.md.
-- Studio uses one typed Project and validated atomic commands across Rust core/desktop/server. Hierarchy projection distinguishes actual allocation from inferred parent summaries; IDs and placement are separate.
-- Drag selection bug fixed and committed `2ef16dc`; 71 desktop tests and real moved-card selection/property editing passed before typed-port integration.
-- Typed ports/schema 3 migration merged at `757ab88`. Existing port identities survive as Legacy and missing FE endpoints are generated deterministically; migration and port tests provide scoped evidence in release-port-core.md/release-port-migration.md.
-- Independent core review reproduced alias reservation and same-transaction allocation replacement defects; fixes have focused regression evidence. Typed desktop integration `fa096ce` passed full checks and native creation/generation, undo/redo, save/reopen and no-op synchronization trials. Long-reference previews were inspected at 1440×900 and 1100×700; detailed evidence is in STATE.md.
-- Per-diagram pins and labels, source/API parity and shared orthogonal routing are implemented in `4e5a88d`, `a7c6f96`, `68b1eff` and `30c7db1`. `65fa9ab` resolves all six reproduced default SA label-overlap pairs. Native OA/SA editing, movement/undo, fold restoration, save/reopen, SVG inspection and short gestures at 1100×700 passed. Routing code/native acceptance and independent native follow-up are complete at `23535b4`; exact scope is recorded in release-routing-verification.md.
-- The source experiment passed 23 tests, but an independent probe reproduced positional item-comment misattachment, shorthand description rejection and unsupported deletion. Whole-model equality does not establish source-comment fidelity. The production updater retained comment attachment on the same reorder probe; extend its parser/updater instead of copying the experimental parallel implementation.
-- Current behavior diagrams derive geometry and only handle selection; direct behavior editing remains a product gap. The source editor retains modular accepted source; nested element syntax and cross-file graphical updates passed Windows/Linux native acceptance at4e8575b. Port/exchange/steps shorthand remains an independent future implementation slice required by the current authoring strategy.
-- Independent source review exposed declaration/comment reassignment during UUID changes and swaps, Linux FIFO hangs during disk admission, file-mode changes on save, and overlong detached-file receipt lifetimes. Command provenance, pre-open regular-file admission, permission retention and saved-detach receipt retirement resolve the reproduced cases. Exact probes and test scopes are in STATE.md.
+- Nested aggregate files reduce cognitive load; any additional port/exchange/step
+  shorthand must justify grammar complexity through real authoring tasks.
+- State placements proved viable without a second geometry system. Scenario/chain
+  gestures still need their own occurrence/order semantics and task verification.
+- Routing offers a usable initial path plus manual pins; arbitrary dense diagrams
+  are not guaranteed crossing-free. Measured dense full solve119ms remains a limit.
+- R3 typed historical bodies plus finite proposals appear simpler than a separate
+  recursive semantic-value schema. This candidate awaits R6 freeze and review.
 
-## Assumptions to test
+## Decisions and current strategy
 
-- Aggregate-oriented source files will reduce cognitive load enough for routine engineering edits; file splitting alone may leave declaration syntax too flat.
-- Behavior layout can reuse NodePlacement plus typed diagram context without duplicating semantic state; reconnection/reordering must preserve existing occurrence/relation identities.
-- Editable per-diagram bends and the automatic initial route passed the recorded workshop trials. This does not guarantee an ideal arrangement or zero crossings for arbitrary models; the measured dense release full solve is 119 ms, above the initial 100 ms target.
-- Source comments and ownership can survive graphical edits by replacing only changed declaration spans. Generated IDs must stabilize before subsequent text edits.
+Preserve one typed core and validated command boundary. Retain current typed ports;
+R6 uses schema/source4 with explicit1/2/3 migration and no intermediate public4
+shape. Freeze payload, defaults, inheritance, associations and identified interface
+allocations together. Preserve lexical includes/comments during migration.
 
-## Open questions
-
-- Which port/exchange/steps shorthand constructs add enough clarity to justify extending the accepted nested ownership syntax? Preserve comment attachment, exact source Undo and complete edit/delete support against the independent probe cases.
-- What remaining OA/SA gaps materially block target workflows? R3 semantic reconciliation, R6 data contracts, directly editable behavior, lifecycle/recovery and hosted editing remain in the release plan.
-
-## Candidate designs and current decisions
-
-- Source candidates compared explicit source3 aggregate files/includes with nested owner/context syntax lowering to the same model. The chosen implementation direction extends the production parser/span index and shared updater for selected constructs, preserving the pure bundle foundation. Do not copy the experiment's separate parser/writer. Freeze grammar only after comment ownership, edit/delete coverage, invalid drafts and exact source Undo pass their acceptance tasks.
-- Behavior alternatives: independent UI-only coordinates, new behavior-layout schema, or existing diagram placements with explicit context. Prefer the last candidate provisionally: it preserves text/API parity and command history without a second geometry system. Validate on direct state-machine creation/move/reconnect before extending all behavior views.
-- Ports: adopted typed separation based on official metamodel plus direct native evidence; rejected generic InOut/interface port conflation and inferred allocation facts. See release-port-contract.md. Revisit only with contradictory domain evidence or concrete usability failures.
-- Routing: a unique per-diagram route list references existing relation/trace IDs; pinned points and relative label placement are persisted, while orthogonal segments are derived by a shared pure router. This avoids duplicate semantic edge identities and preserves text/API/SVG parity. Folded endpoint promotion suspends custom geometry without deleting it. See release-routing-contract.md.
-
-## Current strategy and evaluators
-
-Accept native per-file editing, safe project saves and exact source Undo, then extend production source parsing/updating using the independent probe findings as regressions and integrate REST bundles. Linux routing is accepted with actual WSLg Save/reopen; all11 current Linux disk integration tests also pass. Full release Linux acceptance remains open. Prototype persisted direct behavior gestures next. Continue R3 reconciliation, R6 data contracts, lifecycle/recovery, hosted editing, offline guidance and fresh Windows/Linux release acceptance; no subsystem checkpoint constitutes release completion.
-
-Meaningful progress now includes verified drag and typed-port authoring, accepted editable routing with native save/reopen, group movement and minimum-size evidence, and tested source-bundle/nested-writeback foundations with independent limitations exposed. Production source and direct behavior usability remain open engineering tasks; feature counts alone do not establish completion.
-
-Current user-directed drawing evidence: palette creation and draggable per-placement port anchors passed scoped native Windows trials with Save/reopen; full485 Windows and488 Linux workspace suites passed before final pointer-release and hover refinements. Fresh independent review exposed post-release motion turning clicks into edits, nearest-port mispicking at overview zoom, and missing target identity feedback. The first two have production regressions and fixes; named owner/alias hover details and source-preserving pan are implemented, with final native acceptance pending. See release-port-drawing.md. The preceding goal turn made concrete progress through implementation, saved source/SVG artifacts, actual runtime verification and reproduced findings; it was not a wait or no-progress turn. Direct behavior and the broader release requirements remain active.
-2026-09-06 follow-up: direct drawing, movable ports, menus and source folders now
-have scoped native Windows/Linux acceptance. Independent QA falsified the initial
-separate-Frame tooltip fix; a real stacked GPU layer passed native retest. Current
-main Windows193 desktop tests and Linux189+4 focused tests passed. Independent
-state/representation/lifecycle integration passed514 Windows workspace tests and
-strict Clippy in its isolated checkout. Direct state-canvas authoring is underway;
-all broader release requirements remain active. This turn made concrete implementation,
-review and runtime progress, not a blocked or waiting-only turn. See STATE.md.
+Finish and independently verify R6, then semantic R3 reconciliation and direct
+scenario/process gestures. Complete lifecycle/recovery, hosted editing, guidance
+and fresh cross-disciplinary Windows/Linux acceptance. No subsystem checkpoint
+completes the first release. Current work is making measured implementation,
+review and runtime progress; no external blocker exists.