[AlexZ005]

Roadmap 101 F2 + F7: objects and materials are validated on receive and on load.

Do not merge before 17 Nov (roadmap 101 order).

What changes

• src/lib/sceneSchema.js (new, pure): the allowlist for three.js object JSON, materials payloads and glTF elements, built on the v1.65.1 load check (loadGuardCore.js).
  • Object, material and geometry types come from fixed lists. An unknown type becomes Object3D, the standard fallback material or an empty BufferGeometry.
  • Each type has a table of the fields three writes for it, each with a value rule. Unknown or invalid fields are stripped.
  • Images are embedded only and size-capped.
  • userData and glTF extras must be plain JSON under a size cap. The keys core and the shipped modules write keep a per-key kind.
  • There are caps on depth, list lengths, numbers, vertices and nodes.
  • Every change is a {path, reason} row, counted in the wire diagnostics with one toast per session.
• src/lib/loadGuard.js: checkObjectJson, checkMaterialSet and checkGltf run the schema. parseCheckedMaterials is now the one parse for the materials message.
• wireValidate: the object row (ObjectLoader form) and the objectParameters materials row call the schema's non-mutating verdicts.
• scripts/check-loaders.cjs (npm run check:loaders, plus a CI step): fails on ObjectLoader(, .parseMaterials( or MaterialLoader( anywhere in src/ outside loadGuard.js.
• F7: importModuleText is removed (exported, no callers).
• OPEN-CORE.md: new section "6. Object schema". It is a contract, not a hook: the inventory shows the modules need no registration call.

Evidence

• Inventory: scripts/schema-inventory.cjs, output kept as tests/fixtures/schema-1.65/inventory.json. It covers 55 files and 2,348 elements: 9 object types, 10 material types, 17 geometry types and 37 userData keys.
• Fixtures: tests/e2e/schema-capture.test.cjs (a generator, excluded from the battery) wrote capture.tpscene, prefab.json and wire.json on v1.65.0. They cover every Add-menu object, 10 material types, maps, map slots, tiling, params, a multi-slot material and the handshake sync.
• Unit tests (tests/unit/sceneSchema.test.js, checkLoaders.test.js):
  • Real content gives 0 drops and byte-identical JSON. That covers the templates, the fixtures, the scenes repo, the 37 captured glTF messages and every shipped .glb.
  • An out-of-schema fixture set is cleaned and counted.
  • Full suite: 434 files / 4,968 tests pass.
• e2e:
  • schema-ab (A/B driver against a v1.65.1 snapshot): 45 scenes (templates, the capture, the scenes repo). The load check changed nothing on any of them. 38 scenes render the same on two base runs. On 32 of those the lane frame is identical to the base (0.000 %), and the worst of the rest is 0.156 %. The football frame differs only in toasts. The other 7 scenes (fluid, water, jelly, castle, forest, film set, game plot) differ between two base runs too, so frames cannot judge them.
  • schema-two-peers (new; battery: optional): green on the lane and on v1.65.1. The connected peer matches exactly. The late joiner matches too, apart from gaps the glTF handshake already had on v1.65.1, with identical counts on both builds: non-PBR materials arrive as MeshStandardMaterial, meshes with a Normal or Depth material are absent, and spaces in names become _. These are a follow-up, not changed here.
  • Touching suites and module flights: wire-hardening, object-sync, load-check, tpscene, sessions, session-zip, late-joiner-floor, dialback-sync, material-types, material-sharing, uv-slots and duplicate-parity are green. placeholders-peers has the same 3 reds on v1.65.1. Module flights (run with the modules helpers' connect step updated for 1.65's Join… button, local copy only): dungeon, dungeon-realms, door-keypad, module-collectible and tutorial-room are green. football, fx-car-blocks, fps-player, module-health and module-waves fail the same checks on v1.65.1. untangle is flaky on this machine: a clean snapshot of this branch passed 2/2, and one without the schema failed 1/2.
• Checks: check-ratchet 274/37 (the baseline), check:tokens clean, npm run build rc=0, check:loaders clean.

🤖 Generated with Claude Code