workinf_Blender_Wasm/docs/status/WBV2-NEXT-MIGRATION-WAVES.md

WBV2 next migration waves

Date: 2026-09-01

The current function-module epoch ends at WBV2-P1130-001. It contains 37 completed source-backed modules plus the bridge/root and successor-authorization tasks. It is a verified migration slice, not full Blender parity: the immutable inventory remains 6900 total and effective 290/6609.

Completed and reusable

• Core scene, mesh, material, non-mesh, nodes, asset, sculpt, editor, object, compositor, audio/particle and rig modules: reuse their receipts by SHA-256.
• GLB mesh/non-mesh roundtrip dependency repair: WBV2-P1123-000.
• Historical M12 drift audit: WBV2-P1124-000; 84 entries across 43 paths are BLOCKED_SOURCE_LOST, with old manifests untouched.
• Geometry Nodes allowlist/Main persistence and typed unsupported mapping: WBV2-P1125-000.
• Grease Pencil viewport selection/marquee on main and Offscreen Chromium: WBV2-P1126-000.
• Tracking Mask reader/interaction: WBV2-P1127-000.
• ffmpeg.wasm MOVIE probe/proxy fallback: WBV2-P1128-000; local core resources are hash-bound and upstream source is checked out at f876f907c7e9b9bf51d4ed0b913a855a63ae63fc.
• Core Scene Graph compositor/performance/sampling settings: WBV2-P1129-001; reused P65/P66/P67 source receipts and added one aggregate Chromium Main transaction receipt.
• UI Editor View2D state: WBV2-P1130-001; dedicated adapter preserves Graph/Dope Sheet cur and pixel mask without changing the P1102 parser.
• Web-safe Sound/Speaker/ParticleSettings retention uses authoritative Main Scene IDProperty; desktop Audaspace stays disabled.

Ordered follow-up waves

1. IO_LIBRARY_HASH_REHYDRATION: use M12-manifest-sha-drift.json and current observed hashes to produce corrective evidence; recover original bytes only from trusted cache. Never re-sign old manifests.
2. UI_EDITOR_FAMILY: split the 3930 UI rows by editor/workspace/region behavior, reusing existing Main reader/context and keyboard/layout evidence without duplicate E2E.
3. MEDIA_IO_FAMILY: extend image/audio/video routes around the ffmpeg.wasm Worker; add a new receipt for each distinct codec/container contract.
4. NODES_SIMULATION_FAMILY: extend only for a new node family or simulation lifecycle with distinct Main mutation and recovery evidence.
5. MESH_EDITING_FAMILY: select remaining UV/material-slot/topology rows not represented by existing aggregate fixtures.
6. OTHER_OPERATORS_CORE_SCENE: cluster remaining operators by Main ownership and save/reopen semantics, then run source-backed modules only.

Execution shape for the remaining inventory

The 6,609 effective pending rows are a coverage ledger, not 6,609 independent implementations. The implementation unit remains:

owner family -> source-backed module -> shared command/reader -> operator case matrix

For every new module, use this bounded sequence:

1. Generate a deterministic family slice from the immutable P0 inventory. Each row must have one primary module, one behavior marker, an implementation class, and a source path. Existing receipts are linked by SHA-256 instead of reimplemented.
2. Freeze a small positive/negative/reopen contract. Implement the real Blender Main, WebEngine, WASM ABI, Worker/protocol and frontend path once for that behavior.
3. Run the mapped case matrix in shards against the same catalog/source snapshot. Shards may run concurrently inside a module, but queue handoff remains serial and follows the parent manifest only.
4. Aggregate source hashes, positive and negative counts, no-mutation/recovery evidence, undo/redo, save/reopen, deterministic replay and Chromium results into one receipt. Only then may an effective-ledger overlay add coverage; the original inventory and historical manifests stay unchanged.

The recommended batching is by shared ownership, not by operator name:

Batch	Module slices	Planning scope	Required reuse
Provenance gate	IO_LIBRARY_HASH_REHYDRATION	84 drift entries / 43 paths	M12 corrective report; trusted cache only; never re-sign
UI	editor/workspace/region context, input, layout persistence	3,930	UI_EDITOR, UI_INPUT_INTERACTION, Main context readers
Media	image/audio/video container and codec contracts	585	SEQUENCER_MOVIE_CODEC, local ffmpeg.wasm Worker, media retention
Nodes	node families, sockets, simulation lifecycle	543	NODES_GRAPH, NODES_SIMULATION, typed unsupported mapping
Mesh	UV, material slots, topology and edit history	431	SCENE_OBJECT_MESH, mesh transaction/history fixtures
Rig/Object	remaining rig, constraint, object ownership behaviors	691	RIG_ANIMATION, OBJECT_OPERATIONS, depsgraph recovery
Simulation	non-node physics/cache lifecycles	155	SIMULATION_CACHE, ENGINE_RUNTIME
Material/Render	unrepresented material and render settings	125	SHADER_MATERIAL, RENDER_PIPELINE
Sculpt/Paint	remaining stroke, mask and paint data paths	117	SCULPT_PAINT, PAINT_STROKE
Other/Core	residual operators and core Scene graph ownership	169	Main ID ownership, save/reopen and explicit unsupported routing

Planning scopes overlap where one legacy row belongs to more than one observable behavior; they must not be summed to claim more than the 6,609 effective pending rows. The provenance gate is a separate corrective lane: it must be recorded before any completion overlay is changed, but a source-lost result does not block an unrelated source-backed module once that status is explicit. Every successor still requires its own source-backed slice and parent manifest authorization.

Per-family exit gates

A family remains in_progress until every selected module has all of the following:

• stable source, protocol, Worker/frontend and fixture hashes;
• a real Main mutation or an exact Main reader/context result;
• positive, malformed/unsupported and no-mutation cases;
• undo/redo where the behavior mutates state, plus save/reopen and deterministic replay;
• Chromium-only production evidence and an aggregate manifest with shard exit codes;
• an explicit VERIFIED, UNSUPPORTED, ENVIRONMENT_UNAVAILABLE, HASH_DRIFT or SOURCE_LOST result for every mapped case.

Failure, hash drift, missing source, budget exhaustion or browser unavailability stops the current module and preserves the parent nextTask. It never reduces the pending count and never creates a corrective duplicate of an existing receipt.

Progress accounting

Report three numbers independently after each handoff: source-backed modules completed, effective inventory coverage, and legacy regression coverage. The current baseline is 37 modules / 41 module tasks, 290/6609 effective, and 281/6618 legacy. A module receipt may increase effective coverage only when its case-to-inventory mapping is hash-bound; implementation or build success alone does not.

Verification rules

• Chromium only; use an isolated WEB_TEST_PORT for every Playwright lane.
• Read the queue, print fresh context, and run context checks before edits.
• Do not rerun a completed module merely to refresh logs.
• Keep unsupported, environment-unavailable, hash-drift and source-lost states explicit.
• A module advances only after source hashes, positive/negative/recovery evidence, save/reopen, deterministic replay and aggregate manifest pass.
• The 6900 inventory and historical manifest meaning remain immutable.

External scheduler checkpoint

print-wbv2-live-status.mjs still reports the old scheduler/guardian/supervisor checkpoint blocked at P594. That state is unrelated to the local authoritative capability queue and remains read-only until an explicit scheduler recovery task is authorized.