# First release — current engineering state ## Objective and current phase The first-release goal remains active and incomplete. Deliver Rust/Iced Operational Analysis and System Analysis/System Architecture for system engineers, equivalent graphical/textual/REST semantics, hierarchical diagrams and typed ports, modular source projects, artifact traceability, editable behavior, useful offline help, and Windows/Linux release evidence. Later Arcadia layers remain future releases. Authoritative objective: attachment `07aee762-7d27-4cbe-81c3-2e82c7170711/goal-objective.md`, reread 2026-09-06. PLAN.md, TASK_LEDGER.md and release-semantics-audit.md retain full release scope. The latest user-directed drawing/port/menu/source-tree milestone is accepted at `fef2e0d` plus the pending tooltip-layer follow-up. It does not complete the release. Root now integrates direct state-machine editing in an isolated worktree. There is meaningful implementation, independent review and real runtime progress; no external blocker or disk blocker exists. ## Accepted foundations and evidence - Typed OA/SA model, schema 3 ports, validated atomic commands and ordinary history are shared across three Rust crates. Typed contracts and migration are documented in release-port-contract.md, release-port-core.md and release-port-migration.md. Desktop typed authoring checkpoint `fa096ce` passed native creation, generation, undo/redo and persistence. Original Capella was operated in a disposable workspace; exact observed semantics/workflows: release-capella-workflow-benchmark.md. - Explorer/port discovery `d364d3c`: visible Add port, grouped roots, focused children, breadcrumbs, contextual search/paging and full-depth outline. Windows port/Standard exchange, 251-root paging, 12-level navigation and 1100x700 trials passed; rebuilt Linux save/reopen/font correction passed. See release-explorer-usability.md. - Editable routes `23535b4`, viewport fix `366ce44`, automatic labels `65fa9ab`: authored bends/labels, nested group movement, folding/restoration, undo/redo, save/reopen, SVG and minimum-size gestures passed native and independent review. See release-routing-verification.md and release-routing-linux.md. Dense optimized full solve measured119ms; arbitrary dense crossings remain possible. - Nested source and coupled hosted source/model checkpoint `4e8575b`: source3 element nesting/includes, token/provenance-aware structural writes, exact model source history, retained drafts and safe Save All/recovery. Full422 Windows and 425 Linux tests, strict checks and builds passed at that checkpoint. Actual REST import/comment-only revision/cross-file reparent/stale ETag/restart passed. Windows/Linux source and nested graphical edits, save/reopen and recovery were exercised. See release-source-integration.md. Experiments remain evidence only; do not adopt their independent parser/writer. ## Drawing acceptance — current main checkout `93fd32c` fixes candidate scaling without weakening validation; `35133de` supplies persisted four-side normalized port anchors. `fef2e0d` adds direct palette drawing, shared automatic labels, contextual menus and the source folder tree. OA Interaction, SA Functional Exchange and Boundary Exchange accept click-click or drag. Function cards create/reuse typed ports atomically. Compatible targets highlight; Standard and Flow contracts remain distinct. Pan retains source; Escape cancels. Independent review reproduced batched-pointer click corruption and overview port mispicking. Ordered CursorMoved coordinates, explicit context epochs and nearest port glyph picking fix these, with production regressions. Native review then reproduced port-tooltip overprint: separate Frames still share an Iced GPU layer. The fix uses a passive second stacked Canvas (a real renderer layer). It preserves interactive child state/input and resets held-button suppression on context change, matching releases, Escape and focus loss. CursorLeft alone does not end suppression. Evidence is in release-port-drawing.md and release-context-menus.md. Exact native review report: `D:/CodexBuilds/Capella2-release1-01a06e2e/drawing-independent-native-review.md`. Windows independent trials passed Standard rejection/completion, automatic function ports, undo/redo, save/reopen and1100x700. Overprint was reproduced on9A7FF074 and closed on3F534C67 at1440x900 and1100x700. Root tested final1EEBDC3C: first port drag, menu outside dismissal, first repeated drag, direct FE, readable identity and Save. Saved trial: `ui-port-tooltip-final/project.arcadia`,41objects/26links/0checks. Root operated actual Linux7AC5EEE: first FE drag, Right-to-Bottom port drag, Reset/ Undo, repeated Bottom-to-Left drag, source-offscreen arrow pan and completion, Save All/reopen, persisted geometry and source-tree expansion/open. Saved trial: `ui-port-tooltip-linux/project.arcadia`,41objects/27links/0checks. Runtime log empty; Linux window closed normally, exec13766 exit0. Linux was inspected at1440x900; minimum-size acceptance is Windows, not a claim of Linux minimum-size testing. Verification scopes: full485 Windows /488 Linux workspace tests preceded the last pointer/tooltip refinements. Latest main Windows193 desktop tests, strict desktop all-target Clippy and debug build passed. Latest Linux189 desktop tests, strict desktop Clippy and release build passed; four new tooltip lifecycle tests then passed separately. A142-test Linux result from a shared-worktree Cargo cache was identified and EXCLUDED; scoped package cleaning and explicit main recompilation established the valid189-test result. Use a distinct CARGO_TARGET_DIR per worktree. ## Active isolated state integration Worktree: `D:/CodexBuilds/Capella2-state-integration`, branch`codex/state-integration`. Target: `D:/CodexBuilds/Capella2-state-integration-target`. Main core is not yet changed. - `e7a8163` integrates reviewed core state-context commit a63654f, preserving latest anchors and routing labels. State views skip semantic port layout after boundary snapping; both routing and label passes reserve actual internal-row headers. - `2459581` retains behavior drafts until Document commit succeeds. - `53cd096` adds typed state-context forms, placement membership choices and normative source/JSON/REST/OpenAPI contracts. Strict HTML generation passed. Two actual HTTP tests passed, including malformed/invalid rejection, revision/source atomicity and restart. Destination pickers permit intermediate invalid drafts so coordinated element/diagram retargeting is reachable; Apply remains strict. - `e5660b8` integrates App dirty/Close/Save/navigation/mutation guards. Exact prepared commands acknowledge drafts only after accepted source/model writes. Review found passive viewport events applying properties, queued source controls creating competing drafts and stale delete confirmations; all three fixes have App tests. Six App lifecycle tests passed, including typed source-writeback rejection/retry and one Undo. Clean detached buffers after Undo are intentional; reachable bundle and accepted Document are restored exactly. - Integrated baseline:514 Windows workspace tests (277core,199desktop,38server), strict workspace all-target Clippy passed. This baseline precedes direct gestures; there is no native state-gesture acceptance yet. Ownership: root owns App/behavior toolbar/context integration. drawing_correctness owns only new behavior/state_edit.rs planners; drawing_linux owns only new behavior/state_canvas.rs rendering/input. They coordinate explicit Context/Event APIs and use ordinary commands/shared geometry. drawing_requirements completed representation work and is idle for independent review. Root exclusively owns native input. Do not edit another worker's files or share Cargo targets. ## Exact next actions 1. Commit the verified main tooltip follow-up and evidence, retaining source/GUI/API parity. Latest Windows trial is saved; no final-release claim. 2. Integrate state-edit planners and actual persisted canvas with explicit retained behavior view, creation in a region, movement, transition drawing/reconnection, guarded forms, discoverable missing placements, pan/zoom and contextual actions. Build/run/test native at default/minimum sizes; review/reproduce/fix findings. 3. Continue direct scenario/process gestures, R3 semantic drift/reconciliation, R6 data contracts, persistent coverage/filters, Home/recent/recovery, hosted ETag workflows, offline guidance and normative contracts. All remain release work. 4. Fresh final requirements/domain/correctness/native UX/architecture reviews; Windows/Linux/MSRV checks, actual runtime, docs and packages/checksums before completing the broad goal. V2 or a subsystem checkpoint is insufficient. ## Native safety and environment Root owns native input. Final Windows1EEBDC3C window2100032/exec55548 is saved on its isolated41/26 trial. Earlier windows524634 and328292 are saved on the Standard and auto-port review fixtures. Re-inventory and inspect current dirty state before operating any window. Protected user7210312 and earlier6228978 were absent; root did not close them and makes no recovery claim. If either returns, do not save/reset/close. Main Windows target `D:/CodexBuilds/Capella2-01a06e2e`; Rust1.98.1. Use `cargo test --locked --workspace`, `cargo clippy --locked --workspace --all-targets -- -D warnings` and `cargo build --locked -p oa-desktop -p oa-server`. WSL Ubuntu24.04 uses the existing target/linux-cargo.toml vendor config and its own linux-target; launch with WGPU_BACKEND=vulkan and the Mesa lvp ICD. Release evidence lives under `D:/CodexBuilds/Capella2-release1-01a06e2e`. No remote push or usage reset is authorized. Do not retry the previously rejected broad recursive target deletion.