ARCADIA-Studio/harness/release-palette-implementation-20260910.md

Compact palette implementation verification — 2026-09-10

Owner: Codex /root/palette_finish, assigned by root. Base branch codex/release1-continuation, starting HEAD 1797516. No commit or push is performed by this worker. Root owns native QA, guide changes, integration and the shared release ledgers.

Read repository AGENTS.md, Gitea issue #1/comments, Wiki Home, open PR inventory (empty), and harness/release-capella-basic-editing-20260907.md before editing. Ownership and results are recorded in issue #1.

Changes

• Qualify the Iced column! macro in the palette to remove E0659.
• Borrow the projected scene when F2 finds its selected node instead of moving its view out of Arc, removing E0507.
• Remove redundant or-pattern parentheses and the unused old Edit event.
• Reject non-finite placement coordinates before they can become inline-editor or recovery-draft geometry. Existing context/epoch guards continue rejecting cancelled or stale canvas gestures.
• Bound the inline name card to the remaining canvas height and make its content scrollable, so a wrapped performer title or validation error can remain inside the canvas. The card stays in the canvas stack and does not add a toolbar row.

Four new regression tests live in crates/oa-desktop/src/app/architecture_authoring/tests.rs:

1. OA and SA contextual creation preserves root ownership while adding the allocation and placement atomically; exact source bundle Undo/Redo and camera values are checked.
2. A real Iced canvas F2 event requires canvas keyboard focus, dispatches the selected node to inline rename, retains its exact engineering name, and preserves placements/camera and exact source bundle Undo/Redo.
3. Blank creation/rename submission and Escape never accept a placeholder or change the accepted source bundle.
4. NaN/infinite canvas coordinates cannot poison draft geometry or recovery validation; the next valid click still opens naming.

Verification

All Cargo commands use .local/toolchain/env.ps1, CARGO_BUILD_JOBS=1, --locked, and the worker's exclusive Cargo lease.

The first repaired build passed 15 existing architecture_ filtered tests, with 569 filtered out. Log: .local/palette-focused-initial-20260910.log. It exposed the unused Edit warning, subsequently removed. An initial new-test compile caught an incorrect SourceBundle assertion; it was corrected before the final tests.

The full current desktop suite passed 588 tests, 0 failures, 0 ignored: cargo test --locked -p oa-desktop --bin arcadia-studio -- --test-threads=1. Compilation/link took 44.58 s and test execution 113.14 s. This includes the four new regressions and existing placement/recovery/connection/transition coverage. Log: .local/palette-desktop-tests-20260910.log.

cargo build --locked -p oa-desktop --bin arcadia-studio passed in 2m 03s, including root's updated guide text. Log: .local/palette-gui-build-20260910.log. cargo fmt --all -- --check passed; its empty success log is .local/palette-fmt-20260910.log.

Built executable: C:\Users\User\Documents\Git\ARCADIA-Studio\.local\target-gnullvm\debug\arcadia-studio.exe (109,516,288 bytes), modified 2026-09-10T17:42:00.6365121Z. SHA-256: 1B47C096624BB1101BEC8B18E63CD601A259DFF8C1BEC24581C31C6B511F9411. Root received this path/hash for an isolated native-QA staging copy.

cargo clippy --locked -p oa-desktop --all-targets -- -D warnings passed in 47.56 s. Log: .local/palette-clippy-20260910.log.

All assigned gates are complete. The worker released its Cargo lease and source freeze to root; subsequent workers must obtain the next lease from root. Source and report changes remain uncommitted for root's integration. No native UI was operated by this worker.

Scope and remaining acceptance

Automated application/canvas tests establish state transitions and exact history; they do not establish native focus, visual compactness or pointer ergonomics. Root must inspect the newly built executable at wide/minimum sizes, especially bottom/right-edge naming, long names, wrapped errors, expanded palette labels, Enter/Escape, F2, existing insertion/Locate and contextual allocation.

Canvas origin must remain stable through arming, naming, validation, commit and cancel; only the explicit palette width toggle may resize the canvas. Continue the independent basic-editing oracle, Save/reopen/recovery and OA/SA transition destination checks. No Windows release acceptance or Linux runtime acceptance is inferred from this implementation report.

Follow-up: stale submission rejection

Independent local review and the separate Codex-956atf host's issue #1 comment #12 identified a remaining stale-submit defect after the first verification: Submit set placing=true, then a stale document/revision guard returned with only a status string. That hid the retained inline name card. Earlier passing gates above did not cover this rejected-submit path.

Codex-9e8r6t /root/palette_finish resumed the assigned architecture scope and sole Cargo lease. Guard rejection now restores placing=false and copies the explanation into the card's error, without rebinding its document/revision or changing its name, point or intent.

A new regression covers Create/Rename × stale document/revision (four cases), repeated Submit without rebinding, actual inline-view presence, exact serialized saved draft, accepted Project/source/revision/camera preservation, Escape, and successful fresh creation with exact Undo after cancellation. The focused architecture_ gate passed 20 tests, 569 filtered out, in 2.22 s after 48.63 s compilation. Log: .local/palette-stale-submit-tests-20260910.log.

Root's native 1B47C096… check then found that the first Escape was consumed by the focused Iced name field and only unfocused it. The original global keyboard subscription intentionally ignores captured Escape; that policy remains intact. A separate subscription is now present only while architecture naming is inline, and dispatches a narrowly rechecked CapturedEscape event. The Cancel handler also restores Cancelled · Select / move status; ordinary architecture Escape delegates to that handler. The only app.rs edits are this subscription entry and the pre-existing architecture Escape guard delegation.

Two additional regressions exercise actual Iced TextInput update/capture followed by the subscription mapper and App update: first-keypress Create/Rename cancel preserves exact accepted model/source/revision/camera, while absent architecture, armed placement and the existing-element picker do not react to captured Escape. Ignored Escape and captured Enter are not mapped by the new subscription.

The final architecture_ gate passed 22 tests, 569 filtered out, in 4.12 s after 2m 19s compilation. Log: .local/palette-escape-tests-20260910.log. The same locked desktop build command passed in 1m 12s; log: .local/palette-candidate2-build-20260910.log. Workspace formatting check passed; log: .local/palette-candidate2-fmt-20260910.log.

Second candidate at the same local build path: 109,518,848 bytes, modified 2026-09-10T17:59:06.6655664Z. SHA-256: E6D6B1D975A11F242D288039E8F07D20E5474EA9C7CFCDE93F1318046EA548D4. Root received this identity for a new staging copy. Strict desktop Clippy (--locked -p oa-desktop --all-targets -- -D warnings) passed in 1m 07s; log: .local/palette-candidate2-clippy-20260910.log. Cargo lease is released to root again. No worker-owned Cargo process remains.

Root's existing native stage remains the earlier 1B47C096… binary and is not overwritten. The full integrated suite is deferred until the other-host behavior and forms changes are integrated; the earlier 588-test scope is preserved above.

Recovery autofocus follow-up on integrated source

Root's native candidate 2 confirmed that recovered inline naming was visible but needed a click to focus. In app/checkpoints.rs, recovery now batches the unchanged lint task with focus of architecture-name only when the restored architecture state is inline. Armed tools, existing-element pickers and other recovery contexts retain their existing focus behavior.

Two tests consume the actual returned Task stream, operate on mounted Iced name and unrelated TextInputs, require lint completion and compare exact accepted source/model, raw draft, revision and history. Seven recovery contexts include Create/Rename and the non-inline/property/source controls. The integrated source at 057eddd plus this checkpoint-only patch compiled in 4m 42s; all 13 checkpoint tests passed in 4.84s, with 605 filtered. Scoped rustfmt and diff check passed. Log: .local/checkpoint-autofocus-tests-20260910.log.

Test artifact SHA256: D504C59BC2A5853F4FBE54A9DFA841DA0AC8DD2475342E45A91DBAA6533372B4. Root copied this immutable artifact into .local/integration-20260910/tests-057eddd/ and is executing its full 618-test inventory separately while later scenario edits proceed. That result is pending; it does not include the later F1 nullable-constructor correction or workspace layout. No new GUI executable or native autofocus pass is claimed.