lumbridge-public/tera

Archived

Fork 0

Commit Graph

Author	SHA1	Message	Date
karti	e41c90fe8d	Real weather, real aircraft, a heightfield off the main thread, and instruments Three things that were built and never connected, connected. The weather was already there. `observe()` has always taken a `WeatherObservation` and `main.ts` has always passed null, so the cloud, precipitation, visibility and marine-layer paths in atmosphere.ts had never run outside a test. The server already shipped NWS, met.no and Open-Meteo, all configured off. What was actually missing was that a single TERA_ORIGIN_LAT/LNG served one metro and lied to the other — so weather and traffic are per-region now, derived from the city's own bounds, and the Bay Area gets its fog while Long Beach gets its own sky. The route takes ?city= or a validated ?lat=&lng= and refuses to become an open geocoding proxy for the planet. The heightfield moved to a Worker. 2.3 s of blocked main thread at boot, and another ~950 ms of point-in-polygon on top of it: the park mask is filled in the worker now, and block placement samples four corners and only runs the exact test on a cell that straddles an edge — 8 buildings differ out of 185,036. createScene is async and takes a Stage as a consequence, and there is a main-thread fallback because "clone it and it works" has no exception clause. Spaces is a chunk you fetch when you reach for the door, not one everybody downloads. Same for the godmode tools. The entry chunk is 722 kB rather than 772; three.js is most of what is left and splitting it is a different job. Godmode is an instrument panel now rather than one slider: the date and the season, not just the hour, so the Meeus moon and the sun's seasonal arc become visible instead of merely correct; a weather override that says on screen when it is lying; a frame-time and draw-call readout; and a pose editor that emits a paste-ready Chapter block, which is the thing that makes adding New York cheap. Two blockers the review caught: - Every city switch leaked 8 GPU textures — one of them a 2048x2048 shadow map — and ~10.5 shader programs, and deleteTexture had never been called once in the app's lifetime. The renderer was being built per scene; it belongs to the canvas, for the life of the page. - An upstream fetch that threw rather than returning null skipped the cache stamp, so the TTL — the only rate limit on outbound calls — collapsed to one upstream request per inbound request, and the caller got a 500. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>	2026-08-06 03:25:31 -07:00
karti	5bc7258753	A plan view in the corner, a night you can actually see, and three kinds of visitor The right half of the screen was empty sky. It holds the board now, drawn flat, with the footprint of the camera's own frustum on it — the one part of a minimap that earns its place, because it answers "where am I looking from" without leaving the shot. Click it, drag it, scroll it. It is a 2D canvas rather than a second WebGL context, cached per city and redrawn only when something moved. Night was black. Not dark — black: at 3 a.m. the coastline, the hills and the bay were one shape, and the frame read as a failed render rather than as darkness. The sky already had a floor for exactly this reason and nothing did the equivalent for the ground, so the ground has one now. The moon still has to be worth computing, so the gap between a moonlit night and a moonless one is preserved rather than filled in. Three tiers, resolved once in the new src/access.ts: anonymous, signed in, admin. Anonymous gets the map and a public office — the shell, the furniture, the named viewpoints, nobody home — built without the private objects rather than with them hidden, because scene.traverse makes hiding a leak with a bow on it. The time scrubber and the debug readouts are admin only, and admin is granted by TERA_ADMIN_SUBJECTS on the server and inferred nowhere else. An unreachable API means member, never god: the promise is "clone it and it works", not "clone it and you are an administrator of a deployment you did not configure". Three things this run found and fixed rather than shipped: - entryUrl came off the wire and went straight into an href with no scheme check, and a CSP of script-src 'self' 'unsafe-inline' does not stop a javascript: URL from navigating. One rejection point in access.ts now. - A 5xx from /health was the same null as "no API at all" and therefore the opposite conclusion. Eight seconds of tera-api restarting would have told every anonymous visitor they were a member. A 5xx is an answer; it fails closed. - decodeURIComponent in cookieToken was the one path in auth/index.ts that threw rather than returning ANONYMOUS, so one malformed cookie header from an unauthenticated caller turned /api/v1/session into a 500. Also: keyboard shortcuts, focus rings, a boot state instead of a blank 2.3 seconds, a collapsible panel under 900px, and no horizontal overflow at 375, 768, 1440 or 2560. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>	2026-08-05 22:53:30 -07:00
Karti Tripathi	d464459838	Spaces: the inside of the world, and a sun that is actually where it should be Ten agents wrote this in parallel against CONTRACT.md, which exists because the five design agents before them collided on fifteen blocking points — four files specified twice with incompatible contents, three separate backends for one box, and `Environment` exported twice meaning different things. What landed: a Stage owning only the renderer and the loop, with the city and an office as two scenes over it. They cannot share one — San Francisco is ~94 m per scene unit with 3.6x vertical exaggeration and an office is 1 unit = 1 m — and the city is paused rather than disposed on the way in, because rebuilding its 336,864-point heightfield costs about a second on the way back out. Offices are data. `src/offices/lumbridge-hq.ts` is fifteen rooms and seventy-six seats, and it is the file a self-hoster copies. Walls are a segment list with 1-D openings, so doors and windows are holes punched in a wall rather than placed objects, and the pass that splits a wall around its openings hands the walk-mode collider its segments for free. The sun is real. `solar.ts` is a NOAA/Meeus implementation with no imports at all — not even three.js — so time of day keeps working on a laptop in a field. Verified against known values: 75.45 degrees at the June solstice in SF, 28.79 at December, sunset at 03:15Z. The first screenshot after wiring it was a black rectangle, which turned out to be correct: it was midnight in San Francisco. Presence binds to a seat id and never to a coordinate. The pack knows where `eng-04` is; who is sitting in it is private data behind an API. Same shape as the marker rule, one level in. Two corrections to ARCHITECTURE.md are in here. Containment does not discharge ODbL — publishing OSM-derived coordinates is Public Use of a Derivative Database wherever the rows live, so the rule is about the geocoder (US Census, public domain) and not the storage. And a person at a desk is not a Marker; markers are geographic. One contract gap surfaced only in a screenshot: two agents read `height` on a viewpoint differently, so the establishing shot aimed at empty air fourteen metres above the roof. It now means what the same field means for a city. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>	2026-08-05 00:11:01 -07:00

Author

SHA1

Message

Date

karti

e41c90fe8d

Real weather, real aircraft, a heightfield off the main thread, and instruments

Three things that were built and never connected, connected.

**The weather was already there.** `observe()` has always taken a
`WeatherObservation` and `main.ts` has always passed null, so the cloud,
precipitation, visibility and marine-layer paths in atmosphere.ts had never run
outside a test. The server already shipped NWS, met.no and Open-Meteo, all
configured off. What was actually missing was that a single TERA_ORIGIN_LAT/LNG
served one metro and lied to the other — so weather and traffic are per-region
now, derived from the city's own bounds, and the Bay Area gets its fog while
Long Beach gets its own sky. The route takes ?city= or a validated ?lat=&lng=
and refuses to become an open geocoding proxy for the planet.

**The heightfield moved to a Worker.** 2.3 s of blocked main thread at boot, and
another ~950 ms of point-in-polygon on top of it: the park mask is filled in the
worker now, and block placement samples four corners and only runs the exact
test on a cell that straddles an edge — 8 buildings differ out of 185,036.
createScene is async and takes a Stage as a consequence, and there is a
main-thread fallback because "clone it and it works" has no exception clause.

**Spaces is a chunk you fetch when you reach for the door**, not one everybody
downloads. Same for the godmode tools. The entry chunk is 722 kB rather than
772; three.js is most of what is left and splitting it is a different job.

**Godmode is an instrument panel now** rather than one slider: the date and the
season, not just the hour, so the Meeus moon and the sun's seasonal arc become
visible instead of merely correct; a weather override that says on screen when
it is lying; a frame-time and draw-call readout; and a pose editor that emits a
paste-ready Chapter block, which is the thing that makes adding New York cheap.

Two blockers the review caught:

  - Every city switch leaked 8 GPU textures — one of them a 2048x2048 shadow map
    — and ~10.5 shader programs, and deleteTexture had never been called once in
    the app's lifetime. The renderer was being built per scene; it belongs to the
    canvas, for the life of the page.
  - An upstream fetch that threw rather than returning null skipped the cache
    stamp, so the TTL — the only rate limit on outbound calls — collapsed to one
    upstream request per inbound request, and the caller got a 500.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

2026-08-06 03:25:31 -07:00

karti

5bc7258753

A plan view in the corner, a night you can actually see, and three kinds of visitor

The right half of the screen was empty sky. It holds the board now, drawn flat,
with the footprint of the camera's own frustum on it — the one part of a minimap
that earns its place, because it answers "where am I looking from" without
leaving the shot. Click it, drag it, scroll it. It is a 2D canvas rather than a
second WebGL context, cached per city and redrawn only when something moved.

Night was black. Not dark — black: at 3 a.m. the coastline, the hills and the
bay were one shape, and the frame read as a failed render rather than as
darkness. The sky already had a floor for exactly this reason and nothing did
the equivalent for the ground, so the ground has one now. The moon still has to
be worth computing, so the gap between a moonlit night and a moonless one is
preserved rather than filled in.

Three tiers, resolved once in the new src/access.ts: anonymous, signed in,
admin. Anonymous gets the map and a public office — the shell, the furniture,
the named viewpoints, nobody home — built without the private objects rather
than with them hidden, because scene.traverse makes hiding a leak with a bow on
it. The time scrubber and the debug readouts are admin only, and admin is
granted by TERA_ADMIN_SUBJECTS on the server and inferred nowhere else. An
unreachable API means member, never god: the promise is "clone it and it works",
not "clone it and you are an administrator of a deployment you did not
configure".

Three things this run found and fixed rather than shipped:

  - entryUrl came off the wire and went straight into an href with no scheme
    check, and a CSP of script-src 'self' 'unsafe-inline' does not stop a
    javascript: URL from navigating. One rejection point in access.ts now.
  - A 5xx from /health was the same null as "no API at all" and therefore the
    opposite conclusion. Eight seconds of tera-api restarting would have told
    every anonymous visitor they were a member. A 5xx is an answer; it fails
    closed.
  - decodeURIComponent in cookieToken was the one path in auth/index.ts that
    threw rather than returning ANONYMOUS, so one malformed cookie header from
    an unauthenticated caller turned /api/v1/session into a 500.

Also: keyboard shortcuts, focus rings, a boot state instead of a blank 2.3
seconds, a collapsible panel under 900px, and no horizontal overflow at 375,
768, 1440 or 2560.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

2026-08-05 22:53:30 -07:00

Karti Tripathi

d464459838

Spaces: the inside of the world, and a sun that is actually where it should be

Ten agents wrote this in parallel against CONTRACT.md, which exists because the
five design agents before them collided on fifteen blocking points — four files
specified twice with incompatible contents, three separate backends for one box,
and `Environment` exported twice meaning different things.

What landed: a Stage owning only the renderer and the loop, with the city and an
office as two scenes over it. They cannot share one — San Francisco is ~94 m per
scene unit with 3.6x vertical exaggeration and an office is 1 unit = 1 m — and
the city is paused rather than disposed on the way in, because rebuilding its
336,864-point heightfield costs about a second on the way back out.

Offices are data. `src/offices/lumbridge-hq.ts` is fifteen rooms and seventy-six
seats, and it is the file a self-hoster copies. Walls are a segment list with
1-D openings, so doors and windows are holes punched in a wall rather than
placed objects, and the pass that splits a wall around its openings hands the
walk-mode collider its segments for free.

The sun is real. `solar.ts` is a NOAA/Meeus implementation with no imports at
all — not even three.js — so time of day keeps working on a laptop in a field.
Verified against known values: 75.45 degrees at the June solstice in SF, 28.79
at December, sunset at 03:15Z. The first screenshot after wiring it was a black
rectangle, which turned out to be correct: it was midnight in San Francisco.

Presence binds to a seat id and never to a coordinate. The pack knows where
`eng-04` is; who is sitting in it is private data behind an API. Same shape as
the marker rule, one level in.

Two corrections to ARCHITECTURE.md are in here. Containment does not discharge
ODbL — publishing OSM-derived coordinates is Public Use of a Derivative Database
wherever the rows live, so the rule is about the geocoder (US Census, public
domain) and not the storage. And a person at a desk is not a Marker; markers are
geographic.

One contract gap surfaced only in a screenshot: two agents read `height` on a
viewpoint differently, so the establishing shot aimed at empty air fourteen
metres above the roof. It now means what the same field means for a city.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>

2026-08-05 00:11:01 -07:00

3 Commits