Add xatlas native library and improve tool robustness - #191

Open

SashaRX wants to merge 76 commits into

mainfrom

claude/security-pr-analysis-fmpzf0

Commits on Aug 6, 2026

fix(ci): replace inline python interpolation in version workflows (#123)

SashaRX
and
claude
committed
f70c2e3
fix(ci): stop auto-committing built native binaries (#125)

SashaRX
and
claude
committed
8aac825
fix(tools): harden gen.bat argument forwarding (#135)

SashaRX
and
claude
committed
ab237f5
fix(docs): shell-escape skills-overhaul parameter file (#136)

SashaRX
and
claude
committed
9d2f97f
fix(packaging): mirror .gitignore exclusions into .npmignore (#164)

SashaRX
and
claude
committed
254e131
fix(native): vendor xatlas instead of fetching a moving branch (#127)
claude
committed
7e05c11
fix(repack): prevent atlas oversample size overflow (#129)

SashaRX
and
claude
committed
ed32493
fix(benchmark): escape CSV formula prefixes in sweep summaries (#157)

SashaRX
and
claude
committed
a6667c5
fix(fbx): escape CSV formula prefixes in metrics export (#159)

SashaRX
and
claude
committed
0e50071
fix(benchmark): escape CSV formula prefixes in benchmark records (#161)

SashaRX
and
claude
committed
e157498
fix(tools): escape model name in gallery nav href (#158)

SashaRX
and
claude
committed
d183260
refactor(editor): share one CsvUtil.Escape across the CSV writers (#157, #159, #161)
claude
committed
8892f9a
fix(collision): validate sidecar collision entries before mesh rebuild (#151)

SashaRX
and
claude
committed
8fc1373
fix(repack): sanitize sidecar-supplied xatlas settings and save path (#189)

SashaRX
and
claude
committed
3bfda6e
fix(replay): preserve optimized vertex colors during sidecar replay (#182)

SashaRX
and
claude
committed
d333790
fix(replay): validate sidecar UV replay channels (#139)

SashaRX
and
claude
committed
b8e7c8b
fix(replay): validate sidecar submesh triangle counts (#126)

SashaRX
and
claude
committed
e6ef72b
fix(replay): abort incomplete stale remap rebuilds (#188)

SashaRX
and
claude
committed
95eef91
fix(replay): bound sidecar vertex remapping work (#185)

SashaRX
and
claude
committed
dcfeddd
fix(arap): reject ARAP UVs outside float range (#134)

SashaRX
and
claude
committed
5ade5c8
fix(benchmark): bound benchmark UV PNG generation (#137)

SashaRX
and
claude
committed
b80baff
fix(transfer): drop partial UV2 output on cancellation (#156)

SashaRX
and
claude
committed
b4e9f78
fix(repack): prevent concurrent xatlas native sessions (#128)

SashaRX
and
claude
committed
c021b9e
fix(benchmark): validate sweep parameters before running (#138)

SashaRX
and
claude
committed
11474a5
fix(repack): cache mesh area preview instead of scanning per repaint (#131)
claude
committed
0b1d245
fix(preview): guard shell color hash against int.MinValue (#168)

SashaRX
and
claude
committed
49e1c87
fix(transfer): bound grouped transfer overlap scan (#186)

SashaRX
and
claude
committed
7dbedc9
fix(partition): bound spatial overlap detection work (#190)

SashaRX
and
claude
committed
79decd4
fix(scene): bound SceneView hover raycasts (#187)

SashaRX
and
claude
committed
390f7cb
fix(lod): bound LOD indices parsed from object names (#142)
claude
committed
494b049
fix(lod): normalize LOD0 transition before generating levels (#179)
claude
committed
9d11d56
fix(transfer): isolate cross-LOD hints per mesh group (#181)

SashaRX
and
claude
committed
d57c3c6
fix(collision): bound V-HACD recursion depth (#122)

SashaRX
and
claude
committed
dab2c98
fix(collision): validate V-HACD triangle indices (#152)

SashaRX
and
claude
committed
e24de00
fix(fbx): avoid overflow in FBX backup path hashes (#162)

SashaRX
and
claude
committed
504f84d
fix(transfer): expose Apply UV2 after source-only repack (#170)

SashaRX
and
claude
committed
fbd797d
fix(repack): keep post-pack density correction inside packed charts (#171)

SashaRX
and
claude
committed
13d50b6
fix(repack): keep UV2 clamp toggle independently editable (#172)

SashaRX
and
claude
committed
fe5c210
fix(repack): forward RepackUv rotate flag to xatlas (#173)

SashaRX
and
claude
committed
135f7c4
fix(ao): defer GPU AO cleanup until queued work completes (#140)

SashaRX
and
claude
committed
0e7dd50
fix(ao): guard AO blur against incomplete mesh attributes (#163)

SashaRX
and
claude
committed
8b5b283
fix(ao): bound Vertex AO seam matching work (#143)
claude
committed
ddbadcc
fix(ao): bound 3D AO blur work on dense meshes (#144)
claude
committed
c1eeb19
fix(ao): make atomic AO accumulation NaN-safe (#147)

SashaRX
and
claude
committed
42feec8
fix(ao): bound face-area AO correction on degenerate meshes (#148)
claude
committed
454d491
fix(ao): clear stale AO results before loading mesh data (#177)

SashaRX
and
claude
committed
4a6ba2e
fix(ao): prevent duplicate Vertex AO preview backups (#145)

SashaRX
and
claude
committed
362bd23
fix(ao): guard vertex AO bake workload (#149)
claude
committed
a2e2be8
fix(canvas): render Inverted triangles in validation overlay (#174)
claude
committed
3d898b1
fix(export): avoid cumulative transform baking on shared FBX meshes (#175)
claude
committed
40f0036
fix(hub): restore preview meshes before undo/redo refresh (#176)
claude
committed
d0a6ba9
fix(collision): actually strip extra vertex channels (#178)
claude
committed
543795e
fix(repack): normalize UV0 shell winding at the repack boundary (#180)
claude
committed
24bb542
fix(transfer): reject incomplete source UV channels (#183)
claude
committed
e0d85e4
fix(meshopt): guard buffer sizes before the unsafe native call (#184)
claude
committed
e1218ad
docs(changelog): record consolidated security and bugfix sweep
claude
committed
3e82c9d
fix(export): destroy temporary mesh clones after FBX export (#175 follow-up)
claude
committed
78a6e7a
fix(ci): harden checkout credentials and package.json validation (PR #191 review)
claude
committed
2d84f15
fix(npm): exclude agent and workspace config from the published package (PR #191 review)
claude
committed
a3262de
fix(csv): flatten line breaks so one CSV record stays one physical line (PR #191 review)
claude
committed
1424e67
fix(partition): dedupe vertex-pair keys of degenerate triangles (PR #191 review)
claude
committed
8bd14b2
fix(lod): share LOD index parsing and apply the level cap where it bites (PR #191 review)
claude
committed
d1c41bf
fix(postprocess): keep sidecar colors authoritative and abort partial remaps (PR #191 review)
claude
committed
cdaeae1
fix(png): reject index lists that are not whole triangles (PR #191 review)
claude
committed
d964ed2
fix(ao): bound seam scanning by candidates examined and drop cancelled correction (PR #191 review)
claude
committed
902566b
fix(repack): report session contention as a result error, free the temp mesh (PR #191 review)
claude
committed
39565fc
fix(benchmark): decouple atlas utilization from the PNG snapshot budget (PR #191 review)
claude
committed
62ac795
fix(transfer): gate Apply UV2 on a repack that actually produced meshes (PR #191 review)
claude
committed
ed73bcc
fix(native): validate the remaining collision ABI parameters (PR #191 review)
claude
committed
043b0d2
fix(native): record the vendored xatlas upstream snapshot (PR #191 review)
claude
committed
6f98c59
fix(tools): validate the values gen.bat forwards to python (PR #191 review)
claude
committed
388dcbd
fix(preview): share the non-negative colour key helper (PR #191 review)
claude
committed
5eb9e3a
fix(native): rename xatlas VERSION file shadowing the C++ <version> header
claude
committed
2eb1a5e
fix(export): destroy remaining temporary export meshes (leak cleanup)
claude
committed
bf9013c
fix(export): destroy sidecar-built collision meshes after FBX export (leak cleanup)
claude
committed
b579d2f
fix(transfer): create analysis material folders only when debug is enabled
claude
committed
9625a69