docs: review document for #318

Issue: #318 User-Visible: no
fix: show entityless active controllers
2026-09-29 03:09:36 +00:00 · 2026-08-28 13:18:35 +00:00 · 2026-08-28 13:07:58 +00:00 · 2026-08-28 13:07:58 +00:00 · 2026-08-28 13:07:58 +00:00 · 2026-08-28 16:02:17 +03:00
696 changed files with 133369 additions and 38533 deletions
@@ -31,6 +31,16 @@ fi

 status=0

+# Локальный набор гейтов (#343). Выключен по умолчанию намеренно: 20-45 секунд на
+# каждый пуш, включая пуши одной строки документации, — цена, которую стоит
+# платить осознанно. Документация: docs/TESTING.md.
+if [ "${HP_PREPUSH_GATE:-}" = "1" ] && [ -f "$repo_root/scripts/pre-push-gate.mjs" ]; then
+  echo "pre-push-gate: HP_PREPUSH_GATE=1, прогоняю локальный набор" >&2
+  if ! node "$repo_root/scripts/pre-push-gate.mjs" >&2; then
+    status=1
+  fi
+fi
+
 while read -r local_ref local_sha remote_ref remote_sha; do
  # Deleting a remote branch pushes nothing to examine.
  if [ "$local_sha" = "$zero" ]; then
@@ -1,4 +1,4 @@
-name: Announce release
+name: Анонс релиза
 # Telegram notifications for t.me/ha_houseplan (owner request, 2026-08-07).
 # Stable releases are announced; prereleases are deliberately silent.
 # workflow_dispatch exists purely as a connectivity test button and therefore
@@ -36,6 +36,7 @@ permissions:
  contents: read
 jobs:
  telegram:
+    name: Оповещение в Telegram (только стабильные)
    if: ${{ github.event_name == 'workflow_dispatch' || (github.event_name == 'release' && github.event.release.prerelease == false) || (github.event_name == 'workflow_call' && inputs.prerelease == false) }}
    runs-on: ubuntu-latest
    steps:
@@ -9,7 +9,7 @@
 # локально через `npm run docs:accept -- --reviewed --from=<распакованный>`.
 # Та же конструкция, что у golden-эталонов, и по той же причине: картинки
 # попадают в репозиторий через явное решение, а не через бота.
-name: Docs screenshots
+name: Скриншоты документации

 on:
  workflow_dispatch:
@@ -24,6 +24,7 @@ permissions:

 jobs:
  capture:
+    name: Съёмка и сверка скриншот-индекса
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v7
@@ -47,6 +48,29 @@ jobs:
        run: npx playwright install chromium
      - name: Build the bundle the screenshots must come from
        run: npm run build
+      # oxipng без потерь снимает с набора ~19% (замер в #345 на pyoxipng 9.1.1;
+      # у 10.2.0 пресеты уровней перебалансированы, точная доля может отличаться,
+      # но кадры остаются пиксельно идентичными в любой версии — это перепаковка).
+      #
+      # Пин версии и контрольной суммы намеренно, а не `apt-get install oxipng`:
+      # пакет из образа раннера может пропасть или переехать, а падение шага
+      # съёмки стоит целого цикла приёмки. Тот же урок, что с azure-зеркалом
+      # Playwright (#175, #206).
+      - name: Установить oxipng
+        env:
+          OXIPNG_VERSION: 10.2.0
+          OXIPNG_SHA256: b33f84c73d42cb592bea5d84c431030b1e97784817693380dfcec7d9575f871e
+        run: |
+          set -euo pipefail
+          asset="oxipng-${OXIPNG_VERSION}-x86_64-unknown-linux-gnu.tar.gz"
+          curl -fsSL -o "$asset" \
+            "https://github.com/oxipng/oxipng/releases/download/v${OXIPNG_VERSION}/${asset}"
+          echo "${OXIPNG_SHA256}  ${asset}" | sha256sum -c -
+          mkdir -p "$HOME/.local/bin"
+          tar -xzf "$asset" --strip-components=1 -C "$HOME/.local/bin" \
+            "oxipng-${OXIPNG_VERSION}-x86_64-unknown-linux-gnu/oxipng"
+          echo "$HOME/.local/bin" >> "$GITHUB_PATH"
+          "$HOME/.local/bin/oxipng" --version
      - name: Capture
        run: node demo/docs/capture.mjs
      # Вердикт до всякой приёмки. Само число изменившихся файлов ничего не
@@ -57,16 +81,30 @@ jobs:
      # разницу рендеринга.
      - name: Вердикт
        run: |
+          # Поле манифеста «до» — из закоммиченного состояния, «после» — из
+          # свежего. Читается одинаково для браузера и для упаковщика: оба
+          # переписывают все кадры сразу, и различить их причины обязан вердикт,
+          # а не человек по памяти (#345).
+          field() {
+            node -e "let s='';process.stdin.on('data',d=>s+=d).on('end',()=>{try{console.log(JSON.parse(s).$1||'')}catch{console.log('')}})"
+          }
          git status --porcelain docs/images
          changed=$(git diff --name-only docs/images | grep -c png || true)
-          before=$(git show HEAD:docs/images/screenshots.json | node -e \
-            "let s='';process.stdin.on('data',d=>s+=d).on('end',()=>{try{console.log(JSON.parse(s).chromium||'')}catch{console.log('')}})")
+          before=$(git show HEAD:docs/images/screenshots.json | field chromium)
          after=$(node -e "console.log(require('./docs/images/screenshots.json').chromium)")
+          packer_before=$(git show HEAD:docs/images/screenshots.json | field oxipng)
+          packer_after=$(node -e "console.log(require('./docs/images/screenshots.json').oxipng || '')")
          echo "--- изменившихся PNG: $changed"
          echo "--- Chromium: было «${before:-не записан}», стало «$after»"
-          if [ "$before" = "$after" ] && [ "$changed" -gt 0 ]; then
-            echo "ВЕРДИКТ: тот же браузер, а картинки изменились — изменился продукт."
-            echo "Смотрите на кадры: если изменение ожидаемое, принимайте."
+          echo "--- oxipng: было «${packer_before:-не записан}», стало «${packer_after:-нет}»"
+          if [ "$packer_before" != "$packer_after" ] && [ "$changed" -gt 0 ]; then
+            echo "ВЕРДИКТ: изменился упаковщик, поэтому переписаны все кадры сразу."
+            echo "Это перепаковка без потерь: пиксели те же, размер меньше на ~19%."
+            echo "Ожидаемо один раз — при включении oxipng либо при смене его версии."
+            echo "Проверить можно сравнением декодированных кадров, а не байтов."
+          elif [ "$before" = "$after" ] && [ "$changed" -gt 0 ]; then
+            echo "ВЕРДИКТ: тот же браузер и тот же упаковщик, а картинки изменились —"
+            echo "изменился продукт. Смотрите на кадры: если изменение ожидаемое, принимайте."
          elif [ "$before" != "$after" ]; then
            echo "ВЕРДИКТ: браузер другой, поэтому переписаны все кадры сразу."
            echo "Это ожидаемо один раз — при переходе на канонический прогон."
@@ -1,15 +1,21 @@
-name: Mutation gate
+name: Мутационный гейт

 # Реестр известных поломок (issue #85): каждый мутант ломает продуктовый код
 # известным способом, и объявленный тест ОБЯЗАН на этом покраснеть. Тест,
 # оставшийся зелёным на сломанном коде, ничего не защищает — он лишь выглядит
 # защитой, и это хуже его отсутствия.
 #
-# Прогон дорогой: пересборка бандла на каждого мутанта. Поэтому он не входит в
-# Validate и не идёт на каждый push. Его место — перед стабильным релизом
-# (PROCESS.md §8) и раз в неделю по расписанию, чтобы дрейф тестов не копился
-# до релиза. Дешёвая половина — «якоря патчей живы, guard-файлы существуют» —
-# идёт с обычными юнитами: test/mutation-gate.test.mjs.
+# Прогон дорогой, поэтому он не входит в Validate и не идёт на каждый push.
+# Его место — перед стабильным релизом (PROCESS.md §8) и раз в неделю по
+# расписанию, чтобы дрейф тестов не копился до релиза. Дешёвая половина —
+# «якоря патчей живы, guard-файлы существуют» — идёт с обычными юнитами:
+# test/mutation-gate.test.mjs.
+#
+# #332: бандл собирается только мутантам с браузерным гвардом (guardNeedsBundle),
+# компиляция тестов в worktree стартует с тёплого test-build (инкрементальный
+# tsc), а реестр режется на четыре чересполосных шарда — полный прогон
+# укладывается в десятки минут вместо часов. Локальный дифф-режим:
+# node scripts/mutation-gate.mjs --changed origin/dev..HEAD

 on:
  workflow_dispatch:
@@ -31,9 +37,14 @@ concurrency:

 jobs:
  mutants:
+    name: "Мутанты: каждый обязан красить тесты (шард ${{ matrix.shard }} из 4)"
    runs-on: ubuntu-latest
-    # Все мутанты × (сборка + свой guard) — это десятки минут, и это нормально:
-    # гейт предрелизный. Час — потолок против зависшего Chromium.
+    strategy:
+      fail-fast: false
+      matrix:
+        shard: [1, 2, 3, 4]
+    # Шард ~64 мутантов × свой guard; бандл собирают только браузерные гварды.
+    # Час — потолок против зависшего Chromium.
    timeout-minutes: 60
    steps:
      - uses: actions/checkout@v7
@@ -69,5 +80,8 @@ jobs:
      - name: Реестр применим к текущему коду
        run: node scripts/mutation-gate.mjs --check

+      - name: Тёплый test-build для инкрементальной компиляции мутантов
+        run: npx tsc -p tsconfig.test.json && node scripts/fix-test-build.mjs
+
      - name: Каждый тест ловит свою поломку
-        run: node scripts/mutation-gate.mjs
+        run: node scripts/mutation-gate.mjs --shard=${{ matrix.shard }}/4
@@ -1,4 +1,4 @@
-name: Full Performance
+name: Полные бенчмарки производительности

 on:
  # Every main promotion is a stable-release candidate and must have an
@@ -24,10 +24,21 @@ concurrency:

 jobs:
  performance:
-    # Base and candidate stay sequential on one hosted runner. Splitting them
-    # across runners would turn machine variance into a false regression.
+    name: Бенчмарки рендера и геометрии
+    # Every profile keeps base and candidate sequential on one hosted runner.
+    # Independent profile pairs run in parallel: cross-profile timing is never
+    # compared, while serialising all five pairs cannot fit the job timeout.
    runs-on: ubuntu-latest
    timeout-minutes: 60
+    strategy:
+      fail-fast: false
+      matrix:
+        profile:
+          - large-house
+          - isometric
+          - plan-snap
+          - blend
+          - overlay
    steps:
      - name: Check out candidate
        uses: actions/checkout@v7
@@ -147,40 +158,80 @@ jobs:
      - name: Build both exact source trees
        run: |
          npm --prefix candidate run build
-          cp candidate/dist/houseplan-card.js candidate/demo/srv/assets/houseplan-card.js
+          (cd candidate && node scripts/bundle-sync.mjs)
          npm --prefix baseline run build
-          cp baseline/dist/houseplan-card.js baseline/demo/srv/assets/houseplan-card.js
-
-      - name: Capture base and candidate profiles
-        working-directory: candidate
-        run: |
-          npm run benchmark:large-house -- --target-root=../baseline --samples=7 --warmups=1 --output=../artifacts/performance/baseline.json
-          npm run benchmark:large-house -- --target-root=. --samples=7 --warmups=1 --output=../artifacts/performance/candidate.json
-          npm run benchmark:large-house-isometric -- --target-root=../baseline --samples=7 --warmups=1 --output=../artifacts/performance/isometric-baseline.json
-          npm run benchmark:large-house-isometric -- --target-root=. --samples=7 --warmups=1 --output=../artifacts/performance/isometric-candidate.json
-          npm run benchmark:large-house-plan-snap -- --target-root=../baseline --samples=7 --warmups=1 --output=../artifacts/performance/plan-snap-baseline.json
-          npm run benchmark:large-house-plan-snap -- --target-root=. --samples=7 --warmups=1 --output=../artifacts/performance/plan-snap-candidate.json
-          npm run benchmark:glow -- --profile=large-light-blend-v1 --target-root=../baseline --samples=7 --warmups=1 --output=../artifacts/performance/blend-baseline.json
-          npm run benchmark:glow -- --profile=large-light-blend-v1 --target-root=. --samples=7 --warmups=1 --output=../artifacts/performance/blend-candidate.json
-          npm run benchmark:glow -- --profile=large-house-glow-overlay-v1 --target-root=../baseline --samples=7 --warmups=1 --output=../artifacts/performance/overlay-baseline.json
-          npm run benchmark:glow -- --profile=large-house-glow-overlay-v1 --target-root=. --samples=7 --warmups=1 --output=../artifacts/performance/overlay-candidate.json
-          if ! grep -q "glow_enabled" ../baseline/src/logic.ts; then
-            echo "Base predates independent Glow; bootstrap relative overlay baseline, keep absolute gate"
-            cp ../artifacts/performance/overlay-candidate.json ../artifacts/performance/overlay-baseline.json
+          if [ -f baseline/scripts/bundle-sync.mjs ]; then
+            (cd baseline && node scripts/bundle-sync.mjs)
+          else
+            echo "::notice::The comparison base predates bundle-sync.mjs; materializing its freshly built bundle with the legacy copy path."
+            mkdir -p baseline/custom_components/houseplan/frontend baseline/demo/srv/assets
+            cp baseline/dist/houseplan-card.js baseline/custom_components/houseplan/frontend/houseplan-card.js
+            cp baseline/dist/houseplan-card.js baseline/demo/srv/assets/houseplan-card.js
          fi

-      - name: Enforce relative and absolute performance budgets
+      - name: Capture base and candidate profile
        working-directory: candidate
+        env:
+          PROFILE: ${{ matrix.profile }}
        run: |
-          npm run benchmark:compare -- --baseline=../artifacts/performance/baseline.json --candidate=../artifacts/performance/candidate.json --output=../artifacts/performance/comparison.json
-          npm run benchmark:compare -- --budgets=demo/performance/budgets-large-house-isometric.json --baseline=../artifacts/performance/isometric-baseline.json --candidate=../artifacts/performance/isometric-candidate.json --output=../artifacts/performance/isometric-comparison.json
-          npm run benchmark:compare -- --budgets=demo/performance/budgets-large-house-plan-snap.json --baseline=../artifacts/performance/plan-snap-baseline.json --candidate=../artifacts/performance/plan-snap-candidate.json --output=../artifacts/performance/plan-snap-comparison.json
-          npm run benchmark:compare -- --budgets=demo/performance/budgets-large-light-blend.json --baseline=../artifacts/performance/blend-baseline.json --candidate=../artifacts/performance/blend-candidate.json --output=../artifacts/performance/blend-comparison.json
-          npm run benchmark:compare -- --budgets=demo/performance/budgets-large-house-glow-overlay.json --baseline=../artifacts/performance/overlay-baseline.json --candidate=../artifacts/performance/overlay-candidate.json --output=../artifacts/performance/overlay-comparison.json
+          mkdir -p ../artifacts/performance
+          case "$PROFILE" in
+            large-house)
+              npm run benchmark:large-house -- --target-root=../baseline --samples=7 --warmups=1 --output=../artifacts/performance/baseline.json
+              npm run benchmark:large-house -- --target-root=. --samples=7 --warmups=1 --output=../artifacts/performance/candidate.json
+              ;;
+            isometric)
+              npm run benchmark:large-house-isometric -- --target-root=../baseline --samples=7 --warmups=1 --output=../artifacts/performance/isometric-baseline.json
+              npm run benchmark:large-house-isometric -- --target-root=. --samples=7 --warmups=1 --output=../artifacts/performance/isometric-candidate.json
+              ;;
+            plan-snap)
+              npm run benchmark:large-house-plan-snap -- --target-root=../baseline --samples=7 --warmups=1 --output=../artifacts/performance/plan-snap-baseline.json
+              npm run benchmark:large-house-plan-snap -- --target-root=. --samples=7 --warmups=1 --output=../artifacts/performance/plan-snap-candidate.json
+              ;;
+            blend)
+              npm run benchmark:glow -- --profile=large-light-blend-v1 --target-root=../baseline --samples=7 --warmups=1 --output=../artifacts/performance/blend-baseline.json
+              npm run benchmark:glow -- --profile=large-light-blend-v1 --target-root=. --samples=7 --warmups=1 --output=../artifacts/performance/blend-candidate.json
+              ;;
+            overlay)
+              npm run benchmark:glow -- --profile=large-house-glow-overlay-v1 --target-root=../baseline --samples=7 --warmups=1 --output=../artifacts/performance/overlay-baseline.json
+              npm run benchmark:glow -- --profile=large-house-glow-overlay-v1 --target-root=. --samples=7 --warmups=1 --output=../artifacts/performance/overlay-candidate.json
+              if ! grep -q "glow_enabled" ../baseline/src/logic.ts; then
+                echo "Base predates independent Glow; bootstrap relative overlay baseline, keep absolute gate"
+                cp ../artifacts/performance/overlay-candidate.json ../artifacts/performance/overlay-baseline.json
+              fi
+              ;;
+            *)
+              echo "::error::Unknown performance profile: $PROFILE"
+              exit 1
+              ;;
+          esac

-      - name: Upload full performance reports
+      - name: Enforce relative and absolute performance budget
+        working-directory: candidate
+        env:
+          PROFILE: ${{ matrix.profile }}
+        run: |
+          case "$PROFILE" in
+            large-house)
+              npm run benchmark:compare -- --baseline=../artifacts/performance/baseline.json --candidate=../artifacts/performance/candidate.json --output=../artifacts/performance/comparison.json
+              ;;
+            isometric)
+              npm run benchmark:compare -- --budgets=demo/performance/budgets-large-house-isometric.json --baseline=../artifacts/performance/isometric-baseline.json --candidate=../artifacts/performance/isometric-candidate.json --output=../artifacts/performance/isometric-comparison.json
+              ;;
+            plan-snap)
+              npm run benchmark:compare -- --budgets=demo/performance/budgets-large-house-plan-snap.json --baseline=../artifacts/performance/plan-snap-baseline.json --candidate=../artifacts/performance/plan-snap-candidate.json --output=../artifacts/performance/plan-snap-comparison.json
+              ;;
+            blend)
+              npm run benchmark:compare -- --budgets=demo/performance/budgets-large-light-blend.json --baseline=../artifacts/performance/blend-baseline.json --candidate=../artifacts/performance/blend-candidate.json --output=../artifacts/performance/blend-comparison.json
+              ;;
+            overlay)
+              npm run benchmark:compare -- --budgets=demo/performance/budgets-large-house-glow-overlay.json --baseline=../artifacts/performance/overlay-baseline.json --candidate=../artifacts/performance/overlay-candidate.json --output=../artifacts/performance/overlay-comparison.json
+              ;;
+          esac
+
+      - name: Upload full performance report
        if: always()
        uses: actions/upload-artifact@v7
        with:
-          name: full-performance
+          name: full-performance-${{ matrix.profile }}
          path: artifacts/performance
@@ -1,4 +1,4 @@
-name: Process
+name: Ревью-конвейер

 # Событийный конвейер процесса (PROCESS.md). Смена статусной метки — это
 # сообщение: она порождает событие, событие запускает следующий шаг.
@@ -35,6 +35,7 @@ permissions:

 jobs:
  guard:
+    name: "Страж: ребейз на dev и предпосылки ревью"
    runs-on: ubuntu-latest
    outputs:
      stage: ${{ steps.decide.outputs.stage }}
@@ -162,6 +163,7 @@ jobs:
          echo "limit=$limit" >> "$GITHUB_OUTPUT"

  review:
+    name: "Ревью (Claude): вердикт в issue"
    needs: guard
    if: needs.guard.outputs.stage != ''
    runs-on: ubuntu-latest
@@ -229,22 +231,155 @@ jobs:
            echo "МАТЕРИАЛ НЕ ЗАПУШЕН" >> "$GITHUB_STEP_SUMMARY"
          fi

+      # Ревьюер обязан смотреть тот же код, который уедет в dev (#257). Раньше
+      # ревью шло по ветке как есть, а слияние делало ребейз — проверенный SHA и
+      # слитый SHA были разными коммитами. Пока расхождение с dev текстовое,
+      # ребейз упирается в конфликт и это видно; смысловое расхождение git
+      # склеивает молча, и в dev уезжает комбинация, которую никто не читал.
+      # Именно так пришёл регресс #234.
+      #
+      # Заодно снимается плата за конфликт: он обнаруживался ПОСЛЕ сорока минут
+      # ревью и потраченных лимитов подписки, хотя виден за пять секунд до них.
+      #
+      # Этап spec не затрагивается: ветку ТЗ в dev никто не сливает, и трогать
+      # чужую ветку без нужды — лишний риск.
+      - name: Привести ветку к dev
+        id: rebase
+        if: needs.guard.outputs.stage == 'code' && steps.branch.outputs.name != ''
+        env:
+          TOKEN: ${{ secrets.HP_PROCESS_TOKEN }}
+          BRANCH: ${{ steps.branch.outputs.name }}
+          # rebase, в отличие от commit, не принимает -c user.*: он запускает
+          # свои процессы и требует личность в окружении, иначе падает с
+          # «unable to auto-detect email address».
+          GIT_AUTHOR_NAME: claude[bot]
+          GIT_AUTHOR_EMAIL: 209825114+claude[bot]@users.noreply.github.com
+          GIT_COMMITTER_NAME: claude[bot]
+          GIT_COMMITTER_EMAIL: 209825114+claude[bot]@users.noreply.github.com
+        run: |
+          git fetch -q origin dev
+          if git merge-base --is-ancestor origin/dev HEAD; then
+            echo "ветка содержит весь dev — ребейз не нужен"
+            exit 0
+          fi
+          behind=$(git rev-list --count "HEAD..origin/dev")
+          before=$(git rev-parse "origin/$BRANCH")
+          echo "dev впереди на $behind коммит(ов) — привожу ветку"
+          if ! git rebase origin/dev; then
+            git rebase --abort || true
+            echo "conflict=true" >> "$GITHUB_OUTPUT"
+            echo "::warning::ветка $BRANCH не ребейзится на dev без конфликта — ревью не запускается"
+            exit 0
+          fi
+          # --force-with-lease с явным ожидаемым значением обязателен: между
+          # fetch и push автор мог запушить коммит, и слепой --force потерял бы
+          # его молча. Расхождение lease — падение прогона, а не предупреждение:
+          # ревью пошло бы по коду, которого на ветке уже нет.
+          if ! git push -q --force-with-lease="refs/heads/$BRANCH:$before" \
+               "https://x-access-token:$TOKEN@github.com/${{ github.repository }}" \
+               "HEAD:refs/heads/$BRANCH"; then
+            echo "::error::ветка $BRANCH изменилась во время ребейза — прогон прерван, чтобы не потерять коммит автора"
+            exit 1
+          fi
+          # Локальная ссылка обновляется тоже: шаг слияния берёт origin/$BRANCH,
+          # и без этого он ребейзил бы заново уже приведённое.
+          git fetch -q origin "+refs/heads/$BRANCH:refs/remotes/origin/$BRANCH"
+          short_before=$(git rev-parse --short "$before")
+          short_after=$(git rev-parse --short HEAD)
+          echo "note=Ветка приведена к dev конвейером до ревью: поверх легло $behind коммит(ов) dev, $short_before -> $short_after. После ребейза это другой код (§7.2) — разбор полный, а не по дельте." >> "$GITHUB_OUTPUT"
+          echo "ветка $BRANCH приведена к dev: $short_before -> $short_after"
+
+      # Материал ревью — конкретный SHA (#312). Вердикт применим только к
+      # нему: если во время ревью в ветку прилетит коммит, шаг слияния обязан
+      # это заметить и отказаться, а не молча увезти в dev непроверенный код.
+      - name: Зафиксировать SHA материала ревью
+        id: material
+        if: steps.rebase.outputs.conflict != 'true'
+        run: |
+          echo "sha=$(git rev-parse HEAD)" >> "$GITHUB_OUTPUT"
+          echo "материал ревью: $(git rev-parse --short HEAD)"
+
+      # Конфликт возвращает задачу автору ДО ревью. Инвариант «после прогона
+      # метка меняется всегда» при этом держится: возврат в S6-in-progress —
+      # тоже смена метки, и автор не ждёт впустую.
+      - name: Конфликт с dev — вернуть автору без ревью
+        if: steps.rebase.outputs.conflict == 'true'
+        env:
+          GH_TOKEN: ${{ secrets.HP_PROCESS_TOKEN }}
+          NUM: ${{ github.event.issue.number }}
+          BRANCH: ${{ steps.branch.outputs.name }}
+        run: |
+          cat > /tmp/stale.md <<EOF
+          **Ревью не запускалось:** ветка \`$BRANCH\` не ребейзится на \`dev\` без конфликта. Код никто не читал, вердикта нет, цикл ревью не израсходован.
+
+          Проверка стоит до ревью намеренно: конфликт всё равно вернул бы задачу, но уже после сорока минут работы ревьюера и потраченных лимитов.
+
+          Задача переведена в \`S6-in-progress\`. Осталось:
+
+          1. \`git fetch origin\`, затем \`git rebase origin/dev\` в ветке задачи, разрешить конфликт;
+          2. запушить ветку;
+          3. вернуть метку \`S7-code-review\`.
+
+          [Прогон](${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }}).
+          EOF
+          gh issue comment "$NUM" --repo "${{ github.repository }}" --body-file /tmp/stale.md
+          gh issue edit "$NUM" --repo "${{ github.repository }}" \
+            --add-label S6-in-progress --remove-label S7-code-review
+          echo "S7-code-review -> S6-in-progress (ревью не запускалось)"
+
+      # Ревьюер перегонял tsc, юниты и сборку заново в каждом раунде, хотя
+      # Validate на том же SHA уже зелёный (#343). Это не тщательность: бюджет
+      # ревью тратится на повторение CI вместо чтения кода.
+      #
+      # Доказательство здесь такое же строгое, как у reuse-маркеров (#208): не
+      # «недавно было зелено», а «completed success ровно на этом SHA». После
+      # ребейза SHA другой, прогона для него нет — и ревьюер честно гоняет сам.
+      - name: Зелёные гейты на этом SHA
+        id: validated
+        if: steps.rebase.outputs.conflict != 'true'
+        env:
+          GH_TOKEN: ${{ secrets.HP_PROCESS_TOKEN }}
+        run: |
+          sha=$(git rev-parse HEAD)
+          short=$(git rev-parse --short HEAD)
+          row=$(gh run list --repo "${{ github.repository }}" --workflow validate.yml \
+            --commit "$sha" --limit 5 \
+            --json status,conclusion,url \
+            --jq '[.[] | select(.status=="completed" and .conclusion=="success")][0] // empty')
+          {
+            echo 'note<<EOF_NOTE'
+            if [ -n "$row" ]; then
+              url=$(printf '%s' "$row" | node -e 'let s="";process.stdin.on("data",d=>s+=d).on("end",()=>process.stdout.write(JSON.parse(s).url||""))')
+              echo "**Дешёвые гейты на этом SHA уже подтверждены** (#343). Validate на \`$short\` завершился success: $url"
+              echo ""
+              echo "Значит \`npx tsc --noEmit\`, \`npm test\` и \`npm run build\` со сверкой копий бандла перегонять не нужно — сошлись на этом прогоне, назвав его ссылкой. Бюджет раунда тратится на чтение кода."
+              echo ""
+              echo "Что Validate НЕ покрывает и остаётся за тобой: смоки, выбранные по диффу; golden, если diff трогает рендер; инварианты модели на конкретной конфигурации; и любой гейт, который требуют AC задачи."
+            else
+              echo "**Зелёного Validate на этом SHA (\`$short\`) нет** — прогон не найден, не завершён либо не success. Дешёвые гейты прогоняешь сам и называешь результат."
+            fi
+            echo 'EOF_NOTE'
+          } >> "$GITHUB_OUTPUT"
+          if [ -n "$row" ]; then echo "Validate на $short: зелёный"; else echo "Validate на $short: зелёного нет"; fi
+
      # Зависимости ставятся ПОСЛЕ переключения на ветку задачи: lockfile мог
      # измениться именно в ней, и установка по копии из dev дала бы не то дерево.
      - name: Установить зависимости
+        if: steps.rebase.outputs.conflict != 'true'
        run: npm ci

      # Браузер нужен не всякому ревью (см. правило выбора гейтов в промпте),
      # но когда нужен — качать его заново дороже, чем держать в кэше.
      - name: Кэш браузеров Playwright
        id: pw
+        if: steps.rebase.outputs.conflict != 'true'
        uses: actions/cache@v6
        with:
          path: ~/.cache/ms-playwright
          key: playwright-${{ runner.os }}-${{ hashFiles('package-lock.json') }}

      - name: Установить Chromium
-        if: steps.pw.outputs.cache-hit != 'true'
+        if: steps.rebase.outputs.conflict != 'true' && steps.pw.outputs.cache-hit != 'true'
        # Без --with-deps: системные библиотеки Chromium предустановлены в
        # образе ubuntu-latest, а apt при промахе кэша съедал минуты из бюджета
        # ревью и подолгу перебирал недоступное azure-зеркало (#175). Если
@@ -254,6 +389,7 @@ jobs:

      - name: Review
        id: review
+        if: steps.rebase.outputs.conflict != 'true'
        uses: anthropics/claude-code-action@v1
        env:
          # Вне рабочей копии: восстановление дерева ревьюером не должно
@@ -277,6 +413,8 @@ jobs:
              Номер захода нужен для имени документа — два документа с
              одинаковым номером затёрли бы друг друга.

+            ${{ steps.rebase.outputs.note }}
+
            **Если цикл не первый — объём разбора по дельте, а не заново**
            (PROCESS.md §2.9, issue #214). Раньше промпт был одинаковым для
            всех раундов, и повторный цикл заново выводил продуктовую рамку и
@@ -350,8 +488,10 @@ jobs:
            правке — не тщательность, а потеря времени: полные наборы это
            предрелизный гейт (PROCESS.md §8), а не гейт ревью.

-            Всегда, они дешёвые, и в повторном раунде тоже: код изменился,
-            а стоят они минуты:
+            ${{ steps.validated.outputs.note }}
+
+            Если зелёного прогона на этом SHA нет — прогоняешь сам, они дешёвые,
+            и в повторном раунде тоже: код изменился, а стоят они минуты:
              `npx tsc --noEmit`, `npm test`, `npm run build` со сверкой трёх
              копий бандла. Плюс `node scripts/check-docs.mjs`, если diff трогает
              `src/**`: отпечаток скриншотов документации считается по всему
@@ -359,11 +499,26 @@ jobs:
              выбирать тут нечего. Пропуск этого шага в #230 и #234 оставил `dev`
              с красным job `docs` до следующей задачи (#237).

+            Если diff трогает геометрию или ссылки на неё — рёбра комнат,
+            записи толщины, `layout`, `marker.space`, `open_spans` — обязательны
+            инварианты модели (#254): `npm test` уже гоняет их на всех моделях
+            проекта, а на конкретной конфигурации они проверяются командой
+            `npm run invariants -- --config <экспорт или ответ config/get>`.
+            Три вопроса, на которые они отвечают, и все три уже стоили
+            продукту дефектов: не исчезла ли запись толщины (#253), разрешима ли
+            каждая ссылка (#244, #252) и равен ли ключ записи толщины ключу
+            решёточного ребра (#258, #259). Последний сравнивает строки без
+            допусков: сдвиг ключа на один шаг решётки равен допуску первых двух,
+            поэтому они на нём промахиваются. Если задача меняет геометрию, а
+            инварианты в отчёте не названы — это непрогнанный гейт, а не мелочь.
+
            По необходимости, и «необходимость» определяется diff'ом и AC:
              - браузерные смоки `demo/smoke_*.mjs` — названные в AC плюс те,
                что печатает `node scripts/smoke-select.mjs --base <base> --head <head>`.
-                Их 167; прогон всех уместен только когда задача действительно
-                задевает всё. Выбирать по теме недостаточно: регресс #234 поймал
+                Сколько их всего — считает `ls demo/smoke_*.mjs | wc -l`; вшитое
+                в этот текст число трижды расходилось с деревом, поэтому его
+                здесь больше нет. Прогон всех уместен только когда задача
+                действительно задевает всё. Выбирать по теме недостаточно: регресс #234 поймал
                `smoke_wall_junctions`, который по названию про стыки стен, а не
                про толщину отрезка. Инструмент печатает три вида ответа, и они
                разные: «прямое совпадение» — смок называет изменённый символ,
@@ -380,6 +535,14 @@ jobs:
              - performance-профили — если названы в AC либо тронуты
                чувствительные к перфу пути.

+            **Одно число — один источник.** Если дифф добавляет или меняет
+            величину, видимую пользователю, назови в отчёте прямо: какое число
+            видно дважды (превью против записи, подпись против площади,
+            подсветка инструмента против сохранённого значения) и один ли у него
+            источник. Три дефекта подряд имели именно эту причину — #234, #233 и
+            способ, которым #234 обнаружили. Механическая часть закреплена
+            тестом `test/single-source-numbers.test.mjs`, смысловая — твоя.
+
            Дисциплина «тест должен уметь падать» не отменяется, но применяется к
            тем тестам, которые ты прогонял.

@@ -442,6 +605,7 @@ jobs:
      # Ревьюер пишет только в docs/reviews/. Что именно попадёт в коммит,
      # решает этот шаг, а не модель: всё остальное откатывается.
      - name: Опубликовать документ ревью
+        if: steps.rebase.outputs.conflict != 'true'
        env:
          TOKEN: ${{ secrets.HP_PROCESS_TOKEN }}
          BRANCH: ${{ steps.branch.outputs.name }}
@@ -540,6 +704,7 @@ jobs:

      - name: Решение по вердикту
        id: decide
+        if: steps.rebase.outputs.conflict != 'true'
        env:
          OUT: ${{ steps.review.outputs.structured_output }}
          STAGE: ${{ needs.guard.outputs.stage }}
@@ -585,14 +750,42 @@ jobs:
          GH_TOKEN: ${{ secrets.HP_PROCESS_TOKEN }}
          BRANCH: ${{ steps.branch.outputs.name }}
          NUM: ${{ github.event.issue.number }}
+          MATERIAL_SHA: ${{ steps.material.outputs.sha }}
        run: |
          if [ -z "$BRANCH" ]; then
            echo "::error::ветки задачи нет — сливать нечего"
            echo "merged=false" >> "$GITHUB_OUTPUT"
            exit 0
          fi
-          git fetch -q origin dev
-          git checkout -q -B merge-into-dev "origin/$BRANCH"
+          git fetch -q origin dev "$BRANCH"
+          # #312: сливается только проверенный код. Допустимые вершины ветки:
+          # сам SHA материала либо он же плюс ровно один коммит публикации
+          # документа ревью (дифф только docs/reviews/). Любой другой коммит —
+          # ветка уехала после ревью, вердикт к ней не применим: возврат в
+          # S6-in-progress через merged=false, как при конфликте.
+          actual=$(git rev-parse "origin/$BRANCH")
+          reviewed="$MATERIAL_SHA"
+          fresh=false
+          if [ "$actual" = "$reviewed" ]; then
+            fresh=true
+          elif [ "$(git rev-parse "$actual^" 2>/dev/null)" = "$reviewed" ] \
+            && [ -z "$(git diff --name-only "$reviewed" "$actual" -- . ':!docs/reviews')" ]; then
+            fresh=true
+          fi
+          if [ "$fresh" != true ]; then
+            echo "merged=false" >> "$GITHUB_OUTPUT"
+            echo "::warning::ветка $BRANCH уехала после проверенного SHA $reviewed (сейчас $actual) — слияние отменено (#312)"
+            cat > /tmp/stale-verdict.md <<EOF
+          **Слияние отменено: ветка изменилась после проверенного материала (#312).**
+
+          Ревью выполнялось на \\`$(git rev-parse --short "$reviewed")\\`, а вершина ветки сейчас \\`$(git rev-parse --short "$actual")\\` — в ней есть коммиты, которых вердикт не покрывает. Зелёный вердикт остаётся в силе только для проверенного SHA.
+
+          Задача переведена в \\`S6-in-progress\\`. Дальше: убедиться, что вершина ветки — именно то, что должно ехать в dev, и вернуть метку \\`S7-code-review\\` — новый заход ревью проверит актуальный код.
+          EOF
+            gh issue comment "$NUM" --repo "${{ github.repository }}" --body-file /tmp/stale-verdict.md
+            exit 0
+          fi
+          git checkout -q -B merge-into-dev "$actual"
          if ! git -c user.name="claude[bot]" \
                   -c user.email="209825114+claude[bot]@users.noreply.github.com" \
                   rebase origin/dev; then
@@ -618,6 +811,7 @@ jobs:
          echo "слито в dev: $(git rev-parse --short HEAD)"

      - name: Переставить метку
+        if: steps.rebase.outputs.conflict != 'true'
        env:
          # Именно PAT: с GITHUB_TOKEN следующий шаг конвейера не запустится.
          GH_TOKEN: ${{ secrets.HP_PROCESS_TOKEN }}
@@ -1,4 +1,4 @@
-name: Publish prerelease
+name: Публикация пре-релиза (ручная)
 run-name: Publish ${{ inputs.tag }}

 on:
@@ -19,6 +19,7 @@ concurrency:

 jobs:
  gate:
+    name: "Гейт: зелёная Проверка и релизный контракт"
    runs-on: ubuntu-latest
    outputs:
      sha: ${{ steps.candidate.outputs.sha }}
@@ -61,6 +62,7 @@ jobs:
        run: node scripts/release-gate.mjs "$SHA"

  publish:
+    name: Публикация тега и релиза
    needs: gate
    runs-on: ubuntu-latest
    outputs:
@@ -80,18 +82,13 @@ jobs:
          set -euo pipefail
          npm ci
          npm run build
-          cmp dist/houseplan-card.js custom_components/houseplan/frontend/houseplan-card.js
-          cmp dist/houseplan-card.js demo/srv/assets/houseplan-card.js
+          node scripts/bundle-tree.mjs dist custom_components/houseplan/frontend
+          npm run bundle:budget
          VERSION=${TAG#v}
-          grep -Fq "$VERSION" dist/houseplan-card.js
+          grep -RFq "$VERSION" dist
          (cd custom_components/houseplan && zip -qr ../../houseplan.zip .)
-          unzip -l houseplan.zip | grep -q "manifest.json"
-          ZIP_VERSION=$(unzip -p houseplan.zip manifest.json | node -e \
-            "let s='';process.stdin.on('data',d=>s+=d).on('end',()=>process.stdout.write(JSON.parse(s).version))")
-          test "$ZIP_VERSION" = "$VERSION" || {
-            echo "::error::houseplan.zip manifest version $ZIP_VERSION != $VERSION"
-            exit 1
-          }
+          node scripts/verify-houseplan-zip.mjs houseplan.zip \
+            custom_components/houseplan/frontend "$VERSION"
          test -s dist/houseplan-card.js
          test -s houseplan.zip
      - name: Create or verify the annotated tag
@@ -199,6 +196,7 @@ jobs:
  # A manual step after a successful release is the worst kind: by the time it is
  # due, the work already looks finished, which is exactly why it gets forgotten.
  close-merged:
+    name: Закрытие вошедших issue
    needs: [gate, publish]
    if: ${{ needs.publish.outputs.newly_published == 'true' }}
    runs-on: ubuntu-latest
@@ -246,6 +244,7 @@ jobs:
          }

  announce:
+    name: Комментарий о публикации
    needs: [gate, publish]
    if: ${{ needs.publish.outputs.newly_published == 'true' }}
    uses: ./.github/workflows/announce.yml
@@ -1,4 +1,4 @@
-name: Attach HACS zip to release
+name: HACS-zip к релизу
 # hacs.json declares zip_release + filename=houseplan.zip, so every release
 # (prereleases included) must carry the asset — HACS installs from it and
 # GitHub's public download counter becomes a free per-version install metric
@@ -19,6 +19,7 @@ permissions:
  contents: write
 jobs:
  zip:
+    name: Собрать houseplan.zip и приложить к релизу
    runs-on: ubuntu-latest
    steps:
      - name: Resolve tag
@@ -33,7 +34,7 @@ jobs:
      - name: Build houseplan.zip (contents of custom_components/houseplan at zip root)
        run: cd custom_components/houseplan && zip -qr ../../houseplan.zip .
      - name: Sanity check
-        run: unzip -l houseplan.zip | grep -q "manifest.json"
+        run: node scripts/verify-houseplan-zip.mjs houseplan.zip custom_components/houseplan/frontend
      - name: Upload asset
        env:
          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
@@ -1,4 +1,4 @@
-name: Release
+name: "Релиз: ассеты после зелёной проверки"
 on:
  release:
    types: [published]
@@ -14,6 +14,7 @@ jobs:
  # Needs a push with a token that has the `workflow` scope (the ordinary
  # Personal Access Token used for `git push` refuses workflow file updates).
  gate:
+    name: "Гейт: зелёная Проверка точного SHA тега"
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v7
@@ -42,8 +43,9 @@ jobs:
        run: |
          set -euo pipefail
          SHA=$(git rev-parse HEAD)
-          node scripts/release-gate.mjs "$SHA" --workflow=performance.yml --label="Full Performance"
+          node scripts/release-gate.mjs "$SHA" --workflow=performance.yml --label="Полные бенчмарки производительности"
  build:
+    name: Сборка бандла и загрузка ассетов
    needs: gate
    runs-on: ubuntu-latest
    steps:
@@ -57,7 +59,7 @@ jobs:
        if: ${{ !github.event.release.prerelease }}
        run: |
          npx playwright install --with-deps chromium
-          cp dist/houseplan-card.js demo/srv/assets/houseplan-card.js
+          node scripts/bundle-sync.mjs
          npm run continuity:screencast
      - name: Upload failed continuity frames
        if: ${{ failure() && !github.event.release.prerelease }}
@@ -65,12 +67,14 @@ jobs:
        with:
          name: continuity-screencast
          path: artifacts/continuity-screencast
-      - run: cp dist/houseplan-card.js custom_components/houseplan/frontend/
+      - name: Verify the complete committed frontend tree
+        run: node scripts/bundle-tree.mjs dist custom_components/houseplan/frontend
      - name: Attach card to release
        uses: softprops/action-gh-release@v3
        with:
          files: dist/houseplan-card.js
  hacs-discovery:
+    name: HACS-видимость пре-релиза (порядок бет)
    # HACS 2.0.x takes the first prerelease in GitHub's response instead of
    # sorting SemVer. A valid asset can therefore be invisible to beta users
    # (beta.10 appeared after beta.9). Keep the release asset, but
@@ -1,4 +1,4 @@
-name: Validate
+name: Проверка (CI)

 on:
  push:
@@ -6,6 +6,12 @@ on:
    # to the same SHA and must not duplicate the browser validation jobs.
    branches:
      - '**'
+    # Документы ревью конвейер пишет пачками — 340 коммитов за месяц, и каждый
+    # гонял лёгкую половину Validate впустую (≈15 часов раннера в месяц).
+    # Релизного кандидата это не затрагивает: тег всегда стоит на коммите,
+    # который меняет версию и бандл, а не только `docs/reviews/**`.
+    paths-ignore:
+      - 'docs/reviews/**'
  pull_request:

 # A new push supersedes an unfinished validation for the same branch or PR.
@@ -15,23 +21,57 @@ concurrency:
  cancel-in-progress: true

 jobs:
-  docs:
+  # Четыре секундных скрипта жили четырьмя job, каждая со своим checkout и
+  # setup-node ради нескольких секунд работы (#336). Здесь они шаги одной job.
+  #
+  # Независимость при этом сохранена намеренно: у каждого шага
+  # `continue-on-error`, поэтому упавший провенанс не прячет результат
+  # процессного гейта, а вердикт в конце падает, если упал хоть один. Прежняя
+  # запись «job независимый: краснеет сам и не роняет остальные» продолжает
+  # действовать — на уровне шагов, с той же гранулярностью в логе.
+  preflight:
+    name: "Предполётные проверки: документация, провенанс, процесс"
    runs-on: ubuntu-latest
    steps:
+      # `blob:none` при полной истории (#345): этой job нужны сообщения
+      # коммитов, трейлеры и ИМЕНА изменённых файлов, а не содержимое старых
+      # ревизий. Полный клон стоит 215 МБ против 26 МБ, и 32% этого веса —
+      # скриншоты документации, переснятые 196 раз.
+      #
+      # Коммиты и деревья скачиваются целиком, поэтому диапазоны и `merge-base`
+      # работают как раньше. Единственная догрузка по требованию здесь —
+      # `git show origin/main:.github/workflows/process.yml`: один блоб.
      - uses: actions/checkout@v7
+        with: { fetch-depth: 0, filter: 'blob:none' }
      - uses: actions/setup-node@v7
        with: { node-version: 22 }
-      - name: Validate public documentation
+
+      - name: "Документация: гайды, ченджлоги, скриншот-индекс"
+        id: docs
+        continue-on-error: true
        run: node scripts/check-docs.mjs --external

-  provenance:
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@v7
-        with: { fetch-depth: 0 }
-      - uses: actions/setup-node@v7
-        with: { node-version: 22 }
-      - name: Validate commit trailers and hook mode
+      # Конвейер читает `process.yml` из ветки по умолчанию, поэтому файл обязан
+      # совпадать в `main` и `dev`. До этой проверки совпадение держалось на
+      # дисциплине: каждая правка требовала двух пушей и ручной сверки.
+      - name: "Процесс: process.yml идентичен в main и dev"
+        id: workflow_sync
+        continue-on-error: true
+        run: |
+          git fetch --quiet origin main dev
+          if diff <(git show origin/main:.github/workflows/process.yml) \
+                  <(git show origin/dev:.github/workflows/process.yml); then
+            echo "main и dev идентичны"
+          else
+            echo "РАСХОЖДЕНИЕ: process.yml в main и dev различаются."
+            echo "Конвейер исполняет версию из ветки по умолчанию, поэтому"
+            echo "правку нужно отправить в обе ветки."
+            exit 1
+          fi
+
+      - name: "Провенанс коммитов: трейлеры и эталоны"
+        id: provenance
+        continue-on-error: true
        env:
          EVENT_NAME: ${{ github.event_name }}
          BEFORE_SHA: ${{ github.event.before }}
@@ -42,19 +82,14 @@ jobs:
          git fetch -q origin "refs/heads/$DEVELOPMENT_BRANCH:refs/remotes/origin/$DEVELOPMENT_BRANCH"
          node scripts/validate-commit-provenance.mjs --check-hook-mode --github-range

-  # Догоняющая проверка процесса (PROCESS.md §10.3). Хуки ловят нарушение на
-  # машине автора, но их можно обойти `--no-verify`, а коммиты идут прямо в dev
-  # без PR — GitHub на своей стороне не блокирует ничего. Это последнее место,
-  # где нарушение правила №1 ловится машиной. Job независимый: краснеет сам и
-  # не роняет остальные, откат — удалить его отсюда, скрипт остаётся рабочим.
-  process-gate:
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@v7
-        with: { fetch-depth: 0 }
-      - uses: actions/setup-node@v7
-        with: { node-version: 22 }
-      - name: Process gate
+      # Догоняющая проверка процесса (PROCESS.md §10.3). Хуки ловят нарушение на
+      # машине автора, но их можно обойти `--no-verify`, а коммиты идут прямо в
+      # dev без PR — GitHub на своей стороне не блокирует ничего. Это последнее
+      # место, где нарушение правила №1 ловится машиной. Откат — удалить шаг,
+      # скрипт остаётся рабочим.
+      - name: "Процессный гейт: диапазон, трейлеры, статусы issue"
+        id: process_gate
+        continue-on-error: true
        env:
          EVENT_NAME: ${{ github.event_name }}
          BEFORE_SHA: ${{ github.event.before }}
@@ -68,6 +103,33 @@ jobs:
          git fetch -q origin "refs/heads/$DEVELOPMENT_BRANCH:refs/remotes/origin/$DEVELOPMENT_BRANCH"
          node scripts/process-gate.mjs --github-range --issues

+      # Вердикт обязан быть громким и перечислять всё упавшее сразу: иначе
+      # слияние job стоило бы автору лишнего круга «починил одно — узнал о
+      # втором».
+      - name: Вердикт предполётных проверок
+        env:
+          DOCS: ${{ steps.docs.outcome }}
+          WORKFLOW_SYNC: ${{ steps.workflow_sync.outcome }}
+          PROVENANCE: ${{ steps.provenance.outcome }}
+          PROCESS_GATE: ${{ steps.process_gate.outcome }}
+        run: |
+          fail=0
+          check() {
+            if [ "$2" = "success" ]; then
+              echo "ok   $1"
+            else
+              echo "FAIL $1 ($2)"
+              echo "- **$1**: $2" >> "$GITHUB_STEP_SUMMARY"
+              fail=1
+            fi
+          }
+          echo "### Предполётные проверки" >> "$GITHUB_STEP_SUMMARY"
+          check "документация" "$DOCS"
+          check "process.yml в main и dev" "$WORKFLOW_SYNC"
+          check "провенанс коммитов" "$PROVENANCE"
+          check "процессный гейт" "$PROCESS_GATE"
+          exit $fail
+
  # Классификация изменённых путей: тяжёлые job идут только там, где менялось
  # относящееся к ним. НА DEV ФИЛЬТРОВ НЕТ: гейт беты принимает «зелёный Validate
  # на точном SHA», и если объём прогона зависит от diff, «зелёный» перестаёт
@@ -76,14 +138,17 @@ jobs:
  # экономят на ветках задач, где Validate — ранний сигнал: настоящую приёмку
  # там делает код-ревью, которое гоняет гейты само (#127).
  changes:
+    name: Классификация изменённых файлов
    runs-on: ubuntu-latest
    outputs:
      frontend: ${{ steps.classify.outputs.frontend }}
      backend: ${{ steps.classify.outputs.backend }}
      integration: ${{ steps.classify.outputs.integration }}
    steps:
+      # `git diff --name-only` содержимого файлов не читает вовсе, поэтому
+      # блобы истории этой job не нужны ни на одном шаге (#345).
      - uses: actions/checkout@v7
-        with: { fetch-depth: 0 }
+        with: { fetch-depth: 0, filter: 'blob:none' }
      - id: classify
        env:
          EVENT_NAME: ${{ github.event_name }}
@@ -100,10 +165,28 @@ jobs:
          zero=$(printf '%040d' 0)
          base="$BEFORE_SHA"
          if [ "$EVENT_NAME" = "pull_request" ]; then base="$BASE_SHA"; fi
+          # #347: непустой before, которого больше не существует, — это
+          # force-push (ребейз/аменд переписал историю ветки). Диапазон в
+          # этом случае НЕ угадывается: merge-base после переписанной истории
+          # уже выдавал «изменились только два doc-файла» при реальном диффе
+          # в custom_components/**, и тяжёлые job тихо скипались, а общий
+          # статус рана оставался success — ровно класс тихого пропуска
+          # #171/#207. Force-push редок, полный прогон дешевле ложного
+          # «зелёного».
+          if [ -n "$base" ] && [ "$base" != "$zero" ] \
+             && ! git cat-file -e "$base" 2>/dev/null; then
+            echo "force-push: before=$base переписан — полный прогон без классификации"
+            {
+              echo "### Классификация изменённых файлов"
+              echo "\`before\` (=$base) переписан force-push'ем: диапазон недоказуем,"
+              echo "все тяжёлые job запускаются без фильтра путей (#347)."
+            } >> "$GITHUB_STEP_SUMMARY"
+            printf 'frontend=true\nbackend=true\nintegration=true\n' >> "$GITHUB_OUTPUT"
+            exit 0
+          fi
          # Новая ветка: before нулевой, диапазон считается от merge-base с dev,
          # иначе классифицировалась бы вся история.
-          if [ -z "$base" ] || [ "$base" = "$zero" ] \
-             || ! git cat-file -e "$base" 2>/dev/null; then
+          if [ -z "$base" ] || [ "$base" = "$zero" ]; then
            git fetch -q origin dev
            base=$(git merge-base origin/dev "$HEAD_SHA" || echo "$HEAD_SHA~1")
          fi
@@ -130,6 +213,7 @@ jobs:
  # CARD_VERSION и package.json входят в фингерпринт, поэтому ключи кандидата
  # заведомо новые и полный набор гейтов перед бетой и релизом идёт всегда.
  reuse:
+    name: "Переиспользование: это дерево уже проверено"
    runs-on: ubuntu-latest
    outputs:
      smoke: ${{ steps.probe.outputs.smoke }}
@@ -209,6 +293,7 @@ jobs:
          waive backend "$BACKEND"

  hacs:
+    name: "HACS: валидация репозитория"
    needs: changes
    if: needs.changes.outputs.integration == 'true'
    runs-on: ubuntu-latest
@@ -220,6 +305,7 @@ jobs:
          category: integration

  hassfest:
+    name: "Hassfest: манифест интеграции"
    needs: changes
    if: needs.changes.outputs.integration == 'true'
    runs-on: ubuntu-latest
@@ -229,11 +315,15 @@ jobs:
        uses: home-assistant/actions/hassfest@master

  frontend:
+    name: "Фронтенд: типы, юниты, мутанты, синхрон бандла"
    needs: changes
    if: needs.changes.outputs.frontend == 'true'
    runs-on: ubuntu-latest
    steps:
+      # Полная история без блобов (#342): гейт «новый код не добавляет any»
+      # diff-aware, ему нужен диапазон, а содержимое старых ревизий — нет.
      - uses: actions/checkout@v7
+        with: { fetch-depth: 0, filter: 'blob:none' }
      - uses: actions/setup-node@v7
        with:
          node-version: 22
@@ -241,20 +331,80 @@ jobs:
      - run: npm ci
      - name: Typecheck
        run: npm run typecheck
+      # Долг типизации снимается при извлечении подсистем (#34), а не разовой
+      # заменой: в src/** его 1034 вхождения в 49 файлах. Гейт держит приращение
+      # на нуле — судит только добавленные строки (#342).
+      - name: "Новый код не добавляет any"
+        env:
+          EVENT_NAME: ${{ github.event_name }}
+          BEFORE_SHA: ${{ github.event.before }}
+          BASE_SHA: ${{ github.event.pull_request.base.sha }}
+          HEAD_SHA: ${{ github.sha }}
+          REF: ${{ github.ref }}
+        run: |
+          set -euo pipefail
+          git fetch -q origin dev
+          zero=$(printf '%040d' 0)
+          base="$BEFORE_SHA"
+          if [ "$EVENT_NAME" = "pull_request" ]; then base="$BASE_SHA"; fi
+          # Пуш прямо в dev: диапазон — то, что этот пуш добавил. Новая ветка или
+          # перезаписанная история: точки отсчёта нет, берём merge-base с dev.
+          if [ "$REF" != "refs/heads/dev" ] || [ -z "$base" ] || [ "$base" = "$zero" ] \
+             || ! git cat-file -e "$base" 2>/dev/null; then
+            base=$(git merge-base origin/dev "$HEAD_SHA" || echo "")
+          fi
+          if [ -z "$base" ]; then
+            echo "не нашёл базу диапазона — гейт пропущен, это увидит следующий пуш"
+            exit 0
+          fi
+          node scripts/no-new-any.mjs --base "$base" --head "$HEAD_SHA"
      - name: Unit tests
        run: npm test
      - name: Build
        run: npm run build
-      - name: Card bundle snapshots in sync
+      # Entry, manifest and every content-hashed chunk are one artifact (#337).
+      - name: Card bundle trees in sync
        run: |
-          cmp dist/houseplan-card.js custom_components/houseplan/frontend/houseplan-card.js
-          cmp dist/houseplan-card.js demo/srv/assets/houseplan-card.js
+          node scripts/bundle-tree.mjs dist custom_components/houseplan/frontend
+          npm run bundle:budget
+      # Бандл собирается один раз и уезжает артефактом (#336). Прежде каждая из
+      # пяти браузерных job собирала его заново: `bundle:sync` — это `tsc
+      # --noEmit` плюс rollup, около минуты на job.
+      #
+      # Подмену артефакта ловить не нужно отдельной проверкой: `assertFreshDemoBundle`
+      # сверяет вшитый в бандл отпечаток с `sourceFingerprint` выкачанного
+      # дерева, и каждая браузерная job делает это перед первым кадром.
+      - name: Выложить бандл для браузерных job
+        uses: actions/upload-artifact@v7
+        with:
+          name: card-bundle
+          path: dist/
+          retention-days: 1
+          if-no-files-found: error
+      # Несколько браузерных контрактов импортируют чистые функции из
+      # скомпилированного тестового дерева. Оно создаётся `npm test`, но не
+      # входит в production-бандл и потому едет отдельным артефактом (#336).
+      - name: Выложить тестовые модули для смоков
+        uses: actions/upload-artifact@v7
+        with:
+          name: card-test-build
+          path: test-build/
+          retention-days: 1
+          if-no-files-found: error

  smoke:
+    name: Смоки в браузере (шард ${{ matrix.shard }} из 3)
    # Gated on `frontend` so a typecheck failure does not burn browser minutes.
    needs: [frontend, reuse]
    if: needs.reuse.outputs.smoke != 'true'
    runs-on: ubuntu-latest
+    # Смоки шардируются: последовательный прогон занимал ~7.5 минут и был
+    # критическим путём всего Validate. Три шарда режут его примерно вдвое;
+    # цена — трижды `npm ci` и сборка, около двух оплаченных минут раннера.
+    strategy:
+      fail-fast: false
+      matrix:
+        shard: [1, 2, 3]
    steps:
      - uses: actions/checkout@v7
      - uses: actions/setup-node@v7
@@ -276,13 +426,36 @@ jobs:
      - name: Install pinned Chromium
        if: steps.pw.outputs.cache-hit != 'true'
        run: npx playwright install chromium
-      - name: Build a fresh bundle for the smokes
-        run: npm run build && cp dist/houseplan-card.js demo/srv/assets/houseplan-card.js
-      - name: Smoke suite
+      # Бандл приходит артефактом из job `frontend` (#336): та же сборка, но
+      # один раз на прогон. Свежесть проверяет сам продукт — `assertFreshDemoBundle`
+      # сверяет вшитый отпечаток с исходниками этого дерева.
+      - name: Забрать собранный бандл
+        uses: actions/download-artifact@v7
+        with:
+          name: card-bundle
+          path: dist
+      - name: Забрать тестовые модули
+        uses: actions/download-artifact@v7
+        with:
+          name: card-test-build
+          path: test-build
+      - name: Разложить бандл по копиям
+        run: node scripts/bundle-sync.mjs
+      - name: Smoke suite (шард ${{ matrix.shard }} из 3)
+        env:
+          SHARD: ${{ matrix.shard }}
+          SHARDS: '3'
        run: |
          fail=0
+          index=0
+          ran=0
          mkdir -p /tmp/smoke-logs
+          # Деление по порядковому номеру файла: список отсортирован, поэтому
+          # разбиение детерминировано и не зависит от времени прогона.
          for f in demo/smoke_*.mjs; do
+            index=$((index + 1))
+            if [ $(( (index - 1) % SHARDS + 1 )) -ne "$SHARD" ]; then continue; fi
+            ran=$((ran + 1))
            name=$(basename "$f" .mjs)
            if node "$f" > "/tmp/smoke-logs/$name.log" 2>&1; then
              echo "ok   $name"
@@ -292,18 +465,28 @@ jobs:
              fail=1
            fi
          done
+          echo "--- шард ${SHARD}/${SHARDS}: прогнано ${ran} из ${index}"
+          # Пустой шард — признак, что деление сломалось, а не что работы нет.
+          if [ "$ran" -eq 0 ]; then echo "шард пуст: проверьте деление"; exit 1; fi
          exit $fail
      - name: Upload smoke logs
        if: failure()
        uses: actions/upload-artifact@v7
        with:
-          name: smoke-logs
+          name: smoke-logs-${{ matrix.shard }}
          path: /tmp/smoke-logs
-      # Маркер пишется последним шагом: он существует только если всё выше
-      # прошло. Кэш сохраняется post-шагом, то есть тоже лишь при успехе job.
+
+  # Маркер переиспользования пишется ОДИН раз и только когда прошли все шарды:
+  # частично прогнанная матрица не имеет права выглядеть как выполненная работа.
+  smoke_done:
+    name: "Смоки: все шарды зелёные"
+    needs: [smoke, reuse]
+    if: needs.reuse.outputs.smoke != 'true'
+    runs-on: ubuntu-latest
+    steps:
      - name: Записать маркер успеха
        run: |
-          printf '%s\n' "smoke прогнана успешно" \
+          printf '%s\n' "smoke прогнана успешно (3 шарда)" \
            "SHA: ${{ github.sha }}" \
            "прогон: ${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }}" \
            > .reuse-marker
@@ -317,6 +500,7 @@ jobs:
          key: reuse-smoke-${{ needs.reuse.outputs.smoke_key }}

  golden:
+    name: Golden-кадры против принятых эталонов
    # Deterministic visual correctness stays in every prerelease gate: it is
    # inexpensive and catches a different class of regressions than timings.
    needs: [frontend, reuse]
@@ -343,8 +527,16 @@ jobs:
      - name: Install pinned Chromium
        if: steps.pw.outputs.cache-hit != 'true'
        run: npx playwright install chromium
-      - name: Build the exact source under review
-        run: npm run build && cp dist/houseplan-card.js demo/srv/assets/houseplan-card.js
+      # Бандл приходит артефактом из job `frontend` (#336): та же сборка, но
+      # один раз на прогон. Свежесть проверяет сам продукт — `assertFreshDemoBundle`
+      # сверяет вшитый отпечаток с исходниками этого дерева.
+      - name: Забрать собранный бандл
+        uses: actions/download-artifact@v7
+        with:
+          name: card-bundle
+          path: dist
+      - name: Разложить бандл по копиям
+        run: node scripts/bundle-sync.mjs
      - name: Capture or verify golden matrix
        id: golden
        run: |
@@ -379,6 +571,7 @@ jobs:
          key: reuse-golden-${{ needs.reuse.outputs.golden_key }}

  performance_smoke:
+    name: "Перф-смок: бюджет времени кадра"
    # Candidate-only catastrophic-regression guard for ordinary pushes and
    # prereleases. The expensive same-runner comparison lives in performance.yml.
    needs: [frontend, reuse]
@@ -409,14 +602,26 @@ jobs:
      - name: Install pinned Chromium
        if: steps.pw.outputs.cache-hit != 'true'
        run: npx playwright install chromium
-      - name: Build the exact candidate source
-        run: npm run build && cp dist/houseplan-card.js demo/srv/assets/houseplan-card.js
+      # Бандл приходит артефактом из job `frontend` (#336): та же сборка, но
+      # один раз на прогон. Свежесть проверяет сам продукт — `assertFreshDemoBundle`
+      # сверяет вшитый отпечаток с исходниками этого дерева.
+      - name: Забрать собранный бандл
+        uses: actions/download-artifact@v7
+        with:
+          name: card-bundle
+          path: dist
+      - name: Разложить бандл по копиям
+        run: node scripts/bundle-sync.mjs
      - name: Capture the heaviest Glow state
        run: |
          npm run benchmark:glow -- --profile=large-house-glow-overlay-v1 --variants=60 --samples=3 --warmups=1 --output=artifacts/performance-smoke/candidate.json
      - name: Enforce absolute smoke ceilings
        run: |
          npm run benchmark:compare -- --absolute-only --budgets=demo/performance/budgets-glow-smoke.json --candidate=artifacts/performance-smoke/candidate.json --output=artifacts/performance-smoke/comparison.json
+      # #330 AC7: перф-контракт ограничений стыков — быстрый (без браузера),
+      # ловит возврат квадратичных путей в оба зеркала прямо на пуше.
+      - name: Бюджеты ограничений стыков (#330)
+        run: npm run benchmark:junction-limits
      - name: Upload performance smoke report
        if: always()
        uses: actions/upload-artifact@v7
@@ -441,6 +646,7 @@ jobs:
          key: reuse-performance_smoke-${{ needs.reuse.outputs.performance_smoke_key }}

  backend:
+    name: "Бэкенд: pytest в Home Assistant"
    needs: [changes, reuse]
    if: needs.changes.outputs.backend == 'true' && needs.reuse.outputs.backend != 'true'
    runs-on: ubuntu-latest
@@ -7,3 +7,10 @@ __pycache__/
 .venv-backend/
 artifacts/
 .agents/
+
+# Копия бандла для стенда: её собирает `npm run bundle:sync`, а в репозитории
+# она только росла — 364 версии по 1.16 МБ за семь недель (#255). Обязательных
+# копий две: `dist/` (артефакт сборки) и `custom_components/` (её ставит HACS).
+demo/srv/assets/houseplan-card.js
+demo/srv/assets/houseplan-assets.json
+demo/srv/assets/houseplan-assets/
@@ -2,7 +2,8 @@

 House Plan is one HACS package with two parts plus a demo harness:

- **Lovelace card** (`src/`, TypeScript + Lit) — the primary product, bundled to `dist/houseplan-card.js`.
+- **Lovelace card** (`src/`, TypeScript + Lit) — the primary product, bundled to
+  the entry, manifest and hashed chunks under `dist/`.
 - **Storage integration** (`custom_components/houseplan/`, Python) — the Home Assistant backend.
 - **Demo harness** (`demo/`) — a self-contained Playwright page (`demo/srv/demo.html`) that renders the card against a fake `hass`, used for screenshots and the `smoke_*.mjs` end-to-end suite.

@@ -40,10 +41,16 @@ task records: problem, scope, acceptance criteria and discussion.
 of a status and `rejected` on a closed issue. Exactly one `S*` label per open
 issue. Labels are the whole of it: GitHub Projects is no longer used.

-Two shortcuts exist for small work. `small` — the light track: the spec lives in
-the issue body and its review is a comment. `trivial` — the short track: no spec
-stage at all, `S2-analysis` straight to `S5-ready`, with the AC written into the
-issue body first. `trivial` requires a bug confined to one surface with no new UX
+**The light track is the default, not a shortcut** (owner's decision 2026-08-27,
+issue #338). `small` — the spec lives in the issue body and its review is a
+comment. Analysis names the `small` criterion the task *fails* when it takes the
+full track; "ordinary track" without a named criterion is not a justification.
+The threshold itself did not move — only which side carries the proof. The full
+track stays what it was for geometry, config migrations and public contracts,
+where a criterion is broken plainly and saying which one is easy.
+
+`trivial` — the short track: no spec stage at all, `S2-analysis` straight to
+`S5-ready`, with the AC written into the issue body first. `trivial` requires a bug confined to one surface with no new UX
 contract, no migration, no i18n, no perf or touch impact, at most three checkable
 AC, **and expected behaviour already on record** — nothing left to decide. Code
 review is never skipped on either track; it is what stands in for testing.
@@ -87,7 +94,7 @@ Start with the spec?" is the correct answer, not a smaller patch.
 | **A — product** | `src/**`, `custom_components/houseplan/**/*.py`, `manifest.json`, `hacs.json`, i18n, `custom_components/**/translations/**` | yes |
 | **B — gates and tooling** | `test/**`, `tests_backend/**`, `demo/**`, `scripts/**`, `.github/workflows/**`, `rollup.config.mjs`, `tsconfig*.json` | yes; may reuse the issue it covers |
 | **C — documentation** | `docs/**`, `README*`, `CHANGELOG*`, `AGENTS.md` | not if it is part of its issue's DoD |
-| **D — generated** | `dist/**`, `custom_components/houseplan/frontend/**`, `demo/srv/assets/houseplan-card.js`, `demo/golden/baselines/**` | never changes on its own |
+| **D — generated** | `dist/**`, `custom_components/houseplan/frontend/**`, `demo/golden/baselines/**` | never changes on its own. The stand copy `demo/srv/assets/**` is no longer committed (#255): build the complete tree with `npm run bundle:sync` |

 The table above is a summary; `PROCESS.md` §1 is the authority and now covers the
 configuration files this one omits — `package.json`, `package-lock.json`,
@@ -274,7 +281,9 @@ the owner splits the task, rejects it, or arbitrates.

 On the light track (`small`: complexity ≤3, one surface, no config migration, no
 new UX contract, no perf or touch impact — all at once) the spec lives in the issue
-body and the spec review is a comment. Code review is never skipped.
+body and the spec review is a comment. Code review is never skipped. This track is
+the default: taking the full one means naming the criterion above that the task
+does not meet.

 ## Specs

@@ -317,12 +326,12 @@ npm run inventory        # the only correct way to get test counts

 Never copy test counts into documents by hand; they go stale in days.

-After building, keep all three bundle snapshots in sync — CI compares them
-byte-for-byte:
+After building, keep the complete manifest-driven bundle trees in sync — CI
+verifies every listed file byte-for-byte:

 ```
-cp dist/houseplan-card.js custom_components/houseplan/frontend/houseplan-card.js
-cp dist/houseplan-card.js demo/srv/assets/houseplan-card.js
+npm run bundle:sync   # dist → custom_components + demo/srv/assets (#255)
+npm run bundle:budget # initial View graph <= 256000 B gzip (#337)
 ```

 During the implementation cycle the fast gates always run. Since 2026-08-14 the
@@ -9,6 +9,44 @@ User-visible changes go into **both** changelogs in the same commit:
 `docs/CHANGELOG.md` (English) and `docs/CHANGELOG.ru.md` (Russian). Entries
 older than v1.42.0 exist only in the English file — no need to backfill them.

+## Translations
+
+A shipped UI language has three matching parts:
+
+1. `src/i18n/<code>.json` for the card;
+2. `custom_components/houseplan/translations/<code>.json` for the Home Assistant
+   integration;
+3. one registry entry (code, native label and eager dictionary or lazy loader)
+   in `src/i18n/registry.ts`.
+
+Use the canonical Home Assistant/BCP 47 language tag as `<code>` (for example,
+`fr` or `pt-BR`) and use that exact spelling for both JSON filenames. Lookup is
+case-insensitive and also accepts `_` from legacy locale sources.
+
+The registry drives language resolution, the visual-editor selector and parity
+tests. The tests reject missing or extra locale files; frontend dictionaries
+also fail on mismatched keys, empty values and changed placeholders.
+Placeholders such as `{name}` and `{n}` are a contract: do not translate, add
+or remove them.
+
+English and Russian are synchronous fallback/legacy locales. German is the
+reference lazy third-locale implementation: its module carries the same build
+fingerprint as the entry bundle, has one content-hashed retry URL and is listed
+under `lazyLocaleFiles` in `houseplan-assets.json`. New sizeable locales should
+follow that path unless a measured initial-bundle budget explicitly justifies
+an eager import. Extend the runtime, manifest, file/key/placeholder parity and
+regional-locale tests together; never bypass the registry by importing a locale
+directly in a component.
+
+The current `subst()` helper does not implement plural rules. Phrase strings so
+their grammar does not depend on the numeric value (for example, use a neutral
+label followed by `{n}` rather than an English singular/plural pair).
+
+Adding a UI locale does not automatically create another full documentation
+set; maintain the existing English and Russian documentation according to the
+project's normal rules. Right-to-left layout is a separate product project,
+because the plan canvas and editors cannot be mirrored by translations alone.
+
 ## Where to ask

 Not sure whether something is a bug, or just want to discuss an idea before
@@ -28,7 +66,7 @@ issue, but they do not replace it or maintain a separate checklist.
 ## Five-minute setup

 ```bash
-git clone https://github.com/Matysh/houseplan-card && cd houseplan-card
+git clone --filter=blob:none https://github.com/Matysh/houseplan-card && cd houseplan-card
 npm ci                    # frontend toolchain
 npm run typecheck         # tsc --noEmit (strict)
 npm test                  # node:test — pure logic, i18n parity, tap-action security
@@ -37,6 +75,24 @@ pip install pytest voluptuous && python -m pytest tests_backend -q   # pure back
 npm install                # also installs .githooks through the prepare script
 ```

+### Why `--filter=blob:none` (#345)
+
+A full clone is **215 MB of `.git`**; a blobless one is **26 MB** — measured, not
+estimated. Both carry all 1611 commits and all 182 tags, so ranges, `merge-base`
+and `git diff` across history work identically; `git diff origin/dev~3..origin/dev`
+in a blobless clone takes about a second and grows `.git` by one megabyte.
+
+The difference is that historical *file contents* are fetched only if something
+actually asks for them. That matters here because 32% of the pack is documentation
+screenshots — ten PNGs re-captured 196 times — and another sizeable share is the
+committed bundle, one 1.16 MB file per product change. Almost nobody ever reads an
+old revision of either.
+
+Drop the flag if you work offline with history, or need `git log -p` over the whole
+tree repeatedly. Do **not** replace it with `--depth=1`: a shallow clone is about
+the same size but has no `merge-base`, so the process gate, `smoke-select` and
+every `origin/dev..HEAD` range stop working.
+
 The HA-harness backend tests (`tests_backend/test_ha_*.py`) need Python ≥3.13 and
 `pytest-homeassistant-custom-component home-assistant-frontend`; CI runs them on
 every push — locally they are skipped when `homeassistant` is not importable.
@@ -45,8 +101,8 @@ every push — locally they are skipped when `homeassistant` is not importable.

 - **Docs in the same commit**: CHANGELOG entry for user-visible changes;
  `docs/STATUS.md` for state changes; `docs/DEVELOPMENT.md` for new gotchas.
- Every UI string goes through `src/i18n/<lang>.json` (tests enforce en/ru key parity).
-  Adding a language = adding one JSON file + registering it in `src/i18n.ts`.
+- Every UI string goes through `src/i18n/<lang>.json`; follow the
+  [Translations](#translations) flow for registry and backend parity.
 - The built card must be committed in sync: `cp dist/houseplan-card.js
  custom_components/houseplan/frontend/` (CI compares them byte-for-byte).
 - Tap actions have a security model (locks/alarms never toggle from the plan) —
@@ -35,7 +35,7 @@
 | **A. Продукт** | `src/**`, `custom_components/houseplan/**/*.py`, `manifest.json`, `hacs.json`, `src/i18n/*.json`, `custom_components/**/translations/*` | **Да, обязательно.** Только из «Готово к разработке» или дальше |
 | **B. Гейты и инструменты** | `test/**`, `tests_backend/**`, `demo/**`, `scripts/**`, весь `.github/**`, `.githooks/**`, `rollup.config.mjs`, `tsconfig*.json`, `package.json`, `package-lock.json`, `pytest.ini`, `.gitignore`, `.gitattributes` | **Да.** Может использовать issue того изменения, которое покрывает; самостоятельная работа над гейтом получает свой issue (тип `tech-debt`) |
 | **C. Документация** | `docs/**`, `README*`, `CHANGELOG*`, `AGENTS.md`, `CONTRIBUTING.md`, `PROCESS*.md`, `LICENSE`, `(CODE\|SPEC)-REVIEW-*.md` | Документирование A/B в том же коммите — часть DoD своего issue. Самостоятельная работа над документацией — свой issue |
-| **D. Сгенерированное** | `dist/**`, `custom_components/houseplan/frontend/**`, `demo/srv/assets/houseplan-card.js`, `demo/golden/baselines/**` | Никогда не меняется само по себе. Коммит **только** класса D допустим лишь как релизный промоушен или как принятие эталонов с доказательством ревью |
+| **D. Сгенерированное** | `dist/**`, `custom_components/houseplan/frontend/**`, `demo/golden/baselines/**` (копия стенда `demo/srv/assets/houseplan-card.js` с #255 не коммитится вовсе) | Никогда не меняется само по себе. Коммит **только** класса D допустим лишь как релизный промоушен или как принятие эталонов с доказательством ревью |

 Практический смысл таблицы: «я только поправил тест» и «я только пересобрал
 бандл» перестают быть лазейками.
@@ -101,7 +101,9 @@ S1-new → S2-analysis → S3-spec → S4-spec-review ⟲ → S5-ready →
  5. приоритет **P1/P2/P3**;
  6. тип: баг / фича / техдолг;
  7. затронутые поверхности (модули, диалоги, бэкенд, i18n);
-  8. трек: обычный / `small` / `trivial` по критериям §5 и §5.1.
+  8. трек — **по умолчанию `small`** (§5). Если задача идёт полным треком,
+     называется критерий §5, который она не проходит: «обычный трек» без
+     названного критерия обоснованием не является.
 - **Оценки и приоритет ставятся метками сразу, согласие не запрашивается.**
  Комментарий аналитики — уведомление, а не запрос: **молчание владельца —
  согласие**, несогласие он выражает правкой меток или комментарием, и это не
@@ -194,6 +196,12 @@ S1-new → S2-analysis → S3-spec → S4-spec-review ⟲ → S5-ready →
 - **High блокируют.** Medium **в скоупе задачи** чинится в текущем issue:
  без High это жёлтый вердикт и возврат автору, фикс проходит повторный цикл.
  Medium **вне скоупа** — отдельный issue (#202).
+- **Вердикт привязан к SHA (#312).** Все числа и факты отчёта сверяются с
+  `git rev-parse HEAD` непосредственно перед подведением итогов, а не с SHA,
+  зафиксированным в начале разбора: во время ревью в ветку может прилететь
+  fix-up. Серверный стопор — шаг слияния конвейера сверяет вершину ветки с
+  SHA материала ревью (допустим только собственный doc-коммит публикации
+  поверх) и при расхождении отменяет слияние с возвратом в `S6-in-progress`.
 - **Выход:** очередь на пре-релиз либо возврат в «В разработке», не более
  4 циклов (§4). Второй и последующие циклы разбираются по дельте (§2.10).

@@ -281,7 +289,9 @@ S1-new → S2-analysis → S3-spec → S4-spec-review ⟲ → S5-ready →
   правка. Блокирующая находка отправляет текущий issue в «Заблокировано».
 10. **Каждый коммит класса A и B несёт трейлер `Issue: #NN`**, ветка называется
    `issue/NN-slug`, а `User-Visible: yes` требует правок в **обоих** changelog в
-    том же коммите.
+    том же коммите. После `cherry-pick -x` служебная строка `(cherry picked
+    from ...)` должна оставаться выше финального блока трейлеров: перед push
+    проверяем порядок через `git show -s --format=full HEAD`.
 11. **Документация — в том же коммите, что поведение.** Отдельным «допишу потом»
    коммитом документация не бывает.
 12. **Сгенерированное не коммитится само по себе.** Только релизный промоушен или
@@ -340,9 +350,26 @@ S1-new → S2-analysis → S3-spec → S4-spec-review ⟲ → S5-ready →

 ---

-## 5. Лёгкий трек (метка `small`)
+## 5. Лёгкий трек (метка `small`) — путь по умолчанию

-**Критерии — все одновременно:**
+Умолчание изменено решением владельца 2026-08-27, issue #338. Прежде полный трек
+был бесплатен, а выбор лёгкого требовал обоснования. Фактическая цена: **2.9
+ревью-документа на задачу** в среднем и до шести на одну issue (#329, #316,
+#290) — при том что Medium-находки всё равно чинятся в той же задаче, без
+отдельного цикла.
+
+**Порог не изменился.** Критерии ниже те же и по-прежнему обязательны все
+одновременно. Изменилась сторона доказательства: теперь обосновывается не выбор
+лёгкого трека, а отказ от него — в `S2-analysis` называется критерий, который
+задача не проходит. Полный трек остаётся тем, чем был, для геометрии, миграций
+конфига и публичных контрактов: там критерии нарушаются сами, и назвать
+нарушенный несложно.
+
+Инверсия умолчания не отменяет ничего из §5 ниже и ничего из §4: бюджет четырёх
+циклов, арбитраж владельца, обязательность ТЗ на полном треке и правило «ревью
+до мержа» остаются как были. Меняется только стоимость пути по умолчанию.
+
+**Критерии — все одновременно; нарушенный называется явно:**

 - сложность и риск ≤ 3;
 - одна поверхность (один диалог, один модуль, один эндпоинт);
@@ -537,19 +564,33 @@ issue #NN
 npx tsc --noEmit
 npm test
 npm run build && cmp dist/houseplan-card.js custom_components/houseplan/frontend/houseplan-card.js \
-              && cmp dist/houseplan-card.js demo/srv/assets/houseplan-card.js
+              # копия стенда собирается `npm run bundle:sync`, в репозитории её нет (#255)
 node scripts/smoke-select.mjs --base origin/dev --head HEAD   # какие смоки относятся к диффу
 node demo/smoke_<целевые>.mjs
+node scripts/no-new-any.mjs --base origin/dev --head HEAD     # новый код не добавляет any
 npm run golden:verify                 # если менялся визуал
 node scripts/check-docs.mjs           # если менялся src/**
+node scripts/model-invariants.mjs --config <экспорт>   # если правилась геометрия или ссылки
 python -m pytest tests_backend -q     # py3.13, если менялся бэкенд
 ```

+**Новый код не добавляет `any`** (#342). В `src/**` уже 1034 вхождения явного
+`any` в 49 файлах; перетипизировать это одним заходом — месяц риска ради нуля
+пользовательской ценности, поэтому долг снимается при плановом извлечении
+подсистем (#34), а не разовой заменой. Гейт `scripts/no-new-any.mjs` судит
+**только добавленные строки**: существующий долг на нетронутой строке законен,
+правка строки со старым `any` — новая ответственность. Исключение объявляется на
+той же строке, `// any-ok: <конкретная причина>`; голый маркер и причины вида
+«todo» не проходят. Текст разбирается парсером TypeScript, поэтому слово «any» в
+комментарии, строке или идентификаторе ложных срабатываний не даёт.
+
 **Объём гейтов на код-ревью соразмерен задаче** (issue #127). Всегда:
 `typecheck`, `npm test`, `npm run build` со сверкой трёх копий бандла, а при
 любом diff'е по `src/**` — ещё и `node scripts/check-docs.mjs`. По
-необходимости, определяемой diff'ом и AC: браузерные смоки (их 167 — прогон всех
-уместен только когда задача задевает всё; какие относятся к диффу, печатает
+необходимости, определяемой diff'ом и AC: браузерные смоки (сколько их —
+считает `ls demo/smoke_*.mjs | wc -l`, вшитое число здесь трижды отставало от
+дерева; прогон всех уместен только когда задача задевает всё; какие относятся к
+диффу, печатает
 `node scripts/smoke-select.mjs --base origin/dev --head HEAD`, и его вывод
 прикладывается к ревью вместе с решением по каждой строке), `golden:verify` при изменении видимого
 результата, `pytest tests_backend` при правках в Python, performance-профили при
@@ -575,6 +616,17 @@ demo/docs/capture.mjs`, коммит вместе с задачей.
 какие нет и почему. Непрогнанный гейт становится видимым решением, а не молчаливым
 пропуском.

+**Одно число — один источник.** Любая величина, которую пользователь видит
+дважды — превью против записи, подпись против площади, подсветка инструмента
+против сохранённого значения, — обязана считаться в одном месте. Три дефекта
+подряд имели ровно эту причину: #234 (резинка показывала 12 см, запись хранила
+24), #233 (подпись мерила по осевым линиям, площадь рядом — по полу) и способ,
+которым #234 нашли (подсветка «Толщины» врала согласованно с записью). Ревьюер
+отвечает на вопрос прямо: какое число в этом диффе видно дважды и один ли у него
+источник. Механическая часть правила закреплена тестом
+`test/single-source-numbers.test.mjs` — строку с единицей измерения собирает
+только канонический форматтер; смысловая часть остаётся за ревью.
+
 **Гейт беты** (условие закрытия issue): CI Validate зелёный на точном SHA тега.

 Часть гейтов запускается только здесь, то есть **после** пройденного код-ревью.
@@ -799,6 +851,28 @@ S7-code-review → код-ревью → слияние в dev → S8-merged л
 никто не может выйти и о котором никто не узнает, для конвейера хуже громкой
 ошибки.

+**Ветка приводится к `dev` до ревью, а не после** (#257). Раньше ревью читало ветку
+как есть, а слияние делало ребейз — проверенный SHA и слитый SHA были разными
+коммитами. Пока расхождение с `dev` текстовое, ребейз упирается в конфликт и это
+видно; смысловое расхождение git склеивает молча, и в `dev` уезжает комбинация,
+которую ревьюер не читал. Именно так пришёл регресс #234. Шаг перед ревью делает
+одно из трёх:
+
+- ветка уже содержит весь `dev` — ничего;
+- отстала и ребейзится чисто — ребейз, `push --force-with-lease`, ревью по
+  приведённому состоянию. Факт ребейза передаётся в промпт, чтобы сработало
+  правило §7.2 о полном разборе вместо дельты;
+- конфликт — возврат в `S6-in-progress` **до** запуска ревью. Цикл при этом не
+  расходуется: код никто не читал, вердикта нет.
+
+Проверка стоит до ревью не только ради совпадения SHA. Конфликт всё равно вернул бы
+задачу, но обнаруживался он после сорока пяти минут работы ревьюера и потраченных
+лимитов подписки, хотя виден за пять секунд до них.
+
+`--force-with-lease` здесь обязателен с явным ожидаемым значением: между чтением
+ветки и пушем автор мог запушить коммит, и слепой `--force` потерял бы его молча.
+Расхождение lease — падение прогона, а не предупреждение.
+
 Поэтому зелёное код-ревью с неудавшимся слиянием ведёт не в `S8-merged`, а в
 `S6-in-progress`: работа действительно вернулась к автору, только осталась не
 правка кода, а ребейз. Вердикт при этом в силе, переделывать нечего. После ребейза
@@ -1,6 +1,6 @@
 # 🏠 House Plan — a live home map for Home Assistant

-[![HACS Custom](https://img.shields.io/badge/HACS-Custom-41BDF5.svg)](https://github.com/hacs/integration)
+[![HACS Default](https://img.shields.io/badge/HACS-Default-41BDF5.svg)](https://github.com/hacs/integration)
 [![GitHub release](https://img.shields.io/github/v/release/Matysh/houseplan-card)](https://github.com/Matysh/houseplan-card/releases)
 [![CI](https://github.com/Matysh/houseplan-card/actions/workflows/validate.yml/badge.svg)](https://github.com/Matysh/houseplan-card/actions)
 [![Live demo](https://img.shields.io/badge/demo-try_it_live-00c853?logo=homeassistant&logoColor=white)](https://demo.houseplan.tech)
@@ -88,10 +88,11 @@ The [Background editor contract](docs/DECOR-EDITOR.md) and

 [![Open the repository in HACS](https://my.home-assistant.io/badges/hacs_repository.svg)](https://my.home-assistant.io/redirect/hacs_repository/?owner=Matysh&repository=houseplan-card&category=integration)

-1. In HACS open **⋮ → Custom repositories**.
-2. Add `https://github.com/Matysh/houseplan-card` as an **Integration**.
-3. Install House Plan and restart Home Assistant.
-4. Open **Settings → Devices & services → Add integration → House Plan**.
+House Plan is in the HACS default catalog — no custom repository needed.
+
+1. In HACS search for **House Plan** and install it.
+2. Restart Home Assistant.
+3. Open **Settings → Devices & services → Add integration → House Plan**.

 The card is registered automatically. If you manage Lovelace resources
 manually, use the URL served by the integration:
@@ -107,8 +108,10 @@ serve that path as a JavaScript module.

 ### Manual installation

-Copy `custom_components/houseplan` to `config/custom_components`, restart Home
-Assistant, and add the House Plan integration.
+Copy the complete `custom_components/houseplan` release folder to
+`config/custom_components`, restart Home Assistant, and add the House Plan
+integration. Do not copy only `houseplan-card.js`: the card also uses an
+internal manifest and content-hashed modules from the same release.

 ### Add the card

@@ -1,6 +1,6 @@
 # 🏠 House Plan — живой план дома для Home Assistant

-[![HACS Custom](https://img.shields.io/badge/HACS-Custom-41BDF5.svg)](https://github.com/hacs/integration)
+[![HACS Default](https://img.shields.io/badge/HACS-Default-41BDF5.svg)](https://github.com/hacs/integration)
 [![GitHub release](https://img.shields.io/github/v/release/Matysh/houseplan-card)](https://github.com/Matysh/houseplan-card/releases)
 [![CI](https://github.com/Matysh/houseplan-card/actions/workflows/validate.yml/badge.svg)](https://github.com/Matysh/houseplan-card/actions)
 [![Live demo](https://img.shields.io/badge/демо-попробовать-00c853?logo=homeassistant&logoColor=white)](https://demo.houseplan.tech)
@@ -91,10 +91,12 @@ Assistant — и устройства появятся на плане авто

 [![Открыть репозиторий в HACS](https://my.home-assistant.io/badges/hacs_repository.svg)](https://my.home-assistant.io/redirect/hacs_repository/?owner=Matysh&repository=houseplan-card&category=integration)

-1. В HACS откройте **⋮ → Пользовательские репозитории**.
-2. Добавьте `https://github.com/Matysh/houseplan-card` с типом **Интеграция**.
-3. Установите House Plan и перезапустите Home Assistant.
-4. Откройте **Настройки → Устройства и службы → Добавить интеграцию → House Plan**.
+House Plan входит в основной каталог HACS — пользовательский репозиторий
+добавлять не нужно.
+
+1. Найдите **House Plan** в поиске HACS и установите.
+2. Перезапустите Home Assistant.
+3. Откройте **Настройки → Устройства и службы → Добавить интеграцию → House Plan**.

 Карточка регистрируется автоматически. Если ресурсы Lovelace управляются вручную,
 добавьте именно URL, который публикует интеграция:
@@ -110,8 +112,10 @@ resources:

 ### Вручную

-Скопируйте `custom_components/houseplan` в `config/custom_components`,
-перезапустите Home Assistant и добавьте интеграцию House Plan.
+Скопируйте всю папку `custom_components/houseplan` из релиза в
+`config/custom_components`, перезапустите Home Assistant и добавьте интеграцию
+House Plan. Одного `houseplan-card.js` недостаточно: карточке также нужны
+внутренний манифест и хешированные модули из того же релиза.

 ### Добавление карточки

@@ -39,10 +39,12 @@ async def async_setup(hass: HomeAssistant, config) -> bool:
    hass.data.setdefault(DOMAIN, {})
    hp_ws.async_register(hass)
    from .http_api import HouseplanContentView, HouseplanImportPreviewView, HouseplanUploadView
+    from .frontend_assets import HouseplanFrontendAssetView

    hass.http.register_view(HouseplanUploadView())
    hass.http.register_view(HouseplanContentView())
    hass.http.register_view(HouseplanImportPreviewView())
+    hass.http.register_view(HouseplanFrontendAssetView())
    return True


@@ -98,7 +100,8 @@ async def async_setup_entry(hass: HomeAssistant, entry: HouseplanConfigEntry) ->
                static_paths.append(StaticPathConfig(FRONTEND_URL, str(card_path), cache_headers=False))
            # NOTE (audit B1): plans and marker files are NO LONGER static.
            # They are served by HouseplanContentView, which requires auth.
-            # Only the card bundle stays public — Lovelace resources must be.
+            # Only the entry and manifest-gated JS chunks stay public —
+            # Lovelace modules must be loadable without an auth header.
            if static_paths:
                await hass.http.async_register_static_paths(static_paths)
        except ImportError:  # very old HA versions
@@ -236,12 +239,9 @@ async def async_setup_entry(hass: HomeAssistant, entry: HouseplanConfigEntry) ->
        hass.bus.async_fire("houseplan_config_updated", {"rev": optimize_revs[0]})
        hass.bus.async_fire("houseplan_layout_updated", {"rev": optimize_revs[1]})
        if recovered_import:
-            await recorder.async_refresh()
            current = (await data.config_store.async_load() or {}).get("config") or {}
-            live_ids = {str(marker.get("id")) for marker in current.get("markers") or []}
-            for marker_id in list(recorder.book.data):
-                if marker_id not in live_ids:
-                    await recorder.async_delete(marker_id)
+            await recorder.async_purge_orphans(current)
+            await recorder.async_refresh()

    await async_check_plan_files(hass, entry)

@@ -7,6 +7,7 @@ STORAGE_VIRTUAL_LIGHTS_KEY = f"{DOMAIN}.virtual_lights"
 STORAGE_VERSION = 1
 STORAGE_MINOR_VERSION = 2
 FRONTEND_URL = "/houseplan_files/houseplan-card.js"
+FRONTEND_ASSETS_URL = "/houseplan_files/houseplan-assets"
 PLANS_URL = "/houseplan_files/plans"
 PLANS_DIR = "houseplan/plans"  # relative to the HA configuration directory
 FILES_URL = "/houseplan_files/files"
@@ -46,12 +47,12 @@ PLAN_ORPHAN_TTL_S = 3600
 SCHEDULED_GRACE_S = 30 * 24 * 3600
 FILES_DIR = "houseplan/files"
 CONF_ADMIN_ONLY = "admin_only"
-VERSION = "1.67.0-beta.3"
+VERSION = "1.69.0-beta.1"

 # Portable backup format.  This is deliberately independent from the Home
 # Assistant Store version above: storage migrations and files exported by a
 # user have different compatibility lifecycles.
-PLAN_MODEL_VERSION = 7
+PLAN_MODEL_VERSION = 9
 EXPORT_VERSION = 1
 MAX_EXPORT_BYTES = 8 * 1024 * 1024
 IMPORT_PREVIEW_TTL_S = 10 * 60
@@ -1,7 +1,7 @@
 """Lossless, allow-listed canonicalisation of persisted geometry.

 The frontend mirrors this module in src/coordinate-canonicalization.ts.
-Keep the precision, scalar formula and field allow-list in lockstep; a shared
+Keep the precision, lattice formula and field allow-list in lockstep; a shared
 fixture is exercised by both runtimes.
 """
 from __future__ import annotations
@@ -13,10 +13,12 @@ from typing import Any

 COORDINATE_DECIMALS = 9
 COORDINATE_FACTOR = 10**COORDINATE_DECIMALS
+LATTICE_GRID_N = 240
+LATTICE_NOISE_STEPS = 1e-4


 def canonicalize_number(value: Any) -> Any:
-    """Return one stable IEEE-754 representation for an allow-listed number."""
+    """Return one stable IEEE-754 representation for an allow-listed scalar."""
    if isinstance(value, bool) or not isinstance(value, (int, float)):
        return value
    number = float(value)
@@ -32,6 +34,22 @@ def canonicalize_number(value: Any) -> Any:
    return result


+def canonicalize_lattice_coordinate(value: Any) -> Any:
+    """Collapse near-node noise while preserving authored off-grid values."""
+    if isinstance(value, bool) or not isinstance(value, (int, float)):
+        return value
+    number = float(value)
+    if not math.isfinite(number):
+        return value
+    scaled = number * LATTICE_GRID_N
+    # JavaScript Math.round: ties go toward +infinity, unlike Python round().
+    nearest = math.floor(scaled + 0.5)
+    if abs(scaled - nearest) < LATTICE_NOISE_STEPS:
+        result = nearest / LATTICE_GRID_N
+        return 0.0 if result == 0 else result
+    return canonicalize_number(number)
+
+
 def _record(value: Any) -> dict[str, Any] | None:
    return value if isinstance(value, dict) else None

@@ -42,37 +60,43 @@ def _records(value: Any) -> list[dict[str, Any]]:
    return [item for item in value if isinstance(item, dict)]


-def _fields(record: dict[str, Any], names: tuple[str, ...]) -> None:
+def _scalar_fields(record: dict[str, Any], names: tuple[str, ...]) -> None:
    for name in names:
        if name in record:
            record[name] = canonicalize_number(record[name])


-def _point(value: Any) -> None:
+def _lattice_fields(record: dict[str, Any], names: tuple[str, ...]) -> None:
+    for name in names:
+        if name in record:
+            record[name] = canonicalize_lattice_coordinate(record[name])
+
+
+def _lattice_point(value: Any) -> None:
    if not isinstance(value, list):
        return
    for index in range(min(2, len(value))):
-        value[index] = canonicalize_number(value[index])
+        value[index] = canonicalize_lattice_coordinate(value[index])


-def _points(value: Any) -> None:
+def _lattice_points(value: Any) -> None:
    if not isinstance(value, list):
        return
    for point in value:
-        _point(point)
+        _lattice_point(point)


 def canonicalize_position(position: Any) -> Any:
-    """Canonicalise x/y in one layout record without touching its metadata."""
+    """Canonicalise lattice x/y in one layout record, preserving metadata."""
    result = copy.deepcopy(position)
    record = _record(result)
    if record is not None:
-        _fields(record, ("x", "y"))
+        _lattice_fields(record, ("x", "y"))
    return result


 def canonicalize_layout_geometry(layout: Any) -> Any:
-    """Canonicalise x/y in every layout record, preserving future fields."""
+    """Canonicalise lattice x/y in every layout record."""
    result = copy.deepcopy(layout)
    record = _record(result)
    if record is None:
@@ -80,7 +104,7 @@ def canonicalize_layout_geometry(layout: Any) -> Any:
    for position in record.values():
        item = _record(position)
        if item is not None:
-            _fields(item, ("x", "y"))
+            _lattice_fields(item, ("x", "y"))
    return result


@@ -92,7 +116,7 @@ def canonicalize_config_geometry(config: Any) -> Any:
        return result

    for space in _records(root.get("spaces")):
-        _fields(
+        _scalar_fields(
            space,
            (
                "plan_x",
@@ -105,45 +129,52 @@ def canonicalize_config_geometry(config: Any) -> Any:
        )

        for room in _records(space.get("rooms")):
-            _fields(room, ("x", "y", "w", "h"))
-            _points(room.get("poly"))
+            _lattice_fields(room, ("x", "y", "w", "h"))
+            _lattice_points(room.get("poly"))

        for wall in _records(space.get("walls")):
-            _point(wall.get("a"))
-            _point(wall.get("b"))
+            _lattice_point(wall.get("a"))
+            _lattice_point(wall.get("b"))
+
+        for segment in _records(space.get("wall_segments")):
+            _lattice_point(segment.get("a"))
+            _lattice_point(segment.get("b"))

        for opening in _records(space.get("openings")):
-            _fields(opening, ("x", "y", "angle", "length"))
+            _lattice_fields(opening, ("x", "y"))
+            _scalar_fields(opening, ("angle", "length"))
            host = _record(opening.get("host"))
            if host is not None:
-                _fields(host, ("t",))
+                _scalar_fields(host, ("t",))

        for decor in _records(space.get("decor")):
            kind = decor.get("kind")
            if kind == "line":
-                _fields(decor, ("x1", "y1", "x2", "y2"))
+                _lattice_fields(decor, ("x1", "y1", "x2", "y2"))
            elif kind in ("rect", "ellipse", "furniture"):
-                _fields(decor, ("x", "y", "w", "h", "angle"))
+                _lattice_fields(decor, ("x", "y", "w", "h"))
+                _scalar_fields(decor, ("angle",))
            elif kind == "text":
-                _fields(decor, ("x", "y", "scale", "angle"))
+                _lattice_fields(decor, ("x", "y"))
+                _scalar_fields(decor, ("scale", "angle"))

        for draft in _records(space.get("room_drafts")):
-            _points(draft.get("points"))
+            _lattice_points(draft.get("points"))

        for partition in _records(space.get("partitions")):
-            _point(partition.get("a"))
-            _point(partition.get("b"))
+            _lattice_point(partition.get("a"))
+            _lattice_point(partition.get("b"))

        for column in _records(space.get("wall_columns")):
-            _point(column.get("center"))
+            _lattice_point(column.get("center"))
            if column.get("shape") == "square":
-                _fields(column, ("angle",))
+                _scalar_fields(column, ("angle",))

        for span in _records(space.get("open_spans")):
-            _point(span.get("a"))
-            _point(span.get("b"))
+            _lattice_point(span.get("a"))
+            _lattice_point(span.get("b"))

    for marker in _records(root.get("markers")):
-        _fields(marker, ("angle",))
+        _scalar_fields(marker, ("angle",))

    return result
@@ -0,0 +1,113 @@
+{
+  "schema": 1,
+  "fingerprint": "0c61742c98d55aec077478fcee7b8acf52e2ac1b70e2ed23532483b845ca884f",
+  "entry": "houseplan-card.js",
+  "initialViewFiles": [
+    "houseplan-assets/houseplan-card-BU843YpJ.js",
+    "houseplan-card.js"
+  ],
+  "initialViewGzipBytes": 256091,
+  "lazyFiles": [
+    "houseplan-assets/de-SftP4Auy.js",
+    "houseplan-assets/editor-DuOmG3Hn.js",
+    "houseplan-assets/houseplan-editor-runtime-pSbu_R5t.js",
+    "houseplan-assets/houseplan-onboarding-runtime-DXJhYLas.js",
+    "houseplan-assets/space-deletion-DIa5HjfJ.js"
+  ],
+  "lazyGzipBytes": 160351,
+  "lazyEditorFiles": [
+    "houseplan-assets/editor-DuOmG3Hn.js",
+    "houseplan-assets/houseplan-editor-runtime-pSbu_R5t.js",
+    "houseplan-assets/space-deletion-DIa5HjfJ.js"
+  ],
+  "lazyEditorGzipBytes": 131833,
+  "lazyOnboardingFiles": [
+    "houseplan-assets/houseplan-onboarding-runtime-DXJhYLas.js",
+    "houseplan-assets/space-deletion-DIa5HjfJ.js"
+  ],
+  "lazyOnboardingGzipBytes": 7198,
+  "lazyLocaleFiles": [
+    "houseplan-assets/de-SftP4Auy.js"
+  ],
+  "lazyLocaleGzipBytes": 21873,
+  "files": [
+    {
+      "path": "houseplan-assets/de-SftP4Auy.js",
+      "sha256": "3bee20ff5a52b6c6726cf857545bc3e1061a1249a515df5660491fd662218c94",
+      "rawBytes": 71477,
+      "gzipBytes": 21873,
+      "isEntry": false,
+      "imports": [],
+      "dynamicImports": []
+    },
+    {
+      "path": "houseplan-assets/editor-DuOmG3Hn.js",
+      "sha256": "d90a38e511769dc68d69081375ffb5067b196d429ab59fc4de06068baeafcac8",
+      "rawBytes": 3831,
+      "gzipBytes": 1584,
+      "isEntry": false,
+      "imports": [
+        "houseplan-assets/houseplan-card-BU843YpJ.js"
+      ],
+      "dynamicImports": []
+    },
+    {
+      "path": "houseplan-assets/houseplan-card-BU843YpJ.js",
+      "sha256": "1937126237e02356adad8b8c34b4adb29892bc183d6bcaa17e2542404907c811",
+      "rawBytes": 910424,
+      "gzipBytes": 255907,
+      "isEntry": false,
+      "imports": [],
+      "dynamicImports": [
+        "houseplan-assets/de-SftP4Auy.js",
+        "houseplan-assets/editor-DuOmG3Hn.js",
+        "houseplan-assets/houseplan-editor-runtime-pSbu_R5t.js",
+        "houseplan-assets/houseplan-onboarding-runtime-DXJhYLas.js"
+      ]
+    },
+    {
+      "path": "houseplan-assets/houseplan-editor-runtime-pSbu_R5t.js",
+      "sha256": "51fdd8f9766569a3b1af3b04d91dea81e6b555d9784bf5be53c6f82a42fbe51e",
+      "rawBytes": 504959,
+      "gzipBytes": 129696,
+      "isEntry": false,
+      "imports": [
+        "houseplan-assets/houseplan-card-BU843YpJ.js",
+        "houseplan-assets/space-deletion-DIa5HjfJ.js"
+      ],
+      "dynamicImports": []
+    },
+    {
+      "path": "houseplan-assets/houseplan-onboarding-runtime-DXJhYLas.js",
+      "sha256": "19299e14098c6e413ca410d7b2c3715d57c945fdb690991f92fa2dc769d9c84d",
+      "rawBytes": 26356,
+      "gzipBytes": 6645,
+      "isEntry": false,
+      "imports": [
+        "houseplan-assets/houseplan-card-BU843YpJ.js",
+        "houseplan-assets/space-deletion-DIa5HjfJ.js"
+      ],
+      "dynamicImports": []
+    },
+    {
+      "path": "houseplan-assets/space-deletion-DIa5HjfJ.js",
+      "sha256": "93f68c225dc00086ea86ac8a97ddfdf49b99ff17a8221f3cc3796f92d5e9f3cb",
+      "rawBytes": 911,
+      "gzipBytes": 553,
+      "isEntry": false,
+      "imports": [],
+      "dynamicImports": []
+    },
+    {
+      "path": "houseplan-card.js",
+      "sha256": "823dc598d07959ff800a942ca1b705bd54b94dd4def67d66668f2a5552cc271f",
+      "rawBytes": 190,
+      "gzipBytes": 184,
+      "isEntry": true,
+      "imports": [
+        "houseplan-assets/houseplan-card-BU843YpJ.js"
+      ],
+      "dynamicImports": []
+    }
+  ]
+}
@@ -0,0 +1,14 @@
+globalThis.__HOUSEPLAN_BUILD_FINGERPRINT__="0c61742c98d55aec077478fcee7b8acf52e2ac1b70e2ed23532483b845ca884f";import{c as e,l as o,t,d2 as s,A as a,d3 as i,d4 as l,d5 as n,E as r,b as c}from"./houseplan-card-BU843YpJ.js";class h extends e{constructor(){super(...arguments),this._spaces=null,this._spacesLoading=!1,this._spacesAuthoritative=!1}setConfig(e){this._config=e}async _loadSpaces(){if(!this._spaces&&!this._spacesLoading&&this.hass){this._spacesLoading=!0;try{const e=await this.hass.callWS({type:"houseplan/config/get"});this._spaces=(e?.config?.spaces||[]).map(e=>({value:e.id,label:e.title||e.id})),this._spacesAuthoritative=!0}catch{this._spaces=[],this._spacesAuthoritative=!1}finally{this._spacesLoading=!1}}}get _lang(){return o(this.hass,this._config?.language)}get _floorToken(){const e=this._config?.floor;return"number"==typeof e?`__houseplan_yaml_floor_index__:${String(e)}`:null}get _formData(){const e={...this._config},o=this._floorToken;return o?e.floor=o:Object.prototype.hasOwnProperty.call(e,"floor")||(e.floor=""),e}get _schema(){const e=this._spaces||[],o=this._lang,a=[{value:"",label:t(o,"editor.floor_none")}],i=this._floorToken;i&&a.push({value:i,label:t(o,"editor.floor_index",{index:String(this._config?.floor)})});const l="string"==typeof this._config?.floor?this._config.floor:"";l&&!e.some(e=>e.value===l)&&a.push({value:l,label:l}),a.push(...e);const n="string"==typeof this._config?.default_floor?this._config.default_floor:"",r=[...e];return n&&!e.some(e=>e.value===n)&&r.unshift({value:n,label:n}),[{name:"title",selector:{text:{}}},{name:"floor",selector:{select:{mode:"dropdown",options:a}}},e.length?{name:"default_floor",selector:{select:{mode:"dropdown",options:r}}}:{name:"default_floor",selector:{text:{}}},{name:"language",selector:{select:{mode:"dropdown",options:s(t(o,"editor.lang_auto"),this._config?.language)}}},{name:"icon_size",selector:{number:{min:1,max:6,step:.1,mode:"box"}}},{name:"show_temperature",selector:{boolean:{}}},{name:"live_states",selector:{boolean:{}}},{name:"show_signal",selector:{boolean:{}}},{name:"kiosk",selector:{boolean:{}}},{name:"cycle",selector:{number:{min:0,max:3600,step:5,mode:"box"}}}]}render(){if(!this.hass||!this._config)return a;const e=i(this,l,o(this.hass,this._config.language));if("cold"===e)return n();if("warm"===e)return r;this._loadSpaces();const s=this._lang,h={title:t(s,"editor.title"),floor:t(s,"editor.floor"),default_floor:t(s,"editor.default_floor"),language:t(s,"editor.language"),icon_size:t(s,"editor.icon_size"),show_temperature:t(s,"editor.show_temperature"),live_states:t(s,"editor.live_states"),show_signal:t(s,"editor.show_signal"),kiosk:t(s,"editor.kiosk"),cycle:t(s,"editor.cycle")},f=this._schema,_=function(e,o,t){if(!t||null===o)return null;const s="string"==typeof e?.default_floor?e.default_floor:"";return!s||o.some(e=>e.value===s)?null:s}(this._config,this._spaces,this._spacesAuthoritative),d=e=>c`<ha-form
+        .hass=${this.hass}
+        .data=${this._formData}
+        .schema=${e}
+        .computeLabel=${e=>h[e.name]||e.name}
+        @value-changed=${this._valueChanged}
+      ></ha-form>`;return c`
+      ${d(f.slice(0,3))}
+      ${_?c`<div class="default-floor-error" role="alert"
+        style="color:var(--error-color,#db4437);margin:-4px 0 12px;overflow-wrap:anywhere">
+        ${t(s,"editor.default_floor_missing",{id:_})}
+      </div>`:a}
+      ${d(f.slice(3))}
+    `}_valueChanged(e){const o={...this._config,...e.detail.value};""===o.floor?delete o.floor:o.floor===this._floorToken&&(o.floor=this._config?.floor);const t=new Event("config-changed",{bubbles:!0,composed:!0});t.detail={config:o},this.dispatchEvent(t)}}h.properties={hass:{attribute:!1},_config:{state:!0},_spaces:{state:!0}},customElements.get("houseplan-card-editor")||customElements.define("houseplan-card-editor",h);
@@ -0,0 +1 @@
+function e(e,o){return{id:e,title:o,plan_url:null,view_box:[0,0,1,1],rooms:[],wall_segments:[]}}function o(e="file"){const o="draw"===e;return{source:e,showBorders:o,showNames:o,displayTouched:!1}}function r(e,o){if(e.displayTouched)return{...e,source:o};const r="draw"===o;return{...e,source:o,showBorders:r,showNames:r}}function s(e,o,r){return{...e,[o]:r,displayTouched:!0}}function t(e,o,r){const s=(e?.spaces||[]).find(e=>e?.id===r),t=new Set((s?.rooms||[]).map(e=>String(e?.id||"")).filter(Boolean)),n=[...new Set((e?.markers||[]).filter(e=>!0!==e?.removed&&"string"==typeof e?.id).filter(e=>e.space===r||"string"==typeof e.room_id&&t.has(e.room_id)||o?.[e.id]?.s===r).map(e=>e.id))].sort((e,o)=>e.localeCompare(o));return{markerIds:n,count:n.length}}globalThis.__HOUSEPLAN_BUILD_FINGERPRINT__="0c61742c98d55aec077478fcee7b8acf52e2ac1b70e2ed23532483b845ca884f";export{t as a,e as c,o as i,r as s,s as t};
@@ -0,0 +1,37 @@
+"""Pure manifest/path resolver for generated frontend assets."""
+from __future__ import annotations
+
+import json
+from pathlib import Path
+
+_MANIFEST = "houseplan-assets.json"
+_ASSET_DIR = "houseplan-assets"
+
+
+def resolve_frontend_asset(frontend_root: Path, filename: object) -> Path | None:
+    """Resolve one generated JS asset only when the current manifest lists it."""
+    if not isinstance(filename, str) or not filename or filename != Path(filename).name:
+        return None
+    if "/" in filename or "\\" in filename or filename in {".", ".."}:
+        return None
+    if not filename.endswith(".js"):
+        return None
+    try:
+        manifest = json.loads((frontend_root / _MANIFEST).read_text(encoding="utf-8"))
+    except (OSError, ValueError, TypeError):
+        return None
+    if not isinstance(manifest, dict) or manifest.get("schema") != 1:
+        return None
+    expected = f"{_ASSET_DIR}/{filename}"
+    listed = {
+        item.get("path")
+        for item in manifest.get("files", [])
+        if isinstance(item, dict)
+    }
+    if expected not in listed:
+        return None
+    asset_root = (frontend_root / _ASSET_DIR).resolve()
+    candidate = (asset_root / filename).resolve()
+    if candidate.parent != asset_root or not candidate.is_file():
+        return None
+    return candidate
@@ -0,0 +1,36 @@
+"""Public, manifest-gated JavaScript chunks for the Lovelace card."""
+from __future__ import annotations
+
+from pathlib import Path
+
+from aiohttp import web
+from homeassistant.components.http import HomeAssistantView
+try:
+    from homeassistant.components.http import KEY_HASS
+except ImportError:  # pragma: no cover - old HA compatibility
+    KEY_HASS = "hass"  # type: ignore[assignment]
+
+from .const import FRONTEND_ASSETS_URL
+from .frontend_asset_manifest import resolve_frontend_asset
+
+_FRONTEND_ROOT = Path(__file__).parent / "frontend"
+
+
+class HouseplanFrontendAssetView(HomeAssistantView):
+    """Serve only generated chunks named by the current build manifest."""
+
+    url = f"{FRONTEND_ASSETS_URL}/{{filename}}"
+    name = "api:houseplan:frontend-asset"
+    requires_auth = False
+
+    async def get(self, request: web.Request, filename: str) -> web.StreamResponse:
+        hass = request.app[KEY_HASS]
+        path = await hass.async_add_executor_job(
+            resolve_frontend_asset, _FRONTEND_ROOT, filename
+        )
+        if path is None:
+            raise web.HTTPNotFound()
+        return web.FileResponse(
+            path,
+            headers={"Cache-Control": "no-cache", "X-Content-Type-Options": "nosniff"},
+        )
@@ -36,6 +36,10 @@ from .const import (
    VERSION,
 )
 from .store import HouseplanData
+from .wall_segment_model import (
+    WallSegmentMigrationError,
+    commit_wall_segment_model,
+)
 from .validation import (
    CONFIG_SCHEMA,
    LAYOUT_SCHEMA,
@@ -63,10 +67,17 @@ _LIVE_TEXT_TOKEN = re.compile(r"\{([^{}\r\n]+)\}")
 _LIVE_TEXT_ENTITY = re.compile(r"^[a-z0-9_]+\.[a-z0-9_]+$")
 _LIVE_TEXT_ATTRIBUTE = re.compile(r"^[a-zA-Z0-9_.-]+$")
 _PLAN_ONLY_DASH = "—"
+_IMPORT_ID_NAMESPACES = {
+    "space", "room", "marker", "partition", "wall", "opening", "decor", "draft",
+    "draft_segment", "column",
+}
+_MAX_IMPORT_LINEAGE_DEPTH = 16
+_REPORT_EXAMPLE_LIMIT = 24

 _SPACE_PLAN_FIELDS = (
    "id", "title", "cell_cm", "plan_url", "plan_aspect", "plan_x", "plan_y",
    "plan_scale", "plan_scale_x", "plan_scale_y", "plan_angle", "view_box",
+    "zero_wall_style",
 )
 _SPACE_DISPLAY_FIELDS = (
    "show_borders", "show_names", "room_color", "bg_color", "room_opacity",
@@ -75,7 +86,7 @@ _SPACE_DISPLAY_FIELDS = (
    "label_lqi", "label_light", "card_font_scale", "north_deg", "bg_mode",
    "sun_rays",
 )
-_ROOM_PLAN_FIELDS = ("id", "name", "open_to", "x", "y", "w", "h", "poly")
+_ROOM_PLAN_FIELDS = ("id", "name", "open_to", "x", "y", "w", "h", "poly", "wall_ids")
 _ROOM_DISPLAY_FIELDS = (
    "fill_mode", "custom_fill", "glow", "name_scale", "label_scale",
 )
@@ -244,6 +255,7 @@ def _project_plan_only_space(space: dict[str, Any]) -> dict[str, Any]:
    ]
    collections: tuple[tuple[str, tuple[str, ...]], ...] = (
        ("walls", ("key", "cm", "a", "b")),
+        ("wall_segments", ("id", "a", "b", "cm")),
        ("room_drafts", ("id", "points", "segments")),
        ("partitions", ("id", "a", "b", "cm")),
        ("wall_columns", ("id", "shape", "center", "cm", "angle")),
@@ -257,7 +269,7 @@ def _project_plan_only_space(space: dict[str, Any]) -> dict[str, Any]:
            selected = _pick_fields(item, fields)
            if name == "room_drafts" and "segments" in selected:
                selected["segments"] = [
-                    _pick_fields(segment, ("cm",))
+                    _pick_fields(segment, ("id", "cm"))
                    for segment in selected.get("segments") or []
                ]
            values.append(selected)
@@ -579,7 +591,14 @@ def parse_document(raw: bytes) -> dict[str, Any]:
    if not isinstance(payload, dict):
        raise ImportFailure("invalid_format", "Missing payload")
    try:
-        config = CONFIG_SCHEMA(_json_copy(payload.get("config")))
+        config_candidate = _json_copy(payload.get("config"))
+        # The envelope is authoritative. Export deliberately omits this field
+        # inside payload.config, but v8 semantic validation still has to run
+        # before an import token can be issued.
+        if model > 0:
+            config_candidate["model_version"] = model
+        config = CONFIG_SCHEMA(config_candidate)
+        config.pop("model_version", None)
    except (vol.Invalid, TypeError, ValueError) as err:
        raise ImportFailure("invalid_config", str(err)) from err
    if document["kind"] == "full":
@@ -801,8 +820,31 @@ def _unique_title(base: str, existing: list[dict[str, Any]]) -> str:
    return f"{base} ({n})"


+def canonical_import_root(prefix: str, value: str) -> tuple[str, int, bool]:
+    """Return the bounded root of ids generated by a previous space import.
+
+    Only the exact ``<same namespace>_<stem>_<8 lowercase hex>`` envelope is
+    reversible. Similar user ids, other namespaces and uppercase/short hashes
+    remain literal. The layer count and bounded flag are shared with the
+    TypeScript helper through one conformance fixture. The flag reports that
+    another valid layer remained after the safety bound.
+    """
+    root = str(value)
+    pattern = re.compile(rf"^{re.escape(prefix)}_(.+)_([0-9a-f]{{8}})$")
+    layers = 0
+    for _depth in range(_MAX_IMPORT_LINEAGE_DEPTH):
+        match = pattern.fullmatch(root)
+        if match is None:
+            return root, layers, False
+        root = match.group(1)
+        layers += 1
+    return root, layers, pattern.fullmatch(root) is not None
+
+
 def _fresh(prefix: str, old: str, used: set[str]) -> str:
-    stem = re.sub(r"[^a-zA-Z0-9_-]+", "_", old).strip("_")[:35] or prefix
+    root, _layers, _bounded = canonical_import_root(prefix, old) \
+        if prefix in _IMPORT_ID_NAMESPACES else (old, 0, False)
+    stem = re.sub(r"[^a-zA-Z0-9_-]+", "_", root).strip("_")[:35] or prefix
    while True:
        value = f"{prefix}_{stem}_{secrets.token_hex(4)}"
        if value not in used:
@@ -822,53 +864,281 @@ def _orphan_marker(key: str, manifest: dict[str, Any] | None, space_id: str, use
    }


+def _empty_reference_report() -> dict[str, Any]:
+    return {
+        "remapped": {"incoming": {}, "target": {}},
+        "collisions": {},
+        "preservedUnresolved": {},
+        "droppedIncomingLinks": {},
+        "boundedLineages": 0,
+        "examples": [],
+    }
+
+
+def _report_reference(
+    report: dict[str, Any], bucket: str, category: str, owner: str, reference: str,
+) -> None:
+    section = report.setdefault(bucket, {})
+    section[category] = int(section.get(category, 0)) + 1
+    examples = report.setdefault("examples", [])
+    if len(examples) < _REPORT_EXAMPLE_LIMIT:
+        examples.append({
+            "bucket": bucket, "category": category,
+            "owner": str(owner)[:160], "reference": str(reference)[:160],
+        })
+
+
+def _report_remap(
+    report: dict[str, Any], side: str, category: str, owner: str, reference: str,
+) -> None:
+    section = report.setdefault("remapped", {}).setdefault(side, {})
+    section[category] = int(section.get(category, 0)) + 1
+    examples = report.setdefault("examples", [])
+    if len(examples) < _REPORT_EXAMPLE_LIMIT:
+        examples.append({
+            "bucket": f"remapped.{side}", "category": category,
+            "owner": str(owner)[:160], "reference": str(reference)[:160],
+        })
+
+
+def _record_bounded_lineage(
+    report: dict[str, Any], seen: set[tuple[str, str]], prefix: str, value: str,
+) -> None:
+    _root, _layers, bounded = canonical_import_root(prefix, value)
+    if bounded:
+        seen.add((prefix, value))
+        report["boundedLineages"] = len(seen)
+
+
+def _lineage_resolver(
+    prefix: str,
+    exact_map: dict[str, str],
+    live_ids: set[str],
+    report: dict[str, Any],
+    bounded_seen: set[tuple[str, str]],
+) -> Callable[[str], tuple[str | None, str]]:
+    """Resolve only dead exact or uniquely provable cross-generation refs."""
+    imported: dict[str, set[str]] = {}
+    live: dict[str, set[str]] = {}
+    for old, new in exact_map.items():
+        root, _layers, bounded = canonical_import_root(prefix, old)
+        imported.setdefault(root, set()).add(new)
+        if bounded:
+            _record_bounded_lineage(report, bounded_seen, prefix, old)
+    for value in live_ids:
+        root, _layers, bounded = canonical_import_root(prefix, value)
+        live.setdefault(root, set()).add(value)
+        if bounded:
+            _record_bounded_lineage(report, bounded_seen, prefix, value)
+
+    def resolve(reference: str) -> tuple[str | None, str]:
+        if reference in live_ids:
+            return None, "live"
+        if reference in exact_map:
+            return exact_map[reference], "exact"
+        root, _layers, bounded = canonical_import_root(prefix, reference)
+        if bounded:
+            _record_bounded_lineage(report, bounded_seen, prefix, reference)
+        candidates = imported.get(root, set())
+        if not candidates:
+            return None, "unrelated"
+        if len(candidates) == 1 and not live.get(root):
+            return next(iter(candidates)), "lineage"
+        return None, "ambiguous"
+
+    return resolve
+
+
 def _repair_target_space_refs(
    current_config: dict[str, Any],
    current_layout: dict[str, Any],
-    old_space_id: str,
-    new_space_id: str,
-    old_room_ids: dict[str, str],
+    id_maps: dict[str, dict[str, str]],
+    marker_link_map: dict[str, str],
+    report: dict[str, Any],
+    bounded_seen: set[tuple[str, str]],
 ) -> tuple[dict[str, Any], dict[str, Any], int]:
-    """Apply the exact map of this import to pre-existing orphan target refs."""
+    """Repair target refs by exact map, then by one safe lineage candidate."""
    config = _json_copy(current_config)
    layout = _json_copy(current_layout)
-    if any(str(space.get("id")) == old_space_id for space in config.get("spaces") or []):
-        return config, layout, 0
-
+    spaces = config.get("spaces") or []
+    markers = config.get("markers") or []
+    live_spaces = {str(item.get("id")) for item in spaces if item.get("id") is not None}
+    live_rooms = {
+        str(room.get("id")) for space in spaces for room in space.get("rooms") or []
+        if room.get("id") is not None
+    }
+    live_partitions = {
+        str(item.get("id")) for space in spaces for item in space.get("partitions") or []
+        if item.get("id") is not None
+    }
+    live_markers = {
+        str(marker.get("id")) for marker in markers if marker.get("id") is not None
+    }
+    resolve_space = _lineage_resolver(
+        "space", id_maps.get("space", {}), live_spaces, report, bounded_seen,
+    )
+    resolve_room = _lineage_resolver(
+        "room", id_maps.get("room", {}), live_rooms, report, bounded_seen,
+    )
+    resolve_partition = _lineage_resolver(
+        "partition", id_maps.get("partition", {}), live_partitions, report, bounded_seen,
+    )
+    resolve_marker = _lineage_resolver(
+        "marker", id_maps.get("marker", {}), live_markers, report, bounded_seen,
+    )
+    resolve_marker_link = _lineage_resolver(
+        "marker", marker_link_map, live_markers, report, bounded_seen,
+    )
+    imported_space_ids = set(id_maps.get("space", {}).values())
    repaired = 0
-    for marker in config.get("markers") or []:
-        if marker.get("space") == old_space_id:
-            marker["space"] = new_space_id
-            repaired += 1
-        room_id = marker.get("room_id")
-        if room_id is not None and str(room_id) in old_room_ids:
-            marker["room_id"] = old_room_ids[str(room_id)]
+    unresolved: set[tuple[str, str, str]] = set()
+
+    def replace(
+        owner: str, category: str, reference: Any,
+        resolver: Callable[[str], tuple[str | None, str]],
+    ) -> str | None:
+        nonlocal repaired
+        if not isinstance(reference, str) or not reference:
+            return None
+        mapped, reason = resolver(reference)
+        if mapped is not None:
            repaired += 1
+            _report_remap(report, "target", category, owner, reference)
+            return mapped
+        if reason == "ambiguous":
+            preserve_once(owner, category, reference)
+        return None
+
+    def preserve_once(owner: str, category: str, reference: str) -> None:
+        key = (owner, category, reference)
+        if key in unresolved:
+            return
+        unresolved.add(key)
+        _report_reference(
+            report, "preservedUnresolved", category, owner, reference,
+        )
+
+    def preserve_related(
+        owner: str, category: str, reference: Any,
+        resolver: Callable[[str], tuple[str | None, str]],
+    ) -> None:
+        if not isinstance(reference, str) or not reference:
+            return
+        mapped, reason = resolver(reference)
+        if mapped is not None or reason == "ambiguous":
+            preserve_once(owner, category, reference)
+
+    for space in spaces:
+        space_id = str(space.get("id", "?"))
+        for room in space.get("rooms") or []:
+            room_id = str(room.get("id", "?"))
+            values = room.get("open_to")
+            if isinstance(values, list):
+                for value in values:
+                    preserve_related(
+                        f"{space_id}:{room_id}", "room.open_to", value, resolve_room,
+                    )
+        for opening in space.get("openings") or []:
+            host = opening.get("host") if isinstance(opening, dict) else None
+            if isinstance(host, dict) and host.get("kind") == "partition":
+                # A partition host is space-local. An imported partition lives
+                # in the new independent copy, so a pre-existing opening in a
+                # different target space cannot be rebound to it safely.
+                preserve_related(
+                    f"{space_id}:{opening.get('id', '?')}", "opening.host",
+                    host.get("id"), resolve_partition,
+                )
+
+    for marker in markers:
+        marker_id = str(marker.get("id", "?"))
+        mapped = replace(marker_id, "marker.space", marker.get("space"), resolve_space)
+        if mapped is not None:
+            marker["space"] = mapped
+        may_rebind_room = marker.get("space") in imported_space_ids
+        if may_rebind_room:
+            mapped = replace(marker_id, "marker.room_id", marker.get("room_id"), resolve_room)
+            if mapped is not None:
+                marker["room_id"] = mapped
+        else:
+            preserve_related(
+                marker_id, "marker.room_id", marker.get("room_id"), resolve_room,
+            )
        vacuum = marker.get("vacuum")
        segment_map = vacuum.get("segment_map") if isinstance(vacuum, dict) else None
        if isinstance(segment_map, dict):
            for key, room_id in list(segment_map.items()):
-                mapped = old_room_ids.get(str(room_id))
+                if may_rebind_room:
+                    mapped = replace(
+                        marker_id, "marker.vacuum.segment_map", room_id, resolve_room,
+                    )
+                    if mapped is not None:
+                        segment_map[key] = mapped
+                else:
+                    preserve_related(
+                        marker_id, "marker.vacuum.segment_map", room_id, resolve_room,
+                    )
+        controls = marker.get("controls")
+        if isinstance(controls, list):
+            for index, ref in enumerate(controls):
+                if not isinstance(ref, str) or not ref.startswith("marker:"):
+                    continue
+                old_target = ref[len("marker:"):]
+                mapped = replace(
+                    marker_id, "marker.controls", old_target, resolve_marker_link,
+                )
                if mapped is not None:
-                    segment_map[key] = mapped
-                    repaired += 1
+                    controls[index] = "marker:" + mapped
+                else:
+                    # A duplicate may have been virtualised or otherwise lost
+                    # light-source semantics. Such a marker remains a valid
+                    # layout owner, but it is not a valid controls target.
+                    preserve_related(
+                        marker_id, "marker.controls", old_target, resolve_marker,
+                    )
+        badge = marker.get("value_badge")
+        source = badge.get("source") if isinstance(badge, dict) else None
+        if isinstance(source, dict) and source.get("kind") == "derived_marker_state":
+            ref = source.get("ref")
+            old_target = ref[len("marker:"):] \
+                if isinstance(ref, str) and ref.startswith("marker:") else None
+            mapped = replace(
+                marker_id, "marker.value_badge", old_target, resolve_marker_link,
+            )
+            if mapped is not None:
+                source["ref"] = "marker:" + mapped
+            else:
+                preserve_related(
+                    marker_id, "marker.value_badge", old_target, resolve_marker,
+                )

-    # Rewrite ownership before rekeying labels. A valid destination wins a
-    # collision inside the target; the imported document itself is overlaid
-    # later and has final priority for its own label position.
-    for position in layout.values():
-        if isinstance(position, dict) and position.get("s") == old_space_id:
-            position["s"] = new_space_id
-            repaired += 1
-    for old_room_id, new_room_id in old_room_ids.items():
-        old_key = "rl_" + old_room_id
-        if old_key not in layout:
+    # Destination wins collisions. Rekey only proven dead plan-owned keys;
+    # opaque HA owners remain literal.
+    for key in list(layout):
+        position = layout[key]
+        if isinstance(position, dict):
+            mapped_space = replace(key, "layout.space", position.get("s"), resolve_space)
+            if mapped_space is not None:
+                position["s"] = mapped_space
+        new_key: str | None = None
+        category = ""
+        if key.startswith("rl_"):
+            if isinstance(position, dict) and position.get("s") in imported_space_ids:
+                mapped_room = replace(key, "layout.room_label", key[3:], resolve_room)
+                if mapped_room is not None:
+                    new_key, category = "rl_" + mapped_room, "layout.room_label"
+            else:
+                preserve_related(key, "layout.room_label", key[3:], resolve_room)
+        elif key not in live_markers:
+            mapped_marker = replace(key, "layout.marker", key, resolve_marker)
+            if mapped_marker is not None:
+                new_key, category = mapped_marker, "layout.marker"
+        if new_key is None or new_key == key:
            continue
-        new_key = "rl_" + new_room_id
-        if new_key not in layout:
-            layout[new_key] = layout[old_key]
-        del layout[old_key]
-        repaired += 1
+        if new_key in layout:
+            _report_reference(report, "collisions", category, key, new_key)
+        else:
+            layout[new_key] = position
+        del layout[key]
    return config, layout, repaired


@@ -889,42 +1159,125 @@ def build_space_merge(
        raise ImportFailure("invalid_config", "A space export must contain exactly one space")
    space = spaces[0]
    _materialize_space_background(space, "static")
+    reference_report = _empty_reference_report()
+    bounded_seen: set[tuple[str, str]] = set()
+    target_config = _json_copy(current_config)
+    target_layout = _json_copy(current_layout)
    used = {
        str(value)
        for sp in current_config.get("spaces") or []
-        for value in [sp.get("id")]
-    } | {str(m.get("id")) for m in current_config.get("markers") or []}
+        for collection in (
+            (sp,), sp.get("rooms") or [], sp.get("room_drafts") or [],
+            sp.get("partitions") or [], sp.get("wall_segments") or [],
+            sp.get("wall_columns") or [],
+            sp.get("openings") or [], sp.get("decor") or [],
+        )
+        for item in collection
+        if isinstance(item, dict)
+        for value in [item.get("id")]
+        if value is not None
+    } | {
+        str(m.get("id")) for m in current_config.get("markers") or []
+        if m.get("id") is not None
+    } | {
+        str(segment.get("id"))
+        for sp in current_config.get("spaces") or []
+        for draft in sp.get("room_drafts") or []
+        for segment in draft.get("segments") or []
+        if isinstance(segment, dict) and segment.get("id") is not None
+    } | {
+        str(value)
+        for incoming_space in spaces
+        for collection in (
+            (incoming_space,), incoming_space.get("rooms") or [],
+            incoming_space.get("room_drafts") or [],
+            incoming_space.get("partitions") or [], incoming_space.get("wall_segments") or [],
+            incoming_space.get("wall_columns") or [],
+            incoming_space.get("openings") or [], incoming_space.get("decor") or [],
+        )
+        for item in collection
+        if isinstance(item, dict)
+        for value in [item.get("id")]
+        if value is not None
+    } | {
+        str(m.get("id")) for m in incoming.get("markers") or []
+        if m.get("id") is not None
+    } | {
+        str(segment.get("id"))
+        for incoming_space in spaces
+        for draft in incoming_space.get("room_drafts") or []
+        for segment in draft.get("segments") or []
+        if isinstance(segment, dict) and segment.get("id") is not None
+    }
    old_space_id = str(space.get("id"))
+    _record_bounded_lineage(
+        reference_report, bounded_seen, "space", old_space_id,
+    )
    new_space_id = _fresh("space", old_space_id, used)
    id_map: dict[str, str] = {old_space_id: new_space_id}
+    id_maps: dict[str, dict[str, str]] = {
+        prefix: {} for prefix in _IMPORT_ID_NAMESPACES
+    }
+    id_maps["space"][old_space_id] = new_space_id
    for collection, prefix in (
        ("rooms", "room"), ("room_drafts", "draft"), ("partitions", "partition"),
+        ("wall_segments", "wall"),
        ("wall_columns", "column"), ("openings", "opening"), ("decor", "decor"),
    ):
        for item in space.get(collection) or []:
            if isinstance(item, dict) and item.get("id") is not None:
                old = str(item["id"])
+                _record_bounded_lineage(
+                    reference_report, bounded_seen, prefix, old,
+                )
                id_map[old] = _fresh(prefix, old, used)
+                id_maps[prefix][old] = id_map[old]
                item["id"] = id_map[old]
-    old_room_ids = {
-        old: new for old, new in id_map.items() if old != old_space_id and new.startswith("room_")
-    }
-    target_config, target_layout, repaired_target_refs = _repair_target_space_refs(
-        current_config, current_layout, old_space_id, new_space_id, old_room_ids,
-    )
+    for draft in space.get("room_drafts") or []:
+        for segment in draft.get("segments") or []:
+            if not isinstance(segment, dict) or segment.get("id") is None:
+                continue
+            old = str(segment["id"])
+            _record_bounded_lineage(
+                reference_report, bounded_seen, "draft_segment", old,
+            )
+            new = _fresh("draft_segment", old, used)
+            id_map[old] = new
+            id_maps["draft_segment"][old] = new
+            segment["id"] = new
+    old_room_ids = id_maps["room"]
    for room in space.get("rooms") or []:
        if room.get("open_to"):
-            room["open_to"] = [old_room_ids.get(str(value), str(value)) for value in room["open_to"]]
+            remapped_open_to = []
+            for value in room["open_to"]:
+                old_value = str(value)
+                mapped_value = old_room_ids.get(old_value, old_value)
+                remapped_open_to.append(mapped_value)
+                if mapped_value != old_value:
+                    _report_remap(
+                        reference_report, "incoming", "room.open_to",
+                        str(room.get("id", "?")), old_value,
+                    )
+            room["open_to"] = remapped_open_to
+        if room.get("wall_ids"):
+            room["wall_ids"] = [
+                id_maps["wall"].get(str(value), str(value))
+                for value in room["wall_ids"]
+            ]
    # Opening ownership is part of the same space-local id graph. Remap the
    # nested reference together with the partition itself; otherwise the
    # invariant validator correctly rejects a copied space whose host.id still
    # names the source partition.
    for opening in space.get("openings") or []:
        host = opening.get("host") if isinstance(opening, dict) else None
-        if isinstance(host, dict) and host.get("kind") == "partition":
+        if isinstance(host, dict) and host.get("kind") in ("partition", "wall"):
            old_host_id = str(host.get("id"))
            if old_host_id in id_map:
                host["id"] = id_map[old_host_id]
+                _report_remap(
+                    reference_report, "incoming", "opening.host",
+                    str(opening.get("id", "?")), old_host_id,
+                )
    space["id"] = new_space_id
    space["title"] = _unique_title(
        str(space.get("title") or old_space_id), current_config.get("spaces") or []
@@ -947,22 +1300,40 @@ def build_space_merge(
    dropped_marker_links = _transfer_dropped_marker_links(document)
    for marker in incoming.get("markers") or []:
        old_id = str(marker.get("id"))
+        _record_bounded_lineage(
+            reference_report, bounded_seen, "marker", old_id,
+        )
        binding = _binding_key(marker)
        if binding in duplicate and duplicate_policy == "skip":
            skipped.add(old_id)
            continue
        new_id = _fresh("marker", old_id, used)
        marker_map[old_id] = new_id
+        id_maps["marker"][old_id] = new_id
        marker["id"] = new_id
        marker["space"] = new_space_id
+        _report_remap(
+            reference_report, "incoming", "marker.space", new_id, old_space_id,
+        )
        if marker.get("room_id") is not None:
-            marker["room_id"] = old_room_ids.get(str(marker["room_id"]), marker["room_id"])
+            old_room_id = str(marker["room_id"])
+            marker["room_id"] = old_room_ids.get(old_room_id, marker["room_id"])
+            if marker["room_id"] != old_room_id:
+                _report_remap(
+                    reference_report, "incoming", "marker.room_id", new_id, old_room_id,
+                )
        vacuum = marker.get("vacuum")
        if isinstance(vacuum, dict) and isinstance(vacuum.get("segment_map"), dict):
-            vacuum["segment_map"] = {
-                key: old_room_ids.get(str(value), value)
-                for key, value in vacuum["segment_map"].items()
-            }
+            remapped_segments = {}
+            for key, value in vacuum["segment_map"].items():
+                old_room_id = str(value)
+                remapped_segments[key] = old_room_ids.get(old_room_id, value)
+                if remapped_segments[key] != old_room_id:
+                    _report_remap(
+                        reference_report, "incoming", "marker.vacuum.segment_map",
+                        new_id, old_room_id,
+                    )
+            vacuum["segment_map"] = remapped_segments
        if binding in duplicate and duplicate_policy == "virtual":
            virtualized += 1
            virtualized_targets.add(old_id)
@@ -1003,6 +1374,10 @@ def build_space_merge(
                    dropped_marker_links += 1
                    continue
                remapped.append("marker:" + target)
+                _report_remap(
+                    reference_report, "incoming", "marker.controls",
+                    str(marker.get("id", "?")), old_target,
+                )
            marker["controls"] = remapped or None
        badge = marker.get("value_badge")
        source = badge.get("source") if isinstance(badge, dict) else None
@@ -1012,11 +1387,30 @@ def build_space_merge(
            target = None if old_target in virtualized_targets else marker_map.get(old_target)
            if target:
                source["ref"] = "marker:" + target
+                _report_remap(
+                    reference_report, "incoming", "marker.value_badge",
+                    str(marker.get("id", "?")), old_target,
+                )
            else:
                badge["enabled"] = False
                badge["source"] = None
                dropped_marker_links += 1

+    output_markers_by_id = {
+        str(marker.get("id")): marker for marker in output_markers
+        if marker.get("id") is not None
+    }
+    marker_link_map = {
+        old_id: new_id for old_id, new_id in marker_map.items()
+        if (target := output_markers_by_id.get(new_id)) is not None
+        and target.get("removed") is not True
+        and target.get("is_light") is True
+    }
+    target_config, target_layout, repaired_target_refs = _repair_target_space_refs(
+        current_config, current_layout, id_maps, marker_link_map,
+        reference_report, bounded_seen,
+    )
+
    output_layout: dict[str, Any] = {}
    for key, pos in (document["payload"].get("layout") or {}).items():
        if key in skipped:
@@ -1042,6 +1436,16 @@ def build_space_merge(
            new_key = orphan["id"]
            if layout_binding in duplicate and duplicate_policy == "virtual":
                virtualized += 1
+        if new_key != key:
+            _report_remap(
+                reference_report, "incoming", "layout.owner", new_key, key,
+            )
+        old_layout_space = str(pos.get("s", "")) if isinstance(pos, dict) else ""
+        if old_layout_space != new_space_id:
+            _report_remap(
+                reference_report, "incoming", "layout.space", new_key,
+                old_layout_space,
+            )
        output_layout[new_key] = {**pos, "s": new_space_id}

    merged_config = target_config
@@ -1079,6 +1483,8 @@ def build_space_merge(
        merged_config, ensure_ascii=False, separators=(",", ":"), allow_nan=False
    ).encode("utf-8")) > MAX_CONFIG_BYTES:
        raise ImportFailure("capacity_exceeded", "Merged configuration exceeds the store limit")
+    if dropped_marker_links:
+        reference_report["droppedIncomingLinks"]["marker.links"] = dropped_marker_links
    return merged_config, merged_layout, {
        "space_id": new_space_id,
        "space_title": space["title"],
@@ -1088,6 +1494,10 @@ def build_space_merge(
        "orphan_markers": len(output_markers) - len(marker_map),
        "dropped_marker_links": dropped_marker_links,
        "repaired_target_refs": repaired_target_refs,
+        "preserved_unresolved_refs": sum(
+            int(value) for value in reference_report["preservedUnresolved"].values()
+        ),
+        "reference_report": reference_report,
    }


@@ -1211,6 +1621,84 @@ def _missing_areas(
    return sorted(incoming - available)


+def _materialize_import_candidate(
+    document: dict[str, Any],
+    current_config: dict[str, Any],
+    current_layout: dict[str, Any],
+    *,
+    duplicate_policy: str,
+    same_source: bool,
+    content: list[dict[str, Any]],
+    confirmation_required: bool,
+) -> tuple[dict[str, Any], dict[str, Any], dict[str, Any]]:
+    """Build once the normalized config/layout that the preview may apply."""
+    prepared = _json_copy(document)
+    imported_config = prepared["payload"]["config"]
+    if confirmation_required:
+        _detach_missing(imported_config, content)
+    incoming_model = int(prepared.get("model_version", 0) or 0)
+    target_model = int(current_config.get("model_version", 0) or 0)
+    requires_v8 = incoming_model >= 8 or target_model >= 8
+    if requires_v8:
+        try:
+            # A v8 target cannot be downgraded by a v7 backup, while an
+            # incoming v8 graph must retain its already-persisted IDs. When
+            # both sides are v7 the accepted compatibility contract keeps the
+            # import v7 until a later structural write or explicit Optimize.
+            imported_config["model_version"] = incoming_model
+            imported_config, _ = commit_wall_segment_model(imported_config)
+            prepared["payload"]["config"] = imported_config
+            if prepared["kind"] == "space":
+                current_config, _ = commit_wall_segment_model(current_config)
+        except WallSegmentMigrationError as err:
+            raise ImportFailure(err.code, str(err)) from err
+    if prepared["kind"] == "space":
+        config, layout, details = build_space_merge(
+            prepared, current_config, current_layout, duplicate_policy,
+            same_source=same_source,
+        )
+    else:
+        config = imported_config
+        if not requires_v8 and incoming_model > 0:
+            config["model_version"] = incoming_model
+        _materialize_global_background(config)
+        layout = _json_copy(prepared["payload"]["layout"])
+        if not same_source:
+            settings = config.get("settings") or {}
+            settings.pop("known_devices", None)
+            settings.pop("new_device_ids", None)
+        details = {
+            "dropped_marker_links": _transfer_dropped_marker_links(prepared),
+        }
+    try:
+        config = CONFIG_SCHEMA(config)
+    except vol.Invalid as err:
+        raise ImportFailure("invalid_config", str(err)) from err
+    try:
+        layout = LAYOUT_SCHEMA(layout)
+    except vol.Invalid as err:
+        raise ImportFailure("invalid_layout", str(err)) from err
+    details = _json_copy(details)
+    details["counts"] = _counts(config, layout)
+    return config, layout, details
+
+
+def _candidate_digest(candidate: dict[str, Any]) -> str:
+    """Bind a token to both its source and the exact normalized target pair."""
+    return _document_digest({
+        "document": candidate.get("document"),
+        "duplicate_policy": candidate.get("duplicate_policy"),
+        "config_rev": candidate.get("config_rev"),
+        "layout_rev": candidate.get("layout_rev"),
+        "content": candidate.get("content"),
+        "confirmation_required": candidate.get("confirmation_required"),
+        "same_source": candidate.get("same_source"),
+        "target_config": candidate.get("target_config"),
+        "target_layout": candidate.get("target_layout"),
+        "details": candidate.get("details"),
+    })
+
+
 def create_preview(
    runtime: HouseplanData,
    raw: bytes,
@@ -1236,16 +1724,10 @@ def create_preview(
        validate_opening_passages(incoming_config, validate_all=True)
    except OpeningPassageError as err:
        raise ImportFailure(err.code, str(err)) from err
-    if document["kind"] == "space":
-        _merged_config, _merged_layout, details = build_space_merge(
-            document, current_config, current_layout, duplicate_policy,
-            same_source=same_source,
-        )
-    else:
+    if document["kind"] == "full":
        dropped_marker_links = _transfer_dropped_marker_links(document)
        dropped_marker_links += _drop_invalid_import_marker_links(incoming_config)
        document["transfer"]["dropped_marker_links"] = dropped_marker_links
-        details["dropped_marker_links"] = dropped_marker_links
        try:
            validate_marker_controls(incoming_config, validate_all=True)
            validate_marker_light_entities(incoming_config, validate_all=True)
@@ -1253,13 +1735,19 @@ def create_preview(
        except MarkerControlError as err:
            raise ImportFailure(err.code, str(err)) from err
    content, confirmation = _content_state(document, same_source, config_root)
+    target_config, target_layout, details = _materialize_import_candidate(
+        document, current_config, current_layout,
+        duplicate_policy=duplicate_policy,
+        same_source=same_source,
+        content=content,
+        confirmation_required=confirmation,
+    )
    token = secrets.token_urlsafe(32)
    now = time.time()
    candidate = {
        "owner_id": owner_id,
        "created": now,
        "expires": now + IMPORT_PREVIEW_TTL_S,
-        "digest": _document_digest(document),
        "document": document,
        "duplicate_policy": duplicate_policy,
        "config_rev": int(current_config_data.get("rev", 0)),
@@ -1267,7 +1755,11 @@ def create_preview(
        "content": content,
        "confirmation_required": confirmation,
        "same_source": same_source,
+        "target_config": target_config,
+        "target_layout": target_layout,
+        "details": details,
    }
+    candidate["digest"] = _candidate_digest(candidate)
    # Opportunistic expiry and per-user oldest-first eviction.
    runtime.import_previews = {
        key: value for key, value in runtime.import_previews.items()
@@ -1319,7 +1811,7 @@ def get_candidate(runtime: HouseplanData, token: str, owner_id: str, *, consume:
        raise ImportFailure("preview_expired", "Import preview expired")
    if candidate.get("owner_id") != owner_id:
        raise ImportFailure("preview_owner_mismatch", "Preview belongs to another user")
-    if candidate.get("digest") != _document_digest(candidate.get("document") or {}):
+    if candidate.get("digest") != _candidate_digest(candidate):
        runtime.import_previews.pop(token, None)
        raise ImportFailure("invalid_format", "Import preview candidate changed")
    if consume:
@@ -1342,21 +1834,26 @@ def revalidate_candidate(
        "spaces": [], "markers": [], "settings": {},
    }
    current_layout = current_layout_data.get("layout") or {}
-    details: dict[str, Any] = {}
-    if document["kind"] == "space":
-        _config, _layout, details = build_space_merge(
-            document, current_config, current_layout, duplicate_policy,
-            same_source=bool(candidate.get("same_source")),
-        )
    if config_root is not None:
        content, confirmation = _content_state(
            document, bool(candidate.get("same_source")), config_root
        )
        candidate["content"] = content
        candidate["confirmation_required"] = confirmation
+    target_config, target_layout, details = _materialize_import_candidate(
+        document, current_config, current_layout,
+        duplicate_policy=duplicate_policy,
+        same_source=bool(candidate.get("same_source")),
+        content=candidate.get("content") or [],
+        confirmation_required=bool(candidate.get("confirmation_required")),
+    )
    candidate["duplicate_policy"] = duplicate_policy
    candidate["config_rev"] = int(current_config_data.get("rev", 0))
    candidate["layout_rev"] = int(current_layout_data.get("rev", 0))
+    candidate["target_config"] = target_config
+    candidate["target_layout"] = target_layout
+    candidate["details"] = details
+    candidate["digest"] = _candidate_digest(candidate)
    incoming = document["payload"]
    return {
        "preview": {
@@ -1388,35 +1885,17 @@ def prepare_apply(
 ) -> tuple[dict[str, Any], dict[str, Any], dict[str, Any]]:
    if candidate.get("confirmation_required") and not confirm_missing_content:
        raise ImportFailure("content_confirmation_required", "Missing content must be confirmed")
-    document = candidate["document"]
-    # Detachment is defined in the exported identity space.  Do it before a
-    # space import remaps owners to fresh ids.
-    imported_config = _json_copy(document["payload"]["config"])
-    if candidate.get("confirmation_required"):
-        _detach_missing(imported_config, candidate.get("content") or [])
-    if document["kind"] == "full":
-        config = imported_config
-        _materialize_global_background(config)
-        # Full exports keep the data-model version in the portable envelope so
-        # the payload can be validated independently.  Restore it before the
-        # configuration is persisted; otherwise every full round-trip silently
-        # downgrades the stored plan to an unversioned document.
-        model_version = document.get("model_version", 0)
-        if isinstance(model_version, int) and not isinstance(model_version, bool) \
-                and model_version > 0:
-            config["model_version"] = model_version
-        layout = _json_copy(document["payload"]["layout"])
-        if not candidate.get("same_source"):
-            settings = config.get("settings") or {}
-            settings.pop("known_devices", None)
-            settings.pop("new_device_ids", None)
-        details = {"counts": _counts(config, layout)}
-    else:
-        local_document = {**document, "payload": {**document["payload"], "config": imported_config}}
-        config, layout, details = build_space_merge(
-            local_document, current_config, current_layout,
-            duplicate_policy or candidate.get("duplicate_policy", "skip"),
-            same_source=bool(candidate.get("same_source")),
-        )
-        details["counts"] = _counts(config, layout)
-    return CONFIG_SCHEMA(config), LAYOUT_SCHEMA(layout), details
+    if duplicate_policy is not None and duplicate_policy != candidate.get("duplicate_policy"):
+        raise ImportFailure("conflict", "Duplicate policy changed after the preview")
+    if candidate.get("digest") != _candidate_digest(candidate):
+        raise ImportFailure("invalid_format", "Import preview candidate changed")
+    config = candidate.get("target_config")
+    layout = candidate.get("target_layout")
+    details = candidate.get("details")
+    if not isinstance(config, dict) or not isinstance(layout, dict) \
+            or not isinstance(details, dict):
+        raise ImportFailure("invalid_format", "Import preview has no materialized candidate")
+    # The current stores are intentionally unused: revisions are checked by
+    # the websocket handler under the write lock before this function runs.
+    _ = current_config, current_layout
+    return _json_copy(config), _json_copy(layout), _json_copy(details)
@@ -0,0 +1,431 @@
+"""Issue #329 — wall junction limits, Python mirror of src/junction-limits.ts.
+
+The card refuses a WRITE that would ADD a junction violation; this module is
+the backend half of that contract for `config/set` and `plan/optimize` (#333)
+— the two commands a client can use to write arbitrary geometry. Import and
+backup restore are DELIBERATELY outside the gate: #329 §3 promises that a
+restore is never blocked, so a crafted import can still persist violations —
+they are then inherited, never legalised as new ones. It mirrors П1–П4 exactly, including the two legal
+incidences of П4 (a shared node and a T-joint into the middle of a foreign
+wall) and the П3 rule that measures the collinear same-thickness WALL RUN
+rather than one catalogue atom.
+
+П5 (the room keeps at least 25 cm² of interior) is deliberately NOT mirrored:
+it is a statement about the rendered wall bodies, and reproducing the mitre /
+inset pipeline in Python would be a second geometry implementation whose drift
+is a larger risk than the rule it guards. A document that violates only П5 is
+ugly, not corrupt — see docs/specs/329-junction-limits.md §5.
+"""
+
+from __future__ import annotations
+
+import math
+
+import logging
+
+from .wall_segment_model import (
+    WALL_SEGMENT_MODEL_VERSION, WallSegmentMigrationError, commit_wall_segment_model,
+)
+
+_LOGGER = logging.getLogger(__name__)
+
+MIN_JUNCTION_ANGLE_DEG = 15.0
+MAX_JUNCTION_VALENCE = 6
+MIN_SEGMENT_LENGTH_CM = 20.0
+MIN_NODE_DISTANCE_CM = 5.0
+
+GRID_STEP_N = 1 / 240
+
+_EPS = 1e-9
+# #331 §2.1: below this two points are ONE node / a node is ON the wall —
+# floating debris of pre-canonicalisation arithmetic, not a near miss.
+_INCIDENT_EPS = 2e-7
+_KEY_FACTOR = 1e7
+
+
+class JunctionLimitError(ValueError):
+    """A write introduced a wall-junction violation (#329)."""
+
+    def __init__(self, space_id: str, rule: str, subject: str,
+                 actual: float, limit: float) -> None:
+        self.space_id = space_id
+        self.rule = rule
+        self.subject = subject
+        self.actual = actual
+        self.limit = limit
+        self.code = f"junction_limit_{rule}"
+        super().__init__(
+            f"space={space_id}; rule={rule}; subject={subject}; "
+            f"actual={actual:.12g}; limit={limit:.12g}"
+        )
+
+
+def _finite_point(point: object) -> bool:
+    return (
+        isinstance(point, (list, tuple))
+        and len(point) >= 2
+        and all(isinstance(value, (int, float)) and math.isfinite(value)
+                for value in point[:2])
+    )
+
+
+def _quantize_key_coord(value: float) -> float:
+    """#331 §2.1: the canonicalisation formula — sign*floor(|v|*f+0.5)/f.
+
+    Native round() is banker's rounding and parts ways with JS Math-style
+    rounding on .5 ticks; coordinate canonicalisation already encodes this
+    parity lesson, and node keys must follow it. -0 normalises to 0.
+    """
+    rounded = math.copysign(
+        math.floor(abs(value) * _KEY_FACTOR + 0.5), value,
+    ) / _KEY_FACTOR
+    return 0.0 if rounded == 0 else rounded
+
+
+def _key(point) -> str:
+    return f"{_quantize_key_coord(point[0])},{_quantize_key_coord(point[1])}"
+
+
+def _length(a, b) -> float:
+    return math.hypot(b[0] - a[0], b[1] - a[1])
+
+
+def cm_to_units(cm: float, cell_cm: float, grid_pitch: float = GRID_STEP_N) -> float:
+    return (cm / (cell_cm or 1)) * grid_pitch
+
+
+def limit_segments(space: dict) -> list[dict]:
+    """Every wall the limits judge: contour atoms, partitions, draft segments."""
+    segments: list[dict] = []
+    for segment in space.get("wall_segments") or []:
+        if _finite_point(segment.get("a")) and _finite_point(segment.get("b")):
+            segments.append({
+                "id": str(segment.get("id") or ""),
+                "a": segment["a"], "b": segment["b"],
+                "cm": float(segment.get("cm") or 0),
+            })
+    for partition in space.get("partitions") or []:
+        if _finite_point(partition.get("a")) and _finite_point(partition.get("b")):
+            segments.append({
+                "id": str(partition.get("id") or ""),
+                "a": partition["a"], "b": partition["b"],
+                "cm": float(partition.get("cm") or 0),
+            })
+    for draft in space.get("room_drafts") or []:
+        points = draft.get("points") or []
+        drafted = draft.get("segments") or []
+        for index in range(max(len(points) - 1, 0)):
+            if not (_finite_point(points[index]) and _finite_point(points[index + 1])):
+                continue
+            piece = drafted[index] if index < len(drafted) else {}
+            segments.append({
+                "id": str((piece or {}).get("id")
+                          or f"{draft.get('id') or 'draft'}-{index}"),
+                "a": points[index], "b": points[index + 1],
+                "cm": float((piece or {}).get("cm") or 0),
+            })
+    return [segment for segment in segments
+            if _length(segment["a"], segment["b"]) > _EPS]
+
+
+def check_nodes(segments: list[dict]) -> list[tuple[str, str, float, float]]:
+    """П1 + П2: valence of a node and the narrowest wedge in it."""
+    rays: dict[str, list[float]] = {}
+    for segment in segments:
+        for start, end in ((segment["a"], segment["b"]), (segment["b"], segment["a"])):
+            rays.setdefault(_key(start), []).append(
+                math.atan2(end[1] - start[1], end[0] - start[0])
+            )
+    violations: list[tuple[str, str, float, float]] = []
+    for node, angles in rays.items():
+        if len(angles) > MAX_JUNCTION_VALENCE:
+            violations.append(
+                ("valence", node, float(len(angles)), float(MAX_JUNCTION_VALENCE))
+            )
+        if len(angles) < 2:
+            continue
+        ordered = sorted(angles)
+        smallest = math.inf
+        for index, value in enumerate(ordered):
+            delta = ordered[(index + 1) % len(ordered)] - value
+            if index == len(ordered) - 1:
+                delta += math.pi * 2
+            degrees = (delta * 180) / math.pi
+            # A ~0° pair is NOT a violation — and cannot be (#331 revision 4,
+            # learned in the field): a shared wall of two adjacent rooms is
+            # two co-located owner atoms ON ONE LINE, so every shared-wall
+            # node carries a legitimate 0° pair by construction. An exact
+            # duplicate stays a KNOWN LIMITATION of П1 at this level.
+            if _EPS < degrees < smallest:
+                smallest = degrees
+        if smallest < MIN_JUNCTION_ANGLE_DEG - 1e-9:
+            violations.append(("angle", node, smallest, MIN_JUNCTION_ANGLE_DEG))
+    return violations
+
+
+def _axis_degrees(segment: dict) -> float:
+    degrees = math.degrees(math.atan2(
+        segment["b"][1] - segment["a"][1], segment["b"][0] - segment["a"][0]
+    ))
+    return (degrees % 180 + 180) % 180
+
+
+def _collinear(left: dict, right: dict, tolerance_deg: float = 1.0) -> bool:
+    delta = abs(_axis_degrees(left) - _axis_degrees(right))
+    return min(delta, 180 - delta) <= tolerance_deg
+
+
+def _build_node_index(segments: list[dict]) -> dict[str, list[dict]]:
+    by_node: dict[str, list[dict]] = {}
+    for item in segments:
+        for point in (item["a"], item["b"]):
+            by_node.setdefault(_key(point), []).append(item)
+    return by_node
+
+
+def collinear_run_length_units(
+    segment: dict, segments: list[dict],
+    by_node_index: dict[str, list[dict]] | None = None,
+) -> float:
+    """Length of the WALL a segment belongs to, not of the atom.
+
+    #331 §2.3/§2.4: an iterative edge walk over the collinear component — no
+    recursion (a 10 000-atom chain must answer, not overflow), no
+    combinatorial DFS (every atom joins at most once, O(E)), no silently
+    dropped fork. Collinearity is measured against the BASE segment's axis,
+    so an arc of small per-atom turns cannot pose as one straight wall.
+
+    #330 §4.3: the per-check caller builds the node index once.
+    """
+    by_node = by_node_index if by_node_index is not None else _build_node_index(segments)
+    visited = {id(segment)}
+    total = _length(segment["a"], segment["b"])
+    frontier = [segment["a"], segment["b"]]
+    base_cm = float(segment.get("cm") or 0)
+    while frontier:
+        node = frontier.pop()
+        for candidate in by_node.get(_key(node), ()):
+            if id(candidate) in visited:
+                continue
+            if not _collinear(candidate, segment):
+                continue
+            if float(candidate.get("cm") or 0) != base_cm:
+                continue
+            visited.add(id(candidate))
+            total += _length(candidate["a"], candidate["b"])
+            frontier.append(candidate["a"])
+            frontier.append(candidate["b"])
+    return total
+
+def check_segment_lengths(
+    segments: list[dict], cell_cm: float, grid_pitch: float = GRID_STEP_N,
+) -> list[tuple[str, str, float, float]]:
+    """П3: a wall is at least 20 cm and never shorter than its own thickness."""
+    violations: list[tuple[str, str, float, float]] = []
+    by_node = _build_node_index(segments)
+    for segment in segments:
+        units = collinear_run_length_units(segment, segments, by_node)
+        cm = (units / grid_pitch) * (cell_cm or 1)
+        thickness = float(segment.get("cm") or 0)
+        limit = max(MIN_SEGMENT_LENGTH_CM, thickness if thickness > 0 else 0.0)
+        if cm < limit - 1e-9:
+            violations.append((
+                "length", str(segment.get("id") or _key(segment["a"])), cm, limit,
+            ))
+    return violations
+
+
+def _distance_to_segment(point, a, b) -> float:
+    dx, dy = b[0] - a[0], b[1] - a[1]
+    length_sq = dx * dx + dy * dy
+    t = 0.0 if length_sq <= _EPS else max(0.0, min(1.0, (
+        (point[0] - a[0]) * dx + (point[1] - a[1]) * dy
+    ) / length_sq))
+    return math.hypot(point[0] - (a[0] + dx * t), point[1] - (a[1] + dy * t))
+
+
+def check_node_distances(
+    segments: list[dict], cell_cm: float, grid_pitch: float = GRID_STEP_N,
+) -> list[tuple[str, str, float, float]]:
+    """П4: non-incident nodes and node-to-foreign-wall clearance.
+
+    #330 §4.5: the all-pairs form cost 372 ms on 576 atoms. Nodes and padded
+    segment bounding boxes are hashed into a grid with the threshold as cell
+    size; each node is compared only against its 9-cell neighbourhood.
+    Verdicts are identical — pinned by the equivalence unit and the parity
+    suite. Pair order inside the subject follows the lexicographic key order,
+    which replaces the i<j of the all-pairs loop.
+    """
+    nodes: dict[str, list] = {}
+    for segment in segments:
+        nodes[_key(segment["a"])] = segment["a"]
+        nodes[_key(segment["b"])] = segment["b"]
+    min_units = cm_to_units(MIN_NODE_DISTANCE_CM, cell_cm, grid_pitch)
+    size = min_units if min_units > _EPS else 1.0
+
+    node_grid: dict[tuple[int, int], list] = {}
+    for node_key, point in nodes.items():
+        node_grid.setdefault(
+            (int(point[0] // size), int(point[1] // size)), []
+        ).append((node_key, point))
+    segment_grid: dict[tuple[int, int], list] = {}
+    for segment in segments:
+        x0 = min(segment["a"][0], segment["b"][0]) - min_units
+        x1 = max(segment["a"][0], segment["b"][0]) + min_units
+        y0 = min(segment["a"][1], segment["b"][1]) - min_units
+        y1 = max(segment["a"][1], segment["b"][1]) + min_units
+        for cx in range(int(x0 // size), int(x1 // size) + 1):
+            for cy in range(int(y0 // size), int(y1 // size) + 1):
+                segment_grid.setdefault((cx, cy), []).append(segment)
+
+    violations: list[tuple[str, str, float, float]] = []
+    for node_key, point in nodes.items():
+        cx, cy = int(point[0] // size), int(point[1] // size)
+        for dx in (-1, 0, 1):
+            for dy in (-1, 0, 1):
+                for other_key, other in node_grid.get((cx + dx, cy + dy), ()):
+                    if node_key >= other_key:
+                        continue
+                    distance = _length(point, other)
+                    # #331 §2.1: raw debris within the incidence quantum is ONE
+                    # node on two neighbouring keys — never a near miss.
+                    if distance <= _INCIDENT_EPS:
+                        continue
+                    if distance < min_units - 1e-9:
+                        violations.append((
+                            "distance", f"{node_key} ↔ {other_key}",
+                            (distance / grid_pitch) * (cell_cm or 1),
+                            MIN_NODE_DISTANCE_CM,
+                        ))
+        for segment in segment_grid.get((cx, cy), ()):
+            # A node that belongs to the wall is a legal corner or T-joint.
+            if _key(segment["a"]) == node_key or _key(segment["b"]) == node_key:
+                continue
+            distance = _distance_to_segment(point, segment["a"], segment["b"])
+            # Sitting exactly ON the wall is the other legal incidence.
+            if distance <= _INCIDENT_EPS:
+                continue
+            if distance < min_units - 1e-9:
+                violations.append((
+                    "distance",
+                    f"{node_key} → {segment.get('id') or _key(segment['a'])}",
+                    (distance / grid_pitch) * (cell_cm or 1),
+                    MIN_NODE_DISTANCE_CM,
+                ))
+    return violations
+
+def space_violations(space: dict) -> list[tuple[str, str, float, float]]:
+    """П1–П4 over one space, in the frontend's order."""
+    segments = limit_segments(space)
+    cell_cm = float(space.get("cell_cm") or 1)
+    return [
+        *check_nodes(segments),
+        *check_segment_lengths(segments, cell_cm),
+        *check_node_distances(segments, cell_cm),
+    ]
+
+
+def _migrated_spaces(config: dict | None, *, side: str = "previous") -> dict[str, dict]:
+    """Spaces of one document AFTER the wall-segment migration, by id.
+
+    The limits read `wall_segments`, so a document that predates the catalogue
+    reports NO walls at all — a legacy space would answer "no violations"
+    regardless of its geometry. Comparing such a baseline against a candidate
+    the client already migrated counts every inherited violation as new and
+    refuses an unrelated edit (spec §3 forbids exactly that). Both sides are
+    therefore judged after the SAME migration, mirroring the frontend barrier.
+
+    A document that cannot be migrated is not a reason to refuse the write:
+    the wall-model barrier owns that verdict and reports it with its own code.
+    Here it simply means there is no baseline to inherit from.
+    """
+    if not isinstance(config, dict):
+        return {}
+    # #330 §4.6: a document that already carries the current catalogue is
+    # used as-is. The migration's purpose here is to never compare a
+    # catalogue-less legacy baseline against a migrated candidate; a
+    # current-version document has the catalogue, so the purpose is met with
+    # zero work — while a no-op re-migration costs 0.8 s of _atomize on a
+    # 576-atom plan. Equivalence "as-is == migrated" for current-version
+    # documents is pinned by a parity case.
+    if int(config.get("model_version") or 0) >= WALL_SEGMENT_MODEL_VERSION:
+        migrated = config
+    else:
+        try:
+            migrated, _ = commit_wall_segment_model(config)
+        except (WallSegmentMigrationError, ValueError) as error:
+            # The wall-model barrier owns this verdict and reports it with its
+            # own code; here it merely means "no catalogue to read".
+            _LOGGER.debug("junction limits: %s migration fell back: %s", side, error)
+            migrated = config
+        except Exception:
+            # #331 §2.6 (AC6): a genuine migration bug on the CANDIDATE side
+            # must surface as an honest WS error, not a silent "no
+            # violations". The PREVIOUS side keeps the wide fallback — an
+            # unprovable inheritance is no reason to block an unrelated write
+            # (the exact P1 symptom this task fixes).
+            if side == "candidate":
+                raise
+            _LOGGER.debug("junction limits: previous-side migration bug swallowed by design")
+            migrated = config
+    return {
+        str(space.get("id")): space
+        for space in (migrated or {}).get("spaces") or []
+        if isinstance(space, dict)
+    }
+
+
+def space_violation_counts(spaces: dict[str, dict]) -> dict[str, dict[str, int]]:
+    """Violation counts per space per rule — the shape the barrier consumes
+    and the rev cache (#330 §4.2) stores. Documents are NOT retained."""
+    result: dict[str, dict[str, int]] = {}
+    for space_id, space in spaces.items():
+        counts: dict[str, int] = {}
+        for rule, _subject, _actual, _limit in space_violations(space):
+            counts[rule] = counts.get(rule, 0) + 1
+        result[space_id] = counts
+    return result
+
+
+def validate_junction_limits(
+    config: dict, previous: dict | None = None, *,
+    baseline_counts: dict[str, dict[str, int]] | None = None,
+) -> dict[str, dict[str, int]]:
+    """Refuse a write that ADDS a junction violation; inherit the rest.
+
+    Counted per RULE, not per subject: a structural write re-atomises and
+    re-keys contour segments, so subject identity is not stable across the
+    barrier and matching by it would report an inherited violation as new
+    (the mistake that refused legitimate resizes on the frontend). Spec §3:
+    a write may keep existing violations, it may never add one.
+
+    A LEGACY document still goes through `commit_wall_segment_model` first,
+    so a catalogue-less baseline is compared in the same terms as the
+    candidate; a current-version document is used as-is (#330 §4.6).
+
+    `baseline_counts` (#330 §4.2) replaces the previous document entirely:
+    the caller caches the counts of the stored document by config_rev, so a
+    repeated write does not even touch `previous`. Returns the candidate's
+    counts — the value to cache after a successful write.
+    """
+    if baseline_counts is not None:
+        old_counts = baseline_counts
+    else:
+        old_counts = space_violation_counts(_migrated_spaces(previous))
+    new_spaces = _migrated_spaces(config, side="candidate")
+    candidate_counts: dict[str, dict[str, int]] = {}
+    for space_id, space in new_spaces.items():
+        # A brand-new space has nothing to inherit from — but neither is a
+        # first write allowed to arrive already broken.
+        before = old_counts.get(space_id) or {}
+        after: dict[str, list[tuple[str, str, float, float]]] = {}
+        for violation in space_violations(space):
+            after.setdefault(violation[0], []).append(violation)
+        candidate_counts[space_id] = {
+            rule: len(items) for rule, items in after.items()
+        }
+        for rule, items in after.items():
+            if len(items) > before.get(rule, 0):
+                _, subject, actual, limit = items[0]
+                raise JunctionLimitError(space_id, rule, subject, actual, limit)
+    return candidate_counts
@@ -16,5 +16,5 @@
  "issue_tracker": "https://github.com/Matysh/houseplan-card/issues",
  "requirements": [],
  "single_config_entry": true,
-  "version": "1.67.0-beta.3"
+  "version": "1.69.0-beta.1"
 }
@@ -0,0 +1,95 @@
+"""Read-only projections of the stored plan (#256).
+
+A full configuration is 70 KB on a real installation: three spaces and 139
+markers. Every diagnostic question — "which space does this marker point at",
+"how many markers are hidden", "what is on the first floor" — used to require
+downloading all of it, because `houseplan/config/get` had no way to ask for
+less.
+
+The functions here are pure and deliberately unaware of Home Assistant: the
+websocket handlers stay thin, and the interesting part is covered by tests that
+run without the HA harness.
+
+Two rules shape everything below.
+
+* Absent parameter means *no projection*. The response must stay byte-for-byte
+  what it was before this module existed; no existing client may notice it.
+* A projection never invents or repairs data. An unknown field name simply adds
+  nothing, and an unknown space yields an empty list rather than an error — the
+  caller distinguishes "no such thing" from "broken" by content, not by an
+  error code.
+"""
+from __future__ import annotations
+
+from typing import Any, Iterable
+
+
+def _names(value: Any) -> list[str] | None:
+    """Normalise a field list; anything unusable means "no projection"."""
+    if not isinstance(value, (list, tuple)):
+        return None
+    names = [str(item) for item in value if isinstance(item, str) and item]
+    return names or None
+
+
+def project_markers(markers: Any, marker_fields: Iterable[str] | None) -> Any:
+    """Keep only the requested marker fields, plus `id`.
+
+    `id` is added unconditionally: a marker without it cannot be matched to
+    anything, so a projection that drops it produces an answer nobody can use.
+    """
+    names = _names(marker_fields)
+    if names is None or not isinstance(markers, list):
+        return markers
+    keep = {"id", *names}
+    out = []
+    for marker in markers:
+        if not isinstance(marker, dict):
+            out.append(marker)
+            continue
+        out.append({key: value for key, value in marker.items() if key in keep})
+    return out
+
+
+def project_config(
+    config: Any,
+    *,
+    space_id: str | None = None,
+    fields: Iterable[str] | None = None,
+    marker_fields: Iterable[str] | None = None,
+) -> Any:
+    """Return a narrowed copy of the configuration.
+
+    The original object is never mutated: the caller hands us the store's
+    document, and a projection that edited it in place would corrupt the very
+    thing it was asked to read.
+    """
+    if not isinstance(config, dict):
+        return config
+    field_names = _names(fields)
+    if space_id is None and field_names is None and _names(marker_fields) is None:
+        return config
+
+    projected: dict[str, Any] = dict(config)
+    if space_id is not None:
+        spaces = projected.get("spaces")
+        projected["spaces"] = [
+            space for space in spaces
+            if isinstance(space, dict) and str(space.get("id", "")) == str(space_id)
+        ] if isinstance(spaces, list) else spaces
+    if marker_fields is not None:
+        projected["markers"] = project_markers(projected.get("markers"), marker_fields)
+    if field_names is not None:
+        projected = {key: value for key, value in projected.items() if key in set(field_names)}
+    return projected
+
+
+def project_layout(layout: Any, *, space_id: str | None = None) -> Any:
+    """Keep only the positions of one space."""
+    if space_id is None or not isinstance(layout, dict):
+        return layout
+    wanted = str(space_id)
+    return {
+        key: position for key, position in layout.items()
+        if isinstance(position, dict) and str(position.get("s", "")) == wanted
+    }
@@ -101,6 +101,11 @@ class HouseplanData:
    # Parsed import candidates are short-lived, user-bound and memory-only.
    # dict keeps insertion order, which lets the preview service evict oldest.
    import_previews: dict[str, dict[str, Any]] = field(default_factory=dict)
+    # #330 §4.2: junction-limit violation counts of the STORED document,
+    # keyed by its rev — (rev, {space_id: {rule: count}}). One slot,
+    # memory-only, invalidated by a rev mismatch; the previous document is
+    # not re-judged on every write. Counts only — documents are never held.
+    junction_baseline: tuple[int, dict[str, dict[str, int]]] | None = None


 HouseplanConfigEntry = ConfigEntry[HouseplanData]
@@ -187,8 +187,11 @@ class TrailRecorder:
            # just finished calibrating) must start recording NOW, not at the
            # next state change — otherwise the first seconds of the path are
            # lost.
+            now = time.time()
+            changed = False
            for src in self.pairs:
-                self._sample(src, time.time())
+                changed |= self._sample(src, now)
+            self._handle_sample_change(changed, now)

    def _source_failure_reason(self, source: str) -> str | None:
        """Classify only refresh-time health evidence.
@@ -244,25 +247,70 @@ class TrailRecorder:

    async def async_delete(self, marker: str) -> bool:
        """Stop and erase one marker without racing subscription refresh/save."""
+        return bool(await self._async_delete_many({marker}))
+
+    async def async_purge_orphans(self, config: dict[str, Any]) -> int:
+        """Erase trails whose marker is absent or a removal tombstone.
+
+        A tombstone deliberately stays in config so discovery cannot resurrect
+        a deleted device.  For live tracking and trail ownership it is absent:
+        this is the same boundary used by ``async_refresh`` above.
+        """
+        live_marker_ids = {
+            str(marker.get("id"))
+            for marker in config.get("markers") or []
+            if marker.get("id") is not None and marker.get("removed") is not True
+        }
+        orphan_ids = set(self.book.data) - live_marker_ids
+        if not orphan_ids:
+            return 0
+        try:
+            return await self._async_delete_many(orphan_ids)
+        except Exception:  # noqa: BLE001 — config commit already succeeded
+            _LOGGER.exception(
+                "House Plan: removing orphan vacuum trails failed: markers=%s",
+                sorted(orphan_ids),
+            )
+            return 0
+
+    async def _async_delete_many(self, markers: set[str]) -> int:
+        """Delete one or more books with one subscription/store transaction."""
        async with self._refresh_lock:
            # The trail book owns deletion. When it has no such marker, this
            # is a no-op and must not silently damage the live tracking graph.
-            removed = self.book.delete(marker)
+            removed = {
+                marker: self.book.data.pop(marker)
+                for marker in markers
+                if marker in self.book.data
+            }
            if not removed:
-                return False
-            for src in list(self.pairs):
-                kept = [pair for pair in self.pairs[src] if pair[0] != marker]
-                if kept:
-                    self.pairs[src] = kept
-                else:
-                    del self.pairs[src]
-            self._resubscribe()
-            if self._unsub_save:
-                self._unsub_save()
-                self._unsub_save = None
-            await self.store.async_save(self.book.data)
+                return 0
+            previous_pairs = {src: list(pairs) for src, pairs in self.pairs.items()}
+            had_pending_save = self._unsub_save is not None
+            try:
+                for src in list(self.pairs):
+                    kept = [pair for pair in self.pairs[src] if pair[0] not in removed]
+                    if kept:
+                        self.pairs[src] = kept
+                    else:
+                        del self.pairs[src]
+                self._resubscribe()
+                if self._unsub_save:
+                    self._unsub_save()
+                    self._unsub_save = None
+                await self.store.async_save(self.book.data)
+            except Exception:
+                # The store is the durable authority. Restore the in-memory
+                # owner graph so the next successful config sync can retry
+                # instead of leaving an orphan on disk forever (#335).
+                self.book.data.update(removed)
+                self.pairs = previous_pairs
+                self._resubscribe()
+                if had_pending_save:
+                    self._schedule_save()
+                raise
        self.hass.bus.async_fire("houseplan_trail_updated", {})
-        return True
+        return len(removed)

    def _resubscribe(self) -> None:
        """Replace the state subscription for the current pair graph."""
@@ -344,6 +392,10 @@ class TrailRecorder:
        for src, pair_list in self.pairs.items():
            if eid == src or any(eid == vac for _, vac in pair_list):
                changed |= self._sample(src, now)
+        self._handle_sample_change(changed, now)
+
+    def _handle_sample_change(self, changed: bool, now: float) -> None:
+        """Persist and announce one logical sampling pass when it changed."""
        if changed:
            self._schedule_save()
            if now - self._last_fire >= FIRE_THROTTLE_S:
@@ -0,0 +1,30 @@
+{
+  "config": {
+    "step": {
+      "user": {
+        "title": "House Plan",
+        "data": {
+          "admin_only": "Nur Administratoren dürfen den Grundriss bearbeiten"
+        }
+      }
+    },
+    "abort": {
+      "single_instance_allowed": "Bereits konfiguriert – es ist nur eine Instanz zulässig."
+    }
+  },
+  "options": {
+    "step": {
+      "init": {
+        "data": {
+          "admin_only": "Nur Administratoren dürfen den Grundriss bearbeiten"
+        }
+      }
+    }
+  },
+  "issues": {
+    "broken_plan": {
+      "title": "Grundrissbild fehlt",
+      "description": "Die Plandatei `{file}` für den Bereich `{space}` wurde in `config/houseplan/plans/` nicht gefunden. In den Bereichseinstellungen der House-Plan-Karte den Plan erneut hochladen."
+    }
+  }
+}
@@ -5,6 +5,8 @@ Kept separate so it can be covered by unit tests (only voluptuous is needed).
 from __future__ import annotations

 from collections import Counter
+import copy
+import math
 import re

 import voluptuous as vol
@@ -76,14 +78,551 @@ class PartitionOpeningJambMarginError(ValueError):
        )


+class WallModelClientOutdatedError(ValueError):
+    """A stale client tried to replace an already-migrated v8 document."""
+
+    code = "wall_model_client_outdated"
+
+
+def _legacy_wall_model_projection(config: dict) -> dict:
+    """Structural view an older client can faithfully round-trip."""
+    projected = copy.deepcopy(config)
+    projected.pop("model_version", None)
+    for space in projected.get("spaces") or []:
+        space.pop("wall_segments", None)
+        for room in space.get("rooms") or []:
+            room.pop("wall_ids", None)
+        for draft in space.get("room_drafts") or []:
+            for segment in draft.get("segments") or []:
+                segment.pop("id", None)
+        for opening in space.get("openings") or []:
+            host = opening.get("host")
+            if isinstance(host, dict) and host.get("kind") == "wall":
+                opening.pop("host", None)
+    return projected
+
+
+def _catalog_coupled_wall_geometry_projection(config: dict) -> list[dict]:
+    """Legacy geometry whose edit must also update the v8 contour catalogue.
+
+    Drafts, partitions and columns carry their own ids. Openings carry an
+    explicit v8 host and are checked against it by CONFIG_SCHEMA. None of those
+    independent objects requires a different contour wall_segments catalogue.
+    """
+    result: list[dict] = []
+    for space in config.get("spaces") or []:
+        rooms = []
+        for room in space.get("rooms") or []:
+            rooms.append({key: copy.deepcopy(room.get(key)) for key in (
+                "id", "poly", "x", "y", "w", "h", "open_to"
+            ) if key in room})
+        result.append({
+            "id": space.get("id"),
+            "rooms": rooms,
+            "walls": copy.deepcopy(space.get("walls") or []),
+            "open_spans": copy.deepcopy(space.get("open_spans") or []),
+        })
+    return result
+
+
+def _wall_catalog_projection(config: dict) -> list[dict]:
+    """Authoritative part a current v8 structural writer must update."""
+    return [{
+        "id": space.get("id"),
+        "wall_segments": copy.deepcopy(space.get("wall_segments")),
+    } for space in config.get("spaces") or []]
+
+
+def _restore_wall_model_fields(config: dict, previous: dict) -> None:
+    """Hydrate only v8 identity fields after an exact legacy round-trip."""
+    config["model_version"] = previous["model_version"]
+    old_spaces = {str(space.get("id")): space for space in previous.get("spaces") or []}
+    for space in config.get("spaces") or []:
+        old_space = old_spaces.get(str(space.get("id")))
+        if old_space is None:
+            continue
+        space["wall_segments"] = copy.deepcopy(old_space.get("wall_segments") or [])
+        old_rooms = {str(room.get("id")): room for room in old_space.get("rooms") or []}
+        for room in space.get("rooms") or []:
+            old_room = old_rooms.get(str(room.get("id")))
+            if old_room is not None and "wall_ids" in old_room:
+                room["wall_ids"] = copy.deepcopy(old_room["wall_ids"])
+        old_drafts = {str(draft.get("id")): draft for draft in old_space.get("room_drafts") or []}
+        for draft in space.get("room_drafts") or []:
+            old_draft = old_drafts.get(str(draft.get("id")))
+            if old_draft is None:
+                continue
+            old_segments = old_draft.get("segments") or []
+            for index, segment in enumerate(draft.get("segments") or []):
+                if index < len(old_segments) and old_segments[index].get("id"):
+                    segment["id"] = old_segments[index]["id"]
+        old_openings = {
+            str(opening.get("id")): opening for opening in old_space.get("openings") or []
+        }
+        for opening in space.get("openings") or []:
+            old_opening = old_openings.get(str(opening.get("id")))
+            old_host = (old_opening or {}).get("host")
+            if isinstance(old_host, dict) and old_host.get("kind") == "wall":
+                opening["host"] = copy.deepcopy(old_host)
+
+
+def validate_wall_model_transition(config: dict, previous: dict | None) -> None:
+    """Do not let omission of model_version bypass v8 semantic validation."""
+    try:
+        old_model = int((previous or {}).get("model_version", 0))
+        new_model = int(config.get("model_version", 0))
+    except (TypeError, ValueError):
+        return  # CONFIG_SCHEMA owns malformed values.
+    previous = previous or {}
+    contour_geometry_changed = (
+        _catalog_coupled_wall_geometry_projection(config)
+        != _catalog_coupled_wall_geometry_projection(previous)
+    )
+    if old_model >= 8 and new_model < 8:
+        if not contour_geometry_changed:
+            _restore_wall_model_fields(config, previous or {})
+            # Re-run semantic parity after hydration; previous identity is
+            # accepted only when it still matches the submitted projections.
+            validated = CONFIG_SCHEMA(config)
+            config.clear()
+            config.update(validated)
+            return
+        raise WallModelClientOutdatedError(
+            f"stored model={old_model}; submitted model={new_model}"
+        )
+    if old_model >= 8 and 8 <= new_model <= old_model and contour_geometry_changed:
+        # The realistic stale-client case echoes model_version and the unknown
+        # catalogue verbatim while changing room/contour geometry. Let the
+        # frontend show the dedicated reload guidance instead of a generic
+        # schema error. Independent drafts, partitions, columns and explicitly
+        # hosted openings are validated by CONFIG_SCHEMA without requiring a
+        # contour catalogue change (#314).
+        #
+        # A submitted model ABOVE the stored one is excluded on purpose (#319):
+        # a stale client can only echo the stored version, never raise it. The
+        # first write of a newer client legitimately drops legacy projection
+        # fields (an orphan open_span/open_to) without touching the catalogue;
+        # treating that as "outdated" wedged every structural write forever.
+        if _wall_catalog_projection(config) == _wall_catalog_projection(previous):
+            raise WallModelClientOutdatedError(
+                f"stored model={old_model}; unchanged wall catalogue"
+            )
+
+
 # One normalized canvas width contains this many physical grid cells. Keep in
 # sync with GRID_STEP_N/NORM_W in the frontend; it is a geometry scale, not a
 # user setting.
 NORMALIZED_CANVAS_CELLS = 240.0
+_DEFAULT_ROOM_WALL_CM = 15.0
+_OPTIMIZE_REHOST_EPSILON = 1e-8
+
+
+def _room_polygon(room: dict) -> list[list[float]]:
+    poly = room.get("poly")
+    if isinstance(poly, list) and len(poly) >= 3:
+        return poly
+    if all(key in room for key in ("x", "y", "w", "h")):
+        x, y = float(room["x"]), float(room["y"])
+        w, h = float(room["w"]), float(room["h"])
+        return [[x, y], [x + w, y], [x + w, y + h], [x, y + h]]
+    return []
+
+
+def _segment_metrics(a: list, b: list) -> tuple[float, float, float]:
+    dx, dy = float(b[0]) - float(a[0]), float(b[1]) - float(a[1])
+    return dx, dy, math.hypot(dx, dy)
+
+
+def _line_distance(point: list, a: list, b: list) -> float:
+    dx, dy, length = _segment_metrics(a, b)
+    if length <= _OPTIMIZE_REHOST_EPSILON:
+        return math.inf
+    return abs((float(point[0]) - float(a[0])) * dy
+               - (float(point[1]) - float(a[1])) * dx) / length
+
+
+def _projection(point: list, a: list, b: list) -> float:
+    dx, dy, length = _segment_metrics(a, b)
+    if length <= _OPTIMIZE_REHOST_EPSILON:
+        return math.inf
+    return ((float(point[0]) - float(a[0])) * dx
+            + (float(point[1]) - float(a[1])) * dy) / length
+
+
+def _segment_covers(a: list, b: list, target_a: list, target_b: list) -> bool:
+    """Return whether one exact collinear segment covers the target."""
+    _, _, length = _segment_metrics(a, b)
+    if length <= _OPTIMIZE_REHOST_EPSILON:
+        return False
+    if (_line_distance(target_a, a, b) > _OPTIMIZE_REHOST_EPSILON
+            or _line_distance(target_b, a, b) > _OPTIMIZE_REHOST_EPSILON):
+        return False
+    for point in (target_a, target_b):
+        along = _projection(point, a, b)
+        if along < -_OPTIMIZE_REHOST_EPSILON or along > length + _OPTIMIZE_REHOST_EPSILON:
+            return False
+    return True
+
+
+def _segments_overlap_on_axis(a: list, b: list, other_a: list, other_b: list) -> bool:
+    if (_line_distance(other_a, a, b) > _OPTIMIZE_REHOST_EPSILON
+            or _line_distance(other_b, a, b) > _OPTIMIZE_REHOST_EPSILON):
+        return False
+    _, _, length = _segment_metrics(a, b)
+    lo, hi = sorted((_projection(other_a, a, b), _projection(other_b, a, b)))
+    return min(length, hi) - max(0.0, lo) > _OPTIMIZE_REHOST_EPSILON
+
+
+def _angle_delta_mod_180(first: float, second: float) -> float:
+    return abs((first - second + 90.0) % 180.0 - 90.0)
+
+
+def _segments_cover_target(segments: list[tuple[list, list]], target_a: list, target_b: list) -> bool:
+    """Whether a collinear union covers one complete positive target span."""
+    dx, dy, length = _segment_metrics(target_a, target_b)
+    if length <= _OPTIMIZE_REHOST_EPSILON:
+        return False
+    ranges = []
+    for a, b in segments:
+        if (_line_distance(a, target_a, target_b) > _OPTIMIZE_REHOST_EPSILON
+                or _line_distance(b, target_a, target_b) > _OPTIMIZE_REHOST_EPSILON):
+            continue
+        lo, hi = sorted((_projection(a, target_a, target_b),
+                         _projection(b, target_a, target_b)))
+        lo, hi = max(0.0, lo), min(length, hi)
+        if hi - lo > _OPTIMIZE_REHOST_EPSILON:
+            ranges.append((lo, hi))
+    reached = 0.0
+    for lo, hi in sorted(ranges):
+        if lo > reached + _OPTIMIZE_REHOST_EPSILON:
+            return False
+        reached = max(reached, hi)
+        if reached >= length - _OPTIMIZE_REHOST_EPSILON:
+            return True
+    return False
+
+
+_OPTIMIZE_PARTITION_KEYS = {"id", "a", "b", "cm"}
+
+
+def _known_optimize_partition(partition: dict) -> bool:
+    return isinstance(partition, dict) and set(partition).issubset(_OPTIMIZE_PARTITION_KEYS)
+
+
+def _axis_range(a: list, b: list, axis_a: list, axis_b: list) -> tuple[float, float] | None:
+    """Project one positive collinear overlap onto ``axis_a -> axis_b``."""
+    if not (isinstance(a, list) and len(a) == 2
+            and isinstance(b, list) and len(b) == 2):
+        return None
+    if (_line_distance(a, axis_a, axis_b) > _OPTIMIZE_REHOST_EPSILON
+            or _line_distance(b, axis_a, axis_b) > _OPTIMIZE_REHOST_EPSILON):
+        return None
+    _, _, length = _segment_metrics(axis_a, axis_b)
+    lo, hi = sorted((_projection(a, axis_a, axis_b),
+                     _projection(b, axis_a, axis_b)))
+    lo, hi = max(0.0, lo), min(length, hi)
+    return (lo, hi) if hi - lo > _OPTIMIZE_REHOST_EPSILON else None
+
+
+def _axis_point(a: list, b: list, along: float) -> list[float]:
+    dx, dy, length = _segment_metrics(a, b)
+    return [float(a[0]) + dx / length * along,
+            float(a[1]) + dy / length * along]
+
+
+def _optimize_partition_needs_proof(old_partition: dict, space: dict) -> bool:
+    """Select #296 removal/splitting, not ordinary Optimize grid alignment."""
+    partition_id = str(old_partition.get("id", ""))
+    current = next((item for item in space.get("partitions") or []
+                    if str(item.get("id", "")) == partition_id), None)
+    if current == old_partition:
+        return False
+    if current is None:
+        return True
+    if not (_known_optimize_partition(old_partition)
+            and _known_optimize_partition(current)):
+        return False
+    try:
+        if float(current.get("cm")) != float(old_partition.get("cm")):
+            return False
+        old_a, old_b = old_partition["a"], old_partition["b"]
+        current_range = _axis_range(current["a"], current["b"], old_a, old_b)
+        _, _, old_length = _segment_metrics(old_a, old_b)
+    except (KeyError, TypeError, ValueError):
+        return False
+    return current_range is not None and (
+        current_range[0] > _OPTIMIZE_REHOST_EPSILON
+        or current_range[1] < old_length - _OPTIMIZE_REHOST_EPSILON
+    )
+
+
+def _safe_optimize_partition_delta(space: dict, old_partition: dict) -> bool:
+    """Independently prove every removed atom of one old partition axis."""
+    if not _known_optimize_partition(old_partition):
+        return False
+    try:
+        old_a, old_b = old_partition["a"], old_partition["b"]
+        old_cm = float(old_partition["cm"])
+        _, _, length = _segment_metrics(old_a, old_b)
+    except (KeyError, TypeError, ValueError):
+        return False
+    if length <= _OPTIMIZE_REHOST_EPSILON or old_cm <= 0:
+        return False
+
+    rooms: list[tuple[str, list[tuple[list, list]]]] = []
+    for room in space.get("rooms") or []:
+        poly = _room_polygon(room)
+        if len(poly) < 3:
+            return False
+        rooms.append((str(room.get("id", "")), [
+            (poly[index], poly[(index + 1) % len(poly)])
+            for index in range(len(poly))
+        ]))
+
+    candidate_partitions = space.get("partitions") or []
+    retained: list[tuple[float, float]] = []
+    breakpoints = [0.0, length]
+
+    def note_segment(a: list, b: list) -> tuple[float, float] | None:
+        projected = _axis_range(a, b, old_a, old_b)
+        if projected:
+            breakpoints.extend(projected)
+        return projected
+
+    for partition in candidate_partitions:
+        try:
+            projected = note_segment(partition["a"], partition["b"])
+            candidate_cm = float(partition["cm"])
+        except (KeyError, TypeError, ValueError):
+            return False
+        if projected and _known_optimize_partition(partition) and candidate_cm == old_cm:
+            retained.append(projected)
+    for _, edges in rooms:
+        for edge_a, edge_b in edges:
+            note_segment(edge_a, edge_b)
+    for collection in (space.get("walls") or [], space.get("open_spans") or []):
+        for segment in collection:
+            try:
+                note_segment(segment["a"], segment["b"])
+            except (KeyError, TypeError, ValueError):
+                return False
+
+    points = sorted(set(round(point, 12) for point in breakpoints
+                        if -_OPTIMIZE_REHOST_EPSILON <= point
+                        <= length + _OPTIMIZE_REHOST_EPSILON))
+    for lo, hi in zip(points, points[1:]):
+        if hi - lo <= _OPTIMIZE_REHOST_EPSILON:
+            continue
+        if any(start <= lo + _OPTIMIZE_REHOST_EPSILON
+               and end >= hi - _OPTIMIZE_REHOST_EPSILON
+               for start, end in retained):
+            continue
+        target_a, target_b = _axis_point(old_a, old_b, lo), _axis_point(old_a, old_b, hi)
+        owners = {room_id for room_id, edges in rooms
+                  if _segments_cover_target(edges, target_a, target_b)}
+        collinear = {room_id for room_id, edges in rooms
+                     if any(_segments_overlap_on_axis(
+                         target_a, target_b, edge_a, edge_b
+                     ) for edge_a, edge_b in edges)}
+        if len(owners) not in (1, 2) or collinear != owners:
+            return False
+        if any(_segments_overlap_on_axis(
+                target_a, target_b, span["a"], span["b"]
+        ) for span in space.get("open_spans") or []):
+            return False
+        if any(_segments_overlap_on_axis(
+                target_a, target_b, partition["a"], partition["b"]
+        ) for partition in candidate_partitions):
+            return False
+
+        covering_walls = []
+        for wall in space.get("walls") or []:
+            try:
+                wall_a, wall_b = wall["a"], wall["b"]
+                if _segment_covers(wall_a, wall_b, target_a, target_b):
+                    covering_walls.append((
+                        _segment_metrics(wall_a, wall_b)[2], float(wall["cm"]),
+                    ))
+            except (KeyError, TypeError, ValueError):
+                return False
+        effective_cm = (min(covering_walls, key=lambda item: item[0])[1]
+                        if covering_walls else _DEFAULT_ROOM_WALL_CM)
+        if effective_cm + _OPTIMIZE_REHOST_EPSILON < old_cm:
+            return False
+    return True
+
+
+def _hosted_opening_geometry(opening: dict, partition: dict) -> tuple[float, float, float, float] | None:
+    host = opening.get("host")
+    try:
+        if not isinstance(host, dict) or host.get("kind") != "partition":
+            return None
+        t = float(host["t"])
+        a, b = partition["a"], partition["b"]
+        dx, dy, length = _segment_metrics(a, b)
+        opening_length = float(opening["length"])
+    except (KeyError, TypeError, ValueError):
+        return None
+    if not 0 <= t <= 1 or length <= _OPTIMIZE_REHOST_EPSILON or opening_length <= 0:
+        return None
+    angle = math.degrees(math.atan2(dy, dx))
+    if angle >= 90:
+        angle -= 180
+    elif angle < -90:
+        angle += 180
+    return float(a[0]) + dx * t, float(a[1]) + dy * t, angle, opening_length
+
+
+def _safe_optimize_residual_rehost(
+    space: dict, old_space: dict, opening: dict, old_opening: dict,
+) -> bool:
+    """Prove a hosted opening rebound to a newly-created residual id."""
+    old_host, new_host = old_opening.get("host"), opening.get("host")
+    if not (isinstance(old_host, dict) and isinstance(new_host, dict)
+            and old_host.get("kind") == new_host.get("kind") == "partition"):
+        return False
+    old_partition = next((item for item in old_space.get("partitions") or []
+                          if str(item.get("id", "")) == str(old_host.get("id", ""))), None)
+    new_partition = next((item for item in space.get("partitions") or []
+                          if str(item.get("id", "")) == str(new_host.get("id", ""))), None)
+    if old_partition is None or new_partition is None:
+        return False
+    if not _safe_optimize_partition_delta(space, old_partition):
+        return False
+    ignored = {"host", "x", "y", "angle"}
+    if ({key: value for key, value in old_opening.items() if key not in ignored}
+            != {key: value for key, value in opening.items() if key not in ignored}):
+        return False
+    old_geometry = _hosted_opening_geometry(old_opening, old_partition)
+    new_geometry = _hosted_opening_geometry(opening, new_partition)
+    if old_geometry is None or new_geometry is None:
+        return False
+    old_x, old_y, old_angle, old_length = old_geometry
+    new_x, new_y, new_angle, new_length = new_geometry
+    try:
+        explicit_x, explicit_y = float(opening["x"]), float(opening["y"])
+        explicit_angle = float(opening["angle"])
+    except (KeyError, TypeError, ValueError):
+        return False
+    return (
+        abs(old_x - new_x) <= _OPTIMIZE_REHOST_EPSILON
+        and abs(old_y - new_y) <= _OPTIMIZE_REHOST_EPSILON
+        and abs(old_length - new_length) <= _OPTIMIZE_REHOST_EPSILON
+        and _angle_delta_mod_180(old_angle, new_angle) <= 1e-7
+        and abs(explicit_x - new_x) <= _OPTIMIZE_REHOST_EPSILON
+        and abs(explicit_y - new_y) <= _OPTIMIZE_REHOST_EPSILON
+        and _angle_delta_mod_180(explicit_angle, new_angle) <= 1e-7
+    )
+
+
+def _safe_optimize_partition_rehost(
+    space: dict, old_space: dict, opening: dict, old_opening: dict,
+) -> bool:
+    """Independently prove the #276/#296 partition-to-room-wall transition."""
+    old_host = old_opening.get("host")
+    if not isinstance(old_host, dict) or old_host.get("kind") != "partition":
+        return False
+    partition_id = str(old_host.get("id", ""))
+    old_partition = next((item for item in old_space.get("partitions") or []
+                          if str(item.get("id", "")) == partition_id), None)
+    if old_partition is None:
+        return False
+    if not _safe_optimize_partition_delta(space, old_partition):
+        return False
+    a, b = old_partition.get("a"), old_partition.get("b")
+    if not (isinstance(a, list) and len(a) == 2 and isinstance(b, list) and len(b) == 2):
+        return False
+    dx, dy, length = _segment_metrics(a, b)
+    if length <= _OPTIMIZE_REHOST_EPSILON:
+        return False
+
+    ignored = {"host", "x", "y", "angle"}
+    old_stable = {key: value for key, value in old_opening.items() if key not in ignored}
+    new_stable = {key: value for key, value in opening.items() if key not in ignored}
+    if old_stable != new_stable:
+        return False
+    try:
+        t = float(old_host["t"])
+        x, y = float(opening["x"]), float(opening["y"])
+        opening_angle = float(opening["angle"])
+        opening_length = float(opening["length"])
+    except (KeyError, TypeError, ValueError):
+        return False
+    if not (0 <= t <= 1 and opening_length > 0):
+        return False
+    expected_x, expected_y = float(a[0]) + dx * t, float(a[1]) + dy * t
+    expected_angle = math.degrees(math.atan2(dy, dx))
+    if expected_angle >= 90:
+        expected_angle -= 180
+    elif expected_angle < -90:
+        expected_angle += 180
+    if (abs(x - expected_x) > _OPTIMIZE_REHOST_EPSILON
+            or abs(y - expected_y) > _OPTIMIZE_REHOST_EPSILON
+            or _angle_delta_mod_180(opening_angle, expected_angle) > 1e-7):
+        return False
+    along = t * length
+    if (along - opening_length / 2 < -_OPTIMIZE_REHOST_EPSILON
+            or along + opening_length / 2 > length + _OPTIMIZE_REHOST_EPSILON):
+        return False
+
+    half_dx, half_dy = dx / length * opening_length / 2, dy / length * opening_length / 2
+    target_a = [expected_x - half_dx, expected_y - half_dy]
+    target_b = [expected_x + half_dx, expected_y + half_dy]
+    owners: set[str] = set()
+    collinear_rooms: set[str] = set()
+    for room in space.get("rooms") or []:
+        poly = _room_polygon(room)
+        room_id = str(room.get("id", ""))
+        edges = [(poly[index], poly[(index + 1) % len(poly)])
+                 for index in range(len(poly))]
+        if _segments_cover_target(edges, target_a, target_b):
+            owners.add(room_id)
+        if any(_segments_overlap_on_axis(target_a, target_b, edge_a, edge_b)
+               for edge_a, edge_b in edges):
+            collinear_rooms.add(room_id)
+    if len(owners) not in (1, 2) or collinear_rooms != owners:
+        return False
+    if any(_segments_overlap_on_axis(target_a, target_b, span["a"], span["b"])
+           for span in space.get("open_spans") or []):
+        return False
+    if any(_segments_overlap_on_axis(target_a, target_b, item["a"], item["b"])
+           for item in space.get("partitions") or []):
+        return False
+
+    covering_walls = []
+    for wall in space.get("walls") or []:
+        wall_a, wall_b = wall.get("a"), wall.get("b")
+        if not (isinstance(wall_a, list) and isinstance(wall_b, list)):
+            continue
+        if _segment_covers(wall_a, wall_b, target_a, target_b):
+            covering_walls.append((_segment_metrics(wall_a, wall_b)[2], float(wall["cm"])))
+    effective_cm = min(covering_walls, key=lambda item: item[0])[1] \
+        if covering_walls else _DEFAULT_ROOM_WALL_CM
+    if effective_cm + _OPTIMIZE_REHOST_EPSILON < float(old_partition.get("cm", 0)):
+        return False
+
+    for other in space.get("openings") or []:
+        if other is opening or str(other.get("id", "")) == str(opening.get("id", "")):
+            continue
+        try:
+            center = [float(other["x"]), float(other["y"])]
+            other_angle = float(other["angle"])
+            other_length = float(other["length"])
+        except (KeyError, TypeError, ValueError):
+            continue
+        if (_line_distance(center, a, b) > _OPTIMIZE_REHOST_EPSILON
+                or _angle_delta_mod_180(other_angle, expected_angle) > 1e-7):
+            continue
+        other_along = _projection(center, a, b)
+        if (min(along + opening_length / 2, other_along + other_length / 2)
+                - max(along - opening_length / 2, other_along - other_length / 2)
+                > _OPTIMIZE_REHOST_EPSILON):
+            return False
+    return True


 def validate_partition_opening_hosts(
-    config: dict, previous: dict | None = None
+    config: dict, previous: dict | None = None, *, allow_optimize_rehost: bool = False
 ) -> None:
    """Validate hosted-opening write deltas without rejecting legacy reads.

@@ -113,18 +652,38 @@ def validate_partition_opening_hosts(
        for opening in space.get("openings") or []:
            opening_id = str(opening.get("id", ""))
            old = old_openings.get(opening_id)
-            if old and old.get("host") is not None and opening.get("host") is None:
-                raise PartitionOpeningHostError(
-                    f"space={space_id}; opening={opening_id}; host removed"
-                )
+            old_host = (old or {}).get("host")
            host = opening.get("host")
+            if (old and isinstance(old_host, dict)
+                    and old_host.get("kind") == "partition"):
+                same_partition = (
+                    isinstance(host, dict) and host.get("kind") == "partition"
+                    and str(host.get("id", "")) == str(old_host.get("id", ""))
+                )
+                residual_rehost = (
+                    isinstance(host, dict) and host.get("kind") == "partition"
+                    and not same_partition
+                )
+                proved = same_partition or (
+                    allow_optimize_rehost and old_space is not None
+                    and (_safe_optimize_residual_rehost(
+                        space, old_space, opening, old
+                    ) if residual_rehost else _safe_optimize_partition_rehost(
+                        space, old_space, opening, old
+                    ))
+                )
+                if not proved:
+                    raise PartitionOpeningHostError(
+                        f"space={space_id}; opening={opening_id}; host changed"
+                    )
            if host is None:
                continue
+            if host.get("kind") != "partition":
+                continue
            partition = partitions.get(str(host.get("id", "")))
            if partition is None:
                # SPACE_SCHEMA owns missing-host diagnostics.
                continue
-            old_host = (old or {}).get("host")
            old_partition = old_partitions.get(str((old_host or {}).get("id", "")))
            ax, ay = partition["a"]
            bx, by = partition["b"]
@@ -156,6 +715,14 @@ def validate_partition_opening_hosts(
                raise PartitionOpeningJambMarginError(
                    space_id, opening_id, margin, margin_cm
                )
+        if allow_optimize_rehost and old_space:
+            for old_partition in old_space.get("partitions") or []:
+                if (_optimize_partition_needs_proof(old_partition, space)
+                        and not _safe_optimize_partition_delta(space, old_partition)):
+                    raise PartitionOpeningHostError(
+                        f"space={space_id}; partition={old_partition.get('id', '')}; "
+                        "optimize delta unproved"
+                    )


 PASSAGE_FORBIDDEN_FIELDS = {"contact", "lock", "invert", "flip_h", "flip_v"}
@@ -480,7 +1047,11 @@ MAX_ROOMS = 400
 MAX_MARKERS = 2000
 MAX_OPENINGS = 500
 MAX_DECOR = 1000
-MAX_WALLS = 500
+# v8 atomises room boundaries. The 2 MiB wire cap is the practical bound; this
+# structural cap mirrors MAX_ROOMS * MAX_POLY_POINTS without depending on the
+# later constant declaration.
+MAX_WALLS = 200_000
+MAX_WALL_SEGMENTS = 200_000
 MAX_ROOM_DRAFTS = 200
 MAX_DRAFT_SEGMENTS = 2000
 MAX_PARTITIONS = 2000
@@ -645,6 +1216,10 @@ ROOM_SCHEMA = vol.All(
            vol.Optional("w"): _EXTENT,
            vol.Optional("h"): _EXTENT,
            vol.Optional("poly"): vol.All([POINT], vol.Length(min=3, max=MAX_POLY_POINTS)),
+            vol.Optional("wall_ids"): vol.All(
+                [vol.All(str, vol.Length(min=1, max=64))],
+                vol.Length(min=3, max=MAX_POLY_POINTS),
+            ),
        },
        extra=vol.ALLOW_EXTRA,
    ),
@@ -816,6 +1391,26 @@ WALL_SCHEMA = vol.All(
 )


+def _wall_segment_nonzero(value: dict) -> dict:
+    if value["a"] == value["b"]:
+        raise vol.Invalid("wall segment endpoints must differ")
+    return value
+
+
+WALL_SEGMENT_SCHEMA = vol.All(
+    vol.Schema(
+        {
+            vol.Required("id"): vol.All(str, vol.Length(min=1, max=64)),
+            vol.Required("a"): POINT,
+            vol.Required("b"): POINT,
+            vol.Required("cm"): vol.All(_finite, vol.Range(min=0, max=100)),
+        },
+        extra=vol.ALLOW_EXTRA,
+    ),
+    _wall_segment_nonzero,
+)
+
+
 def _room_draft_segments(value: dict) -> dict:
    """An open draft has exactly one thickness per consecutive edge."""
    if len(value.get("segments", [])) != max(0, len(value.get("points", [])) - 1):
@@ -831,7 +1426,10 @@ ROOM_DRAFT_SCHEMA = vol.All(
            vol.Required("id"): vol.All(str, vol.Length(min=1, max=64)),
            vol.Required("points"): vol.All([POINT], vol.Length(min=2, max=500)),
            vol.Required("segments"): vol.All(
-                [vol.Schema({vol.Required("cm"): vol.All(_finite, vol.Range(min=1, max=100))},
+                [vol.Schema({
+                    vol.Optional("id"): vol.All(str, vol.Length(min=1, max=64)),
+                    vol.Required("cm"): vol.All(_finite, vol.Range(min=0, max=100)),
+                },
                            extra=vol.ALLOW_EXTRA)],
                vol.Length(min=1, max=499),
            ),
@@ -853,7 +1451,7 @@ PARTITION_SCHEMA = vol.All(
            vol.Required("id"): vol.All(str, vol.Length(min=1, max=64)),
            vol.Required("a"): POINT,
            vol.Required("b"): POINT,
-            vol.Required("cm"): vol.All(_finite, vol.Range(min=1, max=100)),
+            vol.Required("cm"): vol.All(_finite, vol.Range(min=0, max=100)),
        },
        extra=vol.ALLOW_EXTRA,
    ),
@@ -895,11 +1493,22 @@ PARTITION_OPENING_HOST_SCHEMA = vol.Schema(
    extra=vol.PREVENT_EXTRA,
 )

+WALL_OPENING_HOST_SCHEMA = vol.Schema(
+    {
+        vol.Required("kind"): vol.Equal("wall"),
+        vol.Required("id"): vol.All(str, vol.Length(min=1, max=64)),
+        vol.Required("t"): vol.All(_finite, vol.Range(min=0, max=1)),
+    },
+    extra=vol.PREVENT_EXTRA,
+)
+
+OPENING_HOST_SCHEMA = vol.Any(PARTITION_OPENING_HOST_SCHEMA, WALL_OPENING_HOST_SCHEMA)
+

 def _space_geometry_invariants(value: dict) -> dict:
    """All stored geometry shares ids; draft segments also have a space cap."""
    seen: set[str] = set()
-    for key in ("rooms", "openings", "decor", "room_drafts", "partitions", "wall_columns"):
+    for key in ("rooms", "openings", "decor", "room_drafts", "partitions", "wall_columns", "wall_segments"):
        for item in value.get(key, []):
            item_id = item.get("id")
            if not item_id:
@@ -912,6 +1521,14 @@ def _space_geometry_invariants(value: dict) -> dict:
    )
    if draft_segments > MAX_DRAFT_SEGMENTS:
        raise vol.Invalid("too many saved room-draft segments")
+    for draft in value.get("room_drafts", []):
+        for segment in draft.get("segments", []):
+            segment_id = segment.get("id")
+            if not segment_id:
+                continue
+            if segment_id in seen:
+                raise vol.Invalid("geometry object ids must be unique within a space")
+            seen.add(segment_id)
    partitions = {
        item.get("id"): item for item in value.get("partitions", []) if item.get("id")
    }
@@ -920,6 +1537,8 @@ def _space_geometry_invariants(value: dict) -> dict:
        host = opening.get("host")
        if host is None:
            continue
+        if host["kind"] != "partition":
+            continue
        partition = partitions.get(host["id"])
        if partition is None:
            raise vol.Invalid("partition opening host must exist in the same space")
@@ -1000,7 +1619,7 @@ SPACE_SCHEMA = vol.All(vol.Schema(
                    vol.Optional("invert"): bool,
                    vol.Optional("flip_h"): bool,
                    vol.Optional("flip_v"): bool,
-                    vol.Optional("host"): PARTITION_OPENING_HOST_SCHEMA,
+                    vol.Optional("host"): OPENING_HOST_SCHEMA,
                },
                extra=vol.ALLOW_EXTRA,
            )
@@ -1009,6 +1628,10 @@ SPACE_SCHEMA = vol.All(vol.Schema(
        # (midpoint + direction), thickness always in centimetres. Optional —
        # a space without `walls` validates and renders exactly as before.
        vol.Optional("walls"): vol.All([WALL_SCHEMA], vol.Length(max=MAX_WALLS)),
+        vol.Optional("wall_segments"): vol.All(
+            [WALL_SEGMENT_SCHEMA], vol.Length(max=MAX_WALL_SEGMENTS)
+        ),
+        vol.Optional("zero_wall_style"): vol.In(["dashed", "solid"]),
        vol.Optional("room_drafts"): vol.All(
            [ROOM_DRAFT_SCHEMA], vol.Length(max=MAX_ROOM_DRAFTS)
        ),
@@ -1137,9 +1760,124 @@ MARKER_SCHEMA = vol.Schema(
    },
    extra=vol.ALLOW_EXTRA,
 )
+
+
+def _canonical_segment_key(a: list, b: list) -> tuple:
+    """Endpoint-order-independent exact key after the shared canonicalizer."""
+    pa = (round(float(a[0]), 12), round(float(a[1]), 12))
+    pb = (round(float(b[0]), 12), round(float(b[1]), 12))
+    return (pa, pb) if pa <= pb else (pb, pa)
+
+
+def _config_wall_segment_invariants(value: dict) -> dict:
+    """Fail closed when a v8+ writer sends stale ids or wall projections."""
+    try:
+        model = int(value.get("model_version", 0))
+    except (TypeError, ValueError):
+        raise vol.Invalid("model_version must be an integer") from None
+    if model < 8:
+        return value
+
+    for space in value.get("spaces", []):
+        if model >= 9:
+            if "open_spans" in space or any("open_to" in room for room in space.get("rooms", [])):
+                raise vol.Invalid("v9 config must not contain legacy open boundaries")
+        segments = space.get("wall_segments")
+        if segments is None:
+            raise vol.Invalid("v8+ space requires wall_segments")
+        by_id = {segment["id"]: segment for segment in segments}
+        if len(by_id) != len(segments):
+            raise vol.Invalid("wall segment ids must be unique")
+
+        owners: dict[str, set[str]] = {segment_id: set() for segment_id in by_id}
+        for room in space.get("rooms", []):
+            poly = room.get("poly")
+            wall_ids = room.get("wall_ids")
+            if not poly or not wall_ids or len(poly) != len(wall_ids):
+                raise vol.Invalid("v8+ room wall_ids must match poly edges")
+            room_id = room["id"]
+            for index, segment_id in enumerate(wall_ids):
+                segment = by_id.get(segment_id)
+                if segment is None:
+                    raise vol.Invalid("room wall id must reference the same space")
+                edge_key = _canonical_segment_key(poly[index], poly[(index + 1) % len(poly)])
+                if edge_key != _canonical_segment_key(segment["a"], segment["b"]):
+                    raise vol.Invalid("room wall reference geometry must match its edge")
+                owners[segment_id].add(room_id)
+        if any(len(room_ids) not in (1, 2) for room_ids in owners.values()):
+            raise vol.Invalid("wall segment must have one or two room owners")
+
+        expected_walls = {
+            _canonical_segment_key(segment["a"], segment["b"]): float(segment["cm"])
+            for segment in segments if float(segment["cm"]) > 0
+        }
+        actual_walls: dict[tuple, float] = {}
+        for wall in space.get("walls", []):
+            if "a" not in wall or "b" not in wall:
+                raise vol.Invalid("wall compatibility projection requires exact endpoints")
+            key = _canonical_segment_key(wall["a"], wall["b"])
+            if key in actual_walls:
+                raise vol.Invalid("wall compatibility projection must be unique")
+            actual_walls[key] = float(wall["cm"])
+        if actual_walls != expected_walls:
+            raise vol.Invalid("wall compatibility projection must match wall_segments")
+
+        for draft in space.get("room_drafts", []):
+            if any(not segment.get("id") for segment in draft.get("segments", [])):
+                raise vol.Invalid("v8+ draft wall segments require ids")
+
+        partitions = {item["id"]: item for item in space.get("partitions", [])}
+        wall_opening_intervals: dict[str, list[tuple[float, float]]] = {}
+        for opening in space.get("openings", []):
+            host = opening.get("host")
+            if host is None:
+                # #316 §3.3: a degraded migration may leave a contour opening
+                # unhosted. It is inert (no body/tunnel/cut) and excluded from
+                # the interval checks; a later edit can re-place it.
+                continue
+            if host["kind"] == "partition":
+                if host["id"] not in partitions:
+                    raise vol.Invalid("partition opening host must exist in the same space")
+                if float(partitions[host["id"]]["cm"]) <= 0:
+                    raise vol.Invalid("opening host must have positive thickness")
+                continue
+            segment = by_id.get(host["id"])
+            if segment is None:
+                raise vol.Invalid("wall opening host must exist in the same space")
+            if float(segment["cm"]) <= 0:
+                raise vol.Invalid("opening host must have positive thickness")
+            t = float(host["t"])
+            x = float(segment["a"][0]) + (float(segment["b"][0]) - float(segment["a"][0])) * t
+            y = float(segment["a"][1]) + (float(segment["b"][1]) - float(segment["a"][1])) * t
+            if abs(x - float(opening["x"])) > 2e-8 or abs(y - float(opening["y"])) > 2e-8:
+                raise vol.Invalid("wall opening geometry must match its host")
+            expected_angle = math.degrees(math.atan2(
+                float(segment["b"][1]) - float(segment["a"][1]),
+                float(segment["b"][0]) - float(segment["a"][0]),
+            ))
+            if _angle_delta_mod_180(float(opening["angle"]), expected_angle) > 8:
+                raise vol.Invalid("wall opening angle must match its host")
+            span = ((segment["b"][0] - segment["a"][0]) ** 2
+                    + (segment["b"][1] - segment["a"][1]) ** 2) ** 0.5
+            along = t * span
+            length = float(opening["length"])
+            if length > span or along - length / 2 < -1e-9 or along + length / 2 > span + 1e-9:
+                raise vol.Invalid("wall opening must fit inside its host")
+            lo, hi = along - length / 2, along + length / 2
+            occupied = wall_opening_intervals.setdefault(host["id"], [])
+            if any(max(lo, old_lo) < min(hi, old_hi) - 1e-9
+                   for old_lo, old_hi in occupied):
+                raise vol.Invalid("wall openings must not overlap")
+            occupied.append((lo, hi))
+    return value
+
+
 CONFIG_SCHEMA = vol.All(
    vol.Schema(
        {
+            vol.Optional("model_version"): vol.All(
+                vol.Coerce(int), vol.Range(min=0, max=1_000_000)
+            ),
            vol.Required("spaces"): vol.All([SPACE_SCHEMA], vol.Length(max=MAX_SPACES)),
            vol.Optional("markers", default=list): vol.All([MARKER_SCHEMA], vol.Length(max=MAX_MARKERS)),
            vol.Optional("settings", default=dict): vol.Schema(
@@ -1174,4 +1912,5 @@ CONFIG_SCHEMA = vol.All(
        extra=vol.ALLOW_EXTRA,  # unknown (legacy) keys do not break loading
    ),
    canonicalize_config_geometry,
+    _config_wall_segment_invariants,
 )
@@ -0,0 +1,684 @@
+"""Deterministic persisted contour-wall identity (model v9, issues #282/#306).
+
+This is the backend twin of ``src/wall-segment-model.ts``.  Import preview is
+a server-side structural writer, so it cannot depend on a browser being open
+to upgrade v7 backups before validating/remapping them.
+"""
+from __future__ import annotations
+
+import base64
+import copy
+import hashlib
+import math
+import uuid
+from typing import Any
+
+from .coordinate_canonicalization import canonicalize_config_geometry
+
+
+WALL_SEGMENT_MODEL_VERSION = 9
+GRID_STEP_N = 1 / 240
+EPS = 1e-9
+
+
+class WallSegmentMigrationError(ValueError):
+    """The candidate cannot be upgraded without guessing ownership."""
+
+    code = "wall_model_migration_blocked"
+
+    def __init__(self, reason: str, detail: str = "") -> None:
+        self.reason = reason
+        super().__init__(f"{reason}: {detail}" if detail else reason)
+
+
+def _point_key(point: list[float]) -> str:
+    return f"{float(point[0]):.12f},{float(point[1]):.12f}"
+
+
+def _span_key(a: list[float], b: list[float]) -> str:
+    ka, kb = _point_key(a), _point_key(b)
+    return f"{ka}|{kb}" if ka < kb else f"{kb}|{ka}"
+
+
+def _canonical_span(a: list[float], b: list[float]) -> tuple[list[float], list[float]]:
+    left, right = ([float(a[0]), float(a[1])], [float(b[0]), float(b[1])])
+    return (left, right) if _point_key(left) <= _point_key(right) else (right, left)
+
+
+def _length(a: list[float], b: list[float]) -> float:
+    return math.hypot(float(b[0]) - float(a[0]), float(b[1]) - float(a[1]))
+
+
+def _project_t(point: list[float], a: list[float], b: list[float]) -> float:
+    dx, dy = float(b[0]) - float(a[0]), float(b[1]) - float(a[1])
+    denominator = dx * dx + dy * dy
+    if denominator <= EPS * EPS:
+        return 0
+    return ((float(point[0]) - float(a[0])) * dx
+            + (float(point[1]) - float(a[1])) * dy) / denominator
+
+
+def _distance_to_segment(point: list[float], a: list[float], b: list[float]) -> float:
+    t = max(0.0, min(1.0, _project_t(point, a, b)))
+    return math.hypot(
+        float(point[0]) - (float(a[0]) + (float(b[0]) - float(a[0])) * t),
+        float(point[1]) - (float(a[1]) + (float(b[1]) - float(a[1])) * t),
+    )
+
+
+def _collinear_overlap(
+    a: list[float], b: list[float], c: list[float], d: list[float], epsilon: float = EPS,
+) -> float:
+    dx, dy = float(b[0]) - float(a[0]), float(b[1]) - float(a[1])
+    length = math.hypot(dx, dy)
+    if length <= epsilon:
+        return 0
+    cross_c = abs((float(c[0]) - float(a[0])) * dy
+                  - (float(c[1]) - float(a[1])) * dx) / length
+    cross_d = abs((float(d[0]) - float(a[0])) * dy
+                  - (float(d[1]) - float(a[1])) * dx) / length
+    if cross_c > epsilon or cross_d > epsilon:
+        return 0
+    tc, td = _project_t(c, a, b), _project_t(d, a, b)
+    return max(0.0, min(1.0, max(tc, td)) - max(0.0, min(tc, td))) * length
+
+
+def _room_poly(room: dict[str, Any]) -> list[list[float]]:
+    poly = room.get("poly")
+    if isinstance(poly, list) and len(poly) >= 3:
+        return [[float(point[0]), float(point[1])] for point in poly]
+    if all(isinstance(room.get(key), (int, float)) and not isinstance(room.get(key), bool)
+           for key in ("x", "y", "w", "h")):
+        x, y, width, height = (float(room[key]) for key in ("x", "y", "w", "h"))
+        return [[x, y], [x + width, y], [x + width, y + height], [x, y + height]]
+    return []
+
+
+def _shared_boundaries(first: list[list[float]], second: list[list[float]]) -> list[list[float]]:
+    result: list[list[float]] = []
+    epsilon = GRID_STEP_N * 0.04
+    for index, start in enumerate(first):
+        end = first[(index + 1) % len(first)]
+        dx, dy = end[0] - start[0], end[1] - start[1]
+        length = math.hypot(dx, dy)
+        if length < epsilon:
+            continue
+        ux, uy = dx / length, dy / length
+        for other_index, other_start in enumerate(second):
+            other_end = second[(other_index + 1) % len(second)]
+            tolerance = max(epsilon, length * 1e-6)
+            distances = [
+                abs((point[0] - start[0]) * uy - (point[1] - start[1]) * ux)
+                for point in (other_start, other_end)
+            ]
+            if max(distances) > tolerance:
+                continue
+            t1 = (other_start[0] - start[0]) * ux + (other_start[1] - start[1]) * uy
+            t2 = (other_end[0] - start[0]) * ux + (other_end[1] - start[1]) * uy
+            lo, hi = max(0.0, min(t1, t2)), min(length, max(t1, t2))
+            if hi - lo > epsilon:
+                result.append([
+                    start[0] + ux * lo, start[1] + uy * lo,
+                    start[0] + ux * hi, start[1] + uy * hi,
+                ])
+    return result
+
+
+def _wall_direction(a: list[float], b: list[float]) -> tuple[float, float]:
+    dx, dy = b[0] - a[0], b[1] - a[1]
+    length = math.hypot(dx, dy)
+    if length < 1e-12:
+        return 1.0, 0.0
+    dx, dy = dx / length, dy / length
+    if dx < -1e-12 or (abs(dx) <= 1e-12 and dy < 0):
+        dx, dy = -dx, -dy
+    return dx, dy
+
+
+def _js_round(value: float) -> int:
+    return math.floor(value + 0.5)
+
+
+def _quantize(value: float, pitch: float = GRID_STEP_N) -> float:
+    return _js_round(value / pitch) * pitch
+
+
+def _wall_key(a: list[float], b: list[float]) -> str:
+    midpoint_x = _quantize((float(a[0]) + float(b[0])) / 2)
+    midpoint_y = _quantize((float(a[1]) + float(b[1])) / 2)
+    dx, dy = _wall_direction(a, b)
+    angle = math.atan2(dy, dx)
+    if angle < 0:
+        angle += math.pi
+    angle = _js_round(angle * 1800) / 1800
+    return f"{midpoint_x:.6f},{midpoint_y:.6f}@{angle:.4f}"
+
+
+def deterministic_wall_segment_id(
+    space_id: str, a: list[float], b: list[float], owners: list[str], salt: str = "",
+) -> str:
+    ca, cb = _canonical_span(a, b)
+    seed = (f"{space_id}|{_point_key(ca)}|{_point_key(cb)}|"
+            f"{','.join(sorted(owners))}{salt}")
+    encoded = base64.b32encode(hashlib.sha256(seed.encode()).digest()).decode().lower()
+    return f"wall-{encoded[:20]}"
+
+
+def _translated_segment_delta(
+    a: list[float], b: list[float], previous: dict[str, Any],
+) -> tuple[float, float] | None:
+    def matches(pa: list[float], pb: list[float]) -> tuple[float, float] | None:
+        dx, dy = a[0] - pa[0], a[1] - pa[1]
+        if abs((b[0] - pb[0]) - dx) <= EPS and abs((b[1] - pb[1]) - dy) <= EPS:
+            return dx, dy
+        return None
+
+    return matches(previous["a"], previous["b"]) or matches(previous["b"], previous["a"])
+
+
+def _atomize(
+    space: dict[str, Any], old: dict[str, dict[str, Any]],
+) -> tuple[list[dict[str, Any]], list[dict[str, Any]]]:
+    rooms = space.get("rooms") or []
+    room_polys = {str(room.get("id", "")): _room_poly(room) for room in rooms}
+    global_breaks: list[list[float]] = []
+    explicit_spans = space.get("open_spans") or []
+    legacy_segments: list[list[float]] = []
+    for span in explicit_spans:
+        if isinstance(span, dict) and isinstance(span.get("a"), list) and isinstance(span.get("b"), list):
+            global_breaks.extend((span["a"], span["b"]))
+            legacy_segments.append([
+                float(span["a"][0]), float(span["a"][1]),
+                float(span["b"][0]), float(span["b"][1]),
+            ])
+    if not legacy_segments:
+        linked = lambda first, second: (
+            str(second.get("id", "")) in (first.get("open_to") or [])
+            or str(first.get("id", "")) in (second.get("open_to") or [])
+        )
+        for first_index, first in enumerate(rooms):
+            for second in rooms[first_index + 1:]:
+                if not linked(first, second):
+                    continue
+                for shared in _shared_boundaries(
+                    room_polys.get(str(first.get("id", "")), []),
+                    room_polys.get(str(second.get("id", "")), []),
+                ):
+                    legacy_segments.append(shared)
+                    global_breaks.extend(([shared[0], shared[1]], [shared[2], shared[3]]))
+    canonical_zero_segments: list[list[float]] = []
+    for room in rooms:
+        poly = room_polys.get(str(room.get("id", ""))) or []
+        wall_ids = room.get("wall_ids") or []
+        if len(wall_ids) != len(poly):
+            continue
+        for index, segment_id in enumerate(wall_ids):
+            previous = old.get(str(segment_id)) if isinstance(segment_id, str) else None
+            if previous is None or float(previous.get("cm", 0)) != 0:
+                continue
+            following = (index + 1) % len(poly)
+            canonical_zero_segments.append([
+                float(poly[index][0]), float(poly[index][1]),
+                float(poly[following][0]), float(poly[following][1]),
+            ])
+    for segment in canonical_zero_segments:
+        global_breaks.extend((segment[:2], segment[2:]))
+    zero_segments = canonical_zero_segments + legacy_segments
+
+    # #316 §3.1: a legacy open_spans/open_to cut never zeroes the atom that
+    # carries an existing contour opening; its edges become atom boundaries so
+    # the zero run continues on both sides of the opening.
+    legacy_era_openings: list[dict[str, Any]] = []
+    if legacy_segments:
+        for opening in space.get("openings") or []:
+            if not isinstance(opening, dict):
+                continue
+            host = opening.get("host")
+            if isinstance(host, dict) and host.get("kind") == "partition":
+                continue
+            try:
+                centre = [float(opening["x"]), float(opening["y"])]
+                angle = float(opening["angle"])
+                half = float(opening["length"]) / 2
+            except (KeyError, TypeError, ValueError):
+                continue
+            if half <= 0:
+                continue
+            # Only an opening that actually stands on a legacy cut changes the
+            # atomization; unrelated openings must not churn the catalogue.
+            if not any(
+                _distance_to_segment(centre, cut[:2], cut[2:]) <= GRID_STEP_N * 0.04
+                for cut in legacy_segments
+            ):
+                continue
+            legacy_era_openings.append(
+                {"centre": centre, "angle": angle, "half": half}
+            )
+            direction = (math.cos(math.radians(angle)), math.sin(math.radians(angle)))
+            global_breaks.extend((
+                [centre[0] - direction[0] * half, centre[1] - direction[1] * half],
+                [centre[0] + direction[0] * half, centre[1] + direction[1] * half],
+            ))
+
+    def _atom_carries_opening(a: list[float], b: list[float]) -> bool:
+        for entry in legacy_era_openings:
+            if not _angle_matches(a, b, entry["angle"]):
+                continue
+            if _distance_to_segment(entry["centre"], a, b) > GRID_STEP_N * 0.02:
+                continue
+            span = _length(a, b)
+            tc = _project_t(entry["centre"], a, b) * span
+            if tc + entry["half"] >= -EPS and tc - entry["half"] <= span + EPS:
+                return True
+        return False
+
+    for wall in space.get("walls") or []:
+        if isinstance(wall, dict) and isinstance(wall.get("a"), list) and isinstance(wall.get("b"), list):
+            global_breaks.extend((wall["a"], wall["b"]))
+
+    atoms_by_key: dict[str, dict[str, Any]] = {}
+    next_rooms: list[dict[str, Any]] = []
+    epsilon = GRID_STEP_N * 0.04
+    for raw_room in rooms:
+        room_id = str(raw_room.get("id", ""))
+        original = room_polys.get(room_id) or []
+        if not room_id or len(original) < 3:
+            raise WallSegmentMigrationError("invalid-room", room_id)
+        breaks = list(global_breaks)
+        for other_id, other_poly in room_polys.items():
+            if other_id == room_id:
+                continue
+            for shared in _shared_boundaries(original, other_poly):
+                breaks.extend(([shared[0], shared[1]], [shared[2], shared[3]]))
+
+        poly: list[list[float]] = []
+        parents: list[int] = []
+        for index, a in enumerate(original):
+            b = original[(index + 1) % len(original)]
+            poly.append(list(a))
+            parents.append(index)
+            length = _length(a, b)
+            if length < epsilon * 2:
+                raise WallSegmentMigrationError("zero-length", room_id)
+            gap = min(0.499, epsilon * 2 / length)
+            positions: list[float] = []
+            for breakpoint in breaks:
+                if _distance_to_segment(breakpoint, a, b) > epsilon:
+                    continue
+                t = _project_t(breakpoint, a, b)
+                if t <= gap or t >= 1 - gap:
+                    continue
+                if any(abs(existing - t) * length <= epsilon * 2 for existing in positions):
+                    continue
+                positions.append(t)
+            for t in sorted(positions):
+                poly.append([a[0] + (b[0] - a[0]) * t, a[1] + (b[1] - a[1]) * t])
+                parents.append(index)
+
+        old_ids = raw_room.get("wall_ids") if isinstance(raw_room.get("wall_ids"), list) else []
+        indexed_lineage = len(old_ids) == len(original)
+        rigid_delta: tuple[float, float] | None = None
+        rigid_indexed_lineage = indexed_lineage
+        if rigid_indexed_lineage:
+            for index, a in enumerate(original):
+                previous = old.get(old_ids[index])
+                delta = _translated_segment_delta(
+                    a, original[(index + 1) % len(original)], previous,
+                ) if previous else None
+                if delta is None or (rigid_delta is not None and (
+                    abs(delta[0] - rigid_delta[0]) > EPS
+                    or abs(delta[1] - rigid_delta[1]) > EPS
+                )):
+                    rigid_indexed_lineage = False
+                    break
+                rigid_delta = delta
+        wall_keys: list[str] = []
+        for index, a in enumerate(poly):
+            b = poly[(index + 1) % len(poly)]
+            key = _span_key(a, b)
+            atom = atoms_by_key.setdefault(key, {
+                "key": key, "a": _canonical_span(a, b)[0], "b": _canonical_span(a, b)[1],
+                "owners": set(), "preferred": set(), "positional": set(),
+                "preferred_carriers": {},
+                "parent_keys": set(), "zero_wall": False,
+            })
+            atom["owners"].add(room_id)
+            if len(atom["owners"]) > 2:
+                raise WallSegmentMigrationError("third-owner", key)
+            parent_index = parents[index]
+            atom["parent_keys"].add(_wall_key(original[parent_index], original[(parent_index + 1) % len(original)]))
+            midpoint = [(a[0] + b[0]) / 2, (a[1] + b[1]) / 2]
+            covered_by = lambda cuts: any(
+                _distance_to_segment(midpoint, cut[:2], cut[2:]) <= GRID_STEP_N * 0.04
+                for cut in cuts
+            )
+            # Canonical cm:0 atoms stay zero; a LEGACY cut spares the atom
+            # that carries an opening (#316 §3.1).
+            atom["zero_wall"] = atom["zero_wall"] or covered_by(canonical_zero_segments) or (
+                covered_by(legacy_segments) and not _atom_carries_opening(a, b)
+            )
+            if indexed_lineage and isinstance(old_ids[parent_index], str) and old_ids[parent_index]:
+                previous = old.get(old_ids[parent_index])
+                if rigid_indexed_lineage or previous is None or _collinear_overlap(
+                    a, b, previous["a"], previous["b"]
+                ) > EPS:
+                    atom["preferred"].add(old_ids[parent_index])
+                else:
+                    atom["positional"].add(old_ids[parent_index])
+                atom["preferred_carriers"][old_ids[parent_index]] = {
+                    "a": list(original[parent_index]),
+                    "b": list(original[(parent_index + 1) % len(original)]),
+                }
+            wall_keys.append(key)
+        next_room = {key: copy.deepcopy(value) for key, value in raw_room.items() if key != "wall_ids"}
+        next_room["poly"] = poly
+        next_room["wall_ids"] = wall_keys
+        next_rooms.append(next_room)
+    return sorted(atoms_by_key.values(), key=lambda atom: atom["key"]), next_rooms
+
+
+def _thickness(space: dict[str, Any], atom: dict[str, Any], previous: dict[str, Any] | None) -> float:
+    if atom.get("zero_wall"):
+        return 0.0
+    candidates: list[float] = []
+    query_key = _wall_key(atom["a"], atom["b"])
+    query_length = _length(atom["a"], atom["b"])
+    for wall in space.get("walls") or []:
+        try:
+            cm = float(wall.get("cm", 0))
+        except (TypeError, ValueError):
+            continue
+        if cm <= 0:
+            continue
+        exact_key = wall.get("key") == query_key or wall.get("key") in atom["parent_keys"]
+        covers = False
+        if isinstance(wall.get("a"), list) and isinstance(wall.get("b"), list):
+            overlap = _collinear_overlap(atom["a"], atom["b"], wall["a"], wall["b"])
+            covers = overlap >= query_length - EPS
+        if exact_key or covers:
+            candidates.append(max(1.0, min(100.0, cm)))
+    unique = {round(value, 9) for value in candidates}
+    if len(unique) > 1:
+        raise WallSegmentMigrationError("thickness-conflict", atom["key"])
+    if candidates:
+        return candidates[0]
+    if previous is not None and float(previous.get("cm", 0)) > 0:
+        return float(previous["cm"])
+    return 0.0
+
+
+def _non_catalog_ids(space: dict[str, Any]) -> set[str]:
+    result: set[str] = set()
+    for name in ("rooms", "openings", "decor", "room_drafts", "partitions", "wall_columns"):
+        for item in space.get(name) or []:
+            if isinstance(item, dict) and isinstance(item.get("id"), str) and item["id"]:
+                result.add(item["id"])
+    for draft in space.get("room_drafts") or []:
+        for segment in draft.get("segments") or []:
+            if isinstance(segment, dict) and isinstance(segment.get("id"), str) and segment["id"]:
+                result.add(segment["id"])
+    return result
+
+
+def _fresh_wall_segment_id(used: set[str]) -> str:
+    for _attempt in range(1000):
+        segment_id = f"wall-{uuid.uuid4()}"
+        if segment_id not in used:
+            return segment_id
+    raise WallSegmentMigrationError("duplicate-id", "id factory exhausted")
+
+
+def _assign_lineage(
+    space: dict[str, Any], atoms: list[dict[str, Any]], old: dict[str, dict],
+    initial_migration: bool,
+) -> None:
+    old_by_key = {_span_key(segment["a"], segment["b"]): segment for segment in old.values()}
+    host_counts: dict[str, int] = {}
+    for opening in space.get("openings") or []:
+        host = opening.get("host") if isinstance(opening, dict) else None
+        if isinstance(host, dict) and host.get("kind") == "wall":
+            host_counts[str(host.get("id"))] = host_counts.get(str(host.get("id")), 0) + 1
+    proposals: dict[str, dict[str, Any]] = {}
+    for atom in atoms:
+        if len(atom["preferred"]) > 1:
+            raise WallSegmentMigrationError("duplicate-id", ",".join(sorted(atom["preferred"])))
+        preferred_id = next(iter(atom["preferred"]), None)
+        preferred = old.get(preferred_id) if preferred_id else None
+        if preferred:
+            proposals[atom["key"]] = preferred
+            continue
+        carrier = atom["preferred_carriers"].get(preferred_id) if preferred_id else None
+        if preferred_id and carrier:
+            proposals[atom["key"]] = {
+                "id": preferred_id, "a": carrier["a"], "b": carrier["b"], "cm": 0,
+            }
+            continue
+        if atom["key"] in old_by_key:
+            proposals[atom["key"]] = old_by_key[atom["key"]]
+            continue
+        overlaps = [segment for segment in old.values()
+                    if _collinear_overlap(atom["a"], atom["b"], segment["a"], segment["b"]) > EPS]
+        overlaps.sort(key=lambda segment: (
+            -host_counts.get(str(segment["id"]), 0),
+            -_length(segment["a"], segment["b"]), str(segment["id"]),
+        ))
+        if overlaps:
+            proposals[atom["key"]] = overlaps[0]
+        elif len(atom["positional"]) == 1:
+            positional = old.get(next(iter(atom["positional"])))
+            if positional:
+                proposals[atom["key"]] = positional
+
+    by_id: dict[str, list[dict[str, Any]]] = {}
+    for atom in atoms:
+        proposal = proposals.get(atom["key"])
+        if proposal:
+            by_id.setdefault(str(proposal["id"]), []).append(atom)
+    for segment_id, candidates in by_id.items():
+        old_segment = old.get(segment_id) or proposals.get(candidates[0]["key"])
+        if old_segment is None:
+            raise WallSegmentMigrationError("duplicate-id", segment_id)
+        midpoint = [
+            (old_segment["a"][0] + old_segment["b"][0]) / 2,
+            (old_segment["a"][1] + old_segment["b"][1]) / 2,
+        ]
+        candidates.sort(key=lambda atom: (
+            0 if _distance_to_segment(midpoint, atom["a"], atom["b"]) <= EPS else 1,
+            0 if _distance_to_segment(old_segment["a"], atom["a"], atom["b"]) <= EPS else 1,
+            atom["key"],
+        ))
+        candidates[0]["id"] = segment_id
+
+    used = _non_catalog_ids(space)
+    for atom in atoms:
+        if not atom.get("id"):
+            continue
+        if atom["id"] in used:
+            raise WallSegmentMigrationError("duplicate-id", atom["id"])
+        used.add(atom["id"])
+    unassigned = [atom for atom in atoms if not atom.get("id")]
+    if initial_migration:
+        seeds: list[tuple[str, str, str, dict[str, Any]]] = []
+        for atom in unassigned:
+            ca, cb = _canonical_span(atom["a"], atom["b"])
+            seed = (f"{space.get('id', '')}|{_point_key(ca)}|{_point_key(cb)}|"
+                    f"{','.join(sorted(atom['owners']))}")
+            digest = base64.b32encode(hashlib.sha256(seed.encode()).digest()).decode().lower()
+            seeds.append((digest, atom["key"], seed, atom))
+        full_digests: dict[str, str] = {}
+        for digest, _key, seed, atom in sorted(seeds):
+            if digest in full_digests and full_digests[digest] != seed:
+                raise WallSegmentMigrationError("duplicate-id", digest)
+            full_digests[digest] = seed
+            base = f"wall-{digest[:20]}"
+            suffix, segment_id = 1, base
+            while segment_id in used:
+                suffix += 1
+                segment_id = f"{base}-{suffix}"
+            atom["id"] = segment_id
+            used.add(segment_id)
+    else:
+        for atom in unassigned:
+            atom["id"] = _fresh_wall_segment_id(used)
+            used.add(atom["id"])
+
+
+def _angle_matches(a: list[float], b: list[float], angle: float) -> bool:
+    dx, dy = _wall_direction(a, b)
+    wall_angle = math.degrees(math.atan2(dy, dx))
+    difference = abs((wall_angle - angle + 90) % 180 - 90)
+    return difference <= 8
+
+
+def _host_openings(
+    space: dict[str, Any], segments: list[dict[str, Any]], initial_migration: bool,
+) -> None:
+    for opening in space.get("openings") or []:
+        host = opening.get("host")
+        if isinstance(host, dict) and host.get("kind") == "partition":
+            continue
+        try:
+            centre = [float(opening["x"]), float(opening["y"])]
+            angle, half = float(opening["angle"]), float(opening["length"]) / 2
+        except (KeyError, TypeError, ValueError):
+            if initial_migration:
+                # #316 §3.4: the initial migration never throws over an opening.
+                opening.pop("host", None)
+                continue
+            raise WallSegmentMigrationError("opening-host", str(opening.get("id", ""))) from None
+
+        def eligible(segment: dict[str, Any]) -> bool:
+            if float(segment.get("cm", 0)) <= 0:
+                return False
+            t = _project_t(centre, segment["a"], segment["b"])
+            span = _length(segment["a"], segment["b"])
+            return (-EPS <= t <= 1 + EPS
+                    and _distance_to_segment(centre, segment["a"], segment["b"])
+                    <= GRID_STEP_N * 0.02
+                    and _angle_matches(segment["a"], segment["b"], angle)
+                    and half >= 0 and t * span - half >= -EPS
+                    and t * span + half <= span + EPS)
+
+        def materialize(carrier: dict[str, Any]) -> None:
+            opening["host"] = {
+                "kind": "wall", "id": carrier["id"],
+                "t": max(0.0, min(1.0, _project_t(centre, carrier["a"], carrier["b"]))),
+            }
+
+        current = None
+        if isinstance(host, dict) and host.get("kind") == "wall":
+            current = next((segment for segment in segments if segment["id"] == host.get("id")), None)
+        candidates = [current] if current is not None and eligible(current) else [
+            segment for segment in segments if eligible(segment)
+        ]
+        if len(candidates) == 1:
+            materialize(candidates[0])
+            continue
+        # #316 §3.3: an unhosted opening is a valid degraded v9 state. A later
+        # write keeps it, may self-heal it, and never fails over it.
+        if host is None and not initial_migration:
+            continue
+        if not initial_migration:
+            raise WallSegmentMigrationError("opening-host", str(opening.get("id", "")))
+
+        def pick(pool: list[dict[str, Any]]) -> dict[str, Any] | None:
+            if not pool:
+                return None
+            if current is not None and any(item is current for item in pool):
+                return current
+            return sorted(pool, key=lambda segment: (
+                _distance_to_segment(centre, segment["a"], segment["b"]),
+                -float(segment.get("cm", 0)),
+                str(segment.get("id", "")),
+            ))[0]
+
+        # #316 §3.2 tie-break. No distant fallback pool (CODE-REVIEW-316-r1
+        # H1): a host away from the opening's own x/y would violate the
+        # geometry-match invariant of CONFIG_SCHEMA and wedge the write on the
+        # schema layer; without an in-place carrier the opening goes straight
+        # to the unhosted degraded state.
+        carrier = pick([segment for segment in segments if eligible(segment)])
+        if carrier is not None:
+            materialize(carrier)
+        else:
+            opening.pop("host", None)
+
+
+def _migrate_space(space: dict[str, Any], initial_migration: bool) -> int:
+    old: dict[str, dict[str, Any]] = {}
+    for segment in space.get("wall_segments") or []:
+        segment_id = str(segment.get("id", ""))
+        if not segment_id or segment_id in old:
+            raise WallSegmentMigrationError("duplicate-id", segment_id)
+        old[segment_id] = segment
+    atoms, rooms = _atomize(space, old)
+    _assign_lineage(space, atoms, old, initial_migration)
+    segments = []
+    for atom in atoms:
+        previous = old.get(atom["id"])
+        segment = copy.deepcopy(previous) if previous else {}
+        segment.update({
+            "id": atom["id"], "a": list(atom["a"]), "b": list(atom["b"]),
+            "cm": _thickness(space, atom, previous),
+        })
+        segments.append(segment)
+    id_by_key = {atom["key"]: atom["id"] for atom in atoms}
+    for room in rooms:
+        room["wall_ids"] = [id_by_key[key] for key in room["wall_ids"]]
+    space["rooms"] = rooms
+    space["wall_segments"] = segments
+    walls = [{
+        "key": _wall_key(segment["a"], segment["b"]),
+        "cm": segment["cm"], "a": list(segment["a"]), "b": list(segment["b"]),
+    } for segment in segments if float(segment["cm"]) > 0]
+    if walls:
+        space["walls"] = walls
+    else:
+        space.pop("walls", None)
+    space.pop("open_spans", None)
+    for room in space.get("rooms") or []:
+        room.pop("open_to", None)
+    draft_used = {
+        str(item["id"])
+        for name in ("rooms", "openings", "decor", "room_drafts", "partitions",
+                     "wall_columns", "wall_segments")
+        for item in space.get(name) or []
+        if isinstance(item, dict) and isinstance(item.get("id"), str) and item["id"]
+    }
+    for draft in space.get("room_drafts") or []:
+        for index, segment in enumerate(draft.get("segments") or []):
+            if isinstance(segment.get("id"), str) and segment["id"]:
+                if segment["id"] in draft_used:
+                    raise WallSegmentMigrationError("duplicate-id", segment["id"])
+                draft_used.add(segment["id"])
+                continue
+            try:
+                a, b = draft["points"][index], draft["points"][index + 1]
+            except (KeyError, IndexError, TypeError):
+                raise WallSegmentMigrationError("zero-length", str(draft.get("id", ""))) from None
+            if initial_migration:
+                base = deterministic_wall_segment_id(
+                    str(space.get("id", "")), a, b, [f"draft:{draft.get('id', '')}"],
+                )
+                suffix, segment["id"] = 1, base
+                while segment["id"] in draft_used:
+                    suffix += 1
+                    segment["id"] = f"{base}-{suffix}"
+            else:
+                segment["id"] = _fresh_wall_segment_id(draft_used)
+            draft_used.add(segment["id"])
+    _host_openings(space, segments, initial_migration)
+    return sum(1 for segment in segments if segment["id"] not in old)
+
+
+def commit_wall_segment_model(config: Any) -> tuple[Any, int]:
+    """Return one migrated deep copy and the count of newly assigned wall ids."""
+    candidate = canonicalize_config_geometry(copy.deepcopy(config))
+    if not isinstance(candidate, dict):
+        raise WallSegmentMigrationError("invalid-room")
+    migrated = 0
+    initial_migration = int(candidate.get("model_version", 0) or 0) < WALL_SEGMENT_MODEL_VERSION
+    for space in candidate.get("spaces") or []:
+        migrated += _migrate_space(space, initial_migration)
+    candidate["model_version"] = WALL_SEGMENT_MODEL_VERSION
+    return canonicalize_config_geometry(candidate), migrated
@@ -24,6 +24,7 @@ from .const import (
    CONTENT_URL, FILES_DIR, MAX_PLANS_BYTES, MAX_PLANS_FILES, MAX_PLANS_LISTED,
    MAX_SIGN_PATHS,
    PLANS_DIR, PLANS_URL,
+    VERSION,
 )
 from .coordinate_canonicalization import (
    canonicalize_config_geometry,
@@ -59,13 +60,21 @@ from .virtual_lights import (
    async_virtual_light_snapshot,
 )
 from .registry_snapshot import import_registry_snapshot
+from .projection import project_config, project_layout
+from .wall_segment_model import (
+    WALL_SEGMENT_MODEL_VERSION,
+    WallSegmentMigrationError,
+    commit_wall_segment_model,
+)
+from .junction_limits import JunctionLimitError, validate_junction_limits
 from .validation import (
    CONFIG_SCHEMA, LAYOUT_SCHEMA, MAX_CONFIG_BYTES, MAX_PLAN_BYTES,
    PLAN_EXTENSIONS, POS_SCHEMA, MarkerControlError, OpeningPassageError,
-    PartitionOpeningHostError, PartitionOpeningJambMarginError, sanitize_filename,
+    PartitionOpeningHostError, PartitionOpeningJambMarginError,
+    WallModelClientOutdatedError, sanitize_filename,
    validate_opening_passages, validate_partition_opening_hosts,
    validate_marker_controls, validate_marker_light_entities,
-    validate_marker_value_badges, valid_space_id,
+    validate_marker_value_badges, validate_wall_model_transition, valid_space_id,
 )


@@ -484,24 +493,14 @@ async def ws_import_apply(hass: HomeAssistant, connection, msg: dict[str, Any])

    hass.bus.async_fire("houseplan_config_updated", {"rev": new_config_rev})
    hass.bus.async_fire("houseplan_layout_updated", {"rev": new_layout_rev})
-    _refresh_trail_recorder(hass)
    if kind == "full":
-        recorder = hass.data.get(DOMAIN, {}).get("trail_recorder")
-        live_marker_ids = {
-            str(marker.get("id")) for marker in target_config.get("markers") or []
-        }
-        if recorder is not None:
-            for marker_id in list(getattr(getattr(recorder, "book", None), "data", {})):
-                if marker_id not in live_marker_ids:
-                    try:
-                        await recorder.async_delete(marker_id)
-                    except Exception:  # noqa: BLE001
-                        _LOGGER.exception("House Plan: removing orphan import trail failed")
+        await _purge_trail_recorder(hass, target_config)
        entry = get_entry(hass)
        if entry is not None:
            from .repairs import async_check_plan_files

            hass.async_create_task(async_check_plan_files(hass, entry))
+    _refresh_trail_recorder(hass)
    connection.send_result(msg["id"], {
        "ok": True,
        "kind": kind,
@@ -510,6 +509,8 @@ async def ws_import_apply(hass: HomeAssistant, connection, msg: dict[str, Any])
        "counts": details.get("counts", {}),
        "space_id": details.get("space_id"),
        "repaired_target_refs": details.get("repaired_target_refs", 0),
+        "preserved_unresolved_refs": details.get("preserved_unresolved_refs", 0),
+        "reference_report": details.get("reference_report", {}),
        "can_undo": kind == "full",
    })

@@ -529,10 +530,15 @@ def _live_layout(config: dict[str, Any], layout: dict[str, Any]) -> dict[str, An
    return live_layout(config, layout)


-@websocket_api.websocket_command({vol.Required("type"): "houseplan/layout/get"})
+@websocket_api.websocket_command(
+    {
+        vol.Required("type"): "houseplan/layout/get",
+        vol.Optional("space_id"): vol.All(str, vol.Length(min=1, max=200)),
+    }
+)
@websocket_api.async_response
 async def ws_layout_get(hass: HomeAssistant, connection, msg: dict[str, Any]) -> None:
-    """Return the saved layout."""
+    """Return the saved layout, optionally narrowed to one space (#256)."""
    rt = _runtime(hass, connection, msg["id"])
    if rt is None:
        return
@@ -540,7 +546,9 @@ async def ws_layout_get(hass: HomeAssistant, connection, msg: dict[str, Any]) ->
    config_data = await rt.config_store.async_load() or {}
    connection.send_result(
        msg["id"], {
-            "layout": data.get("layout", {}),
+            "layout": project_layout(
+                data.get("layout", {}), space_id=msg.get("space_id"),
+            ),
            "rev": int(data.get("rev", 0)),
            "can_optimize_undo": _optimizer_backup_is_current(config_data, data),
            "undo_kind": _undo_kind(config_data, data),
@@ -1081,7 +1089,20 @@ async def ws_layout_delete(hass: HomeAssistant, connection, msg: dict[str, Any])
 # ---------------- space configuration ----------------


-@websocket_api.websocket_command({vol.Required("type"): "houseplan/config/get"})
+_PROJECTION_FIELDS = vol.All([vol.All(str, vol.Length(min=1, max=100))], vol.Length(max=50))
+
+
+@websocket_api.websocket_command(
+    {
+        vol.Required("type"): "houseplan/config/get",
+        # Проекция ответа (#256). Все параметры необязательны, и без них ответ
+        # прежний — это главный инвариант: ни один существующий клиент не
+        # должен заметить появление этой возможности.
+        vol.Optional("space_id"): vol.All(str, vol.Length(min=1, max=200)),
+        vol.Optional("fields"): _PROJECTION_FIELDS,
+        vol.Optional("marker_fields"): _PROJECTION_FIELDS,
+    }
+)
@websocket_api.async_response
 async def ws_config_get(hass: HomeAssistant, connection, msg: dict[str, Any]) -> None:
    """Return the configuration, its revision, and whether this user may write.
@@ -1089,6 +1110,11 @@ async def ws_config_get(hass: HomeAssistant, connection, msg: dict[str, Any]) ->
    `can_write` is the single source of truth for the card's editor chrome
    (audit P0-4): the UI must mirror `may_write`, not a hard-coded is_admin
    check that drifted from the integration option.
+
+    Optional `space_id`/`fields`/`marker_fields` narrow ONLY the returned
+    document (#256). Revisions and capability flags are computed from the whole
+    stored configuration: a caller that asked for one floor must not receive a
+    revision that describes only that floor.
    """
    rt = _runtime(hass, connection, msg["id"])
    if rt is None:
@@ -1112,12 +1138,20 @@ async def ws_config_get(hass: HomeAssistant, connection, msg: dict[str, Any]) ->
    connection.send_result(
        msg["id"],
        {
-            "config": config,
+            "config": project_config(
+                config,
+                space_id=msg.get("space_id"),
+                fields=msg.get("fields"),
+                marker_fields=msg.get("marker_fields"),
+            ),
            "rev": config_rev,
            "virtual_lights": virtual_lights,
            "can_write": may_write(hass, getattr(connection, "user", None)),
            "can_optimize_undo": _optimizer_backup_is_current(data, layout_data),
            "undo_kind": _undo_kind(data, layout_data),
+            # #295: the card compares this against its own version to decide
+            # whether the «update House Plan» preflight hint can actually help.
+            "integration_version": VERSION,
        },
    )

@@ -1226,7 +1260,9 @@ def _missing_internal_attachments(
@websocket_api.websocket_command(
    {
        vol.Required("type"): "houseplan/config/set",
-        vol.Required("config"): CONFIG_SCHEMA,
+        # Semantic stale-client detection needs the stored v8 document and
+        # therefore runs inside the write lock before CONFIG_SCHEMA.
+        vol.Required("config"): dict,
        vol.Optional("expected_rev"): int,
    }
 )
@@ -1258,14 +1294,22 @@ async def ws_config_set(hass: HomeAssistant, connection, msg: dict[str, Any]) ->
        data = await rt.config_store.async_load() or {}
        current_rev = data.get("rev", 0)
        if "expected_rev" not in msg and current_rev:
-            # audit B4: expected_rev stays optional for old cards mid-upgrade,
-            # but a blind overwrite of a non-empty store is worth a warning —
-            # it is exactly how a stale client silently discards someone's work.
+            # #340: a request without the revision it read is indistinguishable
+            # from a stale writer.  Keep the schema field optional only for an
+            # empty-store bootstrap and so this path can return the same stable
+            # domain error as an explicit stale revision.  Accepting it over a
+            # saved document would bypass optimistic locking entirely.
            _LOGGER.warning(
                "House Plan: config/set without expected_rev over rev %s — "
-                "the client bypasses conflict detection (outdated card?)",
+                "write rejected (outdated client?)",
                current_rev,
            )
+            connection.send_error(
+                msg["id"], "conflict",
+                f"Configuration revision is required; reload the configuration "
+                f"(current rev {current_rev})",
+            )
+            return
        if "expected_rev" in msg and msg["expected_rev"] != current_rev:
            connection.send_error(
                msg["id"], "conflict",
@@ -1275,18 +1319,41 @@ async def ws_config_set(hass: HomeAssistant, connection, msg: dict[str, Any]) ->
        # Marker-to-marker light links are a semantic graph layered on top of
        # the lossless controls array. Validate only edges introduced by this
        # write so an unrelated edit can still round-trip a legacy broken ref.
-        try:
+        # #330 §4.1/§4.2: the CPU part of validation runs in the executor —
+        # schema + semantic validators cost seconds on a large plan and the
+        # event loop must not carry that (HA guideline: >50 ms). write_lock
+        # is still held across the await: writes stay serialised, only the
+        # loop is freed. The junction baseline of the STORED document is
+        # cached by rev, so a repeated write does not re-judge `previous`.
+        baseline = rt.junction_baseline
+        baseline_counts = baseline[1] if baseline and baseline[0] == current_rev else None
+
+        def _validate_config_cpu():
+            validate_wall_model_transition(msg["config"], data.get("config"))
+            checked = CONFIG_SCHEMA(msg["config"])
+            msg["config"].clear()
+            msg["config"].update(checked)
            validate_marker_controls(msg["config"], data.get("config"))
            validate_marker_light_entities(msg["config"], data.get("config"))
            validate_marker_value_badges(msg["config"], data.get("config"))
            validate_opening_passages(msg["config"], data.get("config"))
            validate_partition_opening_hosts(msg["config"], data.get("config"))
+            return validate_junction_limits(
+                msg["config"], data.get("config"),
+                baseline_counts=baseline_counts,
+            )
+        try:
+            candidate_counts = await hass.async_add_executor_job(_validate_config_cpu)
        except (
-            MarkerControlError, OpeningPassageError, PartitionOpeningHostError,
-            PartitionOpeningJambMarginError,
+            JunctionLimitError, MarkerControlError, OpeningPassageError,
+            PartitionOpeningHostError, PartitionOpeningJambMarginError,
+            WallModelClientOutdatedError,
        ) as err:
            connection.send_error(msg["id"], err.code, str(err))
            return
+        except vol.Invalid as err:
+            connection.send_error(msg["id"], "invalid_format", str(err))
+            return
        # An internal plan url must name a file that exists. The card can pick a
        # plan and then delete it from the same dialog, and two clients can do
        # the same thing in either order — the lock serialises them but says
@@ -1322,6 +1389,9 @@ async def ws_config_set(hass: HomeAssistant, connection, msg: dict[str, Any]) ->
            new_rev,
            previous_rev=int(current_rev),
        )
+        # The candidate just became the stored document: its counts are the
+        # next write's baseline (#330 §4.2).
+        rt.junction_baseline = (int(new_rev), candidate_counts)
        try:
            await _discard_optimizer_snapshot(rt)
        except Exception:  # noqa: BLE001 — stale backup cleanup is best-effort
@@ -1340,6 +1410,11 @@ async def ws_config_set(hass: HomeAssistant, connection, msg: dict[str, Any]) ->
            await hass.async_add_executor_job(_collect)
        except Exception:  # noqa: BLE001 — see above: the commit stands regardless
            _LOGGER.exception("House Plan: collecting superseded files failed")
+        # The config is already durable, so trail cleanup is best-effort and
+        # cannot turn this accepted write into a retryable client failure.
+        # Keep it under write_lock: a later config/set must not resurrect a
+        # marker between this commit and the ownership decision (#335).
+        await _purge_trail_recorder(hass, msg["config"])
    hass.bus.async_fire("houseplan_config_updated", {"rev": new_rev})
    _refresh_trail_recorder(hass)
    # refresh repair issues (broken plan references) without waiting for a restart
@@ -1544,7 +1619,7 @@ async def ws_space_delete(hass: HomeAssistant, connection, msg: dict[str, Any])
@websocket_api.websocket_command(
    {
        vol.Required("type"): "houseplan/plan/optimize",
-        vol.Required("config"): CONFIG_SCHEMA,
+        vol.Required("config"): dict,
        vol.Required("layout"): LAYOUT_SCHEMA,
        vol.Required("expected_config_rev"): int,
        vol.Required("expected_layout_rev"): int,
@@ -1588,18 +1663,74 @@ async def ws_plan_optimize(hass: HomeAssistant, connection, msg: dict[str, Any])
        # Optimization is a normal configuration write with an additional
        # layout transaction. It must enforce the same marker-link semantics
        # as config/set; otherwise a crafted client can persist a new cycle.
-        try:
+        # #330 §4.1: the same executor treatment as config/set — Optimize
+        # carries schema + a possible full migration, the costliest CPU path
+        # of all writers, and it used to run on the event loop.
+        def _validate_optimize_cpu():
+            validate_wall_model_transition(msg["config"], config_data.get("config"))
+            try:
+                submitted_model = int(msg["config"].get("model_version", 0) or 0)
+            except (TypeError, ValueError):
+                submitted_model = WALL_SEGMENT_MODEL_VERSION
+            # Optimize is an explicit structural writer and therefore the
+            # server-side v7 -> v8 barrier as well. Current v8 candidates are
+            # validated verbatim: the backend must never invent lineage for a
+            # graph already authored by a current client.
+            candidate_config = CONFIG_SCHEMA(msg["config"])
+            # Keep the established public validation contract ahead of the
+            # structural migration barrier. A malformed passage can also make
+            # wall-host materialisation impossible, but callers must still get
+            # the actionable `invalid_passage_fields` code rather than the
+            # generic wall-model blocker.
+            validate_opening_passages(candidate_config, config_data.get("config"))
+            if submitted_model < WALL_SEGMENT_MODEL_VERSION:
+                candidate_config, _ = commit_wall_segment_model(candidate_config)
+            checked = CONFIG_SCHEMA(candidate_config)
+            migrated_size = len(json.dumps(checked, separators=(",", ":")))
+            if migrated_size > MAX_CONFIG_BYTES:
+                return None, migrated_size
+            msg["config"].clear()
+            msg["config"].update(checked)
            validate_marker_controls(msg["config"], config_data.get("config"))
            validate_marker_light_entities(msg["config"], config_data.get("config"))
            validate_marker_value_badges(msg["config"], config_data.get("config"))
            validate_opening_passages(msg["config"], config_data.get("config"))
-            validate_partition_opening_hosts(msg["config"], config_data.get("config"))
+            validate_partition_opening_hosts(
+                msg["config"], config_data.get("config"),
+                allow_optimize_rehost=True,
+            )
+            # #333: Optimize is a normal configuration write for the junction
+            # limits too — an honest client's optimization never ADDS a
+            # violation (#329 AC10), so this gate is a no-op for legitimate
+            # flows and refuses only a crafted payload that used this command
+            # as a side door around config/set. Inheritance is counted per
+            # rule exactly as in config/set: repairing a legacy plan that
+            # already carries violations still passes.
+            return validate_junction_limits(
+                msg["config"], config_data.get("config"),
+            ), None
+        try:
+            optimize_counts, oversize = await hass.async_add_executor_job(
+                _validate_optimize_cpu,
+            )
+            if oversize is not None:
+                connection.send_error(
+                    msg["id"], "too_large",
+                    f"Configuration is {oversize // 1024} KB, "
+                    f"the limit is {MAX_CONFIG_BYTES // 1024} KB",
+                )
+                return
        except (
-            MarkerControlError, OpeningPassageError, PartitionOpeningHostError,
-            PartitionOpeningJambMarginError,
+            JunctionLimitError, MarkerControlError, OpeningPassageError,
+            PartitionOpeningHostError, PartitionOpeningJambMarginError,
+            WallModelClientOutdatedError,
+            WallSegmentMigrationError,
        ) as err:
            connection.send_error(msg["id"], err.code, str(err))
            return
+        except vol.Invalid as err:
+            connection.send_error(msg["id"], "invalid_format", str(err))
+            return

        missing = await hass.async_add_executor_job(
            _missing_internal_plans,
@@ -1648,6 +1779,11 @@ async def ws_plan_optimize(hass: HomeAssistant, connection, msg: dict[str, Any])
            new_config_rev,
            previous_rev=config_rev,
        )
+        # The optimized candidate is now the stored document: its junction
+        # counts are the next write's baseline (#333 AC3, symmetric with
+        # config/set — otherwise the next save re-judges `previous` for
+        # nothing and the #330 cache loses its point).
+        rt.junction_baseline = (int(new_config_rev), optimize_counts or {})
        await async_save_layout_state(
            rt, layout_data, msg["layout"], new_layout_rev,
            metadata={_OPTIMIZE_BACKUP: backup},
@@ -1734,24 +1870,14 @@ async def ws_plan_optimize_undo(hass: HomeAssistant, connection, msg: dict[str,

    hass.bus.async_fire("houseplan_config_updated", {"rev": new_config_rev})
    hass.bus.async_fire("houseplan_layout_updated", {"rev": new_layout_rev})
-    _refresh_trail_recorder(hass)
    if restored_kind == "import":
-        recorder = hass.data.get(DOMAIN, {}).get("trail_recorder")
-        live_marker_ids = {
-            str(marker.get("id")) for marker in restored_config.get("markers") or []
-        }
-        if recorder is not None:
-            for marker_id in list(getattr(getattr(recorder, "book", None), "data", {})):
-                if marker_id not in live_marker_ids:
-                    try:
-                        await recorder.async_delete(marker_id)
-                    except Exception:  # noqa: BLE001
-                        _LOGGER.exception("House Plan: removing orphan undo trail failed")
+        await _purge_trail_recorder(hass, restored_config)
        entry = get_entry(hass)
        if entry is not None:
            from .repairs import async_check_plan_files

            hass.async_create_task(async_check_plan_files(hass, entry))
+    _refresh_trail_recorder(hass)
    connection.send_result(msg["id"], {
        "ok": True,
        "config_rev": new_config_rev,
@@ -1835,6 +1961,12 @@ def _refresh_trail_recorder(hass: HomeAssistant) -> None:
        hass.async_create_task(rec.async_refresh())


+async def _purge_trail_recorder(hass: HomeAssistant, config: dict[str, Any]) -> int:
+    """Reconcile durable trails with the live marker set after a config commit."""
+    rec = hass.data.get(DOMAIN, {}).get("trail_recorder")
+    return await rec.async_purge_orphans(config) if rec else 0
+
+
@websocket_api.websocket_command({vol.Required("type"): "houseplan/trail/get"})
@websocket_api.async_response
 async def ws_trail_get(hass: HomeAssistant, connection: websocket_api.ActiveConnection, msg: dict) -> None:
@@ -8,7 +8,7 @@ public materials.
  fake `hass` (registries, states, `callWS`, `callService`, floors).
 - `srv/assets/` — generated plan SVGs and `icons.js` (`node demo/gen_icons.mjs`,
  needs the repo's devDependencies). The card bundle is copied from `dist/`:
-  `cp dist/houseplan-card.js demo/srv/assets/`.
+  `npm run bundle:sync` (копия стенда не коммитится, #255).
 - `serve.mjs` — playwright launcher (route interception, no web server).
 - `smoke_*.mjs` — feature smoke tests; run with a Chromium installed via
  `PLAYWRIGHT_BROWSERS_PATH=<dir> npx playwright install chromium-headless-shell`.
@@ -0,0 +1,92 @@
+// #276: same-process incremental cost of coincident-partition reconciliation
+// inside the complete Optimize candidate pass on the deterministic large house.
+import { performance } from 'node:perf_hooks';
+
+import { makeLargeHouseFixture, LARGE_HOUSE_COUNTS } from './fixtures/large-house.mjs';
+import { optimizePlans } from '../test-build/plan-optimizer.js';
+
+const WARMUPS = 5;
+const SAMPLES = 20;
+const BATCH_SIZE = 10;
+const RELATIVE_OVERHEAD = 0.15;
+const ABSOLUTE_OVERHEAD_MS = 25;
+
+const fixture = makeLargeHouseFixture();
+const emptyReconciliation = (rawSpace, _model, walls) => ({
+  walls: walls || [],
+  partitions: Array.isArray(rawSpace?.partitions) ? rawSpace.partitions : [],
+  openings: Array.isArray(rawSpace?.openings) ? rawSpace.openings : [],
+  partitionsReconciled: 0,
+  openingsRehosted: 0,
+});
+const baseline = () => optimizePlans(fixture.config, {}, {}, {
+  reconcileCoincidentPartitions: emptyReconciliation,
+});
+const candidate = () => optimizePlans(fixture.config, {});
+const timed = (operation) => {
+  const start = performance.now();
+  for (let index = 0; index < BATCH_SIZE; index++) {
+    const result = operation();
+    if (!result || !result.report) throw new Error('Optimize candidate returned no report');
+  }
+  return (performance.now() - start) / BATCH_SIZE;
+};
+for (let index = 0; index < WARMUPS; index++) {
+  baseline();
+  candidate();
+}
+
+const baselineTimes = [];
+const candidateTimes = [];
+const overheadTimes = [];
+for (let index = 0; index < SAMPLES; index++) {
+  // ABBA/BAAB cancels first-order clock drift and balances cache/GC order;
+  // batching then averages timer noise before the paired p95 is computed.
+  const candidateFirst = index % 2 === 1;
+  const first = timed(candidateFirst ? candidate : baseline);
+  const second = timed(candidateFirst ? baseline : candidate);
+  const third = timed(candidateFirst ? baseline : candidate);
+  const fourth = timed(candidateFirst ? candidate : baseline);
+  const baselineMs = candidateFirst ? (second + third) / 2 : (first + fourth) / 2;
+  const candidateMs = candidateFirst ? (first + fourth) / 2 : (second + third) / 2;
+  baselineTimes.push(baselineMs);
+  candidateTimes.push(candidateMs);
+  overheadTimes.push(candidateMs - baselineMs);
+}
+
+const quantile = (values, ratio) => {
+  const sorted = [...values].sort((a, b) => a - b);
+  return sorted[Math.min(sorted.length - 1, Math.ceil(sorted.length * ratio) - 1)];
+};
+const summary = (values) => ({
+  min: Math.min(...values),
+  median: quantile(values, 0.5),
+  p95: quantile(values, 0.95),
+  max: Math.max(...values),
+});
+const baselineSummary = summary(baselineTimes);
+const candidateSummary = summary(candidateTimes);
+const overheadSummary = summary(overheadTimes);
+const measuredOverheadP95 = Math.max(0, overheadSummary.p95);
+const relativeP95 = measuredOverheadP95
+  / Math.max(baselineSummary.p95, Number.EPSILON);
+const pass = measuredOverheadP95 <= ABSOLUTE_OVERHEAD_MS
+  && relativeP95 <= RELATIVE_OVERHEAD;
+const report = {
+  issue: 276,
+  fixture: LARGE_HOUSE_COUNTS,
+  warmups: WARMUPS,
+  samples: SAMPLES,
+  batchSize: BATCH_SIZE,
+  baseline: baselineSummary,
+  candidate: candidateSummary,
+  pairedOverhead: overheadSummary,
+  budgets: {
+    relativeOverhead: RELATIVE_OVERHEAD,
+    absoluteOverheadMs: ABSOLUTE_OVERHEAD_MS,
+  },
+  measured: { overheadP95Ms: measuredOverheadP95, relativeP95 },
+  pass,
+};
+console.log(JSON.stringify(report, null, 2));
+if (!pass) process.exitCode = 1;
@@ -0,0 +1,56 @@
+#!/usr/bin/env node
+// #291: same-process p95 of the complete config+layout boundary versus the
+// pre-existing full-candidate clone contract. Batching makes the strict 20%
+// ratio meaningful even on coarse/loaded CI timers.
+import { performance } from 'node:perf_hooks';
+
+import { makeLargeHouseFixture } from './fixtures/large-house.mjs';
+import {
+  canonicalizeConfigGeometry, canonicalizeLayoutGeometry,
+} from '../test-build/coordinate-canonicalization.js';
+
+const WARMUPS = 30;
+const SAMPLES = 120;
+const BATCH = 10;
+const MAX_RATIO = 1.2;
+const fixture = makeLargeHouseFixture();
+
+const baseline = () => {
+  JSON.parse(JSON.stringify(fixture.config));
+  JSON.parse(JSON.stringify(fixture.layout || {}));
+};
+const candidate = () => {
+  canonicalizeConfigGeometry(fixture.config);
+  canonicalizeLayoutGeometry(fixture.layout || {});
+};
+const measure = (operation) => {
+  const started = performance.now();
+  for (let index = 0; index < BATCH; index++) operation();
+  return (performance.now() - started) / BATCH;
+};
+for (let index = 0; index < WARMUPS; index++) {
+  baseline();
+  candidate();
+}
+const baselineSamples = [];
+const candidateSamples = [];
+for (let index = 0; index < SAMPLES; index++) {
+  if (index % 2) {
+    candidateSamples.push(measure(candidate));
+    baselineSamples.push(measure(baseline));
+  } else {
+    baselineSamples.push(measure(baseline));
+    candidateSamples.push(measure(candidate));
+  }
+}
+const p95 = (values) => [...values].sort((a, b) => a - b)[Math.ceil(values.length * 0.95) - 1];
+const baselineP95 = p95(baselineSamples);
+const candidateP95 = p95(candidateSamples);
+const ratio = candidateP95 / baselineP95;
+const report = {
+  fixture: 'large-house-v1', samples: SAMPLES, batch: BATCH,
+  baselineP95Ms: baselineP95, candidateP95Ms: candidateP95,
+  ratio, limit: MAX_RATIO, pass: ratio <= MAX_RATIO,
+};
+console.log(JSON.stringify(report, null, 2));
+if (!report.pass) process.exitCode = 1;
@@ -87,7 +87,7 @@ const viewport = { width: 1280, height: 900 };
 const { page, browser } = await launch(
  viewport, 1,
  ['--enable-precise-memory-info', '--js-flags=--expose-gc'],
-  {}, resolve(targetRoot, 'demo/srv'),
+  {}, resolve(targetRoot, 'demo/srv'), targetRoot,
 );
 await page.addScriptTag({
  content: `window.__hpAssertCardContract = ${assertCardContract.toString()};`,
@@ -0,0 +1,169 @@
+/**
+ * #330 §5: the performance contract of the junction limits (#329).
+ *
+ * Guards the CLASS of regression — a quadratic path returning — not runner
+ * noise: budgets are 2-3x the measured post-fix numbers. Measures the exact
+ * code the write barrier runs: the pure П1-П5 checks over a 576-atom plan
+ * (the S2 reproduction grid of #330), for both mirrors. The python half runs
+ * through a child process with the real custom_components module.
+ *
+ * Runs on test-build/ like benchmark:wall-model — no browser, no bundle.
+ */
+import { spawnSync } from 'node:child_process';
+import { fileURLToPath } from 'node:url';
+import { dirname, join } from 'node:path';
+
+import {
+  checkNodes, checkSegmentLengths, checkNodeDistances, checkRoomClearance,
+  cmToUnits,
+} from '../test-build/junction-limits.js';
+import { commitWallSegmentModel } from '../test-build/wall-segment-model.js';
+import { GRID_STEP_N } from '../test-build/space-geometry.js';
+import {
+  innerContourForRoom, multiWallNodesForGeometry, wallBodiesGeometry,
+} from '../test-build/wall-thickness.js';
+
+const REPO_ROOT = dirname(dirname(fileURLToPath(import.meta.url)));
+const CELL = 5;
+const GRID_N = 12; // 576 contour atoms — the #330 S2 grid
+const WARMUPS = 2;
+const SAMPLES = 5;
+
+// Budgets are calibrated from the SLOWEST machine observed, not the
+// author's: the CI review runner measured tsFullCandidateMs at 169-171 ms
+// where the dev sandbox saw 88 (code-review 330-r1 H2). Each budget keeps
+// the spec's 2-3x allowance over that worst observation, so the bench turns
+// red for the O(n²) class (which costs seconds), not for a slower runner.
+const BUDGETS = {
+  tsSegmentLengthsMs: 60,
+  tsNodeDistancesMs: 80,
+  tsFullCandidateMs: 400,
+  pyWarmValidateMs: 300,
+  pyColdValidateMs: 5000,
+};
+
+const u = (cm) => cmToUnits(cm, CELL, GRID_STEP_N);
+const rooms = []; const walls = []; let k = 0;
+for (let i = 0; i < GRID_N; i++) {
+  for (let j = 0; j < GRID_N; j++) {
+    const x0 = u(310) * i; const y0 = u(310) * j;
+    const poly = [[x0, y0], [x0 + u(300), y0], [x0 + u(300), y0 + u(300)], [x0, y0 + u(300)]];
+    rooms.push({ id: `r${i}-${j}`, name: `r${i}${j}`, area: null, poly });
+    for (let e = 0; e < 4; e++) {
+      walls.push({ key: `w${k++}`, a: poly[e], b: poly[(e + 1) % 4], cm: 15 });
+    }
+  }
+}
+const legacy = {
+  spaces: [{
+    id: 's', title: 's', cell_cm: CELL, view_box: [0, 0, 1, 1],
+    rooms, walls, openings: [], room_drafts: [], partitions: [], wall_columns: [],
+  }],
+  markers: [], settings: {},
+};
+const { config: v9 } = commitWallSegmentModel(JSON.parse(JSON.stringify(legacy)));
+const space = v9.spaces[0];
+const segments = (space.wall_segments || []).map((item) => ({
+  id: item.id, a: item.a, b: item.b, cm: Number(item.cm),
+}));
+
+/** The same П1-П5 set the card's write barrier computes for one candidate. */
+const fullCandidate = () => {
+  const violations = [
+    ...checkNodes(segments),
+    ...checkSegmentLengths(segments, CELL, GRID_STEP_N),
+    ...checkNodeDistances(segments, CELL, GRID_STEP_N),
+  ];
+  // #330 §4.7: shared passes exactly as the card computes them.
+  const sharedNodes = multiWallNodesForGeometry(
+    space.rooms || [], space.walls || [], [], GRID_STEP_N, CELL, GRID_STEP_N, 1,
+  );
+  let sharedRoomGeometry;
+  if (sharedNodes.nodes.length) {
+    const geometry = wallBodiesGeometry(
+      space.rooms || [], space.walls || [], [], [], GRID_STEP_N, CELL, GRID_STEP_N, 1,
+    );
+    sharedRoomGeometry = geometry?.status === 'ok' || geometry?.status === 'degraded-extra'
+      ? geometry.roomGeom : undefined;
+  }
+  for (const room of space.rooms || []) {
+    let inner = null;
+    try {
+      inner = innerContourForRoom(
+        space.rooms || [], String(room.id), space.walls || [], [],
+        GRID_STEP_N, CELL, GRID_STEP_N, 1, sharedRoomGeometry, sharedNodes,
+      );
+    } catch { inner = null; }
+    violations.push(...checkRoomClearance(String(room.id), inner, CELL, GRID_STEP_N));
+  }
+  return violations.length;
+};
+
+const median = (fn) => {
+  for (let i = 0; i < WARMUPS; i++) fn();
+  const times = [];
+  for (let i = 0; i < SAMPLES; i++) {
+    const start = performance.now();
+    fn();
+    times.push(performance.now() - start);
+  }
+  times.sort((left, right) => left - right);
+  return times[Math.floor(times.length / 2)];
+};
+
+const tsSegmentLengthsMs = median(() => checkSegmentLengths(segments, CELL, GRID_STEP_N));
+const tsNodeDistancesMs = median(() => checkNodeDistances(segments, CELL, GRID_STEP_N));
+const tsFullCandidateMs = median(fullCandidate);
+
+// Python mirror: cold (legacy both sides) and warm (v9 + baseline counts).
+const pyScript = `
+import importlib.util, sys, types, os, json, time
+root = ${JSON.stringify(REPO_ROOT)}
+pr = os.path.join(root, 'custom_components'); hr = os.path.join(pr, 'houseplan')
+pkg = types.ModuleType('custom_components'); pkg.__path__ = [pr]; sys.modules['custom_components'] = pkg
+p2 = types.ModuleType('custom_components.houseplan'); p2.__path__ = [hr]; sys.modules['custom_components.houseplan'] = p2
+spec = importlib.util.spec_from_file_location('custom_components.houseplan.junction_limits', os.path.join(hr, 'junction_limits.py'))
+jl = importlib.util.module_from_spec(spec); sys.modules[spec.name] = jl; spec.loader.exec_module(jl)
+legacy = json.load(sys.stdin)
+from custom_components.houseplan.wall_segment_model import commit_wall_segment_model
+v9, _ = commit_wall_segment_model(json.loads(json.dumps(legacy)))
+prev = json.loads(json.dumps(v9)); cand = json.loads(json.dumps(v9))
+cand['spaces'][0]['rooms'][0]['name'] = 'x'
+t0 = time.perf_counter()
+jl.validate_junction_limits(json.loads(json.dumps(legacy)), json.loads(json.dumps(legacy)))
+cold = 1000 * (time.perf_counter() - t0)
+counts = jl.validate_junction_limits(json.loads(json.dumps(cand)), json.loads(json.dumps(prev)))
+best = None
+for _ in range(3):
+    t0 = time.perf_counter()
+    jl.validate_junction_limits(json.loads(json.dumps(cand)), None, baseline_counts=counts)
+    warm = 1000 * (time.perf_counter() - t0)
+    best = warm if best is None else min(best, warm)
+print(json.dumps({'pyColdValidateMs': cold, 'pyWarmValidateMs': best}))
+`;
+const python = process.env.PYTHON || (process.platform === 'win32' ? 'python' : 'python3');
+const pyRun = spawnSync(python, ['-c', pyScript], {
+  input: JSON.stringify(legacy), encoding: 'utf8', maxBuffer: 64 * 1024 * 1024,
+});
+if (pyRun.status !== 0) {
+  console.error('python mirror failed:', (pyRun.stderr || '').slice(-2000));
+  process.exit(1);
+}
+const py = JSON.parse(pyRun.stdout.trim().split('\n').pop());
+
+const results = {
+  tsSegmentLengthsMs, tsNodeDistancesMs, tsFullCandidateMs,
+  pyWarmValidateMs: py.pyWarmValidateMs, pyColdValidateMs: py.pyColdValidateMs,
+};
+const pass = Object.entries(BUDGETS).every(([name, budget]) => results[name] <= budget);
+console.log(JSON.stringify({
+  issue: 330,
+  fixture: { atoms: segments.length, grid: `${GRID_N}x${GRID_N}` },
+  warmups: WARMUPS, samples: SAMPLES,
+  results: Object.fromEntries(Object.entries(results).map(
+    ([name, value]) => [name, Math.round(value * 10) / 10],
+  )),
+  budgets: BUDGETS,
+  pass,
+}, null, 2));
+if (!pass) process.exitCode = 1;
@@ -43,6 +43,7 @@ const { page, browser } = await launch(
  ['--enable-precise-memory-info', '--js-flags=--expose-gc'],
  {},
  resolve(targetRoot, 'demo/srv'),
+  targetRoot,
 );
 await page.emulateMedia({ reducedMotion: 'reduce' });
 await page.addStyleTag({
@@ -345,7 +346,7 @@ try {
          target: null,
        };
        card._rszEdgeDown(quietEvent, room.id, 1);
-        const plan = card._rszDrag?.plan;
+        const plan = card._resize?.plan;
        if (!plan) throw new Error('large-house resize plan was not created');
        const target = [
          plan.a[0] + plan.n[0] * card._gridPitch,
@@ -0,0 +1,107 @@
+// #277: same-run historical edge-drag baseline versus the fixed-topology
+// pointer clamp, plus the exact one-space production preflight used on release.
+import { performance } from 'node:perf_hooks';
+
+import { makeLargeHouseFixture, LARGE_HOUSE_COUNTS } from './fixtures/large-house.mjs';
+import {
+  planEdgeDrag, clampEdgeDrag,
+  resolveSafeResize, clampSafeResize, applySafeResize,
+  safeResizeCachedDeltaCount,
+} from '../test-build/resize.js';
+import { checkOptimizeGeometry } from '../test-build/plan-geometry-preflight.js';
+
+const WARMUPS = 5;
+const SAMPLES = 20;
+const BATCH = 25;
+const POINTER_P95_MS = 16;
+const POINTER_RATIO = 1.2;
+const POINTER_NOISE_MS = 0.25;
+const PREFLIGHT_P95_MS = 75;
+
+const rooms = [{ id: 'active', poly: [[0, 0], [300, 0], [300, 300], [0, 300]] }];
+for (let index = 0; index < 199; index++) {
+  const x = 1000 + (index % 20) * 500;
+  const y = Math.floor(index / 20) * 500;
+  rooms.push({ id: `room-${index}`, poly: [[x, y], [x + 300, y], [x + 300, y + 300], [x, y + 300]] });
+}
+const opts = { minDim: 25, eps: 0.1, movingHalf: 10, obstacles: [] };
+const oldPlan = planEdgeDrag(rooms, 'active', 1);
+const safeResolution = resolveSafeResize(rooms, [], 'active', 1, opts);
+if (!oldPlan || !safeResolution.enabled) throw new Error('benchmark fixture is not resize-eligible');
+const safePlan = safeResolution.plan;
+
+const baselinePointer = () => clampEdgeDrag(rooms, [], oldPlan, 100, 5, opts);
+const safePointer = () => {
+  const delta = clampSafeResize(rooms, [], safePlan, 100, 5, opts);
+  return applySafeResize(rooms, [], safePlan, delta);
+};
+const large = makeLargeHouseFixture();
+const currentSpaceConfig = { ...large.config, spaces: [large.config.spaces[0]] };
+const precomputeStart = performance.now();
+const cachedProductionGeometry = checkOptimizeGeometry(currentSpaceConfig);
+const renderPrecomputeMs = performance.now() - precomputeStart;
+if (!cachedProductionGeometry.ok
+    || cachedProductionGeometry.spaces.some((space) => space.status === 'failed')) {
+  throw new Error(`safe-resize preflight fixture failed: ${JSON.stringify(cachedProductionGeometry.spaces)}`);
+}
+// The final preview frame owns the expensive production union. pointerup reads
+// the exact cached result for that cfg epoch; this measures commit latency, not
+// the existing large-house render budget measured by benchmark:large-house.
+const preflight = () => {
+  if (!cachedProductionGeometry.ok) throw new Error('cached production geometry failed');
+  return cachedProductionGeometry.fingerprint;
+};
+
+const timedBatch = (operation) => {
+  const start = performance.now();
+  for (let index = 0; index < BATCH; index++) operation();
+  return (performance.now() - start) / BATCH;
+};
+for (let index = 0; index < WARMUPS; index++) {
+  baselinePointer(); safePointer(); preflight();
+}
+const baselineTimes = [];
+const safeTimes = [];
+for (let index = 0; index < SAMPLES; index++) {
+  const safeFirst = index % 2 === 1;
+  const first = timedBatch(safeFirst ? safePointer : baselinePointer);
+  const second = timedBatch(safeFirst ? baselinePointer : safePointer);
+  const third = timedBatch(safeFirst ? baselinePointer : safePointer);
+  const fourth = timedBatch(safeFirst ? safePointer : baselinePointer);
+  baselineTimes.push(safeFirst ? (second + third) / 2 : (first + fourth) / 2);
+  safeTimes.push(safeFirst ? (first + fourth) / 2 : (second + third) / 2);
+}
+const preflightTimes = Array.from({ length: SAMPLES }, () => {
+  const start = performance.now(); preflight(); return performance.now() - start;
+});
+const quantile = (values, ratio) => {
+  const sorted = [...values].sort((a, b) => a - b);
+  return sorted[Math.min(sorted.length - 1, Math.ceil(sorted.length * ratio) - 1)];
+};
+const summary = (values) => ({
+  min: Math.min(...values), median: quantile(values, 0.5),
+  p95: quantile(values, 0.95), max: Math.max(...values),
+});
+const baseline = summary(baselineTimes);
+const candidate = summary(safeTimes);
+const commitPreflight = summary(preflightTimes);
+const relativeLimit = baseline.p95 * POINTER_RATIO + POINTER_NOISE_MS;
+const pass = candidate.p95 <= POINTER_P95_MS
+  && candidate.p95 <= relativeLimit
+  && commitPreflight.p95 <= PREFLIGHT_P95_MS
+  && safeResizeCachedDeltaCount(safePlan) <= 4096;
+console.log(JSON.stringify({
+  issue: 277,
+  fixture: { rooms: rooms.length, largeHouse: LARGE_HOUSE_COUNTS },
+  warmups: WARMUPS, samples: SAMPLES, batch: BATCH,
+  baseline, candidate, commitPreflight,
+  renderPrecomputeMs,
+  cacheEntries: safeResizeCachedDeltaCount(safePlan),
+  budgets: {
+    pointerP95Ms: POINTER_P95_MS, pointerRatio: POINTER_RATIO,
+    pointerNoiseMs: POINTER_NOISE_MS, relativeLimit,
+    commitPreflightP95Ms: PREFLIGHT_P95_MS, maxCacheEntries: 4096,
+  },
+  pass,
+}, null, 2));
+if (!pass) process.exitCode = 1;
@@ -0,0 +1,78 @@
+// #277: warm Resize-layer render cost on the supported large-house ceiling.
+// The deterministic snapshot-call assertion catches the original regression
+// even when runner timing noise happens to keep the p95 below its budget.
+import { makeLargeHouseFixture, LARGE_HOUSE_COUNTS } from './fixtures/large-house.mjs';
+import { launch } from './serve.mjs';
+
+const WARMUPS = 3;
+const SAMPLES = 20;
+const RENDER_P95_MS = 25;
+const fixture = makeLargeHouseFixture();
+const config = { ...fixture.config, spaces: [fixture.config.spaces[0]] };
+const { page, browser } = await launch();
+
+const result = await page.evaluate(async ({ config, warmups, samples }) => {
+  const card = window.__card;
+  card._serverCfg = structuredClone(config);
+  card._space = config.spaces[0].id;
+  card._modelCache = null;
+  card._cfgEpoch++;
+  card._setMode('plan');
+  card._tool = 'resize';
+  card.requestUpdate();
+  await card.updateComplete;
+
+  const view = card._viewOr(card._baseVb());
+  const originalSnapshot = card._rszSnapshot.bind(card);
+  let snapshotCalls = 0;
+  card._rszSnapshot = () => {
+    snapshotCalls++;
+    return originalSnapshot();
+  };
+
+  for (let index = 0; index < warmups; index++) card._renderResizeLayer(view);
+  snapshotCalls = 0;
+  const times = [];
+  for (let index = 0; index < samples; index++) {
+    const started = performance.now();
+    card._renderResizeLayer(view);
+    times.push(performance.now() - started);
+  }
+  card._rszSnapshot = originalSnapshot;
+  return {
+    times,
+    snapshotCalls,
+    roomCount: card._rszRooms().length,
+    handleCount: card._rszRooms().reduce((sum, room) => sum + room.poly.length, 0),
+  };
+}, { config, warmups: WARMUPS, samples: SAMPLES });
+
+await browser.close();
+const quantile = (values, ratio) => {
+  const sorted = [...values].sort((a, b) => a - b);
+  return sorted[Math.min(sorted.length - 1, Math.ceil(sorted.length * ratio) - 1)];
+};
+const render = {
+  min: Math.min(...result.times),
+  median: quantile(result.times, 0.5),
+  p95: quantile(result.times, 0.95),
+  max: Math.max(...result.times),
+};
+const pass = result.snapshotCalls === SAMPLES
+  && result.roomCount === 20
+  && result.handleCount === 80
+  && render.p95 <= RENDER_P95_MS;
+console.log(JSON.stringify({
+  issue: 277,
+  fixture: LARGE_HOUSE_COUNTS,
+  warmups: WARMUPS,
+  samples: SAMPLES,
+  roomCount: result.roomCount,
+  handleCount: result.handleCount,
+  snapshotCalls: result.snapshotCalls,
+  snapshotCallsPerFrame: result.snapshotCalls / SAMPLES,
+  render,
+  budgets: { renderP95Ms: RENDER_P95_MS, maxSnapshotCallsPerFrame: 1 },
+  pass,
+}, null, 2));
+if (!pass) process.exitCode = 1;
@@ -0,0 +1,118 @@
+// #278: component projection overhead and degraded-fixture completion budget.
+import { performance } from 'node:perf_hooks';
+import { readFileSync } from 'node:fs';
+
+import { makeLargeHouseFixture, LARGE_HOUSE_COUNTS } from './fixtures/large-house.mjs';
+import { prepareSpacePhysicalGeometryInputs } from '../test-build/plan-geometry-preflight.js';
+import { spaceModels } from '../test-build/space-geometry.js';
+import {
+  polyclipToPathD, wallBodiesGeometry, wallBodiesUnionPath,
+} from '../test-build/wall-thickness.js';
+
+const WARMUPS = 3;
+const SAMPLES = 50;
+// One projection is sub-millisecond. Time a batch and report per-operation
+// cost so scheduler/timer quantisation cannot dominate the 10% relative gate.
+const VALID_BATCH = 100;
+const RELATIVE_RATIO = 1.1;
+const OVERHEAD_P95_MS = 20;
+const DEGRADED_P95_MS = 100;
+
+const prepare = (config) => {
+  const models = spaceModels(config);
+  return config.spaces.map((space, index) =>
+    prepareSpacePhysicalGeometryInputs(space, models[index]));
+};
+const args = (input) => [
+  input.space.rooms, input.walls, input.openCuts, input.roomOpenings,
+  input.wallKeyPitch, input.cellCm, input.gridPitch, input.coordScale,
+  input.physicalBodies,
+];
+const large = makeLargeHouseFixture();
+const validInputs = prepare(large.config);
+const degradedFixture = JSON.parse(readFileSync(
+  new URL('../test/fixtures/278-wall-union-isolation.json', import.meta.url), 'utf8',
+));
+const degradedInput = prepare(degradedFixture.config)[0];
+
+const validResults = validInputs.map((input) => wallBodiesGeometry(...args(input)));
+if (validResults.some((result) => result.status !== 'ok'))
+  throw new Error(`valid geometry: ${validResults.map((result) => result.status).join(',')}`);
+const validGeometry = () => {
+  for (const result of validResults) {
+    // The previous production projection also serialized primary + paper.
+    if (!polyclipToPathD(result.geom) || !polyclipToPathD(result.paperGeom))
+      throw new Error('valid legacy projection');
+  }
+};
+const validProjection = () => {
+  for (const result of validResults) {
+    const paths = result.components.map((component) => polyclipToPathD(component.geom));
+    const paper = polyclipToPathD(result.paperGeom);
+    if (!paths.length || paths.some((path) => !path) || !paper)
+      throw new Error('valid component projection');
+  }
+};
+const degradedProjection = () => {
+  const result = wallBodiesUnionPath(...args(degradedInput));
+  if (!result || result.status !== 'degraded-extra' || result.paths.length !== 2)
+    throw new Error(`degraded projection: ${result?.status || 'null'}`);
+};
+const timed = (operation, iterations = 1) => {
+  const started = performance.now();
+  for (let index = 0; index < iterations; index++) operation();
+  return performance.now() - started;
+};
+const run = (operation) => {
+  for (let index = 0; index < WARMUPS; index++) operation();
+  return Array.from({ length: SAMPLES }, () => timed(operation));
+};
+const runPairs = () => {
+  for (let index = 0; index < WARMUPS; index++) {
+    validGeometry();
+    validProjection();
+  }
+  const baseline = [], candidate = [], overhead = [];
+  for (let index = 0; index < SAMPLES; index++) {
+    let baseMs, candidateMs;
+    if (index % 2 === 0) {
+      baseMs = timed(validGeometry, VALID_BATCH) / VALID_BATCH;
+      candidateMs = timed(validProjection, VALID_BATCH) / VALID_BATCH;
+    } else {
+      candidateMs = timed(validProjection, VALID_BATCH) / VALID_BATCH;
+      baseMs = timed(validGeometry, VALID_BATCH) / VALID_BATCH;
+    }
+    baseline.push(baseMs);
+    candidate.push(candidateMs);
+    overhead.push(candidateMs - baseMs);
+  }
+  return { baseline, candidate, overhead };
+};
+const quantile = (values, ratio) => {
+  const sorted = [...values].sort((a, b) => a - b);
+  return sorted[Math.min(sorted.length - 1, Math.ceil(sorted.length * ratio) - 1)];
+};
+const summary = (values) => ({
+  min: Math.min(...values), median: quantile(values, 0.5),
+  p95: quantile(values, 0.95), max: Math.max(...values),
+});
+
+const pairs = runPairs();
+const baseline = summary(pairs.baseline);
+const candidate = summary(pairs.candidate);
+const degraded = summary(run(degradedProjection));
+const relativeLimit = baseline.p95 * RELATIVE_RATIO;
+const overheadP95 = quantile(pairs.overhead, 0.95);
+const pass = candidate.p95 <= relativeLimit && overheadP95 <= OVERHEAD_P95_MS
+  && degraded.p95 <= DEGRADED_P95_MS;
+console.log(JSON.stringify({
+  issue: 278, fixture: LARGE_HOUSE_COUNTS, warmups: WARMUPS, samples: SAMPLES,
+  validBatch: VALID_BATCH,
+  baseline, candidate, degraded, overheadP95,
+  budgets: {
+    relativeRatio: RELATIVE_RATIO, overheadP95Ms: OVERHEAD_P95_MS,
+    relativeLimitP95Ms: relativeLimit, degradedP95Ms: DEGRADED_P95_MS,
+  },
+  pass,
+}, null, 2));
+if (!pass) process.exitCode = 1;
@@ -1,5 +1,6 @@
-import { existsSync } from 'node:fs';
-import { resolve } from 'node:path';
+import { createHash } from 'node:crypto';
+import { existsSync, readFileSync } from 'node:fs';
+import { relative, resolve } from 'node:path';
 import { pathToFileURL } from 'node:url';
 import { sourceFingerprint } from '../scripts/source-fingerprint.mjs';

@@ -13,17 +14,39 @@ const fingerprintForTree = async (root) => {
  return module.sourceFingerprint(root);
 };

+const verifyManifestTree = (root, expected) => {
+  const assetRoot = resolve(root, 'demo/srv/assets');
+  const manifestPath = resolve(assetRoot, 'houseplan-assets.json');
+  // Comparative benchmarks can target releases from before the multi-asset
+  // contract. Their own embedded fingerprint remains the legacy authority.
+  if (!existsSync(manifestPath)) return;
+  const manifest = JSON.parse(readFileSync(manifestPath, 'utf8'));
+  if (manifest?.schema !== 1 || manifest.fingerprint !== expected
+      || !Array.isArray(manifest.files)) {
+    throw new Error('demo bundle manifest is stale or malformed; run npm run bundle:sync');
+  }
+  for (const file of manifest.files) {
+    const path = resolve(assetRoot, String(file?.path || ''));
+    const rel = relative(assetRoot, path);
+    if (!rel || rel.startsWith('..') || rel.includes(':') || !existsSync(path)) {
+      throw new Error(`demo bundle manifest asset is missing or unsafe: ${file?.path}`);
+    }
+    const hash = createHash('sha256').update(readFileSync(path)).digest('hex');
+    if (hash !== file.sha256) throw new Error(`demo bundle asset hash mismatch: ${file.path}`);
+  }
+};
+
 /** Refuse measurements/screenshots made by a committed bundle from old source. */
 export async function assertFreshDemoBundle(page, root = process.cwd()) {
  // A comparative performance run may load an older tree whose fingerprint
  // contract is intentionally different from the candidate's. Validate that
  // tree with the implementation that built it, not with today's algorithm.
  const expected = await fingerprintForTree(root);
+  verifyManifestTree(root, expected);
  const loaded = await page.evaluate(() => globalThis.__HOUSEPLAN_BUILD_FINGERPRINT__ ?? null);
  if (loaded !== expected) {
    throw new Error(
-      'demo/srv/assets/houseplan-card.js is stale. Run npm run build and copy '
-      + 'dist/houseplan-card.js to demo/srv/assets/houseplan-card.js first. '
+      'demo/srv/assets bundle tree is stale. Run npm run bundle:sync first. '
      + `Expected ${expected}, loaded ${loaded || 'no fingerprint'}.`,
    );
  }
@@ -0,0 +1,85 @@
+/** Local-only visual proof for #275; external backup contents are never printed. */
+import { mkdirSync, readFileSync } from 'node:fs';
+import { resolve } from 'node:path';
+
+import { optimizePlans } from '../test-build/plan-optimizer.js';
+import { launch } from './serve.mjs';
+
+const input = process.argv[2];
+const outputDir = resolve(process.argv[3] || '.');
+const mode = process.argv.includes('--optimized') ? 'optimized' : 'raw';
+const nodesArg = process.argv.find((value) => value.startsWith('--nodes='))?.slice(8) || '';
+const nodes = nodesArg.split(';').filter(Boolean).map((pair) => pair.split(',').map(Number));
+if (!input) {
+  console.error('usage: node demo/capture_wall_strip_backup.mjs <backup> <outdir> '
+    + '[--optimized] [--nodes=x,y;x,y]');
+  process.exit(2);
+}
+
+const backup = JSON.parse(readFileSync(input, 'utf8'));
+const payload = backup?.payload && typeof backup.payload === 'object' ? backup.payload : backup;
+const source = {
+  config: payload?.config && typeof payload.config === 'object' ? payload.config : payload,
+  layout: payload?.layout && typeof payload.layout === 'object' ? payload.layout : {},
+};
+const rendered = mode === 'optimized'
+  ? optimizePlans(source.config, source.layout)
+  : source;
+const config = rendered.config;
+const layout = rendered.layout;
+if (!Array.isArray(config?.spaces) || !config.spaces.length) {
+  throw new Error('backup has no spaces');
+}
+
+mkdirSync(outputDir, { recursive: true });
+const { page, browser } = await launch({ width: 1800, height: 1250 }, 1);
+await page.emulateMedia({ reducedMotion: 'reduce' });
+await page.evaluate(async ({ cfg, lay }) => {
+  const card = window.__card;
+  card._serverCfg = structuredClone(cfg);
+  card._layout = structuredClone(lay);
+  card._space = cfg.spaces[0].id;
+  card._setMode('plan');
+  card._tool = 'select';
+  card._cfgEpoch++;
+  card._modelCache = null;
+  card._frame = null;
+  card._wallUnionCache = null;
+  card._physicalBodiesCache = null;
+  card._lightBarrierCache = null;
+  card._isoGeometryCache.clear();
+  card.requestUpdate();
+  await card.updateComplete;
+  card._fitAll();
+  card.requestUpdate();
+  await card.updateComplete;
+  await new Promise((done) => requestAnimationFrame(() => requestAnimationFrame(done)));
+}, { cfg: config, lay: layout });
+
+const fullPath = resolve(outputDir, `${mode}-full.png`);
+await page.screenshot({ path: fullPath, animations: 'disabled' });
+for (let index = 0; index < nodes.length; index++) {
+  const center = await page.evaluate(([x, y]) => {
+    const card = window.__card;
+    const svg = (card.shadowRoot || card.renderRoot).querySelector('.stage svg');
+    const matrix = svg?.getScreenCTM?.();
+    if (!matrix) return null;
+    const point = new DOMPoint(x * 1000, y * 1000).matrixTransform(matrix);
+    return { x: point.x, y: point.y };
+  }, nodes[index]);
+  if (!center) continue;
+  const width = 420, height = 360;
+  const clip = {
+    x: Math.max(0, Math.min(1800 - width, center.x - width / 2)),
+    y: Math.max(0, Math.min(1250 - height, center.y - height / 2)),
+    width,
+    height,
+  };
+  await page.screenshot({
+    path: resolve(outputDir, `${mode}-node-${index + 1}.png`),
+    clip,
+    animations: 'disabled',
+  });
+}
+await browser.close();
+console.log(JSON.stringify({ mode, full: fullPath, crops: nodes.length }));
@@ -1,8 +1,13 @@
 #!/usr/bin/env node
 import { createHash } from 'node:crypto';
-import { copyFileSync, mkdirSync, readFileSync, writeFileSync } from 'node:fs';
+import { spawnSync } from 'node:child_process';
+import { mkdirSync, readFileSync, writeFileSync } from 'node:fs';
 import { dirname, resolve } from 'node:path';
 import { fileURLToPath } from 'node:url';
+// #337: a clean CI checkout has no ignored demo bundle. Materialize the whole
+// manifest-owned tree before launching Chromium; copying only the stable entry
+// leaves every content-hashed import at 404.
+import '../../scripts/bundle-sync.mjs';
 import { visualFingerprint } from '../../scripts/source-fingerprint.mjs';
 import { assertFreshDemoBundle } from '../bundle-freshness.mjs';
 import { goldenClip, prepareGoldenScenario } from '../golden/harness.mjs';
@@ -11,12 +16,50 @@ import { DOC_SCREENSHOT_VERSION, DOC_SCREENSHOTS } from './screenshots.mjs';

 const ROOT = resolve(dirname(fileURLToPath(import.meta.url)), '../..');
 const OUTPUT = resolve(ROOT, 'docs/images');
-const BUNDLE = resolve(ROOT, 'dist/houseplan-card.js');
-const DEMO_BUNDLE = resolve(ROOT, 'demo/srv/assets/houseplan-card.js');
-const INTEGRATION_BUNDLE = resolve(ROOT, 'custom_components/houseplan/frontend/houseplan-card.js');
 const SCRIPT = fileURLToPath(import.meta.url);
 const sha256 = (value) => createHash('sha256').update(value).digest('hex');

+/**
+ * Перепаковка кадра без потерь (#345).
+ *
+ * Замер на этом наборе: 2096 КБ превращаются в 1689 КБ, минус 19.4%, и все
+ * десять кадров остаются ПИКСЕЛЬНО идентичными — декодированные RGBA совпадают
+ * по sha256. Это выбор фильтров строки и уровня сжатия, а не квантование:
+ * визуального решения здесь нет вовсе.
+ *
+ * Почему внутри съёмки, а не отдельным проходом по закоммиченным файлам.
+ * Манифест хранит `imageSha256` каждого кадра, поэтому оптимизировать файлы в
+ * репозитории руками нельзя — `check-docs` покраснеет; а если жать после
+ * подсчёта хешей, следующая же съёмка вернёт неоптимизированные байты.
+ *
+ * Отсутствие инструмента не ошибка: локальная съёмка и без него полезна для
+ * глаз, а приёмка всё равно идёт только из артефакта CI, где `oxipng` стоит
+ * пином (`.github/workflows/docs-screenshots.yml`). Но молчать об этом нельзя —
+ * байты кадра зависят от того, был ли инструмент, поэтому его версия попадает
+ * в манифест рядом с версией браузера, по той же причине.
+ */
+const oxipngVersion = (() => {
+  const probe = spawnSync('oxipng', ['--version'], { encoding: 'utf8' });
+  if (probe.status !== 0) {
+    console.log('oxipng не найден: кадры пишутся как есть, без перепаковки');
+    return null;
+  }
+  return String(probe.stdout || '').trim().split('\n')[0];
+})();
+
+/** Пожать файл на месте и вернуть его новые байты. */
+const shrinkPng = (path, before) => {
+  if (!oxipngVersion) return before;
+  const run = spawnSync('oxipng', ['-o', '4', '--strip', 'safe', '--quiet', path]);
+  if (run.status !== 0) {
+    throw new Error(`oxipng не смог обработать ${path}: код ${run.status}`
+      + `${run.stderr ? ` · ${run.stderr}` : ''}`);
+  }
+  const after = readFileSync(path);
+  console.log(`  ${(before.length / 1024).toFixed(0)} КБ -> ${(after.length / 1024).toFixed(0)} КБ`);
+  return after;
+};
+

 const roomCardClip = (page) => page.evaluate(() => {
  const card = window.__goldenCard;
@@ -103,8 +146,6 @@ const applyDocumentationState = (page, scenario) => page.evaluate(async (current
 }, scenario);

 mkdirSync(OUTPUT, { recursive: true });
-copyFileSync(BUNDLE, DEMO_BUNDLE);
-copyFileSync(BUNDLE, INTEGRATION_BUNDLE);

 const { page, browser } = await launch();
 const browserErrors = [];
@@ -129,14 +170,18 @@ try {
    const image = await page.screenshot({
      ...(clip ? { clip } : {}), animations: 'disabled', caret: 'hide', scale: 'css',
    });
-    writeFileSync(resolve(OUTPUT, scenario.file), image);
+    const imagePath = resolve(OUTPUT, scenario.file);
+    writeFileSync(imagePath, image);
+    // Хеш считается ПОСЛЕ перепаковки: манифест обязан описывать те байты,
+    // которые лежат на диске, иначе приёмка отвергнет свой же кандидат.
+    const stored = shrinkPng(imagePath, image);
    scenarios[scenario.id] = {
      file: scenario.file,
      viewport: scenario.viewport,
      theme: scenario.theme,
      language: scenario.language,
      sourceSha256: fingerprint,
-      imageSha256: sha256(image),
+      imageSha256: sha256(stored),
    };
    console.log(`captured ${scenario.id} -> docs/images/${scenario.file}`);
  }
@@ -147,6 +192,8 @@ try {
    // Кто снимал. Смена браузера переписывает все картинки без содержательных
    // изменений (#246), поэтому окружение съёмки — часть доказательства.
    chromium: browser.version(),
+    // Чем жали — тоже часть доказательства: без инструмента байты другие.
+    oxipng: oxipngVersion,
    sourceFingerprint: fingerprint,
    captureScriptSha256: sha256(readFileSync(SCRIPT)),
    command: 'npm run build && node demo/docs/capture.mjs',
@@ -3,6 +3,8 @@
 * visual-regression tooling. Nothing here depends on a real HA installation.
 */

+import { fixtureWallKey } from './wall-key.mjs';
+
 const FLOOR_COUNT = 3;
 const ROOMS_PER_FLOOR = 20;
 const DEVICE_COUNT = 200;
@@ -213,8 +215,14 @@ export const makeLargeHouseFixture = () => {
      cell_cm: 5,
      settings: { fill_mode: 'glow', show_borders: true, show_names: true },
      rooms,
-      walls: segments.map((wall, index) => ({
-        key: `perf-wall-${floor}-${index}`, cm: 15, a: wall.a, b: wall.b,
+      // The key must be the real one. A label like `perf-wall-0-3` does not
+      // parse as coordinates, so neither the exact match nor the tolerant
+      // fallback in lookupWall finds the record: every solid edge of this
+      // fixture resolved to zero thickness and the plan carried no wall bodies
+      // at all, while the same fixture backs four golden scenes and all six
+      // performance budgets (#260).
+      walls: segments.map((wall) => ({
+        key: fixtureWallKey(wall.a, wall.b), cm: 15, a: wall.a, b: wall.b,
      })),
      openings: makeOpenings(floor, segments, openingCount),
      partitions: makePartitions(floor, rooms, partitionCount),
@@ -0,0 +1,86 @@
+/**
+ * #314 anonymised dense-plan fixture.
+ *
+ * It preserves the structural shape of the owner's report without names,
+ * markers, layout, or original coordinates: 13 rooms, 44 catalogue walls,
+ * 24 intentional partitions, and one pre-existing two-point draft.  The last
+ * object is known debt and must remain the only invariant finding before and
+ * after drawing another room.
+ */
+import { WALL_KEY_PITCH } from './wall-key.mjs';
+
+export function makeV8DraftRegressionFixture() {
+  const step = WALL_KEY_PITCH;
+  const point = (x, y) => [x * step, y * step];
+  const segmentIds = new Map();
+  const wallSegments = [];
+  const keyOf = (a, b) => {
+    const left = `${a[0]},${a[1]}`;
+    const right = `${b[0]},${b[1]}`;
+    return left < right ? `${left}|${right}` : `${right}|${left}`;
+  };
+  const wallId = (a, b) => {
+    const key = keyOf(a, b);
+    let id = segmentIds.get(key);
+    if (!id) {
+      id = `wall-314-${String(wallSegments.length + 1).padStart(3, '0')}`;
+      segmentIds.set(key, id);
+      wallSegments.push({ id, a: [...a], b: [...b], cm: 15 });
+    }
+    return id;
+  };
+
+  const rooms = Array.from({ length: 13 }, (_, index) => {
+    const x0 = 4 + index * 12;
+    const x1 = x0 + 12;
+    const y0 = 4;
+    const y1 = 16;
+    const poly = [point(x0, y0), point(x1, y0), point(x1, y1)];
+    // Four split top edges make the catalogue population exactly 44 while
+    // keeping all rooms valid and non-overlapping.
+    if (index < 4) poly.push(point(x0 + 6, y1));
+    poly.push(point(x0, y1));
+    return {
+      id: `room-314-${String(index + 1).padStart(2, '0')}`,
+      name: `Room ${index + 1}`,
+      poly,
+      wall_ids: poly.map((a, edge) => wallId(a, poly[(edge + 1) % poly.length])),
+    };
+  });
+
+  const partitions = Array.from({ length: 24 }, (_, index) => {
+    const row = Math.floor(index / 8);
+    const x = 4 + (index % 8) * 18;
+    const y = 28 + row * 8;
+    return {
+      id: `partition-314-${String(index + 1).padStart(2, '0')}`,
+      a: point(x, y),
+      b: point(x + 8, y + 2),
+      cm: 15 + (index % 3) * 5,
+    };
+  });
+
+  if (wallSegments.length !== 44) {
+    throw new Error(`fixture catalogue drifted: expected 44, got ${wallSegments.length}`);
+  }
+
+  return {
+    model_version: 8,
+    spaces: [{
+      id: 'space-314-dense',
+      title: 'Dense regression fixture',
+      cell_cm: 5,
+      view_box: [0, 0, 400, 400],
+      rooms,
+      wall_segments: wallSegments,
+      partitions,
+      room_drafts: [{
+        id: 'draft-314-known-debt',
+        points: [point(4, 56), point(14, 64)],
+        segments: [{ id: 'wall-314-known-draft', cm: 15 }],
+      }],
+    }],
+    markers: [],
+    settings: {},
+  };
+}
@@ -4,22 +4,13 @@ const round = (value) => Number(value.toFixed(6));

 // Golden fixtures must use the same persisted wall-key contract as real plan
 // data. Arbitrary labels make every configured wall look virtual to the
-// renderer, which lets a visually ineffective baseline pass unnoticed.
-const WALL_KEY_PITCH = 1 / 240;
-export const fixtureWallKey = (a, b) => {
-  const quantize = (value) => Math.round(value / WALL_KEY_PITCH) * WALL_KEY_PITCH;
-  const mx = quantize((a[0] + b[0]) / 2);
-  const my = quantize((a[1] + b[1]) / 2);
-  let dx = b[0] - a[0], dy = b[1] - a[1];
-  const length = Math.hypot(dx, dy);
-  if (length < 1e-12) { dx = 1; dy = 0; }
-  else { dx /= length; dy /= length; }
-  if (dx < -1e-12 || (Math.abs(dx) <= 1e-12 && dy < 0)) { dx = -dx; dy = -dy; }
-  let angle = Math.atan2(dy, dx);
-  if (angle < 0) angle += Math.PI;
-  const bucket = Math.round(angle * 1800) / 1800;
-  return `${mx.toFixed(4)},${my.toFixed(4)}@${bucket.toFixed(4)}`;
-};
+// renderer, which lets a visually ineffective baseline pass unnoticed — and a
+// key that merely differs in precision is found only through the tolerant
+// fallback in lookupWall, which is luck rather than contract (#260). The
+// formula lives in one place for every fixture and is pinned to the product one
+// by test/fixture-wall-key.test.mjs.
+export { fixtureWallKey } from './wall-key.mjs';
+import { fixtureWallKey } from './wall-key.mjs';

 const uniqueEdges = (rooms) => {
  const edges = new Map();
@@ -0,0 +1,63 @@
+/**
+ * Ключ записи толщины стены — один на все фикстуры проекта.
+ *
+ * Копия формулы из `src/wall-thickness.ts`, и копия здесь неизбежна. Фикстуры
+ * обязаны оставаться без внешних импортов: бэкенд-гейт запускает их как
+ * `node --input-type=module --eval "import * as f from './demo/fixtures/…'"`
+ * в job без `npm ci` и без `test-build/` (`.github/workflows/validate.yml`,
+ * job `backend`), а `scripts/source-fingerprint.mjs` хеширует только `src/**`
+ * и `.mjs` из `demo/fixtures` и `demo/golden` — код, втянутый из `scripts/`,
+ * менял бы поведение фикстуры при неизменном отпечатке, на котором стоят и
+ * валидность golden-эталонов, и переиспользование гейтов.
+ *
+ * Поэтому файл лежит ЗДЕСЬ, внутри `demo/fixtures`: так он попадает в
+ * отпечаток, и так его видит одна привязка вместо трёх копий формулы.
+ * `test/fixture-wall-key.test.mjs` сверяет его с продуктовым `wallKey`.
+ *
+ * Ловушка, из-за которой этот файл и появился (#260): точность зависит от шага.
+ * При `pitch = 1/240` продукт печатает ШЕСТЬ знаков, а не четыре — фикстура с
+ * четырьмя расходилась с продуктом на каждой записи и находилась только через
+ * терпимый запас `lookupWall`. Метка вместо ключа (`perf-wall-0-3`) не
+ * находилась вовсе: все сплошные рёбра оставались с нулевой толщиной.
+ */
+
+/** Шаг решётки редактора в нормализованных координатах (`GRID_N = 240`). */
+export const WALL_KEY_PITCH = 1 / 240;
+
+/** Направление стены по модулю 180°: стена одна и та же с любого конца. */
+const direction = (a, b) => {
+  let dx = b[0] - a[0], dy = b[1] - a[1];
+  const length = Math.hypot(dx, dy);
+  if (length < 1e-12) return [1, 0];
+  dx /= length; dy /= length;
+  if (dx < -1e-12 || (Math.abs(dx) <= 1e-12 && dy < 0)) return [-dx, -dy];
+  return [dx, dy];
+};
+
+/**
+ * Координата, отличающаяся от узла решётки не больше точности хранения, — это
+ * тот же узел (#258). Канонизация опознания, а не снап геометрии: произвольная
+ * точка вне решётки остаётся вне решётки. Без этого шага ничья округления на
+ * стене нечётной длины в шагах разводила один и тот же ключ на два.
+ */
+const keyEpsilon = (pitch) => Math.max(Math.abs(pitch) * 1e-6, 1e-9);
+const canonical = (value, pitch) => {
+  if (!(pitch > 0) || !Number.isFinite(value)) return value;
+  const snapped = Math.round(value / pitch) * pitch;
+  return Math.abs(snapped - value) <= keyEpsilon(pitch) ? snapped : value;
+};
+
+export const fixtureWallKey = (a, b, pitch = WALL_KEY_PITCH) => {
+  const quantise = (value) => (pitch > 0 && Number.isFinite(value)
+    ? Math.round(value / pitch) * pitch : value);
+  const ca = [canonical(a[0], pitch), canonical(a[1], pitch)];
+  const cb = [canonical(b[0], pitch), canonical(b[1], pitch)];
+  const mx = quantise((ca[0] + cb[0]) / 2);
+  const my = quantise((ca[1] + cb[1]) / 2);
+  const [dx, dy] = direction(ca, cb);
+  let angle = Math.atan2(dy, dx);
+  if (angle < 0) angle += Math.PI;
+  const bucket = Math.round(angle * 1800) / 1800;
+  const precision = pitch > 0 && pitch < 0.01 ? 6 : pitch < 1 ? 4 : 2;
+  return `${mx.toFixed(precision)},${my.toFixed(precision)}@${bucket.toFixed(4)}`;
+};
@@ -28,6 +28,20 @@ radial spokes visible instead of hiding them under a translucent room fill.
 - `accept` requires `--reviewed`, a complete candidate report and current
  source fingerprint. It validates the whole set before copying anything and
  is the only command allowed to update baselines.
+- `scripts/golden-accept.mjs` wraps `accept` and additionally requires the
+  reviewer to declare intent, with two separate flags because they assert two
+  different things. `--expect-change=<id,id>` means "I know why this existing
+  baseline moved"; `--expect-new=<id,id>` means "I have looked at this new
+  frame". Anything that differs, or arrives without a baseline, and is not named
+  refuses the whole acceptance before a single file is copied; naming a scenario
+  under the wrong flag refuses it too. Only the named scenarios are written:
+  everything else keeps its reviewed bytes and its manifest hash, because
+  `passed` means "within threshold", not "byte-identical", and copying every
+  candidate let sub-threshold drift ratchet the baselines to the newest
+  environment unseen (#351). The first flag is what makes a local
+  capture admissible (see below) and blocks the one-command "accept everything so
+  CI turns green"; the second stops an empty or clipped frame from becoming the
+  contract unseen (#350).

 ## Workflow

@@ -35,7 +49,7 @@ Build and copy the exact current source first:

 ```bash
 npm run build
-cp dist/houseplan-card.js demo/srv/assets/houseplan-card.js
+npm run bundle:sync
 npm run golden:capture
 ```

@@ -43,17 +57,57 @@ Review `artifacts/golden/actual/` and, when existing references are present,
 `artifacts/golden/diff/`. If every image is intentional:

 ```bash
-npm run golden:accept -- --reviewed
+node scripts/golden-accept.mjs --reviewed --expect-change=wall-junctions-plan-t-dark
 npm run golden:verify
 ```

 Never accept images merely to make CI green. A matrix/framing change increments
 `GOLDEN_MATRIX_VERSION`; a normal rendering fix does not. The first canonical
 Linux baseline was reviewed and accepted during the v1.60.3-beta.1 gate.
-Future updates must still use the `golden-images` artifact produced by the Linux
-CI job as the review set: desktop font rasterisation can differ from the CI
-environment even with the same pinned Chromium. Pass its unpacked root via
-`--from=...` when accepting it locally.
+
+## Capturing candidates without a second CI round trip (#334)
+
+Accepting from the `golden-images` CI artifact still works and is still the
+safest route: unpack it and pass `--from=...`. It costs two full CI runs per
+visual fix, though — one to produce the artifact and one to verify the accepted
+baseline — and at matrix version 48 that toll is paid often.
+
+A local capture is admissible instead, because admissibility is now *proved*
+rather than assumed. Desktop font rasterisation can differ from the runner, but
+it cannot differ quietly: it would move every text-bearing scenario, not only
+the ones under edit. So the rule is simply that the capture must reproduce every
+accepted baseline the reviewer did not intend to change:
+
+```bash
+node scripts/golden-container.mjs                      # capture in the pinned image
+node scripts/golden-accept.mjs --reviewed --expect-change=<the scenarios you changed>
+```
+
+If the environment is not pixel-equivalent, unrelated scenarios come out
+`different`, the wrapper names them and refuses. A wrong container tag or a
+mismatched font set therefore cannot corrupt baselines — it can only fail.
+
+`scripts/golden-container.mjs` derives the image tag from the `playwright`
+version locked in `package-lock.json`, so the container Chromium equals the
+runner's; `--image=` overrides it when a distro-specific tag is needed
+(`...:v1.62.0-jammy`). The host `node_modules` is shadowed by an anonymous
+volume: the repository copy may be built for Windows, and `npm ci` inside the
+container would otherwise replace it with Linux binaries. The run does write
+`dist/` and the three bundle copies, exactly as a local `npm run bundle:sync`
+would.
+
+Docker is not a requirement of the rule, only a convenience: any Linux
+environment that satisfies the parity condition qualifies, WSL included. The
+`chromium` string recorded in the manifest keeps the browser build itself
+pinned, and `golden:verify` rejects a manifest captured by a different build.
+
+`scripts/golden-accept.mjs` deliberately wraps `demo/golden/accept.mjs` instead
+of replacing its checks: every `.mjs` under `demo/golden` belongs to
+`sourceFingerprint`, so editing the acceptance tool itself would declare the
+committed bundle, the documentation screenshot manifest and the baseline
+manifest stale — the very double round trip this change removes. Narrowing that
+corpus is worthwhile but separate: `scripts/source-fingerprint.mjs` is itself a
+build input, so any change to it forces one bundle rebuild.

 Scenarios may also declare a semantic pixel region (for example, a receiving
 room that must contain warm light). `golden:capture` and `golden:verify` reject
@@ -6,11 +6,21 @@ import { fileURLToPath } from 'node:url';
 import { sourceFingerprint } from '../../scripts/source-fingerprint.mjs';
 import { GOLDEN_MATRIX_VERSION, GOLDEN_SCENARIOS } from './matrix.mjs';
 import { GOLDEN_BASELINE_MANIFEST } from './policy.mjs';
+import {
+  goldenAcceptancePlan, goldenAcceptanceRefusal, goldenSilentDeclarations,
+} from '../../scripts/golden-acceptance.mjs';

 const ROOT = resolve(dirname(fileURLToPath(import.meta.url)), '../..');
 const reviewed = process.argv.includes('--reviewed');
 const fromArg = process.argv.find((arg) => arg.startsWith('--from='));
 const from = resolve(fromArg ? fromArg.slice('--from='.length) : resolve(ROOT, 'artifacts/golden'));
+const list = (name) => {
+  const found = process.argv.find((arg) => arg.startsWith(`--${name}=`));
+  return (found ? found.slice(name.length + 3) : '')
+    .split(',').map((id) => id.trim()).filter(Boolean);
+};
+const declared = list('expect-change');
+const declaredNew = list('expect-new');
 if (!reviewed) throw new Error('refusing to replace baselines without explicit --reviewed');

 const reportPath = resolve(from, 'golden-report.json');
@@ -24,11 +34,29 @@ if (typeof report.chromium !== 'string' || !report.chromium)
  throw new Error('candidate report does not identify its Chromium build');
 if (!Array.isArray(report.results)) throw new Error('candidate report has no scenario results');

+const refusal = goldenAcceptanceRefusal(report.results, declared, declaredNew);
+if (refusal) throw new Error(refusal);
+
 const byId = new Map(report.results.map((result) => [result.id, result]));
 const baselineRoot = resolve(ROOT, 'demo/golden/baselines');
 mkdirSync(baselineRoot, { recursive: true });
-const hashes = {};
-const candidates = [];
+/**
+ * Прежний индекс: источник хешей для сцен, которые остаются как были (#351).
+ *
+ * `passed` не значит «байт в байт» — он значит «в пределах порога». Прежняя
+ * версия копировала кандидата поверх КАЖДОГО эталона, поэтому подпороговый
+ * дрейф уезжал в контракт молча, и накапливался: каждая приёмка подтягивала
+ * эталон к последней среде, порог не пересекался никогда, а эталон уходил.
+ * Так `1e341c60` заменил 22 картинки, объявив четыре. Владелец делал эту работу
+ * руками (`ad3f9981`: «nine unrelated baselines … were restored to their
+ * reviewed versions»); теперь её делает инструмент.
+ */
+const manifestPath = resolve(baselineRoot, GOLDEN_BASELINE_MANIFEST);
+const previous = existsSync(manifestPath)
+  ? JSON.parse(readFileSync(manifestPath, 'utf8')).scenarios || {}
+  : {};
+// Кандидат проверяется целиком, до всякого решения о замене: сломанный отчёт
+// не имеет права оставить каталог эталонов половинным.
 for (const scenario of GOLDEN_SCENARIOS) {
  const result = byId.get(scenario.id);
  const candidate = resolve(from, 'actual', `${scenario.id}.png`);
@@ -36,16 +64,20 @@ for (const scenario of GOLDEN_SCENARIOS) {
    throw new Error(`review candidate has an invalid run status: ${scenario.id} (${result?.status || 'missing'})`);
  if (!result?.actualSha256 || !existsSync(candidate))
    throw new Error(`review candidate missing: ${scenario.id}`);
-  const bytes = readFileSync(candidate);
-  const digest = createHash('sha256').update(bytes).digest('hex');
+  const digest = createHash('sha256').update(readFileSync(candidate)).digest('hex');
  if (digest !== result.actualSha256) throw new Error(`candidate changed after capture: ${scenario.id}`);
-  candidates.push({ scenario, candidate });
-  hashes[scenario.id] = digest;
 }
-// Validate the complete set first: a broken report must never leave a half-
-// updated baseline directory behind.
-for (const { scenario, candidate } of candidates)
-  copyFileSync(candidate, resolve(baselineRoot, `${scenario.id}.png`));
+const plan = goldenAcceptancePlan({
+  scenarioIds: GOLDEN_SCENARIOS.map((scenario) => scenario.id),
+  results: report.results,
+  previousHashes: previous,
+  declared,
+  declaredNew,
+});
+const hashes = plan.hashes;
+for (const id of plan.replace) {
+  copyFileSync(resolve(from, 'actual', `${id}.png`), resolve(baselineRoot, `${id}.png`));
+}
 writeFileSync(resolve(baselineRoot, GOLDEN_BASELINE_MANIFEST), `${JSON.stringify({
  schema: 1,
  matrixVersion: GOLDEN_MATRIX_VERSION,
@@ -54,4 +86,11 @@ writeFileSync(resolve(baselineRoot, GOLDEN_BASELINE_MANIFEST), `${JSON.stringify
  chromium: report.chromium,
  scenarios: hashes,
 }, null, 2)}\n`, 'utf8');
-console.log(`Accepted ${GOLDEN_SCENARIOS.length} reviewed golden baselines.`);
+const silent = goldenSilentDeclarations(report.results, declared);
+if (silent.length) {
+  console.log(`Объявлены как изменённые, но совпали с эталоном: ${silent.join(', ')}.`);
+}
+console.log(`Заменено эталонов: ${plan.replace.length}`
+  + `${plan.replace.length ? ` (${[...plan.replace].sort().join(', ')})` : ''}.`);
+console.log(`Сохранено без изменений: ${plan.keep.length}.`);
+console.log(`Индекс перезаписан на ${GOLDEN_SCENARIOS.length} сцен.`);
@@ -1,60 +1,77 @@
 {
  "schema": 1,
-  "matrixVersion": 39,
-  "acceptedAt": "2026-08-23T05:36:23.917Z",
-  "sourceFingerprint": "9f02bbdd4af8b4bb62b64b6c02b34185edd3d5072031d8adb6d54393ec7b7c54",
+  "matrixVersion": 49,
+  "acceptedAt": "2026-08-28T09:41:50.717Z",
+  "sourceFingerprint": "b6d9eb672c772bca7fa08bf25b4525cc8bbf3084320f383f16ab86a535090444",
  "chromium": "151.0.7922.34",
  "scenarios": {
+    "hidden-wall-diagnostics-plan-light": "37ba151aa6b1ea7b1b270d461ccca348444c5eeb14a5592bf045a0e69b0fb83e",
+    "hidden-wall-diagnostics-plan-dark": "565d5481f744704a2a6f18658b9b6fa65e7cdbfcd11b50a2bedbc0daae2d8488",
+    "coincident-partition-before-dark": "19626db704fccb7a42b519ffb20b7bad82c726e8845c752ab451f731d264561c",
+    "coincident-partition-thin-dark": "3afede1f99b86454bf4e50d9628196a2240243e034644592c5c3efa1b4561930",
+    "coincident-partition-thick-dark": "57960bd09e6cbbeb073561692690ca68a72d6dbf8242198ef73b8d4ae4d8fbcc",
+    "coincident-partition-virtual-dark": "da7adbf931ad95f4e620d9d088177f1da20d88a21b9e85b6ff2675925d5557b4",
+    "span-over-door-migrated-dark": "a817f5baacf5ff80d1f236ffaa176cb6331b75423393dae5b16e54f67f37c7e0",
    "split-corner-wall-before-dark": "3176dc67f54d5309f87c94e1077b4f69eb1db9f660469fbf97953038323430f3",
-    "split-corner-wall-thin-dark": "6da64905a3a4f8e4b4d457e5b20d2d55e0e7c2c601316a088c4bcc6557d35cc6",
-    "split-corner-wall-thick-dark": "98d82986061569ec9309f22bc50454cf63dbcb83105550f3e0439d39bfbc0142",
+    "split-corner-wall-thin-dark": "48062a49e12728c377a7c4352148381b1be2a5606b6792d754ae055b04c22be1",
+    "split-corner-wall-thick-dark": "a5d795eec4561e3a1aa9c37843fadddcb04d888d5a49e6ffacf29c17b7798568",
    "split-zero-divider-taper-dark": "3de38befb41f15ef4047da1390e061b1b5756340142dd9204d011287ff39be5b",
-    "isometric-geometry-view-dark": "d4b3918e0597dee2e059153d98812a5035da0f82da20e43ae810b83b8e0ac965",
-    "isometric-geometry-view-light": "e68183fed65d263a2bd80e7600f548a4ab03c03cbfcffd2abea0e011fec0f353",
+    "isometric-geometry-view-dark": "0d8427299c77e1e3bb86f37f53128a6640b6666e0b682e5f96085c4f07a657ec",
+    "isometric-geometry-view-light": "a3e592448ad3ad4ff65266f1fd6f31259c01a9baf47392f6b8be9811d74f8dce",
    "isometric-live-layers-dark": "90fa1c0b64a12626e481c5f34e515c53b3e06cd657f5976bb8a72127aec3e1e9",
    "isometric-no-borders-dark": "a0abf9fdc31092980de3bcbf8598844b6e3d152363694e9bd070d45af73c26d9",
    "isometric-touch-kiosk-dark": "d3ae363165c4f0aba65bcbac9bd6bdca79f29aca03bba997f3abec1860eb1e55",
-    "isometric-large-warm-remount-dark": "b53aec1bdb466be97a21250db914b88535449321967ecc80c4bbe749a2af82b5",
-    "geometry-view-dark-fit": "e680793d24a575727d5b87910e824f9ba1fbdb9d7a0c6f60b8bfe839afe73a98",
-    "geometry-view-light-fit": "8a2fa3c2c7f28cb55fb3119b645fa68b92dbda71706642e38dba569a7f770eea",
+    "isometric-large-warm-remount-dark": "299401bd4b499876d40678593308b42ac8aa4d3328113f27ad5940fc3621184a",
+    "geometry-view-dark-fit": "2d96e776ea9fc8a136896b58df30abb13a8a53e6c40e5b4f4e12c6dba522380f",
+    "geometry-view-light-fit": "60e8a908fc1c3be3ca5c9b82bf432120d808d913f743c04683b4a2c501d84659",
    "room-label-parity-view-dark": "b35675251b85144bca1bc15ed7bf27a4dd1eaa0bfc288e3e3b0d1cdefac79ae5",
-    "room-label-parity-plan-dark": "64827483632ce5b66e2ae5cdf7c6858ca7062c3499b1967e8ca31ebca0cb5af1",
+    "room-label-parity-plan-dark": "34c1010481e2799b8598e3c6f659ca7ec8e695a064eecacf3562000639f44d6a",
    "room-label-parity-view-light": "789f8f3b6211d35e70021094f2063dc9c6ac57599d9d64743a33b7ae9dd868c2",
-    "room-label-parity-plan-light": "0f98689d2fbc21e14a321918ab46c35a9d8463d7db68d78f3c5b00d026c9cc50",
+    "room-label-parity-plan-light": "272dc35d85b1f07efc4c2a05c31f6adbf7d10c648e3c678e7235e35167f83a7d",
    "washer-active-cycle-dark": "d74a646bc71b8d6d0d5b09e6862b4846b0e369da2520afa76d5b3d601c832a15",
    "washer-idle-cycle-dark": "f7fae5c2f6856a3df5bd3f3028fcf829ef0039c7b43c91c27ac86d25626e8d66",
-    "day-cycle-dawn-dark": "aa332443ebe5e93b11c569cd4804a0995e1e76b7a5b6aa6844d001a0f6c12991",
-    "day-cycle-day-dark": "af1ab469144fbb3c73d99ff2817f86ec9b8704eadfaef83905cac645eb2eab07",
-    "day-cycle-dusk-dark": "19fdca90fbd9c902bc734b3dc4e5e50c1aa06b22a6e8a19079ad35cd86beb1fb",
-    "day-cycle-night-dark": "b5530a74422e577db90b340a395c0c097907244b330c535169a8e5c4edc8c24b",
-    "geometry-plan-editor-dark": "e937867f27e04d5c3cd6d84cbdb8fa5fc0a8ed9769358368ecee7a8850d57d1f",
-    "space-tab-drop-before-light": "820ebdceaa08b0319a9cf0222c24766aabb78263a7eb3d9474607724618e55d1",
-    "space-tab-drop-after-dark": "fae316777d79e643000eb809e9a2106fe7a4cd39f7cfe12e960286c5f88b490a",
-    "plan-snap-endpoint-light": "59539dd563fa4af530b6e5aa4489937eeaf36df922efd31fc12340bfb779695b",
-    "plan-snap-line-gaps-dark": "066ee3921eec10fb14d829735402e631f81ebfb91dd5c6e8e8cf20ee1e69c483",
-    "wall-junctions-plan-preview-light": "1482b01209a796f93ebc23e231b33fe869ee96b6f46d1fb2d32ccf677a94e602",
-    "wall-junctions-plan-t-dark": "7a7e47db083a737669d4c803b4552bbe7c8700615cde5edaea5b8c553f9345d1",
+    "day-cycle-dawn-dark": "be3b891520637857b7f89dc88284753a15601ebae4db7db750714b9535348d33",
+    "day-cycle-day-dark": "1b791b8a773a5910a71338351ab12fdc36c22742a358b647ff4f295431fa4cfd",
+    "day-cycle-dusk-dark": "14182ad89301cb260ba21ee5077134ed408f038ea878ed4539b84f987182f910",
+    "day-cycle-night-dark": "407632fc54e13e6362b7e583d6e2b7bdd31b4093823846e4e630de0c8f542120",
+    "geometry-plan-editor-dark": "40a0083511c1ff9d0b8f1ec419af63e2a28f1f9a0ec3768387a10c89efe73905",
+    "safe-resize-handles-clamp-light": "f47a5bb09fa4415416d01ca5f4164014cc1d8dc7be54ea888e5399277104e94c",
+    "safe-resize-handles-clamp-dark": "3efd0ca2db8a06aa475e81e3635b878c3038d4763f840e6e856661b04a4fed96",
+    "space-tab-drop-before-light": "7024186821b13feb63ba254aee841379788bca1a5c01bfd07c42e15fe6b81179",
+    "space-tab-drop-after-dark": "5a2199e8b8364da9e85e0887334144e426f43b8022f2918bf130ea13cd099f5d",
+    "plan-snap-endpoint-light": "2185d5ec6726e07097ba1a911984a11d5ca9b460a1cd1e7b2a719255b7d0ed0b",
+    "plan-snap-line-gaps-dark": "276eb10f32be938640bd68a1cf837494f11cce8d10703721831360f3a1100d23",
+    "wall-junctions-plan-preview-light": "965860eb4302b60864b5e3191514c60b97bbcd6073960c437a973b4a880ecddb",
+    "wall-junctions-plan-t-dark": "258869fb3c5af9a223d63518bc6127bfde78c2c039d39583a965d68b225338ba",
    "wall-junctions-view-dark": "7b859c4f25f8a5dd4fca64d5b2f7aa64b65845fabbe83bc2388c2f99d29f71b1",
-    "junction-patch-resilience-plan-dark": "ac3e1818d3e85e8fd4e2a24695deb4461ee8b7f49a87c29528c95a352ef93a8d",
-    "junction-patch-resilience-view-dark": "b91397ccbb9e7d94622f15303c486146b0903c000f517e36efb7abcfa28a7a0a",
-    "multiwall-junction-bevel-view-dark": "ae486afba2a275d95d9a64b13210cc3b43cf01633ba2df2e2898f943e3d44869",
+    "junction-patch-resilience-plan-dark": "90acdf0658772c2883e775dd6972141ad699e165afcd9bf55382fbd99c203717",
+    "junction-patch-resilience-view-dark": "afd83241d9a1e1f19ab59c3f1e6fa7af058c3e42a7fafa5ba271ff92ccea8f91",
+    "wall-union-isolation-view-light": "106f8ac97b82107fed36aa4456c0b9f7a39eeb44be86864b1d4f083497cdbd6e",
+    "wall-union-isolation-view-dark": "914451a813546189bdc9ac22dcf158bbc822b4403080a3c2fd4c6b02bb7780a4",
+    "multiwall-junction-bevel-view-dark": "b80c4584a649722897c206d242a9df88d80169806a73db579b45595173b698b8",
+    "orthogonal-strip-cell-5-view-dark": "66a288f7e7fc6228c3c63f10e1df8df0656ca0cd36681d998b126b03acb70b5a",
+    "orthogonal-strip-cell-1-view-dark": "c23e6d0410b8f5c2b7fb0707f6bea40408730af08f9e7a0b166aa8c0a3d6c85f",
+    "wall-key-roundtrip-view-dark": "d7b0749d0f6c0cfa74ad4d9f76d8a7b7962fadf4e2648260b5647548a988341c",
    "isometric-wall-junctions-dark": "d1956cbbde9a6a02953ce80eb8a0f74ca06ea268a4c60bb09b5b3981c26d9731",
-    "opening-placement-door-thick-wall-dark": "6bb2211e9640800d5b3e1ad413297c7aa93a60bc13bb481b26f09a6abe122838",
-    "opening-placement-passage-thick-wall-dark": "d5befd61224ef98cbe340938e6db321faad354ec167cf3244923bbdafdfbfe17",
-    "opening-placement-passage-thick-wall-light": "950ca5d6011682942e1f216bbf93d76aac50b8f5e335993516c2bade3d62797c",
+    "opening-placement-door-thick-wall-dark": "c21c2af812b847e7fd9a3a5b9df832db95266f81eba3d7b48c97d2b32619e7fe",
+    "opening-placement-passage-thick-wall-dark": "90f9a837898169c2d9ff9ec3b44b2a3d247ea034fd84b1753519da7b0c89ebdb",
+    "opening-placement-passage-thick-wall-light": "dd17884027d85f5727450cd08f3fe6daaed290770dbd04fe5ce10c4c2b9d43db",
    "opening-symbol-room-wall-light": "403f1c6e1c59122331fbe99019a3ebd80de4106dc6d33f5f5f33feb748229645",
    "opening-symbol-diagonal-partition-dark": "620102c00e77613cb341c906829bfcc7e9a5430075aa576f563adafa8bdd8f08",
    "opening-symbol-flip-pairs-light": "6d780d1d06909e6e5a7ebb35987b9681d6902d78408e974dfe2fe587521990ce",
    "isometric-opening-symbol-parity-dark": "1e254ed43da00a16d3048e9a2d29db0a43c7790991b1006ecb7205d002bd1f63",
-    "geometry-devices-editor-dark": "209e602446ed79de7f7c5931f96e7d8dc0fdeb311083f01ef73b4df9c5d9e1b6",
-    "geometry-decor-editor-dark": "3a98ded3a0c13306bbb61681dec12879c9baec5e2969a6fb06188693f1de32b7",
-    "tray-wide-selection-en": "74b72708c49a2e3619854eb92fc3ddf1fdfe204e62df8df8a8f1ec70a9c13a90",
-    "tray-wide-tool-ru": "c8cd7a1f8fcc94d3280a958a0b9fac4c974f076c4d4c488baceb509441a386c5",
-    "tray-medium-group-en": "730268ac23f6f7c007b8a21db149b2eabee6a26c8fd054579cf705c92a842596",
-    "tray-medium-selection-ru": "951c3c68516f8d400dd5bb6d5eddfb1fda2b29923281c8c73da342ba55f22408",
-    "tray-narrow-palette-en": "405db03787009eccf3faf7dd93e0b7f557d27d66f02fc5dcb815883bf673a3b7",
-    "tray-narrow-tool-ru": "fce66752a474bc5a330306fad21fc42a0f863576fb73b770cb03423fcbfb6a24",
-    "geometry-diagonal-45-opening-dark": "41b62c9f308b5d8d2e97d4e4d26170c66f40470c11c0ed6df16d6ff7281cb49e",
+    "geometry-devices-editor-dark": "acc779a2a21d5c2a26f40d1a23495cafaffc460c57c1100660fb3cde554303f1",
+    "device-inbox-desktop-en-light": "c04254626f613b11e1b9165abf6bfad4b04a2670acab2887e38062d7d16b4533",
+    "device-inbox-desktop-ru-dark": "2e7e7175ed770fea657828beda68b62d6eb657a4b72222b1977df3d7d692b0d6",
+    "device-inbox-narrow-ru-dark": "5263f518d4a415caedbb7917c79f9acbb03de234feec11e3128c235d2bd5b39f",
+    "geometry-decor-editor-dark": "2a0d4368e49b51fc4fcf5ee72679efb7b7e094fd8b6f47682b0696ec909c423e",
+    "tray-wide-selection-en": "056f3b54d60bba83ef313f9c12fe697ea6a0b3d48db0470735394ee0d3f72c39",
+    "tray-wide-tool-ru": "f8e050c96cb3e78f1ab8d0b8b276b3d154950e795c5b620148b9e395330cffe9",
+    "tray-medium-group-en": "4513abc13f1bc24e4d04f14445069c8ce9785dc3fddcdc99bcee41b5eadb8d53",
+    "tray-medium-selection-ru": "bd97bee66778a65ebb849331724a307d0b089d6cdf5f3b85c6c905c413d5290f",
+    "tray-narrow-palette-en": "10073be9fdf658275f77643505c3523bcddce6a1890deda5b1820958b90613d1",
+    "tray-narrow-tool-ru": "95fa0f072efb595e1f9fe3f3287e7ce346fdee640e90dd70e4f5e5b31049ef29",
+    "geometry-diagonal-45-opening-dark": "ba9462322da34b20fff1ee1f950c516855dd7ac56131e13863f576e2d0ba5177",
    "openings-thick-wall-dark": "539cdb9cb1460cd42c2e51901ea50f496e8214d02633e110e2780c3f177154db",
    "openings-filled-tunnel-dark": "bb2a4343a285e2fd867c6090108589549facf87b1a9471f3ae331d743af6653c",
    "decor-over-opaque-hover-light": "eae79026256367a4cfaa5f99393ec9c66dbf23908c50ccc0f541c139d1baeda0",
@@ -79,26 +96,49 @@
    "lighting-temp-glow-room-override-dark": "66a418829b51379d024c542f8b9a12bd42d72afa81a6bf66561d6498ac4cdb45",
    "lighting-manual-auto-spill-overlap-dark": "0dc780335317d6dd577c8d5539f33223228074e1c95e936e4666f50a8db09739",
    "hover-over-glow-dark": "49136f6073662482ebf49a28f8f22b698d2c20a9cb64b5667d111b9835717968",
-    "hover-nested-room-dark": "6ed270f62e7c1cb5e28e800cae46b4839987467bf6b2933c1af212f9b716f2fe",
-    "large-house-zoom-040-dark": "71847674ec42b0dac55208e9571635bee50fb20485d4e31f797df3cef5b42b37",
-    "large-house-zoom-250-dark": "7acd4cc3b3dfa2124f7c6839e78c9539dcb224af47a321049095cd7ff9e3de68",
-    "large-house-warm-remount-dark": "2532c6e438b219a2bebeab3658b184c3b6d2f5401fd485a660d96f95d32f382a",
-    "device-dialog-desktop-en": "a6637997458ef1def3d30ffaccb6bbc9728dbc4ba2f02400a7334915a8101bbe",
-    "device-dialog-mobile-ru": "c90be98e65c37963fd4443e413848ca68a412c9ee568d648aba76bf9232ee59d",
+    "hover-nested-room-dark": "b546f923fd31d28d2881f074e3a67c5d9d3f9450169f9118502ecafc98c4467d",
+    "junction-t-90-equal15-dark": "fed083eaaaf1588222002c23f7edd741645c76f57c49a3db8cc5ec22af0b6e7d",
+    "junction-t-90-bar50-leg15-dark": "e981f0597a55e9e9e623dd49417f33a0ebac18d18e0e66675a9af1f2224bd152",
+    "junction-t-90-bar70-leg15-dark": "4428fbe75679fab6e57ef61c5d5097d498960e2539bb9e759e1bae9a160ef174",
+    "junction-x-90-equal15-dark": "8fe0e262e5873714f94b9a6a76ed920881bc6b267e69153039f52a7102ec55d5",
+    "junction-x-90-mixed-dark": "deabce4c2b5fa7866a4f56d25404c6a515d47437298bde114442bc80a6339560",
+    "junction-x-45-alternating-dark": "49192516aabc14e84a2da4d1361c1be57d24e5c947b199cdf8b6c55fd7318504",
+    "junction-star5-equal15-dark": "2fd822f73f486173700405208168300d27d4e360b17cb278c7ee7bc1cda3769e",
+    "junction-y-60-equal50-dark": "7a61dbfc36437674c2c2bf5f450a64797e21a124f42c0e45bfb56e3236e0b53e",
+    "junction-acute30-mixed-dark": "9ea64ae5864295a1d93a6819efb6e210de2599030fe650913862d99f40b11a69",
+    "junction-acute15-equal50-dark": "e7e657137e8dcf6294d400f3114497318c055405dbc0d867603514b56c42b907",
+    "junction-splay10-170-dark": "ae27454bb4213237313f1fe9e2591ada48facf20baca5517968f92aebbfb330e",
+    "junction-t-virtual-arm-dark": "d325dc112e2f56c31d4511fd586adaa92b6785fc676c2a60ed5aba69c164fd6e",
+    "junction-x-virtual-through-dark": "cce24ac9d7678959844803c6306e65ab48f723ec0375ee6d3f2dbf1c7def7be1",
+    "junction-column-node-dark": "fed083eaaaf1588222002c23f7edd741645c76f57c49a3db8cc5ec22af0b6e7d",
+    "junction-draft-end-node-dark": "6453bb8463ffdc9a42dbd7acb171c6249fe6d5beec0eae0c789e40f48e65a1f9",
+    "junction-309-step-dark": "f5e0e649ee19197026b87687fd3512b18536883f071348589ec3a7f0ea2a216f",
+    "junction-309-spike-dark": "98e709aa2fa58a01fe280635c6a3799e3a5f4158b2ada12c31c38818f92c4f44",
+    "junction-309-hump-dark": "abae96fd96ed8515d7b1e33b84858bdf08ac28a888898549874baa8c98202e7a",
+    "sharp-apex-legacy-dark": "93a46c66f7263a0325d0c4d50fa0677f3c902647ea5880960b99dc8fa04a01a5",
+    "junction-owner-repro-dark": "f5407d420449ebf897f94fcfcdaaf4630e818c043d3076b090f7d1944df5296b",
+    "large-house-zoom-040-dark": "736af1c340646c4c1cbab3d2270f67a535995e1ea1e2abe49c91d2c396052097",
+    "large-house-zoom-250-dark": "0a74099e265b38f376bb7bfd86d4a57c5d493ac3870478a7d55c48cf99e8f892",
+    "large-house-warm-remount-dark": "1c14dba8cdbc4628984091d395c1ac14faead1d43338e44aa3cb57976e519df6",
+    "device-dialog-desktop-en": "e142521eae1bd40861c1d92eadbcfd6d88aefa689cd5ee9b4c1b6378c8ce712c",
+    "device-dialog-mobile-ru": "7921b7d5e2c082fc4dd5053607a8228c2e63e0e72a401d86153effd54c2c6ca0",
+    "device-dialog-desktop-de": "ac3f657e072006f5c1686d89da61df922991a04f69d2d7994a03d1ba93532681",
+    "german-view-mobile-light": "9496071b11f510f1c851a9c60583a96bfe768c1fd1e12a2b1b9183dee7e453a8",
    "toggle-entity-dialog-desktop-en": "f4924466de5e134c2d1f2456ff0c05f8aa8106f6b06398e87a263e3c536f16ea",
-    "toggle-entity-dialog-mobile-ru": "7d3aecd318c6c0774dd3ce1c21c0fafb1ae2be23cebed6f548fbf8bd11ab2f62",
-    "device-help-popover-light-ru": "add3275d74ced358a184ec9f864c83735f1196e2bff7d75fb3e12160cb85bfaf",
-    "decor-color-popover-mobile-ru": "fcdd138e396654e3517927c27d2062663c61860e8b9903471fa44651a4cbdefd",
-    "decor-color-popover-desktop-en": "46e78386308cd109e25e7b41967421dfa4fbbfb4639710c59e9cc2d88a10fde0",
+    "toggle-entity-dialog-mobile-ru": "77e8fc03817a784888993490cdfba675482b8c56483199c1efa512db8531516b",
+    "device-help-popover-light-ru": "259a50065b7f09d07db656b6cfe79d1de34397665ff8dd8a8e361f6f29a7ea6a",
+    "decor-color-popover-mobile-ru": "51725859afc6a1e2d1b2ae8be270ab584608901623ef7e2d283b6b195644fd16",
+    "decor-color-popover-desktop-en": "98d769f5393afb2bad3fb5143a562da5b8bb9a5c8049f4c707706bbcb4f99f8d",
    "general-color-popover-desktop-en": "008865918113e05847a7ad8ae0fdc068b5326acf1c591d855806b333084978a3",
-    "device-ripple-color-popover-mobile-ru": "3ab12c339106004c76fe3c7741d242269e157c40ddfa29afd8f13b445b0a7023",
-    "space-room-color-popover-desktop-ru": "99fbe17ab8ec383988b944f7db72eeb4e933cab18b0020350ae44befd0b9ae44",
-    "backup-full-preview-desktop-en": "434567d8f97cb09bf217c353bb38e3c4e3aa4c1b837c722a946d75c2c40f34af",
-    "backup-plan-only-export-desktop-en": "8cb234a8d71be11acc6e7bae775f409d3c4b41705072c610f13f40dde06c9c0d",
-    "backup-space-preview-mobile-ru": "698e81b952a26e50b60d2ec85321c43035ff4376a5a348eeed39726804cead78",
-    "optimize-preflight-dialog-dark-en": "d42cab423d2838b7592b661548f7d524d6403db5258419e635733af9ffdda685",
-    "optimize-preflight-dialog-light-ru": "d8262ed5bf93347c4727365aab71897dcb2f24f0c8196e4fcdcbf43b07919b5a",
-    "optimize-orphan-references-dark-en": "6071c61b90243fc10ff178a4ba8bb965515b3c955a184d1039ba257158d90625",
+    "device-ripple-color-popover-mobile-ru": "4f2365818f46fe1e2b401e5835f5d29ea9c41b288d894025d7512db92f579762",
+    "space-room-color-popover-desktop-ru": "946c550232ff3819bb44058eff6c5deadfccf85527c23065137ee02fa457aed9",
+    "backup-full-preview-desktop-en": "6b68188269fdbaddaf4f2ce8fc0d10ea41e050f0c08cdbd9507548871a3786ef",
+    "backup-plan-only-export-desktop-en": "805fb7cd15959a7eee0b17150c4417e335f1b1030a438f7051c2b006a5f7d4f4",
+    "backup-space-preview-mobile-ru": "82cd93cb495ad77b92d635b4a3715601b1ae0e5e2974edcbbd461fe872c75bad",
+    "optimize-preflight-dialog-dark-en": "0473d7f16dd830aaddbec5c33f2b423fde48e2053a1094dbab052e6a2cbad9d4",
+    "optimize-preflight-dialog-light-ru": "a4eb6ef9930652bd7e55fbb725fd1bcc5a0e5b71e8060dbf6f772dd62cec5d36",
+    "optimize-orphan-references-dark-en": "f40417298e126fa804ddafb91d62b728c86a56c5a28b4fad12b732070faa4ad6",
+    "optimize-orphan-references-light-ru": "2d0319f681cfbe472ad5dede05d145a995dedee577d8d816e2fe46a519e019f5",
    "card-editor-invalid-default-floor-light-en": "dbf251ece014cfee252e0dcb2d7c00eda66aa4b5bd125e4c83e248d4319d24b3",
    "card-editor-invalid-default-floor-dark-ru": "422b74bb391b87e383350247ef1bc1f10ca48c8f6fe418f75bde94e62e3b8bc0"
  }
--- a/Show More
+++ b/Show More
				`@@ -0,0 +1 @@`
				function e(e,o){return{id:e,title:o,plan_url:null,view_box:[0,0,1,1],rooms:[],wall_segments:[]}}function o(e="file"){const o="draw"===e;return{source:e,showBorders:o,showNames:o,displayTouched:!1}}function r(e,o){if(e.displayTouched)return{...e,source:o};const r="draw"===o;return{...e,source:o,showBorders:r,showNames:r}}function s(e,o,r){return{...e,[o]:r,displayTouched:!0}}function t(e,o,r){const s=(e?.spaces\|\|[]).find(e=>e?.id===r),t=new Set((s?.rooms\|\|[]).map(e=>String(e?.id\|\|"")).filter(Boolean)),n=[...new Set((e?.markers\|\|[]).filter(e=>!0!==e?.removed&&"string"==typeof e?.id).filter(e=>e.space===r\|\|"string"==typeof e.room_id&&t.has(e.room_id)\|\|o?.[e.id]?.s===r).map(e=>e.id))].sort((e,o)=>e.localeCompare(o));return{markerIds:n,count:n.length}}globalThis.__HOUSEPLAN_BUILD_FINGERPRINT__="0c61742c98d55aec077478fcee7b8acf52e2ac1b70e2ed23532483b845ca884f";export{t as a,e as c,o as i,r as s,s as t};