ARCADIA-Studio/harness/STATE.md

# First release — current engineering state

## Objective and current phase

The first-release goal remains active and incomplete. Deliver Rust/Iced Operational
Analysis and System Analysis/System Architecture for system engineers, equivalent
graphical/textual/REST semantics, hierarchical diagrams and typed ports, modular
source projects, artifact traceability, editable behavior, useful offline help,
and Windows/Linux release evidence. Later Arcadia layers remain future releases.
Authoritative objective: attachment
`07aee762-7d27-4cbe-81c3-2e82c7170711/goal-objective.md`, reread 2026-09-06.
PLAN.md, TASK_LEDGER.md and release-semantics-audit.md retain full release scope.

The latest user-directed drawing/port/menu/source-tree milestone is accepted at
`fef2e0d` plus the pending tooltip-layer follow-up. It does not complete the release.
Root now integrates direct state-machine editing in an isolated worktree. There
is meaningful implementation, independent review and real runtime progress; no
external blocker or disk blocker exists.

## Accepted foundations and evidence

- Typed OA/SA model, schema 3 ports, validated atomic commands and ordinary history
  are shared across three Rust crates. Typed contracts and migration are documented
  in release-port-contract.md, release-port-core.md and release-port-migration.md.
  Desktop typed authoring checkpoint `fa096ce` passed native creation, generation,
  undo/redo and persistence. Original Capella was operated in a disposable workspace;
  exact observed semantics/workflows: release-capella-workflow-benchmark.md.
- Explorer/port discovery `d364d3c`: visible Add port, grouped roots, focused children,
  breadcrumbs, contextual search/paging and full-depth outline. Windows port/Standard
  exchange, 251-root paging, 12-level navigation and 1100x700 trials passed; rebuilt
  Linux save/reopen/font correction passed. See release-explorer-usability.md.
- Editable routes `23535b4`, viewport fix `366ce44`, automatic labels `65fa9ab`:
  authored bends/labels, nested group movement, folding/restoration, undo/redo,
  save/reopen, SVG and minimum-size gestures passed native and independent review.
  See release-routing-verification.md and release-routing-linux.md. Dense optimized
  full solve measured119ms; arbitrary dense crossings remain possible.
- Nested source and coupled hosted source/model checkpoint `4e8575b`: source3
  element nesting/includes, token/provenance-aware structural writes, exact model
  source history, retained drafts and safe Save All/recovery. Full422 Windows and
 425 Linux tests, strict checks and builds passed at that checkpoint. Actual REST
  import/comment-only revision/cross-file reparent/stale ETag/restart passed.
  Windows/Linux source and nested graphical edits, save/reopen and recovery were
  exercised. See release-source-integration.md. Experiments remain evidence only;
  do not adopt their independent parser/writer.

## Drawing acceptance — current main checkout

`93fd32c` fixes candidate scaling without weakening validation; `35133de` supplies
persisted four-side normalized port anchors. `fef2e0d` adds direct palette drawing,
shared automatic labels, contextual menus and the source folder tree. OA Interaction,
SA Functional Exchange and Boundary Exchange accept click-click or drag. Function
cards create/reuse typed ports atomically. Compatible targets highlight; Standard
and Flow contracts remain distinct. Pan retains source; Escape cancels.

Independent review reproduced batched-pointer click corruption and overview port
mispicking. Ordered CursorMoved coordinates, explicit context epochs and nearest
port glyph picking fix these, with production regressions. Native review then
reproduced port-tooltip overprint: separate Frames still share an Iced GPU layer.
The fix uses a passive second stacked Canvas (a real renderer layer). It preserves
interactive child state/input and resets held-button suppression on context change,
matching releases, Escape and focus loss. CursorLeft alone does not end suppression.

Evidence is in release-port-drawing.md and release-context-menus.md. Exact native
review report: `D:/CodexBuilds/Capella2-release1-01a06e2e/drawing-independent-native-review.md`.
Windows independent trials passed Standard rejection/completion, automatic function
ports, undo/redo, save/reopen and1100x700. Overprint was reproduced on9A7FF074 and
closed on3F534C67 at1440x900 and1100x700. Root tested final1EEBDC3C: first port drag,
menu outside dismissal, first repeated drag, direct FE, readable identity and Save.
Saved trial: `ui-port-tooltip-final/project.arcadia`,41objects/26links/0checks.

Root operated actual Linux7AC5EEE: first FE drag, Right-to-Bottom port drag, Reset/
Undo, repeated Bottom-to-Left drag, source-offscreen arrow pan and completion,
Save All/reopen, persisted geometry and source-tree expansion/open. Saved trial:
`ui-port-tooltip-linux/project.arcadia`,41objects/27links/0checks. Runtime log empty;
Linux window closed normally, exec13766 exit0. Linux was inspected at1440x900;
minimum-size acceptance is Windows, not a claim of Linux minimum-size testing.

Verification scopes: full485 Windows /488 Linux workspace tests preceded the last
pointer/tooltip refinements. Latest main Windows193 desktop tests, strict desktop
all-target Clippy and debug build passed. Latest Linux189 desktop tests, strict
desktop Clippy and release build passed; four new tooltip lifecycle tests then
passed separately. A142-test Linux result from a shared-worktree Cargo cache was
identified and EXCLUDED; scoped package cleaning and explicit main recompilation
established the valid189-test result. Use a distinct CARGO_TARGET_DIR per worktree.

## Active isolated state integration

Worktree: `D:/CodexBuilds/Capella2-state-integration`, branch`codex/state-integration`.
Target: `D:/CodexBuilds/Capella2-state-integration-target`. Main core is not yet changed.

- `e7a8163` integrates reviewed core state-context commit a63654f, preserving latest
  anchors and routing labels. State views skip semantic port layout after boundary
  snapping; both routing and label passes reserve actual internal-row headers.
- `2459581` retains behavior drafts until Document commit succeeds.
- `53cd096` adds typed state-context forms, placement membership choices and normative
  source/JSON/REST/OpenAPI contracts. Strict HTML generation passed. Two actual HTTP
  tests passed, including malformed/invalid rejection, revision/source atomicity and
  restart. Destination pickers permit intermediate invalid drafts so coordinated
  element/diagram retargeting is reachable; Apply remains strict.
- `e5660b8` integrates App dirty/Close/Save/navigation/mutation guards. Exact prepared
  commands acknowledge drafts only after accepted source/model writes. Review found
  passive viewport events applying properties, queued source controls creating
  competing drafts and stale delete confirmations; all three fixes have App tests.
  Six App lifecycle tests passed, including typed source-writeback rejection/retry
  and one Undo. Clean detached buffers after Undo are intentional; reachable bundle
  and accepted Document are restored exactly.
- Integrated baseline:514 Windows workspace tests (277core,199desktop,38server),
  strict workspace all-target Clippy passed. This baseline precedes direct gestures;
  there is no native state-gesture acceptance yet.

Ownership: root owns App/behavior toolbar/context integration. drawing_correctness
owns only new behavior/state_edit.rs planners; drawing_linux owns only new
behavior/state_canvas.rs rendering/input. They coordinate explicit Context/Event
APIs and use ordinary commands/shared geometry. drawing_requirements completed
representation work and is idle for independent review. Root exclusively owns
native input. Do not edit another worker's files or share Cargo targets.

## Exact next actions

1. Commit the verified main tooltip follow-up and evidence, retaining source/GUI/API
   parity. Latest Windows trial is saved; no final-release claim.
2. Integrate state-edit planners and actual persisted canvas with explicit retained
   behavior view, creation in a region, movement, transition drawing/reconnection,
   guarded forms, discoverable missing placements, pan/zoom and contextual actions.
   Build/run/test native at default/minimum sizes; review/reproduce/fix findings.
3. Continue direct scenario/process gestures, R3 semantic drift/reconciliation,
   R6 data contracts, persistent coverage/filters, Home/recent/recovery, hosted ETag
   workflows, offline guidance and normative contracts. All remain release work.
4. Fresh final requirements/domain/correctness/native UX/architecture reviews;
   Windows/Linux/MSRV checks, actual runtime, docs and packages/checksums before
   completing the broad goal. V2 or a subsystem checkpoint is insufficient.

## Native safety and environment

Root owns native input. Final Windows1EEBDC3C window2100032/exec55548 is saved on
its isolated41/26 trial. Earlier windows524634 and328292 are saved on the Standard
and auto-port review fixtures. Re-inventory and inspect current dirty state before
operating any window. Protected user7210312 and earlier6228978 were absent; root did
not close them and makes no recovery claim. If either returns, do not save/reset/close.

Main Windows target `D:/CodexBuilds/Capella2-01a06e2e`; Rust1.98.1. Use `cargo test
--locked --workspace`, `cargo clippy --locked --workspace --all-targets -- -D warnings`
and `cargo build --locked -p oa-desktop -p oa-server`. WSL Ubuntu24.04 uses the
existing target/linux-cargo.toml vendor config and its own linux-target; launch
with WGPU_BACKEND=vulkan and the Mesa lvp ICD. Release evidence lives under
`D:/CodexBuilds/Capella2-release1-01a06e2e`. No remote push or usage reset is authorized.
Do not retry the previously rejected broad recursive target deletion.